IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Letter 1019.xlsx
CDFV2 Encrypted
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\doc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\Desktop\~$Letter 1019.xlsx
data
dropped
 malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\45E96AD4.png
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\48CD381B.png
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\73F51C02.png
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\82A523E1.png
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\84A44456.png
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9EFF6EAC.png
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A7DD26BD.png
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A83AF197.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames 3
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AA45CD69.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DBF7BC5F.png
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EFA7786E.png
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F152D108.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F1699B60.png
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FC1EE4C5.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames 3
dropped
 clean
There are 8 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Users\Public\vbc.exe
C:\Users\Public\vbc.exe
 malicious
C:\Windows\explorer.exe
malicious
C:\Windows\SysWOW64\ipconfig.exe
C:\Windows\SysWOW64\ipconfig.exe
 malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
 clean
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\Public\vbc.exe'
 clean

URLs

Name
IP
Malicious
www.adultpeace.com/p2io/
malicious
http://www.69-1hn7uc.net/p2io/?9rx=V9Q6YNEpmTTku3594j8RVRt0udPCykKEN/raiLh+TizfOzW/z4mr+TojY495qvgWXqOzag==&1bPx7=ifrhEpc0Hv8pf4
163.43.122.104
 malicious
http://18.140.1.169/ggs/doc.exe
18.140.1.169
 malicious
http://www.myfavbutik.com/p2io/?9rx=dKp6rERGX1oMTEkAtHZ5ksFEU2G9ncFkpMVxqDe1xbP28bbT8N8SqGfKoZnot7fJ59eAsw==&1bPx7=ifrhEpc0Hv8pf4
172.67.161.4
 malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
 clean
http://www.windows.com/pctv.
unknown
 clean
http://www.icra.org/vocabulary/.
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://wellformedweb.org/CommentAPI/
unknown
 clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
 clean
http://www.iis.fhg.de/audioPA
unknown
 clean
http://www.%s.com
unknown
 clean
http://www.piriform.com/ccleaner
unknown
 clean
http://computername/printers/printername/.printer
unknown
 clean
http://www.%s.comPA
unknown
 clean
http://%s.com
unknown
 clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
 clean
http://treyresearch.net
unknown
 clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
 clean
http://auto.search.msn.com/response.asp?MT=
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
unknown
 clean
There are 11 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.myfavbutik.com
172.67.161.4
 malicious
www.69-1hn7uc.net
163.43.122.104
 malicious
www.defenestration.world
99.83.154.118
 malicious
www.tricqr.com
unknown
 malicious
www.buylocalclub.info
unknown
 malicious

IPs

IP
Domain
Country
Malicious
163.43.122.104
www.69-1hn7uc.net
Japan
malicious
99.83.154.118
www.defenestration.world
United States
malicious
18.140.1.169
unknown
United States
malicious
172.67.161.4
www.myfavbutik.com
United States
malicious
192.168.2.255
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
/94
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F0223
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
FontCachePath
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
oh4
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F51A9
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F6049
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 21
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F51A9
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
There are 51 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
530000
unkown
page execute and read and write
 malicious
2945000
unkown
page execute and read and write
 malicious
252C000
unkown
page read and write
 malicious
1D0000
unkown
page read and write
 malicious
400000
unkown
page execute and read and write
 malicious
80000
unkown
page execute and read and write
 malicious
400000
unkown
page execute and read and write
 malicious
3509000
unkown
page read and write
 malicious
1A0000
unkown
page execute and read and write
 malicious
3B0000
unkown
page execute and read and write
 malicious
BF0000
unkown
page read and write
 clean
C70000
unkown
page readonly
 clean
2F90000
unkown
page readonly
 clean
5A1E000
unkown
page read and write
 clean
1B5A000
unkown
page read and write
 clean
B91F000
unkown
page read and write
 clean
940000
unkown
page read and write
 clean
6120000
unkown
page readonly
 clean
260000
heap default
page read and write
 clean
197000
unkown
page execute and read and write
 clean
90A5000
unkown
page readonly
 clean
2570000
unkown
page readonly
 clean
4C0E000
unkown
page read and write
 clean
1B9A000
unkown
page read and write
 clean
4ACB000
unkown
page read and write
 clean
44C0000
unkown
page read and write
 clean
9B0000
unkown
page execute and read and write
 clean
F0000
unkown
page readonly
 clean
C1A0000
heap private
page read and write
 clean
24B0000
unkown
page write copy
 clean
785000
heap default
page read and write
 clean
6F0000
unkown
page readonly
 clean
60000
unkown
page readonly
 clean
BB20000
unkown
page read and write
 clean
BCF0000
heap private
page read and write
 clean
9CC7000
unkown
page read and write
 clean
970000
heap private
page read and write
 clean
6914000
unkown
page readonly
 clean
22A0000
unkown
page execute and read and write
 clean
8654000
unkown
page read and write
 clean
1002000
unkown image
page execute read
 clean
A98000
heap private
page read and write
 clean
47A0000
unkown
page read and write
 clean
20FF000
unkown
page read and write
 clean
521D000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
2520000
unkown
page readonly
 clean
4070000
unkown
page readonly
 clean
B10000
unkown
page readonly
 clean
2700000
unkown
page readonly
 clean
200000
unkown
page read and write
 clean
97F000
unkown
page read and write
 clean
D00000
unkown
page readonly
 clean
4460000
unkown
page read and write
 clean
2204000
unkown
page read and write
 clean
2E90000
unkown
page read and write
 clean
2D30000
unkown
page read and write
 clean
980000
unkown
page read and write
 clean
1B40000
unkown
page readonly
 clean
817000
unkown
page execute and read and write
 clean
85C0000
unkown
page read and write
 clean
30D000
unkown
page read and write
 clean
2CE0000
unkown
page read and write
 clean
4A7000
heap default
page read and write
 clean
6BF000
unkown
page read and write
 clean
1C0000
heap default
page read and write
 clean
200000
unkown
page read and write
 clean
5300000
unkown
page read and write
 clean
19B000
unkown
page execute and read and write
 clean
26B0000
unkown
page readonly
 clean
34D4000
unkown
page readonly
 clean
C20000
unkown
page read and write
 clean
1E9000
heap default
page read and write
 clean
2D0000
unkown
page read and write
 clean
2CA0000
unkown
page read and write
 clean
5E62000
unkown
page readonly
 clean
5DB2000
unkown
page readonly
 clean
9C0000
unkown
page read and write
 clean
1B9A000
unkown
page read and write
 clean
78A000
unkown
page read and write
 clean
C34000
heap private
page read and write
 clean
4BD000
unkown
page read and write
 clean
260000
heap default
page read and write
 clean
1002000
unkown image
page execute read
 clean
56F000
unkown
page read and write
 clean
C9A0000
heap private
page read and write
 clean
430000
unkown
page read and write
 clean
1E3000
heap default
page read and write
 clean
500000
unkown
page read and write
 clean
26C0000
unkown
page readonly
 clean
2B20000
unkown
page readonly
 clean
6F77000
unkown
page read and write
 clean
26C0000
unkown
page readonly
 clean
CD73000
unkown
page read and write
 clean
1002000
unkown image
page execute read
 clean
1A0000
unkown
page read and write
 clean
2EB0000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
9D0000
unkown
page read and write
 clean
26D0000
unkown
page readonly
 clean
72F0000
heap private
page read and write
 clean
2510000
unkown
page write copy
 clean
77F0000
unkown
page read and write
 clean
2D20000
unkown
page execute read
 clean
420000
unkown
page read and write
 clean
5A0000
unkown
page readonly
 clean
2E2E000
unkown
page read and write
 clean
B91E000
unkown
page read and write | page guard
 clean
4520000
unkown
page readonly
 clean
2A20000
unkown
page readonly
 clean
21E0000
unkown
page readonly
 clean
C6DB000
unkown
page read and write
 clean
182000
unkown
page read and write
 clean
5ED9000
unkown
page readonly
 clean
2AB4000
unkown
page read and write
 clean
1AF0000
unkown
page read and write
 clean
C30000
heap private
page read and write
 clean
34F4000
unkown
page readonly
 clean
1F0000
heap default
page read and write
 clean
1280000
unkown
page readonly
 clean
2CF0000
unkown
page read and write
 clean
5CE2000
unkown
page readonly
 clean
2533000
unkown
page read and write
 clean
38F000
unkown
page read and write
 clean
250000
unkown
page read and write
 clean
2EF9000
heap private
page read and write
 clean
2290000
unkown
page execute and read and write
 clean
710B000
unkown
page read and write
 clean
2270000
unkown
page read and write
 clean
1D0000
heap default
page read and write
 clean
2380000
unkown
page execute and read and write
 clean
A80000
unkown
page read and write
 clean
936000
unkown
page read and write
 clean
39EB000
unkown
page read and write
 clean
DEF000
unkown
page read and write
 clean
C610000
unkown
page read and write
 clean
3BE7000
unkown
page read and write
 clean
2ED0000
unkown
page readonly
 clean
620000
unkown
page readonly
 clean
78F000
unkown
page read and write
 clean
5D92000
unkown
page readonly
 clean
39F0000
unkown
page read and write
 clean
3BE0000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
4E0000
heap default
page read and write
 clean
490000
unkown
page read and write
 clean
940000
heap private
page read and write
 clean
340000
unkown
page readonly
 clean
2C90000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
9B0000
unkown
page read and write
 clean
21F0000
unkown
page read and write
 clean
78F000
heap default
page read and write
 clean
16E000
unkown
page read and write
 clean
4428000
unkown
page read and write
 clean
10F4000
unkown image
page readonly
 clean
48E0000
unkown
page read and write
 clean
7A9B000
unkown
page read and write
 clean
C220000
unkown
page read and write
 clean
10C000
unkown
page read and write
 clean
6F90000
heap private
page read and write
 clean
3318000
unkown
page readonly
 clean
50D000
unkown
page read and write
 clean
26F0000
unkown
page readonly
 clean
2397000
unkown
page execute and read and write
 clean
9D0000
unkown
page read and write
 clean
774000
heap default
page read and write
 clean
3C00000
unkown
page read and write
 clean
BF70000
unkown
page read and write
 clean
8C2A000
unkown
page readonly
 clean
2DBF000
unkown
page read and write
 clean
910000
unkown
page read and write
 clean
A90000
heap private
page read and write
 clean
820000
unkown
page execute and read and write
 clean
265C000
unkown
page read and write
 clean
4090000
heap private
page read and write
 clean
2D20000
unkown
page execute read
 clean
200000
unkown
page read and write
 clean
2CF0000
unkown
page read and write
 clean
979000
heap private
page read and write
 clean
A3E4000
unkown
page write copy
 clean
9C0000
unkown
page read and write
 clean
10F4000
unkown image
page readonly
 clean
BDCE000
unkown
page read and write
 clean
3860000
unkown
page readonly
 clean
480000
unkown
page read and write
 clean
A3B9000
unkown
page write copy
 clean
2CA0000
unkown
page read and write
 clean
2B20000
unkown
page readonly
 clean
917000
unkown
page read and write
 clean
579E000
unkown
page read and write
 clean
179000
unkown
page read and write
 clean
47A6000
unkown
page read and write
 clean
92A000
unkown
page read and write
 clean
8BCD000
unkown
page readonly
 clean
3679000
unkown
page readonly
 clean
2CC0000
unkown
page read and write
 clean
30B000
unkown
page read and write
 clean
7490000
unkown
page write copy
 clean
3BEA000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
2550000
unkown
page read and write
 clean
4A6000
unkown
page execute and read and write
 clean
4297000
unkown
page read and write
 clean
590000
unkown
page read and write
 clean
4C30000
heap private
page execute and read and write
 clean
490000
unkown
page read and write
 clean
BF0000
unkown
page read and write
 clean
30B000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
4196000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
6140000
unkown
page readonly
 clean
2C90000
unkown
page read and write
 clean
590000
unkown
page execute and read and write
 clean
BBE000
unkown
page read and write
 clean
27A7000
unkown
page read and write
 clean
6F0000
unkown
page read and write
 clean
1E0000
unkown
page execute and read and write
 clean
740000
heap private
page execute and read and write
 clean
5D94000
unkown
page readonly
 clean
323000
unkown
page read and write
 clean
ED000
unkown
page read and write
 clean
6695000
unkown
page readonly
 clean
5E32000
unkown
page readonly
 clean
231000
heap default
page read and write
 clean
C00000
unkown
page read and write
 clean
2AC0000
unkown
page read and write
 clean
580000
unkown
page read and write
 clean
2B80000
unkown
page read and write
 clean
2060000
unkown
page readonly
 clean
5EF5000
unkown
page readonly
 clean
980000
unkown
page execute and read and write
 clean
2986000
unkown
page execute and read and write
 clean
2720000
unkown
page read and write
 clean
2910000
unkown
page execute and read and write
 clean
3BE000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
2690000
unkown
page readonly
 clean
A6D000
unkown
page read and write
 clean
5230000
unkown
page read and write
 clean
1D0000
heap default
page read and write
 clean
1BB0000
unkown
page readonly
 clean
34D2000
unkown
page readonly
 clean
720000
unkown
page readonly
 clean
50A000
unkown
page read and write
 clean
35E5000
unkown
page readonly
 clean
688B000
unkown
page readonly
 clean
2EF9000
heap private
page read and write
 clean
5F25000
unkown
page readonly
 clean
269000
heap default
page read and write
 clean
1C70000
unkown
page readonly
 clean
CF30000
unkown
page read and write
 clean
3635000
unkown
page readonly
 clean
68AE000
unkown
page readonly
 clean
810000
unkown
page execute and read and write
 clean
2C2000
heap default
page read and write
 clean
920000
unkown
page read and write
 clean
8040000
unkown
page read and write
 clean
2550000
unkown
page read and write
 clean
62C5000
unkown
page readonly
 clean
4B50000
unkown
page readonly
 clean
5017000
unkown
page read and write
 clean
D4000
heap private
page read and write
 clean
3672000
unkown
page readonly
 clean
2A90000
unkown
page read and write
 clean
5CD2000
unkown
page readonly
 clean
82FD000
unkown
page read and write
 clean
A3DA000
unkown
page write copy
 clean
428C000
unkown
page read and write
 clean
2A60000
unkown
page read and write
 clean
3BE2000
unkown
page read and write
 clean
213E000
unkown
page read and write
 clean
78EE000
unkown
page read and write
 clean
41AD000
unkown
page read and write
 clean
480000
unkown
page read and write
 clean
1C0000
heap private
page read and write
 clean
2390000
unkown
page execute and read and write
 clean
370000
unkown
page read and write
 clean
2EF5000
heap private
page read and write
 clean
66F000
unkown
page read and write
 clean
2EFE000
heap private
page read and write
 clean
930000
unkown
page read and write
 clean
2510000
unkown
page write copy
 clean
5A20000
heap private
page read and write
 clean
757000
heap default
page read and write
 clean
393E000
unkown
page read and write
 clean
2E40000
unkown
page read and write
 clean
42CB000
unkown
page read and write
 clean
C0000
unkown
page readonly
 clean
46B0000
unkown
page read and write
 clean
8890000
unkown
page readonly
 clean
1B40000
unkown
page readonly
 clean
A5C9000
unkown
page read and write
 clean
4470000
unkown
page readonly
 clean
2210000
unkown
page read and write
 clean
4F50000
unkown
page read and write
 clean
800000
unkown
page execute and read and write
 clean
150000
unkown
page read and write
 clean
2E80000
unkown
page read and write
 clean
3E27000
unkown
page readonly
 clean
25A0000
unkown
page readonly
 clean
730000
unkown
page read and write
 clean
3F0000
unkown
page execute and read and write
 clean
A330000
unkown
page write copy
 clean
9668000
unkown
page readonly
 clean
5DD2000
unkown
page readonly
 clean
2501000
unkown
page read and write
 clean
6AE000
unkown
page read and write
 clean
E6E000
unkown
page read and write | page guard
 clean
C420000
unkown
page read and write
 clean
2CD0000
unkown
page write copy
 clean
6E0000
heap private
page read and write
 clean
4109000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
9BCF000
unkown
page readonly
 clean
2900000
unkown
page read and write
 clean
4F88000
unkown
page read and write
 clean
2F70000
unkown
page readonly
 clean
C9CE000
unkown
page read and write
 clean
51FE000
unkown
page read and write
 clean
364000
unkown
page read and write
 clean
C52000
heap private
page read and write
 clean
110000
unkown
page readonly
 clean
1002000
unkown image
page execute read
 clean
2B50000
unkown
page readonly
 clean
B150000
unkown
page read and write
 clean
4800000
heap private
page read and write
 clean
3514000
unkown
page readonly
 clean
26A0000
unkown
page readonly
 clean
5630000
unkown
page read and write
 clean
BD70000
unkown
page read and write
 clean
5F39000
unkown
page readonly
 clean
730000
unkown
page read and write
 clean
2E60000
unkown
page readonly
 clean
5F02000
unkown
page readonly
 clean
368000
unkown
page read and write
 clean
2690000
unkown
page readonly
 clean
48DF000
unkown
page read and write
 clean
9C0000
unkown
page read and write
 clean
C9A5000
heap private
page read and write
 clean
4610000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
2CD0000
unkown
page write copy
 clean
4291000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
200000
heap default
page read and write
 clean
A3BE000
unkown
page write copy
 clean
192000
unkown
page read and write
 clean
C0000
unkown
page read and write
 clean
B2A0000
heap private
page read and write
 clean
2520000
unkown
page execute and read and write
 clean
39C000
unkown
page read and write
 clean
1002000
unkown image
page execute read
 clean
C10000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
350000
heap private
page read and write
 clean
C320000
unkown
page read and write
 clean
D4000
heap private
page read and write
 clean
4FB4000
unkown
page read and write
 clean
880000
unkown
page execute and read and write
 clean
16D000
unkown
page execute and read and write
 clean
BB0E000
unkown
page read and write
 clean
1BC0000
unkown
page read and write
 clean
814000
unkown
page execute and read and write
 clean
2AB4000
unkown
page read and write
 clean
26B0000
unkown
page readonly
 clean
888E000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
58B6000
unkown
page read and write
 clean
2EF0000
heap private
page read and write
 clean
26D0000
unkown
page readonly
 clean
4FD6000
unkown
page read and write
 clean
2A50000
unkown
page readonly
 clean
2720000
unkown
page read and write
 clean
4FD9000
unkown
page read and write
 clean
10000
heap private
page read and write
 clean
9768000
unkown
page readonly
 clean
9D0000
unkown
page read and write
 clean
3880000
unkown
page readonly
 clean
4530000
heap private
page read and write
 clean
9A0000
unkown
page read and write
 clean
2587000
unkown
page readonly
 clean
9C0000
unkown
page read and write
 clean
BA000
unkown
page read and write
 clean
3312000
unkown
page readonly
 clean
726D000
unkown
page read and write
 clean
410000
unkown
page read and write
 clean
430000
unkown
page readonly
 clean
7040000
heap private
page read and write
 clean
597A000
unkown
page read and write
 clean
2BE0000
unkown
page readonly
 clean
3D0000
unkown
page readonly
 clean
2AF0000
unkown
page read and write
 clean
490000
unkown
page read and write
 clean
2C60000
unkown
page read and write
 clean
9C0000
unkown
page read and write
 clean
6DEF000
unkown
page readonly
 clean
90D2000
unkown
page readonly
 clean
2E50000
unkown
page read and write
 clean
25F2000
unkown
page read and write
 clean
4294000
unkown
page read and write
 clean
9C0000
unkown
page read and write
 clean
2BC0000
unkown
page write copy
 clean
BE70000
unkown
page read and write
 clean
1F5000
heap default
page read and write
 clean
2BB000
heap default
page read and write
 clean
187000
unkown
page execute and read and write
 clean
2830000
unkown
page read and write
 clean
5ED2000
unkown
page readonly
 clean
73EE000
unkown
page read and write
 clean
3695000
unkown
page readonly
 clean
501D000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
3566000
unkown
page readonly
 clean
25AA000
unkown
page read and write
 clean
2590000
unkown
page execute and read and write
 clean
39F000
unkown
page read and write
 clean
2A90000
unkown
page read and write
 clean
3C40000
unkown
page readonly
 clean
376000
unkown
page read and write
 clean
2EE000
unkown
page read and write
 clean
2A71000
unkown
page read and write
 clean
35F6000
unkown
page readonly
 clean
5200000
unkown
page read and write
 clean
550000
unkown
page readonly
 clean
ACE000
unkown
page read and write
 clean
8666000
unkown
page read and write
 clean
2A20000
unkown
page readonly
 clean
2400000
unkown
page execute and read and write
 clean
3612000
unkown
page readonly
 clean
24F000
unkown
page read and write
 clean
10F4000
unkown image
page readonly
 clean
86B0000
unkown
page read and write
 clean
1A0000
unkown
page read and write
 clean
53C0000
unkown
page read and write
 clean
364000
unkown
page read and write
 clean
9C0000
unkown
page read and write
 clean
10000
heap private
page read and write
 clean
842E000
unkown
page read and write
 clean
61F000
unkown
page read and write
 clean
3649000
unkown
page readonly
 clean
3940000
unkown
page read and write
 clean
C1A5000
heap private
page read and write
 clean
730000
unkown
page read and write
 clean
CE70000
unkown
page read and write
 clean
5DB4000
unkown
page readonly
 clean
190000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
1000000
unkown image
page readonly
 clean
2060000
unkown
page readonly
 clean
B320000
unkown
page read and write
 clean
2570000
unkown
page readonly
 clean
839A000
unkown
page read and write
 clean
2B50000
unkown
page readonly
 clean
4450000
unkown
page readonly
 clean
2B40000
unkown
page readonly
 clean
890000
unkown
page execute and read and write
 clean
30D000
unkown
page read and write
 clean
400000
heap default
page read and write
 clean
A3E9000
unkown
page write copy
 clean
7B40000
unkown
page read and write
 clean
25A0000
unkown
page readonly
 clean
2AF0000
unkown
page read and write
 clean
B334000
unkown
page read and write
 clean
2C60000
unkown
page read and write
 clean
2A71000
unkown
page read and write
 clean
2EE0000
unkown
page readonly
 clean
38A0000
unkown
page readonly
 clean
2E50000
unkown
page read and write
 clean
164000
unkown
page read and write
 clean
1C13000
heap private
page read and write
 clean
179000
unkown
page read and write
 clean
D0000
heap private
page read and write
 clean
44E0000
unkown
page read and write
 clean
9C0000
unkown
page read and write
 clean
2E2E000
unkown
page read and write
 clean
A70000
unkown
page read and write
 clean
26F0000
unkown
page readonly
 clean
200000
unkown
page read and write
 clean
9DE000
unkown
page read and write
 clean
681000
unkown
page read and write
 clean
2A60000
unkown
page read and write
 clean
C6D0000
unkown
page read and write
 clean
3D0000
unkown
page readonly
 clean
C9B0000
unkown
page read and write
 clean
4500000
unkown
page readonly
 clean
2EC0000
unkown
page readonly
 clean
3AEF000
unkown
page read and write
 clean
3512000
unkown
page readonly
 clean
1BC0000
unkown
page read and write
 clean
1BEB000
unkown
page read and write
 clean
AD0000
heap private
page read and write
 clean
2410000
unkown
page execute and read and write
 clean
6F0000
unkown
page readonly
 clean
3960000
unkown
page read and write
 clean
1BD0000
unkown
page read and write
 clean
A94000
heap private
page read and write
 clean
163000
unkown
page execute and read and write
 clean
D0000
heap private
page read and write
 clean
930000
unkown
page read and write
 clean
82D0000
unkown
page read and write
 clean
231000
heap default
page read and write
 clean
6888000
unkown
page readonly
 clean
5640000
unkown
page read and write
 clean
5830000
unkown
page readonly
 clean
5680000
heap private
page read and write
 clean
1BCB000
unkown
page read and write
 clean
687000
unkown
page read and write
 clean
1BD0000
unkown
page read and write
 clean
5E15000
unkown
page readonly
 clean
2394000
unkown
page execute and read and write
 clean
2EE000
unkown
page read and write
 clean
430000
unkown
page execute and read and write
 clean
2520000
unkown
page readonly
 clean
3818000
unkown
page read and write
 clean
5E02000
unkown
page readonly
 clean
2070000
unkown
page readonly
 clean
3840000
unkown
page readonly
 clean
1F5000
heap default
page read and write
 clean
2E38000
unkown
page read and write
 clean
2710000
unkown
page readonly
 clean
1BE0000
unkown
page read and write
 clean
1000000
unkown image
page readonly
 clean
1BDB000
unkown
page read and write
 clean
426000
unkown
page read and write
 clean
4051000
unkown
page read and write
 clean
850000
unkown
page execute and read and write
 clean
950000
unkown
page read and write
 clean
414D000
unkown
page read and write
 clean
4400000
unkown
page read and write
 clean
5E86000
unkown
page readonly
 clean
25D000
heap default
page read and write
 clean
2B80000
unkown
page read and write
 clean
2100000
unkown
page readonly
 clean
2EE0000
unkown
page readonly
 clean
2BB000
heap default
page read and write
 clean
1000000
unkown image
page readonly
 clean
5050000
unkown
page read and write
 clean
510000
heap private
page read and write
 clean
20000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
2830000
unkown
page read and write
 clean
F9F000
unkown
page read and write
 clean
9A0000
unkown
page execute and read and write
 clean
789000
unkown
page read and write
 clean
180000
unkown
page write copy
 clean
43BD000
unkown
page read and write
 clean
58AF000
unkown
page read and write
 clean
1C70000
unkown
page readonly
 clean
3642000
unkown
page readonly
 clean
4A0000
heap default
page read and write
 clean
3BF0000
unkown
page read and write
 clean
4B3F000
unkown
page read and write
 clean
1B80000
unkown
page read and write
 clean
2666000
unkown
page read and write
 clean
945000
heap private
page read and write
 clean
E6F000
unkown
page read and write
 clean
991000
unkown
page execute and read and write
 clean
3596000
unkown
page readonly
 clean
6FB3000
heap private
page read and write
 clean
596F000
unkown
page read and write
 clean
4FE6000
unkown
page read and write
 clean
38B0000
unkown
page read and write
 clean
170000
unkown
page read and write
 clean
1BF5000
heap private
page read and write
 clean
35F9000
unkown
page readonly
 clean
5829000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
28EF000
unkown
page read and write
 clean
1BCB000
unkown
page read and write
 clean
4408000
unkown
page read and write
 clean
3E4000
heap private
page read and write
 clean
200000
unkown
page read and write
 clean
3501000
unkown
page read and write
 clean
2E70000
unkown
page read and write
 clean
5EBD000
unkown
page readonly
 clean
A10000
unkown
page execute and read and write
 clean
A53E000
unkown
page read and write
 clean
C00000
unkown
page read and write
 clean
590000
unkown
page execute and read and write
 clean
9C0000
unkown
page read and write
 clean
1D7000
heap default
page read and write
 clean
861C000
unkown
page read and write
 clean
8AC2000
unkown
page readonly
 clean
3412000
unkown
page readonly
 clean
993000
unkown
page read and write
 clean
249000
unkown
page read and write
 clean
25D000
heap default
page read and write
 clean
2EC0000
unkown
page readonly
 clean
2900000
unkown
page read and write
 clean
2C2000
heap default
page read and write
 clean
730000
unkown
page read and write
 clean
2ED0000
unkown
page readonly
 clean
4263000
unkown
page read and write
 clean
480A000
heap private
page read and write
 clean
1000000
unkown image
page readonly
 clean
7AC0000
heap private
page read and write
 clean
9B8000
unkown
page read and write
 clean
3E0000
heap private
page read and write
 clean
2514000
unkown
page execute and read and write
 clean
8E0000
unkown
page execute and read and write
 clean
1000000
unkown image
page readonly
 clean
18A000
unkown
page execute and read and write
 clean
46E0000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
850000
unkown
page read and write
 clean
1E3000
heap default
page read and write
 clean
780000
unkown
page read and write
 clean
4FFD000
unkown
page read and write
 clean
A5E000
unkown
page read and write
 clean
2BE0000
unkown
page readonly
 clean
854C000
unkown
page read and write
 clean
1100000
unkown
page readonly
 clean
419A000
unkown
page read and write
 clean
AC000
unkown
page read and write
 clean
2E70000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
390000
unkown
page read and write
 clean
5E92000
unkown
page readonly
 clean
5DED000
unkown
page readonly
 clean
44B0000
unkown
page write copy
 clean
CEB2000
unkown
page read and write
 clean
2201000
unkown
page read and write
 clean
2D0000
unkown
page read and write
 clean
2540000
unkown
page read and write
 clean
4110000
unkown
page read and write
 clean
8951000
unkown
page readonly
 clean
35C6000
unkown
page readonly
 clean
2710000
unkown
page readonly
 clean
A60000
unkown
page read and write
 clean
26C000
unkown
page read and write
 clean
FEE000
unkown
page read and write
 clean
2420000
unkown
page execute and read and write
 clean
9D0000
unkown
page read and write
 clean
96F4000
unkown
page readonly
 clean
4226000
unkown
page read and write
 clean
6F70000
unkown
page read and write
 clean
62F2000
unkown
page readonly
 clean
710000
unkown
page execute and read and write
 clean
2110000
unkown
page read and write
 clean
2B40000
unkown
page readonly
 clean
B0000
unkown
page write copy
 clean
2A50000
unkown
page readonly
 clean
3619000
unkown
page readonly
 clean
3C13000
unkown
page read and write
 clean
502C000
unkown
page read and write
 clean
CEF3000
unkown
page read and write
 clean
2666000
unkown
page read and write
 clean
5E45000
unkown
page readonly
 clean
554E000
unkown
page read and write
 clean
4253000
unkown
page read and write
 clean
2F90000
unkown
page readonly
 clean
20FF000
unkown
page read and write
 clean
78F000
unkown
page read and write
 clean
582B000
unkown
page read and write
 clean
2CC0000
unkown
page read and write
 clean
967E000
unkown
page readonly
 clean
B148000
unkown
page read and write
 clean
7410000
heap private
page read and write
 clean
1BB0000
unkown
page readonly
 clean
207000
heap default
page read and write
 clean
2A80000
unkown
page read and write
 clean
20000
unkown
page readonly
 clean
690000
unkown
page read and write
 clean
2533000
unkown
page read and write
 clean
4EC000
heap default
page read and write
 clean
77E000
unkown
page read and write
 clean
5BD8000
unkown
page readonly
 clean
950000
unkown
page read and write
 clean
CDB0000
unkown
page read and write
 clean
5F55000
unkown
page readonly
 clean
24B0000
unkown
page write copy
 clean
4130000
unkown
page read and write
 clean
1C13000
heap private
page read and write
 clean
2207000
unkown
page read and write
 clean
5EB9000
unkown
page readonly
 clean
24E000
unkown
page read and write
 clean
8A0000
unkown
page execute and read and write
 clean
35FD000
unkown
page readonly
 clean
931000
unkown
page read and write
 clean
4F30000
unkown
page readonly
 clean
35A2000
unkown
page readonly
 clean
1B80000
unkown
page read and write
 clean
2500000
unkown
page execute and read and write
 clean
3B00000
unkown
page read and write
 clean
9CD0000
unkown
page read and write
 clean
CE36000
unkown
page read and write
 clean
550000
unkown
page readonly
 clean
E0000
unkown
page readonly
 clean
966B000
unkown
page readonly
 clean
2BC0000
unkown
page write copy
 clean
23A0000
unkown
page execute and read and write
 clean
76C0000
heap private
page read and write
 clean
1E9000
heap default
page read and write
 clean
5F09000
unkown
page readonly
 clean
34F2000
unkown
page readonly
 clean
200000
unkown
page read and write
 clean
323000
unkown
page read and write
 clean
670000
unkown
page read and write
 clean
684000
unkown
page read and write
 clean
4EA000
heap default
page read and write
 clean
C7E0000
unkown
page read and write
 clean
4C70000
unkown
page readonly
 clean
E0000
unkown
page readonly
 clean
3802000
unkown
page readonly
 clean
A70000
unkown
page read and write
 clean
35B5000
unkown
page readonly
 clean
94CF000
unkown
page readonly
 clean
5850000
unkown
page readonly
 clean
10F4000
unkown image
page readonly
 clean
3555000
unkown
page readonly
 clean
CF73000
unkown
page read and write
 clean
3572000
unkown
page readonly
 clean
1BEB000
unkown
page read and write
 clean
CDF4000
unkown
page read and write
 clean
456E000
unkown
page read and write
 clean
2B30000
unkown
page readonly
 clean
A3DF000
unkown
page write copy
 clean
2511000
unkown
page execute and read and write
 clean
5EB6000
unkown
page readonly
 clean
4234000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
C6E0000
unkown
page read and write
 clean
77F9000
unkown
page read and write
 clean
200000
unkown
page read and write
 clean
1AF0000
unkown
page read and write
 clean
43D0000
unkown
page write copy
 clean
1BF5000
heap private
page read and write
 clean
5BD2000
unkown
page readonly
 clean
60C2000
unkown
page readonly
 clean
2F70000
unkown
page readonly
 clean
383000
unkown
page read and write
 clean
5B71000
unkown
page readonly
 clean
251C000
unkown
page read and write
 clean
2E38000
unkown
page read and write
 clean
272000
heap default
page read and write
 clean
C1C3000
heap private
page read and write
 clean
2517000
unkown
page execute and read and write
 clean
2922000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
1000000
unkown image
page readonly
 clean
3B10000
unkown
page readonly
 clean
39E0000
unkown
page read and write
 clean
24C000
unkown
page read and write
 clean
3A0000
unkown
page read and write
 clean
10F4000
unkown image
page readonly
 clean
9B0000
unkown
page read and write
 clean
77E000
unkown
page read and write
 clean
63E000
unkown
page read and write
 clean
1AB000
unkown
page read and write
 clean
6100000
unkown
page readonly
 clean
8140000
unkown
page read and write
 clean
6F94000
heap private
page read and write
 clean
F7D000
unkown
page read and write
 clean
82DD000
unkown
page read and write
 clean
5E26000
unkown
page readonly
 clean
70FE000
unkown
page read and write
 clean
B4F000
unkown
page read and write
 clean
A1E000
unkown
page read and write
 clean
2DBF000
unkown
page read and write
 clean
1BDB000
unkown
page read and write
 clean
3665000
unkown
page readonly
 clean
247000
heap default
page read and write
 clean
2AC0000
unkown
page read and write
 clean
968E000
unkown
page readonly
 clean
997000
unkown
page execute and read and write
 clean
2EF5000
heap private
page read and write
 clean
6988000
unkown
page readonly
 clean
5E4A000
unkown
page readonly
 clean
39F4000
unkown
page read and write
 clean
2EF0000
heap private
page read and write
 clean
380000
unkown
page read and write
 clean
789000
unkown
page read and write
 clean
1BF0000
heap private
page read and write
 clean
3B50000
unkown
page read and write
 clean
20000
unkown
page readonly
 clean
1000000
unkown image
page readonly
 clean
82B0000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
92D000
unkown
page read and write
 clean
2A80000
unkown
page read and write
 clean
390000
unkown
page read and write
 clean
4060000
unkown
page read and write
 clean
24B000
heap default
page read and write
 clean
2EB0000
unkown
page read and write
 clean
4B40000
unkown
page read and write
 clean
378000
unkown
page read and write
 clean
28EF000
unkown
page read and write
 clean
5DD4000
unkown
page readonly
 clean
2700000
unkown
page readonly
 clean
66EF000
unkown
page readonly
 clean
2070000
unkown
page readonly
 clean
B2A4000
heap private
page read and write
 clean
2CE0000
unkown
page read and write
 clean
2E90000
unkown
page read and write
 clean
428F000
unkown
page read and write
 clean
1BF0000
heap private
page read and write
 clean
2587000
unkown
page readonly
 clean
200000
unkown
page read and write
 clean
2140000
unkown
page read and write
 clean
2E60000
unkown
page readonly
 clean
9475000
unkown
page readonly
 clean
2E80000
unkown
page read and write
 clean
8517000
unkown
page read and write
 clean
7150000
heap private
page read and write
 clean
180000
unkown
page write copy
 clean
5AB0000
unkown
page readonly
 clean
2100000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
1B5A000
unkown
page read and write
 clean
264000
heap default
page read and write
 clean
23D000
heap default
page read and write
 clean
2EFE000
heap private
page read and write
 clean
4B4E000
unkown
page read and write
 clean
2100000
unkown
page readonly
 clean
246000
heap default
page read and write
 clean
5E56000
unkown
page readonly
 clean
46B8000
unkown
page read and write
 clean
2D30000
unkown
page read and write
 clean
21E0000
unkown
page readonly
 clean
47C000
unkown
page read and write
 clean
49FD000
unkown
page read and write
 clean
1DD000
heap default
page read and write
 clean
9E0000
unkown
page readonly
 clean
8662000
unkown
page read and write
 clean
2522000
unkown
page read and write
 clean
61E000
unkown
page read and write
 clean
4510000
unkown
page execute and read and write
 clean
C070000
unkown
page read and write
 clean
637E000
unkown
page read and write
 clean
4616000
unkown
page read and write
 clean
240000
heap default
page read and write
 clean
26A0000
unkown
page readonly
 clean
3542000
unkown
page readonly
 clean
CD33000
unkown
page read and write
 clean
994000
unkown
page execute and read and write
 clean
A80000
unkown
page read and write
 clean
1BE0000
unkown
page read and write
 clean
5011000
unkown
page read and write
 clean
750000
heap default
page read and write
 clean
265C000
unkown
page read and write
 clean
17D000
unkown
page execute and read and write
 clean
16E000
unkown
page read and write
 clean
50E000
unkown
page read and write
 clean
3E0000
unkown
page execute and read and write
 clean
2B30000
unkown
page readonly
 clean
20000
unkown
page readonly
 clean
5E75000
unkown
page readonly
 clean
2E40000
unkown
page read and write
 clean
1DD000
heap default
page read and write
 clean
9A0000
heap private
page read and write
 clean
49AC000
unkown
page read and write
 clean
C618000
unkown
page read and write
 clean
1D7000
heap default
page read and write
 clean
4440000
unkown
page read and write
 clean
5F32000
unkown
page readonly
 clean
35D2000
unkown
page readonly
 clean
562E000
unkown
page read and write
 clean
720000
unkown
page execute and read and write
 clean
D00000
heap private
page execute and read and write
 clean
2580000
unkown
page execute and read and write
 clean
B60000
unkown
page readonly
 clean
3585000
unkown
page readonly
 clean
A00000
unkown
page execute and read and write
 clean
4C4000
heap default
page read and write
 clean
5EA5000
unkown
page readonly
 clean
25F2000
unkown
page read and write
 clean
689E000
unkown
page readonly
 clean
8555000
unkown
page read and write
 clean
48B0000
heap private
page read and write
 clean
49D0000
heap private
page read and write
 clean
B2C3000
heap private
page read and write
 clean
856E000
unkown
page read and write
 clean
4500000
unkown
page readonly
 clean
2540000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
There are 869 hidden memdumps, click here to show them.