IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Doc0011222003.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\~DFC89CDF2998EDD482.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Doc0011222003.exe
"C:\Users\user\Desktop\Doc0011222003.exe"
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
4F0000
stack
page execute and read and write
malicious
1A9D4860000
unkown image
page readonly
clean
1A9D5202000
unkown
page read and write
clean
2D43E9B0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF5AE4AD000
unkown image
page readonly
clean
7DF5DBDC2000
unkown image
page readonly
clean
E8F1A7C000
stack
page read and write
clean
7FF4F65B5000
unkown image
page readonly
clean
7FF4F6474000
unkown image
page readonly
clean
7DF5C33F2000
unkown image
page readonly
clean
7FF4FF415000
unkown image
page readonly
clean
2D43A300000
unkown image
page read and write
clean
280955C8000
unkown
page read and write
clean
7FF4FF40A000
unkown image
page readonly
clean
1ED89200000
unkown image
page readonly
clean
3ED59AE000
stack
page read and write
clean
1ED89470000
unkown
page read and write
clean
7DF5C33E2000
unkown image
page readonly
clean
19DB963C000
unkown
page read and write
clean
7FF5CDF11000
unkown image
page readonly
clean
7FF5AE5ED000
unkown image
page readonly
clean
23C377E000
stack
page read and write
clean
7DF504390000
unkown image
page readonly
clean
7FF5CDEE6000
unkown image
page readonly
clean
19DBA402000
unkown
page read and write
clean
3ED617F000
stack
page read and write
clean
7FF4F671A000
unkown image
page readonly
clean
7FF5B5601000
unkown image
page readonly
clean
7FF4F665E000
unkown image
page readonly
clean
7FF59FB90000
unkown image
page readonly
clean
5A0000
unkown
page execute read
clean
28095588000
heap default
page read and write
clean
2D439497000
unkown
page read and write
clean
19DB94C0000
heap default
page read and write
clean
2D439BB0000
unkown image
page readonly
clean
7FF5B56F7000
unkown image
page readonly
clean
7FF4F6653000
unkown image
page readonly
clean
19DB9688000
unkown
page read and write
clean
2D43EA30000
unkown
page read and write
clean
28095390000
unkown
page read and write
clean
7FF50F274000
unkown image
page readonly
clean
28095740000
heap private
page read and write
clean
7FF5CDFE1000
unkown image
page readonly
clean
7FF50F34C000
unkown image
page readonly
clean
19DB9F83000
unkown
page read and write
clean
3ED627A000
stack
page read and write
clean
400000
unkown image
page readonly
clean
7FF50F499000
unkown image
page readonly
clean
23C34FB000
stack
page read and write
clean
1ED891D0000
unkown image
page readonly
clean
3ED63FE000
stack
page read and write
clean
19DB9CE0000
unkown
page read and write
clean
FF4909C000
unkown
page read and write
clean
2D439D18000
unkown
page read and write
clean
7FF5AE561000
unkown image
page readonly
clean
19C000
unkown
page read and write
clean
2D43EA8D000
unkown
page read and write
clean
7FF4FF32F000
unkown image
page readonly
clean
3ED5E78000
stack
page read and write
clean
7FF50F487000
unkown image
page readonly
clean
19DB9F93000
unkown
page read and write
clean
7FF4F6643000
unkown image
page readonly
clean
19DB9470000
unkown image
page readonly
clean
280955D0000
unkown
page read and write
clean
7FF50F569000
unkown image
page readonly
clean
7FF4F6613000
unkown image
page readonly
clean
7FF5AE53B000
unkown image
page readonly
clean
7FF59FB93000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
E8F187F000
stack
page read and write
clean
9C45A79000
stack
page read and write
clean
280953A0000
unkown image
page readonly
clean
7FF59FC65000
unkown image
page readonly
clean
19DB9CB0000
unkown image
page readonly
clean
1ED891D0000
unkown image
page readonly
clean
28095CE0000
unkown image
page readonly
clean
19DB9629000
unkown
page read and write
clean
7FF5AE6E1000
unkown image
page readonly
clean
2D439340000
heap default
page read and write
clean
1A9D4830000
unkown image
page readonly
clean
7FF4F63F7000
unkown image
page readonly
clean
7FF4FF421000
unkown image
page readonly
clean
2A67E04B000
unkown
page read and write
clean
19DBA46A000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1A9D4830000
unkown image
page readonly
clean
7FF50F3FC000
unkown image
page readonly
clean
28095380000
unkown image
page read and write
clean
280955E1000
heap default
page read and write
clean
19DB96ED000
unkown
page read and write
clean
7FF4F66AD000
unkown image
page readonly
clean
7FF4FF333000
unkown image
page readonly
clean
19DB9F6E000
unkown
page read and write
clean
7FF50F316000
unkown image
page readonly
clean
19DB9F1C000
unkown
page read and write
clean
7FF5CDC47000
unkown image
page readonly
clean
7FF4FF340000
unkown image
page readonly
clean
FF495F9000
stack
page read and write
clean
7FF50F57A000
unkown image
page readonly
clean
340000
unkown
page read and write
clean
7DF5AD8F0000
unkown image
page readonly
clean
19DB9F8D000
unkown
page read and write
clean
1A9D4A61000
unkown
page read and write
clean
1A9D4B13000
unkown
page read and write
clean
23FDB4FF000
unkown
page read and write
clean
7FF50F562000
unkown image
page readonly
clean
7FF5CDC41000
unkown image
page readonly
clean
1ED8943C000
unkown
page read and write
clean
7FF5AE5F3000
unkown image
page readonly
clean
2A67E002000
unkown
page read and write
clean
7FF5CDFBB000
unkown image
page readonly
clean
2D439458000
unkown
page read and write
clean
7FF4F6627000
unkown image
page readonly
clean
7FF5B56D3000
unkown image
page readonly
clean
7DF5AD8F0000
unkown image
page readonly
clean
7FF4F6657000
unkown image
page readonly
clean
7FF5CDFCC000
unkown image
page readonly
clean
7DF5043A2000
unkown image
page readonly
clean
1ED89413000
unkown
page read and write
clean
7FF4F6476000
unkown image
page readonly
clean
7DF5043B0000
unkown image
page readonly
clean
7DF5DBDD2000
unkown image
page readonly
clean
19DB9FD1000
unkown
page read and write
clean
FF496FB000
stack
page read and write
clean
7FF59FA87000
unkown image
page readonly
clean
7FF50F2E1000
unkown image
page readonly
clean
2D43E810000
unkown
page read and write
clean
7FF5AE466000
unkown image
page readonly
clean
28095570000
unkown
page read and write
clean
7DF51D1F2000
unkown image
page readonly
clean
7FF5B5506000
unkown image
page readonly
clean
590000
unkown
page read and write
clean
7FF59F3D7000
unkown image
page readonly
clean
19DB964B000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
19DB96C0000
unkown
page read and write
clean
23FDB4E6000
heap default
page read and write
clean
7FF5B5550000
unkown image
page readonly
clean
7FF50F0E3000
unkown image
page readonly
clean
7FF5ADD8A000
unkown image
page readonly
clean
2D43E9A0000
unkown
page read and write
clean
7FF5AE4B0000
unkown image
page readonly
clean
2A67DDC0000
heap private
page read and write
clean
19DB9E02000
unkown
page read and write
clean
19DB9F4C000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
19DB9656000
unkown
page read and write
clean
7FF4F6217000
unkown image
page readonly
clean
2D439492000
unkown
page read and write
clean
7DF5DBDC0000
unkown image
page readonly
clean
7FF4F6500000
unkown image
page readonly
clean
28095750000
unkown
page read and write
clean
7FF4FF373000
unkown image
page readonly
clean
2D439D00000
unkown
page read and write
clean
23FDB410000
unkown
page read and write
clean
7DF5AD8D0000
unkown image
page readonly
clean
7FF59F487000
unkown image
page readonly
clean
19DB9F91000
unkown
page read and write
clean
7DF5DBDD0000
unkown image
page readonly
clean
7FF5AE54C000
unkown image
page readonly
clean
19DB9FAA000
unkown
page read and write
clean
28095580000
heap default
page read and write
clean
280955CF000
unkown
page read and write
clean
2D439320000
unkown image
page readonly
clean
19DB9670000
unkown
page read and write
clean
2290000
heap private
page read and write
clean
19DB9F6E000
unkown
page read and write
clean
1A9D4A29000
unkown
page read and write
clean
19DBA502000
unkown
page read and write
clean
1ED8944B000
unkown
page read and write
clean
1ED89220000
heap default
page read and write
clean
19DB9F8B000
unkown
page read and write
clean
2D43A800000
unkown
page read and write
clean
19DB9F7C000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2A67E08A000
unkown
page read and write
clean
2270000
unkown image
page readonly
clean
1A9D4A52000
unkown
page read and write
clean
19DB9FA5000
unkown
page read and write
clean
7FF4F6542000
unkown image
page readonly
clean
2A67DDB0000
unkown image
page read and write
clean
1A9D4A49000
unkown
page read and write
clean
7DF5C33F0000
unkown image
page readonly
clean
23FDB4E6000
unkown
page read and write
clean
7FF5B56AE000
unkown image
page readonly
clean
7FF50F58A000
unkown image
page readonly
clean
23FDB511000
unkown
page read and write
clean
7FF5B577A000
unkown image
page readonly
clean
7FF58BB81000
unkown image
page readonly
clean
7FF5AE4CB000
unkown image
page readonly
clean
2D439440000
unkown
page read and write
clean
22A0000
unkown
page read and write
clean
FF49B7F000
stack
page read and write
clean
23C327E000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5CDFE5000
unkown image
page readonly
clean
7FF5AE6B2000
unkown image
page readonly
clean
7FF4F5F25000
unkown image
page readonly
clean
7FF50EF0C000
unkown image
page readonly
clean
99000
unkown
page read and write
clean
2D43EC00000
unkown
page read and write
clean
7FF4F660E000
unkown image
page readonly
clean
2D43E9D0000
unkown
page read and write
clean
2A67DFF0000
unkown
page read and write
clean
2A67E400000
unkown image
page readonly
clean
7FF50F160000
unkown image
page readonly
clean
7FF5AE5D7000
unkown image
page readonly
clean
2D43EAAD000
unkown
page read and write
clean
19DB9651000
unkown
page read and write
clean
7FF5B56FA000
unkown image
page readonly
clean
2320000
heap private
page read and write
clean
7FF5B5781000
unkown image
page readonly
clean
2D43EA61000
unkown
page read and write
clean
28096350000
unkown
page read and write
clean
2D4396D0000
unkown image
page readonly
clean
7FF5CDF6F000
unkown image
page readonly
clean
7FF5B558F000
unkown image
page readonly
clean
7FF5B56A3000
unkown image
page readonly
clean
28095B60000
unkown image
page readonly
clean
7FF4F6481000
unkown image
page readonly
clean
7FF5B5759000
unkown image
page readonly
clean
23FDBB20000
unkown image
page readonly
clean
7FF5B4E2A000
unkown image
page readonly
clean
7FF50F4BE000
unkown image
page readonly
clean
1ED89400000
unkown
page read and write
clean
7DF5BC360000
unkown image
page readonly
clean
7FF4FF347000
unkown image
page readonly
clean
1ED89451000
unkown
page read and write
clean
7FF50F4B7000
unkown image
page readonly
clean
2D439380000
unkown image
page read and write
clean
19DB9F61000
unkown
page read and write
clean
7FF5CE161000
unkown image
page readonly
clean
3ED5C7F000
stack
page read and write
clean
7FF5CE073000
unkown image
page readonly
clean
7FF50F49F000
unkown image
page readonly
clean
7FF50F4DB000
unkown image
page readonly
clean
2D4392D0000
unkown image
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2C50000
heap private
page read and write
clean
2D43ECB0000
unkown
page read and write
clean
19DB9CE0000
unkown
page read and write
clean
19DB9F85000
unkown
page read and write
clean
DE36AFF000
stack
page read and write
clean
7FF5ADD84000
unkown image
page readonly
clean
19DB9A00000
unkown image
page readonly
clean
28095749000
heap private
page read and write
clean
2A67E03C000
unkown
page read and write
clean
7FF5B5405000
unkown image
page readonly
clean
7FF5AE6D1000
unkown image
page readonly
clean
7FF4F609B000
unkown image
page readonly
clean
28095745000
heap private
page read and write
clean
2D439350000
unkown image
page readonly
clean
7FF4F65E1000
unkown image
page readonly
clean
FF49FFE000
stack
page read and write
clean
1A9D4880000
heap default
page read and write
clean
2A67E070000
unkown
page read and write
clean
7FF5CE139000
unkown image
page readonly
clean
2D43ED00000
unkown
page read and write
clean
1ED89508000
unkown
page read and write
clean
7DF5AD8D2000
unkown image
page readonly
clean
19DB9FC0000
unkown
page read and write
clean
7FF4F667B000
unkown image
page readonly
clean
1ED89300000
unkown image
page readonly
clean
7FF4F6297000
unkown image
page readonly
clean
19DB9702000
unkown
page read and write
clean
2A67E113000
unkown
page read and write
clean
19DB96B2000
unkown
page read and write
clean
7FF50F2AA000
unkown image
page readonly
clean
7DF5DBDC0000
unkown image
page readonly
clean
7FF5CD80A000
unkown image
page readonly
clean
23FDB430000
unkown
page read and write
clean
19DB9FB6000
unkown
page read and write
clean
7FF5CE080000
unkown image
page readonly
clean
2A67E054000
unkown
page read and write
clean
DDBBCFF000
stack
page read and write
clean
7FF4FF343000
unkown image
page readonly
clean
7FF50EE0F000
unkown image
page readonly
clean
7FF50F2D4000
unkown image
page readonly
clean
1ED89456000
unkown
page read and write
clean
7DF40AF50000
unkown image
page readonly
clean
7DF5BC360000
unkown image
page readonly
clean
19DB9FD1000
unkown
page read and write
clean
2D43ED00000
unkown
page read and write
clean
7FF4F668E000
unkown image
page readonly
clean
23FDB4F8000
unkown
page read and write
clean
7DF5AD8D2000
unkown image
page readonly
clean
7FF59FC42000
unkown image
page readonly
clean
3ED592B000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7DF5BC340000
unkown image
page readonly
clean
2D43EC21000
unkown
page read and write
clean
1ED893F0000
unkown
page read and write
clean
1A9D4B02000
unkown
page read and write
clean
2D4394B3000
unkown
page read and write
clean
23FDB3D0000
unkown image
page readonly
clean
7FF4FF411000
unkown image
page readonly
clean
2D439BA0000
unkown image
page readonly
clean
7FF5B55D5000
unkown image
page readonly
clean
19DB9F84000
unkown
page read and write
clean
19DB9FA4000
unkown
page read and write
clean
7DF5AD8E0000
unkown image
page readonly
clean
21C0000
unkown image
page readonly
clean
7FF59FBBB000
unkown image
page readonly
clean
7FF5CE057000
unkown image
page readonly
clean
7DF5DBDD2000
unkown image
page readonly
clean
19DBA500000
unkown
page read and write
clean
E8F152A000
unkown
page read and write
clean
19DBA46A000
unkown
page read and write
clean
DDBC2FF000
stack
page read and write
clean
7FF5CD804000
unkown image
page readonly
clean
7FF4F6304000
unkown image
page readonly
clean
7FF50F58E000
unkown image
page readonly
clean
FF49A7F000
stack
page read and write
clean
19DB9FC5000
unkown
page read and write
clean
19DB9FA4000
unkown
page read and write
clean
7FF4FF37E000
unkown image
page readonly
clean
19DB9653000
unkown
page read and write
clean
7FF5AE4EF000
unkown image
page readonly
clean
7DF5BC342000
unkown image
page readonly
clean
2A67E07E000
unkown
page read and write
clean
7FF4F64E9000
unkown image
page readonly
clean
7DF5BC352000
unkown image
page readonly
clean
1ED89A02000
unkown
page read and write
clean
9C45AFF000
stack
page read and write
clean
7FF50F0FE000
unkown image
page readonly
clean
280955CF000
unkown
page read and write
clean
23FDB4FF000
unkown
page read and write
clean
2D439513000
unkown
page read and write
clean
19DB964A000
unkown
page read and write
clean
DDBC1FE000
stack
page read and write
clean
7FF50F2A0000
unkown image
page readonly
clean
7FF5AE6E1000
unkown image
page readonly
clean
D80000
unkown image
page readonly
clean
19DB9F9F000
unkown
page read and write
clean
7DF51D1F0000
unkown image
page readonly
clean
7FF5CE0DD000
unkown image
page readonly
clean
2D43EA23000
unkown
page read and write
clean
7FF4F6639000
unkown image
page readonly
clean
2D439BD0000
unkown image
page readonly
clean
7FF4F64FD000
unkown image
page readonly
clean
1A9D4A00000
unkown
page read and write
clean
19DB9C60000
unkown image
page write copy
clean
7FF4F61CB000
unkown image
page readonly
clean
7FF59FB76000
unkown image
page readonly
clean
7FF50F4B3000
unkown image
page readonly
clean
7DF5AD8E2000
unkown image
page readonly
clean
19DB9F47000
unkown
page read and write
clean
2D43EAF1000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
280954C0000
unkown
page read and write
clean
19DB9FA7000
unkown
page read and write
clean
2D439413000
unkown
page read and write
clean
7DF5C33E2000
unkown image
page readonly
clean
1A9D4850000
unkown image
page readonly
clean
7FF5CE0DA000
unkown image
page readonly
clean
19DBA400000
unkown
page read and write
clean
19DB96FB000
unkown
page read and write
clean
19DB9450000
unkown image
page read and write
clean
7FF5AE63E000
unkown image
page readonly
clean
DDBC0F7000
stack
page read and write
clean
7FF59FC61000
unkown image
page readonly
clean
7FF59F3E1000
unkown image
page readonly
clean
7FF5AE657000
unkown image
page readonly
clean
7DF5043A0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
19DB9F9F000
unkown
page read and write
clean
2D43EA00000
unkown
page read and write
clean
7DF5AD8E2000
unkown image
page readonly
clean
19DB9716000
unkown
page read and write
clean
7FF50F4A3000
unkown image
page readonly
clean
3060000
unkown image
page readonly
clean
19DB9F83000
unkown
page read and write
clean
7FF5B56B7000
unkown image
page readonly
clean
7FF4F651B000
unkown image
page readonly
clean
2A67DDF0000
unkown image
page readonly
clean
19DB9F6E000
unkown
page read and write
clean
5E2000
heap default
page read and write
clean
7FF5AE491000
unkown image
page readonly
clean
7FF4FEC15000
unkown image
page readonly
clean
2A67E108000
unkown
page read and write
clean
33C000
unkown
page read and write
clean
2D43E890000
unkown
page read and write
clean
2D43EAE5000
unkown
page read and write
clean
2D43EB02000
unkown
page read and write
clean
DDBB9EB000
unkown
page read and write
clean
7FF5B56CB000
unkown image
page readonly
clean
23C2FFC000
unkown
page read and write
clean
2D439400000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF51D1F0000
unkown image
page readonly
clean
7FF50ED52000
unkown image
page readonly
clean
19DB9F83000
unkown
page read and write
clean
FF49AFE000
stack
page read and write
clean
FF498FA000
stack
page read and write
clean
FF49BFE000
stack
page read and write
clean
7FF4F6585000
unkown image
page readonly
clean
7FF4FF36B000
unkown image
page readonly
clean
7FF59FA0A000
unkown image
page readonly
clean
1ED891B0000
unkown image
page read and write
clean
23FDB795000
heap private
page read and write
clean
2D439429000
unkown
page read and write
clean
7FF59FBED000
unkown image
page readonly
clean
19DB9FA3000
unkown
page read and write
clean
19DB9FB1000
unkown
page read and write
clean
7FF5CE069000
unkown image
page readonly
clean
7FF4F65B1000
unkown image
page readonly
clean
19DB9F9F000
unkown
page read and write
clean
19DB9490000
unkown image
page readonly
clean
19DB9F9F000
unkown
page read and write
clean
7FF5AE60E000
unkown image
page readonly
clean
1A9D4A6B000
unkown
page read and write
clean
7FF50F415000
unkown image
page readonly
clean
2D4394A2000
unkown
page read and write
clean
3ED6077000
stack
page read and write
clean
7DF5043A2000
unkown image
page readonly
clean
1A9D4B00000
unkown
page read and write
clean
21F0000
unkown image
page read and write
clean
2D439B90000
unkown image
page readonly
clean
7DF5DBDE0000
unkown image
page readonly
clean
7FF4F6667000
unkown image
page readonly
clean
28095700000
unkown
page read and write
clean
19DBA402000
unkown
page read and write
clean
28095560000
unkown
page read and write
clean
2D439478000
unkown
page read and write
clean
2D43ED00000
unkown
page read and write
clean
7FF5CE14A000
unkown image
page readonly
clean
2D439502000
unkown
page read and write
clean
7FF4F661E000
unkown image
page readonly
clean
19DB9FC5000
unkown
page read and write
clean
7FF4F643B000
unkown image
page readonly
clean
19DB9F8C000
unkown
page read and write
clean
DDBBC7E000
stack
page read and write
clean
9C459FE000
stack
page read and write
clean
7FF5AE600000
unkown image
page readonly
clean
7FF50F345000
unkown image
page readonly
clean
23FDB7A0000
unkown image
page readonly
clean
7FF4F65F2000
unkown image
page readonly
clean
23C387E000
stack
page read and write
clean
D90000
unkown image
page readonly
clean
1ED8944F000
unkown
page read and write
clean
1ED89428000
unkown
page read and write
clean
2D439C15000
unkown
page read and write
clean
412000
unkown image
page read and write
clean
19DB9F61000
unkown
page read and write
clean
19DB9CF0000
unkown image
page read and write
clean
19DB95C0000
unkown
page read and write
clean
7FF5AE633000
unkown image
page readonly
clean
2C60000
unkown image
page read and write
clean
19DB9680000
unkown
page read and write
clean
2D43EA4D000
unkown
page read and write
clean
7FF4F6650000
unkown image
page readonly
clean
7FF5AE5E9000
unkown image
page readonly
clean
2D439A50000
unkown image
page readonly
clean
7FF5B554D000
unkown image
page readonly
clean
1A9D4A3C000
unkown
page read and write
clean
23FDB3F0000
unkown image
page readonly
clean
5CA000
heap default
page read and write
clean
2A67E000000
unkown
page read and write
clean
2D439310000
unkown image
page readonly
clean
1A9D4A70000
unkown
page read and write
clean
19DB9800000
unkown image
page readonly
clean
1ED89476000
unkown
page read and write
clean
7DF4C12B0000
unkown image
page readonly
clean
7FF50F46E000
unkown image
page readonly
clean
2D4392E0000
heap private
page read and write
clean
7FF5CE097000
unkown image
page readonly
clean
7FF5CE06F000
unkown image
page readonly
clean
19DB9713000
unkown
page read and write
clean
1A9D4A13000
unkown
page read and write
clean
7FF50F286000
unkown image
page readonly
clean
7FF50F50A000
unkown image
page readonly
clean
7FF4F6721000
unkown image
page readonly
clean
7FF4F63B5000
unkown image
page readonly
clean
7DF5BC350000
unkown image
page readonly
clean
7FF4F5DD4000
unkown image
page readonly
clean
7FF50F2A4000
unkown image
page readonly
clean
7FF59FC5A000
unkown image
page readonly
clean
7DF5DBDE0000
unkown image
page readonly
clean
3ED5F77000
stack
page read and write
clean
7FF5AE1C7000
unkown image
page readonly
clean
19DB9F57000
unkown
page read and write
clean
7FF50ED55000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1A9D4810000
unkown image
page read and write
clean
19DB967B000
unkown
page read and write
clean
7FF50F461000
unkown image
page readonly
clean
19DB9658000
unkown
page read and write
clean
19DB9648000
unkown
page read and write
clean
1A9D4C00000
unkown image
page readonly
clean
7FF5B56A7000
unkown image
page readonly
clean
1A9D4820000
heap private
page read and write
clean
FF499FB000
stack
page read and write
clean
7FF5AE365000
unkown image
page readonly
clean
19DBA402000
unkown
page read and write
clean
7DF5C3400000
unkown image
page readonly
clean
7DF504390000
unkown image
page readonly
clean
1ED891F0000
unkown image
page readonly
clean
19DB96A1000
unkown
page read and write
clean
28096310000
unkown
page read and write
clean
2A67E602000
unkown
page read and write
clean
7DF51D210000
unkown image
page readonly
clean
7FF59FC71000
unkown image
page readonly
clean
7DF50D082000
unkown image
page readonly
clean
7FF5B5693000
unkown image
page readonly
clean
7DF5DBDC2000
unkown image
page readonly
clean
7DF50D082000
unkown image
page readonly
clean
7FF5B576A000
unkown image
page readonly
clean
2D43EAE9000
unkown
page read and write
clean
2A67E580000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
2D43EC08000
unkown
page read and write
clean
7FF50ED41000
unkown image
page readonly
clean
7FF5AE6B9000
unkown image
page readonly
clean
2D43ECE0000
unkown
page read and write
clean
7FF50F35D000
unkown image
page readonly
clean
7FF50F257000
unkown image
page readonly
clean
19DB9FD7000
unkown
page read and write
clean
7FF50F591000
unkown image
page readonly
clean
7FF5B568D000
unkown image
page readonly
clean
7FF50F574000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
280954E0000
unkown
page read and write
clean
7FF50EE0D000
unkown image
page readonly
clean
7DF51D210000
unkown image
page readonly
clean
21E0000
heap private
page read and write
clean
19DB9649000
unkown
page read and write
clean
1A9D4A4E000
unkown
page read and write
clean
23FDB4E1000
unkown
page read and write
clean
7FF4F65DF000
unkown image
page readonly
clean
E8F1979000
stack
page read and write
clean
2280000
unkown
page read and write
clean
7DF402260000
unkown image
page readonly
clean
7FF4F663F000
unkown image
page readonly
clean
7FF5B56DE000
unkown image
page readonly
clean
7DF50D0A0000
unkown image
page readonly
clean
7FF4F6731000
unkown image
page readonly
clean
2A67DDD0000
unkown image
page readonly
clean
280953C0000
unkown image
page readonly
clean
280953D0000
unkown image
page readonly
clean
DE36BFF000
stack
page read and write
clean
19DB964D000
unkown
page read and write
clean
1ED89500000
unkown
page read and write
clean
2D439BC0000
unkown image
page readonly
clean
DE366FE000
stack
page read and write
clean
7FF4F653F000
unkown image
page readonly
clean
7FF4FF39A000
unkown image
page readonly
clean
2A67DF00000
unkown image
page readonly
clean
1A9D4A6B000
unkown
page read and write
clean
7FF5CE151000
unkown image
page readonly
clean
DE3667E000
stack
page read and write
clean
19DB9FA4000
unkown
page read and write
clean
1ED89502000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
2D43EA9C000
unkown
page read and write
clean
19DB94A0000
unkown image
page readonly
clean
2D439BF3000
unkown
page read and write
clean
19DB9F9F000
unkown
page read and write
clean
19DB95A0000
unkown image
page readonly
clean
7FF50F507000
unkown image
page readonly
clean
7FF4F6709000
unkown image
page readonly
clean
7DF5C33F2000
unkown image
page readonly
clean
19DB9654000
unkown
page read and write
clean
7FF5CE0BE000
unkown image
page readonly
clean
7FF5B56FD000
unkown image
page readonly
clean
7FF5AE535000
unkown image
page readonly
clean
280955C8000
unkown
page read and write
clean
2D43E9E4000
unkown
page read and write
clean
1ED89513000
unkown
page read and write
clean
7FF5B5752000
unkown image
page readonly
clean
7DF50D080000
unkown image
page readonly
clean
7FF4F672A000
unkown image
page readonly
clean
280953A0000
unkown image
page readonly
clean
2D439D59000
unkown
page read and write
clean
7DF5DBDD0000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
FF49C7F000
stack
page read and write
clean
28096100000
unkown
page read and write
clean
7FF50F4B0000
unkown image
page readonly
clean
7FF5B5605000
unkown image
page readonly
clean
19DB96EA000
unkown
page read and write
clean
7FF5CE087000
unkown image
page readonly
clean
3ED62FE000
stack
page read and write
clean
2BC0000
heap private
page read and write
clean
7FF5B5771000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF50F2F5000
unkown image
page readonly
clean
23C3677000
stack
page read and write
clean
FF494F7000
stack
page read and write
clean
19DB9657000
unkown
page read and write
clean
23FDB460000
unkown image
page readonly
clean
7DF504392000
unkown image
page readonly
clean
7FF4F659C000
unkown image
page readonly
clean
7DF50D090000
unkown image
page readonly
clean
28095720000
unkown
page read and write
clean
7FF5CDF30000
unkown image
page readonly
clean
7DF5043A0000
unkown image
page readonly
clean
2D43948E000
unkown
page read and write
clean
1A9D4A27000
unkown
page read and write
clean
7FF4F6299000
unkown image
page readonly
clean
7FF59FBCE000
unkown image
page readonly
clean
19DBA402000
unkown
page read and write
clean
7FF59FBEA000
unkown image
page readonly
clean
7FF5CE15A000
unkown image
page readonly
clean
7DF5C33E0000
unkown image
page readonly
clean
1ED891C0000
heap private
page read and write
clean
28095550000
unkown
page read and write
clean
7FF59FC71000
unkown image
page readonly
clean
2D43E8A0000
unkown
page read and write
clean
19DB9F8B000
unkown
page read and write
clean
19DB9650000
unkown
page read and write
clean
7FF4FF32D000
unkown image
page readonly
clean
7DF51D202000
unkown image
page readonly
clean
19DB9F7F000
unkown
page read and write
clean
7FF5AE65D000
unkown image
page readonly
clean
7FF5B5267000
unkown image
page readonly
clean
7FF4FF3F2000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
2A67E100000
unkown
page read and write
clean
7FF5AE565000
unkown image
page readonly
clean
7FF5B56A0000
unkown image
page readonly
clean
7FF5B5261000
unkown image
page readonly
clean
23FDB4D0000
heap default
page read and write
clean
E8F15AF000
stack
page read and write
clean
23FDB3B0000
unkown image
page read and write
clean
7DF51D200000
unkown image
page readonly
clean
19DB9FA4000
unkown
page read and write
clean
7DF4D9C90000
unkown image
page readonly
clean
FF49DFB000
stack
page read and write
clean
7FF50F452000
unkown image
page readonly
clean
19DB9F6C000
unkown
page read and write
clean
7DF51D1F2000
unkown image
page readonly
clean
7FF5AE6DA000
unkown image
page readonly
clean
7FF5B5781000
unkown image
page readonly
clean
7DF5BC350000
unkown image
page readonly
clean
7FF5B55DB000
unkown image
page readonly
clean
7FF5AE6CA000
unkown image
page readonly
clean
2D439472000
unkown
page read and write
clean
7FF4F66AA000
unkown image
page readonly
clean
7DF41B0C0000
unkown image
page readonly
clean
19DB9F7F000
unkown
page read and write
clean
7FF4F6495000
unkown image
page readonly
clean
19DB9F5A000
unkown
page read and write
clean
7FF5AE5EF000
unkown image
page readonly
clean
2D439A60000
unkown image
page readonly
clean
7FF59FADC000
unkown image
page readonly
clean
7FF5CE132000
unkown image
page readonly
clean
7FF5AE62B000
unkown image
page readonly
clean
7DF5AD8D0000
unkown image
page readonly
clean
7FF5AE6C4000
unkown image
page readonly
clean
2330000
unkown
page read and write
clean
19DB9F9F000
unkown
page read and write
clean
7DF50D090000
unkown image
page readonly
clean
1ED8942A000
unkown
page read and write
clean
7FF5CDFB5000
unkown image
page readonly
clean
7FF50F2D6000
unkown image
page readonly
clean
2A67DE20000
heap default
page read and write
clean
19DB9F5A000
unkown
page read and write
clean
DDBBFFD000
stack
page read and write
clean
7FF50F46A000
unkown image
page readonly
clean
2C54000
heap private
page read and write
clean
7FF50F4C7000
unkown image
page readonly
clean
7FF50F18F000
unkown image
page readonly
clean
7FF4F658B000
unkown image
page readonly
clean
7FF5AE617000
unkown image
page readonly
clean
19DB9FA5000
unkown
page read and write
clean
2A67E029000
unkown
page read and write
clean
9C458FA000
stack
page read and write
clean
19DB9F89000
unkown
page read and write
clean
7FF5B5531000
unkown image
page readonly
clean
7FF50F343000
unkown image
page readonly
clean
540000
heap default
page read and write
clean
19DB96C7000
unkown
page read and write
clean
7FF50F404000
unkown image
page readonly
clean
7FF50F4E2000
unkown image
page readonly
clean
9C4550B000
unkown
page read and write
clean
1A9D4E00000
unkown image
page readonly
clean
7DF5043B0000
unkown image
page readonly
clean
DE363BC000
unkown
page read and write
clean
DDBBEFB000
stack
page read and write
clean
23FDB790000
heap private
page read and write
clean
7FF5CDDE5000
unkown image
page readonly
clean
7FF5CE161000
unkown image
page readonly
clean
2D43947C000
unkown
page read and write
clean
7FF50F49D000
unkown image
page readonly
clean
19DB9600000
unkown
page read and write
clean
2A67E049000
unkown
page read and write
clean
7FF5B5689000
unkown image
page readonly
clean
7FF5CE083000
unkown image
page readonly
clean
19DB9470000
unkown image
page readonly
clean
7FF4F663D000
unkown image
page readonly
clean
7FF59FA82000
unkown image
page readonly
clean
E8F18FA000
stack
page read and write
clean
1A9D4A7C000
unkown
page read and write
clean
7FF59F3DA000
unkown image
page readonly
clean
19DB967A000
unkown
page read and write
clean
19DB9647000
unkown
page read and write
clean
7FF5CDF4B000
unkown image
page readonly
clean
2D4392F0000
unkown image
page readonly
clean
19DB9CE0000
unkown
page read and write
clean
7FF50F2EF000
unkown image
page readonly
clean
7FF5CE08E000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
7FF5CE144000
unkown image
page readonly
clean
19DB9F70000
unkown
page read and write
clean
7FF5B5677000
unkown image
page readonly
clean
7FF50F37B000
unkown image
page readonly
clean
7FF50F4EE000
unkown image
page readonly
clean
7FF4FF404000
unkown image
page readonly
clean
2D43ECD0000
unkown
page read and write
clean
2D439D18000
unkown
page read and write
clean
19DB96A8000
unkown
page read and write
clean
7DF51D202000
unkown image
page readonly
clean
19DB96E2000
unkown
page read and write
clean
2D43E9A0000
unkown
page read and write
clean
7FF59FC54000
unkown image
page readonly
clean
7FF58BB81000
unkown image
page readonly
clean
2D4398D0000
unkown image
page readonly
clean
2D439370000
unkown
page read and write
clean
7FF5AE65A000
unkown image
page readonly
clean
7FF59FB7D000
unkown image
page readonly
clean
2D439BF0000
unkown
page read and write
clean
7FF4FF39D000
unkown image
page readonly
clean
7FF4F60AC000
unkown image
page readonly
clean
7FF50F0F7000
unkown image
page readonly
clean
7DF50D0A0000
unkown image
page readonly
clean
7FF4F64E1000
unkown image
page readonly
clean
5C0000
heap default
page read and write
clean
19DB9F9D000
unkown
page read and write
clean
7FF5B556B000
unkown image
page readonly
clean
7FF50F0F9000
unkown image
page readonly
clean
19DB9613000
unkown
page read and write
clean
1ED89600000
unkown image
page readonly
clean
19DB9F90000
unkown
page read and write
clean
2D4392F0000
unkown image
page readonly
clean
28095500000
unkown image
page readonly
clean
DE368FB000
stack
page read and write
clean
7DF5AD8E0000
unkown image
page readonly
clean
1A9D4A87000
unkown
page read and write
clean
2D43E9B0000
unkown
page read and write
clean
19DB9F9F000
unkown
page read and write
clean
7FF4F5DDA000
unkown image
page readonly
clean
2D4393E1000
unkown
page read and write
clean
2D43E9D0000
unkown
page read and write
clean
19DB9F00000
unkown
page read and write
clean
7FF50F43F000
unkown image
page readonly
clean
7FF50F332000
unkown image
page readonly
clean
7DF50D092000
unkown image
page readonly
clean
2D43EB02000
unkown
page read and write
clean
7DF51D200000
unkown image
page readonly
clean
7FF5CE0B3000
unkown image
page readonly
clean
7FF4F6714000
unkown image
page readonly
clean
7DF5BC342000
unkown image
page readonly
clean
7FF5AE1C1000
unkown image
page readonly
clean
2D43E800000
unkown
page read and write
clean
2A67DE00000
unkown image
page readonly
clean
2D439C00000
unkown
page read and write
clean
7DF504392000
unkown image
page readonly
clean
1A9D4B08000
unkown
page read and write
clean
7FF50F195000
unkown image
page readonly
clean
7DF50D092000
unkown image
page readonly
clean
7FF4FF34E000
unkown image
page readonly
clean
DE369F7000
stack
page read and write
clean
40000
unkown image
page readonly
clean
7FF4FF3F9000
unkown image
page readonly
clean
7DF5C3400000
unkown image
page readonly
clean
19DB9F6D000
unkown
page read and write
clean
1A9D4A4D000
unkown
page read and write
clean
2D43EA40000
unkown
page read and write
clean
19DB9F57000
unkown
page read and write
clean
1ED89482000
unkown
page read and write
clean
2B70000
unkown image
page readonly
clean
7DF4AB7A0000
unkown image
page readonly
clean
7DF5C33E0000
unkown image
page readonly
clean
2D43EB00000
unkown
page read and write
clean
7FF4F6307000
unkown image
page readonly
clean
1A9D4980000
unkown
page read and write
clean
7FF4FF41A000
unkown image
page readonly
clean
7FF50F262000
unkown image
page readonly
clean
7FF59FBC2000
unkown image
page readonly
clean
7FF4F6702000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
21E8000
heap private
page read and write
clean
2D439BE0000
unkown image
page readonly
clean
19DB9F26000
unkown
page read and write
clean
7FF4F66A7000
unkown image
page readonly
clean
2D439D02000
unkown
page read and write
clean
19DB9F8B000
unkown
page read and write
clean
21B0000
unkown
page read and write
clean
7FF4F6097000
unkown image
page readonly
clean
7FF4F64E5000
unkown image
page readonly
clean
414000
unkown image
page readonly
clean
2A67E013000
unkown
page read and write
clean
23C32FE000
stack
page read and write
clean
7DF5BC340000
unkown image
page readonly
clean
19DB96AC000
unkown
page read and write
clean
7FF4FF336000
unkown image
page readonly
clean
FF497FE000
stack
page read and write
clean
19DB9F48000
unkown
page read and write
clean
7FF59FB83000
unkown image
page readonly
clean
7FF4F6402000
unkown image
page readonly
clean
19DB9B80000
unkown image
page readonly
clean
7FF59FC49000
unkown image
page readonly
clean
2D43E9E0000
unkown
page read and write
clean
FF49CFF000
stack
page read and write
clean
7FF4F660A000
unkown image
page readonly
clean
2D439C02000
unkown
page read and write
clean
23FDB510000
unkown
page read and write
clean
7DF5BC352000
unkown image
page readonly
clean
2D439D13000
unkown
page read and write
clean
1ED89980000
unkown image
page readonly
clean
1A9D4A61000
unkown
page read and write
clean
19DB9708000
unkown
page read and write
clean
7FF5AE603000
unkown image
page readonly
clean
2D43A3E0000
unkown
page read and write
clean
28095960000
unkown image
page readonly
clean
19DB9FC3000
unkown
page read and write
clean
7DF5C33F0000
unkown image
page readonly
clean
7FF5B5764000
unkown image
page readonly
clean
19DB9F72000
unkown
page read and write
clean
23FDB9A0000
unkown image
page readonly
clean
19DB9FA5000
unkown
page read and write
clean
19DB9F91000
unkown
page read and write
clean
7FF59FB7F000
unkown image
page readonly
clean
2A67E200000
unkown image
page readonly
clean
7FF5CE0AB000
unkown image
page readonly
clean
2D43EC24000
unkown
page read and write
clean
1A9D4960000
unkown image
page readonly
clean
7FF50F473000
unkown image
page readonly
clean
19DB96ED000
unkown
page read and write
clean
7FF59FB86000
unkown image
page readonly
clean
19DB9460000
heap private
page read and write
clean
28095710000
unkown
page readonly
clean
2D43E880000
unkown
page read and write
clean
9C45979000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
2D43EC70000
unkown
page read and write
clean
2D43EA9A000
unkown
page read and write
clean
7FF59F4FE000
unkown image
page readonly
clean
2A67E102000
unkown
page read and write
clean
19DB9F9F000
unkown
page read and write
clean
23FDB3D0000
unkown image
page readonly
clean
7FF5B568F000
unkown image
page readonly
clean
19DBA502000
unkown
page read and write
clean
280955CB000
heap default
page read and write
clean
1A9D4F80000
unkown image
page readonly
clean
23C357F000
stack
page read and write
clean
7FF4F6683000
unkown image
page readonly
clean
23FDB470000
unkown image
page readonly
clean
7FF59F4F9000
unkown image
page readonly
clean
7FF59FC6A000
unkown image
page readonly
clean
7DF50D080000
unkown image
page readonly
clean
7FF4F6730000
unkown image
page readonly
clean
7FF50F13F000
unkown image
page readonly
clean
E8F19FF000
stack
page read and write
clean
19DB9680000
unkown
page read and write
clean
7FF50F411000
unkown image
page readonly
clean
7FF50F29B000
unkown image
page readonly
clean
28095590000
heap default
page read and write
clean
7FF4F64B6000
unkown image
page readonly
clean
2A67E04F000
unkown
page read and write
clean
7FF4F6547000
unkown image
page readonly
clean
19DBA402000
unkown
page read and write
clean
7DF4BA210000
unkown image
page readonly
clean
2D43ECC0000
unkown
page read and write
clean
7FF5AE607000
unkown image
page readonly
clean
19DB9F5B000
unkown
page read and write
clean
7FF5CDF2D000
unkown image
page readonly
clean
7FF50F581000
unkown image
page readonly
clean
19DB9FA4000
unkown
page read and write
clean
7FF50F50D000
unkown image
page readonly
clean
7FF5CE0D7000
unkown image
page readonly
clean
19DB964E000
unkown
page read and write
clean
23FDB4F7000
unkown
page read and write
clean
2D439D58000
unkown
page read and write
clean
7FF50F45E000
unkown image
page readonly
clean
414000
unkown image
page readonly
clean
7FF50F349000
unkown image
page readonly
clean
2D43EC0E000
unkown
page read and write
clean
7FF50F47E000
unkown image
page readonly
clean
19DBA563000
unkown
page read and write
clean
530000
unkown image
page readonly
clean
19DBA402000
unkown
page read and write
clean
7FF4FEEBB000
unkown image
page readonly
clean
7FF4F648F000
unkown image
page readonly
clean
19DB9F9F000
unkown
page read and write
clean
2A67DDD0000
unkown image
page readonly
clean
7FF5CE06D000
unkown image
page readonly
clean
2D439500000
unkown
page read and write
clean
7FF5B55EC000
unkown image
page readonly
clean
19DBA563000
unkown
page read and write
clean
1ED89800000
unkown image
page readonly
clean
7FF4FF421000
unkown image
page readonly
clean
19DB9F7C000
unkown
page read and write
clean
7FF4F6211000
unkown image
page readonly
clean
28095CF0000
unkown image
page readonly
clean
There are 886 hidden memdumps, click here to show them.