IOC Report

loading gif

Files

File Path
Type
Category
Malicious
FAKTURA 9502461485.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\~DFA25EEA5CBC5E729F.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\FAKTURA 9502461485.exe
"C:\Users\user\Desktop\FAKTURA 9502461485.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ministerstormens\Confabulatory
Finansierings
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
22B0000
unkown
page execute and read and write
malicious
29318647000
unkown
page read and write
clean
264057CC000
unkown
page read and write
clean
26404DD0000
unkown image
page readonly
clean
7FF5E0B7A000
unkown image
page readonly
clean
29318708000
unkown
page read and write
clean
1C544A00000
unkown image
page readonly
clean
7FF5E0B7C000
unkown image
page readonly
clean
7DF46E3D0000
unkown image
page readonly
clean
21535E8D000
unkown
page read and write
clean
26A335E2000
unkown
page read and write
clean
7FF5CFB23000
unkown image
page readonly
clean
26A335C6000
unkown
page read and write
clean
1C544630000
unkown image
page readonly
clean
7FF5E0C0D000
unkown image
page readonly
clean
7FF573499000
unkown image
page readonly
clean
2CA0000
unkown image
page read and write
clean
7FF5D02C7000
unkown image
page readonly
clean
26405C02000
unkown
page read and write
clean
26405717000
unkown
page read and write
clean
26405602000
unkown
page read and write
clean
7FF573496000
unkown image
page readonly
clean
7FF5E03FD000
unkown image
page readonly
clean
7FF5E0A8E000
unkown image
page readonly
clean
26A33350000
unkown image
page read and write
clean
7FF5732C3000
unkown image
page readonly
clean
7FF55B3D4000
unkown image
page readonly
clean
98B0CFF000
stack
page read and write
clean
26405C02000
unkown
page read and write
clean
7FF5D03A1000
unkown image
page readonly
clean
7FF5D02E7000
unkown image
page readonly
clean
7FF55B481000
unkown image
page readonly
clean
7FF52D985000
unkown image
page readonly
clean
7FF573437000
unkown image
page readonly
clean
7DF5885A2000
unkown image
page readonly
clean
7DF570512000
unkown image
page readonly
clean
B1E527F000
stack
page read and write
clean
157FD45B000
unkown
page read and write
clean
7FF52DD50000
unkown image
page readonly
clean
7DF5ABFB2000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
21535E48000
unkown
page read and write
clean
7FF596EAD000
unkown image
page readonly
clean
7FF5E0BBC000
unkown image
page readonly
clean
7DF5E5432000
unkown image
page readonly
clean
29318A00000
unkown image
page readonly
clean
7FF55B3E4000
unkown image
page readonly
clean
7FF5E0BF8000
unkown image
page readonly
clean
26405792000
unkown
page read and write
clean
7FF52DD7F000
unkown image
page readonly
clean
264057AC000
unkown
page read and write
clean
7FF5E0B8E000
unkown image
page readonly
clean
26405781000
unkown
page read and write
clean
7FF5732E1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2560000
unkown
page read and write
clean
7FF5D02AA000
unkown image
page readonly
clean
2640578C000
unkown
page read and write
clean
7DF570512000
unkown image
page readonly
clean
21535E49000
unkown
page read and write
clean
26404C50000
unkown image
page readonly
clean
21535C60000
heap default
page read and write
clean
7FF5E0BBF000
unkown image
page readonly
clean
7FF5E0BA7000
unkown image
page readonly
clean
7DF570500000
unkown image
page readonly
clean
7FF5D03A2000
unkown image
page readonly
clean
26404C40000
heap private
page read and write
clean
2640579C000
unkown
page read and write
clean
D1AD5F8000
stack
page read and write
clean
26404EA6000
unkown
page read and write
clean
98B0BF7000
stack
page read and write
clean
7FF596787000
unkown image
page readonly
clean
7FF5D0318000
unkown image
page readonly
clean
264054D0000
unkown image
page read and write
clean
7FF5E0C7A000
unkown image
page readonly
clean
157FD47B000
unkown
page read and write
clean
7DF440DF0000
unkown image
page readonly
clean
7FF52DDE7000
unkown image
page readonly
clean
264057A0000
unkown
page read and write
clean
1C544913000
unkown
page read and write
clean
7FF57344C000
unkown image
page readonly
clean
26405C00000
unkown
page read and write
clean
2640577E000
unkown
page read and write
clean
7FF57336D000
unkown image
page readonly
clean
34E4C7B000
unkown
page read and write
clean
29318654000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
26404E3C000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7FF5E0BEF000
unkown image
page readonly
clean
7DF5ABFA2000
unkown image
page readonly
clean
7FF52DCAE000
unkown image
page readonly
clean
21535C10000
unkown image
page readonly
clean
7FF57342B000
unkown image
page readonly
clean
7FF596E3B000
unkown image
page readonly
clean
7FF52DE18000
unkown image
page readonly
clean
7FF52DDB5000
unkown image
page readonly
clean
26405798000
unkown
page read and write
clean
21536200000
unkown image
page readonly
clean
7FF5D030F000
unkown image
page readonly
clean
21535C40000
unkown image
page readonly
clean
2640578F000
unkown
page read and write
clean
30A0000
unkown image
page readonly
clean
26405786000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF5D0061000
unkown image
page readonly
clean
21535D60000
unkown
page read and write
clean
22A0000
heap private
page read and write
clean
157FD1F0000
unkown image
page readonly
clean
26404EFA000
unkown
page read and write
clean
7DF570502000
unkown image
page readonly
clean
7FF5D031E000
unkown image
page readonly
clean
26404CA0000
heap default
page read and write
clean
7FF5E0756000
unkown image
page readonly
clean
7DF5F5D02000
unkown image
page readonly
clean
1C54484A000
unkown
page read and write
clean
157FD2F0000
unkown image
page readonly
clean
26404E88000
unkown
page read and write
clean
7FF5D01FD000
unkown image
page readonly
clean
7FF572C93000
unkown image
page readonly
clean
29318602000
unkown
page read and write
clean
7FF55B40D000
unkown image
page readonly
clean
7FF55AF65000
unkown image
page readonly
clean
7DF5ABFB2000
unkown image
page readonly
clean
21E0000
unkown image
page read and write
clean
2640576E000
unkown
page read and write
clean
1C544C00000
unkown image
page readonly
clean
C34267B000
stack
page read and write
clean
7DF4E32F0000
unkown image
page readonly
clean
293183F0000
heap private
page read and write
clean
2640579C000
unkown
page read and write
clean
233E000
stack
page read and write
clean
2640577A000
unkown
page read and write
clean
7FF52DD1C000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
26404E13000
unkown
page read and write
clean
7FF55B2DD000
unkown image
page readonly
clean
21535E4B000
unkown
page read and write
clean
3160000
unkown
page read and write
clean
26A338A0000
unkown image
page readonly
clean
7FF5E0B90000
unkown image
page readonly
clean
7FF5D01AE000
unkown image
page readonly
clean
D1ACD1F000
stack
page read and write
clean
26405460000
unkown image
page write copy
clean
26A335CF000
unkown
page read and write
clean
7FF596F22000
unkown image
page readonly
clean
26405796000
unkown
page read and write
clean
26A33370000
unkown image
page readonly
clean
7FF5D02B5000
unkown image
page readonly
clean
7FF596E84000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
1C544600000
unkown image
page readonly
clean
157FD1C0000
unkown image
page readonly
clean
26405769000
unkown
page read and write
clean
7DF5885A0000
unkown image
page readonly
clean
7DF486460000
unkown image
page readonly
clean
26A335A0000
heap default
page read and write
clean
264057C1000
unkown
page read and write
clean
21536000000
unkown image
page readonly
clean
1C54484B000
unkown
page read and write
clean
C3421CF000
stack
page read and write
clean
2640578B000
unkown
page read and write
clean
424000
unkown image
page readonly
clean
7DF542F30000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
21535E4F000
unkown
page read and write
clean
7FF55B38E000
unkown image
page readonly
clean
3ADF000
stack
page read and write
clean
7DF5ABFC0000
unkown image
page readonly
clean
2931863C000
unkown
page read and write
clean
497867C000
unkown
page read and write
clean
26404F08000
unkown
page read and write
clean
D1ACD9F000
stack
page read and write
clean
7DF5E5432000
unkown image
page readonly
clean
D1AD4FF000
stack
page read and write
clean
7DF5ABFA2000
unkown image
page readonly
clean
700000
heap default
page read and write
clean
7FF52D922000
unkown image
page readonly
clean
34E4D7F000
stack
page read and write
clean
7FF52DDFA000
unkown image
page readonly
clean
1C544800000
unkown
page read and write
clean
422000
unkown image
page read and write
clean
2640577C000
unkown
page read and write
clean
B1E507F000
stack
page read and write
clean
7FF596F14000
unkown image
page readonly
clean
7FF5E0A51000
unkown image
page readonly
clean
26404C70000
unkown image
page readonly
clean
1C544883000
unkown
page read and write
clean
2640577D000
unkown
page read and write
clean
5D0000
heap default
page read and write
clean
7DF588590000
unkown image
page readonly
clean
7FF5E0750000
unkown image
page readonly
clean
7FF5D0101000
unkown image
page readonly
clean
7FF573457000
unkown image
page readonly
clean
7FF52DD9A000
unkown image
page readonly
clean
2380000
unkown
page read and write
clean
21535BF0000
unkown image
page read and write
clean
29318702000
unkown
page read and write
clean
7FF52D707000
unkown image
page readonly
clean
26A335E1000
unkown
page read and write
clean
21535E82000
unkown
page read and write
clean
7FF52DBF1000
unkown image
page readonly
clean
7DF570502000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF5E0907000
unkown image
page readonly
clean
1C544902000
unkown
page read and write
clean
7FF596E74000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
34E527E000
stack
page read and write
clean
40000
unkown image
page readonly
clean
7DF542F32000
unkown image
page readonly
clean
264057B0000
unkown
page read and write
clean
7DF542F40000
unkown image
page readonly
clean
7DF5885A2000
unkown image
page readonly
clean
7FF52DE9A000
unkown image
page readonly
clean
7FF5D02DC000
unkown image
page readonly
clean
7FF5E0AF4000
unkown image
page readonly
clean
7DF570500000
unkown image
page readonly
clean
26405792000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
34E5077000
stack
page read and write
clean
26405C02000
unkown
page read and write
clean
2640577D000
unkown
page read and write
clean
7FF5D0203000
unkown image
page readonly
clean
B1E52FA000
stack
page read and write
clean
1C544900000
unkown
page read and write
clean
2640577E000
unkown
page read and write
clean
29318400000
unkown image
page readonly
clean
7FF5E0C82000
unkown image
page readonly
clean
98B05DF000
stack
page read and write
clean
1C544620000
unkown image
page readonly
clean
21535C00000
heap private
page read and write
clean
29318550000
unkown
page read and write
clean
7FF55B38A000
unkown image
page readonly
clean
26404E4D000
unkown
page read and write
clean
157FD460000
unkown
page read and write
clean
7FF57346A000
unkown image
page readonly
clean
7FF52DD63000
unkown image
page readonly
clean
7FF52DCFD000
unkown image
page readonly
clean
7FF55B406000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
26404C50000
unkown image
page readonly
clean
7FF55B47A000
unkown image
page readonly
clean
7FF52DCAB000
unkown image
page readonly
clean
29318629000
unkown
page read and write
clean
26A335CF000
unkown
page read and write
clean
7DF5F5D10000
unkown image
page readonly
clean
26405779000
unkown
page read and write
clean
34E4CFE000
stack
page read and write
clean
7FF5D032D000
unkown image
page readonly
clean
2640579C000
unkown
page read and write
clean
157FD210000
heap default
page read and write
clean
2375000
heap private
page read and write
clean
1C545002000
unkown
page read and write
clean
21535F08000
unkown
page read and write
clean
26405780000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF5CFE76000
unkown image
page readonly
clean
7FF52DDDC000
unkown image
page readonly
clean
7FF52DDBB000
unkown image
page readonly
clean
29318800000
unkown image
page readonly
clean
7FF55B3C7000
unkown image
page readonly
clean
29318530000
unkown image
page readonly
clean
7FF52DE1E000
unkown image
page readonly
clean
7FF5731D1000
unkown image
page readonly
clean
26405C02000
unkown
page read and write
clean
2640578B000
unkown
page read and write
clean
7FF52DB6B000
unkown image
page readonly
clean
D1AD1F8000
stack
page read and write
clean
29318B80000
unkown image
page readonly
clean
29318450000
heap default
page read and write
clean
1C544849000
unkown
page read and write
clean
1C544829000
unkown
page read and write
clean
26404E4C000
unkown
page read and write
clean
7FF5D0214000
unkown image
page readonly
clean
7DF5E5430000
unkown image
page readonly
clean
7FF5CFE85000
unkown image
page readonly
clean
4978A7F000
stack
page read and write
clean
7FF55AF56000
unkown image
page readonly
clean
21535E4C000
unkown
page read and write
clean
7FF5E0A33000
unkown image
page readonly
clean
7FF52D88E000
unkown image
page readonly
clean
7FF5D0304000
unkown image
page readonly
clean
21C0000
heap private
page read and write
clean
B1E4DEA000
unkown
page read and write
clean
7FF52DBE4000
unkown image
page readonly
clean
2260000
unkown image
page readonly
clean
7FF55B251000
unkown image
page readonly
clean
7FF52D6B2000
unkown image
page readonly
clean
7FF52D9C7000
unkown image
page readonly
clean
26405771000
unkown
page read and write
clean
264057A0000
unkown
page read and write
clean
7FF52DD8F000
unkown image
page readonly
clean
7FF573425000
unkown image
page readonly
clean
7FF5E0C81000
unkown image
page readonly
clean
157FD800000
unkown image
page readonly
clean
2640578F000
unkown
page read and write
clean
1C54484E000
unkown
page read and write
clean
7FF52DD14000
unkown image
page readonly
clean
26405C6A000
unkown
page read and write
clean
7FF573301000
unkown image
page readonly
clean
26404E55000
unkown
page read and write
clean
29318420000
unkown image
page readonly
clean
29318700000
unkown
page read and write
clean
2640578B000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
26A33370000
unkown image
page readonly
clean
29318430000
unkown image
page readonly
clean
2640579D000
unkown
page read and write
clean
6E0000
unkown
page read and write
clean
4978B77000
stack
page read and write
clean
497897B000
stack
page read and write
clean
7FF55B3FE000
unkown image
page readonly
clean
7FF55B482000
unkown image
page readonly
clean
7FF52DCB3000
unkown image
page readonly
clean
26405769000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF52D912000
unkown image
page readonly
clean
26404E4F000
unkown
page read and write
clean
7FF52DDDF000
unkown image
page readonly
clean
2640574A000
unkown
page read and write
clean
26404F02000
unkown
page read and write
clean
7FF5E0A71000
unkown image
page readonly
clean
264057B1000
unkown
page read and write
clean
7FF5E0BDA000
unkown image
page readonly
clean
7DF542F40000
unkown image
page readonly
clean
D1ACC9B000
unkown
page read and write
clean
26405200000
unkown image
page readonly
clean
7FF5E0941000
unkown image
page readonly
clean
26A334C0000
heap private
page read and write
clean
29318679000
unkown
page read and write
clean
7FF5D0171000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
1C54484F000
unkown
page read and write
clean
26405779000
unkown
page read and write
clean
26A335B6000
heap default
page read and write
clean
C34247F000
stack
page read and write
clean
7DF588590000
unkown image
page readonly
clean
7FF52DE26000
unkown image
page readonly
clean
7FF5E0A8B000
unkown image
page readonly
clean
7FF5D0191000
unkown image
page readonly
clean
7FF52DDAE000
unkown image
page readonly
clean
26404E00000
unkown
page read and write
clean
157FD47B000
unkown
page read and write
clean
7FF573512000
unkown image
page readonly
clean
7FF5E0765000
unkown image
page readonly
clean
21536602000
unkown
page read and write
clean
26404E5C000
unkown
page read and write
clean
7DF5ABFA0000
unkown image
page readonly
clean
157FD600000
unkown image
page readonly
clean
21D0000
unkown
page read and write
clean
360000
unkown
page read and write
clean
2640577D000
unkown
page read and write
clean
7DF5885B0000
unkown image
page readonly
clean
7FF596E9E000
unkown image
page readonly
clean
7FF5D0329000
unkown image
page readonly
clean
7DF5ABFA0000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
7DF5F5D10000
unkown image
page readonly
clean
7FF52DBB0000
unkown image
page readonly
clean
7DF5ABFB0000
unkown image
page readonly
clean
1C544730000
unkown image
page readonly
clean
264057B3000
unkown
page read and write
clean
26405779000
unkown
page read and write
clean
7FF55B271000
unkown image
page readonly
clean
7DF5E5420000
unkown image
page readonly
clean
7FF52D91E000
unkown image
page readonly
clean
26405758000
unkown
page read and write
clean
7FF55B3EF000
unkown image
page readonly
clean
7FF55B2E3000
unkown image
page readonly
clean
26405757000
unkown
page read and write
clean
7FF596E5C000
unkown image
page readonly
clean
26A33A20000
unkown image
page readonly
clean
C34287F000
stack
page read and write
clean
264057AF000
unkown
page read and write
clean
7FF57331B000
unkown image
page readonly
clean
21535F02000
unkown
page read and write
clean
26404E59000
unkown
page read and write
clean
26404D80000
unkown image
page readonly
clean
1C54484C000
unkown
page read and write
clean
C34214B000
unkown
page read and write
clean
364000
unkown
page read and write
clean
9FF000
stack
page read and write
clean
7DF542F32000
unkown image
page readonly
clean
1C544650000
heap default
page read and write
clean
400000
unkown image
page readonly
clean
7FF596EA9000
unkown image
page readonly
clean
7DF5E5422000
unkown image
page readonly
clean
D1AD3F7000
stack
page read and write
clean
26A334E0000
unkown image
page readonly
clean
7FF57350A000
unkown image
page readonly
clean
7FF55AF50000
unkown image
page readonly
clean
26405798000
unkown
page read and write
clean
29318600000
unkown
page read and write
clean
7FF596E98000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
7DF588592000
unkown image
page readonly
clean
7DF5ABFB0000
unkown image
page readonly
clean
7FF57347F000
unkown image
page readonly
clean
1C544813000
unkown
page read and write
clean
34E517E000
stack
page read and write
clean
7FF5D02B0000
unkown image
page readonly
clean
26404E21000
unkown
page read and write
clean
7DF5F5D12000
unkown image
page readonly
clean
26405C02000
unkown
page read and write
clean
7FF5D0153000
unkown image
page readonly
clean
2550000
heap private
page read and write
clean
2640578B000
unkown
page read and write
clean
26405700000
unkown
page read and write
clean
7FF5E0C06000
unkown image
page readonly
clean
26A335C7000
unkown
page read and write
clean
7FF52DE29000
unkown image
page readonly
clean
7FF55B2F4000
unkown image
page readonly
clean
7FF55B1E1000
unkown image
page readonly
clean
7FF572FF5000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
7FF5E0403000
unkown image
page readonly
clean
21535E51000
unkown
page read and write
clean
264057A0000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
26404F16000
unkown
page read and write
clean
7FF5D029C000
unkown image
page readonly
clean
2640574C000
unkown
page read and write
clean
293183E0000
unkown image
page read and write
clean
7FF5E0BC7000
unkown image
page readonly
clean
157FD43C000
unkown
page read and write
clean
157FD457000
unkown
page read and write
clean
7FF55B395000
unkown image
page readonly
clean
26A335CF000
unkown
page read and write
clean
26405796000
unkown
page read and write
clean
7DF5F5D20000
unkown image
page readonly
clean
26405783000
unkown
page read and write
clean
7DF542F22000
unkown image
page readonly
clean
7FF57348E000
unkown image
page readonly
clean
7FF573488000
unkown image
page readonly
clean
C342A7F000
stack
page read and write
clean
157FD47C000
unkown
page read and write
clean
7FF5E0ADD000
unkown image
page readonly
clean
29318400000
unkown image
page readonly
clean
D1AD2F7000
stack
page read and write
clean
157FD513000
unkown
page read and write
clean
5BE000
stack
page read and write
clean
157FD413000
unkown
page read and write
clean
7DF4A9E70000
unkown image
page readonly
clean
2640578C000
unkown
page read and write
clean
21535F00000
unkown
page read and write
clean
1C544851000
unkown
page read and write
clean
7DF542F20000
unkown image
page readonly
clean
26405773000
unkown
page read and write
clean
7DF5E5440000
unkown image
page readonly
clean
7FF5E0C74000
unkown image
page readonly
clean
34E4F7B000
stack
page read and write
clean
21535E13000
unkown
page read and write
clean
7DF570510000
unkown image
page readonly
clean
7FF57341E000
unkown image
page readonly
clean
26A334C5000
heap private
page read and write
clean
157FD463000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7DF5E5422000
unkown image
page readonly
clean
2640577B000
unkown
page read and write
clean
7FF52D703000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
26405796000
unkown
page read and write
clean
7FF55B3DA000
unkown image
page readonly
clean
7FF5E0BD4000
unkown image
page readonly
clean
7FF57349D000
unkown image
page readonly
clean
7FF5E0B8A000
unkown image
page readonly
clean
7FF52DD84000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF52DEA1000
unkown image
page readonly
clean
7FF52D623000
unkown image
page readonly
clean
7FF5E09E1000
unkown image
page readonly
clean
7FF52D970000
unkown image
page readonly
clean
7FF55B141000
unkown image
page readonly
clean
26404E57000
unkown
page read and write
clean
7FF57331E000
unkown image
page readonly
clean
7FF55B107000
unkown image
page readonly
clean
7DF5F5D20000
unkown image
page readonly
clean
7FF52DD7B000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
98B04DB000
unkown
page read and write
clean
7FF55B3A7000
unkown image
page readonly
clean
7FF52DCB8000
unkown image
page readonly
clean
7FF596BE0000
unkown image
page readonly
clean
21535E70000
unkown
page read and write
clean
7DF5E5420000
unkown image
page readonly
clean
1C544870000
unkown
page read and write
clean
22F0000
heap private
page read and write
clean
26A334A0000
unkown
page read and write
clean
7DF542F30000
unkown image
page readonly
clean
7FF57344F000
unkown image
page readonly
clean
264054C0000
unkown
page read and write
clean
7FF573197000
unkown image
page readonly
clean
7FF52DC01000
unkown image
page readonly
clean
29318713000
unkown
page read and write
clean
21535F13000
unkown
page read and write
clean
157FD429000
unkown
page read and write
clean
7FF5D02F4000
unkown image
page readonly
clean
21C9000
heap private
page read and write
clean
26404EA7000
unkown
page read and write
clean
7FF52DB27000
unkown image
page readonly
clean
26404EEA000
unkown
page read and write
clean
26405722000
unkown
page read and write
clean
2640578E000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF55B3BF000
unkown image
page readonly
clean
26404C30000
unkown image
page read and write
clean
2640578F000
unkown
page read and write
clean
2640578B000
unkown
page read and write
clean
7FF5D02FA000
unkown image
page readonly
clean
7FF572FE0000
unkown image
page readonly
clean
7FF52D61D000
unkown image
page readonly
clean
2640578F000
unkown
page read and write
clean
98B055F000
stack
page read and write
clean
7FF596E30000
unkown image
page readonly
clean
7FF573511000
unkown image
page readonly
clean
7FF573464000
unkown image
page readonly
clean
157FD1B0000
heap private
page read and write
clean
7DF5F5D00000
unkown image
page readonly
clean
722000
heap default
page read and write
clean
26404E5B000
unkown
page read and write
clean
7FF5E0C09000
unkown image
page readonly
clean
157FD502000
unkown
page read and write
clean
264057CC000
unkown
page read and write
clean
26404EBE000
unkown
page read and write
clean
7FF55B474000
unkown image
page readonly
clean
157FD980000
unkown image
page readonly
clean
1C544908000
unkown
page read and write
clean
1C544D80000
unkown image
page readonly
clean
C342777000
stack
page read and write
clean
157FD461000
unkown
page read and write
clean
1C54488E000
unkown
page read and write
clean
7DF5F5D12000
unkown image
page readonly
clean
7FF55B3BC000
unkown image
page readonly
clean
6F0000
unkown
page execute read
clean
4978C7F000
stack
page read and write
clean
29318613000
unkown
page read and write
clean
7DF5885A0000
unkown image
page readonly
clean
7FF572FE6000
unkown image
page readonly
clean
7FF596E7A000
unkown image
page readonly
clean
1C544802000
unkown
page read and write
clean
424000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
2480000
unkown
page read and write
clean
7FF52DEA2000
unkown image
page readonly
clean
7FF596F21000
unkown image
page readonly
clean
7FF57341A000
unkown image
page readonly
clean
7DF542F20000
unkown image
page readonly
clean
7FF5E0B9B000
unkown image
page readonly
clean
C34297E000
stack
page read and write
clean
26404F13000
unkown
page read and write
clean
7FF52DE94000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
2280000
unkown
page read and write
clean
7FF5D021C000
unkown image
page readonly
clean
B1E5179000
stack
page read and write
clean
7FF5D02BB000
unkown image
page readonly
clean
264054C0000
unkown
page read and write
clean
26405380000
unkown image
page readonly
clean
26404EB0000
unkown
page read and write
clean
264057B0000
unkown
page read and write
clean
21536380000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
2931864E000
unkown
page read and write
clean
7FF52DC71000
unkown image
page readonly
clean
26404E82000
unkown
page read and write
clean
7FF55B233000
unkown image
page readonly
clean
26404EE0000
unkown
page read and write
clean
7FF5D029A000
unkown image
page readonly
clean
7DF542F22000
unkown image
page readonly
clean
7DF5885B0000
unkown image
page readonly
clean
7FF55B390000
unkown image
page readonly
clean
7FF5E0B95000
unkown image
page readonly
clean
7FF52DD9C000
unkown image
page readonly
clean
21535E4E000
unkown
page read and write
clean
7FF52DDF4000
unkown image
page readonly
clean
7FF55B28E000
unkown image
page readonly
clean
26A33390000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
2640578B000
unkown
page read and write
clean
7FF5D02DF000
unkown image
page readonly
clean
7FF573384000
unkown image
page readonly
clean
7FF57340A000
unkown image
page readonly
clean
26405769000
unkown
page read and write
clean
264054C0000
unkown
page read and write
clean
7DF588592000
unkown image
page readonly
clean
29318626000
unkown
page read and write
clean
157FDA02000
unkown
page read and write
clean
7FF55B37C000
unkown image
page readonly
clean
157FD400000
unkown
page read and write
clean
7DF5E5440000
unkown image
page readonly
clean
7FF52D9C5000
unkown image
page readonly
clean
26404E52000
unkown
page read and write
clean
9B000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF55B3F8000
unkown image
page readonly
clean
1C544600000
unkown image
page readonly
clean
497877F000
stack
page read and write
clean
7FF573474000
unkown image
page readonly
clean
21535C10000
unkown image
page readonly
clean
26404E4B000
unkown
page read and write
clean
264057AD000
unkown
page read and write
clean
21535D40000
unkown image
page readonly
clean
26405C02000
unkown
page read and write
clean
2640578B000
unkown
page read and write
clean
26A335B1000
unkown
page read and write
clean
26A33480000
unkown
page read and write
clean
1C54483C000
unkown
page read and write
clean
D80000
unkown image
page readonly
clean
26A336A0000
unkown image
page readonly
clean
2370000
heap private
page read and write
clean
157FD1E0000
unkown image
page readonly
clean
7FF52DBE6000
unkown image
page readonly
clean
21535C30000
unkown image
page readonly
clean
2640576F000
unkown
page read and write
clean
26405C63000
unkown
page read and write
clean
7FF55B28B000
unkown image
page readonly
clean
21535E29000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
7FF5D0027000
unkown image
page readonly
clean
7FF52DB76000
unkown image
page readonly
clean
7FF5D0394000
unkown image
page readonly
clean
7FF52DC91000
unkown image
page readonly
clean
7FF596783000
unkown image
page readonly
clean
157FD508000
unkown
page read and write
clean
157FD486000
unkown
page read and write
clean
157FD3E0000
unkown
page read and write
clean
2640578E000
unkown
page read and write
clean
21535E4A000
unkown
page read and write
clean
7FF573504000
unkown image
page readonly
clean
29318E02000
unkown
page read and write
clean
B1E51FE000
stack
page read and write
clean
7FF52DE04000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
157FD500000
unkown
page read and write
clean
26A334F0000
unkown image
page readonly
clean
7FF55B39B000
unkown image
page readonly
clean
7FF5E0BE4000
unkown image
page readonly
clean
7FF5CFE70000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
7FF573420000
unkown image
page readonly
clean
21535E00000
unkown
page read and write
clean
7FF55ABFD000
unkown image
page readonly
clean
7FF5E0AFC000
unkown image
page readonly
clean
7FF5D039A000
unkown image
page readonly
clean
1C5445E0000
unkown image
page read and write
clean
7FF55AC03000
unkown image
page readonly
clean
21535E3C000
unkown
page read and write
clean
7FF573373000
unkown image
page readonly
clean
2640579C000
unkown
page read and write
clean
2640578F000
unkown
page read and write
clean
7FF5D01AB000
unkown image
page readonly
clean
21535E02000
unkown
page read and write
clean
26404C80000
unkown image
page readonly
clean
157FD45E000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
7FF596E5F000
unkown image
page readonly
clean
157FD1A0000
unkown image
page read and write
clean
7DF5F5D00000
unkown image
page readonly
clean
2640578C000
unkown
page read and write
clean
157FD1C0000
unkown image
page readonly
clean
7FF52DD52000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
26404E50000
unkown
page read and write
clean
2640576D000
unkown
page read and write
clean
264057A0000
unkown
page read and write
clean
70A000
heap default
page read and write
clean
7FF5D02AE000
unkown image
page readonly
clean
7DF570520000
unkown image
page readonly
clean
26404DA0000
unkown
page read and write
clean
98B09FB000
stack
page read and write
clean
7FF52DC5A000
unkown image
page readonly
clean
7FF596F1A000
unkown image
page readonly
clean
7FF55B2FC000
unkown image
page readonly
clean
7FF52DDAA000
unkown image
page readonly
clean
7FF52DDC7000
unkown image
page readonly
clean
7FF52DD03000
unkown image
page readonly
clean
157FD45D000
unkown
page read and write
clean
29318688000
unkown
page read and write
clean
7FF52DDB0000
unkown image
page readonly
clean
7FF5E0AE3000
unkown image
page readonly
clean
7FF57340C000
unkown image
page readonly
clean
26404EC5000
unkown
page read and write
clean
7FF52D976000
unkown image
page readonly
clean
26405000000
unkown image
page readonly
clean
7FF55B37A000
unkown image
page readonly
clean
7DF5ABFC0000
unkown image
page readonly
clean
26404E54000
unkown
page read and write
clean
7FF573271000
unkown image
page readonly
clean
7DF5E5430000
unkown image
page readonly
clean
264057B3000
unkown
page read and write
clean
7FF596E8E000
unkown image
page readonly
clean
7DF570510000
unkown image
page readonly
clean
2640578F000
unkown
page read and write
clean
7DF570520000
unkown image
page readonly
clean
7FF5E0BFE000
unkown image
page readonly
clean
B1E50FF000
stack
page read and write
clean
7FF572C8D000
unkown image
page readonly
clean
7FF52DB60000
unkown image
page readonly
clean
26404E70000
unkown
page read and write
clean
D1AD67F000
stack
page read and write
clean
7DF5F5D02000
unkown image
page readonly
clean
2640578F000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
98B0AFF000
stack
page read and write
clean
7FF596E35000
unkown image
page readonly
clean
1C544750000
unkown
page read and write
clean
2378000
heap private
page read and write
clean
2640577E000
unkown
page read and write
clean
1C5445F0000
heap private
page read and write
clean
2640577F000
unkown
page read and write
clean
7FF55B409000
unkown image
page readonly
clean
26405781000
unkown
page read and write
clean
7FF596E68000
unkown image
page readonly
clean
2640578B000
unkown
page read and write
clean
7FF52DE0F000
unkown image
page readonly
clean
29318648000
unkown
page read and write
clean
29318670000
unkown
page read and write
clean
7FF5D0326000
unkown image
page readonly
clean
7FF52DC53000
unkown image
page readonly
clean
7FF57338C000
unkown image
page readonly
clean
49786FF000
stack
page read and write
clean
26404E29000
unkown
page read and write
clean
7DF4F3BD0000
unkown image
page readonly
clean
There are 715 hidden memdumps, click here to show them.