IOC Report

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\20211129.exe
"C:\Users\user\Desktop\20211129.exe"
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\multivalent\Bursati
CANNIBALEAN
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
2220000
unkown
page execute and read and write
malicious
18900B20000
unkown
page read and write
clean
18900A83000
heap default
page read and write
clean
26C06C45000
unkown
page read and write
clean
7FF5C47C0000
unkown image
page readonly
clean
189010B0000
unkown image
page readonly
clean
24D4CD02000
unkown
page read and write
clean
7FF595964000
unkown image
page readonly
clean
7DF5AB390000
unkown image
page readonly
clean
7FF5BA378000
unkown image
page readonly
clean
26402268000
unkown
page read and write
clean
7DF5BE222000
unkown image
page readonly
clean
7FF5C46F4000
unkown image
page readonly
clean
423000
unkown image
page read and write
clean
7FF5BA21C000
unkown image
page readonly
clean
19D43D02000
unkown
page read and write
clean
19D491F0000
unkown
page read and write
clean
7DF5BE212000
unkown image
page readonly
clean
682587A000
stack
page read and write
clean
23EED590000
unkown image
page readonly
clean
7FF5A818A000
unkown image
page readonly
clean
7FF5BA38D000
unkown image
page readonly
clean
7DF5DA0E2000
unkown image
page readonly
clean
7DF5AB380000
unkown image
page readonly
clean
6825077000
stack
page read and write
clean
7FF59DFB6000
unkown image
page readonly
clean
19D494F8000
unkown
page read and write
clean
7DF55B9C2000
unkown image
page readonly
clean
26402263000
unkown
page read and write
clean
7FF5A88F0000
unkown image
page readonly
clean
7DF5AB380000
unkown image
page readonly
clean
24D4CB50000
unkown image
page readonly
clean
23EED025000
unkown
page read and write
clean
19D4941D000
unkown
page read and write
clean
19D43CFD000
unkown
page read and write
clean
7FF5460BE000
unkown image
page readonly
clean
7FF5958DF000
unkown image
page readonly
clean
19D494A2000
unkown
page read and write
clean
7FF59E18C000
unkown image
page readonly
clean
19D491FE000
unkown
page read and write
clean
7FF59E258000
unkown image
page readonly
clean
24D4D330000
unkown image
page write copy
clean
7FF59DAE4000
unkown image
page readonly
clean
26402100000
unkown image
page readonly
clean
19D44518000
unkown
page read and write
clean
23EED000000
unkown
page read and write
clean
26C06BC0000
unkown image
page readonly
clean
19D49320000
unkown
page read and write
clean
230000
unkown
page read and write
clean
7FF52546F000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF525480000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF595904000
unkown image
page readonly
clean
2250000
unkown
page read and write
clean
7FF595749000
unkown image
page readonly
clean
ED1F07E000
stack
page read and write
clean
19D44502000
unkown
page read and write
clean
7FF59593D000
unkown image
page readonly
clean
7FF5A8817000
unkown image
page readonly
clean
26C06B60000
unkown image
page readonly
clean
7FF59E28E000
unkown image
page readonly
clean
7DF55B9E0000
unkown image
page readonly
clean
19D492E0000
unkown
page read and write
clean
19D49330000
unkown
page read and write
clean
7DF438C70000
unkown image
page readonly
clean
7FF5C403C000
unkown image
page readonly
clean
7FF545E6D000
unkown image
page readonly
clean
7FF545940000
unkown image
page readonly
clean
7FF5BA41F000
unkown image
page readonly
clean
7FF546035000
unkown image
page readonly
clean
7FF5C446D000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF5251A8000
unkown image
page readonly
clean
7DF55B9E0000
unkown image
page readonly
clean
7FF5C4619000
unkown image
page readonly
clean
7FF5253A7000
unkown image
page readonly
clean
22F0000
heap private
page read and write
clean
19D493E0000
unkown
page read and write
clean
7FF595783000
unkown image
page readonly
clean
7FF545FE8000
unkown image
page readonly
clean
7FF5C47DE000
unkown image
page readonly
clean
19D44250000
unkown image
page readonly
clean
19D49350000
unkown
page read and write
clean
26C06C85000
unkown
page read and write
clean
24D4CCCB000
unkown
page read and write
clean
23EED03E000
unkown
page read and write
clean
19D44513000
unkown
page read and write
clean
1034AF9000
stack
page read and write
clean
19D43C8A000
unkown
page read and write
clean
7FF59DF2A000
unkown image
page readonly
clean
19D49220000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
21D0000
unkown
page read and write
clean
7FF5BA395000
unkown image
page readonly
clean
7FF59E1A7000
unkown image
page readonly
clean
7DF5CFD62000
unkown image
page readonly
clean
26401FF0000
unkown image
page readonly
clean
7FF5BA430000
unkown image
page readonly
clean
7FF59530A000
unkown image
page readonly
clean
26C06C7F000
unkown
page read and write
clean
24D4CD13000
unkown
page read and write
clean
19D43D14000
unkown
page read and write
clean
24D4CC67000
unkown
page read and write
clean
7FF59DDD1000
unkown image
page readonly
clean
1034979000
stack
page read and write
clean
7FF595A7B000
unkown image
page readonly
clean
19D49400000
unkown
page read and write
clean
7DF5B3BB0000
unkown image
page readonly
clean
A8588FE000
stack
page read and write
clean
7FF59E27D000
unkown image
page readonly
clean
19B000
unkown
page read and write
clean
7DF5B3B90000
unkown image
page readonly
clean
189009E0000
unkown
page read and write
clean
7FF595997000
unkown image
page readonly
clean
26C06C13000
unkown
page read and write
clean
19D494FC000
unkown
page read and write
clean
7DF55B9C0000
unkown image
page readonly
clean
26402240000
unkown
page read and write
clean
19D43C00000
unkown
page read and write
clean
7FF5959DA000
unkown image
page readonly
clean
7FF59DFEA000
unkown image
page readonly
clean
19D43BA0000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
938607D000
stack
page read and write
clean
7FF5BA3AA000
unkown image
page readonly
clean
7DF5BE210000
unkown image
page readonly
clean
7FF595947000
unkown image
page readonly
clean
7FF5BA167000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7FF525158000
unkown image
page readonly
clean
1EE79810000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
60E14FC000
stack
page read and write
clean
7FF5C4034000
unkown image
page readonly
clean
7FF595596000
unkown image
page readonly
clean
7FF5A8885000
unkown image
page readonly
clean
7FF5B9CCB000
unkown image
page readonly
clean
1EE79990000
unkown image
page readonly
clean
23EECFE0000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7DF5B3B92000
unkown image
page readonly
clean
19D49680000
unkown
page read and write
clean
19D49230000
unkown
page read and write
clean
7FF5BA368000
unkown image
page readonly
clean
ED1EC7D000
stack
page read and write
clean
19D49502000
unkown
page read and write
clean
7FF5BA444000
unkown image
page readonly
clean
7FF5BA1F2000
unkown image
page readonly
clean
23EED400000
unkown image
page readonly
clean
19D44BF0000
unkown
page read and write
clean
24D4CB80000
heap default
page read and write
clean
18900A6F000
unkown
page read and write
clean
23EECFE0000
unkown
page read and write
clean
7FF545FB2000
unkown image
page readonly
clean
7FF545FFD000
unkown image
page readonly
clean
7FF545FD7000
unkown image
page readonly
clean
7FF59577A000
unkown image
page readonly
clean
60E16FD000
stack
page read and write
clean
1EE792F0000
unkown image
page readonly
clean
7FF59E284000
unkown image
page readonly
clean
1EE79464000
unkown
page read and write
clean
682527B000
stack
page read and write
clean
24D4CBB0000
unkown
page read and write
clean
7FF545FDC000
unkown image
page readonly
clean
189007F0000
unkown
page read and write
clean
7FF5460CB000
unkown image
page readonly
clean
4D0000
unkown
page read and write
clean
7FF5A890B000
unkown image
page readonly
clean
9B000
unkown
page read and write
clean
7FF5A88EB000
unkown image
page readonly
clean
A858BFE000
stack
page read and write
clean
7DF53ADC0000
unkown image
page readonly
clean
19D492C0000
unkown
page read and write
clean
26C06D02000
unkown
page read and write
clean
7FF5BA45D000
unkown image
page readonly
clean
7FF5959D3000
unkown image
page readonly
clean
7FF52549B000
unkown image
page readonly
clean
26C06C67000
unkown
page read and write
clean
19D45070000
unkown
page read and write
clean
7FF545D96000
unkown image
page readonly
clean
2A40000
unkown
page read and write
clean
24D4CC00000
unkown
page read and write
clean
7FF59DF59000
unkown image
page readonly
clean
ED1ED7F000
stack
page read and write
clean
7FF5460AD000
unkown image
page readonly
clean
7FF595A8F000
unkown image
page readonly
clean
7FF5C44A9000
unkown image
page readonly
clean
7DF53ADB0000
unkown image
page readonly
clean
26402600000
unkown image
page readonly
clean
7FF5BA0EA000
unkown image
page readonly
clean
10349F9000
stack
page read and write
clean
1EE7945C000
unkown
page read and write
clean
8EFB37B000
stack
page read and write
clean
26402279000
unkown
page read and write
clean
19D44559000
unkown
page read and write
clean
7FF5C47EF000
unkown image
page readonly
clean
24D4D500000
unkown
page read and write
clean
24D4CB20000
heap private
page read and write
clean
1EE79400000
unkown
page read and write
clean
7FF59E29F000
unkown image
page readonly
clean
7FF5C47EF000
unkown image
page readonly
clean
7FF546005000
unkown image
page readonly
clean
7FF545EE6000
unkown image
page readonly
clean
26C06C7C000
unkown
page read and write
clean
23EECE80000
unkown image
page readonly
clean
7FF545EDD000
unkown image
page readonly
clean
19D494A0000
unkown
page read and write
clean
7DF5CFD50000
unkown image
page readonly
clean
23EED802000
unkown
page read and write
clean
19D43CA9000
unkown
page read and write
clean
9385C7E000
stack
page read and write
clean
26C070D0000
unkown image
page readonly
clean
7FF545E62000
unkown image
page readonly
clean
425000
unkown image
page readonly
clean
7FF525476000
unkown image
page readonly
clean
24D4D0D0000
unkown image
page readonly
clean
7FF5BA36C000
unkown image
page readonly
clean
ED1E97C000
stack
page read and write
clean
26C06B80000
unkown image
page readonly
clean
19D43D07000
unkown
page read and write
clean
7FF595633000
unkown image
page readonly
clean
7FF5959C5000
unkown image
page readonly
clean
19D43C9C000
unkown
page read and write
clean
19D43B30000
heap private
page read and write
clean
7DF4A9250000
unkown image
page readonly
clean
7FF524D15000
unkown image
page readonly
clean
21C0000
heap private
page read and write
clean
401000
unkown image
page execute read
clean
7DF5BE212000
unkown image
page readonly
clean
7FF54609E000
unkown image
page readonly
clean
19D43CBB000
unkown
page read and write
clean
7FF59577C000
unkown image
page readonly
clean
26402313000
unkown
page read and write
clean
7DF5CFD62000
unkown image
page readonly
clean
7FF5A85D3000
unkown image
page readonly
clean
7FF54609B000
unkown image
page readonly
clean
1EE792D0000
unkown image
page readonly
clean
7DF53ADB2000
unkown image
page readonly
clean
26402300000
unkown
page read and write
clean
1EE79600000
unkown image
page readonly
clean
7FF5BA353000
unkown image
page readonly
clean
7FF545C2A000
unkown image
page readonly
clean
7DF53ADA0000
unkown image
page readonly
clean
7FF5B849E000
unkown image
page readonly
clean
7DF5CFD70000
unkown image
page readonly
clean
23EECFB0000
unkown
page read and write
clean
26402802000
unkown
page read and write
clean
7FF595A5B000
unkown image
page readonly
clean
7FF545FC5000
unkown image
page readonly
clean
1034B79000
stack
page read and write
clean
24D4D532000
unkown
page read and write
clean
26C06C7B000
unkown
page read and write
clean
7FF5B9CD0000
unkown image
page readonly
clean
7FF59E1CD000
unkown image
page readonly
clean
7FF545EF2000
unkown image
page readonly
clean
19D491F8000
unkown
page read and write
clean
7FF5C47D4000
unkown image
page readonly
clean
7DF5BE220000
unkown image
page readonly
clean
7FF59597C000
unkown image
page readonly
clean
7FF5955C1000
unkown image
page readonly
clean
7DF459890000
unkown image
page readonly
clean
7FF5C4725000
unkown image
page readonly
clean
7FF5C47DB000
unkown image
page readonly
clean
7FF5A8859000
unkown image
page readonly
clean
7FF5959C9000
unkown image
page readonly
clean
7FF545914000
unkown image
page readonly
clean
7FF595A8D000
unkown image
page readonly
clean
19D440D0000
unkown image
page readonly
clean
19D43ED0000
unkown image
page readonly
clean
7FF595781000
unkown image
page readonly
clean
7FF5C47AF000
unkown image
page readonly
clean
7FF52524D000
unkown image
page readonly
clean
26C06C41000
unkown
page read and write
clean
7FF5C4729000
unkown image
page readonly
clean
19D49350000
unkown
page read and write
clean
23EED580000
unkown image
page readonly
clean
7FF5958C7000
unkown image
page readonly
clean
26C06C46000
unkown
page read and write
clean
23EECE40000
unkown image
page read and write
clean
19D494E1000
unkown
page read and write
clean
9385DFC000
stack
page read and write
clean
23EECE50000
heap private
page read and write
clean
18900A67000
unkown
page read and write
clean
7FF5959F5000
unkown image
page readonly
clean
189010C0000
unkown image
page readonly
clean
7DF5BE220000
unkown image
page readonly
clean
7FF545F4E000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2C20000
unkown image
page readonly
clean
19D4943C000
unkown
page read and write
clean
19D43BC0000
unkown
page read and write
clean
7DF5BE230000
unkown image
page readonly
clean
26402228000
unkown
page read and write
clean
19D44559000
unkown
page read and write
clean
7DF5BE222000
unkown image
page readonly
clean
26C06C6E000
unkown
page read and write
clean
26402400000
unkown image
page readonly
clean
19D44518000
unkown
page read and write
clean
9385F7B000
stack
page read and write
clean
ED1E87E000
stack
page read and write
clean
7FF525415000
unkown image
page readonly
clean
7FF59E1AC000
unkown image
page readonly
clean
7FF525166000
unkown image
page readonly
clean
7FF525380000
unkown image
page readonly
clean
7FF525494000
unkown image
page readonly
clean
26C06C62000
unkown
page read and write
clean
26C06B40000
unkown image
page read and write
clean
19D43C55000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7DF5B3BA0000
unkown image
page readonly
clean
ED1E31C000
unkown
page read and write
clean
23EED660000
unkown
page read and write
clean
7FF59E13D000
unkown image
page readonly
clean
7DF5DA0E0000
unkown image
page readonly
clean
26402213000
unkown
page read and write
clean
7FF595246000
unkown image
page readonly
clean
19D4945F000
unkown
page read and write
clean
26C06C29000
unkown
page read and write
clean
26C06C60000
unkown
page read and write
clean
7FF595A6D000
unkown image
page readonly
clean
7FF5C47CD000
unkown image
page readonly
clean
9385EFC000
stack
page read and write
clean
7FF525468000
unkown image
page readonly
clean
19D44415000
unkown
page read and write
clean
26C06BE0000
unkown
page read and write
clean
19D494DF000
unkown
page read and write
clean
18900920000
unkown
page read and write
clean
7FF5BA42B000
unkown image
page readonly
clean
7FF5BA3C5000
unkown image
page readonly
clean
7DF5DA0E0000
unkown image
page readonly
clean
2C10000
heap private
page read and write
clean
7DF55B9C0000
unkown image
page readonly
clean
19D44402000
unkown
page read and write
clean
26402010000
heap default
page read and write
clean
19D49449000
unkown
page read and write
clean
7FF545FC7000
unkown image
page readonly
clean
7FF5BA2DE000
unkown image
page readonly
clean
19D490F0000
unkown
page read and write
clean
7FF595848000
unkown image
page readonly
clean
18900A28000
heap default
page read and write
clean
7FF5A891F000
unkown image
page readonly
clean
189007E0000
unkown image
page read and write
clean
9F0000
unkown image
page readonly
clean
24D4CCBA000
unkown
page read and write
clean
26C06C76000
unkown
page read and write
clean
7DF5DA0F2000
unkown image
page readonly
clean
1EE79429000
unkown
page read and write
clean
BF0000
unkown image
page readonly
clean
ED1EE7F000
stack
page read and write
clean
26402780000
unkown image
page readonly
clean
7FF54601A000
unkown image
page readonly
clean
19D43B40000
unkown image
page readonly
clean
26C06C63000
unkown
page read and write
clean
19D43C6E000
unkown
page read and write
clean
26C06B60000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
ED1F17F000
stack
page read and write
clean
7FF5A8904000
unkown image
page readonly
clean
19D43CFD000
unkown
page read and write
clean
23EED013000
unkown
page read and write
clean
7DF55B9C2000
unkown image
page readonly
clean
19D491F0000
unkown
page read and write
clean
7FF546096000
unkown image
page readonly
clean
7FF59574F000
unkown image
page readonly
clean
26402255000
unkown
page read and write
clean
7FF595773000
unkown image
page readonly
clean
23EECE90000
unkown image
page readonly
clean
19D49210000
unkown
page read and write
clean
7FF5460BB000
unkown image
page readonly
clean
7FF5A886A000
unkown image
page readonly
clean
7FF595A4F000
unkown image
page readonly
clean
7FF5253F3000
unkown image
page readonly
clean
7FF5C457A000
unkown image
page readonly
clean
26C06C2E000
unkown
page read and write
clean
8EFB57E000
stack
page read and write
clean
7FF545FA4000
unkown image
page readonly
clean
19D49504000
unkown
page read and write
clean
7FF59E017000
unkown image
page readonly
clean
7FF5253BD000
unkown image
page readonly
clean
24D4CCC5000
unkown
page read and write
clean
24D4CB10000
unkown image
page read and write
clean
18901740000
unkown
page readonly
clean
19D44500000
unkown
page read and write
clean
7FF5253DD000
unkown image
page readonly
clean
7FF5C46FC000
unkown image
page readonly
clean
7FF52549E000
unkown image
page readonly
clean
22C000
unkown
page read and write
clean
1EE799A0000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF595A8F000
unkown image
page readonly
clean
1EE79A80000
unkown
page read and write
clean
7FF5C4627000
unkown image
page readonly
clean
18900A8A000
heap default
page read and write
clean
19D49220000
unkown
page read and write
clean
7DF5AB3A0000
unkown image
page readonly
clean
19D44504000
unkown
page read and write
clean
7FF59E1E3000
unkown image
page readonly
clean
19D44B00000
unkown
page read and write
clean
7FF545B7F000
unkown image
page readonly
clean
19D43B20000
unkown image
page read and write
clean
19D43CA7000
unkown
page read and write
clean
7FF5C4733000
unkown image
page readonly
clean
19D43C29000
unkown
page read and write
clean
19D43C91000
unkown
page read and write
clean
7FF5A84F3000
unkown image
page readonly
clean
23EED05F000
unkown
page read and write
clean
7DF5DA0F0000
unkown image
page readonly
clean
19D43C13000
unkown
page read and write
clean
19D44400000
unkown
page read and write
clean
7FF5C4089000
unkown image
page readonly
clean
7FF545DA8000
unkown image
page readonly
clean
26C06C49000
unkown
page read and write
clean
7FF5BA45F000
unkown image
page readonly
clean
7FF59599C000
unkown image
page readonly
clean
19D43C75000
unkown
page read and write
clean
24D4CCE2000
unkown
page read and write
clean
7FF595A74000
unkown image
page readonly
clean
1EE79478000
unkown
page read and write
clean
26C06B90000
unkown image
page readonly
clean
19D43B60000
unkown image
page readonly
clean
7FF59582D000
unkown image
page readonly
clean
26C06BB0000
heap default
page read and write
clean
264021E0000
unkown
page read and write
clean
7FF5BA15D000
unkown image
page readonly
clean
7FF59E1EA000
unkown image
page readonly
clean
7FF5C45FD000
unkown image
page readonly
clean
18900A20000
heap default
page read and write
clean
7DF5B3BA2000
unkown image
page readonly
clean
26C06C65000
unkown
page read and write
clean
4EA000
heap default
page read and write
clean
7FF59E182000
unkown image
page readonly
clean
24D4CB30000
unkown image
page readonly
clean
189017B0000
unkown
page read and write
clean
60E177E000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
26401FA0000
unkown image
page read and write
clean
7DF5BE230000
unkown image
page readonly
clean
501000
heap default
page read and write
clean
7FF59E1D5000
unkown image
page readonly
clean
19D49340000
unkown
page read and write
clean
24D4CB30000
unkown image
page readonly
clean
7FF595732000
unkown image
page readonly
clean
1EE79300000
unkown image
page readonly
clean
2300000
unkown
page read and write
clean
26C06C3C000
unkown
page read and write
clean
7DF5B3BA0000
unkown image
page readonly
clean
7DF4B1A60000
unkown image
page readonly
clean
7DF53ADA2000
unkown image
page readonly
clean
7DF5DA0F0000
unkown image
page readonly
clean
189009B5000
heap private
page read and write
clean
7FF5C47A8000
unkown image
page readonly
clean
2240000
heap private
page read and write
clean
682517A000
stack
page read and write
clean
1EE79320000
heap default
page read and write
clean
7FF595A48000
unkown image
page readonly
clean
8EFB47F000
stack
page read and write
clean
7DF5B3B92000
unkown image
page readonly
clean
7FF59E205000
unkown image
page readonly
clean
1EE79413000
unkown
page read and write
clean
A858CFE000
stack
page read and write
clean
1EE792D0000
unkown image
page readonly
clean
19D4942B000
unkown
page read and write
clean
19D49310000
unkown
page read and write
clean
26401FB0000
heap private
page read and write
clean
7FF59E26E000
unkown image
page readonly
clean
7FF5BA3A3000
unkown image
page readonly
clean
7DF53ADB0000
unkown image
page readonly
clean
7DF4D7FB0000
unkown image
page readonly
clean
18900A88000
heap default
page read and write
clean
19D494F2000
unkown
page read and write
clean
189009B9000
heap private
page read and write
clean
A858DFF000
stack
page read and write
clean
19D43B90000
heap default
page read and write
clean
26C06C6C000
unkown
page read and write
clean
26C06C2F000
unkown
page read and write
clean
ED1EF7F000
stack
page read and write
clean
7FF5A884D000
unkown image
page readonly
clean
7DF5DA0F2000
unkown image
page readonly
clean
7DF55B9D0000
unkown image
page readonly
clean
7FF5A891B000
unkown image
page readonly
clean
7FF5957E0000
unkown image
page readonly
clean
7FF54608F000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
189009B0000
heap private
page read and write
clean
938568C000
unkown
page read and write
clean
26402302000
unkown
page read and write
clean
7FF5959BD000
unkown image
page readonly
clean
D70000
unkown image
page readonly
clean
7FF59578D000
unkown image
page readonly
clean
1EE79502000
unkown
page read and write
clean
7DF5DA100000
unkown image
page readonly
clean
26C06C31000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
26C06C78000
unkown
page read and write
clean
1EE792C0000
heap private
page read and write
clean
26C06C3B000
unkown
page read and write
clean
7DF5CFD52000
unkown image
page readonly
clean
7FF5BA43D000
unkown image
page readonly
clean
7DF4BC0E0000
unkown image
page readonly
clean
7FF59E28B000
unkown image
page readonly
clean
24D4D402000
unkown
page read and write
clean
7FF595960000
unkown image
page readonly
clean
24D4CC13000
unkown
page read and write
clean
7FF595987000
unkown image
page readonly
clean
7FF595A8B000
unkown image
page readonly
clean
26C06C6A000
unkown
page read and write
clean
1EE79440000
unkown
page read and write
clean
7DF53ADB2000
unkown image
page readonly
clean
7FF546009000
unkown image
page readonly
clean
19D49452000
unkown
page read and write
clean
26C06C5F000
unkown
page read and write
clean
23EECE60000
unkown image
page readonly
clean
19D49234000
unkown
page read and write
clean
18901520000
unkown
page read and write
clean
7FF5460CF000
unkown image
page readonly
clean
7FF595A7E000
unkown image
page readonly
clean
24D4CC43000
unkown
page read and write
clean
7FF5253E9000
unkown image
page readonly
clean
7DF5AB392000
unkown image
page readonly
clean
24D4D260000
unkown image
page readonly
clean
19D49502000
unkown
page read and write
clean
7FF5A88DF000
unkown image
page readonly
clean
7FF5460B4000
unkown image
page readonly
clean
7FF545FBC000
unkown image
page readonly
clean
264020F0000
unkown image
page readonly
clean
7FF5BA34C000
unkown image
page readonly
clean
ED1EB7E000
stack
page read and write
clean
7FF5C4755000
unkown image
page readonly
clean
26C06C75000
unkown
page read and write
clean
26402202000
unkown
page read and write
clean
7FF5A88E6000
unkown image
page readonly
clean
19D494FA000
unkown
page read and write
clean
7FF5BA44E000
unkown image
page readonly
clean
7DF53ADA0000
unkown image
page readonly
clean
9385AFC000
stack
page read and write
clean
19D49410000
unkown
page read and write
clean
7FF59E25F000
unkown image
page readonly
clean
7FF59585C000
unkown image
page readonly
clean
7FF595797000
unkown image
page readonly
clean
7FF59564B000
unkown image
page readonly
clean
7DF4CDC20000
unkown image
page readonly
clean
7FF59E29F000
unkown image
page readonly
clean
60E147E000
stack
page read and write
clean
6824E7B000
unkown
page read and write
clean
18900800000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
60E187D000
stack
page read and write
clean
7FF595968000
unkown image
page readonly
clean
7FF5254AF000
unkown image
page readonly
clean
189009C0000
unkown
page read and write
clean
7FF5BA418000
unkown image
page readonly
clean
26C06C42000
unkown
page read and write
clean
7FF546013000
unkown image
page readonly
clean
1EE79513000
unkown
page read and write
clean
7DF5B3BB0000
unkown image
page readonly
clean
23EED102000
unkown
page read and write
clean
682547B000
stack
page read and write
clean
938637F000
stack
page read and write
clean
26C06C3A000
unkown
page read and write
clean
19D494A8000
unkown
page read and write
clean
7FF59560A000
unkown image
page readonly
clean
7FF5253B7000
unkown image
page readonly
clean
18900A6F000
unkown
page read and write
clean
7FF59DFE5000
unkown image
page readonly
clean
7FF59E197000
unkown image
page readonly
clean
7FF5A88D8000
unkown image
page readonly
clean
19D43C73000
unkown
page read and write
clean
7FF5A8863000
unkown image
page readonly
clean
19D494DB000
unkown
page read and write
clean
1EE79C02000
unkown
page read and write
clean
26C07250000
unkown image
page readonly
clean
19D443F0000
unkown
page read and write
clean
7DF55B9D0000
unkown image
page readonly
clean
7DF5CFD70000
unkown image
page readonly
clean
7FF5A891F000
unkown image
page readonly
clean
7FF5BA334000
unkown image
page readonly
clean
7FF5254AF000
unkown image
page readonly
clean
7DF5DA100000
unkown image
page readonly
clean
26C06C00000
unkown
page read and write
clean
21C9000
heap private
page read and write
clean
26C06C47000
unkown
page read and write
clean
8EFB27B000
stack
page read and write
clean
7FF595A56000
unkown image
page readonly
clean
19D492C0000
unkown
page read and write
clean
7FF5253FA000
unkown image
page readonly
clean
7FF5BA1FD000
unkown image
page readonly
clean
7FF52548D000
unkown image
page readonly
clean
24D4CB60000
unkown image
page readonly
clean
7DF55B9D2000
unkown image
page readonly
clean
7FF595940000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
425000
unkown image
page readonly
clean
26C06C4B000
unkown
page read and write
clean
7FF5A8483000
unkown image
page readonly
clean
7DF55B9D2000
unkown image
page readonly
clean
938627D000
stack
page read and write
clean
26402200000
unkown
page read and write
clean
1034A7F000
stack
page read and write
clean
7DF53ADA2000
unkown image
page readonly
clean
26C06C4D000
unkown
page read and write
clean
19D494AA000
unkown
page read and write
clean
1EE79402000
unkown
page read and write
clean
24D4D250000
unkown image
page readonly
clean
7DF5B3B90000
unkown image
page readonly
clean
26401FE0000
unkown image
page readonly
clean
7FF5BA45B000
unkown image
page readonly
clean
19D49300000
unkown
page read and write
clean
19D49350000
unkown
page read and write
clean
A85887B000
unkown
page read and write
clean
7FF5BA399000
unkown image
page readonly
clean
7DF5CFD50000
unkown image
page readonly
clean
7FF5BA119000
unkown image
page readonly
clean
682537F000
stack
page read and write
clean
7FF59E29D000
unkown image
page readonly
clean
7FF545C2E000
unkown image
page readonly
clean
7FF59E157000
unkown image
page readonly
clean
7FF546088000
unkown image
page readonly
clean
23EECEB0000
heap default
page read and write
clean
18900800000
unkown image
page readonly
clean
24D4CC29000
unkown
page read and write
clean
7FF5460CD000
unkown image
page readonly
clean
7FF5BA44B000
unkown image
page readonly
clean
18901760000
unkown
page read and write
clean
7FF525393000
unkown image
page readonly
clean
7FF5C402D000
unkown image
page readonly
clean
19D490D0000
unkown
page read and write
clean
1EE7946F000
unkown
page read and write
clean
7FF595843000
unkown image
page readonly
clean
7DF5B3BA2000
unkown image
page readonly
clean
7FF545FC3000
unkown image
page readonly
clean
2BF0000
heap private
page read and write
clean
7FF5C47BB000
unkown image
page readonly
clean
24D4CC6F000
unkown
page read and write
clean
7FF59DDA6000
unkown image
page readonly
clean
23EED002000
unkown
page read and write
clean
24D4CED0000
unkown image
page readonly
clean
7DF5CFD60000
unkown image
page readonly
clean
7FF59E06E000
unkown image
page readonly
clean
7FF5C47B6000
unkown image
page readonly
clean
7FF5A8855000
unkown image
page readonly
clean
7FF595950000
unkown image
page readonly
clean
A85897E000
stack
page read and write
clean
7FF5A882C000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
26401FC0000
unkown image
page readonly
clean
7FF5BA357000
unkown image
page readonly
clean
24D4CB90000
unkown image
page readonly
clean
7FF5A86BD000
unkown image
page readonly
clean
7FF5254AD000
unkown image
page readonly
clean
7FF595A5E000
unkown image
page readonly
clean
7FF5BA342000
unkown image
page readonly
clean
19D43D02000
unkown
page read and write
clean
19D490E0000
unkown
page read and write
clean
7FF595610000
unkown image
page readonly
clean
7DF5AB390000
unkown image
page readonly
clean
7FF595617000
unkown image
page readonly
clean
7FF5959A8000
unkown image
page readonly
clean
26C06B50000
heap private
page read and write
clean
7FF545F44000
unkown image
page readonly
clean
19D43CA4000
unkown
page read and write
clean
7DF5CFD60000
unkown image
page readonly
clean
23EECFE0000
unkown
page read and write
clean
19D49211000
unkown
page read and write
clean
D80000
unkown image
page readonly
clean
26C06ED0000
unkown image
page readonly
clean
18900830000
unkown image
page readonly
clean
682597D000
stack
page read and write
clean
21E0000
unkown image
page readonly
clean
7FF595983000
unkown image
page readonly
clean
7FF525370000
unkown image
page readonly
clean
7DF5AB392000
unkown image
page readonly
clean
7FF59E266000
unkown image
page readonly
clean
7FF59561F000
unkown image
page readonly
clean
23EED059000
unkown
page read and write
clean
7DF5AB382000
unkown image
page readonly
clean
19D43C3E000
unkown
page read and write
clean
26C06C44000
unkown
page read and write
clean
7FF595824000
unkown image
page readonly
clean
189009D0000
unkown
page read and write
clean
23EED029000
unkown
page read and write
clean
18900820000
unkown image
page readonly
clean
4C0000
unkown image
page readonly
clean
19D43C78000
unkown
page read and write
clean
18900960000
unkown image
page readonly
clean
938617E000
stack
page read and write
clean
7DF53ADC0000
unkown image
page readonly
clean
60E19FE000
stack
page read and write
clean
7DF5CFD52000
unkown image
page readonly
clean
9385D7E000
stack
page read and write
clean
1EE79800000
unkown image
page readonly
clean
19D49214000
unkown
page read and write
clean
18900A6F000
unkown
page read and write
clean
7FF5BA426000
unkown image
page readonly
clean
103452B000
unkown
page read and write
clean
19D43B70000
unkown image
page readonly
clean
19D492C0000
unkown
page read and write
clean
2190000
unkown
page execute read
clean
7FF5957B1000
unkown image
page readonly
clean
7FF5460CF000
unkown image
page readonly
clean
7FF595604000
unkown image
page readonly
clean
7FF59E26B000
unkown image
page readonly
clean
19D49350000
unkown
page read and write
clean
7FF595972000
unkown image
page readonly
clean
19D43B40000
unkown image
page readonly
clean
ED1E77B000
stack
page read and write
clean
23EECE60000
unkown image
page readonly
clean
7FF5B849E000
unkown image
page readonly
clean
26C06C3E000
unkown
page read and write
clean
7FF59571A000
unkown image
page readonly
clean
23EED200000
unkown image
page readonly
clean
7DF5AB3A0000
unkown image
page readonly
clean
18900D30000
unkown image
page readonly
clean
7DF5BE210000
unkown image
page readonly
clean
7FF5BA22F000
unkown image
page readonly
clean
7FF59553F000
unkown image
page readonly
clean
60E0FBB000
unkown
page read and write
clean
18901750000
unkown
page read and write
clean
7FF59E1D9000
unkown image
page readonly
clean
470000
heap default
page read and write
clean
7FF5BA226000
unkown image
page readonly
clean
23EECF90000
unkown image
page readonly
clean
1EE792B0000
unkown image
page read and write
clean
7FF5BA45F000
unkown image
page readonly
clean
A858AFE000
stack
page read and write
clean
24D4CC65000
unkown
page read and write
clean
26C07402000
unkown
page read and write
clean
7FF52547B000
unkown image
page readonly
clean
6825B7F000
stack
page read and write
clean
18901730000
unkown
page read and write
clean
8EFAD3B000
unkown
page read and write
clean
4E0000
heap default
page read and write
clean
7DF5AB382000
unkown image
page readonly
clean
7FF59565C000
unkown image
page readonly
clean
7FF5A848B000
unkown image
page readonly
clean
26401FC0000
unkown image
page readonly
clean
7DF5DA0E2000
unkown image
page readonly
clean
7FF5253E5000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF5A890E000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF5957B3000
unkown image
page readonly
clean
7FF59E14D000
unkown image
page readonly
clean
7FF5A8838000
unkown image
page readonly
clean
18900F30000
unkown image
page readonly
clean
7FF5C471D000
unkown image
page readonly
clean
18900940000
unkown
page read and write
clean
19D43C58000
unkown
page read and write
clean
7FF59E150000
unkown image
page readonly
clean
There are 739 hidden memdumps, click here to show them.