IOCReport

loading gif

Files

File Path
Type
Category
Malicious
CTkT1fRtQv.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_8697bb53893bff1d8dd8d2263efc904abedc64_160cf2be_197edd8e\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC8DD.tmp.dmp
Mini DuMP crash report, 15 streams, Mon Apr 19 21:41:01 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF85.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD468.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll'
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',ReadLogRecord
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\CTkT1fRtQv.dll',#1
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7024 -s 144
clean

URLs

Name
IP
Malicious
http://ansicon.adoxa.vze.com/6
unknown
clean

IPs

IP
Domain
Country
Malicious
159.203.93.122
unknown
United States
malicious
50.116.27.97
unknown
United States
malicious
94.247.168.64
unknown
Sweden
malicious

Registry

Path
Value
Malicious
C:\Windows\SysWOW64\WerFault.exe
AmiHivePermissionsCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
AmiHiveOwnerCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
728A1000
unkown image
page execute read
malicious
728A1000
unkown image
page execute read
malicious
524F000
stack
page read and write
clean
CB7000
unkown
page read and write
clean
1941E600000
unkown
page read and write
clean
20F3000
unkown
page readonly
clean
2213000
unkown
page readonly
clean
2F62000
unkown
page read and write
clean
CA0000
unkown
page readonly
clean
2FBB000
unkown
page read and write
clean
1B116637000
unkown
page read and write
clean
2FD3000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4EC0000
unkown
page read and write
clean
1B116520000
unkown
page read and write
clean
2C03000
unkown
page readonly
clean
2F56000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1941EA50000
unkown
page readonly
clean
4B280000
unkown
page read and write
clean
4630000
heap private
page read and write
clean
7FF56BBB9000
unkown
page readonly
clean
1AF46802000
unkown
page read and write
clean
4FD0000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1FA1000
unkown
page readonly
clean
2FA8000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FB5000
unkown
page read and write
clean
7FF57736F000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1AF46A00000
unkown
page readonly
clean
7FF577291000
unkown
page readonly
clean
7FF56BB57000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2C2F000
unkown
page readonly
clean
7FF577389000
unkown
page readonly
clean
2FC1000
unkown
page read and write
clean
3050000
unkown
page readonly
clean
7FF577402000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
5130000
heap private
page read and write
clean
5135000
heap private
page read and write
clean
2A93000
unkown
page readonly
clean
2F58000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
33EA000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
3270000
unkown
page readonly
clean
2FA8000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF576BA5000
unkown
page readonly
clean
2C5B000
unkown
page readonly
clean
4E10000
unkown
page read and write
clean
2F66000
unkown
page read and write
clean
2CA5000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
4DCC000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4DC3000
unkown
page read and write
clean
B6E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
19420110000
unkown
page readonly
clean
7FF56BBB6000
unkown
page readonly
clean
3180000
unkown
page readonly
clean
80E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF5E492A000
unkown
page readonly
clean
7FF56BB6C000
unkown
page readonly
clean
1AF481A0000
unkown
page read and write
clean
2FBB000
unkown
page read and write
clean
7FF5E409D000
unkown
page readonly
clean
1B116800000
unkown
page readonly
clean
306D000
heap private
page read and write
clean
2CC000
unkown
page read and write
clean
3E0000
unkown
page read and write
clean
1B4477E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2BB3000
unkown
page readonly
clean
2B58000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
306B000
heap private
page read and write
clean
2FA8000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1941E702000
unkown
page read and write
clean
1AF4686C000
unkown
page read and write
clean
2C52000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
7FF577354000
unkown
page readonly
clean
1AF4686A000
unkown
page read and write
clean
7FF56BB40000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
4DC3000
unkown
page read and write
clean
3000000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
2FCD000
unkown
page read and write
clean
3300000
heap default
page read and write
clean
2C0C000
unkown
page readonly
clean
2FC1000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2580000
unkown
page read and write
clean
2BED000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
25C0000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
1AF46800000
unkown
page read and write
clean
7FF5773F4000
unkown
page readonly
clean
2EE0000
heap default
page read and write
clean
1941E675000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
1941E800000
unkown
page write copy
clean
CB5000
heap default
page read and write
clean
1B11660D000
unkown
page read and write
clean
1941E613000
unkown
page read and write
clean
5161000
unkown
page read and write
clean
1AF4686A000
unkown
page read and write
clean
1941E66C000
unkown
page read and write
clean
7FF57731B000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2A85000
unkown
page readonly
clean
7FF5E4699000
unkown
page readonly
clean
7FF5E4661000
unkown
page readonly
clean
4DC3000
unkown
page read and write
clean
2150000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
2950000
unkown
page read and write
clean
4940000
unkown
page readonly
clean
4DCC000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
31E0000
unkown
page read and write
clean
2C41000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
21E5000
unkown
page readonly
clean
1AF46868000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
4D4F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF576B2E000
unkown
page readonly
clean
4DCC000
unkown
page read and write
clean
2167000
unkown
page readonly
clean
545000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FCD000
unkown
page read and write
clean
4FE0000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2AB5000
unkown
page readonly
clean
7FF56BB03000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
537E000
unkown
page read and write
clean
219B000
unkown
page readonly
clean
2ED0000
unkown
page read and write
clean
7FF56BBBD000
unkown
page readonly
clean
4D80000
unkown
page read and write
clean
3670000
unkown
page readonly
clean
2C19000
unkown
page readonly
clean
7FF56BA43000
unkown
page readonly
clean
5132000
heap private
page read and write
clean
7FF5772FA000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2F5D000
unkown
page read and write
clean
7FF5E4748000
unkown
page readonly
clean
2AE2000
unkown
page readonly
clean
7FF5E484B000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
513C000
heap private
page read and write
clean
1AF46813000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2B35000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
1AF46902000
unkown
page read and write
clean
2970000
heap private
page read and write
clean
CBE000
unkown
page read and write
clean
4DC8000
unkown
page read and write
clean
3060000
heap private
page read and write
clean
CBE000
unkown
page read and write
clean
2FD3000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF5E488A000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
7FF5E4665000
unkown
page readonly
clean
7FF5E44FC000
unkown
page readonly
clean
1AF465A0000
heap private
page read and write
clean
CB7000
unkown
page read and write
clean
7FF56BC24000
unkown
page readonly
clean
7FF56BC32000
unkown
page readonly
clean
4FC4000
heap private
page read and write
clean
2ABF000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2B4C000
unkown
page readonly
clean
32A0000
unkown
page execute and read and write
clean
1FAB000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
4C81000
unkown
page read and write
clean
1B446FE000
unkown
page read and write
clean
2A6B000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF56BB84000
unkown
page readonly
clean
1AF46730000
unkown
page readonly
clean
2FCD000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2CD3000
unkown
page readonly
clean
7FF57730A000
unkown
page readonly
clean
7FF56B906000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2F6B000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
29D0000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
29D5000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
A0F000
unkown
page read and write
clean
7FF5771A0000
unkown
page readonly
clean
1941E629000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
2B73000
heap default
page read and write
clean
2F5D000
unkown
page read and write
clean
1B116602000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2F97000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
25A0000
unkown
page readonly
clean
1B448FF000
unkown
page read and write
clean
728A0000
unkown image
page readonly
clean
1AF46600000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
4DC3000
unkown
page read and write
clean
549000
unkown
page read and write
clean
1AF46900000
unkown
page read and write
clean
19420010000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
216F000
unkown
page readonly
clean
33E0000
heap default
page read and write
clean
6FC000
stack
page read and write
clean
2988000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2F6E000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2956000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7E4FB8B000
unkown
page read and write
clean
2A6C000
unkown
page readonly
clean
7FF56BC2A000
unkown
page readonly
clean
D00000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5E4931000
unkown
page readonly
clean
2C3F000
unkown
page readonly
clean
2F9E000
unkown
page read and write
clean
7FF5E483A000
unkown
page readonly
clean
3000000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FE0000
unkown
page readonly
clean
3190000
heap private
page read and write
clean
3403000
heap default
page read and write
clean
2910000
unkown
page readonly
clean
2C10000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5E4517000
unkown
page readonly
clean
2726000
unkown
page read and write
clean
8CBA179000
unkown
page read and write
clean
53BF000
stack
page read and write
clean
2B63000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4DC6000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1AF46856000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5E486F000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
1B116B00000
unkown
page read and write
clean
2FB5000
unkown
page read and write
clean
2C2D000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CFE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1941E658000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
36C0000
unkown
page readonly
clean
31A0000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
3680000
unkown
page readonly
clean
2FD9000
unkown
page read and write
clean
2920000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
4E80000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
3FF000
unkown
page read and write
clean
1B116611000
unkown
page read and write
clean
1AF46829000
unkown
page read and write
clean
21E1000
unkown
page readonly
clean
2159000
unkown
page readonly
clean
2196000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2C56000
unkown
page readonly
clean
7FF5E4894000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
21F4000
unkown
page readonly
clean
7FF56BBA8000
unkown
page readonly
clean
28D6000
unkown
page readonly
clean
2FD9000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1941E642000
unkown
page read and write
clean
4C81000
unkown
page read and write
clean
4DCC000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5E48B1000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
8CBA07E000
unkown
page read and write
clean
4E30000
heap private
page read and write
clean
7FF5772A6000
unkown
page readonly
clean
28FE000
unkown
page readonly
clean
272A000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2BDA000
unkown
page readonly
clean
4DCA000
unkown
page read and write
clean
3070000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1941E66F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1AF4686C000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
728BD000
unkown image
page read and write
clean
CB7000
unkown
page read and write
clean
8CB9C7D000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1AF4686C000
unkown
page read and write
clean
2FAF000
unkown
page read and write
clean
1AF46913000
unkown
page read and write
clean
1B116580000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
7FF56BC31000
unkown
page readonly
clean
5151000
unkown
page read and write
clean
7FF5E47E0000
unkown
page readonly
clean
4640000
unkown
page read and write
clean
7FF577364000
unkown
page readonly
clean
2C50000
unkown
page readonly
clean
2F6E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF56B8FB000
unkown
page readonly
clean
2C33000
unkown
page readonly
clean
CB0000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
2FA3000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2BFC000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2972000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
5150000
unkown
page read and write
clean
211A000
unkown
page readonly
clean
2F9C000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1B116700000
unkown
page read and write
clean
50E0000
unkown
page read and write
clean
2109000
unkown
page readonly
clean
4DCD000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
D20000
unkown
page read and write
clean
1AF4686C000
unkown
page read and write
clean
728BF000
unkown image
page readonly
clean
CB7000
unkown
page read and write
clean
7E500F9000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FCD000
unkown
page read and write
clean
4B39F000
unkown
page read and write
clean
5250000
unkown
page readonly
clean
7FF56B965000
unkown
page readonly
clean
2977000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2F6B000
unkown
page read and write
clean
2F8A000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2B44000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
28E9000
unkown
page readonly
clean
1AF466E0000
unkown
page write copy
clean
7FF5772FC000
unkown
page readonly
clean
2F9C000
unkown
page read and write
clean
2ACF000
unkown
page readonly
clean
7FF5E450F000
unkown
page readonly
clean
38C0000
unkown
page readonly
clean
2990000
unkown
page readonly
clean
7FF56BB45000
unkown
page readonly
clean
2FC1000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
C6F000
stack
page read and write
clean
CBE000
unkown
page read and write
clean
4C80000
unkown
page read and write
clean
2F54000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1B4467B000
unkown
page read and write
clean
2F66000
unkown
page read and write
clean
7E4FF7B000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2A8C000
unkown
page readonly
clean
25DF000
unkown
page read and write
clean
7FF5E4932000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2113000
unkown
page readonly
clean
2A60000
unkown
page readonly
clean
1B116628000
unkown
page read and write
clean
7E5007F000
unkown
page read and write
clean
4F70000
unkown
page read and write
clean
2F91000
unkown
page read and write
clean
2B31000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56BB94000
unkown
page readonly
clean
1941E700000
unkown
page read and write
clean
212D000
unkown
page readonly
clean
2202000
unkown
page readonly
clean
7FF56BA21000
unkown
page readonly
clean
5070000
unkown
page readonly
clean
3100000
heap private
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4634000
heap private
page read and write
clean
2F5F000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2A9D000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56B7FC000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
9A2000
stack
page read and write
clean
C5E000
unkown
page read and write
clean
3030000
unkown
page readonly
clean
4DC9000
unkown
page read and write
clean
2F68000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
3198000
heap private
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5E48B6000
unkown
page readonly
clean
7E4FEFF000
unkown
page read and write
clean
4DC3000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF56B817000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2980000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1FEA000
unkown
page readonly
clean
2C25000
unkown
page readonly
clean
700000
unkown
page readonly
clean
2192000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2BC9000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF5E473B000
unkown
page readonly
clean
2135000
unkown
page readonly
clean
24DC000
unkown
page read and write
clean
4EBF000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
728A0000
unkown image
page readonly
clean
1B116702000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
1AF4686C000
unkown
page read and write
clean
7FF56B961000
unkown
page readonly
clean
3280000
unkown
page read and write
clean
251B000
unkown
page read and write
clean
2213000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56BAE0000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56BA3B000
unkown
page readonly
clean
1941E850000
unkown
page readonly
clean
2B52000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
3260000
unkown
page readonly
clean
A0B000
unkown
page read and write
clean
728BA000
unkown image
page readonly
clean
CB7000
unkown
page read and write
clean
4B39F000
unkown
page read and write
clean
8CB9F7F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2B00000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
2C3A000
unkown
page readonly
clean
4D50000
unkown
page readonly
clean
7FF56BA48000
unkown
page readonly
clean
4650000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CE0000
unkown
page readonly
clean
7FF56B80F000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF5E48BD000
unkown
page readonly
clean
2165000
unkown
page readonly
clean
7FF576B26000
unkown
page readonly
clean
7FF5E4857000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
2FC1000
unkown
page read and write
clean
7FF5E4878000
unkown
page readonly
clean
7FF5E489E000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2FDB000
unkown
page read and write
clean
4B280000
unkown
page read and write
clean
1AF46610000
unkown
page readonly
clean
5100000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FC1000
unkown
page read and write
clean
3A0000
unkown
page execute and read and write
clean
CB7000
unkown
page read and write
clean
5138000
heap private
page read and write
clean
1B116613000
unkown
page read and write
clean
28EB000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56BB3E000
unkown
page readonly
clean
2FD9000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FCD000
unkown
page read and write
clean
2AAA000
unkown
page readonly
clean
1B447F9000
unkown
page read and write
clean
2FD3000
unkown
page read and write
clean
2CC8000
unkown
page readonly
clean
1B44879000
unkown
page read and write
clean
7FF5E4924000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
5138000
heap private
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1AF4683F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2BCC000
unkown
page readonly
clean
3010000
unkown
page readonly
clean
2800000
unkown
page readonly
clean
7E4FFFA000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2BD3000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2FB5000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2F68000
unkown
page read and write
clean
329F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF5E483E000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
25F0000
unkown
page read and write
clean
2F62000
unkown
page read and write
clean
1AF482A0000
unkown
page readonly
clean
350000
heap default
page read and write
clean
CB7000
unkown
page read and write
clean
2FA2000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
36A0000
unkown
page read and write
clean
1AF46868000
unkown
page read and write
clean
728A0000
unkown image
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
19420470000
unkown
page read and write
clean
7FF5E48AE000
unkown
page readonly
clean
1941E66D000
unkown
page read and write
clean
C9F000
stack
page read and write
clean
CBE000
unkown
page read and write
clean
4B39B000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
1941E66D000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2C27000
unkown
page readonly
clean
7FF56BB4B000
unkown
page readonly
clean
2F5F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
728BF000
unkown image
page readonly
clean
7FF5E48A8000
unkown
page readonly
clean
4DCC000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
4470000
unkown
page read and write
clean
7FF5E4840000
unkown
page readonly
clean
2AA0000
unkown
page readonly
clean
2FCD000
unkown
page read and write
clean
4DCF000
unkown
page read and write
clean
1B116715000
unkown
page read and write
clean
728BA000
unkown image
page readonly
clean
CB7000
unkown
page read and write
clean
217A000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FBB000
unkown
page read and write
clean
3240000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
830000
heap default
page read and write
clean
2ACA000
unkown
page readonly
clean
25E0000
unkown
page execute and read and write
clean
7FF56B39D000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
3040000
unkown
page readonly
clean
31E4000
unkown
page read and write
clean
2208000
unkown
page readonly
clean
213C000
unkown
page readonly
clean
9F0000
unkown
page read and write
clean
340000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
32E0000
unkown
page read and write
clean
2181000
unkown
page readonly
clean
7FF5E4743000
unkown
page readonly
clean
2FCD000
unkown
page read and write
clean
7FF577347000
unkown
page readonly
clean
7FF56B80A000
unkown
page readonly
clean
2940000
unkown
page readonly
clean
319C000
heap private
page read and write
clean
7FF5E4606000
unkown
page readonly
clean
2ABD000
unkown
page readonly
clean
1B116A13000
unkown
page read and write
clean
96C000
unkown
page read and write
clean
1B116B13000
unkown
page read and write
clean
2AB7000
unkown
page readonly
clean
217F000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4C81000
unkown
page read and write
clean
7FF5773FA000
unkown
page readonly
clean
330000
unkown
page read and write
clean
2F6B000
unkown
page read and write
clean
7FF5E486C000
unkown
page readonly
clean
2040000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
36B0000
heap private
page read and write
clean
2F66000
unkown
page read and write
clean
2A61000
unkown
page readonly
clean
4F74000
unkown
page read and write
clean
7E4FE7E000
unkown
page read and write
clean
2F6E000
unkown
page read and write
clean
2B50000
heap default
page read and write
clean
2FB5000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF57733F000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
1941E602000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
5110000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
7FF5E4845000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
7FF5E48B9000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
4DCA000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
25B0000
unkown
page readonly
clean
7FF56BBAE000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
1B116B02000
unkown
page read and write
clean
50F0000
unkown
page readonly
clean
4B39B000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
216D000
unkown
page readonly
clean
3066000
heap private
page read and write
clean
CB7000
unkown
page read and write
clean
2AA9000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
7FF56BB6F000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
1941E530000
unkown
page readonly
clean
3305000
heap default
page read and write
clean
2FD3000
unkown
page read and write
clean
7FF57708F000
unkown
page readonly
clean
1941E713000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
214C000
unkown
page readonly
clean
2EE8000
heap default
page read and write
clean
39E000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
7FF5772D3000
unkown
page readonly
clean
728BD000
unkown image
page read and write
clean
7FF57738D000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2F6E000
unkown
page read and write
clean
B2E000
stack
page read and write
clean
CB7000
unkown
page read and write
clean
2FC7000
unkown
page read and write
clean
852000
heap default
page read and write
clean
8CB9E7E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF577310000
unkown
page readonly
clean
1941E4C0000
heap private
page read and write
clean
CB7000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
3690000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF56BB9E000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FE0000
unkown
page read and write
clean
2FB5000
unkown
page read and write
clean
3030000
unkown
page read and write
clean
7FF5E47E2000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
7FF577401000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF577386000
unkown
page readonly
clean
7FF5E4803000
unkown
page readonly
clean
83B000
heap default
page read and write
clean
2143000
unkown
page readonly
clean
1941E520000
heap default
page read and write
clean
4D0E000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2DA0000
unkown
page readonly
clean
2F68000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2EC0000
unkown
page readonly
clean
7FF56BB3A000
unkown
page readonly
clean
CB7000
unkown
page read and write
clean
1B116600000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FBB000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
4E7E000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
3310000
unkown
page readonly
clean
7FF56BB8A000
unkown
page readonly
clean
2FA2000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
7FF5E450A000
unkown
page readonly
clean
1B116723000
heap private
page read and write
clean
2FAF000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
4FC0000
heap private
page read and write
clean
2930000
heap private
page read and write
clean
CD0000
heap private
page read and write
clean
728A0000
unkown image
page readonly
clean
CBE000
unkown
page read and write
clean
2CC2000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
2173000
unkown
page readonly
clean
2FC1000
unkown
page read and write
clean
1B4497F000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
4DCC000
unkown
page read and write
clean
7FF56BAE2000
unkown
page readonly
clean
2A5B000
unkown
page readonly
clean
7FF57735A000
unkown
page readonly
clean
2FC7000
unkown
page read and write
clean
7FF56BBB1000
unkown
page readonly
clean
2CB4000
unkown
page readonly
clean
2FD9000
unkown
page read and write
clean
7FF5E4721000
unkown
page readonly
clean
315E000
unkown
page read and write
clean
2EAF000
stack
page read and write
clean
7FF5E45FB000
unkown
page readonly
clean
2AC3000
unkown
page readonly
clean
CBE000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
728A0000
unkown image
page readonly
clean
2F96000
unkown
page read and write
clean
CB7000
unkown
page read and write
clean
2FD9000
unkown
page read and write
clean
A2F000
stack
page read and write
clean
4DCC000
unkown
page read and write
clean
1B116A02000
unkown
page read and write
clean
7FF5E4884000
unkown
page readonly
clean
2CD3000
unkown
page readonly
clean
53B0000
heap private
page read and write
clean
1AF4686A000
unkown
page read and write
clean
2B5A000
heap default
page read and write
clean
CBE000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
210C000
unkown
page readonly
clean
2BF5000
unkown
page readonly
clean
7FF56B999000
unkown
page readonly
clean
2F9C000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
2FBB000
unkown
page read and write
clean
CBE000
unkown
page read and write
clean
728A0000
unkown image
page readonly
clean
4DCA000
unkown
page read and write
clean
DD5000
unkown
page readonly
clean
7FF56BB78000
unkown
page readonly
clean
There are 821 hidden memdumps, click here to show them.