IOC Report

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\8TEZmAEx3U.exe
'C:\Users\user\Desktop\8TEZmAEx3U.exe'
malicious
C:\Users\user\Desktop\8TEZmAEx3U.exe
'C:\Users\user\Desktop\8TEZmAEx3U.exe'
malicious

URLs

Name
IP
Malicious
http://sopage.duckdns.org/Remcos_s_bChlcwVW46.bin
23.146.242.85
malicious
solex-wave.duckdns.org
malicious

Domains

Name
IP
Malicious
sopage.duckdns.org
23.146.242.85
malicious
solex-wave.duckdns.org
23.146.242.71
malicious

IPs

IP
Domain
Country
Malicious
23.146.242.71
solex-wave.duckdns.org
Reserved
malicious
23.146.242.85
sopage.duckdns.org
Reserved
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Remcos-Y0PK9D
exepath
clean
HKEY_CURRENT_USER\Software\Remcos-Y0PK9D
licence
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
707000
heap default
page read and write
malicious
2230000
unkown
page execute and read and write
malicious
7FF599677000
unkown image
page readonly
clean
7DF59FE22000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
232E000
unkown
page read and write
clean
7DF596F72000
unkown image
page readonly
clean
203E6AB0000
unkown
page read and write
clean
4FD000
heap default
page read and write
clean
C34B0FE000
unkown
page read and write
clean
7FF58FBAD000
unkown image
page readonly
clean
2210000
unkown
page read and write
clean
3F1000
unkown
page read and write
clean
7FF501AA8000
unkown image
page readonly
clean
7FF59959F000
unkown image
page readonly
clean
7FF5386F8000
unkown image
page readonly
clean
830000
heap default
page read and write
clean
7FF58FAE9000
unkown image
page readonly
clean
21185A3D000
unkown
page read and write
clean
203E1D58000
unkown
page read and write
clean
7FF5387CE000
unkown image
page readonly
clean
21185A67000
unkown
page read and write
clean
203E6CFD000
unkown
page read and write
clean
7FF58FAE5000
unkown image
page readonly
clean
203E1702000
unkown
page read and write
clean
21185A31000
unkown
page read and write
clean
1CD97FD000
unkown
page read and write
clean
7FF58FADD000
unkown image
page readonly
clean
1E2CD000
unkown
page read and write
clean
7FF53872A000
unkown image
page readonly
clean
7FF581346000
unkown image
page readonly
clean
7FF59967F000
unkown image
page readonly
clean
1D8A5290000
unkown
page read and write
clean
7FF5815B9000
unkown image
page readonly
clean
134FA4B0000
unkown image
page read and write
clean
1D8A4AA0000
heap private
page read and write
clean
7FF58FB8E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
9A2CF7B000
unkown
page read and write
clean
7FF538798000
unkown image
page readonly
clean
7FF538719000
unkown image
page readonly
clean
203E167B000
unkown
page read and write
clean
7FF581646000
unkown image
page readonly
clean
203E1C15000
unkown
page read and write
clean
7FF58F23F000
unkown image
page readonly
clean
7FF58FB15000
unkown image
page readonly
clean
7FF58FABC000
unkown image
page readonly
clean
7FF58FA5D000
unkown image
page readonly
clean
1DFCA000
unkown
page read and write
clean
AA2DFFE000
unkown
page read and write
clean
7FF59988D000
unkown image
page readonly
clean
21185E00000
unkown image
page readonly
clean
2007D6E0000
unkown image
page readonly
clean
9A2CC7B000
unkown
page read and write
clean
1164B3B000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
1691A200000
unkown
page read and write
clean
7FF5999DC000
unkown image
page readonly
clean
7FF5111C4000
unkown image
page readonly
clean
1DD4F000
unkown
page read and write
clean
1691A2C8000
unkown
page read and write
clean
2007D1A0000
unkown image
page readonly
clean
24596A80000
unkown
page read and write
clean
1691A313000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
21185A5E000
unkown
page read and write
clean
203E6C48000
unkown
page read and write
clean
2CC0000
unkown
page read and write
clean
1CD98FF000
unkown
page read and write
clean
21185A46000
unkown
page read and write
clean
7FF58FB9B000
unkown image
page readonly
clean
7FF5991A0000
unkown image
page readonly
clean
24597640000
unkown
page read and write
clean
7DF517702000
unkown image
page readonly
clean
203E6AB4000
unkown
page read and write
clean
203E16AA000
unkown
page read and write
clean
21185B02000
unkown
page read and write
clean
7FF5999A0000
unkown image
page readonly
clean
42D000
unkown image
page readonly
clean
203E6EC0000
unkown
page read and write
clean
6C0000
unkown
page read and write
clean
7FF5112AB000
unkown image
page readonly
clean
7FF5814A2000
unkown image
page readonly
clean
7FF58FA8C000
unkown image
page readonly
clean
7DF54E0E2000
unkown image
page readonly
clean
6E0000
unkown image
page readonly
clean
7FF538715000
unkown image
page readonly
clean
1D8A52A0000
unkown
page read and write
clean
2007D1A0000
unkown image
page readonly
clean
1D8A4AB0000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
134FA613000
unkown
page read and write
clean
7FF510ABA000
unkown image
page readonly
clean
24597930000
unkown
page read and write
clean
2AD8000
heap private
page read and write
clean
7DF5176F0000
unkown image
page readonly
clean
203E6C55000
unkown
page read and write
clean
7FF5815B5000
unkown image
page readonly
clean
203E2470000
unkown
page read and write
clean
7FF58164B000
unkown image
page readonly
clean
E90000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7DF54E0D2000
unkown image
page readonly
clean
1691A6D0000
unkown image
page readonly
clean
21185A78000
unkown
page read and write
clean
21185A59000
unkown
page read and write
clean
7FF5999E3000
unkown image
page readonly
clean
1691A2E8000
unkown
page read and write
clean
7FF58FA60000
unkown image
page readonly
clean
7FF5387B0000
unkown image
page readonly
clean
7FF581664000
unkown image
page readonly
clean
7FF5387DB000
unkown image
page readonly
clean
7FF599ABE000
unkown image
page readonly
clean
7FF51128B000
unkown image
page readonly
clean
134FA629000
unkown
page read and write
clean
245969C0000
unkown
page read and write
clean
50E73DB000
unkown
page read and write
clean
203E6F00000
unkown
page read and write
clean
7FF501DD0000
unkown image
page readonly
clean
42D000
unkown image
page readonly
clean
1DE8F000
unkown
page read and write
clean
21185860000
unkown image
page readonly
clean
134FA713000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
7DF59FE32000
unkown image
page readonly
clean
36BE000
unkown
page read and write
clean
7FF580D26000
unkown image
page readonly
clean
7DF526BC0000
unkown image
page readonly
clean
7FF599AEF000
unkown image
page readonly
clean
50E787C000
unkown
page read and write
clean
203E6960000
unkown
page read and write
clean
203E6BC0000
unkown
page read and write
clean
754000
heap default
page read and write
clean
21185A7D000
unkown
page read and write
clean
24597650000
unkown
page read and write
clean
7FF511225000
unkown image
page readonly
clean
7FF599670000
unkown image
page readonly
clean
2007D258000
unkown
page read and write
clean
7FF58165D000
unkown image
page readonly
clean
7DF424A80000
unkown image
page readonly
clean
203E6CEF000
unkown
page read and write
clean
24596D59000
heap private
page read and write
clean
1E3CF000
unkown
page read and write
clean
203E13C0000
unkown image
page readonly
clean
7FF599811000
unkown image
page readonly
clean
21185A47000
unkown
page read and write
clean
116507F000
unkown
page read and write
clean
21185840000
unkown image
page readonly
clean
7FF599887000
unkown image
page readonly
clean
203E6D02000
unkown
page read and write
clean
2007D268000
unkown
page read and write
clean
21185A02000
unkown
page read and write
clean
7FF58F927000
unkown image
page readonly
clean
1D8A4C02000
unkown
page read and write
clean
2007D870000
unkown image
page readonly
clean
203E6C16000
unkown
page read and write
clean
7FF599292000
unkown image
page readonly
clean
7FF581573000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
810000
unkown
page read and write
clean
7FF599A33000
unkown image
page readonly
clean
2007D180000
unkown image
page read and write
clean
7FF58167B000
unkown image
page readonly
clean
21A0000
unkown
page execute read
clean
203E1410000
heap default
page read and write
clean
6F0000
unkown
page read and write
clean
203E1714000
unkown
page read and write
clean
7FF510AFF000
unkown image
page readonly
clean
7FF581587000
unkown image
page readonly
clean
203E14F0000
unkown image
page readonly
clean
7DF54E0D2000
unkown image
page readonly
clean
203E1D02000
unkown
page read and write
clean
32015FC000
unkown
page read and write
clean
7FF58F239000
unkown image
page readonly
clean
203E6C21000
unkown
page read and write
clean
7FF5999E7000
unkown image
page readonly
clean
21185A5F000
unkown
page read and write
clean
21185A24000
unkown
page read and write
clean
B0F000
unkown
page read and write
clean
24596A00000
unkown image
page readonly
clean
1691A170000
unkown image
page readonly
clean
7FF58FA93000
unkown image
page readonly
clean
7FF58FAD9000
unkown image
page readonly
clean
7FF538723000
unkown image
page readonly
clean
7FF58A52F000
unkown image
page readonly
clean
1E510000
unkown
page read and write
clean
134FA65B000
unkown
page read and write
clean
7DF54E0D0000
unkown image
page readonly
clean
4C0000
heap default
page read and write
clean
7FF501D65000
unkown image
page readonly
clean
7FF53857D000
unkown image
page readonly
clean
7FF5999C0000
unkown image
page readonly
clean
1DC4E000
unkown
page read and write
clean
7FF511290000
unkown image
page readonly
clean
7FF5998A3000
unkown image
page readonly
clean
7FF58FAA7000
unkown image
page readonly
clean
7FF58167D000
unkown image
page readonly
clean
203E169F000
unkown
page read and write
clean
2007D202000
unkown
page read and write
clean
AA2DB7E000
unkown
page read and write
clean
7FF511278000
unkown image
page readonly
clean
7FF501D0D000
unkown image
page readonly
clean
24596C00000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
203E1600000
unkown
page read and write
clean
2007D300000
unkown
page read and write
clean
1D8A4AD0000
unkown image
page readonly
clean
134FA640000
unkown
page read and write
clean
1691AB00000
unkown
page read and write
clean
21185A4E000
unkown
page read and write
clean
134FABA0000
unkown image
page readonly
clean
203E16AC000
unkown
page read and write
clean
7FF58FA92000
unkown image
page readonly
clean
7FF510AB3000
unkown image
page readonly
clean
C34B1FF000
unkown
page read and write
clean
21185A79000
unkown
page read and write
clean
7FF58F8FD000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
1691A170000
unkown image
page readonly
clean
7FF599296000
unkown image
page readonly
clean
7FF5997E1000
unkown image
page readonly
clean
7DF526BC2000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1691A2E1000
unkown
page read and write
clean
21E0000
unkown image
page readonly
clean
24596F70000
unkown image
page readonly
clean
7FF501DFF000
unkown image
page readonly
clean
7DF517700000
unkown image
page readonly
clean
7FF5811DA000
unkown image
page readonly
clean
203E15E0000
unkown
page read and write
clean
7FF58164E000
unkown image
page readonly
clean
3201FFF000
unkown
page read and write
clean
1D8A4C56000
unkown
page read and write
clean
7DF5A5492000
unkown image
page readonly
clean
134FA4D0000
unkown image
page readonly
clean
7FF501DFF000
unkown image
page readonly
clean
7FF599964000
unkown image
page readonly
clean
1691A2C1000
unkown
page read and write
clean
7FF5387DF000
unkown image
page readonly
clean
7FF5386EC000
unkown image
page readonly
clean
7FF58FB7B000
unkown image
page readonly
clean
24597980000
unkown
page read and write
clean
7FF58FA74000
unkown image
page readonly
clean
32014FA000
unkown
page read and write
clean
7FF5110F7000
unkown image
page readonly
clean
7DF5A54B0000
unkown image
page readonly
clean
7DF596F80000
unkown image
page readonly
clean
1691A223000
unkown
page read and write
clean
203E1C00000
unkown
page read and write
clean
7FF501AB6000
unkown image
page readonly
clean
134FA677000
unkown
page read and write
clean
7FF58F89D000
unkown image
page readonly
clean
7FF581638000
unkown image
page readonly
clean
203E6C11000
unkown
page read and write
clean
7FF58FB70000
unkown image
page readonly
clean
7FF58FB84000
unkown image
page readonly
clean
700000
heap default
page read and write
clean
7FF501DE4000
unkown image
page readonly
clean
7FF501D4A000
unkown image
page readonly
clean
7FF5110CD000
unkown image
page readonly
clean
24597910000
unkown
page readonly
clean
1D8A5260000
unkown
page read and write
clean
C34AFF9000
unkown
page read and write
clean
24597920000
unkown
page read and write
clean
7DF5AF3E0000
unkown image
page readonly
clean
203E6A70000
unkown
page read and write
clean
7DF526BB2000
unkown image
page readonly
clean
7FF501CD0000
unkown image
page readonly
clean
7DF5A54A2000
unkown image
page readonly
clean
7FF58FB8D000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF5112BF000
unkown image
page readonly
clean
7FF501B9D000
unkown image
page readonly
clean
21185A64000
unkown
page read and write
clean
7FF58FBAF000
unkown image
page readonly
clean
7FF599621000
unkown image
page readonly
clean
1E40D000
unkown
page read and write
clean
2340000
unkown
page read and write
clean
24596D60000
unkown
page read and write
clean
1E50F000
unkown
page read and write
clean
7FF501CF7000
unkown image
page readonly
clean
203E1640000
unkown
page read and write
clean
7DF526BC2000
unkown image
page readonly
clean
24597900000
unkown
page read and write
clean
203E6B80000
unkown
page read and write
clean
7FF599AEF000
unkown image
page readonly
clean
134FA800000
unkown image
page readonly
clean
7FF510AB0000
unkown image
page readonly
clean
7FF5815E5000
unkown image
page readonly
clean
7DF54E0E0000
unkown image
page readonly
clean
21185840000
unkown image
page readonly
clean
7DF5AF3E0000
unkown image
page readonly
clean
24596A30000
heap default
page read and write
clean
7FF5999B0000
unkown image
page readonly
clean
2330000
heap private
page read and write
clean
7FF581575000
unkown image
page readonly
clean
37BF000
unkown
page read and write
clean
7FF599664000
unkown image
page readonly
clean
7FF581412000
unkown image
page readonly
clean
7DF5A54A0000
unkown image
page readonly
clean
7FF58FB58000
unkown image
page readonly
clean
203E16FD000
unkown
page read and write
clean
7FF58FB76000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF58F932000
unkown image
page readonly
clean
7FF599AAF000
unkown image
page readonly
clean
1D9CE000
unkown
page read and write
clean
7FF501D35000
unkown image
page readonly
clean
7DF526BC0000
unkown image
page readonly
clean
7FF599693000
unkown image
page readonly
clean
21185F80000
unkown image
page readonly
clean
203E2360000
unkown
page read and write
clean
203E2363000
unkown
page read and write
clean
AA2DA7C000
unkown
page read and write
clean
21185A45000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF58FB9D000
unkown image
page readonly
clean
7DF5AF3F0000
unkown image
page readonly
clean
7DF5A54B2000
unkown image
page readonly
clean
203E6950000
unkown
page read and write
clean
7FF58FAEA000
unkown image
page readonly
clean
203E6A94000
unkown
page read and write
clean
1D8A5000000
unkown image
page readonly
clean
50E7DFE000
unkown
page read and write
clean
116587F000
unkown
page read and write
clean
7FF501D2D000
unkown image
page readonly
clean
21185A7A000
unkown
page read and write
clean
7DF4A3370000
unkown image
page readonly
clean
7FF581577000
unkown image
page readonly
clean
203E168F000
unkown
page read and write
clean
3201CFD000
unkown
page read and write
clean
245972F0000
unkown image
page readonly
clean
7FF58156C000
unkown image
page readonly
clean
506000
heap default
page read and write
clean
1D8A4C3D000
unkown
page read and write
clean
21186202000
unkown
page read and write
clean
7FF58167F000
unkown image
page readonly
clean
1691A2CB000
unkown
page read and write
clean
7FF511286000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
203E13E0000
unkown image
page readonly
clean
1691A190000
unkown image
page readonly
clean
7DF5176F2000
unkown image
page readonly
clean
203E1629000
unkown
page read and write
clean
7FF581496000
unkown image
page readonly
clean
7FF58FB68000
unkown image
page readonly
clean
7FF59993F000
unkown image
page readonly
clean
7FF58FAD5000
unkown image
page readonly
clean
19C000
unkown
page read and write
clean
7FF58F95C000
unkown image
page readonly
clean
5C5000
heap private
page read and write
clean
1691A960000
unkown image
page write copy
clean
134FA520000
heap default
page read and write
clean
7FF5998BC000
unkown image
page readonly
clean
245976B0000
unkown
page read and write
clean
7FF58F96F000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7DF517710000
unkown image
page readonly
clean
2007D190000
heap private
page read and write
clean
7FF58141D000
unkown image
page readonly
clean
134FA4D0000
unkown image
page readonly
clean
203E1658000
unkown
page read and write
clean
7FF5998A8000
unkown image
page readonly
clean
203E6C61000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
24596C20000
unkown
page read and write
clean
21185970000
unkown image
page readonly
clean
7FF599287000
unkown image
page readonly
clean
7FF581562000
unkown image
page readonly
clean
1D8A4AE0000
unkown image
page readonly
clean
7FF501D07000
unkown image
page readonly
clean
1D8A4C29000
unkown
page read and write
clean
29A0000
unkown
page read and write
clean
7FF580EC4000
unkown image
page readonly
clean
7FF501DC6000
unkown image
page readonly
clean
7DF494E40000
unkown image
page readonly
clean
203E6D02000
unkown
page read and write
clean
203E1613000
unkown
page read and write
clean
134FA602000
unkown
page read and write
clean
7FF53870D000
unkown image
page readonly
clean
2007D4D0000
unkown image
page readonly
clean
203E6BD0000
unkown
page read and write
clean
21185A69000
unkown
page read and write
clean
7DF5A54B2000
unkown image
page readonly
clean
1CD94FC000
unkown
page read and write
clean
21185A13000
unkown
page read and write
clean
50E7C7D000
unkown
page read and write
clean
2007D1C0000
unkown image
page readonly
clean
B10000
unkown image
page readonly
clean
1691A270000
unkown
page read and write
clean
116557F000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5815CA000
unkown image
page readonly
clean
2AD0000
heap private
page read and write
clean
1CD96FE000
unkown
page read and write
clean
7FF58FA9C000
unkown image
page readonly
clean
21185A62000
unkown
page read and write
clean
203E13A0000
unkown image
page read and write
clean
7FFC0000
unkown image
page readonly
clean
3F5000
unkown
page read and write
clean
203E1B80000
unkown image
page readonly
clean
1D54F000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
AA2DDFE000
unkown
page read and write
clean
21185A00000
unkown
page read and write
clean
2007D200000
unkown
page read and write
clean
1EA0F000
unkown
page read and write
clean
1691A150000
unkown image
page read and write
clean
24596A20000
unkown image
page readonly
clean
2007D1F0000
heap default
page read and write
clean
7DF5176F2000
unkown image
page readonly
clean
1E10E000
unkown
page read and write
clean
7DF517702000
unkown image
page readonly
clean
1D8A5190000
unkown image
page readonly
clean
2007D950000
unkown
page read and write
clean
7FF58FB05000
unkown image
page readonly
clean
7DF5A5492000
unkown image
page readonly
clean
4CA000
heap default
page read and write
clean
7DF526BB0000
unkown image
page readonly
clean
AA2DEFE000
unkown
page read and write
clean
7DF526BD0000
unkown image
page readonly
clean
7FF59966A000
unkown image
page readonly
clean
7FF504F6E000
unkown image
page readonly
clean
1E18D000
unkown
page read and write
clean
7FF51127F000
unkown image
page readonly
clean
203E2370000
unkown
page read and write
clean
1D64F000
unkown
page read and write
clean
1E28D000
unkown
page read and write
clean
134FA687000
unkown
page read and write
clean
1691A4D0000
unkown image
page readonly
clean
7DF44BFA0000
unkown image
page readonly
clean
7DF5A54B0000
unkown image
page readonly
clean
56E000
unkown
page execute and read and write
clean
32017FA000
unkown
page read and write
clean
21185A6E000
unkown
page read and write
clean
7FF5387DF000
unkown image
page readonly
clean
7FF58FAA8000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
7FF5995F6000
unkown image
page readonly
clean
7FF5112A4000
unkown image
page readonly
clean
203E1D18000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF58FB9F000
unkown image
page readonly
clean
7DF59FE32000
unkown image
page readonly
clean
21185A74000
unkown
page read and write
clean
21185A83000
unkown
page read and write
clean
1691A213000
unkown
page read and write
clean
7FF501D39000
unkown image
page readonly
clean
7FF5999FC000
unkown image
page readonly
clean
7FF58F8A7000
unkown image
page readonly
clean
C34B179000
unkown
page read and write
clean
1691A243000
unkown
page read and write
clean
203E6970000
unkown
page read and write
clean
7FF59977A000
unkown image
page readonly
clean
1D8A4C00000
unkown
page read and write
clean
7FF59999D000
unkown image
page readonly
clean
203E1672000
unkown
page read and write
clean
7DF5A54B0000
unkown image
page readonly
clean
7FF5387A6000
unkown image
page readonly
clean
1691A860000
unkown image
page readonly
clean
21185A42000
unkown
page read and write
clean
7DF596F70000
unkown image
page readonly
clean
7FF599884000
unkown image
page readonly
clean
7FF58112F000
unkown image
page readonly
clean
24597170000
unkown image
page readonly
clean
203E6D04000
unkown
page read and write
clean
203E6AA0000
unkown
page read and write
clean
7FF599AA8000
unkown image
page readonly
clean
7FF5387AB000
unkown image
page readonly
clean
24596D55000
heap private
page read and write
clean
1D8A5290000
unkown
page read and write
clean
D80000
unkown image
page readonly
clean
50E7AFD000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
7FF5999A7000
unkown image
page readonly
clean
7FF58166E000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
2007D264000
unkown
page read and write
clean
7FF599277000
unkown image
page readonly
clean
1D8A4A90000
unkown image
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF58FB6B000
unkown image
page readonly
clean
203E6BD0000
unkown
page read and write
clean
1691A229000
unkown
page read and write
clean
24596A80000
unkown
page read and write
clean
1D8A4D02000
unkown
page read and write
clean
203E1D13000
unkown
page read and write
clean
134FA600000
unkown
page read and write
clean
1D8A5290000
unkown
page read and write
clean
7FF58F6E1000
unkown image
page readonly
clean
7FF58FB9F000
unkown image
page readonly
clean
7FF511203000
unkown image
page readonly
clean
357E000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7DF5AF400000
unkown image
page readonly
clean
7FF5997E3000
unkown image
page readonly
clean
7FF599AEB000
unkown image
page readonly
clean
7FF58F83A000
unkown image
page readonly
clean
7FF501DEE000
unkown image
page readonly
clean
7FF5814FE000
unkown image
page readonly
clean
7FF5997F7000
unkown image
page readonly
clean
21185A73000
unkown
page read and write
clean
7DF5AF3E2000
unkown image
page readonly
clean
7FF58FAFA000
unkown image
page readonly
clean
203E6B40000
unkown
page read and write
clean
1D8A4AB0000
unkown image
page readonly
clean
7FF5999C4000
unkown image
page readonly
clean
134FAA10000
unkown image
page readonly
clean
7FF599A55000
unkown image
page readonly
clean
21185A63000
unkown
page read and write
clean
7FF599813000
unkown image
page readonly
clean
7DF4A3360000
unkown image
page readonly
clean
203E1D00000
unkown
page read and write
clean
24596D50000
heap private
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF501DCB000
unkown image
page readonly
clean
134FAC80000
unkown
page read and write
clean
5C8000
heap private
page read and write
clean
7FF58FAB7000
unkown image
page readonly
clean
203E6BA0000
unkown
page read and write
clean
21185A40000
unkown
page read and write
clean
116577E000
unkown
page read and write
clean
21185A3A000
unkown
page read and write
clean
134FAA00000
unkown image
page readonly
clean
2007D27A000
unkown
page read and write
clean
203E1702000
unkown
page read and write
clean
203E6B50000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
2007D23E000
unkown
page read and write
clean
7FF58F3F4000
unkown image
page readonly
clean
7FF5110E9000
unkown image
page readonly
clean
7DF5A54B0000
unkown image
page readonly
clean
2007D1D0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF58FA82000
unkown image
page readonly
clean
7DF596F90000
unkown image
page readonly
clean
7FF58FAB8000
unkown image
page readonly
clean
50E7B7F000
unkown
page read and write
clean
245976C0000
unkown
page read and write
clean
AA2DCFF000
unkown
page read and write
clean
2220000
heap private
page read and write
clean
7DF596F80000
unkown image
page readonly
clean
C34B079000
unkown
page read and write
clean
3201DFB000
unkown
page read and write
clean
7FF58F93D000
unkown image
page readonly
clean
245969D0000
unkown image
page readonly
clean
7DF526BD0000
unkown image
page readonly
clean
203E28F0000
unkown
page read and write
clean
7FF501CE3000
unkown image
page readonly
clean
2CB4000
heap private
page read and write
clean
7DF517700000
unkown image
page readonly
clean
203E6C77000
unkown
page read and write
clean
1CD91FF000
unkown
page read and write
clean
2007D27C000
unkown
page read and write
clean
203E6BD0000
unkown
page read and write
clean
7DF596F82000
unkown image
page readonly
clean
7DF59FE22000
unkown image
page readonly
clean
203E1694000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF58FB9E000
unkown image
page readonly
clean
7FF501DBF000
unkown image
page readonly
clean
203E6B90000
unkown
page read and write
clean
24596A80000
unkown
page read and write
clean
134FA500000
unkown image
page readonly
clean
7DF596F90000
unkown image
page readonly
clean
7FF58FB5F000
unkown image
page readonly
clean
21D0000
unkown
page read and write
clean
5C0000
heap private
page read and write
clean
203E1D04000
unkown
page read and write
clean
1D8A4BE0000
unkown image
page readonly
clean
21185820000
unkown image
page read and write
clean
400000
unkown image
page readonly
clean
9A2D17F000
unkown
page read and write
clean
7FF58F966000
unkown image
page readonly
clean
2007D228000
unkown
page read and write
clean
203E1A00000
unkown image
page readonly
clean
32013F8000
unkown
page read and write
clean
1CD8E7B000
unkown
page read and write
clean
7FF58FAAC000
unkown image
page readonly
clean
203E13F0000
unkown image
page readonly
clean
21185A44000
unkown
page read and write
clean
7DF5AF3F2000
unkown image
page readonly
clean
21185A29000
unkown
page read and write
clean
21185A60000
unkown
page read and write
clean
2D40000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
7FF5112BF000
unkown image
page readonly
clean
7FF58F82A000
unkown image
page readonly
clean
7FF599A3A000
unkown image
page readonly
clean
2007D313000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7FF5815AD000
unkown image
page readonly
clean
21185890000
heap default
page read and write
clean
7FF5997AF000
unkown image
page readonly
clean
1691A1A0000
unkown image
page readonly
clean
2337000
heap private
page read and write
clean
21185A6A000
unkown
page read and write
clean
203E168B000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
203E13C0000
unkown image
page readonly
clean
7FF58FA67000
unkown image
page readonly
clean
2CB0000
heap private
page read and write
clean
203E6AB0000
unkown
page read and write
clean
AA2DAFE000
unkown
page read and write
clean
2260000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
203E6A91000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
1691A2BA000
unkown
page read and write
clean
7FF5112AE000
unkown image
page readonly
clean
1691A1F0000
unkown
page read and write
clean
7FF501AF8000
unkown image
page readonly
clean
7FF501CC0000
unkown image
page readonly
clean
7DF5A54A0000
unkown image
page readonly
clean
1691A850000
unkown image
page readonly
clean
C34ABDB000
unkown
page read and write
clean
367F000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7DF54E0D0000
unkown image
page readonly
clean
7FF5815C3000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
2200000
unkown
page read and write
clean
7FF599ADE000
unkown image
page readonly
clean
EA0000
unkown image
page readonly
clean
7DF517710000
unkown image
page readonly
clean
203E1707000
unkown
page read and write
clean
1691AA02000
unkown
page read and write
clean
7FF58FB6F000
unkown image
page readonly
clean
203E1D18000
unkown
page read and write
clean
7FF5111F9000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF599AB6000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7DF59FE40000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
203E13B0000
heap private
page read and write
clean
7FF58FBAF000
unkown image
page readonly
clean
7FF599A29000
unkown image
page readonly
clean
1691A160000
heap private
page read and write
clean
116517C000
unkown
page read and write
clean
7FF58FA4D000
unkown image
page readonly
clean
7FF58FAF3000
unkown image
page readonly
clean
134FAB90000
unkown image
page readonly
clean
7FF599840000
unkown image
page readonly
clean
7FF538493000
unkown image
page readonly
clean
21185A41000
unkown
page read and write
clean
1691A1C0000
heap default
page read and write
clean
7DF54E0E2000
unkown image
page readonly
clean
7DF5A54A2000
unkown image
page readonly
clean
203E6C2E000
unkown
page read and write
clean
203E16A7000
unkown
page read and write
clean
21185A58000
unkown
page read and write
clean
116597E000
unkown
page read and write
clean
134FAE02000
unkown
page read and write
clean
1691A302000
unkown
page read and write
clean
7FF58158C000
unkown image
page readonly
clean
1E00E000
unkown
page read and write
clean
7FF58F8C6000
unkown image
page readonly
clean
7DF5176F0000
unkown image
page readonly
clean
1164F7B000
unkown
page read and write
clean
21185A6C000
unkown
page read and write
clean
7FF501DB8000
unkown image
page readonly
clean
2007D6D0000
unkown image
page readonly
clean
7FF504F6E000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1D8A4E00000
unkown image
page readonly
clean
7DF5A5490000
unkown image
page readonly
clean
7FF58163F000
unkown image
page readonly
clean
7FF58F6B6000
unkown image
page readonly
clean
7FF581598000
unkown image
page readonly
clean
1E55E000
unkown
page read and write
clean
7DF5A54A2000
unkown image
page readonly
clean
4B0000
unkown image
page readonly
clean
7FF53879F000
unkown image
page readonly
clean
2250000
heap private
page read and write
clean
7DF596F72000
unkown image
page readonly
clean
7FF5814F4000
unkown image
page readonly
clean
2007D302000
unkown
page read and write
clean
21185830000
heap private
page read and write
clean
7FF5991AA000
unkown image
page readonly
clean
7FF5999F7000
unkown image
page readonly
clean
7FF58F97E000
unkown image
page readonly
clean
7FF537E79000
unkown image
page readonly
clean
7FF501DDD000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
203E6C75000
unkown
page read and write
clean
203E6CF5000
unkown
page read and write
clean
21185A57000
unkown
page read and write
clean
7DF4AD2B0000
unkown image
page readonly
clean
7FF5387CB000
unkown image
page readonly
clean
203E1C02000
unkown
page read and write
clean
203E6CFF000
unkown
page read and write
clean
6AE000
unkown
page read and write
clean
203E6A90000
unkown
page read and write
clean
1DD8E000
unkown
page read and write
clean
7FF5387C4000
unkown image
page readonly
clean
7FF5813C8000
unkown image
page readonly
clean
1691A1D0000
unkown image
page readonly
clean
1DACF000
unkown
page read and write
clean
203E6A78000
unkown
page read and write
clean
24596A38000
heap default
page read and write
clean
2007D213000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
21185A5C000
unkown
page read and write
clean
203E6A7E000
unkown
page read and write
clean
7FF58FA97000
unkown image
page readonly
clean
7DF526BB2000
unkown image
page readonly
clean
116537F000
unkown
page read and write
clean
7FF599A25000
unkown image
page readonly
clean
7FF599A08000
unkown image
page readonly
clean
116547D000
unkown
page read and write
clean
1CD937C000
unkown
page read and write
clean
7FF599A1D000
unkown image
page readonly
clean
7DF54E0F0000
unkown image
page readonly
clean
9A2D27E000
unkown
page read and write
clean
134FA664000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
50E78FC000
unkown
page read and write
clean
1D8A5180000
unkown image
page readonly
clean
7DF59FE20000
unkown image
page readonly
clean
7FF58148D000
unkown image
page readonly
clean
7DF5AF3E2000
unkown image
page readonly
clean
7FF5997ED000
unkown image
page readonly
clean
5E0000
heap default
page read and write
clean
7FF5386D7000
unkown image
page readonly
clean
245969D0000
unkown image
page readonly
clean
7FF501D43000
unkown image
page readonly
clean
134FA4C0000
heap private
page read and write
clean
1D8A5402000
unkown
page read and write
clean
2007D860000
unkown image
page readonly
clean
7FF510B59000
unkown image
page readonly
clean
203E6B40000
unkown
page read and write
clean
7FF501DFD000
unkown image
page readonly
clean
134FA702000
unkown
page read and write
clean
32018FB000
unkown
page read and write
clean
7FF58FB94000
unkown image
page readonly
clean
203E6AA0000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1E90E000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7DF54E0E0000
unkown image
page readonly
clean
203E6BD0000
unkown
page read and write
clean
7FF5999C8000
unkown image
page readonly
clean
7DF5AF3F0000
unkown image
page readonly
clean
21185870000
unkown image
page readonly
clean
203E6D00000
unkown
page read and write
clean
4E1000
heap default
page read and write
clean
24596C40000
unkown image
page readonly
clean
21185A61000
unkown
page read and write
clean
7FF599ACD000
unkown image
page readonly
clean
1691A287000
unkown
page read and write
clean
203E1678000
unkown
page read and write
clean
9A000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF51129D000
unkown image
page readonly
clean
7FF5111CC000
unkown image
page readonly
clean
7FF581358000
unkown image
page readonly
clean
29F000
unkown
page read and write
clean
7FF5111F5000
unkown image
page readonly
clean
21185C00000
unkown image
page readonly
clean
134FA67C000
unkown
page read and write
clean
134FA4F0000
unkown image
page readonly
clean
910000
unkown
page read and write
clean
8BF000
unkown
page read and write
clean
1DB0E000
unkown
page read and write
clean
1D8A4C13000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7DF5A54C0000
unkown image
page readonly
clean
203E6B40000
unkown
page read and write
clean
203E1800000
unkown image
page readonly
clean
203E6A70000
unkown
page read and write
clean
7FF599927000
unkown image
page readonly
clean
7FF5997DA000
unkown image
page readonly
clean
430000
unkown image
page readonly
clean
116567E000
unkown
page read and write
clean
7FF538745000
unkown image
page readonly
clean
7DF5A54A0000
unkown image
page readonly
clean
1E65F000
unkown
page read and write
clean
245969B0000
unkown image
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF58FB7E000
unkown image
page readonly
clean
37D1000
unkown
page read and write
clean
9A2D07E000
unkown
page read and write
clean
7FF58FA1E000
unkown image
page readonly
clean
7DF59FE30000
unkown image
page readonly
clean
7FF599ADB000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF5997DC000
unkown image
page readonly
clean
203E2380000
unkown
page read and write
clean
7DF5A5490000
unkown image
page readonly
clean
7DF5A54C0000
unkown image
page readonly
clean
7FF5111ED000
unkown image
page readonly
clean
134FA675000
unkown
page read and write
clean
1691AB12000
unkown
page read and write
clean
203E1BE1000
unkown
page read and write
clean
7FF58A52F000
unkown image
page readonly
clean
1DC0F000
unkown
page read and write
clean
245969F0000
unkown image
page readonly
clean
7FF58FAE3000
unkown image
page readonly
clean
7FF58166B000
unkown image
page readonly
clean
1DECD000
unkown
page read and write
clean
7DF59FE40000
unkown image
page readonly
clean
7FF599ABB000
unkown image
page readonly
clean
24596A78000
unkown
page read and write
clean
7DF4155C0000
unkown image
page readonly
clean
1D8A4B00000
heap default
page read and write
clean
7FF58FB9B000
unkown image
page readonly
clean
21185A7C000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1CD907C000
unkown
page read and write
clean
7DF596F82000
unkown image
page readonly
clean
42B000
unkown image
page read and write
clean
7DF5A54A0000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
1CD92FF000
unkown
page read and write
clean
7DF5A54A2000
unkown image
page readonly
clean
21185A5A000
unkown
page read and write
clean
7FF510B04000
unkown image
page readonly
clean
203E6C3B000
unkown
page read and write
clean
7FF501486000
unkown image
page readonly
clean
7FF51104A000
unkown image
page readonly
clean
1CD947C000
unkown
page read and write
clean
7FF58FB8B000
unkown image
page readonly
clean
660000
unkown image
page readonly
clean
8FE000
unkown
page read and write
clean
203E16FD000
unkown
page read and write
clean
19402410000
unkown image
page readonly
clean
D10000
unkown image
page readonly
clean
7DF5AF400000
unkown image
page readonly
clean
7DF5AF3F2000
unkown image
page readonly
clean
7FF50160F000
unkown image
page readonly
clean
47E000
unkown
page read and write
clean
7DF526BB0000
unkown image
page readonly
clean
7DF59FE20000
unkown image
page readonly
clean
7DF596F70000
unkown image
page readonly
clean
7FF599AD4000
unkown image
page readonly
clean
7FF581554000
unkown image
page readonly
clean
7FF58FB7D000
unkown image
page readonly
clean
7FF5999D2000
unkown image
page readonly
clean
203E7000000
unkown
page read and write
clean
7FF58FACD000
unkown image
page readonly
clean
7FF58FB66000
unkown image
page readonly
clean
7FF501DEB000
unkown image
page readonly
clean
9FF000
unkown
page read and write
clean
21185990000
unkown
page read and write
clean
7FF510AFD000
unkown image
page readonly
clean
7FF5811DE000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1CD95FD000
unkown
page read and write
clean
2007DA02000
unkown
page read and write
clean
7DF54E0F0000
unkown image
page readonly
clean
203E6BB0000
unkown
page read and write
clean
7FF58167F000
unkown image
page readonly
clean
7FF599AED000
unkown image
page readonly
clean
32016FE000
unkown
page read and write
clean
42D000
unkown image
page readonly
clean
203E6C00000
unkown
page read and write
clean
7DF59FE30000
unkown image
page readonly
clean
3200F9C000
unkown
page read and write
clean
19402410000
unkown image
page readonly
clean
22EE000
unkown
page read and write
clean
There are 856 hidden memdumps, click here to show them.