IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Transferencia_29_11_2021 17.03.39.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Transferencia_29_11_2021 17.03.39.exe
"C:\Users\user\Desktop\Transferencia_29_11_2021 17.03.39.exe"
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
"C:\Users\user\Desktop\Transferencia_29_11_2021 17.03.39.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
http://127.0.0.1:HTTP/1.1
unknown
clean
http://DynDns.comDynDNS
unknown
clean
https://doc-08-6k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/q217t7l1ccsuj5vlu8k9v7g15blolesf/1638382200000/11612195336931281153/*/1V_BC3orZyo_CjeEmMyBVynAV_UOPmtl6?e=download
142.250.185.97
clean
https://sectigo.com/CPS0
unknown
clean
http://rTgNdy.com
unknown
clean
https://doc-08-6k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/q217t7l1
unknown
clean
http://go.micF.
unknown
clean
http://x7N6F9gC7jnN7HPYuUB7.net
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
https://drive.google.com/
unknown
clean
https://doc-08-6k-docs.googleusercontent.com/
unknown
clean
https://doc-08-6k-docs.googleusercontent.com/F
unknown
clean
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
unknown
clean
There are 3 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
csavarcsapagyexpress.hu
185.111.89.226
malicious
mail.csavarcsapagyexpress.hu
unknown
malicious
drive.google.com
142.250.185.78
clean
googlehosted.l.googleusercontent.com
142.250.185.97
clean
doc-08-6k-docs.googleusercontent.com
unknown
clean

IPs

IP
Domain
Country
Malicious
185.111.89.226
csavarcsapagyexpress.hu
Hungary
malicious
142.250.185.78
drive.google.com
United States
clean
142.250.185.97
googlehosted.l.googleusercontent.com
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\multivalent\Bursati
CANNIBALEAN
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1390000
unkown
page execute and read and write
malicious
1E611000
unkown
page read and write
malicious
17C1000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F110000
unkown image
page readonly
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1850000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C02000
unkown
page read and write
clean
1600000
heap default
page read and write
clean
207A0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1CAD2B40000
heap default
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1E2F0000
unkown
page read and write
clean
12B0000
unkown
page read and write
clean
20B28000
unkown
page read and write
clean
20761000
unkown
page read and write
clean
1380000
unkown
page read and write
clean
207FE000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
15E0000
stack
page read and write
clean
207F0000
unkown
page read and write
clean
1E3AA000
unkown
page execute and read and write
clean
1E25E000
unkown
page read and write
clean
1CAD2B90000
heap private
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1840000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF50471A000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1850000
stack
page read and write
clean
15E0000
stack
page read and write
clean
207F0000
unkown
page read and write
clean
16D6000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1DC9E000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
18B0000
stack
page read and write
clean
207D5000
unkown
page read and write
clean
7FF50477F000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
12D0000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
2A60000
heap private
page read and write
clean
15E5000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F120000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1E38D000
unkown
page execute and read and write
clean
7F110000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF504711000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
7DF50C740000
unkown image
page readonly
clean
12B0000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
7FF504658000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2AF0000
unkown image
page readonly
clean
208A0000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
15E5000
stack
page read and write
clean
207D5000
unkown
page read and write
clean
1870000
stack
page read and write
clean
14A0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
2AC0000
heap private
page read and write
clean
1E712000
unkown
page read and write
clean
20B21000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207E0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
1879000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E384000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C3B000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1360000
unkown image
page readonly
clean
207D0000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
15F0000
stack
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1E370000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1696000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E1000
stack
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1830000
stack
page read and write
clean
1350000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20738000
unkown
page read and write
clean
1CE50000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
21570000
stack
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
7F112000
unkown image
page readonly
clean
1E39D000
unkown
page execute and read and write
clean
20735000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
215EE000
stack
page read and write
clean
2079B000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1647000
heap default
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20740000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
15F0000
stack
page read and write
clean
1890000
stack
page read and write
clean
430000
unkown
page read and write
clean
17F0000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1E277000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
2220000
heap private
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1E383000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1DB0000
unkown image
page readonly
clean
1260000
unkown
page read and write
clean
1830000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
14A0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
1DC50000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1DFC0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1370000
unkown image
page readonly
clean
207D0000
unkown
page read and write
clean
1840000
stack
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
2156C000
stack
page read and write
clean
16E4000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
219E0000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
1CAD2C4A000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1300000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
18C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
207C0000
unkown
page read and write
clean
21580000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207F0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7EF50000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
9A000
unkown
page read and write
clean
16E7000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1CAD3250000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C42000
unkown
page read and write
clean
1860000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1780000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
1810000
heap private
page read and write
clean
1840000
stack
page read and write
clean
7F112000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
1350000
unkown
page read and write
clean
1850000
stack
page read and write
clean
1E286000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
7FF5046D6000
unkown image
page readonly
clean
12B0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1850000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7DF50C730000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
7DF50C742000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
A20000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
1840000
stack
page read and write
clean
2070E000
stack
page read and write
clean
20735000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1850000
stack
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF5046FB000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1820000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1CAD2C20000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1E714000
unkown
page read and write
clean
12B0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1319C7E000
stack
page read and write
clean
1D437000
heap private
page read and write
clean
7FFB0000
unkown image
page readonly
clean
480000
heap default
page read and write
clean
7FF50470A000
unkown image
page readonly
clean
1300000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
1CAD2C00000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15F0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C31000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
55A000
heap default
page read and write
clean
20730000
unkown
page read and write
clean
1319B7F000
stack
page read and write
clean
20735000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7DF40A5F0000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
471000
unkown image
page readonly
clean
14E0000
heap default
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1280000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
15D3000
stack
page read and write
clean
19C000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
20790000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1870000
stack
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1340000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1310000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2D02000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
7FF5046E9000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C47000
unkown
page read and write
clean
18A0000
stack
page read and write
clean
207F0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
7FF5046F9000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
7F130000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
18D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD3402000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
7DF50C732000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
15C0000
unkown image
page readonly
clean
15CA000
stack
page read and write
clean
1DDB0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15E5000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1280000
unkown
page read and write
clean
14C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
2230000
unkown
page read and write
clean
1C20000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
29D0000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1E73D000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1E3B0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1341000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
17D0000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1E41E000
stack
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
FE0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
1830000
stack
page read and write
clean
207D4000
unkown
page read and write
clean
12B0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1200000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1220000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1E250000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
16E7000
heap default
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1660000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
13195AC000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1846000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
17E0000
unkown image
page readonly
clean
207D5000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
7F110000
unkown image
page readonly
clean
1E500000
heap private
page execute and read and write
clean
20737000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207C0000
unkown
page read and write
clean
1340000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1300000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F112000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
20735000
unkown
page read and write
clean
1E390000
unkown
page read and write
clean
1DFC0000
unkown
page read and write
clean
20736000
unkown
page read and write
clean
14C0000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
14C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1E298000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C4D000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1300000
stack
page read and write
clean
1CAD2B80000
unkown image
page readonly
clean
1CAD2C52000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
195E000
stack
page read and write
clean
12D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
21586000
stack
page read and write
clean
1DFFE000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1817000
heap private
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E752000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15F0000
stack
page read and write
clean
207C0000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1864000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20780000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1840000
stack
page read and write
clean
2AD0000
unkown image
page readonly
clean
207D0000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
21F0000
unkown image
page readonly
clean
1696000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207F6000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
20804000
heap private
page read and write
clean
1D2C1000
unkown
page read and write
clean
1850000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
13A7000
unkown
page execute and read and write
clean
1860000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1E254000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
2280000
heap private
page read and write
clean
207F0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
207F0000
unkown
page read and write
clean
21590000
stack
page read and write
clean
1840000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F110000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1689000
unkown
page read and write
clean
1E3BB000
unkown
page execute and read and write
clean
20752000
unkown
page read and write
clean
1E3A2000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
207C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E718000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
2079E000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1CAD2ED0000
unkown image
page readonly
clean
7F110000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
1850000
stack
page read and write
clean
1CAD2C66000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
54E000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20D7D000
stack
page read and write
clean
20D90000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
14B0000
stack
page read and write
clean
1852000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
16D4000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1E380000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
55D000
heap default
page read and write
clean
1D2C1000
unkown
page read and write
clean
1880000
stack
page execute and read and write
clean
7DF50C750000
unkown image
page readonly
clean
1370000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
2075E000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
167D000
heap default
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF50472A000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1360000
unkown image
page readonly
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
4CE000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1890000
stack
page read and write
clean
1E294000
unkown
page read and write
clean
207C0000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
1370000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
12D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B30000
heap private
page execute and read and write
clean
207D5000
unkown
page read and write
clean
7FF5046DB000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF504700000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1700000
unkown
page read and write
clean
2AC9000
heap private
page read and write
clean
15E0000
stack
page read and write
clean
7FF504753000
unkown image
page readonly
clean
2088E000
stack
page read and write
clean
1220000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF5046DE000
unkown image
page readonly
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D9FC000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7DF50C750000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
12FC000
stack
page read and write
clean
20730000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1360000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
251000
unkown
page read and write
clean
1840000
stack
page read and write
clean
7F112000
unkown image
page readonly
clean
21580000
stack
page read and write
clean
20738000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
12A0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1CE51000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E311000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1F611000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1370000
unkown image
page readonly
clean
1840000
stack
page read and write
clean
20735000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1D430000
heap private
page read and write
clean
18A0000
stack
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1DFC0000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
1CAD2C55000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
2073A000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1850000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1E0FE000
stack
page read and write
clean
1860000
stack
page read and write
clean
15C0000
stack
page read and write
clean
7F110000
unkown image
page readonly
clean
1E742000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E14A000
stack
page read and write
clean
3209000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1490000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
30000
unkown image
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1850000
stack
page read and write
clean
12C0000
unkown
page read and write
clean
7FF50475A000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1CAD2C6E000
unkown
page read and write
clean
21580000
stack
page read and write
clean
1840000
stack
page read and write
clean
2BD0000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
2074B000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1820000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF50474C000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1370000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
12A0000
unkown
page execute and read and write
clean
21580000
stack
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E350000
unkown image
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
16D8000
heap default
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
7EFB0000
unkown image
page readonly
clean
1200000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1300000
stack
page read and write
clean
20720000
unkown
page read and write
clean
7FF5046F5000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
DA0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1E428000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
574000
heap default
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
16E4000
heap default
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1850000
stack
page read and write
clean
18CE000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1E750000
unkown
page read and write
clean
1672000
heap default
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
16D8000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E360000
unkown image
page read and write
clean
1083000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7DF50C740000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E4FC000
stack
page read and write
clean
424000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F120000
unkown image
page readonly
clean
1D2C0000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C53000
unkown
page read and write
clean
14C0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1890000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
20710000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1261000
unkown
page read and write
clean
1CAD2B30000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
12B0000
unkown
page read and write
clean
2075A000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
20D80000
stack
page read and write
clean
1860000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
2D60000
unkown
page read and write
clean
7DF50C730000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1890000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
1850000
stack
page read and write
clean
7FF5045B2000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1CAD2C13000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1CAD2AE0000
unkown image
page read and write
clean
7F130000
unkown image
page readonly
clean
15D0000
stack
page read and write
clean
20B21000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
31C0000
unkown
page read and write
clean
2290000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
424000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1820000
stack
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
207C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
7DF50C732000
unkown image
page readonly
clean
1840000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CE51000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
7FF5046C1000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
21580000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
1840000
stack
page read and write
clean
1890000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
219DD000
stack
page read and write
clean
20730000
unkown
page read and write
clean
7FF50477F000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1840000
stack
page read and write
clean
7FF504761000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
15E5000
stack
page read and write
clean
20B22000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D87F000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1290000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E60E000
stack
page read and write
clean
1300000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E32B000
unkown
page read and write
clean
1CAD2B00000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1880000
stack
page read and write
clean
14D0000
stack
page read and write
clean
1860000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E286000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
20735000
unkown
page read and write
clean
20737000
unkown
page read and write
clean
1880000
stack
page read and write
clean
1E2A6000
unkown
page read and write
clean
7FF50471E000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
1CAD2B20000
unkown image
page readonly
clean
A1F000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1DAFE000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1A20000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1C0000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
20950000
unkown image
page readonly
clean
21C0000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
2BC0000
heap private
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1860000
stack
page read and write
clean
12C0000
unkown
page read and write
clean
20730000
unkown image
page readonly
clean
207A0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20746000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1CAD2B00000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
2076D000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F112000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
12A0000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1280000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
21580000
stack
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E730000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1800000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
422000
unkown image
page read and write
clean
20730000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
15E1000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1E3A6000
unkown
page execute and read and write
clean
1260000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1360000
unkown image
page readonly
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1360000
unkown image
page readonly
clean
1DA0000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1E3B2000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E71E000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD3330000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1691000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1E270000
unkown
page read and write
clean
135E000
unkown
page read and write
clean
20810000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
14C0000
stack
page read and write
clean
207D8000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C1000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15CC000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
20890000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
12C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1340000
unkown
page read and write
clean
1E247000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1840000
stack
page read and write
clean
14E4000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
29F0000
unkown image
page readonly
clean
10000
unkown image
page readonly
clean
216EE000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
218DD000
stack
page read and write
clean
1689000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F120000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
FF0000
unkown image
page read and write
clean
1D2C1000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F112000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
14D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1DD9E000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF50468F000
unkown image
page readonly
clean
1270000
unkown
page read and write
clean
1820000
stack
page read and write
clean
207D0000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
7F120000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
1350000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1270000
unkown
page read and write
clean
16D4000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1E3B5000
unkown
page execute and read and write
clean
15C1000
stack
page read and write
clean
1370000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1350000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
160B000
heap default
page read and write
clean
15C0000
stack
page read and write
clean
1820000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1F672000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
16D9000
unkown
page read and write
clean
1840000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
207D5000
unkown
page read and write
clean
207F4000
unkown
page read and write
clean
1CAD2C40000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1F639000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
1340000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
7F122000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
484000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2B70000
unkown image
page readonly
clean
2084D000
stack
page read and write
clean
7F122000
unkown image
page readonly
clean
21580000
stack
page read and write
clean
15E0000
stack
page read and write
clean
14C0000
stack
page read and write
clean
1860000
stack
page read and write
clean
1850000
stack
page read and write
clean
20B20000
unkown
page read and write
clean
7F112000
unkown image
page readonly
clean
21590000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
7F130000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
21580000
stack
page read and write
clean
1E295000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E25A000
unkown
page read and write
clean
1860000
stack
page read and write
clean
91F000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1319D7A000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1870000
stack
page read and write
clean
1270000
unkown
page read and write
clean
484000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1830000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
185A000
stack
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
2D99000
unkown
page read and write
clean
15C1000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7FF5045C2000
unkown image
page readonly
clean
1CAD30D0000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E3C0000
unkown
page execute and read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20735000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
1300000
stack
page read and write
clean
15E5000
stack
page read and write
clean
20735000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E3D0000
heap private
page read and write
clean
21D0000
unkown
page execute read
clean
20730000
unkown
page read and write
clean
167D000
unkown
page read and write
clean
1CAD2C2A000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E2D9000
unkown
page read and write
clean
1310000
stack
page read and write
clean
1300000
stack
page read and write
clean
1690000
unkown
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20B20000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1673000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
20890000
unkown image
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1850000
stack
page read and write
clean
12D0000
unkown
page read and write
clean
1840000
stack
page read and write
clean
12B0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1E2E4000
unkown
page read and write
clean
199E000
stack
page read and write
clean
15E0000
stack
page read and write
clean
15D0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
20730000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E29F000
unkown
page read and write
clean
1860000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1850000
stack
page read and write
clean
15C0000
stack
page read and write
clean
24D000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
7DF50C742000
unkown image
page readonly
clean
1D2C1000
unkown
page read and write
clean
207D8000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207F0000
unkown
page read and write
clean
207D0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
12B0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1E3B7000
unkown
page execute and read and write
clean
20766000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20800000
heap private
page read and write
clean
7FE50000
unkown image
page readonly
clean
1860000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1885000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
207F0000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
1862000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1360000
unkown image
page readonly
clean
1E3A0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1850000
stack
page read and write
clean
12B0000
unkown
page read and write
clean
7FF50458F000
unkown image
page readonly
clean
20B20000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1E74A000
unkown
page read and write
clean
207D5000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2C5D000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
21580000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
550000
heap default
page read and write
clean
215A0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20D80000
stack
page read and write
clean
21580000
stack
page read and write
clean
21BD0000
heap private
page read and write
clean
20B20000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
2074E000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
15C0000
stack
page read and write
clean
12C0000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1CAD2BC1000
unkown image
page readonly
clean
15E0000
stack
page read and write
clean
20B1E000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
20730000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
2CD0000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
50E000
stack
page read and write
clean
81F000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
C20000
unkown image
page readonly
clean
15C0000
stack
page read and write
clean
1E272000
unkown
page read and write
clean
15E0000
stack
page read and write
clean
7F110000
unkown image
page readonly
clean
1350000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
15C0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
15D0000
stack
page read and write
clean
1D2C1000
unkown
page read and write
clean
1860000
stack
page read and write
clean
207D5000
unkown
page read and write
clean
1D2C1000
unkown
page read and write
clean
18A8000
stack
page read and write
clean
There are 1614 hidden memdumps, click here to show them.