IOC Report
Document.exe

loading gif

Files

File Path
Type
Category
Malicious
Document.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Temp\recomplete
data
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Document.exe
"C:\Users\user\Desktop\Document.exe"
malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\Desktop\Document.exe"
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Windows\SysWOW64\NETSTAT.EXE
"C:\Windows\SysWOW64\NETSTAT.EXE"
malicious
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Windows\SysWOW64\svchost.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
www.280.vip/n04s/
malicious
https://word.office.comon
unknown
http://www.15501.proReferer:
unknown
http://www.ist-sxyu.xyz
unknown
http://www.ompa77.click
unknown
http://www.280.vipReferer:
unknown
http://www.15501.pro/n04s/www.ofdkd-determine.xyz
unknown
http://www.280.vip
unknown
http://www.fgiopa.xyz
unknown
https://powerpoint.office.comcember
unknown
http://www.eat-tyfp.xyz
unknown
http://www.okavuxentid.xyzReferer:
unknown
https://excel.office.com
unknown
http://www.ofdkd-determine.xyz
unknown
http://schemas.micro
unknown
http://www.280.vip/n04s/
unknown
http://www.amedana.clickReferer:
unknown
http://www.ist-sxyu.xyz/n04s/
unknown
http://www.ist-sxyu.xyzReferer:
unknown
http://www.ofdkd-determine.xyz/n04s/www.gnbft-top.xyz
unknown
http://www.amedana.click
unknown
http://www.sk-frby.xyz/n04s/www.15501.pro
unknown
http://www.reeremovebg.top/n04s/www.adtv-wfj.xyz
unknown
http://www.adtv-wfj.xyz/n04s/www.etinfin8y.click
unknown
http://www.reeremovebg.topReferer:
unknown
http://www.adtv-wfj.xyz/n04s/
unknown
http://www.rislyhallyhanced.cfd/n04s/www.ompa77.click
unknown
http://www.eovk-how.xyz
unknown
http://www.adtv-wfj.xyz
unknown
http://www.eovk-how.xyz/n04s/
unknown
http://www.etinfin8y.click
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppcrobat.exe
unknown
http://www.gnbft-top.xyz/n04s/www.280.vip
unknown
http://www.ompa77.click/n04s/www.okavuxentid.xyz
unknown
http://www.amedana.click/n04s/x
unknown
http://www.280.vip/n04s/www.reeremovebg.top
unknown
http://www.rislyhallyhanced.cfd
unknown
http://www.okavuxentid.xyz/n04s/
unknown
http://www.reeremovebg.top
unknown
https://wns.windows.com/)s
unknown
http://www.autoitscript.com/autoit3/J
unknown
http://www.ist-sxyu.xyz/n04s/www.sk-frby.xyz
unknown
http://www.ompa77.click/n04s/
unknown
http://www.rislyhallyhanced.cfd/n04s/
unknown
http://www.sk-frby.xyz/n04s/
unknown
http://www.eat-tyfp.xyz/n04s/www.ist-sxyu.xyz
unknown
http://www.okavuxentid.xyz
unknown
http://www.sk-frby.xyzReferer:
unknown
http://www.etinfin8y.click/n04s/
unknown
http://www.15501.pro
unknown
http://www.etinfin8y.click/n04s/www.fgiopa.xyz
unknown
https://outlook.com
unknown
http://www.eat-tyfp.xyz/n04s/
unknown
http://www.gnbft-top.xyz
unknown
http://www.sk-frby.xyz
unknown
http://www.adtv-wfj.xyzReferer:
unknown
http://www.fgiopa.xyz/n04s/www.eovk-how.xyz
unknown
http://www.gnbft-top.xyzReferer:
unknown
http://www.fgiopa.xyzReferer:
unknown
http://www.okavuxentid.xyz/n04s/www.eat-tyfp.xyz
unknown
http://www.gnbft-top.xyz/n04s/
unknown
http://www.eovk-how.xyz/n04s/www.amedana.click
unknown
http://www.rislyhallyhanced.cfdReferer:
unknown
http://www.ompa77.clickReferer:
unknown
http://www.reeremovebg.top/n04s/
unknown
https://android.notify.windows.com/iOS
unknown
http://www.eovk-how.xyzReferer:
unknown
https://api.msn.com/
unknown
http://www.15501.pro/n04s/
unknown
http://www.ofdkd-determine.xyz/n04s/
unknown
http://www.ofdkd-determine.xyzReferer:
unknown
http://crl.v
unknown
http://www.eat-tyfp.xyzReferer:
unknown
http://www.fgiopa.xyz/n04s/
unknown
http://www.amedana.click/n04s/
unknown
http://www.etinfin8y.clickReferer:
unknown
There are 66 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
overdue.aliyun.com
170.33.13.246
malicious
www.eat-tyfp.xyz
unknown
malicious
www.reeremovebg.top
unknown
malicious
www.ompa77.click
unknown
malicious
www.sk-frby.xyz
unknown
malicious
www.280.vip
unknown
malicious
www.adtv-wfj.xyz
unknown
malicious
www.15501.pro
unknown
malicious
www.ist-sxyu.xyz
unknown
malicious
www.gnbft-top.xyz
unknown
malicious
www.rislyhallyhanced.cfd
unknown
malicious
www.ofdkd-determine.xyz
unknown
malicious
www.okavuxentid.xyz
unknown
malicious
There are 3 hidden domains, click here to show them.

Registry

Path
Value
Malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Excel.CSV
malicious
unknown
Word.Document.8
malicious
unknown
Word.DocumentMacroEnabled.12
malicious
unknown
Word.Document.12
malicious
unknown
Word.Template.8
malicious
unknown
Word.TemplateMacroEnabled.12
malicious
unknown
Word.Template.12
malicious
unknown
Outlook.File.msg.15
malicious
unknown
PowerPoint.OpenDocumentPresentation.12
malicious
unknown
Excel.OpenDocumentSpreadsheet.12
malicious
unknown
Word.OpenDocumentText.12
malicious
unknown
PowerPoint.Template.8
malicious
unknown
PowerPoint.TemplateMacroEnabled.12
malicious
unknown
PowerPoint.Template.12
malicious
unknown
PowerPoint.Addin.12
malicious
unknown
PowerPoint.SlideShowMacroEnabled.12
malicious
unknown
PowerPoint.SlideShow.12
malicious
unknown
PowerPoint.Show.8
malicious
unknown
PowerPoint.ShowMacroEnabled.12
malicious
unknown
PowerPoint.Show.12
malicious
unknown
Word.RTF.8
malicious
unknown
PowerPoint.SlideMacroEnabled.12
malicious
unknown
PowerPoint.Slide.12
malicious
unknown
bootstrap.vsto.1
malicious
unknown
Excel.AddInMacroEnabled
malicious
unknown
Excel.Sheet.8
malicious
unknown
Excel.SheetBinaryMacroEnabled.12
malicious
unknown
Excel.SheetMacroEnabled.12
malicious
unknown
Excel.Sheet.12
malicious
unknown
Excel.Template.8
malicious
unknown
Excel.TemplateMacroEnabled
malicious
unknown
Excel.Template
malicious
unknown
Unpacker
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
@explorerframe.dll,-13137
malicious
unknown
@explorerframe.dll,-13138
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
{5985FC23-2588-4D9A-B38B-7E7AFFAB3155} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
malicious
unknown
Classes
malicious
unknown
~reserved~
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
SlowContextMenuEntries
malicious
unknown
WMP11.AssocFile.3G2
malicious
unknown
WMP11.AssocFile.3GP
malicious
unknown
WMP11.AssocFile.3G2
malicious
unknown
WMP11.AssocFile.3GP
malicious
unknown
WMP11.AssocFile.ADTS
malicious
unknown
WMP11.AssocFile.ADTS
malicious
unknown
WMP11.AssocFile.ADTS
malicious
unknown
WMP11.AssocFile.AIFF
malicious
unknown
WMP11.AssocFile.AIFF
malicious
unknown
WMP11.AssocFile.ASF
malicious
unknown
WMP11.AssocFile.ASX
malicious
unknown
WMP11.AssocFile.AU
malicious
unknown
AutoIt3Script
malicious
unknown
WMP11.AssocFile.AVI
malicious
unknown
Paint.Picture
malicious
unknown
CABFolder
malicious
unknown
Microsoft.PowerShellCmdletDefinitionXML.1
malicious
unknown
CSSfile
malicious
unknown
ddsfile
malicious
unknown
Paint.Picture
malicious
unknown
dllfile
malicious
unknown
emffile
malicious
unknown
exefile
malicious
unknown
WMP11.AssocFile.FLAC
malicious
unknown
fonfile
malicious
unknown
giffile
malicious
unknown
htmlfile
malicious
unknown
htmlfile
malicious
unknown
icofile
malicious
unknown
inffile
malicious
unknown
inifile
malicious
unknown
pjpegfile
malicious
unknown
jpegfile
malicious
unknown
jpegfile
malicious
unknown
wdpfile
malicious
unknown
lnkfile
malicious
unknown
WMP11.AssocFile.MPEG
malicious
unknown
WMP11.AssocFile.M2TS
malicious
unknown
WMP11.AssocFile.m3u
malicious
unknown
WMP11.AssocFile.M4A
malicious
unknown
WMP11.AssocFile.MP4
malicious
unknown
mhtmlfile
malicious
unknown
mhtmlfile
malicious
unknown
WMP11.AssocFile.MIDI
malicious
unknown
WMP11.AssocFile.MK3D
malicious
unknown
WMP11.AssocFile.MKA
malicious
unknown
WMP11.AssocFile.MKV
malicious
unknown
WMP11.AssocFile.MPEG
malicious
unknown
WMP11.AssocFile.MOV
malicious
unknown
WMP11.AssocFile.MP3
malicious
unknown
WMP11.AssocFile.MPEG
malicious
unknown
WMP11.AssocFile.MP3
malicious
unknown
WMP11.AssocFile.MP4
malicious
unknown
WMP11.AssocFile.MP4
malicious
unknown
WMP11.AssocFile.MPEG
malicious
unknown
WMP11.AssocFile.MPEG
malicious
unknown
WMP11.AssocFile.M2TS
malicious
unknown
ocxfile
malicious
unknown
otffile
malicious
unknown
pngfile
malicious
unknown
Microsoft.PowerShellScript.1
malicious
unknown
Microsoft.PowerShellXMLData.1
malicious
unknown
Microsoft.PowerShellData.1
malicious
unknown
Microsoft.PowerShellModule.1
malicious
unknown
Microsoft.PowerShellSessionConfiguration.1
malicious
unknown
rlefile
malicious
unknown
WMP11.AssocFile.MIDI
malicious
unknown
SHCmdFile
malicious
unknown
SearchFolder
malicious
unknown
shtmlfile
malicious
unknown
WMP11.AssocFile.AU
malicious
unknown
sysfile
malicious
unknown
TIFImage.Document
malicious
unknown
TIFImage.Document
malicious
unknown
WMP11.AssocFile.TTS
malicious
unknown
ttcfile
malicious
unknown
ttffile
malicious
unknown
WMP11.AssocFile.TTS
malicious
unknown
txtfile
malicious
unknown
WMP11.AssocFile.WAV
malicious
unknown
WMP11.AssocFile.WAX
malicious
unknown
wdpfile
malicious
unknown
WMP11.AssocFile.ASF
malicious
unknown
WMP11.AssocFile.WMA
malicious
unknown
wmffile
malicious
unknown
WMP11.AssocFile.WMV
malicious
unknown
WMP11.AssocFile.ASX
malicious
unknown
WMP11.AssocFile.WPL
malicious
unknown
WMP11.AssocFile.WVX
malicious
unknown
xmlfile
malicious
unknown
xslfile
malicious
unknown
TaskbarStateLastRun
malicious
unknown
Implementing
malicious
unknown
SlowContextMenuEntries
malicious
unknown
TaskbarStateLastRun
malicious
unknown
Implementing
malicious
unknown
TaskbarStateLastRun
malicious
unknown
Implementing
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
There are 187 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
A20000
trusted library allocation
page read and write
malicious
25D0000
unclassified section
page execute and read and write
malicious
24E1000
system
page execute read
malicious
9D0000
unclassified section
page execute and read and write
malicious
1680000
direct allocation
page read and write
malicious
330000
system
page execute and read and write
malicious
2E40000
unclassified section
page execute and read and write
malicious
C8DE000
unkown
page read and write
A33F000
unkown
page read and write
35C9000
unkown
page read and write
7FF5D7280000
unkown
page readonly
3120000
unkown
page read and write
7FF5D76E8000
unkown
page readonly
1380000
heap
page read and write
7FF5D71AF000
unkown
page readonly
4A71000
unkown
page read and write
2F7F000
stack
page read and write
9A96000
unkown
page read and write
A40E000
unkown
page read and write
9A9E000
unkown
page read and write
A2A2000
unkown
page read and write
790000
heap
page read and write
C9B4000
unkown
page read and write
7FF5D76DA000
unkown
page readonly
42ED000
direct allocation
page read and write
84FC000
unkown
page read and write
1340000
unkown
page read and write
7693000
unkown
page read and write
C9F8000
unkown
page read and write
7FF5D71DA000
unkown
page readonly
AF0000
trusted library allocation
page execute and read and write
C5FA000
unkown
page read and write
7FF5D7292000
unkown
page readonly
C605000
unkown
page read and write
7FF5D75D6000
unkown
page readonly
B4D0000
unkown
page readonly
7FF5D71EA000
unkown
page readonly
7FF5D7398000
unkown
page readonly
C496000
unkown
page read and write
7FF5D762F000
unkown
page readonly
2600000
heap
page read and write
85BE000
stack
page read and write
7FF5D7722000
unkown
page readonly
9D0000
trusted library allocation
page read and write
F490000
unkown
page read and write
C9FA000
unkown
page read and write
7FF5D76AF000
unkown
page readonly
7FF5D7391000
unkown
page readonly
9E2E000
stack
page read and write
7FF5D71C8000
unkown
page readonly
3170000
unkown
page read and write
7FF5D7820000
unkown
page readonly
9ADB000
unkown
page read and write
3C4B000
heap
page read and write
7FF5D7820000
unkown
page readonly
7DF4F2460000
unkown
page readonly
3350000
unclassified section
page execute and read and write
C5F0000
unkown
page read and write
B8DB000
stack
page read and write
C932000
unkown
page read and write
7FF5D7202000
unkown
page readonly
C621000
unkown
page read and write
7B80000
unkown
page readonly
4A71000
unkown
page read and write
2613000
heap
page read and write
91F0000
unkown
page readonly
7FF5D75A6000
unkown
page readonly
7FF5D7643000
unkown
page readonly
3D4000
heap
page read and write
9A000
stack
page read and write
B8DB000
stack
page read and write
3D4000
heap
page read and write
30FB000
stack
page read and write
370E000
stack
page read and write
C663000
unkown
page read and write
76F8000
unkown
page read and write
7FF5D7604000
unkown
page readonly
35E4000
unkown
page read and write
CA0C000
unkown
page read and write
2613000
heap
page read and write
7FF5D760E000
unkown
page readonly
C625000
unkown
page read and write
4986000
unkown
page read and write
3D4000
heap
page read and write
C908000
unkown
page read and write
C9E8000
unkown
page read and write
7FF5D7792000
unkown
page readonly
7FF5D75E9000
unkown
page readonly
7FF5D72E9000
unkown
page readonly
7FF5D7438000
unkown
page readonly
7FF5D76C8000
unkown
page readonly
3D91000
heap
page read and write
7FF5D76F5000
unkown
page readonly
7FF5D7419000
unkown
page readonly
C621000
unkown
page read and write
9A9E000
unkown
page read and write
3CB7000
heap
page read and write
AA04000
unkown
page read and write
7FF5D74A6000
unkown
page readonly
6D0000
trusted library allocation
page read and write
1000000
heap
page read and write
7DF4F2491000
unkown
page execute read
7FF5D77E9000
unkown
page readonly
A9DF000
unkown
page read and write
F4D8000
unkown
page read and write
1162E000
system
page execute and read and write
A251000
unkown
page read and write
6D0000
trusted library allocation
page read and write
11609000
system
page execute and read and write
CA00000
unkown
page read and write
7C80000
unkown
page read and write
C62D000
unkown
page read and write
6D0000
trusted library allocation
page read and write
3B0F000
stack
page read and write
2BCF000
stack
page read and write
3100000
unkown
page read and write
CA08000
unkown
page read and write
7FF5D72D0000
unkown
page readonly
7FF5D770F000
unkown
page readonly
7DF4F24A1000
unkown
page execute read
7FF5D732D000
unkown
page readonly
4A12000
unkown
page read and write
7FF5D758D000
unkown
page readonly
10696000
unkown
page read and write
7FF5D75FF000
unkown
page readonly
3630000
unkown
page readonly
7B10000
unkown
page read and write
3D4000
heap
page read and write
7FF5D75CB000
unkown
page readonly
3029000
direct allocation
page execute and read and write
35FA000
unkown
page read and write
B90000
trusted library allocation
page read and write
35F4000
unkown
page read and write
9A80000
unkown
page read and write
8F46000
stack
page read and write
9E2D000
stack
page read and write
6D0000
trusted library allocation
page read and write
3C68000
heap
page read and write
10629000
unkown
page read and write
4A40000
unkown
page read and write
9ADB000
unkown
page read and write
7FF5D738E000
unkown
page readonly
3081000
direct allocation
page execute and read and write
7B60000
unkown
page readonly
7FF5D772C000
unkown
page readonly
3DB3000
heap
page read and write
1383000
heap
page read and write
84BB000
stack
page read and write
768C000
unkown
page read and write
7FF5D7442000
unkown
page readonly
A2A2000
unkown
page read and write
49BB000
unkown
page read and write
7FF5D74FA000
unkown
page readonly
79B000
heap
page read and write
7FF5D7534000
unkown
page readonly
1350000
unkown
page readonly
B90000
trusted library allocation
page read and write
4A16000
unkown
page read and write
435E000
direct allocation
page read and write
7E60000
unkown
page read and write
7E60000
unkown
page read and write
1390000
heap
page read and write
3D4000
heap
page read and write
7DF4F2480000
unkown
page readonly
7FF5D7604000
unkown
page readonly
C7CB000
unkown
page read and write
7FF5CE343000
unkown
page readonly
C47F000
unkown
page read and write
7AF1000
unkown
page read and write
6D0000
trusted library allocation
page read and write
C1CC000
stack
page read and write
7FF5D7591000
unkown
page readonly
1360000
unkown
page readonly
B4BF000
stack
page read and write
7FF5D74F2000
unkown
page readonly
35D3000
unkown
page read and write
A9E9000
unkown
page read and write
7FF5D77D2000
unkown
page readonly
C9B7000
unkown
page read and write
35D1000
unkown
page read and write
CA4F000
unkown
page read and write
100000
heap
page read and write
A313000
unkown
page read and write
1281000
unkown
page readonly
8360000
unkown
page read and write
7FF5D781A000
unkown
page readonly
7FF5D74A6000
unkown
page readonly
7FF5D77CD000
unkown
page readonly
7FF5D6BEF000
unkown
page readonly
4020000
direct allocation
page read and write
C9F4000
unkown
page read and write
C9FA000
unkown
page read and write
7FF5D72FB000
unkown
page readonly
7AB0000
unkown
page read and write
7FF5D7280000
unkown
page readonly
7435000
stack
page read and write
31D1000
direct allocation
page execute and read and write
3D4000
heap
page read and write
7FF5D7591000
unkown
page readonly
9AC3000
unkown
page read and write
9AC3000
unkown
page read and write
C617000
unkown
page read and write
7FF5D7488000
unkown
page readonly
779E000
unkown
page read and write
7FF5D75E9000
unkown
page readonly
A12F000
stack
page read and write
1383000
heap
page read and write
8DCE000
stack
page read and write
94F4000
unkown
page read and write
3B11000
heap
page read and write
8890000
unkown
page readonly
7FF5D7669000
unkown
page readonly
42ED000
direct allocation
page read and write
9AAC000
unkown
page read and write
9D67000
unkown
page read and write
E00000
unkown
page readonly
7FF5D77A8000
unkown
page readonly
BF3E000
stack
page read and write
13A0000
unkown
page readonly
7611000
unkown
page read and write
106D4000
unkown
page read and write
4980000
unkown
page read and write
C9F2000
unkown
page read and write
C9E8000
unkown
page read and write
8360000
unkown
page read and write
C605000
unkown
page read and write
7FF5D7257000
unkown
page readonly
4143000
direct allocation
page read and write
761E000
unkown
page read and write
401000
unkown
page execute read
2613000
heap
page read and write
7FF5D77DA000
unkown
page readonly
11619000
system
page execute and read and write
353D000
unkown
page read and write
8BB1000
unkown
page read and write
49FA000
unkown
page read and write
CA06000
unkown
page read and write
7DF4F2471000
unkown
page execute read
2B80000
heap
page read and write
1250000
unkown
page read and write
CA02000
unkown
page read and write
EB5000
stack
page read and write
9AAC000
unkown
page read and write
7FF5D762F000
unkown
page readonly
4020000
direct allocation
page read and write
7FF5D77B6000
unkown
page readonly
7686000
unkown
page read and write
42E9000
direct allocation
page read and write
BB10000
heap
page read and write
7FF5D7792000
unkown
page readonly
2560000
heap
page read and write
C48B000
unkown
page read and write
7FF5D7482000
unkown
page readonly
3D4000
heap
page read and write
A3C3000
unkown
page read and write
F4CD000
unkown
page read and write
C9EE000
unkown
page read and write
7FF5D7705000
unkown
page readonly
33F0000
unkown
page read and write
31CD000
direct allocation
page execute and read and write
7FF5D7236000
unkown
page readonly
4980000
unkown
page read and write
4143000
direct allocation
page read and write
105D4000
unkown
page read and write
7FF5D7309000
unkown
page readonly
7FF5D774C000
unkown
page readonly
3D4000
heap
page read and write
8D1000
heap
page read and write
7FF5D706E000
unkown
page readonly
2D70000
trusted library allocation
page read and write
3020000
unkown
page read and write
7FF5D72BF000
unkown
page readonly
3D4000
heap
page read and write
C4DC000
unkown
page read and write
7FF5D75F6000
unkown
page readonly
768E000
unkown
page read and write
9A84000
unkown
page read and write
7FF5D72CE000
unkown
page readonly
2800000
heap
page read and write
2BE1000
trusted library allocation
page execute and read and write
7654000
unkown
page read and write
1395000
heap
page read and write
CA08000
unkown
page read and write
8E4E000
stack
page read and write
3D91000
heap
page read and write
769A000
unkown
page read and write
7FF5D71D7000
unkown
page readonly
115A0000
system
page execute and read and write
7FF5D75F6000
unkown
page readonly
761E000
unkown
page read and write
7460000
unkown
page read and write
7FF5D7404000
unkown
page readonly
7FF5D77C7000
unkown
page readonly
C8E3000
unkown
page read and write
7FF5D706F000
unkown
page readonly
9C22000
unkown
page read and write
AAAA000
unkown
page read and write
9AF9000
unkown
page read and write
3532000
unkown
page read and write
F4F0000
unkown
page read and write
C625000
unkown
page read and write
35B3000
unkown
page read and write
35CD000
unkown
page read and write
A251000
unkown
page read and write
9AC3000
unkown
page read and write
9A76000
unkown
page read and write
7FF5D7795000
unkown
page readonly
2C90000
heap
page read and write
8FD8000
stack
page read and write
42ED000
direct allocation
page read and write
3500000
stack
page read and write
7DD0000
heap
page read and write
7FF5D75C1000
unkown
page readonly
BFB8000
stack
page read and write
41C0000
direct allocation
page read and write
3402000
unclassified section
page execute and read and write
7FF5D7455000
unkown
page readonly
10714000
unkown
page read and write
7FF5D7523000
unkown
page readonly
7FF5D752F000
unkown
page readonly
49C2000
unkown
page read and write
3C57000
heap
page read and write
A10000
heap
page read and write
7FF5D75F2000
unkown
page readonly
7FF5D775C000
unkown
page readonly
2C7E000
stack
page read and write
7FF5D71F9000
unkown
page readonly
F490000
unkown
page read and write
CA4C000
unkown
page read and write
2EDD000
direct allocation
page execute and read and write
C9FA000
unkown
page read and write
C1CC000
stack
page read and write
10653000
unkown
page read and write
CA0A000
unkown
page read and write
11FE000
unkown
page read and write
2F0E000
stack
page read and write
24FF000
system
page execute and read and write
2C60000
heap
page read and write
7FF5D77DA000
unkown
page readonly
CA0A000
unkown
page read and write
3160000
unkown
page read and write
4ADA000
unkown
page read and write
2BC000
stack
page read and write
F4FE000
unkown
page read and write
7631000
unkown
page read and write
C24E000
stack
page read and write
A416000
unkown
page read and write
4AA0000
unkown
page read and write
1281000
unkown
page readonly
33C0000
unkown
page read and write
7FF5D72DF000
unkown
page readonly
2B00000
heap
page read and write
74F000
stack
page read and write
3540000
unkown
page read and write
7FF5D7593000
unkown
page readonly
35CF000
unkown
page read and write
7FF5D7784000
unkown
page readonly
2F00000
direct allocation
page execute and read and write
35FA000
unkown
page read and write
9B41000
unkown
page read and write
4020000
direct allocation
page read and write
7FF5D77D2000
unkown
page readonly
B4BF000
stack
page read and write
7FF5D7360000
unkown
page readonly
A1AF000
stack
page read and write
3DB2000
heap
page read and write
CA4B000
unkown
page read and write
11E4000
unkown
page read and write
C642000
unkown
page read and write
8AF000
stack
page read and write
C9F6000
unkown
page read and write
7FF5D77B9000
unkown
page readonly
35F4000
unkown
page read and write
C460000
unkown
page read and write
AA0B000
unkown
page read and write
12D0000
unkown
page readonly
2D70000
trusted library allocation
page read and write
C61D000
unkown
page read and write
7FF5D7284000
unkown
page readonly
7FF5D7336000
unkown
page readonly
C44F000
stack
page read and write
AA97000
unkown
page read and write
9EB0000
unkown
page readonly
33F0000
unkown
page read and write
AAA0000
unkown
page read and write
3554000
unkown
page read and write
BE90000
unkown
page read and write
7FF5D7507000
unkown
page readonly
7FF5D75D9000
unkown
page readonly
CA02000
unkown
page read and write
AA05000
unkown
page read and write
3D4000
heap
page read and write
2812000
heap
page read and write
CA0A000
unkown
page read and write
7DF4F2491000
unkown
page execute read
7FF5D744E000
unkown
page readonly
7440000
unkown
page read and write
768E000
unkown
page read and write
C47F000
unkown
page read and write
3DB2000
heap
page execute and read and write
CA4B000
unkown
page read and write
8FCF000
stack
page read and write
C9FE000
unkown
page read and write
7FF5D7593000
unkown
page readonly
24E0000
system
page execute and read and write
7B10000
unkown
page read and write
6D0000
trusted library allocation
page read and write
9A8E000
unkown
page read and write
42E9000
direct allocation
page read and write
9BA1000
unkown
page read and write
7FF5D71A6000
unkown
page readonly
A23A000
unkown
page read and write
4143000
direct allocation
page read and write
C862000
unkown
page read and write
BEA0000
unkown
page readonly
C9F4000
unkown
page read and write
C91A000
unkown
page read and write
C9EE000
unkown
page read and write
35E4000
unkown
page read and write
A2B5000
unkown
page read and write
C908000
unkown
page read and write
C61B000
unkown
page read and write
7FF5D7764000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7FF5D779E000
unkown
page readonly
75FD000
unkown
page read and write
42E9000
direct allocation
page read and write
C9FC000
unkown
page read and write
CA08000
unkown
page read and write
C4BD000
unkown
page read and write
F4C5000
unkown
page read and write
9AA0000
unkown
page read and write
BDC0000
unkown
page read and write
BDC0000
unkown
page read and write
97FF000
stack
page read and write
7FF5D765F000
unkown
page readonly
CA08000
unkown
page read and write
843F000
stack
page read and write
7FF5D7703000
unkown
page readonly
C65E000
unkown
page read and write
1E5000
heap
page read and write
35C1000
unkown
page read and write
CA0C000
unkown
page read and write
49FD000
unkown
page read and write
C993000
unkown
page read and write
7DBD000
stack
page read and write
3D4000
heap
page read and write
6D0000
trusted library allocation
page read and write
942C000
stack
page read and write
7FF5D7669000
unkown
page readonly
7FF5D7419000
unkown
page readonly
7FF5D71BF000
unkown
page readonly
BB0D000
stack
page read and write
9AB4000
unkown
page read and write
35DC000
unkown
page read and write
9A80000
unkown
page read and write
AA09000
unkown
page read and write
7FF5D7752000
unkown
page readonly
7FF5D728E000
unkown
page readonly
9AF9000
unkown
page read and write
9A94000
unkown
page read and write
7FF5D71CC000
unkown
page readonly
35B0000
unkown
page read and write
C5F0000
unkown
page read and write
161E000
stack
page read and write
7FF5D77B9000
unkown
page readonly
7FF5D72E9000
unkown
page readonly
7FF5D766E000
unkown
page readonly
AE1D000
stack
page read and write
4A90000
unkown
page read and write
CA02000
unkown
page read and write
10DCF000
system
page read and write
41C0000
direct allocation
page read and write
7FF5D76C8000
unkown
page readonly
C9FC000
unkown
page read and write
3D4000
heap
page read and write
3106000
unclassified section
page read and write
C9FC000
unkown
page read and write
9679000
stack
page read and write
1000000
heap
page read and write
1670000
heap
page read and write
15DE000
stack
page read and write
C9EA000
unkown
page read and write
7FF5D7391000
unkown
page readonly
CA0A000
unkown
page read and write
7FF5D7488000
unkown
page readonly
7FF5D7682000
unkown
page readonly
C4DC000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7FF5D7703000
unkown
page readonly
86D0000
unkown
page readonly
10A62000
unkown
page execute and read and write
10714000
unkown
page read and write
7FF5D720F000
unkown
page readonly
F4D2000
unkown
page read and write
CA0A000
unkown
page read and write
7FF5D75DF000
unkown
page readonly
4A44000
unkown
page read and write
435E000
direct allocation
page read and write
7FF5D7455000
unkown
page readonly
6D0000
trusted library allocation
page read and write
C81C000
unkown
page read and write
7FF5D72D3000
unkown
page readonly
2F4E000
direct allocation
page execute and read and write
9AB2000
unkown
page read and write
7FF5D774A000
unkown
page readonly
7FF5D7309000
unkown
page readonly
C9E8000
unkown
page read and write
7435000
stack
page read and write
7FF5D76DA000
unkown
page readonly
9B2C000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7618000
unkown
page read and write
7FF5D75FF000
unkown
page readonly
AE1D000
stack
page read and write
7FF5D75CB000
unkown
page readonly
7FF5D7648000
unkown
page readonly
4A90000
unkown
page read and write
6D0000
trusted library allocation
page read and write
2D70000
trusted library allocation
page read and write
7C70000
unkown
page readonly
C9E6000
unkown
page read and write
F4F4000
unkown
page read and write
7FF5D7376000
unkown
page readonly
77DB000
unkown
page read and write
C44F000
stack
page read and write
7FF5D723F000
unkown
page readonly
41C0000
direct allocation
page read and write
F49C000
unkown
page read and write
3534000
unkown
page read and write
F13000
heap
page read and write
2BD0000
trusted library allocation
page execute and read and write
C663000
unkown
page read and write
9B8A000
unkown
page read and write
3D4000
heap
page read and write
7FF5D6ABD000
unkown
page readonly
7E58000
stack
page read and write
A61000
trusted library allocation
page execute and read and write
C3CC000
stack
page read and write
A28D000
unkown
page read and write
3CE3000
heap
page read and write
F4B0000
unkown
page read and write
35D1000
unkown
page read and write
7FF5D774A000
unkown
page readonly
2805000
heap
page read and write
9C21000
unkown
page read and write
35C3000
unkown
page read and write
7FF5D772C000
unkown
page readonly
C862000
unkown
page read and write
89E0000
heap
page read and write
A9DF000
unkown
page read and write
7FF5D71F9000
unkown
page readonly
7FF5D776F000
unkown
page readonly
3D4000
heap
page read and write
7810000
unkown
page read and write
2DA0000
heap
page read and write
7FF5D7065000
unkown
page readonly
9A96000
unkown
page read and write
11F4000
unkown
page read and write
C472000
unkown
page read and write
A408000
unkown
page read and write
5463000
unkown
page read and write
8CB8000
stack
page read and write
7FF5D7694000
unkown
page readonly
9AA0000
unkown
page read and write
7FF5D7236000
unkown
page readonly
C954000
unkown
page read and write
7FF5D777A000
unkown
page readonly
7FF5D7202000
unkown
page readonly
7FF5D7262000
unkown
page readonly
7FF5D7799000
unkown
page readonly
4AC0000
unkown
page read and write
B4D0000
unkown
page readonly
C9FA000
unkown
page read and write
35B0000
unkown
page read and write
C9E0000
unkown
page read and write
7FF5D7760000
unkown
page readonly
7DF4F2461000
unkown
page execute read
A3AC000
unkown
page read and write
F4D2000
unkown
page read and write
C9FE000
unkown
page read and write
E10000
unkown
page readonly
7FF5D770A000
unkown
page readonly
6D0000
trusted library allocation
page read and write
435E000
direct allocation
page read and write
7FF5D7641000
unkown
page readonly
7FF5D719C000
unkown
page readonly
7FF5D74F2000
unkown
page readonly
7FF5D77EB000
unkown
page readonly
7FF5D72BF000
unkown
page readonly
A384000
unkown
page read and write
7FF5D7639000
unkown
page readonly
C5F4000
unkown
page read and write
A286000
unkown
page read and write
CA0C000
unkown
page read and write
7B60000
unkown
page readonly
C9F8000
unkown
page read and write
25CE000
stack
page read and write
2E29000
heap
page read and write
CA3B000
unkown
page read and write
7FF5D71E6000
unkown
page readonly
F0C000
heap
page read and write
B220000
unkown
page read and write
1061B000
unkown
page read and write
2FC0000
heap
page read and write
7FF5D748A000
unkown
page readonly
CA08000
unkown
page read and write
2580000
heap
page read and write
AA10000
unkown
page read and write
7FF5D716B000
unkown
page readonly
9AF9000
unkown
page read and write
7FF5D7385000
unkown
page readonly
3CB7000
heap
page read and write
7FF5D7795000
unkown
page readonly
7FF5D7700000
unkown
page readonly
8870000
unkown
page readonly
7FF5D71EF000
unkown
page readonly
7FF5D770A000
unkown
page readonly
7FF5D783B000
unkown
page readonly
7A1000
heap
page read and write
7FF5D75F9000
unkown
page readonly
2EC0000
unkown
page readonly
35D5000
unkown
page read and write
7FF5D6AB6000
unkown
page readonly
7FF5D7507000
unkown
page readonly
B0E0000
unkown
page readonly
3489000
stack
page read and write
C46F000
unkown
page read and write
7C80000
unkown
page read and write
3D4000
heap
page read and write
7DC0000
unkown
page readonly
C9F6000
unkown
page read and write
C9F4000
unkown
page read and write
75E0000
unkown
page read and write
BF3E000
stack
page read and write
C9F6000
unkown
page read and write
33C3000
unclassified section
page execute and read and write
C9F2000
unkown
page read and write
7FF5D710B000
unkown
page readonly
A416000
unkown
page read and write
8880000
unkown
page readonly
AA0B000
unkown
page read and write
75F8000
unkown
page read and write
2E80000
trusted library allocation
page execute and read and write
7B80000
unkown
page readonly
49A8000
unkown
page read and write
9AAA000
unkown
page read and write
7FF5D748C000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7DF4F2480000
unkown
page readonly
35F4000
unkown
page read and write
99C0000
unkown
page read and write
B330000
unkown
page read and write
C78A000
unkown
page read and write
7FF5D77F7000
unkown
page readonly
10696000
unkown
page read and write
C9EE000
unkown
page read and write
2500000
system
page execute read
B01000
trusted library allocation
page execute and read and write
99B0000
unkown
page read and write
9A76000
unkown
page read and write
7693000
unkown
page read and write
E450000
unkown
page read and write
9A76000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7FF5D7643000
unkown
page readonly
9C92000
unkown
page read and write
4020000
direct allocation
page read and write
3D27000
heap
page read and write
9679000
stack
page read and write
7FF5D7215000
unkown
page readonly
7FF5D77EB000
unkown
page readonly
1160000
unkown
page read and write
1580000
heap
page read and write
C9C6000
unkown
page read and write
7DF4F2471000
unkown
page execute read
9A96000
unkown
page read and write
7FF5D74B8000
unkown
page readonly
7FF5D741B000
unkown
page readonly
99B0000
unkown
page read and write
7FF5D71EF000
unkown
page readonly
2F7F000
stack
page read and write
8ECC000
stack
page read and write
362A000
unkown
page read and write
6D0000
trusted library allocation
page read and write
53E1000
unkown
page read and write
7DF4F2460000
unkown
page readonly
7FF5D76F5000
unkown
page readonly
C908000
unkown
page read and write
7FF5D7244000
unkown
page readonly
C9F4000
unkown
page read and write
7FF5D71CC000
unkown
page readonly
7FF5CE33D000
unkown
page readonly
7FF5D7407000
unkown
page readonly
7FF5D7075000
unkown
page readonly
E10000
unkown
page readonly
7C31000
unkown
page read and write
C9E6000
unkown
page read and write
C9FA000
unkown
page read and write
7989000
stack
page read and write
C7BE000
unkown
page read and write
3280000
unkown
page read and write
3D4000
heap
page read and write
9B41000
unkown
page read and write
C928000
unkown
page read and write
B950000
unkown
page readonly
7FF5D71BF000
unkown
page readonly
300F000
stack
page read and write
7FF5D75D6000
unkown
page readonly
1F0000
heap
page read and write
7FF5D71E0000
unkown
page readonly
41C0000
direct allocation
page read and write
6D0000
trusted library allocation
page read and write
9A6A000
unkown
page read and write
7FF5D720F000
unkown
page readonly
CA04000
unkown
page read and write
7FF5D73F5000
unkown
page readonly
3D4000
heap
page read and write
7609000
unkown
page read and write
C9FC000
unkown
page read and write
9A8C000
unkown
page read and write
7FF5D77F7000
unkown
page readonly
760F000
unkown
page read and write
7FF5D7558000
unkown
page readonly
3D4000
heap
page read and write
334F000
stack
page read and write
3120000
unkown
page read and write
CA1F000
unkown
page read and write
8BB1000
unkown
page read and write
6D0000
trusted library allocation
page read and write
1731000
unkown
page readonly
8D1000
heap
page read and write
B49000
heap
page read and write
AA40000
unkown
page read and write
7FF5D768B000
unkown
page readonly
362A000
unkown
page read and write
C9EE000
unkown
page read and write
116E000
stack
page read and write
482000
unkown
page readonly
7FF5D705D000
unkown
page readonly
7FF5D75EE000
unkown
page readonly
9ADB000
unkown
page read and write
C9C6000
unkown
page read and write
A0A9000
stack
page read and write
BE49000
stack
page read and write
7FF5D76E8000
unkown
page readonly
1340000
unkown
page read and write
7FF5D7589000
unkown
page readonly
BB9C000
stack
page read and write
7FF5D73F5000
unkown
page readonly
7FF5D7740000
unkown
page readonly
7DF4F2481000
unkown
page execute read
9B0B000
unkown
page read and write
E00000
unkown
page readonly
AA0E000
unkown
page read and write
C9F6000
unkown
page read and write
9A72000
unkown
page read and write
7FF5D7404000
unkown
page readonly
7FF5D7534000
unkown
page readonly
C8E3000
unkown
page read and write
7FF5D77FD000
unkown
page readonly
A28D000
unkown
page read and write
F4C4000
unkown
page read and write
16B5000
heap
page read and write
4020000
direct allocation
page read and write
C9F4000
unkown
page read and write
7FF5D7485000
unkown
page readonly
A39F000
unkown
page read and write
7FF5D7722000
unkown
page readonly
8F0000
heap
page read and write
2613000
heap
page read and write
4AC0000
unkown
page read and write
798000
heap
page read and write
7FF5D77E3000
unkown
page readonly
8D0000
heap
page read and write
7FF5D7452000
unkown
page readonly
7D3E000
stack
page read and write
8D3E000
stack
page read and write
4A12000
unkown
page read and write
98FD000
stack
page read and write
7AC0000
unkown
page read and write
95FD000
stack
page read and write
7FF5D7425000
unkown
page readonly
3DA2000
heap
page read and write
89EA000
heap
page read and write
2817000
heap
page read and write
7FF5D743F000
unkown
page readonly
7FF5D7289000
unkown
page readonly
7FF5D720A000
unkown
page readonly
BF0000
system
page execute and read and write
B980000
unkown
page readonly
7FF5D745B000
unkown
page readonly
7FF5D747F000
unkown
page readonly
CA0A000
unkown
page read and write
7FF5D66E3000
unkown
page readonly
7FF5D7385000
unkown
page readonly
49D6000
unkown
page read and write
7FF5D7442000
unkown
page readonly
8979000
stack
page read and write
C7CB000
unkown
page read and write
1380000
heap
page read and write
C806000
unkown
page read and write
C9FC000
unkown
page read and write
A39F000
unkown
page read and write
4AA0000
unkown
page read and write
BE49000
stack
page read and write
7FF5D77FD000
unkown
page readonly
35BD000
unkown
page read and write
3D4000
heap
page read and write
94AB000
stack
page read and write
4AEA000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7605000
unkown
page read and write
7FF5D760B000
unkown
page readonly
CA04000
unkown
page read and write
C5FD000
unkown
page read and write
7FF5D7458000
unkown
page readonly
41C0000
direct allocation
page read and write
CA08000
unkown
page read and write
9A8E000
unkown
page read and write
35D3000
unkown
page read and write
881C000
stack
page read and write
C9FE000
unkown
page read and write
C9F6000
unkown
page read and write
9B8A000
unkown
page read and write
843F000
stack
page read and write
7FF5D7230000
unkown
page readonly
7FF5D7485000
unkown
page readonly
C9EE000
unkown
page read and write
C5FA000
unkown
page read and write
B7DD000
stack
page read and write
9D67000
unkown
page read and write
3D4000
heap
page read and write
7FF5D71C8000
unkown
page readonly
7FF5D71A6000
unkown
page readonly
7FF5D72BD000
unkown
page readonly
49B000
stack
page read and write
7FF5D7745000
unkown
page readonly
AA01000
unkown
page read and write
76F8000
unkown
page read and write
4A0E000
unkown
page read and write
3100000
unkown
page read and write
7AA0000
unkown
page read and write
8FA000
heap
page read and write
F4C2000
unkown
page read and write
C9EA000
unkown
page read and write
A50000
trusted library allocation
page execute and read and write
A3C3000
unkown
page read and write
99B1000
unkown
page read and write
49C2000
unkown
page read and write
C9F8000
unkown
page read and write
EB5000
stack
page read and write
7FF5D7799000
unkown
page readonly
796000
heap
page read and write
4A7000
unkown
page read and write
7FF5D72D7000
unkown
page readonly
4AB000
unkown
page readonly
C460000
unkown
page read and write
7FF5D7077000
unkown
page readonly
9A80000
unkown
page read and write
CA0C000
unkown
page read and write
2ED9000
direct allocation
page execute and read and write
7FF5D770F000
unkown
page readonly
7FF5D710B000
unkown
page readonly
7686000
unkown
page read and write
CA04000
unkown
page read and write
CA00000
unkown
page read and write
35CD000
unkown
page read and write
6D0000
trusted library allocation
page read and write
3D4000
heap
page read and write
2B70000
heap
page read and write
3D0000
heap
page read and write
A12F000
stack
page read and write
CA06000
unkown
page read and write
B90000
trusted library allocation
page read and write
7FF5D75B8000
unkown
page readonly
C9E6000
unkown
page read and write
9D67000
unkown
page read and write
3D4000
heap
page read and write
C4C6000
unkown
page read and write
8B4000
stack
page read and write
C8ED000
unkown
page read and write
9576000
stack
page read and write
9AB2000
unkown
page read and write
9579000
stack
page read and write
7FF5D7523000
unkown
page readonly
7FF5D72D7000
unkown
page readonly
49D6000
unkown
page read and write
7DBD000
stack
page read and write
3C10000
heap
page read and write
C95B000
unkown
page read and write
7FF5D7837000
unkown
page readonly
9A8C000
unkown
page read and write
7FF5D77A4000
unkown
page readonly
7FF5D71E0000
unkown
page readonly
7FF5D76CD000
unkown
page readonly
77A0000
unkown
page read and write
9C96000
unkown
page read and write
AA92000
unkown
page read and write
A220000
unkown
page read and write
35BD000
unkown
page read and write
7FF5D77DD000
unkown
page readonly
401000
unkown
page execute read
2817000
heap
page read and write
7FF5D75BF000
unkown
page readonly
3D4000
heap
page read and write
7FF5D741F000
unkown
page readonly
112E000
stack
page read and write
7FF5D7464000
unkown
page readonly
12B0000
unkown
page read and write
1270000
unkown
page read and write
7FF5D76AF000
unkown
page readonly
7C90000
unkown
page read and write
7FF5D7546000
unkown
page readonly
7FF5D75B8000
unkown
page readonly
7FF5D6AB6000
unkown
page readonly
B85A000
stack
page read and write
7FF5D71E6000
unkown
page readonly
3626000
unkown
page read and write
7FF5D749B000
unkown
page readonly
31B0000
heap
page read and write
86D0000
unkown
page readonly
7FF5D778A000
unkown
page readonly
AA01000
unkown
page read and write
7FF5CE33D000
unkown
page readonly
AA9A000
unkown
page read and write
35BD000
unkown
page read and write
2D70000
trusted library allocation
page read and write
760D000
unkown
page read and write
7FF5D758D000
unkown
page readonly
7B3000
heap
page read and write
C9EE000
unkown
page read and write
A408000
unkown
page read and write
10BD6000
system
page read and write
7FF5D7760000
unkown
page readonly
3535000
unkown
page read and write
AAAA000
unkown
page read and write
C9FE000
unkown
page read and write
7FF5CE343000
unkown
page readonly
C5F8000
unkown
page read and write
7FF5D75B3000
unkown
page readonly
7B20000
unkown
page read and write
C95B000
unkown
page read and write
7FF5D72DF000
unkown
page readonly
7DF4F2470000
unkown
page readonly
C78A000
unkown
page read and write
2805000
heap
page read and write
6D0000
trusted library allocation
page read and write
8C39000
stack
page read and write
89EA000
heap
page read and write
3140000
unkown
page read and write
3C7D000
heap
page read and write
3A0000
heap
page read and write
7FF5D752F000
unkown
page readonly
A2B5000
unkown
page read and write
CA02000
unkown
page read and write
B7DD000
stack
page read and write
7FF5D76D5000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7DF4F2461000
unkown
page execute read
7FF5D7808000
unkown
page readonly
4143000
direct allocation
page read and write
3530000
unkown
page read and write
7FF5D776F000
unkown
page readonly
3B10000
heap
page read and write
7FF5D738E000
unkown
page readonly
106D4000
unkown
page read and write
C615000
unkown
page read and write
85BE000
stack
page read and write
8D1000
heap
page read and write
2901000
heap
page read and write
C85F000
unkown
page read and write
A39C000
unkown
page read and write
96FE000
stack
page read and write
49FD000
unkown
page read and write
7FF5D7589000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7FF5D77C7000
unkown
page readonly
C642000
unkown
page read and write
C450000
unkown
page read and write
CA06000
unkown
page read and write
35D5000
unkown
page read and write
2602000
heap
page read and write
CA58000
unkown
page read and write
3020000
unkown
page read and write
EF0000
heap
page read and write
C9EA000
unkown
page read and write
B330000
unkown
page read and write
7FF5D75AF000
unkown
page readonly
9A94000
unkown
page read and write
C4C6000
unkown
page read and write
3B7D000
heap
page read and write
7B20000
unkown
page read and write
7FF5D748A000
unkown
page readonly
9D67000
unkown
page read and write
CA4B000
unkown
page read and write
C9FE000
unkown
page read and write
6D0000
trusted library allocation
page read and write
9BA9000
unkown
page read and write
33B0000
unkown
page readonly
7FF5D75F2000
unkown
page readonly
7FF5D744E000
unkown
page readonly
AFBE000
stack
page read and write
7FF5D7558000
unkown
page readonly
CA00000
unkown
page read and write
FF0000
unkown
page readonly
F13000
heap
page read and write
FF0000
unkown
page readonly
C9E6000
unkown
page read and write
35DC000
unkown
page read and write
3400000
unkown
page read and write
9BA1000
unkown
page read and write
7FF5D72BD000
unkown
page readonly
CA00000
unkown
page read and write
1360000
unkown
page readonly
338E000
stack
page read and write
7611000
unkown
page read and write
7FF5D6BDB000
unkown
page readonly
C9EE000
unkown
page read and write
7FF5D7215000
unkown
page readonly
B980000
unkown
page readonly
3170000
unkown
page read and write
362A000
unkown
page read and write
C9E6000
unkown
page read and write
7FF5D75F9000
unkown
page readonly
A40E000
unkown
page read and write
C669000
unkown
page read and write
8A00000
unkown
page read and write
2613000
heap
page read and write
3D4000
heap
page read and write
7FF5D77C2000
unkown
page readonly
8880000
unkown
page readonly
7440000
unkown
page read and write
B85A000
stack
page read and write
362D000
unkown
page read and write
7FF5D71D7000
unkown
page readonly
7AC0000
unkown
page read and write
C892000
unkown
page read and write
C0BA000
stack
page read and write
F0C000
heap
page read and write
10629000
unkown
page read and write
9A98000
unkown
page read and write
75E0000
unkown
page read and write
9AA0000
unkown
page read and write
7FF5D77F0000
unkown
page readonly
C61B000
unkown
page read and write
6D0000
trusted library allocation
page read and write
2DCE000
unkown
page read and write
C806000
unkown
page read and write
4AB0000
unkown
page read and write
7B00000
unkown
page readonly
7637000
unkown
page read and write
2613000
heap
page read and write
77A2000
unkown
page read and write
3554000
unkown
page read and write
7FF5D7808000
unkown
page readonly
9AA8000
unkown
page read and write
B559000
stack
page read and write
7FF5D7292000
unkown
page readonly
8A00000
unkown
page read and write
A2D7000
unkown
page read and write
3D4000
heap
page read and write
105D4000
unkown
page read and write
768C000
unkown
page read and write
C7C6000
unkown
page read and write
2D70000
trusted library allocation
page read and write
7FF5D7394000
unkown
page readonly
C5FD000
unkown
page read and write
35B5000
unkown
page read and write
3D4000
heap
page read and write
490000
unkown
page read and write
7DF4F2481000
unkown
page execute read
1E0000
heap
page read and write
7FF5D74C3000
unkown
page readonly
9B2C000
unkown
page read and write
CA0A000
unkown
page read and write
C9F2000
unkown
page read and write
C9F4000
unkown
page read and write
CA06000
unkown
page read and write
482000
unkown
page readonly
11607000
system
page execute and read and write
A26000
heap
page read and write
CA0C000
unkown
page read and write
9AA8000
unkown
page read and write
7FF5D775C000
unkown
page readonly
F4FE000
unkown
page read and write
F4F0000
unkown
page read and write
84FC000
unkown
page read and write
3F35000
heap
page read and write
7FF5D765F000
unkown
page readonly
2B3D000
stack
page read and write
C5F4000
unkown
page read and write
435E000
direct allocation
page read and write
7FF5D7396000
unkown
page readonly
8A46000
unkown
page read and write
3520000
unkown
page readonly
7810000
unkown
page read and write
7FF5D7065000
unkown
page readonly
2570000
heap
page readonly
4020000
direct allocation
page read and write
9A90000
unkown
page read and write
7FF5D71AF000
unkown
page readonly
7FF5D7262000
unkown
page readonly
2E70000
unclassified section
page execute and read and write
A264000
unkown
page read and write
9B41000
unkown
page read and write
16C0000
heap
page read and write
CA06000
unkown
page read and write
C81C000
unkown
page read and write
7FF5D749B000
unkown
page readonly
7AE0000
unkown
page read and write
42ED000
direct allocation
page read and write
C9DD000
unkown
page read and write
4B00000
unkown
page read and write
9A8E000
unkown
page read and write
CA02000
unkown
page read and write
BE90000
unkown
page read and write
2EC0000
unkown
page readonly
F4CD000
unkown
page read and write
B0E0000
unkown
page readonly
1395000
heap
page read and write
7FF5D771A000
unkown
page readonly
9AB4000
unkown
page read and write
3C36000
heap
page read and write
362D000
unkown
page read and write
7FF5D745B000
unkown
page readonly
A02E000
stack
page read and write
7FF5D7784000
unkown
page readonly
7FF5D7691000
unkown
page readonly
A2D7000
unkown
page read and write
3D4000
heap
page read and write
7FF5D6ABD000
unkown
page readonly
8A70000
unkown
page read and write
35CD000
unkown
page read and write
A9FD000
unkown
page read and write
2590000
trusted library allocation
page read and write
3C49000
heap
page read and write
2A3D000
stack
page read and write
435E000
direct allocation
page read and write
3D4000
heap
page read and write
2ECF000
unkown
page read and write
362D000
unkown
page read and write
7FF5D7376000
unkown
page readonly
A1AF000
stack
page read and write
77DB000
unkown
page read and write
C0BA000
stack
page read and write
B90000
trusted library allocation
page read and write
1350000
unkown
page readonly
35CF000
unkown
page read and write
7FF5D705D000
unkown
page readonly
35DC000
unkown
page read and write
2E91000
trusted library allocation
page execute and read and write
7FF5D66E8000
unkown
page readonly
2E40000
trusted library allocation
page read and write
3110000
unkown
page readonly
9AAA000
unkown
page read and write
B0BD000
stack
page read and write
7FF5D77CD000
unkown
page readonly
7609000
unkown
page read and write
10612000
unkown
page read and write
2DB0000
direct allocation
page execute and read and write
35B3000
unkown
page read and write
C9F2000
unkown
page read and write
7FF5D75C1000
unkown
page readonly
7FF5D7700000
unkown
page readonly
3D4000
heap
page read and write
9EB0000
unkown
page readonly
A3AC000
unkown
page read and write
798000
heap
page read and write
2530000
heap
page read and write
C9F4000
unkown
page read and write
C7C6000
unkown
page read and write
A3B9000
unkown
page read and write
89E2000
heap
page read and write
D2E000
stack
page read and write
2D2F000
heap
page read and write
35B5000
unkown
page read and write
7FF5D729E000
unkown
page readonly
3D4000
heap
page read and write
B0BD000
stack
page read and write
7460000
unkown
page read and write
8A70000
unkown
page read and write
7FF5D760E000
unkown
page readonly
7FF5D72CE000
unkown
page readonly
C9F2000
unkown
page read and write
A23A000
unkown
page read and write
98FD000
stack
page read and write
11D3000
unkown
page read and write
AA92000
unkown
page read and write
A3AA000
unkown
page read and write
C9FC000
unkown
page read and write
41C0000
direct allocation
page read and write
A9A0000
unkown
page read and write
4A40000
unkown
page read and write
AA0B000
unkown
page read and write
75FD000
unkown
page read and write
7B00000
unkown
page readonly
7FF5D720A000
unkown
page readonly
8D0000
heap
page read and write
7FF5D777A000
unkown
page readonly
9FAF000
stack
page read and write
302D000
direct allocation
page execute and read and write
2E7B000
heap
page read and write
7FF5D716B000
unkown
page readonly
A02E000
stack
page read and write
7FF5D72D3000
unkown
page readonly
7FF5D7272000
unkown
page readonly
7605000
unkown
page read and write
A273000
unkown
page read and write
5330000
unkown
page write copy
A313000
unkown
page read and write
9AA8000
unkown
page read and write
C9F2000
unkown
page read and write
7E58000
stack
page read and write
7FF5D7682000
unkown
page readonly
9A9E000
unkown
page read and write
6D0000
trusted library allocation
page read and write
49BB000
unkown
page read and write
75F8000
unkown
page read and write
EF0000
heap
page read and write
5463000
unkown
page read and write
C94D000
unkown
page read and write
2EA1000
unkown
page read and write
CA00000
unkown
page read and write
7FF5D74C3000
unkown
page readonly
3D4000
heap
page read and write
4A16000
unkown
page read and write
7631000
unkown
page read and write
7FF5D748C000
unkown
page readonly
42E9000
direct allocation
page read and write
7FF5D717C000
unkown
page readonly
9B2C000
unkown
page read and write
8FE000
heap
page read and write
7FF5D7740000
unkown
page readonly
7FF5D774C000
unkown
page readonly
3280000
unkown
page read and write
70E000
stack
page read and write
C9B7000
unkown
page read and write
A3AA000
unkown
page read and write
AA0E000
unkown
page read and write
49A8000
unkown
page read and write
86E0000
unkown
page readonly
2C01000
heap
page read and write
8C39000
stack
page read and write
A220000
unkown
page read and write
3C6C000
heap
page read and write
CA0D000
unkown
page read and write
9A6A000
unkown
page read and write
AA0E000
unkown
page read and write
9B0B000
unkown
page read and write
281B000
heap
page read and write
7FF5D771A000
unkown
page readonly
79D000
heap
page read and write
7A1000
heap
page read and write
AA09000
unkown
page read and write
7FF5D751F000
unkown
page readonly
7FF5D7394000
unkown
page readonly
C9EA000
unkown
page read and write
7CB0000
unkown
page readonly
760B000
unkown
page read and write
3530000
unkown
page read and write
7FF5D7230000
unkown
page readonly
53E1000
unkown
page read and write
7FF5D71C4000
unkown
page readonly
4A0E000
unkown
page read and write
7FF5D72C8000
unkown
page readonly
7DC0000
unkown
page readonly
3549000
unkown
page read and write
7FF5D7546000
unkown
page readonly
CA06000
unkown
page read and write
C615000
unkown
page read and write
7FF5D76D7000
unkown
page readonly
C9F6000
unkown
page read and write
9B99000
unkown
page read and write
C893000
unkown
page read and write
7FF5D778A000
unkown
page readonly
7989000
stack
page read and write
7FF5D7837000
unkown
page readonly
7FF5D77C2000
unkown
page readonly
7FF5D75AF000
unkown
page readonly
7FF5D6BE4000
unkown
page readonly
C472000
unkown
page read and write
7FF5D723F000
unkown
page readonly
A9A0000
unkown
page read and write
C9EA000
unkown
page read and write
8F49000
stack
page read and write
35D1000
unkown
page read and write
779E000
unkown
page read and write
CA34000
unkown
page read and write
7FF5D7267000
unkown
page readonly
7FF5D77DD000
unkown
page readonly
C94D000
unkown
page read and write
79A000
heap
page read and write
CA00000
unkown
page read and write
42ED000
direct allocation
page read and write
35C3000
unkown
page read and write
7FF5D7077000
unkown
page readonly
BFB8000
stack
page read and write
7FF5D7694000
unkown
page readonly
C61D000
unkown
page read and write
3242000
direct allocation
page execute and read and write
1731000
unkown
page readonly
3E92000
heap
page read and write
3D4000
heap
page read and write
7FF5D743F000
unkown
page readonly
89E2000
heap
page read and write
9A98000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7FF5D7641000
unkown
page readonly
A9E9000
unkown
page read and write
2613000
heap
page read and write
A3B6000
unkown
page read and write
45C000
stack
page read and write
490000
unkown
page write copy
9ABD000
unkown
page read and write
3D4000
heap
page read and write
9AAC000
unkown
page read and write
7FF5D7438000
unkown
page readonly
91F0000
unkown
page readonly
7FF5D719C000
unkown
page readonly
C92A000
unkown
page read and write
CA04000
unkown
page read and write
7FF5D71C4000
unkown
page readonly
7FF5D75EE000
unkown
page readonly
35D5000
unkown
page read and write
C483000
unkown
page read and write
A9FD000
unkown
page read and write
C9E8000
unkown
page read and write
C9F8000
unkown
page read and write
7FF5D66E3000
unkown
page readonly
CA02000
unkown
page read and write
390000
heap
page read and write
BEA0000
unkown
page readonly
F4CE000
unkown
page read and write
A233000
unkown
page read and write
C46F000
unkown
page read and write
7FF5D6BEF000
unkown
page readonly
7FF5D7407000
unkown
page readonly
7FF5D76D5000
unkown
page readonly
35FA000
unkown
page read and write
C035000
stack
page read and write
F4D8000
unkown
page read and write
3D4000
heap
page read and write
10612000
unkown
page read and write
C450000
unkown
page read and write
C73E000
unkown
page read and write
2C02000
heap
page read and write
7FF5D75B3000
unkown
page readonly
2C3E000
stack
page read and write
977E000
stack
page read and write
9A84000
unkown
page read and write
A3B9000
unkown
page read and write
7AF1000
unkown
page read and write
2E3E000
stack
page read and write
C48B000
unkown
page read and write
32FF000
unclassified section
page read and write
3626000
unkown
page read and write
C893000
unkown
page read and write
9EAC000
stack
page read and write
84BB000
stack
page read and write
9FAF000
stack
page read and write
2FB000
stack
page read and write
7FF5D76CD000
unkown
page readonly
A233000
unkown
page read and write
3CE3000
heap
page read and write
4AB0000
unkown
page read and write
7FF5D7073000
unkown
page readonly
7FF5D764F000
unkown
page readonly
CA04000
unkown
page read and write
33B0000
unkown
page readonly
7FF5D769E000
unkown
page readonly
A391000
unkown
page read and write
42E9000
direct allocation
page read and write
7FF5D7257000
unkown
page readonly
42ED000
direct allocation
page read and write
7FF5D7396000
unkown
page readonly
12B0000
unkown
page read and write
7FF5D7764000
unkown
page readonly
4143000
direct allocation
page read and write
9A72000
unkown
page read and write
C8DE000
unkown
page read and write
7FF5D723C000
unkown
page readonly
3630000
unkown
page readonly
2FC4000
heap
page read and write
C9FA000
unkown
page read and write
7FF5D74B8000
unkown
page readonly
BB10000
heap
page read and write
8DCB000
stack
page read and write
CA02000
unkown
page read and write
C9FE000
unkown
page read and write
9A94000
unkown
page read and write
7FF5D75A6000
unkown
page readonly
3D29000
heap
page read and write
7FF5D7691000
unkown
page readonly
2C23000
heap
page read and write
2E2D000
heap
page read and write
B220000
unkown
page read and write
A264000
unkown
page read and write
7FF5D72C8000
unkown
page readonly
A384000
unkown
page read and write
F4D2000
unkown
page read and write
7D3E000
stack
page read and write
7FF5D7458000
unkown
page readonly
7FF5D729E000
unkown
page readonly
7FF5D7267000
unkown
page readonly
3D4000
heap
page read and write
35B5000
unkown
page read and write
7FF5D6BDB000
unkown
page readonly
C653000
unkown
page read and write
7FF5D783B000
unkown
page readonly
A39C000
unkown
page read and write
7FF5D7797000
unkown
page readonly
7FF5D77F0000
unkown
page readonly
7FF5D781A000
unkown
page readonly
C9F6000
unkown
page read and write
AFBE000
stack
page read and write
8890000
unkown
page readonly
94F4000
unkown
page read and write
109B0000
unkown
page execute and read and write
C8DE000
unkown
page read and write
AAA0000
unkown
page read and write
A286000
unkown
page read and write
86E0000
unkown
page readonly
CA0C000
unkown
page read and write
7FF5D766E000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7FF5D723C000
unkown
page readonly
C653000
unkown
page read and write
7FF5D751F000
unkown
page readonly
CA35000
unkown
page read and write
9AAA000
unkown
page read and write
7FF5D72FB000
unkown
page readonly
7FF5D776D000
unkown
page readonly
7FF5D7244000
unkown
page readonly
1160000
unkown
page read and write
7DD0000
heap
page read and write
6D0000
trusted library allocation
page read and write
7FF5D69BB000
unkown
page readonly
CA04000
unkown
page read and write
C9E8000
unkown
page read and write
7FF5D6BE4000
unkown
page readonly
7FF5D6A4B000
unkown
page readonly
7FF5D7336000
unkown
page readonly
42E9000
direct allocation
page read and write
99B4000
unkown
page read and write
7FF5D75DF000
unkown
page readonly
1069B000
unkown
page read and write
7FF5D77E0000
unkown
page readonly
96FE000
stack
page read and write
2D70000
trusted library allocation
page read and write
7FF5D7797000
unkown
page readonly
9A90000
unkown
page read and write
C9FC000
unkown
page read and write
9A90000
unkown
page read and write
2D00000
heap
page read and write
7AB0000
unkown
page read and write
1270000
unkown
page read and write
2C9C000
heap
page read and write
3C9E000
heap
page read and write
C4BD000
unkown
page read and write
C914000
unkown
page read and write
7618000
unkown
page read and write
7FF5D77E0000
unkown
page readonly
F4D8000
unkown
page read and write
7FF5D7398000
unkown
page readonly
B90000
trusted library allocation
page read and write
9B0B000
unkown
page read and write
7FF5D72D0000
unkown
page readonly
A33F000
unkown
page read and write
9A6A000
unkown
page read and write
35C1000
unkown
page read and write
3626000
unkown
page read and write
3CB7000
heap
page read and write
7FF5D7639000
unkown
page readonly
C9F8000
unkown
page read and write
7FF5D71DA000
unkown
page readonly
10653000
unkown
page read and write
1250000
unkown
page read and write
7FF5D7075000
unkown
page readonly
6D0000
trusted library allocation
page read and write
7FF5D7360000
unkown
page readonly
5479000
unkown
page read and write
4AB000
unkown
page readonly
1390000
heap
page read and write
A3B6000
unkown
page read and write
C62D000
unkown
page read and write
13A0000
unkown
page readonly
F37B000
stack
page read and write
35C9000
unkown
page read and write
B03B000
stack
page read and write
927E000
stack
page read and write
3531000
unkown
page read and write
3071000
unkown
page read and write
7FF5D764F000
unkown
page readonly
7FF5D7705000
unkown
page readonly
7FF5D728E000
unkown
page readonly
9A92000
unkown
page read and write
2613000
heap
page read and write
7FF5D7284000
unkown
page readonly
F4F4000
unkown
page read and write
CA08000
unkown
page read and write
353D000
unkown
page read and write
C65E000
unkown
page read and write
769A000
unkown
page read and write
7FF5D77A4000
unkown
page readonly
C73E000
unkown
page read and write
C9E0000
unkown
page read and write
7FF5D779E000
unkown
page readonly
7FF5D7429000
unkown
page readonly
C800000
unkown
page read and write
7C70000
unkown
page readonly
7FF5D75BF000
unkown
page readonly
7AE0000
unkown
page read and write
C7BE000
unkown
page read and write
C992000
unkown
page read and write
6D0000
trusted library allocation
page read and write
2510000
heap
page read and write
760F000
unkown
page read and write
7FF5D7452000
unkown
page readonly
C617000
unkown
page read and write
4986000
unkown
page read and write
C9EA000
unkown
page read and write
7FF5D776D000
unkown
page readonly
35C3000
unkown
page read and write
7FF5D6A4B000
unkown
page readonly
C5F8000
unkown
page read and write
760B000
unkown
page read and write
7637000
unkown
page read and write
400000
unkown
page readonly
997C000
stack
page read and write
F4C1000
unkown
page read and write
BE70000
unkown
page readonly
C954000
unkown
page read and write
35E4000
unkown
page read and write
B950000
unkown
page readonly
35C9000
unkown
page read and write
5479000
unkown
page read and write
C800000
unkown
page read and write
7DF4F24A1000
unkown
page execute read
30F2000
direct allocation
page execute and read and write
6D0000
trusted library allocation
page read and write
CA06000
unkown
page read and write
C92A000
unkown
page read and write
309E000
direct allocation
page execute and read and write
42E9000
direct allocation
page read and write
435E000
direct allocation
page read and write
7CB0000
unkown
page readonly
89F000
stack
page read and write
5330000
unkown
page write copy
7FF5D760B000
unkown
page readonly
C9F2000
unkown
page read and write
9A92000
unkown
page read and write
16B0000
heap
page read and write
C9B4000
unkown
page read and write
7FF5D76D7000
unkown
page readonly
C9F8000
unkown
page read and write
C9F2000
unkown
page read and write
7DF4F2470000
unkown
page readonly
7FF5D769E000
unkown
page readonly
9A98000
unkown
page read and write
C9FE000
unkown
page read and write
3D4000
heap
page read and write
3D4000
heap
page read and write
42ED000
direct allocation
page read and write
C9EA000
unkown
page read and write
9A72000
unkown
page read and write
A391000
unkown
page read and write
3400000
unkown
page read and write
A0A9000
stack
page read and write
7FF5D75D9000
unkown
page readonly
3CB7000
heap
page read and write
2E9E000
heap
page read and write
3D4000
heap
page read and write
C3CE000
stack
page read and write
156F000
stack
page read and write
3D4000
heap
page read and write
4A44000
unkown
page read and write
7FF5D717C000
unkown
page readonly
997C000
stack
page read and write
4020000
direct allocation
page read and write
4143000
direct allocation
page read and write
7AA0000
unkown
page read and write
3B9C000
heap
page read and write
7FF5D747F000
unkown
page readonly
C609000
unkown
page read and write
7FF5D7425000
unkown
page readonly
7FF5D7745000
unkown
page readonly
9A8C000
unkown
page read and write
9AB4000
unkown
page read and write
99C0000
unkown
page read and write
7FF5D7450000
unkown
page readonly
4AFA000
unkown
page read and write
33C0000
unkown
page read and write
7FF5D74FA000
unkown
page readonly
7FF5D71EA000
unkown
page readonly
435E000
direct allocation
page read and write
AAA9000
unkown
page read and write
C9FA000
unkown
page read and write
C669000
unkown
page read and write
A237000
unkown
page read and write
9AB2000
unkown
page read and write
C483000
unkown
page read and write
6D0000
trusted library allocation
page read and write
C933000
unkown
page read and write
9ABD000
unkown
page read and write
8CB8000
stack
page read and write
1069B000
unkown
page read and write
4143000
direct allocation
page read and write
3D95000
heap
page read and write
7A1000
heap
page read and write
8870000
unkown
page readonly
41C0000
direct allocation
page read and write
3110000
unkown
page readonly
C85F000
unkown
page read and write
35B0000
unkown
page read and write
35B3000
unkown
page read and write
C496000
unkown
page read and write
7FF5D7648000
unkown
page readonly
7FF5D732D000
unkown
page readonly
AA40000
unkown
page read and write
3520000
unkown
page readonly
7FF5D77A8000
unkown
page readonly
7FF5D77B6000
unkown
page readonly
89E0000
heap
page read and write
77A2000
unkown
page read and write
3C60000
heap
page read and write
9A84000
unkown
page read and write
CA0C000
unkown
page read and write
35CF000
unkown
page read and write
3140000
unkown
page read and write
2D2B000
heap
page read and write
7FF5D7272000
unkown
page readonly
1061B000
unkown
page read and write
CA04000
unkown
page read and write
7FF5D768B000
unkown
page readonly
760D000
unkown
page read and write
8A46000
unkown
page read and write
A237000
unkown
page read and write
6D0000
trusted library allocation
page read and write
12D0000
unkown
page readonly
49FA000
unkown
page read and write
C609000
unkown
page read and write
7FF5D7073000
unkown
page readonly
7FF5D7289000
unkown
page readonly
3160000
unkown
page read and write
B03B000
stack
page read and write
307D000
direct allocation
page execute and read and write
7FF5D7752000
unkown
page readonly
7FF5D77E9000
unkown
page readonly
10A23000
unkown
page execute and read and write
7C31000
unkown
page read and write
2FF9000
stack
page read and write
35D3000
unkown
page read and write
A273000
unkown
page read and write
9A92000
unkown
page read and write
2FF9000
stack
page read and write
9ABD000
unkown
page read and write
7FF5D77E3000
unkown
page readonly
99C0000
unkown
page read and write
C9F8000
unkown
page read and write
115E000
stack
page read and write
C035000
stack
page read and write
7FF5D7482000
unkown
page readonly
F37B000
stack
page read and write
AAA9000
unkown
page read and write
4B00000
unkown
page read and write
AA40000
unkown
page read and write
3500000
stack
page read and write
CA00000
unkown
page read and write
C24E000
stack
page read and write
400000
unkown
page readonly
35C1000
unkown
page read and write
92C000
heap
page read and write
3D4000
heap
page read and write
AA04000
unkown
page read and write
7FF5D7206000
unkown
page readonly
3071000
unkown
page read and write
897C000
stack
page read and write
3540000
unkown
page read and write
AA40000
unkown
page read and write
7C90000
unkown
page read and write
F4C1000
unkown
page read and write
7FF5D66E8000
unkown
page readonly
There are 1673 hidden memdumps, click here to show them.