Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
methodsnetsh.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\1942f959aae25ff5e177f0a0e912022f_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\edb.log
|
data
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
|
Extensible storage engine DataBase, version 0x620, checksum 0x99fb9f13, page size 16384, DirtyShutdown, Windows version 10.0
|
dropped
|
||
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a
|
data
|
dropped
|
||
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
|
data
|
modified
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\methodsnetsh.exe
|
'C:\Users\user\Desktop\methodsnetsh.exe'
|
||
C:\Users\user\Desktop\methodsnetsh.exe
|
--4a9ea48a
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Windows\SysWOW64\sensorias.exe
|
C:\Windows\SysWOW64\sensorias.exe
|
||
C:\Windows\SysWOW64\sensorias.exe
|
--606904f7
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
|
||
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k NetworkService -p
|
||
C:\Windows\System32\svchost.exe
|
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
|
||
C:\Windows\System32\svchost.exe
|
C:\Windows\System32\svchost.exe -k netsvcs -p
|
||
C:\Windows\System32\SgrmBroker.exe
|
C:\Windows\system32\SgrmBroker.exe
|
||
C:\Program Files\Windows Defender\MpCmdRun.exe
|
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
There are 5 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
|
unknown
|
||
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
|
unknown
|
||
https://dev.ditu.live.com/REST/v1/Routes/
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Routes/Driving
|
unknown
|
||
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
|
unknown
|
||
http://91.250.96.22/LhqjdNLOiM5Uy7n
|
unknown
|
||
https://t0.tiles.ditu.live.com/tiles/gen
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Routes/
|
unknown
|
||
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Routes/Walking
|
unknown
|
||
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
|
unknown
|
||
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
|
unknown
|
||
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
|
unknown
|
||
https://%s.xboxlive.com
|
unknown
|
||
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Locations
|
unknown
|
||
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
|
unknown
|
||
https://dev.virtualearth.net/mapcontrol/logging.ashx
|
unknown
|
||
https://dev.ditu.live.com/mapcontrol/logging.ashx
|
unknown
|
||
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
|
unknown
|
||
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
|
unknown
|
||
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
|
unknown
|
||
https://dynamic.t
|
unknown
|
||
https://dev.virtualearth.net/REST/v1/Routes/Transit
|
unknown
|
||
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
|
unknown
|
||
https://appexmapsappupdate.blob.core.windows.net
|
unknown
|
||
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
|
unknown
|
||
https://fs.microsoft.cH
|
unknown
|
||
https://activity.windows.com
|
unknown
|
||
http://www.bingmapsportal.com
|
unknown
|
||
https://dev.ditu.live.com/REST/v1/Locations
|
unknown
|
||
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
|
unknown
|
||
https://%s.dnet.xboxlive.com
|
unknown
|
||
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
|
unknown
|
There are 26 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
91.250.96.22
|
unknown
|
Germany
|
||
100.6.23.40
|
unknown
|
United States
|
||
190.114.244.182
|
unknown
|
Venezuela
|
||
200.71.200.4
|
unknown
|
Chile
|
||
127.0.0.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Windows\System32\svchost.exe
|
cval
|
||
C:\Windows\System32\svchost.exe
|
cval
|
||
C:\Windows\System32\svchost.exe
|
PerfMMFileName
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
||
C:\Windows\System32\svchost.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
||
C:\Windows\System32\svchost.exe
|
MonthID
|
There are 2 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
620000
|
unkown
|
page execute and read and write
|
||
7D1000
|
unkown
|
page execute read
|
||
AB0000
|
unkown
|
page execute and read and write
|
||
6F0000
|
unkown
|
page execute and read and write
|
||
F61000
|
unkown
|
page execute read
|
||
EC1000
|
unkown
|
page execute read
|
||
EA0000
|
unkown
|
page execute and read and write
|
||
9D1000
|
unkown
|
page execute read
|
||
1A9A2070000
|
unkown
|
page read and write
|
||
7FF54A360000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
21FEA68C000
|
unkown
|
page read and write
|
||
667000
|
unkown
|
page read and write
|
||
7FF56228C000
|
unkown
|
page readonly
|
||
7FF57CD8C000
|
unkown
|
page readonly
|
||
2CE5DFF000
|
unkown
|
page read and write
|
||
7FF5C8706000
|
unkown
|
page readonly
|
||
1FDA3B02000
|
unkown
|
page read and write
|
||
7FF5B98A4000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
7FF5990DF000
|
unkown
|
page readonly
|
||
7FF59929F000
|
unkown
|
page readonly
|
||
3DD84FF000
|
unkown
|
page read and write
|
||
28D46802000
|
unkown
|
page read and write
|
||
1030000
|
heap private
|
page read and write
|
||
351000
|
unkown
|
page read and write
|
||
7FF56229C000
|
unkown
|
page readonly
|
||
21FEA600000
|
unkown
|
page read and write
|
||
1DEADC44000
|
unkown
|
page read and write
|
||
20F478BA000
|
unkown
|
page read and write
|
||
460000
|
unkown
|
page readonly
|
||
7FF5C86ED000
|
unkown
|
page readonly
|
||
1A9A2FE0000
|
unkown
|
page read and write
|
||
7FF546516000
|
unkown
|
page readonly
|
||
7FF546576000
|
unkown
|
page readonly
|
||
1DEADC5C000
|
unkown
|
page read and write
|
||
43F000
|
unkown image
|
page read and write
|
||
F6F000
|
unkown
|
page readonly
|
||
21FEA613000
|
unkown
|
page read and write
|
||
7FF54A268000
|
unkown
|
page readonly
|
||
1A9A7885000
|
unkown
|
page read and write
|
||
7FF546417000
|
unkown
|
page readonly
|
||
C70000
|
heap private
|
page read and write
|
||
9C000
|
unkown
|
page read and write
|
||
3BCB0FE000
|
unkown
|
page read and write
|
||
7FF5B94A1000
|
unkown
|
page readonly
|
||
9D0000
|
unkown
|
page read and write
|
||
16CE000
|
unkown
|
page read and write
|
||
7FF54A43E000
|
unkown
|
page readonly
|
||
1DEADC57000
|
unkown
|
page read and write
|
||
9A7267E000
|
unkown
|
page read and write
|
||
219B1E6D000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
219B1DA0000
|
unkown
|
page readonly
|
||
7FF5C850F000
|
unkown
|
page readonly
|
||
28D4608C000
|
unkown
|
page read and write
|
||
ECF000
|
unkown
|
page readonly
|
||
3BCB17F000
|
unkown
|
page read and write
|
||
7FF5C7FD9000
|
unkown
|
page readonly
|
||
687000
|
unkown
|
page read and write
|
||
1A9A208C000
|
unkown
|
page read and write
|
||
4D0000
|
unkown
|
page readonly
|
||
1A62B7F000
|
unkown
|
page read and write
|
||
647000
|
unkown
|
page read and write
|
||
3BCB37F000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
631000
|
unkown
|
page read and write
|
||
1A9A2055000
|
unkown
|
page read and write
|
||
AD0000
|
heap private
|
page read and write
|
||
1A9A2B01000
|
unkown
|
page read and write
|
||
219B1D30000
|
heap private
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
7FF562296000
|
unkown
|
page readonly
|
||
F76000
|
unkown
|
page readonly
|
||
1A62E7E000
|
unkown
|
page read and write
|
||
7DF000
|
unkown
|
page readonly
|
||
2C0000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
20F477E0000
|
unkown
|
page readonly
|
||
1A9A74B0000
|
unkown
|
page read and write
|
||
1A9A2959000
|
unkown
|
page read and write
|
||
7FF5463CB000
|
unkown
|
page readonly
|
||
1FDA39A0000
|
unkown
|
page readonly
|
||
7FF561E20000
|
unkown
|
page readonly
|
||
7FF5992CC000
|
unkown
|
page readonly
|
||
1A9A2200000
|
unkown
|
page readonly
|
||
7FF56223A000
|
unkown
|
page readonly
|
||
7FF4F14FA000
|
unkown
|
page readonly
|
||
3BCA6DB000
|
unkown
|
page read and write
|
||
7FF5AA77C000
|
unkown
|
page readonly
|
||
3DD847F000
|
unkown
|
page read and write
|
||
1A9A7690000
|
unkown
|
page write copy
|
||
7FF5C8698000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A3420000
|
unkown
|
page read and write
|
||
56E000
|
unkown
|
page read and write
|
||
7FF5AA735000
|
unkown
|
page readonly
|
||
28D46D40000
|
unkown
|
page readonly
|
||
2720000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
BD0000
|
unkown
|
page readonly
|
||
21FEA64B000
|
unkown
|
page read and write
|
||
28D46089000
|
unkown
|
page read and write
|
||
22060800000
|
unkown
|
page read and write
|
||
720000
|
heap default
|
page read and write
|
||
21FEA702000
|
unkown
|
page read and write
|
||
1A9A209D000
|
unkown
|
page read and write
|
||
219B1DE0000
|
unkown
|
page readonly
|
||
1A9A1F80000
|
unkown
|
page read and write
|
||
7FF562151000
|
unkown
|
page readonly
|
||
1A62F7E000
|
unkown
|
page read and write
|
||
1DEADC42000
|
unkown
|
page read and write
|
||
1A9A7862000
|
unkown
|
page read and write
|
||
219B1E2A000
|
unkown
|
page read and write
|
||
7FF5992E5000
|
unkown
|
page readonly
|
||
1F0000
|
unkown
|
page read and write
|
||
199000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
DD0000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
3BCAF79000
|
unkown
|
page read and write
|
||
545000
|
heap default
|
page read and write
|
||
7FF5464F8000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF546586000
|
unkown
|
page readonly
|
||
1DEADC00000
|
unkown
|
page read and write
|
||
7FF54623E000
|
unkown
|
page readonly
|
||
7FF5C8437000
|
unkown
|
page readonly
|
||
7FF5464DA000
|
unkown
|
page readonly
|
||
95D29FE000
|
unkown
|
page read and write
|
||
1A9A27D0000
|
unkown
|
page readonly
|
||
7FF54616E000
|
unkown
|
page readonly
|
||
158E000
|
unkown
|
page read and write
|
||
7FF5622B0000
|
unkown
|
page readonly
|
||
1DEADAC0000
|
heap default
|
page read and write
|
||
442000
|
unkown image
|
page readonly
|
||
3BCB1FF000
|
unkown
|
page read and write
|
||
7FF5B9890000
|
unkown
|
page readonly
|
||
9B0000
|
heap private
|
page read and write
|
||
7FF54A573000
|
unkown
|
page readonly
|
||
7FF56209F000
|
unkown
|
page readonly
|
||
22060873000
|
unkown
|
page read and write
|
||
7FF599262000
|
unkown
|
page readonly
|
||
7FF5C8445000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
7FF4F1570000
|
unkown
|
page readonly
|
||
7FF54A2AF000
|
unkown
|
page readonly
|
||
7FF54A22E000
|
unkown
|
page readonly
|
||
ED6000
|
unkown
|
page readonly
|
||
F40000
|
unkown
|
page read and write
|
||
92648FE000
|
unkown
|
page read and write
|
||
7FF562311000
|
unkown
|
page readonly
|
||
1150000
|
unkown
|
page readonly
|
||
7FF5B9C65000
|
unkown
|
page readonly
|
||
7FF56225F000
|
unkown
|
page readonly
|
||
7FF57CDFE000
|
unkown
|
page readonly
|
||
1A9A30C0000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
7FF54A3CC000
|
unkown
|
page readonly
|
||
1A9A2815000
|
unkown
|
page read and write
|
||
68F000
|
unkown
|
page read and write
|
||
1A6297F000
|
unkown
|
page read and write
|
||
7FF54A567000
|
unkown
|
page readonly
|
||
DD8DD7C000
|
unkown
|
page read and write
|
||
1FDA38C0000
|
heap default
|
page read and write
|
||
DD8E47D000
|
unkown
|
page read and write
|
||
1A9A7A10000
|
unkown
|
page readonly
|
||
1FDA3A24000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A76E0000
|
unkown
|
page read and write
|
||
19D000
|
unkown
|
page read and write
|
||
7FF5463A8000
|
unkown
|
page readonly
|
||
219B2602000
|
unkown
|
page read and write
|
||
219B1E3F000
|
unkown
|
page read and write
|
||
64B000
|
unkown
|
page read and write
|
||
A0F000
|
unkown
|
page read and write
|
||
7FF5620EA000
|
unkown
|
page readonly
|
||
7FF5992D6000
|
unkown
|
page readonly
|
||
7FF5461F1000
|
unkown
|
page readonly
|
||
1A9A2041000
|
unkown
|
page read and write
|
||
29E0000
|
unkown
|
page readonly
|
||
442000
|
unkown image
|
page readonly
|
||
7FF5465A0000
|
unkown
|
page readonly
|
||
22060770000
|
unkown
|
page readonly
|
||
1FDA38D0000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
1A9A75F0000
|
unkown
|
page read and write
|
||
7FF5B9C3D000
|
unkown
|
page readonly
|
||
7FF5C86CF000
|
unkown
|
page readonly
|
||
647000
|
heap default
|
page read and write
|
||
95D2BFF000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF5C8682000
|
unkown
|
page readonly
|
||
920000
|
unkown
|
page read and write
|
||
840000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
2CBE000
|
unkown
|
page read and write
|
||
A3E000
|
unkown
|
page read and write
|
||
2CE64FF000
|
unkown
|
page read and write
|
||
DD8E6FD000
|
unkown
|
page read and write
|
||
28E0000
|
unkown
|
page readonly
|
||
7FF54A451000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
22060760000
|
unkown
|
page readonly
|
||
1DEADC59000
|
unkown
|
page read and write
|
||
7FF546571000
|
unkown
|
page readonly
|
||
7FF54A590000
|
unkown
|
page readonly
|
||
A00000
|
unkown
|
page read and write
|
||
1A9A7680000
|
unkown
|
page read and write
|
||
7FF54A3D8000
|
unkown
|
page readonly
|
||
7FF5991CC000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
28D4607C000
|
unkown
|
page read and write
|
||
219B1E5B000
|
unkown
|
page read and write
|
||
27D0000
|
unkown
|
page read and write
|
||
20F47F00000
|
unkown
|
page read and write
|
||
91F000
|
unkown
|
page read and write
|
||
28D46108000
|
unkown
|
page read and write
|
||
22061200000
|
unkown
|
page readonly
|
||
1A9A2102000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF4F1411000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
9264B7B000
|
unkown
|
page read and write
|
||
7FF4F1577000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
7FF5B9514000
|
unkown
|
page readonly
|
||
7FF59912A000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
34C000
|
unkown
|
page read and write
|
||
441000
|
unkown image
|
page read and write
|
||
7FF59916D000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
EA5D1FF000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A209F000
|
unkown
|
page read and write
|
||
12F0000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
28D4606F000
|
unkown
|
page read and write
|
||
2940000
|
unkown
|
page readonly
|
||
2CE5EFF000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A2E7000
|
unkown
|
page readonly
|
||
7FF54636E000
|
unkown
|
page readonly
|
||
20F475C0000
|
heap private
|
page read and write
|
||
7FF4F13AA000
|
unkown
|
page readonly
|
||
2206084E000
|
unkown
|
page read and write
|
||
1FDA3860000
|
heap private
|
page read and write
|
||
20F4782A000
|
unkown
|
page read and write
|
||
84A000
|
heap default
|
page read and write
|
||
2C6000
|
unkown
|
page read and write
|
||
1A9A2F00000
|
unkown
|
page read and write
|
||
442000
|
unkown image
|
page readonly
|
||
21FEA629000
|
unkown
|
page read and write
|
||
1A9A76D0000
|
unkown
|
page read and write
|
||
22060856000
|
unkown
|
page read and write
|
||
9C000
|
unkown
|
page read and write
|
||
A9C000
|
unkown
|
page read and write
|
||
219B1DB0000
|
unkown
|
page readonly
|
||
22060849000
|
unkown
|
page read and write
|
||
21FEA647000
|
unkown
|
page read and write
|
||
640000
|
heap default
|
page read and write
|
||
782000
|
heap default
|
page read and write
|
||
7FF4F0E0F000
|
unkown
|
page readonly
|
||
7FF5622A5000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF4F10D0000
|
unkown
|
page readonly
|
||
9264BFF000
|
unkown
|
page read and write
|
||
7FF54A458000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
1DEADC73000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
530000
|
unkown
|
page readonly
|
||
7FF5B9C4C000
|
unkown
|
page readonly
|
||
170F40A0000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
F80000
|
heap private
|
page read and write
|
||
219B2460000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
7FF54650D000
|
unkown
|
page readonly
|
||
7FF54A469000
|
unkown
|
page readonly
|
||
2DFE000
|
unkown
|
page read and write
|
||
21FEA550000
|
unkown
|
page readonly
|
||
28D46049000
|
unkown
|
page read and write
|
||
1A9A7710000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
2A8000
|
unkown
|
page read and write
|
||
7FF599359000
|
unkown
|
page readonly
|
||
1FDA3A02000
|
unkown
|
page read and write
|
||
7FF5B9897000
|
unkown
|
page readonly
|
||
21FEA68F000
|
unkown
|
page read and write
|
||
7FF5C7FD3000
|
unkown
|
page readonly
|
||
2250000
|
unkown
|
page readonly
|
||
13E0000
|
unkown
|
page read and write
|
||
EA5C96F000
|
unkown
|
page read and write
|
||
1DEADC32000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
21FEA713000
|
unkown
|
page read and write
|
||
7FF5AA7F1000
|
unkown
|
page readonly
|
||
7FF54A5BA000
|
unkown
|
page readonly
|
||
441000
|
unkown image
|
page read and write
|
||
28D46100000
|
unkown
|
page read and write
|
||
7FF5B9BE2000
|
unkown
|
page readonly
|
||
7FF57CD59000
|
unkown
|
page readonly
|
||
7FF5C86FC000
|
unkown
|
page readonly
|
||
9A7277E000
|
unkown
|
page read and write
|
||
7FF54A547000
|
unkown
|
page readonly
|
||
2C7F000
|
unkown
|
page read and write
|
||
1A9A207A000
|
unkown
|
page read and write
|
||
540000
|
heap default
|
page read and write
|
||
21FEA540000
|
unkown
|
page readonly
|
||
20F48340000
|
unkown
|
page write copy
|
||
7FF54A355000
|
unkown
|
page readonly
|
||
1DEADC67000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
2A4000
|
unkown
|
page read and write
|
||
21FEA64D000
|
unkown
|
page read and write
|
||
9A71FEE000
|
unkown
|
page read and write
|
||
1A9A27A0000
|
unkown
|
page readonly
|
||
95D2AFE000
|
unkown
|
page read and write
|
||
7FF5AA706000
|
unkown
|
page readonly
|
||
219B1E13000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
28D45F40000
|
heap private
|
page read and write
|
||
22060855000
|
unkown
|
page read and write
|
||
7FF5AA7F9000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5992F4000
|
unkown
|
page readonly
|
||
7FF4F15D9000
|
unkown
|
page readonly
|
||
7FF598E60000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF598F92000
|
unkown
|
page readonly
|
||
7FF59934E000
|
unkown
|
page readonly
|
||
58E000
|
unkown
|
page read and write
|
||
640000
|
unkown
|
page readonly
|
||
7FF54A2AC000
|
unkown
|
page readonly
|
||
EA5CFFC000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
3BCAE7E000
|
unkown
|
page read and write
|
||
2B7E000
|
unkown
|
page read and write
|
||
7FF4F14E8000
|
unkown
|
page readonly
|
||
1A9A78B2000
|
unkown
|
page read and write
|
||
7FF5C8358000
|
unkown
|
page readonly
|
||
2CE5A7C000
|
unkown
|
page read and write
|
||
AA0000
|
heap private
|
page read and write
|
||
610000
|
unkown
|
page execute and read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF4F1574000
|
unkown
|
page readonly
|
||
1DEADC5A000
|
unkown
|
page read and write
|
||
7FF54A699000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
3BCAAF7000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
348000
|
unkown
|
page read and write
|
||
7FF4F14E6000
|
unkown
|
page readonly
|
||
7FF54A5FD000
|
unkown
|
page readonly
|
||
21FEA4D0000
|
heap private
|
page read and write
|
||
2CE60FB000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
143E000
|
unkown
|
page read and write
|
||
5E8000
|
heap default
|
page read and write
|
||
7FF4F10E0000
|
unkown
|
page readonly
|
||
170F41A0000
|
heap default
|
page read and write
|
||
1DEADC64000
|
unkown
|
page read and write
|
||
170F4435000
|
heap private
|
page read and write
|
||
21FEB000000
|
unkown
|
page readonly
|
||
28D46200000
|
unkown
|
page readonly
|
||
20F47A00000
|
unkown
|
page readonly
|
||
7FF5C8559000
|
unkown
|
page readonly
|
||
1A9A76B4000
|
unkown
|
page write copy
|
||
1A9A7694000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5AA794000
|
unkown
|
page readonly
|
||
7FF5B9C1F000
|
unkown
|
page readonly
|
||
7FF57CD1A000
|
unkown
|
page readonly
|
||
1A9A7821000
|
unkown
|
page read and write
|
||
28D46013000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A2B8000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
1A6287C000
|
unkown
|
page read and write
|
||
7FF4F14D2000
|
unkown
|
page readonly
|
||
7FF561B6C000
|
unkown
|
page readonly
|
||
820000
|
heap private
|
page read and write
|
||
1A9A7710000
|
unkown
|
page read and write
|
||
1DEADBB0000
|
unkown
|
page readonly
|
||
4A0000
|
unkown
|
page readonly
|
||
7FF5B9A5F000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
F60000
|
unkown
|
page read and write
|
||
20F47824000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1DEADC58000
|
unkown
|
page read and write
|
||
170F4170000
|
unkown
|
page read and write
|
||
7FF57CD6E000
|
unkown
|
page readonly
|
||
1DEADC82000
|
unkown
|
page read and write
|
||
7FF5B9C0E000
|
unkown
|
page readonly
|
||
7FF59911E000
|
unkown
|
page readonly
|
||
7FF54A34E000
|
unkown
|
page readonly
|
||
7FF4F12FA000
|
unkown
|
page readonly
|
||
28D45FB0000
|
unkown
|
page readonly
|
||
1A9A7710000
|
unkown
|
page read and write
|
||
1DEADC2D000
|
unkown
|
page read and write
|
||
7FF5B9BA7000
|
unkown
|
page readonly
|
||
43F000
|
unkown image
|
page read and write
|
||
7FF546172000
|
unkown
|
page readonly
|
||
7FF5C866C000
|
unkown
|
page readonly
|
||
7FF54A1D5000
|
unkown
|
page readonly
|
||
926487B000
|
unkown
|
page read and write
|
||
1A9A7815000
|
unkown
|
page read and write
|
||
21FEA66E000
|
unkown
|
page read and write
|
||
22060E60000
|
unkown
|
page readonly
|
||
7FF54647C000
|
unkown
|
page readonly
|
||
1F0000
|
unkown
|
page read and write
|
||
7FF599266000
|
unkown
|
page readonly
|
||
28D46022000
|
unkown
|
page read and write
|
||
7FF562228000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF5AA776000
|
unkown
|
page readonly
|
||
20F478CB000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
43C000
|
unkown image
|
page read and write
|
||
7FF561E10000
|
unkown
|
page readonly
|
||
7FF5B9B9B000
|
unkown
|
page readonly
|
||
7FF4F14D0000
|
unkown
|
page readonly
|
||
1DEADC49000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF546600000
|
unkown
|
page readonly
|
||
1A9A78B4000
|
unkown
|
page read and write
|
||
1DEADC29000
|
unkown
|
page read and write
|
||
190E000
|
unkown
|
page read and write
|
||
1A9A75D0000
|
unkown
|
page read and write
|
||
7FF546559000
|
unkown
|
page readonly
|
||
1DEADC13000
|
unkown
|
page read and write
|
||
7FF5AA72E000
|
unkown
|
page readonly
|
||
95D26FE000
|
unkown
|
page read and write
|
||
20F477F0000
|
unkown
|
page read and write
|
||
1A9A78A1000
|
unkown
|
page read and write
|
||
7FF546512000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
3DD813E000
|
unkown
|
page read and write
|
||
EA5CDFB000
|
unkown
|
page read and write
|
||
7FF54642C000
|
unkown
|
page readonly
|
||
A10000
|
unkown
|
page read and write
|
||
1DEADC76000
|
unkown
|
page read and write
|
||
1DEADC2F000
|
unkown
|
page read and write
|
||
7FF5AA76C000
|
unkown
|
page readonly
|
||
20F47840000
|
unkown
|
page read and write
|
||
7FF4F1556000
|
unkown
|
page readonly
|
||
7FF5461DF000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
60F000
|
unkown
|
page read and write
|
||
EA5CEF7000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF562210000
|
unkown
|
page readonly
|
||
7FF549F16000
|
unkown
|
page readonly
|
||
7FF4F153D000
|
unkown
|
page readonly
|
||
22060888000
|
unkown
|
page read and write
|
||
7FF5C83A8000
|
unkown
|
page readonly
|
||
43C000
|
unkown image
|
page read and write
|
||
1A9A7A30000
|
unkown
|
page readonly
|
||
7FF57CD45000
|
unkown
|
page readonly
|
||
3DD857F000
|
unkown
|
page read and write
|
||
21FEA700000
|
unkown
|
page read and write
|
||
7FF54A551000
|
unkown
|
page readonly
|
||
7FF54A577000
|
unkown
|
page readonly
|
||
EA5D0FF000
|
unkown
|
page read and write
|
||
7FF54A5E9000
|
unkown
|
page readonly
|
||
95D28FE000
|
unkown
|
page read and write
|
||
7FF5465A4000
|
unkown
|
page readonly
|
||
7FF546609000
|
unkown
|
page readonly
|
||
1DEADC7D000
|
unkown
|
page read and write
|
||
4E0000
|
unkown
|
page readonly
|
||
401000
|
unkown image
|
page execute read
|
||
1A9A75B0000
|
unkown
|
page read and write
|
||
DD8E1FE000
|
unkown
|
page read and write
|
||
656000
|
unkown
|
page read and write
|
||
7FF5C8678000
|
unkown
|
page readonly
|
||
7FF5464EC000
|
unkown
|
page readonly
|
||
9E0000
|
unkown
|
page read and write
|
||
DD8E27E000
|
unkown
|
page read and write
|
||
7FF54A41F000
|
unkown
|
page readonly
|
||
1A9A2660000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
1A9A75B0000
|
unkown
|
page read and write
|
||
21FEA8D0000
|
unkown
|
page readonly
|
||
7FF546420000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
21FEA560000
|
unkown
|
page read and write
|
||
1A9A7700000
|
unkown
|
page read and write
|
||
7FF5620DE000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A1FF3000
|
unkown
|
page read and write
|
||
7FF5C8720000
|
unkown
|
page readonly
|
||
7FF5465A7000
|
unkown
|
page readonly
|
||
7FF4F15D9000
|
unkown
|
page readonly
|
||
7FF5C870C000
|
unkown
|
page readonly
|
||
4DE000
|
unkown
|
page read and write
|
||
7FF4F151F000
|
unkown
|
page readonly
|
||
9264CF7000
|
unkown
|
page read and write
|
||
28D45FC0000
|
unkown
|
page readonly
|
||
7FF57CE01000
|
unkown
|
page readonly
|
||
22060A00000
|
unkown
|
page readonly
|
||
1DEADC78000
|
unkown
|
page read and write
|
||
7FF4F144C000
|
unkown
|
page readonly
|
||
7FF4F155C000
|
unkown
|
page readonly
|
||
460000
|
unkown
|
page read and write
|
||
219B1DC0000
|
unkown
|
page read and write
|
||
7FF5C86D9000
|
unkown
|
page readonly
|
||
28D45FA0000
|
heap default
|
page read and write
|
||
7FF562123000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54653E000
|
unkown
|
page readonly
|
||
7FF4F14E2000
|
unkown
|
page readonly
|
||
7FF5C8548000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5B98F5000
|
unkown
|
page readonly
|
||
9264A75000
|
unkown
|
page read and write
|
||
7FF5B9C41000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
9A7247B000
|
unkown
|
page read and write
|
||
1A9A2029000
|
unkown
|
page read and write
|
||
1A9A75F4000
|
unkown
|
page read and write
|
||
EC0000
|
unkown
|
page read and write
|
||
1A9A3401000
|
unkown
|
page read and write
|
||
9E6000
|
unkown
|
page readonly
|
||
7FF5B9C29000
|
unkown
|
page readonly
|
||
AA0000
|
unkown
|
page execute and read and write
|
||
7FF5C8789000
|
unkown
|
page readonly
|
||
1A9A2902000
|
unkown
|
page read and write
|
||
7FF562157000
|
unkown
|
page readonly
|
||
2CE63FC000
|
unkown
|
page read and write
|
||
20F47620000
|
heap default
|
page read and write
|
||
2930000
|
unkown
|
page readonly
|
||
22060813000
|
unkown
|
page read and write
|
||
21FEA530000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5B9C74000
|
unkown
|
page readonly
|
||
49E000
|
unkown
|
page read and write
|
||
7FF54A601000
|
unkown
|
page readonly
|
||
9A7227E000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
28D46113000
|
unkown
|
page read and write
|
||
20F47902000
|
unkown
|
page read and write
|
||
7FF5C877E000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
DD8E4FF000
|
unkown
|
page read and write
|
||
28D46A00000
|
unkown
|
page readonly
|
||
7FF4F15CE000
|
unkown
|
page readonly
|
||
7FF5AA57F000
|
unkown
|
page readonly
|
||
54A000
|
heap default
|
page read and write
|
||
1A9A20B0000
|
unkown
|
page read and write
|
||
7FF5B9C46000
|
unkown
|
page readonly
|
||
1A622AC000
|
unkown
|
page read and write
|
||
22060854000
|
unkown
|
page read and write
|
||
7FF57CA1C000
|
unkown
|
page readonly
|
||
4F0000
|
heap default
|
page read and write
|
||
7FF5C84EE000
|
unkown
|
page readonly
|
||
7FF5B9C56000
|
unkown
|
page readonly
|
||
22060902000
|
unkown
|
page read and write
|
||
3DD81BE000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
601000
|
heap default
|
page read and write
|
||
7FF5C86BE000
|
unkown
|
page readonly
|
||
1DEADAD0000
|
unkown
|
page readonly
|
||
21FEA649000
|
unkown
|
page read and write
|
||
7FF4F1546000
|
unkown
|
page readonly
|
||
20F478E5000
|
unkown
|
page read and write
|
||
219B1F02000
|
unkown
|
page read and write
|
||
61A000
|
unkown
|
page read and write
|
||
22060780000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
B3F000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A505000
|
unkown
|
page readonly
|
||
22060870000
|
unkown
|
page read and write
|
||
7FF5B9C15000
|
unkown
|
page readonly
|
||
20F47710000
|
unkown
|
page readonly
|
||
22060900000
|
unkown
|
page read and write
|
||
1A9A7770000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
1A9A27E0000
|
unkown
|
page readonly
|
||
9264EFF000
|
unkown
|
page read and write
|
||
7FF599163000
|
unkown
|
page readonly
|
||
26CE000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
28D4604D000
|
unkown
|
page read and write
|
||
1DEADC2E000
|
unkown
|
page read and write
|
||
3BCB67F000
|
unkown
|
page read and write
|
||
3DD80BB000
|
unkown
|
page read and write
|
||
20F47800000
|
unkown
|
page read and write
|
||
219B20D0000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF562255000
|
unkown
|
page readonly
|
||
95D267B000
|
unkown
|
page read and write
|
||
7FF57CC95000
|
unkown
|
page readonly
|
||
EA5C9EF000
|
unkown
|
page read and write
|
||
7FF54A3FE000
|
unkown
|
page readonly
|
||
21FEAE02000
|
unkown
|
page read and write
|
||
7FF546518000
|
unkown
|
page readonly
|
||
7FF5AA785000
|
unkown
|
page readonly
|
||
20F47F32000
|
unkown
|
page read and write
|
||
1DEADC63000
|
unkown
|
page read and write
|
||
7FF5B9CD1000
|
unkown
|
page readonly
|
||
1A9A76C0000
|
unkown
|
page read and write
|
||
7FF56203A000
|
unkown
|
page readonly
|
||
442000
|
unkown image
|
page readonly
|
||
1A9A76B7000
|
unkown
|
page write copy
|
||
168F000
|
unkown
|
page read and write
|
||
1A62D7E000
|
unkown
|
page read and write
|
||
1A9A7760000
|
unkown
|
page readonly
|
||
7FF54A29D000
|
unkown
|
page readonly
|
||
1A9A7688000
|
unkown
|
page write copy
|
||
7FF5AA7EE000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
12E1000
|
unkown
|
page read and write
|
||
1FDA4202000
|
unkown
|
page read and write
|
||
7FF5AA3CA000
|
unkown
|
page readonly
|
||
1FDA39F0000
|
unkown
|
page read and write
|
||
7FF54656D000
|
unkown
|
page readonly
|
||
1A9A75D1000
|
unkown
|
page read and write
|
||
28D4602A000
|
unkown
|
page read and write
|
||
7FF54A5D5000
|
unkown
|
page readonly
|
||
3BCAD7D000
|
unkown
|
page read and write
|
||
1140000
|
heap private
|
page read and write
|
||
7FF599148000
|
unkown
|
page readonly
|
||
1DEADC3B000
|
unkown
|
page read and write
|
||
1DEADC79000
|
unkown
|
page read and write
|
||
1A9A1F50000
|
heap default
|
page read and write
|
||
7FF5B9C5C000
|
unkown
|
page readonly
|
||
28D45FD0000
|
unkown
|
page read and write
|
||
219B1E77000
|
unkown
|
page read and write
|
||
1FDA3C00000
|
unkown
|
page readonly
|
||
1A9A7460000
|
unkown
|
page readonly
|
||
7E6000
|
unkown
|
page readonly
|
||
7FF54A630000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
1A9A27C0000
|
unkown
|
page readonly
|
||
7FF54A625000
|
unkown
|
page readonly
|
||
7FF57CE09000
|
unkown
|
page readonly
|
||
1FDA4060000
|
unkown
|
page read and write
|
||
434000
|
unkown image
|
page readonly
|
||
7FF5AA03B000
|
unkown
|
page readonly
|
||
7FF4F13E3000
|
unkown
|
page readonly
|
||
7FF5AA766000
|
unkown
|
page readonly
|
||
43F000
|
unkown image
|
page read and write
|
||
7FF5C8727000
|
unkown
|
page readonly
|
||
1FDA3F90000
|
unkown
|
page readonly
|
||
28D462D0000
|
unkown
|
page readonly
|
||
1DEADE00000
|
unkown
|
page readonly
|
||
4C0000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1DEADC41000
|
unkown
|
page read and write
|
||
687000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
95D277E000
|
unkown
|
page read and write
|
||
7FF546502000
|
unkown
|
page readonly
|
||
6CE000
|
unkown
|
page read and write
|
||
13E0000
|
unkown
|
page read and write
|
||
7FF59927A000
|
unkown
|
page readonly
|
||
7FF54654F000
|
unkown
|
page readonly
|
||
1A9A2075000
|
unkown
|
page read and write
|
||
1A9A1F90000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF56212D000
|
unkown
|
page readonly
|
||
7FF5992DC000
|
unkown
|
page readonly
|
||
20F47813000
|
unkown
|
page read and write
|
||
7FF5622B7000
|
unkown
|
page readonly
|
||
22060908000
|
unkown
|
page read and write
|
||
7FF54A637000
|
unkown
|
page readonly
|
||
DD8E5FD000
|
unkown
|
page read and write
|
||
7FF54A347000
|
unkown
|
page readonly
|
||
1A9A77F0000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF5C8715000
|
unkown
|
page readonly
|
||
1FDA3A5C000
|
unkown
|
page read and write
|
||
28D46052000
|
unkown
|
page read and write
|
||
7FF54657C000
|
unkown
|
page readonly
|
||
441000
|
unkown image
|
page read and write
|
||
1DEADC62000
|
unkown
|
page read and write
|
||
7FF54A50C000
|
unkown
|
page readonly
|
||
1FDA3A13000
|
unkown
|
page read and write
|
||
43F000
|
unkown image
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
62C000
|
unkown
|
page read and write
|
||
1A9A7710000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A5A6000
|
unkown
|
page readonly
|
||
7FF562286000
|
unkown
|
page readonly
|
||
1DEADC3D000
|
unkown
|
page read and write
|
||
1A9A2913000
|
unkown
|
page read and write
|
||
1A9A1F60000
|
unkown
|
page readonly
|
||
1A9A75E0000
|
unkown
|
page read and write
|
||
7FF4F13C8000
|
unkown
|
page readonly
|
||
219B1E02000
|
unkown
|
page read and write
|
||
7FF54A5A2000
|
unkown
|
page readonly
|
||
1DEADC5F000
|
unkown
|
page read and write
|
||
7FF5C8789000
|
unkown
|
page readonly
|
||
7FF4F10CA000
|
unkown
|
page readonly
|
||
442000
|
unkown image
|
page readonly
|
||
19A000
|
unkown
|
page read and write
|
||
21FEA708000
|
unkown
|
page read and write
|
||
7FF59928E000
|
unkown
|
page readonly
|
||
ED0000
|
unkown
|
page read and write
|
||
7FF599250000
|
unkown
|
page readonly
|
||
7FF5C86F6000
|
unkown
|
page readonly
|
||
7FF4F1529000
|
unkown
|
page readonly
|
||
1DEADA60000
|
heap private
|
page read and write
|
||
219B2800000
|
unkown
|
page readonly
|
||
1A9A27F0000
|
unkown
|
page read and write
|
||
1FDA3A00000
|
unkown
|
page read and write
|
||
12E0000
|
unkown
|
page read and write
|
||
1A9A78B2000
|
unkown
|
page read and write
|
||
7FF4F154C000
|
unkown
|
page readonly
|
||
20F47913000
|
unkown
|
page read and write
|
||
7FF5AA6F0000
|
unkown
|
page readonly
|
||
7FF5B9BD2000
|
unkown
|
page readonly
|
||
7FF5C843E000
|
unkown
|
page readonly
|
||
7FF5B9CCE000
|
unkown
|
page readonly
|
||
1A9A7843000
|
unkown
|
page read and write
|
||
7FF5992C6000
|
unkown
|
page readonly
|
||
1A9A27B0000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A2013000
|
unkown
|
page read and write
|
||
7FF57CD86000
|
unkown
|
page readonly
|
||
442000
|
unkown image
|
page readonly
|
||
F70000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
442000
|
unkown image
|
page readonly
|
||
1A9A75E0000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5AA7F9000
|
unkown
|
page readonly
|
||
219B2000000
|
unkown
|
page readonly
|
||
1A62A7F000
|
unkown
|
page read and write
|
||
1FDA39C0000
|
unkown
|
page read and write
|
||
21FEA800000
|
unkown
|
page readonly
|
||
1A9A2092000
|
unkown
|
page read and write
|
||
7FF54638F000
|
unkown
|
page readonly
|
||
7FF4F1565000
|
unkown
|
page readonly
|
||
1A9A1EF0000
|
heap private
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
22060802000
|
unkown
|
page read and write
|
||
7FF54A690000
|
unkown
|
page readonly
|
||
1A9A7490000
|
unkown
|
page read and write
|
||
7FF54658C000
|
unkown
|
page readonly
|
||
7FF599359000
|
unkown
|
page readonly
|
||
7FF5B9BE8000
|
unkown
|
page readonly
|
||
7D0000
|
unkown
|
page read and write
|
||
2206084B000
|
unkown
|
page read and write
|
||
7FF57CE09000
|
unkown
|
page readonly
|
||
7FF5AA749000
|
unkown
|
page readonly
|
||
28D4604B000
|
unkown
|
page read and write
|
||
1A9A2802000
|
unkown
|
page read and write
|
||
7FF5C8781000
|
unkown
|
page readonly
|
||
1A9A7420000
|
unkown
|
page read and write
|
||
77A000
|
heap default
|
page read and write
|
||
20F47870000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A2800000
|
unkown
|
page read and write
|
||
756000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5C86AA000
|
unkown
|
page readonly
|
||
7FF5C8724000
|
unkown
|
page readonly
|
||
219B1E72000
|
unkown
|
page read and write
|
||
7FF54A43A000
|
unkown
|
page readonly
|
||
7FF5992F7000
|
unkown
|
page readonly
|
||
1FDA3A3D000
|
unkown
|
page read and write
|
||
7FF59907A000
|
unkown
|
page readonly
|
||
28D46000000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
170F4430000
|
heap private
|
page read and write
|
||
3BCAC7A000
|
unkown
|
page read and write
|
||
1FDA39F0000
|
unkown
|
page read and write
|
||
2B7000
|
unkown
|
page read and write
|
||
7FF598E50000
|
unkown
|
page readonly
|
||
7FF562269000
|
unkown
|
page readonly
|
||
7FF4F135F000
|
unkown
|
page readonly
|
||
7FF54A55B000
|
unkown
|
page readonly
|
||
9C000
|
unkown
|
page read and write
|
||
7FF561E0A000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5AA790000
|
unkown
|
page readonly
|
||
1A9A74A0000
|
unkown
|
page read and write
|
||
7FF549F0C000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
2A3E000
|
unkown
|
page read and write
|
||
1FDA39F0000
|
unkown
|
page read and write
|
||
7FF562222000
|
unkown
|
page readonly
|
||
667000
|
unkown
|
page read and write
|
||
7FF5992A9000
|
unkown
|
page readonly
|
||
1A9A2000000
|
unkown
|
page read and write
|
||
7FF54A634000
|
unkown
|
page readonly
|
||
7FF5C8615000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
20F47889000
|
unkown
|
page read and write
|
||
926497D000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
727000
|
heap default
|
page read and write
|
||
7FF546495000
|
unkown
|
page readonly
|
||
43C000
|
unkown image
|
page write copy
|
||
C80000
|
unkown
|
page readonly
|
||
22060913000
|
unkown
|
page read and write
|
||
7FF56218C000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
43C000
|
unkown image
|
page read and write
|
||
F90000
|
unkown
|
page readonly
|
||
1DEADC61000
|
unkown
|
page read and write
|
||
7FF599252000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF562226000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
9A72577000
|
unkown
|
page read and write
|
||
20F4787F000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
20F47630000
|
unkown
|
page readonly
|
||
DD8E0FE000
|
unkown
|
page read and write
|
||
2560000
|
heap private
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF546500000
|
unkown
|
page readonly
|
||
7FF4F1417000
|
unkown
|
page readonly
|
||
219B1D90000
|
heap default
|
page read and write
|
||
7FF54A61C000
|
unkown
|
page readonly
|
||
441000
|
unkown image
|
page read and write
|
||
7FF54A210000
|
unkown
|
page readonly
|
||
2206083C000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF54A2A6000
|
unkown
|
page readonly
|
||
7FF5622B4000
|
unkown
|
page readonly
|
||
434000
|
unkown image
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
28D4603C000
|
unkown
|
page read and write
|
||
7FF54A517000
|
unkown
|
page readonly
|
||
7FF4F1515000
|
unkown
|
page readonly
|
||
1A9A7710000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
460000
|
unkown
|
page readonly
|
||
3BCB47B000
|
unkown
|
page read and write
|
||
28D46002000
|
unkown
|
page read and write
|
||
7FF599268000
|
unkown
|
page readonly
|
||
219B1E00000
|
unkown
|
page read and write
|
||
7FF54A57C000
|
unkown
|
page readonly
|
||
28D46102000
|
unkown
|
page read and write
|
||
7FF562319000
|
unkown
|
page readonly
|
||
EA5C8EB000
|
unkown
|
page read and write
|
||
7FF5C8692000
|
unkown
|
page readonly
|
||
7FF56227D000
|
unkown
|
page readonly
|
||
7FF5AA73F000
|
unkown
|
page readonly
|
||
EA5CCF5000
|
unkown
|
page read and write
|
||
1DEADC56000
|
unkown
|
page read and write
|
||
28D46055000
|
unkown
|
page read and write
|
||
7FF546545000
|
unkown
|
page readonly
|
||
1A9A7850000
|
unkown
|
page read and write
|
||
7FF54A5A8000
|
unkown
|
page readonly
|
||
7FF54A588000
|
unkown
|
page readonly
|
||
2CE607D000
|
unkown
|
page read and write
|
||
22060680000
|
heap default
|
page read and write
|
||
AE0000
|
unkown
|
page readonly
|
||
7FF5B9CD9000
|
unkown
|
page readonly
|
||
1A9A7750000
|
unkown
|
page readonly
|
||
7FF5AA71A000
|
unkown
|
page readonly
|
||
1A6317F000
|
unkown
|
page read and write
|
||
7FF56224E000
|
unkown
|
page readonly
|
||
1A9A2113000
|
unkown
|
page read and write
|
||
21FEB340000
|
unkown
|
page readonly
|
||
2710000
|
heap private
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
3BCB2FE000
|
unkown
|
page read and write
|
||
AB0000
|
unkown
|
page readonly
|
||
1A9A75D4000
|
unkown
|
page read and write
|
||
3BCB07B000
|
unkown
|
page read and write
|
||
EE0000
|
heap private
|
page read and write
|
||
22060851000
|
unkown
|
page read and write
|
||
7FF54A5CE000
|
unkown
|
page readonly
|
||
28D4604F000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF4F13ED000
|
unkown
|
page readonly
|
||
7FF546609000
|
unkown
|
page readonly
|
||
1DEADC7A000
|
unkown
|
page read and write
|
||
1DEADC4E000
|
unkown
|
page read and write
|
||
7FF54A31C000
|
unkown
|
page readonly
|
||
1DEADC45000
|
unkown
|
page read and write
|
||
1A6307E000
|
unkown
|
page read and write
|
||
1A62C7D000
|
unkown
|
page read and write
|
||
3BCB27F000
|
unkown
|
page read and write
|
||
22061002000
|
unkown
|
page read and write
|
||
7FF54A460000
|
unkown
|
page readonly
|
||
2CE61FD000
|
unkown
|
page read and write
|
||
7FF562212000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
9C000
|
unkown
|
page read and write
|
||
7FF546256000
|
unkown
|
page readonly
|
||
1A9A2900000
|
unkown
|
page read and write
|
||
7FF599295000
|
unkown
|
page readonly
|
||
1DEADBC0000
|
unkown
|
page read and write
|
||
EF0000
|
unkown
|
page read and write
|
||
2CE62FE000
|
unkown
|
page read and write
|
||
7FF5B9893000
|
unkown
|
page readonly
|
||
80F000
|
unkown
|
page read and write
|
||
1920000
|
unkown
|
page read and write
|
||
21FEA650000
|
unkown
|
page read and write
|
||
7FF562108000
|
unkown
|
page readonly
|
||
BC0000
|
heap private
|
page read and write
|
||
1DEADC60000
|
unkown
|
page read and write
|
||
DD8E37E000
|
unkown
|
page read and write
|
||
19D000
|
unkown
|
page read and write
|
||
7FF54A606000
|
unkown
|
page readonly
|
||
7FF5C8680000
|
unkown
|
page readonly
|
||
21FEA63C000
|
unkown
|
page read and write
|
||
7FF54A44C000
|
unkown
|
page readonly
|
||
7FF5B9CD9000
|
unkown
|
page readonly
|
||
7FF5B9BD0000
|
unkown
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
7FF599351000
|
unkown
|
page readonly
|
||
7FF5992F0000
|
unkown
|
page readonly
|
||
43C000
|
unkown image
|
page write copy
|
||
1DEAE402000
|
unkown
|
page read and write
|
||
7FF4F15D1000
|
unkown
|
page readonly
|
||
1A9A1F70000
|
unkown
|
page readonly
|
||
21FEA602000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5AA51A000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF54A616000
|
unkown
|
page readonly
|
||
21FEA655000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF562319000
|
unkown
|
page readonly
|
||
1A9A1FF0000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
180E000
|
unkown
|
page read and write
|
||
2CE5F7C000
|
unkown
|
page read and write
|
||
74E000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF5C8450000
|
unkown
|
page readonly
|
||
62C000
|
unkown
|
page read and write
|
||
2DBF000
|
unkown
|
page read and write
|
||
170F42A0000
|
unkown
|
page read and write
|
||
7FF54A1D1000
|
unkown
|
page readonly
|
||
7FF599197000
|
unkown
|
page readonly
|
||
5EE000
|
unkown
|
page read and write
|
||
1FDA39B0000
|
unkown
|
page readonly
|
||
7FF5AA797000
|
unkown
|
page readonly
|
||
7FF5465FE000
|
unkown
|
page readonly
|
||
1A626FB000
|
unkown
|
page read and write
|
||
219B1E67000
|
unkown
|
page read and write
|
||
2CE5C7B000
|
unkown
|
page read and write
|
||
7E0000
|
unkown
|
page read and write
|
||
7FF5B9C77000
|
unkown
|
page readonly
|
||
1A9A75B8000
|
unkown
|
page read and write
|
||
4F5000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
22060620000
|
heap private
|
page read and write
|
||
1A9A2918000
|
unkown
|
page read and write
|
||
9DF000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A227000
|
unkown
|
page readonly
|
||
7FF599191000
|
unkown
|
page readonly
|
||
7FF5992BD000
|
unkown
|
page readonly
|
||
20F478BF000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1A9A2790000
|
unkown
|
page readonly
|
||
20F48000000
|
unkown
|
page readonly
|
||
1DEADBA0000
|
unkown
|
page readonly
|
||
7FF5C8528000
|
unkown
|
page readonly
|
||
7FF5AA75D000
|
unkown
|
page readonly
|
||
7FF54A68E000
|
unkown
|
page readonly
|
||
540000
|
heap default
|
page read and write
|
||
1A9A768C000
|
unkown
|
page readonly
|
||
20F48390000
|
unkown
|
page readonly
|
||
268D000
|
unkown
|
page read and write
|
||
1A9A782F000
|
unkown
|
page read and write
|
||
6E0000
|
unkown
|
page execute and read and write
|
||
27CF000
|
unkown
|
page read and write
|
||
7FF4F139E000
|
unkown
|
page readonly
|
||
43C000
|
unkown image
|
page write copy
|
||
656000
|
unkown
|
page read and write
|
||
7FF54A2D0000
|
unkown
|
page readonly
|
||
7FF598E4A000
|
unkown
|
page readonly
|
||
7FF56230E000
|
unkown
|
page readonly
|
||
1A9A7800000
|
unkown
|
page read and write
|
||
1A9A2959000
|
unkown
|
page read and write
|
||
442000
|
unkown image
|
page readonly
|
||
9C0000
|
heap private
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1DEADC74000
|
unkown
|
page read and write
|
||
7FF54A5DF000
|
unkown
|
page readonly
|
||
12E1000
|
unkown
|
page read and write
|
||
7FF54A592000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
5F0000
|
unkown
|
page readonly
|
||
7FF4F0E2C000
|
unkown
|
page readonly
|
||
4C4000
|
unkown
|
page read and write
|
||
1DEADC40000
|
unkown
|
page read and write
|
||
7FF57CD7C000
|
unkown
|
page readonly
|
||
7FF57CD18000
|
unkown
|
page readonly
|
||
1F0000
|
unkown
|
page read and write
|
||
7FF5461E2000
|
unkown
|
page readonly
|
||
1A9A22D0000
|
unkown
|
page readonly
|
||
153C000
|
unkown
|
page read and write
|
||
1A9A78AC000
|
unkown
|
page read and write
|
||
2C2000
|
unkown
|
page read and write
|
||
2B3F000
|
unkown
|
page read and write
|
||
BB0000
|
unkown
|
page execute and read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
170F41A8000
|
heap default
|
page read and write
|
||
219B1F13000
|
unkown
|
page read and write
|
||
460000
|
unkown
|
page read and write
|
||
1A9A2918000
|
unkown
|
page read and write
|
||
2EFC000
|
unkown
|
page read and write
|
||
7FF546595000
|
unkown
|
page readonly
|
||
17CF000
|
unkown
|
page read and write
|
||
2B1000
|
unkown
|
page read and write
|
||
4C4000
|
unkown
|
page read and write
|
||
20F47700000
|
unkown
|
page readonly
|
||
A50000
|
heap private
|
page read and write
|
||
7FF5C86C5000
|
unkown
|
page readonly
|
||
5E0000
|
heap default
|
page read and write
|
||
12E1000
|
unkown
|
page read and write
|
||
1DEADC6B000
|
unkown
|
page read and write
|
||
7FF4F150E000
|
unkown
|
page readonly
|
||
7FF57CD95000
|
unkown
|
page readonly
|
||
A20000
|
unkown
|
page readonly
|
||
750000
|
unkown
|
page read and write
|
||
7FF5C865A000
|
unkown
|
page readonly
|
||
7FF5C8696000
|
unkown
|
page readonly
|
||
7FF5AA039000
|
unkown
|
page readonly
|
||
1910000
|
unkown
|
page readonly
|
||
355000
|
unkown
|
page read and write
|
||
43C000
|
unkown image
|
page write copy
|
||
7FF546487000
|
unkown
|
page readonly
|
||
5AE000
|
unkown
|
page read and write
|
||
7FF54A3BB000
|
unkown
|
page readonly
|
||
53E000
|
unkown
|
page read and write
|
||
7FF54652A000
|
unkown
|
page readonly
|
||
9A71F6B000
|
unkown
|
page read and write
|
||
43C000
|
unkown image
|
page read and write
|
||
9264DFF000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7FF54A60C000
|
unkown
|
page readonly
|
||
90E000
|
unkown
|
page read and write
|
||
1A9A20FC000
|
unkown
|
page read and write
|
||
1DEADC5E000
|
unkown
|
page read and write
|
||
7FF546336000
|
unkown
|
page readonly
|
||
1DEADD02000
|
unkown
|
page read and write
|
||
20F47DB0000
|
unkown
|
page readonly
|
||
20F47E02000
|
unkown
|
page read and write
|
||
190C000
|
unkown
|
page read and write
|
||
7FF54A699000
|
unkown
|
page readonly
|
||
7FF5AA708000
|
unkown
|
page readonly
|
||
22060829000
|
unkown
|
page read and write
|
||
22060690000
|
unkown
|
page readonly
|
||
1A9A76F0000
|
unkown
|
page read and write
|
||
1FDA3A2A000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
1A9A75BE000
|
unkown
|
page read and write
|
There are 1062 hidden memdumps, click here to show them.