IOC Report

loading gif

Files

File Path
Type
Category
Malicious
210629 Purchase Order 449 BURGHAUSEN (uZ 20-270)_PDF.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\~DF66A3895C75D2E9C9.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\210629 Purchase Order 449 BURGHAUSEN (uZ 20-270)_PDF.exe
"C:\Users\user\Desktop\210629 Purchase Order 449 BURGHAUSEN (uZ 20-270)_PDF.exe"
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\subideal\Eyeliners
HARNISKKLDT
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
4E10000
unkown
page execute and read and write
malicious
7FF508AE7000
unkown image
page readonly
clean
1DB00650000
unkown
page read and write
clean
1DB00E02000
unkown
page read and write
clean
7FF541C17000
unkown image
page readonly
clean
2EFCC702000
unkown
page read and write
clean
7FF4F95C8000
unkown image
page readonly
clean
7FF573C6F000
unkown image
page readonly
clean
7FF508AAF000
unkown image
page readonly
clean
18537E3D000
unkown
page read and write
clean
7FF5A653E000
unkown image
page readonly
clean
1A5B517A000
unkown
page read and write
clean
7FF50835F000
unkown image
page readonly
clean
24E1F664000
unkown
page read and write
clean
1A5B5763000
unkown
page read and write
clean
8431FE000
stack
page read and write
clean
7FF573FC3000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF508AAB000
unkown image
page readonly
clean
7DF5B4280000
unkown image
page readonly
clean
199D1424000
unkown
page read and write
clean
1A5B51BA000
unkown
page read and write
clean
7FF541787000
unkown image
page readonly
clean
DA356C000
unkown
page read and write
clean
29D0000
unkown image
page readonly
clean
1DB00658000
unkown
page read and write
clean
2EFCC651000
unkown
page read and write
clean
7DF507A30000
unkown image
page readonly
clean
7FF541AB2000
unkown image
page readonly
clean
7FF508BB5000
unkown image
page readonly
clean
1A5B5700000
unkown
page read and write
clean
1A5B47F0000
unkown
page read and write
clean
7FF573ADC000
unkown image
page readonly
clean
1A5B5190000
unkown
page read and write
clean
1A5B51B0000
unkown
page read and write
clean
16F0BD30000
unkown image
page readonly
clean
2EFCC4D0000
unkown image
page readonly
clean
1A5B4852000
unkown
page read and write
clean
2EFCC700000
unkown
page read and write
clean
1A5B48C6000
unkown
page read and write
clean
7FF5A65E9000
unkown image
page readonly
clean
7FF50895F000
unkown image
page readonly
clean
84307C000
stack
page read and write
clean
FAA10FF000
stack
page read and write
clean
7FF508713000
unkown image
page readonly
clean
7FF573349000
unkown image
page readonly
clean
7DF47FBA0000
unkown image
page readonly
clean
199D1350000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF573A3D000
unkown image
page readonly
clean
18539DD0000
unkown image
page write copy
clean
1DB00647000
unkown
page read and write
clean
7FF541B4F000
unkown image
page readonly
clean
7FF541A6D000
unkown image
page readonly
clean
1A5B4859000
unkown
page read and write
clean
1A5B4630000
unkown image
page readonly
clean
21D0000
unkown image
page readonly
clean
15345EE0000
heap default
page read and write
clean
7FF5089D7000
unkown image
page readonly
clean
7FF54160B000
unkown image
page readonly
clean
7DF5818F0000
unkown image
page readonly
clean
7FF5A63C1000
unkown image
page readonly
clean
7FF5A658A000
unkown image
page readonly
clean
1A5B51CA000
unkown
page read and write
clean
7DF5818E0000
unkown image
page readonly
clean
18537C90000
unkown image
page readonly
clean
7FF541B25000
unkown image
page readonly
clean
84357D000
stack
page read and write
clean
15345D50000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF57406A000
unkown image
page readonly
clean
7DF5B4270000
unkown image
page readonly
clean
7FF5A620F000
unkown image
page readonly
clean
7DF4058E0000
unkown image
page readonly
clean
15345F1D000
unkown
page read and write
clean
1A5B518C000
unkown
page read and write
clean
7FF4F9D2D000
unkown image
page readonly
clean
7FF5A65E2000
unkown image
page readonly
clean
7DF5B4290000
unkown image
page readonly
clean
1A5B483C000
unkown
page read and write
clean
3E3937E000
stack
page read and write
clean
3E38FF7000
stack
page read and write
clean
16F0C470000
unkown
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
1A5B48E3000
unkown
page read and write
clean
7FF541877000
unkown image
page readonly
clean
7FF508AB7000
unkown image
page readonly
clean
7DF5B4272000
unkown image
page readonly
clean
3F9118F000
stack
page read and write
clean
7FF541B51000
unkown image
page readonly
clean
1A5B517A000
unkown
page read and write
clean
7FF55B521000
unkown image
page readonly
clean
1DB00708000
unkown
page read and write
clean
15345EF1000
unkown
page read and write
clean
7DF516840000
unkown image
page readonly
clean
199D1600000
unkown image
page readonly
clean
1DB00600000
unkown
page read and write
clean
7FF55B683000
unkown image
page readonly
clean
24E1F5D0000
unkown
page read and write
clean
427000
unkown image
page read and write
clean
7FF5419FF000
unkown image
page readonly
clean
1A5B4913000
unkown
page read and write
clean
7FF55AE23000
unkown image
page readonly
clean
1A5B5187000
unkown
page read and write
clean
7FF4F9D94000
unkown image
page readonly
clean
7FF5A6491000
unkown image
page readonly
clean
18537F00000
unkown
page read and write
clean
1A5B5194000
unkown
page read and write
clean
18537E58000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7DF516822000
unkown image
page readonly
clean
7FF573363000
unkown image
page readonly
clean
2EFCC4B0000
unkown image
page readonly
clean
2A00000
unkown image
page readonly
clean
2EFCC686000
unkown
page read and write
clean
7DF5693E2000
unkown image
page readonly
clean
2EFCC600000
unkown
page read and write
clean
1A5B517E000
unkown
page read and write
clean
199D1220000
unkown image
page readonly
clean
1A5B51D2000
unkown
page read and write
clean
7FF55B257000
unkown image
page readonly
clean
7FF541465000
unkown image
page readonly
clean
18537E78000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
42B000
unkown image
page readonly
clean
7FF508BC1000
unkown image
page readonly
clean
1DB00688000
unkown
page read and write
clean
1A5B517E000
unkown
page read and write
clean
199D1240000
unkown image
page readonly
clean
1A5B5181000
unkown
page read and write
clean
16F0B6D0000
heap default
page read and write
clean
1A5B5600000
unkown
page read and write
clean
185397A0000
unkown
page read and write
clean
1A5B5194000
unkown
page read and write
clean
1DB00657000
unkown
page read and write
clean
1A5B5185000
unkown
page read and write
clean
24E1F68A000
unkown
page read and write
clean
1A5B5702000
unkown
page read and write
clean
7FF541C1A000
unkown image
page readonly
clean
7FF55B6EA000
unkown image
page readonly
clean
7FF541A05000
unkown image
page readonly
clean
7FF508B12000
unkown image
page readonly
clean
A10000
unkown image
page readonly
clean
24E1F8D0000
unkown image
page readonly
clean
1A5B4850000
unkown
page read and write
clean
7FF541C8A000
unkown image
page readonly
clean
1A5B51D0000
unkown
page read and write
clean
7FF5A60F1000
unkown image
page readonly
clean
1A5B518B000
unkown
page read and write
clean
1DB00B90000
unkown image
page readonly
clean
15345E60000
unkown
page read and write
clean
7FF541BAF000
unkown image
page readonly
clean
7FF573757000
unkown image
page readonly
clean
1A5B511C000
unkown
page read and write
clean
7FF508B1E000
unkown image
page readonly
clean
7FF573FED000
unkown image
page readonly
clean
7FF573419000
unkown image
page readonly
clean
7DF54F920000
unkown image
page readonly
clean
7FF508946000
unkown image
page readonly
clean
7FF573F97000
unkown image
page readonly
clean
1A5B5187000
unkown
page read and write
clean
7DF4672A0000
unkown image
page readonly
clean
1A5B516B000
unkown
page read and write
clean
1A5B48B3000
unkown
page read and write
clean
3F914FA000
stack
page read and write
clean
7FF573AF5000
unkown image
page readonly
clean
1A5B4620000
heap private
page read and write
clean
1A5B4EB0000
unkown image
page read and write
clean
1DB00613000
unkown
page read and write
clean
7FF574065000
unkown image
page readonly
clean
7FF541B8E000
unkown image
page readonly
clean
7FF573441000
unkown image
page readonly
clean
7FF541807000
unkown image
page readonly
clean
7FF4F9D82000
unkown image
page readonly
clean
7DF516832000
unkown image
page readonly
clean
1A5B516D000
unkown
page read and write
clean
7FF5A6587000
unkown image
page readonly
clean
1A5B5182000
unkown
page read and write
clean
7FF574049000
unkown image
page readonly
clean
7FF55B667000
unkown image
page readonly
clean
590000
unkown
page read and write
clean
7FF508B0B000
unkown image
page readonly
clean
24E1F66C000
unkown
page read and write
clean
DD1F7E000
stack
page read and write
clean
15345EF6000
unkown
page read and write
clean
7DF5693E2000
unkown image
page readonly
clean
16F0B71B000
unkown
page read and write
clean
7FF4F9DB1000
unkown image
page readonly
clean
7FF5A63E0000
unkown image
page readonly
clean
7FF508ACD000
unkown image
page readonly
clean
7DF54F900000
unkown image
page readonly
clean
7DF581CD0000
unkown image
page readonly
clean
7DF4B2140000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF4F9980000
unkown image
page readonly
clean
1A5B5187000
unkown
page read and write
clean
1A5B5180000
unkown
page read and write
clean
1DB00670000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
2EFCC66E000
unkown
page read and write
clean
7DF5810B2000
unkown image
page readonly
clean
7FF541BF3000
unkown image
page readonly
clean
7FF4F9564000
unkown image
page readonly
clean
7FF5733BA000
unkown image
page readonly
clean
1A5B5187000
unkown
page read and write
clean
2EFCC64C000
unkown
page read and write
clean
1A5B4813000
unkown
page read and write
clean
7FF50878C000
unkown image
page readonly
clean
15345EF6000
heap default
page read and write
clean
7FF57315A000
unkown image
page readonly
clean
7FF55B540000
unkown image
page readonly
clean
7FF57386F000
unkown image
page readonly
clean
470DBF9000
stack
page read and write
clean
1A5B484D000
unkown
page read and write
clean
7DF47EF70000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
37D000
unkown
page read and write
clean
7FF5A6523000
unkown image
page readonly
clean
185397E0000
unkown
page read and write
clean
1A5B51A5000
unkown
page read and write
clean
FAA12FB000
stack
page read and write
clean
1A5B5177000
unkown
page read and write
clean
7DF5693D2000
unkown image
page readonly
clean
1A5B5149000
unkown
page read and write
clean
1A5B4870000
unkown
page read and write
clean
7DF581CE2000
unkown image
page readonly
clean
1DB00655000
unkown
page read and write
clean
7FF5739F6000
unkown image
page readonly
clean
7FF55B754000
unkown image
page readonly
clean
7FF573F9E000
unkown image
page readonly
clean
7DF581CD2000
unkown image
page readonly
clean
7FF50851D000
unkown image
page readonly
clean
7FF5A6547000
unkown image
page readonly
clean
1A5B5184000
unkown
page read and write
clean
3E390FE000
stack
page read and write
clean
16F0B900000
unkown
page read and write
clean
7DF507A12000
unkown image
page readonly
clean
7DF5B4282000
unkown image
page readonly
clean
24E1F540000
heap private
page read and write
clean
2A50000
unkown
page read and write
clean
2EFCC629000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF508ACF000
unkown image
page readonly
clean
2EFCC500000
heap default
page read and write
clean
7FF4F9CB6000
unkown image
page readonly
clean
24E1FE02000
unkown
page read and write
clean
1A5B48A9000
unkown
page read and write
clean
1DB0067E000
unkown
page read and write
clean
7DF581CD2000
unkown image
page readonly
clean
7FF541A26000
unkown image
page readonly
clean
16F0B723000
unkown
page read and write
clean
7FF573435000
unkown image
page readonly
clean
1DB00A10000
unkown image
page readonly
clean
7FF574071000
unkown image
page readonly
clean
7FF508864000
unkown image
page readonly
clean
1A5B4857000
unkown
page read and write
clean
15345FE0000
unkown image
page readonly
clean
7FF4F9DA5000
unkown image
page readonly
clean
7FF4F963E000
unkown image
page readonly
clean
7FF5733BD000
unkown image
page readonly
clean
7FF573FBB000
unkown image
page readonly
clean
7FF4F9D0E000
unkown image
page readonly
clean
16F0BB30000
unkown image
page readonly
clean
7FF541A70000
unkown image
page readonly
clean
1A5B48E9000
unkown
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
7FF55B6CE000
unkown image
page readonly
clean
2EFCC713000
unkown
page read and write
clean
7FF541B7A000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF541C1D000
unkown image
page readonly
clean
DA40FC000
stack
page read and write
clean
7DF507A22000
unkown image
page readonly
clean
7FF5A63FB000
unkown image
page readonly
clean
1A5B518F000
unkown
page read and write
clean
2205000
heap private
page read and write
clean
15345D30000
unkown image
page read and write
clean
7FF57339E000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
1DB004F0000
unkown image
page readonly
clean
7FF541B7E000
unkown image
page readonly
clean
29F0000
unkown
page read and write
clean
7FF55B3F5000
unkown image
page readonly
clean
7FF5A656E000
unkown image
page readonly
clean
1A5B51BB000
unkown
page read and write
clean
1A5B4610000
unkown image
page read and write
clean
3F91479000
stack
page read and write
clean
7FF4F9D02000
unkown image
page readonly
clean
7FF573BED000
unkown image
page readonly
clean
7FF5089D2000
unkown image
page readonly
clean
7FF5731C6000
unkown image
page readonly
clean
2EFCC64F000
unkown
page read and write
clean
7FF541BAD000
unkown image
page readonly
clean
7FF573393000
unkown image
page readonly
clean
7DF507A20000
unkown image
page readonly
clean
7FF573F7D000
unkown image
page readonly
clean
7FF55AE16000
unkown image
page readonly
clean
2EFCC4A0000
heap private
page read and write
clean
24E1F708000
unkown
page read and write
clean
7FF508AEE000
unkown image
page readonly
clean
1A5B48FA000
unkown
page read and write
clean
1A5B5187000
unkown
page read and write
clean
4D0E000
stack
page read and write
clean
1A5B566A000
unkown
page read and write
clean
1A5B4902000
unkown
page read and write
clean
711000
heap default
page read and write
clean
199D1413000
unkown
page read and write
clean
DA3AFF000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1A5B566A000
unkown
page read and write
clean
1DB0064B000
unkown
page read and write
clean
7FF541BB3000
unkown image
page readonly
clean
7FF5A65FA000
unkown image
page readonly
clean
153461A0000
heap private
page read and write
clean
7DF581CD0000
unkown image
page readonly
clean
7FF574042000
unkown image
page readonly
clean
1DB0068C000
unkown
page read and write
clean
7DF5810C0000
unkown image
page readonly
clean
24E1F5B0000
unkown image
page readonly
clean
1A5B51A7000
unkown
page read and write
clean
3F9108A000
unkown
page read and write
clean
7DF507A20000
unkown image
page readonly
clean
199D1250000
unkown image
page readonly
clean
199D13A0000
unkown
page read and write
clean
7FF4F95CA000
unkown image
page readonly
clean
1A5B4829000
unkown
page read and write
clean
7FF541BCE000
unkown image
page readonly
clean
7DF5B4280000
unkown image
page readonly
clean
15345F1D000
unkown
page read and write
clean
7FF4F9CD3000
unkown image
page readonly
clean
7FF573302000
unkown image
page readonly
clean
18537C60000
unkown image
page readonly
clean
24E1F65E000
unkown
page read and write
clean
18539A00000
unkown
page read and write
clean
1A5B4630000
unkown image
page readonly
clean
7FF573C5A000
unkown image
page readonly
clean
7DF5693E0000
unkown image
page readonly
clean
6D0000
heap default
page read and write
clean
7DF5B4270000
unkown image
page readonly
clean
7FF573F86000
unkown image
page readonly
clean
7FF55B771000
unkown image
page readonly
clean
7FF55B251000
unkown image
page readonly
clean
7FF4F9639000
unkown image
page readonly
clean
C10000
unkown image
page readonly
clean
16F0B920000
unkown
page read and write
clean
7DF54F910000
unkown image
page readonly
clean
7FF4F9DAA000
unkown image
page readonly
clean
7FF541809000
unkown image
page readonly
clean
7FF55B771000
unkown image
page readonly
clean
1A5B5197000
unkown
page read and write
clean
15345EC0000
unkown image
page readonly
clean
1A5B4C00000
unkown image
page readonly
clean
98000
unkown
page read and write
clean
7FF541A59000
unkown image
page readonly
clean
18537C80000
unkown image
page readonly
clean
7FF55B679000
unkown image
page readonly
clean
199D1200000
unkown image
page read and write
clean
7DF581CE0000
unkown image
page readonly
clean
15345F0F000
unkown
page read and write
clean
7FF573A5B000
unkown image
page readonly
clean
1A5B519A000
unkown
page read and write
clean
7FF5087BC000
unkown image
page readonly
clean
7FF541BD7000
unkown image
page readonly
clean
7FF4F9CBF000
unkown image
page readonly
clean
24E1F661000
unkown
page read and write
clean
15345F21000
unkown
page read and write
clean
7DF5B4290000
unkown image
page readonly
clean
7FF55B6BB000
unkown image
page readonly
clean
199D1800000
unkown image
page readonly
clean
16F0B910000
heap private
page read and write
clean
18537C40000
unkown image
page read and write
clean
7FF573C6A000
unkown image
page readonly
clean
842CAB000
unkown
page read and write
clean
7FF573F83000
unkown image
page readonly
clean
7DF5818D0000
unkown image
page readonly
clean
1A5B47F0000
unkown
page read and write
clean
199D1980000
unkown image
page readonly
clean
7FF55B5F5000
unkown image
page readonly
clean
5A0000
heap default
page read and write
clean
199D1370000
unkown
page read and write
clean
7FF573F90000
unkown image
page readonly
clean
2EFCCC60000
unkown
page read and write
clean
EDF447F000
stack
page read and write
clean
7FF4F9CC3000
unkown image
page readonly
clean
7FF541BC0000
unkown image
page readonly
clean
1A5B5180000
unkown
page read and write
clean
7FF573A40000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
7FF573BCE000
unkown image
page readonly
clean
1A5B518A000
unkown
page read and write
clean
7DF44D7D0000
unkown image
page readonly
clean
199D1429000
unkown
page read and write
clean
18537DD0000
unkown
page read and write
clean
199D1270000
heap default
page read and write
clean
7FF5A6611000
unkown image
page readonly
clean
7FF541A51000
unkown image
page readonly
clean
18537F2C000
unkown
page read and write
clean
470D6BB000
unkown
page read and write
clean
DA3CFF000
stack
page read and write
clean
1A5B5181000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7DF5693D2000
unkown image
page readonly
clean
1A5B4800000
unkown
page read and write
clean
7FF55B6C3000
unkown image
page readonly
clean
1A5B5193000
unkown
page read and write
clean
7FF573F93000
unkown image
page readonly
clean
7DF5810A2000
unkown image
page readonly
clean
7DF54F912000
unkown image
page readonly
clean
2EFCC708000
unkown
page read and write
clean
24E1F63C000
unkown
page read and write
clean
1DB00702000
unkown
page read and write
clean
15345F08000
unkown
page read and write
clean
7FF541C72000
unkown image
page readonly
clean
7DF5810A0000
unkown image
page readonly
clean
3E3947C000
stack
page read and write
clean
7FF541925000
unkown image
page readonly
clean
1DB0064C000
unkown
page read and write
clean
DA3DFC000
stack
page read and write
clean
3E391FB000
stack
page read and write
clean
7FF573B93000
unkown image
page readonly
clean
7FF573F7F000
unkown image
page readonly
clean
7FF5730F7000
unkown image
page readonly
clean
16F0B500000
unkown
page read and write
clean
1DB00629000
unkown
page read and write
clean
3E392F8000
stack
page read and write
clean
7FF573C42000
unkown image
page readonly
clean
EDF3BAF000
stack
page read and write
clean
7FF508887000
unkown image
page readonly
clean
3E38C7F000
stack
page read and write
clean
1A5B5187000
unkown
page read and write
clean
2208000
heap private
page read and write
clean
7FF55B67D000
unkown image
page readonly
clean
1A5B519B000
unkown
page read and write
clean
7DF581CE0000
unkown image
page readonly
clean
379000
unkown
page read and write
clean
7FF4F9DA1000
unkown image
page readonly
clean
1DB004B0000
unkown image
page read and write
clean
24E1F667000
unkown
page read and write
clean
7FF5A6295000
unkown image
page readonly
clean
16F0B670000
unkown image
page readonly
clean
24E1F65D000
unkown
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
2EFCC800000
unkown image
page readonly
clean
1A5B48BF000
unkown
page read and write
clean
15345F0F000
unkown
page read and write
clean
1A5B5104000
unkown
page read and write
clean
1A5B4854000
unkown
page read and write
clean
7DF54F910000
unkown image
page readonly
clean
7DF5818D0000
unkown image
page readonly
clean
7FF541CA1000
unkown image
page readonly
clean
7FF4F9D9A000
unkown image
page readonly
clean
24E1F702000
unkown
page read and write
clean
18539802000
unkown
page read and write
clean
1DB00652000
unkown
page read and write
clean
470DC7C000
stack
page read and write
clean
7FF573B7F000
unkown image
page readonly
clean
7FF55B5C5000
unkown image
page readonly
clean
1A5B516E000
unkown
page read and write
clean
1A5B5702000
unkown
page read and write
clean
1A5B5187000
unkown
page read and write
clean
7DF5810A2000
unkown image
page readonly
clean
7DF5810B0000
unkown image
page readonly
clean
7DF581CF0000
unkown image
page readonly
clean
7DF5693E0000
unkown image
page readonly
clean
EDF3B2C000
unkown
page read and write
clean
7FF4E5CC1000
unkown image
page readonly
clean
1A5B515F000
unkown
page read and write
clean
7FF574061000
unkown image
page readonly
clean
2FF0000
unkown image
page readonly
clean
7FF4F9BC7000
unkown image
page readonly
clean
7DF5693F0000
unkown image
page readonly
clean
16F0B630000
unkown
page read and write
clean
1A5B514E000
unkown
page read and write
clean
199D13A0000
unkown
page read and write
clean
29E4000
heap private
page read and write
clean
40000
unkown image
page readonly
clean
199D1402000
unkown
page read and write
clean
7FF55B5CB000
unkown image
page readonly
clean
7FF5A6530000
unkown image
page readonly
clean
2EFCC63C000
unkown
page read and write
clean
7FF573FCE000
unkown image
page readonly
clean
24E1F66B000
unkown
page read and write
clean
24E1F65C000
unkown
page read and write
clean
16F0B650000
unkown
page read and write
clean
7FF5A6601000
unkown image
page readonly
clean
7FF573751000
unkown image
page readonly
clean
1A5B5602000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1A5B5194000
unkown
page read and write
clean
429000
unkown image
page read and write
clean
16F0B915000
heap private
page read and write
clean
16F0B720000
heap default
page read and write
clean
7FF541972000
unkown image
page readonly
clean
7FF5A6507000
unkown image
page readonly
clean
7FF55B761000
unkown image
page readonly
clean
7DF507A10000
unkown image
page readonly
clean
FAA15FC000
stack
page read and write
clean
24E1F669000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1A5B5182000
unkown
page read and write
clean
16F0B530000
unkown image
page readonly
clean
1A5B5180000
unkown
page read and write
clean
3F915FE000
stack
page read and write
clean
16F0C4C0000
unkown
page read and write
clean
7FF541C9A000
unkown image
page readonly
clean
1A5B47F0000
unkown
page read and write
clean
15345D50000
unkown image
page readonly
clean
18537E00000
unkown
page read and write
clean
7FF5A641F000
unkown image
page readonly
clean
1A5B4916000
unkown
page read and write
clean
18537E47000
unkown
page read and write
clean
7FF5A647C000
unkown image
page readonly
clean
7FF55B67F000
unkown image
page readonly
clean
7FF573C71000
unkown image
page readonly
clean
153461B0000
unkown image
page readonly
clean
30BE000
unkown image
page read and write
clean
18537C50000
heap private
page read and write
clean
1DB00659000
unkown
page read and write
clean
1DB00627000
unkown
page read and write
clean
7FF57405A000
unkown image
page readonly
clean
7FF508AE0000
unkown image
page readonly
clean
2BF0000
unkown image
page read and write
clean
16F0B723000
unkown
page read and write
clean
7FF5A651D000
unkown image
page readonly
clean
1A5B5194000
unkown
page read and write
clean
7FF55B5DC000
unkown image
page readonly
clean
6DA000
heap default
page read and write
clean
1A5B51DC000
unkown
page read and write
clean
7FF573412000
unkown image
page readonly
clean
DA397C000
stack
page read and write
clean
15345F1D000
unkown
page read and write
clean
7FF573100000
unkown image
page readonly
clean
7DF507A12000
unkown image
page readonly
clean
199D1C02000
unkown
page read and write
clean
1A5B5158000
unkown
page read and write
clean
3E39578000
stack
page read and write
clean
16F0B746000
unkown
page read and write
clean
29E0000
heap private
page read and write
clean
3E38EF7000
stack
page read and write
clean
7FF5A6396000
unkown image
page readonly
clean
2EFCC67D000
unkown
page read and write
clean
7FF508B99000
unkown image
page readonly
clean
7FF573C71000
unkown image
page readonly
clean
18537CB0000
heap default
page read and write
clean
7FF4E5CC1000
unkown image
page readonly
clean
7FF541CA0000
unkown image
page readonly
clean
1A5B511E000
unkown
page read and write
clean
2EFCC64A000
unkown
page read and write
clean
1A5B5181000
unkown
page read and write
clean
1A5B5602000
unkown
page read and write
clean
7FF541607000
unkown image
page readonly
clean
7FF4F9BC2000
unkown image
page readonly
clean
7DF507A30000
unkown image
page readonly
clean
4CCF000
stack
page read and write
clean
24E1F700000
unkown
page read and write
clean
185397E0000
unkown
page read and write
clean
1A5B484F000
unkown
page read and write
clean
7DF47F7A0000
unkown image
page readonly
clean
7FF4F9D2A000
unkown image
page readonly
clean
18537E57000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
24E1FC50000
unkown image
page readonly
clean
7FF541AAF000
unkown image
page readonly
clean
FAA0DBC000
unkown
page read and write
clean
7FF4F9CC6000
unkown image
page readonly
clean
7FF573C61000
unkown image
page readonly
clean
1A5B4884000
unkown
page read and write
clean
7FF57336E000
unkown image
page readonly
clean
7FF5A6519000
unkown image
page readonly
clean
2EFCC4B0000
unkown image
page readonly
clean
7DF54F902000
unkown image
page readonly
clean
7FF573B83000
unkown image
page readonly
clean
470DA79000
stack
page read and write
clean
18537F29000
unkown
page read and write
clean
7FF55B697000
unkown image
page readonly
clean
7FF573435000
unkown image
page readonly
clean
16F0B6E0000
heap default
page read and write
clean
DD207F000
stack
page read and write
clean
DD1B7F000
stack
page read and write
clean
7DF5818E2000
unkown image
page readonly
clean
7FF508266000
unkown image
page readonly
clean
1A5B4650000
unkown image
page readonly
clean
1DB004D0000
unkown image
page readonly
clean
84347E000
stack
page read and write
clean
7DF5818E0000
unkown image
page readonly
clean
7FF508AD3000
unkown image
page readonly
clean
21C0000
unkown
page read and write
clean
7DF5810A0000
unkown image
page readonly
clean
7FF508AE3000
unkown image
page readonly
clean
7FF5A6537000
unkown image
page readonly
clean
7DF5818F0000
unkown image
page readonly
clean
2210000
unkown
page read and write
clean
1A5B5194000
unkown
page read and write
clean
7FF541B62000
unkown image
page readonly
clean
18537E62000
unkown
page read and write
clean
7FF5A660A000
unkown image
page readonly
clean
1A5B4760000
unkown image
page readonly
clean
2BE0000
heap private
page read and write
clean
7DF54F900000
unkown image
page readonly
clean
24E1F662000
unkown
page read and write
clean
7FF573441000
unkown image
page readonly
clean
7FF573B9E000
unkown image
page readonly
clean
2950000
unkown image
page read and write
clean
24E1F550000
unkown image
page readonly
clean
1A5B5189000
unkown
page read and write
clean
7FF508B37000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
199D1458000
unkown
page read and write
clean
7DF54F902000
unkown image
page readonly
clean
1A5B519B000
unkown
page read and write
clean
24E1F530000
unkown image
page read and write
clean
7FF5419E6000
unkown image
page readonly
clean
7FF5A6563000
unkown image
page readonly
clean
18537E48000
unkown
page read and write
clean
1A5B518A000
unkown
page read and write
clean
1A5B516D000
unkown
page read and write
clean
1DB00800000
unkown image
page readonly
clean
16F0B736000
heap default
page read and write
clean
7FF5419AB000
unkown image
page readonly
clean
470DB7F000
stack
page read and write
clean
7FF4F9D89000
unkown image
page readonly
clean
7FF55B693000
unkown image
page readonly
clean
7FF55B76A000
unkown image
page readonly
clean
EDF427F000
stack
page read and write
clean
7FF541BEB000
unkown image
page readonly
clean
470DAF9000
stack
page read and write
clean
21F0000
heap private
page read and write
clean
3140000
unkown
page read and write
clean
FAA13F7000
stack
page read and write
clean
2A10000
unkown
page read and write
clean
7FF573431000
unkown image
page readonly
clean
1A5B5125000
unkown
page read and write
clean
7FF55B6E7000
unkown image
page readonly
clean
7FF541499000
unkown image
page readonly
clean
2200000
heap private
page read and write
clean
7FF5A63DD000
unkown image
page readonly
clean
2A40000
heap private
page read and write
clean
199D1210000
heap private
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
1A5B5199000
unkown
page read and write
clean
1A5B5602000
unkown
page read and write
clean
1A5B5149000
unkown
page read and write
clean
16F0C440000
unkown
page read and write
clean
16F0BEB0000
unkown image
page readonly
clean
7FF5089AB000
unkown image
page readonly
clean
7FF508BBA000
unkown image
page readonly
clean
1A5B51BC000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
6B0000
unkown
page execute read
clean
7FF573353000
unkown image
page readonly
clean
7FF573BEA000
unkown image
page readonly
clean
18537C60000
unkown image
page readonly
clean
1A5B484B000
unkown
page read and write
clean
3E38CFF000
stack
page read and write
clean
1A5B5181000
unkown
page read and write
clean
199D143D000
unkown
page read and write
clean
7FF57343A000
unkown image
page readonly
clean
7DFB2B6B8000
unkown image
page readonly
clean
7FF5A6495000
unkown image
page readonly
clean
1A5B48EC000
unkown
page read and write
clean
1A5B484C000
unkown
page read and write
clean
1DB0064F000
unkown
page read and write
clean
7FF54161C000
unkown image
page readonly
clean
15345D70000
unkown image
page readonly
clean
7FF5A6611000
unkown image
page readonly
clean
16F0C460000
unkown
page read and write
clean
7FF50897C000
unkown image
page readonly
clean
7FF4F9C1C000
unkown image
page readonly
clean
1A5B5199000
unkown
page read and write
clean
7FF508B3D000
unkown image
page readonly
clean
1A5B4908000
unkown
page read and write
clean
7FF508263000
unkown image
page readonly
clean
1A5B5186000
unkown
page read and write
clean
1A5B5196000
unkown
page read and write
clean
7DF516820000
unkown image
page readonly
clean
7FF55B6A7000
unkown image
page readonly
clean
EDF4177000
stack
page read and write
clean
1A5B4D80000
unkown image
page readonly
clean
1A5B5199000
unkown
page read and write
clean
7FF573BBB000
unkown image
page readonly
clean
18537E2A000
unkown
page read and write
clean
2EFCCE02000
unkown
page read and write
clean
2EFCC5E0000
unkown image
page readonly
clean
7FF508727000
unkown image
page readonly
clean
7DF5693F0000
unkown image
page readonly
clean
7FF541C84000
unkown image
page readonly
clean
16F0C450000
unkown
page readonly
clean
1A5B5194000
unkown
page read and write
clean
1A5B511C000
unkown
page read and write
clean
1DB004D0000
unkown image
page readonly
clean
7DF516840000
unkown image
page readonly
clean
7FF573360000
unkown image
page readonly
clean
7FF4F9AA8000
unkown image
page readonly
clean
7FF4F955D000
unkown image
page readonly
clean
16F0B510000
unkown image
page readonly
clean
2EFCC613000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
2EFCCB80000
unkown image
page readonly
clean
7DF581CE2000
unkown image
page readonly
clean
16F0B7D0000
unkown image
page readonly
clean
7DF516830000
unkown image
page readonly
clean
7FF55B69E000
unkown image
page readonly
clean
3F9110F000
stack
page read and write
clean
7FF574054000
unkown image
page readonly
clean
1DB0066C000
unkown
page read and write
clean
7FF5A6533000
unkown image
page readonly
clean
7FF508BC1000
unkown image
page readonly
clean
1A5B4A00000
unkown image
page readonly
clean
18537E58000
unkown
page read and write
clean
18537E02000
unkown
page read and write
clean
1A5B51A5000
unkown
page read and write
clean
7FF541874000
unkown image
page readonly
clean
7FF573ACB000
unkown image
page readonly
clean
7FF57334F000
unkown image
page readonly
clean
7FF541C91000
unkown image
page readonly
clean
1A5B518D000
unkown
page read and write
clean
16F0B510000
unkown image
page readonly
clean
7FF508363000
unkown image
page readonly
clean
7FF57338B000
unkown image
page readonly
clean
1DB0066C000
unkown
page read and write
clean
EDF407B000
stack
page read and write
clean
15345EB0000
unkown image
page readonly
clean
15345F1D000
unkown
page read and write
clean
7DF507A10000
unkown image
page readonly
clean
7FF4F9DB1000
unkown image
page readonly
clean
16F0B6C0000
unkown
page read and write
clean
7FF508BB1000
unkown image
page readonly
clean
7FF573398000
unkown image
page readonly
clean
1A5B5187000
unkown
page read and write
clean
7FF541AF5000
unkown image
page readonly
clean
7FF55B55B000
unkown image
page readonly
clean
18537E13000
unkown
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
4E0F000
stack
page read and write
clean
7FF508A3C000
unkown image
page readonly
clean
1A5B5196000
unkown
page read and write
clean
7DF5818D2000
unkown image
page readonly
clean
1A5B518C000
unkown
page read and write
clean
1A5B517F000
unkown
page read and write
clean
1A5B5763000
unkown
page read and write
clean
1A5B51CA000
unkown
page read and write
clean
1A5B51BB000
unkown
page read and write
clean
EDF3E7F000
stack
page read and write
clean
7FF55B4F6000
unkown image
page readonly
clean
7FF541BFE000
unkown image
page readonly
clean
199D1400000
unkown
page read and write
clean
1A5B51D0000
unkown
page read and write
clean
1DB00520000
heap default
page read and write
clean
185397E0000
unkown
page read and write
clean
1A5B5193000
unkown
page read and write
clean
24E1F613000
unkown
page read and write
clean
1A5B511E000
unkown
page read and write
clean
18537D90000
unkown image
page readonly
clean
2B50000
unkown
page read and write
clean
7DF5818D2000
unkown image
page readonly
clean
24E1F570000
unkown image
page readonly
clean
FAA14FF000
stack
page read and write
clean
7FF4F95CF000
unkown image
page readonly
clean
1A5B5192000
unkown
page read and write
clean
16F0B4F0000
unkown image
page read and write
clean
7DF5693D0000
unkown image
page readonly
clean
15345F07000
unkown
page read and write
clean
24E1F713000
unkown
page read and write
clean
1A5B5185000
unkown
page read and write
clean
7FF573AC5000
unkown image
page readonly
clean
7FF541A8B000
unkown image
page readonly
clean
DD1D7B000
stack
page read and write
clean
18538380000
unkown image
page readonly
clean
1A5B48D6000
unkown
page read and write
clean
1A5B4680000
heap default
page read and write
clean
7FF573B7D000
unkown image
page readonly
clean
7FF5A60F7000
unkown image
page readonly
clean
1A5B5188000
unkown
page read and write
clean
7FF5A655B000
unkown image
page readonly
clean
199D1502000
unkown
page read and write
clean
DD1A7C000
unkown
page read and write
clean
15345F20000
unkown
page read and write
clean
7FF573B90000
unkown image
page readonly
clean
DD1E77000
stack
page read and write
clean
24E1F580000
unkown image
page readonly
clean
24E1F600000
unkown
page read and write
clean
7FF508BA4000
unkown image
page readonly
clean
1A5B515A000
unkown
page read and write
clean
1A5B5180000
unkown
page read and write
clean
7DF5810B2000
unkown image
page readonly
clean
7FF541B0C000
unkown image
page readonly
clean
7DF516832000
unkown image
page readonly
clean
1DB00A00000
unkown image
page readonly
clean
1A5B51BB000
unkown
page read and write
clean
1A5B5190000
unkown
page read and write
clean
153461A5000
heap private
page read and write
clean
1A5B48AB000
unkown
page read and write
clean
7FF55B75A000
unkown image
page readonly
clean
7FF541B21000
unkown image
page readonly
clean
1A5B51BB000
unkown
page read and write
clean
7FF573BA7000
unkown image
page readonly
clean
7FF55B53D000
unkown image
page readonly
clean
2EFCC653000
unkown
page read and write
clean
4BCE000
stack
page read and write
clean
7DF5818E2000
unkown image
page readonly
clean
7FF508B92000
unkown image
page readonly
clean
2EFCCA00000
unkown image
page readonly
clean
7FF541781000
unkown image
page readonly
clean
7FF541AB7000
unkown image
page readonly
clean
1DB00713000
unkown
page read and write
clean
7FF54189F000
unkown image
page readonly
clean
1A5B517F000
unkown
page read and write
clean
1A5B5602000
unkown
page read and write
clean
199D13A0000
unkown
page read and write
clean
7DF581CF0000
unkown image
page readonly
clean
7DF516830000
unkown image
page readonly
clean
1DB00646000
unkown
page read and write
clean
7FF55B57F000
unkown image
page readonly
clean
1A5B51CB000
unkown
page read and write
clean
24E1F550000
unkown image
page readonly
clean
1DB00500000
unkown image
page readonly
clean
1A5B516D000
unkown
page read and write
clean
1A5B5178000
unkown
page read and write
clean
7FF4F9CBD000
unkown image
page readonly
clean
DA3EFD000
stack
page read and write
clean
7FF4F9CD0000
unkown image
page readonly
clean
1A5B51A5000
unkown
page read and write
clean
16F0B8A0000
unkown
page read and write
clean
7FF573FEA000
unkown image
page readonly
clean
2EFCC490000
unkown image
page read and write
clean
1A5B517F000
unkown
page read and write
clean
7FF573A7F000
unkown image
page readonly
clean
1A5B518D000
unkown
page read and write
clean
7FF55B749000
unkown image
page readonly
clean
2A49000
heap private
page read and write
clean
7DF5B4272000
unkown image
page readonly
clean
7FF573C49000
unkown image
page readonly
clean
16F0C200000
unkown
page read and write
clean
7FF541BC3000
unkown image
page readonly
clean
24E1F65F000
unkown
page read and write
clean
18537E48000
unkown
page read and write
clean
7FF573B97000
unkown image
page readonly
clean
7DF516822000
unkown image
page readonly
clean
7FF508B3A000
unkown image
page readonly
clean
7DF5693D0000
unkown image
page readonly
clean
16F0B919000
heap private
page read and write
clean
D90000
unkown image
page readonly
clean
18537E89000
unkown
page read and write
clean
7FF5A6465000
unkown image
page readonly
clean
18538200000
unkown image
page readonly
clean
18537DB0000
unkown
page read and write
clean
7FF541AFB000
unkown image
page readonly
clean
7FF5419E4000
unkown image
page readonly
clean
18537F13000
unkown
page read and write
clean
7FF574071000
unkown image
page readonly
clean
7FF4F9CFB000
unkown image
page readonly
clean
7FF50893B000
unkown image
page readonly
clean
7FF5A651F000
unkown image
page readonly
clean
7FF57330E000
unkown image
page readonly
clean
24E1F629000
unkown
page read and write
clean
1A5B4855000
unkown
page read and write
clean
7FF573B79000
unkown image
page readonly
clean
16F0B723000
unkown
page read and write
clean
7DF54F912000
unkown image
page readonly
clean
7FF508892000
unkown image
page readonly
clean
3F9157F000
stack
page read and write
clean
7FF573424000
unkown image
page readonly
clean
1DB00C80000
unkown
page read and write
clean
1DB00700000
unkown
page read and write
clean
1A5B51DC000
unkown
page read and write
clean
199D1990000
unkown image
page readonly
clean
7DF516820000
unkown image
page readonly
clean
1DB0064D000
unkown
page read and write
clean
7FF573324000
unkown image
page readonly
clean
1DB004C0000
heap private
page read and write
clean
16F0B6D8000
heap default
page read and write
clean
7FF57342A000
unkown image
page readonly
clean
2EFCC4E0000
unkown image
page readonly
clean
7FF55B742000
unkown image
page readonly
clean
1A5B518C000
unkown
page read and write
clean
7FF573BE7000
unkown image
page readonly
clean
6F2000
heap default
page read and write
clean
7DF507A22000
unkown image
page readonly
clean
1A5B518B000
unkown
page read and write
clean
1A5B5002000
unkown
page read and write
clean
18538390000
unkown image
page readonly
clean
7FF541C79000
unkown image
page readonly
clean
DA3BFF000
stack
page read and write
clean
7DF5B4282000
unkown image
page readonly
clean
199D1220000
unkown image
page readonly
clean
DD1AFF000
stack
page read and write
clean
7FF5738F5000
unkown image
page readonly
clean
18537F02000
unkown
page read and write
clean
1A5B5181000
unkown
page read and write
clean
1DB0063C000
unkown
page read and write
clean
3E389AB000
unkown
page read and write
clean
16F0B540000
unkown image
page readonly
clean
7FF541A55000
unkown image
page readonly
clean
1A5B47A0000
unkown image
page readonly
clean
7FF573AF1000
unkown image
page readonly
clean
7FF508729000
unkown image
page readonly
clean
24E1F5A0000
heap default
page read and write
clean
7FF573BC3000
unkown image
page readonly
clean
7FF5A658D000
unkown image
page readonly
clean
7FF5419F1000
unkown image
page readonly
clean
24E1FAD0000
unkown image
page readonly
clean
7DF5810B0000
unkown image
page readonly
clean
1A5B4780000
unkown
page read and write
clean
1A5B48EB000
unkown
page read and write
clean
7FF573869000
unkown image
page readonly
clean
7FF5733B7000
unkown image
page readonly
clean
15345E80000
unkown
page read and write
clean
7FF5A65F4000
unkown image
page readonly
clean
1A5B488A000
unkown
page read and write
clean
7DF54F920000
unkown image
page readonly
clean
7FF573337000
unkown image
page readonly
clean
15345F1D000
unkown
page read and write
clean
7FF57334D000
unkown image
page readonly
clean
7DF5810C0000
unkown image
page readonly
clean
1A5B51CB000
unkown
page read and write
clean
FAA107E000
stack
page read and write
clean
7FF508AC9000
unkown image
page readonly
clean
1A5B5100000
unkown
page read and write
clean
1A5B5182000
unkown
page read and write
clean
15346160000
unkown image
page readonly
clean
7FF5A5DD5000
unkown image
page readonly
clean
DA0000
unkown image
page readonly
clean
7FF541B83000
unkown image
page readonly
clean
EDF437C000
stack
page read and write
clean
1A5B4660000
unkown image
page readonly
clean
7FF573A21000
unkown image
page readonly
clean
7FF573B67000
unkown image
page readonly
clean
7FF508259000
unkown image
page readonly
clean
24E1F659000
unkown
page read and write
clean
7FF508BAA000
unkown image
page readonly
clean
18538000000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
7FF4F9B4A000
unkown image
page readonly
clean
7FF5083DF000
unkown image
page readonly
clean
7FF541B97000
unkown image
page readonly
clean
1A5B5177000
unkown
page read and write
clean
8433FD000
stack
page read and write
clean
84317D000
stack
page read and write
clean
42B000
unkown image
page readonly
clean
7FF541BA9000
unkown image
page readonly
clean
7FF5A646B000
unkown image
page readonly
clean
7FF541967000
unkown image
page readonly
clean
7DF4146F0000
unkown image
page readonly
clean
7FF55B5F1000
unkown image
page readonly
clean
1A5B516D000
unkown
page read and write
clean
1A5B5602000
unkown
page read and write
clean
7FF573C54000
unkown image
page readonly
clean
2EFCC656000
unkown
page read and write
clean
24E1F67E000
unkown
page read and write
clean
7FF55B690000
unkown image
page readonly
clean
7FF541BC7000
unkown image
page readonly
clean
7FF508973000
unkown image
page readonly
clean
199D1A60000
unkown
page read and write
clean
7FF573367000
unkown image
page readonly
clean
1A5B4E60000
unkown image
page write copy
clean
7FF55B6ED000
unkown image
page readonly
clean
7FF572AEB000
unkown image
page readonly
clean
There are 948 hidden memdumps, click here to show them.