IOCReport

loading gif

Files

File Path
Type
Category
Malicious
NWMEaRqF7s.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Network\Downloader\edb.log
data
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage user DataBase, version 0x620, checksum 0xcd0abd4e, page size 16384, DirtyShutdown, Windows version 10.0
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\NWMEaRqF7s.exe
'C:\Users\user\Desktop\NWMEaRqF7s.exe'
malicious
C:\Windows\SysWOW64\sqlcecompact40\dot3hc.exe
C:\Windows\SysWOW64\sqlcecompact40\dot3hc.exe
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
clean

URLs

Name
IP
Malicious
https://142.44.137.67:443/DLgjaT02V4ZRh7a7A/wt8CBtC1NZfAQWkn/
142.44.137.67
malicious
http://192.158.216.73/bw3A8vOSwPk/MUmkPxxvia/gp9rmo9BY/Aiyozum4do0I2sb158h/TZEWfRpLT/CpHNbkWtxKNiePn
unknown
clean
http://www.g5e.com/G5_End_User_License_Supplemental_Terms
unknown
clean
https://support.g5e.com/hc/en-us/categories/360002985040-Hidden-City-Hidden-Object-Adventure
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://85.152.162.105/jIpQt16P2GWjQ5/wnzZKJ/DKZyC/
unknown
clean
https://corp.roblox.com/contact/
unknown
clean
http://142.44.137.67:443/DLgjaT02V4ZRh7a7A/wt8CBtC1NZfAQWkn/T
unknown
clean
https://www.roblox.com/develop
unknown
clean
https://www.roblox.com/info/privacy
unknown
clean
http://www.g5e.com/termsofservice
unknown
clean
https://www.tiktok.com/legal/report/feedback
unknown
clean
https://en.help.roblox.com/hc/en-us
unknown
clean
https://corp.roblox.com/parents/
unknown
clean
http://78.24.219.147:8080/2VdcJgn3KtqNnFx/FoHxTH03XYaP/
unknown
clean
http://142.44.137.67:443/DLgjaT02V4ZRh7a7A/wt8CBtC1NZfAQWkn/
unknown
clean
http://162.241.242.173:8080/nPONFQEvQO/m1R1pV6p0j201mdDM/V3kdX/
unknown
clean
http://78.24.219.147:8080/2VdcJgn3KtqNnFx/FoHxTH03XYaP/t
unknown
clean
There are 8 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
99.224.14.125
unknown
Canada
malicious
203.117.253.142
unknown
Singapore
malicious
94.200.114.161
unknown
United Arab Emirates
malicious
201.173.217.124
unknown
Mexico
malicious
139.99.158.11
unknown
Canada
malicious
85.214.28.226
unknown
Germany
malicious
85.152.162.105
unknown
Spain
malicious
174.102.48.180
unknown
United States
malicious
121.124.124.40
unknown
Korea Republic of
malicious
169.239.182.217
unknown
South Africa
malicious
47.144.21.12
unknown
United States
malicious
98.109.204.230
unknown
United States
malicious
139.59.60.244
unknown
Singapore
malicious
61.19.246.238
unknown
Thailand
malicious
104.131.11.150
unknown
United States
malicious
176.111.60.55
unknown
Ukraine
malicious
47.146.117.214
unknown
United States
malicious
168.235.67.138
unknown
United States
malicious
137.59.187.107
unknown
Hong Kong
malicious
94.23.237.171
unknown
France
malicious
187.161.206.24
unknown
Mexico
malicious
139.162.108.71
unknown
Netherlands
malicious
216.208.76.186
unknown
Canada
malicious
200.41.121.90
unknown
Argentina
malicious
188.219.31.12
unknown
Italy
malicious
83.169.36.251
unknown
Germany
malicious
5.196.74.210
unknown
France
malicious
1.221.254.82
unknown
Korea Republic of
malicious
87.106.139.101
unknown
Germany
malicious
62.30.7.67
unknown
United Kingdom
malicious
79.98.24.39
unknown
Lithuania
malicious
74.208.45.104
unknown
United States
malicious
192.158.216.73
unknown
United States
malicious
37.70.8.161
unknown
France
malicious
50.81.3.113
unknown
United States
malicious
107.5.122.110
unknown
United States
malicious
89.205.113.80
unknown
Macedonia
malicious
84.39.182.7
unknown
Spain
malicious
70.121.172.89
unknown
United States
malicious
173.81.218.65
unknown
United States
malicious
75.139.38.211
unknown
United States
malicious
97.82.79.83
unknown
United States
malicious
67.205.85.243
unknown
Canada
malicious
104.131.44.150
unknown
United States
malicious
87.106.136.232
unknown
Germany
malicious
62.75.141.82
unknown
Germany
malicious
24.137.76.62
unknown
Canada
malicious
172.91.208.86
unknown
United States
malicious
37.139.21.175
unknown
Netherlands
malicious
194.187.133.160
unknown
Bulgaria
malicious
173.62.217.22
unknown
United States
malicious
112.185.64.233
unknown
Korea Republic of
malicious
24.43.99.75
unknown
United States
malicious
70.180.43.7
unknown
United States
malicious
95.213.236.64
unknown
Russian Federation
malicious
37.187.72.193
unknown
France
malicious
46.105.131.79
unknown
France
malicious
139.130.242.43
unknown
Australia
malicious
110.145.77.103
unknown
Australia
malicious
120.150.60.189
unknown
Australia
malicious
190.160.53.126
unknown
Chile
malicious
95.179.229.244
unknown
Netherlands
malicious
85.66.181.138
unknown
Hungary
malicious
93.147.212.206
unknown
Italy
malicious
109.74.5.95
unknown
Sweden
malicious
180.92.239.110
unknown
Bangladesh
malicious
91.211.88.52
unknown
Ukraine
malicious
153.232.188.106
unknown
Japan
malicious
142.44.137.67
unknown
Canada
malicious
79.137.83.50
unknown
France
malicious
103.86.49.11
unknown
Thailand
malicious
209.141.54.221
unknown
United States
malicious
157.245.99.39
unknown
United States
malicious
190.55.181.54
unknown
Argentina
malicious
203.153.216.189
unknown
Indonesia
malicious
185.94.252.104
unknown
Germany
malicious
5.39.91.110
unknown
France
malicious
174.45.13.118
unknown
United States
malicious
137.119.36.33
unknown
United States
malicious
104.236.246.93
unknown
United States
malicious
162.241.242.173
unknown
United States
malicious
189.212.199.126
unknown
Mexico
malicious
74.120.55.163
unknown
Canada
malicious
85.105.205.77
unknown
Turkey
malicious
200.114.213.233
unknown
Argentina
malicious
78.24.219.147
unknown
Russian Federation
malicious
24.179.13.119
unknown
United States
malicious
127.0.0.1
unknown
unknown
clean
There are 78 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
C:\Users\user\Desktop\NWMEaRqF7s.exe
Show OpenInCMDWindow MenuItem
clean
C:\Users\user\Desktop\NWMEaRqF7s.exe
Show CopyPathName MenuItem
clean
C:\Users\user\Desktop\NWMEaRqF7s.exe
Show CopyShortPathName MenuItem
clean
C:\Users\user\Desktop\NWMEaRqF7s.exe
Show Run MenuItem
clean
C:\Users\user\Desktop\NWMEaRqF7s.exe
Add Run MenuItem To
clean
C:\Users\user\Desktop\NWMEaRqF7s.exe
Application For Command Window
clean
C:\Windows\System32\svchost.exe
PerfMMFileName
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-100
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\ci.dll,-101
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\dnsapi.dll,-103
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
clean
C:\Windows\System32\svchost.exe
@%SystemRoot%\system32\NgcRecovery.dll,-100
clean
There are 5 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2244000
unkown
page read and write
malicious
5A0000
unkown
page execute and read and write
malicious
22D0000
unkown
page execute and read and write
malicious
22E4000
unkown
page read and write
malicious
22B0000
unkown
page read and write
clean
7FF5B099B000
unkown
page readonly
clean
241EB24F000
unkown
page read and write
clean
7FF5B0B27000
unkown
page readonly
clean
21383D0C000
unkown
page read and write
clean
1FECA26D000
unkown
page read and write
clean
7FF531463000
unkown
page readonly
clean
7FF513B2B000
unkown
page readonly
clean
34CB7C000
unkown
page read and write
clean
7FF5EEEC7000
unkown
page readonly
clean
7FF513CA6000
unkown
page readonly
clean
7FF5316B4000
unkown
page readonly
clean
1FECA400000
unkown
page readonly
clean
21383AB0000
unkown
page readonly
clean
17D2A000000
unkown
page read and write
clean
17DE7452000
unkown
page read and write
clean
7FF513AAD000
unkown
page readonly
clean
21381CAB000
unkown
page read and write
clean
1BBD2C4F000
unkown
page read and write
clean
17D2AF10000
unkown
page read and write
clean
241EB302000
unkown
page read and write
clean
2311108E000
unkown
page read and write
clean
1FECA1A0000
unkown
page readonly
clean
21383DE9000
unkown
page read and write
clean
17DE7600000
unkown
page readonly
clean
2243000
unkown
page readonly
clean
34C57C000
unkown
page read and write
clean
1BBD2C70000
unkown
page read and write
clean
24F0000
unkown
page readonly
clean
1FECBD70000
unkown
page readonly
clean
17D2F863000
unkown
page read and write
clean
7FF531342000
unkown
page readonly
clean
21383A30000
heap private
page read and write
clean
21383E32000
unkown
page read and write
clean
7FF5EF6C3000
unkown
page readonly
clean
1FECA229000
unkown
page read and write
clean
7FF5244E6000
unkown
page readonly
clean
2148EDC1000
unkown
page read and write
clean
17D2A089000
unkown
page read and write
clean
7FF52460D000
unkown
page readonly
clean
21384313000
unkown
page read and write
clean
1FECA241000
unkown
page read and write
clean
17D2F530000
unkown
page read and write
clean
21384010000
unkown
page read and write
clean
7FF5B098E000
unkown
page readonly
clean
23110F60000
unkown
page read and write
clean
22E3000
unkown
page readonly
clean
7FF510241000
unkown
page readonly
clean
7FF588B18000
unkown
page readonly
clean
7FF513A73000
unkown
page readonly
clean
7FF5C2E77000
unkown
page readonly
clean
23111055000
unkown
page read and write
clean
17DE7AD0000
unkown
page read and write
clean
A80000
unkown
page readonly
clean
580000
unkown
page readonly
clean
21383DF8000
unkown
page read and write
clean
2240000
heap private
page read and write
clean
7FF531726000
unkown
page readonly
clean
7FF5246B7000
unkown
page readonly
clean
1FECA313000
unkown
page read and write
clean
7FF5B474A000
unkown
page readonly
clean
7FF5B0B5F000
unkown
page readonly
clean
E8C7CFA000
unkown
page read and write
clean
21381D13000
unkown
page read and write
clean
21383F00000
unkown
page read and write
clean
7FF5246F7000
unkown
page readonly
clean
5B0000
heap default
page read and write
clean
7FF5101B6000
unkown
page readonly
clean
21385200000
unkown
page readonly
clean
21384110000
unkown
page read and write
clean
17DE74BE000
unkown
page read and write
clean
28FDCD70000
unkown
page readonly
clean
1FECA26D000
unkown
page read and write
clean
240E782E000
unkown
page read and write
clean
1FECA302000
unkown
page read and write
clean
21383D2B000
unkown
page read and write
clean
27F000
unkown
page read and write
clean
7FF54942A000
unkown
page readonly
clean
21383D11000
unkown
page read and write
clean
17DE7AB0000
unkown
page readonly
clean
17DE7400000
unkown
page read and write
clean
7FF513B27000
unkown
page readonly
clean
17DE7DA0000
unkown
page read and write
clean
21383DB1000
unkown
page read and write
clean
2148EDC1000
unkown
page read and write
clean
7FF51026A000
unkown
page readonly
clean
17DE73B0000
unkown
page read and write
clean
D6B74FF000
unkown
page read and write
clean
3713AFE000
unkown
page read and write
clean
225B000
unkown
page read and write
clean
7FF513978000
unkown
page readonly
clean
17DE7D9B000
unkown
page read and write
clean
34CD7F000
unkown
page read and write
clean
7FF588C81000
unkown
page readonly
clean
C779675000
unkown
page read and write
clean
1FECA24B000
unkown
page read and write
clean
7FF524173000
unkown
page readonly
clean
21383D5C000
unkown
page read and write
clean
2E764C7B000
unkown
page read and write
clean
7FF531665000
unkown
page readonly
clean
7FF5C2F13000
unkown
page readonly
clean
23111102000
unkown
page read and write
clean
7FF50F94B000
unkown
page readonly
clean
17DE7D74000
unkown
page read and write
clean
17DE7D00000
unkown
page read and write
clean
2148EDC1000
unkown
page read and write
clean
2E764A00000
heap default
page read and write
clean
7FF5317BA000
unkown
page readonly
clean
17DE74F6000
unkown
page read and write
clean
17DE7D74000
unkown
page read and write
clean
7FF524454000
unkown
page readonly
clean
7FF588CD7000
unkown
page readonly
clean
7FF524603000
unkown
page readonly
clean
7FF513CA3000
unkown
page readonly
clean
7FF548BB5000
unkown
page readonly
clean
17D2A959000
unkown
page read and write
clean
7FF5C2BF5000
unkown
page readonly
clean
7FF5B3F34000
unkown
page readonly
clean
7FF5246CA000
unkown
page readonly
clean
241EB170000
heap default
page read and write
clean
C77947B000
unkown
page read and write
clean
17DE7DA6000
unkown
page read and write
clean
77C707B000
unkown
page read and write
clean
2E764B30000
unkown
page readonly
clean
3713BF7000
unkown
page read and write
clean
7FF5EF2AA000
unkown
page readonly
clean
77C667B000
unkown
page read and write
clean
7FF5101E7000
unkown
page readonly
clean
695000
heap default
page read and write
clean
470000
unkown
page readonly
clean
21381BA0000
unkown
page write copy
clean
7FF588CAA000
unkown
page readonly
clean
17DE7413000
unkown
page read and write
clean
7FF5EF616000
unkown
page readonly
clean
7FF52448A000
unkown
page readonly
clean
449000
unkown image
page readonly
clean
17DE7D52000
unkown
page read and write
clean
17D2A913000
unkown
page read and write
clean
2148EDD1000
unkown
page read and write
clean
7FF5B468E000
unkown
page readonly
clean
17D2A815000
unkown
page read and write
clean
1BBD3402000
unkown
page read and write
clean
7FF5241A7000
unkown
page readonly
clean
17D2F518000
unkown
page read and write
clean
E8C7BF9000
unkown
page read and write
clean
28FDB26A000
unkown
page read and write
clean
600000
unkown
page read and write
clean
27C000
unkown
page read and write
clean
1FECA26D000
unkown
page read and write
clean
17DE7D97000
unkown
page read and write
clean
7FF5245A5000
unkown
page readonly
clean
7FF513B56000
unkown
page readonly
clean
21383DF5000
unkown
page read and write
clean
560000
heap default
page read and write
clean
17DE7AE0000
unkown
page read and write
clean
4B0000
unkown
page read and write
clean
7FF5EF3AF000
unkown
page readonly
clean
17DE74C5000
unkown
page read and write
clean
7FF5494C7000
unkown
page readonly
clean
21384010000
unkown
page read and write
clean
7FF549318000
unkown
page readonly
clean
7FF5C2E66000
unkown
page readonly
clean
21383DF5000
unkown
page read and write
clean
7FF5EF4E8000
unkown
page readonly
clean
97F000
unkown
page read and write
clean
21383DF5000
unkown
page read and write
clean
17DE7D61000
unkown
page read and write
clean
17D2B020000
unkown
page readonly
clean
7FF5EF5FA000
unkown
page readonly
clean
6B0000
unkown
page readonly
clean
28FDB26D000
unkown
page read and write
clean
7FF5B0949000
unkown
page readonly
clean
2A65000
unkown
page read and write
clean
2E764C54000
unkown
page read and write
clean
17DE8202000
unkown
page read and write
clean
7FF5314BF000
unkown
page readonly
clean
21381C86000
unkown
page read and write
clean
2148EDB8000
unkown
page read and write
clean
7FF5B0C04000
unkown
page readonly
clean
240E7B30000
unkown
page read and write
clean
17DE7DA0000
unkown
page read and write
clean
34CE7B000
unkown
page read and write
clean
7FF5C2AFA000
unkown
page readonly
clean
7FF5100D8000
unkown
page readonly
clean
8826B4D000
unkown
page read and write
clean
28FDB268000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
3713A7B000
unkown
page read and write
clean
319E000
unkown
page read and write
clean
442000
unkown image
page write copy
clean
7FF5101A3000
unkown
page readonly
clean
1BBD3940000
unkown
page readonly
clean
7FF513AC8000
unkown
page readonly
clean
240E86B0000
unkown
page readonly
clean
77C67F9000
unkown
page read and write
clean
7FF549348000
unkown
page readonly
clean
17D2F670000
unkown
page write copy
clean
2BB0000
unkown
page read and write
clean
BDFFC79000
unkown
page read and write
clean
2E764C3F000
unkown
page read and write
clean
240E7B10000
unkown
page read and write
clean
56A000
heap default
page read and write
clean
17DE7D71000
unkown
page read and write
clean
7FF5314B5000
unkown
page readonly
clean
1FECA26D000
unkown
page read and write
clean
9B000
unkown
page read and write
clean
17DE7D61000
unkown
page read and write
clean
1BBD3600000
unkown
page readonly
clean
1FECA200000
unkown
page read and write
clean
7FF513A92000
unkown
page readonly
clean
28FDB26C000
unkown
page read and write
clean
21383F02000
unkown
page read and write
clean
7FF531198000
unkown
page readonly
clean
240E79C0000
unkown
page read and write
clean
17DE7D8C000
unkown
page read and write
clean
7FF523DAB000
unkown
page readonly
clean
7FF5EF6D7000
unkown
page readonly
clean
34C67B000
unkown
page read and write
clean
E8C7D79000
unkown
page read and write
clean
2148ED9B000
heap default
page read and write
clean
22E0000
unkown
page read and write
clean
7FF5B0447000
unkown
page readonly
clean
7FF549413000
unkown
page readonly
clean
2353000
heap private
page read and write
clean
7FF513AB9000
unkown
page readonly
clean
7FF5246A1000
unkown
page readonly
clean
2E7665A0000
unkown
page read and write
clean
77C6AFC000
unkown
page read and write
clean
7FF5EF5A7000
unkown
page readonly
clean
17DE7502000
unkown
page read and write
clean
D54097F000
unkown
page read and write
clean
7FF51388B000
unkown
page readonly
clean
22A0000
heap private
page read and write
clean
17D2F410000
unkown
page read and write
clean
BDFF71B000
unkown
page read and write
clean
17DE7D52000
unkown
page read and write
clean
2148ED70000
unkown
page readonly
clean
17D2B030000
unkown
page readonly
clean
17DE7DA0000
unkown
page read and write
clean
7FF5B46BD000
unkown
page readonly
clean
7FF588BD1000
unkown
page readonly
clean
2BA1000
unkown
page read and write
clean
17D2F510000
unkown
page read and write
clean
21381D40000
unkown
page read and write
clean
17D2F531000
unkown
page read and write
clean
21383DEA000
unkown
page read and write
clean
8826FFE000
unkown
page read and write
clean
7FF531695000
unkown
page readonly
clean
21383A10000
unkown
page read and write
clean
17D2F790000
unkown
page readonly
clean
1BBD2C63000
unkown
page read and write
clean
4A5000
heap default
page read and write
clean
530000
unkown
page readonly
clean
17DE7D9E000
unkown
page read and write
clean
7FF5B0C17000
unkown
page readonly
clean
21383DF5000
unkown
page read and write
clean
7FF510115000
unkown
page readonly
clean
7FF5B0B6D000
unkown
page readonly
clean
240E7B20000
heap private
page read and write
clean
17D2A013000
unkown
page read and write
clean
7FF5245E4000
unkown
page readonly
clean
2A20000
unkown
page read and write
clean
7FF510057000
unkown
page readonly
clean
17D2A09D000
unkown
page read and write
clean
7FF5316C9000
unkown
page readonly
clean
7FF513C09000
unkown
page readonly
clean
21383DA1000
unkown
page read and write
clean
7FF5245F1000
unkown
page readonly
clean
21383E63000
unkown
page read and write
clean
7FF588CD7000
unkown
page readonly
clean
D6B7679000
unkown
page read and write
clean
C8C69FE000
unkown
page read and write
clean
241EB26E000
unkown
page read and write
clean
7FF5C2F22000
unkown
page readonly
clean
D6B76FF000
unkown
page read and write
clean
7FF549459000
unkown
page readonly
clean
7FF5B0C2A000
unkown
page readonly
clean
77C737D000
unkown
page read and write
clean
7FF548FB1000
unkown
page readonly
clean
2260000
heap private
page read and write
clean
3713CFF000
unkown
page read and write
clean
241EB308000
unkown
page read and write
clean
17D2A056000
unkown
page read and write
clean
17DE7D61000
unkown
page read and write
clean
449000
unkown image
page readonly
clean
23110E60000
heap default
page read and write
clean
2E764C7E000
unkown
page read and write
clean
7FF510244000
unkown
page readonly
clean
7FF588781000
unkown
page readonly
clean
7FF5314A8000
unkown
page readonly
clean
21383A90000
unkown
page read and write
clean
7FF5314EA000
unkown
page readonly
clean
7FF549507000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
7FF5EF4C6000
unkown
page readonly
clean
7FF5317E2000
unkown
page readonly
clean
315F000
unkown
page read and write
clean
21381D81000
unkown
page read and write
clean
7FF54929A000
unkown
page readonly
clean
34C47F000
unkown
page read and write
clean
17DE74EC000
unkown
page read and write
clean
7FF5C2D16000
unkown
page readonly
clean
7FF549401000
unkown
page readonly
clean
241EB200000
unkown
page read and write
clean
17D2B390000
unkown
page read and write
clean
21383A40000
unkown
page read and write
clean
7FF5316C4000
unkown
page readonly
clean
21381D71000
unkown
page read and write
clean
E8C77DB000
unkown
page read and write
clean
17D2F8A8000
unkown
page read and write
clean
7FF5EF697000
unkown
page readonly
clean
28FDB150000
heap default
page read and write
clean
21381CE2000
unkown
page read and write
clean
21383D34000
unkown
page read and write
clean
7FF588C8D000
unkown
page readonly
clean
21383D34000
unkown
page read and write
clean
D540B7C000
unkown
page read and write
clean
17D2F620000
unkown
page read and write
clean
7FF5314E4000
unkown
page readonly
clean
7FF52449D000
unkown
page readonly
clean
7FF531706000
unkown
page readonly
clean
21384110000
unkown
page read and write
clean
17D29E50000
heap private
page read and write
clean
7FF549446000
unkown
page readonly
clean
460000
unkown
page read and write
clean
240E7D40000
unkown
page readonly
clean
7FF5B0C14000
unkown
page readonly
clean
7FF588AE8000
unkown
page readonly
clean
7FF5EF5E3000
unkown
page readonly
clean
7FF513B24000
unkown
page readonly
clean
17D2F750000
unkown
page readonly
clean
695000
unkown
page read and write
clean
7FF5EF44F000
unkown
page readonly
clean
17DE7D75000
unkown
page read and write
clean
17DE7DA1000
unkown
page read and write
clean
17D2F3C0000
unkown
page readonly
clean
2210000
unkown
page read and write
clean
7FF530F74000
unkown
page readonly
clean
1BBD2C3C000
unkown
page read and write
clean
7FF513C8A000
unkown
page readonly
clean
7FF513B67000
unkown
page readonly
clean
7FF531737000
unkown
page readonly
clean
241EB22A000
unkown
page read and write
clean
2148EC50000
unkown
page readonly
clean
17DE7D8E000
unkown
page read and write
clean
28FDB1B0000
unkown
page readonly
clean
17D29FB0000
unkown
page read and write
clean
7FF5243CF000
unkown
page readonly
clean
21381D31000
unkown
page read and write
clean
1BBD2D13000
unkown
page read and write
clean
7FF588787000
unkown
page readonly
clean
7FF5B0C43000
unkown
page readonly
clean
17D2F510000
unkown
page read and write
clean
333E000
unkown
page read and write
clean
240E7AF0000
unkown
page read and write
clean
17DE7AD0000
unkown
page read and write
clean
7FF5494B4000
unkown
page readonly
clean
17DE744A000
unkown
page read and write
clean
A70000
unkown
page readonly
clean
1FECA257000
unkown
page read and write
clean
17DE8202000
unkown
page read and write
clean
1BBD2C02000
unkown
page read and write
clean
21384310000
unkown
page read and write
clean
7FF513A6F000
unkown
page readonly
clean
17DE7D8E000
unkown
page read and write
clean
17DE74B1000
unkown
page read and write
clean
7FF5494CB000
unkown
page readonly
clean
7FF5B0AF7000
unkown
page readonly
clean
28FDB300000
unkown
page read and write
clean
17DE74EC000
unkown
page read and write
clean
7FF523EB8000
unkown
page readonly
clean
4B0000
unkown
page read and write
clean
1FECA140000
heap default
page read and write
clean
21383D11000
unkown
page read and write
clean
7FF5314D9000
unkown
page readonly
clean
7FF5EF694000
unkown
page readonly
clean
2350000
heap private
page read and write
clean
7FF588BFA000
unkown
page readonly
clean
21383D13000
unkown
page read and write
clean
21381D40000
unkown
page read and write
clean
397E07E000
unkown
page read and write
clean
7FF5C2EE4000
unkown
page readonly
clean
7FF5492F6000
unkown
page readonly
clean
7FF5EF6D7000
unkown
page readonly
clean
77C6879000
unkown
page read and write
clean
17D2A959000
unkown
page read and write
clean
17D2F88A000
unkown
page read and write
clean
8827079000
unkown
page read and write
clean
21383E3E000
unkown
page read and write
clean
7FF50FD41000
unkown
page readonly
clean
21381C76000
unkown
page read and write
clean
7FF5314D2000
unkown
page readonly
clean
520000
heap default
page read and write
clean
2360000
unkown
page read and write
clean
7FF548FB7000
unkown
page readonly
clean
C8C6875000
unkown
page read and write
clean
7FF549457000
unkown
page readonly
clean
7FF4F8B5B000
unkown
page readonly
clean
7FF53179D000
unkown
page readonly
clean
7FF513CB7000
unkown
page readonly
clean
2148ED90000
heap default
page read and write
clean
23110F50000
unkown
page readonly
clean
17DE7D9B000
unkown
page read and write
clean
17D2A03D000
unkown
page read and write
clean
7FF5C2E2F000
unkown
page readonly
clean
17D2F8AD000
unkown
page read and write
clean
7FF524505000
unkown
page readonly
clean
7FF531651000
unkown
page readonly
clean
28FDB240000
unkown
page read and write
clean
E8C7B7A000
unkown
page read and write
clean
7FF588AC6000
unkown
page readonly
clean
7FF5317A7000
unkown
page readonly
clean
BDFFB7A000
unkown
page read and write
clean
7FF513B67000
unkown
page readonly
clean
7FF5316F3000
unkown
page readonly
clean
17DE7455000
unkown
page read and write
clean
2E764B70000
unkown
page read and write
clean
17DE8202000
unkown
page read and write
clean
C8C6BFF000
unkown
page read and write
clean
1BBD2D00000
unkown
page read and write
clean
17DE7E00000
unkown
page readonly
clean
241EB190000
unkown
page readonly
clean
21383E77000
unkown
page read and write
clean
C7798F7000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF513AF1000
unkown
page readonly
clean
7FF513AB7000
unkown
page readonly
clean
7FF588C02000
unkown
page readonly
clean
21383D0D000
unkown
page read and write
clean
C8C677E000
unkown
page read and write
clean
7FF5B4777000
unkown
page readonly
clean
21381D50000
unkown
page read and write
clean
434000
unkown image
page readonly
clean
7FF531544000
unkown
page readonly
clean
21384000000
unkown
page read and write
clean
7FF5EF5F6000
unkown
page readonly
clean
17D2A590000
unkown
page readonly
clean
29F9000
unkown
page read and write
clean
213835B0000
unkown
page read and write
clean
7FF531791000
unkown
page readonly
clean
2E80000
unkown
page readonly
clean
285000
unkown
page read and write
clean
7FF5C2BFF000
unkown
page readonly
clean
29F4000
unkown
page read and write
clean
17DE7D52000
unkown
page read and write
clean
77C727C000
unkown
page read and write
clean
21383E43000
unkown
page read and write
clean
7FF5C2D38000
unkown
page readonly
clean
21381AD0000
unkown
page readonly
clean
7FF5B09EA000
unkown
page readonly
clean
2390000
heap private
page read and write
clean
249E000
unkown
page read and write
clean
7FF5316B7000
unkown
page readonly
clean
7FF5243C5000
unkown
page readonly
clean
7FF5B0B01000
unkown
page readonly
clean
7FF5244A3000
unkown
page readonly
clean
17DE7D50000
unkown
page read and write
clean
21384010000
unkown
page read and write
clean
17D2F550000
unkown
page read and write
clean
240E782E000
unkown
page read and write
clean
7FF50FF01000
unkown
page readonly
clean
17D2A918000
unkown
page read and write
clean
21383DF5000
unkown
page read and write
clean
2241000
unkown
page execute read
clean
7FF5B0A91000
unkown
page readonly
clean
1BBD2C8A000
unkown
page read and write
clean
199000
unkown
page read and write
clean
7FF510191000
unkown
page readonly
clean
17D2F8B1000
unkown
page read and write
clean
7FF513B17000
unkown
page readonly
clean
7FF5B0B4F000
unkown
page readonly
clean
21383D62000
unkown
page read and write
clean
34C9FF000
unkown
page read and write
clean
1BBD2AE0000
heap private
page read and write
clean
17DE73D0000
unkown
page readonly
clean
7FF5EF687000
unkown
page readonly
clean
D54087A000
unkown
page read and write
clean
17D29F90000
unkown
page readonly
clean
28FDB26D000
unkown
page read and write
clean
7FF5244B7000
unkown
page readonly
clean
17DE7D3A000
unkown
page read and write
clean
2148ED80000
unkown
page readonly
clean
28FDB160000
unkown
page write copy
clean
1FECA26D000
unkown
page read and write
clean
21384210000
unkown
page read and write
clean
7FF524373000
unkown
page readonly
clean
29F9000
unkown
page read and write
clean
7FF51018F000
unkown
page readonly
clean
17DE7390000
unkown
page readonly
clean
7FF5317E7000
unkown
page readonly
clean
17DE74A7000
unkown
page read and write
clean
7FF5100A0000
unkown
page readonly
clean
7FF5B473B000
unkown
page readonly
clean
240E79A0000
unkown
page read and write
clean
7FF513531000
unkown
page readonly
clean
4B0000
unkown
page read and write
clean
397E5FF000
unkown
page read and write
clean
343C000
unkown
page read and write
clean
77C6EFA000
unkown
page read and write
clean
17DE7AC0000
unkown
page readonly
clean
C8C697B000
unkown
page read and write
clean
21381C8A000
unkown
page read and write
clean
7FF5C2E4A000
unkown
page readonly
clean
17DE8261000
unkown
page read and write
clean
2E764C00000
unkown
page read and write
clean
C7794FE000
unkown
page read and write
clean
7FF54940F000
unkown
page readonly
clean
1FECA319000
unkown
page read and write
clean
2985000
unkown
page read and write
clean
28FDB268000
unkown
page read and write
clean
2148ED40000
unkown
page read and write
clean
21383D37000
unkown
page read and write
clean
7FF513BFD000
unkown
page readonly
clean
17D2A077000
unkown
page read and write
clean
23110E00000
heap private
page read and write
clean
2311102A000
unkown
page read and write
clean
1BBD2C13000
unkown
page read and write
clean
28FDB229000
unkown
page read and write
clean
2D2D000
unkown
page read and write
clean
442000
unkown image
page read and write
clean
21383E00000
unkown
page read and write
clean
17DE8254000
unkown
page read and write
clean
550000
unkown
page readonly
clean
241EB313000
unkown
page read and write
clean
241EB180000
unkown
page readonly
clean
7FF5B0B82000
unkown
page readonly
clean
21384210000
unkown
page read and write
clean
17D2A918000
unkown
page read and write
clean
21383A40000
unkown
page read and write
clean
7FF588BCF000
unkown
page readonly
clean
7FF50FF13000
unkown
page readonly
clean
7FF513C61000
unkown
page readonly
clean
17DE7470000
unkown
page read and write
clean
17D2A026000
unkown
page read and write
clean
7FF5B097F000
unkown
page readonly
clean
7FF5245A7000
unkown
page readonly
clean
7FF52463D000
unkown
page readonly
clean
7FF5C2F27000
unkown
page readonly
clean
7FF5B0C46000
unkown
page readonly
clean
7FF513A3C000
unkown
page readonly
clean
17DE74E9000
unkown
page read and write
clean
7FF513C67000
unkown
page readonly
clean
7FF513C64000
unkown
page readonly
clean
28FDB268000
unkown
page read and write
clean
2930000
unkown
page read and write
clean
7FF5B0B9D000
unkown
page readonly
clean
7FF5245D4000
unkown
page readonly
clean
9B000
unkown
page read and write
clean
2311104F000
unkown
page read and write
clean
2301000
unkown
page execute read
clean
7FF5317A4000
unkown
page readonly
clean
21381C00000
unkown
page read and write
clean
2460000
unkown
page readonly
clean
7FF588AE0000
unkown
page readonly
clean
17D2F8B6000
unkown
page read and write
clean
21383D37000
unkown
page read and write
clean
D540A79000
unkown
page read and write
clean
21384310000
unkown
page read and write
clean
7FF523F89000
unkown
page readonly
clean
7FF523DA5000
unkown
page readonly
clean
77C71FA000
unkown
page read and write
clean
7FF52443B000
unkown
page readonly
clean
7FF5B46C9000
unkown
page readonly
clean
7FF513728000
unkown
page readonly
clean
7FF513B53000
unkown
page readonly
clean
7FF588BE3000
unkown
page readonly
clean
34C279000
unkown
page read and write
clean
7FF5245EF000
unkown
page readonly
clean
7FF51388F000
unkown
page readonly
clean
2A74000
unkown
page read and write
clean
17D2F630000
unkown
page read and write
clean
7FF531593000
unkown
page readonly
clean
240E77D0000
heap default
page read and write
clean
29D2000
unkown
page read and write
clean
7FF513BF6000
unkown
page readonly
clean
4F0000
unkown
page read and write
clean
29A9000
unkown
page read and write
clean
56E000
unkown
page read and write
clean
7FF5B4737000
unkown
page readonly
clean
21383A40000
unkown
page read and write
clean
7FF530FCC000
unkown
page readonly
clean
400000
unkown image
page readonly
clean
7FF51002A000
unkown
page readonly
clean
17DE7D88000
unkown
page read and write
clean
397E377000
unkown
page read and write
clean
241EB28E000
unkown
page read and write
clean
7FF5100A8000
unkown
page readonly
clean
241EB23C000
unkown
page read and write
clean
17D2F5E0000
unkown
page read and write
clean
241EBA02000
unkown
page read and write
clean
7FF513C07000
unkown
page readonly
clean
2220000
unkown
page read and write
clean
7FF510254000
unkown
page readonly
clean
21383D7E000
unkown
page read and write
clean
2240000
unkown
page read and write
clean
7FF51373A000
unkown
page readonly
clean
21381D72000
unkown
page read and write
clean
77C6F7B000
unkown
page read and write
clean
17D2F674000
unkown
page readonly
clean
7FF5316C0000
unkown
page readonly
clean
7FF5B0990000
unkown
page readonly
clean
21381D31000
unkown
page read and write
clean
235E000
unkown
page read and write
clean
17DE7D61000
unkown
page read and write
clean
7FF5B092F000
unkown
page readonly
clean
23111200000
unkown
page readonly
clean
21384310000
unkown
page read and write
clean
17D2AFF0000
unkown
page readonly
clean
17DE74E1000
unkown
page read and write
clean
2D9F000
unkown
page read and write
clean
23A0000
unkown
page readonly
clean
C779AFF000
unkown
page read and write
clean
7FF5B09CF000
unkown
page readonly
clean
21385002000
unkown
page read and write
clean
22ED000
unkown
page readonly
clean
7FF524647000
unkown
page readonly
clean
17D2F8B3000
unkown
page read and write
clean
21381CC9000
unkown
page read and write
clean
17D2F3F0000
unkown
page read and write
clean
7FF513A8A000
unkown
page readonly
clean
2E764A10000
unkown
page readonly
clean
7FF5EF6AA000
unkown
page readonly
clean
17DE8202000
unkown
page read and write
clean
17D2AE10000
unkown
page read and write
clean
7FF513A86000
unkown
page readonly
clean
240E78D0000
unkown
page readonly
clean
2309000
unkown
page read and write
clean
7FF5C2E46000
unkown
page readonly
clean
7FF5B0B39000
unkown
page readonly
clean
7FF510292000
unkown
page readonly
clean
17DE74A0000
unkown
page read and write
clean
7FF5494C4000
unkown
page readonly
clean
21383A40000
unkown
page read and write
clean
23111802000
unkown
page read and write
clean
2251000
unkown
page execute read
clean
449000
unkown image
page readonly
clean
17D2F820000
unkown
page read and write
clean
17D2F6C0000
unkown
page readonly
clean
371357B000
unkown
page read and write
clean
7FF5EF68D000
unkown
page readonly
clean
7FF5133EE000
unkown
page readonly
clean
7FF5C2AF6000
unkown
page readonly
clean
7FF51343D000
unkown
page readonly
clean
7FF513AE1000
unkown
page readonly
clean
17DE7429000
unkown
page read and write
clean
17D2B040000
unkown
page readonly
clean
17DE744C000
unkown
page read and write
clean
17DE7449000
unkown
page read and write
clean
77C6B7A000
unkown
page read and write
clean
2DDE000
unkown
page read and write
clean
2148ED20000
unkown
page read and write
clean
7FF513B62000
unkown
page readonly
clean
7FF588C9B000
unkown
page readonly
clean
28FDB268000
unkown
page read and write
clean
7FF5133E7000
unkown
page readonly
clean
21385082000
unkown
page read and write
clean
7FF531739000
unkown
page readonly
clean
7FF524252000
unkown
page readonly
clean
7FF5EF5DF000
unkown
page readonly
clean
7FF531369000
unkown
page readonly
clean
C77977B000
unkown
page read and write
clean
2148F060000
unkown
page readonly
clean
21383E3E000
unkown
page read and write
clean
23111108000
unkown
page read and write
clean
7FF524176000
unkown
page readonly
clean
87E000
unkown
page read and write
clean
21381E00000
unkown
page readonly
clean
7FF510247000
unkown
page readonly
clean
240E77C0000
unkown
page readonly
clean
E8C7C7F000
unkown
page read and write
clean
77C6E7B000
unkown
page read and write
clean
7FF5315B7000
unkown
page readonly
clean
17D2F5E0000
unkown
page readonly
clean
241EB110000
heap private
page read and write
clean
7FF588B55000
unkown
page readonly
clean
7FF5B472D000
unkown
page readonly
clean
17DE7AD0000
unkown
page readonly
clean
77C677F000
unkown
page read and write
clean
7FF513BC4000
unkown
page readonly
clean
17DE7D3E000
unkown
page read and write
clean
23111113000
unkown
page read and write
clean
17D2A0AA000
unkown
page read and write
clean
23111A00000
unkown
page readonly
clean
7FF5101C2000
unkown
page readonly
clean
17D2A0F9000
unkown
page read and write
clean
17DE7D97000
unkown
page read and write
clean
17DE72C0000
unkown
page readonly
clean
17DE8202000
unkown
page read and write
clean
2300000
unkown
page read and write
clean
21383E3E000
unkown
page read and write
clean
17D2F6B0000
unkown
page readonly
clean
28FDB26F000
unkown
page read and write
clean
7FF530F7E000
unkown
page readonly
clean
17D2A06E000
unkown
page read and write
clean
7FF5494B7000
unkown
page readonly
clean
7FF5B0826000
unkown
page readonly
clean
7FF5B46C7000
unkown
page readonly
clean
17D2F800000
unkown
page read and write
clean
17DE7D9B000
unkown
page read and write
clean
7FF53148D000
unkown
page readonly
clean
2984000
unkown
page read and write
clean
240E7817000
heap default
page read and write
clean
7FF588BED000
unkown
page readonly
clean
7FF549432000
unkown
page readonly
clean
7FF5C2AE8000
unkown
page readonly
clean
241EB213000
unkown
page read and write
clean
21383E3E000
unkown
page read and write
clean
240E86C0000
unkown
page read and write
clean
17DE7DDC000
unkown
page read and write
clean
7FF5B0C57000
unkown
page readonly
clean
2F7E000
unkown
page read and write
clean
241EB28A000
unkown
page read and write
clean
17DE7486000
unkown
page read and write
clean
7FF5B0C57000
unkown
page readonly
clean
77C72FB000
unkown
page read and write
clean
E8C7AFE000
unkown
page read and write
clean
2A14000
unkown
page read and write
clean
77C717F000
unkown
page read and write
clean
1FECA26D000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
21384210000
unkown
page read and write
clean
17DE7AF0000
unkown
page readonly
clean
7FF510257000
unkown
page readonly
clean
7FF524361000
unkown
page readonly
clean
17DE7D61000
unkown
page read and write
clean
7FF5C2C9F000
unkown
page readonly
clean
2E764D02000
unkown
page read and write
clean
21383D37000
unkown
page read and write
clean
240E7760000
unkown
page read and write
clean
7FF5B4685000
unkown
page readonly
clean
7FF5B0B7A000
unkown
page readonly
clean
7FF510086000
unkown
page readonly
clean
276000
unkown
page read and write
clean
17D29FC0000
unkown
page read and write
clean
480000
unkown
page read and write
clean
2148EDB7000
unkown
page read and write
clean
D5408FF000
unkown
page read and write
clean
1BBD2E00000
unkown
page readonly
clean
17D2A800000
unkown
page read and write
clean
21383E3E000
unkown
page read and write
clean
525000
heap default
page read and write
clean
240E7AB0000
unkown
page readonly
clean
7FF53173E000
unkown
page readonly
clean
7FF5EF587000
unkown
page readonly
clean
34C7FF000
unkown
page read and write
clean
28FDB268000
unkown
page read and write
clean
2E30000
unkown
page readonly
clean
17D29FA0000
unkown
page readonly
clean
7FF5C2DD7000
unkown
page readonly
clean
7FF5494DA000
unkown
page readonly
clean
21383E3E000
unkown
page read and write
clean
7FF5314F0000
unkown
page readonly
clean
266000
unkown
page read and write
clean
7FF5EF629000
unkown
page readonly
clean
7FF5C2EE7000
unkown
page readonly
clean
7FF588C97000
unkown
page readonly
clean
77C6FFA000
unkown
page read and write
clean
7FF5EF684000
unkown
page readonly
clean
17D2F8B8000
unkown
page read and write
clean
1BBD2C00000
unkown
page read and write
clean
7FF524649000
unkown
page readonly
clean
21383D92000
unkown
page read and write
clean
17DE7DAB000
unkown
page read and write
clean
21383D03000
unkown
page read and write
clean
240E8720000
unkown
page read and write
clean
7FF549507000
unkown
page readonly
clean
17DE743C000
unkown
page read and write
clean
17D2A087000
unkown
page read and write
clean
17D2F640000
unkown
page read and write
clean
17D2AE30000
unkown
page read and write
clean
7FF5EF298000
unkown
page readonly
clean
7FF513C74000
unkown
page readonly
clean
17D2A073000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
17D2F617000
unkown
page write copy
clean
7FF588A97000
unkown
page readonly
clean
7FF524508000
unkown
page readonly
clean
D5409FF000
unkown
page read and write
clean
7FF5B0B96000
unkown
page readonly
clean
2BA0000
unkown
page read and write
clean
17DE7513000
unkown
page read and write
clean
17D2F650000
unkown
page read and write
clean
241EBC00000
unkown
page readonly
clean
7FF549426000
unkown
page readonly
clean
17D2F540000
unkown
page read and write
clean
7FF5317D6000
unkown
page readonly
clean
28FDB26D000
unkown
page read and write
clean
7FF524616000
unkown
page readonly
clean
30BE000
unkown
page read and write
clean
28FDB4D0000
unkown
page readonly
clean
240E782E000
unkown
page read and write
clean
7FF5EF2A6000
unkown
page readonly
clean
17DE7D50000
unkown
page read and write
clean
7FF5B0818000
unkown
page readonly
clean
28FDB269000
unkown
page read and write
clean
1BBD2D02000
unkown
page read and write
clean
21383D54000
unkown
page read and write
clean
7FF5C2EEB000
unkown
page readonly
clean
442000
unkown image
page read and write
clean
7FF588C87000
unkown
page readonly
clean
17D2AE20000
unkown
page read and write
clean
7FF5EF4E0000
unkown
page readonly
clean
21383AD0000
unkown
page readonly
clean
23110F40000
unkown
page readonly
clean
17DE7A60000
unkown
page write copy
clean
22E1000
unkown
page execute read
clean
17DE7D8D000
unkown
page read and write
clean
7FF5B4766000
unkown
page readonly
clean
17DE7DA9000
unkown
page read and write
clean
21383DCE000
unkown
page read and write
clean
77C70FC000
unkown
page read and write
clean
7FF524500000
unkown
page readonly
clean
17DE7250000
heap private
page read and write
clean
1BBD2C2A000
unkown
page read and write
clean
2320000
unkown
page read and write
clean
1FECA213000
unkown
page read and write
clean
7FF5B0C07000
unkown
page readonly
clean
17D2F5E0000
unkown
page read and write
clean
21384210000
unkown
page read and write
clean
7FF588C27000
unkown
page readonly
clean
17DE7DA3000
unkown
page read and write
clean
34C37B000
unkown
page read and write
clean
329E000
unkown
page read and write
clean
BDFFAFA000
unkown
page read and write
clean
241EB400000
unkown
page readonly
clean
7FF5246AD000
unkown
page readonly
clean
7FF51025B000
unkown
page readonly
clean
7FF510297000
unkown
page readonly
clean
305E000
unkown
page read and write
clean
21383D00000
unkown
page read and write
clean
21381DB2000
unkown
page read and write
clean
17D2A802000
unkown
page read and write
clean
17DE7D75000
unkown
page read and write
clean
7FF531587000
unkown
page readonly
clean
7FF531712000
unkown
page readonly
clean
2330000
unkown
page readonly
clean
21383D35000
unkown
page read and write
clean
1FECA150000
unkown
page write copy
clean
397E8F9000
unkown
page read and write
clean
7FF5B0B34000
unkown
page readonly
clean
7FF5B0B07000
unkown
page readonly
clean
7FF513736000
unkown
page readonly
clean
7FF588AE5000
unkown
page readonly
clean
7FF5B4724000
unkown
page readonly
clean
2250000
unkown
page read and write
clean
7FF5B0B44000
unkown
page readonly
clean
7FF53119F000
unkown
page readonly
clean
7FF5B0A98000
unkown
page readonly
clean
2360000
unkown
page readonly
clean
2148F020000
unkown
page read and write
clean
7FF5245D0000
unkown
page readonly
clean
1FECA271000
unkown
page read and write
clean
2E764C6E000
unkown
page read and write
clean
21381C29000
unkown
page read and write
clean
446000
unkown image
page read and write
clean
7FF513956000
unkown
page readonly
clean
7FF523EB4000
unkown
page readonly
clean
1FECA202000
unkown
page read and write
clean
21383DF4000
unkown
page read and write
clean
17D2F857000
unkown
page read and write
clean
17DE74D8000
unkown
page read and write
clean
17DE7D74000
unkown
page read and write
clean
21383E94000
unkown
page read and write
clean
7FF513A15000
unkown
page readonly
clean
7FF5B0942000
unkown
page readonly
clean
7FF5B06CE000
unkown
page readonly
clean
34C8FE000
unkown
page read and write
clean
C8C667B000
unkown
page read and write
clean
7FF5B0C0D000
unkown
page readonly
clean
7FF5241A1000
unkown
page readonly
clean
240E7B00000
unkown
page read and write
clean
34C17E000
unkown
page read and write
clean
29E2000
unkown
page read and write
clean
7FF513BD6000
unkown
page readonly
clean
7FF588BF6000
unkown
page readonly
clean
17DE8300000
unkown
page read and write
clean
7FF5B0BAE000
unkown
page readonly
clean
500000
unkown
page read and write
clean
21381BF0000
unkown
page readonly
clean
1BBD2C55000
unkown
page read and write
clean
5F4000
heap default
page read and write
clean
7FF5EF3A5000
unkown
page readonly
clean
21383D35000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
17DE72B0000
heap default
page read and write
clean
7FF5314E6000
unkown
page readonly
clean
7FF5C2ED7000
unkown
page readonly
clean
28FDB302000
unkown
page read and write
clean
7FF549171000
unkown
page readonly
clean
26A000
unkown
page read and write
clean
7FF524575000
unkown
page readonly
clean
7FF5246E6000
unkown
page readonly
clean
510000
unkown
page readonly
clean
7FF5316DF000
unkown
page readonly
clean
C7797FE000
unkown
page read and write
clean
7FF58838B000
unkown
page readonly
clean
224D000
unkown
page readonly
clean
21383DF5000
unkown
page read and write
clean
2E764C29000
unkown
page read and write
clean
21381C85000
unkown
page read and write
clean
2230000
unkown
page readonly
clean
7FF5100A5000
unkown
page readonly
clean
7FF524400000
unkown
page readonly
clean
5A4000
heap default
page read and write
clean
21383DF5000
unkown
page read and write
clean
17D2F607000
unkown
page readonly
clean
7FF5B4777000
unkown
page readonly
clean
7FF588CD2000
unkown
page readonly
clean
2F1E000
unkown
page read and write
clean
1FECBC70000
unkown
page read and write
clean
28FDB213000
unkown
page read and write
clean
240E7820000
heap default
page read and write
clean
7FF513B1D000
unkown
page readonly
clean
7FF588C29000
unkown
page readonly
clean
28FDB400000
unkown
page readonly
clean
7FF549310000
unkown
page readonly
clean
21381D2D000
unkown
page read and write
clean
34C6FE000
unkown
page read and write
clean
1FECA0E0000
heap private
page read and write
clean
7FF53151E000
unkown
page readonly
clean
17D2F8B6000
unkown
page read and write
clean
7FF5B097B000
unkown
page readonly
clean
7FF5246E3000
unkown
page readonly
clean
17DE8400000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
17DE8261000
unkown
page read and write
clean
7FF5492C7000
unkown
page readonly
clean
7FF5494F6000
unkown
page readonly
clean
31BF000
unkown
page read and write
clean
77C6A7A000
unkown
page read and write
clean
7FF5C2EFA000
unkown
page readonly
clean
17DE73A0000
unkown
page readonly
clean
37135FE000
unkown
page read and write
clean
28FDB269000
unkown
page read and write
clean
21384310000
unkown
page read and write
clean
2148F055000
heap private
page read and write
clean
7FF5B0BA9000
unkown
page readonly
clean
24E0000
heap private
page read and write
clean
7FF5B0A46000
unkown
page readonly
clean
21381CDE000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
21385002000
unkown
page read and write
clean
17D2F770000
unkown
page readonly
clean
32A0000
unkown
page readonly
clean
7FF5EF5EE000
unkown
page readonly
clean
21384110000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
329C000
unkown
page read and write
clean
446000
unkown image
page read and write
clean
7FF5B0B05000
unkown
page readonly
clean
7FF5B4721000
unkown
page readonly
clean
77C66FE000
unkown
page read and write
clean
7FF588C94000
unkown
page readonly
clean
590000
unkown
page readonly
clean
600000
heap default
page read and write
clean
3713DFF000
unkown
page read and write
clean
490000
heap private
page read and write
clean
7FF5C2717000
unkown
page readonly
clean
23111660000
unkown
page readonly
clean
7FF53157A000
unkown
page readonly
clean
77C6DFB000
unkown
page read and write
clean
D6B75FE000
unkown
page read and write
clean
7FF5B4734000
unkown
page readonly
clean
7FF5B0736000
unkown
page readonly
clean
C8C6AF7000
unkown
page read and write
clean
397E478000
unkown
page read and write
clean
21384210000
unkown
page read and write
clean
28FDB200000
unkown
page read and write
clean
21383D39000
unkown
page read and write
clean
17DE74A7000
unkown
page read and write
clean
7FF531794000
unkown
page readonly
clean
240E7826000
unkown
page read and write
clean
7FF513CB7000
unkown
page readonly
clean
77C6C7B000
unkown
page read and write
clean
7FF5B0C52000
unkown
page readonly
clean
21383E15000
unkown
page read and write
clean
21381AC0000
heap default
page read and write
clean
371387E000
unkown
page read and write
clean
21384010000
unkown
page read and write
clean
7FF531520000
unkown
page readonly
clean
7FF549502000
unkown
page readonly
clean
17D2F554000
unkown
page read and write
clean
7FF5138DF000
unkown
page readonly
clean
240E7B29000
heap private
page read and write
clean
7FF5246F2000
unkown
page readonly
clean
17DE7AD0000
unkown
page read and write
clean
17DE7DA6000
unkown
page read and write
clean
2243000
heap private
page read and write
clean
17DE7DAD000
unkown
page read and write
clean
7FF5C2DF7000
unkown
page readonly
clean
397E277000
unkown
page read and write
clean
8826BCE000
unkown
page read and write
clean
7FF5493FF000
unkown
page readonly
clean
7FF53158A000
unkown
page readonly
clean
A7F000
unkown
page read and write
clean
240E79E0000
unkown
page readonly
clean
7FF588941000
unkown
page readonly
clean
21383DF6000
unkown
page read and write
clean
7FF5315A3000
unkown
page readonly
clean
1FECA26D000
unkown
page read and write
clean
7FF5B09B4000
unkown
page readonly
clean
17DE7DA6000
unkown
page read and write
clean
7FF524622000
unkown
page readonly
clean
2148EDA2000
unkown
page read and write
clean
21383A20000
unkown
page readonly
clean
240E86D0000
unkown
page read and write
clean
5BA000
heap default
page read and write
clean
34BDED000
unkown
page read and write
clean
241EB4D0000
unkown
page readonly
clean
7FF588CC6000
unkown
page readonly
clean
7FF5C2C4F000
unkown
page readonly
clean
397E9FB000
unkown
page read and write
clean
21383E3E000
unkown
page read and write
clean
17DE7D9F000
unkown
page read and write
clean
17DE7508000
unkown
page read and write
clean
7FF52442E000
unkown
page readonly
clean
7FF5C2E33000
unkown
page readonly
clean
34C0F8000
unkown
page read and write
clean
7FF524636000
unkown
page readonly
clean
7FF5EF61D000
unkown
page readonly
clean
7FF5313A7000
unkown
page readonly
clean
397E57F000
unkown
page read and write
clean
7FF53158F000
unkown
page readonly
clean
230B000
unkown
page read and write
clean
17D2F660000
unkown
page read and write
clean
28FDCC70000
unkown
page read and write
clean
1BBD2B40000
heap default
page read and write
clean
7FF5101BA000
unkown
page readonly
clean
7FF548BBB000
unkown
page readonly
clean
7FF51383F000
unkown
page readonly
clean
34CA7F000
unkown
page read and write
clean
8826F7A000
unkown
page read and write
clean
7FF5C2E52000
unkown
page readonly
clean
449000
unkown image
page readonly
clean
1BBD2C47000
unkown
page read and write
clean
7FF513C6D000
unkown
page readonly
clean
17DE7D15000
unkown
page read and write
clean
24C0000
unkown
page readonly
clean
17D2F5E0000
unkown
page read and write
clean
21385000000
unkown
page read and write
clean
240E86A0000
unkown
page read and write
clean
34C87F000
unkown
page read and write
clean
7FF50F945000
unkown
page readonly
clean
28FDB257000
unkown
page read and write
clean
27A0000
unkown
page read and write
clean
17DE7D8F000
unkown
page read and write
clean
2148F050000
heap private
page read and write
clean
7FF52449F000
unkown
page readonly
clean
7FF513AF8000
unkown
page readonly
clean
17D29EC0000
unkown
page readonly
clean
17DE7DA9000
unkown
page read and write
clean
17DE744B000
unkown
page read and write
clean
1FECA4D0000
unkown
page readonly
clean
BDFF79E000
unkown
page read and write
clean
21381D81000
unkown
page read and write
clean
17D2F614000
unkown
page write copy
clean
7FF513B3A000
unkown
page readonly
clean
7FF5134BE000
unkown
page readonly
clean
7FF5B4683000
unkown
page readonly
clean
241EB27D000
unkown
page read and write
clean
17D2F670000
unkown
page read and write
clean
7FF5494BD000
unkown
page readonly
clean
7FF53135C000
unkown
page readonly
clean
21383D5C000
unkown
page read and write
clean
17D2F540000
unkown
page read and write
clean
21383D8C000
unkown
page read and write
clean
7FF549315000
unkown
page readonly
clean
28FDB268000
unkown
page read and write
clean
E00000
unkown
page readonly
clean
7FF5B4696000
unkown
page readonly
clean
7FF588C84000
unkown
page readonly
clean
2E764C02000
unkown
page read and write
clean
7FF5C2C4B000
unkown
page readonly
clean
23111082000
unkown
page read and write
clean
17D2A113000
unkown
page read and write
clean
1FECA300000
unkown
page read and write
clean
2A8F000
unkown
page read and write
clean
17D2F84C000
unkown
page read and write
clean
17D2B050000
unkown
page readonly
clean
240E77D9000
heap default
page read and write
clean
1BBD2B50000
unkown
page readonly
clean
7FF513B14000
unkown
page readonly
clean
17DE7D9B000
unkown
page read and write
clean
7FF5EF585000
unkown
page readonly
clean
213836B0000
unkown
page readonly
clean
442000
unkown image
page write copy
clean
77C6CFA000
unkown
page read and write
clean
28A0000
unkown
page read and write
clean
2E764AE0000
unkown
page write copy
clean
7FF4F8B5B000
unkown
page readonly
clean
282000
unkown
page read and write
clean
7FF513357000
unkown
page readonly
clean
77C6BFB000
unkown
page read and write
clean
2E7649A0000
heap private
page read and write
clean
17D2B010000
unkown
page readonly
clean
23111100000
unkown
page read and write
clean
E8C7A7E000
unkown
page read and write
clean
7FF5C2F27000
unkown
page readonly
clean
7FF5C2E79000
unkown
page readonly
clean
D6B777D000
unkown
page read and write
clean
17DE7D2B000
unkown
page read and write
clean
21383D6F000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
241EB1A0000
unkown
page read and write
clean
7FF5494F3000
unkown
page readonly
clean
21381CEF000
unkown
page read and write
clean
32FF000
unkown
page read and write
clean
21384010000
unkown
page read and write
clean
21383D35000
unkown
page read and write
clean
7FF588A6A000
unkown
page readonly
clean
397E7FC000
unkown
page read and write
clean
7FF588C1D000
unkown
page readonly
clean
C7799FF000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
21383F02000
unkown
page read and write
clean
17D2F400000
unkown
page read and write
clean
7FF513C77000
unkown
page readonly
clean
7FF51024D000
unkown
page readonly
clean
34BCEC000
unkown
page read and write
clean
4AE000
unkown
page read and write
clean
7FF5B0A68000
unkown
page readonly
clean
7FF5316A8000
unkown
page readonly
clean
1FECA222000
unkown
page read and write
clean
240E77E1000
heap default
page read and write
clean
1BBD2B70000
unkown
page read and write
clean
7FF5C2F16000
unkown
page readonly
clean
21383D31000
unkown
page read and write
clean
7FF513970000
unkown
page readonly
clean
17DE74AB000
unkown
page read and write
clean
29A0000
unkown
page read and write
clean
31FE000
unkown
page read and write
clean
17D2F8B6000
unkown
page read and write
clean
22F0000
heap private
page read and write
clean
7FF588C16000
unkown
page readonly
clean
7FF524538000
unkown
page readonly
clean
17DE7DBB000
unkown
page read and write
clean
1BBD2ED0000
unkown
page readonly
clean
7FF53158D000
unkown
page readonly
clean
7FF5EF3FF000
unkown
page readonly
clean
241EB300000
unkown
page read and write
clean
7FF523F85000
unkown
page readonly
clean
7FF5C2E6D000
unkown
page readonly
clean
21383C02000
unkown
page read and write
clean
17DE8200000
unkown
page read and write
clean
7FF52461A000
unkown
page readonly
clean
D6B747B000
unkown
page read and write
clean
7FF5101DD000
unkown
page readonly
clean
7FF5EF602000
unkown
page readonly
clean
7FF5B0925000
unkown
page readonly
clean
21381C54000
unkown
page read and write
clean
17D2B000000
unkown
page readonly
clean
7FF513AA6000
unkown
page readonly
clean
245C000
unkown
page read and write
clean
7FF5B4763000
unkown
page readonly
clean
434000
unkown image
page readonly
clean
7FF5EF69B000
unkown
page readonly
clean
21383F82000
unkown
page read and write
clean
2148EDA7000
heap default
page read and write
clean
7FF5494B1000
unkown
page readonly
clean
17DE7D76000
unkown
page read and write
clean
17D2A200000
unkown
page readonly
clean
28FDB313000
unkown
page read and write
clean
5B0000
heap default
page read and write
clean
434000
unkown image
page readonly
clean
17D29EB0000
heap default
page read and write
clean
7FF5EF6D2000
unkown
page readonly
clean
23111000000
unkown
page read and write
clean
17D2A900000
unkown
page read and write
clean
7FF513A17000
unkown
page readonly
clean
21384210000
unkown
page read and write
clean
77C697B000
unkown
page read and write
clean
17D2A090000
unkown
page read and write
clean
7FF5B3F38000
unkown
page readonly
clean
7FF549183000
unkown
page readonly
clean
7FF524430000
unkown
page readonly
clean
7FF5316E1000
unkown
page readonly
clean
7FF53172D000
unkown
page readonly
clean
17DE7C02000
unkown
page read and write
clean
21383DF5000
unkown
page read and write
clean
7FF5245FF000
unkown
page readonly
clean
21384110000
unkown
page read and write
clean
17DE8302000
unkown
page read and write
clean
7FF5B46B6000
unkown
page readonly
clean
2A72000
unkown
page read and write
clean
21381D02000
unkown
page read and write
clean
17D2F83F000
unkown
page read and write
clean
7FF513A7E000
unkown
page readonly
clean
7FF513538000
unkown
page readonly
clean
7FF51019F000
unkown
page readonly
clean
2E2F000
unkown
page read and write
clean
21381C72000
unkown
page read and write
clean
17DE7DA6000
unkown
page read and write
clean
7FF5246A7000
unkown
page readonly
clean
8826EF9000
unkown
page read and write
clean
21381D74000
unkown
page read and write
clean
23111070000
unkown
page read and write
clean
21384110000
unkown
page read and write
clean
2830000
unkown
page read and write
clean
1BBD2B60000
unkown
page readonly
clean
7FF5C2D30000
unkown
page readonly
clean
21383E7C000
unkown
page read and write
clean
28FDB202000
unkown
page read and write
clean
7FF588953000
unkown
page readonly
clean
7FF53152B000
unkown
page readonly
clean
21383AA0000
unkown
page readonly
clean
1FECA26D000
unkown
page read and write
clean
7FF5C2DD5000
unkown
page readonly
clean
7FF5EF3FB000
unkown
page readonly
clean
301F000
unkown
page read and write
clean
C77957E000
unkown
page read and write
clean
2A1000
unkown
page read and write
clean
21381C13000
unkown
page read and write
clean
17DE7D97000
unkown
page read and write
clean
BDFFA7F000
unkown
page read and write
clean
21381A60000
heap private
page read and write
clean
7FF588CC3000
unkown
page readonly
clean
7FF549385000
unkown
page readonly
clean
240E8460000
unkown
page read and write
clean
7FF5C2ED4000
unkown
page readonly
clean
7FF5B0B63000
unkown
page readonly
clean
7FF5245D9000
unkown
page readonly
clean
7FF5C2EDD000
unkown
page readonly
clean
307F000
unkown
page read and write
clean
2A5000
unkown
page read and write
clean
C8C66FE000
unkown
page read and write
clean
28FDB26D000
unkown
page read and write
clean
7FF513835000
unkown
page readonly
clean
17DE7D88000
unkown
page read and write
clean
8826E7E000
unkown
page read and write
clean
23110E70000
unkown
page readonly
clean
2942000
unkown
page read and write
clean
7FF5101E9000
unkown
page readonly
clean
17DE7DA9000
unkown
page read and write
clean
7FF53149A000
unkown
page readonly
clean
3713975000
unkown
page read and write
clean
21383DF5000
unkown
page read and write
clean
7FF5316EF000
unkown
page readonly
clean
21384110000
unkown
page read and write
clean
21381D30000
unkown
page read and write
clean
7FF588BDF000
unkown
page readonly
clean
7FF53170A000
unkown
page readonly
clean
2EDC000
unkown
page read and write
clean
17D2F534000
unkown
page read and write
clean
7FF510297000
unkown
page readonly
clean
17D2F5E0000
unkown
page read and write
clean
28FDB268000
unkown
page read and write
clean
7FF5316D4000
unkown
page readonly
clean
7FF531797000
unkown
page readonly
clean
7FF5B0B30000
unkown
page readonly
clean
7FF5315AF000
unkown
page readonly
clean
21383DF0000
unkown
page read and write
clean
17DE7DCA000
unkown
page read and write
clean
7FF510286000
unkown
page readonly
clean
198000
unkown
page read and write
clean
7FF513C7B000
unkown
page readonly
clean
21383D70000
unkown
page read and write
clean
28FDB26D000
unkown
page read and write
clean
17D2F6D0000
unkown
page readonly
clean
397DDCE000
unkown
page read and write
clean
240E80D0000
unkown
page readonly
clean
7FF531621000
unkown
page readonly
clean
77C68FE000
unkown
page read and write
clean
17D2A7E1000
unkown
page read and write
clean
7FF5B0A60000
unkown
page readonly
clean
7FF5C2E3E000
unkown
page readonly
clean
7FF513BAF000
unkown
page readonly
clean
7FF5246B4000
unkown
page readonly
clean
241EBF40000
unkown
page readonly
clean
17DE7DA2000
unkown
page read and write
clean
7FF5B0B51000
unkown
page readonly
clean
D540AFE000
unkown
page read and write
clean
17D2A02A000
unkown
page read and write
clean
7FF5246F7000
unkown
page readonly
clean
17DE7D50000
unkown
page read and write
clean
7FF5246A4000
unkown
page readonly
clean
2259000
unkown
page read and write
clean
21383D33000
unkown
page read and write
clean
2BA1000
unkown
page read and write
clean
21383DE7000
unkown
page read and write
clean
17DE7DAD000
unkown
page read and write
clean
1BBD2D08000
unkown
page read and write
clean
21383D53000
unkown
page read and write
clean
7FF5101AD000
unkown
page readonly
clean
2BA1000
unkown
page read and write
clean
17D2A102000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
7FF531628000
unkown
page readonly
clean
7FF5B0B76000
unkown
page readonly
clean
7FF5EF6C6000
unkown
page readonly
clean
397E6FE000
unkown
page read and write
clean
7FF54944D000
unkown
page readonly
clean
401000
unkown image
page execute read
clean
660000
unkown
page readonly
clean
17DE7DA9000
unkown
page read and write
clean
4EE000
unkown
page read and write
clean
7FF5B4727000
unkown
page readonly
clean
2F20000
unkown
page readonly
clean
21385042000
unkown
page read and write
clean
21381D71000
unkown
page read and write
clean
2250000
unkown
page read and write
clean
7FF531312000
unkown
page readonly
clean
17DE7516000
unkown
page read and write
clean
23111013000
unkown
page read and write
clean
28FDB0F0000
heap private
page read and write
clean
7FF54941D000
unkown
page readonly
clean
7FF513A37000
unkown
page readonly
clean
17DE7448000
unkown
page read and write
clean
21384310000
unkown
page read and write
clean
17DE7D31000
unkown
page read and write
clean
2148EDD0000
unkown
page read and write
clean
21383D28000
unkown
page read and write
clean
7FF5B0BA7000
unkown
page readonly
clean
17D2F82D000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
241EB255000
unkown
page read and write
clean
7FF5EF627000
unkown
page readonly
clean
460000
unkown
page read and write
clean
17DE8202000
unkown
page read and write
clean
17DE744F000
unkown
page read and write
clean
77C6D7B000
unkown
page read and write
clean
D6B7579000
unkown
page read and write
clean
17D2A09B000
unkown
page read and write
clean
21383DBA000
unkown
page read and write
clean
7FF50FD47000
unkown
page readonly
clean
BDFFBFF000
unkown
page read and write
clean
17DE7D50000
unkown
page read and write
clean
7FF5317D3000
unkown
page readonly
clean
7FF510283000
unkown
page readonly
clean
240E7B25000
heap private
page read and write
clean
2311103C000
unkown
page read and write
clean
28FDB26D000
unkown
page read and write
clean
7FF5101D6000
unkown
page readonly
clean
7FF5316FD000
unkown
page readonly
clean
7FF531493000
unkown
page readonly
clean
8826ACB000
unkown
page read and write
clean
397DD4B000
unkown
page read and write
clean
17D2A902000
unkown
page read and write
clean
7FF5B082A000
unkown
page readonly
clean
34C77E000
unkown
page read and write
clean
17D2F811000
unkown
page read and write
clean
21381C3F000
unkown
page read and write
clean
2E764C13000
unkown
page read and write
clean
17D2F604000
unkown
page readonly
clean
4A0000
heap default
page read and write
clean
C8C6CFF000
unkown
page read and write
clean
77C69FB000
unkown
page read and write
clean
4F0000
unkown
page readonly
clean
21381D30000
unkown
page read and write
clean
2E764E00000
unkown
page readonly
clean
17DE744E000
unkown
page read and write
clean
17D2F51E000
unkown
page read and write
clean
34BD6E000
unkown
page read and write
clean
2E7666A0000
unkown
page readonly
clean
1BBD2C63000
unkown
page read and write
clean
There are 1348 hidden memdumps, click here to show them.