IOC Report

loading gif

Files

File Path
Type
Category
Malicious
QUOTAZIONEpdf.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\Temp\nsr3B6A.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\nsr3B6B.tmp\tncvu.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\pdqlrunrcm
DOS executable (COM)
dropped
clean
C:\Users\user\AppData\Local\Temp\wtmxan9q1x7moo
data
dropped
clean
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\QUOTAZIONEpdf.exe
"C:\Users\user\Desktop\QUOTAZIONEpdf.exe"
malicious
C:\Users\user\Desktop\QUOTAZIONEpdf.exe
"C:\Users\user\Desktop\QUOTAZIONEpdf.exe"
malicious

URLs

Name
IP
Malicious
http://kbfvzoboss.bid/alien/fre.php
malicious
http://alphastand.win/alien/fre.php
malicious
http://alphastand.trade/alien/fre.php
malicious
http://alphastand.top/alien/fre.php
malicious
http://slimpackage.com/slimmain/five/fre.php
104.223.93.105
malicious
http://nsis.sf.net/NSIS_Error
unknown
clean
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
http://www.ibsensoftware.com/
unknown
clean

Domains

Name
IP
Malicious
slimpackage.com
104.223.93.105
malicious

IPs

IP
Domain
Country
Malicious
104.223.93.105
slimpackage.com
United States
malicious
192.168.2.1
unknown
unknown
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
3040000
unkown
page read and write
malicious
400000
unkown
page execute and read and write
malicious
533000
unkown
page read and write
malicious
400000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
518000
heap default
page read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
401000
unkown image
page execute read
clean
1EB4924F000
unkown
page read and write
clean
7FF5CCBB1000
unkown image
page readonly
clean
22B28510000
heap private
page read and write
clean
1EB49B96000
unkown
page read and write
clean
1EB49B96000
unkown
page read and write
clean
1EB49257000
unkown
page read and write
clean
7FF517139000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
1EB49316000
unkown
page read and write
clean
7FF5170B3000
unkown image
page readonly
clean
1EB49250000
unkown
page read and write
clean
2865EA4C000
unkown
page read and write
clean
7FF517160000
unkown image
page readonly
clean
1ED7867F000
unkown
page read and write
clean
22B288D0000
unkown image
page readonly
clean
1EB49BA2000
unkown
page read and write
clean
1EB49600000
unkown image
page readonly
clean
22B28580000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
1EB49BA2000
unkown
page read and write
clean
1ED7868A000
unkown
page read and write
clean
1EB49B13000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
1EB492A5000
unkown
page read and write
clean
7FF5ADAC9000
unkown image
page readonly
clean
7DF5A71C0000
unkown image
page readonly
clean
1EB49870000
unkown
page read and write
clean
1EB49400000
unkown image
page readonly
clean
7FF5DA934000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
27E2642A000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
7FF5C8ACE000
unkown image
page readonly
clean
566000
unkown
page read and write
clean
7FF5DA951000
unkown image
page readonly
clean
7FF52AD6C000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
1ED785D0000
heap default
page read and write
clean
1EB4A13C000
unkown
page read and write
clean
1EB49BB5000
unkown
page read and write
clean
7FF599248000
unkown image
page readonly
clean
E432AFB000
stack
page read and write
clean
7BE000
stack
page read and write
clean
7FF5CC97D000
unkown image
page readonly
clean
227E000
stack
page read and write
clean
D80000
unkown image
page readonly
clean
7DF5D6EB2000
unkown image
page readonly
clean
7DF538CE2000
unkown image
page readonly
clean
1EB4925A000
unkown
page read and write
clean
1EB4A019000
unkown
page read and write
clean
1EB49B97000
unkown
page read and write
clean
7FF5C924A000
unkown image
page readonly
clean
19180640000
unkown
page read and write
clean
7FF51708E000
unkown image
page readonly
clean
556000
unkown
page read and write
clean
1EB49226000
unkown
page read and write
clean
1EB49BA6000
unkown
page read and write
clean
1EB49B80000
unkown
page read and write
clean
FE97FBB000
unkown
page read and write
clean
1ED78D30000
unkown
page read and write
clean
565000
unkown
page read and write
clean
3AF000
unkown
page read and write
clean
1FF83BD5000
heap private
page read and write
clean
3080000
unkown
page read and write
clean
23D0000
heap private
page read and write
clean
7FF516EB1000
unkown image
page readonly
clean
7FF5991D5000
unkown image
page readonly
clean
7DF5D6EC0000
unkown image
page readonly
clean
1FF83A20000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
22B285D0000
unkown
page read and write
clean
1EB49B76000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
1EB4A102000
unkown
page read and write
clean
23BE000
stack
page read and write
clean
55B000
unkown
page read and write
clean
7FF5CCA35000
unkown image
page readonly
clean
2865E940000
heap private
page read and write
clean
7FF5AD9FF000
unkown image
page readonly
clean
7FF5DA437000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1EB49B00000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
3E9D36C000
unkown
page read and write
clean
7FF5994C7000
unkown image
page readonly
clean
1EB49BC8000
unkown
page read and write
clean
7FF5DA431000
unkown image
page readonly
clean
7FF5AD876000
unkown image
page readonly
clean
795F74C000
unkown
page read and write
clean
55F000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1EB4A19D000
unkown
page read and write
clean
1EB49B86000
unkown
page read and write
clean
2865EA3C000
unkown
page read and write
clean
7FF5CCAE7000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
1ED785A0000
unkown image
page readonly
clean
1EB49B98000
unkown
page read and write
clean
7FF59947E000
unkown image
page readonly
clean
7DF5BB760000
unkown image
page readonly
clean
7FF5DA7A5000
unkown image
page readonly
clean
7FF5CCA31000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
566000
unkown
page read and write
clean
1EB49130000
unkown image
page readonly
clean
2865E980000
unkown image
page readonly
clean
1EB49313000
unkown
page read and write
clean
556000
unkown
page read and write
clean
7FF5170BE000
unkown image
page readonly
clean
3E9D8FE000
stack
page read and write
clean
7DF538CE0000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
7FF5CC99B000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
ACC56FF000
stack
page read and write
clean
27E26400000
unkown
page read and write
clean
7DF538CD2000
unkown image
page readonly
clean
E4327CE000
stack
page read and write
clean
8FE000
stack
page read and write
clean
9D6E0DB000
unkown
page read and write
clean
563000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF51703E000
unkown image
page readonly
clean
191803E0000
unkown
page read and write
clean
7FF516F6F000
unkown image
page readonly
clean
566000
unkown
page read and write
clean
1EB492C5000
unkown
page read and write
clean
22B28540000
unkown image
page readonly
clean
1FF83B80000
unkown image
page readonly
clean
1EB49253000
unkown
page read and write
clean
3030000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7DF538CE0000
unkown image
page readonly
clean
1EB4A002000
unkown
page read and write
clean
22B28AD0000
unkown image
page readonly
clean
191FF80B000
unkown
page read and write
clean
1EB4924A000
unkown
page read and write
clean
7FF598BE4000
unkown image
page readonly
clean
7FF5170AB000
unkown image
page readonly
clean
7DF5DA820000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1FF83A00000
unkown image
page read and write
clean
1ED78600000
unkown
page read and write
clean
7FF5CCBB1000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF5CCAA7000
unkown image
page readonly
clean
1ED78659000
unkown
page read and write
clean
7FF5ADA3B000
unkown image
page readonly
clean
1ED7864D000
unkown
page read and write
clean
1EB492DF000
unkown
page read and write
clean
191FF700000
unkown
page read and write
clean
7FF5DA951000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF5CCAD3000
unkown image
page readonly
clean
7DF5E85B2000
unkown image
page readonly
clean
7FF516CC9000
unkown image
page readonly
clean
7DF5D6EB2000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
7DF5A71D0000
unkown image
page readonly
clean
22B28C60000
unkown image
page readonly
clean
72FB1000
unkown image
page execute read
clean
7DF524DC0000
unkown image
page readonly
clean
22B29000000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7DF5D6ED0000
unkown image
page readonly
clean
450000
heap default
page read and write
clean
3210000
unkown
page read and write
clean
7FF516F72000
unkown image
page readonly
clean
3E9D7FE000
stack
page read and write
clean
39243FE000
stack
page read and write
clean
1EB49B99000
unkown
page read and write
clean
7FF5AD9FD000
unkown image
page readonly
clean
7FF5DA93A000
unkown image
page readonly
clean
1FF83A20000
unkown image
page readonly
clean
22B28520000
unkown image
page readonly
clean
2865EA70000
unkown
page read and write
clean
7DF5BB770000
unkown image
page readonly
clean
7FF51714A000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7DF524DD0000
unkown image
page readonly
clean
795FD77000
stack
page read and write
clean
1EB4A000000
unkown
page read and write
clean
7FF5CCAB9000
unkown image
page readonly
clean
1EB49B98000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
9FE000
stack
page read and write
clean
1ED7863C000
unkown
page read and write
clean
1EB49BB7000
unkown
page read and write
clean
7FF5994CD000
unkown image
page readonly
clean
1EB49B91000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5C9062000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1EB4923C000
unkown
page read and write
clean
7DF5BB762000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
1EB49B92000
unkown
page read and write
clean
7FF5994A3000
unkown image
page readonly
clean
9D6E8FF000
stack
page read and write
clean
407000
unkown image
page readonly
clean
1ED78629000
unkown
page read and write
clean
191FF7D1000
heap default
page read and write
clean
1EB4924C000
unkown
page read and write
clean
566000
unkown
page read and write
clean
7FF599301000
unkown image
page readonly
clean
7DF524DE0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF517022000
unkown image
page readonly
clean
2865EED0000
unkown image
page readonly
clean
7FF516F15000
unkown image
page readonly
clean
7FF5DA922000
unkown image
page readonly
clean
565000
unkown
page read and write
clean
E432F7F000
stack
page read and write
clean
ACC54FE000
stack
page read and write
clean
49E000
stack
page read and write
clean
7DF5E85B0000
unkown image
page readonly
clean
191FFE60000
unkown image
page readonly
clean
7FF52AF97000
unkown image
page readonly
clean
FE9877F000
stack
page read and write
clean
7DF524DC0000
unkown image
page readonly
clean
7FF517083000
unkown image
page readonly
clean
7FF5DA7AB000
unkown image
page readonly
clean
7FF5DA929000
unkown image
page readonly
clean
565000
unkown
page read and write
clean
1EB492BE000
unkown
page read and write
clean
332B000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1EB49B96000
unkown
page read and write
clean
7DF436BA0000
unkown image
page readonly
clean
1EB49B64000
unkown
page read and write
clean
22B28636000
unkown
page read and write
clean
2865F202000
unkown
page read and write
clean
1EB49B96000
unkown
page read and write
clean
4A0000
unkown image
page execute and read and write
clean
1EB49BD0000
unkown
page read and write
clean
7FF52A744000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
7DF5BB770000
unkown image
page readonly
clean
1EB49000000
unkown image
page readonly
clean
7FF5CCB9A000
unkown image
page readonly
clean
FE9847C000
stack
page read and write
clean
1FF83C68000
unkown
page read and write
clean
7FF516F11000
unkown image
page readonly
clean
635000
heap default
page read and write
clean
3196000
unkown
page read and write
clean
7FF5DA859000
unkown image
page readonly
clean
7FF5C9251000
unkown image
page readonly
clean
7FF516CC7000
unkown image
page readonly
clean
FE986FD000
stack
page read and write
clean
1EB4A002000
unkown
page read and write
clean
3E9D77A000
stack
page read and write
clean
3E9D3EE000
stack
page read and write
clean
1EB492EF000
unkown
page read and write
clean
565000
unkown
page read and write
clean
3E9D879000
stack
page read and write
clean
191803D0000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
1EB49BBB000
unkown
page read and write
clean
7FF5170DD000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
1EB49B8A000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
7FF516837000
unkown image
page readonly
clean
27E262E0000
heap private
page read and write
clean
7DF5DA812000
unkown image
page readonly
clean
1EB49870000
unkown
page read and write
clean
C90000
unkown image
page readonly
clean
7FF5DA8C7000
unkown image
page readonly
clean
2865EA66000
unkown
page read and write
clean
7FF59935F000
unkown image
page readonly
clean
7FF59954A000
unkown image
page readonly
clean
7DF5D6EC2000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1EB4A06A000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5C91AE000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF516F30000
unkown image
page readonly
clean
795FF7D000
stack
page read and write
clean
7FF5C8A6F000
unkown image
page readonly
clean
7FF52B071000
unkown image
page readonly
clean
7FF5167EE000
unkown image
page readonly
clean
1ED78708000
unkown
page read and write
clean
7DF5DA810000
unkown image
page readonly
clean
9D6EA7F000
stack
page read and write
clean
7FF59949B000
unkown image
page readonly
clean
191FF735000
heap private
page read and write
clean
429000
unkown image
page read and write
clean
7FF5DA7D5000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
27E26413000
unkown
page read and write
clean
7FF5ADA1E000
unkown image
page readonly
clean
7FF5ADAD4000
unkown image
page readonly
clean
1EB49B76000
unkown
page read and write
clean
72FB2000
unkown image
page readonly
clean
7FF5D9FDE000
unkown image
page readonly
clean
7FF5DA887000
unkown image
page readonly
clean
22B28600000
unkown
page read and write
clean
2865EA5D000
unkown
page read and write
clean
1EB49BC9000
unkown
page read and write
clean
21C0000
heap private
page read and write
clean
7DF4B9620000
unkown image
page readonly
clean
795FA7E000
stack
page read and write
clean
191FF5E0000
unkown image
page readonly
clean
22B28C50000
unkown image
page readonly
clean
565000
unkown
page read and write
clean
409000
unkown image
page read and write
clean
A00000
unkown image
page readonly
clean
563000
unkown
page read and write
clean
E432B7E000
stack
page read and write
clean
1EB4A100000
unkown
page read and write
clean
7FF5C915D000
unkown image
page readonly
clean
1EB49229000
unkown
page read and write
clean
ACC547B000
stack
page read and write
clean
40000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF5ADA17000
unkown image
page readonly
clean
7FF516F77000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
191FF5A0000
unkown image
page read and write
clean
7FF5C91CD000
unkown image
page readonly
clean
2865EB00000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1EB49B93000
unkown
page read and write
clean
7FF52B049000
unkown image
page readonly
clean
3B3000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
1FF83B50000
unkown
page read and write
clean
7FF599320000
unkown image
page readonly
clean
7FF52B061000
unkown image
page readonly
clean
7FF5ADA6D000
unkown image
page readonly
clean
1EB49B88000
unkown
page read and write
clean
7FF5AD9B2000
unkown image
page readonly
clean
7FF5CCB27000
unkown image
page readonly
clean
7DF538CD2000
unkown image
page readonly
clean
E432E7F000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF517151000
unkown image
page readonly
clean
7FF5C8A51000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
1EB49B8E000
unkown
page read and write
clean
1EB49880000
unkown image
page read and write
clean
1FF83B90000
unkown image
page readonly
clean
381000
unkown
page read and write
clean
7DF5D6EC0000
unkown image
page readonly
clean
1EB49BAA000
unkown
page read and write
clean
556000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
27E2644E000
unkown
page read and write
clean
270E000
stack
page read and write
clean
554000
unkown
page read and write
clean
1EB492AF000
unkown
page read and write
clean
7FF5DA75F000
unkown image
page readonly
clean
191FF8C0000
unkown
page read and write
clean
7DF5E85C0000
unkown image
page readonly
clean
4BA000
heap default
page read and write
clean
42C000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
1EB49B84000
unkown
page read and write
clean
1ED78702000
unkown
page read and write
clean
610000
unkown
page read and write
clean
1FF83C67000
unkown
page read and write
clean
1EB49B25000
unkown
page read and write
clean
7DF538CD0000
unkown image
page readonly
clean
55F000
unkown
page read and write
clean
7FF5C8AD9000
unkown image
page readonly
clean
191FF813000
unkown
page read and write
clean
27E262F0000
unkown image
page readonly
clean
1EB49B93000
unkown
page read and write
clean
1EB49870000
unkown
page read and write
clean
1FF83BD0000
heap private
page read and write
clean
237F000
stack
page read and write
clean
7FF517161000
unkown image
page readonly
clean
77F000
stack
page read and write
clean
27E26402000
unkown
page read and write
clean
7FF5ADAEA000
unkown image
page readonly
clean
7DF4E6480000
unkown image
page readonly
clean
1EB49050000
heap default
page read and write
clean
E432C7B000
stack
page read and write
clean
7FF52B054000
unkown image
page readonly
clean
1EB49B92000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
7FF5AD9F9000
unkown image
page readonly
clean
7DF5D6EB0000
unkown image
page readonly
clean
1EB48FE0000
unkown image
page read and write
clean
27E26310000
unkown image
page readonly
clean
7FF5AD9E7000
unkown image
page readonly
clean
7DF5BB752000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
563000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF5C8ADE000
unkown image
page readonly
clean
1EB49BD3000
unkown
page read and write
clean
1FF83C51000
unkown
page read and write
clean
2865E9A0000
heap default
page read and write
clean
7FF5ADAC2000
unkown image
page readonly
clean
7FF5DA8CD000
unkown image
page readonly
clean
55F000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
191FF739000
heap private
page read and write
clean
19180600000
unkown image
page read and write
clean
7FF5DA8CA000
unkown image
page readonly
clean
810000
stack
page read and write
clean
7FF5C9170000
unkown image
page readonly
clean
566000
unkown
page read and write
clean
1EB49B97000
unkown
page read and write
clean
7DF5DA822000
unkown image
page readonly
clean
3E9D67D000
stack
page read and write
clean
332F000
unkown
page read and write
clean
7FF516C47000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
1FF840C0000
unkown image
page readonly
clean
21E0000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
7FF516FCC000
unkown image
page readonly
clean
7FF599473000
unkown image
page readonly
clean
7FF52B042000
unkown image
page readonly
clean
22B28629000
unkown
page read and write
clean
3E9D6FE000
stack
page read and write
clean
E20000
unkown image
page readonly
clean
1EB49308000
unkown
page read and write
clean
27E26448000
unkown
page read and write
clean
1EB49B93000
unkown
page read and write
clean
558000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7FF5170D7000
unkown image
page readonly
clean
7FF5C923A000
unkown image
page readonly
clean
1EB4A003000
unkown
page read and write
clean
795FE7E000
stack
page read and write
clean
1ED78655000
unkown
page read and write
clean
305A000
unkown
page read and write
clean
7FF5DA8AE000
unkown image
page readonly
clean
7DF5E85C2000
unkown image
page readonly
clean
4B0000
heap default
page read and write
clean
7FFB2000
unkown image
page readonly
clean
27E2646F000
unkown
page read and write
clean
1ED78670000
unkown
page read and write
clean
7FF5CC961000
unkown image
page readonly
clean
ACC57FE000
stack
page read and write
clean
400000
unkown image
page readonly
clean
1ED78AD0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7DF5E85D0000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1EB49268000
unkown
page read and write
clean
7FF5D9FE4000
unkown image
page readonly
clean
7FF5AD9D4000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
1EB49B8B000
unkown
page read and write
clean
7FF52B065000
unkown image
page readonly
clean
27E26500000
unkown
page read and write
clean
7FF5C9245000
unkown image
page readonly
clean
7FF5CC980000
unkown image
page readonly
clean
2865EB13000
unkown
page read and write
clean
7FF5C915F000
unkown image
page readonly
clean
7FF5994CA000
unkown image
page readonly
clean
1EB49B95000
unkown
page read and write
clean
7DF5BB760000
unkown image
page readonly
clean
1EB49A02000
unkown
page read and write
clean
23C0000
unkown
page read and write
clean
7DF5A71B2000
unkown image
page readonly
clean
1EB49255000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF5DA85D000
unkown image
page readonly
clean
22B28520000
unkown image
page readonly
clean
1EB4928A000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1EB49B96000
unkown
page read and write
clean
7FF516DE5000
unkown image
page readonly
clean
2280000
heap private
page read and write
clean
2865EB08000
unkown
page read and write
clean
7FF5CCB2D000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
1EB49B97000
unkown
page read and write
clean
7DF5DA830000
unkown image
page readonly
clean
7FF5B5161000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
1EB49249000
unkown
page read and write
clean
1EB4A06A000
unkown
page read and write
clean
7DF5A71B0000
unkown image
page readonly
clean
7DF538CE2000
unkown image
page readonly
clean
7FF599522000
unkown image
page readonly
clean
630000
heap default
page read and write
clean
9D6EB7D000
stack
page read and write
clean
2865E950000
unkown image
page readonly
clean
22B28613000
unkown
page read and write
clean
7FF5CCA0B000
unkown image
page readonly
clean
7FF5C8A6A000
unkown image
page readonly
clean
1EB49BAA000
unkown
page read and write
clean
191FF7C0000
heap default
page read and write
clean
1ED78700000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
21F0000
heap private
page read and write
clean
7FF5AD7A7000
unkown image
page readonly
clean
2865EA02000
unkown
page read and write
clean
7FF51703A000
unkown image
page readonly
clean
7FF5CCAC3000
unkown image
page readonly
clean
1EB49BA6000
unkown
page read and write
clean
E4326CB000
unkown
page read and write
clean
820000
stack
page read and write
clean
392427E000
stack
page read and write
clean
7DF5A71D0000
unkown image
page readonly
clean
7FF5ADA6A000
unkown image
page readonly
clean
7FF5CC936000
unkown image
page readonly
clean
1ED788D0000
unkown image
page readonly
clean
27E2648F000
unkown
page read and write
clean
7FF599031000
unkown image
page readonly
clean
332F000
unkown
page read and write
clean
7FF59945F000
unkown image
page readonly
clean
1EB49213000
unkown
page read and write
clean
191FF5F0000
unkown image
page readonly
clean
1EB49BAC000
unkown
page read and write
clean
7FF5ADA10000
unkown image
page readonly
clean
7FF516D37000
unkown image
page readonly
clean
7FF516834000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
191FF812000
unkown
page read and write
clean
1EB49302000
unkown
page read and write
clean
1EB49B93000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF517097000
unkown image
page readonly
clean
1FF83C40000
heap default
page read and write
clean
1EB491A0000
unkown image
page write copy
clean
FE984FE000
stack
page read and write
clean
7DF5D6EB0000
unkown image
page readonly
clean
1EB49030000
unkown image
page readonly
clean
1EB49B97000
unkown
page read and write
clean
558000
unkown
page read and write
clean
7FF5DA73B000
unkown image
page readonly
clean
1EB4A102000
unkown
page read and write
clean
3020000
unkown image
page readonly
clean
19A000
unkown
page read and write
clean
9D6E6F7000
stack
page read and write
clean
19B000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
7FF5DA94A000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1EB49B8A000
unkown
page read and write
clean
7DF524DC2000
unkown image
page readonly
clean
7FF59945D000
unkown image
page readonly
clean
7FF5C9222000
unkown image
page readonly
clean
332F000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7FF599487000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF51715A000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
27E26480000
unkown
page read and write
clean
566000
unkown
page read and write
clean
7DF524DD2000
unkown image
page readonly
clean
1EB4A002000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7FF517080000
unkown image
page readonly
clean
7DF538CF0000
unkown image
page readonly
clean
1EB4925D000
unkown
page read and write
clean
1EB49B98000
unkown
page read and write
clean
7DF538CF0000
unkown image
page readonly
clean
7FF5DA7BC000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF5C8FEA000
unkown image
page readonly
clean
7FF5DA701000
unkown image
page readonly
clean
7FF51706F000
unkown image
page readonly
clean
7FF516E6B000
unkown image
page readonly
clean
7FF5C9229000
unkown image
page readonly
clean
7DF5D6ED0000
unkown image
page readonly
clean
7DF5E85B2000
unkown image
page readonly
clean
1EB4A002000
unkown
page read and write
clean
1ED78658000
unkown
page read and write
clean
27E268D0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
1ED78560000
unkown image
page read and write
clean
7FF5DA863000
unkown image
page readonly
clean
1EB49B8A000
unkown
page read and write
clean
1FF83C56000
heap default
page read and write
clean
7FF517144000
unkown image
page readonly
clean
7FF5AD1AB000
unkown image
page readonly
clean
7FF517011000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7DF5BB750000
unkown image
page readonly
clean
7FF5CCBAA000
unkown image
page readonly
clean
7FF5C9163000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
27E262F0000
unkown image
page readonly
clean
1EB4927F000
unkown
page read and write
clean
191FF813000
unkown
page read and write
clean
A90000
unkown image
page readonly
clean
7FF5CCAD7000
unkown image
page readonly
clean
2865E9D0000
unkown
page read and write
clean
558000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
27E26C02000
unkown
page read and write
clean
7FF5C8A68000
unkown image
page readonly
clean
7DF5DA812000
unkown image
page readonly
clean
7FF5C9251000
unkown image
page readonly
clean
7FF52B06A000
unkown image
page readonly
clean
563000
unkown
page read and write
clean
7FF51706D000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1EB49BB3000
unkown
page read and write
clean
7DF524DD0000
unkown image
page readonly
clean
191FFE50000
unkown image
page readonly
clean
3923F3A000
unkown
page read and write
clean
191FFCD0000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
27E26453000
unkown
page read and write
clean
7FF52AF7F000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF5ADAE5000
unkown image
page readonly
clean
22B28E02000
unkown
page read and write
clean
795FC7B000
stack
page read and write
clean
191FF6E0000
unkown
page read and write
clean
72FB0000
unkown image
page readonly
clean
ACC55F7000
stack
page read and write
clean
295F000
stack
page read and write
clean
1EB49268000
unkown
page read and write
clean
22B28658000
unkown
page read and write
clean
566000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
7FF517073000
unkown image
page readonly
clean
FE985FE000
stack
page read and write
clean
1EB49B88000
unkown
page read and write
clean
4A0000
unkown image
page readonly
clean
1EB4924E000
unkown
page read and write
clean
7FF5DA87E000
unkown image
page readonly
clean
7FF5DA873000
unkown image
page readonly
clean
563000
unkown
page read and write
clean
7DF524DC2000
unkown image
page readonly
clean
1EB49BAC000
unkown
page read and write
clean
7DF5DA822000
unkown image
page readonly
clean
27E262D0000
unkown image
page read and write
clean
7FF516FBB000
unkown image
page readonly
clean
22B28570000
heap default
page read and write
clean
7FF5ADAF1000
unkown image
page readonly
clean
42C000
unkown image
page readonly
clean
7DF4D4D80000
unkown image
page readonly
clean
7FF5DA877000
unkown image
page readonly
clean
7FF5993D5000
unkown image
page readonly
clean
1EB492F9000
unkown
page read and write
clean
FE9837E000
stack
page read and write
clean
223E000
stack
page read and write
clean
7DF5A71C0000
unkown image
page readonly
clean
7FF5CC691000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
567000
unkown
page read and write
clean
1EB49B9C000
unkown
page read and write
clean
7FF51704E000
unkown image
page readonly
clean
1ED78580000
unkown image
page readonly
clean
2865EB02000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1EB49B91000
unkown
page read and write
clean
191FF5C0000
unkown image
page readonly
clean
2865EA13000
unkown
page read and write
clean
551000
unkown
page read and write
clean
7FF5C9241000
unkown image
page readonly
clean
562000
unkown
page read and write
clean
1EB492D6000
unkown
page read and write
clean
1FF83B30000
unkown
page read and write
clean
1EB49B99000
unkown
page read and write
clean
1EB49B84000
unkown
page read and write
clean
22B285A0000
unkown
page read and write
clean
7FF599447000
unkown image
page readonly
clean
27E2644B000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
7DF5A71C2000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FF599037000
unkown image
page readonly
clean
1EB49258000
unkown
page read and write
clean
1EB49251000
unkown
page read and write
clean
7FF52AFCE000
unkown image
page readonly
clean
7FF5993BC000
unkown image
page readonly
clean
7FF5C91A2000
unkown image
page readonly
clean
1EB4925C000
unkown
page read and write
clean
22B28702000
unkown
page read and write
clean
7FF5DA720000
unkown image
page readonly
clean
3923FBF000
stack
page read and write
clean
1EB49B91000
unkown
page read and write
clean
9D6E1DE000
stack
page read and write
clean
1EB49B24000
unkown
page read and write
clean
22B28602000
unkown
page read and write
clean
7FF5167F4000
unkown image
page readonly
clean
7FF516E5C000
unkown image
page readonly
clean
1ED78C50000
unkown image
page readonly
clean
7FF5AD80A000
unkown image
page readonly
clean
1EB492A5000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1EB49B91000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF516FB5000
unkown image
page readonly
clean
7FF599551000
unkown image
page readonly
clean
27E26370000
unkown
page read and write
clean
1FF83A40000
unkown image
page readonly
clean
191FF5B0000
unkown
page read and write
clean
7FF5C9156000
unkown image
page readonly
clean
72FB0000
unkown image
page readonly
clean
1EB4A002000
unkown
page read and write
clean
7DF5E85D0000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7DF5DA810000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF599534000
unkown image
page readonly
clean
9D6E15E000
stack
page read and write
clean
7DF5A71C2000
unkown image
page readonly
clean
2865F050000
unkown image
page readonly
clean
554000
unkown
page read and write
clean
1EB49BA6000
unkown
page read and write
clean
285E000
stack
page read and write
clean
440000
unkown
page read and write
clean
7FF5C9234000
unkown image
page readonly
clean
191806A0000
unkown
page read and write
clean
22B285D0000
unkown
page read and write
clean
7FF5ADA4E000
unkown image
page readonly
clean
7FF516FE1000
unkown image
page readonly
clean
E432D77000
stack
page read and write
clean
1EB49B98000
unkown
page read and write
clean
1EB49B91000
unkown
page read and write
clean
9D000
unkown
page read and write
clean
7FF516ACB000
unkown image
page readonly
clean
7DF5BB762000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7DF5E85C0000
unkown image
page readonly
clean
7FF5DA85F000
unkown image
page readonly
clean
1ED78580000
unkown image
page readonly
clean
7FF5CCAD0000
unkown image
page readonly
clean
191FFAD0000
unkown image
page readonly
clean
7FF5993D1000
unkown image
page readonly
clean
7FF516E27000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
280F000
stack
page read and write
clean
1EB49B99000
unkown
page read and write
clean
1EB49254000
unkown
page read and write
clean
563000
unkown
page read and write
clean
1EB4A002000
unkown
page read and write
clean
7DF5A71B2000
unkown image
page readonly
clean
4A0000
unkown
page execute and read and write
clean
1ED785E0000
unkown image
page readonly
clean
1EB49B91000
unkown
page read and write
clean
7FF5ADAF1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2865ECD0000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
7DF5D6EC2000
unkown image
page readonly
clean
27E26502000
unkown
page read and write
clean
191FF7C9000
heap default
page read and write
clean
510000
heap default
page read and write
clean
27E2648C000
unkown
page read and write
clean
7FF516EC5000
unkown image
page readonly
clean
1EB49BBE000
unkown
page read and write
clean
7FF5CCB0E000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1EB49B94000
unkown
page read and write
clean
1EB49B4E000
unkown
page read and write
clean
7FF516EA4000
unkown image
page readonly
clean
7FF599529000
unkown image
page readonly
clean
1ED7864B000
unkown
page read and write
clean
19180360000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
7FF5ADADA000
unkown image
page readonly
clean
7FF5DA6D6000
unkown image
page readonly
clean
7FF52AFEA000
unkown image
page readonly
clean
27E2643C000
unkown
page read and write
clean
7FF5CCABF000
unkown image
page readonly
clean
7FF517132000
unkown image
page readonly
clean
7FF599477000
unkown image
page readonly
clean
7FF599459000
unkown image
page readonly
clean
7FF52B05A000
unkown image
page readonly
clean
1ED785B0000
unkown image
page readonly
clean
7FF5C9166000
unkown image
page readonly
clean
1EB4A13C000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1EB4A021000
unkown
page read and write
clean
7FF5994AE000
unkown image
page readonly
clean
7FF52AF86000
unkown image
page readonly
clean
7FF5CC697000
unkown image
page readonly
clean
7FF5ADA67000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
2865EA2A000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1EB49780000
unkown image
page readonly
clean
1EB49150000
unkown
page read and write
clean
1EB49000000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF5C90BC000
unkown image
page readonly
clean
1ED78613000
unkown
page read and write
clean
1EB49B88000
unkown
page read and write
clean
7FF59953A000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7DF4A5080000
unkown image
page readonly
clean
1EB48FF0000
heap private
page read and write
clean
7FF516F2D000
unkown image
page readonly
clean
1EB49270000
unkown
page read and write
clean
1EB49B90000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1EB49B96000
unkown
page read and write
clean
7FF5ADA03000
unkown image
page readonly
clean
7FF5CCB82000
unkown image
page readonly
clean
9D6E7F7000
stack
page read and write
clean
FE983FF000
stack
page read and write
clean
7FF52AFBB000
unkown image
page readonly
clean
7FF5C919B000
unkown image
page readonly
clean
E43274E000
stack
page read and write
clean
7FF516C41000
unkown image
page readonly
clean
19180650000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7DF5BB750000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
7FF52B071000
unkown image
page readonly
clean
566000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
27E26320000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7FF5AD7B0000
unkown image
page readonly
clean
39242FE000
stack
page read and write
clean
9D6E5F8000
stack
page read and write
clean
1EB4924B000
unkown
page read and write
clean
7FF599541000
unkown image
page readonly
clean
7FF51700F000
unkown image
page readonly
clean
1ED78713000
unkown
page read and write
clean
558000
unkown
page read and write
clean
19E000
unkown
page execute and read and write
clean
400000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7DF5BB752000
unkown image
page readonly
clean
ACC527E000
stack
page read and write
clean
7FF52AF7D000
unkown image
page readonly
clean
7FF516F19000
unkown image
page readonly
clean
1EB49B80000
unkown
page read and write
clean
7FF5DA71D000
unkown image
page readonly
clean
7FF517057000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
1EB49020000
unkown image
page readonly
clean
7FF517043000
unkown image
page readonly
clean
392447C000
stack
page read and write
clean
7FF599551000
unkown image
page readonly
clean
556000
unkown
page read and write
clean
7FF5170DA000
unkown image
page readonly
clean
27E26350000
unkown image
page readonly
clean
7FF516EE6000
unkown image
page readonly
clean
7FF5ADA43000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1EB492EF000
unkown
page read and write
clean
7FF52AFED000
unkown image
page readonly
clean
7DF5DA830000
unkown image
page readonly
clean
7FF516EBF000
unkown image
page readonly
clean
191FF5C0000
unkown image
page readonly
clean
1EB49B72000
unkown
page read and write
clean
7FF5CCADE000
unkown image
page readonly
clean
27E26340000
heap default
page read and write
clean
7FF5ADA13000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
19180620000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
1EB49B9C000
unkown
page read and write
clean
1EB49B95000
unkown
page read and write
clean
2865EA83000
unkown
page read and write
clean
4F2000
heap default
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5DA89B000
unkown image
page readonly
clean
191FF730000
heap private
page read and write
clean
1EB4A002000
unkown
page read and write
clean
1EB49B98000
unkown
page read and write
clean
7FF5C9067000
unkown image
page readonly
clean
22B285D0000
unkown
page read and write
clean
1EB4A002000
unkown
page read and write
clean
7FF5CCB03000
unkown image
page readonly
clean
567000
unkown
page read and write
clean
3924379000
stack
page read and write
clean
7FF5CCABD000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7DF5A71B0000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
2865E9B0000
unkown image
page readonly
clean
191FF720000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1EB4A19D000
unkown
page read and write
clean
1ED78650000
unkown
page read and write
clean
1ED78653000
unkown
page read and write
clean
7FF5993A5000
unkown image
page readonly
clean
7FF5992D6000
unkown image
page readonly
clean
281F000
stack
page read and write
clean
22B28550000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
1EB49B77000
unkown
page read and write
clean
1EB49BA4000
unkown
page read and write
clean
27E26513000
unkown
page read and write
clean
1EB49B93000
unkown
page read and write
clean
566000
unkown
page read and write
clean
7FF52A747000
unkown image
page readonly
clean
22B28500000
unkown image
page read and write
clean
40000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
7FF5CCA1C000
unkown image
page readonly
clean
795F7CF000
stack
page read and write
clean
7FF5DA7D1000
unkown image
page readonly
clean
562000
unkown
page read and write
clean
7FF52AF93000
unkown image
page readonly
clean
26CF000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1EB49B18000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
7FF52AFC3000
unkown image
page readonly
clean
1EB492E1000
unkown
page read and write
clean
7FF516EA6000
unkown image
page readonly
clean
7FF59933B000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
7DF4D86E0000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
4A0000
unkown
page execute and read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF599470000
unkown image
page readonly
clean
1ED78570000
heap private
page read and write
clean
7FF5ADAE1000
unkown image
page readonly
clean
7FF517069000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
563000
unkown
page read and write
clean
1ED78656000
unkown
page read and write
clean
7FF52AF9E000
unkown image
page readonly
clean
42C000
unkown image
page readonly
clean
7FF5C91CA000
unkown image
page readonly
clean
7FF5DA8A3000
unkown image
page readonly
clean
7FF598BDE000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF516AC7000
unkown image
page readonly
clean
1EB4927E000
unkown
page read and write
clean
1EB49B75000
unkown
page read and write
clean
7FF5AD9BE000
unkown image
page readonly
clean
ACC537B000
stack
page read and write
clean
7FF5C8A59000
unkown image
page readonly
clean
409000
unkown image
page write copy
clean
7FF52AF83000
unkown image
page readonly
clean
7FF5CCBA1000
unkown image
page readonly
clean
7FF5993AB000
unkown image
page readonly
clean
7FF5C9173000
unkown image
page readonly
clean
7FF599463000
unkown image
page readonly
clean
22B28640000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2240000
unkown
page read and write
clean
1EB49B7C000
unkown
page read and write
clean
7FF5CCAFB000
unkown image
page readonly
clean
2865E950000
unkown image
page readonly
clean
1FF83D40000
unkown image
page readonly
clean
7FF5CC9BF000
unkown image
page readonly
clean
191FF801000
heap default
page read and write
clean
7FF516E32000
unkown image
page readonly
clean
7FF5DA648000
unkown image
page readonly
clean
7FF5C8E20000
unkown image
page readonly
clean
7FF517087000
unkown image
page readonly
clean
7FF516ADC000
unkown image
page readonly
clean
2247000
unkown
page read and write
clean
7DF5DA820000
unkown image
page readonly
clean
1EB49B83000
unkown
page read and write
clean
7FF5DA5D5000
unkown image
page readonly
clean
1EB49B96000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FFD0000
unkown image
page readonly
clean
565000
unkown
page read and write
clean
1EB49B87000
unkown
page read and write
clean
2865EA8C000
unkown
page read and write
clean
2865EA53000
unkown
page read and write
clean
1EB49B93000
unkown
page read and write
clean
558000
unkown
page read and write
clean
7FF5DA870000
unkown image
page readonly
clean
27E26508000
unkown
page read and write
clean
2810000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5CCB2A000
unkown image
page readonly
clean
422000
unkown image
page read and write
clean
1EB49BAA000
unkown
page read and write
clean
1EB49B5F000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
ACC4F3B000
unkown
page read and write
clean
FE9887D000
stack
page read and write
clean
1EB49B96000
unkown
page read and write
clean
27E26A50000
unkown image
page readonly
clean
2865E970000
unkown image
page readonly
clean
7FF5ADA48000
unkown image
page readonly
clean
7FF59931D000
unkown image
page readonly
clean
19180370000
unkown
page read and write
clean
191FF830000
heap default
page read and write
clean
1EB49B83000
unkown
page read and write
clean
9D6E9FA000
stack
page read and write
clean
7DF524DE0000
unkown image
page readonly
clean
7FF516FE5000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
19180630000
unkown
page readonly
clean
3210000
unkown
page read and write
clean
7FF5CCB94000
unkown image
page readonly
clean
7FF52AF90000
unkown image
page readonly
clean
ACC4FBE000
stack
page read and write
clean
2865EA00000
unkown
page read and write
clean
4A0000
unkown
page execute and read and write
clean
8BE000
stack
page read and write
clean
1EB49B51000
unkown
page read and write
clean
7DF5E85C2000
unkown image
page readonly
clean
7FF5DA847000
unkown image
page readonly
clean
7FF5CCB89000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
7FF5CC835000
unkown image
page readonly
clean
27E266D0000
unkown image
page readonly
clean
2865E930000
unkown image
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1EB49200000
unkown
page read and write
clean
55B000
unkown
page read and write
clean
E10000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
7FF5DA941000
unkown image
page readonly
clean
1ED78E02000
unkown
page read and write
clean
1EB49BC0000
unkown
page read and write
clean
7FF516F4B000
unkown image
page readonly
clean
7DF538CD0000
unkown image
page readonly
clean
7DF5E85B0000
unkown image
page readonly
clean
7FF516D34000
unkown image
page readonly
clean
551000
unkown
page read and write
clean
1EB49B99000
unkown
page read and write
clean
7FF5CCA05000
unkown image
page readonly
clean
7FF5B5161000
unkown image
page readonly
clean
1EB49B84000
unkown
page read and write
clean
7DF422C90000
unkown image
page readonly
clean
37D000
unkown
page read and write
clean
7DF524DD2000
unkown image
page readonly
clean
1FF83F40000
unkown image
page readonly
clean
1EB49B15000
unkown
page read and write
clean
1EB49180000
unkown image
page readonly
clean
500000
unkown image
page readonly
clean
There are 1040 hidden memdumps, click here to show them.