IOC Report

loading gif

Files

File Path
Type
Category
Malicious
ClaimCopy-1848214335-12022021.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\ClaimCopy-1848214335-12022021.xlsb.. (copy)
Microsoft Excel 2007+
dropped
malicious
C:\Users\user\Desktop\~$ClaimCopy-1848214335-12022021.xlsb
data
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2E2CF162.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames 3
dropped
clean
C:\Users\user\Desktop\1ED30000
Microsoft Excel 2007+
dropped
clean
C:\Users\user\Desktop\1ED30000:Zone.Identifier
ASCII text, with CRLF line terminators
modified
clean

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet1.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet2.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 C:\ProgramData\Volet3.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
malicious

URLs

Name
IP
Malicious
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://185.82.126.78/710203175032.dat
185.82.126.78
clean
http://schemas.openformatrg/package/2006/content-t
unknown
clean
http://45.142.211.62/710203175032.dat2
45.142.211.62
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://schemas.open
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://158.69.133.78/710203175032.dat
158.69.133.78
clean
http://45.142.211.62/710203175032.dat
45.142.211.62
clean
http://185.82.126.78/710203175032.dat2
185.82.126.78
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://185.82.126.78/710203175032.dat2H
unknown
clean
http://schemas.openformatrg/package/2006/r
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://investor.msn.com/
unknown
clean
http://185.82.126.78/710203175032.dat2work
unknown
clean
http://www.%s.comPA
unknown
clean
http://185.82.126.78/710203175032.dat(.
unknown
clean
http://158.69.133.78/710203175032.dat2
158.69.133.78
clean
http://158.69.133.78/710203175032.dat2l
unknown
clean
http://servername/isapibackend.dll
unknown
clean
http://158.69.133.78/710203175032.dat2t
unknown
clean
There are 15 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
45.142.211.62
unknown
Russian Federation
clean
158.69.133.78
unknown
Canada
clean
185.82.126.78
unknown
Latvia
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
<&,
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2EE16
2EE16
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
:3,
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3E051
3E051
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
There are 25 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7920000
unkown
page read and write
clean
2030000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
5715000
heap private
page read and write
clean
6F01000
heap private
page read and write
clean
46D000
unkown
page read and write
clean
20A0000
unkown image
page readonly
clean
22BF000
stack
page read and write
clean
119000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
47D0000
unkown image
page readonly
clean
5650000
unkown
page read and write
clean
8087000
unkown
page read and write
clean
40BD000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
830F000
unkown
page read and write
clean
100000
unkown
page read and write
clean
7FF8000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
119000
unkown
page read and write
clean
5B8D000
unkown
page read and write
clean
30A000
heap default
page read and write
clean
834F000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
417000
heap default
page read and write
clean
7160000
unkown
page read and write
clean
2C0000
unkown
page read and write
clean
48B0000
unkown image
page readonly
clean
F0000
unkown
page read and write
clean
82A4000
unkown
page read and write
clean
170000
heap private
page read and write
clean
7D06000
unkown
page read and write
clean
7EA0000
unkown
page read and write
clean
3630000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
8449000
unkown
page read and write
clean
6E530000
unkown image
page readonly
clean
83A1000
unkown
page read and write
clean
215000
heap private
page read and write
clean
142000
unkown
page read and write
clean
83CB000
unkown
page read and write
clean
5D0000
heap private
page read and write
clean
690000
unkown image
page readonly
clean
459000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
2000000
unkown image
page readonly
clean
8422000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
28D000
unkown
page read and write
clean
6E858000
unkown image
page write copy
clean
3620000
unkown
page read and write
clean
5480000
heap private
page read and write
clean
3A0000
unkown image
page readonly
clean
4090000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7AB0000
unkown
page read and write
clean
100000
heap default
page read and write
clean
1B9000
unkown
page read and write
clean
730000
unkown image
page readonly
clean
6EC0000
heap private
page read and write
clean
F7000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
5C1F000
unkown
page read and write
clean
2A6000
unkown
page read and write
clean
384000
heap default
page read and write
clean
2320000
unkown
page read and write
clean
280000
unkown
page read and write
clean
474000
heap private
page read and write
clean
1E3000
heap default
page read and write
clean
7BEE000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7EA3000
unkown
page read and write
clean
40B9000
unkown
page read and write
clean
7F18000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
5790000
unkown
page read and write
clean
2040000
heap private
page read and write
clean
326F000
stack
page read and write
clean
3FD0000
unkown
page read and write
clean
410000
heap default
page read and write
clean
5650000
unkown
page read and write
clean
7B50000
unkown
page read and write
clean
159000
unkown
page read and write
clean
5B77000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
6F60000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
82C1000
unkown
page read and write
clean
7AA8000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
40E0000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
220000
unkown
page read and write
clean
170000
unkown
page read and write
clean
7F1C000
unkown
page read and write
clean
59A0000
unkown
page read and write
clean
100000
unkown
page read and write
clean
290000
unkown
page read and write
clean
5B8B000
unkown
page read and write
clean
5AFE000
unkown
page read and write
clean
3160000
unkown
page read and write
clean
5540000
unkown
page read and write
clean
11D000
unkown
page read and write
clean
47A000
unkown
page read and write
clean
F9000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7EA2000
unkown
page read and write
clean
459000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
2EE000
heap default
page read and write
clean
4FD0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
5900000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6F50000
heap private
page read and write
clean
40FA000
unkown
page read and write
clean
239000
unkown
page read and write
clean
142000
unkown
page read and write
clean
805F000
unkown
page read and write
clean
1A4000
unkown
page read and write
clean
7F06000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
830000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
7E96000
unkown
page read and write
clean
4F17000
unkown
page read and write
clean
4C6000
unkown
page read and write
clean
40F7000
unkown
page read and write
clean
5BE5000
unkown
page read and write
clean
564C000
stack
page read and write
clean
5C6F000
unkown
page read and write
clean
2B0000
unkown image
page readonly
clean
7FCB000
unkown
page read and write
clean
2EB0000
unkown
page read and write
clean
7FB8000
unkown
page read and write
clean
6AF000
stack
page read and write
clean
7EAB000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
786D000
unkown
page read and write
clean
5B4C000
unkown
page read and write
clean
77BE000
stack
page read and write
clean
4B27000
unkown image
page readonly
clean
7EF8000
unkown
page read and write
clean
542A000
unkown
page read and write
clean
442000
unkown
page read and write
clean
7A70000
unkown
page read and write
clean
4230000
unkown
page read and write
clean
3F3000
heap default
page read and write
clean
422000
heap default
page read and write
clean
57D0000
unkown
page read and write
clean
459000
unkown
page read and write
clean
5C40000
unkown
page read and write
clean
5660000
unkown
page read and write
clean
6D4000
heap private
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
409E000
unkown
page read and write
clean
83F8000
unkown
page read and write
clean
7A60000
unkown
page read and write
clean
78CC000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
6CE0000
unkown image
page readonly
clean
3290000
unkown
page read and write
clean
1D53000
unkown
page read and write
clean
13A000
unkown
page read and write
clean
7A90000
unkown
page read and write
clean
5B06000
unkown
page read and write
clean
20D0000
heap private
page read and write
clean
151000
unkown
page read and write
clean
32D0000
unkown
page read and write
clean
5428000
unkown
page read and write
clean
351F000
stack
page read and write
clean
7BC8000
unkown
page read and write
clean
3F05000
heap private
page read and write
clean
23EF000
stack
page read and write
clean
7FF4000
unkown
page read and write
clean
240000
unkown
page read and write
clean
3EE000
heap default
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
440000
unkown
page read and write
clean
480000
heap private
page read and write
clean
30000
unkown image
page readonly
clean
275000
heap default
page read and write
clean
83CF000
unkown
page read and write
clean
6E854000
unkown image
page read and write
clean
3FB0000
unkown
page read and write
clean
2020000
heap private
page read and write
clean
440000
heap default
page read and write
clean
6E84B000
unkown image
page read and write
clean
5E0000
unkown image
page readonly
clean
1C66000
unkown
page read and write
clean
1EA000
heap default
page read and write
clean
4B60000
unkown
page read and write
clean
684000
heap private
page read and write
clean
290000
unkown
page read and write
clean
5B39000
unkown
page read and write
clean
8318000
unkown
page read and write
clean
5B8D000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7F14000
unkown
page read and write
clean
6E85F000
unkown image
page readonly
clean
142000
unkown
page read and write
clean
82E0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
13A000
unkown
page read and write
clean
6A0000
unkown image
page readonly
clean
1E0000
unkown image
page read and write
clean
3FE0000
unkown
page read and write
clean
3F0000
unkown
page read and write
clean
485000
heap private
page read and write
clean
24C000
unkown
page read and write
clean
B5F000
stack
page read and write
clean
39D0000
unkown image
page readonly
clean
120000
unkown image
page readonly
clean
7CA7000
unkown
page read and write
clean
2175000
heap private
page read and write
clean
7EC6000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7BC9000
unkown
page read and write
clean
6D20000
unkown image
page readonly
clean
22A0000
heap private
page read and write
clean
2A0000
unkown image
page readonly
clean
7AD1000
unkown
page read and write
clean
44CE000
stack
page read and write
clean
2170000
heap private
page read and write
clean
6F78000
unkown
page read and write
clean
47A000
unkown
page read and write
clean
33C5000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
278000
unkown
page read and write
clean
220000
heap private
page read and write
clean
5AB8000
unkown
page read and write
clean
22A0000
unkown
page read and write
clean
32C0000
unkown
page read and write
clean
5C5C000
unkown
page read and write
clean
7EE7000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7FEFF1A0000
unkown
page execute read
clean
1D50000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
5B53000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
82F0000
unkown
page read and write
clean
7A56000
unkown
page read and write
clean
1D71000
unkown
page read and write
clean
5790000
unkown
page read and write
clean
332000
heap default
page read and write
clean
5BC9000
unkown
page read and write
clean
82E4000
unkown
page read and write
clean
7036000
unkown
page read and write
clean
7170000
unkown
page read and write
clean
760000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
4D96000
unkown
page read and write
clean
40B0000
unkown
page read and write
clean
5AF5000
unkown
page read and write
clean
3F98000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
5B86000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
5B29000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
4A97000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
1D00000
unkown image
page readonly
clean
3E20000
heap private
page read and write
clean
24D000
unkown
page read and write
clean
269000
unkown
page read and write
clean
7A0000
unkown image
page readonly
clean
7133000
unkown
page read and write
clean
403000
heap default
page read and write
clean
3E50000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
3FA000
heap default
page read and write
clean
7823000
unkown
page read and write
clean
2B7000
heap default
page read and write
clean
40B2000
unkown
page read and write
clean
2020000
unkown
page read and write
clean
6D0000
heap private
page read and write
clean
3EF5000
heap private
page read and write
clean
2165000
heap private
page read and write
clean
459000
unkown
page read and write
clean
9B0000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
7F53000
unkown
page read and write
clean
3A50000
unkown image
page readonly
clean
217000
unkown
page read and write
clean
7F7D000
unkown
page read and write
clean
580000
unkown image
page readonly
clean
2010000
unkown image
page readonly
clean
262000
unkown
page read and write
clean
290000
unkown
page execute and read and write
clean
82A8000
unkown
page read and write
clean
7EB1000
unkown
page read and write
clean
510000
unkown image
page readonly
clean
197000
heap default
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
83B0000
heap private
page read and write
clean
7B30000
heap private
page read and write
clean
5B30000
unkown
page read and write
clean
7F0B000
unkown
page read and write
clean
841E000
unkown
page read and write
clean
40D0000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
151000
unkown
page read and write
clean
2165000
heap private
page read and write
clean
4F26000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
3150000
unkown
page read and write
clean
2C6000
unkown
page read and write
clean
8321000
unkown
page read and write
clean
7BC0000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7120000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
8068000
unkown
page read and write
clean
8353000
unkown
page read and write
clean
317000
heap default
page read and write
clean
47A000
unkown
page read and write
clean
3F00000
heap private
page read and write
clean
272000
unkown
page read and write
clean
7110000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
40C0000
unkown
page read and write
clean
845B000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
118000
unkown
page read and write
clean
7180000
heap private
page read and write
clean
3404000
heap private
page read and write
clean
8022000
unkown
page read and write
clean
C9000
unkown
page read and write
clean
5BD0000
unkown
page read and write
clean
239000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
219B000
heap private
page read and write
clean
491000
unkown
page read and write
clean
5B0B000
unkown
page read and write
clean
4F1F000
unkown
page read and write
clean
43C0000
unkown
page read and write
clean
40A0000
unkown
page read and write
clean
2E44000
unkown
page read and write
clean
7FCF000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
2045000
heap private
page read and write
clean
7F68000
unkown
page read and write
clean
239000
unkown
page read and write
clean
848B000
unkown
page read and write
clean
831C000
unkown
page read and write
clean
7E9C000
unkown
page read and write
clean
142000
unkown
page read and write
clean
100000
unkown
page read and write
clean
5B4A000
unkown
page read and write
clean
2025000
heap private
page read and write
clean
40B5000
unkown
page read and write
clean
224000
heap private
page read and write
clean
311E000
stack
page read and write
clean
2B6000
heap default
page read and write
clean
7A60000
unkown
page read and write
clean
484000
heap private
page read and write
clean
2045000
heap private
page read and write
clean
7FB2000
unkown
page read and write
clean
47A000
unkown
page read and write
clean
5B53000
unkown
page read and write
clean
720000
unkown image
page readonly
clean
8487000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
5B34000
unkown
page read and write
clean
7F21000
unkown
page read and write
clean
1D75000
unkown
page read and write
clean
45D000
unkown
page read and write
clean
483000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
839A000
unkown
page read and write
clean
370000
heap default
page read and write
clean
20D5000
heap private
page read and write
clean
5B7B000
unkown
page read and write
clean
51B7000
unkown image
page readonly
clean
3A40000
unkown image
page readonly
clean
5C49000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7668000
unkown
page read and write
clean
5B5F000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
49E8000
unkown
page read and write
clean
8306000
unkown
page read and write
clean
1A8000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
271000
unkown
page read and write
clean
7A92000
unkown
page read and write
clean
5AD0000
unkown
page read and write
clean
7BFD000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
153000
unkown
page read and write
clean
151000
unkown
page read and write
clean
830B000
unkown
page read and write
clean
7000000
unkown
page read and write
clean
7EDB000
unkown
page read and write
clean
7EAC000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
8490000
unkown
page read and write
clean
20C5000
heap private
page read and write
clean
34E000
heap default
page read and write
clean
5B4C000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
11E000
unkown
page read and write
clean
77000
heap default
page read and write
clean
440000
unkown
page read and write
clean
835D000
unkown
page read and write
clean
8008000
unkown
page read and write
clean
480000
unkown
page read and write
clean
65300000
unkown image
page readonly
clean
40BB000
unkown
page read and write
clean
205B000
heap private
page read and write
clean
5790000
unkown
page read and write
clean
492000
unkown
page read and write
clean
497000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
33C3000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
5BEB000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
5B4A000
unkown
page read and write
clean
32B8000
unkown
page read and write
clean
482000
unkown
page read and write
clean
390000
unkown
page execute and read and write
clean
47E000
unkown
page read and write
clean
3D0000
unkown
page read and write
clean
271000
unkown
page read and write
clean
5B7B000
unkown
page read and write
clean
829B000
unkown
page read and write
clean
5B3B000
unkown
page read and write
clean
820000
unkown image
page readonly
clean
7E55000
unkown
page read and write
clean
5C6F000
unkown
page read and write
clean
158000
unkown
page read and write
clean
210000
unkown image
page readonly
clean
160000
unkown image
page read and write
clean
3280000
unkown
page read and write
clean
5CB3000
unkown image
page read and write
clean
219000
unkown
page read and write
clean
70000
heap default
page read and write
clean
1CB0000
unkown image
page readonly
clean
458000
unkown
page read and write
clean
151000
unkown
page read and write
clean
83C2000
unkown
page read and write
clean
24A000
heap default
page read and write
clean
5650000
unkown
page read and write
clean
4080000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
40A8000
unkown
page read and write
clean
7AB2000
unkown
page read and write
clean
F5000
heap default
page read and write
clean
6ECA000
heap private
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
3AC000
heap default
page read and write
clean
7EFE0000
unkown image
page readonly
clean
828E000
unkown
page read and write
clean
590000
unkown image
page readonly
clean
7FFFFFB0000
unkown image
page readonly
clean
4370000
unkown
page read and write
clean
3B10000
unkown image
page readonly
clean
424000
heap private
page read and write
clean
5C0C000
unkown
page read and write
clean
7F3E000
unkown
page read and write
clean
710000
unkown image
page readonly
clean
5B29000
unkown
page read and write
clean
840D000
unkown
page read and write
clean
106000
unkown
page read and write
clean
470000
heap private
page read and write
clean
7EE3000
unkown
page read and write
clean
1B0000
unkown
page read and write
clean
4100000
unkown
page read and write
clean
6F60000
unkown
page read and write
clean
40FE000
unkown
page read and write
clean
5B43000
unkown
page read and write
clean
5B50000
unkown
page read and write
clean
F5000
unkown
page read and write
clean
7FA1000
unkown
page read and write
clean
5BAF000
unkown
page read and write
clean
20C0000
heap private
page read and write
clean
620000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
190000
unkown
page execute and read and write
clean
326000
unkown
page read and write
clean
102000
unkown
page read and write
clean
215000
unkown
page read and write
clean
7EDD000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
2D0000
unkown
page read and write
clean
78EB000
unkown
page read and write
clean
467000
heap default
page read and write
clean
6F7A000
unkown
page read and write
clean
6E531000
unkown image
page execute read
clean
6D2F000
unkown image
page readonly
clean
5B77000
unkown
page read and write
clean
7EE4000
unkown
page read and write
clean
459000
unkown
page read and write
clean
3130000
unkown image
page readonly
clean
8411000
unkown
page read and write
clean
5910000
heap private
page read and write
clean
801A000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
22C0000
unkown
page read and write
clean
83B2000
unkown
page read and write
clean
7E92000
unkown
page read and write
clean
6CB0000
unkown
page read and write
clean
7A60000
unkown
page read and write
clean
4B0000
unkown
page read and write
clean
482000
unkown
page read and write
clean
4E6000
unkown
page read and write
clean
46C000
unkown
page read and write
clean
5B34000
unkown
page read and write
clean
7B31000
unkown
page read and write
clean
1DBE000
unkown
page read and write
clean
5B05000
unkown
page read and write
clean
7BE000
stack
page read and write
clean
6F54000
heap private
page read and write
clean
4740000
unkown image
page readonly
clean
6D29000
unkown image
page readonly
clean
12C000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
8049000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
40A000
heap default
page read and write
clean
7C5F000
unkown
page read and write
clean
390000
unkown
page execute and read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
1D40000
unkown
page read and write
clean
238000
unkown
page read and write
clean
2023000
unkown
page read and write
clean
33B0000
unkown
page read and write
clean
7FEF000
unkown
page read and write
clean
160000
unkown image
page read and write
clean
7EA4000
unkown
page read and write
clean
491000
unkown
page read and write
clean
7EDB000
unkown
page read and write
clean
833E000
unkown
page read and write
clean
2E0000
unkown
page read and write
clean
F0000
unkown
page read and write
clean
239000
unkown
page read and write
clean
4F21000
unkown
page read and write
clean
255000
unkown
page read and write
clean
7F60000
unkown
page read and write
clean
4A00000
unkown image
page readonly
clean
82B1000
unkown
page read and write
clean
8314000
unkown
page read and write
clean
456000
heap default
page read and write
clean
808B000
unkown
page read and write
clean
4CA0000
unkown
page read and write
clean
5B43000
unkown
page read and write
clean
53B0000
unkown
page read and write
clean
5BB5000
unkown
page read and write
clean
805B000
unkown
page read and write
clean
58F0000
unkown
page read and write
clean
40F2000
unkown
page read and write
clean
5B30000
unkown
page read and write
clean
437000
unkown
page read and write
clean
5B67000
unkown
page read and write
clean
262000
unkown
page read and write
clean
7D08000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
8390000
unkown
page read and write
clean
7E97000
unkown
page read and write
clean
44F000
unkown
page read and write
clean
1DB0000
unkown image
page readonly
clean
8090000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7F9D000
unkown
page read and write
clean
2B0000
heap default
page read and write
clean
2310000
unkown
page read and write
clean
5B71000
unkown
page read and write
clean
3F60000
unkown
page read and write
clean
940000
unkown image
page readonly
clean
5BBA000
unkown
page read and write
clean
13A000
unkown
page read and write
clean
439000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
26E000
unkown
page read and write
clean
6CC0000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
7EAF000
unkown
page read and write
clean
7665000
unkown
page read and write
clean
4CDF000
stack
page read and write
clean
76B1000
unkown
page read and write
clean
804E000
unkown
page read and write
clean
462000
unkown
page read and write
clean
3E25000
heap private
page read and write
clean
4927000
unkown image
page readonly
clean
420000
heap private
page read and write
clean
4210000
unkown
page read and write
clean
447000
unkown
page read and write
clean
47A000
unkown
page read and write
clean
6E85C000
unkown image
page read and write
clean
710000
unkown image
page readonly
clean
482000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
271000
unkown
page read and write
clean
20D0000
heap private
page read and write
clean
1CD0000
unkown image
page readonly
clean
205000
heap private
page read and write
clean
5B5F000
unkown
page read and write
clean
110000
unkown
page execute and read and write
clean
7B2F000
unkown
page read and write
clean
E0000
unkown image
page read and write
clean
7EFE0000
unkown image
page readonly
clean
804C000
unkown
page read and write
clean
570C000
unkown
page read and write
clean
845F000
unkown
page read and write
clean
3120000
unkown image
page readonly
clean
2F0000
unkown
page read and write
clean
3B0000
heap default
page read and write
clean
6F7E000
unkown
page read and write
clean
5B6F000
unkown
page read and write
clean
219B000
heap private
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
5BFD000
unkown
page read and write
clean
5C20000
unkown
page read and write
clean
5B0E000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
7F4F000
unkown
page read and write
clean
119000
unkown
page read and write
clean
270000
unkown
page read and write
clean
6E801000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
1D80000
unkown
page read and write
clean
49D2000
unkown
page read and write
clean
2036000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
491000
unkown
page read and write
clean
1B0000
unkown
page read and write
clean
270000
unkown
page read and write
clean
2049000
heap private
page read and write
clean
3C0000
heap private
page read and write
clean
4C6000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
2B0000
heap default
page read and write
clean
83B8000
unkown
page read and write
clean
CA000
heap default
page read and write
clean
44D000
heap default
page read and write
clean
30000
unkown image
page readonly
clean
6D24000
unkown image
page readonly
clean
1D4000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
32E0000
unkown
page read and write
clean
2230000
unkown
page read and write
clean
7A63000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
7A6B000
unkown
page read and write
clean
227000
unkown
page read and write
clean
6CD1000
unkown
page read and write
clean
4D6000
unkown
page read and write
clean
7AB4000
unkown
page read and write
clean
5C69000
unkown
page read and write
clean
271000
unkown
page read and write
clean
7B34000
unkown
page read and write
clean
289000
unkown
page read and write
clean
33F0000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
4ECF000
stack
page read and write
clean
1CE000
heap default
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7685000
unkown
page read and write
clean
490000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
7EC1000
unkown
page read and write
clean
3A0000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
4B6000
unkown
page read and write
clean
7FAF000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
8292000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7E9B000
unkown
page read and write
clean
482000
unkown
page read and write
clean
83AF000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7A80000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
4B90000
unkown
page read and write
clean
7AA2000
unkown
page read and write
clean
7140000
unkown
page read and write
clean
32F0000
heap private
page read and write
clean
3640000
heap private
page read and write
clean
482000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
490000
unkown
page read and write
clean
D0000
unkown
page read and write
clean
841A000
unkown
page read and write
clean
33E0000
unkown
page read and write
clean
151000
unkown
page read and write
clean
4770000
unkown image
page readonly
clean
5B2C000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
82D7000
unkown
page read and write
clean
491000
unkown
page read and write
clean
7D20000
unkown
page read and write
clean
3410000
unkown
page read and write
clean
3FF0000
unkown
page read and write
clean
431000
unkown
page read and write
clean
433E000
stack
page read and write
clean
83F4000
unkown
page read and write
clean
5B06000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
5B65000
unkown
page read and write
clean
1F7000
heap default
page read and write
clean
82C6000
unkown
page read and write
clean
76E6000
unkown
page read and write
clean
200000
heap private
page read and write
clean
900000
unkown image
page readonly
clean
7E8E000
unkown
page read and write
clean
8360000
unkown
page read and write
clean
3647000
heap private
page read and write
clean
3F09000
heap private
page read and write
clean
7EFE0000
unkown image
page readonly
clean
1DA0000
unkown
page read and write
clean
4B10000
unkown
page read and write
clean
7786000
unkown
page read and write
clean
3380000
unkown image
page read and write
clean
107000
unkown
page read and write
clean
83EF000
unkown
page read and write
clean
6F40000
unkown
page read and write
clean
7F9A000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
48A0000
unkown image
page readonly
clean
76ED000
unkown
page read and write
clean
5B8B000
unkown
page read and write
clean
690000
unkown image
page readonly
clean
22DB000
heap private
page read and write
clean
8A6A000
stack
page read and write
clean
3FC0000
unkown
page read and write
clean
79AE000
unkown
page read and write
clean
6CE0000
unkown
page read and write
clean
3556000
unkown
page read and write
clean
1D60000
unkown
page read and write
clean
21E0000
unkown
page read and write
clean
4A87000
unkown image
page readonly
clean
4B70000
unkown
page read and write
clean
770000
unkown image
page readonly
clean
5680000
heap private
page read and write
clean
170000
unkown
page read and write
clean
262000
unkown
page read and write
clean
459000
unkown
page read and write
clean
58DE000
stack
page read and write
clean
7EF3000
unkown
page read and write
clean
480000
heap private
page read and write
clean
45E000
unkown
page read and write
clean
5B71000
unkown
page read and write
clean
277000
unkown
page read and write
clean
13A000
unkown
page read and write
clean
22E000
heap default
page read and write
clean
30000
unkown image
page readonly
clean
7ED7000
unkown
page read and write
clean
425000
heap default
page read and write
clean
5B46000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
5790000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
4B0C000
stack
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
5710000
heap private
page read and write
clean
2C0000
heap private
page read and write
clean
5B0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
229E000
stack
page read and write
clean
3DE000
heap default
page read and write
clean
7F5D000
unkown
page read and write
clean
8052000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
8468000
unkown
page read and write
clean
5C01000
unkown
page read and write
clean
3010000
unkown
page read and write
clean
590000
unkown image
page readonly
clean
1FD0000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
3390000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
491000
unkown
page read and write
clean
3F80000
unkown
page read and write
clean
25A000
unkown
page read and write
clean
1D4E000
unkown
page read and write
clean
5B39000
unkown
page read and write
clean
4A0000
unkown
page read and write
clean
5AB0000
unkown
page read and write
clean
7200000
unkown
page read and write
clean
839D000
unkown
page read and write
clean
7A50000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
E0000
unkown image
page read and write
clean
2E24000
unkown
page read and write
clean
435000
unkown
page read and write
clean
82CA000
unkown
page read and write
clean
5B6F000
unkown
page read and write
clean
269000
unkown
page read and write
clean
210B000
heap private
page read and write
clean
5B67000
unkown
page read and write
clean
2E20000
unkown
page read and write
clean
8408000
unkown
page read and write
clean
4B0000
unkown
page read and write
clean
230000
unkown
page read and write
clean
3370000
unkown image
page readonly
clean
7130000
unkown
page read and write
clean
335000
heap default
page read and write
clean
3E6000
unkown
page read and write
clean
4B6A000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
45B000
heap default
page read and write
clean
1DAE000
unkown
page read and write
clean
7F0F000
unkown
page read and write
clean
8368000
unkown
page read and write
clean
152000
unkown
page read and write
clean
23E000
unkown
page read and write
clean
130000
unkown
page read and write
clean
7A52000
unkown
page read and write
clean
3F50000
unkown
page read and write
clean
243000
heap default
page read and write
clean
680000
heap private
page read and write
clean
410000
unkown
page read and write
clean
2160000
heap private
page read and write
clean
F0000
unkown
page read and write
clean
44D0000
unkown image
page readonly
clean
F1000
unkown
page read and write
clean
844E000
unkown
page read and write
clean
210B000
heap private
page read and write
clean
7F90000
unkown
page read and write
clean
3A0000
heap default
page read and write
clean
3F68000
unkown
page read and write
clean
460000
heap default
page read and write
clean
7EFE0000
unkown image
page readonly
clean
2C6000
unkown
page read and write
clean
5B46000
unkown
page read and write
clean
262000
unkown
page read and write
clean
8011000
unkown
page read and write
clean
420F000
stack
page read and write
clean
7D54000
unkown
page read and write
clean
32A0000
unkown
page read and write
clean
2A0000
unkown
page read and write
clean
1D0000
heap private
page read and write
clean
7E40000
heap private
page read and write
clean
20D5000
heap private
page read and write
clean
53FE000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
1CA0000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
7EA8000
unkown
page read and write
clean
4D86000
unkown
page read and write
clean
7FC2000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
23D000
unkown
page read and write
clean
49B7000
unkown image
page readonly
clean
222000
unkown
page read and write
clean
6F80000
heap private
page read and write
clean
7EA7000
unkown
page read and write
clean
78D0000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
1D97000
unkown
page read and write
clean
310000
heap default
page read and write
clean
1FB0000
unkown image
page readonly
clean
3F70000
unkown
page read and write
clean
7EC2000
unkown
page read and write
clean
24DF000
stack
page read and write
clean
7D0B000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
3EF9000
heap private
page read and write
clean
3A20000
unkown image
page readonly
clean
7EE0000
unkown
page read and write
clean
740000
unkown image
page readonly
clean
770A000
unkown
page read and write
clean
3A7000
heap default
page read and write
clean
1D0000
unkown image
page readonly
clean
4000000
heap private
page execute and read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
8297000
unkown
page read and write
clean
498000
unkown
page read and write
clean
5650000
unkown
page read and write
clean
77B8000
unkown
page read and write
clean
615000
heap private
page read and write
clean
215000
heap default
page read and write
clean
5B6A000
unkown
page read and write
clean
3520000
unkown
page read and write
clean
22A5000
heap private
page read and write
clean
810000
unkown image
page readonly
clean
7142000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
136000
unkown
page read and write
clean
1F0000
heap default
page read and write
clean
3F95000
heap private
page read and write
clean
303000
heap default
page read and write
clean
78D5000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5B50000
unkown
page read and write
clean
7AA0000
unkown
page read and write
clean
7EB6000
unkown
page read and write
clean
46E000
unkown
page read and write
clean
C3000
heap default
page read and write
clean
82AC000
unkown
page read and write
clean
4D3E000
stack
page read and write
clean
5990000
unkown
page read and write
clean
119000
unkown
page read and write
clean
262000
unkown
page read and write
clean
58E3000
unkown
page read and write
clean
120000
unkown image
page readonly
clean
273000
unkown
page read and write
clean
376000
heap default
page read and write
clean
3FA0000
unkown
page read and write
clean
7E98000
unkown
page read and write
clean
7A2B000
unkown
page read and write
clean
1D40000
unkown image
page readonly
clean
2C4000
heap private
page read and write
clean
7AA6000
unkown
page read and write
clean
142000
unkown
page read and write
clean
844C000
unkown
page read and write
clean
2040000
heap private
page read and write
clean
2140000
unkown image
page readonly
clean
32B0000
unkown
page read and write
clean
8452000
unkown
page read and write
clean
761B000
unkown
page read and write
clean
5470000
unkown
page read and write
clean
5B3B000
unkown
page read and write
clean
800D000
unkown
page read and write
clean
1DA8000
unkown
page read and write
clean
7DDC000
unkown
page read and write
clean
2E49000
unkown
page read and write
clean
4E6000
unkown
page read and write
clean
6D50000
heap private
page read and write
clean
3F90000
heap private
page read and write
clean
40F5000
unkown
page read and write
clean
119000
unkown
page read and write
clean
6EB0000
unkown
page read and write
clean
5B2C000
unkown
page read and write
clean
7852000
unkown
page read and write
clean
220000
unkown
page read and write
clean
837D000
unkown
page read and write
clean
AE000
heap default
page read and write
clean
7AB0000
heap private
page read and write
clean
1D43000
unkown
page read and write
clean
493000
unkown
page read and write
clean
6EB7000
unkown
page read and write
clean
7E9F000
unkown
page read and write
clean
5BC1000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
2E30000
unkown
page read and write
clean
2049000
heap private
page read and write
clean
4940000
unkown image
page readonly
clean
3C4000
heap private
page read and write
clean
610000
heap private
page read and write
clean
3400000
heap private
page read and write
clean
272000
heap default
page read and write
clean
4F26000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7AFA000
unkown
page read and write
clean
3E29000
heap private
page read and write
clean
7ECB000
unkown
page read and write
clean
2FFF000
stack
page read and write
clean
2179000
heap private
page read and write
clean
12D000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5D4000
heap private
page read and write
clean
2E90000
unkown
page read and write
clean
5BF4000
unkown
page read and write
clean
211000
unkown
page read and write
clean
3F99000
heap private
page read and write
clean
5700000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
174000
heap private
page read and write
clean
210000
heap private
page read and write
clean
5425000
unkown
page read and write
clean
271000
unkown
page read and write
clean
110000
unkown
page execute and read and write
clean
2F0000
unkown
page read and write
clean
1C30000
unkown
page read and write
clean
5C1F000
unkown
page read and write
clean
481000
unkown
page read and write
clean
3EF0000
heap private
page read and write
clean
2150000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
7ECA000
unkown
page read and write
clean
7146000
unkown
page read and write
clean
20FB000
heap private
page read and write
clean
7EF0000
unkown
page read and write
clean
7A70000
unkown
page read and write
clean
5B86000
unkown
page read and write
clean
4F26000
unkown
page read and write
clean
7E80000
unkown
page read and write
clean
5B65000
unkown
page read and write
clean
39F0000
unkown image
page readonly
clean
829F000
unkown
page read and write
clean
239000
unkown
page read and write
clean
57A0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7FFFFFB0000
unkown image
page readonly
clean
5B6A000
unkown
page read and write
clean
190000
heap default
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
220000
heap default
page read and write
clean
3B7000
heap default
page read and write
clean
4957000
unkown image
page readonly
clean
57C0000
unkown
page read and write
clean
7EA0000
unkown
page read and write
clean
2160000
heap private
page read and write
clean
801E000
unkown
page read and write
clean
7E82000
unkown
page read and write
clean
82DB000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
157000
unkown
page read and write
clean
13A000
unkown
page read and write
clean
435000
heap default
page read and write
clean
446000
unkown
page read and write
clean
There are 1011 hidden memdumps, click here to show them.