IOCReport

loading gif

Files

File Path
Type
Category
Malicious
BJKPKLUPiD.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_c7ca2540c4b6526dfdf44662714aed219cc3cf7_160cf2be_126ae707\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
 clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERBC3D.tmp.dmp
Mini DuMP crash report, 15 streams, Tue Apr 20 06:38:49 2021, 0x1205a4 type
dropped
 clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC68F.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
 clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD14E.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\BJKPKLUPiD.dll'
 malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\BJKPKLUPiD.dll',#1
 malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\BJKPKLUPiD.dll',ReadLogRecord
 malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\BJKPKLUPiD.dll',#1
 clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7016 -s 428
 clean

URLs

Name
IP
Malicious
http://ansicon.adoxa.vze.com/6
unknown
 clean

IPs

IP
Domain
Country
Malicious
159.203.93.122
unknown
United States
malicious
50.116.27.97
unknown
United States
malicious
94.247.168.64
unknown
Sweden
malicious

Registry

Path
Value
Malicious
C:\Windows\SysWOW64\WerFault.exe
AmiHivePermissionsCorrect
 clean
C:\Windows\SysWOW64\WerFault.exe
AmiHiveOwnerCorrect
 clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
 clean

Memdumps

Base Address
Regiontype
Protect
Malicious
70991000
unkown image
page execute read
 malicious
70991000
unkown image
page execute read
 malicious
709AD000
unkown image
page read and write
 clean
336B000
unkown
page read and write
 clean
7FF5E2FA1000
unkown
page readonly
 clean
EEF000
stack
page read and write
 clean
70990000
unkown image
page readonly
 clean
341E000
unkown
page read and write
 clean
331E000
unkown
page read and write
 clean
7FF53DA4D000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
1D329690000
unkown
page readonly
 clean
1D329324000
unkown
page readonly
 clean
314B000
unkown
page readonly
 clean
56F000
unkown
page read and write
 clean
B20000
unkown
page read and write
 clean
BDF000
unkown
page read and write
 clean
50E0000
unkown
page read and write
 clean
7FF5329AD000
unkown
page readonly
 clean
272BAC59000
unkown
page read and write
 clean
1D325090000
unkown
page read and write
 clean
1D324CF0000
unkown
page readonly
 clean
56C0000
unkown
page read and write
 clean
30C2000
unkown
page readonly
 clean
11F0000
unkown
page read and write
 clean
1D329238000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF5E339B000
unkown
page readonly
 clean
5680000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D323C7C000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
56A2000
heap private
page read and write
 clean
7FF53DA1E000
unkown
page readonly
 clean
7FF53DABD000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
F90000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
ABF6D7E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3415000
heap default
page read and write
 clean
ABF6E7F000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
DEE000
unkown
page read and write
 clean
20F3A610000
unkown
page readonly
 clean
AB0000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
52B8000
unkown
page read and write
 clean
709AF000
unkown image
page readonly
 clean
1D329251000
unkown
page read and write
 clean
3290000
heap default
page read and write
 clean
7FF532D07000
unkown
page readonly
 clean
30C2000
unkown
page readonly
 clean
331E000
unkown
page read and write
 clean
3346000
unkown
page read and write
 clean
314D000
unkown
page readonly
 clean
3530000
heap private
page read and write
 clean
1D329450000
unkown
page read and write
 clean
2BE9000
unkown
page readonly
 clean
1D323CA2000
unkown
page read and write
 clean
2B2D000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
1D323C8E000
unkown
page read and write
 clean
1D329420000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D324B01000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
BC0000
unkown
page readonly
 clean
3156000
unkown
page readonly
 clean
70990000
unkown image
page readonly
 clean
5F0000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D329230000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
17C000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
3365000
unkown
page read and write
 clean
5AB0000
heap private
page read and write
 clean
5670000
unkown
page readonly
 clean
4D70000
unkown
page readonly
 clean
1D324D50000
unkown
page readonly
 clean
7FF532BE4000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
B70000
heap default
page read and write
 clean
3383000
unkown
page read and write
 clean
3353000
unkown
page read and write
 clean
3365000
unkown
page read and write
 clean
7FF532BE9000
unkown
page readonly
 clean
272BAD13000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
830000
heap private
page read and write
 clean
ABF6CFB000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3121000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
56A8000
heap private
page read and write
 clean
331E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
EF0000
unkown
page read and write
 clean
316E000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
EF0000
unkown
page read and write
 clean
1D3294B9000
unkown
page read and write
 clean
7FF53DA59000
unkown
page readonly
 clean
20F3A824000
unkown
page read and write
 clean
599F000
stack
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
CB0000
unkown
page readonly
 clean
7FF5328D5000
unkown
page readonly
 clean
56A8000
heap private
page read and write
 clean
ABF70FD000
unkown
page read and write
 clean
330D000
unkown
page read and write
 clean
35A0000
unkown
page read and write
 clean
7FF532526000
unkown
page readonly
 clean
33B0000
unkown
page readonly
 clean
1D324340000
unkown
page read and write
 clean
1D32923E000
unkown
page read and write
 clean
1D329390000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
327E000
unkown
page read and write
 clean
1D324559000
unkown
page read and write
 clean
7FF532A3E000
unkown
page readonly
 clean
3358000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
7FF53D87F000
unkown
page readonly
 clean
1BB000
unkown
page read and write
 clean
3135000
unkown
page readonly
 clean
A00000
unkown
page readonly
 clean
272BAD00000
unkown
page read and write
 clean
272BC5F0000
unkown
page read and write
 clean
1D323D13000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
ABF6AFF000
unkown
page read and write
 clean
AEF000
unkown
page read and write
 clean
1D329260000
unkown
page read and write
 clean
52B8000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
7FF5E32DF000
unkown
page readonly
 clean
3158000
unkown
page read and write
 clean
5171000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF532BD7000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
2F36000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
56C1000
unkown
page read and write
 clean
48C0000
unkown
page read and write
 clean
7FF53DA32000
unkown
page readonly
 clean
56A0000
heap private
page read and write
 clean
3383000
unkown
page read and write
 clean
6021779000
unkown
page read and write
 clean
352F000
stack
page read and write
 clean
3389000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532B48000
unkown
page readonly
 clean
7FF532CF6000
unkown
page readonly
 clean
709AA000
unkown image
page readonly
 clean
1D323C00000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3358000
unkown
page read and write
 clean
2C98000
unkown
page readonly
 clean
1D324513000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
3540000
unkown
page readonly
 clean
3389000
unkown
page read and write
 clean
7FF53D6D5000
unkown
page readonly
 clean
30D1000
unkown
page readonly
 clean
50D0000
unkown
page readonly
 clean
3308000
unkown
page read and write
 clean
1D323BF0000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF5E33C6000
unkown
page readonly
 clean
5460000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D323C25000
unkown
page read and write
 clean
7FF532C32000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF5329F2000
unkown
page readonly
 clean
1D329327000
unkown
page readonly
 clean
336B000
unkown
page read and write
 clean
2CDC000
unkown
page readonly
 clean
602157F000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
3590000
unkown
page readonly
 clean
3377000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAC00000
unkown
page read and write
 clean
20F3A813000
unkown
page read and write
 clean
1D3294B0000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D3290A0000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532C4D000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
56A5000
heap private
page read and write
 clean
7FF532A0A000
unkown
page readonly
 clean
DE0000
heap private
page read and write
 clean
7FF532CDA000
unkown
page readonly
 clean
3389000
unkown
page read and write
 clean
52BA000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D324D00000
unkown
page readonly
 clean
331E000
unkown
page read and write
 clean
569C000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
4B39B000
unkown
page read and write
 clean
7FF53DAF6000
unkown
page readonly
 clean
52BA000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
DAF000
stack
page read and write
 clean
1D3290E0000
unkown
page readonly
 clean
ABF6DFE000
unkown
page read and write
 clean
ABF6EFF000
unkown
page read and write
 clean
55F0000
unkown
page read and write
 clean
20F3A802000
unkown
page read and write
 clean
1D329334000
unkown
page write copy
 clean
7FF532BFF000
unkown
page readonly
 clean
7FF5329D5000
unkown
page readonly
 clean
7FF53DB07000
unkown
page readonly
 clean
30CD000
unkown
page readonly
 clean
1D324500000
unkown
page read and write
 clean
7FF5E32E3000
unkown
page readonly
 clean
7FF53DAB7000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
7FF53DAF3000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
970000
unkown
page execute and read and write
 clean
7FF5329F9000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3352000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D323ED0000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
272BAE50000
unkown
page readonly
 clean
7FF532CBD000
unkown
page readonly
 clean
709AA000
unkown image
page readonly
 clean
20F3AA02000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D329110000
unkown
page read and write
 clean
1D329456000
unkown
page read and write
 clean
7FF53DAC4000
unkown
page readonly
 clean
309E000
unkown
page readonly
 clean
1D329270000
unkown
page read and write
 clean
980000
heap default
page read and write
 clean
3316000
unkown
page read and write
 clean
334E000
unkown
page read and write
 clean
3163000
unkown
page readonly
 clean
1D329600000
unkown
page readonly
 clean
338D000
unkown
page read and write
 clean
7FF53294A000
unkown
page readonly
 clean
335F000
unkown
page read and write
 clean
3550000
unkown
page readonly
 clean
20F3A5A0000
unkown
page read and write
 clean
510000
unkown
page readonly
 clean
5A3000
heap default
page read and write
 clean
D03000
heap default
page read and write
 clean
341E000
unkown
page read and write
 clean
3318000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3358000
unkown
page read and write
 clean
602127D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
52B3000
unkown
page read and write
 clean
1D329274000
unkown
page read and write
 clean
A80000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF532CB7000
unkown
page readonly
 clean
337D000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF532BC8000
unkown
page readonly
 clean
7FF53DA46000
unkown
page readonly
 clean
3280000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF5E3397000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
1360000
heap private
page read and write
 clean
1D324B30000
unkown
page read and write
 clean
31A8000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
ABF68FB000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF53DA0F000
unkown
page readonly
 clean
7FF532C5E000
unkown
page readonly
 clean
4B280000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
318D000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
272BAC02000
unkown
page read and write
 clean
1D329340000
unkown
page read and write
 clean
1D323BD0000
heap default
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAC29000
unkown
page read and write
 clean
2CB6000
unkown
page readonly
 clean
2FD2000
stack
page read and write
 clean
7E0000
unkown
page readonly
 clean
70990000
unkown image
page readonly
 clean
653000
unkown
page read and write
 clean
7FF5E32CF000
unkown
page readonly
 clean
1D329670000
unkown
page readonly
 clean
7FF5E3327000
unkown
page readonly
 clean
595E000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
52B3000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
1D323C13000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
ABF72FF000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
5660000
unkown
page readonly
 clean
1D324D30000
unkown
page readonly
 clean
7D0000
unkown
page readonly
 clean
3304000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
9A9000
unkown
page read and write
 clean
1D324502000
unkown
page read and write
 clean
7FF532CB4000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
1D3294A6000
unkown
page read and write
 clean
3306000
unkown
page read and write
 clean
7FF532CC4000
unkown
page readonly
 clean
1D323C3D000
unkown
page read and write
 clean
1D324415000
unkown
page read and write
 clean
602147F000
unkown
page read and write
 clean
4F0000
unkown
page read and write
 clean
7FF5E3175000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
20F3AB13000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
56AC000
heap private
page read and write
 clean
1D323D02000
unkown
page read and write
 clean
709AD000
unkown image
page read and write
 clean
1D3294BA000
unkown
page read and write
 clean
1D329230000
unkown
page read and write
 clean
3184000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
5464000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3156000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
330F000
unkown
page read and write
 clean
50F0000
unkown
page read and write
 clean
3371000
unkown
page read and write
 clean
1D329487000
unkown
page read and write
 clean
7FF532B7E000
unkown
page readonly
 clean
55CE000
unkown
page read and write
 clean
1D3294B9000
unkown
page read and write
 clean
CAD83FD000
unkown
page read and write
 clean
420000
unkown
page readonly
 clean
2C81000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3420000
unkown
page readonly
 clean
30CA000
unkown
page readonly
 clean
1D329390000
unkown
page read and write
 clean
272BAC6C000
unkown
page read and write
 clean
1D324D20000
unkown
page readonly
 clean
1D3294B4000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
5270000
unkown
page read and write
 clean
1D324B20000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
272BAC6C000
unkown
page read and write
 clean
30DB000
unkown
page readonly
 clean
3138000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
47C0000
unkown
page read and write
 clean
2BEE000
unkown
page readonly
 clean
1D324C10000
unkown
page read and write
 clean
5640000
unkown
page read and write
 clean
7FF532A04000
unkown
page readonly
 clean
20F3A600000
heap default
page read and write
 clean
1D3294B4000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
4B39F000
unkown
page read and write
 clean
2B3B000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3347000
unkown
page read and write
 clean
7FF532A06000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3138000
unkown
page readonly
 clean
3389000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532A40000
unkown
page readonly
 clean
4B39B000
unkown
page read and write
 clean
7FF5E3316000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
334C000
unkown
page read and write
 clean
8FC000
stack
page read and write
 clean
1D324518000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
5170000
unkown
page read and write
 clean
7FF53D7DF000
unkown
page readonly
 clean
1D324400000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
ABF6BFA000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
F00000
unkown
page read and write
 clean
1D329304000
unkown
page readonly
 clean
7FF532CB1000
unkown
page readonly
 clean
1D323C59000
unkown
page read and write
 clean
1D324B23000
unkown
page read and write
 clean
7FF532BF4000
unkown
page readonly
 clean
1D3296B0000
unkown
page readonly
 clean
3377000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
BF0000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D324260000
unkown
page readonly
 clean
338D000
unkown
page read and write
 clean
35B0000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
2D08000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
59D0000
heap private
page read and write
 clean
1D324330000
unkown
page read and write
 clean
1D329443000
unkown
page read and write
 clean
7FF5324A1000
unkown
page readonly
 clean
1D329300000
unkown
page write copy
 clean
7FF532AD7000
unkown
page readonly
 clean
331B000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
5171000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
331E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
315C000
unkown
page read and write
 clean
B7B000
heap default
page read and write
 clean
7FF53287C000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
ABF6FFE000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3341000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
5690000
unkown
page readonly
 clean
5171000
unkown
page read and write
 clean
7FF532C46000
unkown
page readonly
 clean
1D32942E000
unkown
page read and write
 clean
7FF532A10000
unkown
page readonly
 clean
7FF53DA57000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
2AA3000
unkown
page readonly
 clean
31A8000
unkown
page readonly
 clean
3371000
unkown
page read and write
 clean
1D323C29000
unkown
page read and write
 clean
7FF53D9D7000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF532AAD000
unkown
page readonly
 clean
31A8000
unkown
page readonly
 clean
B92000
heap default
page read and write
 clean
341E000
unkown
page read and write
 clean
20F3A902000
unkown
page read and write
 clean
3312000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAD02000
unkown
page read and write
 clean
2CCE000
unkown
page readonly
 clean
2FD5000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
2B1C000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
1D329400000
unkown
page read and write
 clean
3312000
unkown
page read and write
 clean
1D329417000
unkown
page read and write
 clean
1D329250000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
20F3A80D000
unkown
page read and write
 clean
1D323C77000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
7FF532C01000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
2C00000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
2C95000
unkown
page readonly
 clean
272BABC0000
unkown
page readonly
 clean
1D323C95000
unkown
page read and write
 clean
A90000
unkown
page read and write
 clean
7FF532C13000
unkown
page readonly
 clean
2CE4000
unkown
page readonly
 clean
7FF5E3387000
unkown
page readonly
 clean
990000
unkown
page readonly
 clean
20F3AA13000
unkown
page read and write
 clean
272BAC13000
unkown
page read and write
 clean
CAD817E000
unkown
page read and write
 clean
2F9C000
unkown
page readonly
 clean
30CA000
unkown
page readonly
 clean
20F3A867000
unkown
page read and write
 clean
7FF532C57000
unkown
page readonly
 clean
272BAC6C000
unkown
page read and write
 clean
7FF53DA13000
unkown
page readonly
 clean
7FF53DA26000
unkown
page readonly
 clean
2C2A000
unkown
page readonly
 clean
7FF5329B3000
unkown
page readonly
 clean
272BAC6D000
unkown
page read and write
 clean
272BC6F0000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
ABF67F8000
unkown
page read and write
 clean
1D323CB1000
unkown
page read and write
 clean
70990000
unkown image
page readonly
 clean
7FF532A4B000
unkown
page readonly
 clean
CAD82FF000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
B50000
heap private
page read and write
 clean
20F3A828000
unkown
page read and write
 clean
7FF53D918000
unkown
page readonly
 clean
7FF5E32E5000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
2C31000
unkown
page readonly
 clean
7FF532AA7000
unkown
page readonly
 clean
95E000
unkown
page read and write
 clean
1D324D40000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
B9E000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
35C7000
heap private
page read and write
 clean
35CB000
heap private
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
580000
heap default
page read and write
 clean
2C11000
unkown
page readonly
 clean
1D3293E0000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF5E3259000
unkown
page readonly
 clean
31A0000
unkown
page readonly
 clean
3570000
unkown
page read and write
 clean
7FF532BE0000
unkown
page readonly
 clean
5370000
unkown
page readonly
 clean
7FF532CF3000
unkown
page readonly
 clean
1D323C79000
unkown
page read and write
 clean
7FF5E33D7000
unkown
page readonly
 clean
52BB000
unkown
page read and write
 clean
2A8D000
unkown
page readonly
 clean
31A8000
unkown
page readonly
 clean
3163000
unkown
page readonly
 clean
7FF5E32ED000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
55F0000
unkown
page readonly
 clean
3538000
heap private
page read and write
 clean
7FF5329C8000
unkown
page readonly
 clean
3184000
unkown
page readonly
 clean
30DB000
unkown
page readonly
 clean
570000
unkown
page execute and read and write
 clean
7FF53D910000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF532CC7000
unkown
page readonly
 clean
1D329463000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF532AAF000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532541000
unkown
page readonly
 clean
7FF532BD4000
unkown
page readonly
 clean
3389000
unkown
page read and write
 clean
1D323B70000
heap private
page read and write
 clean
7FF5E331D000
unkown
page readonly
 clean
52B9000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF532C2A000
unkown
page readonly
 clean
335F000
unkown
page read and write
 clean
ABF66FE000
unkown
page read and write
 clean
20F3A900000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D324559000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
314B000
unkown
page readonly
 clean
1D329090000
unkown
page read and write
 clean
1D329390000
unkown
page read and write
 clean
7FF53D82B000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF53DA2A000
unkown
page readonly
 clean
20F3A915000
unkown
page read and write
 clean
DE0000
unkown
page readonly
 clean
7FF53D6DA000
unkown
page readonly
 clean
331B000
unkown
page read and write
 clean
30AF000
unkown
page readonly
 clean
330C000
heap default
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532B71000
unkown
page readonly
 clean
7FF532C0F000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3316000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
338D000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532C1D000
unkown
page readonly
 clean
3309000
unkown
page read and write
 clean
2CED000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3365000
unkown
page read and write
 clean
1D329360000
unkown
page read and write
 clean
331B000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF53252A000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF532C59000
unkown
page readonly
 clean
2F36000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
30D5000
unkown
page readonly
 clean
338D000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D323C72000
unkown
page read and write
 clean
520000
unkown
page readonly
 clean
7FF5E3394000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3410000
heap default
page read and write
 clean
7FF53DB02000
unkown
page readonly
 clean
70990000
unkown image
page readonly
 clean
5AC000
unkown
page read and write
 clean
1D329300000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3168000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
7FF532AC3000
unkown
page readonly
 clean
7FF532C26000
unkown
page readonly
 clean
CAD837B000
unkown
page read and write
 clean
52B3000
unkown
page read and write
 clean
CE0000
heap default
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF5324A4000
unkown
page readonly
 clean
340E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF53DB07000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF5E2F95000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
6FC000
unkown
page read and write
 clean
CAD81FA000
unkown
page read and write
 clean
272BAA80000
heap private
page read and write
 clean
3318000
unkown
page read and write
 clean
CC0000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
960000
unkown
page readonly
 clean
3352000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
CAD8279000
unkown
page read and write
 clean
1D329370000
unkown
page read and write
 clean
7FF5E3384000
unkown
page readonly
 clean
7FF5E2F9E000
unkown
page readonly
 clean
ABF667E000
unkown
page read and write
 clean
2A90000
unkown
page readonly
 clean
56A0000
heap private
page read and write
 clean
7FF53D6C8000
unkown
page readonly
 clean
7FF53DAB4000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF5E2F7D000
unkown
page readonly
 clean
CAD80FE000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
7FF532A9A000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
AA0000
heap private
page read and write
 clean
341E000
unkown
page read and write
 clean
30D5000
unkown
page readonly
 clean
2B17000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
ABF69FA000
unkown
page read and write
 clean
3172000
unkown
page readonly
 clean
1D329120000
unkown
page read and write
 clean
530000
unkown
page readonly
 clean
58C0000
unkown
page readonly
 clean
58D0000
unkown
page readonly
 clean
7FF532D02000
unkown
page readonly
 clean
1D329130000
unkown
page read and write
 clean
7FF532862000
unkown
page readonly
 clean
1080000
heap private
page read and write
 clean
1364000
heap private
page read and write
 clean
7FF532ACE000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
48D0000
unkown
page read and write
 clean
2F40000
unkown
page readonly
 clean
309E000
unkown
page readonly
 clean
DF0000
unkown
page read and write
 clean
7FF53D9B7000
unkown
page readonly
 clean
1D324D10000
unkown
page readonly
 clean
9A5000
unkown
page read and write
 clean
20F3AB00000
unkown
page read and write
 clean
3383000
unkown
page read and write
 clean
318D000
unkown
page readonly
 clean
2D00000
unkown
page readonly
 clean
1D329260000
unkown
page read and write
 clean
CAD807B000
unkown
page read and write
 clean
30AF000
unkown
page readonly
 clean
545000
heap default
page read and write
 clean
330F000
unkown
page read and write
 clean
CEA000
heap default
page read and write
 clean
602167E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
5270000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF53DAC7000
unkown
page readonly
 clean
330D000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF5E33AA000
unkown
page readonly
 clean
3302000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
BE5000
heap default
page read and write
 clean
341E000
unkown
page read and write
 clean
1D329350000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D329390000
unkown
page read and write
 clean
ABF6F7F000
unkown
page read and write
 clean
314D000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
31A0000
unkown
page readonly
 clean
7FF5E32A7000
unkown
page readonly
 clean
7FF53D82F000
unkown
page readonly
 clean
57C0000
unkown
page readonly
 clean
AD0000
unkown
page read and write
 clean
A70000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
ABF63FC000
unkown
page read and write
 clean
2CAB000
unkown
page readonly
 clean
3383000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF53254B000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3310000
unkown
page read and write
 clean
ABF71FD000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF53DADA000
unkown
page readonly
 clean
7FF5E32F6000
unkown
page readonly
 clean
35C0000
heap private
page read and write
 clean
341E000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
7FF532B41000
unkown
page readonly
 clean
540000
heap default
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
2F9C000
unkown
page readonly
 clean
3316000
unkown
page read and write
 clean
7FF5E2F6C000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D3294AE000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3389000
unkown
page read and write
 clean
7FF532BB5000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3121000
unkown
page readonly
 clean
709AF000
unkown image
page readonly
 clean
2CC3000
unkown
page readonly
 clean
B40000
unkown
page readonly
 clean
20F3A800000
unkown
page read and write
 clean
272BAAE0000
heap default
page read and write
 clean
840000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
33CF000
stack
page read and write
 clean
B5E000
stack
page read and write
 clean
3417000
unkown
page read and write
 clean
20F3A923000
heap private
page read and write
 clean
7FF5E33C3000
unkown
page readonly
 clean
316E000
unkown
page readonly
 clean
1090000
unkown
page readonly
 clean
394000
unkown
page read and write
 clean
3365000
unkown
page read and write
 clean
3377000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
1D323E00000
unkown
page readonly
 clean
73B000
unkown
page read and write
 clean
1D324402000
unkown
page read and write
 clean
3318000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
7FF532889000
unkown
page readonly
 clean
30CD000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
336B000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
20F3A838000
unkown
page read and write
 clean
317F000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
7FF53DACB000
unkown
page readonly
 clean
7C0000
unkown
page readonly
 clean
315E000
unkown
page readonly
 clean
7FF532B85000
unkown
page readonly
 clean
1D329380000
unkown
page read and write
 clean
52BA000
unkown
page read and write
 clean
550000
unkown
page read and write
 clean
20F3AB02000
unkown
page read and write
 clean
CAE000
unkown
page read and write
 clean
56D1000
unkown
page read and write
 clean
33B0000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
337D000
unkown
page read and write
 clean
333A000
unkown
page read and write
 clean
F0F000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAC41000
unkown
page read and write
 clean
3135000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
2CAD000
unkown
page readonly
 clean
1290000
heap private
page read and write
 clean
398000
unkown
page read and write
 clean
52B3000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
58A000
heap default
page read and write
 clean
315E000
unkown
page readonly
 clean
7F0000
unkown
page execute and read and write
 clean
338D000
unkown
page read and write
 clean
1D3294B6000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
317F000
unkown
page readonly
 clean
7FF53D8F6000
unkown
page readonly
 clean
1D3293D0000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
2F40000
unkown
page readonly
 clean
334C000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
35D0000
unkown
page readonly
 clean
2FD5000
unkown
page readonly
 clean
4B39F000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
3172000
unkown
page readonly
 clean
272BAC6C000
unkown
page read and write
 clean
7FF53D2F7000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
4B280000
unkown
page read and write
 clean
7FF53D7D5000
unkown
page readonly
 clean
272BAC6C000
unkown
page read and write
 clean
272BAE00000
unkown
page write copy
 clean
7FF5E32D1000
unkown
page readonly
 clean
52B3000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
2F9C000
unkown
page read and write
 clean
58B0000
unkown
page read and write
 clean
7FF5329DF000
unkown
page readonly
 clean
2C2D000
unkown
page readonly
 clean
272BAC6D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
591F000
stack
page read and write
 clean
3417000
unkown
page read and write
 clean
1D3294B0000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
BE0000
heap default
page read and write
 clean
1D323D00000
unkown
page read and write
 clean
272BAAF0000
unkown
page readonly
 clean
3298000
heap default
page read and write
 clean
30D1000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
272BAC6D000
unkown
page read and write
 clean
1D324518000
unkown
page read and write
 clean
2CBE000
unkown
page readonly
 clean
7FF532832000
unkown
page readonly
 clean
337D000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
7FF53D9B5000
unkown
page readonly
 clean
7FF5E33D7000
unkown
page readonly
 clean
1D323BE0000
unkown
page readonly
 clean
50B0000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
341E000
unkown
page read and write
 clean
1D329337000
unkown
page write copy
 clean
341E000
unkown
page read and write
 clean
7FF532AB3000
unkown
page readonly
 clean
3168000
unkown
page readonly
 clean
353C000
heap private
page read and write
 clean
3417000
unkown
page read and write
 clean
1D329390000
unkown
page readonly
 clean
341E000
unkown
page read and write
 clean
1D329254000
unkown
page read and write
 clean
2CD2000
unkown
page readonly
 clean
DE4000
heap private
page read and write
 clean
7FF532A64000
unkown
page readonly
 clean
3417000
unkown
page read and write
 clean
657000
unkown
page read and write
 clean
331E000
unkown
page read and write
 clean
7FF5E327B000
unkown
page readonly
 clean
7FF5E338D000
unkown
page readonly
 clean
810000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
336B000
unkown
page read and write
 clean
There are 955 hidden memdumps, click here to show them.