IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Contract and PI of 1500W.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Roaming\DnDcR\DnDcR.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Windows\System32\drivers\etc\hosts
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DnDcR.exe.log
ASCII text, with CRLF line terminators
modified
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Contract and PI of 1500W.exe
'C:\Users\user\Desktop\Contract and PI of 1500W.exe'
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
'C:\Users\user\Desktop\Contract and PI of 1500W.exe'
malicious
C:\Users\user\AppData\Roaming\DnDcR\DnDcR.exe
'C:\Users\user\AppData\Roaming\DnDcR\DnDcR.exe'
malicious
C:\Users\user\AppData\Roaming\DnDcR\DnDcR.exe
'C:\Users\user\AppData\Roaming\DnDcR\DnDcR.exe'
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
http://127.0.0.1:HTTP/1.1
unknown
clean
http://DynDns.comDynDNS
unknown
clean
https://TDIvwVTMK1.org
unknown
clean
http://VpGUaC.com
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
https://drive.google.com/
unknown
clean
https://doc-10-4k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/7ovq1830ci2vfc1r9jg3dm4bs2m26dfl/1634174850000/08714151441044389622/*/1iHaEbeRZQsul94yNukP5elwMyJtohxrw?e=download
142.250.184.193
clean
https://api.ipify.org%4
unknown
clean
http://mail.friendsequipment.com
unknown
clean
http://www.microsoft.co
unknown
clean
https://doc-10-4k-docs.googleusercontent.com/U
unknown
clean
https://support.google.com/chrome/?p=plugin_flash
unknown
clean
https://api.ipify.org%GETMozilla/5.0
unknown
clean
https://doc-10-4k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/7ovq1830
unknown
clean
https://doc-10-4k-docs.googleusercontent.com/~
unknown
clean
http://friendsequipment.com
unknown
clean
There are 6 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
friendsequipment.com
65.60.11.90
malicious
mail.friendsequipment.com
unknown
malicious
drive.google.com
172.217.168.46
clean
googlehosted.l.googleusercontent.com
142.250.184.193
clean
doc-10-4k-docs.googleusercontent.com
unknown
clean

IPs

IP
Domain
Country
Malicious
65.60.11.90
friendsequipment.com
United States
malicious
172.217.168.46
drive.google.com
United States
clean
142.250.184.193
googlehosted.l.googleusercontent.com
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DnDcR
clean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
DnDcR
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1DE51000
unkown
page read and write
malicious
22A0000
unkown
page execute and read and write
malicious
20090000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
7FA22000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1160000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD20000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
2258000
heap private
page read and write
clean
1CD10000
stack
page read and write
clean
1185000
stack
page read and write
clean
2230000
unkown image
page readonly
clean
47E9000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
49A000
heap default
page read and write
clean
8D2000
unkown image
page readonly
clean
1180000
stack
page read and write
clean
1DC5B000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
5CE000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1DE9F000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
E25000
heap default
page read and write
clean
11A0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
4DEE000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1130000
unkown
page read and write
clean
2A20000
unkown image
page readonly
clean
5260000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
C71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
20160000
unkown
page read and write
clean
20160000
unkown
page read and write
clean
1121000
heap default
page read and write
clean
1DD10000
unkown
page read and write
clean
7F722000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1180000
stack
page read and write
clean
2B10000
heap private
page read and write
clean
1CD30000
stack
page read and write
clean
1190000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
CB0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CB73000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1350000
unkown image
page readonly
clean
1CD60000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
20097000
unkown
page read and write
clean
41B000
unkown image
page read and write
clean
1CD60000
stack
page execute and read and write
clean
11B0000
stack
page read and write
clean
D50000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D00000
stack
page read and write
clean
20160000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20390000
unkown image
page readonly
clean
2CC0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
CB0000
unkown
page execute and read and write
clean
1DD10000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
20022000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1D200000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CB70000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
1D110000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DEA2000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DF60000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
11C6000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
94E000
stack
page read and write
clean
D00000
stack
page read and write
clean
C60000
unkown
page read and write
clean
2114D000
stack
page read and write
clean
C20000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
910000
unkown image
page read and write
clean
1150000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
10C6000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
DD0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1E37A000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1180000
stack
page read and write
clean
22D0000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
F01000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1EEB0000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1130000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
20175000
unkown
page read and write
clean
C71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
D51000
unkown
page read and write
clean
1038000
heap default
page read and write
clean
C70000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
20170000
unkown
page read and write
clean
10B6000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
DFE000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
10C6000
unkown
page read and write
clean
1180000
stack
page read and write
clean
7F730000
unkown image
page readonly
clean
1185000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
202E4000
heap private
page read and write
clean
B81000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD60000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD20000
stack
page read and write
clean
1330000
unkown
page read and write
clean
2001E000
unkown
page read and write
clean
7F730000
unkown image
page readonly
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1FFEE000
stack
page read and write
clean
D50000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C90000
heap default
page read and write
clean
1DD10000
unkown
page read and write
clean
1180000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD20000
stack
page execute and read and write
clean
7F720000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D00000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
7BE000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
7FA30000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
D9B000
unkown
page execute and read and write
clean
F40000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
F3E000
stack
page read and write
clean
2D11000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CBB0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
5090000
unkown
page execute and read and write
clean
20180000
unkown
page read and write
clean
1DCE0000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1190000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
20020000
unkown
page read and write
clean
1D3EC000
stack
page read and write
clean
81A000
unkown
page read and write
clean
2D00000
heap private
page execute and read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
1DC3D000
unkown
page execute and read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C70000
unkown image
page readonly
clean
D51000
unkown
page read and write
clean
B90000
unkown image
page readonly
clean
1DEF7000
unkown
page read and write
clean
7F350000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
CD0000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
200DE000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
2C70000
heap private
page read and write
clean
1110000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20190000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
A50000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1D660000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
12C0000
unkown image
page readonly
clean
1CD10000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1123000
heap default
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
200AD000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
CD0000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1D7AE000
stack
page read and write
clean
11A0000
stack
page read and write
clean
F6A000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0E0000
stack
page read and write
clean
1D0C0000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
10B6000
unkown
page read and write
clean
1560000
unkown image
page readonly
clean
1CD30000
stack
page read and write
clean
2BA0000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
200DC000
unkown
page read and write
clean
1DE40000
heap private
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0C5000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1DC55000
unkown
page execute and read and write
clean
A0F000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DBF0000
unkown image
page read and write
clean
1CA71000
unkown
page read and write
clean
D70000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
C80000
unkown
page read and write
clean
1DF5C000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD32000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
E1F000
heap default
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
C71000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
9B0000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
11B1000
stack
page read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
D00000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1323000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
1CB80000
stack
page read and write
clean
118C000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0B0000
stack
page execute and read and write
clean
20175000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
2B49000
heap private
page read and write
clean
D50000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
7FA12000
unkown image
page readonly
clean
807000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
8DE000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
202BD000
stack
page read and write
clean
1DF7D000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
C71000
unkown
page read and write
clean
1104000
unkown
page read and write
clean
7F8B0000
unkown image
page readonly
clean
29B9000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1E8A1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
14C0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CB90000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D40000
unkown
page read and write
clean
11B1000
stack
page read and write
clean
19C000
unkown
page read and write
clean
5230000
unkown
page read and write
clean
F20000
unkown image
page readonly
clean
1CB70000
stack
page read and write
clean
11B1000
stack
page read and write
clean
2B5E000
stack
page read and write
clean
8D0000
unkown image
page readonly
clean
7F720000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
200F0000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
7FA20000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1DAEA000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1FFFE000
unkown
page read and write
clean
20140000
unkown
page read and write
clean
F50000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
D51000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
F30000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
E00000
heap default
page read and write
clean
CC0000
unkown
page read and write
clean
2250000
heap private
page read and write
clean
1180000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1D4EE000
stack
page read and write
clean
D50000
unkown
page read and write
clean
B70000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
113B000
unkown
page execute and read and write
clean
7F0000
unkown image
page read and write
clean
8DE000
unkown image
page readonly
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
CDD000
stack
page read and write
clean
CB1000
unkown
page read and write
clean
20178000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
11B2000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
21157000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
7F1F0000
unkown image
page readonly
clean
11B0000
heap private
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1DF7B000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
39E000
unkown
page read and write
clean
1DC4A000
unkown
page execute and read and write
clean
1DD15000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CB70000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD1A000
unkown
page read and write
clean
12DE000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
5263000
unkown
page read and write
clean
1D99E000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20196000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1EE79000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1D0F0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
5270000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
5F4000
unkown
page read and write
clean
CC1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
C60000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
D51000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
C60000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
480000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
A5C000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
CF0000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0D0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1DCDC000
stack
page read and write
clean
20170000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
1DD10000
unkown
page read and write
clean
1CCF0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
107F000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
110F000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
4EEE000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1150000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0D0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
7F712000
unkown image
page readonly
clean
22E0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
7B2000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
200DA000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0E0000
unkown image
page read and write
clean
1DD18000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
D51000
unkown
page read and write
clean
1DE30000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D70000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
200FE000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
50D3000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1D36E000
stack
page read and write
clean
2AF0000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7B2000
unkown image
page readonly
clean
1CBA0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
10AF000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1160000
stack
page read and write
clean
1D130000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
119E000
stack
page read and write
clean
F54000
unkown
page read and write
clean
2B77000
unkown
page execute and read and write
clean
1CD30000
stack
page read and write
clean
1030000
heap default
page read and write
clean
1CD62000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1185000
stack
page read and write
clean
CB0000
unkown
page read and write
clean
1160000
stack
page read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11DE000
stack
page read and write
clean
1CA70000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
1DC00000
unkown image
page read and write
clean
C50000
unkown image
page readonly
clean
1DCF0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
20130000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
2C80000
unkown
page read and write
clean
1180000
stack
page read and write
clean
11A0000
heap private
page execute and read and write
clean
2BEE000
stack
page read and write
clean
200F6000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
4D4E000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
1D100000
stack
page read and write
clean
1160000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
5270000
heap private
page execute and read and write
clean
2B9D000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1E8A0000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1185000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
5330000
heap private
page execute and read and write
clean
1180000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
7FA10000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
21630000
heap private
page read and write
clean
30000
unkown image
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D50000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1140000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C20000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D60000
unkown image
page readonly
clean
11A0000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1310000
unkown
page read and write
clean
1180000
stack
page read and write
clean
C80000
unkown
page read and write
clean
1FE58000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
10000
unkown image
page readonly
clean
20170000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
16D0000
unkown image
page readonly
clean
1180000
stack
page read and write
clean
D51000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
C71000
unkown
page read and write
clean
1640000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
10C9000
unkown
page read and write
clean
1DD10000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
F30000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
47B0000
unkown
page read and write
clean
1116000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
2087E000
stack
page read and write
clean
20175000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD60000
stack
page read and write
clean
20170000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7BE000
unkown image
page readonly
clean
2B14000
heap private
page read and write
clean
1DED5000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
7FA12000
unkown image
page readonly
clean
1D100000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
2D40000
unkown
page read and write
clean
2B7B000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1E9DE000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1DD17000
unkown
page read and write
clean
1340000
heap private
page read and write
clean
CC0000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
10C6000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
1CD31000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D41000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
20170000
unkown
page read and write
clean
7FA20000
unkown image
page readonly
clean
F37000
heap default
page read and write
clean
1DC30000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
207FD000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
2255000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
99000
unkown
page read and write
clean
1DE2E000
stack
page read and write
clean
2B40000
heap private
page read and write
clean
D51000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
9F0000
unkown image
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
990000
unkown image
page readonly
clean
1180000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
39A000
unkown
page read and write
clean
1D0C0000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1D100000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
10CB000
unkown
page read and write
clean
20080000
unkown
page read and write
clean
8D0000
unkown image
page readonly
clean
C60000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
F8A000
heap default
page read and write
clean
980000
unkown image
page readonly
clean
200FB000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
CB1000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CB80000
stack
page read and write
clean
10A4000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
1137000
unkown
page execute and read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
13D0000
unkown image
page readonly
clean
1180000
stack
page read and write
clean
2BA0000
heap private
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CB70000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1190000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20380000
heap private
page execute and read and write
clean
2240000
unkown
page read and write
clean
1D0D9000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
10BB000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1180000
stack
page read and write
clean
11B0000
stack
page read and write
clean
CB1000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1550000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
20178000
unkown
page read and write
clean
20161000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
10C1000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
920000
unkown image
page readonly
clean
2CF0000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
50A0000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
3D11000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DC50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
B7D000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
5260000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
50D0000
unkown
page read and write
clean
1CD35000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
20021000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
5D0000
unkown
page execute read
clean
5F4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
7F352000
unkown image
page readonly
clean
1CD5E000
stack
page read and write
clean
1FFF0000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
11B0000
stack
page read and write
clean
D50000
unkown
page read and write
clean
7F5B0000
unkown image
page readonly
clean
1DD10000
unkown
page read and write
clean
2011D000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1D0E0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
80E000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
2115D000
unkown
page read and write
clean
1185000
stack
page read and write
clean
118A000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1170000
stack
page read and write
clean
7D0000
unkown image
page readonly
clean
20102000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DC2D000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
4B4000
heap default
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
3BB1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
2083E000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
920000
unkown image
page readonly
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
CC1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
CA0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD40000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
20174000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
2CEE000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
F5C000
heap default
page read and write
clean
80B000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1185000
stack
page read and write
clean
1185000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1111000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1D960000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
490000
heap default
page read and write
clean
20175000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
1CA72000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
C61000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D960000
unkown
page read and write
clean
112F000
stack
page read and write
clean
1DD17000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
D51000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1334000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5270000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
11C0000
heap private
page read and write
clean
1CD10000
stack
page read and write
clean
2010A000
unkown
page read and write
clean
1D0E0000
stack
page read and write
clean
A00000
unkown image
page readonly
clean
1114000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
D00000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
2000C000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CD50000
stack
page read and write
clean
1140000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
D00000
stack
page read and write
clean
1180000
stack
page read and write
clean
9D0000
unkown image
page readonly
clean
1DA9E000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
D51000
unkown
page read and write
clean
D00000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
20160000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1DC40000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
C90000
unkown
page execute and read and write
clean
1160000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
CC1000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
21150000
unkown
page read and write
clean
11B8000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
20111000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1DC46000
unkown
page execute and read and write
clean
7FFB0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
471000
unkown image
page readonly
clean
C60000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
2003E000
unkown
page read and write
clean
CA0000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
49D000
heap default
page read and write
clean
9E0000
unkown image
page readonly
clean
11A0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
2144F000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1170000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
1DEFD000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
E38000
heap default
page read and write
clean
11B0000
stack
page read and write
clean
1D0F0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
8F0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
F10000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
1180000
stack
page read and write
clean
132D000
unkown
page execute and read and write
clean
11B0000
stack
page read and write
clean
7F360000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
97C000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
CC1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11A3000
stack
page read and write
clean
20175000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CBC0000
stack
page read and write
clean
C80000
unkown image
page readonly
clean
E07000
heap default
page read and write
clean
B8D000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D50000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1DC52000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
10BB000
unkown
page read and write
clean
1324000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
CD0000
unkown
page read and write
clean
2260000
unkown
page read and write
clean
2B90000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CBAA000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
110D000
unkown
page execute and read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1D0C0000
stack
page read and write
clean
2010E000
unkown
page read and write
clean
D50000
unkown
page execute and read and write
clean
D51000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
200CD000
unkown
page read and write
clean
10BE000
stack
page read and write
clean
D10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1181000
stack
page read and write
clean
C80000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DC20000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20140000
unkown
page read and write
clean
9FE000
stack
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
3AA000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
2013B000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
21F0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
F2E000
stack
page read and write
clean
7FA22000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
1160000
stack
page read and write
clean
430000
unkown
page read and write
clean
1DD00000
unkown
page read and write
clean
50E0000
unkown
page read and write
clean
1CD16000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DC10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1180000
stack
page read and write
clean
CFC000
stack
page read and write
clean
1EE51000
unkown
page read and write
clean
1EADF000
stack
page read and write
clean
8D0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
41C000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
D00000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1550000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
CD0000
unkown
page read and write
clean
11D0000
unkown image
page readonly
clean
2013E000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
202E0000
heap private
page read and write
clean
1CD30000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
11B0000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1E376000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DBE7000
stack
page read and write
clean
20160000
unkown
page read and write
clean
CFB000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1DC24000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1EB1E000
stack
page read and write
clean
1180000
unkown image
page readonly
clean
12BF000
stack
page read and write
clean
7F352000
unkown image
page readonly
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DD18000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
2B70000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1181000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
C70000
unkown
page read and write
clean
1190000
unkown image
page readonly
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
50E0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
EE0000
heap private
page read and write
clean
20116000
unkown
page read and write
clean
E90000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
2032E000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
EA0000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0B0000
stack
page read and write
clean
20170000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
E20000
heap default
page read and write
clean
7F350000
unkown image
page readonly
clean
CE0000
unkown image
page readonly
clean
D51000
unkown
page read and write
clean
D40000
unkown
page read and write
clean
5F0000
heap default
page read and write
clean
D51000
unkown
page read and write
clean
1180000
stack
page read and write
clean
CB0000
unkown
page read and write
clean
B90000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
200BB000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20170000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
7F550000
unkown
page execute and read and write
clean
1DD10000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
201A0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7FA30000
unkown image
page readonly
clean
1CD14000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD50000
stack
page read and write
clean
7CE000
stack
page read and write
clean
1180000
stack
page read and write
clean
11B0000
stack
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
D50000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
B5C000
unkown
page read and write
clean
900000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD54000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
20028000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
E58000
heap default
page read and write
clean
7F710000
unkown image
page readonly
clean
1CD50000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1D0E0000
stack
page read and write
clean
817000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
D50000
unkown
page read and write
clean
E2A000
heap default
page read and write
clean
7F370000
unkown image
page readonly
clean
20175000
unkown
page read and write
clean
2970000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD15000
unkown
page read and write
clean
EE7000
heap private
page read and write
clean
1CA71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1DF75000
unkown
page read and write
clean
20160000
unkown
page read and write
clean
7F730000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
A4E000
stack
page read and write
clean
1DD16000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
D51000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7F710000
unkown image
page readonly
clean
20009000
unkown
page read and write
clean
D50000
unkown
page read and write
clean
1180000
stack
page read and write
clean
C71000
unkown
page read and write
clean
E10000
unkown image
page readonly
clean
1CD10000
stack
page read and write
clean
7F370000
unkown image
page readonly
clean
103E000
stack
page read and write
clean
C61000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
D60000
unkown image
page readonly
clean
2004F000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1180000
stack
page read and write
clean
20030000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1DD15000
unkown
page read and write
clean
3AD000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
7F722000
unkown image
page readonly
clean
7F722000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
20170000
unkown
page read and write
clean
10CB000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7FA10000
unkown image
page readonly
clean
D40000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
7F710000
unkown image
page readonly
clean
41C000
unkown image
page readonly
clean
20175000
unkown
page read and write
clean
10F0000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
C00000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
90F000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1DC9E000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
F50000
heap default
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
D51000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD16000
stack
page read and write
clean
1190000
stack
page read and write
clean
20170000
unkown
page read and write
clean
5240000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1DD20000
heap private
page read and write
clean
7F360000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
C71000
unkown
page read and write
clean
C70000
unkown
page read and write
clean
20175000
unkown
page read and write
clean
2154E000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1130000
unkown image
page readonly
clean
1DC42000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D10000
stack
page read and write
clean
D50000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
20190000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
CA0000
unkown
page read and write
clean
1D0B0000
stack
page read and write
clean
1180000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
1E8A1000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1C0000
unkown image
page readonly
clean
1170000
stack
page read and write
clean
50D0000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
11A0000
stack
page read and write
clean
8D2000
unkown image
page readonly
clean
11B0000
stack
page read and write
clean
20150000
unkown
page read and write
clean
2036E000
stack
page read and write
clean
12E1000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1EC1F000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
1DC57000
unkown
page execute and read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1D6AE000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1CA71000
unkown
page read and write
clean
E0E000
stack
page read and write
clean
D40000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1D0F0000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1180000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CD10000
stack
page read and write
clean
1CD10000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1185000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
C71000
unkown
page read and write
clean
11B0000
stack
page read and write
clean
1CA71000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1D960000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
CC1000
unkown
page read and write
clean
22C0000
unkown image
page readonly
clean
1DC23000
unkown
page execute and read and write
clean
1103000
unkown
page execute and read and write
clean
1CC2E000
stack
page read and write
clean
1CD30000
stack
page read and write
clean
1DD10000
unkown
page read and write
clean
1CA71000
unkown
page read and write
clean
1E0000
unkown image
page readonly
clean
2BB1000
unkown
page read and write
clean
1CD30000
stack
page read and write
clean
There are 1651 hidden memdumps, click here to show them.