IOC Report

loading gif

Files

File Path
Type
Category
Malicious
dxEOMYaOtV.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Roaming\app
UTF-8 Unicode (with BOM) text, with no line terminators
dropped
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\dxEOMYaOtV.exe
"C:\Users\user\Desktop\dxEOMYaOtV.exe"
malicious
C:\Windows\SysWOW64\netsh.exe
netsh firewall add allowedprogram "C:\Users\user\Desktop\dxEOMYaOtV.exe" "dxEOMYaOtV.exe" ENABLE
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
SoftwareMicrosoftWindowsCurrentVersionRun
malicious
http://go.microsoft.
unknown
clean
http://go.microsoft.LinkId=42127
unknown
clean

IPs

IP
Domain
Country
Malicious
109.123.118.63
unknown
United Kingdom
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Environment
SEE_MASK_NOZONECHECKS
clean
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\f1\52C64B7E
@C:\Windows\SysWOW64\FirewallControlPanel.dll,-12122
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
3B2000
unkown image
page readonly
malicious
29B1000
unkown
page read and write
malicious
3B2000
unkown image
page readonly
malicious
4BD3000
unkown
page read and write
clean
237C33BD000
unkown
page read and write
clean
7DF5DEBA2000
unkown image
page readonly
clean
7DF4DCA70000
unkown image
page readonly
clean
61A000
unkown
page read and write
clean
7FF527BA4000
unkown image
page readonly
clean
1D512EA0000
heap private
page read and write
clean
237C338E000
unkown
page read and write
clean
237C336B000
unkown
page read and write
clean
7FF5C9A47000
unkown image
page readonly
clean
237C33B3000
unkown
page read and write
clean
167CF77000
stack
page read and write
clean
545E000
stack
page read and write
clean
7FF5167F4000
unkown image
page readonly
clean
69E000
unkown
page read and write
clean
1FFF73E0000
unkown
page read and write
clean
237C3380000
unkown
page read and write
clean
7FF51660E000
unkown image
page readonly
clean
7DF5DEBB2000
unkown image
page readonly
clean
6C9000
unkown
page read and write
clean
237C335E000
unkown
page read and write
clean
6B9000
unkown
page read and write
clean
49B8000
unkown
page read and write
clean
237C2CA7000
unkown
page read and write
clean
7FF52A145000
unkown image
page readonly
clean
237C2C29000
unkown
page read and write
clean
1D513071000
unkown
page read and write
clean
7DF53F2B0000
unkown image
page readonly
clean
1D8DB500000
unkown
page read and write
clean
7FF5C9A2E000
unkown image
page readonly
clean
4B50000
unkown
page read and write
clean
4BD8000
unkown
page read and write
clean
52D2000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
5B14BFF000
stack
page read and write
clean
6CE000
unkown
page read and write
clean
1D8DB513000
unkown
page read and write
clean
1D8DB429000
unkown
page read and write
clean
27D3000
unkown image
page readonly
clean
237C2CD4000
unkown
page read and write
clean
7DF53F2C0000
unkown image
page readonly
clean
2A93000
unkown
page read and write
clean
7DF5DEBB2000
unkown image
page readonly
clean
237C2D13000
unkown
page read and write
clean
4BC2000
unkown
page read and write
clean
B72000
unkown
page execute and read and write
clean
167CC7F000
stack
page read and write
clean
626000
unkown
page read and write
clean
6B6000
unkown
page read and write
clean
463657F000
stack
page read and write
clean
6BA000
unkown
page read and write
clean
2591000
unkown image
page readonly
clean
1D51307F000
unkown
page read and write
clean
61A000
unkown
page read and write
clean
7FF52A08D000
unkown image
page readonly
clean
7DF52B8A0000
unkown image
page readonly
clean
7DF53CC42000
unkown image
page readonly
clean
7FF527BB1000
unkown image
page readonly
clean
237C338B000
unkown
page read and write
clean
25C7000
unkown image
page readonly
clean
4FCE000
stack
page read and write
clean
237C3872000
unkown
page read and write
clean
4D4E000
stack
page read and write
clean
7DF5A0150000
unkown image
page readonly
clean
6B9000
unkown
page read and write
clean
8A0000
heap private
page read and write
clean
E42000
unkown
page execute and read and write
clean
237C33B5000
unkown
page read and write
clean
237C2C81000
unkown
page read and write
clean
4F9000
unkown
page read and write
clean
7DF5A0162000
unkown image
page readonly
clean
6A0000
unkown
page read and write
clean
7DF53CC32000
unkown image
page readonly
clean
1D513200000
unkown image
page readonly
clean
7F4A0000
unkown image
page readonly
clean
7FF52A1B6000
unkown image
page readonly
clean
7FF529F91000
unkown image
page readonly
clean
237C2CA6000
unkown
page read and write
clean
7FF52A093000
unkown image
page readonly
clean
6B6000
unkown
page read and write
clean
61E000
unkown
page read and write
clean
5210000
unkown image
page readonly
clean
4BDB000
unkown
page read and write
clean
1D332463000
unkown
page read and write
clean
1FFF72EF000
unkown
page read and write
clean
7FF5279BE000
unkown image
page readonly
clean
237C3380000
unkown
page read and write
clean
237C380A000
unkown
page read and write
clean
7FF52A03E000
unkown image
page readonly
clean
1D51307E000
unkown
page read and write
clean
4BDF000
unkown
page read and write
clean
7DF53F2C2000
unkown image
page readonly
clean
661000
unkown
page read and write
clean
4BF5000
unkown
page read and write
clean
237C2E00000
unkown image
page readonly
clean
7F3D0000
unkown
page execute and read and write
clean
62A000
unkown
page read and write
clean
7DF53F2D0000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
618000
unkown
page read and write
clean
1D8DB43C000
unkown
page read and write
clean
237C336A000
unkown
page read and write
clean
1D8DB426000
unkown
page read and write
clean
6B9000
unkown
page read and write
clean
237C2A20000
unkown image
page readonly
clean
237C2C13000
unkown
page read and write
clean
7FF51671B000
unkown image
page readonly
clean
2A10000
unkown image
page readonly
clean
E57000
unkown
page execute and read and write
clean
7FF527B3D000
unkown image
page readonly
clean
237C33B7000
unkown
page read and write
clean
1FFF72C0000
heap default
page read and write
clean
237C3384000
unkown
page read and write
clean
7FF529A97000
unkown image
page readonly
clean
52F0000
unkown
page read and write
clean
237C335F000
unkown
page read and write
clean
1D332460000
unkown
page read and write
clean
61E000
unkown
page read and write
clean
7FF529D06000
unkown image
page readonly
clean
7FF52A13A000
unkown image
page readonly
clean
237C337D000
unkown
page read and write
clean
4BE4000
unkown
page read and write
clean
1D513054000
unkown
page read and write
clean
7DF52B8A0000
unkown image
page readonly
clean
7FF529F81000
unkown image
page readonly
clean
620000
unkown
page read and write
clean
7DF53F2D0000
unkown image
page readonly
clean
7DF53F2B0000
unkown image
page readonly
clean
5210000
unkown
page read and write
clean
27BC000
unkown image
page readonly
clean
237C3383000
unkown
page read and write
clean
6C5000
unkown
page read and write
clean
237C338D000
unkown
page read and write
clean
7FF52A1A8000
unkown image
page readonly
clean
237C2CF0000
unkown
page read and write
clean
237C338D000
unkown
page read and write
clean
31CC37E000
stack
page read and write
clean
7FF58AFE0000
unkown image
page readonly
clean
70000
unkown image
page read and write
clean
237C2A10000
unkown image
page readonly
clean
7FF516715000
unkown image
page readonly
clean
7DF5A0160000
unkown image
page readonly
clean
7DF43D180000
unkown image
page readonly
clean
618000
unkown
page read and write
clean
7FF5164C0000
unkown image
page readonly
clean
689000
unkown
page read and write
clean
256F000
unkown image
page readonly
clean
7FF5C997D000
unkown image
page readonly
clean
6A5000
unkown
page read and write
clean
4B4E000
stack
page read and write
clean
65F000
unkown
page read and write
clean
4BE7000
unkown
page read and write
clean
4BF6000
unkown
page read and write
clean
1D332453000
unkown
page read and write
clean
7FF58AFE5000
unkown image
page readonly
clean
950000
unkown image
page read and write
clean
7F5C0000
unkown image
page readonly
clean
31CBBAF000
stack
page read and write
clean
7DF5A0170000
unkown image
page readonly
clean
4BFC000
unkown
page read and write
clean
1FFF7410000
unkown image
page readonly
clean
B4CEC78000
stack
page read and write
clean
7FF527A24000
unkown image
page readonly
clean
689000
unkown
page read and write
clean
7F5B2000
unkown image
page readonly
clean
2727000
unkown image
page readonly
clean
1D513056000
unkown
page read and write
clean
61F000
unkown
page read and write
clean
1D8DB459000
unkown
page read and write
clean
B4CF0FB000
stack
page read and write
clean
4BA1000
unkown
page read and write
clean
1FFF7580000
unkown image
page readonly
clean
1D512EB0000
unkown image
page readonly
clean
237C2CBC000
unkown
page read and write
clean
65D000
unkown
page read and write
clean
237C2CC3000
unkown
page read and write
clean
1D512EE0000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
4D0B000
stack
page read and write
clean
7FF52A0E2000
unkown image
page readonly
clean
7DF53F2C2000
unkown image
page readonly
clean
237C338D000
unkown
page read and write
clean
4BFA000
unkown
page read and write
clean
237C33A1000
unkown
page read and write
clean
42EE000
stack
page read and write
clean
237C3313000
unkown
page read and write
clean
627000
unkown
page read and write
clean
7DF53F2B2000
unkown image
page readonly
clean
4BDB000
unkown
page read and write
clean
61A000
unkown
page read and write
clean
7FF52A14B000
unkown image
page readonly
clean
237C3382000
unkown
page read and write
clean
7FF5C9A84000
unkown image
page readonly
clean
1D512E90000
unkown image
page read and write
clean
7FF52A18A000
unkown image
page readonly
clean
237C3396000
unkown
page read and write
clean
7FF5C9A1A000
unkown image
page readonly
clean
237C338A000
unkown
page read and write
clean
7FF5C927F000
unkown image
page readonly
clean
2C10000
unkown image
page readonly
clean
1FFF7780000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
7DF52B880000
unkown image
page readonly
clean
6A5000
unkown
page read and write
clean
68D000
unkown
page read and write
clean
616000
unkown
page read and write
clean
1D332429000
unkown
page read and write
clean
237C3384000
unkown
page read and write
clean
237C335F000
unkown
page read and write
clean
7FF527AD7000
unkown image
page readonly
clean
237C3391000
unkown
page read and write
clean
618000
unkown
page read and write
clean
622000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
27A5000
unkown image
page readonly
clean
1D8DB8D0000
unkown image
page readonly
clean
237C3390000
unkown
page read and write
clean
237C338E000
unkown
page read and write
clean
237C338C000
unkown
page read and write
clean
7F5C0000
unkown image
page readonly
clean
1FFF71B0000
unkown image
page readonly
clean
7CE000
stack
page read and write
clean
1D8DB413000
unkown
page read and write
clean
5300000
unkown
page read and write
clean
1FFF7575000
heap private
page read and write
clean
7FF58B0C4000
unkown image
page readonly
clean
609000
unkown
page read and write
clean
7FF52A16F000
unkown image
page readonly
clean
B4CED79000
stack
page read and write
clean
7FF52A021000
unkown image
page readonly
clean
7FF527B36000
unkown image
page readonly
clean
237C3380000
unkown
page read and write
clean
7FF5C9AA6000
unkown image
page readonly
clean
7DF53F2C0000
unkown image
page readonly
clean
237C33A8000
unkown
page read and write
clean
7FF527B14000
unkown image
page readonly
clean
7FF52A10B000
unkown image
page readonly
clean
4BEC000
unkown
page read and write
clean
2594000
unkown image
page readonly
clean
26BC000
unkown image
page readonly
clean
7FF58B0CA000
unkown image
page readonly
clean
31CBB2C000
unkown
page read and write
clean
890000
unkown
page read and write
clean
1D332502000
unkown
page read and write
clean
7FF5C97E0000
unkown image
page readonly
clean
237C3386000
unkown
page read and write
clean
61E000
unkown
page read and write
clean
23D000
unkown
page read and write
clean
69E000
unkown
page read and write
clean
7FF5C98D3000
unkown image
page readonly
clean
7FF5C9A98000
unkown image
page readonly
clean
7FF516747000
unkown image
page readonly
clean
1D8DB390000
unkown image
page readonly
clean
4BCF000
unkown
page read and write
clean
7FF527AC0000
unkown image
page readonly
clean
237C2CF9000
unkown
page read and write
clean
7FF5C9911000
unkown image
page readonly
clean
1D332413000
unkown
page read and write
clean
237C29F0000
unkown image
page readonly
clean
759000
unkown
page read and write
clean
7FF516561000
unkown image
page readonly
clean
69F000
unkown
page read and write
clean
7FF52A043000
unkown image
page readonly
clean
7FF527BAA000
unkown image
page readonly
clean
625000
unkown
page read and write
clean
69E000
unkown
page read and write
clean
6B9000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
237C3352000
unkown
page read and write
clean
1FFF72EF000
unkown
page read and write
clean
1D513013000
unkown
page read and write
clean
7FF529D15000
unkown image
page readonly
clean
4BD3000
unkown
page read and write
clean
4B60000
unkown
page execute and read and write
clean
4560000
unkown
page read and write
clean
2D90000
unkown image
page readonly
clean
4F5000
unkown
page read and write
clean
52D0000
unkown
page read and write
clean
7FF52A10F000
unkown image
page readonly
clean
7FF529D55000
unkown image
page readonly
clean
237C3359000
unkown
page read and write
clean
4E54000
unkown
page read and write
clean
5B1467F000
stack
page read and write
clean
4BC7000
unkown
page read and write
clean
7F5B2000
unkown image
page readonly
clean
237C33AE000
unkown
page read and write
clean
69E000
unkown
page read and write
clean
5E7000
unkown
page read and write
clean
1D8DB44F000
unkown
page read and write
clean
4EB0000
unkown
page read and write
clean
7DF53CC30000
unkown image
page readonly
clean
600000
unkown image
page readonly
clean
1D513400000
unkown image
page readonly
clean
2650000
unkown image
page readonly
clean
7DF53CC42000
unkown image
page readonly
clean
622000
unkown
page read and write
clean
237C3386000
unkown
page read and write
clean
237C3318000
unkown
page read and write
clean
E5B000
unkown
page execute and read and write
clean
4E4D000
stack
page read and write
clean
7FF5299AE000
unkown image
page readonly
clean
7FF52A177000
unkown image
page readonly
clean
7DF53CC40000
unkown image
page readonly
clean
31CC47E000
stack
page read and write
clean
4BDA000
unkown
page read and write
clean
526D000
stack
page read and write
clean
5B143EB000
unkown
page read and write
clean
535000
heap default
page read and write
clean
621000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
69E000
unkown
page read and write
clean
237C338C000
unkown
page read and write
clean
26DC000
unkown image
page readonly
clean
237C339F000
unkown
page read and write
clean
4BF4000
unkown
page read and write
clean
237C2C4C000
unkown
page read and write
clean
1D3322C0000
heap private
page read and write
clean
7F5A2000
unkown image
page readonly
clean
7FF5279BB000
unkown image
page readonly
clean
7FF58B05D000
unkown image
page readonly
clean
69E000
unkown
page read and write
clean
237C338D000
unkown
page read and write
clean
6BD000
unkown
page read and write
clean
B4CEFFF000
stack
page read and write
clean
1D513113000
unkown
page read and write
clean
7FF516663000
unkown image
page readonly
clean
26FC000
unkown image
page readonly
clean
167D07E000
stack
page read and write
clean
6C9000
unkown
page read and write
clean
2752000
unkown image
page readonly
clean
7FF5C992E000
unkown image
page readonly
clean
237C3803000
unkown
page read and write
clean
7FF58B0D2000
unkown image
page readonly
clean
4BF5000
unkown
page read and write
clean
7FF5165B3000
unkown image
page readonly
clean
1FFF71B0000
unkown image
page readonly
clean
237C3362000
unkown
page read and write
clean
600000
unkown image
page readonly
clean
7FF527B0A000
unkown image
page readonly
clean
7FF5C9983000
unkown image
page readonly
clean
237C2A40000
heap default
page read and write
clean
4BE7000
unkown
page read and write
clean
7FF51675A000
unkown image
page readonly
clean
689000
unkown
page read and write
clean
4BE9000
unkown
page read and write
clean
7FF516674000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
237C33B0000
unkown
page read and write
clean
4BED000
unkown
page read and write
clean
7FF527695000
unkown image
page readonly
clean
7FF527870000
unkown image
page readonly
clean
2573000
unkown image
page readonly
clean
7DF5DEBA2000
unkown image
page readonly
clean
2575000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
26B7000
unkown image
page readonly
clean
237C3361000
unkown
page read and write
clean
2630000
unkown
page read and write
clean
7F5B0000
unkown image
page readonly
clean
1D513053000
unkown
page read and write
clean
4BDA000
unkown
page read and write
clean
4BDF000
unkown
page read and write
clean
237C3300000
unkown
page read and write
clean
7FF52A001000
unkown image
page readonly
clean
7FF52A19F000
unkown image
page readonly
clean
4BEE000
unkown
page read and write
clean
52C0000
unkown
page read and write
clean
31CC177000
stack
page read and write
clean
6C4000
unkown
page read and write
clean
1FFF71D0000
unkown image
page readonly
clean
7FF527680000
unkown image
page readonly
clean
7FF52A194000
unkown image
page readonly
clean
7FF5166FA000
unkown image
page readonly
clean
1D512FE0000
unkown image
page readonly
clean
237C338E000
unkown
page read and write
clean
65E000
unkown
page read and write
clean
1D332513000
unkown
page read and write
clean
1D332508000
unkown
page read and write
clean
7FF5C9A5F000
unkown image
page readonly
clean
62A000
unkown
page read and write
clean
1D8DBA50000
unkown image
page readonly
clean
25AC000
unkown image
page readonly
clean
7FF52A12A000
unkown image
page readonly
clean
7C0000
heap default
page read and write
clean
7F5A2000
unkown image
page readonly
clean
7FF5165D1000
unkown image
page readonly
clean
7FF5167FA000
unkown image
page readonly
clean
1D513102000
unkown
page read and write
clean
4BC5000
unkown
page read and write
clean
1E0000
unkown image
page readonly
clean
7FF516801000
unkown image
page readonly
clean
7DF5DEBA0000
unkown image
page readonly
clean
97A000
heap default
page read and write
clean
237C2C2C000
unkown
page read and write
clean
80000
unkown image
page readonly
clean
4E60000
unkown
page read and write
clean
7B0000
unkown
page read and write
clean
1D332A80000
unkown
page read and write
clean
629000
unkown
page read and write
clean
7FF529F40000
unkown image
page readonly
clean
1D332300000
unkown image
page readonly
clean
6BE000
unkown
page read and write
clean
B4CEF7E000
stack
page read and write
clean
555E000
stack
page read and write
clean
237C3383000
unkown
page read and write
clean
4BC7000
unkown
page read and write
clean
7FF51678D000
unkown image
page readonly
clean
1D332400000
unkown
page read and write
clean
5B14AF7000
stack
page read and write
clean
1D8DB330000
unkown image
page readonly
clean
4E60000
unkown
page read and write
clean
4BFD000
unkown
page read and write
clean
1D513580000
unkown image
page readonly
clean
4BF5000
unkown
page read and write
clean
1DB000
unkown
page read and write
clean
237C3384000
unkown
page read and write
clean
7FF516727000
unkown image
page readonly
clean
7FF516764000
unkown image
page readonly
clean
7FF58B024000
unkown image
page readonly
clean
625000
unkown
page read and write
clean
237C386B000
unkown
page read and write
clean
237C3202000
unkown
page read and write
clean
237C338C000
unkown
page read and write
clean
237C338E000
unkown
page read and write
clean
1D3322D0000
unkown image
page readonly
clean
4EC9000
unkown
page read and write
clean
6A5000
unkown
page read and write
clean
1D33243C000
unkown
page read and write
clean
237C338E000
unkown
page read and write
clean
4BFA000
unkown
page read and write
clean
7FF52A157000
unkown image
page readonly
clean
31CC07B000
stack
page read and write
clean
E70000
heap private
page read and write
clean
4E50000
unkown
page read and write
clean
4E8E000
stack
page read and write
clean
4BE7000
unkown
page read and write
clean
4BDA000
unkown
page read and write
clean
5B149FF000
stack
page read and write
clean
167D27F000
stack
page read and write
clean
167C96B000
unkown
page read and write
clean
7DF5DEBC0000
unkown image
page readonly
clean
7F540000
unkown image
page readonly
clean
4BDD000
unkown
page read and write
clean
7FF52A140000
unkown image
page readonly
clean
52B0000
unkown
page execute and read and write
clean
4BD1000
unkown
page read and write
clean
4BDA000
unkown
page read and write
clean
237C3380000
unkown
page read and write
clean
26B3000
unkown image
page readonly
clean
4BDB000
unkown
page read and write
clean
3B0000
unkown image
page readonly
clean
4BD8000
unkown
page read and write
clean
46365FF000
stack
page read and write
clean
E2A000
unkown
page execute and read and write
clean
7FF58B018000
unkown image
page readonly
clean
52F0000
unkown
page read and write
clean
7FF5C9A1C000
unkown image
page readonly
clean
7FF5C9A5C000
unkown image
page readonly
clean
1D332990000
unkown image
page readonly
clean
7FF527AF7000
unkown image
page readonly
clean
4BFC000
unkown
page read and write
clean
7FF52A0E0000
unkown image
page readonly
clean
7FF58B03E000
unkown image
page readonly
clean
7FF527A13000
unkown image
page readonly
clean
256D000
unkown image
page readonly
clean
2710000
unkown image
page readonly
clean
4BFC000
unkown
page read and write
clean
7FF527BB2000
unkown image
page readonly
clean
1D513108000
unkown
page read and write
clean
7F542000
unkown image
page readonly
clean
237C336A000
unkown
page read and write
clean
1D8DB470000
unkown
page read and write
clean
7FF527686000
unkown image
page readonly
clean
E80000
unkown image
page readonly
clean
4BD1000
unkown
page read and write
clean
4BCF000
unkown
page read and write
clean
1FFF72E7000
unkown
page read and write
clean
4BF7000
unkown
page read and write
clean
7DF429750000
unkown image
page readonly
clean
1D8DB380000
heap default
page read and write
clean
7FF527911000
unkown image
page readonly
clean
4BC7000
unkown
page read and write
clean
7FF52A03B000
unkown image
page readonly
clean
7FF516710000
unkown image
page readonly
clean
65E000
unkown
page read and write
clean
237C338A000
unkown
page read and write
clean
237C3390000
unkown
page read and write
clean
7FF527837000
unkown image
page readonly
clean
4BDF000
unkown
page read and write
clean
7FF58B04E000
unkown image
page readonly
clean
618000
unkown
page read and write
clean
1D513088000
unkown
page read and write
clean
7FF52A231000
unkown image
page readonly
clean
52D0000
unkown image
page read and write
clean
237C335E000
unkown
page read and write
clean
7F5A2000
unkown image
page readonly
clean
237C2C00000
unkown
page read and write
clean
7F540000
unkown image
page readonly
clean
DC000
unkown
page read and write
clean
237C2D08000
unkown
page read and write
clean
6C0000
unkown
page read and write
clean
1D3322B0000
unkown image
page read and write
clean
9AB000
heap default
page read and write
clean
237C3382000
unkown
page read and write
clean
6C2000
unkown
page read and write
clean
5B148FB000
stack
page read and write
clean
4A9E000
stack
page read and write
clean
7FF51660B000
unkown image
page readonly
clean
4EC0000
unkown
page read and write
clean
237C2C4D000
unkown
page read and write
clean
6BD000
unkown
page read and write
clean
7F430000
unkown image
page readonly
clean
4350000
heap private
page read and write
clean
237C3802000
unkown
page read and write
clean
7FF529CAE000
unkown image
page readonly
clean
7DF5A0152000
unkown image
page readonly
clean
7FF527B1F000
unkown image
page readonly
clean
1D3000
unkown
page read and write
clean
667000
unkown
page read and write
clean
6A5000
unkown
page read and write
clean
9AE000
stack
page read and write
clean
6C2000
unkown
page read and write
clean
7F530000
unkown image
page readonly
clean
237C33A6000
unkown
page read and write
clean
63C000
unkown
page read and write
clean
920000
unkown image
page readonly
clean
6AE000
unkown
page read and write
clean
7DF52B882000
unkown image
page readonly
clean
7FF5C95F6000
unkown image
page readonly
clean
E4A000
unkown
page execute and read and write
clean
237C3802000
unkown
page read and write
clean
1FFF72D6000
heap default
page read and write
clean
57E000
stack
page read and write
clean
7F542000
unkown image
page readonly
clean
960000
unkown
page read and write
clean
237C3311000
unkown
page read and write
clean
4E75000
unkown
page read and write
clean
6B6000
unkown
page read and write
clean
1FFF72EF000
unkown
page read and write
clean
275B000
unkown image
page readonly
clean
237C29D0000
unkown image
page read and write
clean
65B000
unkown
page read and write
clean
7FF527ACB000
unkown image
page readonly
clean
4C0E000
stack
page read and write
clean
6B2000
unkown
page read and write
clean
7FF52A16C000
unkown image
page readonly
clean
B4CE7EF000
stack
page read and write
clean
237C3180000
unkown image
page readonly
clean
50CE000
stack
page read and write
clean
237C3383000
unkown
page read and write
clean
7FF58B00C000
unkown image
page readonly
clean
26CC000
unkown image
page readonly
clean
1D332500000
unkown
page read and write
clean
237C3383000
unkown
page read and write
clean
5300000
unkown
page execute and read and write
clean
7FF5C9A3B000
unkown image
page readonly
clean
7FF527B04000
unkown image
page readonly
clean
4BC9000
unkown
page read and write
clean
7FF58AFEB000
unkown image
page readonly
clean
1D51304B000
unkown
page read and write
clean
6C9000
unkown
page read and write
clean
2EA0000
unkown
page read and write
clean
237C2C4B000
unkown
page read and write
clean
4BC4000
unkown
page read and write
clean
272F000
unkown image
page readonly
clean
27C8000
unkown image
page readonly
clean
237C3361000
unkown
page read and write
clean
1D3322D0000
unkown image
page readonly
clean
237C3395000
unkown
page read and write
clean
237C3383000
unkown
page read and write
clean
4BE5000
unkown
page read and write
clean
6CA000
unkown
page read and write
clean
B7A000
unkown
page execute and read and write
clean
7DF5A0150000
unkown image
page readonly
clean
257C000
unkown image
page readonly
clean
1D8DB47F000
unkown
page read and write
clean
69E000
unkown
page read and write
clean
621000
unkown
page read and write
clean
237C3383000
unkown
page read and write
clean
5D7000
heap default
page read and write
clean
61A000
unkown
page read and write
clean
272D000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
7FF529D00000
unkown image
page readonly
clean
4BF4000
unkown
page read and write
clean
7FF58B02A000
unkown image
page readonly
clean
7FF5C9B1A000
unkown image
page readonly
clean
237C3800000
unkown
page read and write
clean
4BE1000
unkown
page read and write
clean
237C29F0000
unkown image
page readonly
clean
7F5B0000
unkown image
page readonly
clean
2640000
heap private
page read and write
clean
6A2000
unkown
page read and write
clean
619000
unkown
page read and write
clean
80000
unkown image
page readonly
clean
7F5A0000
unkown image
page readonly
clean
7FF58B0D1000
unkown image
page readonly
clean
6C5000
unkown
page read and write
clean
6C4000
unkown
page read and write
clean
46366FF000
stack
page read and write
clean
80000
unkown image
page readonly
clean
1D33245E000
unkown
page read and write
clean
62A000
unkown
page read and write
clean
970000
heap default
page read and write
clean
62A000
unkown
page read and write
clean
5250000
unkown
page read and write
clean
4E50000
unkown
page read and write
clean
1D8DB450000
unkown
page read and write
clean
2741000
unkown image
page readonly
clean
7DF5A0162000
unkown image
page readonly
clean
237C2C57000
unkown
page read and write
clean
4EB0000
unkown
page read and write
clean
7FF58A933000
unkown image
page readonly
clean
52B0000
unkown
page read and write
clean
1D332800000
unkown image
page readonly
clean
63B000
unkown
page read and write
clean
E52000
unkown
page read and write
clean
237C3381000
unkown
page read and write
clean
237C338D000
unkown
page read and write
clean
620000
unkown
page read and write
clean
7DF5DEBA0000
unkown image
page readonly
clean
4E70000
unkown
page read and write
clean
7FF527A0D000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
B4CEE77000
stack
page read and write
clean
6A2000
unkown
page read and write
clean
E3A000
unkown
page execute and read and write
clean
237C37A0000
unkown
page read and write
clean
1D8DBC02000
unkown
page read and write
clean
7DF53CC30000
unkown image
page readonly
clean
7FF51673F000
unkown image
page readonly
clean
7FF5C9B22000
unkown image
page readonly
clean
7FF5C9B21000
unkown image
page readonly
clean
7FF58A937000
unkown image
page readonly
clean
1D8DB44B000
unkown
page read and write
clean
7FF5C9A67000
unkown image
page readonly
clean
7FF529C1E000
unkown image
page readonly
clean
4E60000
unkown
page read and write
clean
7FF5C9A9E000
unkown image
page readonly
clean
27A1000
unkown image
page readonly
clean
4BA1000
unkown
page read and write
clean
61A000
unkown
page read and write
clean
6A0000
unkown
page read and write
clean
4BCB000
unkown
page read and write
clean
7FF529EB7000
unkown image
page readonly
clean
1D332600000
unkown image
page readonly
clean
1D8DB508000
unkown
page read and write
clean
4BC0000
unkown
page read and write
clean
624000
unkown
page read and write
clean
6C4000
unkown
page read and write
clean
4BDB000
unkown
page read and write
clean
7DF53CC50000
unkown image
page readonly
clean
69E000
unkown
page read and write
clean
7FF516487000
unkown image
page readonly
clean
69F000
unkown
page read and write
clean
237C337D000
unkown
page read and write
clean
6CD000
unkown
page read and write
clean
237C338E000
unkown
page read and write
clean
760000
unkown image
page readonly
clean
1FFF7190000
unkown image
page read and write
clean
237C33B2000
unkown
page read and write
clean
7FF5162D0000
unkown image
page readonly
clean
237C338E000
unkown
page read and write
clean
930000
unkown image
page readonly
clean
237C338E000
unkown
page read and write
clean
7FF529CA2000
unkown image
page readonly
clean
1FFF7900000
unkown image
page readonly
clean
237C2C88000
unkown
page read and write
clean
7DF53CC32000
unkown image
page readonly
clean
5260000
unkown
page read and write
clean
6C4000
unkown
page read and write
clean
7FF515F78000
unkown image
page readonly
clean
B4CEA7F000
stack
page read and write
clean
1FFF7570000
heap private
page read and write
clean
7FF52A1B9000
unkown image
page readonly
clean
7FF5C992B000
unkown image
page readonly
clean
1D33245C000
unkown
page read and write
clean
237C3380000
unkown
page read and write
clean
31CBE7F000
stack
page read and write
clean
7DF5DEBB0000
unkown image
page readonly
clean
69F000
unkown
page read and write
clean
7FF5C9881000
unkown image
page readonly
clean
7F0000
unkown
page read and write
clean
237C37B0000
unkown image
page read and write
clean
4BE3000
unkown
page read and write
clean
1D8DB489000
unkown
page read and write
clean
7FF527B2E000
unkown image
page readonly
clean
4BF4000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
237C2C4F000
unkown
page read and write
clean
617000
unkown
page read and write
clean
1FFF7430000
unkown image
page read and write
clean
7FF516778000
unkown image
page readonly
clean
237C337D000
unkown
page read and write
clean
2756000
unkown image
page readonly
clean
5E3000
unkown
page read and write
clean
7F5A0000
unkown image
page readonly
clean
4E90000
unkown
page read and write
clean
7FF527B39000
unkown image
page readonly
clean
7FF5C999C000
unkown image
page readonly
clean
4BDD000
unkown
page read and write
clean
1FFF73C0000
unkown
page read and write
clean
B4CE76B000
unkown
page read and write
clean
62A000
unkown
page read and write
clean
7FF529F74000
unkown image
page readonly
clean
7DF5DEBC0000
unkown image
page readonly
clean
7FF58B00F000
unkown image
page readonly
clean
7FF5C9994000
unkown image
page readonly
clean
39B1000
unkown
page read and write
clean
7FF5C9A8F000
unkown image
page readonly
clean
1D332483000
unkown
page read and write
clean
7FF52A232000
unkown image
page readonly
clean
237C338B000
unkown
page read and write
clean
237C3381000
unkown
page read and write
clean
1FFF7420000
unkown image
page readonly
clean
7DF53CC40000
unkown image
page readonly
clean
1D512EB0000
unkown image
page readonly
clean
6CC000
unkown
page read and write
clean
427E000
stack
page read and write
clean
237C33A1000
unkown
page read and write
clean
7FF58B048000
unkown image
page readonly
clean
7FF5C95F0000
unkown image
page readonly
clean
7DF49E020000
unkown image
page readonly
clean
6A4000
unkown
page read and write
clean
622000
unkown
page read and write
clean
B80000
heap private
page read and write
clean
1D513100000
unkown
page read and write
clean
756000
unkown
page read and write
clean
7F5B0000
unkown image
page readonly
clean
7FF51665D000
unkown image
page readonly
clean
7FF52A12C000
unkown image
page readonly
clean
237C3361000
unkown
page read and write
clean
52B0000
unkown
page read and write
clean
1D8DB502000
unkown
page read and write
clean
257E000
unkown image
page readonly
clean
7DF5A0152000
unkown image
page readonly
clean
237C3380000
unkown
page read and write
clean
4F8E000
stack
page read and write
clean
625000
unkown
page read and write
clean
167CE7A000
stack
page read and write
clean
605000
unkown
page read and write
clean
237C338F000
unkown
page read and write
clean
7FF529EC0000
unkown image
page readonly
clean
2703000
unkown image
page readonly
clean
7DF5A0160000
unkown image
page readonly
clean
4BE9000
unkown
page read and write
clean
1FFF72FE000
unkown
page read and write
clean
7FF527963000
unkown image
page readonly
clean
1FFF72FE000
unkown
page read and write
clean
61E000
unkown
page read and write
clean
4BF8000
unkown
page read and write
clean
237C339D000
unkown
page read and write
clean
4BCB000
unkown
page read and write
clean
1D332461000
unkown
page read and write
clean
4BC4000
unkown
page read and write
clean
4BFA000
unkown
page read and write
clean
C90000
unkown image
page readonly
clean
167C9EF000
stack
page read and write
clean
2660000
heap private
page execute and read and write
clean
4BD7000
unkown
page read and write
clean
4BDB000
unkown
page read and write
clean
7FF5C9A35000
unkown image
page readonly
clean
7FF527AAA000
unkown image
page readonly
clean
7FF51670A000
unkown image
page readonly
clean
627000
unkown
page read and write
clean
3B0000
unkown image
page readonly
clean
26F5000
unkown image
page readonly
clean
237C33D6000
unkown
page read and write
clean
237C2CB0000
unkown
page read and write
clean
1D8DB330000
unkown image
page readonly
clean
237C2C6F000
unkown
page read and write
clean
6A7000
unkown
page read and write
clean
237C3383000
unkown
page read and write
clean
1D51303C000
unkown
page read and write
clean
4BDD000
unkown
page read and write
clean
7FF529EF0000
unkown image
page readonly
clean
689000
unkown
page read and write
clean
4BD1000
unkown
page read and write
clean
4BDD000
unkown
page read and write
clean
4B9F000
stack
page read and write
clean
1D8DB6D0000
unkown image
page readonly
clean
237C380A000
unkown
page read and write
clean
237C3381000
unkown
page read and write
clean
4BE2000
unkown
page read and write
clean
261D000
stack
page read and write
clean
1D51304E000
unkown
page read and write
clean
6BD000
unkown
page read and write
clean
7F5B2000
unkown image
page readonly
clean
7FF5165F1000
unkown image
page readonly
clean
4BEC000
unkown
page read and write
clean
1D513029000
unkown
page read and write
clean
7FF5279A1000
unkown image
page readonly
clean
1D8DB3B0000
unkown
page read and write
clean
7FF5299A8000
unkown image
page readonly
clean
237C3383000
unkown
page read and write
clean
1D513000000
unkown
page read and write
clean
7FF51676F000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
237C3369000
unkown
page read and write
clean
65B000
unkown
page read and write
clean
7FF58AD60000
unkown image
page readonly
clean
7FF516754000
unkown image
page readonly
clean
7FF529FEA000
unkown image
page readonly
clean
52BF000
unkown
page read and write
clean
4BFD000
unkown
page read and write
clean
67F000
unkown
page read and write
clean
237C338B000
unkown
page read and write
clean
E37000
unkown
page execute and read and write
clean
1D8DB350000
unkown image
page readonly
clean
1D513051000
unkown
page read and write
clean
273A000
unkown image
page readonly
clean
7FF527B28000
unkown image
page readonly
clean
65A000
unkown
page read and write
clean
7DF53CC50000
unkown image
page readonly
clean
52F0000
unkown image
page readonly
clean
7FF52A0F3000
unkown image
page readonly
clean
7FF5162D6000
unkown image
page readonly
clean
7FF52A13E000
unkown image
page readonly
clean
52F2000
unkown
page read and write
clean
1DE000
unkown
page read and write
clean
4BD1000
unkown
page read and write
clean
6A0000
unkown
page read and write
clean
1D512ED0000
unkown image
page readonly
clean
27B4000
unkown image
page readonly
clean
1D332C02000
unkown
page read and write
clean
65A000
unkown
page read and write
clean
4BF8000
unkown
page read and write
clean
623000
unkown
page read and write
clean
4EA0000
unkown
page read and write
clean
7DF5A0170000
unkown image
page readonly
clean
24CE000
stack
page read and write
clean
167D17C000
stack
page read and write
clean
7FF5C9A2A000
unkown image
page readonly
clean
688000
unkown
page read and write
clean
63B000
unkown
page read and write
clean
7FF5166FC000
unkown image
page readonly
clean
7FF529D57000
unkown image
page readonly
clean
1D3322F0000
unkown image
page readonly
clean
7FF5C9A7A000
unkown image
page readonly
clean
1D8DB452000
unkown
page read and write
clean
4BC5000
unkown
page read and write
clean
237C33A8000
unkown
page read and write
clean
1D513055000
unkown
page read and write
clean
237C2C3C000
unkown
page read and write
clean
463677C000
stack
page read and write
clean
7FF52A184000
unkown image
page readonly
clean
25A1000
unkown image
page readonly
clean
237C3391000
unkown
page read and write
clean
400000
unkown
page read and write
clean
7DF52B892000
unkown image
page readonly
clean
7FF58B059000
unkown image
page readonly
clean
1D332320000
heap default
page read and write
clean
7FF516789000
unkown image
page readonly
clean
2719000
unkown image
page readonly
clean
65A000
unkown
page read and write
clean
4BFD000
unkown
page read and write
clean
237C31D0000
unkown image
page readonly
clean
6B6000
unkown
page read and write
clean
7FF5C9AAD000
unkown image
page readonly
clean
237C2CDD000
unkown
page read and write
clean
5D0000
heap default
page read and write
clean
237C2D02000
unkown
page read and write
clean
7DF43AB00000
unkown image
page readonly
clean
237C33B9000
unkown
page read and write
clean
7FF527AAC000
unkown image
page readonly
clean
237C33B3000
unkown
page read and write
clean
2733000
unkown image
page readonly
clean
E22000
unkown
page execute and read and write
clean
69E000
unkown
page read and write
clean
7FF527AC5000
unkown image
page readonly
clean
270B000
unkown image
page readonly
clean
8A7000
heap private
page read and write
clean
1FFF72CB000
heap default
page read and write
clean
1D8DB44D000
unkown
page read and write
clean
237C337D000
unkown
page read and write
clean
237C3390000
unkown
page read and write
clean
1D8DB360000
unkown image
page readonly
clean
237C380A000
unkown
page read and write
clean
7FF51677E000
unkown image
page readonly
clean
7D0000
unkown
page read and write
clean
7FF51673C000
unkown image
page readonly
clean
5270000
unkown
page read and write
clean
237C2CEF000
unkown
page read and write
clean
7FF527981000
unkown image
page readonly
clean
1D513802000
unkown
page read and write
clean
6C9000
unkown
page read and write
clean
1D513660000
unkown
page read and write
clean
237C33B2000
unkown
page read and write
clean
5230000
unkown
page read and write
clean
4BF8000
unkown
page read and write
clean
7FF516786000
unkown image
page readonly
clean
237C336C000
unkown
page read and write
clean
7FF52A224000
unkown image
page readonly
clean
7FF529CB2000
unkown image
page readonly
clean
237C338B000
unkown
page read and write
clean
1FFF72D1000
unkown
page read and write
clean
6C4000
unkown
page read and write
clean
237C338E000
unkown
page read and write
clean
E60000
heap private
page read and write
clean
3F0000
unkown image
page read and write
clean
7FF52A1AE000
unkown image
page readonly
clean
2580000
unkown image
page readonly
clean
7FF529FE3000
unkown image
page readonly
clean
E20000
unkown
page read and write
clean
237C3391000
unkown
page read and write
clean
7FF529A42000
unkown image
page readonly
clean
237C3387000
unkown
page read and write
clean
7FF52A048000
unkown image
page readonly
clean
237C2C59000
unkown
page read and write
clean
7FF527AEC000
unkown image
page readonly
clean
237C37A0000
unkown
page read and write
clean
4BEC000
unkown
page read and write
clean
4BA0000
unkown
page read and write
clean
6A5000
unkown
page read and write
clean
4BED000
unkown
page read and write
clean
1D8DB400000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
2605000
unkown image
page readonly
clean
237C2C7B000
unkown
page read and write
clean
27D3000
unkown image
page readonly
clean
7FF527AEF000
unkown image
page readonly
clean
237C3000000
unkown image
page readonly
clean
7DF52B890000
unkown image
page readonly
clean
237C2B20000
unkown image
page readonly
clean
6A2000
unkown
page read and write
clean
4E70000
unkown
page read and write
clean
2725000
unkown image
page readonly
clean
7DF52B890000
unkown image
page readonly
clean
510000
unkown
page read and write
clean
E10000
unkown image
page readonly
clean
237C3380000
unkown
page read and write
clean
6BD000
unkown
page read and write
clean
6A5000
unkown
page read and write
clean
237C2D16000
unkown
page read and write
clean
6C3000
unkown
page read and write
clean
4BCD000
unkown
page read and write
clean
6B4000
unkown
page read and write
clean
7F5A0000
unkown image
page readonly
clean
7FF529F06000
unkown image
page readonly
clean
3B0000
unkown image
page readonly
clean
1D8DB310000
unkown image
page read and write
clean
4BF5000
unkown
page read and write
clean
237C29E0000
heap private
page read and write
clean
237C33BD000
unkown
page read and write
clean
4E80000
unkown
page read and write
clean
5BD000
stack
page read and write
clean
6A7000
unkown
page read and write
clean
463647A000
unkown
page read and write
clean
2578000
unkown image
page readonly
clean
4BCB000
unkown
page read and write
clean
237C3390000
unkown
page read and write
clean
52C0000
unkown
page read and write
clean
7FF5C9AA9000
unkown image
page readonly
clean
4BFA000
unkown
page read and write
clean
6B0000
unkown
page read and write
clean
4BCB000
unkown
page read and write
clean
1080000
unkown image
page readonly
clean
7DF52B882000
unkown image
page readonly
clean
25CE000
stack
page read and write
clean
1F0000
unkown image
page readonly
clean
7F5B2000
unkown image
page readonly
clean
7FF529A93000
unkown image
page readonly
clean
27D3000
unkown image
page readonly
clean
4BCB000
unkown
page read and write
clean
237C3368000
unkown
page read and write
clean
237C3388000
unkown
page read and write
clean
258D000
unkown image
page readonly
clean
B4CF1FD000
stack
page read and write
clean
25E7000
unkown image
page readonly
clean
237C3382000
unkown
page read and write
clean
61E000
unkown
page read and write
clean
4BD8000
unkown
page read and write
clean
7FF52732E000
unkown image
page readonly
clean
46364FF000
stack
page read and write
clean
26B9000
unkown image
page readonly
clean
6CE000
unkown
page read and write
clean
27D3000
unkown image
page readonly
clean
7FF52A114000
unkown image
page readonly
clean
63E000
unkown
page read and write
clean
52E0000
unkown
page read and write
clean
7FF516802000
unkown image
page readonly
clean
7FF5C9A74000
unkown image
page readonly
clean
7DF52B892000
unkown image
page readonly
clean
1D513049000
unkown
page read and write
clean
237C3384000
unkown
page read and write
clean
42A0000
heap private
page read and write
clean
686000
unkown
page read and write
clean
7F5B0000
unkown image
page readonly
clean
273F000
unkown image
page readonly
clean
7FF5C97A7000
unkown image
page readonly
clean
237C338D000
unkown
page read and write
clean
4BDB000
unkown
page read and write
clean
7DF53F2B2000
unkown image
page readonly
clean
61B000
unkown
page read and write
clean
4636679000
stack
page read and write
clean
7F530000
unkown image
page readonly
clean
4BEC000
unkown
page read and write
clean
7F5A2000
unkown image
page readonly
clean
689000
unkown
page read and write
clean
237C3821000
unkown
page read and write
clean
237C336B000
unkown
page read and write
clean
237C3380000
unkown
page read and write
clean
80000
unkown image
page readonly
clean
25E3000
unkown image
page readonly
clean
1FFF72FE000
unkown
page read and write
clean
7FF5162E5000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
237C33A8000
unkown
page read and write
clean
27C2000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
664000
unkown
page read and write
clean
237C336F000
unkown
page read and write
clean
4BC4000
unkown
page read and write
clean
5220000
unkown
page read and write
clean
7FF527ABA000
unkown image
page readonly
clean
237C31A0000
unkown
page read and write
clean
1D512F00000
heap default
page read and write
clean
52AB000
stack
page read and write
clean
237C3740000
unkown image
page write copy
clean
4BCC000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
1FFF72E6000
unkown
page read and write
clean
7FF515F7E000
unkown image
page readonly
clean
237C3381000
unkown
page read and write
clean
237C3381000
unkown
page read and write
clean
237C380A000
unkown
page read and write
clean
237C37A0000
unkown
page read and write
clean
1D8DB455000
unkown
page read and write
clean
7FF58B034000
unkown image
page readonly
clean
5240000
unkown
page read and write
clean
7F5A0000
unkown image
page readonly
clean
7FF52A11F000
unkown image
page readonly
clean
7FF52A0A4000
unkown image
page readonly
clean
69E000
unkown
page read and write
clean
7FF51667C000
unkown image
page readonly
clean
7FF5C9605000
unkown image
page readonly
clean
7FF51670E000
unkown image
page readonly
clean
237C3360000
unkown
page read and write
clean
4BE5000
unkown
page read and write
clean
7FF52A0AC000
unkown image
page readonly
clean
7FF529EFB000
unkown image
page readonly
clean
6A7000
unkown
page read and write
clean
237C336A000
unkown
page read and write
clean
237C336E000
unkown
page read and write
clean
7DF5DEBB0000
unkown image
page readonly
clean
5B146FF000
stack
page read and write
clean
7FF5C98F1000
unkown image
page readonly
clean
4BF7000
unkown
page read and write
clean
31CC27C000
stack
page read and write
clean
7FF529F76000
unkown image
page readonly
clean
237C3804000
unkown
page read and write
clean
7FF527A2C000
unkown image
page readonly
clean
7FF5C9B14000
unkown image
page readonly
clean
7FF527ABE000
unkown image
page readonly
clean
940000
unkown image
page read and write
clean
1D332810000
unkown image
page readonly
clean
1D8DB320000
heap private
page read and write
clean
7FF527328000
unkown image
page readonly
clean
4E81000
unkown
page read and write
clean
7FF5C9A30000
unkown image
page readonly
clean
7FF52A22A000
unkown image
page readonly
clean
237C2C55000
unkown
page read and write
clean
7DF52B880000
unkown image
page readonly
clean
237C380A000
unkown
page read and write
clean
63B000
unkown
page read and write
clean
6AC000
unkown
page read and write
clean
530000
heap default
page read and write
clean
239000
unkown
page read and write
clean
There are 1061 hidden memdumps, click here to show them.