IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Cotizaci#U00f3npdf.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\Temp\nsc114F.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\nsc1150.tmp\tjbqk.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\p6r1xk6jk0bjdf9059l3
data
dropped
clean
C:\Users\user\AppData\Local\Temp\tmdvzsircx
data
dropped
clean
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\89dad5d484a9f889a3a8dfca823edc3e_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Cotizaci#U00f3npdf.exe
"C:\Users\user\Desktop\Cotizaci#U00f3npdf.exe"
malicious
C:\Users\user\Desktop\Cotizaci#U00f3npdf.exe
"C:\Users\user\Desktop\Cotizaci#U00f3npdf.exe"
malicious

URLs

Name
IP
Malicious
http://kbfvzoboss.bid/alien/fre.php
malicious
http://alphastand.win/alien/fre.php
malicious
http://alphastand.trade/alien/fre.php
malicious
http://alphastand.top/alien/fre.php
malicious
http://slimpackage.com/slimmain/five/fre.php
104.223.93.105
malicious
http://nsis.sf.net/NSIS_Error
unknown
clean
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
http://www.ibsensoftware.com/
unknown
clean

Domains

Name
IP
Malicious
slimpackage.com
104.223.93.105
malicious

IPs

IP
Domain
Country
Malicious
104.223.93.105
slimpackage.com
United States
malicious
192.168.2.1
unknown
unknown
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
3040000
unkown
page read and write
malicious
728000
heap default
page read and write
malicious
745000
unkown
page read and write
malicious
7FF57B674000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
7FF5DF39C000
unkown image
page readonly
clean
22B56476000
unkown
page read and write
clean
7DF5C6DE0000
unkown image
page readonly
clean
254E5645000
unkown
page read and write
clean
7FF5DECE6000
unkown image
page readonly
clean
7FF566DEC000
unkown image
page readonly
clean
7FF5E5AEA000
unkown image
page readonly
clean
7FF5B69CC000
unkown image
page readonly
clean
7DF5C6DF0000
unkown image
page readonly
clean
22C0000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
7FF5B13D7000
unkown image
page readonly
clean
7DF590F82000
unkown image
page readonly
clean
22B56BF0000
unkown
page read and write
clean
775000
unkown
page read and write
clean
42C000
unkown image
page readonly
clean
22B5B8D0000
unkown
page read and write
clean
77B000
unkown
page read and write
clean
10C69FE000
stack
page read and write
clean
7DF4F2C70000
unkown image
page readonly
clean
7FF5463B8000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7DF5FB490000
unkown image
page readonly
clean
22B56BC1000
unkown
page read and write
clean
22B57410000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5B13F8000
unkown image
page readonly
clean
4A0000
unkown
page execute and read and write
clean
1A7A5B13000
unkown
page read and write
clean
22E80613000
unkown
page read and write
clean
10C71FF000
stack
page read and write
clean
785000
unkown
page read and write
clean
F096A7E000
stack
page read and write
clean
26F34668000
unkown
page read and write
clean
7FF567253000
unkown image
page readonly
clean
7FF5B14C4000
unkown image
page readonly
clean
26F34702000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
9D000
unkown
page read and write
clean
7DF55F220000
unkown image
page readonly
clean
22B5648E000
unkown
page read and write
clean
77C000
unkown
page read and write
clean
7FF5498F4000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
7FF55679D000
unkown image
page readonly
clean
272F000
stack
page read and write
clean
CC638FC000
stack
page read and write
clean
7FF5B13E7000
unkown image
page readonly
clean
22B56D59000
unkown
page read and write
clean
7FF5498FE000
unkown image
page readonly
clean
4B0000
heap default
page read and write
clean
7FF5569E4000
unkown image
page readonly
clean
7DF5FB492000
unkown image
page readonly
clean
22B57890000
unkown
page read and write
clean
7FF567493000
unkown image
page readonly
clean
22E80E02000
unkown
page read and write
clean
7DF56C310000
unkown image
page readonly
clean
7FF5B149F000
unkown image
page readonly
clean
1A7A6130000
unkown
page read and write
clean
785000
unkown
page read and write
clean
422000
unkown image
page read and write
clean
22B56413000
unkown
page read and write
clean
7FF54632D000
unkown image
page readonly
clean
7FF5E5B9B000
unkown image
page readonly
clean
271E000
stack
page read and write
clean
7FF54981C000
unkown image
page readonly
clean
CC633FB000
stack
page read and write
clean
785000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
4BA000
heap default
page read and write
clean
76B000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5B665A000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF5E596E000
unkown image
page readonly
clean
7FF5B69E7000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF57B64F000
unkown image
page readonly
clean
7FF5674CD000
unkown image
page readonly
clean
764000
unkown
page read and write
clean
7DF56C2F0000
unkown image
page readonly
clean
7FF5B692F000
unkown image
page readonly
clean
254E54D0000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
1A7A5980000
unkown image
page readonly
clean
7FF5DF4AF000
unkown image
page readonly
clean
233BB3A0000
unkown
page read and write
clean
7FF5B14BD000
unkown image
page readonly
clean
26F34410000
heap default
page read and write
clean
40000
unkown image
page readonly
clean
7DF57CEA0000
unkown image
page readonly
clean
16B6DAF0000
heap private
page read and write
clean
7FF5B14AB000
unkown image
page readonly
clean
7FF5B1423000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7DF55BD10000
unkown image
page readonly
clean
233BB3D0000
unkown
page read and write
clean
7FF5569FF000
unkown image
page readonly
clean
7FF5E5AE3000
unkown image
page readonly
clean
22B5647A000
unkown
page read and write
clean
254E5663000
unkown
page read and write
clean
7FF57B660000
unkown image
page readonly
clean
7FF5E5B8B000
unkown image
page readonly
clean
7DF55BCF0000
unkown image
page readonly
clean
281F000
stack
page read and write
clean
22B5BD00000
unkown
page read and write
clean
7FF5B679E000
unkown image
page readonly
clean
7DF57CEB0000
unkown image
page readonly
clean
1A7A5A6A000
unkown
page read and write
clean
785000
unkown
page read and write
clean
775000
unkown
page read and write
clean
22B56340000
unkown image
page readonly
clean
7FF567063000
unkown image
page readonly
clean
254E563B000
unkown
page read and write
clean
233BB600000
unkown image
page readonly
clean
16B6E0D0000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
13A7B710000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF5B0FA9000
unkown image
page readonly
clean
22B56502000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7DF5CC3D2000
unkown image
page readonly
clean
13A7B5F0000
unkown image
page readonly
clean
7FF5B6AC4000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7DF55BD02000
unkown image
page readonly
clean
7DF55F210000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7FF5463CB000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
19E000
unkown
page execute and read and write
clean
13A7B5B0000
unkown image
page read and write
clean
8602AFE000
stack
page read and write
clean
22B5BCF3000
unkown
page read and write
clean
7FF5DF415000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7FF5B66B1000
unkown image
page readonly
clean
490000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF57B5C5000
unkown image
page readonly
clean
7DF590F82000
unkown image
page readonly
clean
233BB402000
unkown
page read and write
clean
785000
unkown
page read and write
clean
625000
heap default
page read and write
clean
7FF55687E000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF5B12AE000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
22B564FE000
unkown
page read and write
clean
254E55E0000
unkown image
page readonly
clean
22B5BD06000
unkown
page read and write
clean
254E5662000
unkown
page read and write
clean
F09697B000
stack
page read and write
clean
773000
unkown
page read and write
clean
7FF5E5853000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
22E805E0000
unkown
page read and write
clean
76C000
unkown
page read and write
clean
CC63779000
stack
page read and write
clean
7FF5B6A15000
unkown image
page readonly
clean
7DF5FB4A2000
unkown image
page readonly
clean
69E000
stack
page read and write
clean
CC630FC000
stack
page read and write
clean
7FF5DF3E9000
unkown image
page readonly
clean
7FF5E5B9F000
unkown image
page readonly
clean
26F34800000
unkown image
page readonly
clean
10C6FFE000
stack
page read and write
clean
22E80653000
unkown
page read and write
clean
773000
unkown
page read and write
clean
16B6DB30000
unkown image
page readonly
clean
7FF5B666F000
unkown image
page readonly
clean
7FF5E59F5000
unkown image
page readonly
clean
7FF5B632C000
unkown image
page readonly
clean
26F34A00000
unkown image
page readonly
clean
254E5664000
unkown
page read and write
clean
16B6DAE0000
unkown image
page read and write
clean
773000
unkown
page read and write
clean
13A7B85A000
unkown
page read and write
clean
7FF57B573000
unkown image
page readonly
clean
7FF56759B000
unkown image
page readonly
clean
76F000
unkown
page read and write
clean
769000
unkown
page read and write
clean
1A7A5CD0000
unkown image
page readonly
clean
7FF5B0D2C000
unkown image
page readonly
clean
CC63AFF000
stack
page read and write
clean
254E5649000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
7FF5498CF000
unkown image
page readonly
clean
7FF545C74000
unkown image
page readonly
clean
22E80470000
unkown image
page read and write
clean
22B56C00000
unkown
page read and write
clean
7DF57CEA2000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
7FF5498DB000
unkown image
page readonly
clean
22B5BCF7000
unkown
page read and write
clean
7FF5B668D000
unkown image
page readonly
clean
2CD000
unkown
page read and write
clean
7FF5E5A97000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7FF5E5B84000
unkown image
page readonly
clean
7FF5B6ADF000
unkown image
page readonly
clean
7FF549849000
unkown image
page readonly
clean
7DF57CEB0000
unkown image
page readonly
clean
7FF5673F5000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FF5DF3DD000
unkown image
page readonly
clean
7FF5B6893000
unkown image
page readonly
clean
7DF590F92000
unkown image
page readonly
clean
10C6AFE000
stack
page read and write
clean
660000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF556908000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF5463FF000
unkown image
page readonly
clean
22B5BB30000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7FF5B6803000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
778000
unkown
page read and write
clean
7FF5B67E7000
unkown image
page readonly
clean
22B5B9F0000
unkown
page read and write
clean
1A7A6050000
unkown image
page readonly
clean
7FF55690C000
unkown image
page readonly
clean
7DF46A1C0000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
C10000
unkown image
page readonly
clean
254E567E000
unkown
page read and write
clean
22B56D02000
unkown
page read and write
clean
77A000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
8602A7F000
stack
page read and write
clean
26F34713000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
22B5BA14000
unkown
page read and write
clean
7FF5568F7000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF567414000
unkown image
page readonly
clean
22E80A00000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
EF32FFE000
stack
page read and write
clean
7FF5DF3E5000
unkown image
page readonly
clean
7FF5DF24D000
unkown image
page readonly
clean
37B66FB000
stack
page read and write
clean
7FF54983D000
unkown image
page readonly
clean
22B5BA34000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
22B5BA10000
unkown
page read and write
clean
775000
unkown
page read and write
clean
77A000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7DF5FB492000
unkown image
page readonly
clean
7FF5674B8000
unkown image
page readonly
clean
282E000
unkown
page read and write
clean
7FF546335000
unkown image
page readonly
clean
7FF57B68F000
unkown image
page readonly
clean
254E562E000
unkown
page read and write
clean
440000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
22B56D58000
unkown
page read and write
clean
1A7A5A2A000
unkown
page read and write
clean
7FF5B6877000
unkown image
page readonly
clean
7FF5674E3000
unkown image
page readonly
clean
7FF5B6ABD000
unkown image
page readonly
clean
7FF5674AC000
unkown image
page readonly
clean
12A5C7B000
unkown
page read and write
clean
1A7A5B08000
unkown
page read and write
clean
10C630B000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7FF5569FD000
unkown image
page readonly
clean
7FF5497F2000
unkown image
page readonly
clean
7DF5F4DA2000
unkown image
page readonly
clean
16B6E260000
unkown image
page readonly
clean
1A7A59B0000
unkown image
page readonly
clean
7FF5DF468000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FF567497000
unkown image
page readonly
clean
7DF57CEA0000
unkown image
page readonly
clean
7FF5B6684000
unkown image
page readonly
clean
13A7B5C0000
heap private
page read and write
clean
773000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
254E54E0000
unkown image
page readonly
clean
254E54B0000
unkown image
page readonly
clean
7FF5DF242000
unkown image
page readonly
clean
7DF56C2F2000
unkown image
page readonly
clean
16B6DB60000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF54619D000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
786000
unkown
page read and write
clean
16B6DC6C000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF57CEA2000
unkown image
page readonly
clean
254E5702000
unkown
page read and write
clean
7FF5498DE000
unkown image
page readonly
clean
7FF5498C8000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7DF56C2F0000
unkown image
page readonly
clean
5E3A77000
stack
page read and write
clean
7FF556707000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1BA1A03C000
unkown
page read and write
clean
22BF000
stack
page read and write
clean
7FF5E5A14000
unkown image
page readonly
clean
7FF56756B000
unkown image
page readonly
clean
26F344F0000
unkown image
page readonly
clean
7FF5B69D7000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
7FF5E53EC000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF57B648000
unkown image
page readonly
clean
26F34657000
unkown
page read and write
clean
26F345E0000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
7FF5B14DF000
unkown image
page readonly
clean
7FF5DF3FA000
unkown image
page readonly
clean
7FF5DF00A000
unkown image
page readonly
clean
16B6DD13000
unkown
page read and write
clean
A10000
unkown image
page readonly
clean
1BA1A07D000
unkown
page read and write
clean
7FF5DF49B000
unkown image
page readonly
clean
786000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
76B000
unkown
page read and write
clean
254E5648000
unkown
page read and write
clean
26DF000
stack
page read and write
clean
16B6DCE4000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7FF5B69B0000
unkown image
page readonly
clean
7FF5E576C000
unkown image
page readonly
clean
7FF5E5AD9000
unkown image
page readonly
clean
7FF5569C6000
unkown image
page readonly
clean
254E5631000
unkown
page read and write
clean
16B6DB80000
unkown
page read and write
clean
13A7B800000
unkown
page read and write
clean
13A7BE02000
unkown
page read and write
clean
1BA19DC0000
heap private
page read and write
clean
785000
unkown
page read and write
clean
73321000
unkown image
page execute read
clean
12A65FE000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1BA19E00000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FF5B67CA000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
37B67F7000
stack
page read and write
clean
254E5800000
unkown image
page readonly
clean
22B563A0000
unkown image
page readonly
clean
7DF5F4DA2000
unkown image
page readonly
clean
22E8064B000
unkown
page read and write
clean
1BA1A602000
unkown
page read and write
clean
7FF5E5B7D000
unkown image
page readonly
clean
37B68FF000
stack
page read and write
clean
7FF5569EB000
unkown image
page readonly
clean
7FF5B6298000
unkown image
page readonly
clean
4A0000
unkown image
page execute and read and write
clean
7FFB0000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
76A000
unkown
page read and write
clean
7FF5DF3A5000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
16B6E500000
unkown
page read and write
clean
785000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
1BA1A050000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
2280000
unkown image
page readonly
clean
630000
heap default
page read and write
clean
786000
unkown
page read and write
clean
254E5B80000
unkown image
page readonly
clean
DB0000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
786000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
26F34500000
unkown image
page readonly
clean
7DF57CE90000
unkown image
page readonly
clean
CC62E77000
stack
page read and write
clean
37B69FE000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
26F34600000
unkown
page read and write
clean
2250000
heap private
page read and write
clean
786000
unkown
page read and write
clean
22B5B8E0000
unkown
page read and write
clean
1BA1A000000
unkown
page read and write
clean
76C000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
222E000
stack
page read and write
clean
7FF5DF47E000
unkown image
page readonly
clean
778000
unkown
page read and write
clean
CC634FF000
stack
page read and write
clean
785000
unkown
page read and write
clean
22B5B9F8000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
7FF5B142A000
unkown image
page readonly
clean
76C000
unkown
page read and write
clean
785000
unkown
page read and write
clean
22B57530000
unkown image
page readonly
clean
22B5BA20000
unkown
page read and write
clean
7FF5DF3F3000
unkown image
page readonly
clean
22B56D00000
unkown
page read and write
clean
7FF549853000
unkown image
page readonly
clean
7FF5463D0000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
22B566D0000
unkown image
page readonly
clean
7DF590F80000
unkown image
page readonly
clean
7FF5B6AAE000
unkown image
page readonly
clean
12A627D000
stack
page read and write
clean
7FF5463FB000
unkown image
page readonly
clean
7FF5DF2C6000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
1BA19E20000
heap default
page read and write
clean
7FF57B587000
unkown image
page readonly
clean
1BA1A100000
unkown
page read and write
clean
22E804B0000
unkown image
page readonly
clean
7FF5B1445000
unkown image
page readonly
clean
7FF5B6A45000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
9212F7F000
stack
page read and write
clean
774000
unkown
page read and write
clean
7FF5569D0000
unkown image
page readonly
clean
7FF5568E2000
unkown image
page readonly
clean
1A7A5A53000
unkown
page read and write
clean
7DF56C302000
unkown image
page readonly
clean
254E5685000
unkown
page read and write
clean
7FF5E5B9F000
unkown image
page readonly
clean
7FF5B6611000
unkown image
page readonly
clean
7FF5569FF000
unkown image
page readonly
clean
13A7B862000
unkown
page read and write
clean
7FF5B1415000
unkown image
page readonly
clean
5E36FE000
stack
page read and write
clean
407000
unkown image
page readonly
clean
7FF5B6954000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF556939000
unkown image
page readonly
clean
7DF55F202000
unkown image
page readonly
clean
6DE000
stack
page read and write
clean
7FF5497BD000
unkown image
page readonly
clean
1BA1A070000
unkown
page read and write
clean
233BB400000
unkown
page read and write
clean
42C000
unkown image
page readonly
clean
5E3C7E000
stack
page read and write
clean
22B5BB50000
unkown
page read and write
clean
7DF55F202000
unkown image
page readonly
clean
7FF5B6A2A000
unkown image
page readonly
clean
7FF5DF2D2000
unkown image
page readonly
clean
7FF57B67E000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
254E5670000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
7FF5497C0000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
7DF5F4DA0000
unkown image
page readonly
clean
22E8063C000
unkown
page read and write
clean
775000
unkown
page read and write
clean
22B5BC4A000
unkown
page read and write
clean
233BB2A0000
heap default
page read and write
clean
12A63FC000
stack
page read and write
clean
7FEB0000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF5569DD000
unkown image
page readonly
clean
76A000
unkown
page read and write
clean
5E397B000
stack
page read and write
clean
1A7A59E0000
unkown image
page readonly
clean
22B5BA20000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
7FF5568F3000
unkown image
page readonly
clean
2830000
stack
page read and write
clean
786000
unkown
page read and write
clean
7FF556275000
unkown image
page readonly
clean
7FF5B69D3000
unkown image
page readonly
clean
7DF5CC3E0000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
7FF56759F000
unkown image
page readonly
clean
26F343F0000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
7FF57B68D000
unkown image
page readonly
clean
12A5FFE000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF5FB4B0000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FF567566000
unkown image
page readonly
clean
7FF5DF476000
unkown image
page readonly
clean
22B57300000
unkown
page read and write
clean
775000
unkown
page read and write
clean
62E000
stack
page read and write
clean
A0E000
stack
page read and write
clean
7FF56733D000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF56738E000
unkown image
page readonly
clean
5C0000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5566FD000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7DF5F4DC0000
unkown image
page readonly
clean
7DF5FB4A0000
unkown image
page readonly
clean
7DF5C6DE0000
unkown image
page readonly
clean
7FF57B65B000
unkown image
page readonly
clean
7FF57B550000
unkown image
page readonly
clean
76C000
unkown
page read and write
clean
7FF57B5BD000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
8602D7E000
stack
page read and write
clean
7FF5E5AD5000
unkown image
page readonly
clean
254E5490000
unkown image
page read and write
clean
7DF5F4DB0000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
254E562A000
unkown
page read and write
clean
7FF5DF384000
unkown image
page readonly
clean
71E000
stack
page read and write
clean
7FF54965D000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
7FF5E5AAC000
unkown image
page readonly
clean
22B5B9F0000
unkown
page read and write
clean
26F343A0000
unkown image
page read and write
clean
1BA1A013000
unkown
page read and write
clean
1BA19FF0000
unkown
page read and write
clean
775000
unkown
page read and write
clean
26F34C02000
unkown
page read and write
clean
773000
unkown
page read and write
clean
254E566C000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
26F34B80000
unkown image
page readonly
clean
7DF5C6DD0000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF5B12A3000
unkown image
page readonly
clean
5E377E000
stack
page read and write
clean
78B000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
A20000
unkown image
page readonly
clean
7DF5FB4B0000
unkown image
page readonly
clean
7FF55668A000
unkown image
page readonly
clean
7FF549687000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
22B56BE0000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
22E8064E000
unkown
page read and write
clean
22E804E0000
heap default
page read and write
clean
22B563D0000
unkown image
page read and write
clean
610000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
775000
unkown
page read and write
clean
22B5BC60000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
233BB980000
unkown image
page readonly
clean
13A7B700000
unkown image
page readonly
clean
7DF55BD00000
unkown image
page readonly
clean
332F000
unkown
page read and write
clean
16B6DED0000
unkown image
page readonly
clean
7FF5E5B5F000
unkown image
page readonly
clean
7FF5569FB000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF5E5A93000
unkown image
page readonly
clean
22E80600000
unkown
page read and write
clean
7DF5C6DE2000
unkown image
page readonly
clean
16B6DCB9000
unkown
page read and write
clean
22B568D0000
unkown image
page readonly
clean
7FF57B338000
unkown image
page readonly
clean
7DF4CA2A0000
unkown image
page readonly
clean
8602E7D000
stack
page read and write
clean
254E564B000
unkown
page read and write
clean
7FF5B67D1000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
16B6DC00000
unkown
page read and write
clean
7DF57CE92000
unkown image
page readonly
clean
12A64FF000
stack
page read and write
clean
775000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
7FF5E5B6B000
unkown image
page readonly
clean
22E80490000
unkown image
page readonly
clean
7FF549416000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
254E5E02000
unkown
page read and write
clean
7DF4F9360000
unkown image
page readonly
clean
16B6DB50000
heap default
page read and write
clean
3030000
unkown image
page readonly
clean
7DF590F80000
unkown image
page readonly
clean
16B6DC3E000
unkown
page read and write
clean
CC637FF000
stack
page read and write
clean
7DF459BC0000
unkown image
page readonly
clean
22E8067F000
unkown
page read and write
clean
13A7B82A000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
7FF5569B8000
unkown image
page readonly
clean
48E000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF5B68AC000
unkown image
page readonly
clean
7FF54634A000
unkown image
page readonly
clean
7FF5E5663000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF5DEF5F000
unkown image
page readonly
clean
3196000
unkown
page read and write
clean
13A7B802000
unkown
page read and write
clean
7DF56C300000
unkown image
page readonly
clean
7FF5B13D3000
unkown image
page readonly
clean
7FF57B68F000
unkown image
page readonly
clean
1BA1A04C000
unkown
page read and write
clean
22B5BCE2000
unkown
page read and write
clean
7FF5B6A23000
unkown image
page readonly
clean
254E5646000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF5DF494000
unkown image
page readonly
clean
7FF5463C6000
unkown image
page readonly
clean
7FF5B6ADD000
unkown image
page readonly
clean
7DF57CE92000
unkown image
page readonly
clean
7FF556935000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF5497C7000
unkown image
page readonly
clean
254E567F000
unkown
page read and write
clean
7FF5E5B58000
unkown image
page readonly
clean
F09647B000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
7FF5DF4AD000
unkown image
page readonly
clean
7FF5DF3A3000
unkown image
page readonly
clean
7FF5B14DB000
unkown image
page readonly
clean
1BA1A113000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
22B5BB20000
unkown
page read and write
clean
7FF566E04000
unkown image
page readonly
clean
254E5647000
unkown
page read and write
clean
26F34613000
unkown
page read and write
clean
7FF57B59D000
unkown image
page readonly
clean
7FF5B140D000
unkown image
page readonly
clean
7FF546318000
unkown image
page readonly
clean
7FF5B6A0D000
unkown image
page readonly
clean
7FF567558000
unkown image
page readonly
clean
4F2000
heap default
page read and write
clean
7FF56759F000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
19B000
unkown
page read and write
clean
10C6DFF000
stack
page read and write
clean
13A7B813000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
22B57540000
unkown image
page readonly
clean
233BB3D0000
unkown
page read and write
clean
254E5627000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
22B56360000
unkown image
page readonly
clean
1A7A5B00000
unkown
page read and write
clean
7FF57B597000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
26F34663000
unkown
page read and write
clean
7FF5B0FA3000
unkown image
page readonly
clean
233BB459000
unkown
page read and write
clean
EF330FF000
stack
page read and write
clean
40000
unkown image
page readonly
clean
76C000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1BA1A04D000
unkown
page read and write
clean
22B5BC2E000
unkown
page read and write
clean
786000
unkown
page read and write
clean
22B56A60000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
7DF55F200000
unkown image
page readonly
clean
7FF567584000
unkown image
page readonly
clean
786000
unkown
page read and write
clean
7FF5E59B3000
unkown image
page readonly
clean
7FF5B69C2000
unkown image
page readonly
clean
332F000
unkown
page read and write
clean
305A000
unkown
page read and write
clean
775000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
7FF5B6917000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
22B5BB50000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7FF5E5AB8000
unkown image
page readonly
clean
7FF556943000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
8602F7D000
stack
page read and write
clean
7DF56C300000
unkown image
page readonly
clean
7FF567570000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
22B56513000
unkown
page read and write
clean
22B5BA30000
unkown
page read and write
clean
13A7B600000
unkown image
page readonly
clean
205000
unkown
page read and write
clean
22B56370000
unkown image
page readonly
clean
77A000
unkown
page read and write
clean
22B5BC89000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
7FF546343000
unkown image
page readonly
clean
620000
heap default
page read and write
clean
22E805C0000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF5498D6000
unkown image
page readonly
clean
7DF55BD00000
unkown image
page readonly
clean
7FF5B69EC000
unkown image
page readonly
clean
254E54B0000
unkown image
page readonly
clean
7FF5E5669000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7DF5CC3D2000
unkown image
page readonly
clean
16B6DC88000
unkown
page read and write
clean
1A7A6202000
unkown
page read and write
clean
773000
unkown
page read and write
clean
254E566A000
unkown
page read and write
clean
10C677B000
stack
page read and write
clean
F09687F000
stack
page read and write
clean
1B0000
unkown image
page readonly
clean
254E5676000
unkown
page read and write
clean
7FF549626000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
786000
unkown
page read and write
clean
7FF5B6A19000
unkown image
page readonly
clean
22B5BA11000
unkown
page read and write
clean
1BA1A02A000
unkown
page read and write
clean
10C6EFF000
stack
page read and write
clean
7FF549807000
unkown image
page readonly
clean
5EE000
stack
page read and write
clean
22E804C0000
unkown image
page readonly
clean
EF32C7E000
stack
page read and write
clean
786000
unkown
page read and write
clean
7FF5E5B8E000
unkown image
page readonly
clean
22E80490000
unkown image
page readonly
clean
7FF5E5ACD000
unkown image
page readonly
clean
7DF590F90000
unkown image
page readonly
clean
7FF556965000
unkown image
page readonly
clean
9C000
unkown
page read and write
clean
12A60FF000
stack
page read and write
clean
7FF5B66AC000
unkown image
page readonly
clean
7DF55BD02000
unkown image
page readonly
clean
7FF5B67CC000
unkown image
page readonly
clean
7FF55627A000
unkown image
page readonly
clean
13A7B902000
unkown
page read and write
clean
7FF5B1193000
unkown image
page readonly
clean
7FF5B633D000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1BA1A04B000
unkown
page read and write
clean
7FF54990F000
unkown image
page readonly
clean
254E565F000
unkown
page read and write
clean
778000
unkown
page read and write
clean
16B6DD02000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
F09677B000
stack
page read and write
clean
22B5BC13000
unkown
page read and write
clean
1A7A5980000
unkown image
page readonly
clean
7FF5E5AA7000
unkown image
page readonly
clean
254E5668000
unkown
page read and write
clean
7FF546365000
unkown image
page readonly
clean
7FF5567C6000
unkown image
page readonly
clean
7FF55694A000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7DF5CC3E2000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF5B12CE000
unkown image
page readonly
clean
233BB800000
unkown image
page readonly
clean
1BA19DF0000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
26F343C0000
unkown image
page readonly
clean
7DF5FB490000
unkown image
page readonly
clean
7FF5568EC000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF549817000
unkown image
page readonly
clean
7DF55BD10000
unkown image
page readonly
clean
7FF5B6344000
unkown image
page readonly
clean
7FF5B69B4000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
254E5675000
unkown
page read and write
clean
778000
unkown
page read and write
clean
7DF55F212000
unkown image
page readonly
clean
22B56495000
unkown
page read and write
clean
7FF5463BF000
unkown image
page readonly
clean
7FF57B388000
unkown image
page readonly
clean
22B5643D000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF57B67B000
unkown image
page readonly
clean
7FF5E5B66000
unkown image
page readonly
clean
254E5C60000
unkown
page read and write
clean
7FF5B676A000
unkown image
page readonly
clean
7DF55BCF2000
unkown image
page readonly
clean
13A7B5D0000
unkown image
page readonly
clean
22B56456000
unkown
page read and write
clean
22B5BB40000
unkown
page read and write
clean
1BA1A04F000
unkown
page read and write
clean
1A7A5A84000
unkown
page read and write
clean
7FF5B14CE000
unkown image
page readonly
clean
37B65FB000
stack
page read and write
clean
16B6E330000
unkown image
page write copy
clean
76B000
unkown
page read and write
clean
1A7A5A48000
unkown
page read and write
clean
775000
unkown
page read and write
clean
773000
unkown
page read and write
clean
22E80702000
unkown
page read and write
clean
16B6DC13000
unkown
page read and write
clean
7DF5C6DD2000
unkown image
page readonly
clean
22B5642A000
unkown
page read and write
clean
7FF567505000
unkown image
page readonly
clean
7FF5674A7000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF57B656000
unkown image
page readonly
clean
1A7A5A79000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF54985A000
unkown image
page readonly
clean
13A7B870000
unkown
page read and write
clean
785000
unkown
page read and write
clean
10C68FC000
stack
page read and write
clean
7FF5B14B0000
unkown image
page readonly
clean
7DF56C302000
unkown image
page readonly
clean
22B56320000
unkown image
page read and write
clean
233BB426000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
80E000
stack
page read and write
clean
EF32EFE000
stack
page read and write
clean
78B000
unkown
page read and write
clean
7FF5B6ACB000
unkown image
page readonly
clean
22B57510000
unkown image
page readonly
clean
7FF5B6997000
unkown image
page readonly
clean
233BB270000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
1BA1A400000
unkown image
page readonly
clean
42C000
unkown image
page readonly
clean
254E54A0000
heap private
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7DF5C6DF0000
unkown image
page readonly
clean
CC6367F000
stack
page read and write
clean
7FF545FCC000
unkown image
page readonly
clean
22E80700000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
22E0000
heap private
page read and write
clean
7DF5FB4A2000
unkown image
page readonly
clean
22B56390000
heap default
page read and write
clean
7FF5DF392000
unkown image
page readonly
clean
7DF55F210000
unkown image
page readonly
clean
10C6CFD000
stack
page read and write
clean
13A7B7F0000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
7FF5DF176000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7FF5460B3000
unkown image
page readonly
clean
7DF57CE90000
unkown image
page readonly
clean
16B6DC29000
unkown
page read and write
clean
7FF5B67DD000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
409000
unkown image
page read and write
clean
7FF5498FB000
unkown image
page readonly
clean
13A7B83B000
unkown
page read and write
clean
16B6E250000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
233BB230000
unkown image
page read and write
clean
786000
unkown
page read and write
clean
22B5BD02000
unkown
page read and write
clean
22E80B80000
unkown image
page readonly
clean
1BA1A07F000
unkown
page read and write
clean
7FF57B42D000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
22B56A50000
unkown image
page readonly
clean
7FF549154000
unkown image
page readonly
clean
7FF5567BC000
unkown image
page readonly
clean
37B64FE000
stack
page read and write
clean
769000
unkown
page read and write
clean
22B56D18000
unkown
page read and write
clean
7FF5B132F000
unkown image
page readonly
clean
13A7B83D000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
7FF5E59EF000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF5B6830000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7FF5DF324000
unkown image
page readonly
clean
22B5BC20000
unkown
page read and write
clean
22E80663000
unkown
page read and write
clean
26F343E0000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
26F34640000
unkown
page read and write
clean
785000
unkown
page read and write
clean
19A000
unkown
page read and write
clean
7DF55BCF2000
unkown image
page readonly
clean
37B61CB000
unkown
page read and write
clean
233BB43D000
unkown
page read and write
clean
1A7A5A00000
unkown
page read and write
clean
7FF5DF47B000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
22E80713000
unkown
page read and write
clean
775000
unkown
page read and write
clean
773000
unkown
page read and write
clean
233BB380000
unkown image
page readonly
clean
7FF54990D000
unkown image
page readonly
clean
7FF5B687D000
unkown image
page readonly
clean
7FF5DF3BC000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7FF5B13EC000
unkown image
page readonly
clean
7DF48EE50000
unkown image
page readonly
clean
7FF5B6ADF000
unkown image
page readonly
clean
7DF5FB4A0000
unkown image
page readonly
clean
22B57330000
unkown image
page read and write
clean
7FF5DF4AF000
unkown image
page readonly
clean
37B647E000
stack
page read and write
clean
1BA1A200000
unkown image
page readonly
clean
22B5BB50000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
9212E7F000
stack
page read and write
clean
7FF56736E000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
4A0000
unkown
page execute and read and write
clean
7FF567363000
unkown image
page readonly
clean
7FF5674D9000
unkown image
page readonly
clean
7FF5568D4000
unkown image
page readonly
clean
7FF5497AD000
unkown image
page readonly
clean
1A7A5A3C000
unkown
page read and write
clean
775000
unkown
page read and write
clean
1BA1A580000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
233BB990000
unkown image
page readonly
clean
73320000
unkown image
page readonly
clean
21E0000
heap private
page read and write
clean
7FFB2000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FF5B14A6000
unkown image
page readonly
clean
254E5665000
unkown
page read and write
clean
773000
unkown
page read and write
clean
7FF5463E4000
unkown image
page readonly
clean
22B574F0000
unkown image
page readonly
clean
1A7A5A72000
unkown
page read and write
clean
2C9000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
CC635FE000
stack
page read and write
clean
775000
unkown
page read and write
clean
22B5BCAA000
unkown
page read and write
clean
7FF57B5C9000
unkown image
page readonly
clean
EF3295B000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
CC62FFA000
stack
page read and write
clean
16B6DB00000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
22B5BC54000
unkown
page read and write
clean
332B000
unkown
page read and write
clean
7DF47AD60000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
7FF5B6ACE000
unkown image
page readonly
clean
7DF5CC3F0000
unkown image
page readonly
clean
7FF5B67D3000
unkown image
page readonly
clean
13A7B5D0000
unkown image
page readonly
clean
22B563C0000
unkown
page read and write
clean
7FF5569CB000
unkown image
page readonly
clean
22E80480000
heap private
page read and write
clean
73320000
unkown image
page readonly
clean
7FF57B560000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF567078000
unkown image
page readonly
clean
7DF5CC3D0000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7FF5B12F3000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
CC6357F000
stack
page read and write
clean
8602CFD000
stack
page read and write
clean
13A7B620000
heap default
page read and write
clean
78B000
unkown
page read and write
clean
7FF5DF49E000
unkown image
page readonly
clean
233BB3D0000
unkown
page read and write
clean
7FF5497FC000
unkown image
page readonly
clean
22B5BD04000
unkown
page read and write
clean
7FF5B69B8000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF57B346000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
785000
unkown
page read and write
clean
233BB502000
unkown
page read and write
clean
7DF590F90000
unkown image
page readonly
clean
22B5BD06000
unkown
page read and write
clean
773000
unkown
page read and write
clean
254E566E000
unkown
page read and write
clean
209000
unkown
page read and write
clean
1A7A5B02000
unkown
page read and write
clean
254E5640000
unkown
page read and write
clean
12A617C000
stack
page read and write
clean
9212C7B000
stack
page read and write
clean
7FF5E5963000
unkown image
page readonly
clean
1A7A59A0000
unkown image
page readonly
clean
7FF549875000
unkown image
page readonly
clean
22B5BCF8000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
7DF5F4DB2000
unkown image
page readonly
clean
233BB413000
unkown
page read and write
clean
22B5BC3D000
unkown
page read and write
clean
7DF55F212000
unkown image
page readonly
clean
22E8068A000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
22B5BCA5000
unkown
page read and write
clean
12A62FB000
stack
page read and write
clean
22B5BC87000
unkown
page read and write
clean
7FF57B5F5000
unkown image
page readonly
clean
22E80800000
unkown image
page readonly
clean
7FF57AEEA000
unkown image
page readonly
clean
7FF5462F7000
unkown image
page readonly
clean
2840000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF5567CF000
unkown image
page readonly
clean
77A000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF5DF1F8000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF5674EA000
unkown image
page readonly
clean
1BA1A108000
unkown
page read and write
clean
8602BFE000
stack
page read and write
clean
775000
unkown
page read and write
clean
254E563D000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
7FF5E598E000
unkown image
page readonly
clean
7FF5B6660000
unkown image
page readonly
clean
233BB280000
unkown image
page readonly
clean
26F34679000
unkown
page read and write
clean
76B000
unkown
page read and write
clean
22B5648C000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
282F000
stack
page read and write
clean
7FF5B6A9F000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF5B6874000
unkown image
page readonly
clean
7FF5569EE000
unkown image
page readonly
clean
7FF5674D5000
unkown image
page readonly
clean
1BA19F00000
unkown image
page readonly
clean
774000
unkown
page read and write
clean
233BB250000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
CC632FD000
stack
page read and write
clean
7FF5B6AA6000
unkown image
page readonly
clean
7DF590FA0000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
778000
unkown
page read and write
clean
7FF5B6898000
unkown image
page readonly
clean
10C70FF000
stack
page read and write
clean
7FF5B65E6000
unkown image
page readonly
clean
2260000
unkown
page read and write
clean
7FF549845000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
254E5A00000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
7FF5DF46F000
unkown image
page readonly
clean
7FF5DF2BD000
unkown image
page readonly
clean
7FF5673B3000
unkown image
page readonly
clean
13A7BA00000
unkown image
page readonly
clean
7FF54990F000
unkown image
page readonly
clean
7FF5B6A98000
unkown image
page readonly
clean
CC631FE000
stack
page read and write
clean
22B56471000
unkown
page read and write
clean
7FF549441000
unkown image
page readonly
clean
7FF556918000
unkown image
page readonly
clean
1BA1A045000
unkown
page read and write
clean
769000
unkown
page read and write
clean
775000
unkown
page read and write
clean
26F34602000
unkown
page read and write
clean
254E5642000
unkown
page read and write
clean
7FF5569BF000
unkown image
page readonly
clean
7FF5B14CB000
unkown image
page readonly
clean
16B6DCC0000
unkown
page read and write
clean
785000
unkown
page read and write
clean
667000
unkown
page read and write
clean
7FF57B5D3000
unkown image
page readonly
clean
16B6DB00000
unkown image
page readonly
clean
233BB240000
heap private
page read and write
clean
7DF5CC3E2000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
764000
heap default
page read and write
clean
C20000
unkown image
page readonly
clean
7FF5B0FB8000
unkown image
page readonly
clean
1BA19DB0000
unkown image
page read and write
clean
22E80708000
unkown
page read and write
clean
22B5BCF9000
unkown
page read and write
clean
7DF56C310000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
785000
unkown
page read and write
clean
921279E000
stack
page read and write
clean
22B56D13000
unkown
page read and write
clean
7DF5F4DC0000
unkown image
page readonly
clean
7FF5B69F8000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF5B14DF000
unkown image
page readonly
clean
630000
unkown
page read and write
clean
13A7B889000
unkown
page read and write
clean
7FF5B698D000
unkown image
page readonly
clean
233BBC02000
unkown
page read and write
clean
22B56C02000
unkown
page read and write
clean
7FF5DF3B7000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
22B56BE3000
unkown
page read and write
clean
13A7BD80000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1BA1A04A000
unkown
page read and write
clean
22B56330000
heap private
page read and write
clean
7FF5B1419000
unkown image
page readonly
clean
254E562D000
unkown
page read and write
clean
7FF57B5DA000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF5B6801000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
7FF54959A000
unkown image
page readonly
clean
1BA1A052000
unkown
page read and write
clean
7FF5B69A0000
unkown image
page readonly
clean
7DF4C4CA0000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7DF590F92000
unkown image
page readonly
clean
1A7A5970000
heap private
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF5B6AAB000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
22B5BAC0000
unkown
page read and write
clean
22E80663000
unkown
page read and write
clean
76C000
unkown
page read and write
clean
7FF5673EF000
unkown image
page readonly
clean
7DF5C6DE2000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
22B56340000
unkown image
page readonly
clean
22B56400000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
775000
unkown
page read and write
clean
7FF5DF3C8000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
7DF5CC3F0000
unkown image
page readonly
clean
775000
unkown
page read and write
clean
7FF5B1335000
unkown image
page readonly
clean
22B56525000
unkown
page read and write
clean
9212D77000
stack
page read and write
clean
5E3B7F000
stack
page read and write
clean
76C000
unkown
page read and write
clean
77A000
unkown
page read and write
clean
778000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
7FF556792000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
233BBA60000
unkown
page read and write
clean
785000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7FF5E593D000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
1A7A5A4B000
unkown
page read and write
clean
76A000
unkown
page read and write
clean
7FF5463EE000
unkown image
page readonly
clean
7DF5F4DB0000
unkown image
page readonly
clean
8602FFF000
stack
page read and write
clean
13A7B824000
unkown
page read and write
clean
768000
unkown
page read and write
clean
769000
unkown
page read and write
clean
785000
unkown
page read and write
clean
7FF5E5B05000
unkown image
page readonly
clean
7FF56757D000
unkown image
page readonly
clean
1A7A5960000
unkown image
page read and write
clean
254E5500000
heap default
page read and write
clean
1BA19DD0000
unkown image
page readonly
clean
1BA1A049000
unkown
page read and write
clean
26F343C0000
unkown image
page readonly
clean
7FF5B629B000
unkown image
page readonly
clean
7DF55F220000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
22B564AF000
unkown
page read and write
clean
10C6BFE000
stack
page read and write
clean
7FF5DF4AB000
unkown image
page readonly
clean
86025EB000
unkown
page read and write
clean
254E563A000
unkown
page read and write
clean
7FF5B658F000
unkown image
page readonly
clean
7FF546339000
unkown image
page readonly
clean
22B5BB00000
unkown
page read and write
clean
16B6E402000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5463FF000
unkown image
page readonly
clean
1BA1A08A000
unkown
page read and write
clean
785000
unkown
page read and write
clean
254E5600000
unkown
page read and write
clean
7DF5F4DB2000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
254E5644000
unkown
page read and write
clean
22B5BB10000
unkown
page read and write
clean
7FF5B6759000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
774000
unkown
page read and write
clean
1BA1A002000
unkown
page read and write
clean
7FF5DF188000
unkown image
page readonly
clean
7FF5463EB000
unkown image
page readonly
clean
332B000
unkown
page read and write
clean
7DF5CC3D0000
unkown image
page readonly
clean
7FF55692D000
unkown image
page readonly
clean
12A5E7C000
stack
page read and write
clean
13A7BC00000
unkown image
page readonly
clean
1A7A5A4E000
unkown
page read and write
clean
22B56D18000
unkown
page read and write
clean
7FF567069000
unkown image
page readonly
clean
7FF5B6ADB000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
332B000
unkown
page read and write
clean
7FF5DECF4000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
22B5B9FE000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
76C000
unkown
page read and write
clean
3196000
unkown
page read and write
clean
773000
unkown
page read and write
clean
429000
unkown image
page read and write
clean
7FF56758B000
unkown image
page readonly
clean
76B000
unkown
page read and write
clean
CC62C7B000
unkown
page read and write
clean
CC6347F000
stack
page read and write
clean
22B56C15000
unkown
page read and write
clean
22B57500000
unkown image
page readonly
clean
7FF54630C000
unkown image
page readonly
clean
7FF5E53E6000
unkown image
page readonly
clean
7DF5C6DD2000
unkown image
page readonly
clean
785000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
7FF5DF32E000
unkown image
page readonly
clean
7FF5B6990000
unkown image
page readonly
clean
7FF5E5678000
unkown image
page readonly
clean
7DF5C6DD0000
unkown image
page readonly
clean
7FF5B127D000
unkown image
page readonly
clean
1A7A5A13000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
DA0000
unkown image
page readonly
clean
788000
unkown
page read and write
clean
78B000
unkown
page read and write
clean
1BA1A102000
unkown
page read and write
clean
778000
unkown
page read and write
clean
233BB250000
unkown image
page readonly
clean
22E8062A000
unkown
page read and write
clean
77A000
unkown
page read and write
clean
7FF5DED2E000
unkown image
page readonly
clean
7DF45D0D0000
unkown image
page readonly
clean
7DF5CC3E0000
unkown image
page readonly
clean
EF32DFE000
stack
page read and write
clean
EF329DE000
stack
page read and write
clean
921271B000
unkown
page read and write
clean
22B5BCDD000
unkown
page read and write
clean
13A7B826000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
3210000
unkown
page read and write
clean
22B57520000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
9212A7E000
stack
page read and write
clean
4A0000
unkown
page execute and read and write
clean
7FF5DF48D000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
7FF5496DE000
unkown image
page readonly
clean
22E80648000
unkown
page read and write
clean
775000
unkown
page read and write
clean
77B000
unkown
page read and write
clean
720000
heap default
page read and write
clean
78B000
unkown
page read and write
clean
7FF5DF3A7000
unkown image
page readonly
clean
254E5613000
unkown
page read and write
clean
7DF590FA0000
unkown image
page readonly
clean
7DF55BCF0000
unkown image
page readonly
clean
73322000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
22B5BC00000
unkown
page read and write
clean
775000
unkown
page read and write
clean
26F343B0000
heap private
page read and write
clean
7DF55F200000
unkown image
page readonly
clean
26F34700000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1A7A5ED0000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
16B6DCCA000
unkown
page read and write
clean
1A7A59D0000
heap default
page read and write
clean
7FF5B1498000
unkown image
page readonly
clean
778000
unkown
page read and write
clean
22B5B8F0000
unkown
page read and write
clean
785000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
7FF5498ED000
unkown image
page readonly
clean
78B000
unkown
page read and write
clean
254E567C000
unkown
page read and write
clean
254E565C000
unkown
page read and write
clean
7FF566DE6000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF5B1354000
unkown image
page readonly
clean
26F34629000
unkown
page read and write
clean
332F000
unkown
page read and write
clean
7FF5B6654000
unkown image
page readonly
clean
254E5661000
unkown
page read and write
clean
7DF5F4DA0000
unkown image
page readonly
clean
773000
unkown
page read and write
clean
13A7B913000
unkown
page read and write
clean
775000
unkown
page read and write
clean
90E000
stack
page read and write
clean
3196000
unkown
page read and write
clean
233BB42A000
unkown
page read and write
clean
7FF5DF00E000
unkown image
page readonly
clean
7FF56755F000
unkown image
page readonly
clean
254E5660000
unkown
page read and write
clean
22B564A0000
unkown
page read and write
clean
7FF56758E000
unkown image
page readonly
clean
2290000
heap private
page read and write
clean
1BA19DD0000
unkown image
page readonly
clean
7FF5E5B70000
unkown image
page readonly
clean
7DF56C2F2000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
5E367B000
unkown
page read and write
clean
254E5641000
unkown
page read and write
clean
16B6DB20000
unkown image
page readonly
clean
22E8066E000
unkown
page read and write
clean
785000
unkown
page read and write
clean
22B5BB50000
unkown
page read and write
clean
7FF57B66D000
unkown image
page readonly
clean
769000
unkown
page read and write
clean
786000
unkown
page read and write
clean
There are 1331 hidden memdumps, click here to show them.