# Flog Txt Version 1 # Analyzer Version: 2024.2.1 # Analyzer Build Date: Mar 23 2024 12:02:19 # Log Creation Date: 29.03.2024 05:49:34.131 Process: id = "1" image_name = "lossy.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\lossy.exe" page_root = "0x53aea000" os_pid = "0xd9c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x678" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ebd3" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 119 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 120 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 121 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 122 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 123 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 124 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 125 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 126 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 127 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 128 start_va = 0x8000000 end_va = 0x8008fff monitored = 1 entry_point = 0x8001000 region_type = mapped_file name = "lossy.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lossy.exe") Region: id = 129 start_va = 0x77220000 end_va = 0x7739afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 130 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 131 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 132 start_va = 0x7fff0000 end_va = 0x7ffff079ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 133 start_va = 0x7ffff07a0000 end_va = 0x7ffff0960fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 134 start_va = 0x7ffff0961000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffff0961000" filename = "" Region: id = 273 start_va = 0x400000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 274 start_va = 0x656f0000 end_va = 0x6573ffff monitored = 0 entry_point = 0x65708180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 275 start_va = 0x65670000 end_va = 0x656e9fff monitored = 0 entry_point = 0x65683290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 276 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 277 start_va = 0x65740000 end_va = 0x65747fff monitored = 0 entry_point = 0x657417c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 278 start_va = 0x490000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 279 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 280 start_va = 0x74920000 end_va = 0x74a9dfff monitored = 0 entry_point = 0x749d1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 281 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 282 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 283 start_va = 0x620000 end_va = 0x6ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 284 start_va = 0x73ea0000 end_va = 0x73f31fff monitored = 0 entry_point = 0x73ee0380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 285 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 286 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 287 start_va = 0x74c10000 end_va = 0x74d56fff monitored = 0 entry_point = 0x74c21cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 288 start_va = 0x74250000 end_va = 0x7439efff monitored = 0 entry_point = 0x74306820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 289 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 290 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 291 start_va = 0x6e0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 292 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 293 start_va = 0x7e0000 end_va = 0x967fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 294 start_va = 0x757e0000 end_va = 0x7580afff monitored = 0 entry_point = 0x757e5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 295 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 296 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 297 start_va = 0x970000 end_va = 0xaf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 298 start_va = 0xb00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b00000" filename = "" Region: id = 299 start_va = 0x73e20000 end_va = 0x73e94fff monitored = 0 entry_point = 0x73e59a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 300 start_va = 0x75640000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75675630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 301 start_va = 0x75420000 end_va = 0x755dcfff monitored = 0 entry_point = 0x75502a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 302 start_va = 0x75ad0000 end_va = 0x75b7cfff monitored = 0 entry_point = 0x75ae4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 303 start_va = 0x73f50000 end_va = 0x73f6dfff monitored = 0 entry_point = 0x73f5b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 304 start_va = 0x73f40000 end_va = 0x73f49fff monitored = 0 entry_point = 0x73f42a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 305 start_va = 0x755e0000 end_va = 0x75637fff monitored = 0 entry_point = 0x756225c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 306 start_va = 0x75900000 end_va = 0x75943fff monitored = 0 entry_point = 0x75919d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 307 start_va = 0x1f00000 end_va = 0x1feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 308 start_va = 0x1ff0000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 309 start_va = 0x75b80000 end_va = 0x75c9efff monitored = 0 entry_point = 0x75bc5980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 310 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 311 start_va = 0x1f00000 end_va = 0x1fbbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f00000" filename = "" Region: id = 312 start_va = 0x1fe0000 end_va = 0x1feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 313 start_va = 0x1e0000 end_va = 0x1e3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 314 start_va = 0x73e00000 end_va = 0x73e1cfff monitored = 0 entry_point = 0x73e03b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 315 start_va = 0x490000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 316 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 317 start_va = 0x1f0000 end_va = 0x1f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 318 start_va = 0x440000 end_va = 0x445fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 319 start_va = 0x1e0000 end_va = 0x1e4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 320 start_va = 0x450000 end_va = 0x454fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 321 start_va = 0x460000 end_va = 0x465fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 322 start_va = 0x715c0000 end_va = 0x717ccfff monitored = 0 entry_point = 0x716aacb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 323 start_va = 0x74e30000 end_va = 0x74e74fff monitored = 0 entry_point = 0x74e4de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 324 start_va = 0x75ca0000 end_va = 0x7709efff monitored = 0 entry_point = 0x75e5b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 325 start_va = 0x758c0000 end_va = 0x758f6fff monitored = 0 entry_point = 0x758c3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 326 start_va = 0x74f10000 end_va = 0x75408fff monitored = 0 entry_point = 0x75117610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 327 start_va = 0x75a50000 end_va = 0x75acafff monitored = 0 entry_point = 0x75a6e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 328 start_va = 0x75410000 end_va = 0x7541bfff monitored = 0 entry_point = 0x75413930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 329 start_va = 0x77180000 end_va = 0x7720cfff monitored = 0 entry_point = 0x771c9b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 330 start_va = 0x74d60000 end_va = 0x74da3fff monitored = 0 entry_point = 0x74d67410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 331 start_va = 0x74f00000 end_va = 0x74f0efff monitored = 0 entry_point = 0x74f02e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 332 start_va = 0x1f00000 end_va = 0x1faffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 333 start_va = 0x2120000 end_va = 0x2456fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 334 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 335 start_va = 0x75950000 end_va = 0x75a3afff monitored = 0 entry_point = 0x7598d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 336 start_va = 0x1f00000 end_va = 0x1f90fff monitored = 0 entry_point = 0x1f38cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 337 start_va = 0x1fa0000 end_va = 0x1faffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 338 start_va = 0x6f640000 end_va = 0x6f78afff monitored = 0 entry_point = 0x6f6a1660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 339 start_va = 0x74820000 end_va = 0x748b1fff monitored = 0 entry_point = 0x74858cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 340 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 341 start_va = 0x75700000 end_va = 0x75783fff monitored = 0 entry_point = 0x75726220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 342 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 343 start_va = 0x1f00000 end_va = 0x1f03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 344 start_va = 0x1f10000 end_va = 0x1f54fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 345 start_va = 0x1f60000 end_va = 0x1f63fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 346 start_va = 0x1ff0000 end_va = 0x207dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 347 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 348 start_va = 0x1f70000 end_va = 0x1f80fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 349 start_va = 0x1f90000 end_va = 0x1f93fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 350 start_va = 0x1fb0000 end_va = 0x1fc4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 351 start_va = 0x1fd0000 end_va = 0x1fd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fd0000" filename = "" Region: id = 352 start_va = 0x2080000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 353 start_va = 0x2460000 end_va = 0x255ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 354 start_va = 0x20c0000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 355 start_va = 0x2560000 end_va = 0x265ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002560000" filename = "" Region: id = 356 start_va = 0x2660000 end_va = 0x269ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 357 start_va = 0x26a0000 end_va = 0x279ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026a0000" filename = "" Region: id = 358 start_va = 0x27a0000 end_va = 0x27dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027a0000" filename = "" Region: id = 359 start_va = 0x27e0000 end_va = 0x28dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027e0000" filename = "" Region: id = 360 start_va = 0x28e0000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 361 start_va = 0x2920000 end_va = 0x2a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 362 start_va = 0x717d0000 end_va = 0x7194dfff monitored = 0 entry_point = 0x7184c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 363 start_va = 0x73b30000 end_va = 0x73dfafff monitored = 0 entry_point = 0x73d6c4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 364 start_va = 0x1f90000 end_va = 0x1f90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f90000" filename = "" Region: id = 365 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Thread: id = 1 os_tid = 0xda0 [0113.597] GetModuleHandleA (lpModuleName=0x0) returned 0x8000000 [0113.598] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027 [0113.602] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0113.602] RegisterClassExA (param_1=0x800438c) returned 0xc1dc [0113.602] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe\" " [0113.603] CreateWindowExA (dwExStyle=0x0, lpClassName="verba", lpWindowName="uno momento", dwStyle=0xcf0000, X=-2780, Y=-6520, nWidth=540, nHeight=495, hWndParent=0x0, hMenu=0x0, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0114.166] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x24, wParam=0x0, lParam=0x19fb04) returned 0x0 [0114.168] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x81, wParam=0x0, lParam=0x19faf8) returned 0x1 [0114.175] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x83, wParam=0x0, lParam=0x19fae4) returned 0x0 [0114.188] CreateWindowExA (dwExStyle=0x0, lpClassName="button", lpWindowName="purok", dwStyle=0x10000001, X=10, Y=10, nWidth=320, nHeight=40, hWndParent=0x60046, hMenu=0x2, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0114.188] GetLastError () returned 0x579 [0114.189] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x2b) returned 0x0 [0114.189] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x2a) returned 0xffffffff [0114.189] CreateFileA (lpFileName="prev.inf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\prev.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0114.189] GetLastError () returned 0x2 [0114.189] CreateWindowExA (dwExStyle=0x0, lpClassName="edit", lpWindowName=0x0, dwStyle=0x40000000, X=10, Y=70, nWidth=500, nHeight=430, hWndParent=0x60046, hMenu=0x1, hInstance=0x8000000, lpParam=0x0) returned 0x602a4 [0114.202] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x210, wParam=0x10001, lParam=0x602a4) returned 0x0 [0114.203] CreateWindowExA (dwExStyle=0x0, lpClassName="edit", lpWindowName="purok", dwStyle=0x40000001, X=10, Y=380, nWidth=166, nHeight=34, hWndParent=0x1, hMenu=0x2, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0114.203] GetLastError () returned 0x578 [0114.203] lstrcpyA (in: lpString1=0x800442c, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0114.204] CreateFontIndirectA (lplf=0x8004410) returned 0x190a0552 [0114.204] SendMessageA (hWnd=0x60046, Msg=0x402, wParam=0x80040c4, lParam=0x0) returned 0x0 [0114.205] MoveWindow (hWnd=0x60046, X=-3700, Y=-3080, nWidth=550, nHeight=505, bRepaint=0) [0114.205] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x46, wParam=0x0, lParam=0x19f894) returned 0x0 [0114.205] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x24, wParam=0x0, lParam=0x19f554) returned 0x0 [0114.205] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x83, wParam=0x1, lParam=0x19f86c) returned 0x0 [0114.207] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x47, wParam=0x0, lParam=0x19f894) [0114.207] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x3, wParam=0x0, lParam=0xf417f194) returned 0x0 [0114.208] SendMessageA (hWnd=0x60046, Msg=0x402, wParam=0x8004088, lParam=0x0) returned 0x0 [0114.208] GetWindowRect (in: hWnd=0x60046, lpRect=0x19f3c0 | out: lpRect=0x19f3c0) returned 1 [0114.208] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x2d) [0114.209] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x2e) [0114.209] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x2f) [0114.209] VirtualAlloc (lpAddress=0x400000, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x0 [0114.209] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x30) [0114.209] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x1f0000 [0114.210] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x31) [0114.210] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x440000 [0114.210] VirtualProtect (in: lpAddress=0x440000, dwSize=0x6000, flNewProtect=0x40, lpflOldProtect=0x800410e | out: lpflOldProtect=0x800410e*=0x4) returned 1 [0114.213] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x32) [0114.214] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x0, lParam=0x579) [0114.215] SendMessageA (hWnd=0x60046, Msg=0x111, wParam=0x8004460, lParam=0x34) [0114.215] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.215] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.215] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.215] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.216] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.216] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.216] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.216] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.217] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.217] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.217] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.217] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.218] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.218] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.218] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.218] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.219] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.219] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.219] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.219] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.220] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.220] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.220] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.220] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.221] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.221] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.221] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.221] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.221] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.222] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.222] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.222] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.223] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.224] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.224] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.224] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.224] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.225] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.225] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.225] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.225] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.226] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.226] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.226] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.226] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.226] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.227] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.227] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.227] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.227] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.228] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.228] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.228] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.228] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.229] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.229] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.229] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.229] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.230] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.230] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.230] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.230] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.231] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.231] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.231] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.231] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.232] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.232] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.232] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.232] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.233] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.233] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.233] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.233] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.234] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.234] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.234] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.234] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.235] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.235] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.235] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.235] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.235] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.236] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.236] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.236] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.236] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.237] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.237] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.237] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.237] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.238] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.238] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.244] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.244] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.244] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.245] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.245] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.245] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.245] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.246] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.246] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.246] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.246] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.247] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.247] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.247] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.247] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.247] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.248] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.248] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.248] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.248] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.248] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.249] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.249] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.249] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.249] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.250] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.250] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.250] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.250] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.251] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.251] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.251] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.251] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.251] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.252] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.252] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.252] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.252] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.253] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.253] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.253] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.253] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.254] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.254] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.254] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.255] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.255] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.255] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.255] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.256] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.256] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.256] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.256] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.257] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.257] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.257] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.257] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.258] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.258] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.258] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.258] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.259] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.259] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.259] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.259] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.260] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.260] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.260] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.260] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.261] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.261] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.261] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.261] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.262] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.262] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.262] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.262] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.263] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.263] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.263] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.263] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.264] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.264] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.264] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.264] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.265] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.265] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.265] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.265] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.266] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.266] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.266] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.266] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.267] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.267] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.267] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.267] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.268] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.268] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.268] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.268] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.269] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.269] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.269] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.270] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.270] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.270] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.271] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.271] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.271] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.271] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.272] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.272] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.272] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.272] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.272] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.273] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.273] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.273] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.273] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.274] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.274] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.274] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.274] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.275] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.275] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.275] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.275] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.276] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.276] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.276] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.276] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.277] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.277] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.277] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.277] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.278] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.278] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.278] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.278] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.279] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.279] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.279] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.279] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.280] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.280] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.280] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.280] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.281] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.281] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.281] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.281] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.281] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.282] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.282] SendMessageA (hWnd=0x60046, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0114.318] DestroyWindow (hWnd=0x60046) [0114.318] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0114.325] PostQuitMessage (nExitCode=6) [0114.330] NtdllDefWindowProc_A (hWnd=0x60046, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0114.353] ShowWindow (hWnd=0x0, nCmdShow=1) returned 0 [0114.353] UpdateWindow (hWnd=0x0) returned 0 [0114.353] GetMessageA (in: lpMsg=0x80043bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x80043bc) returned 0 [0114.358] VirtualAlloc (lpAddress=0x0, dwSize=0x48e8, flAllocationType=0x1000, flProtect=0x4) returned 0x450000 [0114.358] UnmapViewOfFile (lpBaseAddress=0x0) returned 0 [0114.358] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x460000 [0114.359] VirtualAlloc (lpAddress=0x460000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x460000 [0114.359] VirtualAlloc (lpAddress=0x461000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x461000 [0114.359] VirtualAlloc (lpAddress=0x462000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x462000 [0114.359] VirtualAlloc (lpAddress=0x463000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x463000 [0114.360] VirtualAlloc (lpAddress=0x464000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x464000 [0114.360] VirtualAlloc (lpAddress=0x465000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x465000 [0114.360] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x715c0000 [0114.461] GetProcAddress (hModule=0x715c0000, lpProcName="HttpSendRequestW") returned 0x71686ef0 [0114.461] GetProcAddress (hModule=0x715c0000, lpProcName="InternetSetOptionW") returned 0x7168da70 [0114.461] GetProcAddress (hModule=0x715c0000, lpProcName="InternetQueryOptionW") returned 0x7168cd20 [0114.462] GetProcAddress (hModule=0x715c0000, lpProcName="HttpOpenRequestW") returned 0x71640fd0 [0114.462] GetProcAddress (hModule=0x715c0000, lpProcName="HttpQueryInfoW") returned 0x7168f060 [0114.462] GetProcAddress (hModule=0x715c0000, lpProcName="InternetReadFile") returned 0x71647320 [0114.462] GetProcAddress (hModule=0x715c0000, lpProcName="InternetConnectW") returned 0x716745f0 [0114.462] GetProcAddress (hModule=0x715c0000, lpProcName="InternetOpenW") returned 0x71688490 [0114.462] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x770a0000 [0114.462] GetProcAddress (hModule=0x770a0000, lpProcName="GetTempPathW") returned 0x770c6b30 [0114.462] GetProcAddress (hModule=0x770a0000, lpProcName="GetFileSize") returned 0x770c6a70 [0114.462] GetProcAddress (hModule=0x770a0000, lpProcName="GetCurrentDirectoryW") returned 0x770ba9a0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteFileW") returned 0x770c68c0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="CloseHandle") returned 0x770c6630 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="WriteFile") returned 0x770c6ca0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="lstrcmpW") returned 0x770b7970 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="ReadFile") returned 0x770c6bb0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="GetModuleHandleW") returned 0x770b9bc0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="ExitProcess") returned 0x770c7b30 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="HeapCreate") returned 0x770ba100 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="HeapAlloc") returned 0x77252bd0 [0114.463] GetProcAddress (hModule=0x770a0000, lpProcName="GetModuleFileNameW") returned 0x770b9b00 [0114.464] GetProcAddress (hModule=0x770a0000, lpProcName="CreateFileW") returned 0x770c6890 [0114.464] GetProcAddress (hModule=0x770a0000, lpProcName="lstrlenW") returned 0x770b3690 [0114.464] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74c10000 [0114.464] GetProcAddress (hModule=0x74c10000, lpProcName="wsprintfW") returned 0x74c3f890 [0114.464] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75ca0000 [0115.951] GetProcAddress (hModule=0x75ca0000, lpProcName="ShellExecuteW") returned 0x75e3d9f0 [0115.951] VirtualProtect (in: lpAddress=0x460000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x19ff1c | out: lpflOldProtect=0x19ff1c*=0x4) returned 1 [0115.951] VirtualProtect (in: lpAddress=0x461000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0115.952] VirtualProtect (in: lpAddress=0x462000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0115.953] VirtualProtect (in: lpAddress=0x463000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0115.953] VirtualProtect (in: lpAddress=0x464000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0115.954] VirtualProtect (in: lpAddress=0x465000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0115.954] VirtualFree (lpAddress=0x450000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.957] GetModuleHandleW (lpModuleName=0x0) returned 0x460000 [0115.957] HeapCreate (flOptions=0x0, dwInitialSize=0x2000, dwMaximumSize=0x0) returned 0x1fa0000 [0115.958] RtlAllocateHeap (HeapHandle=0x1fa0000, Flags=0x8, Size=0x2000) returned 0x1fa05a8 [0115.958] RtlAllocateHeap (HeapHandle=0x1fa0000, Flags=0x8, Size=0x2000) returned 0x1fa25b0 [0115.958] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1fa05a8, nSize=0x2000 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lossy.exe")) returned 0x27 [0115.958] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x1fa25b0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0115.959] wsprintfW (in: param_1=0x1fa25b0, param_2="%s%s" | out: param_1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe") returned 46 [0115.959] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lossy.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0115.959] GetFileSize (in: hFile=0x190, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9f30 [0115.959] lstrlenW (lpString="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe") returned 39 [0115.959] RtlAllocateHeap (HeapHandle=0x1fa0000, Flags=0x8, Size=0x9f82) returned 0x1fa45b8 [0115.960] ReadFile (in: hFile=0x190, lpBuffer=0x1fa45b8, nNumberOfBytesToRead=0x9f30, lpNumberOfBytesRead=0x19ff5c, lpOverlapped=0x0 | out: lpBuffer=0x1fa45b8*, lpNumberOfBytesRead=0x19ff5c*=0x9f30, lpOverlapped=0x0) returned 1 [0115.960] lstrcmpW (lpString1="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe") returned 1 [0115.964] lstrlenW (lpString="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe") returned 39 [0115.965] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lossy.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0115.966] lstrlenW (lpString="C:\\Users\\RDhJ0CNFevzX\\Desktop\\lossy.exe") returned 39 [0115.966] WriteFile (in: hFile=0x198, lpBuffer=0x1fa45b8*, nNumberOfBytesToWrite=0x9f82, lpNumberOfBytesWritten=0x19ff5c, lpOverlapped=0x0 | out: lpBuffer=0x1fa45b8*, lpNumberOfBytesWritten=0x19ff5c*=0x9f82, lpOverlapped=0x0) returned 1 [0115.968] CloseHandle (hObject=0x190) returned 1 [0115.969] CloseHandle (hObject=0x198) returned 1 [0115.976] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x1fa05a8 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0115.976] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe", lpParameters=0x0, lpDirectory="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", nShowCmd=0) returned 0x2a [0116.532] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0xda4 Thread: id = 3 os_tid = 0xdb0 Thread: id = 4 os_tid = 0xdb4 Thread: id = 5 os_tid = 0xde0 Thread: id = 6 os_tid = 0xde4 Thread: id = 7 os_tid = 0x77c Process: id = "2" image_name = "lossy.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lossy.exe" page_root = "0x66dd6000" os_pid = "0x1104" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xd9c" cmd_line = "\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe\" " cur_dir = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ebd3" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 366 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 367 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 368 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 369 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 370 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 371 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 372 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 373 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 374 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 375 start_va = 0x8000000 end_va = 0x8008fff monitored = 1 entry_point = 0x8001000 region_type = mapped_file name = "lossy.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lossy.exe") Region: id = 376 start_va = 0x77220000 end_va = 0x7739afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 377 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 378 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 379 start_va = 0x7fff0000 end_va = 0x7ffff079ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 380 start_va = 0x7ffff07a0000 end_va = 0x7ffff0960fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 381 start_va = 0x7ffff0961000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffff0961000" filename = "" Region: id = 382 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 383 start_va = 0x656f0000 end_va = 0x6573ffff monitored = 0 entry_point = 0x65708180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 384 start_va = 0x65670000 end_va = 0x656e9fff monitored = 0 entry_point = 0x65683290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 385 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 386 start_va = 0x65740000 end_va = 0x65747fff monitored = 0 entry_point = 0x657417c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 387 start_va = 0x400000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 388 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 389 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 390 start_va = 0x74920000 end_va = 0x74a9dfff monitored = 0 entry_point = 0x749d1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 391 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 392 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 393 start_va = 0x600000 end_va = 0x6bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 394 start_va = 0x73ea0000 end_va = 0x73f31fff monitored = 0 entry_point = 0x73ee0380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 395 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 396 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 397 start_va = 0x74c10000 end_va = 0x74d56fff monitored = 0 entry_point = 0x74c21cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 398 start_va = 0x74250000 end_va = 0x7439efff monitored = 0 entry_point = 0x74306820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 399 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 400 start_va = 0x4b0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 401 start_va = 0x6c0000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 402 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 403 start_va = 0x7c0000 end_va = 0x947fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 404 start_va = 0x757e0000 end_va = 0x7580afff monitored = 0 entry_point = 0x757e5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 405 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 406 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 407 start_va = 0x950000 end_va = 0xad0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 408 start_va = 0xae0000 end_va = 0x1edffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 409 start_va = 0x73e20000 end_va = 0x73e94fff monitored = 0 entry_point = 0x73e59a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 410 start_va = 0x75640000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75675630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 411 start_va = 0x75420000 end_va = 0x755dcfff monitored = 0 entry_point = 0x75502a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 412 start_va = 0x75ad0000 end_va = 0x75b7cfff monitored = 0 entry_point = 0x75ae4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 413 start_va = 0x73f50000 end_va = 0x73f6dfff monitored = 0 entry_point = 0x73f5b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 414 start_va = 0x73f40000 end_va = 0x73f49fff monitored = 0 entry_point = 0x73f42a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 415 start_va = 0x755e0000 end_va = 0x75637fff monitored = 0 entry_point = 0x756225c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 416 start_va = 0x75900000 end_va = 0x75943fff monitored = 0 entry_point = 0x75919d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 417 start_va = 0x1ee0000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 418 start_va = 0x1f90000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 419 start_va = 0x75b80000 end_va = 0x75c9efff monitored = 0 entry_point = 0x75bc5980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 420 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 421 start_va = 0x1f90000 end_va = 0x204bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f90000" filename = "" Region: id = 422 start_va = 0x20f0000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 423 start_va = 0x1e0000 end_va = 0x1e3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 424 start_va = 0x73e00000 end_va = 0x73e1cfff monitored = 0 entry_point = 0x73e03b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 425 start_va = 0x1ee0000 end_va = 0x1f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 426 start_va = 0x1f80000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 427 start_va = 0x1f0000 end_va = 0x1f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 428 start_va = 0x440000 end_va = 0x445fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 429 start_va = 0x1e0000 end_va = 0x1e4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 430 start_va = 0x450000 end_va = 0x454fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 431 start_va = 0x460000 end_va = 0x465fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 432 start_va = 0x715c0000 end_va = 0x717ccfff monitored = 0 entry_point = 0x716aacb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 433 start_va = 0x74e30000 end_va = 0x74e74fff monitored = 0 entry_point = 0x74e4de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 434 start_va = 0x75ca0000 end_va = 0x7709efff monitored = 0 entry_point = 0x75e5b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 435 start_va = 0x758c0000 end_va = 0x758f6fff monitored = 0 entry_point = 0x758c3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 436 start_va = 0x74f10000 end_va = 0x75408fff monitored = 0 entry_point = 0x75117610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 437 start_va = 0x75a50000 end_va = 0x75acafff monitored = 0 entry_point = 0x75a6e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 438 start_va = 0x75410000 end_va = 0x7541bfff monitored = 0 entry_point = 0x75413930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 439 start_va = 0x77180000 end_va = 0x7720cfff monitored = 0 entry_point = 0x771c9b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 440 start_va = 0x74d60000 end_va = 0x74da3fff monitored = 0 entry_point = 0x74d67410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 441 start_va = 0x74f00000 end_va = 0x74f0efff monitored = 0 entry_point = 0x74f02e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 442 start_va = 0x1f90000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 443 start_va = 0x2100000 end_va = 0x2436fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 444 start_va = 0x73b30000 end_va = 0x73dfafff monitored = 0 entry_point = 0x73d6c4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 445 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 446 start_va = 0x74820000 end_va = 0x748b1fff monitored = 0 entry_point = 0x74858cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 447 start_va = 0x2440000 end_va = 0x2529fff monitored = 0 entry_point = 0x247d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 448 start_va = 0x470000 end_va = 0x470fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 449 start_va = 0x74db0000 end_va = 0x74e0efff monitored = 0 entry_point = 0x74db4af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 450 start_va = 0x71570000 end_va = 0x71581fff monitored = 0 entry_point = 0x71574510 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\SysWOW64\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\syswow64\\ondemandconnroutehelper.dll") Region: id = 451 start_va = 0x71540000 end_va = 0x7156efff monitored = 0 entry_point = 0x7154bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 452 start_va = 0x714a0000 end_va = 0x7153afff monitored = 0 entry_point = 0x714df7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 453 start_va = 0x5b0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 454 start_va = 0x2440000 end_va = 0x253ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002440000" filename = "" Region: id = 455 start_va = 0x71450000 end_va = 0x7149efff monitored = 0 entry_point = 0x7145d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 456 start_va = 0x71440000 end_va = 0x71447fff monitored = 0 entry_point = 0x71441fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 457 start_va = 0x747b0000 end_va = 0x747b6fff monitored = 0 entry_point = 0x747b1e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 458 start_va = 0x1f90000 end_va = 0x1fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 459 start_va = 0x2020000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 460 start_va = 0x2540000 end_va = 0x263ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 461 start_va = 0x70aa0000 end_va = 0x70b23fff monitored = 0 entry_point = 0x70ac6530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 462 start_va = 0x717d0000 end_va = 0x7194dfff monitored = 0 entry_point = 0x7184c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 463 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 464 start_va = 0x490000 end_va = 0x490fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 465 start_va = 0x75700000 end_va = 0x75783fff monitored = 0 entry_point = 0x75726220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 466 start_va = 0x4a0000 end_va = 0x4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 467 start_va = 0x1fd0000 end_va = 0x200ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 468 start_va = 0x2640000 end_va = 0x273ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002640000" filename = "" Region: id = 469 start_va = 0x2030000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 470 start_va = 0x2070000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 471 start_va = 0x2740000 end_va = 0x283ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 472 start_va = 0x2840000 end_va = 0x293ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 624 start_va = 0x20b0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 625 start_va = 0x2940000 end_va = 0x2a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 626 start_va = 0x706a0000 end_va = 0x706a7fff monitored = 0 entry_point = 0x706a1920 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 627 start_va = 0x2a40000 end_va = 0x2a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 628 start_va = 0x2a80000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 630 start_va = 0x1f60000 end_va = 0x1f63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 673 start_va = 0x2b80000 end_va = 0x2c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 754 start_va = 0x2c80000 end_va = 0x2e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Thread: id = 8 os_tid = 0x1110 [0116.632] GetModuleHandleA (lpModuleName=0x0) returned 0x8000000 [0116.632] LoadIconA (hInstance=0x0, lpIconName=0x7f00) returned 0x10027 [0116.636] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0116.637] RegisterClassExA (param_1=0x800438c) returned 0xc1dc [0116.637] GetCommandLineA () returned="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe\" " [0116.637] CreateWindowExA (dwExStyle=0x0, lpClassName="verba", lpWindowName="uno momento", dwStyle=0xcf0000, X=-2780, Y=-6520, nWidth=540, nHeight=495, hWndParent=0x0, hMenu=0x0, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0116.684] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x24, wParam=0x0, lParam=0x19fb04) returned 0x0 [0116.685] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x81, wParam=0x0, lParam=0x19faf8) returned 0x1 [0116.690] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x83, wParam=0x0, lParam=0x19fae4) returned 0x0 [0116.695] CreateWindowExA (dwExStyle=0x0, lpClassName="button", lpWindowName="purok", dwStyle=0x10000001, X=10, Y=10, nWidth=320, nHeight=40, hWndParent=0x70298, hMenu=0x2, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0116.695] GetLastError () returned 0x579 [0116.696] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x2b) returned 0x0 [0116.696] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x2a) returned 0xffffffff [0116.696] CreateFileA (lpFileName="prev.inf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\prev.inf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0116.696] GetLastError () returned 0x2 [0116.696] CreateWindowExA (dwExStyle=0x0, lpClassName="edit", lpWindowName=0x0, dwStyle=0x40000000, X=10, Y=70, nWidth=500, nHeight=430, hWndParent=0x70298, hMenu=0x1, hInstance=0x8000000, lpParam=0x0) returned 0x702a4 [0116.699] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x210, wParam=0x10001, lParam=0x702a4) returned 0x0 [0116.700] CreateWindowExA (dwExStyle=0x0, lpClassName="edit", lpWindowName="purok", dwStyle=0x40000001, X=10, Y=380, nWidth=166, nHeight=34, hWndParent=0x1, hMenu=0x2, hInstance=0x8000000, lpParam=0x0) returned 0x0 [0116.700] GetLastError () returned 0x578 [0116.700] lstrcpyA (in: lpString1=0x800442c, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0116.701] CreateFontIndirectA (lplf=0x8004410) returned 0x1e0a093c [0116.701] SendMessageA (hWnd=0x70298, Msg=0x402, wParam=0x80040c4, lParam=0x0) returned 0x0 [0116.701] MoveWindow (hWnd=0x70298, X=-3700, Y=-3080, nWidth=550, nHeight=505, bRepaint=0) [0116.701] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x46, wParam=0x0, lParam=0x19f894) returned 0x0 [0116.701] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x24, wParam=0x0, lParam=0x19f554) returned 0x0 [0116.701] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x83, wParam=0x1, lParam=0x19f86c) returned 0x0 [0116.703] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x47, wParam=0x0, lParam=0x19f894) [0116.703] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x3, wParam=0x0, lParam=0xf417f194) returned 0x0 [0116.703] SendMessageA (hWnd=0x70298, Msg=0x402, wParam=0x8004088, lParam=0x0) returned 0x0 [0116.703] GetWindowRect (in: hWnd=0x70298, lpRect=0x19f3c0 | out: lpRect=0x19f3c0) returned 1 [0116.703] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x2d) [0116.704] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x2e) [0116.704] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x2f) [0116.704] VirtualAlloc (lpAddress=0x400000, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x0 [0116.704] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x30) [0116.704] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x1f0000 [0116.705] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x31) [0116.705] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x440000 [0116.705] VirtualProtect (in: lpAddress=0x440000, dwSize=0x6000, flNewProtect=0x40, lpflOldProtect=0x800410e | out: lpflOldProtect=0x800410e*=0x4) returned 1 [0116.707] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x32) [0116.707] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x0, lParam=0x579) [0116.708] SendMessageA (hWnd=0x70298, Msg=0x111, wParam=0x8004460, lParam=0x34) [0116.708] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.708] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.709] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.709] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.709] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.709] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.709] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.710] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.710] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.710] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.710] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.710] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.711] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.712] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.712] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.712] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.712] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.713] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.713] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.713] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.713] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.713] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.714] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.714] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.714] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.714] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.714] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.715] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.715] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.715] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.715] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.715] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.716] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.716] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.716] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.716] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.716] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.717] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.718] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.718] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.718] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.718] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.718] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.719] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.719] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.719] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.719] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.719] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.720] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.720] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.720] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.720] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.720] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.721] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.722] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.722] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.722] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.722] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.722] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.723] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.723] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.723] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.723] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.723] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.724] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.724] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.724] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.724] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.724] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.725] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.726] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.726] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.726] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.726] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.726] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.727] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.727] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.727] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.727] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.727] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.730] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.730] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.730] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.730] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.731] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.731] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.731] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.731] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.731] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.732] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.732] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.732] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.732] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.732] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.733] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.733] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.733] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.733] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.733] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.734] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.734] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.734] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.734] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.734] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.735] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.736] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.736] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.736] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.736] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.736] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.737] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.737] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.737] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.737] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.737] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.738] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.738] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.738] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.738] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.738] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.739] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.739] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.739] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.739] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.739] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.740] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.740] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.740] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.740] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.740] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.741] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.742] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.742] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.742] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.742] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.742] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.743] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.743] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.743] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.744] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.744] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.744] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.744] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.744] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.745] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.745] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.745] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.745] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.745] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.746] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.746] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.746] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.746] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.746] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.747] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.747] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.747] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.747] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.747] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.748] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.748] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.748] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.748] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.748] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.749] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.749] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.749] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.749] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.749] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.750] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.751] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.751] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.751] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.751] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.751] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.752] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.752] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.752] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.752] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.752] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.753] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.753] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.753] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.753] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.753] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.754] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.755] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.755] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.755] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.755] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.755] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.756] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.756] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.756] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.756] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.756] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.757] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.757] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.757] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.757] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.757] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.758] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.759] SendMessageA (hWnd=0x70298, Msg=0x401, wParam=0x8004458, lParam=0x166) returned 0x0 [0116.776] DestroyWindow (hWnd=0x70298) [0116.776] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0116.777] PostQuitMessage (nExitCode=6) [0116.782] NtdllDefWindowProc_A (hWnd=0x70298, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0116.791] ShowWindow (hWnd=0x0, nCmdShow=1) returned 0 [0116.791] UpdateWindow (hWnd=0x0) returned 0 [0116.791] GetMessageA (in: lpMsg=0x80043bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x80043bc) returned 0 [0116.793] VirtualAlloc (lpAddress=0x0, dwSize=0x48e8, flAllocationType=0x1000, flProtect=0x4) returned 0x450000 [0116.795] UnmapViewOfFile (lpBaseAddress=0x0) returned 0 [0116.795] VirtualAlloc (lpAddress=0x0, dwSize=0x6000, flAllocationType=0x2000, flProtect=0x1) returned 0x460000 [0116.795] VirtualAlloc (lpAddress=0x460000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x460000 [0116.796] VirtualAlloc (lpAddress=0x461000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x461000 [0116.797] VirtualAlloc (lpAddress=0x462000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x462000 [0116.797] VirtualAlloc (lpAddress=0x463000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x463000 [0116.798] VirtualAlloc (lpAddress=0x464000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x464000 [0116.798] VirtualAlloc (lpAddress=0x465000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x465000 [0116.799] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x715c0000 [0116.813] GetProcAddress (hModule=0x715c0000, lpProcName="HttpSendRequestW") returned 0x71686ef0 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="InternetSetOptionW") returned 0x7168da70 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="InternetQueryOptionW") returned 0x7168cd20 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="HttpOpenRequestW") returned 0x71640fd0 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="HttpQueryInfoW") returned 0x7168f060 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="InternetReadFile") returned 0x71647320 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="InternetConnectW") returned 0x716745f0 [0116.814] GetProcAddress (hModule=0x715c0000, lpProcName="InternetOpenW") returned 0x71688490 [0116.814] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x770a0000 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="GetTempPathW") returned 0x770c6b30 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="GetFileSize") returned 0x770c6a70 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="GetCurrentDirectoryW") returned 0x770ba9a0 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteFileW") returned 0x770c68c0 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="CloseHandle") returned 0x770c6630 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="WriteFile") returned 0x770c6ca0 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="lstrcmpW") returned 0x770b7970 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="ReadFile") returned 0x770c6bb0 [0116.815] GetProcAddress (hModule=0x770a0000, lpProcName="GetModuleHandleW") returned 0x770b9bc0 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="ExitProcess") returned 0x770c7b30 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="HeapCreate") returned 0x770ba100 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="HeapAlloc") returned 0x77252bd0 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="GetModuleFileNameW") returned 0x770b9b00 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="CreateFileW") returned 0x770c6890 [0116.816] GetProcAddress (hModule=0x770a0000, lpProcName="lstrlenW") returned 0x770b3690 [0116.816] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74c10000 [0116.816] GetProcAddress (hModule=0x74c10000, lpProcName="wsprintfW") returned 0x74c3f890 [0116.816] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75ca0000 [0116.855] GetProcAddress (hModule=0x75ca0000, lpProcName="ShellExecuteW") returned 0x75e3d9f0 [0116.855] VirtualProtect (in: lpAddress=0x460000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x19ff1c | out: lpflOldProtect=0x19ff1c*=0x4) returned 1 [0116.855] VirtualProtect (in: lpAddress=0x461000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0116.856] VirtualProtect (in: lpAddress=0x462000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0116.856] VirtualProtect (in: lpAddress=0x463000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0116.856] VirtualProtect (in: lpAddress=0x464000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0116.857] VirtualProtect (in: lpAddress=0x465000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19fea0 | out: lpflOldProtect=0x19fea0*=0x4) returned 1 [0116.857] VirtualFree (lpAddress=0x450000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.859] GetModuleHandleW (lpModuleName=0x0) returned 0x460000 [0116.859] HeapCreate (flOptions=0x0, dwInitialSize=0x2000, dwMaximumSize=0x0) returned 0x2020000 [0116.860] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x8, Size=0x2000) returned 0x20205a8 [0116.860] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x8, Size=0x2000) returned 0x20225b0 [0116.860] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x20205a8, nSize=0x2000 | out: lpFilename="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lossy.exe")) returned 0x2e [0116.860] GetTempPathW (in: nBufferLength=0x1000, lpBuffer=0x20225b0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0116.860] wsprintfW (in: param_1=0x20225b0, param_2="%s%s" | out: param_1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe") returned 46 [0116.860] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lossy.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0116.860] GetFileSize (in: hFile=0x190, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9f82 [0116.860] lstrlenW (lpString="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe") returned 46 [0116.860] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x8, Size=0x9fe2) returned 0x20245b8 [0116.861] ReadFile (in: hFile=0x190, lpBuffer=0x20245b8, nNumberOfBytesToRead=0x9f82, lpNumberOfBytesRead=0x19ff5c, lpOverlapped=0x0 | out: lpBuffer=0x20245b8*, lpNumberOfBytesRead=0x19ff5c*=0x9f82, lpOverlapped=0x0) returned 1 [0116.862] lstrcmpW (lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\lossy.exe") returned 0 [0116.864] CloseHandle (hObject=0x190) returned 1 [0116.864] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.865] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.866] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.867] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.868] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.869] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.870] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.871] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.872] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.873] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.874] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.875] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.876] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.877] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.878] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.879] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.880] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.881] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.882] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.883] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.884] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.884] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.884] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.885] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.885] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.885] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.885] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.886] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.887] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0116.888] DeleteFileW (lpFileName="C:\\Users\\BMONIK~1.NSP\\AppData\\Local\\Temp\\Rar$EX00.290\\Reference_03102013.exe" (normalized: "c:\\users\\bmonik~1.nsp\\appdata\\local\\temp\\rar$ex00.290\\reference_03102013.exe")) returned 0 [0117.168] InternetOpenW (lpszAgent="Updates downloader", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0117.278] InternetConnectW (hInternet=0xcc0004, lpszServerName="2ndry.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0117.279] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb=0x0, lpszObjectName="/gold/a3mor.exe", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x19ff40*="text/*", dwFlags=0x80803000, dwContext=0x0) returned 0xcc000c [0117.280] InternetQueryOptionW (in: hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x19ff54, lpdwBufferLength=0x19ff4c | out: lpBuffer=0x19ff54, lpdwBufferLength=0x19ff4c) returned 1 [0117.280] InternetSetOptionW (hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x19ff54*, dwBufferLength=0x4) returned 1 [0117.322] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.217] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.251] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.265] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.274] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.277] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.280] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.303] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.306] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.309] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.311] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.328] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.331] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.333] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.356] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.370] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.373] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.375] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.398] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.402] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.404] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.511] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.547] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.549] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.551] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.553] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.555] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.560] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.563] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.565] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.567] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.569] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.571] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.576] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.585] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.587] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.590] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.592] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.595] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.597] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.604] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.608] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.611] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.613] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.616] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.621] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.633] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.643] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.646] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.648] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.651] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.653] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.656] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.658] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.660] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.663] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.665] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.667] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.670] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.672] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.675] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.677] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.679] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.692] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.694] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.698] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.700] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.703] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.705] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.708] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.710] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.713] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.717] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.719] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.722] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.724] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.727] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.729] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.732] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.734] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.737] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.739] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.742] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.745] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.748] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.751] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.753] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.756] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.782] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.791] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.793] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.796] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.798] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.801] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.803] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.807] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.809] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.812] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.814] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.820] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.828] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.833] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.835] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.838] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.840] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.846] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.849] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.852] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.862] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.865] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.867] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.873] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.876] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.883] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.887] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.894] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.900] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.903] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.905] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.911] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.913] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.917] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.920] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.923] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.925] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.928] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.931] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.933] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.938] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.941] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.943] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.949] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.954] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.957] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.969] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.975] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0119.987] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.007] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.012] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.019] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.021] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.024] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.033] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.048] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.054] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.057] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.059] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.065] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.067] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.070] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.073] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.078] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.081] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.084] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.122] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.124] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.127] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.130] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.132] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.137] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.139] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.144] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.147] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.150] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.152] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.158] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.160] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.163] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.168] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.171] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.173] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.179] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.182] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.184] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.187] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.190] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.192] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.194] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.197] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.200] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.206] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.209] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.214] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.218] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.224] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.226] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.229] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.232] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.235] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.237] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.240] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.246] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.249] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.252] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.256] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.259] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.262] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.266] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.269] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.271] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.275] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.281] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.284] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.291] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.293] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.296] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.298] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.303] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.306] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.309] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.312] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.319] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.322] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.325] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.327] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.330] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.334] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.340] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.343] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.345] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.350] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.353] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.356] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.359] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.364] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.367] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.369] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.374] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.377] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.380] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.382] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.386] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.389] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.391] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.394] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.399] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.402] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.404] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.410] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.412] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.415] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.419] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.423] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.442] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.457] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.460] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.465] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.468] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.470] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.475] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.478] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.481] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.484] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.489] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.491] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.494] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.499] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.502] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.504] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.507] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.514] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.518] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.521] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.523] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.526] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.528] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.531] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.538] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.541] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.546] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.549] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.551] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.554] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.577] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.665] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.751] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.754] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.757] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.838] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.841] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.844] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.847] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0120.935] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.000] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.030] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.032] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.034] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.038] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.041] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.051] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.055] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.058] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.060] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.063] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.067] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.074] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.076] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.079] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.081] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.083] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.118] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.125] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.127] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.129] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.132] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.134] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.138] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.141] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.143] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.145] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.148] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.151] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.153] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.158] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.160] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.162] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.163] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.166] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.168] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.170] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.172] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.174] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.176] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.177] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.179] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.183] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.184] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.186] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.188] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.190] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.192] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.194] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.196] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.198] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.200] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.202] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.206] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.208] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.209] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.212] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.214] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.215] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.218] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.219] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.221] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.235] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.241] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.245] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.248] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.250] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.253] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.255] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.257] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.259] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.261] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.264] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.266] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.268] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.271] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.273] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.276] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.278] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.280] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.281] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.285] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.287] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.289] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.291] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.293] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.295] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.299] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.301] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.303] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.305] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.307] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.310] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.312] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.314] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.316] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.317] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.320] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.322] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.324] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.326] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.328] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.330] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.332] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.335] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.338] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.340] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.342] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.344] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.346] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.348] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.350] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.353] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.356] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.359] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.361] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.362] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.364] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.366] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.600] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.602] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.608] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.610] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.612] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.614] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.616] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.618] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.620] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.623] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.625] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.627] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.630] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.632] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.635] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.637] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.639] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.641] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.643] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.645] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.647] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.649] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.651] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.653] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.655] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.658] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.660] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.662] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.665] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.668] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.671] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.673] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.675] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.677] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.679] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.681] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.683] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.685] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.688] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.689] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.691] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.693] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.695] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.697] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.701] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.703] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.704] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.706] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.708] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.710] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.713] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.715] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.716] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.718] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.720] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.722] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.724] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.726] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.729] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.731] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.733] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.735] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.738] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.740] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.741] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.744] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.746] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.748] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.750] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.752] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.754] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.756] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.758] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.760] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.762] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.764] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.765] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.767] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.769] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.772] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.776] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.778] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.780] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.781] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.784] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.785] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.787] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.789] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.791] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.793] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.796] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.798] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.800] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.802] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.804] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.806] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.808] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.810] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.812] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.815] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.816] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.818] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.820] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.822] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.824] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.826] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.828] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.830] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.832] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.835] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.837] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.839] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.841] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.843] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.845] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.847] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.849] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.851] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.856] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.858] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.859] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.861] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.863] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.865] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.867] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.869] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.872] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.874] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.876] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.878] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.880] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.882] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.884] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.886] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.888] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.890] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.892] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.894] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.896] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.898] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.900] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.902] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.904] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.906] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.908] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.910] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.912] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.914] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.916] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.918] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.920] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.923] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.925] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.927] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.929] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.931] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.933] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.941] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.944] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.946] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.948] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.950] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.952] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.954] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.956] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.958] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.960] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.962] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.964] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.966] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.968] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.971] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.973] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.975] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.985] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.987] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.990] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.993] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.995] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.997] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0121.999] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.001] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.003] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.005] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.006] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.010] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.039] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.044] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.046] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0122.048] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 Thread: id = 9 os_tid = 0xa30 Thread: id = 10 os_tid = 0x1100 Thread: id = 11 os_tid = 0x10fc Thread: id = 12 os_tid = 0x10e8 Thread: id = 19 os_tid = 0x10f4 Thread: id = 20 os_tid = 0x10f8 Thread: id = 21 os_tid = 0x110c Thread: id = 22 os_tid = 0x6fc Process: id = "3" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x2172a000" os_pid = "0x99c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ebd3" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 473 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 474 start_va = 0xa8ce680000 end_va = 0xa8ce77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8ce680000" filename = "" Region: id = 475 start_va = 0xa8ce800000 end_va = 0xa8ce9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8ce800000" filename = "" Region: id = 476 start_va = 0xa8ceb00000 end_va = 0xa8cebfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8ceb00000" filename = "" Region: id = 477 start_va = 0xa8cee00000 end_va = 0xa8ceefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8cee00000" filename = "" Region: id = 478 start_va = 0xa8cf000000 end_va = 0xa8cf0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8cf000000" filename = "" Region: id = 479 start_va = 0xa8cf100000 end_va = 0xa8cf1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8cf100000" filename = "" Region: id = 480 start_va = 0xa8cf200000 end_va = 0xa8cf2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8cf200000" filename = "" Region: id = 481 start_va = 0x1cd529b0000 end_va = 0x1cd529bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd529b0000" filename = "" Region: id = 482 start_va = 0x1cd529c0000 end_va = 0x1cd529c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd529c0000" filename = "" Region: id = 483 start_va = 0x1cd529d0000 end_va = 0x1cd529e4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd529d0000" filename = "" Region: id = 484 start_va = 0x1cd529f0000 end_va = 0x1cd529f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd529f0000" filename = "" Region: id = 485 start_va = 0x1cd52a00000 end_va = 0x1cd52a01fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52a00000" filename = "" Region: id = 486 start_va = 0x1cd52a10000 end_va = 0x1cd52acdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 487 start_va = 0x1cd52ad0000 end_va = 0x1cd52ad0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52ad0000" filename = "" Region: id = 488 start_va = 0x1cd52ae0000 end_va = 0x1cd52ae6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52ae0000" filename = "" Region: id = 489 start_va = 0x1cd52af0000 end_va = 0x1cd52af0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52af0000" filename = "" Region: id = 490 start_va = 0x1cd52b00000 end_va = 0x1cd52b00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52b00000" filename = "" Region: id = 491 start_va = 0x1cd52b10000 end_va = 0x1cd52b10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52b10000" filename = "" Region: id = 492 start_va = 0x1cd52b20000 end_va = 0x1cd52b20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b20000" filename = "" Region: id = 493 start_va = 0x1cd52b30000 end_va = 0x1cd52b30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52b30000" filename = "" Region: id = 494 start_va = 0x1cd52b40000 end_va = 0x1cd52b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52b40000" filename = "" Region: id = 495 start_va = 0x1cd52b50000 end_va = 0x1cd52b5ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b50000" filename = "" Region: id = 496 start_va = 0x1cd52b60000 end_va = 0x1cd52b6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b60000" filename = "" Region: id = 497 start_va = 0x1cd52b70000 end_va = 0x1cd52b7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b70000" filename = "" Region: id = 498 start_va = 0x1cd52b80000 end_va = 0x1cd52b8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b80000" filename = "" Region: id = 499 start_va = 0x1cd52b90000 end_va = 0x1cd52b9ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52b90000" filename = "" Region: id = 500 start_va = 0x1cd52ba0000 end_va = 0x1cd52baffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52ba0000" filename = "" Region: id = 501 start_va = 0x1cd52bb0000 end_va = 0x1cd52bb7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52bb0000" filename = "" Region: id = 502 start_va = 0x1cd52bc0000 end_va = 0x1cd52bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52bc0000" filename = "" Region: id = 503 start_va = 0x1cd52bd0000 end_va = 0x1cd52bd0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52bd0000" filename = "" Region: id = 504 start_va = 0x1cd52be0000 end_va = 0x1cd52cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52be0000" filename = "" Region: id = 505 start_va = 0x1cd52ce0000 end_va = 0x1cd52ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52ce0000" filename = "" Region: id = 506 start_va = 0x1cd52de0000 end_va = 0x1cd52deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52de0000" filename = "" Region: id = 507 start_va = 0x1cd52df0000 end_va = 0x1cd52dfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52df0000" filename = "" Region: id = 508 start_va = 0x1cd52e00000 end_va = 0x1cd52e0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52e00000" filename = "" Region: id = 509 start_va = 0x1cd52e10000 end_va = 0x1cd52e1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52e10000" filename = "" Region: id = 510 start_va = 0x1cd52e20000 end_va = 0x1cd52e2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52e20000" filename = "" Region: id = 511 start_va = 0x1cd52e30000 end_va = 0x1cd52e3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52e30000" filename = "" Region: id = 512 start_va = 0x1cd52e40000 end_va = 0x1cd52e40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52e40000" filename = "" Region: id = 513 start_va = 0x1cd52e50000 end_va = 0x1cd52e53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52e50000" filename = "" Region: id = 514 start_va = 0x1cd52e60000 end_va = 0x1cd52e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd52e60000" filename = "" Region: id = 515 start_va = 0x1cd52e70000 end_va = 0x1cd52ff7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd52e70000" filename = "" Region: id = 516 start_va = 0x1cd53000000 end_va = 0x1cd53180fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd53000000" filename = "" Region: id = 517 start_va = 0x1cd53190000 end_va = 0x1cd5458ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd53190000" filename = "" Region: id = 518 start_va = 0x1cd54590000 end_va = 0x1cd548c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 519 start_va = 0x1cd548d0000 end_va = 0x1cd558cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd548d0000" filename = "" Region: id = 520 start_va = 0x1cd558d0000 end_va = 0x1cd558d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd558d0000" filename = "" Region: id = 521 start_va = 0x1cd558e0000 end_va = 0x1cd558e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd558e0000" filename = "" Region: id = 522 start_va = 0x1cd558f0000 end_va = 0x1cd5597ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd558f0000" filename = "" Region: id = 523 start_va = 0x1cd55980000 end_va = 0x1cd55987fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55980000" filename = "" Region: id = 524 start_va = 0x1cd55990000 end_va = 0x1cd55991fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55990000" filename = "" Region: id = 525 start_va = 0x1cd559a0000 end_va = 0x1cd55a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd559a0000" filename = "" Region: id = 526 start_va = 0x1cd55aa0000 end_va = 0x1cd55aaffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 527 start_va = 0x1cd55ab0000 end_va = 0x1cd55abffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 528 start_va = 0x1cd55ac0000 end_va = 0x1cd55acffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 529 start_va = 0x1cd55ad0000 end_va = 0x1cd55adffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 530 start_va = 0x1cd55ae0000 end_va = 0x1cd55aeffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 531 start_va = 0x1cd55af0000 end_va = 0x1cd55afffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 532 start_va = 0x1cd55b00000 end_va = 0x1cd55b0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 533 start_va = 0x1cd55b10000 end_va = 0x1cd55b1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 534 start_va = 0x1cd55b20000 end_va = 0x1cd55b2ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 535 start_va = 0x1cd55b30000 end_va = 0x1cd55b3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 536 start_va = 0x1cd55b40000 end_va = 0x1cd55b4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 537 start_va = 0x1cd55b70000 end_va = 0x1cd55b7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 538 start_va = 0x1cd55b80000 end_va = 0x1cd55b8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 539 start_va = 0x1cd55ba0000 end_va = 0x1cd55ba7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ba0000" filename = "" Region: id = 540 start_va = 0x1cd55bb0000 end_va = 0x1cd55bbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 541 start_va = 0x1cd55bd0000 end_va = 0x1cd55bdffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 542 start_va = 0x1cd55be0000 end_va = 0x1cd55beffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 543 start_va = 0x1cd55bf0000 end_va = 0x1cd55bf7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55bf0000" filename = "" Region: id = 544 start_va = 0x1cd55c00000 end_va = 0x1cd55c0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 545 start_va = 0x1cd55c10000 end_va = 0x1cd55c1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 546 start_va = 0x1cd55c20000 end_va = 0x1cd55c2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd55c20000" filename = "" Region: id = 547 start_va = 0x1cd55c30000 end_va = 0x1cd55c3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 548 start_va = 0x1cd55c40000 end_va = 0x1cd55c4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 549 start_va = 0x1cd55c50000 end_va = 0x1cd55c5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 550 start_va = 0x1cd55c60000 end_va = 0x1cd55c6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 551 start_va = 0x1cd55c70000 end_va = 0x1cd55c7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 552 start_va = 0x1cd55c80000 end_va = 0x1cd55c8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 553 start_va = 0x1cd55c90000 end_va = 0x1cd55c9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 554 start_va = 0x1cd55ca0000 end_va = 0x1cd55caffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 555 start_va = 0x1cd55cb0000 end_va = 0x1cd55cbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd55cb0000" filename = "" Region: id = 556 start_va = 0x1cd55cc0000 end_va = 0x1cd55ccffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 557 start_va = 0x1cd55cd0000 end_va = 0x1cd55cdffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 558 start_va = 0x1cd55ce0000 end_va = 0x1cd55ceffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 559 start_va = 0x1cd55cf0000 end_va = 0x1cd55cfffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 560 start_va = 0x1cd55d00000 end_va = 0x1cd55d0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 561 start_va = 0x1cd55d10000 end_va = 0x1cd55d1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 562 start_va = 0x1cd55d20000 end_va = 0x1cd55d2ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 563 start_va = 0x1cd55d30000 end_va = 0x1cd55d3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 564 start_va = 0x1cd55d40000 end_va = 0x1cd55d4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 565 start_va = 0x1cd55d50000 end_va = 0x1cd55d5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 566 start_va = 0x1cd55d60000 end_va = 0x1cd55d6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 567 start_va = 0x1cd55d70000 end_va = 0x1cd55d7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 568 start_va = 0x1cd55d80000 end_va = 0x1cd55d8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 569 start_va = 0x1cd55d90000 end_va = 0x1cd55d9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 570 start_va = 0x1cd55da0000 end_va = 0x1cd55daffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 571 start_va = 0x1cd55db0000 end_va = 0x1cd55dbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 572 start_va = 0x1cd55dc0000 end_va = 0x1cd55dcffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 573 start_va = 0x1cd55dd0000 end_va = 0x1cd55ddffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd55dd0000" filename = "" Region: id = 574 start_va = 0x1cd55de0000 end_va = 0x1cd55deffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 575 start_va = 0x1cd55df0000 end_va = 0x1cd55dfffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 576 start_va = 0x1cd55e00000 end_va = 0x1cd55e0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 577 start_va = 0x1cd55e10000 end_va = 0x1cd55e1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 578 start_va = 0x1cd55e20000 end_va = 0x1cd55e2ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 579 start_va = 0x1cd55e30000 end_va = 0x1cd55e3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 580 start_va = 0x1cd55e40000 end_va = 0x1cd55e4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 581 start_va = 0x1cd55e50000 end_va = 0x1cd55e5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 582 start_va = 0x1cd55e60000 end_va = 0x1cd55e6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 583 start_va = 0x1cd55e70000 end_va = 0x1cd55e7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 584 start_va = 0x1cd55e80000 end_va = 0x1cd55e8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 585 start_va = 0x1cd55e90000 end_va = 0x1cd55e9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 586 start_va = 0x1cd55ea0000 end_va = 0x1cd55eaffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 587 start_va = 0x1cd55eb0000 end_va = 0x1cd55ebffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 588 start_va = 0x1cd55ed0000 end_va = 0x1cd55edffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 589 start_va = 0x7df5ffba0000 end_va = 0x7ff5ffb9ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffba0000" filename = "" Region: id = 590 start_va = 0x7ff793e80000 end_va = 0x7ff793f7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff793e80000" filename = "" Region: id = 591 start_va = 0x7ff793f80000 end_va = 0x7ff793fa2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff793f80000" filename = "" Region: id = 592 start_va = 0x7ff794540000 end_va = 0x7ff794546fff monitored = 0 entry_point = 0x7ff794541570 region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" (normalized: "c:\\windows\\system32\\dllhost.exe") Region: id = 593 start_va = 0x7fffdcd30000 end_va = 0x7fffdcd44fff monitored = 0 entry_point = 0x7fffdcd35740 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 594 start_va = 0x7fffdcd60000 end_va = 0x7fffdcfedfff monitored = 0 entry_point = 0x7fffdce30f00 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 595 start_va = 0x7fffe0b20000 end_va = 0x7fffe0e18fff monitored = 0 entry_point = 0x7fffe0be7280 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 596 start_va = 0x7fffe6fe0000 end_va = 0x7fffe7361fff monitored = 0 entry_point = 0x7fffe7031220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 597 start_va = 0x7fffeb740000 end_va = 0x7fffeb7d5fff monitored = 0 entry_point = 0x7fffeb765570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 598 start_va = 0x7fffec2b0000 end_va = 0x7fffec2e0fff monitored = 0 entry_point = 0x7fffec2b7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 599 start_va = 0x7fffec520000 end_va = 0x7fffec53efff monitored = 0 entry_point = 0x7fffec525d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 600 start_va = 0x7fffec860000 end_va = 0x7fffec86afff monitored = 0 entry_point = 0x7fffec8619a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 601 start_va = 0x7fffecc50000 end_va = 0x7fffecc78fff monitored = 0 entry_point = 0x7fffecc64530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 602 start_va = 0x7fffecdc0000 end_va = 0x7fffecdd3fff monitored = 0 entry_point = 0x7fffecdc52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 603 start_va = 0x7fffecde0000 end_va = 0x7fffece2afff monitored = 0 entry_point = 0x7fffecde35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 604 start_va = 0x7fffece40000 end_va = 0x7fffece4efff monitored = 0 entry_point = 0x7fffece43210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 605 start_va = 0x7fffece50000 end_va = 0x7fffed037fff monitored = 0 entry_point = 0x7fffece7ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 606 start_va = 0x7fffed0f0000 end_va = 0x7fffed733fff monitored = 0 entry_point = 0x7fffed2b64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 607 start_va = 0x7fffed740000 end_va = 0x7fffed7a9fff monitored = 0 entry_point = 0x7fffed776d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 608 start_va = 0x7fffed810000 end_va = 0x7fffed8c4fff monitored = 0 entry_point = 0x7fffed8522e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 609 start_va = 0x7fffed8f0000 end_va = 0x7fffed932fff monitored = 0 entry_point = 0x7fffed904b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 610 start_va = 0x7fffedba0000 end_va = 0x7fffedbfafff monitored = 0 entry_point = 0x7fffedbb38b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 611 start_va = 0x7fffedd80000 end_va = 0x7fffede26fff monitored = 0 entry_point = 0x7fffedd958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 612 start_va = 0x7fffede30000 end_va = 0x7fffeded6fff monitored = 0 entry_point = 0x7fffede3b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 613 start_va = 0x7fffedee0000 end_va = 0x7fffedf31fff monitored = 0 entry_point = 0x7fffedeef530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 614 start_va = 0x7fffedf50000 end_va = 0x7fffedf8afff monitored = 0 entry_point = 0x7fffedf512f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 615 start_va = 0x7fffee060000 end_va = 0x7fffef5befff monitored = 0 entry_point = 0x7fffee1c11f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 616 start_va = 0x7fffef9f0000 end_va = 0x7fffefc6cfff monitored = 0 entry_point = 0x7fffefac4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 617 start_va = 0x7fffefd90000 end_va = 0x7fffefeabfff monitored = 0 entry_point = 0x7fffefdd02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 618 start_va = 0x7fffefeb0000 end_va = 0x7fffeff5cfff monitored = 0 entry_point = 0x7fffefec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 619 start_va = 0x7fffeff60000 end_va = 0x7ffff00b5fff monitored = 0 entry_point = 0x7fffeff6a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 620 start_va = 0x7ffff00c0000 end_va = 0x7ffff0180fff monitored = 0 entry_point = 0x7ffff00e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 621 start_va = 0x7ffff0340000 end_va = 0x7ffff04c5fff monitored = 0 entry_point = 0x7ffff038ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 622 start_va = 0x7ffff0700000 end_va = 0x7ffff079cfff monitored = 0 entry_point = 0x7ffff07078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 623 start_va = 0x7ffff07a0000 end_va = 0x7ffff0960fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 629 start_va = 0x1cd55b50000 end_va = 0x1cd55b50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55b50000" filename = "" Region: id = 631 start_va = 0x1cd55b50000 end_va = 0x1cd55b50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55b50000" filename = "" Region: id = 634 start_va = 0x1cd55b50000 end_va = 0x1cd55b50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55b50000" filename = "" Region: id = 635 start_va = 0x1cd55b50000 end_va = 0x1cd55b5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 636 start_va = 0x1cd55b60000 end_va = 0x1cd55b67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55b60000" filename = "" Region: id = 637 start_va = 0x1cd55b90000 end_va = 0x1cd55b9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 638 start_va = 0x1cd55bc0000 end_va = 0x1cd55bc7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55bc0000" filename = "" Region: id = 639 start_va = 0x1cd55ec0000 end_va = 0x1cd55ecffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 640 start_va = 0x1cd55b60000 end_va = 0x1cd55b6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 641 start_va = 0x1cd55bc0000 end_va = 0x1cd55bc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55bc0000" filename = "" Region: id = 642 start_va = 0x1cd55bc0000 end_va = 0x1cd55bc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55bc0000" filename = "" Region: id = 643 start_va = 0x1cd55ee0000 end_va = 0x1cd55ee7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ee0000" filename = "" Region: id = 644 start_va = 0x1cd55bc0000 end_va = 0x1cd55bc7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55bc0000" filename = "" Region: id = 645 start_va = 0x1cd55ee0000 end_va = 0x1cd55ee7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ee0000" filename = "" Region: id = 646 start_va = 0x1cd55ef0000 end_va = 0x1cd55ef0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ef0000" filename = "" Region: id = 647 start_va = 0x1cd55ef0000 end_va = 0x1cd55ef0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ef0000" filename = "" Region: id = 648 start_va = 0x1cd55ef0000 end_va = 0x1cd55ef0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ef0000" filename = "" Region: id = 649 start_va = 0x1cd55ef0000 end_va = 0x1cd55ef7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ef0000" filename = "" Region: id = 650 start_va = 0x1cd55ef0000 end_va = 0x1cd55efffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 651 start_va = 0x1cd55bc0000 end_va = 0x1cd55bcffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 652 start_va = 0x1cd55ee0000 end_va = 0x1cd55ee0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ee0000" filename = "" Region: id = 653 start_va = 0x1cd55ee0000 end_va = 0x1cd55ee7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ee0000" filename = "" Region: id = 654 start_va = 0x1cd55f00000 end_va = 0x1cd55f07fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f00000" filename = "" Region: id = 655 start_va = 0x1cd55f10000 end_va = 0x1cd55f17fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f10000" filename = "" Region: id = 656 start_va = 0x1cd55f20000 end_va = 0x1cd55f27fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f20000" filename = "" Region: id = 657 start_va = 0x1cd55f30000 end_va = 0x1cd55f3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 658 start_va = 0x1cd55ee0000 end_va = 0x1cd55eeffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 659 start_va = 0x1cd55f00000 end_va = 0x1cd55f0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 660 start_va = 0x1cd55f10000 end_va = 0x1cd55f1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 661 start_va = 0x1cd55f20000 end_va = 0x1cd55f20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f20000" filename = "" Region: id = 662 start_va = 0x1cd55f40000 end_va = 0x1cd55f47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f40000" filename = "" Region: id = 663 start_va = 0x1cd55f20000 end_va = 0x1cd55f27fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f20000" filename = "" Region: id = 664 start_va = 0x1cd55f40000 end_va = 0x1cd55f47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f40000" filename = "" Region: id = 665 start_va = 0x1cd55f50000 end_va = 0x1cd55f57fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f50000" filename = "" Region: id = 666 start_va = 0x1cd55f60000 end_va = 0x1cd55f67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f60000" filename = "" Region: id = 667 start_va = 0x1cd55f70000 end_va = 0x1cd55f77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f70000" filename = "" Region: id = 668 start_va = 0x1cd55f80000 end_va = 0x1cd55f87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f80000" filename = "" Region: id = 669 start_va = 0x1cd55f90000 end_va = 0x1cd55f97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55f90000" filename = "" Region: id = 670 start_va = 0x1cd55fa0000 end_va = 0x1cd55fa7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fa0000" filename = "" Region: id = 671 start_va = 0x1cd55fb0000 end_va = 0x1cd55fb7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fb0000" filename = "" Region: id = 672 start_va = 0x1cd55fc0000 end_va = 0x1cd55fc7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fc0000" filename = "" Region: id = 674 start_va = 0x1cd55fd0000 end_va = 0x1cd55fdffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 675 start_va = 0x1cd55f20000 end_va = 0x1cd55f2ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 676 start_va = 0x1cd55f40000 end_va = 0x1cd55f4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 677 start_va = 0x1cd55f50000 end_va = 0x1cd55f5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 678 start_va = 0x1cd55f60000 end_va = 0x1cd55f6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 679 start_va = 0x1cd55f70000 end_va = 0x1cd55f7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 680 start_va = 0x1cd55f80000 end_va = 0x1cd55f8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 681 start_va = 0x1cd55f90000 end_va = 0x1cd55f9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 682 start_va = 0x1cd55fa0000 end_va = 0x1cd55faffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 683 start_va = 0x1cd55fb0000 end_va = 0x1cd55fbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 684 start_va = 0x1cd55fc0000 end_va = 0x1cd55fc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fc0000" filename = "" Region: id = 685 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 686 start_va = 0x1cd55fc0000 end_va = 0x1cd55fc7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fc0000" filename = "" Region: id = 687 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 688 start_va = 0x1cd55ff0000 end_va = 0x1cd55ffffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 689 start_va = 0x1cd55fc0000 end_va = 0x1cd55fcffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 690 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 691 start_va = 0x1cd56000000 end_va = 0x1cd56007fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56000000" filename = "" Region: id = 692 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 693 start_va = 0x1cd56000000 end_va = 0x1cd56000fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56000000" filename = "" Region: id = 694 start_va = 0x1cd56000000 end_va = 0x1cd56000fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56000000" filename = "" Region: id = 695 start_va = 0x1cd56000000 end_va = 0x1cd56000fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56000000" filename = "" Region: id = 696 start_va = 0x1cd56000000 end_va = 0x1cd56007fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56000000" filename = "" Region: id = 697 start_va = 0x1cd56000000 end_va = 0x1cd5600ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 698 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 699 start_va = 0x1cd56010000 end_va = 0x1cd56017fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 700 start_va = 0x1cd55fe0000 end_va = 0x1cd55fe7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55fe0000" filename = "" Region: id = 701 start_va = 0x1cd56010000 end_va = 0x1cd56017fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 702 start_va = 0x1cd56020000 end_va = 0x1cd5602ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 703 start_va = 0x1cd55fe0000 end_va = 0x1cd55feffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 704 start_va = 0x1cd56010000 end_va = 0x1cd56010fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 705 start_va = 0x1cd56030000 end_va = 0x1cd56037fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56030000" filename = "" Region: id = 706 start_va = 0x1cd56010000 end_va = 0x1cd56017fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 707 start_va = 0x1cd55c10000 end_va = 0x1cd55c1ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 708 start_va = 0x1cd55c30000 end_va = 0x1cd55c37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c30000" filename = "" Region: id = 709 start_va = 0x1cd55c40000 end_va = 0x1cd55c47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c40000" filename = "" Region: id = 710 start_va = 0x1cd55c50000 end_va = 0x1cd55c50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c50000" filename = "" Region: id = 711 start_va = 0x1cd55c60000 end_va = 0x1cd55c67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 712 start_va = 0x1cd55c50000 end_va = 0x1cd55c5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 713 start_va = 0x1cd55c30000 end_va = 0x1cd55c3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 714 start_va = 0x1cd55c40000 end_va = 0x1cd55c40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c40000" filename = "" Region: id = 715 start_va = 0x1cd55c40000 end_va = 0x1cd55c47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c40000" filename = "" Region: id = 716 start_va = 0x1cd55c60000 end_va = 0x1cd55c67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 717 start_va = 0x1cd55c70000 end_va = 0x1cd55c7ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 718 start_va = 0x1cd55c40000 end_va = 0x1cd55c4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 719 start_va = 0x1cd55c60000 end_va = 0x1cd55c60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 720 start_va = 0x1cd55c80000 end_va = 0x1cd55c87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c80000" filename = "" Region: id = 721 start_va = 0x1cd55c60000 end_va = 0x1cd55c60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 722 start_va = 0x1cd55c80000 end_va = 0x1cd55c87fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c80000" filename = "" Region: id = 723 start_va = 0x1cd55c60000 end_va = 0x1cd55c60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 724 start_va = 0x1cd55c30000 end_va = 0x1cd55c30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c30000" filename = "" Region: id = 725 start_va = 0x1cd55c30000 end_va = 0x1cd55c3ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 726 start_va = 0x1cd55c50000 end_va = 0x1cd55c50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c50000" filename = "" Region: id = 727 start_va = 0x1cd55c50000 end_va = 0x1cd55c57fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c50000" filename = "" Region: id = 728 start_va = 0x1cd55c60000 end_va = 0x1cd55c67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 729 start_va = 0x1cd55c80000 end_va = 0x1cd55c8ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 730 start_va = 0x1cd55c50000 end_va = 0x1cd55c5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 731 start_va = 0x1cd55c60000 end_va = 0x1cd55c60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c60000" filename = "" Region: id = 732 start_va = 0x1cd55c60000 end_va = 0x1cd55c6ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 733 start_va = 0x1cd55c90000 end_va = 0x1cd55c97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 734 start_va = 0x1cd55ca0000 end_va = 0x1cd55caffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 735 start_va = 0x1cd55c90000 end_va = 0x1cd55c90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 736 start_va = 0x1cd55cc0000 end_va = 0x1cd55cc7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cc0000" filename = "" Region: id = 737 start_va = 0x1cd55c90000 end_va = 0x1cd55c97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 738 start_va = 0x1cd55cc0000 end_va = 0x1cd55ccffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 739 start_va = 0x1cd55c90000 end_va = 0x1cd55c90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 740 start_va = 0x1cd55cd0000 end_va = 0x1cd55cd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cd0000" filename = "" Region: id = 741 start_va = 0x1cd55c90000 end_va = 0x1cd55c97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 742 start_va = 0x1cd55cd0000 end_va = 0x1cd55cdffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 743 start_va = 0x1cd55c90000 end_va = 0x1cd55c97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55c90000" filename = "" Region: id = 744 start_va = 0x1cd55ce0000 end_va = 0x1cd55ce7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ce0000" filename = "" Region: id = 745 start_va = 0x1cd56010000 end_va = 0x1cd56010fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 746 start_va = 0x1cd56010000 end_va = 0x1cd56010fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 747 start_va = 0x1cd56010000 end_va = 0x1cd56010fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 748 start_va = 0x1cd56010000 end_va = 0x1cd56017fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 749 start_va = 0x1cd56010000 end_va = 0x1cd56010fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56010000" filename = "" Region: id = 750 start_va = 0x1cd56030000 end_va = 0x1cd56037fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56030000" filename = "" Region: id = 751 start_va = 0x1cd56010000 end_va = 0x1cd5601ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 752 start_va = 0x1cd55c90000 end_va = 0x1cd55c9ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 753 start_va = 0x1cd55ce0000 end_va = 0x1cd55ce0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ce0000" filename = "" Region: id = 755 start_va = 0x1cd55ce0000 end_va = 0x1cd55ce0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ce0000" filename = "" Region: id = 756 start_va = 0x1cd55ce0000 end_va = 0x1cd55ce7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55ce0000" filename = "" Region: id = 757 start_va = 0x1cd56030000 end_va = 0x1cd56037fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56030000" filename = "" Region: id = 758 start_va = 0x1cd56040000 end_va = 0x1cd56047fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56040000" filename = "" Region: id = 759 start_va = 0x1cd56050000 end_va = 0x1cd56057fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56050000" filename = "" Region: id = 760 start_va = 0x1cd56060000 end_va = 0x1cd56067fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56060000" filename = "" Region: id = 761 start_va = 0x1cd56070000 end_va = 0x1cd56077fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56070000" filename = "" Region: id = 762 start_va = 0x1cd56080000 end_va = 0x1cd56087fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 763 start_va = 0x1cd56090000 end_va = 0x1cd56090fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56090000" filename = "" Region: id = 764 start_va = 0x1cd560a0000 end_va = 0x1cd560a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560a0000" filename = "" Region: id = 767 start_va = 0x1cd56090000 end_va = 0x1cd5609ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 768 start_va = 0x1cd55ce0000 end_va = 0x1cd55ceffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 769 start_va = 0x1cd56070000 end_va = 0x1cd5607ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 770 start_va = 0x1cd56030000 end_va = 0x1cd5603ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 771 start_va = 0x1cd56040000 end_va = 0x1cd5604ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 772 start_va = 0x1cd56050000 end_va = 0x1cd5605ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 773 start_va = 0x1cd56060000 end_va = 0x1cd5606ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 774 start_va = 0x1cd56080000 end_va = 0x1cd56080fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 775 start_va = 0x1cd56080000 end_va = 0x1cd56080fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 776 start_va = 0x1cd560a0000 end_va = 0x1cd560a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560a0000" filename = "" Region: id = 777 start_va = 0x1cd56080000 end_va = 0x1cd56080fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 778 start_va = 0x1cd56080000 end_va = 0x1cd56080fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 779 start_va = 0x1cd56080000 end_va = 0x1cd56080fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 780 start_va = 0x1cd56080000 end_va = 0x1cd56087fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56080000" filename = "" Region: id = 781 start_va = 0x1cd560a0000 end_va = 0x1cd560a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560a0000" filename = "" Region: id = 782 start_va = 0x1cd560b0000 end_va = 0x1cd560bffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 783 start_va = 0x1cd56080000 end_va = 0x1cd5608ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 784 start_va = 0x1cd560a0000 end_va = 0x1cd560a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560a0000" filename = "" Region: id = 785 start_va = 0x1cd560c0000 end_va = 0x1cd560c7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560c0000" filename = "" Region: id = 786 start_va = 0x1cd560a0000 end_va = 0x1cd560a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560a0000" filename = "" Region: id = 787 start_va = 0x1cd560c0000 end_va = 0x1cd560c7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560c0000" filename = "" Region: id = 788 start_va = 0x1cd560d0000 end_va = 0x1cd560d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560d0000" filename = "" Region: id = 789 start_va = 0x1cd560e0000 end_va = 0x1cd560e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560e0000" filename = "" Region: id = 790 start_va = 0x1cd560d0000 end_va = 0x1cd560dffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 791 start_va = 0x1cd560a0000 end_va = 0x1cd560affff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 792 start_va = 0x1cd560c0000 end_va = 0x1cd560c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560c0000" filename = "" Region: id = 793 start_va = 0xa8cf400000 end_va = 0xa8cf4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a8cf400000" filename = "" Region: id = 794 start_va = 0x1cd560c0000 end_va = 0x1cd560cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001cd560c0000" filename = "" Region: id = 795 start_va = 0x1cd560e0000 end_va = 0x1cd560effff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 796 start_va = 0x1cd560f0000 end_va = 0x1cd560fffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 797 start_va = 0x1cd56100000 end_va = 0x1cd5610ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 798 start_va = 0x1cd56110000 end_va = 0x1cd5611ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 799 start_va = 0x1cd56120000 end_va = 0x1cd5612ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 800 start_va = 0x1cd56130000 end_va = 0x1cd56130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 801 start_va = 0x1cd56130000 end_va = 0x1cd56130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 802 start_va = 0x1cd56130000 end_va = 0x1cd56130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 803 start_va = 0x1cd56130000 end_va = 0x1cd56137fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 804 start_va = 0x1cd56130000 end_va = 0x1cd56130fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 805 start_va = 0x1cd56140000 end_va = 0x1cd56147fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56140000" filename = "" Region: id = 806 start_va = 0x1cd560c0000 end_va = 0x1cd560c7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd560c0000" filename = "" Region: id = 807 start_va = 0x1cd56130000 end_va = 0x1cd56137fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56130000" filename = "" Region: id = 808 start_va = 0x1cd56140000 end_va = 0x1cd56147fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56140000" filename = "" Region: id = 809 start_va = 0x1cd56150000 end_va = 0x1cd56157fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56150000" filename = "" Region: id = 810 start_va = 0x1cd56160000 end_va = 0x1cd56167fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56160000" filename = "" Region: id = 811 start_va = 0x1cd56170000 end_va = 0x1cd5617ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 812 start_va = 0x1cd560c0000 end_va = 0x1cd560cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 813 start_va = 0x1cd56130000 end_va = 0x1cd5613ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 814 start_va = 0x1cd56140000 end_va = 0x1cd5614ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 815 start_va = 0x1cd56150000 end_va = 0x1cd5615ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 816 start_va = 0x1cd56160000 end_va = 0x1cd56160fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56160000" filename = "" Region: id = 817 start_va = 0x1cd56180000 end_va = 0x1cd56187fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56180000" filename = "" Region: id = 818 start_va = 0x1cd56160000 end_va = 0x1cd56167fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56160000" filename = "" Region: id = 819 start_va = 0x1cd56180000 end_va = 0x1cd5618ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 820 start_va = 0x1cd56160000 end_va = 0x1cd56160fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56160000" filename = "" Region: id = 821 start_va = 0x1cd56190000 end_va = 0x1cd56197fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56190000" filename = "" Region: id = 822 start_va = 0x1cd56160000 end_va = 0x1cd56167fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56160000" filename = "" Region: id = 823 start_va = 0x1cd56190000 end_va = 0x1cd56197fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56190000" filename = "" Region: id = 824 start_va = 0x1cd561a0000 end_va = 0x1cd561affff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 825 start_va = 0x1cd56160000 end_va = 0x1cd5616ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 826 start_va = 0x1cd56190000 end_va = 0x1cd56190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56190000" filename = "" Region: id = 827 start_va = 0x1cd56190000 end_va = 0x1cd56197fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd56190000" filename = "" Region: id = 828 start_va = 0x1cd561b0000 end_va = 0x1cd561b7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd561b0000" filename = "" Region: id = 829 start_va = 0x1cd561c0000 end_va = 0x1cd561c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd561c0000" filename = "" Region: id = 830 start_va = 0x1cd561d0000 end_va = 0x1cd561d7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd561d0000" filename = "" Region: id = 831 start_va = 0x1cd55af0000 end_va = 0x1cd55afffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 832 start_va = 0x1cd55c00000 end_va = 0x1cd55c0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 833 start_va = 0x1cd55cf0000 end_va = 0x1cd55cf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cf0000" filename = "" Region: id = 834 start_va = 0x1cd55cf0000 end_va = 0x1cd55cf7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cf0000" filename = "" Region: id = 835 start_va = 0x1cd55d00000 end_va = 0x1cd55d0ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "webcachev01.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat") Region: id = 836 start_va = 0x1cd55cf0000 end_va = 0x1cd55cf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cf0000" filename = "" Region: id = 837 start_va = 0x1cd55d10000 end_va = 0x1cd55d17fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55d10000" filename = "" Region: id = 838 start_va = 0x1cd55cf0000 end_va = 0x1cd55cf7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55cf0000" filename = "" Region: id = 839 start_va = 0x1cd55d10000 end_va = 0x1cd55d17fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55d10000" filename = "" Region: id = 840 start_va = 0x1cd55d30000 end_va = 0x1cd55d37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55d30000" filename = "" Region: id = 841 start_va = 0x1cd55d40000 end_va = 0x1cd55d47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001cd55d40000" filename = "" Thread: id = 13 os_tid = 0x95c Thread: id = 14 os_tid = 0x9dc Thread: id = 15 os_tid = 0x9d4 Thread: id = 16 os_tid = 0x9b8 Thread: id = 17 os_tid = 0x9ac Thread: id = 18 os_tid = 0x9a0 Thread: id = 23 os_tid = 0x9b4