IOC Report

loading gif

Files

File Path
Type
Category
Malicious
PEDIDO.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D
data
modified
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\PEDIDO.exe
'C:\Users\user\Desktop\PEDIDO.exe'
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
'C:\Users\user\Desktop\PEDIDO.exe'
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
'C:\Users\user\Desktop\PEDIDO.exe'
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
http://mail.tccinfaes.com
unknown
malicious
https://ZjJPdvMOyw165opG2hLg.orgD
unknown
clean
https://doc-0c-88-docs.googleusercontent.com/$
unknown
clean
http://127.0.0.1:HTTP/1.1
unknown
clean
http://x1.i.lencr.org/
unknown
clean
http://DynDns.comDynDNS
unknown
clean
https://ZjJPdvMOyw165opG2hLg.org
unknown
clean
https://doc-0c-88-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/d4i6055j
unknown
clean
http://cps.letsencrypt.org0
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
http://x1.c.lencr.org/0
unknown
clean
http://x1.i.lencr.org/0
unknown
clean
http://tccinfaes.com
unknown
clean
http://r3.o.lencr.org0
unknown
clean
https://support.google.com/chrome/?p=plugin_flash
unknown
clean
http://x1.i.lencr.org/H
unknown
clean
https://drive.google.com/l
unknown
clean
https://ZjJPdvMOyw165opG2hLg.orgt-
unknown
clean
http://GkEcfT.com
unknown
clean
http://r3.i.lencr.org/0)
unknown
clean
https://doc-0c-88-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/d4i6055jl54qaa9s37lc8j7fnoiuafqn/1634146200000/00014782062933200622/*/1_aiH9wqXGFfSAi2OVlXiWPSY325xMIrC?e=download
172.217.18.97
clean
https://drive.google.com/d
unknown
clean
https://doc-0c-88-docs.googleusercontent.com/
unknown
clean
There are 13 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
tccinfaes.com
188.93.227.195
malicious
mail.tccinfaes.com
unknown
malicious
drive.google.com
172.217.168.46
clean
googlehosted.l.googleusercontent.com
172.217.18.97
clean
edge-web.dual-gslb.spotify.com
35.186.224.25
clean
spclient.wg.spotify.com
unknown
clean
x1.i.lencr.org
unknown
clean
doc-0c-88-docs.googleusercontent.com
unknown
clean

IPs

IP
Domain
Country
Malicious
188.93.227.195
tccinfaes.com
Portugal
malicious
172.217.168.46
drive.google.com
United States
clean
172.217.18.97
googlehosted.l.googleusercontent.com
United States
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1DC11000
unkown
page read and write
malicious
2C30000
unkown
page execute and read and write
malicious
E40000
stack
page read and write
clean
1FD56000
unkown
page read and write
clean
E41000
stack
page read and write
clean
A00000
unkown
page read and write
clean
5FD000
heap default
page read and write
clean
10E7000
heap private
page read and write
clean
1D91B000
unkown
page execute and read and write
clean
EEB000
heap default
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
A00000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
E61000
stack
page read and write
clean
1FE30000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
FCD000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
415000
unkown image
page read and write
clean
F80000
stack
page read and write
clean
E60000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
590000
unkown image
page readonly
clean
F90000
stack
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
2115E000
stack
page read and write
clean
1FD68D90000
unkown image
page readonly
clean
A61000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D8B0000
unkown image
page read and write
clean
E50000
stack
page read and write
clean
1DA10000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7F062000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FD68D80000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E70000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
F85000
stack
page read and write
clean
C30000
unkown image
page readonly
clean
2310000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
570000
heap default
page read and write
clean
1FE30000
unkown
page read and write
clean
F19000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AD0000
stack
page read and write
clean
AA0000
stack
page read and write
clean
20D6D000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A9C000
stack
page read and write
clean
E61000
stack
page read and write
clean
AB0000
stack
page read and write
clean
10B0000
stack
page read and write
clean
E41000
stack
page read and write
clean
7DF5C7382000
unkown image
page readonly
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
760000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
AA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1D8E0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
7FF5BDF99000
unkown image
page readonly
clean
1FD68D00000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
574000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DBB6000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
6B0000
unkown image
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7EE90000
unkown
page execute and read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1EC72000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
7F070000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1EE2E000
stack
page read and write
clean
1DB85000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A20000
unkown
page read and write
clean
1DBF0000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DD08000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E41000
stack
page read and write
clean
401000
unkown image
page execute read
clean
1DB80000
unkown
page read and write
clean
1DB9E000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1EC11000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AB0000
stack
page read and write
clean
F80000
stack
page read and write
clean
1FD29000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
A10000
unkown
page read and write
clean
F80000
stack
page read and write
clean
12B0000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
1FD68E7E000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDFAD000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FD68D50000
heap default
page read and write
clean
20D60000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DA30000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1FD3A000
unkown
page read and write
clean
FC0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1FF10000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E40000
stack
page read and write
clean
A01000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
1FFC0000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
12B6000
heap private
page read and write
clean
E41000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1D90A000
unkown
page execute and read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1DBA2000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FD1B000
unkown
page read and write
clean
5FA000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1FD68E00000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
7FF5BDFC2000
unkown image
page readonly
clean
1D07E000
stack
page read and write
clean
7F4E2000
unkown image
page readonly
clean
20D8E000
unkown
page read and write
clean
E61000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
20D65000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
A40000
unkown
page execute and read and write
clean
D41000
unkown
page read and write
clean
614000
heap default
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AFB000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
690000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD0E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
20D62000
unkown
page read and write
clean
F90000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AE0000
unkown
page read and write
clean
1ECF1000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DBBD000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1D620000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
AF1000
unkown
page read and write
clean
20C5E000
stack
page read and write
clean
FF0000
stack
page read and write
clean
14C0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
F7D550B000
unkown
page read and write
clean
203F0000
stack
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DBAA000
unkown
page read and write
clean
1FE70000
heap private
page read and write
clean
1DB80000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E60000
stack
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
FBA000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B1000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7DF5C7390000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E70000
stack
page execute and read and write
clean
56E000
stack
page read and write
clean
FA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
E40000
stack
page read and write
clean
720000
unkown image
page readonly
clean
1FE30000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1D8E3000
unkown
page execute and read and write
clean
1FE30000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
E41000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
1D968000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
6C0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1CA0E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
FD0000
stack
page execute and read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A20000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1EC39000
unkown
page read and write
clean
1FDE8000
unkown
page read and write
clean
F90000
stack
page read and write
clean
E40000
stack
page read and write
clean
2305000
heap private
page read and write
clean
A11000
unkown
page read and write
clean
2B24000
heap private
page read and write
clean
F81000
stack
page read and write
clean
1DB87000
unkown
page read and write
clean
1DB9B000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
730000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
20400000
stack
page read and write
clean
A40000
unkown
page read and write
clean
7FF5BDFB9000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E4C000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A11000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
4F0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
7FE50000
unkown image
page readonly
clean
E4A000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD1D000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
1FD68E36000
unkown
page read and write
clean
E60000
stack
page read and write
clean
574000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E41000
stack
page read and write
clean
AD0000
stack
page read and write
clean
E41000
stack
page read and write
clean
1CA4C000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
203EE000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
7F062000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
F81000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
F0B000
unkown
page read and write
clean
1FD73000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A50000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FD38000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDFFD000
unkown image
page readonly
clean
7F050000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7F4E2000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
1FD68CF0000
unkown image
page readonly
clean
A10000
unkown
page read and write
clean
F85000
stack
page read and write
clean
1DB85000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD692D0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7C0000
unkown image
page readonly
clean
1DB87000
unkown
page read and write
clean
EFB000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
416000
unkown image
page readonly
clean
1FD68CE0000
unkown image
page read and write
clean
D41000
unkown
page read and write
clean
DB0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
2308000
heap private
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
1D0000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
2B20000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
FD0000
stack
page read and write
clean
E40000
stack
page read and write
clean
A20000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DB3F000
stack
page read and write
clean
E40000
stack
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
E41000
stack
page read and write
clean
1DB88000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E41000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
7FF5BE021000
unkown image
page readonly
clean
1FE60000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DBEE000
unkown
page read and write
clean
1ECF0000
unkown
page read and write
clean
1FE60000
unkown
page execute and read and write
clean
AA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AC0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10F0000
unkown image
page readonly
clean
20A8D000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
AB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FD68D30000
unkown image
page readonly
clean
1FE02000
unkown
page read and write
clean
7F500000
unkown image
page readonly
clean
1DB85000
unkown
page read and write
clean
AA0000
stack
page execute and read and write
clean
D41000
unkown
page read and write
clean
7FF5BDDF5000
unkown image
page readonly
clean
E60000
stack
page read and write
clean
E41000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E60000
stack
page read and write
clean
1FD56000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D00000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
1D8ED000
unkown
page execute and read and write
clean
A11000
unkown
page read and write
clean
E40000
stack
page read and write
clean
6A0000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E61000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
7B1000
unkown image
page readonly
clean
1FD68E02000
unkown
page read and write
clean
E40000
stack
page read and write
clean
20D68000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
E41000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
AA0000
stack
page read and write
clean
7FF5BDFA3000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AB0000
stack
page read and write
clean
2250000
unkown image
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
10B0000
stack
page read and write
clean
1FE30000
unkown
page read and write
clean
AD1000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FD68E40000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1FD69530000
unkown
page read and write
clean
1D8C0000
unkown image
page read and write
clean
7FF5BDFD6000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
31D000
unkown
page read and write
clean
7F4F0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FEFF000
stack
page read and write
clean
F0B000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
574000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
1EF2F000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
1D75E000
stack
page read and write
clean
19C000
unkown
page read and write
clean
E50000
stack
page read and write
clean
AE1000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
3190000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
2200000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
FB5000
stack
page read and write
clean
E61000
stack
page read and write
clean
E40000
stack
page read and write
clean
E50000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
E50000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E61000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FC0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7F052000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
F81000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AC0000
stack
page read and write
clean
E40000
stack
page read and write
clean
1DCAB000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
F81000
stack
page read and write
clean
1FD35000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
A60000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
AE0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
A30000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E41000
stack
page read and write
clean
7F070000
unkown image
page readonly
clean
E60000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
A70000
unkown
page read and write
clean
E56000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
31A000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
106E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
F53000
unkown
page read and write
clean
1D910000
unkown
page read and write
clean
AC0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A01000
unkown
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D47F000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
2210000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
3150000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A5E000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B6000
stack
page read and write
clean
1FD68F02000
unkown
page read and write
clean
E41000
stack
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FE21000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
6E0000
unkown
page read and write
clean
F80000
stack
page read and write
clean
5BE000
stack
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
E40000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
2C60000
unkown image
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D8D0000
unkown
page read and write
clean
1FD10000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
20D88000
unkown
page read and write
clean
203AD000
stack
page read and write
clean
E50000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD68D00000
unkown image
page readonly
clean
AB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A11000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
5C1000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
730000
unkown image
page readonly
clean
20D5F000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F62000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
5E0000
unkown
page execute read
clean
2C50000
heap private
page read and write
clean
21E0000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F7D5AFE000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7EEF0000
unkown image
page readonly
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1270000
unkown image
page readonly
clean
AB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DD24000
unkown
page read and write
clean
FB0000
unkown image
page read and write
clean
AF1000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
E50000
stack
page read and write
clean
E50000
stack
page read and write
clean
F80000
stack
page read and write
clean
AF1000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE40000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
F80000
stack
page read and write
clean
1FD68DA0000
heap private
page read and write
clean
E40000
stack
page read and write
clean
1DBB1000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A61000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E88000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
20D95000
unkown
page read and write
clean
4C39000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1FDCE000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F82000
stack
page read and write
clean
12C0000
unkown image
page readonly
clean
AD0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
20D95000
unkown
page read and write
clean
E40000
stack
page read and write
clean
10B0000
stack
page read and write
clean
720000
unkown image
page readonly
clean
1D7AA000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
1D8F0000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1FD35000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE10000
unkown
page read and write
clean
1FEBD000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DBD0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7EE000
stack
page read and write
clean
F80000
stack
page read and write
clean
7DF5C7370000
unkown image
page readonly
clean
A60000
unkown
page read and write
clean
F85000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A70000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F1B000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
E60000
stack
page read and write
clean
AD0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
F64000
heap default
page read and write
clean
1DB85000
unkown
page read and write
clean
A70000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD69602000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
F80000
stack
page read and write
clean
F88000
stack
page read and write
clean
A10000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F57000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
10B0000
stack
page read and write
clean
1FDE4000
unkown
page read and write
clean
F80000
stack
page read and write
clean
10B0000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
7FF5BDF6B000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
AD0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1FD690D0000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
99000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
7F4E0000
unkown image
page readonly
clean
A11000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7F500000
unkown image
page readonly
clean
10B0000
stack
page read and write
clean
A10000
unkown
page read and write
clean
1FD68DD1000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A11000
unkown
page read and write
clean
1FF00000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
7FF5BDF83000
unkown image
page readonly
clean
A00000
unkown
page read and write
clean
E41000
stack
page read and write
clean
E41000
stack
page read and write
clean
3060000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDF87000
unkown image
page readonly
clean
1FE30000
unkown
page read and write
clean
E41000
stack
page read and write
clean
7FF5BDE67000
unkown image
page readonly
clean
E50000
stack
page read and write
clean
10B0000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
22F0000
unkown image
page readonly
clean
1DD3E000
unkown
page read and write
clean
7F052000
unkown image
page readonly
clean
7DF5C7382000
unkown image
page readonly
clean
F55000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1FDF7000
unkown
page read and write
clean
1D8E4000
unkown
page read and write
clean
7FF5BD8E4000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
E50000
stack
page read and write
clean
1CF0E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FDD6000
unkown
page read and write
clean
7F060000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
1D915000
unkown
page execute and read and write
clean
D41000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
1DCA7000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
7DF5C7380000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
A61000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDFCB000
unkown image
page readonly
clean
1DA00000
unkown
page execute and read and write
clean
7FF5BDE70000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E41000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
F81000
stack
page read and write
clean
7FF5BDF92000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
7F4F0000
unkown image
page readonly
clean
7FF5BDB83000
unkown image
page readonly
clean
F85000
stack
page read and write
clean
F80000
stack
page read and write
clean
E41000
stack
page read and write
clean
6C0000
unkown image
page readonly
clean
F04000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7DF5C7370000
unkown image
page readonly
clean
7DF5C7372000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1DB85000
unkown
page read and write
clean
8EF000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
30E000
unkown
page read and write
clean
A50000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DD36000
unkown
page read and write
clean
1DD45000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
E60000
stack
page read and write
clean
E41000
stack
page read and write
clean
E40000
stack
page read and write
clean
1DB7C000
stack
page read and write
clean
1DB85000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
E80000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
1D37E000
stack
page read and write
clean
1DCF0000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E40000
stack
page read and write
clean
7FF5BDF7E000
unkown image
page readonly
clean
1FD3A000
unkown
page read and write
clean
20A90000
stack
page read and write
clean
AF1000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
F80000
stack
page read and write
clean
6E0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DBF0000
unkown
page read and write
clean
E41000
stack
page read and write
clean
1D8A7000
stack
page read and write
clean
E71000
stack
page read and write
clean
22D0000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
A00000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FDDA000
unkown
page read and write
clean
E41000
stack
page read and write
clean
B0C000
unkown
page execute and read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1D620000
unkown
page read and write
clean
F80000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
F58000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FD69461000
unkown image
page readonly
clean
92E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E65000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E61000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1FE35000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D900000
unkown
page read and write
clean
1CF10000
unkown
page read and write
clean
F81000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
F81000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
E41000
stack
page read and write
clean
10B0000
stack
page read and write
clean
E50000
stack
page read and write
clean
1DBAE000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1DB90000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
E60000
stack
page read and write
clean
E61000
stack
page read and write
clean
22E0000
heap private
page read and write
clean
E51000
stack
page read and write
clean
1FE34000
unkown
page read and write
clean
1D620000
unkown
page read and write
clean
1FE20000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FDA1000
unkown
page read and write
clean
F81000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
7F062000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
7F4E0000
unkown image
page readonly
clean
1FD99000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1E0000
unkown image
page readonly
clean
1FD68E6E000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
AF1000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
E41000
stack
page read and write
clean
1FE74000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1C0000
unkown image
page readonly
clean
E41000
stack
page read and write
clean
1DA20000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE54000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
10B2000
stack
page read and write
clean
A00000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A01000
unkown
page read and write
clean
A50000
unkown
page read and write
clean
AB0000
stack
page read and write
clean
CD0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1D65E000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
28D0000
unkown
page read and write
clean
1FD68E13000
unkown
page read and write
clean
E40000
stack
page read and write
clean
AB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
20BDC000
stack
page read and write
clean
FC0000
stack
page read and write
clean
E40000
stack
page read and write
clean
F90000
stack
page execute and read and write
clean
E70000
stack
page read and write
clean
E40000
stack
page read and write
clean
7DF5C7380000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDEFB000
unkown image
page readonly
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7F060000
unkown image
page readonly
clean
1EF6E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7FF5BDF9D000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
A30000
unkown
page execute and read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
FA0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F90000
stack
page read and write
clean
1DB85000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DC8D000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
7DF4C5230000
unkown image
page readonly
clean
20DF6000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FE50000
unkown
page read and write
clean
F81000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
20BE0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7F060000
unkown image
page readonly
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E41000
stack
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
A01000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
E50000
stack
page read and write
clean
1FDBB000
unkown
page read and write
clean
10AF000
stack
page read and write
clean
2300000
heap private
page read and write
clean
F80000
stack
page read and write
clean
1FD32000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1ECF1000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1FDC3000
unkown
page read and write
clean
580000
unkown image
page readonly
clean
7DF5C7390000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1DBEB000
unkown
page read and write
clean
E50000
stack
page read and write
clean
2919000
unkown
page read and write
clean
1FD68E2A000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
200B0000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
1FE35000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A2E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
7F052000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1FD49000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DD47000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DD32000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
1FF00000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D30000
heap default
page read and write
clean
D41000
unkown
page read and write
clean
7DF5C7372000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
21270000
heap private
page read and write
clean
1FE30000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
1D95E000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AE0000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
7FF5BDFA1000
unkown image
page readonly
clean
10B0000
stack
page read and write
clean
416000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FD3E000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
AF1000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
2B30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
E60000
stack
page read and write
clean
7FF5BE01B000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB85000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D00000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FD0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E45000
stack
page read and write
clean
E41000
stack
page read and write
clean
1DB8A000
unkown
page read and write
clean
20D7E000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
AE0000
unkown
page read and write
clean
AB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
1FE60000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1F06F000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D40000
unkown
page read and write
clean
7FF5BDF64000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
20D6B000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E50000
stack
page read and write
clean
10B0000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DD0C000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A11000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DC00000
heap private
page execute and read and write
clean
E41000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
F19000
unkown
page read and write
clean
F80000
stack
page read and write
clean
E40000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FD69450000
unkown image
page readonly
clean
E41000
stack
page read and write
clean
20D7B000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
A10000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
1DBE0000
unkown
page read and write
clean
7F4F2000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
1D8FD000
unkown
page execute and read and write
clean
1FD38000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
6C0000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
FE0000
stack
page read and write
clean
E40000
stack
page read and write
clean
AF0000
unkown
page read and write
clean
8CA000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D912000
unkown
page read and write
clean
E60000
stack
page read and write
clean
E53000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF1000
unkown
page read and write
clean
AA0000
stack
page read and write
clean
400000
unkown image
page readonly
clean
7FF5BE021000
unkown image
page readonly
clean
22E9000
heap private
page read and write
clean
D41000
unkown
page read and write
clean
1DB88000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
F85000
stack
page read and write
clean
D41000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
A61000
unkown
page read and write
clean
1FD44000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
A70000
unkown
page read and write
clean
F92000
stack
page read and write
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FC0000
stack
page read and write
clean
D34000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
A50000
unkown
page read and write
clean
1FE38000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1DB80000
unkown
page read and write
clean
1D917000
unkown
page execute and read and write
clean
E40000
stack
page read and write
clean
4C00000
unkown
page read and write
clean
A50000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
200C0000
heap private
page execute and read and write
clean
E60000
stack
page read and write
clean
1DB86000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
10E0000
heap private
page read and write
clean
7FFB2000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F81000
stack
page read and write
clean
10B0000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
200B0000
unkown
page read and write
clean
ECD000
heap default
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
A40000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E41000
stack
page read and write
clean
1FE50000
unkown
page read and write
clean
1FE35000
unkown
page read and write
clean
1FE56000
unkown
page read and write
clean
1FE30000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F85000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
30A000
unkown
page read and write
clean
1FD68E54000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1D902000
unkown
page read and write
clean
E60000
stack
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7F070000
unkown image
page readonly
clean
A61000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
1DB80000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
F80000
stack
page read and write
clean
1FD68D20000
unkown image
page readonly
clean
1FE38000
unkown
page read and write
clean
E40000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
5F0000
heap default
page read and write
clean
E40000
stack
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7F0000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
E61000
stack
page read and write
clean
1D906000
unkown
page execute and read and write
clean
A11000
unkown
page read and write
clean
E40000
stack
page read and write
clean
E60000
stack
page read and write
clean
F80000
stack
page read and write
clean
F80000
stack
page read and write
clean
D41000
unkown
page read and write
clean
10B0000
stack
page read and write
clean
7F4F2000
unkown image
page readonly
clean
D41000
unkown
page read and write
clean
E60000
stack
page read and write
clean
FA0000
stack
page read and write
clean
There are 1666 hidden memdumps, click here to show them.