IOCReport

loading gif

Files

File Path
Type
Category
Malicious
8U5snojV8p.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Network\Downloader\edb.log
data
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage engine DataBase, version 0x620, checksum 0x2548ab78, page size 16384, DirtyShutdown, Windows version 10.0
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
data
modified
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\8U5snojV8p.exe
'C:\Users\user\Desktop\8U5snojV8p.exe'
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k NetworkService -p
malicious
C:\Windows\SysWOW64\dbgeng\Windows.System.Profile.RetailInfo.exe
C:\Windows\SysWOW64\dbgeng\Windows.System.Profile.RetailInfo.exe
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\SgrmBroker.exe
C:\Windows\system32\SgrmBroker.exe
clean
C:\Program Files\Windows Defender\MpCmdRun.exe
'C:\Program Files\Windows Defender\mpcmdrun.exe' -wdenable
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
There are 4 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://162.241.92.219:8080/YfyuG6sm3RqTIqU9gu/RiTaftnIbMGtd/UGb4JhQL57NsD/
162.241.92.219
malicious
http://212.51.142.238:8080/8eo0xZCOyvK/VXdfxUvyon7i/R
unknown
malicious
http://212.51.142.238:8080/8eo0xZCOyvK/VXdfxUvyon7i/
unknown
malicious
http://212.51.142.238:8080/8eo0xZCOyvK/VXdfxUvyon7i/0
unknown
malicious
http://schemas.m
unknown
clean
https://dev.ditu.live.com/REST/v1/Routes/
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Driving
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/x
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
unknown
clean
http://162.241.92.219:8080/YfyuG6sm3RqTIqU9gu/RiTaftnIbMGtd/UGb4JhQL57NsD/J=c
unknown
clean
http://79.98.24.39/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/
unknown
clean
https://t0.tiles.ditu.live.com/tiles/gen
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Walking
unknown
clean
http://91.231.166.124:8080/pvpiKpofI5CEEveCsq/H
unknown
clean
http://94.49.254.194/vHzRXBVyW/b13Sx2TCD/
unknown
clean
http://91.231.166.124:8080/pvpiKpofI5CEEveCsq/
unknown
clean
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
unknown
clean
http://94.49.254.194/vHzRXBVyW/b13Sx2TCD/n
unknown
clean
http://91.231.166.124:8080/pvpiKpofI5CEEveCsq/G
unknown
clean
https://dev.ditu.live.com/mapcontrol/logging.ashx
unknown
clean
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
unknown
clean
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
unknown
clean
https://activity.windows.comds
unknown
clean
http://91.231.166.124/pvpiKpofI5CEEveCsq/
unknown
clean
http://94.49.254.194/vHzRXBVyW/bm
unknown
clean
https://appexmapsappupdate.blob.core.windows.net
unknown
clean
http://www.bingmapsportal.com
unknown
clean
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
unknown
clean
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/E
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/
unknown
clean
http://schemas.xmlsoap.
unknown
clean
http://94.49.254.194d
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/0
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/
unknown
clean
http://crl.ver)
unknown
clean
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/04u%04u%04u%03u
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
unknown
clean
http://94.49.254.194
unknown
clean
https://%s.xboxlive.com
unknown
clean
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://dev.virtualearth.net/mapcontrol/logging.ashx
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
unknown
clean
http://79.98.24.39:8080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/#
unknown
clean
https://dynamic.t
unknown
clean
http://schemas.xmlsoap.org/ws/2004/09/enumeration/E
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Transit
unknown
clean
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
unknown
clean
https://activity.windows.com
unknown
clean
https://dev.ditu.live.com/REST/v1/Locations
unknown
clean
http://162.241.92.219:080/nqlXn6guO3P/JonayaNzsDdZJrNKjQ/
unknown
clean
https://%s.dnet.xboxlive.com
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
unknown
clean
There are 49 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
41.60.200.34
unknown
Mauritius
malicious
79.7.158.208
unknown
Italy
malicious
162.154.38.103
unknown
United States
malicious
201.173.217.124
unknown
Mexico
malicious
91.205.215.66
unknown
Netherlands
malicious
109.117.53.230
unknown
Italy
malicious
121.124.124.40
unknown
Korea Republic of
malicious
139.59.60.244
unknown
Singapore
malicious
169.239.182.217
unknown
South Africa
malicious
61.19.246.238
unknown
Thailand
malicious
190.108.228.62
unknown
Argentina
malicious
104.131.11.150
unknown
United States
malicious
176.111.60.55
unknown
Ukraine
malicious
168.235.67.138
unknown
United States
malicious
137.59.187.107
unknown
Hong Kong
malicious
95.9.185.228
unknown
Turkey
malicious
108.26.231.214
unknown
United States
malicious
24.1.189.87
unknown
United States
malicious
200.41.121.90
unknown
Argentina
malicious
93.51.50.171
unknown
Italy
malicious
116.203.32.252
unknown
Germany
malicious
5.196.74.210
unknown
France
malicious
87.106.139.101
unknown
Germany
malicious
79.98.24.39
unknown
Lithuania
malicious
200.55.243.138
unknown
Argentina
malicious
74.208.45.104
unknown
United States
malicious
162.241.92.219
unknown
United States
malicious
75.139.38.211
unknown
United States
malicious
31.31.77.83
unknown
Czech Republic
malicious
104.131.44.150
unknown
United States
malicious
87.106.136.232
unknown
Germany
malicious
62.75.141.82
unknown
Germany
malicious
153.126.210.205
unknown
Japan
malicious
91.231.166.124
unknown
Italy
malicious
210.165.156.91
unknown
Japan
malicious
37.139.21.175
unknown
Netherlands
malicious
124.45.106.173
unknown
Japan
malicious
73.11.153.178
unknown
United States
malicious
95.213.236.64
unknown
Russian Federation
malicious
209.182.216.177
unknown
United States
malicious
37.187.72.193
unknown
France
malicious
46.105.131.79
unknown
France
malicious
212.51.142.238
unknown
Switzerland
malicious
139.130.242.43
unknown
Australia
malicious
110.145.77.103
unknown
Australia
malicious
186.208.123.210
unknown
Brazil
malicious
190.160.53.126
unknown
Chile
malicious
81.2.235.111
unknown
Czech Republic
malicious
95.179.229.244
unknown
Netherlands
malicious
109.74.5.95
unknown
Sweden
malicious
91.211.88.52
unknown
Ukraine
malicious
62.138.26.28
unknown
Germany
malicious
94.49.254.194
unknown
Saudi Arabia
malicious
103.86.49.11
unknown
Thailand
malicious
190.55.181.54
unknown
Argentina
malicious
157.245.99.39
unknown
United States
malicious
209.141.54.221
unknown
United States
malicious
203.153.216.189
unknown
Indonesia
malicious
5.39.91.110
unknown
France
malicious
185.94.252.104
unknown
Germany
malicious
101.187.97.173
unknown
Australia
malicious
46.105.131.87
unknown
France
malicious
108.48.41.69
unknown
United States
malicious
104.236.246.93
unknown
United States
malicious
50.116.86.205
unknown
United States
malicious
78.24.219.147
unknown
Russian Federation
malicious
93.156.165.186
unknown
Spain
malicious
192.168.2.1
unknown
unknown
clean
127.0.0.1
unknown
unknown
clean
There are 59 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
C:\Windows\System32\svchost.exe
cval
malicious
C:\Windows\System32\svchost.exe
cval
malicious
C:\Windows\System32\svchost.exe
PerfMMFileName
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-100
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-101
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\dnsapi.dll,-103
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\NgcRecovery.dll,-100
clean
There are 1 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
C21000
unkown
page execute read
malicious
670000
unkown
page execute and read and write
malicious
781000
unkown
page execute read
malicious
770000
unkown
page execute and read and write
malicious
1D969580000
unkown image
page readonly
clean
498000
unkown image
page readonly
clean
7DF426F90000
unkown image
page readonly
clean
7FF580459000
unkown image
page readonly
clean
9797B7E000
unkown
page read and write
clean
1DFFAA00000
unkown image
page readonly
clean
7FF5B47E2000
unkown image
page readonly
clean
7FF53A8DA000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1842485A000
unkown
page read and write
clean
2F0E000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
F355CFB000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
5EE000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
196D15C0000
unkown image
page readonly
clean
34B0000
unkown
page read and write
clean
26E06E13000
unkown
page read and write
clean
7FF51371A000
unkown image
page readonly
clean
466000
unkown image
page readonly
clean
2672000
unkown
page read and write
clean
268E000
unkown
page read and write
clean
7FF553A19000
unkown image
page readonly
clean
179256B0000
heap default
page read and write
clean
2831000
unkown
page read and write
clean
7FF5B45F3000
unkown image
page readonly
clean
A90000
unkown image
page readonly
clean
17925913000
unkown
page read and write
clean
1842483B000
unkown
page read and write
clean
18424846000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
488000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
17925867000
unkown
page read and write
clean
2B42C028000
unkown
page read and write
clean
78E000
unkown
page read and write
clean
1DFFA4A0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF513483000
unkown image
page readonly
clean
7DF550280000
unkown image
page readonly
clean
7FF5137BB000
unkown image
page readonly
clean
7FF53A974000
unkown image
page readonly
clean
434000
unkown image
page write copy
clean
7FF50D9EA000
unkown image
page readonly
clean
98E000
unkown
page read and write
clean
7FF50DC10000
unkown image
page readonly
clean
26E06E02000
unkown
page read and write
clean
7FF580D9B000
unkown image
page readonly
clean
7FF580CC7000
unkown image
page readonly
clean
196D69A0000
unkown
page read and write
clean
7DF520202000
unkown image
page readonly
clean
2536000
unkown
page read and write
clean
7FF4F592B000
unkown image
page readonly
clean
488000
unkown image
page readonly
clean
184246E0000
unkown image
page read and write
clean
7DF569840000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
1DFFA480000
unkown image
page read and write
clean
196D1600000
unkown
page read and write
clean
196D2001000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
32C4000
unkown
page read and write
clean
7FF553A28000
unkown image
page readonly
clean
7FF513336000
unkown image
page readonly
clean
7FF4F5174000
unkown image
page readonly
clean
23C0000
heap private
page read and write
clean
1D968DE0000
unkown image
page readonly
clean
7FF5B45EA000
unkown image
page readonly
clean
7FF5B46CC000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FF4F58EF000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF587EE2000
unkown image
page readonly
clean
3F8000
unkown
page read and write
clean
18424730000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF580D96000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
434000
unkown image
page write copy
clean
7DF59D8F0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
1842486E000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF4F591E000
unkown image
page readonly
clean
26E06E29000
unkown
page read and write
clean
7FF4F581C000
unkown image
page readonly
clean
26E06D50000
unkown image
page readonly
clean
7FF553F34000
unkown image
page readonly
clean
488000
unkown image
page readonly
clean
7FF50DD2E000
unkown image
page readonly
clean
680000
heap default
page read and write
clean
7FF580D1A000
unkown image
page readonly
clean
7FF53A8A8000
unkown image
page readonly
clean
312E000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF580CD7000
unkown image
page readonly
clean
7FF4F5746000
unkown image
page readonly
clean
7FF5B4487000
unkown image
page readonly
clean
7FF50A713000
unkown image
page readonly
clean
196D1629000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
196D6A20000
unkown
page read and write
clean
300F000
unkown
page read and write
clean
1AB49CE0000
unkown image
page readonly
clean
23E0000
heap private
page read and write
clean
2831000
unkown
page read and write
clean
1D968DC0000
unkown image
page readonly
clean
1842487C000
unkown
page read and write
clean
7FF4F55F6000
unkown image
page readonly
clean
7FF53A98B000
unkown image
page readonly
clean
18424845000
unkown
page read and write
clean
1DFFAC80000
unkown
page read and write
clean
7DF5290E0000
unkown image
page readonly
clean
7DF59D902000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
196D1F00000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF587FFB000
unkown image
page readonly
clean
20AAD913000
unkown
page read and write
clean
7FF5136C3000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
F5D6F7B000
unkown
page read and write
clean
452487E000
unkown
page read and write
clean
18424874000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF587FCB000
unkown image
page readonly
clean
69A8A7F000
unkown
page read and write
clean
7FF50A818000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
1F7898C000
unkown
page read and write
clean
444000
unkown image
page read and write
clean
7DF467710000
unkown image
page readonly
clean
196D6E80000
unkown
page read and write
clean
A8F000
unkown
page read and write
clean
7FF50DC95000
unkown image
page readonly
clean
1AB497F0000
heap default
page read and write
clean
30000
unkown image
page read and write
clean
7FF4F5825000
unkown image
page readonly
clean
7FF580DCF000
unkown image
page readonly
clean
7DF5290D0000
unkown image
page readonly
clean
C29000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1D969013000
unkown
page read and write
clean
18424902000
unkown
page read and write
clean
7FF587ED4000
unkown image
page readonly
clean
196D25D0000
unkown image
page readonly
clean
226CB7E000
unkown
page read and write
clean
7FF5137BE000
unkown image
page readonly
clean
7FF5137AD000
unkown image
page readonly
clean
47E000
unkown image
page readonly
clean
1D969113000
unkown
page read and write
clean
7FF553F4B000
unkown image
page readonly
clean
32AA000
unkown
page read and write
clean
790000
heap default
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2B42BFC0000
unkown image
page readonly
clean
18425002000
unkown
page read and write
clean
7DF523660000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF59D910000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
196D6B84000
unkown
page read and write
clean
18424869000
unkown
page read and write
clean
7FF5B47D0000
unkown image
page readonly
clean
196D6B40000
unkown
page read and write
clean
18424AD0000
unkown image
page readonly
clean
69A81FC000
unkown
page read and write
clean
26E06E52000
unkown
page read and write
clean
452477F000
unkown
page read and write
clean
7FF513644000
unkown image
page readonly
clean
314F000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2B42C013000
unkown
page read and write
clean
7FF53A960000
unkown image
page readonly
clean
452427F000
unkown
page read and write
clean
196D14B0000
unkown image
page readonly
clean
B20000
unkown
page read and write
clean
7DF5502A0000
unkown image
page readonly
clean
1AB4A002000
unkown
page read and write
clean
7FF50A8D0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1F78C7E000
unkown
page read and write
clean
7FF513293000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1AB49800000
unkown
page read and write
clean
444000
unkown image
page read and write
clean
20AAD760000
heap default
page read and write
clean
447000
unkown image
page readonly
clean
1D968DB0000
heap private
page read and write
clean
1F78FFE000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
1842486C000
unkown
page read and write
clean
7FF4F58FE000
unkown image
page readonly
clean
7FF553D13000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
62E000
unkown
page read and write
clean
F5D6C7C000
unkown
page read and write
clean
196D6C99000
unkown
page read and write
clean
7FF50DD5F000
unkown image
page readonly
clean
7FF50A8CB000
unkown image
page readonly
clean
196D166F000
unkown
page read and write
clean
2FEE000
unkown
page read and write
clean
7FF4F592D000
unkown image
page readonly
clean
7DF5CA202000
unkown image
page readonly
clean
1AB49AD0000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
196D1713000
unkown
page read and write
clean
7DF5CA1F2000
unkown image
page readonly
clean
2B42BE90000
unkown image
page readonly
clean
7FF50A82D000
unkown image
page readonly
clean
A90000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1AB4984E000
unkown
page read and write
clean
18424841000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF5B47C0000
unkown image
page readonly
clean
7FF50DD1F000
unkown image
page readonly
clean
7FF50A835000
unkown image
page readonly
clean
226CA77000
unkown
page read and write
clean
26E06E00000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A466000
unkown image
page readonly
clean
97980F7000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1842485C000
unkown
page read and write
clean
7FF587FE4000
unkown image
page readonly
clean
2B42C023000
unkown
page read and write
clean
7FF4F583C000
unkown image
page readonly
clean
3C7000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF553C03000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2FAF000
unkown
page read and write
clean
17925D80000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7DF5966E0000
unkown image
page readonly
clean
18424CD0000
unkown image
page readonly
clean
7FF553E47000
unkown image
page readonly
clean
7FF4F573D000
unkown image
page readonly
clean
7FF513299000
unkown image
page readonly
clean
2B4F000
unkown
page read and write
clean
5C0000
heap default
page read and write
clean
18424834000
unkown
page read and write
clean
1D969400000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
DD00C7F000
unkown
page read and write
clean
7FF5B48FD000
unkown image
page readonly
clean
20AAD82A000
unkown
page read and write
clean
452417D000
unkown
page read and write
clean
196D1490000
unkown image
page readonly
clean
196D1B90000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
434000
unkown image
page write copy
clean
447000
unkown image
page readonly
clean
238E000
unkown
page read and write
clean
7DF50B220000
unkown image
page readonly
clean
1AB49913000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
196D1490000
unkown image
page readonly
clean
7DF550292000
unkown image
page readonly
clean
7FF5B48EE000
unkown image
page readonly
clean
196D2410000
unkown image
page read and write
clean
7FF5B4694000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
C40000
unkown
page read and write
clean
1DFFA4C0000
unkown image
page readonly
clean
5AE000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
18424E50000
unkown image
page readonly
clean
2530000
unkown
page read and write
clean
7FF5B4607000
unkown image
page readonly
clean
17925902000
unkown
page read and write
clean
7FF513713000
unkown image
page readonly
clean
2B42BE70000
unkown image
page read and write
clean
34B0000
unkown
page read and write
clean
7FF580AC8000
unkown image
page readonly
clean
196D1F02000
unkown
page read and write
clean
1F790FE000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50DD3D000
unkown image
page readonly
clean
258C000
unkown
page read and write
clean
2B42C590000
unkown image
page readonly
clean
42C000
unkown image
page readonly
clean
7FF587F43000
unkown image
page readonly
clean
7FF553F20000
unkown image
page readonly
clean
1842483D000
unkown
page read and write
clean
46D000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
69A84FC000
unkown
page read and write
clean
7FF587FEE000
unkown image
page readonly
clean
196D6EA0000
unkown
page read and write
clean
7DF5502A0000
unkown image
page readonly
clean
7DF569842000
unkown image
page readonly
clean
7DF5201F2000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
196D163D000
unkown
page read and write
clean
7FF50D40E000
unkown image
page readonly
clean
7FF4F5869000
unkown image
page readonly
clean
24F4000
unkown
page read and write
clean
7FF4F5914000
unkown image
page readonly
clean
2B42C056000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A8DD000
unkown image
page readonly
clean
88C000
heap default
page read and write
clean
789327F000
unkown
page read and write
clean
47E000
unkown image
page readonly
clean
69A897C000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7DF50B232000
unkown image
page readonly
clean
1AB49780000
unkown image
page read and write
clean
7FF553F3B000
unkown image
page readonly
clean
7DF520200000
unkown image
page readonly
clean
7FF5B45EC000
unkown image
page readonly
clean
196D1693000
unkown
page read and write
clean
2B42C102000
unkown
page read and write
clean
18D000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A6C3000
unkown image
page readonly
clean
196D6B61000
unkown
page read and write
clean
7FF5B48CB000
unkown image
page readonly
clean
196D2610000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A6EE000
unkown image
page readonly
clean
7FF5B480C000
unkown image
page readonly
clean
7FF5B3FBA000
unkown image
page readonly
clean
7FF50A7F7000
unkown image
page readonly
clean
7FF5B4774000
unkown image
page readonly
clean
7FF587F35000
unkown image
page readonly
clean
7FF5135E3000
unkown image
page readonly
clean
1DFFA5F0000
unkown
page read and write
clean
7FF4F53DF000
unkown image
page readonly
clean
7FF51361F000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
226C67E000
unkown
page read and write
clean
7DF569850000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF587E7E000
unkown image
page readonly
clean
7FF50A3D8000
unkown image
page readonly
clean
17925E60000
unkown image
page write copy
clean
7FFC2000
unkown image
page readonly
clean
7DF569852000
unkown image
page readonly
clean
20AAD710000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B482D000
unkown image
page readonly
clean
7DF569860000
unkown image
page readonly
clean
196D6A30000
unkown
page read and write
clean
7FF553E7D000
unkown image
page readonly
clean
7FF587CFD000
unkown image
page readonly
clean
2E6F000
unkown
page read and write
clean
7FF53A95B000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF587DC6000
unkown image
page readonly
clean
17925690000
unkown image
page readonly
clean
7DF5CA200000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF5137CB000
unkown image
page readonly
clean
69A867B000
unkown
page read and write
clean
1DFFA602000
unkown
page read and write
clean
1842487A000
unkown
page read and write
clean
196D1F13000
unkown
page read and write
clean
7DF4090F0000
unkown image
page readonly
clean
7FF51356D000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
F5D707B000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
26E072D0000
unkown image
page readonly
clean
7FF50DC42000
unkown image
page readonly
clean
18424859000
unkown
page read and write
clean
7FF50DD18000
unkown image
page readonly
clean
26E06DA0000
heap default
page read and write
clean
7FF512F36000
unkown image
page readonly
clean
196D16FD000
unkown
page read and write
clean
443000
unkown image
page write copy
clean
7DF494590000
unkown image
page readonly
clean
7FF50A8FF000
unkown image
page readonly
clean
20AAD83C000
unkown
page read and write
clean
196D6B70000
unkown
page read and write
clean
7FF4F5752000
unkown image
page readonly
clean
7FF587FB8000
unkown image
page readonly
clean
26E06E8B000
unkown
page read and write
clean
17925660000
unkown image
page readonly
clean
7FF513705000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
1AB4986F000
unkown
page read and write
clean
466000
unkown image
page readonly
clean
2B42C802000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50D866000
unkown image
page readonly
clean
196D1480000
heap private
page read and write
clean
7DF50B230000
unkown image
page readonly
clean
7FF5B45FD000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
18424842000
unkown
page read and write
clean
7FF580C90000
unkown image
page readonly
clean
26E06D40000
heap private
page read and write
clean
69A85FD000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
196D6EA0000
unkown
page read and write
clean
7FF553D9F000
unkown image
page readonly
clean
18424700000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7DF59D902000
unkown image
page readonly
clean
7FF50DD4E000
unkown image
page readonly
clean
7DF59D900000
unkown image
page readonly
clean
196D2993000
unkown
page read and write
clean
7FF5B48FB000
unkown image
page readonly
clean
1DFFA4D0000
unkown image
page readonly
clean
1D968DA0000
unkown image
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A74F000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7DF50B222000
unkown image
page readonly
clean
7FF50A8E4000
unkown image
page readonly
clean
20AAE002000
unkown
page read and write
clean
196D6D00000
unkown
page read and write
clean
7FF553E93000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2830000
unkown
page read and write
clean
18D000
unkown
page read and write
clean
7FF4F5827000
unkown image
page readonly
clean
7FF587EF3000
unkown image
page readonly
clean
B20000
unkown
page read and write
clean
7FF4F5812000
unkown image
page readonly
clean
2700000
heap private
page read and write
clean
401000
unkown image
page execute read
clean
7FF4F585D000
unkown image
page readonly
clean
9C000
unkown
page read and write
clean
20AAD740000
unkown image
page readonly
clean
7DF5CA210000
unkown image
page readonly
clean
196D2620000
unkown image
page readonly
clean
326E000
unkown
page read and write
clean
B20000
unkown
page read and write
clean
1F78CFE000
unkown
page read and write
clean
196D6C00000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
78935FF000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF5B4843000
unkown image
page readonly
clean
18424848000
unkown
page read and write
clean
17925C00000
unkown image
page readonly
clean
7FF50A8BF000
unkown image
page readonly
clean
630000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
DD011FE000
unkown
page read and write
clean
26E06E3C000
unkown
page read and write
clean
7DF5CA1F0000
unkown image
page readonly
clean
7FF553F0F000
unkown image
page readonly
clean
7DF5CA1F2000
unkown image
page readonly
clean
20AAD862000
unkown
page read and write
clean
1DFFA640000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF4F592F000
unkown image
page readonly
clean
7FF5136D7000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF5966C0000
unkown image
page readonly
clean
7FF580DCD000
unkown image
page readonly
clean
7FF50DCAA000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF50DC17000
unkown image
page readonly
clean
196D1625000
unkown
page read and write
clean
196D6C1F000
unkown
page read and write
clean
2ECF000
unkown
page read and write
clean
7FF5B4077000
unkown image
page readonly
clean
20AAD86F000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
C20000
unkown
page read and write
clean
196D1702000
unkown
page read and write
clean
DD0107D000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50DA76000
unkown image
page readonly
clean
7FF580DA0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
F355EFE000
unkown
page read and write
clean
17925870000
unkown
page read and write
clean
7FF5B47F7000
unkown image
page readonly
clean
20AADCD0000
unkown image
page readonly
clean
7DF59D910000
unkown image
page readonly
clean
7DF44E150000
unkown image
page readonly
clean
196D24F0000
unkown
page read and write
clean
7FF5132A8000
unkown image
page readonly
clean
7FF53A8C5000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
18424700000
unkown image
page readonly
clean
7DF5CA202000
unkown image
page readonly
clean
7FF50A7F3000
unkown image
page readonly
clean
18424860000
unkown
page read and write
clean
26E06E55000
unkown
page read and write
clean
7DF50B222000
unkown image
page readonly
clean
2692000
unkown
page read and write
clean
1DFFA800000
unkown image
page readonly
clean
286B000
unkown
page read and write
clean
7FF53A98F000
unkown image
page readonly
clean
7DF550292000
unkown image
page readonly
clean
23B0000
unkown image
page readonly
clean
196D6E60000
unkown
page read and write
clean
7FF5B40A5000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF553E5C000
unkown image
page readonly
clean
322F000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF4F56C2000
unkown image
page readonly
clean
18424863000
unkown
page read and write
clean
7FF53A8D3000
unkown image
page readonly
clean
20AADE50000
unkown image
page readonly
clean
7DF5CA210000
unkown image
page readonly
clean
7FF587D92000
unkown image
page readonly
clean
1D969602000
unkown
page read and write
clean
1842484E000
unkown
page read and write
clean
7FF4F5804000
unkown image
page readonly
clean
1AB49E60000
unkown image
page readonly
clean
7FF53A956000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B47D4000
unkown image
page readonly
clean
F355DF7000
unkown
page read and write
clean
18424720000
unkown image
page readonly
clean
7FF50A8FF000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
26E06D50000
unkown image
page readonly
clean
20AAD850000
unkown
page read and write
clean
26E06DB0000
unkown image
page readonly
clean
20AAD730000
unkown image
page readonly
clean
20AAD880000
unkown
page read and write
clean
2290000
unkown
page read and write
clean
97982FF000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
233E000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2B42C068000
unkown
page read and write
clean
18424750000
heap default
page read and write
clean
7FF587699000
unkown image
page readonly
clean
7FF50A839000
unkown image
page readonly
clean
DD00DFE000
unkown
page read and write
clean
7FF5B469D000
unkown image
page readonly
clean
1DFFA4F0000
heap default
page read and write
clean
2B42BEE0000
heap default
page read and write
clean
440000
unkown image
page write copy
clean
7DF421520000
unkown image
page readonly
clean
196D15F0000
unkown image
page read and write
clean
7FF53A8F5000
unkown image
page readonly
clean
196D6C2D000
unkown
page read and write
clean
7FF50DC99000
unkown image
page readonly
clean
7892F7A000
unkown
page read and write
clean
42C000
unkown image
page readonly
clean
7FF50D5A4000
unkown image
page readonly
clean
1AB49855000
unkown
page read and write
clean
7FF5B458A000
unkown image
page readonly
clean
46D000
unkown image
page readonly
clean
7FF553F16000
unkown image
page readonly
clean
26E06D30000
unkown image
page read and write
clean
7DF5201F0000
unkown image
page readonly
clean
26E070D0000
unkown image
page readonly
clean
2630000
unkown
page read and write
clean
7FF5136E8000
unkown image
page readonly
clean
7FF5137CF000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5535D9000
unkown image
page readonly
clean
42C000
unkown image
page readonly
clean
7FF580CB3000
unkown image
page readonly
clean
1842487D000
unkown
page read and write
clean
7FF50A8FB000
unkown image
page readonly
clean
1D969040000
unkown
page read and write
clean
7FF50DC4C000
unkown image
page readonly
clean
17925823000
unkown
page read and write
clean
7FF53A94F000
unkown image
page readonly
clean
7FF580CFD000
unkown image
page readonly
clean
1D968FE0000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
20AAD900000
unkown
page read and write
clean
7FF587F65000
unkown image
page readonly
clean
7DF5201F2000
unkown image
page readonly
clean
1D969075000
unkown
page read and write
clean
7FF50A066000
unkown image
page readonly
clean
304E000
unkown
page read and write
clean
20AADAD0000
unkown image
page readonly
clean
196D16B2000
unkown
page read and write
clean
196D1657000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A5B3000
unkown image
page readonly
clean
7FF587FFF000
unkown image
page readonly
clean
440000
unkown image
page write copy
clean
196D6C90000
unkown
page read and write
clean
26E06F13000
unkown
page read and write
clean
46D000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
F355A7F000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF553F4F000
unkown image
page readonly
clean
2B42C113000
unkown
page read and write
clean
196D6D02000
unkown
page read and write
clean
7FF5137CF000
unkown image
page readonly
clean
4523B3B000
unkown
page read and write
clean
69A887F000
unkown
page read and write
clean
3CB000
unkown
page read and write
clean
26E06DD0000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
250F000
unkown
page read and write
clean
7FF587F2D000
unkown image
page readonly
clean
196D1679000
unkown
page read and write
clean
7FF4F5823000
unkown image
page readonly
clean
7FF5B46B8000
unkown image
page readonly
clean
7FF5B47B0000
unkown image
page readonly
clean
196D6B70000
unkown
page read and write
clean
18424760000
unkown image
page readonly
clean
196D169E000
unkown
page read and write
clean
7DF550282000
unkown image
page readonly
clean
F355FFE000
unkown
page read and write
clean
7DF550280000
unkown image
page readonly
clean
196D1A00000
unkown image
page readonly
clean
7FF5B48CE000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
18424864000
unkown
page read and write
clean
7FF50A807000
unkown image
page readonly
clean
F355AFF000
unkown
page read and write
clean
196D1800000
unkown image
page readonly
clean
7FF5137B4000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF512F30000
unkown image
page readonly
clean
7FF587FFD000
unkown image
page readonly
clean
7FF580CDD000
unkown image
page readonly
clean
7FF553E9A000
unkown image
page readonly
clean
196D6CAB000
unkown
page read and write
clean
78B000
unkown
page readonly
clean
1AB49790000
heap private
page read and write
clean
2690000
unkown
page read and write
clean
452407E000
unkown
page read and write
clean
570000
unkown
page read and write
clean
1AB49829000
unkown
page read and write
clean
7FF5B44A4000
unkown image
page readonly
clean
7DF5290D2000
unkown image
page readonly
clean
69A7DBB000
unkown
page read and write
clean
685000
heap default
page read and write
clean
7FF5B47AD000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF5966D0000
unkown image
page readonly
clean
7FF553F2D000
unkown image
page readonly
clean
7FF587F39000
unkown image
page readonly
clean
18424832000
unkown
page read and write
clean
7FF580D88000
unkown image
page readonly
clean
7FF513709000
unkown image
page readonly
clean
C2B000
unkown
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B3FB0000
unkown image
page readonly
clean
C80000
unkown image
page readonly
clean
9C000
unkown
page read and write
clean
1DFFAB90000
unkown image
page readonly
clean
452437D000
unkown
page read and write
clean
7FF4F57AE000
unkown image
page readonly
clean
26E06E7D000
unkown
page read and write
clean
7FF5B47EC000
unkown image
page readonly
clean
7DF520202000
unkown image
page readonly
clean
1DFFAC90000
unkown
page read and write
clean
7FF50DC0D000
unkown image
page readonly
clean
1D968EF0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
F35579B000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7DF5290C0000
unkown image
page readonly
clean
7FF5B48C6000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
780000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF520210000
unkown image
page readonly
clean
18424802000
unkown
page read and write
clean
7FF580A86000
unkown image
page readonly
clean
7FF587FC6000
unkown image
page readonly
clean
7FF50A6CE000
unkown image
page readonly
clean
7FF50DC57000
unkown image
page readonly
clean
1D969200000
unkown image
page readonly
clean
9797FFB000
unkown
page read and write
clean
196D6CF0000
unkown
page read and write
clean
9797BFE000
unkown
page read and write
clean
26E07602000
unkown
page read and write
clean
7FF587F08000
unkown image
page readonly
clean
7FF513625000
unkown image
page readonly
clean
789307E000
unkown
page read and write
clean
17925843000
unkown
page read and write
clean
7FF553E85000
unkown image
page readonly
clean
2450000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
1D969029000
unkown
page read and write
clean
7DF5966C2000
unkown image
page readonly
clean
318E000
unkown
page read and write
clean
7FF4F57A4000
unkown image
page readonly
clean
498000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF5966D0000
unkown image
page readonly
clean
196D2971000
unkown
page read and write
clean
7DF550282000
unkown image
page readonly
clean
17926002000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7DF5966C2000
unkown image
page readonly
clean
7FF553F08000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF50DD44000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B4621000
unkown image
page readonly
clean
7FF50A843000
unkown image
page readonly
clean
1AB49CD0000
unkown image
page readonly
clean
196D6CFE000
unkown
page read and write
clean
226C87E000
unkown
page read and write
clean
1D969102000
unkown
page read and write
clean
F5D717B000
unkown
page read and write
clean
7DF523652000
unkown image
page readonly
clean
196D6C13000
unkown
page read and write
clean
47E000
unkown image
page readonly
clean
F5D727E000
unkown
page read and write
clean
7FF5B48DD000
unkown image
page readonly
clean
7FF4F5848000
unkown image
page readonly
clean
7FF553A13000
unkown image
page readonly
clean
7FF4F592F000
unkown image
page readonly
clean
7FF5B4737000
unkown image
page readonly
clean
7FF53A948000
unkown image
page readonly
clean
2B42BEC0000
unkown image
page readonly
clean
7FF5B4406000
unkown image
page readonly
clean
1DFFA490000
heap private
page read and write
clean
18424861000
unkown
page read and write
clean
18424840000
unkown
page read and write
clean
7FF50DC8D000
unkown image
page readonly
clean
7FF51378F000
unkown image
page readonly
clean
18424829000
unkown
page read and write
clean
196D6CAE000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
196D168C000
unkown
page read and write
clean
7FF53A72D000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF553DC4000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2EAE000
unkown
page read and write
clean
7FF51379B000
unkown image
page readonly
clean
196D6CE5000
unkown
page read and write
clean
196D6C3A000
unkown
page read and write
clean
69A837F000
unkown
page read and write
clean
7FF587DBC000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF50DC67000
unkown image
page readonly
clean
7FF553DA5000
unkown image
page readonly
clean
7FF53A19F000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF5B447A000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
25F4000
unkown
page read and write
clean
1842485F000
unkown
page read and write
clean
660000
heap private
page read and write
clean
2831000
unkown
page read and write
clean
17925650000
heap private
page read and write
clean
5C4000
unkown
page read and write
clean
7DF569852000
unkown image
page readonly
clean
1842486A000
unkown
page read and write
clean
7FF5B448F000
unkown image
page readonly
clean
7FF580A78000
unkown image
page readonly
clean
7FF50D891000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7DF520200000
unkown image
page readonly
clean
1D968DF0000
unkown image
page readonly
clean
3290000
unkown
page read and write
clean
7FF587FDD000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1DFFAB80000
unkown image
page readonly
clean
F5D6CFF000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50A80C000
unkown image
page readonly
clean
DD00CFD000
unkown
page read and write
clean
446000
unkown image
page write copy
clean
2831000
unkown
page read and write
clean
7FF553CED000
unkown image
page readonly
clean
1D968DC0000
unkown image
page readonly
clean
1792613A000
unkown
page read and write
clean
1DFFA702000
unkown
page read and write
clean
26E06D80000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
789317B000
unkown
page read and write
clean
1AB4984A000
unkown
page read and write
clean
7FF50A3C3000
unkown image
page readonly
clean
7FF50DBFD000
unkown image
page readonly
clean
226C7FC000
unkown
page read and write
clean
1DFFA5D0000
unkown image
page readonly
clean
1D968F00000
unkown image
page readonly
clean
7FF587DCF000
unkown image
page readonly
clean
196D6EA0000
unkown
page read and write
clean
7FF580B6D000
unkown image
page readonly
clean
7FF4F5837000
unkown image
page readonly
clean
20AAD822000
unkown
page read and write
clean
17925790000
unkown image
page readonly
clean
7DF5290C2000
unkown image
page readonly
clean
7DF59D8F0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
2B42BE90000
unkown image
page readonly
clean
17926100000
unkown
page read and write
clean
196D6CCA000
unkown
page read and write
clean
1DFFAC80000
unkown
page read and write
clean
7FF4F56CD000
unkown image
page readonly
clean
434000
unkown image
page write copy
clean
2831000
unkown
page read and write
clean
179258BE000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF51359E000
unkown image
page readonly
clean
7FF5B4865000
unkown image
page readonly
clean
26E06D70000
unkown image
page readonly
clean
2B42C200000
unkown image
page readonly
clean
226C3CB000
unkown
page read and write
clean
46D000
unkown image
page readonly
clean
1AB49902000
unkown
page read and write
clean
7FF50DD4B000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2B42C400000
unkown image
page readonly
clean
7FF50A8B8000
unkown image
page readonly
clean
7FF5B48E4000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
3FC000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FF587F18000
unkown image
page readonly
clean
7DF5290D2000
unkown image
page readonly
clean
440000
unkown image
page write copy
clean
1D96905B000
unkown
page read and write
clean
7892E79000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
18424813000
unkown
page read and write
clean
7DF50B232000
unkown image
page readonly
clean
443000
unkown image
page write copy
clean
2831000
unkown
page read and write
clean
196D14E0000
heap default
page read and write
clean
C70000
heap private
page read and write
clean
196D6B4E000
unkown
page read and write
clean
7FF5B48FF000
unkown image
page readonly
clean
196D1F59000
unkown
page read and write
clean
7FF553E57000
unkown image
page readonly
clean
196D29A0000
unkown
page read and write
clean
18424780000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF580D05000
unkown image
page readonly
clean
2B42C580000
unkown image
page readonly
clean
1DFFA620000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
26CE000
unkown
page read and write
clean
1AB49F50000
unkown
page read and write
clean
1AB49813000
unkown
page read and write
clean
18424867000
unkown
page read and write
clean
7FF553F4F000
unkown image
page readonly
clean
26E06E4B000
unkown
page read and write
clean
1D969000000
unkown
page read and write
clean
7DF523662000
unkown image
page readonly
clean
17925660000
unkown image
page readonly
clean
7FF4F548A000
unkown image
page readonly
clean
18424873000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF5B45F1000
unkown image
page readonly
clean
26E06E4F000
unkown
page read and write
clean
7FF587FD0000
unkown image
page readonly
clean
7FF50DC6C000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2B42C000000
unkown
page read and write
clean
20AAD84E000
unkown
page read and write
clean
7FF580D13000
unkown image
page readonly
clean
7FF580CA0000
unkown image
page readonly
clean
7FF5B48BF000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF5B48EB000
unkown image
page readonly
clean
7FF5B4430000
unkown image
page readonly
clean
2B42BE80000
heap private
page read and write
clean
196D15E0000
unkown
page read and write
clean
18424800000
unkown
page read and write
clean
7FF50DD2B000
unkown image
page readonly
clean
1DFFA629000
unkown
page read and write
clean
226C6FE000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF50DCC5000
unkown image
page readonly
clean
196D1E00000
unkown
page read and write
clean
196D6A40000
unkown
page read and write
clean
7FF587D07000
unkown image
page readonly
clean
7FF513593000
unkown image
page readonly
clean
7FF50DD26000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B45BE000
unkown image
page readonly
clean
7FF50DB2E000
unkown image
page readonly
clean
328C000
unkown
page read and write
clean
2B42C100000
unkown
page read and write
clean
1D969050000
unkown
page read and write
clean
179257B0000
unkown
page read and write
clean
20AAD813000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
196D6E70000
unkown
page read and write
clean
1AB4983C000
unkown
page read and write
clean
7FF4F58E8000
unkown image
page readonly
clean
7DF5966E0000
unkown image
page readonly
clean
196D6D03000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
196D1470000
unkown image
page read and write
clean
196D6E50000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
20AAD855000
unkown
page read and write
clean
196D6B40000
unkown
page read and write
clean
7DF5290C0000
unkown image
page readonly
clean
7FF4F5865000
unkown image
page readonly
clean
7FF5B4839000
unkown image
page readonly
clean
196D6CA0000
unkown
page read and write
clean
1D968E10000
heap default
page read and write
clean
1DFFA600000
unkown
page read and write
clean
2841000
unkown
page read and write
clean
7DF50B240000
unkown image
page readonly
clean
440000
unkown image
page write copy
clean
7DF523670000
unkown image
page readonly
clean
1AB4987D000
unkown
page read and write
clean
7FF587F4A000
unkown image
page readonly
clean
7FF50DCA3000
unkown image
page readonly
clean
7FF5B43AF000
unkown image
page readonly
clean
7FF5136FD000
unkown image
page readonly
clean
7DF5966D2000
unkown image
page readonly
clean
7FF5B40A9000
unkown image
page readonly
clean
196D1E15000
unkown
page read and write
clean
7DF59D8F2000
unkown image
page readonly
clean
7FF5B4818000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF523662000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF553E89000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF553D3E000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
EE0000
unkown image
page readonly
clean
268D000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
34B0000
unkown
page read and write
clean
69A877C000
unkown
page read and write
clean
7FF5136DC000
unkown image
page readonly
clean
7FF50A865000
unkown image
page readonly
clean
7892D78000
unkown
page read and write
clean
7FF4F5608000
unkown image
page readonly
clean
7DF550290000
unkown image
page readonly
clean
498000
unkown image
page readonly
clean
196D6C5F000
unkown
page read and write
clean
7FF5B484A000
unkown image
page readonly
clean
34AE000
unkown
page read and write
clean
78936FD000
unkown
page read and write
clean
7FF5B4807000
unkown image
page readonly
clean
1AB49900000
unkown
page read and write
clean
DD0117D000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
1DFFAC80000
unkown
page read and write
clean
17925A00000
unkown image
page readonly
clean
336C000
unkown
page read and write
clean
20AAD770000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF580DCF000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
196D2600000
unkown image
page readonly
clean
3DD000
unkown
page read and write
clean
7FF4F591B000
unkown image
page readonly
clean
196D25E0000
unkown image
page readonly
clean
97981FF000
unkown
page read and write
clean
446000
unkown image
page write copy
clean
2831000
unkown
page read and write
clean
196D6C47000
unkown
page read and write
clean
447000
unkown image
page readonly
clean
B50000
heap private
page read and write
clean
2831000
unkown
page read and write
clean
7FF5137A0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF5966C0000
unkown image
page readonly
clean
452457F000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
447000
unkown image
page readonly
clean
196D6B80000
unkown
page read and write
clean
3D7000
unkown
page read and write
clean
7FF50DAD7000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1AB497A0000
unkown image
page readonly
clean
1AB497C0000
unkown image
page readonly
clean
7DF59D900000
unkown image
page readonly
clean
7DF523650000
unkown image
page readonly
clean
7FF50A8EB000
unkown image
page readonly
clean
7FF553E68000
unkown image
page readonly
clean
179258CF000
unkown
page read and write
clean
18424844000
unkown
page read and write
clean
7FF53A97B000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF50A8C6000
unkown image
page readonly
clean
7FF5B46B3000
unkown image
page readonly
clean
196D14C0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
47E000
unkown image
page readonly
clean
7FF513735000
unkown image
page readonly
clean
26E06F00000
unkown
page read and write
clean
17925829000
unkown
page read and write
clean
196D6CF6000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF5B48FF000
unkown image
page readonly
clean
7FF587FFF000
unkown image
page readonly
clean
7DF5966D2000
unkown image
page readonly
clean
7FF580D35000
unkown image
page readonly
clean
7FF53A97E000
unkown image
page readonly
clean
7FF5B47B7000
unkown image
page readonly
clean
443000
unkown image
page write copy
clean
78932FF000
unkown
page read and write
clean
226CC7F000
unkown
page read and write
clean
7FF4F548E000
unkown image
page readonly
clean
2B42C03E000
unkown
page read and write
clean
78934FF000
unkown
page read and write
clean
1DFFAE02000
unkown
page read and write
clean
7DF5290D0000
unkown image
page readonly
clean
1AB49888000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
2642000
unkown
page read and write
clean
7FF587F0C000
unkown image
page readonly
clean
7FF580DBE000
unkown image
page readonly
clean
7FF5B4623000
unkown image
page readonly
clean
7FF513796000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
1AB497A0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF553F1B000
unkown image
page readonly
clean
789297B000
unkown
page read and write
clean
1AB49850000
unkown
page read and write
clean
7FF50DD5D000
unkown image
page readonly
clean
7DF523652000
unkown image
page readonly
clean
D60000
unkown image
page readonly
clean
F355BFB000
unkown
page read and write
clean
3E3000
unkown
page read and write
clean
7FF587694000
unkown image
page readonly
clean
7FF553D63000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF4C80C0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7DF569842000
unkown image
page readonly
clean
25F7000
unkown
page read and write
clean
7FF4F587A000
unkown image
page readonly
clean
20AAD710000
unkown image
page readonly
clean
9797EFB000
unkown
page read and write
clean
4523F7B000
unkown
page read and write
clean
26E06F08000
unkown
page read and write
clean
196D1F18000
unkown
page read and write
clean
7FF4F5493000
unkown image
page readonly
clean
196D1F59000
unkown
page read and write
clean
18424879000
unkown
page read and write
clean
7FF5B4835000
unkown image
page readonly
clean
789347D000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF50A3C9000
unkown image
page readonly
clean
196D69B0000
unkown
page read and write
clean
789000
unkown
page read and write
clean
196D2990000
unkown
page read and write
clean
18424857000
unkown
page read and write
clean
2B42C079000
unkown
page read and write
clean
7DF41E0C0000
unkown image
page readonly
clean
2B42C002000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
20AAD6F0000
unkown image
page read and write
clean
2831000
unkown
page read and write
clean
EF0000
unkown image
page readonly
clean
790000
heap default
page read and write
clean
69A847E000
unkown
page read and write
clean
179258CC000
unkown
page read and write
clean
226C97B000
unkown
page read and write
clean
7FF5B47F3000
unkown image
page readonly
clean
7DF50B220000
unkown image
page readonly
clean
7DF523650000
unkown image
page readonly
clean
179258E2000
unkown
page read and write
clean
7FF513788000
unkown image
page readonly
clean
7FF580DAD000
unkown image
page readonly
clean
3E6000
unkown
page read and write
clean
7DF569860000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B444F000
unkown image
page readonly
clean
C10000
unkown image
page readonly
clean
17925800000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7DF569850000
unkown image
page readonly
clean
329F000
unkown
page read and write
clean
26E07450000
unkown image
page readonly
clean
1792588A000
unkown
page read and write
clean
7FF587D9D000
unkown image
page readonly
clean
1AB49908000
unkown
page read and write
clean
196D6B48000
unkown
page read and write
clean
7FF53A887000
unkown image
page readonly
clean
7FF553F3E000
unkown image
page readonly
clean
7FF5B4480000
unkown image
page readonly
clean
7FF580DBB000
unkown image
page readonly
clean
2DCE000
unkown
page read and write
clean
7FF587FBF000
unkown image
page readonly
clean
7FF587FEB000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
196D1B80000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
DD00F7E000
unkown
page read and write
clean
7FF5B47D8000
unkown image
page readonly
clean
7FF4F5895000
unkown image
page readonly
clean
25B2000
unkown
page read and write
clean
34AC000
unkown
page read and write
clean
443000
unkown image
page write copy
clean
18424862000
unkown
page read and write
clean
7DF5CA200000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF50A8EE000
unkown image
page readonly
clean
7FF50A774000
unkown image
page readonly
clean
17925D90000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
452447E000
unkown
page read and write
clean
7DF59D8F2000
unkown image
page readonly
clean
30EF000
unkown
page read and write
clean
1F78EFE000
unkown
page read and write
clean
196D6E10000
unkown
page read and write
clean
79A000
heap default
page read and write
clean
2B42BFE0000
unkown
page read and write
clean
789337E000
unkown
page read and write
clean
7FF580D09000
unkown image
page readonly
clean
7DF550290000
unkown image
page readonly
clean
7FF53A643000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
17925680000
unkown image
page readonly
clean
7DF50B230000
unkown image
page readonly
clean
7FF50A755000
unkown image
page readonly
clean
7FF5135BE000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF4F58F6000
unkown image
page readonly
clean
DD00EFD000
unkown
page read and write
clean
7FF587C8A000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF5B48B8000
unkown image
page readonly
clean
7FF50A060000
unkown image
page readonly
clean
488000
unkown image
page readonly
clean
196D6B64000
unkown
page read and write
clean
466000
unkown image
page readonly
clean
1D969002000
unkown
page read and write
clean
2B42BEB0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
2A2E000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
196D25F0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF587EEC000
unkown image
page readonly
clean
20AAD902000
unkown
page read and write
clean
18424858000
unkown
page read and write
clean
7FF50A69D000
unkown image
page readonly
clean
466000
unkown image
page readonly
clean
24B2000
unkown
page read and write
clean
79A000
heap default
page read and write
clean
42C000
unkown image
page readonly
clean
7FF50DD5F000
unkown image
page readonly
clean
196D16A0000
unkown
page read and write
clean
26E06E4E000
unkown
page read and write
clean
196D1674000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
18424883000
unkown
page read and write
clean
196D1613000
unkown
page read and write
clean
1842485D000
unkown
page read and write
clean
17925640000
unkown image
page read and write
clean
2831000
unkown
page read and write
clean
7FF587EF7000
unkown image
page readonly
clean
7DF5CA1F0000
unkown image
page readonly
clean
20AAD84A000
unkown
page read and write
clean
7FF53A89C000
unkown image
page readonly
clean
1DFFA613000
unkown
page read and write
clean
7FF5B4474000
unkown image
page readonly
clean
196D1F18000
unkown
page read and write
clean
2692000
unkown
page read and write
clean
20AAD790000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
26E06F02000
unkown
page read and write
clean
498000
unkown image
page readonly
clean
2B42C06F000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF4F4FD6000
unkown image
page readonly
clean
7FF4F590D000
unkown image
page readonly
clean
7DF523660000
unkown image
page readonly
clean
1792586A000
unkown
page read and write
clean
DD007AB000
unkown
page read and write
clean
7FF553D1E000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7DF5201F0000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
20AAD700000
heap private
page read and write
clean
7FF5B4650000
unkown image
page readonly
clean
196D1677000
unkown
page read and write
clean
7DF523670000
unkown image
page readonly
clean
7FF50A84A000
unkown image
page readonly
clean
7FF5B474F000
unkown image
page readonly
clean
7FF53A8BD000
unkown image
page readonly
clean
33AE000
unkown
page read and write
clean
452467E000
unkown
page read and write
clean
18424878000
unkown
page read and write
clean
7FF5B45B9000
unkown image
page readonly
clean
2831000
unkown
page read and write
clean
7FF4F58FB000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF580DB4000
unkown image
page readonly
clean
7FF4F5873000
unkown image
page readonly
clean
7FF553EB5000
unkown image
page readonly
clean
7FF53A98F000
unkown image
page readonly
clean
20AAD800000
unkown
page read and write
clean
7FF53A8C9000
unkown image
page readonly
clean
1DFFA4A0000
unkown image
page readonly
clean
20AAD908000
unkown
page read and write
clean
7DF50B240000
unkown image
page readonly
clean
7DF569840000
unkown image
page readonly
clean
789357E000
unkown
page read and write
clean
196D6B60000
unkown
page read and write
clean
196D1E02000
unkown
page read and write
clean
196D6CFC000
unkown
page read and write
clean
7FF50DC64000
unkown image
page readonly
clean
17925813000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
1AB497D0000
unkown image
page readonly
clean
26E06E71000
unkown
page read and write
clean
2831000
unkown
page read and write
clean
7FF580D8F000
unkown image
page readonly
clean
78938FE000
unkown
page read and write
clean
7FF5136C7000
unkown image
page readonly
clean
7FF553E43000
unkown image
page readonly
clean
7DF520210000
unkown image
page readonly
clean
9797AFB000
unkown
page read and write
clean
184246F0000
heap private
page read and write
clean
7DF5290E0000
unkown image
page readonly
clean
7DF49B7C0000
unkown image
page readonly
clean
7DF5290C2000
unkown image
page readonly
clean
1DFFA65C000
unkown
page read and write
clean
17926113000
unkown
page read and write
clean
There are 1248 hidden memdumps, click here to show them.