IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Sales Order List.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\~DF904D784913DB7A54.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Sales Order List.exe
"C:\Users\user\Desktop\Sales Order List.exe"
malicious

URLs

Name
IP
Malicious
http://topqualityfreeware.com
unknown
clean
http://www.topqualityfreeware.com/
unknown
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
20F0000
unkown
page execute and read and write
malicious
7FF5B9230000
unkown image
page readonly
clean
1D82F9A8000
unkown
page read and write
clean
1D82FE02000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
22591B30000
unkown image
page read and write
clean
7FF5D416A000
unkown image
page readonly
clean
7FF533367000
unkown image
page readonly
clean
7DF5411C0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
205B59C0000
unkown
page readonly
clean
7FF5D40E7000
unkown image
page readonly
clean
7DF5411B2000
unkown image
page readonly
clean
1D82F984000
unkown
page read and write
clean
F07B679000
stack
page read and write
clean
1D82F968000
unkown
page read and write
clean
7FF5D40EA000
unkown image
page readonly
clean
7DF58F082000
unkown image
page readonly
clean
1D82F970000
unkown
page read and write
clean
511000
heap default
page read and write
clean
1D82F316000
unkown
page read and write
clean
225920D0000
unkown image
page readonly
clean
7FF5B8F95000
unkown image
page readonly
clean
7FF5B9263000
unkown image
page readonly
clean
7FF5334CA000
unkown image
page readonly
clean
205B4B00000
heap default
page read and write
clean
F01DD3A000
unkown
page read and write
clean
426000
unkown image
page readonly
clean
7DF5411D0000
unkown image
page readonly
clean
7FF5B9311000
unkown image
page readonly
clean
1D82F252000
unkown
page read and write
clean
1D725E8A000
unkown
page read and write
clean
1D82F7F0000
unkown
page read and write
clean
1D82F270000
unkown
page read and write
clean
7FF533551000
unkown image
page readonly
clean
1D82F995000
unkown
page read and write
clean
7DF594E72000
unkown image
page readonly
clean
7DF5C6F72000
unkown image
page readonly
clean
1D82F980000
unkown
page read and write
clean
7DF5411B2000
unkown image
page readonly
clean
205B5770000
unkown
page read and write
clean
7FF5E6A19000
unkown image
page readonly
clean
7FF5334AE000
unkown image
page readonly
clean
2E60000
unkown image
page read and write
clean
7FF5D3F21000
unkown image
page readonly
clean
7FF5E6B80000
unkown image
page readonly
clean
7FF58718D000
unkown image
page readonly
clean
205B4A80000
unkown image
page readonly
clean
1D82F9CB000
unkown
page read and write
clean
7FF5813F2000
unkown image
page readonly
clean
7FF5E6741000
unkown image
page readonly
clean
7FF5E6B4E000
unkown image
page readonly
clean
1B158C00000
unkown image
page readonly
clean
7FF5E6C61000
unkown image
page readonly
clean
1B158852000
unkown
page read and write
clean
1D82F2BD000
unkown
page read and write
clean
1B158A00000
unkown image
page readonly
clean
1D82F255000
unkown
page read and write
clean
7FF533466000
unkown image
page readonly
clean
7DF5F48D2000
unkown image
page readonly
clean
7FF5E69C5000
unkown image
page readonly
clean
1D82F967000
unkown
page read and write
clean
7DF594E80000
unkown image
page readonly
clean
205B5700000
unkown
page read and write
clean
7FF5E6747000
unkown image
page readonly
clean
29BE000
stack
page read and write
clean
7FF586E95000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
205B5A30000
unkown
page read and write
clean
9A000
unkown
page read and write
clean
2A2E000
stack
page read and write
clean
7FF5E6B69000
unkown image
page readonly
clean
7FF5D3F40000
unkown image
page readonly
clean
542377B000
stack
page read and write
clean
7FF5E6B43000
unkown image
page readonly
clean
1D82F9A5000
unkown
page read and write
clean
1D82F984000
unkown
page read and write
clean
22591C4F000
unkown
page read and write
clean
22592250000
unkown image
page readonly
clean
7DF594E90000
unkown image
page readonly
clean
205B59B0000
unkown
page read and write
clean
205B4B52000
unkown
page read and write
clean
612B2FB000
stack
page read and write
clean
7FF5D4149000
unkown image
page readonly
clean
7FF5D40ED000
unkown image
page readonly
clean
1D82F2DE000
unkown
page read and write
clean
2BAEBA5C000
unkown
page read and write
clean
1D82F995000
unkown
page read and write
clean
7FF5D40BB000
unkown image
page readonly
clean
7FF5D409E000
unkown image
page readonly
clean
22591BB0000
unkown image
page readonly
clean
205B4A70000
unkown
page read and write
clean
1D726200000
unkown image
page readonly
clean
7FF58720A000
unkown image
page readonly
clean
22591C8B000
unkown
page read and write
clean
7FF58718A000
unkown image
page readonly
clean
1D82F9AB000
unkown
page read and write
clean
2090000
unkown
page read and write
clean
7FF5B90C1000
unkown image
page readonly
clean
1D82F982000
unkown
page read and write
clean
1D82F982000
unkown
page read and write
clean
7FF587091000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF5D415A000
unkown image
page readonly
clean
302A39B000
unkown
page read and write
clean
7DF594E82000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
22591B50000
unkown image
page readonly
clean
22591B80000
unkown image
page readonly
clean
7FF5B90E0000
unkown image
page readonly
clean
7DF5C6F82000
unkown image
page readonly
clean
F01E27E000
stack
page read and write
clean
22591C3C000
unkown
page read and write
clean
7FF5E6A4B000
unkown image
page readonly
clean
7FF5E6A15000
unkown image
page readonly
clean
7DF58F0A0000
unkown image
page readonly
clean
2BAEBA63000
unkown
page read and write
clean
205B4A60000
unkown image
page read and write
clean
7DF5C6F80000
unkown image
page readonly
clean
30A0000
unkown
page read and write
clean
1D82F9AF000
unkown
page read and write
clean
37A000
unkown
page read and write
clean
7DF594E70000
unkown image
page readonly
clean
7DF4DFCA0000
unkown image
page readonly
clean
205B4B63000
heap default
page read and write
clean
401000
unkown image
page execute read
clean
1D82F400000
unkown image
page readonly
clean
22591C4B000
unkown
page read and write
clean
1D82F976000
unkown
page read and write
clean
7DF58F080000
unkown image
page readonly
clean
1D82F9A6000
unkown
page read and write
clean
2BAEBA5C000
unkown
page read and write
clean
7FF5E67C7000
unkown image
page readonly
clean
1D82F984000
unkown
page read and write
clean
7FF5D4171000
unkown image
page readonly
clean
1D82FE02000
unkown
page read and write
clean
7FF5D3C51000
unkown image
page readonly
clean
1B1586D0000
unkown image
page readonly
clean
7FF587137000
unkown image
page readonly
clean
1D82F308000
unkown
page read and write
clean
54234FE000
stack
page read and write
clean
7FF5E6B57000
unkown image
page readonly
clean
7FF5334A2000
unkown image
page readonly
clean
2BAEBE00000
unkown image
page readonly
clean
1D82F9A4000
unkown
page read and write
clean
7FF58134E000
unkown image
page readonly
clean
7FF5D4142000
unkown image
page readonly
clean
2BAEBB20000
unkown
page read and write
clean
1D82FE02000
unkown
page read and write
clean
612AF6F000
stack
page read and write
clean
7FF53345D000
unkown image
page readonly
clean
1D82F955000
unkown
page read and write
clean
1D725F13000
unkown
page read and write
clean
7DF5F48C0000
unkown image
page readonly
clean
7FF5D3DF5000
unkown image
page readonly
clean
1D82F952000
unkown
page read and write
clean
2A59000
heap private
page read and write
clean
1B158854000
unkown
page read and write
clean
1B15884D000
unkown
page read and write
clean
7FF58707C000
unkown image
page readonly
clean
2BAEBA4F000
unkown
page read and write
clean
7FF533545000
unkown image
page readonly
clean
205B52B0000
unkown image
page readonly
clean
2BAEBA46000
unkown
page read and write
clean
205B4AD0000
unkown
page read and write
clean
7FF581421000
unkown image
page readonly
clean
7DF43F080000
unkown image
page readonly
clean
1D725CB0000
unkown image
page readonly
clean
7FF5E6B83000
unkown image
page readonly
clean
1D725E00000
unkown
page read and write
clean
7FF5333BC000
unkown image
page readonly
clean
2BAEB930000
unkown image
page readonly
clean
7FF532D54000
unkown image
page readonly
clean
1B158847000
unkown
page read and write
clean
7DF58F090000
unkown image
page readonly
clean
1D82F9A4000
unkown
page read and write
clean
1D82F979000
unkown
page read and write
clean
7FF5B917C000
unkown image
page readonly
clean
302A9FC000
stack
page read and write
clean
7FF581343000
unkown image
page readonly
clean
2F60000
unkown image
page readonly
clean
7FF53353A000
unkown image
page readonly
clean
7DF594E72000
unkown image
page readonly
clean
7FF53345F000
unkown image
page readonly
clean
7DF594E70000
unkown image
page readonly
clean
7FF5E6834000
unkown image
page readonly
clean
7FF5D4090000
unkown image
page readonly
clean
7FF5D3FF5000
unkown image
page readonly
clean
20D0000
unkown
page read and write
clean
43138FF000
stack
page read and write
clean
1D82F991000
unkown
page read and write
clean
4F0000
heap default
page read and write
clean
424000
unkown image
page read and write
clean
20B8000
heap private
page read and write
clean
F01E179000
stack
page read and write
clean
1D82F9CB000
unkown
page read and write
clean
5423A7F000
stack
page read and write
clean
302A6FF000
stack
page read and write
clean
2BAEBA4F000
unkown
page read and write
clean
2BAEBBF0000
heap private
page read and write
clean
1D82F978000
unkown
page read and write
clean
302AAF7000
stack
page read and write
clean
22591B40000
heap private
page read and write
clean
612AEEB000
unkown
page read and write
clean
7FF586FE0000
unkown image
page readonly
clean
2140000
unkown
page read and write
clean
205B5130000
unkown image
page readonly
clean
22591D13000
unkown
page read and write
clean
7FF5D40C3000
unkown image
page readonly
clean
7FF587211000
unkown image
page readonly
clean
7DF594E80000
unkown image
page readonly
clean
7FF5B923E000
unkown image
page readonly
clean
7FF5B8A82000
unkown image
page readonly
clean
7FF5E6C39000
unkown image
page readonly
clean
7FF581411000
unkown image
page readonly
clean
1D725F00000
unkown
page read and write
clean
7FF5B9096000
unkown image
page readonly
clean
1D725E13000
unkown
page read and write
clean
205B4B10000
heap default
page read and write
clean
7FF58141A000
unkown image
page readonly
clean
205B4B51000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
2130000
heap private
page read and write
clean
7FF5B9237000
unkown image
page readonly
clean
1D82F213000
unkown
page read and write
clean
7DF5E1DF0000
unkown image
page readonly
clean
1D82F98B000
unkown
page read and write
clean
7DF5C6F80000
unkown image
page readonly
clean
7FF5E63E1000
unkown image
page readonly
clean
7FF587133000
unkown image
page readonly
clean
7FF5E6A11000
unkown image
page readonly
clean
1D82F000000
unkown image
page readonly
clean
2BAEBF80000
unkown image
page readonly
clean
7DF5411B0000
unkown image
page readonly
clean
7FF5E6B0F000
unkown image
page readonly
clean
7DF5E1DD0000
unkown image
page readonly
clean
7FF5E6837000
unkown image
page readonly
clean
7FF5D4097000
unkown image
page readonly
clean
302ABFF000
stack
page read and write
clean
7FF533522000
unkown image
page readonly
clean
205B4A80000
unkown image
page readonly
clean
4313877000
stack
page read and write
clean
1D82F7F0000
unkown
page read and write
clean
22591C13000
unkown
page read and write
clean
7DF5F48E0000
unkown image
page readonly
clean
2BAEBC00000
unkown image
page readonly
clean
1D82F2EC000
unkown
page read and write
clean
7FF5871E9000
unkown image
page readonly
clean
7FF5D3FF1000
unkown image
page readonly
clean
C40000
unkown image
page readonly
clean
7DF58F090000
unkown image
page readonly
clean
7DF5C6F70000
unkown image
page readonly
clean
7FF586F96000
unkown image
page readonly
clean
205B4D19000
heap private
page read and write
clean
7FF5D40CE000
unkown image
page readonly
clean
7FF533529000
unkown image
page readonly
clean
1B158850000
unkown
page read and write
clean
2BAEBB70000
unkown image
page readonly
clean
1D82F968000
unkown
page read and write
clean
7FF586FC1000
unkown image
page readonly
clean
1B158902000
unkown
page read and write
clean
C50000
unkown image
page readonly
clean
542357E000
stack
page read and write
clean
F07B4F9000
stack
page read and write
clean
7FF5E6A30000
unkown image
page readonly
clean
7FF587119000
unkown image
page readonly
clean
542387C000
stack
page read and write
clean
1B158857000
unkown
page read and write
clean
22591C02000
unkown
page read and write
clean
7DF5411C2000
unkown image
page readonly
clean
7FF5D4093000
unkown image
page readonly
clean
4312FAF000
stack
page read and write
clean
1D82F200000
unkown
page read and write
clean
7FF581404000
unkown image
page readonly
clean
7FF587211000
unkown image
page readonly
clean
205B59E0000
unkown
page read and write
clean
1D82FE6A000
unkown
page read and write
clean
7DF58F092000
unkown image
page readonly
clean
7FF581415000
unkown image
page readonly
clean
7FF587107000
unkown image
page readonly
clean
7FF5D407D000
unkown image
page readonly
clean
2BAEBA36000
unkown
page read and write
clean
2BAEB8F0000
unkown image
page read and write
clean
7FF533470000
unkown image
page readonly
clean
7FF532DD9000
unkown image
page readonly
clean
1D82F980000
unkown
page read and write
clean
7FF533362000
unkown image
page readonly
clean
1D82F980000
unkown
page read and write
clean
7FF5D3F5B000
unkown image
page readonly
clean
1B158858000
unkown
page read and write
clean
1B158913000
unkown
page read and write
clean
7FF581333000
unkown image
page readonly
clean
4CEF000
stack
page read and write
clean
7DF5E1DD2000
unkown image
page readonly
clean
7DF594E90000
unkown image
page readonly
clean
1D82F24D000
unkown
page read and write
clean
302C000
unkown image
page read and write
clean
7DF5E1DE0000
unkown image
page readonly
clean
7FF5334CD000
unkown image
page readonly
clean
7FF5E68E5000
unkown image
page readonly
clean
7FF53354A000
unkown image
page readonly
clean
2BAEBA63000
unkown
page read and write
clean
1D82FE00000
unkown
page read and write
clean
20A0000
unkown image
page readonly
clean
22591B70000
unkown image
page readonly
clean
1D82F7F0000
unkown
page read and write
clean
2BAEB910000
unkown image
page readonly
clean
22591C81000
unkown
page read and write
clean
1D82F9D2000
unkown
page read and write
clean
7FF5D3FCB000
unkown image
page readonly
clean
7FF533534000
unkown image
page readonly
clean
8C0000
unkown image
page readonly
clean
7FF5E6AE5000
unkown image
page readonly
clean
7FF586982000
unkown image
page readonly
clean
7FF5D4067000
unkown image
page readonly
clean
7DF5E1DE2000
unkown image
page readonly
clean
1D82EFC0000
heap private
page read and write
clean
2BAEBA5A000
unkown
page read and write
clean
2BAEBA5C000
unkown
page read and write
clean
AC0000
unkown image
page readonly
clean
22592402000
unkown
page read and write
clean
1D82F250000
unkown
page read and write
clean
7FF58136B000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1D82F2E8000
unkown
page read and write
clean
205B4AF0000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7DF5C6F90000
unkown image
page readonly
clean
2BAEBB40000
unkown
page read and write
clean
1B158859000
unkown
page read and write
clean
7FF5B9311000
unkown image
page readonly
clean
22591BD0000
unkown
page read and write
clean
7DF5E1DE2000
unkown image
page readonly
clean
7FF5E65CB000
unkown image
page readonly
clean
612B6FF000
stack
page read and write
clean
1B158855000
unkown
page read and write
clean
4313577000
stack
page read and write
clean
7FF5B9301000
unkown image
page readonly
clean
1D725DE0000
unkown
page read and write
clean
7FF586FDD000
unkown image
page readonly
clean
2880000
unkown
page read and write
clean
7DF5411C2000
unkown image
page readonly
clean
7FF5813F9000
unkown image
page readonly
clean
1B158829000
unkown
page read and write
clean
22591C4C000
unkown
page read and write
clean
1D82F997000
unkown
page read and write
clean
1D82F780000
unkown image
page readonly
clean
1B158846000
unkown
page read and write
clean
7DF5E1DD0000
unkown image
page readonly
clean
1B158813000
unkown
page read and write
clean
7FF533248000
unkown image
page readonly
clean
7FF5D4079000
unkown image
page readonly
clean
7FF581421000
unkown image
page readonly
clean
1D82F980000
unkown
page read and write
clean
612B5FF000
stack
page read and write
clean
1D82F802000
unkown
page read and write
clean
1D725F08000
unkown
page read and write
clean
22591C51000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1D82F2B1000
unkown
page read and write
clean
22591D02000
unkown
page read and write
clean
1D82F982000
unkown
page read and write
clean
7FF5E6BB3000
unkown image
page readonly
clean
7FF5D3FDC000
unkown image
page readonly
clean
7FF5E696B000
unkown image
page readonly
clean
7FF5D3F3D000
unkown image
page readonly
clean
2A60000
unkown image
page read and write
clean
7FF5B9195000
unkown image
page readonly
clean
7FF580C43000
unkown image
page readonly
clean
1D82F987000
unkown
page read and write
clean
205B4AB0000
unkown image
page readonly
clean
1B158908000
unkown
page read and write
clean
7FF5E69E6000
unkown image
page readonly
clean
1D82F9A6000
unkown
page read and write
clean
1D82F986000
unkown
page read and write
clean
1D82F229000
unkown
page read and write
clean
7FF53349B000
unkown image
page readonly
clean
1D82F020000
heap default
page read and write
clean
431337F000
stack
page read and write
clean
7FF5E6483000
unkown image
page readonly
clean
1D725E4D000
unkown
page read and write
clean
7DF594E82000
unkown image
page readonly
clean
7FF5B916B000
unkown image
page readonly
clean
7DF5C6F90000
unkown image
page readonly
clean
7DF58F080000
unkown image
page readonly
clean
7FF532DDE000
unkown image
page readonly
clean
1D82F982000
unkown
page read and write
clean
7FF5871E2000
unkown image
page readonly
clean
1D82F995000
unkown
page read and write
clean
7FF5E6C51000
unkown image
page readonly
clean
7FF5E6B8E000
unkown image
page readonly
clean
7FF586CF7000
unkown image
page readonly
clean
7DF5F48C2000
unkown image
page readonly
clean
1D725F02000
unkown
page read and write
clean
1D82FD90000
unkown image
page read and write
clean
1D82F2A7000
unkown
page read and write
clean
1B15883C000
unkown
page read and write
clean
7FF587065000
unkown image
page readonly
clean
7FF5D4161000
unkown image
page readonly
clean
4313779000
stack
page read and write
clean
7FF5E6B11000
unkown image
page readonly
clean
1B1586C0000
heap private
page read and write
clean
612AFEF000
stack
page read and write
clean
7FF5E69A4000
unkown image
page readonly
clean
7FF5E6B6F000
unkown image
page readonly
clean
1D82F955000
unkown
page read and write
clean
205B4D20000
unkown
page read and write
clean
7FF5D407F000
unkown image
page readonly
clean
1D82F97E000
unkown
page read and write
clean
1B1586B0000
unkown image
page read and write
clean
7DF5411D0000
unkown image
page readonly
clean
7FF5E6BAB000
unkown image
page readonly
clean
7FF51F461000
unkown image
page readonly
clean
1D726602000
unkown
page read and write
clean
460000
heap default
page read and write
clean
7FF58139D000
unkown image
page readonly
clean
7DF5F48E0000
unkown image
page readonly
clean
1B15884F000
unkown
page read and write
clean
205B4CD0000
unkown
page read and write
clean
1D82F9B1000
unkown
page read and write
clean
7FF5B92FA000
unkown image
page readonly
clean
1D82F23C000
unkown
page read and write
clean
7FF5E6BD7000
unkown image
page readonly
clean
7FF586CF1000
unkown image
page readonly
clean
2BAEB910000
unkown image
page readonly
clean
7FF581336000
unkown image
page readonly
clean
1D82FD40000
unkown image
page write copy
clean
1D82F900000
unkown
page read and write
clean
1D82EFF0000
unkown image
page readonly
clean
7FF5E6B3E000
unkown image
page readonly
clean
1D82F9BF000
unkown
page read and write
clean
1D82F984000
unkown
page read and write
clean
2084000
heap private
page read and write
clean
7DF5F48D2000
unkown image
page readonly
clean
1B159002000
unkown
page read and write
clean
7FF58132F000
unkown image
page readonly
clean
1B15884B000
unkown
page read and write
clean
7FF5E6B87000
unkown image
page readonly
clean
2BAEBBF5000
heap private
page read and write
clean
1D725E29000
unkown
page read and write
clean
7FF5E6BDA000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7DF48CF50000
unkown image
page readonly
clean
7FF5E6AB5000
unkown image
page readonly
clean
7FF5E65DC000
unkown image
page readonly
clean
376000
unkown
page read and write
clean
7DF58F0A0000
unkown image
page readonly
clean
7FF586FFB000
unkown image
page readonly
clean
2A50000
heap private
page read and write
clean
7FF533456000
unkown image
page readonly
clean
7DF5F48C0000
unkown image
page readonly
clean
431367F000
stack
page read and write
clean
2BAEBA20000
heap default
page read and write
clean
1D82F982000
unkown
page read and write
clean
1D82F100000
unkown image
page readonly
clean
205B4B52000
unkown
page read and write
clean
2BAEBA47000
unkown
page read and write
clean
1B15887E000
unkown
page read and write
clean
7FF5B90DD000
unkown image
page readonly
clean
1D726380000
unkown image
page readonly
clean
20B5000
heap private
page read and write
clean
22591C4A000
unkown
page read and write
clean
7FF5B9233000
unkown image
page readonly
clean
1D82F982000
unkown
page read and write
clean
7FF5E6BDD000
unkown image
page readonly
clean
7DF4C4E40000
unkown image
page readonly
clean
F07B579000
stack
page read and write
clean
7FF532D13000
unkown image
page readonly
clean
7FF5B9287000
unkown image
page readonly
clean
1B158800000
unkown
page read and write
clean
1D82F91A000
unkown
page read and write
clean
1D82F2C4000
unkown
page read and write
clean
1D82F9BF000
unkown
page read and write
clean
205B52C0000
unkown image
page readonly
clean
7FF587187000
unkown image
page readonly
clean
7DF58F092000
unkown image
page readonly
clean
7FF58132D000
unkown image
page readonly
clean
7FF5E6C32000
unkown image
page readonly
clean
7DF492D40000
unkown image
page readonly
clean
7FF587095000
unkown image
page readonly
clean
1D82F259000
unkown
page read and write
clean
7FF5E6C44000
unkown image
page readonly
clean
1D82EFD0000
unkown image
page readonly
clean
1D82F2A7000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7FF532D59000
unkown image
page readonly
clean
7FF580BA1000
unkown image
page readonly
clean
7FF5E67C9000
unkown image
page readonly
clean
7DF5C6F72000
unkown image
page readonly
clean
2BAEBA63000
unkown
page read and write
clean
7FF5B9223000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1D82F288000
unkown
page read and write
clean
1D82F313000
unkown
page read and write
clean
205B4B08000
heap default
page read and write
clean
1D82F1F0000
unkown
page read and write
clean
1D82EFD0000
unkown image
page readonly
clean
F07B5FF000
stack
page read and write
clean
4BEF000
stack
page read and write
clean
7DF5411B0000
unkown image
page readonly
clean
7FF5B921F000
unkown image
page readonly
clean
7FF5E65C7000
unkown image
page readonly
clean
7FF5E6B3A000
unkown image
page readonly
clean
1B15884C000
unkown
page read and write
clean
1D82F9AD000
unkown
page read and write
clean
302A67F000
stack
page read and write
clean
30000
unkown image
page read and write
clean
7FF5B928D000
unkown image
page readonly
clean
1B158C10000
unkown image
page readonly
clean
1D82F970000
unkown
page read and write
clean
7FF5D3C57000
unkown image
page readonly
clean
7FF5E6C60000
unkown image
page readonly
clean
7FF5E69B1000
unkown image
page readonly
clean
7FF58713E000
unkown image
page readonly
clean
2EE0000
unkown
page read and write
clean
7FF51F461000
unkown image
page readonly
clean
1B158700000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1D82F982000
unkown
page read and write
clean
5423977000
stack
page read and write
clean
7FF5D3EF6000
unkown image
page readonly
clean
7FF532D52000
unkown image
page readonly
clean
F01E0FA000
stack
page read and write
clean
1D82F923000
unkown
page read and write
clean
450000
unkown
page execute read
clean
7FF5B928A000
unkown image
page readonly
clean
7DF5C6F70000
unkown image
page readonly
clean
7FF5E6A2D000
unkown image
page readonly
clean
22591C4E000
unkown
page read and write
clean
1D725CC0000
unkown image
page readonly
clean
7DF58F082000
unkown image
page readonly
clean
7FF5B8DF1000
unkown image
page readonly
clean
7FF5B926E000
unkown image
page readonly
clean
7FF5E6C4A000
unkown image
page readonly
clean
1D725E4C000
unkown
page read and write
clean
7FF5B9207000
unkown image
page readonly
clean
7FF5E6BBE000
unkown image
page readonly
clean
7FF5B925B000
unkown image
page readonly
clean
7FF587123000
unkown image
page readonly
clean
22591C49000
unkown
page read and write
clean
1D82EFB0000
unkown image
page read and write
clean
7FF5871FA000
unkown image
page readonly
clean
2BAEBA31000
unkown
page read and write
clean
1B158900000
unkown
page read and write
clean
7FF5B8DF7000
unkown image
page readonly
clean
1D82F986000
unkown
page read and write
clean
22591ED0000
unkown image
page readonly
clean
7FF58711F000
unkown image
page readonly
clean
1D82F2EB000
unkown
page read and write
clean
7FF5E6ACC000
unkown image
page readonly
clean
7FF5E6932000
unkown image
page readonly
clean
1D82F978000
unkown
page read and write
clean
7FF533473000
unkown image
page readonly
clean
1D725E6F000
unkown
page read and write
clean
22591C70000
unkown
page read and write
clean
F01E1FE000
stack
page read and write
clean
40000
unkown image
page readonly
clean
1D82F2FB000
unkown
page read and write
clean
1B158E80000
unkown
page read and write
clean
1D82F24F000
unkown
page read and write
clean
7FF53324A000
unkown image
page readonly
clean
22591C00000
unkown
page read and write
clean
20E0000
unkown
page read and write
clean
7FF587201000
unkown image
page readonly
clean
7FF5B9219000
unkown image
page readonly
clean
1B15886F000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1D82F97F000
unkown
page read and write
clean
1B1586F0000
unkown image
page readonly
clean
7FF581340000
unkown image
page readonly
clean
1B158888000
unkown
page read and write
clean
7FF5B921D000
unkown image
page readonly
clean
1B158D90000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
440000
unkown
page read and write
clean
2BAEBA36000
heap default
page read and write
clean
7FF58711D000
unkown image
page readonly
clean
F01DDBF000
stack
page read and write
clean
1D82F971000
unkown
page read and write
clean
1D82F98A000
unkown
page read and write
clean
1D725DC0000
unkown image
page readonly
clean
205B5760000
unkown
page read and write
clean
1D82F993000
unkown
page read and write
clean
1D725E3C000
unkown
page read and write
clean
7DF5F48D0000
unkown image
page readonly
clean
7FF5E6A72000
unkown image
page readonly
clean
7FF5D3FC5000
unkown image
page readonly
clean
7FF58139A000
unkown image
page readonly
clean
1D82F302000
unkown
page read and write
clean
7FF533463000
unkown image
page readonly
clean
1D82F9A9000
unkown
page read and write
clean
2BAEBA63000
unkown
page read and write
clean
302A8FB000
stack
page read and write
clean
7FF5E63D2000
unkown image
page readonly
clean
7DF5F48C2000
unkown image
page readonly
clean
1D82F95B000
unkown
page read and write
clean
7FF5E6A6F000
unkown image
page readonly
clean
7FF5E6B6D000
unkown image
page readonly
clean
1B158720000
heap default
page read and write
clean
7FF5D4154000
unkown image
page readonly
clean
1D82F986000
unkown
page read and write
clean
1D82F24B000
unkown
page read and write
clean
7FF5B92E9000
unkown image
page readonly
clean
7FF5E69BF000
unkown image
page readonly
clean
2080000
heap private
page read and write
clean
7FF58140A000
unkown image
page readonly
clean
431347A000
stack
page read and write
clean
205B4D10000
heap private
page read and write
clean
1D82F600000
unkown image
page readonly
clean
1D725C80000
heap private
page read and write
clean
1D82F986000
unkown
page read and write
clean
2BAEBB80000
unkown image
page readonly
clean
29E0000
heap private
page read and write
clean
1D725E4B000
unkown
page read and write
clean
1D726000000
unkown image
page readonly
clean
7FF5B911F000
unkown image
page readonly
clean
22591B50000
unkown image
page readonly
clean
542347B000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
2BAEBA4F000
unkown
page read and write
clean
7FF58716E000
unkown image
page readonly
clean
1D725E4F000
unkown
page read and write
clean
7FF5B9247000
unkown image
page readonly
clean
7DF5411C0000
unkown image
page readonly
clean
1D725C90000
unkown image
page readonly
clean
7FF53314E000
unkown image
page readonly
clean
7FF5E6AE1000
unkown image
page readonly
clean
7DF5E1DE0000
unkown image
page readonly
clean
7DF5E1DF0000
unkown image
page readonly
clean
7FF5E6B97000
unkown image
page readonly
clean
2BAEBA5C000
unkown
page read and write
clean
F07B15C000
unkown
page read and write
clean
7FF5332EA000
unkown image
page readonly
clean
7DF5E1DD2000
unkown image
page readonly
clean
4312F2B000
unkown
page read and write
clean
1D725C90000
unkown image
page readonly
clean
7FF5B930A000
unkown image
page readonly
clean
1D725CE0000
heap default
page read and write
clean
205B4F30000
unkown image
page readonly
clean
7FF58701F000
unkown image
page readonly
clean
7FF58137E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7DF5C6F82000
unkown image
page readonly
clean
22591C29000
unkown
page read and write
clean
205B59D0000
unkown
page read and write
clean
7FF587147000
unkown image
page readonly
clean
7FF58715B000
unkown image
page readonly
clean
7FF5B90FB000
unkown image
page readonly
clean
7FF5B9165000
unkown image
page readonly
clean
7FF533541000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
1D82F91C000
unkown
page read and write
clean
205B4AA0000
unkown image
page readonly
clean
7FF581373000
unkown image
page readonly
clean
7FF5D3F7F000
unkown image
page readonly
clean
430000
unkown image
page readonly
clean
7FF587130000
unkown image
page readonly
clean
7FF5E6ABB000
unkown image
page readonly
clean
22591D00000
unkown
page read and write
clean
22591D08000
unkown
page read and write
clean
7FF5B9191000
unkown image
page readonly
clean
612B3FC000
stack
page read and write
clean
7FF5D4083000
unkown image
page readonly
clean
22591BA0000
heap default
page read and write
clean
1D82F968000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7FF5E6B22000
unkown image
page readonly
clean
7FF5B92F4000
unkown image
page readonly
clean
205B4D15000
heap private
page read and write
clean
7FF5E6B73000
unkown image
page readonly
clean
7FF5D40A7000
unkown image
page readonly
clean
1D82F97E000
unkown
page read and write
clean
7DF5F48D0000
unkown image
page readonly
clean
1B1586D0000
unkown image
page readonly
clean
7FF5871F4000
unkown image
page readonly
clean
1D82F7B0000
unkown image
page readonly
clean
7DF4F2790000
unkown image
page readonly
clean
1D82FE63000
unkown
page read and write
clean
1D82F9A8000
unkown
page read and write
clean
7FF5D4171000
unkown image
page readonly
clean
426000
unkown image
page readonly
clean
1D82FE02000
unkown
page read and write
clean
7FF5E6927000
unkown image
page readonly
clean
1D725E80000
unkown
page read and write
clean
1D82F980000
unkown
page read and write
clean
7FF581347000
unkown image
page readonly
clean
7FF533551000
unkown image
page readonly
clean
205B56F0000
unkown
page read and write
clean
7FF58706B000
unkown image
page readonly
clean
612B4F7000
stack
page read and write
clean
7FF587163000
unkown image
page readonly
clean
20B0000
heap private
page read and write
clean
1D82F94A000
unkown
page read and write
clean
F01E07F000
stack
page read and write
clean
1D82FE02000
unkown
page read and write
clean
4FA000
heap default
page read and write
clean
7FF5B92E2000
unkown image
page readonly
clean
1D725C70000
unkown image
page read and write
clean
7FF5E6A77000
unkown image
page readonly
clean
7FF5E6C5A000
unkown image
page readonly
clean
7FF5E69A6000
unkown image
page readonly
clean
There are 691 hidden memdumps, click here to show them.