IOCReport

loading gif

Files

File Path
Type
Category
Malicious
methodsnetsh.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\1942f959aae25ff5e177f0a0e912022f_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\edb.log
data
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage engine DataBase, version 0x620, checksum 0x99fb9f13, page size 16384, DirtyShutdown, Windows version 10.0
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
data
modified
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\methodsnetsh.exe
'C:\Users\user\Desktop\methodsnetsh.exe'
malicious
C:\Users\user\Desktop\methodsnetsh.exe
--4a9ea48a
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\SysWOW64\sensorias.exe
C:\Windows\SysWOW64\sensorias.exe
malicious
C:\Windows\SysWOW64\sensorias.exe
--606904f7
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k NetworkService -p
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\SgrmBroker.exe
C:\Windows\system32\SgrmBroker.exe
clean
C:\Program Files\Windows Defender\MpCmdRun.exe
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
There are 5 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
unknown
clean
https://dev.ditu.live.com/REST/v1/Routes/
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Driving
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
unknown
clean
http://91.250.96.22/LhqjdNLOiM5Uy7n
unknown
clean
https://t0.tiles.ditu.live.com/tiles/gen
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Walking
unknown
clean
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
unknown
clean
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
unknown
clean
https://%s.xboxlive.com
unknown
clean
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://dev.virtualearth.net/REST/v1/Locations
unknown
clean
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://dev.virtualearth.net/mapcontrol/logging.ashx
unknown
clean
https://dev.ditu.live.com/mapcontrol/logging.ashx
unknown
clean
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
unknown
clean
https://dynamic.t
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Transit
unknown
clean
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
unknown
clean
https://appexmapsappupdate.blob.core.windows.net
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
unknown
clean
https://fs.microsoft.cH
unknown
clean
https://activity.windows.com
unknown
clean
http://www.bingmapsportal.com
unknown
clean
https://dev.ditu.live.com/REST/v1/Locations
unknown
clean
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
unknown
clean
https://%s.dnet.xboxlive.com
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
unknown
clean
There are 26 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
91.250.96.22
unknown
Germany
clean
100.6.23.40
unknown
United States
clean
190.114.244.182
unknown
Venezuela
clean
200.71.200.4
unknown
Chile
clean
127.0.0.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Windows\System32\svchost.exe
cval
malicious
C:\Windows\System32\svchost.exe
cval
malicious
C:\Windows\System32\svchost.exe
PerfMMFileName
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-100
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-101
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\dnsapi.dll,-103
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\NgcRecovery.dll,-100
clean
C:\Windows\System32\svchost.exe
MonthID
clean
There are 2 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
620000
unkown
page execute and read and write
malicious
7D1000
unkown
page execute read
malicious
AB0000
unkown
page execute and read and write
malicious
6F0000
unkown
page execute and read and write
malicious
F61000
unkown
page execute read
malicious
EC1000
unkown
page execute read
malicious
EA0000
unkown
page execute and read and write
malicious
9D1000
unkown
page execute read
malicious
1A9A2070000
unkown
page read and write
clean
7FF54A360000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
21FEA68C000
unkown
page read and write
clean
667000
unkown
page read and write
clean
7FF56228C000
unkown
page readonly
clean
7FF57CD8C000
unkown
page readonly
clean
2CE5DFF000
unkown
page read and write
clean
7FF5C8706000
unkown
page readonly
clean
1FDA3B02000
unkown
page read and write
clean
7FF5B98A4000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF5990DF000
unkown
page readonly
clean
7FF59929F000
unkown
page readonly
clean
3DD84FF000
unkown
page read and write
clean
28D46802000
unkown
page read and write
clean
1030000
heap private
page read and write
clean
351000
unkown
page read and write
clean
7FF56229C000
unkown
page readonly
clean
21FEA600000
unkown
page read and write
clean
1DEADC44000
unkown
page read and write
clean
20F478BA000
unkown
page read and write
clean
460000
unkown
page readonly
clean
7FF5C86ED000
unkown
page readonly
clean
1A9A2FE0000
unkown
page read and write
clean
7FF546516000
unkown
page readonly
clean
7FF546576000
unkown
page readonly
clean
1DEADC5C000
unkown
page read and write
clean
43F000
unkown image
page read and write
clean
F6F000
unkown
page readonly
clean
21FEA613000
unkown
page read and write
clean
7FF54A268000
unkown
page readonly
clean
1A9A7885000
unkown
page read and write
clean
7FF546417000
unkown
page readonly
clean
C70000
heap private
page read and write
clean
9C000
unkown
page read and write
clean
3BCB0FE000
unkown
page read and write
clean
7FF5B94A1000
unkown
page readonly
clean
9D0000
unkown
page read and write
clean
16CE000
unkown
page read and write
clean
7FF54A43E000
unkown
page readonly
clean
1DEADC57000
unkown
page read and write
clean
9A7267E000
unkown
page read and write
clean
219B1E6D000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
219B1DA0000
unkown
page readonly
clean
7FF5C850F000
unkown
page readonly
clean
28D4608C000
unkown
page read and write
clean
ECF000
unkown
page readonly
clean
3BCB17F000
unkown
page read and write
clean
7FF5C7FD9000
unkown
page readonly
clean
687000
unkown
page read and write
clean
1A9A208C000
unkown
page read and write
clean
4D0000
unkown
page readonly
clean
1A62B7F000
unkown
page read and write
clean
647000
unkown
page read and write
clean
3BCB37F000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
631000
unkown
page read and write
clean
1A9A2055000
unkown
page read and write
clean
AD0000
heap private
page read and write
clean
1A9A2B01000
unkown
page read and write
clean
219B1D30000
heap private
page read and write
clean
401000
unkown image
page execute read
clean
7FF562296000
unkown
page readonly
clean
F76000
unkown
page readonly
clean
1A62E7E000
unkown
page read and write
clean
7DF000
unkown
page readonly
clean
2C0000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
20F477E0000
unkown
page readonly
clean
1A9A74B0000
unkown
page read and write
clean
1A9A2959000
unkown
page read and write
clean
7FF5463CB000
unkown
page readonly
clean
1FDA39A0000
unkown
page readonly
clean
7FF561E20000
unkown
page readonly
clean
7FF5992CC000
unkown
page readonly
clean
1A9A2200000
unkown
page readonly
clean
7FF56223A000
unkown
page readonly
clean
7FF4F14FA000
unkown
page readonly
clean
3BCA6DB000
unkown
page read and write
clean
7FF5AA77C000
unkown
page readonly
clean
3DD847F000
unkown
page read and write
clean
1A9A7690000
unkown
page write copy
clean
7FF5C8698000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
1A9A3420000
unkown
page read and write
clean
56E000
unkown
page read and write
clean
7FF5AA735000
unkown
page readonly
clean
28D46D40000
unkown
page readonly
clean
2720000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
BD0000
unkown
page readonly
clean
21FEA64B000
unkown
page read and write
clean
28D46089000
unkown
page read and write
clean
22060800000
unkown
page read and write
clean
720000
heap default
page read and write
clean
21FEA702000
unkown
page read and write
clean
1A9A209D000
unkown
page read and write
clean
219B1DE0000
unkown
page readonly
clean
1A9A1F80000
unkown
page read and write
clean
7FF562151000
unkown
page readonly
clean
1A62F7E000
unkown
page read and write
clean
1DEADC42000
unkown
page read and write
clean
1A9A7862000
unkown
page read and write
clean
219B1E2A000
unkown
page read and write
clean
7FF5992E5000
unkown
page readonly
clean
1F0000
unkown
page read and write
clean
199000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
DD0000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
3BCAF79000
unkown
page read and write
clean
545000
heap default
page read and write
clean
7FF5464F8000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
7FF546586000
unkown
page readonly
clean
1DEADC00000
unkown
page read and write
clean
7FF54623E000
unkown
page readonly
clean
7FF5C8437000
unkown
page readonly
clean
7FF5464DA000
unkown
page readonly
clean
95D29FE000
unkown
page read and write
clean
1A9A27D0000
unkown
page readonly
clean
7FF54616E000
unkown
page readonly
clean
158E000
unkown
page read and write
clean
7FF5622B0000
unkown
page readonly
clean
1DEADAC0000
heap default
page read and write
clean
442000
unkown image
page readonly
clean
3BCB1FF000
unkown
page read and write
clean
7FF5B9890000
unkown
page readonly
clean
9B0000
heap private
page read and write
clean
7FF54A573000
unkown
page readonly
clean
7FF56209F000
unkown
page readonly
clean
22060873000
unkown
page read and write
clean
7FF599262000
unkown
page readonly
clean
7FF5C8445000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
7FF4F1570000
unkown
page readonly
clean
7FF54A2AF000
unkown
page readonly
clean
7FF54A22E000
unkown
page readonly
clean
ED6000
unkown
page readonly
clean
F40000
unkown
page read and write
clean
92648FE000
unkown
page read and write
clean
7FF562311000
unkown
page readonly
clean
1150000
unkown
page readonly
clean
7FF5B9C65000
unkown
page readonly
clean
7FF56225F000
unkown
page readonly
clean
7FF57CDFE000
unkown
page readonly
clean
1A9A30C0000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
7FF54A3CC000
unkown
page readonly
clean
1A9A2815000
unkown
page read and write
clean
68F000
unkown
page read and write
clean
1A6297F000
unkown
page read and write
clean
7FF54A567000
unkown
page readonly
clean
DD8DD7C000
unkown
page read and write
clean
1FDA38C0000
heap default
page read and write
clean
DD8E47D000
unkown
page read and write
clean
1A9A7A10000
unkown
page readonly
clean
1FDA3A24000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1A9A76E0000
unkown
page read and write
clean
19D000
unkown
page read and write
clean
7FF5463A8000
unkown
page readonly
clean
219B2602000
unkown
page read and write
clean
219B1E3F000
unkown
page read and write
clean
64B000
unkown
page read and write
clean
A0F000
unkown
page read and write
clean
7FF5620EA000
unkown
page readonly
clean
7FF5992D6000
unkown
page readonly
clean
7FF5461F1000
unkown
page readonly
clean
1A9A2041000
unkown
page read and write
clean
29E0000
unkown
page readonly
clean
442000
unkown image
page readonly
clean
7FF5465A0000
unkown
page readonly
clean
22060770000
unkown
page readonly
clean
1FDA38D0000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
1A9A75F0000
unkown
page read and write
clean
7FF5B9C3D000
unkown
page readonly
clean
7FF5C86CF000
unkown
page readonly
clean
647000
heap default
page read and write
clean
95D2BFF000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
7FF5C8682000
unkown
page readonly
clean
920000
unkown
page read and write
clean
840000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
2CBE000
unkown
page read and write
clean
A3E000
unkown
page read and write
clean
2CE64FF000
unkown
page read and write
clean
DD8E6FD000
unkown
page read and write
clean
28E0000
unkown
page readonly
clean
7FF54A451000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
22060760000
unkown
page readonly
clean
1DEADC59000
unkown
page read and write
clean
7FF546571000
unkown
page readonly
clean
7FF54A590000
unkown
page readonly
clean
A00000
unkown
page read and write
clean
1A9A7680000
unkown
page read and write
clean
7FF54A3D8000
unkown
page readonly
clean
7FF5991CC000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
28D4607C000
unkown
page read and write
clean
219B1E5B000
unkown
page read and write
clean
27D0000
unkown
page read and write
clean
20F47F00000
unkown
page read and write
clean
91F000
unkown
page read and write
clean
28D46108000
unkown
page read and write
clean
22061200000
unkown
page readonly
clean
1A9A2102000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
7FF4F1411000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
9264B7B000
unkown
page read and write
clean
7FF4F1577000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
7FF5B9514000
unkown
page readonly
clean
7FF59912A000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
34C000
unkown
page read and write
clean
441000
unkown image
page read and write
clean
7FF59916D000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
EA5D1FF000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1A9A209F000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
28D4606F000
unkown
page read and write
clean
2940000
unkown
page readonly
clean
2CE5EFF000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF54A2E7000
unkown
page readonly
clean
7FF54636E000
unkown
page readonly
clean
20F475C0000
heap private
page read and write
clean
7FF4F13AA000
unkown
page readonly
clean
2206084E000
unkown
page read and write
clean
1FDA3860000
heap private
page read and write
clean
20F4782A000
unkown
page read and write
clean
84A000
heap default
page read and write
clean
2C6000
unkown
page read and write
clean
1A9A2F00000
unkown
page read and write
clean
442000
unkown image
page readonly
clean
21FEA629000
unkown
page read and write
clean
1A9A76D0000
unkown
page read and write
clean
22060856000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
A9C000
unkown
page read and write
clean
219B1DB0000
unkown
page readonly
clean
22060849000
unkown
page read and write
clean
21FEA647000
unkown
page read and write
clean
640000
heap default
page read and write
clean
782000
heap default
page read and write
clean
7FF4F0E0F000
unkown
page readonly
clean
7FF5622A5000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF4F10D0000
unkown
page readonly
clean
9264BFF000
unkown
page read and write
clean
7FF54A458000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
12E1000
unkown
page read and write
clean
1DEADC73000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
530000
unkown
page readonly
clean
7FF5B9C4C000
unkown
page readonly
clean
170F40A0000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
F80000
heap private
page read and write
clean
219B2460000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
7FF54650D000
unkown
page readonly
clean
7FF54A469000
unkown
page readonly
clean
2DFE000
unkown
page read and write
clean
21FEA550000
unkown
page readonly
clean
28D46049000
unkown
page read and write
clean
1A9A7710000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
2A8000
unkown
page read and write
clean
7FF599359000
unkown
page readonly
clean
1FDA3A02000
unkown
page read and write
clean
7FF5B9897000
unkown
page readonly
clean
21FEA68F000
unkown
page read and write
clean
7FF5C7FD3000
unkown
page readonly
clean
2250000
unkown
page readonly
clean
13E0000
unkown
page read and write
clean
EA5C96F000
unkown
page read and write
clean
1DEADC32000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
21FEA713000
unkown
page read and write
clean
7FF5AA7F1000
unkown
page readonly
clean
7FF54A5BA000
unkown
page readonly
clean
441000
unkown image
page read and write
clean
28D46100000
unkown
page read and write
clean
7FF5B9BE2000
unkown
page readonly
clean
7FF57CD59000
unkown
page readonly
clean
7FF5C86FC000
unkown
page readonly
clean
9A7277E000
unkown
page read and write
clean
7FF54A547000
unkown
page readonly
clean
2C7F000
unkown
page read and write
clean
1A9A207A000
unkown
page read and write
clean
540000
heap default
page read and write
clean
21FEA540000
unkown
page readonly
clean
20F48340000
unkown
page write copy
clean
7FF54A355000
unkown
page readonly
clean
1DEADC67000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
2A4000
unkown
page read and write
clean
21FEA64D000
unkown
page read and write
clean
9A71FEE000
unkown
page read and write
clean
1A9A27A0000
unkown
page readonly
clean
95D2AFE000
unkown
page read and write
clean
7FF5AA706000
unkown
page readonly
clean
219B1E13000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
28D45F40000
heap private
page read and write
clean
22060855000
unkown
page read and write
clean
7FF5AA7F9000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF5992F4000
unkown
page readonly
clean
7FF4F15D9000
unkown
page readonly
clean
7FF598E60000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF598F92000
unkown
page readonly
clean
7FF59934E000
unkown
page readonly
clean
58E000
unkown
page read and write
clean
640000
unkown
page readonly
clean
7FF54A2AC000
unkown
page readonly
clean
EA5CFFC000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
3BCAE7E000
unkown
page read and write
clean
2B7E000
unkown
page read and write
clean
7FF4F14E8000
unkown
page readonly
clean
1A9A78B2000
unkown
page read and write
clean
7FF5C8358000
unkown
page readonly
clean
2CE5A7C000
unkown
page read and write
clean
AA0000
heap private
page read and write
clean
610000
unkown
page execute and read and write
clean
12E1000
unkown
page read and write
clean
7FF4F1574000
unkown
page readonly
clean
1DEADC5A000
unkown
page read and write
clean
7FF54A699000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
3BCAAF7000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
348000
unkown
page read and write
clean
7FF4F14E6000
unkown
page readonly
clean
7FF54A5FD000
unkown
page readonly
clean
21FEA4D0000
heap private
page read and write
clean
2CE60FB000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
143E000
unkown
page read and write
clean
5E8000
heap default
page read and write
clean
7FF4F10E0000
unkown
page readonly
clean
170F41A0000
heap default
page read and write
clean
1DEADC64000
unkown
page read and write
clean
170F4435000
heap private
page read and write
clean
21FEB000000
unkown
page readonly
clean
28D46200000
unkown
page readonly
clean
20F47A00000
unkown
page readonly
clean
7FF5C8559000
unkown
page readonly
clean
1A9A76B4000
unkown
page write copy
clean
1A9A7694000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF5AA794000
unkown
page readonly
clean
7FF5B9C1F000
unkown
page readonly
clean
7FF57CD1A000
unkown
page readonly
clean
1A9A7821000
unkown
page read and write
clean
28D46013000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF54A2B8000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
1A6287C000
unkown
page read and write
clean
7FF4F14D2000
unkown
page readonly
clean
7FF561B6C000
unkown
page readonly
clean
820000
heap private
page read and write
clean
1A9A7710000
unkown
page read and write
clean
1DEADBB0000
unkown
page readonly
clean
4A0000
unkown
page readonly
clean
7FF5B9A5F000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
F60000
unkown
page read and write
clean
20F47824000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1DEADC58000
unkown
page read and write
clean
170F4170000
unkown
page read and write
clean
7FF57CD6E000
unkown
page readonly
clean
1DEADC82000
unkown
page read and write
clean
7FF5B9C0E000
unkown
page readonly
clean
7FF59911E000
unkown
page readonly
clean
7FF54A34E000
unkown
page readonly
clean
7FF4F12FA000
unkown
page readonly
clean
28D45FB0000
unkown
page readonly
clean
1A9A7710000
unkown
page read and write
clean
1DEADC2D000
unkown
page read and write
clean
7FF5B9BA7000
unkown
page readonly
clean
43F000
unkown image
page read and write
clean
7FF546172000
unkown
page readonly
clean
7FF5C866C000
unkown
page readonly
clean
7FF54A1D5000
unkown
page readonly
clean
926487B000
unkown
page read and write
clean
1A9A7815000
unkown
page read and write
clean
21FEA66E000
unkown
page read and write
clean
22060E60000
unkown
page readonly
clean
7FF54647C000
unkown
page readonly
clean
1F0000
unkown
page read and write
clean
7FF599266000
unkown
page readonly
clean
28D46022000
unkown
page read and write
clean
7FF562228000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
7FF5AA776000
unkown
page readonly
clean
20F478CB000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
43C000
unkown image
page read and write
clean
7FF561E10000
unkown
page readonly
clean
7FF5B9B9B000
unkown
page readonly
clean
7FF4F14D0000
unkown
page readonly
clean
1DEADC49000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF546600000
unkown
page readonly
clean
1A9A78B4000
unkown
page read and write
clean
1DEADC29000
unkown
page read and write
clean
190E000
unkown
page read and write
clean
1A9A75D0000
unkown
page read and write
clean
7FF546559000
unkown
page readonly
clean
1DEADC13000
unkown
page read and write
clean
7FF5AA72E000
unkown
page readonly
clean
95D26FE000
unkown
page read and write
clean
20F477F0000
unkown
page read and write
clean
1A9A78A1000
unkown
page read and write
clean
7FF546512000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
3DD813E000
unkown
page read and write
clean
EA5CDFB000
unkown
page read and write
clean
7FF54642C000
unkown
page readonly
clean
A10000
unkown
page read and write
clean
1DEADC76000
unkown
page read and write
clean
1DEADC2F000
unkown
page read and write
clean
7FF5AA76C000
unkown
page readonly
clean
20F47840000
unkown
page read and write
clean
7FF4F1556000
unkown
page readonly
clean
7FF5461DF000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
60F000
unkown
page read and write
clean
EA5CEF7000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF562210000
unkown
page readonly
clean
7FF549F16000
unkown
page readonly
clean
7FF4F153D000
unkown
page readonly
clean
22060888000
unkown
page read and write
clean
7FF5C83A8000
unkown
page readonly
clean
43C000
unkown image
page read and write
clean
1A9A7A30000
unkown
page readonly
clean
7FF57CD45000
unkown
page readonly
clean
3DD857F000
unkown
page read and write
clean
21FEA700000
unkown
page read and write
clean
7FF54A551000
unkown
page readonly
clean
7FF54A577000
unkown
page readonly
clean
EA5D0FF000
unkown
page read and write
clean
7FF54A5E9000
unkown
page readonly
clean
95D28FE000
unkown
page read and write
clean
7FF5465A4000
unkown
page readonly
clean
7FF546609000
unkown
page readonly
clean
1DEADC7D000
unkown
page read and write
clean
4E0000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
1A9A75B0000
unkown
page read and write
clean
DD8E1FE000
unkown
page read and write
clean
656000
unkown
page read and write
clean
7FF5C8678000
unkown
page readonly
clean
7FF5464EC000
unkown
page readonly
clean
9E0000
unkown
page read and write
clean
DD8E27E000
unkown
page read and write
clean
7FF54A41F000
unkown
page readonly
clean
1A9A2660000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
1A9A75B0000
unkown
page read and write
clean
21FEA8D0000
unkown
page readonly
clean
7FF546420000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
21FEA560000
unkown
page read and write
clean
1A9A7700000
unkown
page read and write
clean
7FF5620DE000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
1A9A1FF3000
unkown
page read and write
clean
7FF5C8720000
unkown
page readonly
clean
7FF5465A7000
unkown
page readonly
clean
7FF4F15D9000
unkown
page readonly
clean
7FF5C870C000
unkown
page readonly
clean
4DE000
unkown
page read and write
clean
7FF4F151F000
unkown
page readonly
clean
9264CF7000
unkown
page read and write
clean
28D45FC0000
unkown
page readonly
clean
7FF57CE01000
unkown
page readonly
clean
22060A00000
unkown
page readonly
clean
1DEADC78000
unkown
page read and write
clean
7FF4F144C000
unkown
page readonly
clean
7FF4F155C000
unkown
page readonly
clean
460000
unkown
page read and write
clean
219B1DC0000
unkown
page read and write
clean
7FF5C86D9000
unkown
page readonly
clean
28D45FA0000
heap default
page read and write
clean
7FF562123000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF54653E000
unkown
page readonly
clean
7FF4F14E2000
unkown
page readonly
clean
7FF5C8548000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF5B98F5000
unkown
page readonly
clean
9264A75000
unkown
page read and write
clean
7FF5B9C41000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
9A7247B000
unkown
page read and write
clean
1A9A2029000
unkown
page read and write
clean
1A9A75F4000
unkown
page read and write
clean
EC0000
unkown
page read and write
clean
1A9A3401000
unkown
page read and write
clean
9E6000
unkown
page readonly
clean
7FF5B9C29000
unkown
page readonly
clean
AA0000
unkown
page execute and read and write
clean
7FF5C8789000
unkown
page readonly
clean
1A9A2902000
unkown
page read and write
clean
7FF562157000
unkown
page readonly
clean
2CE63FC000
unkown
page read and write
clean
20F47620000
heap default
page read and write
clean
2930000
unkown
page readonly
clean
22060813000
unkown
page read and write
clean
21FEA530000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
7FF5B9C74000
unkown
page readonly
clean
49E000
unkown
page read and write
clean
7FF54A601000
unkown
page readonly
clean
9A7227E000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
28D46113000
unkown
page read and write
clean
20F47902000
unkown
page read and write
clean
7FF5C877E000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
DD8E4FF000
unkown
page read and write
clean
28D46A00000
unkown
page readonly
clean
7FF4F15CE000
unkown
page readonly
clean
7FF5AA57F000
unkown
page readonly
clean
54A000
heap default
page read and write
clean
1A9A20B0000
unkown
page read and write
clean
7FF5B9C46000
unkown
page readonly
clean
1A622AC000
unkown
page read and write
clean
22060854000
unkown
page read and write
clean
7FF57CA1C000
unkown
page readonly
clean
4F0000
heap default
page read and write
clean
7FF5C84EE000
unkown
page readonly
clean
7FF5B9C56000
unkown
page readonly
clean
22060902000
unkown
page read and write
clean
3DD81BE000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
601000
heap default
page read and write
clean
7FF5C86BE000
unkown
page readonly
clean
1DEADAD0000
unkown
page readonly
clean
21FEA649000
unkown
page read and write
clean
7FF4F1546000
unkown
page readonly
clean
20F478E5000
unkown
page read and write
clean
219B1F02000
unkown
page read and write
clean
61A000
unkown
page read and write
clean
22060780000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
B3F000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF54A505000
unkown
page readonly
clean
22060870000
unkown
page read and write
clean
7FF5B9C15000
unkown
page readonly
clean
20F47710000
unkown
page readonly
clean
22060900000
unkown
page read and write
clean
1A9A7770000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
1A9A27E0000
unkown
page readonly
clean
9264EFF000
unkown
page read and write
clean
7FF599163000
unkown
page readonly
clean
26CE000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
28D4604D000
unkown
page read and write
clean
1DEADC2E000
unkown
page read and write
clean
3BCB67F000
unkown
page read and write
clean
3DD80BB000
unkown
page read and write
clean
20F47800000
unkown
page read and write
clean
219B20D0000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF562255000
unkown
page readonly
clean
95D267B000
unkown
page read and write
clean
7FF57CC95000
unkown
page readonly
clean
EA5C9EF000
unkown
page read and write
clean
7FF54A3FE000
unkown
page readonly
clean
21FEAE02000
unkown
page read and write
clean
7FF546518000
unkown
page readonly
clean
7FF5AA785000
unkown
page readonly
clean
20F47F32000
unkown
page read and write
clean
1DEADC63000
unkown
page read and write
clean
7FF5B9CD1000
unkown
page readonly
clean
1A9A76C0000
unkown
page read and write
clean
7FF56203A000
unkown
page readonly
clean
442000
unkown image
page readonly
clean
1A9A76B7000
unkown
page write copy
clean
168F000
unkown
page read and write
clean
1A62D7E000
unkown
page read and write
clean
1A9A7760000
unkown
page readonly
clean
7FF54A29D000
unkown
page readonly
clean
1A9A7688000
unkown
page write copy
clean
7FF5AA7EE000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
12E1000
unkown
page read and write
clean
1FDA4202000
unkown
page read and write
clean
7FF5AA3CA000
unkown
page readonly
clean
1FDA39F0000
unkown
page read and write
clean
7FF54656D000
unkown
page readonly
clean
1A9A75D1000
unkown
page read and write
clean
28D4602A000
unkown
page read and write
clean
7FF54A5D5000
unkown
page readonly
clean
3BCAD7D000
unkown
page read and write
clean
1140000
heap private
page read and write
clean
7FF599148000
unkown
page readonly
clean
1DEADC3B000
unkown
page read and write
clean
1DEADC79000
unkown
page read and write
clean
1A9A1F50000
heap default
page read and write
clean
7FF5B9C5C000
unkown
page readonly
clean
28D45FD0000
unkown
page read and write
clean
219B1E77000
unkown
page read and write
clean
1FDA3C00000
unkown
page readonly
clean
1A9A7460000
unkown
page readonly
clean
7E6000
unkown
page readonly
clean
7FF54A630000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
1A9A27C0000
unkown
page readonly
clean
7FF54A625000
unkown
page readonly
clean
7FF57CE09000
unkown
page readonly
clean
1FDA4060000
unkown
page read and write
clean
434000
unkown image
page readonly
clean
7FF5AA03B000
unkown
page readonly
clean
7FF4F13E3000
unkown
page readonly
clean
7FF5AA766000
unkown
page readonly
clean
43F000
unkown image
page read and write
clean
7FF5C8727000
unkown
page readonly
clean
1FDA3F90000
unkown
page readonly
clean
28D462D0000
unkown
page readonly
clean
1DEADE00000
unkown
page readonly
clean
4C0000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
1DEADC41000
unkown
page read and write
clean
687000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
95D277E000
unkown
page read and write
clean
7FF546502000
unkown
page readonly
clean
6CE000
unkown
page read and write
clean
13E0000
unkown
page read and write
clean
7FF59927A000
unkown
page readonly
clean
7FF54654F000
unkown
page readonly
clean
1A9A2075000
unkown
page read and write
clean
1A9A1F90000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF56212D000
unkown
page readonly
clean
7FF5992DC000
unkown
page readonly
clean
20F47813000
unkown
page read and write
clean
7FF5622B7000
unkown
page readonly
clean
22060908000
unkown
page read and write
clean
7FF54A637000
unkown
page readonly
clean
DD8E5FD000
unkown
page read and write
clean
7FF54A347000
unkown
page readonly
clean
1A9A77F0000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
7FF5C8715000
unkown
page readonly
clean
1FDA3A5C000
unkown
page read and write
clean
28D46052000
unkown
page read and write
clean
7FF54657C000
unkown
page readonly
clean
441000
unkown image
page read and write
clean
1DEADC62000
unkown
page read and write
clean
7FF54A50C000
unkown
page readonly
clean
1FDA3A13000
unkown
page read and write
clean
43F000
unkown image
page read and write
clean
12E1000
unkown
page read and write
clean
62C000
unkown
page read and write
clean
1A9A7710000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF54A5A6000
unkown
page readonly
clean
7FF562286000
unkown
page readonly
clean
1DEADC3D000
unkown
page read and write
clean
1A9A2913000
unkown
page read and write
clean
1A9A1F60000
unkown
page readonly
clean
1A9A75E0000
unkown
page read and write
clean
7FF4F13C8000
unkown
page readonly
clean
219B1E02000
unkown
page read and write
clean
7FF54A5A2000
unkown
page readonly
clean
1DEADC5F000
unkown
page read and write
clean
7FF5C8789000
unkown
page readonly
clean
7FF4F10CA000
unkown
page readonly
clean
442000
unkown image
page readonly
clean
19A000
unkown
page read and write
clean
21FEA708000
unkown
page read and write
clean
7FF59928E000
unkown
page readonly
clean
ED0000
unkown
page read and write
clean
7FF599250000
unkown
page readonly
clean
7FF5C86F6000
unkown
page readonly
clean
7FF4F1529000
unkown
page readonly
clean
1DEADA60000
heap private
page read and write
clean
219B2800000
unkown
page readonly
clean
1A9A27F0000
unkown
page read and write
clean
1FDA3A00000
unkown
page read and write
clean
12E0000
unkown
page read and write
clean
1A9A78B2000
unkown
page read and write
clean
7FF4F154C000
unkown
page readonly
clean
20F47913000
unkown
page read and write
clean
7FF5AA6F0000
unkown
page readonly
clean
7FF5B9BD2000
unkown
page readonly
clean
7FF5C843E000
unkown
page readonly
clean
7FF5B9CCE000
unkown
page readonly
clean
1A9A7843000
unkown
page read and write
clean
7FF5992C6000
unkown
page readonly
clean
1A9A27B0000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
1A9A2013000
unkown
page read and write
clean
7FF57CD86000
unkown
page readonly
clean
442000
unkown image
page readonly
clean
F70000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
442000
unkown image
page readonly
clean
1A9A75E0000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF5AA7F9000
unkown
page readonly
clean
219B2000000
unkown
page readonly
clean
1A62A7F000
unkown
page read and write
clean
1FDA39C0000
unkown
page read and write
clean
21FEA800000
unkown
page readonly
clean
1A9A2092000
unkown
page read and write
clean
7FF54638F000
unkown
page readonly
clean
7FF4F1565000
unkown
page readonly
clean
1A9A1EF0000
heap private
page read and write
clean
12E1000
unkown
page read and write
clean
22060802000
unkown
page read and write
clean
7FF54A690000
unkown
page readonly
clean
1A9A7490000
unkown
page read and write
clean
7FF54658C000
unkown
page readonly
clean
7FF599359000
unkown
page readonly
clean
7FF5B9BE8000
unkown
page readonly
clean
7D0000
unkown
page read and write
clean
2206084B000
unkown
page read and write
clean
7FF57CE09000
unkown
page readonly
clean
7FF5AA749000
unkown
page readonly
clean
28D4604B000
unkown
page read and write
clean
1A9A2802000
unkown
page read and write
clean
7FF5C8781000
unkown
page readonly
clean
1A9A7420000
unkown
page read and write
clean
77A000
heap default
page read and write
clean
20F47870000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1A9A2800000
unkown
page read and write
clean
756000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
7FF5C86AA000
unkown
page readonly
clean
7FF5C8724000
unkown
page readonly
clean
219B1E72000
unkown
page read and write
clean
7FF54A43A000
unkown
page readonly
clean
7FF5992F7000
unkown
page readonly
clean
1FDA3A3D000
unkown
page read and write
clean
7FF59907A000
unkown
page readonly
clean
28D46000000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
170F4430000
heap private
page read and write
clean
3BCAC7A000
unkown
page read and write
clean
1FDA39F0000
unkown
page read and write
clean
2B7000
unkown
page read and write
clean
7FF598E50000
unkown
page readonly
clean
7FF562269000
unkown
page readonly
clean
7FF4F135F000
unkown
page readonly
clean
7FF54A55B000
unkown
page readonly
clean
9C000
unkown
page read and write
clean
7FF561E0A000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF5AA790000
unkown
page readonly
clean
1A9A74A0000
unkown
page read and write
clean
7FF549F0C000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
2A3E000
unkown
page read and write
clean
1FDA39F0000
unkown
page read and write
clean
7FF562222000
unkown
page readonly
clean
667000
unkown
page read and write
clean
7FF5992A9000
unkown
page readonly
clean
1A9A2000000
unkown
page read and write
clean
7FF54A634000
unkown
page readonly
clean
7FF5C8615000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
20F47889000
unkown
page read and write
clean
926497D000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
727000
heap default
page read and write
clean
7FF546495000
unkown
page readonly
clean
43C000
unkown image
page write copy
clean
C80000
unkown
page readonly
clean
22060913000
unkown
page read and write
clean
7FF56218C000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
43C000
unkown image
page read and write
clean
F90000
unkown
page readonly
clean
1DEADC61000
unkown
page read and write
clean
7FF599252000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
7FF562226000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
9A72577000
unkown
page read and write
clean
20F4787F000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
20F47630000
unkown
page readonly
clean
DD8E0FE000
unkown
page read and write
clean
2560000
heap private
page read and write
clean
12E1000
unkown
page read and write
clean
7FF546500000
unkown
page readonly
clean
7FF4F1417000
unkown
page readonly
clean
219B1D90000
heap default
page read and write
clean
7FF54A61C000
unkown
page readonly
clean
441000
unkown image
page read and write
clean
7FF54A210000
unkown
page readonly
clean
2206083C000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
7FF54A2A6000
unkown
page readonly
clean
7FF5622B4000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
12E1000
unkown
page read and write
clean
28D4603C000
unkown
page read and write
clean
7FF54A517000
unkown
page readonly
clean
7FF4F1515000
unkown
page readonly
clean
1A9A7710000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
460000
unkown
page readonly
clean
3BCB47B000
unkown
page read and write
clean
28D46002000
unkown
page read and write
clean
7FF599268000
unkown
page readonly
clean
219B1E00000
unkown
page read and write
clean
7FF54A57C000
unkown
page readonly
clean
28D46102000
unkown
page read and write
clean
7FF562319000
unkown
page readonly
clean
EA5C8EB000
unkown
page read and write
clean
7FF5C8692000
unkown
page readonly
clean
7FF56227D000
unkown
page readonly
clean
7FF5AA73F000
unkown
page readonly
clean
EA5CCF5000
unkown
page read and write
clean
1DEADC56000
unkown
page read and write
clean
28D46055000
unkown
page read and write
clean
7FF546545000
unkown
page readonly
clean
1A9A7850000
unkown
page read and write
clean
7FF54A5A8000
unkown
page readonly
clean
7FF54A588000
unkown
page readonly
clean
2CE607D000
unkown
page read and write
clean
22060680000
heap default
page read and write
clean
AE0000
unkown
page readonly
clean
7FF5B9CD9000
unkown
page readonly
clean
1A9A7750000
unkown
page readonly
clean
7FF5AA71A000
unkown
page readonly
clean
1A6317F000
unkown
page read and write
clean
7FF56224E000
unkown
page readonly
clean
1A9A2113000
unkown
page read and write
clean
21FEB340000
unkown
page readonly
clean
2710000
heap private
page read and write
clean
400000
unkown image
page readonly
clean
3BCB2FE000
unkown
page read and write
clean
AB0000
unkown
page readonly
clean
1A9A75D4000
unkown
page read and write
clean
3BCB07B000
unkown
page read and write
clean
EE0000
heap private
page read and write
clean
22060851000
unkown
page read and write
clean
7FF54A5CE000
unkown
page readonly
clean
28D4604F000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF4F13ED000
unkown
page readonly
clean
7FF546609000
unkown
page readonly
clean
1DEADC7A000
unkown
page read and write
clean
1DEADC4E000
unkown
page read and write
clean
7FF54A31C000
unkown
page readonly
clean
1DEADC45000
unkown
page read and write
clean
1A6307E000
unkown
page read and write
clean
1A62C7D000
unkown
page read and write
clean
3BCB27F000
unkown
page read and write
clean
22061002000
unkown
page read and write
clean
7FF54A460000
unkown
page readonly
clean
2CE61FD000
unkown
page read and write
clean
7FF562212000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
7FF546256000
unkown
page readonly
clean
1A9A2900000
unkown
page read and write
clean
7FF599295000
unkown
page readonly
clean
1DEADBC0000
unkown
page read and write
clean
EF0000
unkown
page read and write
clean
2CE62FE000
unkown
page read and write
clean
7FF5B9893000
unkown
page readonly
clean
80F000
unkown
page read and write
clean
1920000
unkown
page read and write
clean
21FEA650000
unkown
page read and write
clean
7FF562108000
unkown
page readonly
clean
BC0000
heap private
page read and write
clean
1DEADC60000
unkown
page read and write
clean
DD8E37E000
unkown
page read and write
clean
19D000
unkown
page read and write
clean
7FF54A606000
unkown
page readonly
clean
7FF5C8680000
unkown
page readonly
clean
21FEA63C000
unkown
page read and write
clean
7FF54A44C000
unkown
page readonly
clean
7FF5B9CD9000
unkown
page readonly
clean
7FF5B9BD0000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
4C4000
unkown
page read and write
clean
7FF599351000
unkown
page readonly
clean
7FF5992F0000
unkown
page readonly
clean
43C000
unkown image
page write copy
clean
1DEAE402000
unkown
page read and write
clean
7FF4F15D1000
unkown
page readonly
clean
1A9A1F70000
unkown
page readonly
clean
21FEA602000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF5AA51A000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF54A616000
unkown
page readonly
clean
21FEA655000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF562319000
unkown
page readonly
clean
1A9A1FF0000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
180E000
unkown
page read and write
clean
2CE5F7C000
unkown
page read and write
clean
74E000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
7FF5C8450000
unkown
page readonly
clean
62C000
unkown
page read and write
clean
2DBF000
unkown
page read and write
clean
170F42A0000
unkown
page read and write
clean
7FF54A1D1000
unkown
page readonly
clean
7FF599197000
unkown
page readonly
clean
5EE000
unkown
page read and write
clean
1FDA39B0000
unkown
page readonly
clean
7FF5AA797000
unkown
page readonly
clean
7FF5465FE000
unkown
page readonly
clean
1A626FB000
unkown
page read and write
clean
219B1E67000
unkown
page read and write
clean
2CE5C7B000
unkown
page read and write
clean
7E0000
unkown
page read and write
clean
7FF5B9C77000
unkown
page readonly
clean
1A9A75B8000
unkown
page read and write
clean
4F5000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
22060620000
heap private
page read and write
clean
1A9A2918000
unkown
page read and write
clean
9DF000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF54A227000
unkown
page readonly
clean
7FF599191000
unkown
page readonly
clean
7FF5992BD000
unkown
page readonly
clean
20F478BF000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1A9A2790000
unkown
page readonly
clean
20F48000000
unkown
page readonly
clean
1DEADBA0000
unkown
page readonly
clean
7FF5C8528000
unkown
page readonly
clean
7FF5AA75D000
unkown
page readonly
clean
7FF54A68E000
unkown
page readonly
clean
540000
heap default
page read and write
clean
1A9A768C000
unkown
page readonly
clean
20F48390000
unkown
page readonly
clean
268D000
unkown
page read and write
clean
1A9A782F000
unkown
page read and write
clean
6E0000
unkown
page execute and read and write
clean
27CF000
unkown
page read and write
clean
7FF4F139E000
unkown
page readonly
clean
43C000
unkown image
page write copy
clean
656000
unkown
page read and write
clean
7FF54A2D0000
unkown
page readonly
clean
7FF598E4A000
unkown
page readonly
clean
7FF56230E000
unkown
page readonly
clean
1A9A7800000
unkown
page read and write
clean
1A9A2959000
unkown
page read and write
clean
442000
unkown image
page readonly
clean
9C0000
heap private
page read and write
clean
12E1000
unkown
page read and write
clean
12E1000
unkown
page read and write
clean
1DEADC74000
unkown
page read and write
clean
7FF54A5DF000
unkown
page readonly
clean
12E1000
unkown
page read and write
clean
7FF54A592000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
5F0000
unkown
page readonly
clean
7FF4F0E2C000
unkown
page readonly
clean
4C4000
unkown
page read and write
clean
1DEADC40000
unkown
page read and write
clean
7FF57CD7C000
unkown
page readonly
clean
7FF57CD18000
unkown
page readonly
clean
1F0000
unkown
page read and write
clean
7FF5461E2000
unkown
page readonly
clean
1A9A22D0000
unkown
page readonly
clean
153C000
unkown
page read and write
clean
1A9A78AC000
unkown
page read and write
clean
2C2000
unkown
page read and write
clean
2B3F000
unkown
page read and write
clean
BB0000
unkown
page execute and read and write
clean
12E1000
unkown
page read and write
clean
170F41A8000
heap default
page read and write
clean
219B1F13000
unkown
page read and write
clean
460000
unkown
page read and write
clean
1A9A2918000
unkown
page read and write
clean
2EFC000
unkown
page read and write
clean
7FF546595000
unkown
page readonly
clean
17CF000
unkown
page read and write
clean
2B1000
unkown
page read and write
clean
4C4000
unkown
page read and write
clean
20F47700000
unkown
page readonly
clean
A50000
heap private
page read and write
clean
7FF5C86C5000
unkown
page readonly
clean
5E0000
heap default
page read and write
clean
12E1000
unkown
page read and write
clean
1DEADC6B000
unkown
page read and write
clean
7FF4F150E000
unkown
page readonly
clean
7FF57CD95000
unkown
page readonly
clean
A20000
unkown
page readonly
clean
750000
unkown
page read and write
clean
7FF5C865A000
unkown
page readonly
clean
7FF5C8696000
unkown
page readonly
clean
7FF5AA039000
unkown
page readonly
clean
1910000
unkown
page readonly
clean
355000
unkown
page read and write
clean
43C000
unkown image
page write copy
clean
7FF546487000
unkown
page readonly
clean
5AE000
unkown
page read and write
clean
7FF54A3BB000
unkown
page readonly
clean
53E000
unkown
page read and write
clean
7FF54652A000
unkown
page readonly
clean
9A71F6B000
unkown
page read and write
clean
43C000
unkown image
page read and write
clean
9264DFF000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF54A60C000
unkown
page readonly
clean
90E000
unkown
page read and write
clean
1A9A20FC000
unkown
page read and write
clean
1DEADC5E000
unkown
page read and write
clean
7FF546336000
unkown
page readonly
clean
1DEADD02000
unkown
page read and write
clean
20F47DB0000
unkown
page readonly
clean
20F47E02000
unkown
page read and write
clean
190C000
unkown
page read and write
clean
7FF54A699000
unkown
page readonly
clean
7FF5AA708000
unkown
page readonly
clean
22060829000
unkown
page read and write
clean
22060690000
unkown
page readonly
clean
1A9A76F0000
unkown
page read and write
clean
1FDA3A2A000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1A9A75BE000
unkown
page read and write
clean
There are 1062 hidden memdumps, click here to show them.