IOC Report

loading gif

Files

File Path
Type
Category
Malicious
ejecutable2.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\tmp86AE.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
modified
malicious
C:\Users\user\AppData\Roaming\CmsVPZkxbOtm.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
clean
C:\Users\user\AppData\Roaming\CmsVPZkxbOtm.exe:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\ejecutable2.exe
'C:\Users\user\Desktop\ejecutable2.exe'
malicious
C:\Windows\SysWOW64\schtasks.exe
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\CmsVPZkxbOtm' /XML 'C:\Users\user\AppData\Local\Temp\tmp86AE.tmp'
malicious
C:\Users\user\Desktop\ejecutable2.exe
C:\Users\user\Desktop\ejecutable2.exe
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Windows\SysWOW64\wscript.exe
C:\Windows\SysWOW64\wscript.exe
malicious
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\user\Desktop\ejecutable2.exe'
malicious

URLs

Name
IP
Malicious
http://www.pizza-mio.com/u4an/?cRrtMz2=Ea+fIX+qvB9rXsVioouSESAKF/QLNUis3qIxLYsU8whjNSMesV9wMQUCyx2IDzdIrw8QIA==&an=lnlpiVNpa2ntv
217.160.0.222
malicious
http://www.tunetel.com/u4an/?cRrtMz2=FQD7DOPg41An23BytYAyzDzwyZJ0tQikl+psJg3VSFai3GWkns53TVvYc7bwkTS4QXibfw==&an=lnlpiVNpa2ntv
3.223.115.185
malicious
http://www.play-to-escape.com/u4an/?cRrtMz2=wU8NyZPkNGRQQpssl8Iv49O+whrQvSeXFC/S+Kx28E86ZZkWNSugarjcLE+3raO3NGyltw==&an=lnlpiVNpa2ntv
81.169.145.77
malicious
http://www.yhomggsmtdynchb.store/u4an/?cRrtMz2=vtjrYftuZe8iaBtQ/TWxrabmNpKe1jOOTYTB1/nX+Um4K24Q/B9FUBqnYP2A+q8J0+YELg==&an=lnlpiVNpa2ntv
5.101.152.161
malicious
http://www.branchwallet.com/u4an/?cRrtMz2=bje5eY1RGEWNtm8ygCOrlm2ug1qlHU7639KaGd4GF1Wfo4/TJzpT6n4yoGbd2Lg1L0Vz5w==&an=lnlpiVNpa2ntv
35.168.81.157
malicious
http://www.iptechcm.com/u4an/?cRrtMz2=Xsze89gQxfgRrb0U/pbtTMTkEZR7VVn3wnJWYt+8gVFiExqV2mQQrtUEc4jTVg5kW61b5Q==&an=lnlpiVNpa2ntv
195.77.116.8
malicious
www.wwiilive.com/u4an/
malicious
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://wellformedweb.org/CommentAPI/
unknown
clean
http://www.rspb.org.uk/wildlife/birdguide/name/
unknown
clean
http://www.wwiilive.com/u4an/?cRrtMz2=2wrG/oaPoZN58JamjsocLLaSsZCLAXvYnHaXxYH/bF19vnAo7muls9VTY9bzjfrYRlsEFw==&an=lnlpiVNpa2ntv
34.102.136.180
clean
http://www.iis.fhg.de/audioPA
unknown
clean
http://www.piriform.com/ccleanerT
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://treyresearch.net
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://java.sun.com
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
clean
http://investor.msn.com/
unknown
clean
http://www.piriform.com/ccleaner
unknown
clean
http://computername/printers/printername/.printer
unknown
clean
http://www.%s.comPA
unknown
clean
http://www.autoitscript.com/autoit3
unknown
clean
https://support.mozilla.org
unknown
clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
clean
http://servername/isapibackend.dll
unknown
clean
There are 20 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.yhomggsmtdynchb.store
5.101.152.161
malicious
www.iptechcm.com
195.77.116.8
malicious
play-to-escape.com
81.169.145.77
malicious
www.pizza-mio.com
217.160.0.222
malicious
www.tunetel.com
unknown
malicious
www.play-to-escape.com
unknown
malicious
www.branchwallet.com
unknown
malicious
www.wwiilive.com
unknown
malicious
HDRedirect-LB7-5a03e1c2772e1c9c.elb.us-east-1.amazonaws.com
3.223.115.185
clean
wwiilive.com
34.102.136.180
clean
cdl-lb-1356093980.us-east-1.elb.amazonaws.com
35.168.81.157
clean
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
217.160.0.222
www.pizza-mio.com
Germany
malicious
5.101.152.161
www.yhomggsmtdynchb.store
Russian Federation
malicious
195.77.116.8
www.iptechcm.com
Spain
malicious
81.169.145.77
play-to-escape.com
Germany
malicious
34.102.136.180
wwiilive.com
United States
clean
35.168.81.157
cdl-lb-1356093980.us-east-1.elb.amazonaws.com
United States
clean
3.223.115.185
HDRedirect-LB7-5a03e1c2772e1c9c.elb.us-east-1.amazonaws.com
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
370000
unkown
page read and write
malicious
70000
unkown image
page execute and read and write
malicious
9A29000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
25F1000
unkown
page read and write
malicious
35F1000
unkown
page read and write
malicious
340000
unkown image
page execute and read and write
malicious
9A29000
unkown image
page execute and read and write
malicious
430000
unkown image
page execute and read and write
malicious
265F000
unkown
page read and write
malicious
C0000
unkown image
page execute and read and write
malicious
2AD0000
unkown
page read and write
clean
62BF000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
75E7000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
2959000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
8720000
unkown
page read and write
clean
7778000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7FAE000
unkown
page read and write
clean
4593000
unkown
page read and write
clean
6A20000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
433000
heap default
page read and write
clean
7130000
unkown
page read and write
clean
4F59000
unkown
page read and write
clean
5D0D000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
4368000
unkown
page read and write
clean
489000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
64F9000
unkown
page read and write
clean
2474000
unkown
page execute and read and write
clean
639E000
unkown
page read and write
clean
6450000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
8427000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
30D0000
unkown image
page readonly
clean
11E4000
unkown image
page readonly
clean
2F70000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
3D4B000
unkown
page read and write
clean
A50000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
74FA000
unkown
page read and write
clean
66A6000
unkown
page read and write
clean
212B000
unkown image
page read and write
clean
3D90000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
110000
unkown
page read and write
clean
2AC0000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
E0000
heap private
page read and write
clean
6666000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
430000
unkown image
page readonly
clean
1110000
unkown
page read and write
clean
3140000
unkown
page read and write
clean
43D000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
6E50000
heap private
page read and write
clean
76F1000
unkown
page read and write
clean
75E7000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
4F3C000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
4593000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
43A0000
unkown image
page readonly
clean
846E000
unkown
page read and write | page guard
clean
6251000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
4F0000
heap default
page read and write
clean
2380000
unkown
page execute and read and write
clean
97E000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
846F000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
B0F000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
990000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
2350000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
4265000
heap private
page read and write
clean
36F000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
9B05000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
5B8000
heap default
page read and write
clean
7F0000
unkown image
page readonly
clean
2AC0000
unkown
page read and write
clean
EB0000
unkown image
page execute and read and write
clean
2F20000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
130000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
4300000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
27D0000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
2750000
unkown
page read and write
clean
96A2000
unkown
page read and write
clean
20000
unkown
page read and write
clean
930000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
30F0000
unkown image
page readonly
clean
7130000
unkown
page read and write
clean
668C000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
6746000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
7778000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
21E0000
unkown
page execute and read and write
clean
8355000
unkown
page read and write
clean
83F7000
unkown
page read and write
clean
2F20000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
728E000
unkown
page read and write
clean
22F0000
unkown
page read and write
clean
6B0000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
4150000
unkown image
page readonly
clean
9720000
unkown
page read and write
clean
66C2000
unkown
page read and write
clean
583000
heap default
page read and write
clean
4FB2000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
67D1000
unkown
page read and write
clean
292F000
unkown
page read and write
clean
6AEB000
unkown
page read and write
clean
2660000
unkown
page execute and read and write
clean
292F000
unkown
page read and write
clean
4200000
unkown
page read and write
clean
2C6000
heap default
page read and write
clean
2CC7000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
301E000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
7B7000
unkown
page read and write
clean
6B92000
unkown
page read and write
clean
11BD000
unkown image
page execute read
clean
75DF000
unkown
page read and write
clean
3200000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7014000
unkown
page read and write
clean
680F000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
4207000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
2F60000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
220000
unkown image
page readonly
clean
620000
heap private
page read and write
clean
A50000
unkown
page read and write
clean
6250000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
237000
heap default
page read and write
clean
2120000
unkown image
page read and write
clean
3E50000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
340000
unkown
page read and write
clean
75E7000
unkown
page read and write
clean
53A000
heap default
page read and write
clean
66AF000
unkown
page read and write
clean
4265000
heap private
page read and write
clean
E0000
heap private
page read and write
clean
66AC000
unkown
page read and write
clean
1122000
unkown image
page execute read
clean
32F000
unkown
page read and write
clean
2CD000
unkown
page execute and read and write
clean
66C0000
unkown
page read and write
clean
913E000
unkown
page read and write
clean
6C03000
unkown
page read and write
clean
11E4000
unkown image
page readonly
clean
255000
heap default
page read and write
clean
2F50000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
3170000
unkown
page read and write
clean
9E0000
unkown image
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2F80000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
7090000
unkown
page read and write
clean
4F3C000
unkown
page read and write
clean
290000
unkown
page read and write
clean
BDE000
unkown
page read and write
clean
330000
unkown
page execute and read and write
clean
11BD000
unkown image
page execute read
clean
74B4000
heap private
page read and write
clean
31FF000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
2AB0000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
75DF000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
11D6000
unkown image
page readonly
clean
AD0000
unkown
page execute and read and write
clean
10F0000
unkown
page read and write
clean
2460000
unkown
page execute and read and write
clean
653A000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
713A000
unkown
page read and write
clean
4FB2000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
6938000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
1B83000
heap private
page read and write
clean
1CE000
unkown
page read and write
clean
6988000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
A04000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
4450000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
AB0000
unkown
page execute and read and write
clean
437000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
4D70000
unkown image
page readonly
clean
687A000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
46E000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
27D0000
unkown
page read and write
clean
66C7000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
4DB1000
unkown image
page read and write
clean
4D80000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
6432000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
30C0000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
4B9D000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
2C61000
unkown image
page read and write
clean
10000
unkown image
page read and write
clean
2C6C000
unkown image
page read and write
clean
211B000
unkown image
page read and write
clean
679E000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
690B000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
4ADE000
unkown
page read and write
clean
213B000
unkown image
page read and write
clean
4710000
unkown
page read and write
clean
675E000
unkown
page read and write
clean
4F82000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
4300000
unkown
page read and write
clean
7A0000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
263C000
unkown
page read and write
clean
249000
heap default
page read and write
clean
63A0000
unkown
page read and write
clean
140000
unkown
page read and write
clean
6F8B000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
6C00000
unkown
page read and write
clean
6812000
unkown
page read and write
clean
8C000
unkown
page read and write
clean
CC0000
unkown
page read and write
clean
9D0000
unkown
page execute and read and write
clean
4B00000
unkown image
page readonly
clean
71CE000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
2C53000
unkown image
page read and write
clean
2130000
unkown image
page read and write
clean
5410000
heap private
page read and write
clean
9B23000
heap private
page read and write
clean
3CA0000
unkown
page read and write
clean
438000
unkown
page read and write
clean
6545000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
292F000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
449C000
unkown
page read and write
clean
4A00000
unkown
page read and write
clean
BC0000
unkown image
page read and write
clean
8374000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
400000
heap default
page read and write
clean
27E0000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
2F90000
unkown
page read and write
clean
140000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
63F0000
unkown
page read and write
clean
2F70000
unkown
page read and write
clean
A70000
unkown
page read and write
clean
678D000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
2533000
unkown
page read and write
clean
140000
unkown
page read and write
clean
160000
heap default
page read and write
clean
9B05000
heap private
page read and write
clean
2100000
unkown image
page readonly
clean
4450000
unkown
page read and write
clean
659F000
unkown
page read and write
clean
67E7000
unkown
page read and write
clean
62CE000
unkown
page read and write
clean
2EB000
unkown
page execute and read and write
clean
33C000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
742E000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
4300000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
11CB000
unkown image
page execute read
clean
110000
unkown
page read and write
clean
59C000
unkown
page read and write
clean
1120000
unkown image
page readonly
clean
6A12000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
27D0000
unkown
page read and write
clean
3130000
unkown
page read and write
clean
101F000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
7130000
unkown
page read and write
clean
43A0000
unkown image
page readonly
clean
30F0000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
1E0000
unkown
page execute and read and write
clean
457A000
unkown
page read and write
clean
237000
heap default
page read and write
clean
4F73000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
213B000
unkown image
page read and write
clean
371000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
255000
heap default
page read and write
clean
A00000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
1120000
unkown image
page readonly
clean
5050000
heap private
page read and write
clean
A50000
unkown
page read and write
clean
6402000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
6BC0000
unkown
page read and write
clean
940000
unkown
page execute and read and write
clean
29B000
heap default
page read and write
clean
6B44000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
2370000
unkown
page execute and read and write
clean
980000
unkown
page read and write
clean
140000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
97E4000
unkown
page read and write
clean
69FE000
unkown
page read and write
clean
9823000
unkown
page read and write
clean
4FC6000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
6A27000
unkown
page read and write
clean
8470000
unkown
page read and write
clean
6A59000
unkown
page read and write
clean
49E2000
heap private
page read and write
clean
6A60000
heap private
page read and write
clean
7BD0000
heap private
page read and write
clean
30C0000
unkown
page read and write
clean
4990000
unkown
page read and write
clean
26DE000
unkown
page read and write
clean
4BEE000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
11CB000
unkown image
page execute read
clean
4FC6000
unkown
page read and write
clean
4260000
heap private
page read and write
clean
913E000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
2AD0000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
220000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
3D40000
unkown
page read and write
clean
4A4E000
unkown
page read and write
clean
8419000
unkown
page read and write
clean
505C000
heap private
page read and write
clean
1EE0000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
6C37000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
4250000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
83FE000
unkown
page read and write
clean
2F70000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
350000
unkown image
page readonly
clean
22E7000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
74D3000
heap private
page read and write
clean
2F50000
unkown
page read and write
clean
330000
unkown
page read and write
clean
A65000
unkown
page read and write
clean
9B23000
heap private
page read and write
clean
44E7000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
5B0000
unkown image
page readonly
clean
4B0000
unkown image
page read and write
clean
D0000
unkown image
page readonly
clean
980000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
4D50000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
98E3000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
6825000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
449C000
unkown
page read and write
clean
65D6000
unkown
page read and write
clean
779000
unkown image
page execute and read and write
clean
30D0000
unkown image
page readonly
clean
3170000
unkown
page read and write
clean
29BA000
unkown image
page read and write
clean
9760000
unkown
page read and write
clean
AC1000
unkown
page execute and read and write
clean
7EFE0000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
21BF000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7057000
unkown
page read and write
clean
68CE000
unkown
page read and write
clean
6BB5000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
BC0000
unkown
page read and write
clean
4C0000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
1120000
unkown image
page readonly
clean
2540000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
2CC7000
unkown image
page readonly
clean
2520000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
140000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
79F0000
heap private
page read and write
clean
31D000
heap default
page read and write
clean
20000
unkown image
page readonly
clean
6B7B000
unkown
page read and write
clean
6C83000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
4D30000
unkown image
page readonly
clean
36F000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
36F000
unkown
page read and write
clean
98A0000
unkown
page read and write
clean
6C42000
unkown
page read and write
clean
360000
heap default
page read and write
clean
67EC000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
27EF000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
9823000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
4265000
heap private
page read and write
clean
3D90000
unkown
page read and write
clean
4F7000
heap default
page read and write
clean
6DB5000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
4388000
unkown
page read and write
clean
9148000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
456F000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
980000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
7B40000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
140000
unkown image
page readonly
clean
5410000
heap private
page read and write
clean
25F1000
unkown
page execute and read and write
clean
4260000
heap private
page read and write
clean
3DF8000
unkown
page read and write
clean
45F0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
1D7000
unkown
page read and write
clean
4207000
unkown
page read and write
clean
850000
unkown
page execute and read and write
clean
9120000
unkown
page read and write
clean
11BD000
unkown image
page execute read
clean
81AE000
unkown
page read and write
clean
9148000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
6C58000
unkown
page read and write
clean
4368000
unkown
page read and write
clean
630000
unkown image
page execute and read and write
clean
9B00000
heap private
page read and write
clean
1B60000
heap private
page read and write
clean
A60000
unkown
page read and write
clean
237000
heap default
page read and write
clean
29AF000
unkown
page read and write
clean
9148000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
4250000
unkown image
page readonly
clean
6BBE000
unkown
page read and write
clean
6C3A000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
220000
unkown image
page readonly
clean
74B0000
heap private
page read and write
clean
9120000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
6577000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
45D6000
unkown
page read and write
clean
A10000
heap private
page read and write
clean
40000
unkown image
page readonly
clean
3D50000
unkown
page read and write
clean
9B23000
heap private
page read and write
clean
7319000
unkown
page read and write
clean
4250000
unkown image
page readonly
clean
30E0000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
4DD0000
heap private
page read and write
clean
1FD0000
unkown image
page readonly
clean
6751000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7FAE000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
65DA000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
11D6000
unkown image
page readonly
clean
AC7000
unkown
page execute and read and write
clean
6743000
unkown
page read and write
clean
460000
heap default
page read and write
clean
32A9000
heap private
page read and write
clean
4160000
unkown
page read and write
clean
2DA000
unkown
page execute and read and write
clean
6A20000
unkown
page read and write
clean
81AE000
unkown
page read and write
clean
69B8000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
460B000
unkown
page read and write
clean
71CE000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
633E000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
230000
heap default
page read and write
clean
6BC8000
unkown
page read and write
clean
990000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
2550000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
7B1000
unkown
page read and write
clean
96A2000
unkown
page read and write
clean
1120000
unkown image
page readonly
clean
4207000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
67E5000
unkown
page read and write
clean
770000
unkown image
page readonly
clean
6BF8000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
66B9000
unkown
page read and write
clean
3170000
unkown
page read and write
clean
6A27000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
25F7000
unkown
page execute and read and write
clean
8320000
unkown
page read and write
clean
4980000
unkown
page read and write
clean
840000
unkown
page execute and read and write
clean
4E0000
unkown
page read and write
clean
255000
heap default
page read and write
clean
301E000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
212B000
unkown image
page read and write
clean
4D0000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
45D6000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
2120000
unkown image
page read and write
clean
24F0000
unkown image
page readonly
clean
80FE000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
43B0000
heap private
page read and write
clean
4FC6000
unkown
page read and write
clean
5DD000
unkown
page read and write
clean
2477000
unkown
page execute and read and write
clean
21BF000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
1550000
unkown image
page readonly
clean
4F96000
unkown
page read and write
clean
467000
heap default
page read and write
clean
9DC000
unkown
page read and write
clean
490000
unkown
page read and write
clean
3FE000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
4DB1000
unkown image
page read and write
clean
AE0000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
484000
heap private
page read and write
clean
45CB000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
6C79000
unkown
page read and write
clean
7839000
unkown
page read and write
clean
1122000
unkown image
page execute read
clean
6548000
unkown
page read and write
clean
140000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
2688000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
4BB0000
heap private
page read and write
clean
2100000
unkown image
page readonly
clean
96E3000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
2B7A000
unkown
page read and write
clean
249000
heap default
page read and write
clean
1BE0000
unkown image
page readonly
clean
678A000
unkown
page read and write
clean
53C000
heap default
page read and write
clean
7EFC0000
unkown image
page readonly
clean
3140000
unkown
page read and write
clean
4F74000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
6C96000
unkown
page read and write
clean
C10000
heap private
page execute and read and write
clean
1B50000
unkown
page read and write
clean
6D79000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
25C3000
unkown
page read and write
clean
947000
unkown
page execute and read and write
clean
2500000
unkown image
page readonly
clean
27D0000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
9863000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
7EFC2000
unkown image
page readonly
clean
2AC0000
unkown
page read and write
clean
DE0000
unkown image
page execute and read and write
clean
844C000
unkown
page read and write
clean
97A0000
unkown
page read and write
clean
1120000
unkown image
page readonly
clean
140000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
3D50000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
7B4000
unkown
page read and write
clean
560000
unkown image
page execute and read and write
clean
65DD000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
2500000
unkown image
page readonly
clean
2B0000
heap private
page read and write
clean
6F8B000
unkown
page read and write
clean
2500000
unkown
page execute and read and write
clean
5BF000
heap default
page read and write
clean
4910000
unkown image
page read and write
clean
6C4D000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
6759000
unkown
page read and write
clean
4200000
unkown
page read and write
clean
140000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
2470000
unkown
page execute and read and write
clean
3130000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
4250000
unkown image
page readonly
clean
6819000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
4360000
unkown
page read and write
clean
67A5000
unkown
page read and write
clean
371000
unkown
page read and write
clean
212B000
unkown image
page read and write
clean
4D0000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
4F57000
unkown
page read and write
clean
63B2000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
1100000
unkown
page read and write
clean
2CB000
heap default
page read and write
clean
7E1E000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
5C0000
unkown image
page readonly
clean
666C000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
682B000
unkown
page read and write
clean
6A91000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
910000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
F0000
unkown image
page read and write
clean
2F90000
unkown
page read and write
clean
21E0000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
5184000
heap private
page read and write
clean
4160000
unkown
page read and write
clean
B30000
unkown
page execute and read and write
clean
2E7000
unkown
page execute and read and write
clean
4160000
unkown
page read and write
clean
70A1000
unkown
page read and write
clean
7319000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
9863000
unkown
page read and write
clean
65D0000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
96A2000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
1122000
unkown image
page execute read
clean
2AA0000
unkown
page read and write
clean
67CE000
unkown
page read and write
clean
4F38000
unkown
page read and write
clean
6A20000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
4593000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
728E000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
DDE000
unkown
page read and write
clean
5BF0000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7CFE000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
E1F000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
11D6000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
3E8000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
213B000
unkown image
page read and write
clean
1110000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
9823000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
5188000
heap private
page read and write
clean
31FF000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
75E2000
unkown
page read and write
clean
330000
unkown
page read and write
clean
2C0000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
6C8B000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
5BC000
heap default
page read and write
clean
67C8000
unkown
page read and write
clean
7778000
unkown
page read and write
clean
3B6000
unkown
page read and write
clean
213B000
unkown image
page read and write
clean
7EFD0000
unkown image
page readonly
clean
3D4B000
unkown
page read and write
clean
85EE000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
980000
unkown
page read and write
clean
514000
heap default
page read and write
clean
255000
heap default
page read and write
clean
6786000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
4ED0000
unkown
page read and write
clean
67DE000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
75E9000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
2550000
unkown
page read and write
clean
2959000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
2270000
unkown
page execute and read and write
clean
2AC0000
unkown
page read and write
clean
5C2000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
31FF000
unkown
page read and write
clean
287000
heap default
page read and write
clean
25E0000
unkown
page execute and read and write
clean
4360000
unkown
page read and write
clean
83FE000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
2BB7000
unkown image
page read and write
clean
F0000
heap default
page read and write
clean
43B0000
heap private
page read and write
clean
67A0000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
980000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
22D0000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
6551000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7EFC0000
unkown image
page readonly
clean
990000
unkown
page read and write
clean
25F4000
unkown
page execute and read and write
clean
3DE000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
3020000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
990000
unkown
page read and write
clean
713A000
unkown
page read and write
clean
43B000
heap default
page read and write
clean
9B0000
unkown
page execute and read and write
clean
330000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
653C000
unkown
page read and write
clean
4C0000
unkown
page read and write
clean
4AF0000
unkown image
page readonly
clean
950000
unkown
page execute and read and write
clean
456F000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
424000
heap default
page read and write
clean
43D000
unkown
page read and write
clean
22E4000
unkown
page read and write
clean
710F000
unkown
page read and write
clean
96E3000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
45A1000
unkown
page read and write
clean
4265000
heap private
page read and write
clean
6A60000
heap private
page read and write
clean
4E60000
unkown
page read and write
clean
243000
heap default
page read and write
clean
200000
unkown
page execute and read and write
clean
665F000
unkown
page read and write
clean
98A0000
unkown
page read and write
clean
20000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
11D000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
380000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
750000
unkown image
page readonly
clean
6604000
unkown
page read and write
clean
621E000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
660000
heap private
page read and write
clean
7065000
unkown
page read and write
clean
292F000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
2BD000
heap default
page read and write
clean
75E9000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
4308000
unkown
page read and write
clean
52BE000
unkown
page read and write
clean
3140000
unkown
page read and write
clean
27C0000
unkown
page read and write
clean
9B00000
heap private
page read and write
clean
2750000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
82B0000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
470E000
unkown
page read and write
clean
7050000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
2A3000
unkown
page execute and read and write
clean
449C000
unkown
page read and write
clean
9720000
unkown
page read and write
clean
69CC000
unkown
page read and write
clean
6781000
unkown
page read and write
clean
4B0000
unkown
page read and write
clean
6975000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
57F000
unkown
page read and write
clean
6654000
unkown
page read and write
clean
6F66000
unkown
page read and write
clean
920000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
4F38000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
E4000
heap private
page read and write
clean
5360000
unkown image
page read and write
clean
D0000
unkown image
page readonly
clean
4207000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
11CB000
unkown image
page execute read
clean
4970000
unkown
page read and write
clean
500000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
A70000
unkown image
page readonly
clean
2F50000
unkown
page read and write
clean
9920000
unkown image
page execute and read and write
clean
460B000
unkown
page read and write
clean
21F0000
unkown
page read and write
clean
4710000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
2C7000
heap default
page read and write
clean
8419000
unkown
page read and write
clean
11BD000
unkown image
page execute read
clean
20000
unkown image
page readonly
clean
65A3000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
75E2000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
9140000
unkown
page read and write
clean
844C000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
67E0000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
140000
unkown
page read and write
clean
939D000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
240000
unkown
page execute and read and write
clean
309E000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
4360000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
110000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
2740000
unkown image
page readonly
clean
2AD0000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
484000
heap default
page read and write
clean
4150000
unkown image
page readonly
clean
3130000
unkown
page read and write
clean
9920000
unkown image
page execute and read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
63D000
unkown
page read and write
clean
8427000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
656A000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
76EB000
unkown
page read and write
clean
6515000
unkown
page read and write
clean
6518000
unkown
page read and write
clean
2F10000
unkown
page read and write
clean
990000
unkown
page read and write
clean
6817000
unkown
page read and write
clean
324000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
703A000
unkown
page read and write
clean
2D32000
unkown image
page read and write
clean
1540000
unkown image
page readonly
clean
4368000
unkown
page read and write
clean
5090000
heap private
page execute and read and write
clean
3200000
unkown
page read and write
clean
4F3D000
unkown
page read and write
clean
2D7000
unkown
page execute and read and write
clean
5B0000
unkown image
page readonly
clean
4F96000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
7707000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
556F000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
6832000
unkown
page read and write
clean
9120000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
2F90000
unkown
page read and write
clean
3200000
unkown
page read and write
clean
2F70000
unkown
page read and write
clean
11E4000
unkown image
page readonly
clean
5180000
heap private
page read and write
clean
20B6000
unkown
page read and write
clean
930000
unkown
page execute and read and write
clean
4AF0000
unkown image
page readonly
clean
73BB000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
3130000
unkown
page read and write
clean
6D2C000
unkown
page read and write
clean
4BEF000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
2F50000
unkown
page read and write
clean
C0C000
unkown
page read and write
clean
2F10000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
83FE000
unkown
page read and write
clean
6B85000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
96E3000
unkown
page read and write
clean
97A0000
unkown
page read and write
clean
4F14000
unkown
page read and write
clean
45B4000
unkown
page read and write
clean
280000
heap default
page read and write
clean
371000
unkown
page read and write
clean
64AA000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
6C7B000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
980000
unkown
page read and write
clean
63A000
unkown
page read and write
clean
6C3D000
unkown
page read and write
clean
67CC000
unkown
page read and write
clean
97E4000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
83F7000
unkown
page read and write
clean
9FB000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
29B000
heap default
page read and write
clean
5DA000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
31D000
heap default
page read and write
clean
728E000
unkown
page read and write
clean
9C0000
unkown
page execute and read and write
clean
140000
unkown image
page readonly
clean
68FC000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
626B000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
8720000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
7CFE000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
243000
heap default
page read and write
clean
67C6000
unkown
page read and write
clean
9140000
unkown
page read and write
clean
980000
unkown
page read and write
clean
6F8B000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
4DB1000
unkown image
page read and write
clean
32A9000
heap private
page read and write
clean
140000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
6600000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
1122000
unkown image
page execute read
clean
489000
heap default
page read and write
clean
6C45000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
30F0000
unkown image
page readonly
clean
2520000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
2959000
unkown
page read and write
clean
42C000
unkown
page read and write
clean
330000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
63EE000
unkown
page read and write
clean
4720000
unkown
page read and write
clean
8470000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
4D20000
unkown
page execute and read and write
clean
4150000
unkown image
page readonly
clean
4513000
unkown
page read and write
clean
630E000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
6B94000
unkown
page read and write
clean
4AF0000
unkown image
page readonly
clean
4BB0000
heap private
page read and write
clean
45B4000
unkown
page read and write
clean
5CF0000
unkown
page read and write
clean
646F000
unkown
page read and write
clean
9863000
unkown
page read and write
clean
211B000
unkown image
page read and write
clean
29B000
heap default
page read and write
clean
6C17000
unkown
page read and write
clean
6C0000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
4388000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
140000
unkown
page read and write
clean
97A0000
unkown
page read and write
clean
75E2000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
6D48000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
3C90000
unkown image
page read and write
clean
4830000
unkown
page read and write
clean
BC0000
unkown
page read and write
clean
62D3000
unkown
page read and write
clean
12A000
unkown
page read and write
clean
980000
unkown
page read and write
clean
59F000
heap default
page read and write
clean
4D70000
unkown image
page readonly
clean
407000
heap default
page read and write
clean
370000
unkown
page execute and read and write
clean
42C000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
4D20000
unkown
page execute and read and write
clean
3DF8000
unkown
page read and write
clean
43B0000
heap private
page read and write
clean
A0000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
110000
unkown
page read and write
clean
6889000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2959000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
9760000
unkown
page read and write
clean
673E000
unkown
page read and write
clean
10F0000
unkown
page read and write
clean
2F60000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
237000
heap default
page read and write
clean
3200000
unkown
page read and write
clean
4593000
unkown
page read and write
clean
243000
heap default
page read and write
clean
651A000
unkown
page read and write
clean
ABE000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
1D7000
unkown
page read and write
clean
2F60000
unkown
page read and write
clean
8427000
unkown
page read and write
clean
97E4000
unkown
page read and write
clean
BBD000
unkown
page read and write
clean
4310000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
5410000
heap private
page read and write
clean
24E0000
unkown
page execute and read and write
clean
4308000
unkown
page read and write
clean
939D000
unkown
page read and write
clean
CDF000
unkown
page read and write
clean
42E000
unkown
page read and write
clean
83F7000
unkown
page read and write
clean
48B0000
unkown
page read and write
clean
11D6000
unkown image
page readonly
clean
5B5000
unkown
page read and write
clean
11E4000
unkown image
page readonly
clean
447A000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
2E2000
unkown
page read and write
clean
AB0000
unkown image
page execute and read and write
clean
65A5000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
4E0000
unkown
page read and write
clean
4900000
heap private
page read and write
clean
4AAD000
unkown
page read and write
clean
9720000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
1120000
unkown image
page readonly
clean
4B9D000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
22E1000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
4E60000
unkown
page read and write
clean
560000
unkown
page read and write
clean
43B0000
heap private
page read and write
clean
45A1000
unkown
page read and write
clean
9B05000
heap private
page read and write
clean
4FB2000
unkown
page read and write
clean
82AF000
unkown
page read and write
clean
944000
unkown
page execute and read and write
clean
27A0000
unkown image
page readonly
clean
75DF000
unkown
page read and write
clean
7FAE000
unkown
page read and write
clean
13C0000
unkown image
page readonly
clean
211B000
unkown image
page read and write
clean
4EED000
unkown
page read and write
clean
AB0000
unkown image
page execute and read and write
clean
6570000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
2480000
unkown
page execute and read and write
clean
36B000
unkown
page read and write
clean
71CE000
unkown
page read and write
clean
110000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
482F000
unkown
page read and write
clean
4200000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
36F000
unkown
page read and write
clean
43A0000
unkown image
page readonly
clean
480000
heap private
page read and write
clean
36B000
unkown
page read and write
clean
98E3000
unkown
page read and write
clean
670000
unkown image
page readonly
clean
13BF000
unkown
page read and write
clean
6B7E000
unkown
page read and write
clean
7703000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
800000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
4720000
unkown
page read and write
clean
D4E000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
3140000
unkown
page read and write
clean
780000
unkown image
page readonly
clean
140000
unkown image
page readonly
clean
8470000
unkown
page read and write
clean
500000
unkown
page read and write
clean
90000
unkown image
page readonly
clean
2F80000
unkown
page read and write
clean
45B4000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
460B000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
211B000
unkown image
page read and write
clean
2A4000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
E4000
heap private
page read and write
clean
4F73000
unkown
page read and write
clean
6797000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
A70000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
30000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
1100000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
49C0000
heap private
page read and write
clean
320000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
530000
heap default
page read and write
clean
4575000
unkown
page read and write
clean
682F000
unkown
page read and write
clean
2670000
unkown
page execute and read and write
clean
4388000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
98A0000
unkown
page read and write
clean
480000
heap private
page read and write
clean
F0000
unkown image
page read and write
clean
808E000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
20DA000
unkown
page read and write
clean
673A000
unkown
page read and write
clean
2AD000
unkown
page execute and read and write
clean
4F82000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
249000
heap default
page read and write
clean
98E3000
unkown
page read and write
clean
939D000
unkown
page read and write
clean
2C79000
unkown image
page read and write
clean
2500000
unkown image
page readonly
clean
66A8000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
4F82000
unkown
page read and write
clean
A2E000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
82B0000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6850000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
9760000
unkown
page read and write
clean
490000
unkown
page read and write
clean
6574000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
6947000
unkown
page read and write
clean
713A000
unkown
page read and write
clean
9A69000
unkown image
page execute and read and write
clean
2F10000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
212B000
unkown image
page read and write
clean
249000
heap default
page read and write
clean
20000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
6DF5000
unkown
page read and write
clean
48C0000
unkown
page execute and read and write
clean
668F000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
3D40000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7B4B000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
5C0000
unkown image
page readonly
clean
5270000
unkown
page execute read
clean
9A69000
unkown image
page execute and read and write
clean
4360000
unkown
page read and write
clean
230000
heap default
page read and write
clean
45A1000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
6C81000
unkown
page read and write
clean
75E9000
unkown
page read and write
clean
B40000
unkown
page execute and read and write
clean
7BD0000
heap private
page read and write
clean
9B00000
heap private
page read and write
clean
1D7000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
4260000
heap private
page read and write
clean
371000
unkown
page read and write
clean
6757000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
6BD4000
unkown
page read and write
clean
4388000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
5A9000
unkown
page read and write
clean
10F8000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
243000
heap default
page read and write
clean
5DF0000
unkown image
page readonly
clean
2AB0000
unkown
page read and write
clean
248000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
250000
heap private
page execute and read and write
clean
913E000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4D60000
unkown image
page readonly
clean
456F000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
30D0000
unkown image
page readonly
clean
3170000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
8355000
unkown
page read and write
clean
4BB0000
heap private
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
E1E000
unkown
page read and write | page guard
clean
2740000
unkown image
page readonly
clean
7C0000
unkown
page read and write
clean
4368000
unkown
page read and write
clean
82B0000
unkown
page read and write
clean
2600000
unkown
page execute and read and write
clean
834B000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
4DC0000
unkown
page read and write
clean
68C0000
unkown
page read and write
clean
4E7F000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
45D6000
unkown
page read and write
clean
64E000
unkown
page read and write
clean
4260000
heap private
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
64BE000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
81AE000
unkown
page read and write
clean
6A27000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
8419000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
49C4000
heap private
page read and write
clean
645B000
unkown
page read and write
clean
9140000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
675B000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
6B73000
unkown
page read and write
clean
46F000
unkown
page read and write
clean
6E1A000
unkown
page read and write
clean
22C000
unkown
page read and write
clean
2F60000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
8374000
unkown
page read and write
clean
6C0B000
unkown
page read and write
clean
26E000
unkown
page read and write
clean
659D000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
820000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
140000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
48B0000
unkown
page read and write
clean
4F57000
unkown
page read and write
clean
6321000
unkown
page read and write
clean
AC4000
unkown
page execute and read and write
clean
3CC0000
unkown image
page readonly
clean
437000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
2533000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
2D2000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
6D40000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6BD6000
unkown
page read and write
clean
4F96000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
E4000
heap private
page read and write
clean
532E000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
2F10000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
6541000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
24F0000
unkown
page execute and read and write
clean
11CB000
unkown image
page execute read
clean
765C000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
32A0000
heap private
page read and write
clean
2F90000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
67D4000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
76E6000
unkown
page read and write
clean
844C000
unkown
page read and write
clean
62A7000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
10000
unkown image
page read and write
clean
469000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
4310000
unkown
page read and write
clean
4200000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
7319000
unkown
page read and write
clean
There are 1455 hidden memdumps, click here to show them.