IOC Report

loading gif

Files

File Path
Type
Category
Malicious
btc1exch06_2021-10-24_12_30_07.zip
Zip archive data, at least v4.5 to extract
initial sample
clean
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\o21fgc1p.ykx\unarchiver.log
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\SysWOW64\unarchiver.exe
'C:\Windows\SysWOW64\unarchiver.exe' 'C:\Users\user\Desktop\btc1exch06_2021-10-24_12_30_07.zip'
clean
C:\Windows\SysWOW64\7za.exe
'C:\Windows\System32\7za.exe' x -pinfected -y -o'C:\Users\user\AppData\Local\Temp\amgha5zs.gqf' 'C:\Users\user\Desktop\btc1exch06_2021-10-24_12_30_07.zip'
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1FB95B70000
unkown image
page readonly
clean
7FF54E9CA000
unkown image
page readonly
clean
7DF593F30000
unkown image
page readonly
clean
1FB96250000
unkown image
page readonly
clean
7FF54A4EA000
unkown image
page readonly
clean
28FDD844000
unkown
page read and write
clean
2B48A66A000
unkown
page read and write
clean
1866F3C0000
unkown
page read and write
clean
7FF50B21A000
unkown image
page readonly
clean
28FDD83D000
unkown
page read and write
clean
2B48A1AD000
unkown
page read and write
clean
1CA1BE79000
unkown
page read and write
clean
7FF5CA95D000
unkown image
page readonly
clean
7FF51A9C1000
unkown image
page readonly
clean
7FF54E8B1000
unkown image
page readonly
clean
1CA1C380000
unkown image
page readonly
clean
7FF51AB8D000
unkown image
page readonly
clean
FD0397E000
stack
page read and write
clean
3EA0277000
stack
page read and write
clean
582617F000
stack
page read and write
clean
28FDD83A000
unkown
page read and write
clean
2B48A187000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
7FF50B08B000
unkown image
page readonly
clean
15901F13000
unkown
page read and write
clean
2B489800000
unkown
page read and write
clean
7FF5707B5000
unkown image
page readonly
clean
7FF51AB1F000
unkown image
page readonly
clean
2B4898EF000
unkown
page read and write
clean
58260FE000
stack
page read and write
clean
2B4898EF000
unkown
page read and write
clean
2B48A11E000
unkown
page read and write
clean
7DF518E92000
unkown image
page readonly
clean
73F19FE000
stack
page read and write
clean
7FF51A954000
unkown image
page readonly
clean
7FF570411000
unkown image
page readonly
clean
7FF54A25F000
unkown image
page readonly
clean
7DF558180000
unkown image
page readonly
clean
7FF51ABE2000
unkown image
page readonly
clean
FEFF2000
unkown image
page readonly
clean
7DF57E5A0000
unkown image
page readonly
clean
7FF54E7F7000
unkown image
page readonly
clean
7DF5D8640000
unkown image
page readonly
clean
5CD000
unkown
page read and write
clean
7DF528882000
unkown image
page readonly
clean
582637C000
stack
page read and write
clean
1FB95C00000
unkown
page read and write
clean
3E9FEFE000
stack
page read and write
clean
2B489E50000
unkown image
page readonly
clean
7FF51A9C9000
unkown image
page readonly
clean
7FF54A47A000
unkown image
page readonly
clean
7FF54E957000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
28FDD863000
unkown
page read and write
clean
28FDD841000
unkown
page read and write
clean
7F242000
unkown image
page readonly
clean
7FF54A1C7000
unkown image
page readonly
clean
7FF57083F000
unkown image
page readonly
clean
7FF51AB33000
unkown image
page readonly
clean
73F14BC000
unkown
page read and write
clean
28FDD7A0000
unkown image
page readonly
clean
7FF51A7AA000
unkown image
page readonly
clean
7FF50B0B5000
unkown image
page readonly
clean
2B48A1DB000
unkown
page read and write
clean
7FF5861FB000
unkown image
page readonly
clean
7DF558160000
unkown image
page readonly
clean
7FF586203000
unkown image
page readonly
clean
2B48A196000
unkown
page read and write
clean
2B48A602000
unkown
page read and write
clean
2B4896F0000
unkown image
page read and write
clean
28FDD845000
unkown
page read and write
clean
2E86000
unkown
page read and write
clean
28FDD85E000
unkown
page read and write
clean
7FF5CA957000
unkown image
page readonly
clean
11A0000
unkown image
page readonly
clean
7FF51AB37000
unkown image
page readonly
clean
3EA00FB000
stack
page read and write
clean
1CA1BC90000
unkown image
page read and write
clean
7FF50AEB5000
unkown image
page readonly
clean
7DF55C652000
unkown image
page readonly
clean
28FDD690000
unkown image
page readonly
clean
2B4897B0000
unkown image
page readonly
clean
7FF54A4D2000
unkown image
page readonly
clean
2C3DF940000
unkown image
page readonly
clean
2B48A1A7000
unkown
page read and write
clean
2B48A19F000
unkown
page read and write
clean
2B48A178000
unkown
page read and write
clean
7FF54A3F7000
unkown image
page readonly
clean
7DF5D8652000
unkown image
page readonly
clean
7DF45A510000
unkown image
page readonly
clean
7FF54A2C7000
unkown image
page readonly
clean
7FF586036000
unkown image
page readonly
clean
1866F3A7000
unkown
page read and write
clean
1CA1BF13000
unkown
page read and write
clean
2B48A187000
unkown
page read and write
clean
7DF558180000
unkown image
page readonly
clean
7FF51AA1F000
unkown image
page readonly
clean
56654FF000
stack
page read and write
clean
7DF55C650000
unkown image
page readonly
clean
7FF5708AA000
unkown image
page readonly
clean
7FF5CA9CA000
unkown image
page readonly
clean
522C000
stack
page read and write
clean
28FDD670000
unkown image
page readonly
clean
E28000
unkown
page read and write
clean
7FF570883000
unkown image
page readonly
clean
A70000
heap default
page read and write
clean
1CA1BCD0000
unkown image
page readonly
clean
FD03DF8000
stack
page read and write
clean
7FF54E932000
unkown image
page readonly
clean
2B48985B000
unkown
page read and write
clean
933000
unkown
page read and write
clean
7FF51A7E4000
unkown image
page readonly
clean
1AE08800000
unkown image
page readonly
clean
7FF54A477000
unkown image
page readonly
clean
7FF570827000
unkown image
page readonly
clean
7DF558162000
unkown image
page readonly
clean
2B48A19D000
unkown
page read and write
clean
7FF50B1AD000
unkown image
page readonly
clean
28FDDC00000
unkown image
page readonly
clean
2B48A189000
unkown
page read and write
clean
94F000
unkown
page read and write
clean
1AE08A00000
unkown image
page readonly
clean
7FF5ABE6F000
unkown image
page readonly
clean
58262FF000
stack
page read and write
clean
2B489AD0000
unkown image
page readonly
clean
7FF51AC11000
unkown image
page readonly
clean
7FF5860BF000
unkown image
page readonly
clean
1866F750000
unkown image
page readonly
clean
94E36FE000
stack
page read and write
clean
7FF54E9DA000
unkown image
page readonly
clean
7FF54E90E000
unkown image
page readonly
clean
7FF54A40D000
unkown image
page readonly
clean
2E22000
unkown
page read and write
clean
7FF50B13F000
unkown image
page readonly
clean
7FF570902000
unkown image
page readonly
clean
2B4898B1000
unkown
page read and write
clean
2C3DFABB000
unkown
page read and write
clean
2B48A19F000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
7FF51A9E0000
unkown image
page readonly
clean
7FF586080000
unkown image
page readonly
clean
2AC0000
heap private
page read and write
clean
1866F3B6000
unkown
page read and write
clean
6D40000
heap private
page read and write
clean
2B4898E3000
unkown
page read and write
clean
2B48A115000
unkown
page read and write
clean
15901E02000
unkown
page read and write
clean
2B48A167000
unkown
page read and write
clean
2B489851000
unkown
page read and write
clean
7DF558162000
unkown image
page readonly
clean
2B48A185000
unkown
page read and write
clean
7DF5D8642000
unkown image
page readonly
clean
28FDD859000
unkown
page read and write
clean
28FDD86B000
unkown
page read and write
clean
D9A000
unkown
page execute and read and write
clean
2B489813000
unkown
page read and write
clean
18F16980000
unkown image
page readonly
clean
2B48A189000
unkown
page read and write
clean
7DF558160000
unkown image
page readonly
clean
F7E000
stack
page read and write
clean
582627F000
stack
page read and write
clean
7FF54A437000
unkown image
page readonly
clean
2E7C000
unkown
page read and write
clean
7FF57092A000
unkown image
page readonly
clean
7FF51ABE9000
unkown image
page readonly
clean
1130000
unkown
page read and write
clean
7DF5D8640000
unkown image
page readonly
clean
7FF51AAC1000
unkown image
page readonly
clean
2B489855000
unkown
page read and write
clean
1AE08B80000
unkown image
page readonly
clean
7FF570914000
unkown image
page readonly
clean
7FF54A45E000
unkown image
page readonly
clean
2B48A1AB000
unkown
page read and write
clean
28FDD868000
unkown
page read and write
clean
7DF593F20000
unkown image
page readonly
clean
7DF5B9BD0000
unkown image
page readonly
clean
1350000
unkown image
page readonly
clean
28FDD82D000
unkown
page read and write
clean
7DF5B9BD0000
unkown image
page readonly
clean
7FF586105000
unkown image
page readonly
clean
18F1642A000
unkown
page read and write
clean
7FF5ABEDA000
unkown image
page readonly
clean
7DF593F22000
unkown image
page readonly
clean
28FDD858000
unkown
page read and write
clean
15901C10000
unkown image
page readonly
clean
7FF5CA8AE000
unkown image
page readonly
clean
15901E77000
unkown
page read and write
clean
28FDD877000
unkown
page read and write
clean
7FF54A099000
unkown image
page readonly
clean
2B48A18F000
unkown
page read and write
clean
1CA1BF02000
unkown
page read and write
clean
7FF54A45E000
unkown image
page readonly
clean
18F1647E000
unkown
page read and write
clean
7DF57E590000
unkown image
page readonly
clean
2B48A198000
unkown
page read and write
clean
94E397E000
stack
page read and write
clean
D1FB3FC000
stack
page read and write
clean
18F16500000
unkown
page read and write
clean
1CA1BE55000
unkown
page read and write
clean
2B48A663000
unkown
page read and write
clean
1FB95C49000
unkown
page read and write
clean
2B48A19A000
unkown
page read and write
clean
1380000
heap private
page read and write
clean
943000
unkown
page read and write
clean
7FF54A500000
unkown image
page readonly
clean
2E8B000
unkown
page read and write
clean
A40000
heap default
page read and write
clean
D9C000
unkown
page execute and read and write
clean
1AE08510000
heap default
page read and write
clean
FF010000
unkown image
page readonly
clean
28FDD87E000
unkown
page read and write
clean
2B48A19A000
unkown
page read and write
clean
7DF593F22000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
18F16450000
unkown
page read and write
clean
FF002000
unkown image
page readonly
clean
2B48A100000
unkown
page read and write
clean
1FB95D00000
unkown
page read and write
clean
1866F2B0000
unkown image
page readonly
clean
7FF5ABF51000
unkown image
page readonly
clean
7FF57079C000
unkown image
page readonly
clean
7FF51A8E2000
unkown image
page readonly
clean
7DF55C660000
unkown image
page readonly
clean
2B48A197000
unkown
page read and write
clean
3E9FB8B000
unkown
page read and write
clean
1AE085F0000
unkown image
page readonly
clean
7DF5D8642000
unkown image
page readonly
clean
56653FF000
stack
page read and write
clean
7FF5CA92B000
unkown image
page readonly
clean
7FF54A4F1000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
7DF558160000
unkown image
page readonly
clean
1866F396000
heap default
page read and write
clean
2C3DFF80000
unkown image
page readonly
clean
B49A7FB000
stack
page read and write
clean
7FF54A501000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
7FF54E9DE000
unkown image
page readonly
clean
7FF54A1F6000
unkown image
page readonly
clean
7FF51AB63000
unkown image
page readonly
clean
7FF54E77F000
unkown image
page readonly
clean
94C000
unkown
page read and write
clean
1AE084B0000
heap private
page read and write
clean
B49A8FB000
stack
page read and write
clean
2C3DFE00000
unkown image
page readonly
clean
7FF50B085000
unkown image
page readonly
clean
1FB95C13000
unkown
page read and write
clean
4FEE000
stack
page read and write
clean
1AE08600000
unkown
page read and write
clean
2B48A1D9000
unkown
page read and write
clean
2E54000
unkown
page read and write
clean
7FF54E7F2000
unkown image
page readonly
clean
2B48A16C000
unkown
page read and write
clean
7FF50B153000
unkown image
page readonly
clean
7FF51A895000
unkown image
page readonly
clean
7FF54A0C1000
unkown image
page readonly
clean
6D44000
heap private
page read and write
clean
1360000
unkown
page read and write
clean
1FB95C4D000
unkown
page read and write
clean
7FF58620E000
unkown image
page readonly
clean
7DF491DE0000
unkown image
page readonly
clean
2B4898C9000
unkown
page read and write
clean
2B48A1CA000
unkown
page read and write
clean
2B48A187000
unkown
page read and write
clean
2B48A19A000
unkown
page read and write
clean
28FDD82E000
unkown
page read and write
clean
7FF51A6F7000
unkown image
page readonly
clean
1CA1BE49000
unkown
page read and write
clean
28FDD831000
unkown
page read and write
clean
1CA1BE78000
unkown
page read and write
clean
D20000
unkown image
page readonly
clean
15901E67000
unkown
page read and write
clean
2B48A189000
unkown
page read and write
clean
7DF528890000
unkown image
page readonly
clean
FD03C78000
stack
page read and write
clean
7DF518EB0000
unkown image
page readonly
clean
1866F8D0000
unkown image
page readonly
clean
2B489F80000
unkown
page read and write
clean
7FF50B202000
unkown image
page readonly
clean
1FB95BC0000
heap default
page read and write
clean
18F16455000
unkown
page read and write
clean
28FDD846000
unkown
page read and write
clean
2B48A16B000
unkown
page read and write
clean
7FF54A42E000
unkown image
page readonly
clean
2B48A1B9000
unkown
page read and write
clean
7FF570909000
unkown image
page readonly
clean
28FDD87A000
unkown
page read and write
clean
2B489854000
unkown
page read and write
clean
1320000
unkown image
page readonly
clean
7FF50B231000
unkown image
page readonly
clean
2E65000
unkown
page read and write
clean
7FF54A477000
unkown image
page readonly
clean
7FF570843000
unkown image
page readonly
clean
2C3DF9A0000
unkown image
page write copy
clean
E38000
unkown
page read and write
clean
1AE08640000
unkown
page read and write
clean
1AE084C0000
unkown image
page readonly
clean
1FB95C70000
unkown
page read and write
clean
7FF51A7E7000
unkown image
page readonly
clean
7FF5CA6FA000
unkown image
page readonly
clean
7FF5ABF61000
unkown image
page readonly
clean
1AE084A0000
unkown image
page read and write
clean
7FF51A777000
unkown image
page readonly
clean
56651FD000
stack
page read and write
clean
2E4F000
unkown
page read and write
clean
7FF5ABEBE000
unkown image
page readonly
clean
7FF5AB79E000
unkown image
page readonly
clean
1FB95D13000
unkown
page read and write
clean
7FF54A453000
unkown image
page readonly
clean
7FF5ABF4A000
unkown image
page readonly
clean
11D0000
unkown image
page readonly
clean
28FDD650000
unkown image
page read and write
clean
940000
unkown
page read and write
clean
DCB000
heap default
page read and write
clean
7FF51AB6E000
unkown image
page readonly
clean
2E72000
unkown
page read and write
clean
7FF5706E1000
unkown image
page readonly
clean
DA7000
unkown
page execute and read and write
clean
7DF426740000
unkown image
page readonly
clean
7DF456030000
unkown image
page readonly
clean
18F16230000
unkown image
page readonly
clean
2B48A110000
unkown
page read and write
clean
7DF5B9BE0000
unkown image
page readonly
clean
7DF5B9BC0000
unkown image
page readonly
clean
2B48A185000
unkown
page read and write
clean
2B48A112000
unkown
page read and write
clean
7DF528870000
unkown image
page readonly
clean
7FF54E8D7000
unkown image
page readonly
clean
7FF50B231000
unkown image
page readonly
clean
1AE0865C000
unkown
page read and write
clean
7FF50ADCA000
unkown image
page readonly
clean
28C5000
heap private
page read and write
clean
7FF5ABE83000
unkown image
page readonly
clean
1866F2D0000
unkown image
page readonly
clean
2C3DF800000
heap private
page read and write
clean
7DF558180000
unkown image
page readonly
clean
15901C00000
heap private
page read and write
clean
18F16210000
unkown image
page read and write
clean
2B48A19A000
unkown
page read and write
clean
28FDD86A000
unkown
page read and write
clean
7FF5CA8A2000
unkown image
page readonly
clean
5500000
unkown
page read and write
clean
7DF5B9BE0000
unkown image
page readonly
clean
7FF54A427000
unkown image
page readonly
clean
15901C40000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
18F16C02000
unkown
page read and write
clean
2B48A603000
unkown
page read and write
clean
7FF51AAD2000
unkown image
page readonly
clean
18F16260000
unkown image
page readonly
clean
7DF5D8660000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
7FF5CA9D5000
unkown image
page readonly
clean
29618FB000
stack
page read and write
clean
2B48A61D000
unkown
page read and write
clean
2B489CD0000
unkown image
page readonly
clean
2E88000
unkown
page read and write
clean
7DF558180000
unkown image
page readonly
clean
7FF51AB30000
unkown image
page readonly
clean
BB0000
unkown
page read and write
clean
7FF51AA91000
unkown image
page readonly
clean
1FB95C55000
unkown
page read and write
clean
7DF5B9BC0000
unkown image
page readonly
clean
1340000
unkown
page read and write
clean
7FF54E9B2000
unkown image
page readonly
clean
2C3DFB02000
unkown
page read and write
clean
7FF50B000000
unkown image
page readonly
clean
7FF57087B000
unkown image
page readonly
clean
7FF5861A7000
unkown image
page readonly
clean
1866F3BF000
unkown
page read and write
clean
7FF5706FD000
unkown image
page readonly
clean
7FF50B209000
unkown image
page readonly
clean
2B48A1BE000
unkown
page read and write
clean
53FE000
stack
page read and write
clean
2B4898DA000
unkown
page read and write
clean
1CA1BE4B000
unkown
page read and write
clean
28FDD813000
unkown
page read and write
clean
7FF50AFE1000
unkown image
page readonly
clean
5664EFB000
stack
page read and write
clean
18F16800000
unkown image
page readonly
clean
7DF518E90000
unkown image
page readonly
clean
73F1AFE000
stack
page read and write
clean
2B489790000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
7FF58610B000
unkown image
page readonly
clean
2B48A199000
unkown
page read and write
clean
7FF54A40F000
unkown image
page readonly
clean
7DF5B9BD2000
unkown image
page readonly
clean
B49AA77000
stack
page read and write
clean
7DF518EA0000
unkown image
page readonly
clean
1CA1BE84000
unkown
page read and write
clean
1CA1BDE0000
unkown image
page readonly
clean
2B48983C000
unkown
page read and write
clean
7FF5ABE87000
unkown image
page readonly
clean
7E0000
unkown image
page read and write
clean
B49AC7E000
stack
page read and write
clean
7FF50AD17000
unkown image
page readonly
clean
296197E000
stack
page read and write
clean
2C3DFF90000
unkown image
page readonly
clean
2B4898A0000
unkown
page read and write
clean
1CA1BD00000
heap default
page read and write
clean
119E000
stack
page read and write
clean
7FF5CA903000
unkown image
page readonly
clean
D1FB27F000
stack
page read and write
clean
7FF54A188000
unkown image
page readonly
clean
73F1BFD000
stack
page read and write
clean
7FF50B1A7000
unkown image
page readonly
clean
15901F02000
unkown
page read and write
clean
2B48A18C000
unkown
page read and write
clean
7FF570700000
unkown image
page readonly
clean
7FF585F35000
unkown image
page readonly
clean
D1FB77E000
stack
page read and write
clean
1866F2A0000
heap private
page read and write
clean
7DF5D8652000
unkown image
page readonly
clean
2B48A198000
unkown
page read and write
clean
18F16360000
unkown image
page readonly
clean
2B48A186000
unkown
page read and write
clean
7DF55C640000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
2B48A165000
unkown
page read and write
clean
D1FB57B000
stack
page read and write
clean
7FF5861B9000
unkown image
page readonly
clean
7DF416D60000
unkown image
page readonly
clean
7FF5861E7000
unkown image
page readonly
clean
7DF55C642000
unkown image
page readonly
clean
7FF51AB23000
unkown image
page readonly
clean
1FB95C89000
unkown
page read and write
clean
7FF54E907000
unkown image
page readonly
clean
18F16508000
unkown
page read and write
clean
7FF54A420000
unkown image
page readonly
clean
5664D7B000
stack
page read and write
clean
7FF51AB07000
unkown image
page readonly
clean
2B48A189000
unkown
page read and write
clean
7FF5CA95A000
unkown image
page readonly
clean
FD033FE000
stack
page read and write
clean
7FF570857000
unkown image
page readonly
clean
28FDD860000
unkown
page read and write
clean
18F16502000
unkown
page read and write
clean
C40000
heap default
page read and write
clean
2B48A187000
unkown
page read and write
clean
2B489770000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
28FDD800000
unkown
page read and write
clean
2C3DFA13000
unkown
page read and write
clean
7FF54A4EA000
unkown image
page readonly
clean
28FDDA00000
unkown image
page readonly
clean
7DF558172000
unkown image
page readonly
clean
7FF5CA246000
unkown image
page readonly
clean
7FF5ABF55000
unkown image
page readonly
clean
7FF54E865000
unkown image
page readonly
clean
7DF528882000
unkown image
page readonly
clean
28FDD884000
unkown
page read and write
clean
7FF54A37C000
unkown image
page readonly
clean
15901E71000
unkown
page read and write
clean
2B4898C2000
unkown
page read and write
clean
2B48A18E000
unkown
page read and write
clean
7FF50B139000
unkown image
page readonly
clean
2B489F80000
unkown
page read and write
clean
28FDD875000
unkown
page read and write
clean
15902390000
unkown image
page readonly
clean
28FDD660000
heap private
page read and write
clean
FEFF2000
unkown image
page readonly
clean
2B48A184000
unkown
page read and write
clean
2B48A11D000
unkown
page read and write
clean
7FF54E73F000
unkown image
page readonly
clean
7FF58607D000
unkown image
page readonly
clean
1350000
unkown
page execute and read and write
clean
2B489871000
unkown
page read and write
clean
7FF5861BD000
unkown image
page readonly
clean
7DF593F10000
unkown image
page readonly
clean
7FF5CA8F3000
unkown image
page readonly
clean
7FF51AA65000
unkown image
page readonly
clean
7FF50B143000
unkown image
page readonly
clean
7FF50B15E000
unkown image
page readonly
clean
D30000
unkown image
page readonly
clean
7FF50AFFD000
unkown image
page readonly
clean
7FF586135000
unkown image
page readonly
clean
28C0000
heap private
page read and write
clean
E31000
unkown
page read and write
clean
7FF5CA9E1000
unkown image
page readonly
clean
2B489902000
unkown
page read and write
clean
E25000
unkown
page read and write
clean
1AE0862A000
unkown
page read and write
clean
FF000000
unkown image
page readonly
clean
7DF528890000
unkown image
page readonly
clean
2A9F000
stack
page read and write
clean
7FF54A185000
unkown image
page readonly
clean
1CA1BCB0000
unkown image
page readonly
clean
1866F2F0000
unkown
page read and write
clean
2B48A602000
unkown
page read and write
clean
7FF51A96F000
unkown image
page readonly
clean
F2F000
stack
page read and write
clean
15902200000
unkown image
page readonly
clean
7FF50B157000
unkown image
page readonly
clean
1AE08702000
unkown
page read and write
clean
1FB95C50000
unkown
page read and write
clean
73F1E7D000
stack
page read and write
clean
7FF51AB1D000
unkown image
page readonly
clean
7FF51ABF4000
unkown image
page readonly
clean
15901E5B000
unkown
page read and write
clean
7FF54A437000
unkown image
page readonly
clean
2C3DF830000
unkown image
page readonly
clean
7FF54E8EF000
unkown image
page readonly
clean
7FF54A1E4000
unkown image
page readonly
clean
15901D60000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
DBA000
unkown
page execute and read and write
clean
7FF57083D000
unkown image
page readonly
clean
7DF5B9BD2000
unkown image
page readonly
clean
1CA1C200000
unkown image
page readonly
clean
2B48A198000
unkown
page read and write
clean
7FF51A9C5000
unkown image
page readonly
clean
7FF5ABE76000
unkown image
page readonly
clean
7FF570931000
unkown image
page readonly
clean
2B48A1A9000
unkown
page read and write
clean
7FF54A286000
unkown image
page readonly
clean
CAE000
stack
page read and write
clean
D1FB0FC000
stack
page read and write
clean
7FF54A3EE000
unkown image
page readonly
clean
1866F380000
heap default
page read and write
clean
566491C000
unkown
page read and write
clean
8FC000
unkown
page read and write
clean
7FF54A40F000
unkown image
page readonly
clean
2E2E000
unkown
page read and write
clean
28FDD829000
unkown
page read and write
clean
E2E000
stack
page read and write
clean
2C3DFA69000
unkown
page read and write
clean
2B48A169000
unkown
page read and write
clean
7FF51A9FB000
unkown image
page readonly
clean
15901C30000
unkown image
page readonly
clean
2B4898EC000
unkown
page read and write
clean
2B48A185000
unkown
page read and write
clean
2B48A19F000
unkown
page read and write
clean
F90000
heap private
page read and write
clean
1FB95C29000
unkown
page read and write
clean
7FF5ABE6D000
unkown image
page readonly
clean
4FAE000
stack
page read and write
clean
1CA1BCB0000
unkown image
page readonly
clean
18F1643C000
unkown
page read and write
clean
7DF57E5B0000
unkown image
page readonly
clean
1866F550000
unkown image
page readonly
clean
7FF5CA766000
unkown image
page readonly
clean
DB2000
unkown
page execute and read and write
clean
7FF51AB19000
unkown image
page readonly
clean
FEFF0000
unkown image
page readonly
clean
1CA1BE4F000
unkown
page read and write
clean
2E77000
unkown
page read and write
clean
2B48A620000
unkown
page read and write
clean
2B48A170000
unkown
page read and write
clean
2B48A164000
unkown
page read and write
clean
2B48A18E000
unkown
page read and write
clean
7FF5CA6A0000
unkown image
page readonly
clean
FD03B7B000
stack
page read and write
clean
2B48A19C000
unkown
page read and write
clean
C45000
heap default
page read and write
clean
7FF54A29F000
unkown image
page readonly
clean
7FF5862A1000
unkown image
page readonly
clean
2B48984F000
unkown
page read and write
clean
F0E000
stack
page read and write
clean
7FF54A423000
unkown image
page readonly
clean
7DF4D6510000
unkown image
page readonly
clean
7FF54A47D000
unkown image
page readonly
clean
2B48A1AF000
unkown
page read and write
clean
2B48A189000
unkown
page read and write
clean
2B48A19A000
unkown
page read and write
clean
1386000
heap private
page read and write
clean
7FF51AB47000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
1AE08CA0000
unkown
page read and write
clean
7FF54E8E9000
unkown image
page readonly
clean
7FF50B03F000
unkown image
page readonly
clean
2B48A190000
unkown
page read and write
clean
7FF54E9C4000
unkown image
page readonly
clean
FF010000
unkown image
page readonly
clean
50ED000
stack
page read and write
clean
2B48A17F000
unkown
page read and write
clean
7FF57091A000
unkown image
page readonly
clean
7FF54A2C1000
unkown image
page readonly
clean
7FF5862B1000
unkown image
page readonly
clean
7FF58622D000
unkown image
page readonly
clean
1CA1BCE0000
unkown image
page readonly
clean
7FF50B0B1000
unkown image
page readonly
clean
7FF54E9E1000
unkown image
page readonly
clean
1866F350000
unkown image
page readonly
clean
2B48A17D000
unkown
page read and write
clean
2B48A188000
unkown
page read and write
clean
7FF54A4FA000
unkown image
page readonly
clean
7DF558162000
unkown image
page readonly
clean
1FB95BF0000
unkown
page read and write
clean
6D50000
unkown
page read and write
clean
7FF54E903000
unkown image
page readonly
clean
EC7000
unkown
page execute and read and write
clean
7DF518EA2000
unkown image
page readonly
clean
7FF585E4A000
unkown image
page readonly
clean
1866F2A5000
heap private
page read and write
clean
E28000
heap default
page read and write
clean
2B48A19A000
unkown
page read and write
clean
7DF5D8650000
unkown image
page readonly
clean
1CA1BE29000
unkown
page read and write
clean
7DF5B9BC2000
unkown image
page readonly
clean
A30000
unkown image
page readonly
clean
FEFF0000
unkown image
page readonly
clean
2C3DF860000
heap default
page read and write
clean
18F16380000
unkown
page read and write
clean
56650FE000
stack
page read and write
clean
7FF57071B000
unkown image
page readonly
clean
7FF570196000
unkown image
page readonly
clean
56652FF000
stack
page read and write
clean
18F16230000
unkown image
page readonly
clean
6E30000
unkown
page read and write
clean
18F16422000
unkown
page read and write
clean
2B489F80000
unkown
page read and write
clean
7FF57085E000
unkown image
page readonly
clean
2B48A17D000
unkown
page read and write
clean
5D0000
unkown image
page readonly
clean
7FF51AC0A000
unkown image
page readonly
clean
2B489F90000
unkown image
page read and write
clean
2C3DFC00000
unkown image
page readonly
clean
7FF586289000
unkown image
page readonly
clean
582607A000
unkown
page read and write
clean
28FDD6A0000
unkown image
page readonly
clean
7FF58611C000
unkown image
page readonly
clean
1FB95C3C000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
7FF58622A000
unkown image
page readonly
clean
7FF570785000
unkown image
page readonly
clean
BFE000
stack
page read and write
clean
B49A6FD000
stack
page read and write
clean
7FF51AA7C000
unkown image
page readonly
clean
7FF54A2BC000
unkown image
page readonly
clean
2B48A17F000
unkown
page read and write
clean
1AE08CA0000
unkown
page read and write
clean
7FF5ABF5A000
unkown image
page readonly
clean
2B48984D000
unkown
page read and write
clean
7FF54A1D2000
unkown image
page readonly
clean
7FF51AAEE000
unkown image
page readonly
clean
2B489908000
unkown
page read and write
clean
7DF57E592000
unkown image
page readonly
clean
1360000
unkown
page read and write
clean
2961C7F000
stack
page read and write
clean
28FDD670000
unkown image
page readonly
clean
7FF50B17B000
unkown image
page readonly
clean
7FF570850000
unkown image
page readonly
clean
7FF570867000
unkown image
page readonly
clean
7FF50B22A000
unkown image
page readonly
clean
7DF558160000
unkown image
page readonly
clean
7FF51AC10000
unkown image
page readonly
clean
7FF51A577000
unkown image
page readonly
clean
F30000
unkown image
page readonly
clean
2B48A185000
unkown
page read and write
clean
D70000
unkown
page read and write
clean
D90000
unkown
page read and write
clean
2B489913000
unkown
page read and write
clean
7FF50B167000
unkown image
page readonly
clean
18F1649E000
unkown
page read and write
clean
7DF593F12000
unkown image
page readonly
clean
2B4898F9000
unkown
page read and write
clean
7FF54A40D000
unkown image
page readonly
clean
7DF47C460000
unkown image
page readonly
clean
7DF558172000
unkown image
page readonly
clean
7DF593F12000
unkown image
page readonly
clean
7FF5CA8D7000
unkown image
page readonly
clean
7FF50AD11000
unkown image
page readonly
clean
7FF585D97000
unkown image
page readonly
clean
7FF51A57B000
unkown image
page readonly
clean
7FF54E92B000
unkown image
page readonly
clean
7FF57088E000
unkown image
page readonly
clean
7FF54A3F7000
unkown image
page readonly
clean
73F1D7D000
stack
page read and write
clean
7FF54E52D000
unkown image
page readonly
clean
7FF51AAF3000
unkown image
page readonly
clean
D1FB37F000
stack
page read and write
clean
7DF55C652000
unkown image
page readonly
clean
2B489700000
heap private
page read and write
clean
7F232000
unkown image
page readonly
clean
7FF51AC01000
unkown image
page readonly
clean
2B4898A7000
unkown
page read and write
clean
2C3DF810000
unkown image
page readonly
clean
6D60000
unkown
page read and write
clean
2E11000
unkown
page read and write
clean
7FF54E9D1000
unkown image
page readonly
clean
7FF5ABEB3000
unkown image
page readonly
clean
2B48A198000
unkown
page read and write
clean
7FF51AA27000
unkown image
page readonly
clean
7FF51A6F1000
unkown image
page readonly
clean
2C3DF840000
unkown image
page readonly
clean
28FDD857000
unkown
page read and write
clean
7FF5CA697000
unkown image
page readonly
clean
28FDD842000
unkown
page read and write
clean
1AE08C70000
unkown
page read and write
clean
1866F3B1000
unkown
page read and write
clean
2C3DF810000
unkown image
page readonly
clean
7FF54A44B000
unkown image
page readonly
clean
1CA1C602000
unkown
page read and write
clean
D1FACBB000
unkown
page read and write
clean
7FF5ABF61000
unkown image
page readonly
clean
1FB95D08000
unkown
page read and write
clean
7FF5ABF39000
unkown image
page readonly
clean
7FF50B18E000
unkown image
page readonly
clean
7FF54A0FD000
unkown image
page readonly
clean
7FF54E5ED000
unkown image
page readonly
clean
7FF54A4FA000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
7DF5D8650000
unkown image
page readonly
clean
B59000
unkown
page read and write
clean
1390000
unkown image
page readonly
clean
7FF51A996000
unkown image
page readonly
clean
7FF50B221000
unkown image
page readonly
clean
7FF51AAFE000
unkown image
page readonly
clean
7FF54A4F1000
unkown image
page readonly
clean
56655FF000
stack
page read and write
clean
7FF5ABEDD000
unkown image
page readonly
clean
28FDD862000
unkown
page read and write
clean
7DF518EA0000
unkown image
page readonly
clean
2B48A17D000
unkown
page read and write
clean
2B489857000
unkown
page read and write
clean
7DF528872000
unkown image
page readonly
clean
7DF5B9BC2000
unkown image
page readonly
clean
949000
unkown
page read and write
clean
18F16470000
unkown
page read and write
clean
1CA1BE13000
unkown
page read and write
clean
15901D40000
unkown image
page readonly
clean
2B48A189000
unkown
page read and write
clean
1CA1BE4D000
unkown
page read and write
clean
B49A97E000
stack
page read and write
clean
94E387E000
stack
page read and write
clean
7DF518EA2000
unkown image
page readonly
clean
1AE084F0000
unkown image
page readonly
clean
7FF5AB7A2000
unkown image
page readonly
clean
58261F9000
stack
page read and write
clean
7FF54E20D000
unkown image
page readonly
clean
2B48A187000
unkown
page read and write
clean
1CA1BF08000
unkown
page read and write
clean
2C3E0300000
unkown
page read and write
clean
1FB95B50000
unkown image
page read and write
clean
7FF570853000
unkown image
page readonly
clean
1FB95ED0000
unkown image
page readonly
clean
7FF54E95D000
unkown image
page readonly
clean
7FF51AA6B000
unkown image
page readonly
clean
2C3DFB13000
unkown
page read and write
clean
7FF54E861000
unkown image
page readonly
clean
7FF51A44E000
unkown image
page readonly
clean
15901BF0000
unkown image
page read and write
clean
1CA1BE00000
unkown
page read and write
clean
1866F360000
unkown image
page readonly
clean
1CA1BF00000
unkown
page read and write
clean
7FF51A9DD000
unkown image
page readonly
clean
7FF58609B000
unkown image
page readonly
clean
7FF51AA22000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
7DF57E592000
unkown image
page readonly
clean
2E58000
unkown
page read and write
clean
7FF5CA907000
unkown image
page readonly
clean
2B48A603000
unkown
page read and write
clean
2C3DFA6F000
unkown
page read and write
clean
7FF54E6B5000
unkown image
page readonly
clean
7FF50B09C000
unkown image
page readonly
clean
15901C10000
unkown image
page readonly
clean
2B48A19E000
unkown
page read and write
clean
7DF593F30000
unkown image
page readonly
clean
73F197E000
stack
page read and write
clean
7FF5CA8E9000
unkown image
page readonly
clean
7FF51AB8A000
unkown image
page readonly
clean
7FF54E917000
unkown image
page readonly
clean
15901E13000
unkown
page read and write
clean
1866F3A8000
unkown
page read and write
clean
D40000
heap private
page execute and read and write
clean
2B48A1AE000
unkown
page read and write
clean
7FF5861DE000
unkown image
page readonly
clean
1AE08624000
unkown
page read and write
clean
2C3DF960000
unkown
page read and write
clean
1FB95B90000
unkown image
page readonly
clean
FD03A7F000
stack
page read and write
clean
6D6000
unkown
page read and write
clean
7FF50B183000
unkown image
page readonly
clean
7FF54A453000
unkown image
page readonly
clean
28FDD84E000
unkown
page read and write
clean
2B489829000
unkown
page read and write
clean
2B48984A000
unkown
page read and write
clean
1FB95BA0000
unkown image
page readonly
clean
2B489730000
unkown image
page readonly
clean
2B48A18E000
unkown
page read and write
clean
7FF54A4D2000
unkown image
page readonly
clean
94E3B7F000
stack
page read and write
clean
1CA1BE8E000
unkown
page read and write
clean
28FDD87B000
unkown
page read and write
clean
7FF5CA93E000
unkown image
page readonly
clean
7FF54E8F3000
unkown image
page readonly
clean
7FF51A975000
unkown image
page readonly
clean
29616FE000
stack
page read and write
clean
7FF54E8CE000
unkown image
page readonly
clean
1CA1C460000
unkown
page read and write
clean
7FF5ABF32000
unkown image
page readonly
clean
2C3E0332000
unkown
page read and write
clean
B56000
unkown
page read and write
clean
7FF5ABE8E000
unkown image
page readonly
clean
2C3DFA8A000
unkown
page read and write
clean
7FF58629A000
unkown image
page readonly
clean
7FF51AB3E000
unkown image
page readonly
clean
7DF57E5A2000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
2B48A19C000
unkown
page read and write
clean
1FB95C4B000
unkown
page read and write
clean
28FDD874000
unkown
page read and write
clean
7DF55C660000
unkown image
page readonly
clean
1AE08613000
unkown
page read and write
clean
7DF528880000
unkown image
page readonly
clean
2B48985E000
unkown
page read and write
clean
2B48A196000
unkown
page read and write
clean
6E20000
unkown
page read and write
clean
7FF586227000
unkown image
page readonly
clean
DAA000
unkown
page execute and read and write
clean
7DF558172000
unkown image
page readonly
clean
73F1C7E000
stack
page read and write
clean
7FF54E66B000
unkown image
page readonly
clean
7FF57073F000
unkown image
page readonly
clean
2B48A184000
unkown
page read and write
clean
1AE084C0000
unkown image
page readonly
clean
7FF51AA95000
unkown image
page readonly
clean
7F0000
unkown image
page readonly
clean
522A000
stack
page read and write
clean
7FF585E50000
unkown image
page readonly
clean
FD0337E000
stack
page read and write
clean
A50000
unkown
page read and write
clean
7FF54E529000
unkown image
page readonly
clean
2B48A18B000
unkown
page read and write
clean
1CA1BCA0000
heap private
page read and write
clean
7FF54A3D1000
unkown image
page readonly
clean
2B48A18C000
unkown
page read and write
clean
54FE000
stack
page read and write
clean
2B48A163000
unkown
page read and write
clean
28FDD85D000
unkown
page read and write
clean
7DF558170000
unkown image
page readonly
clean
2B48A186000
unkown
page read and write
clean
D1FB87D000
stack
page read and write
clean
7DF593F10000
unkown image
page readonly
clean
7FF5861BF000
unkown image
page readonly
clean
BAE000
stack
page read and write
clean
7FF5862B1000
unkown image
page readonly
clean
18F16513000
unkown
page read and write
clean
1866F3B1000
unkown
page read and write
clean
7FF5CA9B9000
unkown image
page readonly
clean
1866F310000
unkown
page read and write
clean
7DF528870000
unkown image
page readonly
clean
2B48A17D000
unkown
page read and write
clean
7FF585FAB000
unkown image
page readonly
clean
7FF5705B5000
unkown image
page readonly
clean
28FDD849000
unkown
page read and write
clean
550000
unkown image
page read and write
clean
2E81000
unkown
page read and write
clean
7DF518E92000
unkown image
page readonly
clean
7FF51A58C000
unkown image
page readonly
clean
73F187E000
stack
page read and write
clean
7FF5CA938000
unkown image
page readonly
clean
7FF54A4E4000
unkown image
page readonly
clean
296167E000
stack
page read and write
clean
7FF54A4D9000
unkown image
page readonly
clean
2B489760000
heap default
page read and write
clean
6D30000
unkown image
page readonly
clean
2B48A1B9000
unkown
page read and write
clean
2B48A19A000
unkown
page read and write
clean
7FF54E8ED000
unkown image
page readonly
clean
2B48A1AF000
unkown
page read and write
clean
7FF54E6B2000
unkown image
page readonly
clean
7FF5861D0000
unkown image
page readonly
clean
1AE08CA0000
unkown
page read and write
clean
2B48A17D000
unkown
page read and write
clean
1866F391000
unkown
page read and write
clean
29613CC000
unkown
page read and write
clean
2B48A185000
unkown
page read and write
clean
7FF5707B1000
unkown image
page readonly
clean
1330000
unkown image
page readonly
clean
2B489740000
unkown image
page readonly
clean
7FF54A44B000
unkown image
page readonly
clean
7FF50B214000
unkown image
page readonly
clean
5664FFF000
stack
page read and write
clean
7DF55C640000
unkown image
page readonly
clean
7FF54E6C4000
unkown image
page readonly
clean
7FF54A427000
unkown image
page readonly
clean
7FF50B1AA000
unkown image
page readonly
clean
7FF5CA8ED000
unkown image
page readonly
clean
7DF593F20000
unkown image
page readonly
clean
2B48A17F000
unkown
page read and write
clean
7DF57E5A2000
unkown image
page readonly
clean
94E3A7E000
stack
page read and write
clean
7FF54E35C000
unkown image
page readonly
clean
2770000
unkown
page read and write
clean
FD037FA000
stack
page read and write
clean
15901E66000
unkown
page read and write
clean
7FF5CA9D1000
unkown image
page readonly
clean
2B48988A000
unkown
page read and write
clean
1FB95BD0000
unkown image
page readonly
clean
7FF54A4E4000
unkown image
page readonly
clean
7DF558172000
unkown image
page readonly
clean
2E5D000
unkown
page read and write
clean
109E000
stack
page read and write
clean
6C70000
unkown image
page readonly
clean
28FDD833000
unkown
page read and write
clean
7DF558162000
unkown image
page readonly
clean
1AE084E0000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
18F16400000
unkown
page read and write
clean
15901E3F000
unkown
page read and write
clean
7FF54E8E4000
unkown image
page readonly
clean
7FF51A7B0000
unkown image
page readonly
clean
D1FB97F000
stack
page read and write
clean
2B489710000
unkown image
page readonly
clean
7FF51ABFA000
unkown image
page readonly
clean
7DF4B7A90000
unkown image
page readonly
clean
7FF50B150000
unkown image
page readonly
clean
B49A67E000
stack
page read and write
clean
6D2000
unkown
page read and write
clean
7FF54A413000
unkown image
page readonly
clean
7FF54A501000
unkown image
page readonly
clean
15902602000
unkown
page read and write
clean
7FF5861D7000
unkown image
page readonly
clean
1CA1BE3C000
unkown
page read and write
clean
7FF54A2EB000
unkown image
page readonly
clean
2B48A1AD000
unkown
page read and write
clean
2C3DFAE3000
unkown
page read and write
clean
1AE08B90000
unkown image
page readonly
clean
28FDD861000
unkown
page read and write
clean
7FF51A956000
unkown image
page readonly
clean
FF000000
unkown image
page readonly
clean
7FF54E93E000
unkown image
page readonly
clean
2E60000
unkown
page read and write
clean
7DF518EB0000
unkown image
page readonly
clean
3E11000
unkown
page read and write
clean
1866F3B5000
unkown
page read and write
clean
2C3DFACC000
unkown
page read and write
clean
7FF570839000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
1866F290000
unkown image
page read and write
clean
28FDDD80000
unkown image
page readonly
clean
1866F3B1000
unkown
page read and write
clean
A78000
heap default
page read and write
clean
ECB000
unkown
page execute and read and write
clean
18F16250000
unkown image
page readonly
clean
7FF50AFB6000
unkown image
page readonly
clean
2E6F000
unkown
page read and write
clean
2B4898AB000
unkown
page read and write
clean
D1FB67F000
stack
page read and write
clean
7FF54A423000
unkown image
page readonly
clean
7FF54A0C7000
unkown image
page readonly
clean
2B48A1A7000
unkown
page read and write
clean
7FF51A91B000
unkown image
page readonly
clean
7FF51A899000
unkown image
page readonly
clean
946000
unkown
page read and write
clean
3EA047F000
stack
page read and write
clean
28FDD864000
unkown
page read and write
clean
7FF586282000
unkown image
page readonly
clean
7DF5D8660000
unkown image
page readonly
clean
B49AB7F000
stack
page read and write
clean
7FF57078B000
unkown image
page readonly
clean
1FB96402000
unkown
page read and write
clean
7FF5CA900000
unkown image
page readonly
clean
18F16220000
heap private
page read and write
clean
7FF50B01B000
unkown image
page readonly
clean
2B48985D000
unkown
page read and write
clean
2B489710000
unkown image
page readonly
clean
2B48A002000
unkown
page read and write
clean
2B48A1DF000
unkown
page read and write
clean
2E47000
unkown
page read and write
clean
2B48A198000
unkown
page read and write
clean
D82000
unkown
page execute and read and write
clean
28FDD840000
unkown
page read and write
clean
7FF586061000
unkown image
page readonly
clean
2B48A190000
unkown
page read and write
clean
15902000000
unkown image
page readonly
clean
7FF5ABBE9000
unkown image
page readonly
clean
7FF586131000
unkown image
page readonly
clean
7DF528880000
unkown image
page readonly
clean
7FF5CA9DA000
unkown image
page readonly
clean
1866F3C0000
unkown
page read and write
clean
FD03CFF000
stack
page read and write
clean
7DF57E5A0000
unkown image
page readonly
clean
7DF528872000
unkown image
page readonly
clean
7FF51AABF000
unkown image
page readonly
clean
7DF558170000
unkown image
page readonly
clean
1FB95B60000
heap private
page read and write
clean
7DF518E90000
unkown image
page readonly
clean
1AE08626000
unkown
page read and write
clean
7FF51A452000
unkown image
page readonly
clean
15902380000
unkown image
page readonly
clean
1AE08602000
unkown
page read and write
clean
CEE000
stack
page read and write
clean
2B48A19B000
unkown
page read and write
clean
512D000
stack
page read and write
clean
2B48A187000
unkown
page read and write
clean
3E9FFFB000
stack
page read and write
clean
D8A000
unkown
page execute and read and write
clean
28FDD7C0000
unkown
page read and write
clean
2961B7F000
stack
page read and write
clean
28FDD865000
unkown
page read and write
clean
7FF54E9B9000
unkown image
page readonly
clean
7FF5CA8C4000
unkown image
page readonly
clean
7FF54A47D000
unkown image
page readonly
clean
7FF5708AD000
unkown image
page readonly
clean
FF002000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7FF54E900000
unkown image
page readonly
clean
7FF570931000
unkown image
page readonly
clean
D1FB4FC000
stack
page read and write
clean
7FF585D91000
unkown image
page readonly
clean
7FF586294000
unkown image
page readonly
clean
1866F396000
unkown
page read and write
clean
7FF54A501000
unkown image
page readonly
clean
52BE000
stack
page read and write
clean
7FF5861C3000
unkown image
page readonly
clean
3E9FE7E000
stack
page read and write
clean
7FF50B13D000
unkown image
page readonly
clean
2B48A167000
unkown
page read and write
clean
15901E2A000
unkown
page read and write
clean
15901E00000
unkown
page read and write
clean
7FF5708A7000
unkown image
page readonly
clean
18F16280000
heap default
page read and write
clean
2B48A1AB000
unkown
page read and write
clean
7FF54A42E000
unkown image
page readonly
clean
7FF54A413000
unkown image
page readonly
clean
1CA1BE52000
unkown
page read and write
clean
7FF5CA9E1000
unkown image
page readonly
clean
1FB95D02000
unkown
page read and write
clean
2B489916000
unkown
page read and write
clean
2B489859000
unkown
page read and write
clean
2B489883000
unkown
page read and write
clean
138A000
heap private
page read and write
clean
7FF5CA9C4000
unkown image
page readonly
clean
7FF51A779000
unkown image
page readonly
clean
7FF54A3E3000
unkown image
page readonly
clean
1FB960D0000
unkown image
page readonly
clean
A5A000
unkown
page read and write
clean
1FB95B70000
unkown image
page readonly
clean
7DF558170000
unkown image
page readonly
clean
2B48A14C000
unkown
page read and write
clean
DFB000
heap default
page read and write
clean
28FDE002000
unkown
page read and write
clean
2B48984C000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
1866F2B0000
unkown image
page readonly
clean
FEEF0000
unkown image
page readonly
clean
2C3DFA00000
unkown
page read and write
clean
D95000
unkown
page execute and read and write
clean
2B48A189000
unkown
page read and write
clean
2B489F30000
unkown image
page write copy
clean
7FF54E95A000
unkown image
page readonly
clean
2B489853000
unkown
page read and write
clean
2B48A600000
unkown
page read and write
clean
56656FF000
stack
page read and write
clean
7FF570921000
unkown image
page readonly
clean
2961A77000
stack
page read and write
clean
28FDD833000
unkown
page read and write
clean
18F16449000
unkown
page read and write
clean
DEF000
stack
page read and write
clean
7FF5ABE80000
unkown image
page readonly
clean
1CA1BE47000
unkown
page read and write
clean
1CA1BE6C000
unkown
page read and write
clean
28FDD86D000
unkown
page read and write
clean
7FF51A8D7000
unkown image
page readonly
clean
2B48A19B000
unkown
page read and write
clean
7FF51A961000
unkown image
page readonly
clean
7FF5706B6000
unkown image
page readonly
clean
7FF5CA90E000
unkown image
page readonly
clean
7FF51AAEA000
unkown image
page readonly
clean
7FF54A286000
unkown image
page readonly
clean
2B48A602000
unkown
page read and write
clean
94E367E000
stack
page read and write
clean
7FF50AF2B000
unkown image
page readonly
clean
C3E000
stack
page read and write
clean
7FF54A420000
unkown image
page readonly
clean
7FF54E85C000
unkown image
page readonly
clean
7FF5861D3000
unkown image
page readonly
clean
1CA1C000000
unkown image
page readonly
clean
7FF50B127000
unkown image
page readonly
clean
7DF558170000
unkown image
page readonly
clean
7FF5CA8EF000
unkown image
page readonly
clean
1FB95C7C000
unkown
page read and write
clean
2B48A1A9000
unkown
page read and write
clean
28FDD6C0000
heap default
page read and write
clean
2B489850000
unkown
page read and write
clean
FD032FB000
unkown
page read and write
clean
7FF5CA9B2000
unkown image
page readonly
clean
2B48A190000
unkown
page read and write
clean
18F1644D000
unkown
page read and write
clean
7F0D0000
unkown
page execute and read and write
clean
7FF51AB5B000
unkown image
page readonly
clean
7DF55C642000
unkown image
page readonly
clean
7FF570417000
unkown image
page readonly
clean
7FF51AB87000
unkown image
page readonly
clean
DC0000
heap default
page read and write
clean
7DF55C650000
unkown image
page readonly
clean
7FF5ABF44000
unkown image
page readonly
clean
2C3DFA3E000
unkown
page read and write
clean
7FF5862AA000
unkown image
page readonly
clean
2B48984B000
unkown
page read and write
clean
7FF5ABE73000
unkown image
page readonly
clean
7FF50ADD0000
unkown image
page readonly
clean
18F16600000
unkown image
page readonly
clean
7FF54A0C2000
unkown image
page readonly
clean
7FF5ABEAB000
unkown image
page readonly
clean
7DF57E590000
unkown image
page readonly
clean
1AE08E02000
unkown
page read and write
clean
7FF54E766000
unkown image
page readonly
clean
7FF54A47A000
unkown image
page readonly
clean
2B48A187000
unkown
page read and write
clean
3EA037F000
stack
page read and write
clean
94E33CB000
unkown
page read and write
clean
2B48A17D000
unkown
page read and write
clean
18F1649B000
unkown
page read and write
clean
28FDD902000
unkown
page read and write
clean
B49A38B000
unkown
page read and write
clean
7FF54E8C3000
unkown image
page readonly
clean
28FDD85A000
unkown
page read and write
clean
15901C60000
heap default
page read and write
clean
2E6A000
unkown
page read and write
clean
2C3E0202000
unkown
page read and write
clean
7DF57E5B0000
unkown image
page readonly
clean
FD038F7000
stack
page read and write
clean
7FF54A40A000
unkown image
page readonly
clean
F10000
unkown
page read and write
clean
2B48A185000
unkown
page read and write
clean
2C3DFA29000
unkown
page read and write
clean
1AE08CB0000
unkown
page read and write
clean
2B48A184000
unkown
page read and write
clean
2C3DF7F0000
unkown image
page read and write
clean
D92000
unkown
page execute and read and write
clean
2B48A165000
unkown
page read and write
clean
7DF456030000
unkown image
page readonly
clean
3EA017E000
stack
page read and write
clean
18F16413000
unkown
page read and write
clean
2B48A188000
unkown
page read and write
clean
53BE000
stack
page read and write
clean
7FF5CA933000
unkown image
page readonly
clean
There are 1122 hidden memdumps, click here to show them.