IOC Report

loading gif

Files

File Path
Type
Category
Malicious
ClaimCopy-539408676-12022021.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\ClaimCopy-539408676-12022021.xlsbE. (copy)
Microsoft Excel 2007+
dropped
malicious
C:\Users\user\Desktop\~$ClaimCopy-539408676-12022021.xlsb
data
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A5812A59.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames 3
dropped
clean
C:\Users\user\Desktop\6FC30000
Microsoft Excel 2007+
dropped
clean
C:\Users\user\Desktop\6FC30000:Zone.Identifier
ASCII text, with CRLF line terminators
modified
clean

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet1.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet2.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet3.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
malicious

URLs

Name
IP
Malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.openformatrg/package/2006/r
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://45.142.211.62/533792932717.dat2nter
unknown
clean
http://schemas.openformatrg/package/2006/content-t
unknown
clean
http://185.82.126.78/533792932717.dat2bus
unknown
clean
http://investor.msn.com/
unknown
clean
http://185.82.126.78/533792932717.dat
185.82.126.78
clean
http://158.69.133.78/533792932717.dat2
158.69.133.78
clean
http://www.%s.comPA
unknown
clean
http://158.69.133.78/533792932717.dat
158.69.133.78
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://185.82.126.78/533792932717.dat2
185.82.126.78
clean
http://schemas.open
unknown
clean
http://servername/isapibackend.dll
unknown
clean
http://45.142.211.62/533792932717.dat
45.142.211.62
clean
http://45.142.211.62/533792932717.dat2
45.142.211.62
clean
There are 12 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
45.142.211.62
unknown
Russian Federation
clean
158.69.133.78
unknown
Canada
clean
185.82.126.78
unknown
Latvia
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
*t-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2F7C7
2F7C7
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
f#-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3D1A1
3D1A1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
There are 25 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1D00000
unkown
page read and write
clean
794E000
unkown
page read and write
clean
536E000
unkown
page read and write
clean
30C0000
heap private
page read and write
clean
3F95000
heap private
page read and write
clean
82FD000
unkown
page read and write
clean
272000
unkown
page read and write
clean
232F000
stack
page read and write
clean
58C3000
unkown
page read and write
clean
2A3000
heap default
page read and write
clean
7E7B000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
4A0000
unkown
page read and write
clean
594D000
unkown
page read and write
clean
227000
unkown
page read and write
clean
7E90000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
58C6000
unkown
page read and write
clean
7B9D000
unkown
page read and write
clean
59AD000
unkown
page read and write
clean
40E0000
unkown
page read and write
clean
24E000
unkown
page read and write
clean
40B5000
unkown
page read and write
clean
593B000
unkown
page read and write
clean
30D000
unkown
page read and write
clean
3E10000
heap private
page read and write
clean
221000
unkown
page read and write
clean
7116000
unkown
page read and write
clean
3F89000
heap private
page read and write
clean
10000
unkown image
page read and write
clean
7050000
unkown
page read and write
clean
1CE0000
unkown
page read and write
clean
836F000
unkown
page read and write
clean
4E96000
unkown
page read and write
clean
6DD6000
unkown
page read and write
clean
486000
unkown
page read and write
clean
7E44000
unkown
page read and write
clean
26A000
heap default
page read and write
clean
6BA5000
heap private
page read and write
clean
210000
unkown
page read and write
clean
590A000
unkown
page read and write
clean
5927000
unkown
page read and write
clean
4D6F000
stack
page read and write
clean
1C0000
unkown
page read and write
clean
3E30000
unkown
page read and write
clean
7E2E000
unkown
page read and write
clean
2F9000
unkown
page read and write
clean
30C000
unkown
page read and write
clean
2130000
heap private
page read and write
clean
31EF000
stack
page read and write
clean
249000
unkown
page read and write
clean
6F90000
unkown
page read and write
clean
109000
unkown
page read and write
clean
3E60000
unkown
page read and write
clean
8237000
unkown
page read and write
clean
220000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6C64000
heap private
page read and write
clean
8341000
unkown
page read and write
clean
7F08000
unkown
page read and write
clean
415000
heap private
page read and write
clean
120000
heap private
page read and write
clean
6A0000
unkown image
page readonly
clean
34CE000
stack
page read and write
clean
248000
unkown
page read and write
clean
826A000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
249000
unkown
page read and write
clean
3220000
unkown
page read and write
clean
2E0000
unkown
page read and write
clean
7F00000
unkown
page read and write
clean
24E0000
unkown
page read and write
clean
2280000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
23E000
unkown
page read and write
clean
83A8000
unkown
page read and write
clean
307F000
stack
page read and write
clean
230000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
2D6000
heap default
page read and write
clean
53F0000
unkown
page read and write
clean
230000
heap default
page read and write
clean
590C000
unkown
page read and write
clean
7050000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
217000
unkown
page read and write
clean
82EF000
unkown
page read and write
clean
6E7F1000
unkown image
page readonly
clean
802B000
unkown
page read and write
clean
8290000
unkown
page read and write
clean
239000
unkown
page read and write
clean
416000
unkown
page read and write
clean
6C60000
heap private
page read and write
clean
386000
unkown
page read and write
clean
4850000
unkown
page read and write
clean
3D0000
heap default
page read and write
clean
337000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
2D0000
heap default
page read and write
clean
3DF0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
281000
unkown
page read and write
clean
2E0000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
5910000
unkown
page read and write
clean
30B8000
unkown
page read and write
clean
40A0000
unkown
page read and write
clean
520000
unkown
page read and write
clean
416000
unkown
page read and write
clean
2C0000
unkown
page read and write
clean
2D9000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7D19000
heap private
page read and write
clean
6FF3000
unkown
page read and write
clean
239000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7E3C000
unkown
page read and write
clean
216B000
heap private
page read and write
clean
838F000
unkown
page read and write
clean
130000
unkown image
page readonly
clean
2E7000
heap default
page read and write
clean
4A6000
unkown
page read and write
clean
2205000
heap private
page read and write
clean
5870000
unkown
page read and write
clean
370000
unkown
page read and write
clean
25A5000
heap private
page read and write
clean
270000
unkown
page read and write
clean
7E40000
unkown
page read and write
clean
5680000
unkown
page read and write
clean
250000
heap private
page read and write
clean
3F35000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
E0000
unkown image
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
1D36000
unkown
page read and write
clean
2AA000
heap default
page read and write
clean
2144000
unkown
page read and write
clean
7E6C000
unkown
page read and write
clean
3200000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
2D7000
unkown
page read and write
clean
1B0000
unkown
page read and write
clean
4AEF000
stack
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
660000
unkown image
page readonly
clean
26A000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
281000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
2F50000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
82AF000
unkown
page read and write
clean
694000
heap private
page read and write
clean
1B0000
heap private
page read and write
clean
220000
heap default
page read and write
clean
58EC000
unkown
page read and write
clean
5927000
unkown
page read and write
clean
1C43000
unkown
page read and write
clean
690000
heap private
page read and write
clean
7F8F000
unkown
page read and write
clean
7C47000
unkown
page read and write
clean
3F09000
heap private
page read and write
clean
6E83B000
unkown image
page read and write
clean
83F2000
unkown
page read and write
clean
220000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7EA6000
unkown
page read and write
clean
8280000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
1C00000
unkown
page read and write
clean
7057000
unkown
page read and write
clean
2FE000
unkown
page read and write
clean
7E4F000
unkown
page read and write
clean
210000
heap default
page read and write
clean
594D000
unkown
page read and write
clean
5720000
unkown
page read and write
clean
82DE000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
8430000
unkown
page read and write
clean
7758000
unkown
page read and write
clean
7030000
unkown
page read and write
clean
7F1D000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
281000
unkown
page read and write
clean
150000
heap private
page read and write
clean
41F000
unkown
page read and write
clean
7A9A000
unkown
page read and write
clean
7EEF000
unkown
page read and write
clean
20F0000
unkown
page read and write
clean
82BC000
unkown
page read and write
clean
7E68000
unkown
page read and write
clean
386000
heap default
page read and write
clean
33BF000
stack
page read and write
clean
26A000
unkown
page read and write
clean
211B000
heap private
page read and write
clean
7F3A000
unkown
page read and write
clean
3FC5000
heap private
page read and write
clean
3F99000
heap private
page read and write
clean
3A60000
unkown image
page readonly
clean
7EDE000
unkown
page read and write
clean
2135000
heap private
page read and write
clean
295000
heap default
page read and write
clean
1C70000
unkown
page read and write
clean
170000
heap private
page read and write
clean
7A52000
unkown
page read and write
clean
288000
unkown
page read and write
clean
49E8000
unkown
page read and write
clean
6C20000
unkown image
page readonly
clean
7726000
unkown
page read and write
clean
154000
unkown
page read and write
clean
7608000
unkown
page read and write
clean
1CE0000
unkown image
page readonly
clean
160000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
40FE000
unkown
page read and write
clean
591F000
unkown
page read and write
clean
7E4C000
unkown
page read and write
clean
6E84C000
unkown image
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
26A000
unkown
page read and write
clean
3F00000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
70000
unkown
page read and write
clean
211000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7D4F000
heap private
page read and write
clean
510000
heap private
page read and write
clean
283000
unkown
page read and write
clean
190000
unkown
page execute and read and write
clean
7B68000
unkown
page read and write
clean
82F3000
unkown
page read and write
clean
262000
unkown
page read and write
clean
190000
unkown
page execute and read and write
clean
590C000
unkown
page read and write
clean
6B40000
unkown
page read and write
clean
7F6B000
unkown
page read and write
clean
7FB1000
unkown
page read and write
clean
1CC3000
unkown
page read and write
clean
155000
heap private
page read and write
clean
7046000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
1CE000
heap default
page read and write
clean
31A000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
7686000
unkown
page read and write
clean
4AC7000
unkown image
page readonly
clean
265000
heap private
page read and write
clean
2500000
unkown
page read and write
clean
8277000
unkown
page read and write
clean
30D0000
unkown
page read and write
clean
1CD6000
unkown
page read and write
clean
2140000
unkown
page read and write
clean
2050000
unkown image
page readonly
clean
1B4000
heap private
page read and write
clean
53F0000
unkown
page read and write
clean
332000
unkown
page read and write
clean
6F79000
unkown
page read and write
clean
7FA8000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
58F0000
unkown
page read and write
clean
225000
unkown
page read and write
clean
4210000
unkown
page read and write
clean
80000
unkown
page read and write
clean
7040000
unkown
page read and write
clean
223B000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
333000
heap default
page read and write
clean
570000
heap private
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
6E84F000
unkown image
page readonly
clean
250000
heap default
page read and write
clean
83B1000
unkown
page read and write
clean
830000
unkown image
page readonly
clean
780D000
unkown
page read and write
clean
590A000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
83FF000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
140000
unkown
page read and write
clean
272000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
4E40000
unkown
page read and write
clean
388000
heap default
page read and write
clean
362000
heap default
page read and write
clean
331000
unkown
page read and write
clean
7E56000
unkown
page read and write
clean
58EC000
unkown
page read and write
clean
364000
heap private
page read and write
clean
262000
unkown
page read and write
clean
30E0000
unkown
page read and write
clean
200000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
58FB000
unkown
page read and write
clean
A0000
unkown
page execute and read and write
clean
4080000
unkown
page read and write
clean
1FA000
heap default
page read and write
clean
7F41000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
3F30000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
6D13000
unkown
page read and write
clean
49B0000
unkown image
page readonly
clean
31E000
heap default
page read and write
clean
5460000
unkown
page read and write
clean
8248000
unkown
page read and write
clean
514000
heap private
page read and write
clean
2130000
unkown
page read and write
clean
710000
unkown image
page readonly
clean
25A000
unkown
page read and write
clean
5906000
unkown
page read and write
clean
8358000
unkown
page read and write
clean
7020000
unkown
page read and write
clean
58C6000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6FBE000
unkown
page read and write
clean
3D6000
heap default
page read and write
clean
7A50000
unkown
page read and write
clean
31A000
unkown
page read and write
clean
3FC9000
heap private
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
322000
unkown
page read and write
clean
3AE0000
unkown image
page readonly
clean
594B000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7000000
unkown
page read and write
clean
4000000
heap private
page read and write
clean
499F000
stack
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
83C2000
unkown
page read and write
clean
3F05000
heap private
page read and write
clean
2175000
heap private
page read and write
clean
160000
unkown
page read and write
clean
24D000
unkown
page read and write
clean
7E6A000
unkown
page read and write
clean
7050000
unkown
page read and write
clean
1D40000
unkown image
page readonly
clean
347000
heap default
page read and write
clean
770000
unkown image
page readonly
clean
5B4000
heap private
page read and write
clean
8232000
unkown
page read and write
clean
3F50000
unkown
page read and write
clean
21AB000
heap private
page read and write
clean
7F4F000
unkown
page read and write
clean
3F18000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
7110000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
822E000
unkown
page read and write
clean
310000
heap default
page read and write
clean
53F0000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
40F5000
unkown
page read and write
clean
7E7B000
unkown
page read and write
clean
340000
heap default
page read and write
clean
7F3D000
unkown
page read and write
clean
5A0000
unkown image
page readonly
clean
392000
heap default
page read and write
clean
331000
unkown
page read and write
clean
40F2000
unkown
page read and write
clean
6ED0000
heap private
page read and write
clean
7F6F000
unkown
page read and write
clean
3A6000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
83EC000
unkown
page read and write
clean
593B000
unkown
page read and write
clean
3230000
heap private
page read and write
clean
23E0000
unkown
page read and write
clean
3E0000
unkown
page read and write
clean
1A0000
heap default
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
40BD000
unkown
page read and write
clean
6E521000
unkown image
page execute read
clean
10000
unkown image
page read and write
clean
2FD000
unkown
page read and write
clean
2570000
unkown image
page readonly
clean
4D40000
unkown
page read and write
clean
7070000
unkown
page read and write
clean
B9F000
stack
page read and write
clean
3DD5000
unkown
page read and write
clean
59C1000
unkown
page read and write
clean
197000
heap default
page read and write
clean
8398000
unkown
page read and write
clean
5400000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
1D9000
unkown
page read and write
clean
592A000
unkown
page read and write
clean
2200000
heap private
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
237000
unkown
page read and write
clean
591F000
unkown
page read and write
clean
262000
unkown
page read and write
clean
7060000
unkown
page read and write
clean
83AD000
unkown
page read and write
clean
5A08000
unkown
page read and write
clean
7A0E000
unkown
page read and write
clean
2050000
heap private
page read and write
clean
36A000
heap default
page read and write
clean
7E98000
unkown
page read and write
clean
4B17000
unkown image
page readonly
clean
24C000
unkown
page read and write
clean
7050000
unkown
page read and write
clean
249000
unkown
page read and write
clean
31F0000
unkown
page read and write
clean
7E3B000
unkown
page read and write
clean
360000
heap private
page read and write
clean
31A000
unkown
page read and write
clean
322000
unkown
page read and write
clean
1C50000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
5946000
unkown
page read and write
clean
271000
unkown
page read and write
clean
5931000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7E7D000
unkown
page read and write
clean
59DE000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
129000
unkown
page read and write
clean
7605000
unkown
page read and write
clean
40B9000
unkown
page read and write
clean
516000
unkown
page read and write
clean
1CC0000
unkown image
page readonly
clean
1C40000
unkown
page read and write
clean
7042000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
3E0000
unkown
page read and write
clean
7F62000
unkown
page read and write
clean
3080000
unkown
page read and write
clean
322000
unkown
page read and write
clean
4C3A000
stack
page read and write
clean
4E5E000
stack
page read and write
clean
8C0000
unkown image
page readonly
clean
82A6000
unkown
page read and write
clean
7F52000
unkown
page read and write
clean
6C30000
unkown image
page readonly
clean
282000
unkown
page read and write
clean
7CA6000
unkown
page read and write
clean
7E77000
unkown
page read and write
clean
7A71000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7E3F000
unkown
page read and write
clean
7002000
unkown
page read and write
clean
5E0000
heap private
page read and write
clean
7A54000
unkown
page read and write
clean
730000
unkown image
page readonly
clean
7E40000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
1C30000
unkown
page read and write
clean
7FC2000
unkown
page read and write
clean
82B4000
unkown
page read and write
clean
86B4000
heap private
page read and write
clean
2010000
unkown image
page readonly
clean
7A0B000
unkown
page read and write
clean
65300000
unkown image
page readonly
clean
7E32000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
58F9000
unkown
page read and write
clean
3F00000
heap private
page read and write
clean
410000
heap private
page read and write
clean
6FE0000
unkown
page read and write
clean
3EF0000
unkown
page read and write
clean
3F30000
heap private
page read and write
clean
720000
unkown image
page readonly
clean
490000
heap private
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
5690000
unkown
page read and write
clean
2560000
unkown
page read and write
clean
31A000
unkown
page read and write
clean
110000
unkown
page execute and read and write
clean
8266000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
83E9000
unkown
page read and write
clean
4E37000
unkown
page read and write
clean
82C1000
unkown
page read and write
clean
7E84000
unkown
page read and write
clean
4200000
unkown
page read and write
clean
1FE0000
unkown image
page readonly
clean
7D7C000
unkown
page read and write
clean
120000
unkown image
page readonly
clean
48B0000
unkown image
page readonly
clean
58F4000
unkown
page read and write
clean
260000
heap private
page read and write
clean
7E36000
unkown
page read and write
clean
227000
unkown
page read and write
clean
539A000
unkown
page read and write
clean
7D10000
heap private
page read and write
clean
4E96000
unkown
page read and write
clean
21E0000
unkown
page read and write
clean
28E000
heap default
page read and write
clean
A9000
unkown
page read and write
clean
3E20000
unkown
page read and write
clean
4860000
unkown
page read and write
clean
8A40000
heap private
page read and write
clean
25D000
unkown
page read and write
clean
4B57000
unkown image
page readonly
clean
3FC0000
heap private
page read and write
clean
440000
heap private
page read and write
clean
7E37000
unkown
page read and write
clean
580000
unkown image
page readonly
clean
4B97000
unkown image
page readonly
clean
4E96000
unkown
page read and write
clean
7870000
unkown
page read and write
clean
2D0000
unkown
page read and write
clean
7E43000
unkown
page read and write
clean
7E93000
unkown
page read and write
clean
1DC0000
unkown image
page readonly
clean
7FEFF1A0000
unkown
page execute read
clean
4E9C000
unkown
page read and write
clean
24C000
unkown
page read and write
clean
6F80000
unkown
page read and write
clean
24E000
heap default
page read and write
clean
F0000
unkown
page read and write
clean
239000
unkown
page read and write
clean
83BA000
unkown
page read and write
clean
77F2000
unkown
page read and write
clean
4940000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
215000
heap default
page read and write
clean
26A000
unkown
page read and write
clean
597C000
unkown
page read and write
clean
8352000
unkown
page read and write
clean
6B60000
unkown
page read and write
clean
5903000
unkown
page read and write
clean
8308000
unkown
page read and write
clean
230000
unkown
page read and write
clean
249000
unkown
page read and write
clean
5903000
unkown
page read and write
clean
7060000
unkown
page read and write
clean
58F4000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
59BC000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
8251000
unkown
page read and write
clean
272000
unkown
page read and write
clean
1C61000
unkown
page read and write
clean
5410000
unkown
page read and write
clean
2E0000
heap default
page read and write
clean
8362000
unkown
page read and write
clean
7FEC000
unkown
page read and write
clean
440000
unkown
page read and write
clean
7E53000
unkown
page read and write
clean
3A90000
unkown image
page readonly
clean
4B10000
unkown
page read and write
clean
564E000
stack
page read and write
clean
B1E000
stack
page read and write
clean
444000
heap private
page read and write
clean
6B50000
unkown
page read and write
clean
365000
heap default
page read and write
clean
833A000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7AD1000
unkown
page read and write
clean
1C98000
unkown
page read and write
clean
278000
unkown
page read and write
clean
4740000
unkown
page read and write
clean
2E2000
unkown
page read and write
clean
59A5000
unkown
page read and write
clean
4E9C000
unkown
page read and write
clean
8261000
unkown
page read and write
clean
23D000
unkown
page read and write
clean
40C0000
unkown
page read and write
clean
331000
unkown
page read and write
clean
434C000
stack
page read and write
clean
7006000
unkown
page read and write
clean
24AE000
stack
page read and write
clean
2D1000
unkown
page read and write
clean
7E7E000
unkown
page read and write
clean
6B70000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
3F85000
heap private
page read and write
clean
3A60000
unkown image
page readonly
clean
8340000
heap private
page read and write
clean
272000
unkown
page read and write
clean
7118000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
2165000
heap private
page read and write
clean
6BA0000
heap private
page read and write
clean
4930000
unkown image
page readonly
clean
7E47000
unkown
page read and write
clean
29B000
heap private
page read and write
clean
8427000
unkown
page read and write
clean
271000
unkown
page read and write
clean
82B8000
unkown
page read and write
clean
281000
unkown
page read and write
clean
2040000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
5660000
unkown
page read and write
clean
5127000
unkown image
page readonly
clean
4E96000
unkown
page read and write
clean
7FBA000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
4970000
unkown image
page readonly
clean
40BB000
unkown
page read and write
clean
310000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
4E0000
unkown image
page readonly
clean
7E20000
unkown
page read and write
clean
110000
unkown
page execute and read and write
clean
1C87000
unkown
page read and write
clean
208B000
heap private
page read and write
clean
4E96000
unkown
page read and write
clean
30A0000
unkown
page read and write
clean
170000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
3D06000
unkown
page read and write
clean
59DE000
unkown
page read and write
clean
910000
unkown image
page readonly
clean
740000
unkown image
page readonly
clean
338000
unkown
page read and write
clean
6D20000
heap private
page read and write
clean
1C3E000
unkown
page read and write
clean
7FE9000
unkown
page read and write
clean
5A73000
unkown image
page read and write
clean
4A97000
unkown image
page readonly
clean
F0000
unkown
page read and write
clean
3F4F000
stack
page read and write
clean
831D000
unkown
page read and write
clean
2F9000
unkown
page read and write
clean
7A0000
unkown image
page readonly
clean
1EA000
heap default
page read and write
clean
3E50000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
7EF3000
unkown
page read and write
clean
827B000
unkown
page read and write
clean
8008000
unkown
page read and write
clean
5A15000
unkown
page read and write
clean
7CC0000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
53F0000
unkown
page read and write
clean
7A00000
unkown
page read and write
clean
8030000
unkown
page read and write
clean
322000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
363000
heap default
page read and write
clean
2F8000
unkown
page read and write
clean
271000
unkown
page read and write
clean
4F40000
unkown image
page readonly
clean
219B000
heap private
page read and write
clean
2D5000
heap default
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
620000
unkown image
page readonly
clean
7FF2000
unkown
page read and write
clean
820000
unkown image
page readonly
clean
4005000
heap private
page read and write
clean
6FB8000
unkown
page read and write
clean
1C9E000
unkown
page read and write
clean
20D0000
unkown image
page readonly
clean
7F94000
unkown
page read and write
clean
788B000
unkown
page read and write
clean
5E4000
heap private
page read and write
clean
54F0000
unkown
page read and write
clean
3210000
unkown image
page read and write
clean
5470000
heap private
page read and write
clean
125000
heap private
page read and write
clean
476000
unkown
page read and write
clean
273000
unkown
page read and write
clean
3F80000
heap private
page read and write
clean
6F50000
unkown image
page readonly
clean
1F3000
heap default
page read and write
clean
2330000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
6B80000
unkown
page read and write
clean
40B0000
unkown
page read and write
clean
5913000
unkown
page read and write
clean
239000
unkown
page read and write
clean
440000
unkown
page read and write
clean
219000
unkown
page read and write
clean
409E000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
6F7C000
unkown
page read and write
clean
8284000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
5931000
unkown
page read and write
clean
395000
heap default
page read and write
clean
786C000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
76AA000
unkown
page read and write
clean
836B000
unkown
page read and write
clean
6F59000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
1D10000
unkown image
page readonly
clean
7112000
unkown
page read and write
clean
7E51000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
77C3000
unkown
page read and write
clean
7F98000
unkown
page read and write
clean
271000
unkown
page read and write
clean
3E00000
unkown
page read and write
clean
7E80000
unkown
page read and write
clean
5540000
unkown
page read and write
clean
20E5000
heap private
page read and write
clean
8394000
unkown
page read and write
clean
3B10000
unkown image
page readonly
clean
5937000
unkown
page read and write
clean
33A000
heap default
page read and write
clean
6DA0000
unkown
page read and write
clean
1CF0000
heap private
page read and write
clean
58F0000
unkown
page read and write
clean
7FAD000
unkown
page read and write
clean
1CA0000
unkown image
page readonly
clean
7625000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
2D6000
unkown
page read and write
clean
48E0000
unkown image
page readonly
clean
2B0000
unkown
page read and write
clean
7080000
heap private
page read and write
clean
31A000
unkown
page read and write
clean
2055000
heap private
page read and write
clean
58E9000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
59CC000
unkown
page read and write
clean
1C33000
unkown
page read and write
clean
70000
unkown image
page read and write
clean
31E000
heap default
page read and write
clean
5B0000
heap private
page read and write
clean
8300000
unkown
page read and write
clean
540A000
unkown
page read and write
clean
292000
heap default
page read and write
clean
83EE000
unkown
page read and write
clean
6B90000
unkown
page read and write
clean
5975000
unkown
page read and write
clean
3A0000
unkown image
page readonly
clean
594B000
unkown
page read and write
clean
834F000
unkown
page read and write
clean
3DD3000
unkown
page read and write
clean
238000
unkown
page read and write
clean
5398000
unkown
page read and write
clean
3A0000
heap default
page read and write
clean
4E0000
unkown
page read and write
clean
800000
unkown image
page readonly
clean
2E0000
heap default
page read and write
clean
429000
unkown
page read and write
clean
2E0000
heap default
page read and write
clean
6B30000
unkown
page read and write
clean
2F9000
unkown
page read and write
clean
1CB0000
unkown image
page readonly
clean
262000
unkown
page read and write
clean
40FA000
unkown
page read and write
clean
7E78000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
49E0000
unkown
page read and write
clean
322000
unkown
page read and write
clean
20E0000
heap private
page read and write
clean
272000
unkown
page read and write
clean
277000
unkown
page read and write
clean
597A000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
30B0000
unkown
page read and write
clean
823F000
unkown
page read and write
clean
3CD0000
unkown
page read and write
clean
40B2000
unkown
page read and write
clean
225000
heap default
page read and write
clean
B0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
190000
heap default
page read and write
clean
4B00000
unkown image
page readonly
clean
49B0000
unkown
page read and write
clean
3E40000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
6FA0000
heap private
page read and write
clean
7F58000
unkown
page read and write
clean
3E68000
unkown
page read and write
clean
220000
unkown
page read and write
clean
64F000
stack
page read and write
clean
58E9000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
271000
unkown
page read and write
clean
1C90000
unkown
page read and write
clean
86B0000
heap private
page read and write
clean
1CE4000
unkown
page read and write
clean
588F000
unkown
page read and write
clean
2170000
heap private
page read and write
clean
2E7000
unkown
page read and write
clean
450000
unkown
page read and write
clean
229000
unkown
page read and write
clean
58B5000
unkown
page read and write
clean
7102000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
833D000
unkown
page read and write
clean
1A9000
unkown
page read and write
clean
592A000
unkown
page read and write
clean
25A9000
heap private
page read and write
clean
6FBA000
unkown
page read and write
clean
217000
heap default
page read and write
clean
53F0000
unkown
page read and write
clean
3E14000
heap private
page read and write
clean
5720000
unkown
page read and write
clean
83FB000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
80000
unkown
page read and write
clean
7E38000
unkown
page read and write
clean
446000
unkown
page read and write
clean
58FB000
unkown
page read and write
clean
7ACF000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
20C0000
unkown image
page readonly
clean
406F000
stack
page read and write
clean
354000
heap default
page read and write
clean
75BB000
unkown
page read and write
clean
41FD000
stack
page read and write
clean
6E520000
unkown image
page readonly
clean
7875000
unkown
page read and write
clean
2F9000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
6F54000
unkown image
page readonly
clean
670000
unkown image
page readonly
clean
7BCE000
stack
page read and write
clean
6FF0000
unkown
page read and write
clean
59B6000
unkown
page read and write
clean
82AB000
unkown
page read and write
clean
40F7000
unkown
page read and write
clean
7FFF000
unkown
page read and write
clean
1CFD000
heap private
page read and write
clean
7120000
heap private
page read and write
clean
222000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
3F90000
heap private
page read and write
clean
3A6000
heap default
page read and write
clean
2F70000
unkown
page read and write
clean
5395000
unkown
page read and write
clean
26A000
unkown
page read and write
clean
1CC0000
unkown
page read and write
clean
3090000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
2580000
unkown image
page readonly
clean
331000
unkown
page read and write
clean
25C000
unkown
page read and write
clean
596F000
unkown
page read and write
clean
40A8000
unkown
page read and write
clean
768D000
unkown
page read and write
clean
7DF5000
unkown
page read and write
clean
249000
unkown
page read and write
clean
30C7000
heap private
page read and write
clean
346000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
160000
unkown image
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
5750000
unkown
page read and write
clean
33C0000
unkown
page read and write
clean
239000
unkown
page read and write
clean
7FFB000
unkown
page read and write
clean
7EFD000
unkown
page read and write
clean
6E848000
unkown image
page write copy
clean
40D0000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
556000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
254000
heap private
page read and write
clean
7EBC000
unkown
page read and write
clean
71A0000
unkown
page read and write
clean
780F000
stack
page read and write
clean
4D6000
unkown
page read and write
clean
574000
heap private
page read and write
clean
5989000
unkown
page read and write
clean
59FF000
unkown
page read and write
clean
6F70000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
1FA0000
unkown image
page readonly
clean
37D000
heap default
page read and write
clean
2D5000
unkown
page read and write
clean
4090000
unkown
page read and write
clean
7EAB000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
4B27000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
5937000
unkown
page read and write
clean
59DF000
unkown
page read and write
clean
78C0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
5878000
unkown
page read and write
clean
215000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
272000
unkown
page read and write
clean
3990000
unkown image
page readonly
clean
F0000
unkown
page read and write
clean
8408000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7FEE000
unkown
page read and write
clean
317000
heap default
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
24D000
unkown
page read and write
clean
5720000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
6F90000
unkown
page read and write
clean
2A0000
unkown
page read and write
clean
470000
unkown
page read and write
clean
7100000
unkown
page read and write
clean
1C65000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
9C0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
1DE000
heap default
page read and write
clean
49D2000
unkown
page read and write
clean
8244000
unkown
page read and write
clean
239000
unkown
page read and write
clean
8027000
unkown
page read and write
clean
2E7000
heap default
page read and write
clean
58BB000
unkown
page read and write
clean
287000
unkown
page read and write
clean
1A7000
heap default
page read and write
clean
C0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
5910000
unkown
page read and write
clean
4070000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
5906000
unkown
page read and write
clean
5697000
unkown
page read and write
clean
174000
heap private
page read and write
clean
2F9000
unkown
page read and write
clean
7E83000
unkown
page read and write
clean
58CB000
unkown
page read and write
clean
7E61000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7E48000
unkown
page read and write
clean
5730000
unkown
page read and write
clean
3F39000
heap private
page read and write
clean
1CF5000
heap private
page read and write
clean
5720000
unkown
page read and write
clean
780000
unkown image
page readonly
clean
2270000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
3F40000
unkown
page read and write
clean
7EB8000
unkown
page read and write
clean
7651000
unkown
page read and write
clean
6F5F000
unkown image
page readonly
clean
2330000
unkown
page read and write
clean
1CAE000
unkown
page read and write
clean
25A0000
heap private
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
262000
unkown
page read and write
clean
245F000
stack
page read and write
clean
3F60000
unkown
page read and write
clean
120000
unkown image
page readonly
clean
5A0B000
unkown
page read and write
clean
333000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
455000
unkown
page read and write
clean
7FBE000
unkown
page read and write
clean
4350000
unkown image
page readonly
clean
7CA8000
unkown
page read and write
clean
290000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
7EC1000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
410000
unkown
page read and write
clean
823B000
unkown
page read and write
clean
824C000
unkown
page read and write
clean
8330000
unkown
page read and write
clean
232000
unkown
page read and write
clean
7F30000
unkown
page read and write
clean
3F20000
unkown
page read and write
clean
6C20000
unkown
page read and write
clean
257000
heap default
page read and write
clean
216000
unkown
page read and write
clean
7E66000
unkown
page read and write
clean
842B000
unkown
page read and write
clean
831A000
stack
page read and write
clean
281000
unkown
page read and write
clean
83BE000
unkown
page read and write
clean
3E70000
heap private
page execute and read and write
clean
53F0000
unkown
page read and write
clean
331000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
58CE000
unkown
page read and write
clean
7CF4000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7AD4000
unkown
page read and write
clean
1E3000
heap default
page read and write
clean
3B0000
unkown
page read and write
clean
263000
heap default
page read and write
clean
5990000
unkown
page read and write
clean
4009000
heap private
page read and write
clean
1CD0000
unkown
page read and write
clean
2160000
heap private
page read and write
clean
7BFF000
unkown
page read and write
clean
4E87000
unkown
page read and write
clean
5913000
unkown
page read and write
clean
130000
unkown image
page readonly
clean
7EB4000
unkown
page read and write
clean
494000
heap private
page read and write
clean
350000
unkown
page read and write
clean
6E844000
unkown image
page read and write
clean
70000
unkown image
page read and write
clean
4E9C000
unkown
page read and write
clean
7B8E000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
2F60000
unkown
page read and write
clean
432000
unkown
page read and write
clean
110000
unkown
page execute and read and write
clean
7CAB000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
56A0000
heap private
page read and write
clean
58F9000
unkown
page read and write
clean
5946000
unkown
page read and write
clean
26D000
unkown
page read and write
clean
34E000
heap default
page read and write
clean
79CB000
unkown
page read and write
clean
7AF0000
unkown
page read and write
clean
59B4000
unkown
page read and write
clean
450000
unkown
page read and write
clean
6FD0000
unkown
page read and write
clean
2149000
unkown
page read and write
clean
158000
unkown
page read and write
clean
4E50000
unkown
page read and write
clean
5320000
unkown
page read and write
clean
7E87000
unkown
page read and write
clean
7EAF000
unkown
page read and write
clean
7E6B000
unkown
page read and write
clean
568C000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
There are 1016 hidden memdumps, click here to show them.