IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Covid-19 Data Report Google Checklist.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\84086963\xdhqeufpq.pif
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\84086963\afpukhvau.ini
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\arpja.icm
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\awcpm.bin
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\bdrigsrhuf.txt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\bpcfr.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\bvtxvncl.pdf
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\bwct.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\caxangvd.jpg
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\cjsqemh.log
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\cprgmsqr.log
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ddbtbulv.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\dpuanfml.pdf
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ehlstvqd.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\entnulrpup.log
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\facqhk.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\fhkrwrwh.xml
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\fqficjon.emu
data
dropped
clean
C:\84086963\ghmpg.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\gmktoect.pdf
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\gnqknrkuff.xl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\gulmmhfj.pdf
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\gwqibdlqs.txt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\hdwv.mp3
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\hfohbsolju.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\hnhm.ppt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\iiukcjdl.ico
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ilpgatrp.mp3
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ipontssug.ini
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\iqfcgawc.mp3
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\jicbdmo.xml
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\kbwqo.icm
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\keiv.bmp
ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\84086963\kveisjkad.xl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\kwjwpm.pdf
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\kwkcsr.ppt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\lbmqoquhgo.bmp
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ldcauue.log
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\leqbikmpjv.msc
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\lngpuluvo.jpg
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\lrpb.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\mgbpw.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\mjxanpqa.ico
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\mmaihjbaf.ppt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\nbwuai.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ndctgkwvr.ppt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\nhatsaem.ini
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\nkcutginn.icm
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\nuhwt.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\odsgpb.xml
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\onhdxftk.txt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\onnw.bin
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\oqcijplm.dll
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\peqltkff.xml
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\pvoppkotp.msc
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\qhfoer.ico
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\rjcenldrnw.xl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ruqhqaxk.exe
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\suvq.docx
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\thummq.log
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\tsewhsbwlk.mp3
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\tspet.docx
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\tvat.xml
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\uhwaulbhaj.ini
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ujfjsealdj.dll
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\ujqwpom.msc
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\unsdkvxll.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\uqai.bmp
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\vihccpv.exe
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\vilxemlqie.txt
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\vioefncov.cpl
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\vjbwupem.docx
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\wcxrx.dll
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\whuphgwhd.icm
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\wnjepqgt.xml
MGR bitmap, old format, 1-bit deep, 32-bit aligned
dropped
clean
C:\84086963\wtranbfvgl.jpg
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\xfunubfgqn.xls
ASCII text, with CRLF line terminators
dropped
clean
C:\84086963\xgtowcke.icm
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\remcos\logs.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\temp\keiv.bmp
ASCII text, with CRLF line terminators
dropped
clean
There are 71 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Covid-19 Data Report Google Checklist.exe
'C:\Users\user\Desktop\Covid-19 Data Report Google Checklist.exe'
malicious
C:\84086963\xdhqeufpq.pif
'C:\84086963\xdhqeufpq.pif' fqficjon.emu
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
malicious
C:\84086963\xdhqeufpq.pif
'C:\84086963\XDHQEU~1.PIF' c:\84086963\fqficjon.emu
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
malicious

URLs

Name
IP
Malicious
cato.fingusti.club
malicious

Domains

Name
IP
Malicious
cato.fingusti.club
79.134.225.107
malicious

IPs

IP
Domain
Country
Malicious
79.134.225.107
cato.fingusti.club
Switzerland
malicious
192.168.2.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\84086963\xdhqeufpq.pif
WindowsUpdate
clean
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
exepath
clean
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
licence
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
4D70000
unkown
page read and write
malicious
1867000
unkown
page read and write
malicious
49B1000
unkown
page read and write
malicious
4991000
unkown
page read and write
malicious
4971000
unkown
page read and write
malicious
4D51000
unkown
page read and write
malicious
4D51000
unkown
page read and write
malicious
4971000
unkown
page read and write
malicious
3630000
heap private
page read and write
malicious
4D91000
unkown
page read and write
malicious
49D0000
unkown
page read and write
malicious
13B0000
unkown
page execute and read and write
malicious
1867000
unkown
page read and write
malicious
4D11000
unkown
page read and write
malicious
4D31000
unkown
page read and write
malicious
4D11000
unkown
page read and write
malicious
48A8000
unkown
page read and write
malicious
4D11000
unkown
page read and write
malicious
4D31000
unkown
page read and write
malicious
49D0000
unkown
page read and write
malicious
49F2000
unkown
page read and write
malicious
188B000
unkown
page read and write
malicious
4991000
unkown
page read and write
malicious
48C8000
unkown
page read and write
malicious
49B1000
unkown
page read and write
malicious
B00000
unkown
page execute and read and write
malicious
2FA0000
heap private
page read and write
malicious
4D70000
unkown
page read and write
malicious
4971000
unkown
page read and write
malicious
48A9000
unkown
page read and write
malicious
4D10000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
8DAC37E000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1380000
unkown image
page write copy
clean
19E92E29000
unkown
page read and write
clean
1249000
unkown
page read and write
clean
1FD7A980000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1828316C000
unkown
page read and write
clean
3CEE000
unkown
page read and write
clean
19E92E47000
unkown
page read and write
clean
1828284E000
unkown
page read and write
clean
10B8000
unkown
page read and write
clean
1FD7A900000
unkown
page read and write
clean
2873407A000
unkown
page read and write
clean
4D11000
unkown
page read and write
clean
9DE000
unkown
page read and write
clean
960000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
1FC3A210000
unkown
page read and write
clean
8DABF4E000
unkown
page read and write
clean
1FD7A921000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
182828EC000
unkown
page read and write
clean
1B70000
heap default
page read and write
clean
4970000
unkown
page read and write
clean
373E000
unkown
page read and write
clean
38FD000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
960000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1FC3A100000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
182828A8000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
1382000
unkown image
page read and write
clean
3BAE000
unkown
page read and write
clean
2FA6000
heap private
page read and write
clean
1C2CF410000
unkown
page read and write
clean
7FEDE7D000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
18283138000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
960000
unkown
page read and write
clean
48A8000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
182831B8000
unkown
page read and write
clean
1FD7A908000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
18283150000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1FD7523D000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
2873404A000
unkown
page read and write
clean
53D297F000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
C91000
unkown image
page readonly
clean
49B2000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
1249000
unkown
page read and write
clean
19E92E59000
unkown
page read and write
clean
D9A000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
28734029000
unkown
page read and write
clean
28734113000
unkown
page read and write
clean
1AD0000
unkown
page read and write
clean
4D60000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1FD75815000
unkown
page read and write
clean
23C067F000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
960000
unkown
page read and write
clean
4DB1000
unkown
page read and write
clean
1FD751D0000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
4D11000
unkown
page read and write
clean
24EF000
unkown
page read and write
clean
672EE7F000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
960000
unkown
page read and write
clean
15CE000
unkown
page read and write
clean
1220000
heap private
page read and write
clean
1240000
unkown
page read and write
clean
1CA4967A000
unkown
page read and write
clean
2873404D000
unkown
page read and write
clean
19E92E4F000
unkown
page read and write
clean
18283191000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
19E92F00000
unkown
page read and write
clean
11D7000
unkown
page read and write
clean
18283182000
unkown
page read and write
clean
182831A3000
unkown
page read and write
clean
1FD7A63E000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
28733F80000
heap default
page read and write
clean
14A4000
heap private
page read and write
clean
53D267E000
unkown
page read and write
clean
1CA49470000
heap private
page read and write
clean
14A0000
heap private
page read and write
clean
960000
unkown
page read and write
clean
16C4000
heap private
page read and write
clean
7FEE179000
unkown
page read and write
clean
11BC000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1FD7A64B000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
4CD0000
unkown
page read and write
clean
672EBF7000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
3380000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1241000
unkown
page read and write
clean
19E92E58000
unkown
page read and write
clean
C62000
unkown image
page readonly
clean
4D10000
unkown
page read and write
clean
8DAC77B000
unkown
page read and write
clean
960000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1FD75274000
unkown
page read and write
clean
1FD7A570000
unkown
page read and write
clean
1224000
heap private
page read and write
clean
831F3DF000
unkown
page read and write
clean
1185000
heap private
page read and write
clean
1FD7A800000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
4D30000
unkown
page read and write
clean
17B0000
unkown
page read and write
clean
18283191000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
18283138000
unkown
page read and write
clean
10EA000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
1240000
unkown
page read and write
clean
23C087F000
unkown
page read and write
clean
18283171000
unkown
page read and write
clean
8DACAFF000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
48D3000
unkown
page read and write
clean
13CD000
unkown
page execute and read and write
clean
191B000
heap default
page read and write
clean
23C07FF000
unkown
page read and write
clean
182831A3000
unkown
page read and write
clean
3620000
unkown
page read and write
clean
1C2CE8C8000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
18282EE0000
unkown
page read and write
clean
1FD7522A000
unkown
page read and write
clean
1372000
unkown image
page readonly
clean
831F67F000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
7FEDF7E000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
672E5FE000
unkown
page read and write
clean
1CA4964A000
unkown
page read and write
clean
4F21000
unkown
page read and write
clean
1190000
unkown
page read and write
clean
11DD000
unkown
page read and write
clean
1117000
unkown
page read and write
clean
1FC3A1FF000
unkown
page read and write
clean
18283161000
unkown
page read and write
clean
11AB000
unkown
page read and write
clean
1C2CF420000
unkown
page read and write
clean
B1CB67E000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
18283137000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
18282EE0000
unkown
page read and write
clean
4D91000
unkown
page read and write
clean
182828FA000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
1FC3A209000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
8DACA7D000
unkown
page read and write
clean
E02000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1828283C000
unkown
page read and write
clean
1380000
unkown image
page read and write
clean
1FD75302000
unkown
page read and write
clean
182828B2000
unkown
page read and write
clean
18283181000
unkown
page read and write
clean
182828EE000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
11B0000
heap default
page read and write
clean
1381000
unkown image
page write copy
clean
19E92E4B000
unkown
page read and write
clean
1C2CE9E9000
heap private
page read and write
clean
4D11000
unkown
page read and write
clean
1382000
unkown image
page read and write
clean
11AE000
unkown
page read and write
clean
18283133000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1FD7A69E000
unkown
page read and write
clean
960000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
B1CB37E000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
4F21000
unkown
page read and write
clean
1FD7A69E000
unkown
page read and write
clean
19E92E4D000
unkown
page read and write
clean
1FD7A689000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
47CF000
unkown
page read and write
clean
2873404B000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
23C06F9000
unkown
page read and write
clean
2873406F000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
542E000
unkown
page read and write
clean
18F0000
heap default
page read and write
clean
B1CB07E000
unkown
page read and write
clean
48A8000
unkown
page read and write
clean
1110000
heap default
page read and write
clean
28734049000
unkown
page read and write
clean
B1D000
unkown
page execute and read and write
clean
5020000
unkown
page read and write
clean
18283127000
unkown
page read and write
clean
AFC000
unkown
page read and write
clean
11F1000
unkown
page read and write
clean
18283115000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
128E000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
1866000
unkown
page read and write
clean
10C6000
unkown
page read and write
clean
18283151000
unkown
page read and write
clean
1C2CE8D0000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
960000
unkown
page read and write
clean
11B7000
unkown
page read and write
clean
1CA49629000
unkown
page read and write
clean
11CD000
unkown
page read and write
clean
1FD75200000
unkown
page read and write
clean
11AD000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1FD7A90E000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1FD75959000
unkown
page read and write
clean
1FD75959000
unkown
page read and write
clean
12C5000
heap default
page read and write
clean
831F87B000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
28734100000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
10F2000
unkown
page read and write
clean
3390000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
19E92F13000
unkown
page read and write
clean
E06000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD7A924000
unkown
page read and write
clean
8DACC7A000
unkown
page read and write
clean
16D0000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
1510000
heap default
page read and write
clean
5460000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1AE6000
heap default
page read and write
clean
1CA49613000
unkown
page read and write
clean
672EFFC000
unkown
page read and write
clean
2873403C000
unkown
page read and write
clean
182828C6000
unkown
page read and write
clean
1280000
heap private
page read and write
clean
1100000
unkown
page read and write
clean
4B30000
unkown
page read and write
clean
1FD7A560000
unkown
page read and write
clean
1FC3A1FF000
unkown
page read and write
clean
139B000
unkown image
page readonly
clean
5460000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
1FD75900000
unkown
page read and write
clean
1FC3A1F6000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
1FC3A1E7000
unkown
page read and write
clean
367E000
unkown
page read and write
clean
831FB7F000
unkown
page read and write
clean
1828311F000
unkown
page read and write
clean
28734102000
unkown
page read and write
clean
1FD7529D000
unkown
page read and write
clean
3A4E000
unkown
page read and write
clean
18283182000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
37BC000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
1FD75918000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FC3A1DB000
heap default
page read and write
clean
4C90000
unkown
page read and write
clean
17B1000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
28734000000
unkown
page read and write
clean
1243000
unkown
page read and write
clean
672F1F8000
unkown
page read and write
clean
1298000
heap default
page read and write
clean
1FD75902000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1FD75213000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
18282916000
unkown
page read and write
clean
1C2CE870000
heap default
page read and write
clean
1FD7A9C0000
unkown
page read and write
clean
960000
unkown
page read and write
clean
182828DB000
unkown
page read and write
clean
10CB000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283131000
unkown
page read and write
clean
1828363C000
unkown
page read and write
clean
960000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
18283191000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD7A560000
unkown
page read and write
clean
3B50000
unkown
page read and write
clean
1828287F000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
C30000
unkown image
page readonly
clean
3636000
heap private
page read and write
clean
182831A2000
unkown
page read and write
clean
1C2CE8E6000
heap default
page read and write
clean
47F0000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
10E2000
unkown
page read and write
clean
18F8000
heap default
page read and write
clean
39FF000
unkown
page read and write
clean
960000
unkown
page read and write
clean
BA8000
unkown
page read and write
clean
12CE000
unkown
page read and write
clean
2873407B000
unkown
page read and write
clean
960000
unkown
page read and write
clean
11E8000
unkown
page read and write
clean
11CD000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283135000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
19E92E70000
unkown
page read and write
clean
182828EF000
unkown
page read and write
clean
49B0000
unkown
page read and write
clean
1CA4964D000
unkown
page read and write
clean
149F000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
11B5000
heap default
page read and write
clean
960000
unkown
page read and write
clean
7FEE07A000
unkown
page read and write
clean
139B000
unkown image
page readonly
clean
960000
unkown
page read and write
clean
1FC3A211000
unkown
page read and write
clean
1FD7A660000
unkown
page read and write
clean
1372000
unkown image
page readonly
clean
1CA49713000
unkown
page read and write
clean
1924000
heap default
page read and write
clean
1FD7A9C0000
unkown
page read and write
clean
4D11000
unkown
page read and write
clean
672ECFF000
unkown
page read and write
clean
1210000
unkown
page read and write
clean
1FC3A1E2000
unkown
page read and write
clean
1FC3A1E7000
heap default
page read and write
clean
13F0000
heap default
page read and write
clean
1FC3A470000
heap private
page read and write
clean
960000
unkown
page read and write
clean
1728000
heap private
page read and write
clean
19E92E4C000
unkown
page read and write
clean
19E92E55000
unkown
page read and write
clean
2873404E000
unkown
page read and write
clean
182831BD000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1FD7A5A4000
unkown
page read and write
clean
137C000
unkown
page read and write
clean
1FD7A5A0000
unkown
page read and write
clean
1CA49655000
unkown
page read and write
clean
3350000
unkown
page read and write
clean
18283138000
unkown
page read and write
clean
18283100000
unkown
page read and write
clean
18283136000
unkown
page read and write
clean
18282850000
unkown
page read and write
clean
48F0000
unkown
page read and write
clean
1FD7A6B8000
unkown
page read and write
clean
1372000
unkown image
page readonly
clean
11C2000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
19E92E46000
unkown
page read and write
clean
18283629000
unkown
page read and write
clean
159E000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
11EC000
unkown
page read and write
clean
4A31000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1C2CE9E5000
heap private
page read and write
clean
18283182000
unkown
page read and write
clean
1828312F000
unkown
page read and write
clean
C6D000
unkown image
page write copy
clean
1100000
unkown
page read and write
clean
182831C6000
unkown
page read and write
clean
1FD75F60000
unkown
page read and write
clean
18283600000
unkown
page read and write
clean
53D25FB000
unkown
page read and write
clean
672E9FA000
unkown
page read and write
clean
960000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1160000
unkown
page read and write
clean
960000
unkown
page read and write
clean
C62000
unkown image
page readonly
clean
426F000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
182831C5000
unkown
page read and write
clean
1C2CE9F0000
unkown
page read and write
clean
1CA49708000
unkown
page read and write
clean
18282885000
unkown
page read and write
clean
1CA4966C000
unkown
page read and write
clean
1828369D000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
960000
unkown
page read and write
clean
552F000
unkown
page read and write
clean
182831B3000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1C2CE9E0000
heap private
page read and write
clean
1290000
unkown
page read and write
clean
53D2877000
unkown
page read and write
clean
120E000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1828316F000
unkown
page read and write
clean
18282871000
unkown
page read and write
clean
11C3000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1230000
unkown
page read and write
clean
4B71000
unkown
page read and write
clean
1CA49702000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1FD7A6AD000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1FD75802000
unkown
page read and write
clean
1290000
heap default
page read and write
clean
672EEFF000
unkown
page read and write
clean
18283127000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD75279000
unkown
page read and write
clean
1887000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1C2CE881000
heap default
page read and write
clean
1100000
unkown
page read and write
clean
960000
unkown
page read and write
clean
11CD000
unkown
page read and write
clean
23C077A000
unkown
page read and write
clean
C31000
unkown image
page execute read
clean
7D0000
unkown
page read and write
clean
1CA49650000
unkown
page read and write
clean
11D0000
unkown
page read and write
clean
43EF000
unkown
page read and write
clean
960000
unkown
page read and write
clean
139B000
unkown image
page readonly
clean
18283659000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
18283161000
unkown
page read and write
clean
1FD75313000
unkown
page read and write
clean
4BCF000
unkown
page read and write
clean
4B70000
unkown
page read and write
clean
DDE000
unkown
page read and write
clean
53D277B000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD75292000
unkown
page read and write
clean
1FD75F70000
unkown
page read and write
clean
4A11000
unkown
page read and write
clean
1CA495D0000
unkown
page read and write
clean
7CE000
unkown
page read and write
clean
1FD7528B000
unkown
page read and write
clean
18283700000
unkown
page read and write
clean
1876000
unkown
page read and write
clean
1C2CE720000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD7A590000
unkown
page read and write
clean
1FD75B01000
unkown
page read and write
clean
416E000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
11A4000
unkown
page read and write
clean
1FD7A540000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
960000
unkown
page read and write
clean
19E92E00000
unkown
page read and write
clean
1FD74FA0000
heap private
page read and write
clean
18282813000
unkown
page read and write
clean
1C2CF660000
unkown
page read and write
clean
48B8000
unkown
page read and write
clean
4998000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
172B000
heap private
page read and write
clean
1FD7A6A0000
unkown
page read and write
clean
B1CB477000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
28734086000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
4B70000
unkown
page read and write
clean
18283172000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
1828369D000
unkown
page read and write
clean
128E000
unkown
page read and write
clean
18282660000
heap private
page read and write
clean
5460000
unkown
page read and write
clean
1372000
unkown image
page readonly
clean
1140000
unkown
page read and write
clean
12F0000
unkown image
page readonly
clean
11C2000
unkown
page read and write
clean
18283702000
unkown
page read and write
clean
831FA7C000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
489F000
unkown
page read and write
clean
C90000
unkown image
page read and write
clean
11B7000
unkown
page read and write
clean
EDF000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1397000
unkown image
page read and write
clean
182831A2000
unkown
page read and write
clean
182828A1000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1FD75800000
unkown
page read and write
clean
1CA49700000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
182828AC000
unkown
page read and write
clean
545F000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
139B000
unkown image
page readonly
clean
C91000
unkown image
page readonly
clean
113E000
unkown
page read and write
clean
18283643000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
1FC3A1D0000
heap default
page read and write
clean
18283602000
unkown
page read and write
clean
28734802000
unkown
page read and write
clean
1FD7A9A0000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1CA49600000
unkown
page read and write
clean
1FD7A550000
unkown
page read and write
clean
1FC3A0E0000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1AE0000
heap default
page read and write
clean
18282800000
unkown
page read and write
clean
1FD7A686000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
18282913000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1FC3A210000
unkown
page read and write
clean
D37000
unkown
page read and write
clean
1CA4963C000
unkown
page read and write
clean
B1CB57F000
unkown
page read and write
clean
53D247E000
unkown
page read and write
clean
7FEDFF9000
unkown
page read and write
clean
4A31000
unkown
page read and write
clean
4990000
unkown
page read and write
clean
19E92D70000
unkown
page read and write
clean
18282908000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1BA5000
heap default
page read and write
clean
18283160000
unkown
page read and write
clean
182831C6000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283161000
unkown
page read and write
clean
1200000
unkown
page read and write
clean
4A32000
unkown
page read and write
clean
960000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
10E7000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1FC3A1FF000
unkown
page read and write
clean
7FEDBBB000
unkown
page read and write
clean
18E0000
unkown
page read and write
clean
4A34000
unkown
page read and write
clean
8DAC87E000
unkown
page read and write
clean
127C000
unkown
page read and write
clean
11DE000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
1380000
unkown image
page write copy
clean
1FC3A211000
unkown
page read and write
clean
72C000
unkown
page read and write
clean
12F1000
unkown image
page execute read
clean
1FD7A62F000
unkown
page read and write
clean
566C000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
182831C6000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1828284C000
unkown
page read and write
clean
4A31000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
672E8FB000
unkown
page read and write
clean
1C2CE878000
heap default
page read and write
clean
19E92E13000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
19E92E7E000
unkown
page read and write
clean
49F2000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
19E92C70000
heap default
page read and write
clean
10DD000
unkown
page read and write
clean
18283182000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
505E000
unkown
page read and write
clean
182826C0000
heap default
page read and write
clean
4D11000
unkown
page read and write
clean
49B2000
unkown
page read and write
clean
1FD7A970000
unkown
page read and write
clean
179F000
unkown
page read and write
clean
5100000
unkown
page read and write
clean
1243000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283182000
unkown
page read and write
clean
23C035A000
unkown
page read and write
clean
556E000
unkown
page read and write
clean
960000
unkown
page read and write
clean
3210000
unkown
page read and write
clean
1C2CF3B0000
unkown
page read and write
clean
3DEF000
unkown
page read and write
clean
1397000
unkown image
page read and write
clean
182827C0000
unkown
page read and write
clean
53D24FE000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
18B0000
heap private
page read and write
clean
7F0000
unkown
page read and write
clean
93A000
unkown
page read and write
clean
127E000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
7FEDEFE000
unkown
page read and write
clean
8DAC7FE000
unkown
page read and write
clean
1C2CE8BA000
heap default
page read and write
clean
C30000
unkown image
page readonly
clean
1FD757D1000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1720000
heap private
page read and write
clean
1FD7A600000
unkown
page read and write
clean
1FD7A9C0000
unkown
page read and write
clean
11DE000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1FD7526F000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
1828312C000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1FD7A6B3000
unkown
page read and write
clean
1C2CE970000
unkown
page read and write
clean
8DAC47C000
unkown
page read and write
clean
1FD75918000
unkown
page read and write
clean
182828E4000
unkown
page read and write
clean
1828314D000
unkown
page read and write
clean
960000
unkown
page read and write
clean
672EAF7000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
1115000
heap default
page read and write
clean
1FD75000000
heap default
page read and write
clean
18283155000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
8DABFCE000
unkown
page read and write
clean
8DAD07B000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
960000
unkown
page read and write
clean
3380000
unkown
page read and write
clean
1828288B000
unkown
page read and write
clean
1C2CF6E0000
unkown
page read and write
clean
672F0F9000
unkown
page read and write
clean
1380000
unkown image
page read and write
clean
1FD76070000
unkown
page read and write
clean
DE0000
unkown
page read and write
clean
1FD75258000
unkown
page read and write
clean
1FD752FD000
unkown
page read and write
clean
18283191000
unkown
page read and write
clean
1C2CE8D0000
unkown
page read and write
clean
1CA49E02000
unkown
page read and write
clean
C6D000
unkown image
page read and write
clean
49F0000
unkown
page read and write
clean
960000
unkown
page read and write
clean
8DACF7F000
unkown
page read and write
clean
18283131000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
19E92E3C000
unkown
page read and write
clean
1C2CE8D0000
unkown
page read and write
clean
117E000
unkown
page read and write
clean
10FA000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
3370000
heap private
page read and write
clean
47EE000
unkown
page read and write
clean
1FD75276000
unkown
page read and write
clean
4D30000
unkown
page read and write
clean
672E4FB000
unkown
page read and write
clean
1FD7A6AD000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
960000
unkown
page read and write
clean
28733FB0000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1C2CF680000
unkown
page read and write
clean
1FD7A990000
unkown
page read and write
clean
1C2CE850000
unkown
page read and write
clean
210F000
unkown
page read and write
clean
1CA494D0000
heap default
page read and write
clean
B1CB2FB000
unkown
page read and write
clean
FEF000
unkown
page read and write
clean
960000
unkown
page read and write
clean
377E000
unkown
page read and write
clean
1C2CF670000
unkown
page readonly
clean
49B1000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
12F1000
unkown image
page execute read
clean
4D10000
unkown
page read and write
clean
1381000
unkown image
page write copy
clean
1100000
unkown
page read and write
clean
377F000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
38BF000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1FD7A612000
unkown
page read and write
clean
1FC3A1F5000
unkown
page read and write
clean
53D2A7F000
unkown
page read and write
clean
4D60000
unkown
page read and write
clean
8CA000
unkown
page read and write
clean
19E92E52000
unkown
page read and write
clean
672EDFB000
unkown
page read and write
clean
18282829000
unkown
page read and write
clean
10D0000
unkown
page read and write
clean
EE3000
unkown
page read and write
clean
960000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
8DAC67F000
unkown
page read and write
clean
1C2CF3A0000
unkown
page read and write
clean
8DAC57B000
unkown
page read and write
clean
12C0000
heap default
page read and write
clean
1FD7A590000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
1545000
heap default
page read and write
clean
1290000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
12F1000
unkown image
page execute read
clean
19E93602000
unkown
page read and write
clean
960000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
8DAC97F000
unkown
page read and write
clean
363E000
unkown
page read and write
clean
10D5000
unkown
page read and write
clean
4990000
unkown
page read and write
clean
11DF000
unkown
page read and write
clean
960000
unkown
page read and write
clean
28733F20000
heap private
page read and write
clean
4D10000
unkown
page read and write
clean
4D11000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
1C2CF690000
unkown
page read and write
clean
1828363C000
unkown
page read and write
clean
18283140000
unkown
page read and write
clean
16CE000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
C74000
unkown image
page read and write
clean
18283135000
unkown
page read and write
clean
1FD7A621000
unkown
page read and write
clean
1FD7A570000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
1FD75913000
unkown
page read and write
clean
1230000
unkown
page read and write
clean
B1CAD8B000
unkown
page read and write
clean
1828314F000
unkown
page read and write
clean
12E0000
heap private
page read and write
clean
5460000
unkown
page read and write
clean
960000
unkown
page read and write
clean
8DABECB000
unkown
page read and write
clean
182831B3000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
151A000
heap default
page read and write
clean
28734108000
unkown
page read and write
clean
1889000
unkown
page read and write
clean
8DACD7A000
unkown
page read and write
clean
831F35B000
unkown
page read and write
clean
1FC3A20A000
unkown
page read and write
clean
4F20000
unkown
page read and write
clean
3CAE000
unkown
page read and write
clean
4B70000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
49D5000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
13CE000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283129000
unkown
page read and write
clean
19E92E50000
unkown
page read and write
clean
B1CB0FE000
unkown
page read and write
clean
28734013000
unkown
page read and write
clean
3B4F000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
384E000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
1FD7A68C000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
C30000
unkown image
page readonly
clean
16C0000
heap private
page read and write
clean
1160000
unkown
page read and write
clean
831F77C000
unkown
page read and write
clean
18283162000
unkown
page read and write
clean
18283181000
unkown
page read and write
clean
8DACB7F000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
831F977000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
18283602000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
19E92C10000
heap private
page read and write
clean
1FD764F0000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
1180000
heap default
page read and write
clean
1180000
heap private
page read and write
clean
672E57E000
unkown
page read and write
clean
1240000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
12E5000
heap private
page read and write
clean
506F000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
1290000
unkown
page read and write
clean
18283127000
unkown
page read and write
clean
19E92F02000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
48C8000
unkown
page read and write
clean
182831B4000
unkown
page read and write
clean
1B78000
heap default
page read and write
clean
5020000
unkown
page read and write
clean
1828313A000
unkown
page read and write
clean
19E92F08000
unkown
page read and write
clean
12F1000
unkown image
page execute read
clean
1188000
heap default
page read and write
clean
8DAC8FF000
unkown
page read and write
clean
4D10000
unkown
page read and write
clean
1FC3A475000
heap private
page read and write
clean
1FD7A6B2000
unkown
page read and write
clean
4D51000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
1CA49687000
unkown
page read and write
clean
8DAC2F8000
unkown
page read and write
clean
1889000
unkown
page read and write
clean
1866000
unkown
page read and write
clean
7FEE0FF000
unkown
page read and write
clean
1FD7A5D0000
unkown
page read and write
clean
19E92E57000
unkown
page read and write
clean
18283171000
unkown
page read and write
clean
17CE000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
18283002000
unkown
page read and write
clean
23C03DF000
unkown
page read and write
clean
182831A2000
unkown
page read and write
clean
5020000
unkown
page read and write
clean
9A0000
unkown
page read and write
clean
960000
unkown
page read and write
clean
18283192000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
38C0000
unkown
page read and write
clean
182828BF000
unkown
page read and write
clean
18282EE0000
unkown
page read and write
clean
19E92E88000
unkown
page read and write
clean
53D21DB000
unkown
page read and write
clean
C31000
unkown image
page execute read
clean
18282902000
unkown
page read and write
clean
There are 919 hidden memdumps, click here to show them.