IOC Report

loading gif

Files

File Path
Type
Category
Malicious
FACTURAS.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\M9XgMRXaN30mgEl56ja236
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF6CBEB2FF77188695.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\FACTURAS.exe
"C:\Users\user\Desktop\FACTURAS.exe"
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Turcize6\Sacrocotyloidean8
SLIDFAST
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
3060000
unkown
page execute and read and write
malicious
7FF57B867000
unkown image
page readonly
clean
7FF59B651000
unkown image
page readonly
clean
46B55FE000
stack
page read and write
clean
7FF5A2E4E000
unkown image
page readonly
clean
1F242D02000
unkown
page read and write
clean
7FF59B1C7000
unkown image
page readonly
clean
7FF4F6BC9000
unkown image
page readonly
clean
2C40000
unkown image
page read and write
clean
7FF57B165000
unkown image
page readonly
clean
7DF5B1240000
unkown image
page readonly
clean
2435188B000
unkown
page read and write
clean
7FF4F6B2C000
unkown image
page readonly
clean
46B5579000
stack
page read and write
clean
7FF5072F7000
unkown image
page readonly
clean
7FF506EA1000
unkown image
page readonly
clean
1F74A579000
unkown
page read and write
clean
7FF4F69E2000
unkown image
page readonly
clean
7D259F9000
stack
page read and write
clean
7FF59B4BB000
unkown image
page readonly
clean
7FF50733A000
unkown image
page readonly
clean
24351770000
unkown image
page readonly
clean
7FF5DCC73000
unkown image
page readonly
clean
7FF59AD23000
unkown image
page readonly
clean
7FF5A34D3000
unkown image
page readonly
clean
17E0A770000
unkown image
page readonly
clean
17E0A990000
unkown
page read and write
clean
7DF4A7190000
unkown image
page readonly
clean
1F74A51C000
unkown
page read and write
clean
2A4A1713000
unkown
page read and write
clean
1F74A57D000
unkown
page read and write
clean
7FF59B580000
unkown image
page readonly
clean
24357000000
unkown
page read and write
clean
DC5967F000
stack
page read and write
clean
7DF589590000
unkown image
page readonly
clean
24357021000
unkown
page read and write
clean
2A4A18D0000
unkown image
page readonly
clean
243517A0000
heap default
page read and write
clean
1F74A581000
unkown
page read and write
clean
7FF5DCCDD000
unkown image
page readonly
clean
DC58EFF000
stack
page read and write
clean
1F749B50000
unkown image
page readonly
clean
7FF4F6C99000
unkown image
page readonly
clean
7FF5DCCBE000
unkown image
page readonly
clean
7FF4F6C37000
unkown image
page readonly
clean
424000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
2A4A1700000
unkown
page read and write
clean
7FF4F6BF7000
unkown image
page readonly
clean
1F74A5D0000
unkown
page read and write
clean
24351913000
unkown
page read and write
clean
1F74A5A5000
unkown
page read and write
clean
7FF4F6A62000
unkown image
page readonly
clean
DC59779000
stack
page read and write
clean
24357040000
unkown
page read and write
clean
7FF59B56D000
unkown image
page readonly
clean
17E0AA55000
heap private
page read and write
clean
24356F02000
unkown
page read and write
clean
7FF4F6992000
unkown image
page readonly
clean
7FF4F69D4000
unkown image
page readonly
clean
1E3FC2C0000
unkown
page read and write
clean
2A4A1AD0000
unkown image
page readonly
clean
7FF59B237000
unkown image
page readonly
clean
1F74A3B0000
unkown image
page read and write
clean
C0019FA000
stack
page read and write
clean
7FF4F6A8D000
unkown image
page readonly
clean
7DF5B1230000
unkown image
page readonly
clean
1F74A3A0000
unkown
page read and write
clean
24352900000
unkown image
page readonly
clean
24351730000
unkown image
page read and write
clean
7FF50731E000
unkown image
page readonly
clean
7FF507171000
unkown image
page readonly
clean
24351894000
unkown
page read and write
clean
1F74A58A000
unkown
page read and write
clean
7DF515040000
unkown image
page readonly
clean
1F242B60000
unkown image
page read and write
clean
1F74A545000
unkown
page read and write
clean
7FF59B53A000
unkown image
page readonly
clean
CA7DF1F000
stack
page read and write
clean
2A4A15A0000
unkown image
page readonly
clean
7FF5072E7000
unkown image
page readonly
clean
1F242D00000
unkown
page read and write
clean
1F749B10000
unkown image
page read and write
clean
1E3FCFC0000
unkown
page read and write
clean
7FF59B4CC000
unkown image
page readonly
clean
1E3FC2F0000
unkown image
page readonly
clean
243528F0000
unkown image
page readonly
clean
CA7E3FB000
stack
page read and write
clean
1F749CEC000
unkown
page read and write
clean
24351FF3000
unkown
page read and write
clean
1F749C4D000
unkown
page read and write
clean
1F74A578000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF5A3512000
unkown image
page readonly
clean
7FF5DCD4A000
unkown image
page readonly
clean
7FF4F68C5000
unkown image
page readonly
clean
17E0AC60000
unkown image
page readonly
clean
7FF59B54E000
unkown image
page readonly
clean
17E0A9B0000
unkown image
page readonly
clean
1F242C4F000
unkown
page read and write
clean
1F74AA00000
unkown
page read and write
clean
7FF59B3C5000
unkown image
page readonly
clean
46B547F000
stack
page read and write
clean
1F749CA5000
unkown
page read and write
clean
2962C7F000
stack
page read and write
clean
24352000000
unkown
page read and write
clean
7FF59B64A000
unkown image
page readonly
clean
7FF4F6A04000
unkown image
page readonly
clean
5C0000
heap default
page read and write
clean
1F74AA63000
unkown
page read and write
clean
7FF5A33D7000
unkown image
page readonly
clean
7DF5895A0000
unkown image
page readonly
clean
296287F000
stack
page read and write
clean
1E3FCC70000
unkown image
page readonly
clean
1F749B80000
heap default
page read and write
clean
7FF59B583000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2A4A164B000
unkown
page read and write
clean
1F74A55D000
unkown
page read and write
clean
1F749C57000
unkown
page read and write
clean
1F242D08000
unkown
page read and write
clean
7DF5895A0000
unkown image
page readonly
clean
7FF59B543000
unkown image
page readonly
clean
CA7E5F7000
stack
page read and write
clean
9B000
unkown
page read and write
clean
2A4A1651000
unkown
page read and write
clean
1E3FC488000
heap default
page read and write
clean
1F74A5AB000
unkown
page read and write
clean
7FF59B4B5000
unkown image
page readonly
clean
24356EE9000
unkown
page read and write
clean
243518BC000
unkown
page read and write
clean
1F74A5A4000
unkown
page read and write
clean
7FF4F69A4000
unkown image
page readonly
clean
17E0A7E7000
unkown
page read and write
clean
DC5917A000
stack
page read and write
clean
7FF59B3B1000
unkown image
page readonly
clean
D90000
unkown image
page readonly
clean
1F74A5A4000
unkown
page read and write
clean
1F74A3A0000
unkown
page read and write
clean
2435700E000
unkown
page read and write
clean
7FF4F6B41000
unkown image
page readonly
clean
2A4A1600000
unkown
page read and write
clean
46B54FF000
stack
page read and write
clean
7FF4F6813000
unkown image
page readonly
clean
C001BFE000
stack
page read and write
clean
24351813000
unkown
page read and write
clean
7FF59B639000
unkown image
page readonly
clean
2435188D000
unkown
page read and write
clean
24351E50000
unkown image
page readonly
clean
24356E3F000
unkown
page read and write
clean
7DF515030000
unkown image
page readonly
clean
19C000
unkown
page read and write
clean
C001C7E000
stack
page read and write
clean
7FF59B147000
unkown image
page readonly
clean
7FF57B88E000
unkown image
page readonly
clean
296252B000
unkown
page read and write
clean
2A4A1688000
unkown
page read and write
clean
DC58F7F000
stack
page read and write
clean
7FF5071AB000
unkown image
page readonly
clean
1F749CED000
unkown
page read and write
clean
17E0A7E0000
unkown
page read and write
clean
2B60000
unkown image
page readonly
clean
17E0A7EF000
unkown
page read and write
clean
24356F08000
unkown
page read and write
clean
7FF59B5BE000
unkown image
page readonly
clean
7FF59B5DA000
unkown image
page readonly
clean
1E3FC2D0000
unkown image
page readonly
clean
7FF5073C1000
unkown image
page readonly
clean
7FF4F6CC1000
unkown image
page readonly
clean
17E0A7E1000
unkown
page read and write
clean
7FF59B234000
unkown image
page readonly
clean
7FF4F6B6F000
unkown image
page readonly
clean
1F74A594000
unkown
page read and write
clean
7FF57B6B6000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF57B914000
unkown image
page readonly
clean
1E3FC580000
unkown image
page readonly
clean
7FF4F6BE3000
unkown image
page readonly
clean
7FF4F6BB7000
unkown image
page readonly
clean
1F74A585000
unkown
page read and write
clean
7FF5A2CFA000
unkown image
page readonly
clean
7DF5A92D2000
unkown image
page readonly
clean
17E0A790000
unkown
page read and write
clean
24357030000
unkown
page read and write
clean
1F242C4A000
unkown
page read and write
clean
17E0A9C0000
unkown image
page readonly
clean
7FF4F6CB1000
unkown image
page readonly
clean
243527E0000
unkown
page read and write
clean
24356CE0000
unkown
page read and write
clean
7DF504922000
unkown image
page readonly
clean
7FF59B46F000
unkown image
page readonly
clean
7FF507313000
unkown image
page readonly
clean
1F243330000
unkown
page read and write
clean
7FF59B141000
unkown image
page readonly
clean
7FF4F64C3000
unkown image
page readonly
clean
7FF5DCCAB000
unkown image
page readonly
clean
7DF504922000
unkown image
page readonly
clean
7FF4F6BE7000
unkown image
page readonly
clean
24351FF0000
unkown
page read and write
clean
24356C60000
unkown
page read and write
clean
1F74A56D000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5072CF000
unkown image
page readonly
clean
29625AF000
stack
page read and write
clean
7FF5073C1000
unkown image
page readonly
clean
1F74A58F000
unkown
page read and write
clean
7DF515040000
unkown image
page readonly
clean
1F749D13000
unkown
page read and write
clean
1F749B60000
unkown image
page readonly
clean
2A4A1647000
unkown
page read and write
clean
7FF5A35C1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
2A4A1E02000
unkown
page read and write
clean
7FF57B931000
unkown image
page readonly
clean
7DF5895B0000
unkown image
page readonly
clean
7DF5EA9C0000
unkown image
page readonly
clean
24357000000
unkown
page read and write
clean
590000
unkown image
page readonly
clean
1F243250000
unkown image
page readonly
clean
7FF507215000
unkown image
page readonly
clean
7DF5895A2000
unkown image
page readonly
clean
1F74A250000
unkown image
page readonly
clean
24356EB4000
unkown
page read and write
clean
7FF5A350B000
unkown image
page readonly
clean
7FF5A34E3000
unkown image
page readonly
clean
1E3FC3F0000
unkown
page read and write
clean
CA7E4FF000
stack
page read and write
clean
7FF50722C000
unkown image
page readonly
clean
2A4A1670000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF4F64DF000
unkown image
page readonly
clean
7FF4F68BF000
unkown image
page readonly
clean
C0016FB000
stack
page read and write
clean
7DF5EA9C2000
unkown image
page readonly
clean
7FF5DCC76000
unkown image
page readonly
clean
24357150000
unkown
page read and write
clean
DC59579000
stack
page read and write
clean
1F74A583000
unkown
page read and write
clean
7DF589592000
unkown image
page readonly
clean
2A4A1702000
unkown
page read and write
clean
7FF59AFC7000
unkown image
page readonly
clean
24357160000
unkown
page read and write
clean
2A4A1C50000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7DF5EA9D2000
unkown image
page readonly
clean
1F74A500000
unkown
page read and write
clean
7FF4F6CBA000
unkown image
page readonly
clean
24357044000
unkown
page read and write
clean
1F74A578000
unkown
page read and write
clean
DC5937F000
stack
page read and write
clean
2A4A163C000
unkown
page read and write
clean
7FF4F69D0000
unkown image
page readonly
clean
1F242C4C000
unkown
page read and write
clean
7DF504930000
unkown image
page readonly
clean
7FF4F69CB000
unkown image
page readonly
clean
1E3FC650000
unkown
page read and write
clean
C001D7F000
stack
page read and write
clean
7DF4AF0F0000
unkown image
page readonly
clean
C001DFE000
stack
page read and write
clean
7FF57B83D000
unkown image
page readonly
clean
7FF4F6BAE000
unkown image
page readonly
clean
1F74A577000
unkown
page read and write
clean
7DF5EA9D0000
unkown image
page readonly
clean
7FF4F6987000
unkown image
page readonly
clean
7FF507045000
unkown image
page readonly
clean
7FF5A3599000
unkown image
page readonly
clean
1F74A587000
unkown
page read and write
clean
1E3FC490000
heap default
page read and write
clean
1F749C29000
unkown
page read and write
clean
7FF5DCD5A000
unkown image
page readonly
clean
7FF4F69BD000
unkown image
page readonly
clean
21D0000
unkown
page read and write
clean
2A4A15C0000
unkown
page read and write
clean
1F74A5C2000
unkown
page read and write
clean
7FF5A34D6000
unkown image
page readonly
clean
17E0A7FB000
unkown
page read and write
clean
1F74A593000
unkown
page read and write
clean
7DF5A92C0000
unkown image
page readonly
clean
1F74A56D000
unkown
page read and write
clean
1F749B30000
unkown image
page readonly
clean
1F749B30000
unkown image
page readonly
clean
7DF5895A2000
unkown image
page readonly
clean
1F74A58F000
unkown
page read and write
clean
1E3FC6D5000
heap private
page read and write
clean
7FF57B921000
unkown image
page readonly
clean
7FF50721B000
unkown image
page readonly
clean
24351879000
unkown
page read and write
clean
1E3FC8F0000
unkown image
page readonly
clean
17E0A750000
unkown image
page readonly
clean
1E3FC4CF000
unkown
page read and write
clean
7FF507392000
unkown image
page readonly
clean
7FF5DCD61000
unkown image
page readonly
clean
7FF59B477000
unkown image
page readonly
clean
7FF4F6A1F000
unkown image
page readonly
clean
1F749C6F000
unkown
page read and write
clean
7FF5DCD51000
unkown image
page readonly
clean
1F242C4E000
unkown
page read and write
clean
7FF57B931000
unkown image
page readonly
clean
1F749BD0000
unkown image
page readonly
clean
1F74A5A3000
unkown
page read and write
clean
7FF4F6A73000
unkown image
page readonly
clean
7DF5EA9D2000
unkown image
page readonly
clean
7FF4F6A75000
unkown image
page readonly
clean
243517E0000
unkown image
page read and write
clean
243528D0000
unkown image
page readonly
clean
1F242B80000
unkown image
page readonly
clean
2A4A1540000
unkown image
page readonly
clean
17E0A7D6000
heap default
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF4F6A79000
unkown image
page readonly
clean
7DF5A92C2000
unkown image
page readonly
clean
24352C60000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7DF589592000
unkown image
page readonly
clean
24356CF0000
unkown
page read and write
clean
24356E62000
unkown
page read and write
clean
7FF4F6C92000
unkown image
page readonly
clean
17E0A7EF000
unkown
page read and write
clean
24351902000
unkown
page read and write
clean
7FF4F6B9E000
unkown image
page readonly
clean
1F749CAB000
unkown
page read and write
clean
7FF5072E0000
unkown image
page readonly
clean
1F74A577000
unkown
page read and write
clean
7FF4F6836000
unkown image
page readonly
clean
424000
unkown image
page readonly
clean
7DF5A92C2000
unkown image
page readonly
clean
7DF515022000
unkown image
page readonly
clean
7FF59B419000
unkown image
page readonly
clean
24356C70000
unkown
page read and write
clean
7FF57AFF9000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
1E3FD220000
unkown
page read and write
clean
2435183F000
unkown
page read and write
clean
7FF506BF5000
unkown image
page readonly
clean
1F749C00000
unkown
page read and write
clean
D80000
unkown image
page readonly
clean
1F242C70000
unkown
page read and write
clean
24351E60000
unkown image
page readonly
clean
CA7DE9B000
unkown
page read and write
clean
7DF504920000
unkown image
page readonly
clean
7FF4F6BD3000
unkown image
page readonly
clean
1F74A580000
unkown
page read and write
clean
2A4A167E000
unkown
page read and write
clean
1F74A583000
unkown
page read and write
clean
7FF59B5DD000
unkown image
page readonly
clean
7DF4E8890000
unkown image
page readonly
clean
7FF57B7B1000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
17E0A7FA000
unkown
page read and write
clean
1E3FC2D0000
unkown image
page readonly
clean
7FF4F6BCF000
unkown image
page readonly
clean
7FF507190000
unkown image
page readonly
clean
7FF57B73F000
unkown image
page readonly
clean
24356E5F000
unkown
page read and write
clean
DC58E7C000
unkown
page read and write
clean
7FF507241000
unkown image
page readonly
clean
7FF5DC595000
unkown image
page readonly
clean
7FF506A89000
unkown image
page readonly
clean
7FF4F6827000
unkown image
page readonly
clean
7FF4F6A46000
unkown image
page readonly
clean
2A4A1648000
unkown
page read and write
clean
24356E00000
unkown
page read and write
clean
1F749CBF000
unkown
page read and write
clean
17E0A750000
unkown image
page readonly
clean
7FF57B87B000
unkown image
page readonly
clean
24356E12000
unkown
page read and write
clean
7DF5B1222000
unkown image
page readonly
clean
1F74A587000
unkown
page read and write
clean
7FF4F6C3D000
unkown image
page readonly
clean
7DF5B1232000
unkown image
page readonly
clean
1F749C88000
unkown
page read and write
clean
7DF5A92C0000
unkown image
page readonly
clean
1F242C29000
unkown
page read and write
clean
7FF5A3592000
unkown image
page readonly
clean
2A4A1613000
unkown
page read and write
clean
17E0A7C0000
heap default
page read and write
clean
24352100000
unkown
page read and write
clean
24352910000
unkown image
page readonly
clean
1F74A55D000
unkown
page read and write
clean
7FF57B700000
unkown image
page readonly
clean
1F74A5B0000
unkown
page read and write
clean
1F749B20000
heap private
page read and write
clean
1F242BA0000
unkown image
page readonly
clean
2962B77000
stack
page read and write
clean
7FF4F6A11000
unkown image
page readonly
clean
24351CD0000
unkown image
page readonly
clean
7FF59B56F000
unkown image
page readonly
clean
7FF59B2E5000
unkown image
page readonly
clean
24356E20000
unkown
page read and write
clean
5E2000
heap default
page read and write
clean
1F74A579000
unkown
page read and write
clean
7FF59AE95000
unkown image
page readonly
clean
243517B0000
unkown image
page readonly
clean
21A0000
unkown
page execute read
clean
24351750000
unkown image
page readonly
clean
1E3FD200000
unkown
page read and write
clean
7FF5A351E000
unkown image
page readonly
clean
C001577000
stack
page read and write
clean
1F74A583000
unkown
page read and write
clean
7FF59B597000
unkown image
page readonly
clean
7DF5EA9C0000
unkown image
page readonly
clean
7FF57B843000
unkown image
page readonly
clean
1E3FC300000
unkown image
page readonly
clean
24356EF3000
unkown
page read and write
clean
7FF4F6CAA000
unkown image
page readonly
clean
1F242C13000
unkown
page read and write
clean
7DF504932000
unkown image
page readonly
clean
7DF515032000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF5072EE000
unkown image
page readonly
clean
7FF58F4D1000
unkown image
page readonly
clean
7FF5073A4000
unkown image
page readonly
clean
7FF5A34E0000
unkown image
page readonly
clean
7FF59B5B3000
unkown image
page readonly
clean
7FF59AD29000
unkown image
page readonly
clean
7FF59B42D000
unkown image
page readonly
clean
7FF4F6CBE000
unkown image
page readonly
clean
7DF5B1230000
unkown image
page readonly
clean
7DF504920000
unkown image
page readonly
clean
1F749D02000
unkown
page read and write
clean
7FF59B557000
unkown image
page readonly
clean
17E0A730000
unkown image
page read and write
clean
1F74AA6A000
unkown
page read and write
clean
7D25AFE000
stack
page read and write
clean
2962A7B000
stack
page read and write
clean
7FF5A35A4000
unkown image
page readonly
clean
C001AFB000
stack
page read and write
clean
1F74A57F000
unkown
page read and write
clean
1F74A58F000
unkown
page read and write
clean
7DF5895B0000
unkown image
page readonly
clean
1F242C8A000
unkown
page read and write
clean
7FF59B4E1000
unkown image
page readonly
clean
17E0ADE0000
unkown image
page readonly
clean
1F74A579000
unkown
page read and write
clean
1E3FC2B0000
unkown image
page read and write
clean
1F74AA02000
unkown
page read and write
clean
7FF59B3A6000
unkown image
page readonly
clean
7FF4F6A7C000
unkown image
page readonly
clean
243518FE000
unkown
page read and write
clean
7FF4F6C1E000
unkown image
page readonly
clean
7FF57B839000
unkown image
page readonly
clean
1E3FC6E0000
unkown
page read and write
clean
7FF57B8A7000
unkown image
page readonly
clean
7FF4F6829000
unkown image
page readonly
clean
1F242C7F000
unkown
page read and write
clean
1F74A593000
unkown
page read and write
clean
7FF57B6FD000
unkown image
page readonly
clean
7FF5073AA000
unkown image
page readonly
clean
1F749BB0000
unkown
page read and write
clean
7FF57B417000
unkown image
page readonly
clean
1F749CE9000
unkown
page read and write
clean
7DF5A92D0000
unkown image
page readonly
clean
1F74A5C2000
unkown
page read and write
clean
7DF5B1220000
unkown image
page readonly
clean
7FF4F6C12000
unkown image
page readonly
clean
17E0A7E8000
unkown
page read and write
clean
1F749CB5000
unkown
page read and write
clean
7FF507146000
unkown image
page readonly
clean
2A4A1570000
unkown image
page readonly
clean
1E3FC4CE000
unkown
page read and write
clean
7FF5A2E49000
unkown image
page readonly
clean
1E3FC410000
unkown
page read and write
clean
7FF4F6A25000
unkown image
page readonly
clean
7FF5072B7000
unkown image
page readonly
clean
1F74A402000
unkown
page read and write
clean
DC59277000
stack
page read and write
clean
7FF57B6E1000
unkown image
page readonly
clean
7FF4F6BCD000
unkown image
page readonly
clean
1F74AA02000
unkown
page read and write
clean
5B0000
heap private
page read and write
clean
24356F00000
unkown
page read and write
clean
C001F7D000
stack
page read and write
clean
243517D0000
unkown
page read and write
clean
7FF5DCD61000
unkown image
page readonly
clean
7DF504940000
unkown image
page readonly
clean
7FF4F6891000
unkown image
page readonly
clean
1F74A57C000
unkown
page read and write
clean
7DF515020000
unkown image
page readonly
clean
7DF5EA9E0000
unkown image
page readonly
clean
7FF507245000
unkown image
page readonly
clean
360000
unkown
page read and write
clean
7FF5073BA000
unkown image
page readonly
clean
7DF5A92E0000
unkown image
page readonly
clean
7FF59B44B000
unkown image
page readonly
clean
1F242D13000
unkown
page read and write
clean
2310000
heap private
page read and write
clean
1F242C3C000
unkown
page read and write
clean
7FF4F6BA3000
unkown image
page readonly
clean
7FF59B4E5000
unkown image
page readonly
clean
2320000
unkown
page read and write
clean
24352118000
unkown
page read and write
clean
7FF4F663C000
unkown image
page readonly
clean
17E0A7D1000
unkown
page read and write
clean
1F74A592000
unkown
page read and write
clean
7FF59B511000
unkown image
page readonly
clean
1E3FCAF0000
unkown image
page readonly
clean
1F74A59D000
unkown
page read and write
clean
7DF5A92E0000
unkown image
page readonly
clean
1F242BD0000
heap default
page read and write
clean
1F242C51000
unkown
page read and write
clean
7FF4F653F000
unkown image
page readonly
clean
1F74A581000
unkown
page read and write
clean
7FF5A35B5000
unkown image
page readonly
clean
7FF57B857000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF57B785000
unkown image
page readonly
clean
7FF5A35B1000
unkown image
page readonly
clean
7FF57B85E000
unkown image
page readonly
clean
24352102000
unkown
page read and write
clean
24356D00000
unkown
page read and write
clean
7FF57B5B5000
unkown image
page readonly
clean
7FF57B883000
unkown image
page readonly
clean
1F74A57F000
unkown
page read and write
clean
1F74A577000
unkown
page read and write
clean
7FF5A2DC7000
unkown image
page readonly
clean
1E3FC4E3000
heap default
page read and write
clean
7FF57B909000
unkown image
page readonly
clean
2962D7F000
stack
page read and write
clean
7FF59B3E6000
unkown image
page readonly
clean
7FF59B430000
unkown image
page readonly
clean
7FF59B36B000
unkown image
page readonly
clean
7FF4F6C3A000
unkown image
page readonly
clean
7FF59AFDC000
unkown image
page readonly
clean
1F242BB0000
unkown image
page readonly
clean
7FF57B853000
unkown image
page readonly
clean
C0017FA000
stack
page read and write
clean
7FF506A83000
unkown image
page readonly
clean
7FF5A34CD000
unkown image
page readonly
clean
1F749C54000
unkown
page read and write
clean
500000
unkown
page read and write
clean
7DF589590000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF50718D000
unkown image
page readonly
clean
7FF4F69B6000
unkown image
page readonly
clean
7FF59B3BF000
unkown image
page readonly
clean
2A60000
unkown
page read and write
clean
DC595FF000
stack
page read and write
clean
1F74A5A0000
unkown
page read and write
clean
1F749C4B000
unkown
page read and write
clean
1F749CAB000
unkown
page read and write
clean
CA7DF9F000
stack
page read and write
clean
2270000
heap private
page read and write
clean
7FF59B573000
unkown image
page readonly
clean
7FF59B569000
unkown image
page readonly
clean
1F74A54E000
unkown
page read and write
clean
2435189F000
unkown
page read and write
clean
7FF5A35C1000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF59B472000
unkown image
page readonly
clean
1F74A523000
unkown
page read and write
clean
7FF57B8AD000
unkown image
page readonly
clean
24356E4C000
unkown
page read and write
clean
17E0A800000
unkown
page read and write
clean
7FF59B58E000
unkown image
page readonly
clean
1F74A573000
unkown
page read and write
clean
1F243402000
unkown
page read and write
clean
24357160000
unkown
page read and write
clean
24357024000
unkown
page read and write
clean
7FF59B587000
unkown image
page readonly
clean
C001B7F000
stack
page read and write
clean
7FF59B661000
unkown image
page readonly
clean
7FF5DCD55000
unkown image
page readonly
clean
1F74A57E000
unkown
page read and write
clean
7FF5A34C6000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
1E3FD230000
unkown
page read and write
clean
7FF59B35D000
unkown image
page readonly
clean
1E3FD280000
unkown
page read and write
clean
7FF59B415000
unkown image
page readonly
clean
24351AD0000
unkown image
page readonly
clean
7FF4F6B45000
unkown image
page readonly
clean
7FF5DCC6D000
unkown image
page readonly
clean
1F74A58A000
unkown
page read and write
clean
1F749C82000
unkown
page read and write
clean
2A4A1520000
unkown image
page read and write
clean
2A4A1540000
unkown image
page readonly
clean
2300000
unkown image
page readonly
clean
7DF515032000
unkown image
page readonly
clean
1F74A55F000
unkown
page read and write
clean
7FF57B7B5000
unkown image
page readonly
clean
7DF515030000
unkown image
page readonly
clean
46B518A000
unkown
page read and write
clean
7FF5A35BA000
unkown image
page readonly
clean
2A4A1621000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF57B850000
unkown image
page readonly
clean
7FF5A2DC9000
unkown image
page readonly
clean
7DF5B1222000
unkown image
page readonly
clean
7FF58F4D1000
unkown image
page readonly
clean
1E3FC430000
unkown image
page readonly
clean
7FF5072C9000
unkown image
page readonly
clean
1E3FC4C7000
unkown
page read and write
clean
35C000
unkown
page read and write
clean
7FF5A2D71000
unkown image
page readonly
clean
1F74A5D0000
unkown
page read and write
clean
1F74A3A0000
unkown
page read and write
clean
7FF5DCC83000
unkown image
page readonly
clean
7DF5B1232000
unkown image
page readonly
clean
24352015000
unkown
page read and write
clean
243528C0000
unkown image
page readonly
clean
7FF5DCCB3000
unkown image
page readonly
clean
7D2587B000
unkown
page read and write
clean
2C30000
heap private
page read and write
clean
1F749C3C000
unkown
page read and write
clean
1F74A330000
unkown image
page write copy
clean
2280000
unkown
page read and write
clean
7FF59AFCB000
unkown image
page readonly
clean
1F749CD6000
unkown
page read and write
clean
1E3FD210000
unkown
page readonly
clean
7D25A79000
stack
page read and write
clean
7FF57B827000
unkown image
page readonly
clean
1F74A593000
unkown
page read and write
clean
7FF5A353A000
unkown image
page readonly
clean
7FF57B8AA000
unkown image
page readonly
clean
2A4A1654000
unkown
page read and write
clean
7FF4F6471000
unkown image
page readonly
clean
2A4A1530000
heap private
page read and write
clean
7DF515020000
unkown image
page readonly
clean
1F74A58F000
unkown
page read and write
clean
7FF5072D3000
unkown image
page readonly
clean
7FF507337000
unkown image
page readonly
clean
7FF507399000
unkown image
page readonly
clean
7FF5DCC87000
unkown image
page readonly
clean
1F74A577000
unkown
page read and write
clean
1E3FC4EA000
unkown
page read and write
clean
7FF59B53E000
unkown image
page readonly
clean
7FF4F6C0B000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
7DF5A92D0000
unkown image
page readonly
clean
7FF59AE98000
unkown image
page readonly
clean
C00217F000
stack
page read and write
clean
7FF59B327000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7DF504930000
unkown image
page readonly
clean
24352118000
unkown
page read and write
clean
24356EA1000
unkown
page read and write
clean
7DF5A92D2000
unkown image
page readonly
clean
21E9000
heap private
page read and write
clean
7FF4F6B82000
unkown image
page readonly
clean
7DF515022000
unkown image
page readonly
clean
46B567E000
stack
page read and write
clean
7FF57B71B000
unkown image
page readonly
clean
24357008000
unkown
page read and write
clean
7FF5071CF000
unkown image
page readonly
clean
24351740000
heap private
page read and write
clean
24351780000
unkown image
page readonly
clean
2A4A1560000
unkown image
page readonly
clean
1F74A0D0000
unkown image
page readonly
clean
24351750000
unkown image
page readonly
clean
24356E2D000
unkown
page read and write
clean
17E0A801000
unkown
page read and write
clean
24351858000
unkown
page read and write
clean
7FF5073B1000
unkown image
page readonly
clean
24356F06000
unkown
page read and write
clean
24352700000
unkown image
page read and write
clean
21E0000
heap private
page read and write
clean
1E3FC6C0000
unkown
page read and write
clean
1F74A579000
unkown
page read and write
clean
17E0AA60000
unkown image
page readonly
clean
DC59478000
stack
page read and write
clean
17E0AA50000
heap private
page read and write
clean
1F74A5C1000
unkown
page read and write
clean
24351870000
unkown
page read and write
clean
24351875000
unkown
page read and write
clean
7FF4F653D000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
24351829000
unkown
page read and write
clean
7FF59B5AB000
unkown image
page readonly
clean
7FF59B411000
unkown image
page readonly
clean
2A4A1629000
unkown
page read and write
clean
24352158000
unkown
page read and write
clean
1F242B70000
heap private
page read and write
clean
422000
unkown image
page read and write
clean
243570D0000
unkown
page read and write
clean
17E0A7D6000
unkown
page read and write
clean
1F74A58F000
unkown
page read and write
clean
7DF5EA9C2000
unkown image
page readonly
clean
7FF5072E3000
unkown image
page readonly
clean
1E3FC4CE000
unkown
page read and write
clean
7DF5B1240000
unkown image
page readonly
clean
7DF5EA9D0000
unkown image
page readonly
clean
7FF5A335A000
unkown image
page readonly
clean
7FF4F6BE0000
unkown image
page readonly
clean
1F74AA02000
unkown
page read and write
clean
7FF57B902000
unkown image
page readonly
clean
1F74AA02000
unkown
page read and write
clean
7FF57AFF3000
unkown image
page readonly
clean
1F74AA02000
unkown
page read and write
clean
7FF57B92A000
unkown image
page readonly
clean
7FF5DC598000
unkown image
page readonly
clean
1F74A5B0000
unkown
page read and write
clean
7FF59B3A4000
unkown image
page readonly
clean
7FF5A2D6A000
unkown image
page readonly
clean
24356EFA000
unkown
page read and write
clean
7FF4F6BEE000
unkown image
page readonly
clean
7FF5DCC6F000
unkown image
page readonly
clean
1F74A5A0000
unkown
page read and write
clean
7FF5A342C000
unkown image
page readonly
clean
7DF487460000
unkown image
page readonly
clean
1F74A581000
unkown
page read and write
clean
1F749CC6000
unkown
page read and write
clean
7FF5DCC8E000
unkown image
page readonly
clean
7FF57B79C000
unkown image
page readonly
clean
1F749D16000
unkown
page read and write
clean
C0011FB000
unkown
page read and write
clean
24351FD1000
unkown
page read and write
clean
1F74A59D000
unkown
page read and write
clean
7FF50730B000
unkown image
page readonly
clean
7DF5EA9E0000
unkown image
page readonly
clean
7FF57B83F000
unkown image
page readonly
clean
21F0000
unkown image
page read and write
clean
7DF4027F0000
unkown image
page readonly
clean
7FF5A2D6C000
unkown image
page readonly
clean
7FF506EA7000
unkown image
page readonly
clean
7FF5A353D000
unkown image
page readonly
clean
7DF504940000
unkown image
page readonly
clean
1E3FC6D0000
heap private
page read and write
clean
7FF59B632000
unkown image
page readonly
clean
7FF5A35AA000
unkown image
page readonly
clean
1F0000
heap default
page read and write
clean
1E3FC6D9000
heap private
page read and write
clean
7D25B79000
stack
page read and write
clean
1F242BE0000
unkown image
page readonly
clean
7FF59B1C9000
unkown image
page readonly
clean
24357160000
unkown
page read and write
clean
243528E0000
unkown image
page readonly
clean
7FF4F6AAB000
unkown image
page readonly
clean
C0018FE000
stack
page read and write
clean
1F74A5AB000
unkown
page read and write
clean
1F242B80000
unkown image
page readonly
clean
7FF5DCD39000
unkown image
page readonly
clean
1F2430D0000
unkown image
page readonly
clean
7FF59B660000
unkown image
page readonly
clean
7FF59B332000
unkown image
page readonly
clean
7FF4F686F000
unkown image
page readonly
clean
24352159000
unkown
page read and write
clean
1F74A57F000
unkown
page read and write
clean
7DF504932000
unkown image
page readonly
clean
7FF4F6CA4000
unkown image
page readonly
clean
7FF50733D000
unkown image
page readonly
clean
1F749CFC000
unkown
page read and write
clean
7FF57B411000
unkown image
page readonly
clean
7FF4F682E000
unkown image
page readonly
clean
2A4A1708000
unkown
page read and write
clean
7FF4F69DA000
unkown image
page readonly
clean
7FF4F6B8E000
unkown image
page readonly
clean
1F74A583000
unkown
page read and write
clean
1F74A579000
unkown
page read and write
clean
7FF5DCCDA000
unkown image
page readonly
clean
24351800000
unkown
page read and write
clean
46B56FA000
stack
page read and write
clean
7FF5A33D2000
unkown image
page readonly
clean
1F242ED0000
unkown image
page readonly
clean
1E3FC660000
unkown
page read and write
clean
7FF4F6B9A000
unkown image
page readonly
clean
7FF5072CD000
unkown image
page readonly
clean
7FF5DCD44000
unkown image
page readonly
clean
2A4A1590000
heap default
page read and write
clean
7DF5B1220000
unkown image
page readonly
clean
1F749ED0000
unkown image
page readonly
clean
C001E7E000
stack
page read and write
clean
7FF59B5D7000
unkown image
page readonly
clean
7FF5DCD32000
unkown image
page readonly
clean
7FF59B65A000
unkown image
page readonly
clean
7FF59B644000
unkown image
page readonly
clean
1F74A51A000
unkown
page read and write
clean
7FF4F6B91000
unkown image
page readonly
clean
24352002000
unkown
page read and write
clean
1F749C13000
unkown
page read and write
clean
24356EA4000
unkown
page read and write
clean
5CA000
heap default
page read and write
clean
7FF4F6B34000
unkown image
page readonly
clean
1F74A578000
unkown
page read and write
clean
7DF412EF0000
unkown image
page readonly
clean
1F242C00000
unkown
page read and write
clean
7FF5DCC80000
unkown image
page readonly
clean
7FF5A34CF000
unkown image
page readonly
clean
7FF59B522000
unkown image
page readonly
clean
CA7E6FF000
stack
page read and write
clean
40000
unkown image
page readonly
clean
7FF57B91A000
unkown image
page readonly
clean
17E0A7EF000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
7FF59B50F000
unkown image
page readonly
clean
7FF5A2DB9000
unkown image
page readonly
clean
1F749D08000
unkown
page read and write
clean
2A4A164E000
unkown
page read and write
clean
1F749CE3000
unkown
page read and write
clean
24352113000
unkown
page read and write
clean
1F242C02000
unkown
page read and write
clean
1E3FC480000
heap default
page read and write
clean
1F749C4F000
unkown
page read and write
clean
7FF57B78B000
unkown image
page readonly
clean
1F749B90000
unkown image
page readonly
clean
1F749CAB000
unkown
page read and write
clean
1F74A58B000
unkown
page read and write
clean
24357160000
unkown
page read and write
clean
7FF4F6A06000
unkown image
page readonly
clean
There are 788 hidden memdumps, click here to show them.