IOCReport

loading gif

Files

File Path
Type
Category
Malicious
QuotationInvoices.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Roaming\remcos\logs.dat
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Temp\nsc875C.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\nsh872C.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\okqry.a
data
dropped
clean
C:\Users\user\AppData\Local\Temp\xmtfn.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\QuotationInvoices.exe
'C:\Users\user\Desktop\QuotationInvoices.exe'
malicious
C:\Users\user\Desktop\QuotationInvoices.exe
'C:\Users\user\Desktop\QuotationInvoices.exe'
malicious

URLs

Name
IP
Malicious
greatglass.servebeer.com
malicious
http://nsis.sf.net/NSIS_Error
unknown
clean
http://nsis.sf.net/NSIS_ErrorError
unknown
clean

Domains

Name
IP
Malicious
greatglass.servebeer.com
194.5.97.248
malicious

IPs

IP
Domain
Country
Active
Malicious
194.5.97.248
unknown
Netherlands
unknown
malicious
192.168.2.1
unknown
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Users\user\Desktop\QuotationInvoices.exe
exepath
clean
C:\Users\user\Desktop\QuotationInvoices.exe
licence
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
400000
unkown image
page execute and read and write
malicious
2A70000
unkown
page read and write
malicious
487000
heap default
page read and write
malicious
400000
unkown
page execute and read and write
malicious
7FF5D6D0D000
unkown
page readonly
clean
7FF5C3BF0000
unkown
page readonly
clean
17D1BD9B000
unkown
page read and write
clean
7FF5C3E6A000
unkown
page readonly
clean
19004202000
unkown
page read and write
clean
17D1B63A000
unkown
page read and write
clean
2329A471000
unkown
page read and write
clean
17D1C180000
unkown
page readonly
clean
17D1BD86000
unkown
page read and write
clean
7FF5155C7000
unkown
page readonly
clean
ECCFF7C000
unkown
page read and write
clean
36C000
unkown
page read and write
clean
7FF504784000
unkown
page readonly
clean
21A6388C000
unkown
page read and write
clean
1AA84E00000
unkown
page read and write
clean
21A61613000
unkown
page read and write
clean
26041F00000
unkown
page read and write
clean
6001F7E000
unkown
page read and write
clean
278C37D0000
unkown
page readonly
clean
20DE000
unkown
page read and write
clean
7FF589FB6000
unkown
page readonly
clean
B885DEE000
unkown
page read and write
clean
21A6371D000
unkown
page read and write
clean
7FF537CE7000
unkown
page readonly
clean
7FF55FB3C000
unkown
page readonly
clean
7FF5C3EE6000
unkown
page readonly
clean
17D1BD84000
unkown
page read and write
clean
21A64210000
unkown
page read and write
clean
10001000
unkown image
page execute read
clean
17D1B63C000
unkown
page read and write
clean
7FF589A51000
unkown
page readonly
clean
21A63520000
unkown
page readonly
clean
2C06000
unkown
page read and write
clean
7FF589EBA000
unkown
page readonly
clean
7FF55F7DF000
unkown
page readonly
clean
7FF5046FF000
unkown
page readonly
clean
7FF537E6B000
unkown
page readonly
clean
7FF50459E000
unkown
page readonly
clean
7FF504266000
unkown
page readonly
clean
7FF5E6CC2000
unkown
page readonly
clean
7FF55FB64000
unkown
page readonly
clean
19350FB000
unkown
page read and write
clean
7FF55FBF4000
unkown
page readonly
clean
7FF55F7CC000
unkown
page readonly
clean
17D1BD72000
unkown
page read and write
clean
19003A2A000
unkown
page read and write
clean
278C33F1000
unkown
page read and write
clean
17D1BD69000
unkown
page read and write
clean
2329A3D0000
heap default
page read and write
clean
21A63070000
unkown
page read and write
clean
1F638F14000
unkown
page read and write
clean
7FF4F02CE000
unkown
page readonly
clean
40A000
unkown image
page write copy
clean
7FF515966000
unkown
page readonly
clean
21A63170000
unkown
page readonly
clean
7FF5D726B000
unkown
page readonly
clean
2E1F000
unkown
page read and write
clean
7FF55FB5A000
unkown
page readonly
clean
7FF561941000
unkown
page readonly
clean
260420D0000
unkown
page readonly
clean
378000
unkown
page read and write
clean
21A6166C000
unkown
page read and write
clean
7FF55FAB2000
unkown
page readonly
clean
7FF5D74AE000
unkown
page readonly
clean
7FF58A261000
unkown
page readonly
clean
7FF55FB86000
unkown
page readonly
clean
4D7000
unkown
page read and write
clean
17D1BD97000
unkown
page read and write
clean
1F638E71000
unkown
page read and write
clean
7FF515928000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
7FF5C3D13000
unkown
page readonly
clean
21A63716000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
17D1BD78000
unkown
page read and write
clean
7FF561A65000
unkown
page readonly
clean
21A6371A000
unkown
page read and write
clean
21E0000
unkown
page readonly
clean
5C4000
unkown
page read and write
clean
4C2000
unkown
page read and write
clean
2D9B000
unkown
page read and write
clean
19003A55000
unkown
page read and write
clean
17D1BDB6000
unkown
page read and write
clean
4D9000
unkown
page read and write
clean
7FF56172F000
unkown
page readonly
clean
1F638E13000
unkown
page read and write
clean
28AED970000
unkown
page readonly
clean
21A616A5000
unkown
page read and write
clean
17D1BD38000
unkown
page read and write
clean
7FF58A207000
unkown
page readonly
clean
7FF55FB1B000
unkown
page readonly
clean
17D1BD42000
unkown
page read and write
clean
4DC000
unkown
page read and write
clean
7FF515961000
unkown
page readonly
clean
17D1BD9B000
unkown
page read and write
clean
19003B08000
unkown
page read and write
clean
7FF504275000
unkown
page readonly
clean
7FF537B36000
unkown
page readonly
clean
7FF4F0663000
unkown
page readonly
clean
7FF504604000
unkown
page readonly
clean
21A61700000
unkown
page read and write
clean
7FF51593A000
unkown
page readonly
clean
17D1BD96000
unkown
page read and write
clean
7FF5C3EED000
unkown
page readonly
clean
26D337F000
unkown
page read and write
clean
7FF515711000
unkown
page readonly
clean
7FF5E6C3E000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
2C06000
unkown
page read and write
clean
21A64310000
unkown
page read and write
clean
21A617B4000
unkown
page read and write
clean
2210000
unkown
page readonly
clean
7FF561A8C000
unkown
page readonly
clean
ECD007C000
unkown
page read and write
clean
4CB000
unkown
page read and write
clean
2329A513000
unkown
page read and write
clean
7FF4F0377000
unkown
page readonly
clean
185C3029000
unkown
page read and write
clean
7FF5E6BFC000
unkown
page readonly
clean
5C0000
heap default
page read and write
clean
40A000
unkown image
page read and write
clean
1F639000000
unkown
page readonly
clean
17D1BD6A000
unkown
page read and write
clean
185C3B40000
unkown
page readonly
clean
7FF55FB81000
unkown
page readonly
clean
21A63781000
unkown
page read and write
clean
21A63760000
unkown
page read and write
clean
7FF537DC1000
unkown
page readonly
clean
21A637F9000
unkown
page read and write
clean
26041D20000
heap private
page read and write
clean
4DC000
unkown
page read and write
clean
21A64210000
unkown
page read and write
clean
21A61752000
unkown
page read and write
clean
21A616A1000
unkown
page read and write
clean
21A63786000
unkown
page read and write
clean
2329A471000
unkown
page read and write
clean
278C33A0000
heap private
page read and write
clean
278C340F000
unkown
page read and write
clean
17D1B6E9000
unkown
page read and write
clean
2B70000
unkown
page read and write
clean
7FF5E6C24000
unkown
page readonly
clean
21A63902000
unkown
page read and write
clean
7FF5159E2000
unkown
page readonly
clean
7FF5159E1000
unkown
page readonly
clean
7FF4F072B000
unkown
page readonly
clean
7DE000
unkown
page read and write
clean
7FF5046CC000
unkown
page readonly
clean
7FF58A244000
unkown
page readonly
clean
21A64110000
unkown
page read and write
clean
21A61678000
unkown
page read and write
clean
21A614D0000
heap private
page read and write
clean
21A63510000
unkown
page read and write
clean
21A617B8000
unkown
page read and write
clean
21A6371B000
unkown
page read and write
clean
438000
unkown image
page readonly
clean
4D6000
unkown
page read and write
clean
7FF5D750E000
unkown
page readonly
clean
4C8000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
7FF5046F4000
unkown
page readonly
clean
4C2000
unkown
page read and write
clean
17D1C202000
unkown
page read and write
clean
7FF5D73AB000
unkown
page readonly
clean
7FF561AD6000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
4D3000
unkown
page read and write
clean
7FF4F0851000
unkown
page readonly
clean
17D1BD98000
unkown
page read and write
clean
2200000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
7FF51595E000
unkown
page readonly
clean
26D2E7C000
unkown
page read and write
clean
7FF50469A000
unkown
page readonly
clean
7FF5E6C08000
unkown
page readonly
clean
3ADC7FB000
unkown
page read and write
clean
4D9000
unkown
page read and write
clean
B123B7E000
unkown
page read and write
clean
4D6000
unkown
page read and write
clean
7FF4F07D6000
unkown
page readonly
clean
2329A502000
unkown
page read and write
clean
7FF504716000
unkown
page readonly
clean
7FF561B44000
unkown
page readonly
clean
7FF55F411000
unkown
page readonly
clean
21A61680000
unkown
page read and write
clean
6001E7A000
unkown
page read and write
clean
8F0000
unkown
page readonly
clean
17D1BC02000
unkown
page read and write
clean
AF0000
unkown
page readonly
clean
21A61732000
unkown
page read and write
clean
7FF4F074C000
unkown
page readonly
clean
1AA84E50000
unkown
page read and write
clean
2329A413000
unkown
page read and write
clean
17D1BDA6000
unkown
page read and write
clean
7FF5C3EB4000
unkown
page readonly
clean
17D1BD8A000
unkown
page read and write
clean
17D1B6D1000
unkown
page read and write
clean
21A637E7000
unkown
page read and write
clean
7FF537FED000
unkown
page readonly
clean
1AA85800000
unkown
page readonly
clean
2E1F000
unkown
page read and write
clean
ECCFDFB000
unkown
page read and write
clean
185C303C000
unkown
page read and write
clean
7FF537CF0000
unkown
page readonly
clean
21A61680000
unkown
page read and write
clean
7FF5044F1000
unkown
page readonly
clean
7FF561ADD000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
7FF5E6C38000
unkown
page readonly
clean
278C35D0000
unkown
page readonly
clean
28AF000
stack
page read and write
clean
7FF4F084A000
unkown
page readonly
clean
21A61540000
unkown
page write copy
clean
ECCF6FF000
unkown
page read and write
clean
7FF589A4D000
unkown
page readonly
clean
1F638E02000
unkown
page read and write
clean
278C33D0000
unkown
page readonly
clean
17D1BD54000
unkown
page read and write
clean
7FF50468C000
unkown
page readonly
clean
17D1BD54000
unkown
page read and write
clean
7FF5E6CBA000
unkown
page readonly
clean
21A616E2000
unkown
page read and write
clean
ECD00FF000
unkown
page read and write
clean
7FF5D7518000
unkown
page readonly
clean
28AEBD80000
unkown
page write copy
clean
21A61600000
unkown
page read and write
clean
2D9F000
unkown
page read and write
clean
26D2EFE000
unkown
page read and write
clean
357837E000
unkown
page read and write
clean
7FF58A23A000
unkown
page readonly
clean
28AEC000000
unkown
page readonly
clean
5C4000
unkown
page read and write
clean
26041E6C000
unkown
page read and write
clean
7FF5158FB000
unkown
page readonly
clean
B8861FF000
unkown
page read and write
clean
17D1BD53000
unkown
page read and write
clean
7FF4F075A000
unkown
page readonly
clean
26041E54000
unkown
page read and write
clean
21A637DF000
unkown
page read and write
clean
42C000
unkown image
page read and write
clean
5C4000
unkown
page read and write
clean
2329BEC0000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
7FF5046CF000
unkown
page readonly
clean
4CB000
unkown
page read and write
clean
6FC51000
unkown image
page execute read
clean
21A61680000
unkown
page read and write
clean
1F638DF0000
unkown
page read and write
clean
17D1BD90000
unkown
page read and write
clean
17D1BD58000
unkown
page read and write
clean
7FF4F0061000
unkown
page readonly
clean
7FF58A269000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
40A000
unkown image
page write copy
clean
21A63717000
unkown
page read and write
clean
17D1BD54000
unkown
page read and write
clean
21A63602000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
2AF0000
unkown
page read and write
clean
7FF56181B000
unkown
page readonly
clean
7FF4F060A000
unkown
page readonly
clean
2D9F000
unkown
page read and write
clean
5C5000
unkown
page read and write
clean
26041E29000
unkown
page read and write
clean
1AA84D90000
unkown
page readonly
clean
7FF5D752D000
unkown
page readonly
clean
7FF5E6BDB000
unkown
page readonly
clean
185C304E000
unkown
page read and write
clean
7FF5E6465000
unkown
page readonly
clean
21A64210000
unkown
page read and write
clean
3EB000
unkown
page read and write
clean
A645C7E000
unkown
page read and write
clean
7FF55F7DA000
unkown
page readonly
clean
21A63832000
unkown
page read and write
clean
190039C0000
unkown
page read and write
clean
21A63710000
unkown
page read and write
clean
6001EFE000
unkown
page read and write
clean
4C8000
unkown
page read and write
clean
17D1BBB0000
unkown
page write copy
clean
7FF4F06CC000
unkown
page readonly
clean
7FF5C3E6E000
unkown
page readonly
clean
7FF5C3DBD000
unkown
page readonly
clean
19358F8000
unkown
page read and write
clean
7FF55F8E8000
unkown
page readonly
clean
7FF5E6C49000
unkown
page readonly
clean
ECD017B000
unkown
page read and write
clean
17D1BD65000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
ECCFC7A000
unkown
page read and write
clean
21A615E0000
unkown
page readonly
clean
1F638C20000
heap private
page read and write
clean
7FF5156B6000
unkown
page readonly
clean
2C80000
unkown
page read and write
clean
21A61530000
heap default
page read and write
clean
7FF5046D7000
unkown
page readonly
clean
7FF5D74B0000
unkown
page readonly
clean
235F000
stack
page read and write
clean
21A634B0000
unkown
page readonly
clean
7FF561A23000
unkown
page readonly
clean
7FF504791000
unkown
page readonly
clean
2329A46B000
unkown
page read and write
clean
7FF5D74DF000
unkown
page readonly
clean
7FF537FBA000
unkown
page readonly
clean
17D1BD51000
unkown
page read and write
clean
17D1C140000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
17D1B655000
unkown
page read and write
clean
21A618D0000
unkown
page readonly
clean
21A616D1000
unkown
page read and write
clean
21A637ED000
unkown
page read and write
clean
21A63884000
unkown
page read and write
clean
17D1B6C2000
unkown
page read and write
clean
7FF5C3E9F000
unkown
page readonly
clean
9D000
unkown
page read and write
clean
7FF5045ED000
unkown
page readonly
clean
7FF5046EA000
unkown
page readonly
clean
7FF58A011000
unkown
page readonly
clean
21A64210000
unkown
page read and write
clean
1AA84D20000
heap private
page read and write
clean
4C5000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
21A63753000
unkown
page read and write
clean
21A63779000
unkown
page read and write
clean
A64597B000
unkown
page read and write
clean
7FF4F00B3000
unkown
page readonly
clean
17D1BD8E000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
2970000
unkown
page read and write
clean
7FF55FB0E000
unkown
page readonly
clean
17D1C400000
unkown
page readonly
clean
A645DFE000
unkown
page read and write
clean
17D1BD42000
unkown
page read and write
clean
21A64110000
unkown
page read and write
clean
185C3070000
unkown
page read and write
clean
21A64110000
unkown
page read and write
clean
7FF5D75A1000
unkown
page readonly
clean
21A63747000
unkown
page read and write
clean
21A63982000
unkown
page read and write
clean
B88607A000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
7FF561B52000
unkown
page readonly
clean
26041E68000
unkown
page read and write
clean
1F638E71000
unkown
page read and write
clean
17D1B6BB000
unkown
page read and write
clean
35783FB000
unkown
page read and write
clean
7FF4F078C000
unkown
page readonly
clean
26D3277000
unkown
page read and write
clean
7FF5D716C000
unkown
page readonly
clean
7FF4F0641000
unkown
page readonly
clean
809DCF5000
unkown
page read and write
clean
7FF561AB4000
unkown
page readonly
clean
26041E6A000
unkown
page read and write
clean
7FF50471D000
unkown
page readonly
clean
1AA84F00000
unkown
page read and write
clean
7FF50469E000
unkown
page readonly
clean
21A61671000
unkown
page read and write
clean
7FF5D751E000
unkown
page readonly
clean
7FF5157D1000
unkown
page readonly
clean
7FF55FB15000
unkown
page readonly
clean
4DC000
unkown
page read and write
clean
21A63812000
unkown
page read and write
clean
21A64013000
unkown
page read and write
clean
21A616B2000
unkown
page read and write
clean
7FF5C3D6B000
unkown
page readonly
clean
5E0000
unkown
page readonly
clean
7FF58A049000
unkown
page readonly
clean
19003A4F000
unkown
page read and write
clean
21A63753000
unkown
page read and write
clean
4D2000
unkown
page read and write
clean
7FF561A60000
unkown
page readonly
clean
21A63800000
unkown
page read and write
clean
17D1B6A5000
unkown
page read and write
clean
7FF4F07B4000
unkown
page readonly
clean
7FF55F961000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
7FF4EFF78000
unkown
page readonly
clean
7FF55FA13000
unkown
page readonly
clean
21A638A5000
unkown
page read and write
clean
4C2000
unkown
page read and write
clean
7FF5158F5000
unkown
page readonly
clean
17D1BD84000
unkown
page read and write
clean
7FF537F6E000
unkown
page readonly
clean
21A63902000
unkown
page read and write
clean
185C306A000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
21A61800000
unkown
page readonly
clean
7FF561B4A000
unkown
page readonly
clean
26043970000
unkown
page readonly
clean
4DF000
unkown
page read and write
clean
2329A473000
unkown
page read and write
clean
2329A600000
unkown
page readonly
clean
3ADCB7E000
unkown
page read and write
clean
278C33F6000
heap default
page read and write
clean
7FF55F6E9000
unkown
page readonly
clean
21A6370D000
unkown
page read and write
clean
7FF5D72D1000
unkown
page readonly
clean
1AA84E7C000
unkown
page read and write
clean
26041D90000
unkown
page write copy
clean
21AE000
unkown
page read and write
clean
4D7000
unkown
page read and write
clean
1935A79000
unkown
page read and write
clean
7FF5C3D51000
unkown
page readonly
clean
3ADC87F000
unkown
page read and write
clean
7FF58A21F000
unkown
page readonly
clean
26041E69000
unkown
page read and write
clean
2D9B000
unkown
page read and write
clean
2E1B000
unkown
page read and write
clean
1F638DB0000
unkown
page readonly
clean
7FF55FA5D000
unkown
page readonly
clean
7FF56172A000
unkown
page readonly
clean
7FF4F073F000
unkown
page readonly
clean
185C3108000
unkown
page read and write
clean
21A64110000
unkown
page read and write
clean
7FF537F9F000
unkown
page readonly
clean
278C341E000
unkown
page read and write
clean
7FF55FC01000
unkown
page readonly
clean
1AA84DA0000
unkown
page readonly
clean
7FF537F70000
unkown
page readonly
clean
17D1B684000
unkown
page read and write
clean
185C3602000
unkown
page read and write
clean
278C340F000
unkown
page read and write
clean
24DE000
unkown
page read and write
clean
7FF4F0326000
unkown
page readonly
clean
6001CFE000
unkown
page read and write
clean
17D1BD32000
unkown
page read and write
clean
1F638F00000
unkown
page read and write
clean
7FF51591F000
unkown
page readonly
clean
2C80000
unkown
page read and write
clean
7FF5612C1000
unkown
page readonly
clean
26041E6A000
unkown
page read and write
clean
7FF5D74C7000
unkown
page readonly
clean
4C2000
unkown
page read and write
clean
21A63716000
unkown
page read and write
clean
17D1BE00000
unkown
page readonly
clean
809DDFB000
unkown
page read and write
clean
7FF5159D4000
unkown
page readonly
clean
21A637A3000
unkown
page read and write
clean
2329A471000
unkown
page read and write
clean
7FF5C3DC3000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
7FF55FA0B000
unkown
page readonly
clean
7FF561881000
unkown
page readonly
clean
7FF58A24E000
unkown
page readonly
clean
5C4000
unkown
page read and write
clean
28AEBD70000
heap default
page read and write
clean
7FF5C3EE9000
unkown
page readonly
clean
7FF4F05A1000
unkown
page readonly
clean
7FF561A98000
unkown
page readonly
clean
6FC55000
unkown image
page readonly
clean
7FF58A2DA000
unkown
page readonly
clean
7FF4F02D2000
unkown
page readonly
clean
21A61677000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
7FF5C3ECF000
unkown
page readonly
clean
A645CFA000
unkown
page read and write
clean
7FF537FE6000
unkown
page readonly
clean
17D1C202000
unkown
page read and write
clean
17D1BD97000
unkown
page read and write
clean
ECCF47B000
unkown
page read and write
clean
21A61671000
unkown
page read and write
clean
3ADC31D000
unkown
page read and write
clean
17D1BD60000
unkown
page read and write
clean
809D8CC000
unkown
page read and write
clean
21A63754000
unkown
page read and write
clean
19003A00000
unkown
page read and write
clean
26041E36000
unkown
page read and write
clean
7FF5E6523000
unkown
page readonly
clean
278C341F000
unkown
page read and write
clean
26041E6A000
unkown
page read and write
clean
21A63C00000
unkown
page readonly
clean
B123A79000
unkown
page read and write
clean
17D1BD60000
unkown
page read and write
clean
7FF55FB47000
unkown
page readonly
clean
21A6167C000
unkown
page read and write
clean
7FF58A1EA000
unkown
page readonly
clean
17D1BD7C000
unkown
page read and write
clean
7FF55F7E7000
unkown
page readonly
clean
7FF50468A000
unkown
page readonly
clean
7FF515934000
unkown
page readonly
clean
17D1BD96000
unkown
page read and write
clean
21A63716000
unkown
page read and write
clean
185C306A000
unkown
page read and write
clean
271F000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21A6377C000
unkown
page read and write
clean
7FF4F00B7000
unkown
page readonly
clean
7FF4F07C8000
unkown
page readonly
clean
28AEC0D0000
unkown
page readonly
clean
7FF4F06AD000
unkown
page readonly
clean
7FF5155BF000
unkown
page readonly
clean
4D5000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
7FF5C3EC4000
unkown
page readonly
clean
7FF4F0852000
unkown
page readonly
clean
17D1BD1E000
unkown
page read and write
clean
7FF58A1B3000
unkown
page readonly
clean
26041D80000
heap default
page read and write
clean
7FF537F87000
unkown
page readonly
clean
17D1B800000
unkown
page readonly
clean
19003A02000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
7FF55F969000
unkown
page readonly
clean
21A6379B000
unkown
page read and write
clean
4D6000
unkown
page read and write
clean
17D1BD54000
unkown
page read and write
clean
7FF538061000
unkown
page readonly
clean
278C33E0000
heap default
page read and write
clean
21A637F3000
unkown
page read and write
clean
21A616EE000
unkown
page read and write
clean
21A6379B000
unkown
page read and write
clean
17D1BD5F000
unkown
page read and write
clean
4DC000
unkown
page read and write
clean
5C5000
unkown
page read and write
clean
17D1B6D4000
unkown
page read and write
clean
17D1BD74000
unkown
page read and write
clean
19003A8A000
unkown
page read and write
clean
185C3000000
unkown
page read and write
clean
17D1BD62000
unkown
page read and write
clean
21A64000000
unkown
page read and write
clean
7FF537F5A000
unkown
page readonly
clean
7FF50460C000
unkown
page readonly
clean
2AF0000
unkown
page read and write
clean
7FF515958000
unkown
page readonly
clean
1AA84E8E000
unkown
page read and write
clean
1F63A7A0000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
17D1BD56000
unkown
page read and write
clean
17D1BD76000
unkown
page read and write
clean
590000
unkown
page readonly
clean
21A63843000
unkown
page read and write
clean
7FF537FD8000
unkown
page readonly
clean
21A6377F000
unkown
page read and write
clean
6001D7E000
unkown
page read and write
clean
26041E69000
unkown
page read and write
clean
7FF58A21C000
unkown
page readonly
clean
2C86000
unkown
page read and write
clean
7FF55FA56000
unkown
page readonly
clean
17D1B716000
unkown
page read and write
clean
7FF58A015000
unkown
page readonly
clean
7FF5155BA000
unkown
page readonly
clean
17D1BD80000
unkown
page read and write
clean
ECCF57E000
unkown
page read and write
clean
26041E00000
unkown
page read and write
clean
7FF5D74FA000
unkown
page readonly
clean
21A63715000
unkown
page read and write
clean
21A61773000
unkown
page read and write
clean
7FF537EC3000
unkown
page readonly
clean
7FF55FB27000
unkown
page readonly
clean
7FF55F951000
unkown
page readonly
clean
21A637F0000
unkown
page read and write
clean
1AA84E29000
unkown
page read and write
clean
4D9000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
26041E6A000
unkown
page read and write
clean
ECCFAFB000
unkown
page read and write
clean
17D1BD5C000
unkown
page read and write
clean
7FF4F0603000
unkown
page readonly
clean
1935B79000
unkown
page read and write
clean
21A63718000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF5618B9000
unkown
page readonly
clean
7FF5046AB000
unkown
page readonly
clean
7FF58A2E2000
unkown
page readonly
clean
2329A456000
unkown
page read and write
clean
7FF5045F3000
unkown
page readonly
clean
ECCF97B000
unkown
page read and write
clean
17D1B4E0000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
21A638A5000
unkown
page read and write
clean
7FF5C3F5A000
unkown
page readonly
clean
7FF58A234000
unkown
page readonly
clean
7FF4F04E0000
unkown
page readonly
clean
1F63A8A0000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
2971000
unkown
page read and write
clean
7FF5E6C4D000
unkown
page readonly
clean
1AA84E88000
unkown
page read and write
clean
35782FE000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
17D1C160000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
4D6000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
ECCF7FB000
unkown
page read and write
clean
7FF55FB54000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
7FF55F9F1000
unkown
page readonly
clean
21A617C8000
unkown
page read and write
clean
7FF504581000
unkown
page readonly
clean
25DF000
unkown
page read and write
clean
7FF515890000
unkown
page readonly
clean
7FF4F07CE000
unkown
page readonly
clean
17D1B5C0000
unkown
page readonly
clean
21A63A02000
unkown
page read and write
clean
7FF4F05B1000
unkown
page readonly
clean
17D1BD60000
unkown
page read and write
clean
7FF5C3BE7000
unkown
page readonly
clean
17D1B650000
unkown
page read and write
clean
185C3113000
unkown
page read and write
clean
7FF561AD1000
unkown
page readonly
clean
185C3055000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
2329A46D000
unkown
page read and write
clean
1F638C80000
heap default
page read and write
clean
3ADC29B000
unkown
page read and write
clean
185C304A000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
7FF55FB3F000
unkown
page readonly
clean
249F000
unkown
page read and write
clean
21A637F9000
unkown
page read and write
clean
7FF55F931000
unkown
page readonly
clean
17D1BD5C000
unkown
page read and write
clean
21A616BE000
unkown
page read and write
clean
10003000
unkown image
page execute and read and write
clean
7FF50459B000
unkown
page readonly
clean
19355F7000
unkown
page read and write
clean
7FF50478A000
unkown
page readonly
clean
7FF4F0375000
unkown
page readonly
clean
7FF537F6A000
unkown
page readonly
clean
7FF504719000
unkown
page readonly
clean
4C2000
unkown
page read and write
clean
41D000
unkown image
page read and write
clean
7FF515969000
unkown
page readonly
clean
1AA84E4B000
unkown
page read and write
clean
3ADC977000
unkown
page read and write
clean
4D2000
unkown
page read and write
clean
19003B00000
unkown
page read and write
clean
4CB000
unkown
page read and write
clean
28AEBD10000
heap private
page read and write
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
21A63747000
unkown
page read and write
clean
185C2E20000
heap default
page read and write
clean
19003C00000
unkown
page readonly
clean
21A6377A000
unkown
page read and write
clean
7FF58A266000
unkown
page readonly
clean
1F638E6F000
unkown
page read and write
clean
9C0000
heap private
page read and write
clean
7FF503EB8000
unkown
page readonly
clean
17D1BD64000
unkown
page read and write
clean
7FF58A190000
unkown
page readonly
clean
2329A720000
unkown
page readonly
clean
17D1B3A0000
heap private
page read and write
clean
21A637FB000
unkown
page read and write
clean
17D1B64E000
unkown
page read and write
clean
7FF4F07BF000
unkown
page readonly
clean
17D1B708000
unkown
page read and write
clean
7FF55FB7E000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
21A61678000
unkown
page read and write
clean
4D6000
unkown
page read and write
clean
809D9CE000
unkown
page read and write
clean
21A637FC000
unkown
page read and write
clean
1AA84E13000
unkown
page read and write
clean
21A637F8000
unkown
page read and write
clean
278C33A5000
heap private
page read and write
clean
7FF537FDE000
unkown
page readonly
clean
7FF55F8D6000
unkown
page readonly
clean
2D00000
unkown
page read and write
clean
17D1B6A6000
unkown
page read and write
clean
21A6388E000
unkown
page read and write
clean
17D1C170000
unkown
page read and write
clean
7FF5158EA000
unkown
page readonly
clean
17D1BDD3000
unkown
page read and write
clean
9D0000
unkown
page readonly
clean
7FF515749000
unkown
page readonly
clean
26041E69000
unkown
page read and write
clean
4CD000
unkown
page read and write
clean
7FF561885000
unkown
page readonly
clean
28AEBE00000
unkown
page read and write
clean
7FF5C368E000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
21A616BC000
unkown
page read and write
clean
7FF51591C000
unkown
page readonly
clean
7FF58A0EB000
unkown
page readonly
clean
17D1C160000
unkown
page read and write
clean
21A64310000
unkown
page read and write
clean
17D1BD98000
unkown
page read and write
clean
7FF58A1EE000
unkown
page readonly
clean
7FF561ACE000
unkown
page readonly
clean
6001DF9000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
A645D7A000
unkown
page read and write
clean
185C3800000
unkown
page readonly
clean
7FF4F0596000
unkown
page readonly
clean
368000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
2C86000
unkown
page read and write
clean
21A61629000
unkown
page read and write
clean
7FF589EBF000
unkown
page readonly
clean
21A63540000
unkown
page readonly
clean
21A63708000
unkown
page read and write
clean
2370000
unkown
page readonly
clean
435000
unkown image
page read and write
clean
17D1BD59000
unkown
page read and write
clean
7FF5D72D5000
unkown
page readonly
clean
7FF58A258000
unkown
page readonly
clean
17D1BD66000
unkown
page read and write
clean
17D1BD54000
unkown
page read and write
clean
7FF561ABE000
unkown
page readonly
clean
1AA84E56000
unkown
page read and write
clean
6FC50000
unkown image
page readonly
clean
28B0000
unkown
page readonly
clean
7FF55FB89000
unkown
page readonly
clean
1AA84F02000
unkown
page read and write
clean
1F638E6F000
unkown
page read and write
clean
7FF5D6D11000
unkown
page readonly
clean
7FF5D73B3000
unkown
page readonly
clean
278C340F000
unkown
page read and write
clean
ECCF5FA000
unkown
page read and write
clean
B8860F9000
unkown
page read and write
clean
7FF537FE9000
unkown
page readonly
clean
17D1C202000
unkown
page read and write
clean
4DC000
unkown
page read and write
clean
7FF504792000
unkown
page readonly
clean
7FF56171C000
unkown
page readonly
clean
1AA84F13000
unkown
page read and write
clean
7FF5158EE000
unkown
page readonly
clean
7FF58A2E1000
unkown
page readonly
clean
7FF5E6BD5000
unkown
page readonly
clean
B12375F000
unkown
page read and write
clean
21A63982000
unkown
page read and write
clean
26041E6A000
unkown
page read and write
clean
7FF4F0560000
unkown
page readonly
clean
7FF4F06B3000
unkown
page readonly
clean
21A616D5000
unkown
page read and write
clean
26041E69000
unkown
page read and write
clean
ECCF679000
unkown
page read and write
clean
17D1C150000
unkown
page readonly
clean
17D1B6F8000
unkown
page read and write
clean
190039B0000
unkown
page readonly
clean
7FF4F06C4000
unkown
page readonly
clean
27AF000
stack
page read and write
clean
3E7000
unkown
page read and write
clean
19003B02000
unkown
page read and write
clean
21A63717000
unkown
page read and write
clean
285F000
unkown
page read and write
clean
7FF561968000
unkown
page readonly
clean
2329A3E0000
unkown
page readonly
clean
21A63710000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
278C34E0000
unkown
page readonly
clean
7FF537E6E000
unkown
page readonly
clean
7FF5D717F000
unkown
page readonly
clean
7FF4F078F000
unkown
page readonly
clean
7FF55FADB000
unkown
page readonly
clean
193597E000
unkown
page read and write
clean
7FF537F7B000
unkown
page readonly
clean
19003B13000
unkown
page read and write
clean
2329A46E000
unkown
page read and write
clean
21A64110000
unkown
page read and write
clean
4CB000
unkown
page read and write
clean
26043870000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
3ADC39E000
unkown
page read and write
clean
7FF538062000
unkown
page readonly
clean
357847A000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
17D1BD54000
unkown
page read and write
clean
17D1B5D0000
unkown
page read and write
clean
7FF5C3CC1000
unkown
page readonly
clean
21A637F9000
unkown
page read and write
clean
28AEBF02000
unkown
page read and write
clean
7FF55F8CB000
unkown
page readonly
clean
5C4000
unkown
page read and write
clean
7FF5158B3000
unkown
page readonly
clean
278C35B0000
unkown
page read and write
clean
7FF5157F3000
unkown
page readonly
clean
7FF515944000
unkown
page readonly
clean
1AA85B40000
unkown
page readonly
clean
1F638E41000
unkown
page read and write
clean
7FF5C3A30000
unkown
page readonly
clean
7FF589FAB000
unkown
page readonly
clean
21A6377A000
unkown
page read and write
clean
21A637F9000
unkown
page read and write
clean
408000
unkown image
page readonly
clean
17D1C200000
unkown
page read and write
clean
225D000
unkown
page read and write
clean
26041F02000
unkown
page read and write
clean
17D1BD64000
unkown
page read and write
clean
7FF55FC02000
unkown
page readonly
clean
17D1BDA9000
unkown
page read and write
clean
21A61713000
unkown
page read and write
clean
7FF58A26D000
unkown
page readonly
clean
809D94E000
unkown
page read and write
clean
7FF504417000
unkown
page readonly
clean
4D5000
unkown
page read and write
clean
26041E6A000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
47E000
unkown
page read and write
clean
7FF537FC4000
unkown
page readonly
clean
21A615D0000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
278C3406000
unkown
page read and write
clean
ECCF4FE000
unkown
page read and write
clean
7FF561963000
unkown
page readonly
clean
7FF4F072F000
unkown
page readonly
clean
7FF4F0777000
unkown
page readonly
clean
17D1BD5A000
unkown
page read and write
clean
19003A70000
unkown
page read and write
clean
21A63900000
unkown
page read and write
clean
17D1B5F0000
unkown
page readonly
clean
2329A46F000
unkown
page read and write
clean
7FF5158F0000
unkown
page readonly
clean
2D9B000
unkown
page read and write
clean
21A64210000
unkown
page read and write
clean
7FF5D74AA000
unkown
page readonly
clean
17D1BD64000
unkown
page read and write
clean
261E000
unkown
page read and write
clean
26041DE0000
unkown
page readonly
clean
ECCFA7B000
unkown
page read and write
clean
21A63719000
unkown
page read and write
clean
221D000
unkown
page read and write
clean
21A638A5000
unkown
page read and write
clean
21A63778000
unkown
page read and write
clean
21A64010000
unkown
page read and write
clean
21A63A42000
unkown
page read and write
clean
7FF55FAA2000
unkown
page readonly
clean
7FF561A5E000
unkown
page readonly
clean
7FF4F051B000
unkown
page readonly
clean
1AA84E70000
unkown
page read and write
clean
ECCF9FD000
unkown
page read and write
clean
21D0000
unkown
page readonly
clean
7FF58A25E000
unkown
page readonly
clean
4C2000
unkown
page read and write
clean
17D1BD54000
unkown
page read and write
clean
7FF561A6B000
unkown
page readonly
clean
7FF537F75000
unkown
page readonly
clean
7FF58A0F8000
unkown
page readonly
clean
21A61735000
unkown
page read and write
clean
21DF000
unkown
page read and write
clean
7FF589EC7000
unkown
page readonly
clean
7FF55FBFA000
unkown
page readonly
clean
17D1B6AF000
unkown
page read and write
clean
7FF55FAB0000
unkown
page readonly
clean
ECCFEFB000
unkown
page read and write
clean
21A6377A000
unkown
page read and write
clean
7FF4F065E000
unkown
page readonly
clean
7FF55FAE4000
unkown
page readonly
clean
7FF55FB6E000
unkown
page readonly
clean
21A63942000
unkown
page read and write
clean
17D1C202000
unkown
page read and write
clean
17D1BD75000
unkown
page read and write
clean
7FF537FA7000
unkown
page readonly
clean
7FF58A0D1000
unkown
page readonly
clean
7FF4F02C2000
unkown
page readonly
clean
17D1BD38000
unkown
page read and write
clean
7FF5157EB000
unkown
page readonly
clean
17D1BD8E000
unkown
page read and write
clean
17D1BDAF000
unkown
page read and write
clean
17D1B68A000
unkown
page read and write
clean
17D1BD71000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
A645EFD000
unkown
page read and write
clean
17D1BD5F000
unkown
page read and write
clean
7FF5C3F62000
unkown
page readonly
clean
185C2F00000
unkown
page readonly
clean
B885D6E000
unkown
page read and write
clean
7FF4F0335000
unkown
page readonly
clean
2D9B000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
10008000
unkown image
page readonly
clean
7FF5C3D6E000
unkown
page readonly
clean
6FC50000
unkown image
page readonly
clean
239F000
unkown
page read and write
clean
21A637F9000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
21A64510000
unkown
page read and write
clean
1F638E29000
unkown
page read and write
clean
7FF561A02000
unkown
page readonly
clean
21A61680000
unkown
page read and write
clean
17D1BDA0000
unkown
page read and write
clean
28AEBE3F000
unkown
page read and write
clean
21A616EE000
unkown
page read and write
clean
17D1BDA0000
unkown
page read and write
clean
ECCFFFC000
unkown
page read and write
clean
17D1B600000
unkown
page read and write
clean
7FF4F07A4000
unkown
page readonly
clean
190039A0000
unkown
page readonly
clean
7FF5E6CB4000
unkown
page readonly
clean
3ADCA7F000
unkown
page read and write
clean
4DC000
unkown
page read and write
clean
17D1BD5E000
unkown
page read and write
clean
28AEDCC0000
unkown
page read and write
clean
9B000
unkown
page read and write
clean
7FF5155AC000
unkown
page readonly
clean
19003990000
heap default
page read and write
clean
1F638E71000
unkown
page read and write
clean
19003930000
heap private
page read and write
clean
6001C7B000
unkown
page read and write
clean
21A61680000
unkown
page read and write
clean
21A63753000
unkown
page read and write
clean
7FF515151000
unkown
page readonly
clean
21A616F6000
unkown
page read and write
clean
21A6379B000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
5C0000
unkown
page read and write
clean
193517E000
unkown
page read and write
clean
7FF55FAFA000
unkown
page readonly
clean
4D6000
unkown
page read and write
clean
7FF4F023E000
unkown
page readonly
clean
2329A473000
unkown
page read and write
clean
17D1B66F000
unkown
page read and write
clean
21A64510000
unkown
page read and write
clean
21A61671000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
26041E6A000
unkown
page read and write
clean
7FF51596D000
unkown
page readonly
clean
7FF5C3E75000
unkown
page readonly
clean
498000
heap default
page read and write
clean
21A61678000
unkown
page read and write
clean
21A6167E000
unkown
page read and write
clean
46E000
unkown image
page execute and read and write
clean
2329A402000
unkown
page read and write
clean
17D1B400000
heap default
page read and write
clean
1F638C90000
unkown
page readonly
clean
7FF5D7450000
unkown
page readonly
clean
7FF4F0797000
unkown
page readonly
clean
17D1BD15000
unkown
page read and write
clean
C90000
unkown
page readonly
clean
17D1B613000
unkown
page read and write
clean
7FF5E6C14000
unkown
page readonly
clean
17D1BD32000
unkown
page read and write
clean
1F638E71000
unkown
page read and write
clean
7FF537EDC000
unkown
page readonly
clean
21A63700000
unkown
page read and write
clean
2290000
heap private
page read and write
clean
21A6172D000
unkown
page read and write
clean
21B0000
unkown
page readonly
clean
185C3200000
unkown
page readonly
clean
7FF5C3E9C000
unkown
page readonly
clean
7FF4EFF7E000
unkown
page readonly
clean
2329A46D000
unkown
page read and write
clean
17D1C160000
unkown
page read and write
clean
19003CD0000
unkown
page readonly
clean
21A637BF000
unkown
page read and write
clean
21A634C0000
unkown
page read and write
clean
21A64410000
unkown
page read and write
clean
7FF515907000
unkown
page readonly
clean
7FF5C3A36000
unkown
page readonly
clean
7FF5046E4000
unkown
page readonly
clean
7FF5046B7000
unkown
page readonly
clean
7FF55F946000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
185C2E30000
unkown
page readonly
clean
19357FF000
unkown
page read and write
clean
21A616A1000
unkown
page read and write
clean
7FF55FB78000
unkown
page readonly
clean
2C80000
unkown
page read and write
clean
2329A43F000
unkown
page read and write
clean
21A616D5000
unkown
page read and write
clean
7FF5C3E87000
unkown
page readonly
clean
21A61783000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21C0000
unkown
page readonly
clean
7FF5D7529000
unkown
page readonly
clean
19351FE000
unkown
page read and write
clean
7FF503EBE000
unkown
page readonly
clean
ECCFE7A000
unkown
page read and write
clean
21A634C0000
unkown
page read and write
clean
4DC000
unkown
page read and write
clean
7FF5156AB000
unkown
page readonly
clean
2360000
heap private
page read and write
clean
17D1BD64000
unkown
page read and write
clean
21A63716000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
26041E13000
unkown
page read and write
clean
9C6000
heap private
page read and write
clean
7FF4EFFF5000
unkown
page readonly
clean
5C5000
unkown
page read and write
clean
21A63714000
unkown
page read and write
clean
4C2000
unkown
page read and write
clean
7FF5D74BB000
unkown
page readonly
clean
46E000
unkown
page execute and read and write
clean
7FF5D7391000
unkown
page readonly
clean
4D9000
unkown
page read and write
clean
7FF537F5C000
unkown
page readonly
clean
2E1F000
unkown
page read and write
clean
21A61676000
unkown
page read and write
clean
ECCFCFA000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
809DFFE000
unkown
page read and write
clean
17D1BD6F000
unkown
page read and write
clean
7FF51594E000
unkown
page readonly
clean
21A63716000
unkown
page read and write
clean
17D1B629000
unkown
page read and write
clean
7FF5C3E5C000
unkown
page readonly
clean
7FF5E6C2E000
unkown
page readonly
clean
480000
heap default
page read and write
clean
5C4000
unkown
page read and write
clean
7FF4F07D9000
unkown
page readonly
clean
4D9000
unkown
page read and write
clean
B123BFD000
unkown
page read and write
clean
7FF4F0844000
unkown
page readonly
clean
2A70000
unkown
page read and write
clean
4D2000
unkown
page read and write
clean
2C06000
unkown
page read and write
clean
26D317B000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21A6370E000
unkown
page read and write
clean
480000
unkown
page read and write
clean
7FF5D74B5000
unkown
page readonly
clean
17D1BD66000
unkown
page read and write
clean
7FF537FCF000
unkown
page readonly
clean
19C000
unkown
page read and write
clean
17D1BD76000
unkown
page read and write
clean
7FF4F0700000
unkown
page readonly
clean
7FF55FAFC000
unkown
page readonly
clean
7FF5046A0000
unkown
page readonly
clean
2329A46F000
unkown
page read and write
clean
7FF55FB10000
unkown
page readonly
clean
21A6375C000
unkown
page read and write
clean
7FF504708000
unkown
page readonly
clean
7FF4F04D7000
unkown
page readonly
clean
185C3013000
unkown
page read and write
clean
21A616A5000
unkown
page read and write
clean
6FC53000
unkown image
page readonly
clean
4CE000
unkown
page read and write
clean
7FF5C3688000
unkown
page readonly
clean
28AEBE29000
unkown
page read and write
clean
28AEBE02000
unkown
page read and write
clean
21A63942000
unkown
page read and write
clean
7FF4F0702000
unkown
page readonly
clean
21A63753000
unkown
page read and write
clean
7FF537FB4000
unkown
page readonly
clean
7FF5C3EDE000
unkown
page readonly
clean
21F0000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
17D1BD59000
unkown
page read and write
clean
7FF4F074A000
unkown
page readonly
clean
490000
heap default
page read and write
clean
7FF4F0765000
unkown
page readonly
clean
10002000
unkown image
page readonly
clean
21A616D3000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
1F638E00000
unkown
page read and write
clean
185C3102000
unkown
page read and write
clean
7FF5D7594000
unkown
page readonly
clean
357857A000
unkown
page read and write
clean
1AA84E3C000
unkown
page read and write
clean
7FF537F9C000
unkown
page readonly
clean
21A61680000
unkown
page read and write
clean
17D1BDD9000
unkown
page read and write
clean
7FF561AC8000
unkown
page readonly
clean
275E000
unkown
page read and write
clean
28AED870000
unkown
page read and write
clean
2971000
unkown
page read and write
clean
7FF5E6527000
unkown
page readonly
clean
17D1BD5E000
unkown
page read and write
clean
28AEBE13000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21A6371B000
unkown
page read and write
clean
21A63718000
unkown
page read and write
clean
2329A46D000
unkown
page read and write
clean
4BE000
unkown
page read and write
clean
7FF561A5A000
unkown
page readonly
clean
7FF5157F8000
unkown
page readonly
clean
17D1BD84000
unkown
page read and write
clean
7FF4F0668000
unkown
page readonly
clean
2C06000
unkown
page read and write
clean
7FF58A228000
unkown
page readonly
clean
2329A473000
unkown
page read and write
clean
7FF537EBD000
unkown
page readonly
clean
7FF561AAA000
unkown
page readonly
clean
21A61678000
unkown
page read and write
clean
21A616F3000
unkown
page read and write
clean
7FF5D7521000
unkown
page readonly
clean
7FF55FA18000
unkown
page readonly
clean
2B70000
unkown
page read and write
clean
19354F5000
unkown
page read and write
clean
7FF55FADF000
unkown
page readonly
clean
7FF515715000
unkown
page readonly
clean
7FF55F371000
unkown
page readonly
clean
17D1B64B000
unkown
page read and write
clean
21A64010000
unkown
page read and write
clean
26041E02000
unkown
page read and write
clean
2D00000
unkown
page read and write
clean
17D1BD65000
unkown
page read and write
clean
7FF55F935000
unkown
page readonly
clean
7FF5D7276000
unkown
page readonly
clean
21A634C0000
unkown
page read and write
clean
7FF4F0594000
unkown
page readonly
clean
4C7000
unkown
page read and write
clean
7FF55FAAC000
unkown
page readonly
clean
7FF561A8F000
unkown
page readonly
clean
26042000000
unkown
page readonly
clean
17D1BD00000
unkown
page read and write
clean
7FF58A2D4000
unkown
page readonly
clean
17D1B702000
unkown
page read and write
clean
A6459FE000
unkown
page read and write
clean
185C2FE0000
unkown
page readonly
clean
438000
unkown image
page readonly
clean
21A638E7000
unkown
page read and write
clean
21A64310000
unkown
page read and write
clean
7FF5D717A000
unkown
page readonly
clean
21A63715000
unkown
page read and write
clean
7FF5D7309000
unkown
page readonly
clean
7FF5C3EA7000
unkown
page readonly
clean
7FF5D759A000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
2329A6D0000
unkown
page write copy
clean
4CD000
unkown
page read and write
clean
7FF561826000
unkown
page readonly
clean
809E0FF000
unkown
page read and write
clean
5D0000
heap default
page read and write
clean
7FF537E13000
unkown
page readonly
clean
17D1BD92000
unkown
page read and write
clean
ECCFD7B000
unkown
page read and write
clean
ECCF8FB000
unkown
page read and write
clean
7FF5046A5000
unkown
page readonly
clean
7FF56195B000
unkown
page readonly
clean
19004740000
unkown
page readonly
clean
185C3081000
unkown
page read and write
clean
2D9F000
unkown
page read and write
clean
17D1B64D000
unkown
page read and write
clean
17D1BD2B000
unkown
page read and write
clean
17D1B639000
unkown
page read and write
clean
21A63747000
unkown
page read and write
clean
17D1BD3D000
unkown
page read and write
clean
17D1B652000
unkown
page read and write
clean
21A61671000
unkown
page read and write
clean
21A61774000
unkown
page read and write
clean
2250000
heap private
page read and write
clean
185C2FF0000
unkown
page read and write
clean
7FF5C3EBA000
unkown
page readonly
clean
21A61678000
unkown
page read and write
clean
21A63982000
unkown
page read and write
clean
7FF5159DA000
unkown
page readonly
clean
2329A435000
unkown
page read and write
clean
7FF5D73B8000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
1AA84F08000
unkown
page read and write
clean
7FF4F0320000
unkown
page readonly
clean
7FF55F36D000
unkown
page readonly
clean
21A61742000
unkown
page read and write
clean
A645E7A000
unkown
page read and write
clean
26041E6C000
unkown
page read and write
clean
21A617B9000
unkown
page read and write
clean
7FF538054000
unkown
page readonly
clean
185C3050000
unkown
page read and write
clean
B123AFA000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4CB000
unkown
page read and write
clean
7FF5D7526000
unkown
page readonly
clean
7FF561AA4000
unkown
page readonly
clean
21A634C0000
unkown
page read and write
clean
17D1BD5F000
unkown
page read and write
clean
278C3407000
unkown
page read and write
clean
7FF55FAD3000
unkown
page readonly
clean
19004400000
unkown
page readonly
clean
91E000
unkown
page read and write
clean
4C2000
unkown
page read and write
clean
21A616C1000
unkown
page read and write
clean
809DEF7000
unkown
page read and write
clean
185C2DC0000
heap private
page read and write
clean
7FF58A192000
unkown
page readonly
clean
185C308C000
unkown
page read and write
clean
1F638E73000
unkown
page read and write
clean
35784FF000
unkown
page read and write
clean
7FF5E6BFF000
unkown
page readonly
clean
7FF4F0734000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
7FF4F065B000
unkown
page readonly
clean
19003A3C000
unkown
page read and write
clean
2329A429000
unkown
page read and write
clean
7FF4F0526000
unkown
page readonly
clean
4DC000
unkown
page read and write
clean
7FF58A1F5000
unkown
page readonly
clean
17D1BD5E000
unkown
page read and write
clean
17D1C254000
unkown
page read and write
clean
28AEBF13000
unkown
page read and write
clean
17D1B713000
unkown
page read and write
clean
17D1BDD1000
unkown
page read and write
clean
17D1BD81000
unkown
page read and write
clean
B885CEB000
unkown
page read and write
clean
2E1B000
unkown
page read and write
clean
7FF51514D000
unkown
page readonly
clean
21A63758000
unkown
page read and write
clean
17D1BD75000
unkown
page read and write
clean
26041E40000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21A61730000
unkown
page read and write
clean
21A63769000
unkown
page read and write
clean
7FF55F672000
unkown
page readonly
clean
2329A370000
heap private
page read and write
clean
21A64010000
unkown
page read and write
clean
2D9F000
unkown
page read and write
clean
7FF58A0F3000
unkown
page readonly
clean
7FF537B45000
unkown
page readonly
clean
35785FF000
unkown
page read and write
clean
1AA84E02000
unkown
page read and write
clean
7FF5E6BD0000
unkown
page readonly
clean
21A63718000
unkown
page read and write
clean
7FF5E6CC1000
unkown
page readonly
clean
1AA85000000
unkown
page readonly
clean
2E1B000
unkown
page read and write
clean
7FF5C3F61000
unkown
page readonly
clean
17D1BDD8000
unkown
page read and write
clean
7FF55F944000
unkown
page readonly
clean
7FF5D7452000
unkown
page readonly
clean
21A63705000
unkown
page read and write
clean
7FF5D74F4000
unkown
page readonly
clean
19356F7000
unkown
page read and write
clean
21A63715000
unkown
page read and write
clean
7FF5C3E5A000
unkown
page readonly
clean
17D1B6E1000
unkown
page read and write
clean
438000
unkown image
page readonly
clean
19003A13000
unkown
page read and write
clean
7FF5C3F54000
unkown
page readonly
clean
408000
unkown image
page readonly
clean
1F638E6F000
unkown
page read and write
clean
17D1C160000
unkown
page read and write
clean
21A637FA000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
17D1BD54000
unkown
page read and write
clean
17D1BD77000
unkown
page read and write
clean
26D347E000
unkown
page read and write
clean
7FF58A1FB000
unkown
page readonly
clean
1AA84D80000
heap default
page read and write
clean
17D1BD65000
unkown
page read and write
clean
28AEBDD0000
unkown
page readonly
clean
8DF000
stack
page read and write
clean
278C33B0000
unkown
page read and write
clean
2329A400000
unkown
page read and write
clean
7FF53805A000
unkown
page readonly
clean
7FF537E51000
unkown
page readonly
clean
21A61643000
unkown
page read and write
clean
17D1BDA6000
unkown
page read and write
clean
4C2000
unkown
page read and write
clean
B1237DF000
unkown
page read and write
clean
21A615F0000
heap private
page read and write
clean
408000
unkown image
page readonly
clean
17D1C202000
unkown
page read and write
clean
2C86000
unkown
page read and write
clean
21A6379B000
unkown
page read and write
clean
79F000
stack
page read and write
clean
ECCF87A000
unkown
page read and write
clean
7FF561A00000
unkown
page readonly
clean
4C5000
heap default
page read and write
clean
21A61743000
unkown
page read and write
clean
17D1BD96000
unkown
page read and write
clean
7FF504420000
unkown
page readonly
clean
17D1B6E8000
unkown
page read and write
clean
7FF5D74DC000
unkown
page readonly
clean
7FF5D7504000
unkown
page readonly
clean
7FF5612BD000
unkown
page readonly
clean
17D1BD39000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
21A61590000
unkown
page readonly
clean
7FF5D74E8000
unkown
page readonly
clean
7FF55FAEF000
unkown
page readonly
clean
7FF561AD9000
unkown
page readonly
clean
21A61671000
unkown
page read and write
clean
7FF537B30000
unkown
page readonly
clean
21A616D4000
unkown
page read and write
clean
2329A46D000
unkown
page read and write
clean
21A63747000
unkown
page read and write
clean
7FF561737000
unkown
page readonly
clean
B1236DA000
unkown
page read and write
clean
26041E68000
unkown
page read and write
clean
1F638E73000
unkown
page read and write
clean
357827B000
unkown
page read and write
clean
21A63A00000
unkown
page read and write
clean
1AA850D0000
unkown
page readonly
clean
1F638D60000
unkown
page write copy
clean
7FF5C3DDC000
unkown
page readonly
clean
17D1BD75000
unkown
page read and write
clean
17D1BD98000
unkown
page read and write
clean
1AA85602000
unkown
page read and write
clean
7FF4F0760000
unkown
page readonly
clean
21A6168B000
unkown
page read and write
clean
7FF5C3E7B000
unkown
page readonly
clean
7FF4F07AA000
unkown
page readonly
clean
2329BFC0000
unkown
page readonly
clean
26041F13000
unkown
page read and write
clean
4D0000
unkown
page read and write
clean
7FF4F075E000
unkown
page readonly
clean
7FF58A1F0000
unkown
page readonly
clean
ECCFBFB000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
7FF589EAC000
unkown
page readonly
clean
7FF5C3A45000
unkown
page readonly
clean
1F638E55000
unkown
page read and write
clean
2329A46D000
unkown
page read and write
clean
7FF50470E000
unkown
page readonly
clean
4D8000
unkown
page read and write
clean
2329A500000
unkown
page read and write
clean
19A000
stack
page read and write
clean
21A616EE000
unkown
page read and write
clean
21A64010000
unkown
page read and write
clean
7FF537ED4000
unkown
page readonly
clean
26041E69000
unkown
page read and write
clean
7FF561B51000
unkown
page readonly
clean
26D2F7F000
unkown
page read and write
clean
7FF5C3E70000
unkown
page readonly
clean
21A61671000
unkown
page read and write
clean
7FF55F8EF000
unkown
page readonly
clean
ECCFB7B000
unkown
page read and write
clean
7FF515892000
unkown
page readonly
clean
7FF5C3DD4000
unkown
page readonly
clean
4CE000
unkown
page read and write
clean
2C80000
unkown
page read and write
clean
7FF561A77000
unkown
page readonly
clean
17D1C261000
unkown
page read and write
clean
2B70000
unkown
page read and write
clean
21A637D2000
unkown
page read and write
clean
2D00000
unkown
page read and write
clean
ECCF77B000
unkown
page read and write
clean
26041E6C000
unkown
page read and write
clean
4CE000
unkown
page read and write
clean
21A61670000
unkown
page read and write
clean
B88617E000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7FF504260000
unkown
page readonly
clean
4BD000
unkown
page read and write
clean
5D0000
unkown
page readonly
clean
7FF5E6C1A000
unkown
page readonly
clean
7FF4F076B000
unkown
page readonly
clean
28AEBE56000
unkown
page read and write
clean
17D1B6E5000
unkown
page read and write
clean
7FF5D75A2000
unkown
page readonly
clean
17D1BD55000
unkown
page read and write
clean
7FF5D7187000
unkown
page readonly
clean
7FF5D7473000
unkown
page readonly
clean
7FF55FB0A000
unkown
page readonly
clean
7FF504543000
unkown
page readonly
clean
4C5000
unkown
page read and write
clean
17D1B6A2000
unkown
page read and write
clean
17D1B410000
unkown
page readonly
clean
1F638F02000
unkown
page read and write
clean
17D1BD87000
unkown
page read and write
clean
1AA84DB0000
unkown
page read and write
clean
7FF5C3ED8000
unkown
page readonly
clean
There are 1332 hidden memdumps, click here to show them.