IOC Report

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\AfWu3i35ny.exe
'C:\Users\user\Desktop\AfWu3i35ny.exe'
malicious

URLs

Name
IP
Malicious
http://45.137.22.91/blm.bin
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
401000
unkown image
page execute read
malicious
21C0000
unkown
page execute and read and write
malicious
401000
unkown image
page execute read
malicious
13475860000
unkown image
page readonly
clean
7FF5549C9000
unkown image
page readonly
clean
7FF56B7FE000
unkown image
page readonly
clean
1CD993AA000
unkown
page read and write
clean
7FF50B3FB000
unkown image
page readonly
clean
19A3D07E000
unkown
page read and write
clean
7FF58914B000
unkown image
page readonly
clean
19A3D400000
unkown image
page readonly
clean
7FF554B8A000
unkown image
page readonly
clean
3633B1C000
unkown
page read and write
clean
7FF589055000
unkown image
page readonly
clean
1714D472000
unkown
page read and write
clean
7FF4F4551000
unkown image
page readonly
clean
2693CF10000
unkown image
page read and write
clean
19A3D06F000
unkown
page read and write
clean
2693D3C0000
unkown image
page readonly
clean
7FF4F453A000
unkown image
page readonly
clean
1CD99800000
unkown
page read and write
clean
2AFCDE4D000
unkown
page read and write
clean
2693CF50000
unkown image
page readonly
clean
7FF5641A1000
unkown image
page readonly
clean
17152890000
unkown
page read and write
clean
7FF554577000
unkown image
page readonly
clean
7DF5545F2000
unkown image
page readonly
clean
7FF50B514000
unkown image
page readonly
clean
1714DBD0000
unkown image
page readonly
clean
7DF494D30000
unkown image
page readonly
clean
3633F78000
stack
page read and write
clean
7FF589123000
unkown image
page readonly
clean
2C70000
unkown
page read and write
clean
7DF579540000
unkown image
page readonly
clean
1CD98A4D000
unkown
page read and write
clean
1CD9986A000
unkown
page read and write
clean
1CD98ED0000
unkown image
page readonly
clean
19A3CE20000
unkown image
page readonly
clean
7DF554600000
unkown image
page readonly
clean
1CD9939D000
unkown
page read and write
clean
15347D60000
unkown
page read and write
clean
17152A55000
unkown
page read and write
clean
1714D360000
unkown image
page readonly
clean
7FF56B74B000
unkown image
page readonly
clean
7FF588FCD000
unkown image
page readonly
clean
15347FFE000
unkown
page read and write
clean
7FF589201000
unkown image
page readonly
clean
15348450000
unkown image
page readonly
clean
7FF577B1E000
unkown image
page readonly
clean
1CD99802000
unkown
page read and write
clean
7FF588F86000
unkown image
page readonly
clean
7FF554954000
unkown image
page readonly
clean
1CD993C3000
unkown
page read and write
clean
17152B03000
unkown
page read and write
clean
7DF5021B2000
unkown image
page readonly
clean
17152AA2000
unkown
page read and write
clean
1CD9938E000
unkown
page read and write
clean
1CD99320000
unkown
page read and write
clean
1714D300000
unkown image
page readonly
clean
7FF54697A000
unkown image
page readonly
clean
1CD99376000
unkown
page read and write
clean
1CD98AAC000
unkown
page read and write
clean
7FF554956000
unkown image
page readonly
clean
7FF55457B000
unkown image
page readonly
clean
1CD98AAC000
unkown
page read and write
clean
7FF5781A3000
unkown image
page readonly
clean
CE0000
unkown image
page readonly
clean
17152D10000
unkown
page read and write
clean
1D2F67F000
stack
page read and write
clean
7FF4F4522000
unkown image
page readonly
clean
7DF585F02000
unkown image
page readonly
clean
7FF50B7F1000
unkown image
page readonly
clean
2693CF96000
heap default
page read and write
clean
19A3D047000
unkown
page read and write
clean
1CD993DB000
unkown
page read and write
clean
4C6D877000
stack
page read and write
clean
19A3D04B000
unkown
page read and write
clean
7FF5549DD000
unkown image
page readonly
clean
7FF577B0E000
unkown image
page readonly
clean
2AFCDD90000
heap private
page read and write
clean
7DF5545F2000
unkown image
page readonly
clean
9A2937F000
stack
page read and write
clean
15347FB8000
heap default
page read and write
clean
7FF50B55F000
unkown image
page readonly
clean
7DF596E62000
unkown image
page readonly
clean
1714E801000
unkown
page read and write
clean
1CD993BD000
unkown
page read and write
clean
1714D330000
unkown image
page readonly
clean
7FF50B7D2000
unkown image
page readonly
clean
7FF56B8B4000
unkown image
page readonly
clean
1CD993A2000
unkown
page read and write
clean
1CD993DB000
unkown
page read and write
clean
17152B00000
unkown
page read and write
clean
9A293FF000
stack
page read and write
clean
19C000
unkown
page read and write
clean
2693CFB1000
unkown
page read and write
clean
1CD98A53000
unkown
page read and write
clean
1CD98AB0000
unkown
page read and write
clean
1CD993B9000
unkown
page read and write
clean
1CD993B5000
unkown
page read and write
clean
7FF4F4249000
unkown image
page readonly
clean
17152C00000
unkown
page read and write
clean
7FF50B7FE000
unkown image
page readonly
clean
2693D170000
unkown image
page readonly
clean
1CD98A56000
unkown
page read and write
clean
2693D3B0000
unkown image
page readonly
clean
7FF50B75E000
unkown image
page readonly
clean
7FF4F3D08000
unkown image
page readonly
clean
171529E0000
unkown
page read and write
clean
7FF54680B000
unkown image
page readonly
clean
17152820000
unkown
page read and write
clean
19A3D03C000
unkown
page read and write
clean
7FF50B7EA000
unkown image
page readonly
clean
7FF55458C000
unkown image
page readonly
clean
1714DD13000
unkown
page read and write
clean
7FF50B5B5000
unkown image
page readonly
clean
1D2F3EB000
unkown
page read and write
clean
2AFCDF00000
unkown
page read and write
clean
171528A0000
unkown
page read and write
clean
13475A7F000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1CD98AD6000
unkown
page read and write
clean
7FF554961000
unkown image
page readonly
clean
13475890000
unkown image
page readonly
clean
1CD98AFE000
unkown
page read and write
clean
7DF5021B0000
unkown image
page readonly
clean
1CD98A00000
unkown
page read and write
clean
1CD99386000
unkown
page read and write
clean
7FF554B5B000
unkown image
page readonly
clean
7FF4F4551000
unkown image
page readonly
clean
1CD98900000
unkown image
page read and write
clean
1CD99372000
unkown
page read and write
clean
7FF50B4F6000
unkown image
page readonly
clean
7FF577B19000
unkown image
page readonly
clean
22C8000
heap private
page read and write
clean
7FF589153000
unkown image
page readonly
clean
17152AFB000
unkown
page read and write
clean
7FF50B17C000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
7FF4F454A000
unkown image
page readonly
clean
7FF50B681000
unkown image
page readonly
clean
7DF596E60000
unkown image
page readonly
clean
347C3FF000
stack
page read and write
clean
7FF50B720000
unkown image
page readonly
clean
13475A4B000
unkown
page read and write
clean
7FF554BF4000
unkown image
page readonly
clean
2693CF30000
unkown image
page readonly
clean
1CD99390000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
7FF4F445D000
unkown image
page readonly
clean
7FF5468B0000
unkown image
page readonly
clean
7FF5468A3000
unkown image
page readonly
clean
7FF554AFE000
unkown image
page readonly
clean
1CD9937E000
unkown
page read and write
clean
1CD98A4E000
unkown
page read and write
clean
7FF554B1F000
unkown image
page readonly
clean
1CD99305000
unkown
page read and write
clean
1CD9939F000
unkown
page read and write
clean
7FF50B713000
unkown image
page readonly
clean
7DF4524C0000
unkown image
page readonly
clean
1CD98910000
heap private
page read and write
clean
1CD993BD000
unkown
page read and write
clean
17152A2F000
unkown
page read and write
clean
15347D70000
unkown image
page readonly
clean
1CD993AA000
unkown
page read and write
clean
1CD9937E000
unkown
page read and write
clean
7DF519460000
unkown image
page readonly
clean
1714DD59000
unkown
page read and write
clean
1CD99050000
unkown image
page readonly
clean
7FF56B847000
unkown image
page readonly
clean
1CD99385000
unkown
page read and write
clean
1CD98AB0000
unkown
page read and write
clean
7FF5891D9000
unkown image
page readonly
clean
7FF588EFA000
unkown image
page readonly
clean
2AFCDE81000
unkown
page read and write
clean
7DF596E70000
unkown image
page readonly
clean
DE3BBAF000
stack
page read and write
clean
2AFCDE84000
unkown
page read and write
clean
7FF589127000
unkown image
page readonly
clean
7FF554B1D000
unkown image
page readonly
clean
7DF596E62000
unkown image
page readonly
clean
212000
unkown
page read and write
clean
1714D8D0000
unkown image
page readonly
clean
67AFF5C000
unkown
page read and write
clean
1714D390000
unkown image
page read and write
clean
7FF56B555000
unkown image
page readonly
clean
1CD98A4B000
unkown
page read and write
clean
1CD98A29000
unkown
page read and write
clean
445000
unkown image
page read and write
clean
1CD98AED000
unkown
page read and write
clean
7FF50B4D2000
unkown image
page readonly
clean
630000
unkown
page read and write
clean
1714D300000
unkown image
page readonly
clean
1D2F6FF000
stack
page read and write
clean
7FF554B8D000
unkown image
page readonly
clean
7DF519480000
unkown image
page readonly
clean
7DF5021D0000
unkown image
page readonly
clean
7FF5546F7000
unkown image
page readonly
clean
7FF5548D7000
unkown image
page readonly
clean
1CD99819000
unkown
page read and write
clean
13475A71000
unkown
page read and write
clean
1714DA50000
unkown image
page readonly
clean
9A000
unkown
page read and write
clean
216000
unkown
page read and write
clean
1CD99372000
unkown
page read and write
clean
7FF554895000
unkown image
page readonly
clean
13475F80000
unkown image
page readonly
clean
7FF4F447E000
unkown image
page readonly
clean
7FF578285000
unkown image
page readonly
clean
7FF58900F000
unkown image
page readonly
clean
2AFCDDA0000
unkown image
page readonly
clean
7FF4F4541000
unkown image
page readonly
clean
2693D1B0000
unkown image
page readonly
clean
7FF5468EE000
unkown image
page readonly
clean
7FF50B565000
unkown image
page readonly
clean
22C0000
heap private
page read and write
clean
17152A00000
unkown
page read and write
clean
7FF546962000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
1714DD59000
unkown
page read and write
clean
7DF562872000
unkown image
page readonly
clean
13475B13000
unkown
page read and write
clean
7FF4F4470000
unkown image
page readonly
clean
1714DBA0000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
1CD99377000
unkown
page read and write
clean
2AFCE602000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
7DF5021C2000
unkown image
page readonly
clean
4C6D47B000
unkown
page read and write
clean
1CD98A70000
unkown
page read and write
clean
1CD98950000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF56B07B000
unkown image
page readonly
clean
DE3BE7F000
stack
page read and write
clean
7DF5021C0000
unkown image
page readonly
clean
1CD98920000
unkown image
page readonly
clean
7FF589177000
unkown image
page readonly
clean
7DF5021C0000
unkown image
page readonly
clean
67B0577000
stack
page read and write
clean
1CD993A0000
unkown
page read and write
clean
7FF5468BE000
unkown image
page readonly
clean
3633B9F000
stack
page read and write
clean
67B08FF000
stack
page read and write
clean
13475A13000
unkown
page read and write
clean
7FF50B510000
unkown image
page readonly
clean
1CD99375000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7DF579550000
unkown image
page readonly
clean
19A3D113000
unkown
page read and write
clean
1CD99802000
unkown
page read and write
clean
17152C24000
unkown
page read and write
clean
1714D400000
unkown
page read and write
clean
1CD98ACB000
unkown
page read and write
clean
1CD99802000
unkown
page read and write
clean
7FF588E85000
unkown image
page readonly
clean
7FF554A7C000
unkown image
page readonly
clean
7FF50B6C2000
unkown image
page readonly
clean
7FF50B551000
unkown image
page readonly
clean
7FF546716000
unkown image
page readonly
clean
7FF58905B000
unkown image
page readonly
clean
19A3D04C000
unkown
page read and write
clean
1CD99391000
unkown
page read and write
clean
7FF50B5B9000
unkown image
page readonly
clean
13475A50000
unkown
page read and write
clean
7FF5547E4000
unkown image
page readonly
clean
13475860000
unkown image
page readonly
clean
1CD993D1000
unkown
page read and write
clean
7FF50B076000
unkown image
page readonly
clean
17152CD0000
unkown
page read and write
clean
17152C08000
unkown
page read and write
clean
7DF579532000
unkown image
page readonly
clean
1CD9937C000
unkown
page read and write
clean
1CD9936D000
unkown
page read and write
clean
1714D429000
unkown
page read and write
clean
960000
unkown image
page readonly
clean
7FF56B81B000
unkown image
page readonly
clean
7FF58915E000
unkown image
page readonly
clean
1CD9939F000
unkown
page read and write
clean
7FF5781A6000
unkown image
page readonly
clean
1CD99802000
unkown
page read and write
clean
7DF585F10000
unkown image
page readonly
clean
15347E90000
unkown
page read and write
clean
1CD99386000
unkown
page read and write
clean
7FF5891EA000
unkown image
page readonly
clean
1CD99819000
unkown
page read and write
clean
7FF5780FC000
unkown image
page readonly
clean
1CD98AFD000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
363477F000
stack
page read and write
clean
15348B20000
unkown
page read and write
clean
2AFCDE3C000
unkown
page read and write
clean
7FF56B8CA000
unkown image
page readonly
clean
1714D413000
unkown
page read and write
clean
7DF519472000
unkown image
page readonly
clean
7DF585F00000
unkown image
page readonly
clean
17152D10000
unkown
page read and write
clean
1CD9937F000
unkown
page read and write
clean
7FF546974000
unkown image
page readonly
clean
1714D513000
unkown
page read and write
clean
153480F0000
unkown
page read and write
clean
2693D190000
unkown
page read and write
clean
7FF58917A000
unkown image
page readonly
clean
7FF50B586000
unkown image
page readonly
clean
1CD98A3C000
unkown
page read and write
clean
1CD993C1000
unkown
page read and write
clean
7FF57802A000
unkown image
page readonly
clean
7FF5468E3000
unkown image
page readonly
clean
363437A000
stack
page read and write
clean
7DF596E80000
unkown image
page readonly
clean
7FF50B546000
unkown image
page readonly
clean
1714D440000
unkown
page read and write
clean
7FF54690A000
unkown image
page readonly
clean
7FF554AEE000
unkown image
page readonly
clean
19A3D200000
unkown image
page readonly
clean
7FF56B8C1000
unkown image
page readonly
clean
7FF578196000
unkown image
page readonly
clean
7FF5543C8000
unkown image
page readonly
clean
7FF56B7D9000
unkown image
page readonly
clean
1CD98AFB000
unkown
page read and write
clean
1CD9935C000
unkown
page read and write
clean
1714D2F0000
heap private
page read and write
clean
7FF546741000
unkown image
page readonly
clean
1CD99130000
unkown image
page write copy
clean
171529F4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1714D458000
unkown
page read and write
clean
13475A81000
unkown
page read and write
clean
1CD9939F000
unkown
page read and write
clean
7FF5780A7000
unkown image
page readonly
clean
2AFCDE74000
unkown
page read and write
clean
7FF589120000
unkown image
page readonly
clean
7FF58912E000
unkown image
page readonly
clean
1CD99399000
unkown
page read and write
clean
7FF5780A2000
unkown image
page readonly
clean
7FF4F44A3000
unkown image
page readonly
clean
7FF5890F7000
unkown image
page readonly
clean
1CD99382000
unkown
page read and write
clean
7FF554B19000
unkown image
page readonly
clean
1714DC15000
unkown
page read and write
clean
4B0000
heap private
page read and write
clean
1CD993B8000
unkown
page read and write
clean
13475880000
unkown image
page readonly
clean
1CD9935E000
unkown
page read and write
clean
19A3D802000
unkown
page read and write
clean
7DF519470000
unkown image
page readonly
clean
2AFCDE4C000
unkown
page read and write
clean
7FF588FEB000
unkown image
page readonly
clean
7FF554A8B000
unkown image
page readonly
clean
1CD9939F000
unkown
page read and write
clean
9A296F9000
stack
page read and write
clean
1CD98A50000
unkown
page read and write
clean
1CD99305000
unkown
page read and write
clean
17152C80000
unkown
page read and write
clean
4C6D57F000
stack
page read and write
clean
7FF578291000
unkown image
page readonly
clean
1CD98A48000
unkown
page read and write
clean
1CD99202000
unkown
page read and write
clean
17152AE2000
unkown
page read and write
clean
7FF50B5EB000
unkown image
page readonly
clean
7FF50B6EE000
unkown image
page readonly
clean
1CD99863000
unkown
page read and write
clean
15347D90000
unkown image
page readonly
clean
1CD993D1000
unkown
page read and write
clean
1714D47C000
unkown
page read and write
clean
7FF50B66C000
unkown image
page readonly
clean
7FF54677B000
unkown image
page readonly
clean
7FF5467FC000
unkown image
page readonly
clean
7FF4F4529000
unkown image
page readonly
clean
7FF50B6D1000
unkown image
page readonly
clean
7FF57827A000
unkown image
page readonly
clean
7FF5543BB000
unkown image
page readonly
clean
7FF56B7F0000
unkown image
page readonly
clean
19A3D04F000
unkown
page read and write
clean
17152C21000
unkown
page read and write
clean
1CD9938E000
unkown
page read and write
clean
1CD99375000
unkown
page read and write
clean
22BE000
stack
page read and write
clean
2AFCE2E0000
unkown image
page readonly
clean
153481A0000
unkown
page read and write
clean
7FF554AD2000
unkown image
page readonly
clean
7FF57819F000
unkown image
page readonly
clean
7FF554B63000
unkown image
page readonly
clean
7FF4F445F000
unkown image
page readonly
clean
19A3D108000
unkown
page read and write
clean
36344FF000
stack
page read and write
clean
7DF554610000
unkown image
page readonly
clean
1CD993A9000
unkown
page read and write
clean
13475C00000
unkown image
page readonly
clean
7FF4F44CD000
unkown image
page readonly
clean
19A3D000000
unkown
page read and write
clean
19A3D102000
unkown
page read and write
clean
DE3BB2C000
unkown
page read and write
clean
347C27F000
stack
page read and write
clean
1CD98AB0000
unkown
page read and write
clean
7FF50B72E000
unkown image
page readonly
clean
1CD993A9000
unkown
page read and write
clean
1CD98AEE000
unkown
page read and write
clean
1CD98A51000
unkown
page read and write
clean
7FF4F44CA000
unkown image
page readonly
clean
7FF50B522000
unkown image
page readonly
clean
13475A3C000
unkown
page read and write
clean
7FF5547E7000
unkown image
page readonly
clean
1CD9938A000
unkown
page read and write
clean
1CD9938B000
unkown
page read and write
clean
2AFCDE4B000
unkown
page read and write
clean
7FF554B07000
unkown image
page readonly
clean
1714D4A2000
unkown
page read and write
clean
1714D3F3000
unkown
page read and write
clean
7FF50B6AF000
unkown image
page readonly
clean
7FF5891F1000
unkown image
page readonly
clean
7FF577E4E000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
9A297FE000
stack
page read and write
clean
1714DD18000
unkown
page read and write
clean
2AFCDD80000
unkown image
page read and write
clean
17152CF0000
unkown
page read and write
clean
7FF50B7FA000
unkown image
page readonly
clean
7FF554975000
unkown image
page readonly
clean
7FF5779CD000
unkown image
page readonly
clean
1714DBC0000
unkown image
page readonly
clean
7FF554777000
unkown image
page readonly
clean
7DF579542000
unkown image
page readonly
clean
7DF554600000
unkown image
page readonly
clean
7DF585F02000
unkown image
page readonly
clean
15348230000
heap private
page read and write
clean
1CD991A0000
unkown image
page read and write
clean
7FF554C01000
unkown image
page readonly
clean
7FF56B7E3000
unkown image
page readonly
clean
DE3C07B000
stack
page read and write
clean
7DF519462000
unkown image
page readonly
clean
7FF4F449B000
unkown image
page readonly
clean
1CD99802000
unkown
page read and write
clean
17152CC0000
unkown
page read and write
clean
660000
heap default
page read and write
clean
2100000
unkown image
page readonly
clean
7FF589085000
unkown image
page readonly
clean
7FF54689D000
unkown image
page readonly
clean
7FF50B801000
unkown image
page readonly
clean
1CD99383000
unkown
page read and write
clean
2AFCDDC0000
unkown image
page readonly
clean
1714D4FE000
unkown
page read and write
clean
640000
heap private
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1534800F000
unkown
page read and write
clean
7FF50B544000
unkown image
page readonly
clean
1CD993A2000
unkown
page read and write
clean
1CD99375000
unkown
page read and write
clean
2693CFB1000
unkown
page read and write
clean
1CD99365000
unkown
page read and write
clean
17152C0E000
unkown
page read and write
clean
347BDBB000
unkown
page read and write
clean
1CD99362000
unkown
page read and write
clean
7FF5549E0000
unkown image
page readonly
clean
DE3C37F000
stack
page read and write
clean
1CD98AF1000
unkown
page read and write
clean
2AFCDE00000
unkown
page read and write
clean
7FF56B7C7000
unkown image
page readonly
clean
17152A15000
unkown
page read and write
clean
7FF56B681000
unkown image
page readonly
clean
7FF5468DB000
unkown image
page readonly
clean
7FF50AF88000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7DF579532000
unkown image
page readonly
clean
7FF57819D000
unkown image
page readonly
clean
7FF50B777000
unkown image
page readonly
clean
13475A57000
unkown
page read and write
clean
15347EE0000
unkown image
page readonly
clean
7FF4F3D04000
unkown image
page readonly
clean
7DF554602000
unkown image
page readonly
clean
17152ADC000
unkown
page read and write
clean
7FF50B4E4000
unkown image
page readonly
clean
1CD98920000
unkown image
page readonly
clean
7FF50B709000
unkown image
page readonly
clean
13475A8A000
unkown
page read and write
clean
7DF562882000
unkown image
page readonly
clean
7FF50B51A000
unkown image
page readonly
clean
13475840000
unkown image
page read and write
clean
48BF000
stack
page read and write
clean
1714D4A0000
unkown
page read and write
clean
7FF54690D000
unkown image
page readonly
clean
1CD9939E000
unkown
page read and write
clean
7FF57820A000
unkown image
page readonly
clean
2AFCDE4F000
unkown
page read and write
clean
7FF55491B000
unkown image
page readonly
clean
17152B06000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
1CD98A4A000
unkown
page read and write
clean
7FF554C0A000
unkown image
page readonly
clean
2AFCE0D0000
unkown image
page readonly
clean
7DF579540000
unkown image
page readonly
clean
620000
unkown image
page readonly
clean
1714DD18000
unkown
page read and write
clean
1CD99311000
unkown
page read and write
clean
1714E300000
unkown image
page read and write
clean
2693CFB1000
unkown
page read and write
clean
19A3CE50000
heap default
page read and write
clean
7DF519460000
unkown image
page readonly
clean
15348240000
unkown
page read and write
clean
1D2F8FB000
stack
page read and write
clean
7FF50B6E3000
unkown image
page readonly
clean
DE3C177000
stack
page read and write
clean
1714D3F0000
unkown
page read and write
clean
2AFCDE47000
unkown
page read and write
clean
7FF50AFB1000
unkown image
page readonly
clean
7FF50B5B3000
unkown image
page readonly
clean
7FF588CE1000
unkown image
page readonly
clean
347C1F9000
stack
page read and write
clean
7FF50AFB4000
unkown image
page readonly
clean
7FF5549C1000
unkown image
page readonly
clean
2AFCE550000
unkown
page read and write
clean
7DF483DC0000
unkown image
page readonly
clean
2AFCDE70000
unkown
page read and write
clean
7DF585EF2000
unkown image
page readonly
clean
7FF5546F1000
unkown image
page readonly
clean
13475A4F000
unkown
page read and write
clean
2693D180000
heap private
page read and write
clean
2693D150000
unkown
page read and write
clean
1D2FAF7000
stack
page read and write
clean
1CD99396000
unkown
page read and write
clean
7FF54679F000
unkown image
page readonly
clean
7FF554A65000
unkown image
page readonly
clean
7DF596E72000
unkown image
page readonly
clean
7FF58910F000
unkown image
page readonly
clean
1CD993B8000
unkown
page read and write
clean
7FF546969000
unkown image
page readonly
clean
1CD9938F000
unkown
page read and write
clean
1CD98B13000
unkown
page read and write
clean
1CD99320000
unkown
page read and write
clean
7FF50B77D000
unkown image
page readonly
clean
7FF56B6A0000
unkown image
page readonly
clean
7FF5891FA000
unkown image
page readonly
clean
7DF585EF0000
unkown image
page readonly
clean
7FF5781B3000
unkown image
page readonly
clean
1CD99802000
unkown
page read and write
clean
1CD99320000
unkown
page read and write
clean
1CD99190000
unkown
page read and write
clean
1CD993B2000
unkown
page read and write
clean
7FF554C11000
unkown image
page readonly
clean
1CD993C0000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
47BF000
stack
page read and write
clean
1CD99376000
unkown
page read and write
clean
2693D540000
unkown image
page readonly
clean
7FF5467EB000
unkown image
page readonly
clean
1CD99382000
unkown
page read and write
clean
19A3CDF0000
heap private
page read and write
clean
1CD98AB0000
unkown
page read and write
clean
7FF4F4463000
unkown image
page readonly
clean
1CD993AA000
unkown
page read and write
clean
7FF546760000
unkown image
page readonly
clean
7FF546887000
unkown image
page readonly
clean
7DF562880000
unkown image
page readonly
clean
7DF5021B0000
unkown image
page readonly
clean
363427F000
stack
page read and write
clean
13475B08000
unkown
page read and write
clean
7FF554C10000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
7FF56B7DF000
unkown image
page readonly
clean
2AFCDDD0000
unkown image
page readonly
clean
7DF579530000
unkown image
page readonly
clean
15347FB0000
heap default
page read and write
clean
7DF5021D0000
unkown image
page readonly
clean
22C5000
heap private
page read and write
clean
15347FF6000
unkown
page read and write
clean
67B0877000
stack
page read and write
clean
17152B09000
unkown
page read and write
clean
7FF546615000
unkown image
page readonly
clean
1CD9937E000
unkown
page read and write
clean
19A3CE00000
unkown image
page readonly
clean
7FF56B6BB000
unkown image
page readonly
clean
19A3CDE0000
unkown image
page read and write
clean
15348100000
unkown
page read and write
clean
17152AF9000
unkown
page read and write
clean
1CD9936B000
unkown
page read and write
clean
7FF4F4466000
unkown image
page readonly
clean
1CD993C0000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7FF554A27000
unkown image
page readonly
clean
15347DA0000
unkown image
page readonly
clean
19A3D580000
unkown image
page readonly
clean
1CD99307000
unkown
page read and write
clean
1714D6D0000
unkown image
page readonly
clean
1CD98A13000
unkown
page read and write
clean
1CD99305000
unkown
page read and write
clean
1CD98A54000
unkown
page read and write
clean
2693CF30000
unkown image
page readonly
clean
7FF56B6DF000
unkown image
page readonly
clean
1CD99376000
unkown
page read and write
clean
7FF546899000
unkown image
page readonly
clean
7FF50B74B000
unkown image
page readonly
clean
7FF56B73C000
unkown image
page readonly
clean
13475E00000
unkown image
page readonly
clean
7DF519470000
unkown image
page readonly
clean
7FF56B8A9000
unkown image
page readonly
clean
7FF50B5A2000
unkown image
page readonly
clean
1CD99385000
unkown
page read and write
clean
4C6D77B000
stack
page read and write
clean
7DF562890000
unkown image
page readonly
clean
7FF554B87000
unkown image
page readonly
clean
7FF554BFA000
unkown image
page readonly
clean
2693D185000
heap private
page read and write
clean
1714DA60000
unkown image
page readonly
clean
153487D0000
unkown image
page readonly
clean
7FF554A1F000
unkown image
page readonly
clean
7DF519462000
unkown image
page readonly
clean
1CD99391000
unkown
page read and write
clean
1CD99384000
unkown
page read and write
clean
7DF579530000
unkown image
page readonly
clean
19A3D08E000
unkown
page read and write
clean
1CD98CD0000
unkown image
page readonly
clean
2B4E000
stack
page read and write
clean
7FF5549C5000
unkown image
page readonly
clean
1714D320000
unkown image
page readonly
clean
7FF50B737000
unkown image
page readonly
clean
7FF54613B000
unkown image
page readonly
clean
2693CFA9000
unkown
page read and write
clean
1CD99320000
unkown
page read and write
clean
2693CFA8000
unkown
page read and write
clean
1CD98A49000
unkown
page read and write
clean
1CD99362000
unkown
page read and write
clean
1CD99802000
unkown
page read and write
clean
363457F000
stack
page read and write
clean
446000
unkown image
page readonly
clean
7DF5545F0000
unkown image
page readonly
clean
7FF56B69D000
unkown image
page readonly
clean
7FF578269000
unkown image
page readonly
clean
15348010000
unkown
page read and write
clean
3634A7E000
stack
page read and write
clean
67AFFDF000
stack
page read and write
clean
15348220000
unkown
page read and write
clean
7FF554B23000
unkown image
page readonly
clean
7FF5548E2000
unkown image
page readonly
clean
1CD98940000
unkown image
page readonly
clean
7FF56B8D1000
unkown image
page readonly
clean
1CD99382000
unkown
page read and write
clean
1CD989C0000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
19A3D100000
unkown
page read and write
clean
7FF50B685000
unkown image
page readonly
clean
17152AFD000
unkown
page read and write
clean
1CD9938D000
unkown
page read and write
clean
7DF585EF0000
unkown image
page readonly
clean
2AFCDE48000
unkown
page read and write
clean
15348650000
unkown image
page readonly
clean
363447B000
stack
page read and write
clean
17152AA5000
unkown
page read and write
clean
7FF589109000
unkown image
page readonly
clean
7FF50B367000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
7FF554B6E000
unkown image
page readonly
clean
1CD99378000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
19A3D013000
unkown
page read and write
clean
7FF546907000
unkown image
page readonly
clean
2AFCDE13000
unkown
page read and write
clean
9A2977E000
stack
page read and write
clean
1714DBE0000
unkown image
page readonly
clean
4C6D97F000
stack
page read and write
clean
134759B0000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
1714DBF0000
unkown
page read and write
clean
7FF56B725000
unkown image
page readonly
clean
7FF588CE7000
unkown image
page readonly
clean
7DF596E72000
unkown image
page readonly
clean
7FF50B7D9000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
17152AF3000
unkown
page read and write
clean
7FF546477000
unkown image
page readonly
clean
2AFCDF02000
unkown
page read and write
clean
7FF50B723000
unkown image
page readonly
clean
1CD98AC4000
unkown
page read and write
clean
7FF554779000
unkown image
page readonly
clean
1CD98980000
unkown image
page readonly
clean
19A3CF30000
unkown image
page readonly
clean
4A0000
unkown
page read and write
clean
7FF5467E5000
unkown image
page readonly
clean
7FF54675D000
unkown image
page readonly
clean
347C179000
stack
page read and write
clean
1CD99397000
unkown
page read and write
clean
7FF554A22000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF589201000
unkown image
page readonly
clean
7FF50B77A000
unkown image
page readonly
clean
7DF562870000
unkown image
page readonly
clean
1CD98AB6000
unkown
page read and write
clean
1CD98AD3000
unkown
page read and write
clean
1CD99320000
unkown
page read and write
clean
7DF5021C2000
unkown image
page readonly
clean
171529C0000
unkown
page read and write
clean
1714D47A000
unkown
page read and write
clean
67B067E000
stack
page read and write
clean
1CD98A58000
unkown
page read and write
clean
7FF56B8A2000
unkown image
page readonly
clean
1CD99354000
unkown
page read and write
clean
7FF50B5CD000
unkown image
page readonly
clean
67B027F000
stack
page read and write
clean
681000
heap default
page read and write
clean
1714D502000
unkown
page read and write
clean
7FF554AEA000
unkown image
page readonly
clean
7FF5781EE000
unkown image
page readonly
clean
15347FFE000
unkown
page read and write
clean
4C6D4FF000
stack
page read and write
clean
1CD99375000
unkown
page read and write
clean
1CD98A47000
unkown
page read and write
clean
1714DB90000
unkown image
page readonly
clean
7FF58917D000
unkown image
page readonly
clean
7FF554B47000
unkown image
page readonly
clean
1714E3E0000
unkown
page read and write
clean
36345FE000
stack
page read and write
clean
5E0000
unkown
page execute read
clean
171529C0000
unkown
page read and write
clean
2B84000
heap private
page read and write
clean
134758B0000
heap default
page read and write
clean
1CD99390000
unkown
page read and write
clean
7DF5545F0000
unkown image
page readonly
clean
171529B0000
unkown
page read and write
clean
7FF50B07B000
unkown image
page readonly
clean
7FF554AF3000
unkown image
page readonly
clean
7FF5549FB000
unkown image
page readonly
clean
4B9000
heap private
page read and write
clean
13475B00000
unkown
page read and write
clean
1D2F9FF000
stack
page read and write
clean
7FF554B33000
unkown image
page readonly
clean
7FF5641A1000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
7DF562882000
unkown image
page readonly
clean
17152A4A000
unkown
page read and write
clean
15347D70000
unkown image
page readonly
clean
7FF56B82E000
unkown image
page readonly
clean
2AFCDF08000
unkown
page read and write
clean
1CD99803000
unkown
page read and write
clean
7FF56B3B7000
unkown image
page readonly
clean
7FF50B36E000
unkown image
page readonly
clean
7FF4F4477000
unkown image
page readonly
clean
13475850000
heap private
page read and write
clean
1714D350000
heap default
page read and write
clean
1CD98A57000
unkown
page read and write
clean
1CD993D9000
unkown
page read and write
clean
2AFCDF13000
unkown
page read and write
clean
13475A92000
unkown
page read and write
clean
7DF519480000
unkown image
page readonly
clean
2A10000
unkown
page read and write
clean
7DF477400000
unkown image
page readonly
clean
7FF56B755000
unkown image
page readonly
clean
19A3CF50000
unkown
page read and write
clean
7FF5468B7000
unkown image
page readonly
clean
1CD993BF000
unkown
page read and write
clean
363487B000
stack
page read and write
clean
7DF596E70000
unkown image
page readonly
clean
17152B06000
unkown
page read and write
clean
7FF50B353000
unkown image
page readonly
clean
13475A4D000
unkown
page read and write
clean
9A292FA000
unkown
page read and write
clean
7FF5891D2000
unkown image
page readonly
clean
7FF4F4534000
unkown image
page readonly
clean
7FF50B6DE000
unkown image
page readonly
clean
7FF55496F000
unkown image
page readonly
clean
1CD99391000
unkown
page read and write
clean
15347EB0000
unkown
page read and write
clean
7FF56B807000
unkown image
page readonly
clean
7FF50B70F000
unkown image
page readonly
clean
1CD98A55000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
1CD98AAA000
unkown
page read and write
clean
4C6DA7A000
stack
page read and write
clean
13475A29000
unkown
page read and write
clean
7FF50B7E4000
unkown image
page readonly
clean
15347ED0000
unkown image
page readonly
clean
7FF546811000
unkown image
page readonly
clean
17152CE0000
unkown
page read and write
clean
7FF50B70D000
unkown image
page readonly
clean
1CD99383000
unkown
page read and write
clean
67B0479000
stack
page read and write
clean
19A3CE00000
unkown image
page readonly
clean
1CD993AA000
unkown
page read and write
clean
7FF57828A000
unkown image
page readonly
clean
13475A00000
unkown
page read and write
clean
7FF578262000
unkown image
page readonly
clean
1CD98AEA000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1CD99312000
unkown
page read and write
clean
1714DBB0000
unkown image
page readonly
clean
1CD99305000
unkown
page read and write
clean
1714DD00000
unkown
page read and write
clean
7DF562890000
unkown image
page readonly
clean
7DF519472000
unkown image
page readonly
clean
13475A58000
unkown
page read and write
clean
2AFCDDF0000
heap default
page read and write
clean
7FF4F4473000
unkown image
page readonly
clean
7DF554602000
unkown image
page readonly
clean
7FF578291000
unkown image
page readonly
clean
7FF50B50B000
unkown image
page readonly
clean
7FF578274000
unkown image
page readonly
clean
19A3D088000
unkown
page read and write
clean
7FF50B5BC000
unkown image
page readonly
clean
1CD99375000
unkown
page read and write
clean
15347D50000
unkown image
page read and write
clean
1CD99320000
unkown
page read and write
clean
7FF546991000
unkown image
page readonly
clean
153481D0000
unkown
page read and write
clean
1CD99802000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
446000
unkown image
page readonly
clean
1CD993B5000
unkown
page read and write
clean
7DF562872000
unkown image
page readonly
clean
17152AED000
unkown
page read and write
clean
1CD99814000
unkown
page read and write
clean
1CD99390000
unkown
page read and write
clean
1CD993AD000
unkown
page read and write
clean
1CD98AE3000
unkown
page read and write
clean
22D0000
unkown
page read and write
clean
7FF50B6DA000
unkown image
page readonly
clean
1CD99802000
unkown
page read and write
clean
1CD99802000
unkown
page read and write
clean
13475A4C000
unkown
page read and write
clean
610000
unkown
page read and write
clean
171529F0000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
7FF50B4C7000
unkown image
page readonly
clean
4C0000
heap default
page read and write
clean
1714D380000
unkown
page read and write
clean
347C379000
stack
page read and write
clean
1CD993A7000
unkown
page read and write
clean
7FF56B7DD000
unkown image
page readonly
clean
171528B0000
unkown
page read and write
clean
7FF58910D000
unkown image
page readonly
clean
1CD99388000
unkown
page read and write
clean
7FF5468B3000
unkown image
page readonly
clean
21F0000
heap private
page read and write
clean
7FF58906C000
unkown image
page readonly
clean
1714D2E0000
unkown image
page read and write
clean
7FF5543C4000
unkown image
page readonly
clean
15347FC0000
heap default
page read and write
clean
7FF5781DB000
unkown image
page readonly
clean
13475A52000
unkown
page read and write
clean
1CD98AAC000
unkown
page read and write
clean
CF0000
unkown image
page readonly
clean
1CD9932C000
unkown
page read and write
clean
363417B000
stack
page read and write
clean
2AFCDE29000
unkown
page read and write
clean
13475A55000
unkown
page read and write
clean
7FF5468C7000
unkown image
page readonly
clean
171529E0000
unkown
page read and write
clean
19A3D04D000
unkown
page read and write
clean
7DF562870000
unkown image
page readonly
clean
1CD98AA3000
unkown
page read and write
clean
13475990000
unkown image
page readonly
clean
67B0778000
stack
page read and write
clean
2693CF80000
heap default
page read and write
clean
171529B0000
unkown
page read and write
clean
1714DC00000
unkown
page read and write
clean
19A3D057000
unkown
page read and write
clean
7FF588FD0000
unkown image
page readonly
clean
153481C0000
unkown
page read and write
clean
1714D490000
unkown
page read and write
clean
7FF50B6CE000
unkown image
page readonly
clean
1CD98970000
heap default
page read and write
clean
1CD9938E000
unkown
page read and write
clean
363407A000
stack
page read and write
clean
7FF50B369000
unkown image
page readonly
clean
7FF554B30000
unkown image
page readonly
clean
7FF56B8D1000
unkown image
page readonly
clean
7FF589137000
unkown image
page readonly
clean
DE3C27F000
stack
page read and write
clean
2B80000
heap private
page read and write
clean
1CD99391000
unkown
page read and write
clean
7FF589081000
unkown image
page readonly
clean
7FF588D98000
unkown image
page readonly
clean
7FF554A95000
unkown image
page readonly
clean
7FF554B3E000
unkown image
page readonly
clean
7FF546471000
unkown image
page readonly
clean
7FF56B823000
unkown image
page readonly
clean
7FF56B656000
unkown image
page readonly
clean
1CD99300000
unkown
page read and write
clean
7DF579542000
unkown image
page readonly
clean
66A000
heap default
page read and write
clean
15347FFE000
unkown
page read and write
clean
19A3D054000
unkown
page read and write
clean
7FF56B8BA000
unkown image
page readonly
clean
1CD9936C000
unkown
page read and write
clean
7FF554B37000
unkown image
page readonly
clean
1714D495000
unkown
page read and write
clean
7DF400080000
unkown image
page readonly
clean
9A2967E000
stack
page read and write
clean
1CD98A86000
unkown
page read and write
clean
1CD993CF000
unkown
page read and write
clean
1CD98AA0000
unkown
page read and write
clean
7FF546991000
unkown image
page readonly
clean
15348239000
heap private
page read and write
clean
2AFCDDA0000
unkown image
page readonly
clean
1714DD02000
unkown
page read and write
clean
7FF554AC1000
unkown image
page readonly
clean
7FF56B751000
unkown image
page readonly
clean
1714DC02000
unkown
page read and write
clean
17152AB1000
unkown
page read and write
clean
7FF56B84D000
unkown image
page readonly
clean
7DF579550000
unkown image
page readonly
clean
7FF554ABF000
unkown image
page readonly
clean
1CD98A7E000
unkown
page read and write
clean
7FF50B6F7000
unkown image
page readonly
clean
1CD98B02000
unkown
page read and write
clean
1CD993A7000
unkown
page read and write
clean
2AFCE2D0000
unkown image
page readonly
clean
7FF4F4545000
unkown image
page readonly
clean
7FF5891E4000
unkown image
page readonly
clean
153481B0000
unkown
page readonly
clean
1CD989A0000
unkown
page read and write
clean
1CD99190000
unkown
page read and write
clean
7FF554A91000
unkown image
page readonly
clean
1714D4AF000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1CD993A7000
unkown
page read and write
clean
7FF546815000
unkown image
page readonly
clean
1CD98B16000
unkown
page read and write
clean
7DF596E80000
unkown image
page readonly
clean
19A3CE30000
unkown image
page readonly
clean
7FF5781E2000
unkown image
page readonly
clean
7FF54689F000
unkown image
page readonly
clean
7FF50B752000
unkown image
page readonly
clean
19A3D046000
unkown
page read and write
clean
1CD9939D000
unkown
page read and write
clean
7FF56B7F3000
unkown image
page readonly
clean
17152D10000
unkown
page read and write
clean
19A3D02D000
unkown
page read and write
clean
17152A21000
unkown
page read and write
clean
1CD993B8000
unkown
page read and write
clean
7DF585F00000
unkown image
page readonly
clean
1CD99190000
unkown
page read and write
clean
7FF589113000
unkown image
page readonly
clean
15348235000
heap private
page read and write
clean
7FF554BE9000
unkown image
page readonly
clean
1CD98AEE000
unkown
page read and write
clean
7FF57820D000
unkown image
page readonly
clean
36346FE000
stack
page read and write
clean
7DF554610000
unkown image
page readonly
clean
1CD99396000
unkown
page read and write
clean
7DF585F10000
unkown image
page readonly
clean
7FF578281000
unkown image
page readonly
clean
1D2FBFF000
stack
page read and write
clean
7DF460740000
unkown image
page readonly
clean
7FF56B84A000
unkown image
page readonly
clean
2AFCE460000
unkown image
page readonly
clean
7FF554BE2000
unkown image
page readonly
clean
490000
unkown image
page readonly
clean
7FF4F44AE000
unkown image
page readonly
clean
7DF5021B2000
unkown image
page readonly
clean
1CD993A0000
unkown
page read and write
clean
1CD99391000
unkown
page read and write
clean
7DF585EF2000
unkown image
page readonly
clean
7FF588FB1000
unkown image
page readonly
clean
7FF5779D5000
unkown image
page readonly
clean
1714D478000
unkown
page read and write
clean
2200000
unkown
page read and write
clean
1CD99396000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF50B405000
unkown image
page readonly
clean
7FF56B72B000
unkown image
page readonly
clean
7FF554996000
unkown image
page readonly
clean
1714E820000
unkown
page read and write
clean
1CD993A3000
unkown
page read and write
clean
1CD98B08000
unkown
page read and write
clean
7FF54698A000
unkown image
page readonly
clean
7FF546981000
unkown image
page readonly
clean
650000
unkown
page read and write
clean
13475A59000
unkown
page read and write
clean
363467F000
stack
page read and write
clean
1CD9939B000
unkown
page read and write
clean
7FF50B727000
unkown image
page readonly
clean
7FF56B3B1000
unkown image
page readonly
clean
B60000
unkown image
page readonly
clean
7FF50B674000
unkown image
page readonly
clean
13475B02000
unkown
page read and write
clean
7DF562880000
unkown image
page readonly
clean
1CD9937E000
unkown
page read and write
clean
17152A3D000
unkown
page read and write
clean
7FF50B3AF000
unkown image
page readonly
clean
15348160000
unkown
page read and write
clean
7DF596E60000
unkown image
page readonly
clean
17152A62000
unkown
page read and write
clean
7FF5781B0000
unkown image
page readonly
clean
13476202000
unkown
page read and write
clean
7FF554A6B000
unkown image
page readonly
clean
7FF56B7F7000
unkown image
page readonly
clean
7DF417330000
unkown image
page readonly
clean
1714D48E000
unkown
page read and write
clean
19A3D07D000
unkown
page read and write
clean
19A3D029000
unkown
page read and write
clean
2693CF91000
unkown
page read and write
clean
There are 979 hidden memdumps, click here to show them.