IOC Report
SecuriteInfo.com.Backdoor.Win32.Agent.myuvwd.30967.9402.exe

loading gif

Files

File Path
Type
Category
Malicious
SecuriteInfo.com.Backdoor.Win32.Agent.myuvwd.30967.9402.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js
ASCII text, with no line terminators
dropped
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\R
ASCII text, with very long lines (943), with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\Telecom.pif
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EcoScape.url
MS Windows 95 Internet shortcut text (URL=<"C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js" >), ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\A
ASCII text, with very long lines (943), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\RegAsm.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Cameras
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Commander
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Cutting
ASCII text, with very long lines (1047), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Cutting.bat (copy)
ASCII text, with very long lines (1047), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Fears
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Friends
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Keyboard
ASCII text, with very long lines (1261), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Northeast
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Papers
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Plugins
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Stream
ASCII text, with very long lines (943), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Tramadol
data
dropped
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
Unicode text, UTF-16, little-endian text, with CRLF line terminators
modified
There are 11 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SecuriteInfo.com.Backdoor.Win32.Agent.myuvwd.30967.9402.exe
"C:\Users\user\Desktop\SecuriteInfo.com.Backdoor.Win32.Agent.myuvwd.30967.9402.exe"
malicious
C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c move Cutting Cutting.bat & Cutting.bat
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /c md 23855
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /c copy /b Northeast + Cameras + Papers + Friends + Fears + Commander + Tramadol + Plugins 23855\Telecom.pif
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /c copy /b Stream + Keyboard 23855\R
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\Telecom.pif
23855\Telecom.pif 23855\R
malicious
C:\Windows\SysWOW64\PING.EXE
ping -n 5 127.0.0.1
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /k echo [InternetShortcut] > "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EcoScape.url" & echo URL="C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js" >> "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EcoScape.url" & exit
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /c schtasks.exe /create /tn "Impaired" /tr "wscript //B 'C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js'" /sc minute /mo 3 /F
malicious
C:\Windows\SysWOW64\schtasks.exe
schtasks.exe /create /tn "Impaired" /tr "wscript //B 'C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js'" /sc minute /mo 3 /F
malicious
C:\Windows\System32\wscript.exe
C:\Windows\system32\wscript.EXE //B "C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js"
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif
"C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif" "C:\Users\user\AppData\Local\EcoVision Dynamics\A"
malicious
C:\Windows\System32\wscript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js"
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif
"C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif" "C:\Users\user\AppData\Local\EcoVision Dynamics\A"
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\RegAsm.exe
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\RegAsm.exe
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\RegAsm.exe
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\23855\RegAsm.exe
malicious
C:\Windows\System32\wscript.exe
C:\Windows\system32\wscript.EXE //B "C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.js"
malicious
C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif
"C:\Users\user\AppData\Local\EcoVision Dynamics\EcoScape.pif" "C:\Users\user\AppData\Local\EcoVision Dynamics\A"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\tasklist.exe
tasklist
C:\Windows\SysWOW64\findstr.exe
findstr /I "wrsa.exe opssvc.exe"
C:\Windows\SysWOW64\tasklist.exe
tasklist
C:\Windows\SysWOW64\findstr.exe
findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1180 -s 1068
C:\Program Files\Windows Defender\MpCmdRun.exe
"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 18 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://www.autoitscript.com/autoit3/X
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown
https://www.autoitscript.com/autoit3/
unknown
https://pastebin.com/raw/Dh8E7H3R

Domains

Name
IP
Malicious
sCMixbVNmKacbXAnMNdtVVILqF.sCMixbVNmKacbXAnMNdtVVILqF
unknown
malicious

IPs

IP
Domain
Country
Malicious
127.0.0.1
unknown
unknown
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows Script\Settings\Telemetry\wscript.exe
JScriptSetScriptStateStarted

Memdumps

Base Address
Regiontype
Protect
Malicious
454A000
trusted library allocation
page read and write
malicious
4557000
trusted library allocation
page read and write
malicious
4544000
trusted library allocation
page read and write
malicious
3AE1000
heap
page read and write
malicious
3AE1000
heap
page read and write
malicious
E32000
remote allocation
page execute and read and write
malicious
455C000
trusted library allocation
page read and write
malicious
453D000
trusted library allocation
page read and write
malicious
4514000
trusted library allocation
page read and write
malicious
4526000
trusted library allocation
page read and write
malicious
4051000
heap
page read and write
3921000
heap
page read and write
10AC000
heap
page read and write
3CF0000
trusted library allocation
page read and write
1686000
heap
page read and write
4051000
heap
page read and write
345C000
heap
page read and write
FBC000
heap
page read and write
10AA000
heap
page read and write
96F79F7000
stack
page read and write
EE9000
heap
page read and write
13D98FB000
stack
page read and write
F3F000
heap
page read and write
157D000
heap
page read and write
1B0000
unkown
page readonly
126F000
heap
page read and write
EED000
heap
page read and write
31FC000
heap
page read and write
400000
unkown
page readonly
10F3000
heap
page read and write
1533000
heap
page read and write
3A2C000
heap
page read and write
13D47047000
heap
page read and write
4051000
heap
page read and write
12F4000
heap
page read and write
3259000
heap
page read and write
D54000
heap
page read and write
1545000
heap
page read and write
161E000
heap
page read and write
3412000
heap
page read and write
111C000
heap
page read and write
4500000
trusted library allocation
page read and write
3160000
heap
page read and write
13D46F70000
heap
page read and write
96F77FB000
stack
page read and write
C5E000
stack
page read and write
2B40000
trusted library allocation
page read and write
15C8000
heap
page read and write
4051000
heap
page read and write
1775000
heap
page read and write
4DD000
unkown
page readonly
2210000
trusted library allocation
page read and write
12F4000
heap
page read and write
13FE000
stack
page read and write
7FFB1C706000
unkown
page readonly
3AF0000
heap
page read and write
3445000
heap
page read and write
EB8000
heap
page read and write
10A9000
heap
page read and write
EE8000
heap
page read and write
14D8000
heap
page read and write
3ACF000
heap
page read and write
F8E000
heap
page read and write
3332000
heap
page read and write
FCD000
heap
page read and write
1122000
heap
page read and write
440B000
trusted library allocation
page read and write
1D0786B0000
heap
page read and write
EC4000
heap
page read and write
50D000
unkown
page write copy
E5F000
heap
page read and write
1585000
heap
page read and write
1515000
heap
page read and write
3AE0000
heap
page read and write
EC4000
heap
page read and write
3BAD000
heap
page read and write
1752000
heap
page read and write
3A2C000
heap
page read and write
1A7F000
stack
page read and write
18BE000
heap
page read and write
440F000
trusted library allocation
page read and write
E6C000
heap
page read and write
2B28000
heap
page read and write
185D000
heap
page read and write
1316000
trusted library allocation
page execute and read and write
1D13AFA000
stack
page read and write
E61000
heap
page read and write
F3F000
heap
page read and write
1571000
heap
page read and write
15DA000
heap
page read and write
1658000
heap
page read and write
E09000
heap
page read and write
2C3E000
stack
page read and write
1218000
heap
page read and write
171E000
heap
page read and write
EEA000
heap
page read and write
73CE0000
unkown
page readonly
F1F000
heap
page read and write
441000
unkown
page execute read
E27000
heap
page read and write
1663000
heap
page read and write
109A000
heap
page read and write
316F000
unkown
page read and write
15EE000
heap
page read and write
1806000
heap
page read and write
1106000
heap
page read and write
13D47010000
heap
page read and write
3B88000
heap
page read and write
22CF6D80000
heap
page read and write
22CF4ED0000
heap
page read and write
1107000
heap
page read and write
1506000
heap
page read and write
F6E000
heap
page read and write
AFB000
stack
page read and write
EE6000
heap
page read and write
2CE8000
heap
page read and write
1218000
heap
page read and write
FF2000
heap
page read and write
1631000
heap
page read and write
4DD000
unkown
page readonly
22CF4DD0000
heap
page read and write
32C6000
heap
page read and write
4300000
trusted library allocation
page read and write
34AB000
heap
page read and write
73CFD000
unkown
page read and write
3228000
heap
page read and write
13EF000
stack
page read and write
18CE000
heap
page read and write
D54000
heap
page read and write
4051000
heap
page read and write
1853000
heap
page read and write
530000
heap
page read and write
D80000
heap
page read and write
13D8FFE000
stack
page read and write
F01000
heap
page read and write
2210000
trusted library allocation
page read and write
EF4000
heap
page read and write
1046000
heap
page read and write
1686000
heap
page read and write
C4F000
stack
page read and write
1553000
heap
page read and write
3BAC000
heap
page read and write
2CFD000
stack
page read and write
838000
heap
page read and write
F0E000
heap
page read and write
3A78000
heap
page read and write
440000
unkown
page readonly
3A2E000
heap
page read and write
114D000
heap
page read and write
E0C000
heap
page read and write
33FF000
heap
page read and write
EC4000
heap
page read and write
22CF4EB0000
heap
page read and write
3A89000
heap
page read and write
15B5000
heap
page read and write
3399000
heap
page read and write
1788000
heap
page read and write
503000
unkown
page readonly
3421000
heap
page read and write
169D000
heap
page read and write
1188000
heap
page read and write
F3D000
heap
page read and write
40C000
unkown
page read and write
3BAC000
heap
page read and write
2B60000
trusted library allocation
page read and write
F33000
heap
page read and write
3B50000
heap
page read and write
DFC000
heap
page read and write
3BAC000
heap
page read and write
1740000
heap
page read and write
3329000
heap
page read and write
FD8000
heap
page read and write
503000
unkown
page readonly
3B59000
heap
page read and write
F1F000
heap
page read and write
13D93FF000
stack
page read and write
15D7000
heap
page read and write
3432000
heap
page read and write
3441000
heap
page read and write
182F000
heap
page read and write
FEF000
heap
page read and write
441000
unkown
page execute read
16F9000
heap
page read and write
2B20000
heap
page read and write
E2E000
heap
page read and write
1571000
heap
page read and write
F36000
heap
page read and write
E2C000
heap
page read and write
3C26000
heap
page read and write
3C35000
heap
page read and write
32F4000
heap
page read and write
515000
unkown
page readonly
17AD000
heap
page read and write
F6E000
heap
page read and write
1689000
heap
page read and write
31CA000
heap
page read and write
12F4000
trusted library allocation
page read and write
1628000
heap
page read and write
43C0000
trusted library allocation
page read and write
104E000
heap
page read and write
13D8EFA000
stack
page read and write
1082000
heap
page read and write
33EF000
unkown
page read and write
E6F000
heap
page read and write
ECF000
heap
page read and write
2BA0000
heap
page read and write
162B000
heap
page read and write
786000
unkown
page read and write
3A36000
heap
page read and write
2B59000
heap
page read and write
FD3000
heap
page read and write
1785000
heap
page read and write
E67000
heap
page read and write
164C000
heap
page read and write
3A3F000
heap
page read and write
346D000
heap
page read and write
FB2000
heap
page read and write
337F000
heap
page read and write
5230000
heap
page read and write
F67000
heap
page read and write
53EE000
stack
page read and write
1167000
heap
page read and write
32F4000
heap
page read and write
3364000
heap
page read and write
7FFB1E105000
unkown
page readonly
FD5000
heap
page read and write
1741000
heap
page read and write
3315000
heap
page read and write
32BE000
heap
page read and write
3AF1000
heap
page read and write
F73000
heap
page read and write
39F1000
heap
page read and write
D54000
heap
page read and write
10E4000
heap
page read and write
1813000
heap
page read and write
34B4000
heap
page read and write
F7E000
heap
page read and write
3B88000
heap
page read and write
34D3000
heap
page read and write
F1F000
heap
page read and write
511000
unkown
page write copy
388A000
heap
page read and write
53AE000
stack
page read and write
15C1000
heap
page read and write
1085000
heap
page read and write
CD0000
heap
page read and write
22CF5150000
heap
page read and write
441000
unkown
page execute read
3C0A000
heap
page read and write
1036000
heap
page read and write
318F000
heap
page read and write
11BB000
heap
page read and write
515000
unkown
page readonly
F19000
heap
page read and write
16E5000
heap
page read and write
503000
unkown
page readonly
299E000
stack
page read and write
15EE000
heap
page read and write
11D8000
heap
page read and write
22CF5155000
heap
page read and write
53C000
stack
page read and write
1823000
heap
page read and write
326F000
stack
page read and write
13D48E00000
heap
page read and write
104C000
heap
page read and write
13D92FF000
stack
page read and write
15F8000
heap
page read and write
1168000
heap
page read and write
E30000
remote allocation
page execute and read and write
4051000
heap
page read and write
FF6000
heap
page read and write
1085000
heap
page read and write
F67000
heap
page read and write
1178000
heap
page read and write
186A000
heap
page read and write
1126000
heap
page read and write
3D11000
trusted library allocation
page read and write
11BE000
heap
page read and write
2D88000
heap
page read and write
7FFB1E0F6000
unkown
page readonly
EF4000
heap
page read and write
F01000
heap
page read and write
336D000
heap
page read and write
4051000
heap
page read and write
EDE000
heap
page read and write
ED0000
heap
page read and write
FEE000
heap
page read and write
C3B000
stack
page read and write
34B4000
heap
page read and write
DD4000
heap
page read and write
EF0000
heap
page read and write
32E0000
heap
page read and write
D30000
trusted library allocation
page read and write
FE1000
heap
page read and write
1010000
heap
page read and write
339B000
heap
page read and write
169C000
heap
page read and write
ECD000
heap
page read and write
434000
heap
page read and write
16E4000
heap
page read and write
F83000
heap
page read and write
3C9000
stack
page read and write
1488000
heap
page read and write
101D000
heap
page read and write
1036000
heap
page read and write
1D079EC0000
heap
page read and write
11F6000
heap
page read and write
2F10000
heap
page read and write
EB4000
heap
page read and write
4051000
heap
page read and write
17B9000
heap
page read and write
338E000
heap
page read and write
325E000
heap
page read and write
E3D000
heap
page read and write
152D000
heap
page read and write
FF4000
heap
page read and write
D54000
heap
page read and write
FA8000
heap
page read and write
1504000
heap
page read and write
10B7000
heap
page read and write
39F1000
heap
page read and write
150B000
heap
page read and write
793000
unkown
page read and write
1686000
heap
page read and write
15B4000
heap
page read and write
F3E000
heap
page read and write
10B2000
heap
page read and write
32CA000
heap
page read and write
FB7000
heap
page read and write
EB7000
heap
page read and write
3473000
heap
page read and write
1503000
heap
page read and write
E61000
heap
page read and write
1752000
heap
page read and write
DD4000
heap
page read and write
1529000
heap
page read and write
1600000
heap
page read and write
880000
heap
page read and write
585E000
stack
page read and write
1507000
heap
page read and write
10DC000
heap
page read and write
3441000
heap
page read and write
3409000
heap
page read and write
EDA000
heap
page read and write
4051000
heap
page read and write
2B6C000
heap
page read and write
303D000
stack
page read and write
EA1000
heap
page read and write
118D000
heap
page read and write
1D078476000
heap
page read and write
1035000
heap
page read and write
1578000
heap
page read and write
329D000
heap
page read and write
FEE000
heap
page read and write
3441000
heap
page read and write
2FDE000
stack
page read and write
13D94FE000
stack
page read and write
336D000
heap
page read and write
11BB000
heap
page read and write
F8B000
heap
page read and write
33AD000
heap
page read and write
1036000
heap
page read and write
3BB5000
heap
page read and write
153C000
heap
page read and write
16D3000
heap
page read and write
BF8000
stack
page read and write
96F72FF000
stack
page read and write
3A97000
heap
page read and write
12F4000
heap
page read and write
159D000
heap
page read and write
3329000
heap
page read and write
F42000
heap
page read and write
39D0000
heap
page read and write
EF8000
heap
page read and write
F8B000
heap
page read and write
11B7000
heap
page read and write
2F6C000
heap
page read and write
F6E000
heap
page read and write
3C1B000
heap
page read and write
1686000
heap
page read and write
EA0000
heap
page read and write
1304000
trusted library allocation
page read and write
100A000
heap
page read and write
F3D000
heap
page read and write
441000
unkown
page execute read
44D7000
trusted library allocation
page read and write
3990000
heap
page read and write
33ED000
heap
page read and write
3445000
heap
page read and write
1793000
heap
page read and write
185C000
heap
page read and write
11B9000
heap
page read and write
E17000
heap
page read and write
3B95000
heap
page read and write
1553000
heap
page read and write
EC7000
heap
page read and write
1621000
heap
page read and write
F2F000
heap
page read and write
2B1F000
stack
page read and write
F87000
heap
page read and write
3319000
heap
page read and write
3B95000
heap
page read and write
3C18000
heap
page read and write
1036000
heap
page read and write
1075000
heap
page read and write
3B77000
heap
page read and write
16F6000
heap
page read and write
FAF000
heap
page read and write
96E000
stack
page read and write
12F4000
heap
page read and write
810000
heap
page read and write
100B000
heap
page read and write
3A17000
heap
page read and write
FD9000
heap
page read and write
32DB000
heap
page read and write
3B88000
heap
page read and write
15D0000
heap
page read and write
DF8000
heap
page read and write
185C000
heap
page read and write
32B5000
heap
page read and write
2CE0000
heap
page read and write
3456000
heap
page read and write
4051000
heap
page read and write
2D3F000
stack
page read and write
FF0000
heap
page read and write
11CF000
stack
page read and write
3305000
heap
page read and write
3161000
heap
page read and write
15CC000
heap
page read and write
2210000
trusted library allocation
page read and write
EEA000
heap
page read and write
15FD000
heap
page read and write
3A22000
heap
page read and write
EF5000
heap
page read and write
3AD0000
heap
page read and write
15F9000
heap
page read and write
F26000
heap
page read and write
515000
unkown
page readonly
1134000
heap
page read and write
1D078507000
heap
page read and write
3305000
heap
page read and write
503000
unkown
page readonly
1571000
heap
page read and write
34CB000
heap
page read and write
12F5000
heap
page read and write
12F4000
heap
page read and write
EE5000
heap
page read and write
4051000
heap
page read and write
15B5000
heap
page read and write
3B9A000
heap
page read and write
1607000
heap
page read and write
F37000
heap
page read and write
F3D000
heap
page read and write
15DA000
heap
page read and write
2D00000
heap
page execute and read and write
96F78FE000
stack
page read and write
1528000
heap
page read and write
FD8000
heap
page read and write
120E000
heap
page read and write
1541000
heap
page read and write
29BF000
stack
page read and write
4DD000
unkown
page readonly
151F000
heap
page read and write
4521000
trusted library allocation
page read and write
150C000
heap
page read and write
3329000
heap
page read and write
83F000
stack
page read and write
1862000
heap
page read and write
1779000
heap
page read and write
1649000
heap
page read and write
3305000
heap
page read and write
18A3000
heap
page read and write
F08000
heap
page read and write
2210000
trusted library allocation
page read and write
DE3000
heap
page read and write
3270000
heap
page read and write
15D0000
heap
page read and write
E41000
heap
page read and write
10F5000
heap
page read and write
F48000
heap
page read and write
1278000
heap
page read and write
1572000
heap
page read and write
33A8000
heap
page read and write
11B8000
heap
page read and write
1157000
heap
page read and write
BEF000
stack
page read and write
F3F000
heap
page read and write
3CF0000
trusted library allocation
page read and write
2210000
trusted library allocation
page read and write
1260000
heap
page read and write
34B4000
heap
page read and write
F35000
heap
page read and write
2D7E000
stack
page read and write
4111000
heap
page read and write
32E9000
heap
page read and write
7FFB1E0E0000
unkown
page readonly
10E8000
heap
page read and write
1167000
heap
page read and write
E88000
heap
page read and write
3260000
heap
page read and write
3364000
heap
page read and write
7B3000
unkown
page read and write
13D470BE000
heap
page read and write
F33000
heap
page read and write
D54000
heap
page read and write
C1F000
stack
page read and write
10D3000
heap
page read and write
3A03000
heap
page read and write
515000
unkown
page readonly
15C7000
heap
page read and write
111D000
heap
page read and write
9A0000
heap
page read and write
1059000
heap
page read and write
EEF000
heap
page read and write
319D000
heap
page read and write
F01000
heap
page read and write
868000
heap
page read and write
E68000
heap
page read and write
346D000
heap
page read and write
E00000
heap
page read and write
325B000
heap
page read and write
1D078350000
heap
page read and write
3291000
heap
page read and write
16B1000
heap
page read and write
32AC000
heap
page read and write
EDF000
heap
page read and write
3432000
heap
page read and write
3298000
heap
page read and write
4051000
heap
page read and write
4501000
trusted library allocation
page read and write
4051000
heap
page read and write
43C0000
trusted library allocation
page read and write
13D46F50000
heap
page read and write
12F4000
heap
page read and write
13D4704F000
heap
page read and write
4910000
heap
page read and write
17ED000
heap
page read and write
1540000
heap
page read and write
ECE000
heap
page read and write
F15000
heap
page read and write
39A0000
heap
page read and write
1039000
heap
page read and write
D30000
trusted library allocation
page read and write
4DD000
unkown
page readonly
3BBC000
heap
page read and write
ECF000
heap
page read and write
FF8000
heap
page read and write
E2E000
heap
page read and write
39E1000
heap
page read and write
F7E000
heap
page read and write
3BAC000
heap
page read and write
F29000
heap
page read and write
F5F000
heap
page read and write
15D2000
heap
page read and write
1656000
heap
page read and write
332A000
heap
page read and write
123E000
heap
page read and write
F23000
heap
page read and write
3240000
heap
page read and write
F25000
heap
page read and write
F32000
heap
page read and write
1643000
heap
page read and write
324E000
heap
page read and write
1571000
heap
page read and write
113D000
heap
page read and write
32D7000
heap
page read and write
EA2000
heap
page read and write
E83000
heap
page read and write
1036000
heap
page read and write
1037000
heap
page read and write
503000
unkown
page readonly
4051000
heap
page read and write
F6E000
heap
page read and write
5A0000
heap
page read and write
C7F000
stack
page read and write
440000
unkown
page readonly
151C000
heap
page read and write
3C0D000
heap
page read and write
F3C000
heap
page read and write
1571000
heap
page read and write
F3A000
heap
page read and write
7B9000
unkown
page readonly
EB2000
heap
page read and write
F36000
heap
page read and write
13D95FE000
stack
page read and write
EE6000
heap
page read and write
F9F000
heap
page read and write
2210000
direct allocation
page execute and read and write
157E000
heap
page read and write
EA2000
heap
page read and write
1D0786B5000
heap
page read and write
313D000
stack
page read and write
F2D000
heap
page read and write
4EED000
stack
page read and write
434000
heap
page read and write
3305000
heap
page read and write
F81000
heap
page read and write
3279000
heap
page read and write
1547000
heap
page read and write
319A000
heap
page read and write
EA0000
heap
page read and write
16FA000
heap
page read and write
32E8000
heap
page read and write
4051000
heap
page read and write
434000
heap
page read and write
101D000
heap
page read and write
5400000
remote allocation
page read and write
E3F000
heap
page read and write
F67000
heap
page read and write
5EE000
stack
page read and write
113C000
heap
page read and write
15EE000
heap
page read and write
F8F000
heap
page read and write
34D2000
heap
page read and write
168C000
heap
page read and write
EF1000
heap
page read and write
EC0000
heap
page read and write
1778000
heap
page read and write
11B7000
heap
page read and write
32E8000
heap
page read and write
210F000
stack
page read and write
1037000
heap
page read and write
158E000
heap
page read and write
EEF000
heap
page read and write
116F000
heap
page read and write
DD4000
heap
page read and write
3315000
heap
page read and write
DE2000
heap
page read and write
1540000
heap
page read and write
FFC000
heap
page read and write
1530000
heap
page read and write
1880000
heap
page read and write
10A8000
heap
page read and write
169C000
heap
page read and write
15DF000
heap
page read and write
1641000
heap
page read and write
22CF4F6F000
heap
page read and write
346D000
heap
page read and write
F9F000
heap
page read and write
33DC000
heap
page read and write
1460000
heap
page read and write
3456000
heap
page read and write
3ABB000
heap
page read and write
3A16000
heap
page read and write
401000
unkown
page execute read
EEA000
heap
page read and write
3B88000
heap
page read and write
1649000
heap
page read and write
1024000
heap
page read and write
DC0000
heap
page read and write
4FC000
stack
page read and write
EDE000
heap
page read and write
1D13FFE000
stack
page read and write
153F000
heap
page read and write
17B7000
heap
page read and write
EF1000
heap
page read and write
1007000
heap
page read and write
EA8000
heap
page read and write
3261000
heap
page read and write
FE3000
heap
page read and write
15BF000
heap
page read and write
1752000
heap
page read and write
F6E000
heap
page read and write
18BB000
heap
page read and write
E8F000
heap
page read and write
11F6000
heap
page read and write
E8F000
heap
page read and write
1860000
heap
page read and write
15B2000
heap
page read and write
7FFB1C6F0000
unkown
page readonly
1078000
heap
page read and write
EEC000
heap
page read and write
44C9000
trusted library allocation
page read and write
D54000
heap
page read and write
1106000
heap
page read and write
E5F000
heap
page read and write
EEC000
heap
page read and write
FCD000
heap
page read and write
10AA000
heap
page read and write
4051000
heap
page read and write
1519000
heap
page read and write
8A1000
heap
page read and write
DDE000
heap
page read and write
F7E000
heap
page read and write
ECC000
heap
page read and write
FAD000
heap
page read and write
169A000
heap
page read and write
1632000
heap
page read and write
31EB000
heap
page read and write
E80000
heap
page read and write
1816000
heap
page read and write
F33000
heap
page read and write
7FFB1E100000
unkown
page read and write
1036000
heap
page read and write
F90000
heap
page read and write
3C18000
heap
page read and write
F67000
heap
page read and write
11B4000
heap
page read and write
315F000
stack
page read and write
1480000
heap
page read and write
1571000
heap
page read and write
E9B000
heap
page read and write
3355000
heap
page read and write
1166000
heap
page read and write
4051000
heap
page read and write
4111000
heap
page read and write
3C18000
heap
page read and write
4051000
heap
page read and write
320B000
heap
page read and write
1871000
heap
page read and write
F04000
heap
page read and write
1015000
heap
page read and write
3A60000
heap
page read and write
1D0786BD000
heap
page read and write
E5F000
heap
page read and write
3441000
heap
page read and write
7FFB1E105000
unkown
page readonly
3A3F000
heap
page read and write
E10000
heap
page read and write
3445000
heap
page read and write
153C000
heap
page read and write
FFA000
heap
page read and write
DFB000
heap
page read and write
33F6000
heap
page read and write
1278000
heap
page read and write
3336000
heap
page read and write
F48000
heap
page read and write
1008000
heap
page read and write
34DA000
heap
page read and write
F67000
heap
page read and write
F34000
heap
page read and write
E68000
heap
page read and write
1036000
heap
page read and write
440000
unkown
page readonly
1036000
heap
page read and write
12F3000
trusted library allocation
page execute and read and write
FF8000
heap
page read and write
38D7000
heap
page read and write
1310000
trusted library allocation
page read and write
3364000
heap
page read and write
F47000
heap
page read and write
E41000
heap
page read and write
22C0000
heap
page read and write
15DB000
heap
page read and write
1440000
heap
page read and write
113C000
heap
page read and write
E7B000
heap
page read and write
339B000
heap
page read and write
1686000
heap
page read and write
185C000
heap
page read and write
441000
unkown
page execute read
3258000
heap
page read and write
FAF000
heap
page read and write
1686000
heap
page read and write
187F000
heap
page read and write
1694000
heap
page read and write
3B36000
heap
page read and write
434000
heap
page read and write
3B40000
trusted library allocation
page read and write
3B61000
heap
page read and write
DD4000
heap
page read and write
50D000
unkown
page write copy
39EB000
heap
page read and write
EF2000
heap
page read and write
511000
unkown
page write copy
EF1000
heap
page read and write
4526000
trusted library allocation
page read and write
F6E000
heap
page read and write
3432000
heap
page read and write
22CF4FA2000
heap
page read and write
F1F000
heap
page read and write
4051000
heap
page read and write
434000
heap
page read and write
12F4000
heap
page read and write
ED4000
heap
page read and write
7A6000
unkown
page read and write
85A000
stack
page read and write
1271000
heap
page read and write
1002000
heap
page read and write
335D000
heap
page read and write
43C0000
trusted library allocation
page read and write
1812000
heap
page read and write
E24000
heap
page read and write
1196000
heap
page read and write
297E000
stack
page read and write
EC8000
heap
page read and write
3298000
heap
page read and write
11CE000
heap
page read and write
18CE000
heap
page read and write
1036000
heap
page read and write
F6E000
heap
page read and write
F82000
heap
page read and write
F71000
heap
page read and write
1D079FC0000
heap
page read and write
F3D000
heap
page read and write
15BF000
heap
page read and write
1509000
heap
page read and write
40A000
unkown
page read and write
18BB000
heap
page read and write
17B9000
heap
page read and write
1050000
trusted library allocation
page read and write
2220000
trusted library allocation
page read and write
DDF000
heap
page read and write
F48000
heap
page read and write
F0E000
heap
page read and write
3432000
heap
page read and write
12F4000
heap
page read and write
3412000
heap
page read and write
F29000
heap
page read and write
4051000
heap
page read and write
127E000
heap
page read and write
11BB000
heap
page read and write
1D13EFE000
stack
page read and write
7C0000
heap
page read and write
2F7C000
heap
page read and write
50D000
unkown
page read and write
440000
unkown
page readonly
F9B000
heap
page read and write
1585000
heap
page read and write
F46000
heap
page read and write
EE6000
heap
page read and write
E70000
heap
page read and write
1193000
heap
page read and write
163A000
heap
page read and write
18CE000
heap
page read and write
32CA000
heap
page read and write
FD2000
heap
page read and write
3408000
heap
page read and write
1658000
heap
page read and write
10A8000
heap
page read and write
FFF000
heap
page read and write
3B88000
heap
page read and write
12F4000
heap
page read and write
1606000
heap
page read and write
E65000
heap
page read and write
50D000
unkown
page read and write
CFE000
stack
page read and write
3A3F000
heap
page read and write
E24000
heap
page read and write
2C7F000
stack
page read and write
EFF000
heap
page read and write
1502000
heap
page read and write
10AC000
heap
page read and write
25D0000
heap
page read and write
107D000
heap
page read and write
3ADE000
heap
page read and write
11DC000
stack
page read and write
15F9000
heap
page read and write
3483000
heap
page read and write
E9F000
heap
page read and write
1D078560000
heap
page read and write
13D46FDD000
heap
page read and write
1207000
heap
page read and write
440000
unkown
page readonly
3B1E000
heap
page read and write
840000
heap
page read and write
107D000
heap
page read and write
4577000
trusted library allocation
page read and write
50D000
unkown
page write copy
169C000
heap
page read and write
1704000
heap
page read and write
EB7000
heap
page read and write
DF4000
heap
page read and write
15FB000
heap
page read and write
FC9000
heap
page read and write
E76000
heap
page read and write
1721000
heap
page read and write
4051000
heap
page read and write
3ACD000
heap
page read and write
400000
unkown
page readonly
F63000
heap
page read and write
7FFB1E0E1000
unkown
page execute read
1553000
heap
page read and write
EF7000
heap
page read and write
FBB000
heap
page read and write
408000
unkown
page readonly
4051000
heap
page read and write
16DB000
heap
page read and write
12F4000
heap
page read and write
E2F000
heap
page read and write
F31000
heap
page read and write
437E000
stack
page read and write
73CFD000
unkown
page read and write
E76000
heap
page read and write
163F000
heap
page read and write
D00000
heap
page read and write
39D4000
heap
page read and write
FA2000
heap
page read and write
F12000
heap
page read and write
3480000
heap
page read and write
E83000
heap
page read and write
F3D000
heap
page read and write
E8C000
heap
page read and write
173C000
heap
page read and write
1813000
heap
page read and write
F1F000
heap
page read and write
3376000
heap
page read and write
434000
heap
page read and write
316A000
heap
page read and write
157C000
heap
page read and write
2B3E000
heap
page read and write
110B000
heap
page read and write
70C000
stack
page read and write
DD4000
heap
page read and write
1047000
heap
page read and write
1C70000
heap
page read and write
3319000
heap
page read and write
F75000
heap
page read and write
32D3000
heap
page read and write
332D000
heap
page read and write
FE1000
heap
page read and write
E0C000
heap
page read and write
DF6000
heap
page read and write
3305000
heap
page read and write
FD1000
heap
page read and write
73CF6000
unkown
page readonly
EB0000
heap
page read and write
2D2F000
stack
page read and write
3358000
heap
page read and write
3B50000
heap
page read and write
2DDE000
stack
page read and write
4051000
heap
page read and write
164F000
heap
page read and write
3A8E000
heap
page read and write
EF3000
heap
page read and write
1D13CFE000
stack
page read and write
115F000
heap
page read and write
3B95000
heap
page read and write
1CCE000
stack
page read and write
E83000
heap
page read and write
4051000
heap
page read and write
F84000
heap
page read and write
4DD000
unkown
page readonly
4521000
trusted library allocation
page read and write
14D0000
heap
page read and write
FC8000
heap
page read and write
2210000
trusted library allocation
page read and write
F36000
heap
page read and write
1037000
heap
page read and write
172E000
heap
page read and write
F3D000
heap
page read and write
1686000
heap
page read and write
12B0000
heap
page read and write
1167000
heap
page read and write
15DF000
heap
page read and write
EC1000
heap
page read and write
3298000
heap
page read and write
5F0000
heap
page read and write
334A000
heap
page read and write
103C000
heap
page read and write
FEC000
heap
page read and write
3450000
heap
page read and write
1715000
heap
page read and write
1114000
heap
page read and write
334A000
heap
page read and write
11FF000
stack
page read and write
FC5000
heap
page read and write
3BC8000
heap
page read and write
1686000
heap
page read and write
1517000
heap
page read and write
9B000
stack
page read and write
F85000
heap
page read and write
FDC000
heap
page read and write
C2E000
stack
page read and write
1503000
heap
page read and write
1686000
heap
page read and write
1507000
heap
page read and write
E72000
heap
page read and write
F76000
heap
page read and write
3A41000
heap
page read and write
3456000
heap
page read and write
33A4000
heap
page read and write
7FFB1E102000
unkown
page readonly
1091000
heap
page read and write
2220000
direct allocation
page execute and read and write
80E000
stack
page read and write
15D5000
heap
page read and write
4DED000
stack
page read and write
EBD000
heap
page read and write
10BF000
heap
page read and write
E07000
heap
page read and write
C80000
heap
page read and write
BBE000
stack
page read and write
FFB000
heap
page read and write
31C3000
heap
page read and write
15FD000
heap
page read and write
FFC000
heap
page read and write
1812000
heap
page read and write
FEB000
heap
page read and write
FAC000
heap
page read and write
1813000
heap
page read and write
31FD000
heap
page read and write
1585000
heap
page read and write
15FB000
heap
page read and write
F67000
heap
page read and write
2A1F000
stack
page read and write
4051000
heap
page read and write
E3B000
heap
page read and write
13D46FD0000
heap
page read and write
ED8000
heap
page read and write
174C000
heap
page read and write
3408000
heap
page read and write
1036000
heap
page read and write
177B000
heap
page read and write
348A000
heap
page read and write
2B70000
trusted library allocation
page execute and read and write
F6E000
heap
page read and write
3391000
heap
page read and write
1170000
heap
page read and write
ECD000
heap
page read and write
43C0000
trusted library allocation
page read and write
D54000
heap
page read and write
153C000
heap
page read and write
73CFF000
unkown
page readonly
3911000
heap
page read and write
F7E000
heap
page read and write
F06000
heap
page read and write
3B36000
heap
page read and write
10E8000
heap
page read and write
5A0000
heap
page read and write
1686000
heap
page read and write
3650000
heap
page read and write
10DC000
heap
page read and write
17C2000
heap
page read and write
2CBE000
stack
page read and write
3AE9000
heap
page read and write
96F7AFB000
stack
page read and write
2DAF000
stack
page read and write
3456000
heap
page read and write
4051000
heap
page read and write
EDE000
heap
page read and write
3177000
heap
page read and write
F0A000
heap
page read and write
EDD000
heap
page read and write
3390000
heap
page read and write
430000
heap
page read and write
11EF000
stack
page read and write
F65000
heap
page read and write
14F0000
heap
page read and write
FD4000
heap
page read and write
FBB000
heap
page read and write
2D9E000
unkown
page read and write
15F9000
heap
page read and write
11AC000
heap
page read and write
F29000
heap
page read and write
10FC000
heap
page read and write
E72000
heap
page read and write
1300000
trusted library allocation
page read and write
7FFB1E0E1000
unkown
page execute read
1505000
heap
page read and write
F3D000
heap
page read and write
1045000
heap
page read and write
110A000
heap
page read and write
3B9A000
heap
page read and write
F3A000
heap
page read and write
F90000
heap
page read and write
F4B000
heap
page read and write
1167000
heap
page read and write
F61000
heap
page read and write
17BA000
heap
page read and write
F6E000
heap
page read and write
EAD000
heap
page read and write
159F000
heap
page read and write
15AF000
heap
page read and write
1647000
heap
page read and write
4051000
heap
page read and write
F76000
heap
page read and write
3B8D000
heap
page read and write
127E000
heap
page read and write
175E000
heap
page read and write
17DB000
heap
page read and write
1124000
heap
page read and write
D50000
heap
page read and write
157C000
heap
page read and write
4CFF000
stack
page read and write
96F76FE000
stack
page read and write
E15000
heap
page read and write
1686000
heap
page read and write
3B9A000
heap
page read and write
7FFB1E0F6000
unkown
page readonly
503000
unkown
page readonly
E9F000
heap
page read and write
33F6000
heap
page read and write
173E000
heap
page read and write
EBA000
heap
page read and write
4516000
trusted library allocation
page read and write
2CF4000
trusted library allocation
page read and write
161A000
heap
page read and write
2210000
trusted library allocation
page read and write
F8C000
heap
page read and write
F16000
heap
page read and write
1008000
heap
page read and write
3A62000
heap
page read and write
15C8000
heap
page read and write
1D141FE000
stack
page read and write
4051000
heap
page read and write
12F4000
heap
page read and write
152D000
heap
page read and write
15B2000
heap
page read and write
515000
unkown
page readonly
F44000
heap
page read and write
4050000
heap
page read and write
127E000
heap
page read and write
B7F000
stack
page read and write
10E8000
heap
page read and write
E40000
heap
page read and write
1842000
heap
page read and write
D70000
heap
page read and write
3412000
heap
page read and write
2B47000
trusted library allocation
page execute and read and write
3258000
heap
page read and write
3486000
heap
page read and write
F36000
heap
page read and write
E81000
heap
page read and write
E41000
heap
page read and write
73CE1000
unkown
page execute read
4051000
heap
page read and write
34C7000
heap
page read and write
13D90FE000
stack
page read and write
12F4000
heap
page read and write
F11000
heap
page read and write
3CF0000
trusted library allocation
page read and write
322B000
heap
page read and write
4210000
trusted library allocation
page read and write
10D4000
heap
page read and write
110F000
heap
page read and write
1005000
heap
page read and write
1143000
heap
page read and write
1547000
heap
page read and write
1538000
heap
page read and write
EEA000
heap
page read and write
16C6000
heap
page read and write
DD4000
heap
page read and write
EA6000
heap
page read and write
160B000
heap
page read and write
164A000
heap
page read and write
339B000
heap
page read and write
33F6000
heap
page read and write
3C2C000
heap
page read and write
3ADE000
heap
page read and write
339B000
heap
page read and write
3355000
heap
page read and write
1524000
heap
page read and write
E5F000
heap
page read and write
48AF000
stack
page read and write
96F71FF000
stack
page read and write
F8D000
heap
page read and write
E65000
heap
page read and write
1036000
heap
page read and write
1056000
heap
page read and write
17C1000
heap
page read and write
160B000
heap
page read and write
43C0000
trusted library allocation
page read and write
D30000
trusted library allocation
page read and write
1098000
heap
page read and write
1270000
trusted library allocation
page read and write
2D50000
heap
page read and write
185F000
heap
page read and write
1553000
heap
page read and write
F7A000
heap
page read and write
1060000
heap
page read and write
4051000
heap
page read and write
339D000
heap
page read and write
3421000
heap
page read and write
E3D000
heap
page read and write
FC9000
heap
page read and write
3C2C000
heap
page read and write
1512000
heap
page read and write
73CE1000
unkown
page execute read
4051000
heap
page read and write
43CA000
trusted library allocation
page read and write
830000
heap
page read and write
13D46F40000
heap
page read and write
7FFB1C6F1000
unkown
page execute read
4526000
trusted library allocation
page read and write
F3C000
heap
page read and write
1553000
heap
page read and write
2260000
heap
page read and write
1082000
heap
page read and write
331E000
heap
page read and write
104E000
heap
page read and write
1609000
heap
page read and write
4051000
heap
page read and write
F8B000
heap
page read and write
1553000
heap
page read and write
339C000
heap
page read and write
4516000
trusted library allocation
page read and write
2210000
trusted library allocation
page read and write
3392000
heap
page read and write
1038000
heap
page read and write
1090000
heap
page read and write
31CA000
heap
page read and write
EB9000
heap
page read and write
EFF000
heap
page read and write
3B77000
heap
page read and write
E41000
heap
page read and write
1082000
heap
page read and write
77C000
unkown
page read and write
1547000
heap
page read and write
E6A000
heap
page read and write
1082000
heap
page read and write
3AE1000
heap
page read and write
174B000
heap
page read and write
31B6000
heap
page read and write
1045000
heap
page read and write
3B47000
heap
page read and write
3A41000
heap
page read and write
3C18000
heap
page read and write
FA4000
heap
page read and write
1139000
heap
page read and write
F67000
heap
page read and write
FAD000
heap
page read and write
2C7E000
stack
page read and write
342E000
stack
page read and write
E1F000
heap
page read and write
1B2000
unkown
page readonly
15C8000
heap
page read and write
4307000
trusted library allocation
page read and write
EEC000
heap
page read and write
FBB000
heap
page read and write
39EA000
heap
page read and write
ED2000
heap
page read and write
12F4000
heap
page read and write
31A6000
heap
page read and write
15C4000
heap
page read and write
3ADE000
heap
page read and write
50FF000
stack
page read and write
1102000
heap
page read and write
1553000
heap
page read and write
3B88000
heap
page read and write
F6E000
heap
page read and write
10AB000
heap
page read and write
3388000
heap
page read and write
434000
heap
page read and write
3315000
heap
page read and write
3A3F000
heap
page read and write
3304000
heap
page read and write
1686000
heap
page read and write
F29000
heap
page read and write
4111000
heap
page read and write
ECF000
heap
page read and write
3BBC000
heap
page read and write
BCE000
stack
page read and write
F3A000
heap
page read and write
15EE000
heap
page read and write
15B0000
heap
page read and write
3A63000
heap
page read and write
FBF000
heap
page read and write
3911000
heap
page read and write
115D000
heap
page read and write
DF6000
heap
page read and write
73CF6000
unkown
page readonly
11B7000
heap
page read and write
1222000
heap
page read and write
3190000
heap
page read and write
22CF4F41000
heap
page read and write
1188000
heap
page read and write
3A41000
heap
page read and write
441000
unkown
page execute read
D1E000
stack
page read and write
3B9A000
heap
page read and write
FB7000
heap
page read and write
15DA000
heap
page read and write
32DB000
heap
page read and write
F67000
heap
page read and write
FC9000
heap
page read and write
2F8D000
stack
page read and write
33DC000
heap
page read and write
338C000
heap
page read and write
3BD1000
heap
page read and write
15F5000
heap
page read and write
1036000
heap
page read and write
1102000
heap
page read and write
3C24000
heap
page read and write
4576000
trusted library allocation
page read and write
595F000
stack
page read and write
15D0000
heap
page read and write
F2D000
heap
page read and write
131A000
trusted library allocation
page execute and read and write
408000
unkown
page readonly
D54000
heap
page read and write
E8A000
heap
page read and write
43D8000
trusted library allocation
page read and write
FD0000
heap
page read and write
2B80000
trusted library allocation
page read and write
1036000
heap
page read and write
F5E000
heap
page read and write
22CF4F67000
heap
page read and write
4408000
trusted library allocation
page read and write
3386000
heap
page read and write
15EB000
heap
page read and write
1507000
heap
page read and write
10A8000
heap
page read and write
11B4000
heap
page read and write
1571000
heap
page read and write
16F3000
heap
page read and write
F3E000
heap
page read and write
E70000
heap
page read and write
3CF0000
trusted library allocation
page read and write
F2D000
heap
page read and write
15BF000
stack
page read and write
F1F000
heap
page read and write
4051000
heap
page read and write
3CF0000
trusted library allocation
page read and write
D30000
trusted library allocation
page read and write
1102000
heap
page read and write
96F74FE000
stack
page read and write
3ADC000
heap
page read and write
1037000
heap
page read and write
EF2000
heap
page read and write
16D2000
heap
page read and write
1752000
heap
page read and write
5650000
heap
page execute and read and write
511000
unkown
page write copy
5410000
heap
page read and write
16D0000
heap
page read and write
1676000
heap
page read and write
E78000
heap
page read and write
F36000
heap
page read and write
DE2000
heap
page read and write
503000
unkown
page readonly
F44000
heap
page read and write
1533000
heap
page read and write
1686000
heap
page read and write
102E000
heap
page read and write
433E000
stack
page read and write
3910000
heap
page read and write
3445000
heap
page read and write
1030000
heap
page read and write
EA0000
heap
page read and write
EB5000
heap
page read and write
29C0000
heap
page read and write
160B000
heap
page read and write
FFA000
heap
page read and write
17B9000
heap
page read and write
1754000
heap
page read and write
10A9000
heap
page read and write
D30000
trusted library allocation
page read and write
12F5000
heap
page read and write
120F000
heap
page read and write
E1F000
heap
page read and write
43C0000
trusted library allocation
page read and write
316A000
heap
page read and write
3C01000
heap
page read and write
3245000
heap
page read and write
32BE000
heap
page read and write
13D46FD5000
heap
page read and write
1036000
heap
page read and write
3B77000
heap
page read and write
16EE000
heap
page read and write
2E8C000
stack
page read and write
4051000
heap
page read and write
580000
heap
page read and write
4051000
heap
page read and write
169C000
heap
page read and write
E65000
heap
page read and write
16F8000
heap
page read and write
10C9000
heap
page read and write
7FFB1C712000
unkown
page readonly
F6E000
heap
page read and write
3432000
heap
page read and write
2B4B000
trusted library allocation
page execute and read and write
16D2000
heap
page read and write
F2D000
heap
page read and write
EE1000
heap
page read and write
1D140FE000
stack
page read and write
E6C000
heap
page read and write
12F4000
heap
page read and write
50D000
unkown
page read and write
4051000
heap
page read and write
3445000
heap
page read and write
F01000
heap
page read and write
E76000
heap
page read and write
4309000
trusted library allocation
page read and write
1503000
heap
page read and write
96F70FA000
stack
page read and write
E9B000
heap
page read and write
32F4000
heap
page read and write
EB4000
heap
page read and write
F63000
heap
page read and write
10DD000
heap
page read and write
FBB000
heap
page read and write
782000
unkown
page read and write
1624000
heap
page read and write
106B000
heap
page read and write
4522000
trusted library allocation
page read and write
4051000
heap
page read and write
1107000
heap
page read and write
4DD000
unkown
page readonly
EA0000
heap
page read and write
12F0000
heap
page read and write
15DA000
heap
page read and write
3760000
heap
page read and write
22CF4F30000
heap
page read and write
1752000
heap
page read and write
FB7000
heap
page read and write
108F000
heap
page read and write
43C0000
trusted library allocation
page read and write
1766000
heap
page read and write
E33000
heap
page read and write
3290000
heap
page read and write
EF8000
heap
page read and write
BFE000
stack
page read and write
15F9000
heap
page read and write
EB6000
heap
page read and write
2DC6000
heap
page read and write
13BE000
stack
page read and write
F1F000
heap
page read and write
1168000
heap
page read and write
364F000
stack
page read and write
163D000
heap
page read and write
3B10000
heap
page read and write
104E000
heap
page read and write
3258000
heap
page read and write
1894000
heap
page read and write
3A3F000
heap
page read and write
F26000
heap
page read and write
73CE0000
unkown
page readonly
15B8000
heap
page read and write
FBA000
heap
page read and write
F67000
heap
page read and write
7FFB1C715000
unkown
page readonly
11E6000
heap
page read and write
F33000
heap
page read and write
330A000
heap
page read and write
32E3000
heap
page read and write
F2D000
heap
page read and write
575E000
stack
page read and write
1654000
heap
page read and write
16FB000
heap
page read and write
3C2C000
heap
page read and write
1686000
heap
page read and write
3BD1000
heap
page read and write
F16000
heap
page read and write
E83000
heap
page read and write
32A9000
heap
page read and write
7FFB1E102000
unkown
page readonly
1102000
heap
page read and write
1320000
heap
page read and write
FB4000
heap
page read and write
16CE000
heap
page read and write
17B0000
heap
page read and write
30DF000
stack
page read and write
1066000
heap
page read and write
110C000
heap
page read and write
339B000
heap
page read and write
4051000
heap
page read and write
39CA000
heap
page read and write
1686000
heap
page read and write
3456000
heap
page read and write
104E000
heap
page read and write
F6C000
heap
page read and write
32B2000
heap
page read and write
7FFB1E0E0000
unkown
page readonly
169C000
heap
page read and write
2E4F000
stack
page read and write
1154000
heap
page read and write
DED000
heap
page read and write
F36000
heap
page read and write
1585000
heap
page read and write
341B000
heap
page read and write
E87000
heap
page read and write
4051000
heap
page read and write
13D4707D000
heap
page read and write
511000
unkown
page write copy
1628000
heap
page read and write
E44000
heap
page read and write
73CFF000
unkown
page readonly
7FFB1E100000
unkown
page read and write
1D0784AF000
heap
page read and write
F8B000
heap
page read and write
3B15000
heap
page read and write
1D0E000
stack
page read and write
1182000
heap
page read and write
3990000
heap
page read and write
10CE000
heap
page read and write
F7A000
heap
page read and write
31AF000
heap
page read and write
D30000
trusted library allocation
page read and write
441000
unkown
page execute read
FAF000
heap
page read and write
EE5000
heap
page read and write
4547000
trusted library allocation
page read and write
1037000
heap
page read and write
15DD000
heap
page read and write
16EE000
heap
page read and write
E3C000
remote allocation
page execute and read and write
34C7000
heap
page read and write
DC8000
heap
page read and write
32AE000
unkown
page read and write
7FFB1C710000
unkown
page read and write
F0E000
heap
page read and write
11CA000
heap
page read and write
22CF6A30000
heap
page read and write
157C000
heap
page read and write
152D000
heap
page read and write
1633000
heap
page read and write
1140000
heap
page read and write
F70000
heap
page read and write
4051000
heap
page read and write
440000
unkown
page readonly
34C7000
heap
page read and write
D30000
trusted library allocation
page read and write
50D000
unkown
page write copy
151D000
heap
page read and write
E0C000
heap
page read and write
104E000
heap
page read and write
503000
unkown
page readonly
1551000
heap
page read and write
2210000
trusted library allocation
page read and write
EDA000
heap
page read and write
1695000
heap
page read and write
4051000
heap
page read and write
1036000
heap
page read and write
F67000
heap
page read and write
1D078440000
heap
page read and write
112B000
heap
page read and write
515000
unkown
page readonly
31CA000
heap
page read and write
E5F000
heap
page read and write
17FD000
heap
page read and write
3319000
heap
page read and write
E75000
heap
page read and write
10C8000
heap
page read and write
ECC000
heap
page read and write
EED000
heap
page read and write
ECE000
heap
page read and write
160B000
heap
page read and write
2D4E000
stack
page read and write
F29000
heap
page read and write
10A5000
heap
page read and write
EE2000
heap
page read and write
3398000
heap
page read and write
1698000
heap
page read and write
F33000
heap
page read and write
BDB000
stack
page read and write
E0E000
heap
page read and write
1082000
heap
page read and write
16F6000
heap
page read and write
EA3000
heap
page read and write
13DB000
stack
page read and write
83F000
stack
page read and write
3441000
heap
page read and write
E76000
heap
page read and write
324E000
heap
page read and write
1112000
heap
page read and write
2CFE000
stack
page read and write
401000
unkown
page execute read
167E000
stack
page read and write
1104000
heap
page read and write
3437000
heap
page read and write
EEF000
heap
page read and write
12F4000
heap
page read and write
F90000
heap
page read and write
2D80000
heap
page read and write
1D078540000
heap
page read and write
151C000
heap
page read and write
14FE000
heap
page read and write
FD5000
heap
page read and write
FCD000
heap
page read and write
109F000
heap
page read and write
151C000
heap
page read and write
2D11000
trusted library allocation
page read and write
ECD000
heap
page read and write
F9F000
heap
page read and write
515000
unkown
page readonly
10C6000
heap
page read and write
2CEE000
stack
page read and write
EB2000
heap
page read and write
32B0000
heap
page read and write
E22000
heap
page read and write
FBB000
heap
page read and write
DCE000
stack
page read and write
4DD000
unkown
page readonly
FAC000
heap
page read and write
2F70000
heap
page read and write
EF8000
heap
page read and write
ED6000
heap
page read and write
15D2000
heap
page read and write
1728000
heap
page read and write
1528000
heap
page read and write
3BF2000
heap
page read and write
EBB000
heap
page read and write
441000
unkown
page execute read
169C000
heap
page read and write
DD0000
heap
page read and write
4110000
heap
page read and write
1D144FB000
stack
page read and write
3911000
heap
page read and write
109E000
heap
page read and write
1167000
heap
page read and write
39D4000
heap
page read and write
11BB000
heap
page read and write
D5E000
stack
page read and write
17DE000
heap
page read and write
440000
unkown
page readonly
16D2000
heap
page read and write
1197000
heap
page read and write
334A000
heap
page read and write
3390000
heap
page read and write
2BEE000
stack
page read and write
3ACF000
heap
page read and write
1763000
heap
page read and write
FE1000
heap
page read and write
169C000
heap
page read and write
1702000
heap
page read and write
39E0000
heap
page read and write
158C000
heap
page read and write
39FE000
heap
page read and write
F6C000
heap
page read and write
120E000
heap
page read and write
16D2000
heap
page read and write
F16000
heap
page read and write
F70000
heap
page read and write
FD0000
heap
page read and write
1C30000
heap
page read and write
1036000
heap
page read and write
F76000
heap
page read and write
163D000
heap
page read and write
22CF515C000
heap
page read and write
F3D000
heap
page read and write
DD4000
heap
page read and write
1540000
heap
page read and write
D70000
heap
page read and write
3B50000
heap
page read and write
F5F000
heap
page read and write
12F4000
heap
page read and write
104A000
heap
page read and write
F3D000
heap
page read and write
E5F000
heap
page read and write
15DE000
heap
page read and write
3C1D000
heap
page read and write
3479000
heap
page read and write
F4A000
heap
page read and write
1001000
heap
page read and write
ED2000
heap
page read and write
3A40000
heap
page read and write
16D0000
heap
page read and write
1626000
heap
page read and write
DF6000
heap
page read and write
34CA000
heap
page read and write
3AFA000
heap
page read and write
10AE000
heap
page read and write
3880000
heap
page read and write
434000
heap
page read and write
104E000
heap
page read and write
DE0000
heap
page read and write
EC4000
heap
page read and write
13CE000
stack
page read and write
1650000
heap
page read and write
E41000
heap
page read and write
DF6000
heap
page read and write
3ABD000
heap
page read and write
1739000
heap
page read and write
D4E000
stack
page read and write
1585000
heap
page read and write
F82000
heap
page read and write
536E000
stack
page read and write
15AF000
heap
page read and write
29C6000
heap
page read and write
FA7000
heap
page read and write
1607000
heap
page read and write
16C3000
heap
page read and write
E72000
heap
page read and write
EC1000
heap
page read and write
FCB000
heap
page read and write
E76000
heap
page read and write
3476000
heap
page read and write
EA5000
heap
page read and write
2DC0000
heap
page read and write
157C000
heap
page read and write
170E000
heap
page read and write
18AC000
heap
page read and write
FE9000
heap
page read and write
440000
unkown
page readonly
40A000
unkown
page write copy
3AAF000
heap
page read and write
E6E000
heap
page read and write
9A6000
heap
page read and write
116F000
heap
page read and write
F1F000
heap
page read and write
FDF000
heap
page read and write
FCD000
heap
page read and write
1503000
heap
page read and write
2CBF000
stack
page read and write
FAB000
heap
page read and write
3315000
heap
page read and write
E64000
heap
page read and write
17E3000
heap
page read and write
50D000
unkown
page read and write
10A9000
heap
page read and write
F7A000
heap
page read and write
7B9000
unkown
page readonly
3CF0000
trusted library allocation
page read and write
DF4000
heap
page read and write
E72000
heap
page read and write
1BE000
unkown
page readonly
F20000
heap
page read and write
E80000
heap
page read and write
2210000
trusted library allocation
page read and write
12F4000
heap
page read and write
DD4000
heap
page read and write
3CF0000
trusted library allocation
page read and write
2F4E000
heap
page read and write
1649000
heap
page read and write
1036000
heap
page read and write
12FD000
trusted library allocation
page execute and read and write
E2A000
heap
page read and write
E33000
heap
page read and write
EC9000
heap
page read and write
3329000
heap
page read and write
317E000
heap
page read and write
30E0000
heap
page read and write
4051000
heap
page read and write
EEF000
heap
page read and write
F91000
heap
page read and write
E9D000
heap
page read and write
7B0000
heap
page read and write
F06000
heap
page read and write
7FE000
stack
page read and write
48E0000
heap
page read and write
FE9000
heap
page read and write
3215000
heap
page read and write
3319000
heap
page read and write
D10000
heap
page read and write
F90000
heap
page read and write
F25000
heap
page read and write
11BE000
stack
page read and write
FAC000
heap
page read and write
3994000
heap
page read and write
119B000
heap
page read and write
13D48AB0000
heap
page read and write
325E000
heap
page read and write
E31000
heap
page read and write
F87000
heap
page read and write
1014000
heap
page read and write
1D13BFE000
stack
page read and write
ED8000
heap
page read and write
122E000
heap
page read and write
185D000
heap
page read and write
3457000
heap
page read and write
10AD000
heap
page read and write
D1A000
stack
page read and write
2EC0000
heap
page read and write
29ED000
stack
page read and write
2210000
trusted library allocation
page read and write
2CF0000
trusted library allocation
page read and write
4DD000
unkown
page readonly
F90000
heap
page read and write
E03000
heap
page read and write
11F6000
heap
page read and write
10EA000
heap
page read and write
153C000
heap
page read and write
2F30000
heap
page read and write
F1A000
heap
page read and write
1174000
heap
page read and write
F12000
heap
page read and write
F44000
heap
page read and write
F2D000
heap
page read and write
3385000
heap
page read and write
120E000
heap
page read and write
4B20000
heap
page read and write
3432000
heap
page read and write
96F75FF000
stack
page read and write
4051000
heap
page read and write
E41000
heap
page read and write
EA0000
heap
page read and write
11BC000
heap
page read and write
CB0000
heap
page read and write
32AC000
heap
page read and write
338E000
heap
page read and write
104E000
heap
page read and write
10A9000
heap
page read and write
4051000
heap
page read and write
3421000
heap
page read and write
2D6E000
stack
page read and write
2F7D000
heap
page read and write
10B6000
heap
page read and write
BFA000
stack
page read and write
3B95000
heap
page read and write
32C6000
heap
page read and write
13D96FD000
stack
page read and write
F70000
heap
page read and write
1717000
heap
page read and write
F90000
heap
page read and write
113C000
heap
page read and write
515000
unkown
page readonly
160C000
heap
page read and write
F22000
heap
page read and write
5A4000
heap
page read and write
EE5000
heap
page read and write
17B9000
heap
page read and write
E60000
heap
page read and write
1036000
heap
page read and write
FE9000
heap
page read and write
4051000
heap
page read and write
19A000
stack
page read and write
1048000
heap
page read and write
57E000
stack
page read and write
74C000
stack
page read and write
F67000
heap
page read and write
DF3000
heap
page read and write
1842000
heap
page read and write
11C5000
heap
page read and write
14F5000
heap
page read and write
1651000
heap
page read and write
10B5000
heap
page read and write
3ADE000
heap
page read and write
F8C000
heap
page read and write
E72000
heap
page read and write
5FE000
stack
page read and write
17EC000
heap
page read and write
185C000
heap
page read and write
E61000
heap
page read and write
E2A000
heap
page read and write
1013000
heap
page read and write
F6E000
heap
page read and write
F90000
heap
page read and write
E68000
heap
page read and write
1229000
heap
page read and write
1582000
heap
page read and write
3AEA000
heap
page read and write
2F38000
heap
page read and write
15F1000
heap
page read and write
3A16000
heap
page read and write
F89000
heap
page read and write
162C000
heap
page read and write
FCD000
heap
page read and write
1601000
heap
page read and write
16D0000
heap
page read and write
2DE0000
heap
page read and write
1533000
heap
page read and write
E6C000
heap
page read and write
11B6000
heap
page read and write
29DF000
stack
page read and write
1D142FD000
stack
page read and write
3BB5000
heap
page read and write
F02000
heap
page read and write
32CB000
heap
page read and write
104F000
heap
page read and write
1589000
heap
page read and write
10E8000
heap
page read and write
3486000
heap
page read and write
D30000
trusted library allocation
page read and write
There are 1834 hidden memdumps, click here to show them.