IOC Report

loading gif

Files

File Path
Type
Category
Malicious
FACTURAS.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\M9XgMRXaN30mgEl56ja236
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF03314C855DEECA48.TMP
Composite Document File V2 Document, Cannot read section info
dropped
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\FACTURAS.exe
"C:\Users\user\Desktop\FACTURAS.exe"
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
"C:\Users\user\Desktop\FACTURAS.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
https://doc-0g-7s-docs.googleusercontent.com/
unknown
clean
http://127.0.0.1:HTTP/1.1
unknown
clean
https://NlNlzv83nsnyVe.org
unknown
clean
http://DynDns.comDynDNS
unknown
clean
https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/gp8euu0g
unknown
clean
https://sectigo.com/CPS0
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
https://drive.google.com/
unknown
clean
https://support.google.com/chrome/?p=plugin_flash
unknown
clean
http://furteksdokuma.com.tr
unknown
clean
http://mail.furteksdokuma.com.tr
unknown
clean
https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/gp8euu0gtvc992oi1h8j40de9a23dlvb/1639471800000/01707528263340534167/*/1e3nVGX3LlhNn9Zf6RwTjDw6FKTCAih9T?e=download
142.250.186.33
clean
http://kFWRbv.com
unknown
clean
https://NlNlzv83nsnyVe.orgt-
unknown
clean
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
unknown
clean
There are 5 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
furteksdokuma.com.tr
116.202.203.61
malicious
mail.furteksdokuma.com.tr
unknown
malicious
drive.google.com
142.250.181.238
clean
googlehosted.l.googleusercontent.com
142.250.186.33
clean
doc-0g-7s-docs.googleusercontent.com
unknown
clean

IPs

IP
Domain
Country
Malicious
116.202.203.61
furteksdokuma.com.tr
Germany
malicious
142.250.181.238
drive.google.com
United States
clean
142.250.186.33
googlehosted.l.googleusercontent.com
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\Turcize6\Sacrocotyloidean8
SLIDFAST
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1E3C1000
unkown
page read and write
malicious
1300000
unkown
page execute and read and write
malicious
1D371000
unkown
page read and write
clean
21E9000
heap private
page read and write
clean
206A0000
unkown
page read and write
clean
1490000
stack
page read and write
clean
206A7000
unkown
page read and write
clean
7FF56D4E3000
unkown image
page readonly
clean
7FC12000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20661000
unkown
page read and write
clean
17C0000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206B6000
unkown
page read and write
clean
7FC12000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
20760000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
195E000
stack
page read and write
clean
12A0000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
6AE000
stack
page read and write
clean
1E1D0000
unkown image
page read and write
clean
1470000
stack
page read and write
clean
1E4DE000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1A70000
stack
page read and write
clean
17E0000
stack
page read and write
clean
17C0000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
1210000
unkown
page read and write
clean
206CE000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E210000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC22000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
21B6D000
stack
page read and write
clean
20750000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579252000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
422000
unkown image
page read and write
clean
1A30000
stack
page read and write
clean
1598000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2071E000
unkown
page read and write
clean
1800000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D3762000
unkown image
page readonly
clean
16D0000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
1200000
unkown
page read and write
clean
1E7B2E4A000
unkown
page read and write
clean
1770000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
2CD71140000
unkown image
page readonly
clean
1584000
heap default
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
18DE000
stack
page read and write
clean
7FF5D3718000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
17D0000
stack
page read and write
clean
1470000
stack
page read and write
clean
1490000
stack
page read and write
clean
1E7B2CA0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
2098E000
stack
page read and write
clean
1200000
unkown
page read and write
clean
7DF5DF490000
unkown image
page readonly
clean
F90000
unkown
page read and write
clean
1A90000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A71000
stack
page read and write
clean
2CD71135000
heap private
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1430000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2990000
unkown
page read and write
clean
1E1E0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
21F0000
heap private
page read and write
clean
1210000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1F420000
unkown
page read and write
clean
7FC10000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A40000
stack
page read and write
clean
1470000
stack
page read and write
clean
1201000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20720000
unkown
page read and write
clean
2F10000
unkown image
page read and write
clean
7FC30000
unkown image
page readonly
clean
1E1FD000
unkown
page execute and read and write
clean
1D371000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC22000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20730000
unkown
page read and write
clean
209F0000
stack
page read and write
clean
1E220000
unkown
page read and write
clean
2065B000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1F3C1000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1E270000
heap private
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
20750000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2059E000
stack
page read and write
clean
1200000
unkown
page read and write
clean
15EB000
heap default
page read and write
clean
2200000
unkown
page execute read
clean
1D371000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1E4EE000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1200000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1E4EA000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1A70000
stack
page read and write
clean
20CAE000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
17E0000
stack
page read and write
clean
1DC30000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
509000
heap default
page read and write
clean
1508000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
2CD70DD0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
209D0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
17E0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
21E0000
heap private
page read and write
clean
1483000
stack
page read and write
clean
1A70000
stack
page read and write
clean
14C0000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
7FF5D372F000
unkown image
page readonly
clean
20750000
unkown
page read and write
clean
7FF5D370F000
unkown image
page readonly
clean
1800000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1E7B2E7D000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
207B0000
unkown
page read and write
clean
2CD71090000
unkown
page read and write
clean
7FF5D3736000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20750000
unkown
page read and write
clean
1DF6E000
stack
page read and write
clean
1471000
stack
page read and write
clean
1E7B2F02000
unkown
page read and write
clean
7FF5D37A5000
unkown image
page readonly
clean
FE0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
7FF56D4F6000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D373C000
unkown image
page readonly
clean
1475000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2E40000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
31B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1E7B2E31000
unkown
page read and write
clean
1E20D000
unkown
page execute and read and write
clean
1E250000
unkown
page read and write
clean
1E7B2E55000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
209E0000
stack
page read and write
clean
1470000
stack
page read and write
clean
1480000
stack
page read and write
clean
7FC22000
unkown image
page readonly
clean
610000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1810000
stack
page execute and read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
14A0000
stack
page execute and read and write
clean
1D371000
unkown
page read and write
clean
15D9000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E21A000
unkown
page execute and read and write
clean
1D371000
unkown
page read and write
clean
1E7B33D0000
unkown image
page readonly
clean
1480000
stack
page read and write
clean
1850000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A71000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1490000
stack
page read and write
clean
1594000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12A0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC20000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
20755000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1260000
unkown
page read and write
clean
1826000
stack
page read and write
clean
14E0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
14A0000
stack
page read and write
clean
20C6D000
stack
page read and write
clean
1E7B2E6C000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1A70000
stack
page read and write
clean
F70000
unkown image
page readonly
clean
E18557F000
stack
page read and write
clean
1E7B2E47000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
2CD714C0000
unkown image
page readonly
clean
1490000
stack
page read and write
clean
12A0000
stack
page read and write
clean
424000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
15DA000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1E1B7000
stack
page read and write
clean
1470000
stack
page read and write
clean
1E216000
unkown
page execute and read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
F40000
unkown image
page readonly
clean
20704000
heap private
page read and write
clean
2CD70EC7000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20758000
unkown
page read and write
clean
7FC12000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2E2A000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
206A6000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
F60000
unkown image
page read and write
clean
206A0000
unkown
page read and write
clean
1DF30000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1A70000
stack
page read and write
clean
7FF56D565000
unkown image
page readonly
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A5000
unkown
page read and write
clean
1471000
stack
page read and write
clean
1E61000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
F70000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
17E0000
stack
page read and write
clean
1E4FE000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1A70000
stack
page read and write
clean
205D4000
unkown
page read and write
clean
2B10000
unkown image
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2156E000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
424000
unkown image
page readonly
clean
12F0000
unkown
page read and write
clean
15D6000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
209E0000
stack
page read and write
clean
1D2A1000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1470000
stack
page read and write
clean
12E0000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
2CD70EC0000
heap default
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
A2F000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1490000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A80000
stack
page execute and read and write
clean
206A0000
unkown
page read and write
clean
1250000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20645000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
205D7000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FC22000
unkown image
page readonly
clean
21B70000
unkown
page read and write
clean
1220000
unkown
page read and write
clean
21776000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20860000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
21D0000
heap private
page read and write
clean
1470000
stack
page read and write
clean
1840000
stack
page read and write
clean
1480000
stack
page read and write
clean
17E0000
stack
page read and write
clean
206A5000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1E0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D36EE000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1A70000
stack
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D4BD000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1470000
stack
page read and write
clean
2CD71340000
unkown image
page readonly
clean
1D5E7000
heap private
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
206AA000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1200000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1DDCC000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5D36FF000
unkown image
page readonly
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2068B000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E260000
heap private
page execute and read and write
clean
7DF5DF492000
unkown image
page readonly
clean
A30000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7FC30000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1410000
stack
page read and write
clean
7FF56D4F4000
unkown image
page readonly
clean
20653000
unkown
page read and write
clean
1582000
heap default
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579250000
unkown image
page readonly
clean
1598000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1E7B2E13000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7EE000
stack
page read and write
clean
1220000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D522000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
15DA000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
7FC22000
unkown image
page readonly
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
206A8000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
7FC10000
unkown image
page readonly
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
12E0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12A0000
stack
page read and write
clean
1790000
stack
page read and write
clean
FE0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D480000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1DF30000
unkown
page read and write
clean
1F3E9000
unkown
page read and write
clean
1E7B2E5F000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
1E230000
unkown
page execute and read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1480000
stack
page read and write
clean
7FC20000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
21792000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
17E0000
stack
page read and write
clean
7FF5D375B000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2CB0000
unkown image
page readonly
clean
1260000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2062C000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
14D0000
unkown image
page readonly
clean
1A70000
stack
page read and write
clean
1471000
stack
page read and write
clean
1E1F4000
unkown
page read and write
clean
1A50000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
2CD70DE0000
unkown image
page readonly
clean
1A70000
stack
page read and write
clean
1470000
stack
page read and write
clean
1E4C0000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
F90000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1CD0000
unkown image
page readonly
clean
14A0000
stack
page read and write
clean
FE0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
15DB000
heap default
page read and write
clean
14F0000
unkown image
page readonly
clean
12E0000
unkown
page read and write
clean
20670000
unkown
page read and write
clean
1E4A9000
unkown
page read and write
clean
1470000
stack
page read and write
clean
401000
unkown image
page execute read
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
206A0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1475000
stack
page read and write
clean
1240000
unkown
page execute and read and write
clean
1475000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
206A7000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1E4C4000
unkown
page read and write
clean
E18567E000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
147C000
stack
page read and write
clean
1470000
stack
page read and write
clean
7FF5D371E000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1475000
stack
page read and write
clean
FE0000
unkown image
page readonly
clean
206A5000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1E222000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2CD71130000
heap private
page read and write
clean
1430000
stack
page read and write
clean
7FF5D37A5000
unkown image
page readonly
clean
7FC12000
unkown image
page readonly
clean
17C0000
stack
page read and write
clean
1A72000
stack
page read and write
clean
1480000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1804000
stack
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D3753000
unkown image
page readonly
clean
207B0000
unkown
page read and write
clean
D8AD8FE000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
7FF56D4FC000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A5000
unkown
page read and write
clean
1C0000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20642000
unkown
page read and write
clean
129C000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
7DF5DF4A0000
unkown image
page readonly
clean
32B9000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1810000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1780000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
1E227000
unkown
page execute and read and write
clean
1200000
unkown
page read and write
clean
7DF579262000
unkown image
page readonly
clean
206A5000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF5DF490000
unkown image
page readonly
clean
11E8000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1840000
stack
page read and write
clean
1475000
stack
page read and write
clean
1470000
stack
page read and write
clean
401000
unkown image
page execute read
clean
1200000
unkown
page read and write
clean
17D0000
stack
page read and write
clean
7FF56D4EF000
unkown image
page readonly
clean
1E7B3000000
unkown image
page readonly
clean
205AC000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
7FC10000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D3A8000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
203C8000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
209D0000
stack
page read and write
clean
7FF56CB45000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7FC10000
unkown image
page readonly
clean
630000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579250000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
2F90000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
2CD70E20000
unkown
page read and write
clean
21C20000
heap private
page read and write
clean
12F0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
17A0000
stack
page read and write
clean
1594000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12A0000
stack
page read and write
clean
1470000
stack
page read and write
clean
1760000
stack
page read and write
clean
1E7B34C0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
F50000
unkown image
page readonly
clean
1200000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1240000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1470000
stack
page read and write
clean
3100000
unkown
page execute and read and write
clean
1830000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
20675000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC30000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2E3B000
unkown
page read and write
clean
1E7B3010000
heap private
page read and write
clean
206A5000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
2240000
heap private
page read and write
clean
7FF5D3781000
unkown image
page readonly
clean
1A70000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1E7B2CF0000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
1A24000
stack
page read and write
clean
205FA000
unkown
page read and write
clean
205CE000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1E200000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
20720000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1750000
stack
page read and write
clean
2CD71111000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
7FF56D101000
unkown image
page readonly
clean
7FC12000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
7FF5D3768000
unkown image
page readonly
clean
1E0BA000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1260000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1AD0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1475000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B3040000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
17D0000
stack
page read and write
clean
524000
heap default
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2E7F000
unkown
page read and write
clean
206A8000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FA50000
unkown
page execute and read and write
clean
1A70000
stack
page read and write
clean
3010000
unkown image
page readonly
clean
1E4CA000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1495000
stack
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1547000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1480000
stack
page read and write
clean
7FC10000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
158D000
unkown
page read and write
clean
1470000
unkown image
page read and write
clean
2CD70E00000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1E50000
unkown image
page readonly
clean
206BE000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1A5E000
stack
page read and write
clean
FE0000
unkown image
page readonly
clean
7FF56D50B000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
2065B000
unkown
page read and write
clean
1840000
stack
page read and write
clean
7AF000
stack
page read and write
clean
2062D000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
D8AD9FF000
stack
page read and write
clean
1440000
stack
page read and write
clean
7FF56D51B000
unkown image
page readonly
clean
17E0000
stack
page read and write
clean
207B6000
unkown
page read and write
clean
9A000
unkown
page read and write
clean
624000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
206A5000
unkown
page read and write
clean
1200000
unkown
page execute and read and write
clean
2CD714D1000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
601000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
12E1000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
20750000
unkown
page read and write
clean
7FF56D37E000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7DF579252000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
7FF5D3031000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
7FF56D565000
unkown image
page readonly
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1E3BF000
stack
page read and write
clean
206A5000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
8EF000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E240000
unkown
page read and write
clean
7FF5D3702000
unkown image
page readonly
clean
7FC20000
unkown image
page readonly
clean
20677000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
7FF56D501000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2CB0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
20700000
heap private
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
147A000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20740000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
FF0000
unkown
page read and write
clean
7DF477110000
unkown image
page readonly
clean
20754000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B3241000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1410000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D3AB000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1750000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1820000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1210000
unkown
page read and write
clean
20780000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1D5E0000
heap private
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D4DE000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1800000
stack
page read and write
clean
1A80000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1490000
stack
page read and write
clean
7DF5DF492000
unkown image
page readonly
clean
7FC10000
unkown image
page readonly
clean
20645000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
7FF5D3723000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
206B0000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
7FC12000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FF56D4D0000
unkown image
page readonly
clean
1E22B000
unkown
page execute and read and write
clean
1430000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
20776000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1400000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
206D1000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A5000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E7B2E90000
unkown
page read and write
clean
17F0000
stack
page read and write
clean
20741000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
7DF5DF4B0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
7FF56D541000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1598000
unkown
page read and write
clean
7FC22000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1A78000
stack
page read and write
clean
20770000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
14A0000
stack
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D306A000
unkown image
page readonly
clean
1430000
stack
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FC20000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
20770000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
205BE000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
14C4000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
206DD000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1A70000
stack
page read and write
clean
FD0000
unkown image
page readonly
clean
1E1F0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1DC7E000
stack
page read and write
clean
1200000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
7FF56D513000
unkown image
page readonly
clean
205E9000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20710000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
500000
heap default
page read and write
clean
1490000
stack
page read and write
clean
1420000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
E184FEB000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1DF30000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1E7B2E88000
unkown
page read and write
clean
1E4F6000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
1E1F3000
unkown
page execute and read and write
clean
7FF56D528000
unkown image
page readonly
clean
7DF5DF4B0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1830000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
2166C000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FC30000
unkown image
page readonly
clean
20755000
unkown
page read and write
clean
20A40000
heap private
page execute and read and write
clean
206A0000
unkown
page read and write
clean
624000
unkown
page read and write
clean
205A0000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1475000
stack
page read and write
clean
1470000
stack
page read and write
clean
17F0000
stack
page execute and read and write
clean
1E7B3602000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1A71000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
15DB000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
10000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
20740000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
92E000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC20000
unkown image
page readonly
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FC20000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7FF56D37A000
unkown image
page readonly
clean
1800000
stack
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1460000
heap private
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
7FF56D4C2000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7FF56D476000
unkown image
page readonly
clean
209CE000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1475000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1500000
heap default
page read and write
clean
17E0000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A5000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D370000
unkown
page read and write
clean
C30000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
17C6000
stack
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1430000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
20740000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
1430000
stack
page read and write
clean
20740000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1317000
unkown
page execute and read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1467000
heap private
page read and write
clean
12F0000
unkown
page read and write
clean
1802000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
2250000
unkown
page read and write
clean
7DF4DD350000
unkown image
page readonly
clean
1A70000
stack
page read and write
clean
1E7B2DF0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1A80000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1840000
stack
page read and write
clean
31E9000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
12F0000
unkown
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1E4FC000
unkown
page read and write
clean
1490000
stack
page read and write
clean
17C0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1440000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
12E0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
34A000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A20000
stack
page read and write
clean
7FF56D4A8000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1750000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1E1C0000
unkown image
page read and write
clean
2CD70DE0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
1475000
stack
page read and write
clean
F70000
unkown image
page readonly
clean
1E7B2C90000
unkown image
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1825000
stack
page read and write
clean
1490000
stack
page read and write
clean
206BB000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E4B4000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579270000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
7DF579260000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1470000
stack
page read and write
clean
12A0000
stack
page read and write
clean
1E4DC000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1210000
unkown
page read and write
clean
7FC12000
unkown image
page readonly
clean
1E464000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20758000
unkown
page read and write
clean
7FAB0000
unkown image
page readonly
clean
20653000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1A70000
stack
page read and write
clean
1E06E000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
2CD70DC0000
unkown image
page read and write
clean
1240000
unkown
page read and write
clean
12A0000
stack
page read and write
clean
1E212000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12B0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
E18577A000
stack
page read and write
clean
1470000
stack
page read and write
clean
17D0000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
7FF56D4D8000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
2071B000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1491000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
D8AD4BA000
unkown
page read and write
clean
1DD7E000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D2A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1802000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7DF5DF4A2000
unkown image
page readonly
clean
2CD70EF6000
heap default
page read and write
clean
1810000
stack
page read and write
clean
12A0000
stack
page read and write
clean
12F0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1200000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579270000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
207AD000
stack
page read and write
clean
7DF5DF4A0000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
2B00000
heap private
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A5000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1800000
stack
page read and write
clean
1475000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
20A00000
stack
page read and write
clean
1200000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
7DF5DF4A2000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D2A1000
unkown
page read and write
clean
17C0000
stack
page read and write
clean
206D6000
unkown
page read and write
clean
2220000
unkown image
page readonly
clean
7FC30000
unkown image
page readonly
clean
1A20000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
14B0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
1490000
stack
page read and write
clean
7FF5D3324000
unkown image
page readonly
clean
7FF5D367B000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
FE0000
unkown image
page readonly
clean
7DF579262000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
20755000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
D8AD97F000
stack
page read and write
clean
1E7B2CE0000
unkown image
page readonly
clean
1E7B2E84000
unkown
page read and write
clean
1820000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
207B0000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1490000
stack
page read and write
clean
207B0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1250000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
15DC000
unkown
page read and write
clean
1760000
stack
page read and write
clean
1475000
stack
page read and write
clean
1230000
unkown
page execute and read and write
clean
620000
heap default
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
2CD70E90000
unkown image
page readonly
clean
2049C000
stack
page read and write
clean
7FC22000
unkown image
page readonly
clean
7FF5D3749000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
2CD70EA0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
7FC20000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
156E000
heap default
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1E460000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1E7B2CD0000
unkown image
page readonly
clean
206CA000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
17E0000
stack
page read and write
clean
2AF0000
unkown image
page readonly
clean
1451000
unkown image
page readonly
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
1E7B2E00000
unkown
page read and write
clean
1DECE000
stack
page read and write
clean
1E7B3250000
unkown image
page readonly
clean
1800000
stack
page read and write
clean
1E2BE000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
206A5000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1490000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1470000
stack
page read and write
clean
1210000
unkown
page read and write
clean
3120000
unkown
page read and write
clean
1220000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
15DA000
unkown
page read and write
clean
1595000
unkown
page read and write
clean
20740000
unkown
page read and write
clean
191E000
stack
page read and write
clean
207B0000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
17F5000
stack
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FC30000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
206C2000
unkown
page read and write
clean
7FF56D43B000
unkown image
page readonly
clean
206A0000
unkown
page read and write
clean
1E225000
unkown
page execute and read and write
clean
1480000
stack
page read and write
clean
15E8000
heap default
page read and write
clean
1490000
stack
page read and write
clean
1E7B2E8C000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1480000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
7FC30000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
21770000
unkown
page read and write
clean
206A5000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1250000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7DF579260000
unkown image
page readonly
clean
50D000
heap default
page read and write
clean
FD0000
unkown image
page readonly
clean
206A5000
unkown
page read and write
clean
1470000
stack
page read and write
clean
1470000
stack
page read and write
clean
1210000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A80000
stack
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
207BE000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1490000
stack
page read and write
clean
1E7B2E20000
unkown
page read and write
clean
178A000
stack
page read and write
clean
1475000
stack
page read and write
clean
20636000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
7FF5D3741000
unkown image
page readonly
clean
206A5000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
7FC10000
unkown image
page readonly
clean
1D371000
unkown
page read and write
clean
20750000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
12B0000
stack
page read and write
clean
1470000
stack
page read and write
clean
DB0000
unkown image
page readonly
clean
1470000
stack
page read and write
clean
206A0000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1800000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1470000
stack
page read and write
clean
2136D000
stack
page read and write
clean
20740000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1A70000
stack
page read and write
clean
1D371000
unkown
page read and write
clean
1D371000
unkown
page read and write
clean
1260000
unkown
page read and write
clean
1490000
stack
page read and write
clean
There are 1686 hidden memdumps, click here to show them.