IOC Report

loading gif

Files

File Path
Type
Category
Malicious
instruct_11.21.doc.docm
Microsoft Word 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\warning[1]
GIF image data, version 89a, 36 x 38
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6D3C2DB.gif
GIF image data, version 89a, 774 x 198
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{21724630-2B33-445C-A10E-E71E570B535F}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{70B53CFD-265E-4516-AFB0-C6E692CB3FB3}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A92381E7-919A-4DD3-B53A-282AF29674DF}.tmp
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Public.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Jul 14 02:20:08 2009, mtime=Sat Nov 13 03:59:17 2021, atime=Sat Nov 13 03:59:17 2021, length=4096, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\instruct_11.21.doc.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Sat Nov 13 03:59:11 2021, mtime=Sat Nov 13 03:59:11 2021, atime=Sat Nov 13 03:59:14 2021, length=33868, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\powPowNext.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Sat Nov 13 03:59:17 2021, mtime=Sat Nov 13 03:59:17 2021, atime=Sat Nov 13 03:59:17 2021, length=3346, window=hide
modified
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\Desktop\~$struct_11.21.doc.docm
data
dropped
clean
C:\Users\Public\~$wPowNext.hta
data
dropped
clean
C:\Users\Public\~WRD0000.tmp
HTML document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\users\public\powPowNext.hta (copy)
HTML document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
There are 7 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /Automation -Embedding
malicious
C:\Windows\explorer.exe
c:\windows\explorer c:\users\public\powPowNext.hta
malicious
C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
malicious
C:\Windows\SysWOW64\mshta.exe
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Public\powPowNext.hta"
malicious

URLs

Name
IP
Malicious
http://shoulderelliottd.com/boolk/QlaJk8C6vYqIyEwbdypBHv3yJR/wrWWNCD/77427/bebys8?cid=Bm9cAP&wP8zhkK
unknown
malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.%s.comPA
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean

Domains

Name
IP
Malicious
shoulderelliottd.com
194.62.42.144
malicious

IPs

IP
Domain
Country
Malicious
194.62.42.144
shoulderelliottd.com
Russian Federation
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
ni-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
6k-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
8m-
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
2D6CF
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 21
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
Item 21
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2DF67
2DF67
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
WORDFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
2D6CF
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hta\OpenWithProgids
htafile
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
There are 56 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
4C3000
unkown
page read and write
clean
4CD000
unkown
page read and write
clean
26B000
unkown
page read and write
clean
6623000
unkown
page read and write
clean
264000
heap private
page read and write
clean
55C000
unkown
page read and write
clean
2674000
unkown
page read and write
clean
3D0000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7EF70000
unkown
page execute read
clean
2760000
unkown
page read and write
clean
284000
unkown
page read and write
clean
530000
unkown
page read and write
clean
23E000
heap default
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
6C50000
heap private
page read and write
clean
28F2000
unkown
page read and write
clean
519000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
7288000
heap private
page read and write
clean
54E000
unkown
page read and write
clean
538000
unkown
page read and write
clean
265000
heap default
page read and write
clean
2494000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
4D0000
unkown image
page readonly
clean
249B000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
2B2D000
stack
page read and write
clean
7C52000
unkown
page read and write
clean
230000
heap private
page read and write
clean
55B000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
2D8A000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
51B000
unkown
page read and write
clean
292000
unkown
page read and write
clean
7C74000
unkown
page read and write
clean
24A7000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7C4C000
unkown
page read and write
clean
56F000
unkown
page read and write
clean
65D0000
unkown
page read and write
clean
538000
unkown
page read and write
clean
6622000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7C8E000
unkown
page read and write
clean
2C6000
unkown
page read and write
clean
66C5000
unkown
page read and write
clean
480000
heap default
page read and write
clean
20000
unkown image
page readonly
clean
282000
unkown
page read and write
clean
2495000
unkown
page read and write
clean
A9B000
unkown
page read and write
clean
A82000
unkown
page read and write
clean
516000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
28FE000
stack
page read and write
clean
7CA9000
unkown
page read and write
clean
66C5000
unkown
page read and write
clean
A8D000
unkown
page read and write
clean
A99000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
7284000
heap private
page read and write
clean
2AE000
heap default
page read and write
clean
3AD0000
unkown
page read and write
clean
248A000
unkown
page read and write
clean
2D90000
unkown
page read and write
clean
24A9000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
A4A000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
4D8000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
56F000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
292000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
A95000
unkown
page read and write
clean
600000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
28ED000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
248C000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
2870000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
530000
unkown
page read and write
clean
7C46000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
5C8C000
stack
page read and write
clean
64BD000
stack
page read and write
clean
470000
unkown image
page readonly
clean
2688000
unkown
page read and write
clean
F0000
heap private
page read and write
clean
2B80000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
7C7B000
unkown
page read and write
clean
511000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
4C5000
heap default
page read and write
clean
66AE000
unkown
page read and write
clean
7C46000
unkown
page read and write
clean
3180000
unkown image
page readonly
clean
530000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
AB1000
unkown
page read and write
clean
538000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
A7F000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
54E000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
7E90000
unkown
page read and write
clean
A0A000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
56B000
unkown
page read and write
clean
66C1000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
2485000
unkown
page read and write
clean
24BC000
unkown
page read and write
clean
26B0000
unkown image
page readonly
clean
A7C000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
51B000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
2679000
unkown
page read and write
clean
A81000
unkown
page read and write
clean
4A4000
heap default
page read and write
clean
6623000
unkown
page read and write
clean
5BD0000
heap private
page read and write
clean
7CFD000
unkown
page read and write
clean
249F000
unkown
page read and write
clean
666B000
unkown
page read and write
clean
4EA000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
A99000
unkown
page read and write
clean
7C74000
unkown
page read and write
clean
288000
unkown
page read and write
clean
4E1000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
226F000
stack
page read and write
clean
210000
unkown image
page readonly
clean
2491000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
5EB0000
heap private
page read and write
clean
2D85000
unkown
page read and write
clean
2C00000
unkown
page read and write
clean
52E000
stack
page read and write
clean
7C4F000
unkown
page read and write
clean
A80000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
277000
heap default
page read and write
clean
7C74000
unkown
page read and write
clean
7C5D000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
4CF000
unkown
page read and write
clean
248B000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7C81000
unkown
page read and write
clean
65F4000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7C7D000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7CA5000
unkown
page read and write
clean
510000
unkown
page read and write
clean
6632000
unkown
page read and write
clean
527000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
56F000
unkown
page read and write
clean
52B000
unkown
page read and write
clean
24A6000
unkown
page read and write
clean
529000
unkown
page read and write
clean
265E000
stack
page read and write
clean
2D87000
unkown
page read and write
clean
538000
unkown
page read and write
clean
2D84000
unkown
page read and write
clean
2677000
unkown
page read and write
clean
3060000
unkown
page execute
clean
A99000
unkown
page read and write
clean
6652000
unkown
page read and write
clean
2E9D000
stack
page read and write
clean
7CA9000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
6600000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
650000
unkown image
page readonly
clean
5F33000
unkown
page read and write
clean
A9B000
unkown
page read and write
clean
28E1000
unkown
page read and write
clean
24BA000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
24AE000
unkown
page read and write
clean
260000
unkown
page read and write
clean
275E000
stack
page read and write
clean
662000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
AB4000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
A36000
unkown
page read and write
clean
AB7000
unkown
page read and write
clean
500000
unkown
page read and write
clean
3C56000
heap private
page read and write
clean
A42000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
2AC000
unkown
page read and write
clean
66CA000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
28DE000
stack
page read and write
clean
7CB2000
unkown
page read and write
clean
130000
unkown
page read and write
clean
1C45000
heap private
page read and write
clean
24AD000
unkown
page read and write
clean
519000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
370000
unkown
page read and write
clean
538000
unkown
page read and write
clean
2D84000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
7C4C000
unkown
page read and write
clean
6FEC000
stack
page read and write
clean
207000
heap default
page read and write
clean
7C7D000
unkown
page read and write
clean
29FF000
stack
page read and write
clean
7CB2000
unkown
page read and write
clean
6D0000
heap private
page read and write
clean
2D81000
unkown
page read and write
clean
5F34000
unkown
page read and write
clean
7C74000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
4D1000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
7C08000
unkown
page read and write
clean
52E000
unkown
page read and write
clean
6623000
unkown
page read and write
clean
66C5000
unkown
page read and write
clean
24A0000
unkown
page read and write
clean
1DAB000
heap private
page read and write
clean
249E000
unkown
page read and write
clean
2D87000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
2D82000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
249C000
unkown
page read and write
clean
661A000
unkown
page read and write
clean
28EA000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
3C0000
heap private
page read and write
clean
6627000
unkown
page read and write
clean
661A000
unkown
page read and write
clean
6618000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
728B000
heap private
page read and write
clean
6652000
unkown
page read and write
clean
870000
unkown image
page readonly
clean
249B000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
1D75000
heap private
page read and write
clean
6632000
unkown
page read and write
clean
A61000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
24AB000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
56F000
unkown
page read and write
clean
2BD000
heap default
page read and write
clean
7C70000
unkown
page read and write
clean
A8A000
unkown
page read and write
clean
3C4000
heap private
page read and write
clean
7C7B000
unkown
page read and write
clean
A9B000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
466000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
7C08000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
55B000
unkown
page read and write
clean
656C000
stack
page read and write
clean
66C1000
unkown
page read and write
clean
7EF76000
unkown
page execute read
clean
2488000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
66C5000
unkown
page read and write
clean
A7B000
unkown
page read and write
clean
28E6000
unkown
page read and write
clean
2685000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
66A2000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
6632000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
2C6000
heap default
page read and write
clean
7CA5000
unkown
page read and write
clean
A46000
unkown
page read and write
clean
4C5000
unkown
page read and write
clean
3A90000
heap private
page read and write
clean
7C6E000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
500000
unkown
page read and write
clean
7C48000
unkown
page read and write
clean
6623000
unkown
page read and write
clean
56B000
unkown
page read and write
clean
7EF78000
unkown
page execute read
clean
7BF1000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
229E000
stack
page read and write
clean
66CA000
unkown
page read and write
clean
51B000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
78F000
stack
page read and write
clean
2E4000
heap default
page read and write
clean
2D9000
unkown
page read and write
clean
500000
unkown
page read and write
clean
A92000
unkown
page read and write
clean
248D000
unkown
page read and write
clean
4EA000
unkown
page read and write
clean
524000
unkown
page read and write
clean
406000
unkown
page read and write
clean
28E2000
unkown
page read and write
clean
A63000
unkown
page read and write
clean
500000
heap default
page read and write
clean
5EF0000
heap private
page read and write
clean
517000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
25E4000
unkown image
page readonly
clean
2483000
unkown
page read and write
clean
7C52000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
AB1000
unkown
page read and write
clean
A63000
unkown
page read and write
clean
3B6000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
2F1000
heap default
page read and write
clean
24B0000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
26D000
unkown
page read and write
clean
268D000
unkown
page read and write
clean
AB2000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
56B000
unkown
page read and write
clean
F4000
heap private
page read and write
clean
1FA000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
7CA5000
unkown
page read and write
clean
376000
heap default
page read and write
clean
2D80000
unkown
page read and write
clean
7EF74000
unkown
page execute read
clean
2490000
unkown
page read and write
clean
529000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
7C04000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
310000
heap default
page read and write
clean
54C000
unkown
page read and write
clean
2D60000
unkown
page read and write
clean
2681000
unkown
page read and write
clean
644000
heap private
page read and write
clean
7C5B000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
24BB000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
500000
unkown
page read and write
clean
4D0000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
24B4000
unkown
page read and write
clean
28F1000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
24B4000
unkown
page read and write
clean
297E000
stack
page read and write
clean
2480000
unkown
page read and write
clean
36D000
heap default
page read and write
clean
2D10000
unkown
page read and write
clean
A82000
unkown
page read and write
clean
28E7000
unkown
page read and write
clean
2B30000
unkown
page read and write
clean
292000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
55B000
unkown
page read and write
clean
80E000
stack
page read and write
clean
27DE000
stack
page read and write
clean
A81000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
6617000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
2A2000
unkown
page read and write
clean
2483000
unkown
page read and write
clean
7C81000
unkown
page read and write
clean
2BE000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
28F0000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7C76000
unkown
page read and write
clean
7C74000
unkown
page read and write
clean
510000
unkown
page read and write
clean
430000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
B4F000
stack
page read and write
clean
2673000
unkown
page read and write
clean
52E000
unkown
page read and write
clean
C00000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
54F000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
54D000
unkown
page read and write
clean
3A6000
unkown
page read and write
clean
2672000
unkown
page read and write
clean
A8A000
unkown
page read and write
clean
24B6000
unkown
page read and write
clean
7C81000
unkown
page read and write
clean
A63000
unkown
page read and write
clean
3950000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
667A000
unkown
page read and write
clean
2C3000
unkown
page read and write
clean
110000
unkown
page read and write
clean
5F35000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
4EF000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7C46000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
7CB2000
unkown
page read and write
clean
2D10000
unkown
page read and write
clean
AB1000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
575000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
66C5000
unkown
page read and write
clean
524000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
668A000
unkown
page read and write
clean
2CB000
heap default
page read and write
clean
2499000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
A42000
unkown
page read and write
clean
24AB000
unkown
page read and write
clean
24AC000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
28EB000
unkown
page read and write
clean
52E000
unkown
page read and write
clean
1CC0000
unkown image
page readonly
clean
660000
unkown image
page readonly
clean
2760000
unkown
page read and write
clean
7C5C000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
2D70000
unkown
page read and write
clean
190000
unkown
page read and write
clean
2D74000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
275000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7C74000
unkown
page read and write
clean
267D000
unkown
page read and write
clean
55B000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7C4F000
unkown
page read and write
clean
539000
unkown
page read and write
clean
7C5B000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
219000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
2F20000
heap private
page read and write
clean
A78000
unkown
page read and write
clean
2684000
unkown
page read and write
clean
7C55000
unkown
page read and write
clean
5AAE000
stack
page read and write
clean
7C81000
unkown
page read and write
clean
5F32000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
6600000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
337000
heap default
page read and write
clean
1D70000
heap private
page read and write
clean
7CA5000
unkown
page read and write
clean
7C5A000
unkown
page read and write
clean
2489000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
7CA5000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
D0000
unkown image
page readonly
clean
661A000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
4EF000
unkown
page read and write
clean
2D65000
unkown
page read and write
clean
260000
heap private
page read and write
clean
A7C000
unkown
page read and write
clean
7EF77000
unkown
page readonly
clean
7C70000
unkown
page read and write
clean
7C4F000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
487000
heap default
page read and write
clean
661D000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
510000
unkown
page read and write
clean
28E0000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
529000
unkown
page read and write
clean
234000
heap private
page read and write
clean
30000
unkown image
page readonly
clean
7C8E000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
4EA000
heap default
page read and write
clean
56F000
unkown
page read and write
clean
5B00000
heap private
page read and write
clean
6B90000
heap private
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
524000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
200000
heap default
page read and write
clean
56B000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
7280000
heap private
page read and write
clean
7C84000
unkown
page read and write
clean
A30000
unkown
page read and write
clean
64F000
unkown
page read and write
clean
510000
unkown
page read and write
clean
5C90000
heap private
page read and write
clean
25E0000
unkown image
page readonly
clean
7C8E000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
6EF000
stack
page read and write
clean
665A000
unkown
page read and write
clean
6632000
unkown
page read and write
clean
2B30000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
24A6000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
5D40000
heap private
page read and write
clean
2760000
unkown
page read and write
clean
24B2000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7C72000
unkown
page read and write
clean
AB1000
unkown
page read and write
clean
66C3000
unkown
page read and write
clean
3367000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
7C55000
unkown
page read and write
clean
7CA5000
unkown
page read and write
clean
2683000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
2D74000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
2174000
heap private
page read and write
clean
2680000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
54C000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7C86000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
2D88000
unkown
page read and write
clean
2D76000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
280000
heap default
page read and write
clean
7C74000
unkown
page read and write
clean
AB7000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
66CA000
unkown
page read and write
clean
66CA000
unkown
page read and write
clean
2687000
unkown
page read and write
clean
24B5000
unkown
page read and write
clean
6628000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
7C52000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
1C7B000
heap private
page read and write
clean
276000
unkown
page read and write
clean
3560000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
249B000
unkown
page read and write
clean
4EA000
unkown
page read and write
clean
28EE000
unkown
page read and write
clean
2675000
unkown
page read and write
clean
267C000
unkown
page read and write
clean
7C48000
unkown
page read and write
clean
510000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
7C81000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
28EC000
unkown
page read and write
clean
7C81000
unkown
page read and write
clean
517000
unkown
page read and write
clean
287000
heap default
page read and write
clean
56B000
unkown
page read and write
clean
2690000
unkown
page execute
clean
6616000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
2DD000
heap default
page read and write
clean
517000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
4EF000
heap default
page read and write
clean
7C74000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
288000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
AB1000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7CA5000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7CA5000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
3990000
unkown
page read and write
clean
2B5000
unkown
page read and write
clean
28E9000
unkown
page read and write
clean
28E4000
unkown
page read and write
clean
2A10000
unkown
page execute
clean
7C74000
unkown
page read and write
clean
AA5000
unkown
page read and write
clean
6DF000
heap private
page read and write
clean
10000
unkown image
page read and write
clean
7C81000
unkown
page read and write
clean
A99000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
2040000
unkown image
page readonly
clean
53C000
unkown
page read and write
clean
2CC000
unkown
page read and write
clean
A97000
unkown
page read and write
clean
A65000
unkown
page read and write
clean
180000
unkown
page read and write
clean
683D000
stack
page read and write
clean
7CA9000
unkown
page read and write
clean
A7A000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
28EF000
unkown
page read and write
clean
1C40000
heap private
page read and write
clean
640000
heap private
page read and write
clean
6628000
unkown
page read and write
clean
6673000
unkown
page read and write
clean
28E8000
unkown
page read and write
clean
66CA000
unkown
page read and write
clean
51E000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
65F5000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7C4C000
unkown
page read and write
clean
4D8000
unkown
page read and write
clean
2682000
unkown
page read and write
clean
519000
unkown
page read and write
clean
A7A000
unkown
page read and write
clean
28A000
unkown
page read and write
clean
2492000
unkown
page read and write
clean
3A80000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
3A70000
unkown
page read and write
clean
4EA000
unkown
page read and write
clean
2A0000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
A3A000
unkown
page read and write
clean
53B000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
249B000
unkown
page read and write
clean
26FC000
stack
page read and write
clean
524000
unkown
page read and write
clean
AB4000
unkown
page read and write
clean
2686000
unkown
page read and write
clean
538000
unkown
page read and write
clean
2CF000
heap default
page read and write
clean
7C4C000
unkown
page read and write
clean
248E000
unkown
page read and write
clean
2D85000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
5F31000
unkown
page read and write
clean
56B000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
24B1000
unkown
page read and write
clean
661D000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
AB6000
unkown
page read and write
clean
7C52000
unkown
page read and write
clean
66C2000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
216C000
stack
page read and write
clean
7CA9000
unkown
page read and write
clean
1CD000
unkown
page read and write
clean
A95000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
28E5000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
1DF0000
unkown image
page readonly
clean
6652000
unkown
page read and write
clean
54C000
unkown
page read and write
clean
267F000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
2689000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
661B000
unkown
page read and write
clean
7C86000
unkown
page read and write
clean
7BF0000
unkown
page read and write
clean
7C46000
unkown
page read and write
clean
A27000
unkown
page read and write
clean
690000
unkown image
page readonly
clean
6E0000
unkown image
page readonly
clean
56F000
unkown
page read and write
clean
12D000
unkown
page read and write
clean
A82000
unkown
page read and write
clean
7C7B000
unkown
page read and write
clean
7C81000
unkown
page read and write
clean
661D000
unkown
page read and write
clean
6632000
unkown
page read and write
clean
7C48000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7C46000
unkown
page read and write
clean
2D89000
unkown
page read and write
clean
281000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7EF72000
unkown
page execute read
clean
4EF000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
2D10000
unkown
page read and write
clean
24B9000
unkown
page read and write
clean
25F000
heap default
page read and write
clean
7CA5000
unkown
page read and write
clean
17B000
unkown
page read and write
clean
571000
unkown
page read and write
clean
7CA9000
unkown
page read and write
clean
ABA000
unkown
page read and write
clean
2D8F000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
54C000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
4EF000
unkown
page read and write
clean
51B000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
4D8000
heap default
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7C57000
unkown
page read and write
clean
2D8B000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
A9B000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
2670000
unkown
page read and write
clean
55B000
unkown
page read and write
clean
23CF000
stack
page read and write
clean
A81000
unkown
page read and write
clean
2D87000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
524000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
6D6000
heap private
page read and write
clean
7C5B000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
2497000
unkown
page read and write
clean
A45000
unkown
page read and write
clean
2678000
unkown
page read and write
clean
20B0000
unkown image
page readonly
clean
7C93000
unkown
page read and write
clean
530000
unkown
page read and write
clean
6616000
unkown
page read and write
clean
7C74000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
7C81000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
2879000
unkown
page read and write
clean
AB4000
unkown
page read and write
clean
7C76000
unkown
page read and write
clean
7C7D000
unkown
page read and write
clean
52E000
unkown
page read and write
clean
330000
heap default
page read and write
clean
2A0F000
stack
page read and write
clean
7C72000
unkown
page read and write
clean
1BF0000
unkown image
page readonly
clean
24B8000
unkown
page read and write
clean
65F8000
unkown
page read and write
clean
380000
unkown
page read and write
clean
65DE000
unkown
page read and write
clean
6AED000
stack
page read and write
clean
2D8C000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
173000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
7C5A000
unkown
page read and write
clean
ABF000
unkown
page read and write
clean
7C6E000
unkown
page read and write
clean
2D78000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
28E3000
unkown
page read and write
clean
A81000
unkown
page read and write
clean
7CA5000
unkown
page read and write
clean
2D8E000
unkown
page read and write
clean
3A80000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
A3A000
unkown
page read and write
clean
66CA000
unkown
page read and write
clean
66CC000
unkown
page read and write
clean
7CFD000
unkown
page read and write
clean
7C79000
unkown
page read and write
clean
7C7F000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7C8E000
unkown
page read and write
clean
2D10000
unkown
page read and write
clean
270000
heap default
page read and write
clean
7C70000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
7C5A000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
519000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7FFFFFB0000
unkown image
page readonly
clean
6652000
unkown
page read and write
clean
7C93000
unkown
page read and write
clean
2486000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
249B000
unkown
page read and write
clean
2CB000
unkown
page read and write
clean
A03000
unkown
page read and write
clean
28F3000
unkown
page read and write
clean
298000
unkown
page read and write
clean
7C4F000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7C86000
unkown
page read and write
clean
7C04000
unkown
page read and write
clean
6D8D000
stack
page read and write
clean
6652000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
6590000
heap private
page read and write
clean
2170000
heap private
page read and write
clean
24B7000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
2B0000
unkown
page read and write
clean
5B7C000
stack
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7C59000
unkown
page read and write
clean
661D000
unkown
page read and write
clean
7C70000
unkown
page read and write
clean
6618000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7C5B000
unkown
page read and write
clean
A78000
unkown
page read and write
clean
7C48000
unkown
page read and write
clean
2760000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
3C30000
heap private
page read and write
clean
6682000
unkown
page read and write
clean
292000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7C84000
unkown
page read and write
clean
3BF0000
unkown
page read and write
clean
A7C000
unkown
page read and write
clean
5BCC000
stack
page read and write
clean
529000
unkown
page read and write
clean
66C3000
unkown
page read and write
clean
29B000
unkown
page read and write
clean
51C000
unkown
page read and write
clean
860000
unkown image
page readonly
clean
28A000
unkown
page read and write
clean
7C84000
unkown
page read and write
clean
7C05000
unkown
page read and write
clean
24A8000
unkown
page read and write
clean
37B000
heap default
page read and write
clean
7C44000
unkown
page read and write
clean
2490000
unkown
page read and write
clean
7C72000
unkown
page read and write
clean
249D000
unkown
page read and write
clean
2D79000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
5F30000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
300000
unkown image
page readonly
clean
7C70000
unkown
page read and write
clean
7CB2000
unkown
page read and write
clean
3C38000
heap private
page read and write
clean
249B000
unkown
page read and write
clean
There are 927 hidden memdumps, click here to show them.