IOC Report

loading gif

Files

File Path
Type
Category
Malicious
PO5594.xlsx
CDFV2 Encrypted
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vbc[1].exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
downloaded
malicious
C:\Users\user\Desktop\~$PO5594.xlsx
data
dropped
malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2962AA49.png
PNG image data, 413 x 220, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2DD5845C.png
PNG image data, 1295 x 471, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3275C968.png
PNG image data, 338 x 143, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\35BED6CA.png
PNG image data, 130 x 176, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3AC55E10.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\539060AD.png
PNG image data, 130 x 176, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7E36B934.png
PNG image data, 130 x 176, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\96660C3F.png
PNG image data, 130 x 176, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AFCBBB6.png
PNG image data, 1295 x 471, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BDFF6443.png
PNG image data, 458 x 211, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C46E2207.png
PNG image data, 413 x 220, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\nskF049.tmp\xggenq.dll
PE32 executable (DLL) (native) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\w8ymj9mvxgy277qah473
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF50F0E8E5645B9254.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF5D47A23D2FA502C9.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFF46076212F85A030.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFFBA49336F871D2DD.TMP
CDFV2 Encrypted
dropped
clean
There are 11 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Windows\SysWOW64\NETSTAT.EXE
C:\Windows\SysWOW64\NETSTAT.EXE
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
clean
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\Public\vbc.exe'
clean

URLs

Name
IP
Malicious
http://www.spacex-live.net/ddzw/?h2Mdq=Z+FzwJtUDkwgABdyd+p8UeqxtpX8YY+y3UFx7cJDGSHChxct3TL8QRd2MFxOEFehDmKc8w==&_x=gVp0dvG0DtZT6do0
104.21.75.173
malicious
www.passionfruitny.com/ddzw/
malicious
http://www.schittstore.com/ddzw/?h2Mdq=eu2i37xABBm77RmOTVlK/UzsyDYSkffg03LYHul4MxZENkm7/tK6Jp9Y8VUWWe4q58P2rA==&_x=gVp0dvG0DtZT6do0
66.29.132.90
malicious
http://www.metanetgateway.com/ddzw/?h2Mdq=CC4eYJ6GdM3g7jV/74DGeVNO7dTe5083KAYqQjLLOiGFZCFwrjOGC7P0JmGnSxw4GGM5lA==&_x=gVp0dvG0DtZT6do0
75.2.60.5
malicious
http://103.232.53.25/8880/vbc.exe
103.232.53.25
malicious
http://www.sarahannsartstudio.com/ddzw/?h2Mdq=iXrnxWa2MIQCLF3pcDg6+qoW1dWPNK8gD+C0AcHvSyjXkMlp/HpcZgrhMm+aOjdhifJKjg==&_x=gVp0dvG0DtZT6do0
162.241.253.231
malicious
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://wellformedweb.org/CommentAPI/
unknown
clean
http://www.piriform.com/ccleanerp
unknown
clean
http://www.iis.fhg.de/audioPA
unknown
clean
http://www.mozilla.com0
unknown
clean
https://www.metanetgateway.com/ddzw/
unknown
clean
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://treyresearch.net
unknown
clean
https://www.metanetgateway.com/ddzw/?h2Mdq=CC4eYJ6GdM3g7jV/74DGeVNO7dTe5083KAYqQjLLOiGFZCFwrjOGC7P0J
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://java.sun.com
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://nsis.sf.net/NSIS_Error
unknown
clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
clean
http://investor.msn.com/
unknown
clean
http://www.piriform.com/ccleaner
unknown
clean
http://computername/printers/printername/.printer
unknown
clean
http://www.%s.comPA
unknown
clean
http://www.autoitscript.com/autoit3
unknown
clean
https://support.mozilla.org
unknown
clean
http://servername/isapibackend.dll
unknown
clean
There are 22 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.spacex-live.net
104.21.75.173
malicious
www.metanetgateway.com
75.2.60.5
malicious
sarahannsartstudio.com
162.241.253.231
malicious
schittstore.com
66.29.132.90
malicious
www.sarahannsartstudio.com
unknown
malicious
www.schittstore.com
unknown
malicious

IPs

IP
Domain
Country
Malicious
103.232.53.25
unknown
Viet Nam
malicious
66.29.132.90
schittstore.com
United States
malicious
104.21.75.173
www.spacex-live.net
United States
malicious
75.2.60.5
www.metanetgateway.com
United States
malicious
162.241.253.231
sarahannsartstudio.com
United States
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
wj*
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2DE3E
2DE3E
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
fo*
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3251D
3251D
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\34AD5
34AD5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 21
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3251D
3251D
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
There are 30 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
400000
unkown
page execute and read and write
malicious
2F0000
unkown image
page execute and read and write
malicious
400000
unkown image
page execute and read and write
malicious
9725000
unkown image
page execute and read and write
malicious
3A0000
unkown
page read and write
malicious
400000
unkown
page execute and read and write
malicious
2F90000
unkown
page read and write
malicious
400000
unkown
page execute and read and write
malicious
9725000
unkown image
page execute and read and write
malicious
700000
unkown image
page execute and read and write
malicious
240000
unkown image
page execute and read and write
malicious
80000
unkown image
page execute and read and write
malicious
9B4000
unkown
page execute and read and write
clean
2520000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
8C3E000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
2120000
unkown image
page read and write
clean
7EFDF000
unkown
page read and write
clean
730000
unkown
page execute and read and write
clean
30000
unkown image
page readonly
clean
31D000
heap default
page read and write
clean
212F000
unkown image
page read and write
clean
31FF000
unkown
page read and write
clean
4BB0000
heap private
page read and write
clean
4308000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
4308000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
255000
heap default
page read and write
clean
2971000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
2971000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
237000
heap default
page read and write
clean
50000
unkown image
page readonly
clean
3D40000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
4C7A000
heap private
page read and write
clean
2A20000
unkown
page read and write
clean
25C0000
unkown
page execute and read and write
clean
6D48000
unkown
page read and write
clean
2F20000
unkown
page read and write
clean
7320000
unkown
page read and write
clean
F297000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
8A0000
unkown
page execute and read and write
clean
1E2E000
stack
page read and write
clean
BAA000
unkown
page read and write
clean
2AC0000
unkown
page read and write
clean
29F8000
unkown
page read and write
clean
462000
heap default
page read and write
clean
2AC0000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
22E0000
unkown
page execute and read and write
clean
F1A0000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
2971000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
2D0000
heap default
page read and write
clean
4300000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
75CA000
unkown
page read and write
clean
4D0000
heap default
page read and write
clean
371000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
3E7000
heap default
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
74D3000
heap private
page read and write
clean
2A50000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
230000
heap default
page read and write
clean
2120000
unkown image
page read and write
clean
6E32000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
2750000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
2230000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
4BB0000
heap private
page read and write
clean
9690000
unkown
page read and write
clean
4C9000
heap default
page read and write
clean
2CC7000
unkown image
page readonly
clean
29B000
heap default
page read and write
clean
3CC0000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
330000
heap private
page read and write
clean
60000
unkown image
page readonly
clean
1D10000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
340000
unkown image
page execute and read and write
clean
2780000
unkown
page read and write
clean
533000
heap default
page read and write
clean
7EFD0000
unkown image
page readonly
clean
220000
unkown image
page readonly
clean
9552000
unkown
page read and write
clean
81AE000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
6BBE000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2AB0000
unkown
page read and write
clean
6B0000
unkown
page read and write
clean
110000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
9510000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
110000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
395000
unkown image
page execute and read and write
clean
9510000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
21BF000
unkown
page read and write
clean
2780000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
4513000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
291C000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
820000
unkown
page execute and read and write
clean
1EC0000
unkown image
page readonly
clean
BBE000
stack
page read and write
clean
320000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
43B0000
heap private
page read and write
clean
2AB0000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
7C0000
unkown image
page readonly
clean
4D80000
unkown image
page readonly
clean
4650000
unkown image
page readonly
clean
F0000
unkown image
page read and write
clean
417000
unkown
page read and write
clean
F294000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
46D000
heap default
page read and write
clean
45BE000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
2B0000
heap default
page read and write
clean
7EFD0000
unkown image
page readonly
clean
2750000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
4450000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
2A00000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
4300000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
3130000
unkown image
page readonly
clean
2550000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
9A0000
unkown
page execute and read and write
clean
7329000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
5B0000
unkown image
page readonly
clean
7329000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
2A30000
unkown
page read and write
clean
8C3E000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
44E7000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
6E32000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
291C000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
F280000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
4E60000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
9552000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
8C0000
unkown
page execute and read and write
clean
1E0000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
C40000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
309E000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
2A10000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
4A0000
heap default
page read and write
clean
22D0000
unkown
page execute and read and write
clean
30000
unkown image
page execute and read and write
clean
29D0000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
2460000
unkown
page execute and read and write
clean
7EFC2000
unkown image
page readonly
clean
AD0000
unkown
page execute and read and write
clean
422000
unkown image
page read and write
clean
D30000
unkown image
page execute and read and write
clean
8355000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
2F50000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
4AC0000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
2120000
unkown image
page read and write
clean
190000
unkown image
page readonly
clean
CDE000
stack
page read and write
clean
190000
unkown image
page readonly
clean
8380000
unkown
page read and write
clean
47B000
heap default
page read and write
clean
45A1000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
83F5000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
F300000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
3CA0000
unkown
page read and write
clean
23D000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
42D000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
750000
unkown image
page readonly
clean
9913000
heap private
page read and write
clean
45D6000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
309E000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
1C0000
heap private
page read and write
clean
34E000
unkown
page read and write
clean
28D000
unkown
page read and write
clean
78E0000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
456F000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
36B000
unkown
page read and write
clean
4D30000
unkown image
page readonly
clean
4AF0000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
457A000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
F300000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
4DB1000
unkown image
page read and write
clean
3E50000
unkown image
page readonly
clean
73069000
unkown image
page write copy
clean
34E000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
7EFC2000
unkown image
page readonly
clean
74B0000
heap private
page read and write
clean
1A0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
4C70000
heap private
page read and write
clean
25C3000
unkown
page read and write
clean
6C0000
unkown image
page readonly
clean
6A60000
heap private
page read and write
clean
23D7000
unkown
page execute and read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
1C60000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
20000
unkown image
page readonly
clean
8F0E000
unkown
page read and write
clean
F300000
unkown
page read and write
clean
96D3000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
255000
heap default
page read and write
clean
9552000
unkown
page read and write
clean
1C4000
heap private
page read and write
clean
31FF000
unkown
page read and write
clean
430000
heap default
page read and write
clean
E4000
heap private
page read and write
clean
729A000
unkown
page read and write
clean
3E0000
heap default
page read and write
clean
212F000
unkown image
page read and write
clean
7EFB2000
unkown image
page readonly
clean
E4000
heap private
page read and write
clean
2130000
unkown image
page read and write
clean
2760000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
40C000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
290000
unkown
page read and write
clean
260000
heap default
page read and write
clean
6A20000
unkown
page read and write
clean
19D000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
21CE000
stack
page read and write
clean
3CC0000
unkown image
page readonly
clean
69A9000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
1B65000
heap private
page read and write
clean
DC0000
unkown image
page readonly
clean
23C0000
unkown
page execute and read and write
clean
50000
unkown image
page readonly
clean
190000
unkown image
page readonly
clean
4AF0000
unkown image
page readonly
clean
728E000
unkown
page read and write
clean
6A7000
unkown
page read and write
clean
F11D000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
8380000
unkown
page read and write
clean
95D4000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
98F5000
heap private
page read and write
clean
2550000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
75C0000
unkown
page read and write
clean
C0000
unkown
page read and write
clean
110000
unkown
page read and write
clean
6A4000
unkown
page read and write
clean
2440000
unkown
page execute and read and write
clean
23D000
heap default
page read and write
clean
2110000
unkown image
page read and write
clean
400000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
7B4B000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
E0000
heap private
page read and write
clean
6E37000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
6E32000
unkown
page read and write
clean
840C000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
8B000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
F040000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
95D4000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
409000
unkown image
page write copy
clean
83D6000
unkown
page read and write
clean
249000
heap default
page read and write
clean
98F0000
heap private
page read and write
clean
8720000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
74D3000
heap private
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
1E0000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
78E8000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
2520000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
2AD0000
unkown
page read and write
clean
9510000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
837000
unkown
page execute and read and write
clean
21BF000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
83D6000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
32AE000
heap private
page read and write
clean
2A80000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
69A9000
unkown
page read and write
clean
9590000
unkown
page read and write
clean
6A28000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
36F000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
4F4000
heap default
page read and write
clean
7CFE000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
3A7000
heap default
page read and write
clean
74B4000
heap private
page read and write
clean
190000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
404000
heap default
page read and write
clean
520000
heap default
page read and write
clean
75C0000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
95D4000
unkown
page read and write
clean
BAD000
unkown
page read and write
clean
255000
heap default
page read and write
clean
5390000
heap private
page read and write
clean
7B50000
heap private
page read and write
clean
7EFE0000
unkown image
page readonly
clean
9690000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
6E37000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
3145000
heap private
page read and write
clean
4E5E000
unkown
page read and write
clean
2554000
unkown
page execute and read and write
clean
40E000
unkown
page read and write
clean
249000
heap default
page read and write
clean
2533000
unkown
page read and write
clean
F1A0000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
230000
unkown image
page readonly
clean
F11A000
unkown
page read and write
clean
3A0000
heap default
page read and write
clean
456F000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
32A5000
heap private
page read and write
clean
1E0000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
29D8000
unkown
page read and write
clean
770000
heap private
page read and write
clean
2A50000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
69A9000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
28E1000
unkown
page read and write
clean
20000
unkown image
page read and write
clean
43A0000
unkown image
page readonly
clean
5270000
unkown
page execute read
clean
4160000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
476000
heap default
page read and write
clean
F11A000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
3C90000
unkown image
page read and write
clean
25EA000
unkown image
page read and write
clean
9590000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
F190000
unkown
page read and write
clean
A90000
heap private
page read and write
clean
29D8000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
8320000
unkown
page read and write
clean
83D6000
unkown
page read and write
clean
8D000
unkown
page read and write
clean
2241000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
213F000
unkown image
page read and write
clean
1D7000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
9710000
unkown image
page execute and read and write
clean
73B9000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
2750000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
243000
heap default
page read and write
clean
2740000
unkown image
page readonly
clean
83D2000
unkown
page read and write
clean
78E0000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
8C20000
unkown
page read and write
clean
3145000
heap private
page read and write
clean
7B40000
unkown
page read and write
clean
2AC0000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
532E000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
3D50000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
3D90000
unkown
page read and write
clean
7329000
unkown
page read and write
clean
43B0000
heap private
page read and write
clean
45CF000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
7B50000
heap private
page read and write
clean
8355000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
F280000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
6A20000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
75CA000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
2780000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
90000
unkown
page read and write
clean
2247000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
F1A0000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
2557000
unkown
page execute and read and write
clean
23D0000
unkown
page execute and read and write
clean
40000
unkown image
page readonly
clean
29F8000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
8B0000
unkown
page execute and read and write
clean
1B65000
heap private
page read and write
clean
834000
unkown
page execute and read and write
clean
28E0000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
30A8000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
840C000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
2540000
unkown
page execute and read and write
clean
407000
unkown image
page readonly
clean
220000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
291C000
unkown
page read and write
clean
F040000
unkown
page read and write
clean
AD0000
unkown
page read and write
clean
F291000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
73068000
unkown image
page read and write
clean
30000
unkown image
page readonly
clean
8374000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
28E0000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
2F0000
unkown
page read and write
clean
3140000
heap private
page read and write
clean
4450000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
3CA0000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
3145000
heap private
page read and write
clean
8F0E000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
2130000
unkown image
page read and write
clean
840C000
unkown
page read and write
clean
243000
heap default
page read and write
clean
27E0000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
4B00000
unkown image
page readonly
clean
2A40000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
14F000
stack
page read and write
clean
8C20000
unkown
page read and write
clean
83D2000
unkown
page read and write
clean
2971000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
1B83000
heap private
page read and write
clean
7EFC2000
unkown image
page readonly
clean
20000
unkown
page read and write
clean
417000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
29B000
heap default
page read and write
clean
30D0000
unkown image
page readonly
clean
44E7000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
9653000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
834B000
unkown
page read and write
clean
243000
heap default
page read and write
clean
8414000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
5390000
heap private
page read and write
clean
400000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
7B40000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
371000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
780000
unkown image
page readonly
clean
79F0000
heap private
page read and write
clean
6A28000
unkown
page read and write
clean
2450000
unkown
page execute and read and write
clean
7EFD0000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
213F000
unkown image
page read and write
clean
2646000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
F294000
unkown
page read and write
clean
8380000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
42D000
unkown image
page readonly
clean
42D000
unkown image
page readonly
clean
8C20000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
50000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
6E37000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
9710000
unkown image
page execute and read and write
clean
4650000
unkown image
page readonly
clean
9690000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
7BD0000
heap private
page read and write
clean
4AAD000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
83F5000
unkown
page read and write
clean
9590000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
9913000
heap private
page read and write
clean
3C90000
unkown image
page read and write
clean
32AE000
heap private
page read and write
clean
45B4000
unkown
page read and write
clean
F2A0000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
290000
heap private
page read and write
clean
556F000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
8414000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
F2A0000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
25D0000
unkown
page execute and read and write
clean
E0000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
60000
unkown image
page readonly
clean
2560000
unkown
page execute and read and write
clean
7EFC2000
unkown image
page readonly
clean
30D0000
unkown image
page readonly
clean
4FD000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
291C000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
50000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
4DB1000
unkown image
page read and write
clean
30D0000
unkown image
page readonly
clean
2A20000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
6A0000
unkown
page execute and read and write
clean
46F000
stack
page read and write
clean
27A0000
unkown image
page readonly
clean
4DC0000
unkown
page read and write
clean
3C4000
heap default
page read and write
clean
5D0000
unkown image
page readonly
clean
5B0000
unkown image
page readonly
clean
250000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
4308000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
255000
heap default
page read and write
clean
2A50000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
A7F000
stack
page read and write
clean
F280000
unkown
page read and write
clean
640000
unkown image
page readonly
clean
9B1000
unkown
page execute and read and write
clean
96D3000
unkown
page read and write
clean
C3F000
stack
page read and write
clean
7839000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
2750000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
69A9000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
DD0000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
29D0000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
7EFB2000
unkown image
page readonly
clean
8720000
unkown
page read and write
clean
470000
unkown
page execute and read and write
clean
60000
unkown image
page readonly
clean
4B00000
unkown image
page readonly
clean
2150000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2A30000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
F297000
unkown
page read and write
clean
9765000
unkown image
page execute and read and write
clean
400000
unkown image
page readonly
clean
728E000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
3C90000
unkown image
page read and write
clean
237000
heap default
page read and write
clean
4513000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
371000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
30A8000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
3130000
unkown image
page readonly
clean
7B4B000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
536000
heap private
page read and write
clean
5C0000
unkown image
page readonly
clean
32A0000
heap private
page read and write
clean
4AF0000
unkown image
page readonly
clean
3C90000
unkown image
page read and write
clean
23C000
unkown
page read and write
clean
73061000
unkown image
page readonly
clean
4D70000
unkown image
page readonly
clean
8380000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
7306B000
unkown image
page readonly
clean
F11D000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7EFB0000
unkown image
page readonly
clean
45A1000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
407000
unkown image
page readonly
clean
73050000
unkown image
page readonly
clean
2500000
unkown image
page readonly
clean
5C0000
unkown image
page readonly
clean
249000
heap default
page read and write
clean
C4E000
stack
page read and write
clean
25C3000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
50000
unkown image
page readonly
clean
4513000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
309E000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
249000
heap default
page read and write
clean
1BE0000
unkown image
page readonly
clean
2EC1000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
4D30000
unkown image
page readonly
clean
2100000
unkown image
page readonly
clean
5390000
heap private
page read and write
clean
32A0000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4A7000
heap default
page read and write
clean
4C4000
heap default
page read and write
clean
74B0000
heap private
page read and write
clean
5A0000
unkown
page read and write
clean
330000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
30C0000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
4150000
unkown image
page readonly
clean
2A80000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
7F38000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
43B0000
heap private
page read and write
clean
4AF000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
98F0000
heap private
page read and write
clean
D30000
unkown image
page execute and read and write
clean
2A60000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
2EF0000
unkown
page read and write
clean
77AF000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
7EFD0000
unkown image
page readonly
clean
8C20000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
960000
unkown
page execute and read and write
clean
2962000
unkown image
page read and write
clean
776000
heap private
page read and write
clean
447A000
unkown
page read and write
clean
29D8000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
532E000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
20000
unkown
page read and write
clean
43B0000
heap private
page read and write
clean
437000
heap default
page read and write
clean
2760000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
29D8000
unkown
page read and write
clean
4AF0000
unkown image
page readonly
clean
2100000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
F040000
unkown
page read and write
clean
F2A0000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
4BB0000
heap private
page read and write
clean
30A8000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
B3F000
stack
page read and write
clean
840C000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
77AF000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
F190000
unkown
page read and write
clean
1EA2000
heap private
page read and write
clean
78E8000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
460B000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
22B0000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
744D000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
73051000
unkown image
page execute read
clean
30000
unkown image
page readonly
clean
42D000
unkown image
page readonly
clean
95D4000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
80000
unkown image
page read and write
clean
449C000
unkown
page read and write
clean
4E0000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
23D000
heap default
page read and write
clean
6D40000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
F297000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
243000
heap default
page read and write
clean
2130000
unkown image
page read and write
clean
4D40000
unkown image
page readonly
clean
4160000
unkown
page read and write
clean
330000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
F297000
unkown
page read and write
clean
3100000
heap private
page read and write
clean
3D4B000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
74B0000
heap private
page read and write
clean
5270000
unkown
page execute read
clean
7EFC0000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
78E8000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2A40000
unkown
page read and write
clean
10C000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
D0000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
1DE000
stack
page read and write
clean
75C0000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
6FF000
stack
page read and write
clean
7EFC0000
unkown image
page readonly
clean
4A9000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
1E0000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
42D000
unkown image
page readonly
clean
3E50000
unkown image
page readonly
clean
740000
unkown
page execute and read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
6A60000
heap private
page read and write
clean
798E000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
27E7000
unkown image
page read and write
clean
401000
unkown image
page execute read
clean
409000
unkown image
page write copy
clean
36B000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
2250000
unkown
page read and write
clean
F040000
unkown
page read and write
clean
41D000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
F2A0000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
3140000
heap private
page read and write
clean
8720000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
96D3000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
540000
unkown image
page readonly
clean
78E0000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
24F0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
2780000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4D40000
unkown image
page readonly
clean
190000
unkown image
page readonly
clean
6D0000
unkown image
page readonly
clean
2CC7000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
36F000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
10000
unkown image
page read and write
clean
4575000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
2A80000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
9C0000
unkown
page execute and read and write
clean
F280000
unkown
page read and write
clean
2780000
unkown
page read and write
clean
F291000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
5360000
unkown image
page read and write
clean
32A0000
heap private
page read and write
clean
2A20000
unkown
page read and write
clean
6A1000
unkown
page read and write
clean
83F5000
unkown
page read and write
clean
530000
heap private
page read and write
clean
798E000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
213F000
unkown image
page read and write
clean
840000
unkown
page execute and read and write
clean
2110000
unkown image
page read and write
clean
E4000
heap private
page read and write
clean
110000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
456F000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
3DF8000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
2A90000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
2FE0000
heap private
page read and write
clean
2A50000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
2EC1000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
4E60000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
830000
unkown
page execute and read and write
clean
78E8000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
7EFC0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
F11D000
unkown
page read and write
clean
D40000
unkown image
page readonly
clean
79F0000
heap private
page read and write
clean
2CC7000
unkown image
page readonly
clean
330000
unkown
page read and write
clean
267F000
stack
page read and write
clean
6BBE000
unkown
page read and write
clean
F294000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
460B000
unkown
page read and write
clean
42D000
unkown image
page readonly
clean
2A10000
unkown
page read and write
clean
F280000
unkown
page read and write
clean
98F0000
heap private
page read and write
clean
4B9D000
unkown
page read and write
clean
760000
unkown image
page readonly
clean
8414000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
2140000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
8C3E000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
75CA000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
2244000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
409000
unkown image
page write copy
clean
2AD0000
unkown
page read and write
clean
7320000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
240000
unkown image
page read and write
clean
7839000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
98F5000
heap private
page read and write
clean
30F0000
unkown image
page readonly
clean
9552000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
2760000
unkown image
page readonly
clean
29B000
heap default
page read and write
clean
98F5000
heap private
page read and write
clean
20DA000
unkown
page read and write
clean
230000
heap default
page read and write
clean
5360000
unkown image
page read and write
clean
6A60000
heap private
page read and write
clean
F11A000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
2A00000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
2EF0000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
31D000
heap default
page read and write
clean
4D20000
unkown
page execute and read and write
clean
F190000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
40000
unkown image
page readonly
clean
4308000
unkown
page read and write
clean
A20000
unkown
page execute and read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
A2E000
stack
page read and write
clean
F190000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
430000
unkown image
page readonly
clean
1CE000
unkown
page read and write
clean
42D000
unkown image
page readonly
clean
4D60000
unkown image
page readonly
clean
6D48000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
49E000
stack
page read and write
clean
5360000
unkown image
page read and write
clean
1B60000
heap private
page read and write
clean
F297000
unkown
page read and write
clean
AFF000
stack
page read and write
clean
3D50000
unkown
page read and write
clean
42A000
unkown image
page read and write
clean
2907000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
7D0000
unkown image
page readonly
clean
636000
heap private
page read and write
clean
43A0000
unkown image
page readonly
clean
4D40000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
21BF000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
457A000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
3140000
heap private
page read and write
clean
7F38000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
32A9000
heap private
page read and write
clean
77AF000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
F291000
unkown
page read and write
clean
7F38000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
263C000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
7B4B000
unkown
page read and write
clean
F2A0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
2A40000
unkown
page read and write
clean
710000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
4450000
unkown
page read and write
clean
29F8000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
25C3000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
728E000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
45D6000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
39F000
stack
page read and write
clean
60000
unkown image
page readonly
clean
73B9000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
F11A000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
40C000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
4D60000
unkown image
page readonly
clean
2F50000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
4650000
unkown image
page readonly
clean
F1A0000
unkown
page read and write
clean
2AC0000
unkown
page read and write
clean
2780000
unkown
page read and write
clean
6A28000
unkown
page read and write
clean
27A0000
unkown image
page readonly
clean
3CC0000
unkown image
page readonly
clean
23E0000
unkown
page execute and read and write
clean
31FF000
unkown
page read and write
clean
2A40000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
F040000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
3140000
heap private
page read and write
clean
4300000
unkown
page read and write
clean
9653000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
190000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
73050000
unkown image
page readonly
clean
5270000
unkown
page execute read
clean
6A20000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
4D80000
unkown image
page readonly
clean
2A30000
unkown
page read and write
clean
18C000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
1E84000
heap private
page read and write
clean
F291000
unkown
page read and write
clean
5B0000
unkown
page read and write
clean
4D7000
heap default
page read and write
clean
3145000
heap private
page read and write
clean
1A0000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
4BB0000
heap private
page read and write
clean
73BB000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
371000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
F294000
unkown
page read and write
clean
2B0000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
8374000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
69F000
stack
page read and write
clean
3CA0000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
2EE0000
unkown
page read and write
clean
18B000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
2EF0000
unkown
page read and write
clean
69F000
stack
page read and write
clean
3D4B000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
1A0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
74D3000
heap private
page read and write
clean
263C000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
9765000
unkown image
page execute and read and write
clean
4D60000
unkown image
page readonly
clean
C3F000
stack
page read and write
clean
73B9000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
1E0000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
50000
unkown image
page readonly
clean
6BBE000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
60000
unkown image
page readonly
clean
2980000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
6A20000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
2500000
unkown image
page readonly
clean
4D50000
unkown image
page readonly
clean
7320000
unkown
page read and write
clean
213F000
unkown image
page read and write
clean
2646000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
6E32000
unkown
page read and write
clean
73066000
unkown image
page execute and read and write
clean
3D90000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
3130000
unkown image
page readonly
clean
32A0000
heap private
page read and write
clean
8C3E000
unkown
page read and write
clean
237000
heap default
page read and write
clean
4D70000
unkown image
page readonly
clean
7E1E000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
23D4000
unkown
page execute and read and write
clean
4650000
unkown image
page readonly
clean
20DA000
unkown
page read and write
clean
F11D000
unkown
page read and write
clean
83F5000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
4DC0000
unkown
page read and write
clean
2C6000
unkown
page read and write
clean
9B7000
unkown
page execute and read and write
clean
29B000
heap default
page read and write
clean
30E0000
unkown image
page readonly
clean
8414000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
532E000
unkown
page read and write
clean
4AE000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
6A28000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
1E0000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
1B50000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
F294000
unkown
page read and write
clean
418000
unkown
page read and write
clean
2EF000
stack
page read and write
clean
411000
heap default
page read and write
clean
1F60000
unkown
page read and write
clean
F300000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
4E5E000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
456F000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
20DA000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
38D000
unkown
page read and write
clean
75CA000
unkown
page read and write
clean
2EF0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7E1E000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
4DC0000
unkown
page read and write
clean
409000
unkown image
page read and write
clean
83D2000
unkown
page read and write
clean
8F0E000
unkown
page read and write
clean
237000
heap default
page read and write
clean
F11D000
unkown
page read and write
clean
3130000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
7320000
unkown
page read and write
clean
798E000
unkown
page read and write
clean
1F7D000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
75C0000
unkown
page read and write
clean
F1A0000
unkown
page read and write
clean
1E80000
heap private
page read and write
clean
30F0000
unkown image
page readonly
clean
750000
unkown image
page readonly
clean
9510000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
4DD0000
heap private
page read and write
clean
7EFB0000
unkown image
page readonly
clean
83D6000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
9913000
heap private
page read and write
clean
41D000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
7CFE000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
6E37000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
34E000
unkown
page read and write
clean
9590000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
5410000
heap private
page read and write
clean
7EFB0000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
F291000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
690000
unkown
page read and write
clean
F300000
unkown
page read and write
clean
38A000
unkown
page read and write
clean
78E0000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
29F8000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
7329000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FFFFFC0000
unkown image
page readonly
clean
2F20000
unkown
page read and write
clean
277F000
stack
page read and write
clean
3D40000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
A30000
unkown
page execute and read and write
clean
1CE000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
430000
unkown image
page readonly
clean
44E7000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
9653000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
2551000
unkown
page execute and read and write
clean
630000
heap private
page read and write
clean
330000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
401000
unkown image
page execute read
clean
29D0000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
4DD0000
heap private
page read and write
clean
3140000
heap private
page read and write
clean
447A000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
F190000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
83D2000
unkown
page read and write
clean
There are 1384 hidden memdumps, click here to show them.