IOCReport

loading gif

Files

File Path
Type
Category
Malicious
IHUVPJ4hXu.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_259aeac81dd625d6a234674e48313673fc16336_160cf2be_05e4b6b9\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA9D8.tmp.dmp
Mini DuMP crash report, 15 streams, Mon Apr 19 21:51:01 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERAEBB.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1AA.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_259aeac81dd625d6a234674e48313673fc16336_160cf2be_19914593\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FD9.tmp.dmp
Mini DuMP crash report, 15 streams, Tue Apr 20 06:41:15 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER377B.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3DF4.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\IHUVPJ4hXu.dll'
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\IHUVPJ4hXu.dll',#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\IHUVPJ4hXu.dll',ReadLogRecord
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\IHUVPJ4hXu.dll',#1
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6908 -s 416
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6080 -s 424
clean

URLs

Name
IP
Malicious
http://ansicon.adoxa.vze.com/6
unknown
clean

IPs

IP
Domain
Country
Malicious
159.203.93.122
unknown
United States
malicious
50.116.27.97
unknown
United States
malicious
94.247.168.64
unknown
Sweden
malicious

Registry

Path
Value
Malicious
C:\Windows\SysWOW64\WerFault.exe
AmiHivePermissionsCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
AmiHiveOwnerCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
6EEB1000
unkown image
page execute read
malicious
6EEB1000
unkown image
page execute read
malicious
239F000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF510C49000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
46C8000
unkown
page read and write
clean
7FF5D7B6B000
unkown
page readonly
clean
1BD6BC0D000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1BD6BF02000
unkown
page read and write
clean
24ABD602000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
6EECD000
unkown image
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20809A000
unkown
page read and write
clean
2678000
unkown
page readonly
clean
25A5000
unkown
page readonly
clean
1A20A100000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
6EEB0000
unkown image
page readonly
clean
7FF510E91000
unkown
page readonly
clean
7C3000
unkown
page read and write
clean
836000
unkown
page read and write
clean
222A000
unkown
page readonly
clean
4DE63FE000
unkown
page read and write
clean
4AD4000
heap private
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
6EECF000
unkown image
page readonly
clean
2B90000
heap private
page read and write
clean
1520000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF5D7C10000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
842000
unkown
page read and write
clean
806000
unkown
page read and write
clean
7FF51109F000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
24ABCE49000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
2A20000
unkown
page readonly
clean
4A70000
unkown
page readonly
clean
24ABCE3C000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20812D000
unkown
page read and write
clean
1A20812D000
unkown
page read and write
clean
7C9000
unkown
page read and write
clean
2651000
unkown
page readonly
clean
7FF51109C000
unkown
page readonly
clean
7FF5D445E000
unkown
page readonly
clean
105B000
heap default
page read and write
clean
817000
unkown
page read and write
clean
81E000
unkown
page read and write
clean
1A20A400000
unkown
page readonly
clean
1A2080F3000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20A179000
unkown
page read and write
clean
6EEB0000
unkown image
page readonly
clean
1A209F00000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4DE667B000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A208041000
unkown
page read and write
clean
849000
unkown
page read and write
clean
82A000
unkown
page read and write
clean
2602000
unkown
page readonly
clean
2CC0000
unkown
page read and write
clean
7FF5D7C70000
unkown
page readonly
clean
1A20B210000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5110C4000
unkown
page readonly
clean
28F3000
unkown
page readonly
clean
7FF510D2C000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
24AC000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
842000
unkown
page read and write
clean
7FF5E5C2B000
unkown
page readonly
clean
3D0000
unkown
page readonly
clean
2420000
unkown
page readonly
clean
4DE677B000
unkown
page read and write
clean
2912000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
4A60000
heap private
page read and write
clean
7FF5D454C000
unkown
page readonly
clean
811000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
51C000
unkown
page read and write
clean
2355000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5108CD000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
1A20A1BF000
unkown
page read and write
clean
21C1000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A20A200000
unkown
page read and write
clean
1EB83390000
unkown
page write copy
clean
2A51000
unkown
page read and write
clean
6EEB0000
unkown image
page readonly
clean
2916000
unkown
page readonly
clean
2422000
unkown
page readonly
clean
7FF511154000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4C50000
unkown
page read and write
clean
4B39B000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
600000
unkown
page readonly
clean
225B000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
28BC000
unkown
page readonly
clean
7FF5D4651000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF510D3F000
unkown
page readonly
clean
28D9000
unkown
page readonly
clean
4DE687A000
unkown
page read and write
clean
4B39B000
unkown
page read and write
clean
46C3000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20B010000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2393000
unkown
page readonly
clean
1A20A179000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4DE637A000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
836000
unkown
page read and write
clean
4780000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1BD6BC13000
unkown
page read and write
clean
2E9B000
unkown
page read and write
clean
32F0000
unkown
page readonly
clean
7FF5D45AA000
unkown
page readonly
clean
1BD6BE02000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4A00000
unkown
page readonly
clean
F2988FE000
unkown
page read and write
clean
7FF510EC1000
unkown
page readonly
clean
4B39F000
unkown
page read and write
clean
7DE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF510D47000
unkown
page readonly
clean
2CF3000
heap default
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7D62000
unkown
page readonly
clean
3E0000
heap default
page read and write
clean
7FF51105A000
unkown
page readonly
clean
234D000
unkown
page readonly
clean
1A20A1BF000
unkown
page read and write
clean
7FF5D7CE1000
unkown
page readonly
clean
27BB000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2980000
unkown
page read and write
clean
7FF5D44C4000
unkown
page readonly
clean
3190000
unkown
page readonly
clean
5563BFF000
unkown
page read and write
clean
7FF5E5C20000
unkown
page readonly
clean
7FF5110D8000
unkown
page readonly
clean
2683000
unkown
page readonly
clean
2A40000
heap private
page read and write
clean
4DE6BFA000
unkown
page read and write
clean
F20000
unkown
page readonly
clean
1A207FA0000
heap default
page read and write
clean
7D0000
unkown
page read and write
clean
1BD6BD23000
heap private
page read and write
clean
3E7000
unkown
page read and write
clean
1EB83400000
unkown
page read and write
clean
1EB83429000
unkown
page read and write
clean
24ABDB40000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A209A90000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
55641F9000
unkown
page read and write
clean
842000
unkown
page read and write
clean
836000
unkown
page read and write
clean
28D0000
unkown
page readonly
clean
1A20A18E000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
235C000
unkown
page readonly
clean
27D0000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
6EECF000
unkown image
page readonly
clean
28ED000
unkown
page readonly
clean
1A20A202000
unkown
page read and write
clean
24ABCF00000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4DE657D000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7CCE000
unkown
page readonly
clean
1EB83413000
unkown
page read and write
clean
EFC000
stack
page read and write
clean
7FF5D4560000
unkown
page readonly
clean
25DF000
unkown
page readonly
clean
2EE0000
unkown
page readonly
clean
2A51000
unkown
page read and write
clean
27F0000
unkown
page execute and read and write
clean
2F30000
heap default
page read and write
clean
6F6037F000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4DE6B7B000
unkown
page read and write
clean
2F90000
unkown
page readonly
clean
2892000
unkown
page readonly
clean
7FF5E5BE3000
unkown
page readonly
clean
7CB000
unkown
page read and write
clean
4DE65FB000
unkown
page read and write
clean
2901000
unkown
page readonly
clean
24ABCE4F000
unkown
page read and write
clean
2965000
unkown
page readonly
clean
7FF511044000
unkown
page readonly
clean
1A209F70000
unkown
page read and write
clean
47C4000
heap private
page read and write
clean
7FF5D45A4000
unkown
page readonly
clean
7FF510E2B000
unkown
page readonly
clean
1A20A195000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20A002000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20B210000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
CB6000
unkown
page read and write
clean
2920000
unkown
page readonly
clean
46CD000
unkown
page read and write
clean
849000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF51103F000
unkown
page readonly
clean
2961000
unkown
page readonly
clean
7DF000
unkown
page read and write
clean
4DF0000
heap private
page read and write
clean
7FF5D4120000
unkown
page readonly
clean
1000000
heap default
page read and write
clean
3EE000
unkown
page read and write
clean
5563FFF000
unkown
page read and write
clean
7FF510F51000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A208200000
unkown
page readonly
clean
24ABCE4A000
unkown
page read and write
clean
7FF51106A000
unkown
page readonly
clean
1BD6BA80000
heap default
page read and write
clean
6F5FE9B000
unkown
page read and write
clean
1A208000000
unkown
page read and write
clean
28FF000
unkown
page readonly
clean
2385000
unkown
page readonly
clean
32DF000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5E5C4F000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4900000
unkown
page readonly
clean
1A207FB0000
unkown
page write copy
clean
3E7000
unkown
page read and write
clean
7FF5E5BB6000
unkown
page readonly
clean
1A2084D0000
unkown
page readonly
clean
7FF5D4652000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
25C9000
unkown
page readonly
clean
7FF51105C000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF511162000
unkown
page readonly
clean
272B000
unkown
page readonly
clean
2B50000
unkown
page readonly
clean
2BA0000
unkown
page readonly
clean
7FF5110B4000
unkown
page readonly
clean
7FF5D7CC4000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
4B40000
unkown
page read and write
clean
7FF5D7CED000
unkown
page readonly
clean
24ABCE51000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
7FF5D7A95000
unkown
page readonly
clean
1BD6BA20000
unkown
page read and write
clean
4B01000
unkown
page read and write
clean
4B280000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2F6A000
heap default
page read and write
clean
2363000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2B70000
unkown
page readonly
clean
25BD000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5D7B78000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24ABCE6F000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5E5BA1000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
46C9000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
6EECA000
unkown image
page readonly
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5D7CE6000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1BD6BD02000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1EB83500000
unkown
page read and write
clean
817000
unkown
page read and write
clean
1A20A19E000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7D2000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
7FF510BD2000
unkown
page readonly
clean
7FF5110CE000
unkown
page readonly
clean
1EB83469000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4B280000
unkown
page read and write
clean
2889000
unkown
page readonly
clean
2414000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF5D7A91000
unkown
page readonly
clean
1A209F60000
unkown
page readonly
clean
4AF1000
unkown
page read and write
clean
46C4000
unkown
page read and write
clean
46C3000
unkown
page read and write
clean
1EB84F70000
unkown
page readonly
clean
7FF5E5C1A000
unkown
page readonly
clean
836000
unkown
page read and write
clean
7FF5110E9000
unkown
page readonly
clean
4660000
unkown
page read and write
clean
1EB83502000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
28C3000
unkown
page readonly
clean
7FF510EB1000
unkown
page readonly
clean
F298EFE000
unkown
page read and write
clean
1A2080C9000
unkown
page read and write
clean
1A20806F000
unkown
page read and write
clean
7FF5D7947000
unkown
page readonly
clean
25EF000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF5D45CE000
unkown
page readonly
clean
1A20806D000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
2EC0000
unkown
page read and write
clean
7FF5E5C64000
unkown
page readonly
clean
7FF5D7C87000
unkown
page readonly
clean
83C000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
7FF5D45B4000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF510EA6000
unkown
page readonly
clean
7FF5D7C12000
unkown
page readonly
clean
5563B7F000
unkown
page read and write
clean
836000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7AC9000
unkown
page readonly
clean
1EB833E0000
unkown
page readonly
clean
24ABCE8E000
unkown
page read and write
clean
1A20813D000
unkown
page read and write
clean
55640FE000
unkown
page read and write
clean
249C000
unkown
page readonly
clean
2F60000
heap default
page read and write
clean
3E7000
unkown
page read and write
clean
2CC000
unkown
page read and write
clean
7DE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
28DD000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A208094000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
4BF0000
unkown
page readonly
clean
23BB000
unkown
page readonly
clean
7FF5D458F000
unkown
page readonly
clean
7FF511075000
unkown
page readonly
clean
1A2082D0000
unkown
page readonly
clean
49CE000
unkown
page read and write
clean
25AC000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
842000
unkown
page read and write
clean
7FF5110DE000
unkown
page readonly
clean
2988000
unkown
page readonly
clean
7FF510F78000
unkown
page readonly
clean
24ABCE4D000
unkown
page read and write
clean
4D1F000
stack
page read and write
clean
240B000
unkown
page readonly
clean
7FF5D4403000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
1BD6BC0F000
unkown
page read and write
clean
1A20A302000
unkown
page read and write
clean
1500000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF5D7D5A000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
236C000
unkown
page readonly
clean
7FF5D7CB4000
unkown
page readonly
clean
7FF5D7B51000
unkown
page readonly
clean
46C9000
unkown
page read and write
clean
24ABCD80000
unkown
page read and write
clean
7DC000
unkown
page read and write
clean
7FF5E5C74000
unkown
page readonly
clean
2A4D000
heap private
page read and write
clean
1A209F70000
unkown
page read and write
clean
1A20A148000
unkown
page read and write
clean
7FF5D7CE9000
unkown
page readonly
clean
28EF000
unkown
page readonly
clean
7FF5D45D9000
unkown
page readonly
clean
F298BFF000
unkown
page read and write
clean
7FF5D44B3000
unkown
page readonly
clean
7FF5D4135000
unkown
page readonly
clean
28FA000
unkown
page readonly
clean
2664000
unkown
page readonly
clean
7FF5110BA000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
4944000
heap private
page read and write
clean
F29887B000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20A19C000
unkown
page read and write
clean
2990000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2F35000
heap default
page read and write
clean
3EE000
unkown
page read and write
clean
4940000
heap private
page read and write
clean
28E5000
unkown
page readonly
clean
830000
unkown
page read and write
clean
7FF5E58C3000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
2405000
unkown
page readonly
clean
7FF5D45C8000
unkown
page readonly
clean
1BD6BF00000
unkown
page read and write
clean
7FF5D7A36000
unkown
page readonly
clean
7FF5110E1000
unkown
page readonly
clean
848000
unkown
page read and write
clean
7FF5D44CC000
unkown
page readonly
clean
24ABD800000
unkown
page readonly
clean
7DC000
unkown
page read and write
clean
2F40000
unkown
page readonly
clean
7FF5D7A2B000
unkown
page readonly
clean
1A2080A7000
unkown
page read and write
clean
7FF5D792C000
unkown
page readonly
clean
1A20B010000
unkown
page read and write
clean
47C0000
heap private
page read and write
clean
836000
unkown
page read and write
clean
CB2000
unkown
page read and write
clean
23B2000
unkown
page readonly
clean
288C000
unkown
page readonly
clean
27C0000
unkown
page readonly
clean
1A20A18E000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D4126000
unkown
page readonly
clean
1EB83469000
unkown
page read and write
clean
7FF510E95000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7C6E000
unkown
page readonly
clean
23B6000
unkown
page readonly
clean
24ABCCF0000
heap private
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7D54000
unkown
page readonly
clean
1BD6BC02000
unkown
page read and write
clean
24ABCE85000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5D7B73000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
4870000
unkown
page read and write
clean
258C000
unkown
page readonly
clean
849000
unkown
page read and write
clean
25B3000
unkown
page readonly
clean
1050000
heap default
page read and write
clean
2411000
unkown
page readonly
clean
7FF5E5C96000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4DE647A000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
46C3000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2B10000
heap default
page read and write
clean
1EB83441000
unkown
page read and write
clean
1A2080C5000
unkown
page read and write
clean
24ABCE73000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
7FF510EC9000
unkown
page readonly
clean
7FF5D45BF000
unkown
page readonly
clean
80C000
unkown
page read and write
clean
1A20A202000
unkown
page read and write
clean
7FF5D445B000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1BD6BD00000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24ABD0D0000
unkown
page readonly
clean
4DE5F5B000
unkown
page read and write
clean
1EB8346F000
unkown
page read and write
clean
7FF5E5D04000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A20A18E000
unkown
page read and write
clean
6F5FF1F000
unkown
page read and write
clean
1A20B010000
unkown
page read and write
clean
1BD6BD15000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
824000
unkown
page read and write
clean
7FF511010000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
273B000
unkown
page read and write
clean
81E000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
28B5000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF5D4565000
unkown
page readonly
clean
830000
unkown
page read and write
clean
2970000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF5D4597000
unkown
page readonly
clean
849000
unkown
page read and write
clean
1A208670000
unkown
page readonly
clean
7FF5E58C6000
unkown
page readonly
clean
7C7000
unkown
page read and write
clean
2CD0000
heap default
page read and write
clean
FF0000
unkown
page read and write
clean
1A20A14F000
unkown
page read and write
clean
2AE0000
unkown
page read and write
clean
4DE69FF000
unkown
page read and write
clean
1A20A1C0000
unkown
page read and write
clean
2401000
unkown
page readonly
clean
848000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7D2000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
7FF5D464A000
unkown
page readonly
clean
5563EFE000
unkown
page read and write
clean
232C000
unkown
page readonly
clean
23A1000
unkown
page readonly
clean
74E000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20B010000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
6F5FF99000
unkown
page read and write
clean
7FF5D4577000
unkown
page readonly
clean
F298FFE000
unkown
page read and write
clean
32C0000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
1A20A117000
unkown
page read and write
clean
1A209B90000
unkown
page readonly
clean
1A208055000
unkown
page read and write
clean
25D7000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
1A20A195000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5E5D0A000
unkown
page readonly
clean
4DE67FA000
unkown
page read and write
clean
2F83000
heap default
page read and write
clean
3E7000
unkown
page read and write
clean
7FF510971000
unkown
page readonly
clean
4BEE000
unkown
page read and write
clean
1A20A195000
unkown
page read and write
clean
817000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7CBA000
unkown
page readonly
clean
24ABCE4B000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
4DE5FDE000
unkown
page read and write
clean
7FF5D7C7B000
unkown
page readonly
clean
28AD000
unkown
page readonly
clean
7FF5D454A000
unkown
page readonly
clean
7FF5E5D11000
unkown
page readonly
clean
7FF51115A000
unkown
page readonly
clean
2422000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2A46000
heap private
page read and write
clean
3EE000
unkown
page read and write
clean
848000
unkown
page read and write
clean
2CB0000
unkown
page read and write
clean
1A20A302000
unkown
page read and write
clean
2370000
unkown
page readonly
clean
1EB836D0000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF510FB6000
unkown
page readonly
clean
28D9000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2387000
unkown
page readonly
clean
3060000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
238F000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
8E1000
unkown
page readonly
clean
4DE64F9000
unkown
page read and write
clean
750000
heap default
page read and write
clean
1A20806D000
unkown
page read and write
clean
46CA000
unkown
page read and write
clean
830000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A208083000
unkown
page read and write
clean
7FF510E4F000
unkown
page readonly
clean
7FF510E36000
unkown
page readonly
clean
46C8000
unkown
page read and write
clean
25EA000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
2428000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF5D7CDE000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
25C0000
unkown
page readonly
clean
2F80000
heap private
page read and write
clean
4ED0000
heap private
page read and write
clean
46D3000
unkown
page read and write
clean
2B9C000
heap private
page read and write
clean
83C000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
82A000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A207F40000
heap private
page read and write
clean
46C3000
unkown
page read and write
clean
7FF5D7CA8000
unkown
page readonly
clean
7FF5E5D12000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4AD2000
heap private
page read and write
clean
7FF5E5C0C000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
6F602FA000
unkown
page read and write
clean
6EECA000
unkown image
page readonly
clean
824000
unkown
page read and write
clean
4DE6A7B000
unkown
page read and write
clean
824000
unkown
page read and write
clean
4DE62FF000
unkown
page read and write
clean
2C71000
unkown
page read and write
clean
7FF5D43B1000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2940000
unkown
page read and write
clean
1BD6BC64000
unkown
page read and write
clean
2930000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2B15000
heap default
page read and write
clean
1A20A202000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5E5C9D000
unkown
page readonly
clean
4DE6AFB000
unkown
page read and write
clean
F298B7B000
unkown
page read and write
clean
7FF5D7C9F000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
4BAF000
stack
page read and write
clean
238D000
unkown
page readonly
clean
1A20A1BF000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A208083000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
824000
unkown
page read and write
clean
4910000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF510EA4000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7C9C000
unkown
page readonly
clean
4AF0000
unkown
page read and write
clean
7CD000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF510F6B000
unkown
page readonly
clean
1A20A1BA000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
812000
unkown
page read and write
clean
83C000
unkown
page read and write
clean
1A209F70000
unkown
page read and write
clean
2F50000
unkown
page readonly
clean
239A000
unkown
page readonly
clean
6F6027F000
unkown
page read and write
clean
7FA000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1EB83600000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2B80000
unkown
page readonly
clean
836000
unkown
page read and write
clean
7FF5D7C33000
unkown
page readonly
clean
82A000
unkown
page read and write
clean
1A20A197000
unkown
page read and write
clean
4B39F000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2409000
unkown
page readonly
clean
47D0000
unkown
page read and write
clean
6EEB0000
unkown image
page readonly
clean
24ABCE00000
unkown
page read and write
clean
1A20A111000
unkown
page read and write
clean
26FC000
unkown
page read and write
clean
1EB83456000
unkown
page read and write
clean
291B000
unkown
page readonly
clean
7FF51107B000
unkown
page readonly
clean
7FF5D3E6D000
unkown
page readonly
clean
25E3000
unkown
page readonly
clean
1EB8346A000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24ABCF08000
unkown
page read and write
clean
1A2081A0000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2332000
unkown
page readonly
clean
1EB8346A000
unkown
page read and write
clean
2CE0000
unkown
page execute and read and write
clean
3E7000
unkown
page read and write
clean
27E0000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20B210000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24ABCF13000
unkown
page read and write
clean
7FF511070000
unkown
page readonly
clean
4A00000
unkown
page execute and read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D45DD000
unkown
page readonly
clean
4DE68FB000
unkown
page read and write
clean
7FF5D42D7000
unkown
page readonly
clean
7FF5E5AB0000
unkown
page readonly
clean
4DE6279000
unkown
page read and write
clean
302000
stack
page read and write
clean
F29897E000
unkown
page read and write
clean
82A000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2993000
unkown
page readonly
clean
24ABCE4E000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A208029000
unkown
page read and write
clean
7FF5D456B000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF5D4441000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
4920000
unkown
page read and write
clean
2900000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
24ABD000000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1EB83513000
unkown
page read and write
clean
2A51000
unkown
page read and write
clean
2F20000
unkown
page readonly
clean
1A20A302000
unkown
page read and write
clean
2B98000
heap private
page read and write
clean
830000
unkown
page read and write
clean
7CD000
unkown
page read and write
clean
1EB84E70000
unkown
page read and write
clean
7FF5E5C0A000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2329000
unkown
page readonly
clean
2433000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4340000
unkown
page readonly
clean
257B000
unkown
page readonly
clean
46C9000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
849000
unkown
page read and write
clean
45A0000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1EB83380000
heap default
page read and write
clean
7FF5E5513000
unkown
page readonly
clean
2AD0000
unkown
page readonly
clean
6EEB0000
unkown image
page readonly
clean
7FF51100C000
unkown
page readonly
clean
1A20B010000
unkown
page read and write
clean
758000
heap default
page read and write
clean
4AD7000
heap private
page read and write
clean
4AD0000
heap private
page read and write
clean
266C000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
1A20A126000
unkown
page read and write
clean
1A208170000
unkown
page read and write
clean
7FF5E5C7F000
unkown
page readonly
clean
7FF510FBD000
unkown
page readonly
clean
2F00000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24ABCE13000
unkown
page read and write
clean
27A0000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5E5C57000
unkown
page readonly
clean
848000
unkown
page read and write
clean
24ABCF02000
unkown
page read and write
clean
278A000
unkown
page readonly
clean
7FF5D7CD8000
unkown
page readonly
clean
2A00000
unkown
page readonly
clean
7FF5E5C99000
unkown
page readonly
clean
21CB000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
2CDF000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5110A7000
unkown
page readonly
clean
2974000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2E5C000
unkown
page read and write
clean
824000
unkown
page read and write
clean
2B60000
unkown
page read and write
clean
83C000
unkown
page read and write
clean
1072000
heap default
page read and write
clean
7FF511087000
unkown
page readonly
clean
1A208102000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
4DE697B000
unkown
page read and write
clean
2C6D000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2491000
unkown
page readonly
clean
7FF5D74CD000
unkown
page readonly
clean
849000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
2CDA000
heap default
page read and write
clean
811000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
6EEB0000
unkown image
page readonly
clean
1A20A300000
unkown
page read and write
clean
4B30000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2CCF000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
24B4000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4C40000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF5D7D61000
unkown
page readonly
clean
1A20A1A0000
unkown
page read and write
clean
2A30000
unkown
page readonly
clean
4A70000
unkown
page read and write
clean
2433000
unkown
page readonly
clean
7FF5D7C6A000
unkown
page readonly
clean
7FF511033000
unkown
page readonly
clean
7DC000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1030000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
1A2080DA000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20A1B9000
unkown
page read and write
clean
1A20B010000
unkown
page read and write
clean
7DE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
BBD000
unkown
page read and write
clean
7FF510E48000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
24ABCE29000
unkown
page read and write
clean
7FF5D793A000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF5D44AD000
unkown
page readonly
clean
7FF511161000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1BD6BC28000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
848000
unkown
page read and write
clean
70F000
stack
page read and write
clean
4874000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
34F0000
unkown
page readonly
clean
1A209FA0000
unkown
page readonly
clean
1A20B000000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
4680000
unkown
page read and write
clean
2993000
unkown
page readonly
clean
1A20806F000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
6EECD000
unkown image
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
80C000
unkown
page read and write
clean
7D0000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
2721000
unkown
page readonly
clean
1A208113000
unkown
page read and write
clean
1EB83402000
unkown
page read and write
clean
3E5000
heap default
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
7FF5D4644000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
2672000
unkown
page readonly
clean
7FF5D455A000
unkown
page readonly
clean
1A20A197000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
7FF51106E000
unkown
page readonly
clean
1EB83320000
heap private
page read and write
clean
1A209F80000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
2379000
unkown
page readonly
clean
7FF5E5C6A000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
1A20B110000
unkown
page read and write
clean
2655000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
7FF510D3A000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
4AD7000
heap private
page read and write
clean
7FF51104F000
unkown
page readonly
clean
2A10000
unkown
page readonly
clean
24ABCD60000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
1A20A195000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
7CB000
unkown
page read and write
clean
3AE000
unkown
page read and write
clean
1BD6BC37000
unkown
page read and write
clean
28CC000
unkown
page readonly
clean
2A4B000
heap private
page read and write
clean
7FF5E599F000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
2982000
unkown
page readonly
clean
7FF51103B000
unkown
page readonly
clean
3EE000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
82A000
unkown
page read and write
clean
83C000
unkown
page read and write
clean
24ABCD50000
heap default
page read and write
clean
46C9000
unkown
page read and write
clean
807000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
3C0000
unkown
page readonly
clean
7FF5D3E67000
unkown
page readonly
clean
1A20B110000
unkown
page read and write
clean
7FF5D793F000
unkown
page readonly
clean
28FF000
stack
page read and write
clean
1BD6BF13000
unkown
page read and write
clean
47E0000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
849000
unkown
page read and write
clean
4A40000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
25DD000
unkown
page readonly
clean
7FF5D455E000
unkown
page readonly
clean
2F60000
heap private
page read and write
clean
46C3000
unkown
page read and write
clean
848000
unkown
page read and write
clean
1BD6BE13000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
1A208013000
unkown
page read and write
clean
1A2080C1000
unkown
page read and write
clean
7FF5D45D6000
unkown
page readonly
clean
32E0000
heap private
page read and write
clean
7FF5110E6000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
83C000
unkown
page read and write
clean
6F603FD000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
830000
unkown
page read and write
clean
1A20A1BF000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
46CA000
unkown
page read and write
clean
5563AFD000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
28E7000
unkown
page readonly
clean
25D5000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
F298CF7000
unkown
page read and write
clean
1EB83469000
unkown
page read and write
clean
1A20A12C000
unkown
page read and write
clean
1BD6BA90000
unkown
page readonly
clean
4DE66FB000
unkown
page read and write
clean
7FF5D7C75000
unkown
page readonly
clean
830000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
289A000
unkown
page readonly
clean
1BD6BC00000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
518000
unkown
page read and write
clean
3E7000
unkown
page read and write
clean
46C8000
unkown
page read and write
clean
1510000
heap private
page read and write
clean
4ADB000
heap private
page read and write
clean
7FF511012000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
7FF5D458C000
unkown
page readonly
clean
7FF511002000
unkown
page readonly
clean
1A209F10000
heap private
page read and write
clean
83C000
unkown
page read and write
clean
233A000
unkown
page readonly
clean
3E7000
unkown
page read and write
clean
3EE000
unkown
page read and write
clean
F298DFD000
unkown
page read and write
clean
24ABCD70000
unkown
page readonly
clean
7FF510F73000
unkown
page readonly
clean
There are 1007 hidden memdumps, click here to show them.