IOC Report
Payment swify copy.exe

loading gif

Files

File Path
Type
Category
Malicious
Payment swify copy.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Payment swify copy.exe.log
ASCII text, with CRLF line terminators
dropped
 malicious

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Payment swify copy.exe
"C:\Users\user\Desktop\Payment swify copy.exe"
 malicious
C:\Users\user\Desktop\Payment swify copy.exe
"C:\Users\user\Desktop\Payment swify copy.exe"
 malicious
C:\Users\user\Desktop\Payment swify copy.exe
"C:\Users\user\Desktop\Payment swify copy.exe"
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\cmstp.exe
"C:\Windows\SysWOW64\cmstp.exe"
 malicious
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Users\user\Desktop\Payment swify copy.exe"
 malicious
C:\Windows\SysWOW64\autofmt.exe
"C:\Windows\SysWOW64\autofmt.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
www.istorted.app/md49/
malicious
http://www.seinow.online/md49/
unknown
http://www.seinow.online/md49/www.udryashki.shop
unknown
http://www.enericotr.onlineReferer:
unknown
https://wns.windows.com/bat
unknown
http://www.enithpro.shop/md49/www.likogames.top
unknown
https://api.msn.com:443/v1/news/Feed/Windows?
unknown
http://www.likogames.top
unknown
http://www.udryashki.shop/md49/
unknown
http://www.lovxip.xyzReferer:
unknown
http://www.enithpro.shop
unknown
https://www.msn.com/en-us/news/politics/california-workers-will-get-five-sick-days-instead-of-three-
unknown
https://www.msn.com/en-us/news/crime/bar-fight-leaves-man-in-critical-condition-suspect-arrested-in-
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppin
unknown
http://www.utozeed.agencyReferer:
unknown
https://www.msn.com/en-us/money/companies/legacy-park-auction-canceled-liquidation-proposed-here-s-w
unknown
http://www.utozeed.agency/md49/
unknown
http://www.vory.petReferer:
unknown
http://www.enithpro.shop/md49/
unknown
http://www.etlivecasino.bet
unknown
http://www.enericotr.online/md49/www.etlivecasino.bet
unknown
http://www.enericotr.online/md49/
unknown
http://www.levateacri.shop
unknown
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/WeatherInsights/WeatherInsi
unknown
http://www.istorted.appReferer:
unknown
http://www.reativeplayfulness.xyzReferer:
unknown
http://www.autoitscript.com/autoit3/J
unknown
http://www.udryashki.shop/md49/www.utozeed.agency
unknown
http://www.udryashki.shop
unknown
https://www.msn.com/en-us/money/realestate/my-husband-and-i-paid-off-our-mortgage-more-than-15-years
unknown
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
unknown
http://www.lovxip.xyz/md49/
unknown
http://www.nline-advertising-67741.bond/md49/
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
unknown
http://www.nline-advertising-67741.bond/md49/www.oloreklama.biz
unknown
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
http://www.etlivecasino.bet/md49/
unknown
https://api.msn.com/v1/news/Feed/Windows?activityId=C2BB6DDCE8D847D6B779FE8AEC27D161&timeOut=5000&oc
unknown
http://www.mn17563.infoReferer:
unknown
http://www.istorted.app/md49/
unknown
https://word.office.com576
unknown
http://www.likogames.top/md49/www.reativeplayfulness.xyz
unknown
http://www.etlivecasino.betReferer:
unknown
http://www.likogames.top/md49/
unknown
https://android.notify.windows.com/iOS
unknown
http://www.lovxip.xyz/md49/www.enithpro.shop
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/MostlyClearNight.svg
unknown
http://www.levateacri.shop/md49/
unknown
http://www.levateacri.shop/md49/www.kphone.online
unknown
http://www.reativeplayfulness.xyz
unknown
https://api.msn.com/$
unknown
https://api.msn.com/v1/news/Feed/Windows?
unknown
http://www.oloreklama.biz/md49/www.lovxip.xyz
unknown
http://www.mn17563.info
unknown
http://www.etlivecasino.bet/md49/www.nline-advertising-67741.bond
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
unknown
http://www.utozeed.agency/md49/www.istorted.app
unknown
https://www.msn.com/en-us/health/wellness/7-secrets-to-a-happy-old-age-backed-by-science/ss-AA1hwpvW
unknown
http://www.mn17563.info/md49/www.enericotr.online
unknown
http://www.reativeplayfulness.xyz/md49/www.vory.pet
unknown
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
unknown
http://schemas.micro
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Teaser/recordhigh.svg
unknown
http://www.nline-advertising-67741.bondReferer:
unknown
http://www.likogames.topReferer:
unknown
http://www.vory.pet/md49/
unknown
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
http://www.vory.pet
unknown
http://www.kphone.online
unknown
http://www.enericotr.online
unknown
https://powerpoint.office.comcemberZ
unknown
http://www.kphone.online/md49/www.mn17563.info
unknown
http://www.udryashki.shopReferer:
unknown
https://api.msn.com/X
unknown
https://www.msn.com/en-us/news/world/pastor-of-atlanta-based-megachurch-faces-backlash-after-controv
unknown
http://www.istorted.app
unknown
http://www.oloreklama.biz/md49/
unknown
http://www.istorted.app/md49/www.levateacri.shop
unknown
http://www.reativeplayfulness.xyz/md49/
unknown
http://www.seinow.online
unknown
https://outlook.comNaP0B
unknown
https://www.msn.com/en-us/money/personalfinance/the-no-1-phrase-people-who-are-good-at-small-talk-al
unknown
http://www.kphone.onlineReferer:
unknown
https://www.msn.com/en-us/news/world/ukraine-live-briefing-biden-does-worry-house-drama-will-impact-
unknown
http://www.seinow.onlineReferer:
unknown
http://www.vory.pet/md49/wSh
unknown
http://www.kphone.online/md49/
unknown
http://www.levateacri.shopReferer:
unknown
https://www.msn.com/en-us/news/opinion/decline-of-decorum-21-essential-manners-today-s-parents-fail-
unknown
http://www.enithpro.shopReferer:
unknown
http://www.oloreklama.biz
unknown
https://www.msn.com/en-us/weather/topstories/california-s-reservoirs-runneth-over-in-astounding-reve
unknown
http://www.nline-advertising-67741.bond
unknown
http://www.lovxip.xyz
unknown
http://www.utozeed.agency
unknown
https://excel.office.comE
unknown
http://www.mn17563.info/md49/
unknown
https://www.msn.com/en-us/news/crime/one-dead-several-wounded-after-drive-by-shootings-in-south-la/a
unknown
http://www.oloreklama.bizReferer:
unknown
https://www.msn.com:443/en-us/feed
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.utozeed.agency
unknown
 malicious
www.istorted.app
unknown
 malicious
www.kphone.online
unknown
 malicious
www.seinow.online
unknown
 malicious
www.levateacri.shop
unknown
 malicious
www.udryashki.shop
unknown
 malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{5985FC23-2588-4D9A-B38B-7E7AFFAB3155} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
@explorerframe.dll,-13137
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
@explorerframe.dll,-13138
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop
IconLayouts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
TaskbarStateLastRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021492-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
There are 46 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
4E60000
trusted library allocation
page read and write
 malicious
3979000
trusted library allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
422C000
trusted library allocation
page read and write
 malicious
33B0000
unclassified section
page execute and read and write
 malicious
EF0000
system
page execute and read and write
 malicious
EE52000
unkown
page read and write
9390000
unkown
page read and write
B0BA000
stack
page read and write
9D56000
unkown
page read and write
7FF5305C2000
unkown
page readonly
51A000
stack
page read and write
851F000
stack
page read and write
D36B000
unkown
page read and write
2FE5000
unkown
page read and write
A4D3000
unkown
page read and write
A480000
unkown
page read and write
FFD3000
unkown
page read and write
A9E0000
unkown
page readonly
4FD0000
trusted library allocation
page read and write
2AD8000
stack
page read and write
7FF530871000
unkown
page readonly
28A2000
trusted library allocation
page read and write
3025000
unkown
page read and write
7FF5309FD000
unkown
page readonly
7FF5303A0000
unkown
page readonly
D3FD000
unkown
page read and write
7FF530A6E000
unkown
page readonly
94B5000
unkown
page read and write
52B0000
trusted library allocation
page execute and read and write
4FD0000
trusted library allocation
page read and write
7FF5304E0000
unkown
page readonly
70C9000
unkown
page read and write
D4DF000
unkown
page read and write
1001B000
unkown
page read and write
7FF530734000
unkown
page readonly
D81F000
stack
page read and write
4E90000
trusted library allocation
page execute and read and write
7FF5309A1000
unkown
page readonly
7FF53050F000
unkown
page readonly
94B9000
unkown
page read and write
7FF5303AC000
unkown
page readonly
EE10000
unkown
page read and write
94B3000
unkown
page read and write
7FF53088E000
unkown
page readonly
7FF5303E8000
unkown
page readonly
B5D0000
unkown
page read and write
2D30000
unkown
page readonly
6D7E000
stack
page read and write
9DC1000
unkown
page read and write
F9E000
stack
page read and write
A480000
unkown
page read and write
9519000
unkown
page read and write
7FF5305BB000
unkown
page readonly
2593000
heap
page read and write
3082000
unkown
page read and write
438E000
unkown
page read and write
9B80000
unkown
page read and write
4307000
unkown
page read and write
9B20000
unkown
page readonly
BEE000
heap
page read and write
43CC000
unkown
page read and write
70D8000
unkown
page read and write
7FF53080D000
unkown
page readonly
7FF53084B000
unkown
page readonly
7FF530A76000
unkown
page readonly
D2E5000
unkown
page read and write
D5E0000
unkown
page read and write
7FF530846000
unkown
page readonly
3082000
unkown
page read and write
3031000
unkown
page read and write
7FF5302AA000
unkown
page readonly
7FF53044C000
unkown
page readonly
7FF53046F000
unkown
page readonly
7FF5309B9000
unkown
page readonly
9C9D000
stack
page read and write
D2ED000
unkown
page read and write
7FF530698000
unkown
page readonly
3046000
unkown
page read and write
10054000
unkown
page read and write
78CD000
stack
page read and write
FF94000
unkown
page read and write
4396000
unkown
page read and write
73C1000
unkown
page read and write
538D000
direct allocation
page execute and read and write
5416000
unclassified section
page read and write
7FF53084E000
unkown
page readonly
841D000
stack
page read and write
CC0000
unkown
page read and write
34E8000
heap
page read and write
70CE000
unkown
page read and write
94A9000
unkown
page read and write
CFF4000
unkown
page read and write
94AF000
unkown
page read and write
AC0000
heap
page read and write
7FF527C9F000
unkown
page readonly
7FF5304E3000
unkown
page readonly
7FF530695000
unkown
page readonly
7A20000
unkown
page readonly
7FF530486000
unkown
page readonly
E90000
heap
page read and write
A92B000
stack
page read and write
7FF5305C2000
unkown
page readonly
7BBE000
stack
page read and write
9E9E000
unkown
page read and write
976A000
unkown
page read and write
4300000
unkown
page read and write
6F8D000
unkown
page read and write
7DF44D860000
unkown
page readonly
5940000
heap
page read and write
7FF5304BF000
unkown
page readonly
2D70000
unkown
page read and write
988C000
stack
page read and write
7AEE000
stack
page read and write
7FF530892000
unkown
page readonly
2EB0000
unkown
page readonly
94A3000
unkown
page read and write
4FD0000
trusted library allocation
page read and write
7FF530A4F000
unkown
page readonly
10094000
unkown
page read and write
7DF44D891000
unkown
page execute read
7FF530A11000
unkown
page readonly
A4E4000
unkown
page read and write
7FF5308EE000
unkown
page readonly
7FF5305F0000
unkown
page readonly
908B000
stack
page read and write
7FF53057E000
unkown
page readonly
1001B000
unkown
page read and write
7AEE000
stack
page read and write
8440000
unkown
page read and write
9B60000
unkown
page read and write
7FF530676000
unkown
page readonly
4D60000
heap
page read and write
863B000
stack
page read and write
7FF530A11000
unkown
page readonly
B0BA000
stack
page read and write
8E80000
unkown
page readonly
F60000
heap
page read and write
957B000
unkown
page read and write
A9F0000
unkown
page readonly
7FF53059F000
unkown
page readonly
D5F3000
unkown
page read and write
7FF5309D5000
unkown
page readonly
AF30000
unkown
page read and write
EE70000
unkown
page read and write
EDC000
stack
page read and write
9E44000
unkown
page read and write
7FF530A6E000
unkown
page readonly
4F30000
heap
page read and write
33F0000
heap
page read and write
7FF52FDC3000
unkown
page readonly
EE4D000
unkown
page read and write
7FF530712000
unkown
page readonly
B5B0000
unkown
page read and write
D56C000
unkown
page read and write
9B20000
unkown
page readonly
7FF5309FD000
unkown
page readonly
7FF530673000
unkown
page readonly
7FF530905000
unkown
page readonly
4328000
unkown
page read and write
7FF5305B2000
unkown
page readonly
863B000
stack
page read and write
980000
heap
page read and write
3037000
unkown
page read and write
34C0000
heap
page read and write
2A5A000
stack
page read and write
DE8000
trusted library allocation
page read and write
2A5A000
stack
page read and write
9E38000
unkown
page read and write
9497000
unkown
page read and write
CE0000
heap
page read and write
7FF5303DB000
unkown
page readonly
948A000
unkown
page read and write
7FF530985000
unkown
page readonly
7FF53050B000
unkown
page readonly
7FF530256000
unkown
page readonly
7117000
unkown
page read and write
7FF53075A000
unkown
page readonly
7FF5307CC000
unkown
page readonly
7FF52FDC3000
unkown
page readonly
7FF530846000
unkown
page readonly
94CA000
unkown
page read and write
B2EC000
stack
page read and write
2B82000
trusted library allocation
page read and write
AE1B000
stack
page read and write
162D000
direct allocation
page execute and read and write
D1B6000
unkown
page read and write
7FF5308D3000
unkown
page readonly
7FF5308CC000
unkown
page readonly
9E36000
unkown
page read and write
880000
heap
page read and write
7A31000
unkown
page read and write
4410000
unkown
page read and write
7FF530491000
unkown
page readonly
437D000
unkown
page read and write
E180000
heap
page read and write
7FF5304E0000
unkown
page readonly
7FF530905000
unkown
page readonly
2D40000
unkown
page read and write
9D29000
unkown
page read and write
94B7000
unkown
page read and write
9486000
unkown
page read and write
437A000
unkown
page read and write
9477000
unkown
page read and write
9D58000
unkown
page read and write
D60000
heap
page read and write
3330000
trusted library allocation
page read and write
B2EC000
stack
page read and write
9CD6000
unkown
page read and write
B150000
unkown
page read and write
2B59000
stack
page read and write
7FF5304A0000
unkown
page readonly
9695000
unkown
page read and write
28B0000
trusted library allocation
page read and write
B5A0000
unkown
page read and write
947B000
unkown
page read and write
3330000
trusted library allocation
page read and write
51E9000
direct allocation
page execute and read and write
7FF5307E8000
unkown
page readonly
8980000
unkown
page read and write
7FF530991000
unkown
page readonly
8E7A000
stack
page read and write
7FF5305CF000
unkown
page readonly
3098000
unkown
page read and write
34DD000
heap
page read and write
F0E000
trusted library allocation
page read and write
94AF000
unkown
page read and write
93B4000
unkown
page read and write
B5B0000
unkown
page read and write
94B1000
unkown
page read and write
7FF5308A8000
unkown
page readonly
302F000
unkown
page read and write
9730000
unkown
page read and write
16A8000
direct allocation
page execute and read and write
7FF5308B8000
unkown
page readonly
7FF530665000
unkown
page readonly
B69D000
stack
page read and write
7FF5303E0000
unkown
page readonly
6DB0000
unkown
page read and write
1027C000
stack
page read and write
E10F000
unkown
page execute and read and write
7FF5307AC000
unkown
page readonly
85A0000
unkown
page read and write
7FF53058B000
unkown
page readonly
3324000
heap
page read and write
9E9E000
unkown
page read and write
7FF5309AC000
unkown
page readonly
148D000
direct allocation
page execute and read and write
E54E000
stack
page read and write
CFA0000
unkown
page read and write
7FF530877000
unkown
page readonly
9E2D000
unkown
page read and write
B36B000
stack
page read and write
258E000
stack
page read and write
77C5000
stack
page read and write
CF0000
unkown
page readonly
621F000
stack
page read and write
7FF53062D000
unkown
page readonly
78D0000
unkown
page readonly
3330000
trusted library allocation
page read and write
7FF530289000
unkown
page readonly
7FF5303AC000
unkown
page readonly
7FF530454000
unkown
page readonly
957D000
unkown
page read and write
7FF5309DD000
unkown
page readonly
D56C000
unkown
page read and write
9E36000
unkown
page read and write
D361000
unkown
page read and write
10176000
system
page execute and read and write
7DF44D880000
unkown
page readonly
7FF530413000
unkown
page readonly
9499000
unkown
page read and write
DDA9000
stack
page read and write
7FF5302B2000
unkown
page readonly
CFA3000
unkown
page read and write
11F0000
unclassified section
page execute and read and write
7FF53060D000
unkown
page readonly
7DF44D860000
unkown
page readonly
E01D000
stack
page read and write
7FF530651000
unkown
page readonly
6A10000
heap
page read and write
7FF5307CC000
unkown
page readonly
7FF530961000
unkown
page readonly
7FF5309F0000
unkown
page readonly
9581000
unkown
page read and write
2E80000
stack
page read and write
9E2D000
unkown
page read and write
D81F000
stack
page read and write
325D000
stack
page read and write
7FF5308EE000
unkown
page readonly
9492000
unkown
page read and write
7FF5306FB000
unkown
page readonly
94C2000
unkown
page read and write
43C5000
unkown
page read and write
E09C000
stack
page read and write
7FF5309C3000
unkown
page readonly
5920000
heap
page read and write
3324000
heap
page read and write
835A000
stack
page read and write
4D62000
heap
page read and write
34DD000
heap
page read and write
7FF530917000
unkown
page readonly
7FF5309DD000
unkown
page readonly
7FF5309E6000
unkown
page readonly
D56C000
unkown
page read and write
94DC000
unkown
page read and write
4410000
unkown
page read and write
BE0000
heap
page read and write
7FF53065A000
unkown
page readonly
DDF000
stack
page read and write
43E3000
unkown
page read and write
A2D000
trusted library allocation
page execute and read and write
33C0000
heap
page read and write
B71A000
stack
page read and write
4FD0000
trusted library allocation
page read and write
2E09000
stack
page read and write
7A00000
unkown
page read and write
4392000
unkown
page read and write
6220000
trusted library allocation
page read and write
A5B000
trusted library allocation
page execute and read and write
9E2B000
unkown
page read and write
7FF530475000
unkown
page readonly
7FF530486000
unkown
page readonly
7FF53065A000
unkown
page readonly
7FF530A5B000
unkown
page readonly
7FF530435000
unkown
page readonly
D99A000
stack
page read and write
9CC6000
unkown
page read and write
CFAC000
unkown
page read and write
E0A0000
unkown
page execute and read and write
E20000
heap
page read and write
D2E5000
unkown
page read and write
81C0000
unkown
page readonly
D155000
unkown
page read and write
309A000
unkown
page read and write
D161000
unkown
page read and write
3093000
unkown
page read and write
7FF5304E6000
unkown
page readonly
3046000
unkown
page read and write
95B9000
unkown
page read and write
7FF53041E000
unkown
page readonly
8790000
unkown
page read and write
4450000
unkown
page read and write
7FF530440000
unkown
page readonly
9E8F000
unkown
page read and write
9CAE000
unkown
page read and write
7FF5305D3000
unkown
page readonly
94DC000
unkown
page read and write
7FF5307A1000
unkown
page readonly
FF94000
unkown
page read and write
9CD6000
unkown
page read and write
7FF5308D1000
unkown
page readonly
7FF5303DD000
unkown
page readonly
87D6000
unkown
page read and write
9E3A000
unkown
page read and write
7FF530417000
unkown
page readonly
7FF530A7B000
unkown
page readonly
7FF530483000
unkown
page readonly
7450000
unkown
page readonly
81D0000
unkown
page readonly
A20000
trusted library allocation
page read and write
9E3A000
unkown
page read and write
2B08000
trusted library allocation
page read and write
70B7000
unkown
page read and write
7FF53058F000
unkown
page readonly
EE52000
unkown
page read and write
3057000
unkown
page read and write
6F7E000
unkown
page read and write
34D7000
heap
page read and write
34C0000
heap
page read and write
D2B8000
unkown
page read and write
D65A000
unkown
page read and write
3320000
heap
page read and write
9CC2000
unkown
page read and write
AF40000
unkown
page read and write
2EB0000
unkown
page readonly
7FF530708000
unkown
page readonly
34E2000
heap
page read and write
7B30000
unkown
page readonly
7FF530980000
unkown
page readonly
D2AE000
unkown
page read and write
10094000
unkown
page read and write
D56C000
unkown
page read and write
7C40000
unkown
page read and write
4420000
unkown
page read and write
7AF0000
unkown
page readonly
7FF5303FF000
unkown
page readonly
78AE000
stack
page read and write
94CA000
unkown
page read and write
2FA0000
unkown
page read and write
503B000
heap
page read and write
9492000
unkown
page read and write
2956000
stack
page read and write
3040000
unkown
page read and write
7FF530687000
unkown
page readonly
D919000
stack
page read and write
9E21000
unkown
page read and write
B110000
unkown
page readonly
D3FD000
unkown
page read and write
7609000
stack
page read and write
3324000
heap
page read and write
CFA3000
unkown
page read and write
D53C000
unkown
page read and write
D432000
unkown
page read and write
2EA0000
unkown
page readonly
9CA0000
unkown
page read and write
7FF530A37000
unkown
page readonly
D167000
unkown
page read and write
7FF5305F6000
unkown
page readonly
17B0000
unclassified section
page execute and read and write
4450000
unkown
page read and write
2FEA000
unkown
page read and write
305D000
unkown
page read and write
2D40000
unkown
page read and write
7FF5303DD000
unkown
page readonly
9E97000
unkown
page read and write
7FF53089D000
unkown
page readonly
1489000
direct allocation
page execute and read and write
7FF53050B000
unkown
page readonly
7B10000
unkown
page readonly
D432000
unkown
page read and write
34CB000
heap
page read and write
5340000
trusted library section
page read and write
7FF53051E000
unkown
page readonly
9B30000
unkown
page readonly
94B9000
unkown
page read and write
2E80000
stack
page read and write
94C2000
unkown
page read and write
7FF530989000
unkown
page readonly
7FF5308C5000
unkown
page readonly
700D000
stack
page read and write
7FF530734000
unkown
page readonly
6220000
trusted library allocation
page read and write
3330000
trusted library allocation
page read and write
33B0000
trusted library allocation
page read and write
7FF5307F8000
unkown
page readonly
7AF0000
unkown
page readonly
6F74000
unkown
page read and write
28D0000
trusted library allocation
page read and write
28F0000
trusted library section
page readonly
7FF53082E000
unkown
page readonly
580000
unkown
page readonly
7FF5303DB000
unkown
page readonly
7FF530910000
unkown
page readonly
7FF53053A000
unkown
page readonly
3324000
heap
page read and write
A47C000
unkown
page read and write
EE54000
unkown
page read and write
7FF530743000
unkown
page readonly
7C40000
unkown
page read and write
9519000
unkown
page read and write
7DF44D891000
unkown
page execute read
7FF530A60000
unkown
page readonly
BD0000
unkown
page readonly
34E2000
heap
page read and write
4A6C000
stack
page read and write
7FF5305F6000
unkown
page readonly
DD2F000
stack
page read and write
2590000
heap
page read and write
7FF530687000
unkown
page readonly
7FF5306FE000
unkown
page readonly
2BD9000
stack
page read and write
7FF530849000
unkown
page readonly
10054000
unkown
page read and write
8790000
unkown
page read and write
6F69000
unkown
page read and write
9E8F000
unkown
page read and write
B0F0000
unkown
page read and write
7FF530946000
unkown
page readonly
7FF530A0E000
unkown
page readonly
D11A000
unkown
page read and write
9E21000
unkown
page read and write
7FF53025A000
unkown
page readonly
E32F000
stack
page read and write
7FF530435000
unkown
page readonly
7FF530944000
unkown
page readonly
C28000
heap
page read and write
A4D7000
unkown
page read and write
EE50000
unkown
page read and write
7609000
stack
page read and write
7FF530A02000
unkown
page readonly
7FF530935000
unkown
page readonly
7DF44D880000
unkown
page readonly
EFEA000
heap
page read and write
6D80000
trusted library allocation
page read and write
7FF530833000
unkown
page readonly
3018000
unkown
page read and write
7FF530949000
unkown
page readonly
5402000
direct allocation
page execute and read and write
7FF53051E000
unkown
page readonly
2D70000
unkown
page read and write
9477000
unkown
page read and write
AA7E000
stack
page read and write
7FF530440000
unkown
page readonly
35FE000
unkown
page read and write
7FF53058B000
unkown
page readonly
F50000
trusted library allocation
page read and write
6F94000
unkown
page read and write
4D61000
heap
page read and write
8460000
unkown
page read and write
9579000
unkown
page read and write
A42000
trusted library allocation
page read and write
7FF530928000
unkown
page readonly
7FF53059F000
unkown
page readonly
7FF53074F000
unkown
page readonly
7FF530417000
unkown
page readonly
7FF53060D000
unkown
page readonly
7FF53094D000
unkown
page readonly
7390000
unkown
page read and write
8811000
unkown
page read and write
7FF530A81000
unkown
page readonly
7FF53084B000
unkown
page readonly
D2B8000
unkown
page read and write
94AD000
unkown
page read and write
7FF5308C5000
unkown
page readonly
4430000
unkown
page read and write
7FF5303E8000
unkown
page readonly
181F000
unclassified section
page execute and read and write
6D90000
trusted library allocation
page execute and read and write
AE1B000
stack
page read and write
7FF530565000
unkown
page readonly
D99A000
stack
page read and write
7FF530A1C000
unkown
page readonly
D198000
unkown
page read and write
7FF530A48000
unkown
page readonly
7FF530822000
unkown
page readonly
6BB3000
heap
page read and write
7688000
stack
page read and write
7FF530A05000
unkown
page readonly
9CE4000
unkown
page read and write
43F3000
unkown
page read and write
9004000
unkown
page read and write
B110000
unkown
page readonly
A48B000
unkown
page read and write
305D000
unkown
page read and write
B3A0000
heap
page read and write
D4EC000
unkown
page read and write
A4A000
trusted library allocation
page execute and read and write
952D000
unkown
page read and write
9B30000
unkown
page readonly
6F8E000
stack
page read and write
7FF5309B1000
unkown
page readonly
52C5000
heap
page read and write
4300000
unkown
page read and write
A92B000
stack
page read and write
1611000
direct allocation
page execute and read and write
D2A1000
unkown
page read and write
4D31000
unkown
page read and write
F1D000
trusted library allocation
page read and write
10186000
system
page execute and read and write
D590000
unkown
page read and write
D3B1000
unkown
page read and write
2D50000
unkown
page readonly
309E000
unkown
page read and write
7FF5303FF000
unkown
page readonly
947E000
unkown
page read and write
302F000
unkown
page read and write
C68000
heap
page read and write
7270000
unkown
page read and write
9CF8000
unkown
page read and write
7FF530536000
unkown
page readonly
2D30000
unkown
page readonly
A48E000
unkown
page read and write
7FF530521000
unkown
page readonly
7FF5304AA000
unkown
page readonly
7FF530530000
unkown
page readonly
D46D000
unkown
page read and write
7FF53099B000
unkown
page readonly
3330000
trusted library allocation
page read and write
7FF5304A0000
unkown
page readonly
7FF5309D7000
unkown
page readonly
94A9000
unkown
page read and write
3014000
unkown
page read and write
7FF5308C1000
unkown
page readonly
D4E9000
unkown
page read and write
7FF5307EA000
unkown
page readonly
7FF530483000
unkown
page readonly
3014000
unkown
page read and write
EBC000
stack
page read and write
302D000
unkown
page read and write
9E3A000
unkown
page read and write
947E000
unkown
page read and write
9E38000
unkown
page read and write
E0D0000
unkown
page execute and read and write
7FF530712000
unkown
page readonly
957F000
unkown
page read and write
957D000
unkown
page read and write
762E000
stack
page read and write
309E000
unkown
page read and write
7FF5309FB000
unkown
page readonly
7FF5309A1000
unkown
page readonly
B71A000
stack
page read and write
7FF530A05000
unkown
page readonly
7FF5304D8000
unkown
page readonly
7FF5304E9000
unkown
page readonly
7FF5304F1000
unkown
page readonly
2E09000
stack
page read and write
947B000
unkown
page read and write
A460000
unkown
page read and write
4D61000
heap
page read and write
A4D3000
unkown
page read and write
9D34000
unkown
page read and write
A488000
unkown
page read and write
6B6E000
heap
page read and write
6F69000
unkown
page read and write
7FF5307FE000
unkown
page readonly
6E8E000
stack
page read and write
7FF53093F000
unkown
page readonly
3324000
heap
page read and write
EE54000
unkown
page read and write
3324000
heap
page read and write
4ED0000
heap
page read and write
6D85000
stack
page read and write
9579000
unkown
page read and write
EE50000
unkown
page read and write
7FF530676000
unkown
page readonly
2FA0000
unkown
page read and write
7FF527CA5000
unkown
page readonly
870E000
stack
page read and write
D2C8000
unkown
page read and write
9E44000
unkown
page read and write
7FF53086D000
unkown
page readonly
7849000
stack
page read and write
E80000
trusted library allocation
page execute and read and write
129D000
trusted library allocation
page execute and read and write
D2C4000
unkown
page read and write
43F3000
unkown
page read and write
711A000
unkown
page read and write
7FF530892000
unkown
page readonly
AB8B000
stack
page read and write
10016000
unkown
page read and write
8DE000
heap
page read and write
7DF44D861000
unkown
page execute read
D919000
stack
page read and write
120F000
unclassified section
page execute and read and write
D46D000
unkown
page read and write
7F1C0000
trusted library allocation
page execute and read and write
A40000
trusted library allocation
page read and write
C30000
unkown
page read and write
F40000
trusted library allocation
page read and write
999F000
stack
page read and write
9724000
unkown
page read and write
A4D7000
unkown
page read and write
9D2D000
unkown
page read and write
79C1000
unkown
page read and write
7FF53075A000
unkown
page readonly
7FF530946000
unkown
page readonly
948A000
unkown
page read and write
EE52000
unkown
page read and write
3021000
unkown
page read and write
7FF5309B1000
unkown
page readonly
301A000
unkown
page read and write
9DC1000
unkown
page read and write
7FF530530000
unkown
page readonly
9004000
unkown
page read and write
43E3000
unkown
page read and write
7FF530651000
unkown
page readonly
3057000
unkown
page read and write
B59D000
stack
page read and write
7FF5303A0000
unkown
page readonly
7FF530A1C000
unkown
page readonly
7FF53096C000
unkown
page readonly
B5E0000
heap
page read and write
7FF5309E2000
unkown
page readonly
12C0000
heap
page read and write
A4E4000
unkown
page read and write
B5E0000
heap
page read and write
73C1000
unkown
page read and write
7FF53025A000
unkown
page readonly
D18F000
unkown
page read and write
9CE4000
unkown
page read and write
9D30000
unkown
page read and write
7FF5307AC000
unkown
page readonly
7FF5306FE000
unkown
page readonly
EFE0000
heap
page read and write
F11000
trusted library allocation
page read and write
D155000
unkown
page read and write
957F000
unkown
page read and write
4400000
unkown
page read and write
7C38000
stack
page read and write
7FF530A0E000
unkown
page readonly
B120000
unkown
page read and write
B0C0000
unkown
page readonly
AAFD000
stack
page read and write
78F0000
unkown
page readonly
7FF530346000
unkown
page readonly
DAAE000
stack
page read and write
14FE000
direct allocation
page execute and read and write
7FF527CA5000
unkown
page readonly
880000
heap
page read and write
7FF5302A1000
unkown
page readonly
294B000
stack
page read and write
94A1000
unkown
page read and write
7DF44D871000
unkown
page execute read
2BD9000
stack
page read and write
7FF5304A2000
unkown
page readonly
D15B000
unkown
page read and write
7087000
unkown
page read and write
7FF5307F8000
unkown
page readonly
7FF530822000
unkown
page readonly
3324000
heap
page read and write
7FF530877000
unkown
page readonly
6220000
trusted library allocation
page read and write
AF2E000
stack
page read and write
7FF530402000
unkown
page readonly
7FF5304B8000
unkown
page readonly
3018000
unkown
page read and write
7FF53086D000
unkown
page readonly
7FF5309D1000
unkown
page readonly
107C6000
system
page read and write
6D85000
stack
page read and write
9390000
unkown
page read and write
5910000
heap
page read and write
7FF5309C3000
unkown
page readonly
7690000
unkown
page read and write
7FF5308D3000
unkown
page readonly
7FF530282000
unkown
page readonly
A8AE000
stack
page read and write
A483000
unkown
page read and write
7DF44D8A1000
unkown
page execute read
7FF530985000
unkown
page readonly
B59000
stack
page read and write
7690000
unkown
page read and write
D4E8000
unkown
page read and write
7DF44D871000
unkown
page execute read
7FF530980000
unkown
page readonly
F55000
trusted library allocation
page read and write
7FF5309C9000
unkown
page readonly
D47A000
unkown
page read and write
7FF530815000
unkown
page readonly
7FF52FDCC000
unkown
page readonly
7FF53081D000
unkown
page readonly
B60000
unkown
page read and write
9E9E000
unkown
page read and write
7FF530408000
unkown
page readonly
7FF530695000
unkown
page readonly
28A0000
trusted library allocation
page read and write
D2B0000
unkown
page read and write
A9E0000
unkown
page readonly
43CC000
unkown
page read and write
11EF000
stack
page read and write
383F000
stack
page read and write
9E44000
unkown
page read and write
9CC6000
unkown
page read and write
EFE2000
heap
page read and write
7FF5309AC000
unkown
page readonly
988C000
stack
page read and write
2C00000
unkown
page readonly
7FF530244000
unkown
page readonly
7FF5308D1000
unkown
page readonly
34E2000
heap
page read and write
7B30000
unkown
page readonly
7FF5305B2000
unkown
page readonly
7509000
stack
page read and write
D1B6000
unkown
page read and write
980E000
stack
page read and write
3035000
unkown
page read and write
34E2000
heap
page read and write
7FF53070A000
unkown
page readonly
9730000
unkown
page read and write
7FF530819000
unkown
page readonly
D36B000
unkown
page read and write
D65A000
unkown
page read and write
7FF530873000
unkown
page readonly
A488000
unkown
page read and write
7509000
stack
page read and write
3039000
unkown
page read and write
EF0000
trusted library allocation
page read and write
7FF53062D000
unkown
page readonly
95B9000
unkown
page read and write
7FF530475000
unkown
page readonly
4F10000
trusted library allocation
page read and write
E7C000
stack
page read and write
7FF530280000
unkown
page readonly
E180000
heap
page read and write
AF2E000
stack
page read and write
4430000
unkown
page read and write
3025000
unkown
page read and write
3098000
unkown
page read and write
7FF530910000
unkown
page readonly
CE5000
heap
page read and write
8160000
unkown
page readonly
7FF5308F3000
unkown
page readonly
7FF5304D3000
unkown
page readonly
EE4E000
unkown
page read and write
7FF530833000
unkown
page readonly
D630000
unkown
page read and write
EE44000
unkown
page read and write
1250000
unclassified section
page execute and read and write
7FF530521000
unkown
page readonly
3037000
unkown
page read and write
7FF530511000
unkown
page readonly
9B1E000
stack
page read and write
EE4D000
unkown
page read and write
7FF53053A000
unkown
page readonly
A4D3000
unkown
page read and write
7087000
unkown
page read and write
F30000
trusted library allocation
page read and write
7FF53034E000
unkown
page readonly
FC0000
heap
page read and write
51CE000
stack
page read and write
6FCD000
stack
page read and write
2FEA000
unkown
page read and write
7FF53044A000
unkown
page readonly
7FF53074F000
unkown
page readonly
7FF53096C000
unkown
page readonly
D432000
unkown
page read and write
7FF53079E000
unkown
page readonly
7FF53046F000
unkown
page readonly
309C000
unkown
page read and write
7FF5302B5000
unkown
page readonly
7FF530437000
unkown
page readonly
7FF530A4F000
unkown
page readonly
776E000
stack
page read and write
6F8D000
unkown
page read and write
309A000
unkown
page read and write
6F6D000
unkown
page read and write
7C38000
stack
page read and write
7FF530609000
unkown
page readonly
94A1000
unkown
page read and write
7FF53058F000
unkown
page readonly
7FF5304D3000
unkown
page readonly
B36B000
stack
page read and write
EFB000
trusted library allocation
page read and write
4DC9000
unkown
page read and write
9E2B000
unkown
page read and write
70B7000
unkown
page read and write
CFB0000
unkown
page read and write
7FF5308B8000
unkown
page readonly
3021000
unkown
page read and write
D2C4000
unkown
page read and write
7460000
unkown
page read and write
7FF53080A000
unkown
page readonly
3040000
unkown
page read and write
4DB3000
unkown
page read and write
7480000
trusted library allocation
page read and write
D3B000
stack
page read and write
433B000
unkown
page read and write
8160000
unkown
page readonly
6DB0000
unkown
page read and write
7FF53041E000
unkown
page readonly
7FF530897000
unkown
page readonly
438E000
unkown
page read and write
7FF530815000
unkown
page readonly
D4FD000
unkown
page read and write
70AD000
unkown
page read and write
7FF5308CC000
unkown
page readonly
6F6D000
unkown
page read and write
7FF53068E000
unkown
page readonly
9E38000
unkown
page read and write
4C80000
unkown
page write copy
4F20000
trusted library allocation
page read and write
29D8000
stack
page read and write
7FF5305CF000
unkown
page readonly
9D34000
unkown
page read and write
9CA0000
unkown
page read and write
D2B0000
unkown
page read and write
D618000
unkown
page read and write
7FF5309E2000
unkown
page readonly
D5D5000
unkown
page read and write
9E07000
unkown
page read and write
6B5F000
heap
page read and write
7FF5309F0000
unkown
page readonly
437D000
unkown
page read and write
9D5A000
unkown
page read and write
7FF530514000
unkown
page readonly
FD0000
system
page execute and read and write
4400000
unkown
page read and write
D593000
unkown
page read and write
7FF53099B000
unkown
page readonly
876000
stack
page read and write
4342000
unkown
page read and write
7FF5307EF000
unkown
page readonly
9E21000
unkown
page read and write
48C000
unkown
page readonly
4DC9000
unkown
page read and write
7FF5304E9000
unkown
page readonly
7FF530410000
unkown
page readonly
6B87000
heap
page read and write
7FF530609000
unkown
page readonly
7FF53076E000
unkown
page readonly
3390000
heap
page read and write
3031000
unkown
page read and write
D2A5000
unkown
page read and write
5F0000
unkown
page readonly
7FF530410000
unkown
page readonly
CFA0000
unkown
page read and write
6D90000
unkown
page read and write
7FF530A60000
unkown
page readonly
7FF530A81000
unkown
page readonly
525E000
direct allocation
page execute and read and write
EE1C000
unkown
page read and write
2880000
heap
page read and write
D47A000
unkown
page read and write
500E000
stack
page read and write
4EE0000
trusted library allocation
page execute and read and write
8B82000
heap
page read and write
4328000
unkown
page read and write
7FF530454000
unkown
page readonly
36FF000
unkown
page read and write
D18F000
unkown
page read and write
17AF000
stack
page read and write
4D61000
heap
page read and write
7688000
stack
page read and write
34C8000
heap
page read and write
D1D7000
unkown
page read and write
7FF5305D3000
unkown
page readonly
C3C000
stack
page read and write
6B77000
heap
page read and write
D2A5000
unkown
page read and write
75DE000
stack
page read and write
10174000
system
page execute and read and write
7FF530989000
unkown
page readonly
3324000
heap
page read and write
7FF530565000
unkown
page readonly
7FF5305D7000
unkown
page readonly
EE50000
unkown
page read and write
835A000
stack
page read and write
93B4000
unkown
page read and write
D161000
unkown
page read and write
ABE000
stack
page read and write
952D000
unkown
page read and write
7FF53033D000
unkown
page readonly
7FF530447000
unkown
page readonly
7FF52FDD7000
unkown
page readonly
3033000
unkown
page read and write
3324000
heap
page read and write
7FF52FE0C000
unkown
page readonly
9CC2000
unkown
page read and write
D2ED000
unkown
page read and write
7FF530A76000
unkown
page readonly
8980000
unkown
page read and write
BF0000
unkown
page read and write
7FF530849000
unkown
page readonly
8581000
unkown
page read and write
7FF53070A000
unkown
page readonly
949B000
unkown
page read and write
BCE000
stack
page read and write
9E36000
unkown
page read and write
7DF44D870000
unkown
page readonly
9D58000
unkown
page read and write
CFA6000
unkown
page read and write
2BF0000
unkown
page readonly
DD2F000
stack
page read and write
C30000
unkown
page read and write
7FF530402000
unkown
page readonly
1270000
trusted library allocation
page execute and read and write
7FF53087E000
unkown
page readonly
D3B1000
unkown
page read and write
6220000
trusted library allocation
page read and write
7FF5302AA000
unkown
page readonly
7B10000
unkown
page readonly
70AF000
unkown
page read and write
7FF530A65000
unkown
page readonly
508E000
stack
page read and write
7FF53080F000
unkown
page readonly
889000
heap
page read and write
7FF5302B5000
unkown
page readonly
9497000
unkown
page read and write
2890000
trusted library allocation
page execute and read and write
CF0000
unkown
page readonly
D53F000
unkown
page read and write
7380000
unkown
page read and write
4F12000
heap
page read and write
100D0000
system
page execute and read and write
3E2000
unkown
page readonly
7FF530433000
unkown
page readonly
437A000
unkown
page read and write
4460000
unkown
page read and write
570000
heap
page read and write
D3FD000
unkown
page read and write
70AF000
unkown
page read and write
7FF53068E000
unkown
page readonly
EE41000
unkown
page read and write
E00000
heap
page read and write
6F63000
unkown
page read and write
8581000
unkown
page read and write
9486000
unkown
page read and write
D46D000
unkown
page read and write
A483000
unkown
page read and write
7FF53080A000
unkown
page readonly
889D000
stack
page read and write
7FF530447000
unkown
page readonly
4C80000
unkown
page write copy
A420000
unkown
page read and write
D2AE000
unkown
page read and write
A52000
trusted library allocation
page read and write
7FF530A5B000
unkown
page readonly
889000
heap
page read and write
991E000
stack
page read and write
FA0000
heap
page read and write
4F41000
trusted library allocation
page execute and read and write
3324000
heap
page read and write
9C18000
stack
page read and write
7FF530244000
unkown
page readonly
6BB5000
heap
page read and write
7FF530514000
unkown
page readonly
9CC8000
unkown
page read and write
957B000
unkown
page read and write
9581000
unkown
page read and write
7FF530524000
unkown
page readonly
3330000
trusted library allocation
page read and write
2BF0000
unkown
page readonly
AAFE000
stack
page read and write
4342000
unkown
page read and write
7FF5309D3000
unkown
page readonly
7FF530708000
unkown
page readonly
4F00000
trusted library allocation
page read and write
2FE5000
unkown
page read and write
580000
heap
page read and write
B69C000
stack
page read and write
7FF53094D000
unkown
page readonly
CF9A000
stack
page read and write
3330000
trusted library allocation
page read and write
3039000
unkown
page read and write
3E0000
unkown
page readonly
3324000
heap
page read and write
7FF5302B2000
unkown
page readonly
7FF530A48000
unkown
page readonly
CC0000
unkown
page read and write
FC7000
heap
page read and write
301A000
unkown
page read and write
7FF5307C6000
unkown
page readonly
DDA9000
stack
page read and write
7FF530949000
unkown
page readonly
7FF530665000
unkown
page readonly
AE20000
unkown
page read and write
CFF4000
unkown
page read and write
CFB0000
unkown
page read and write
A48B000
unkown
page read and write
7450000
unkown
page readonly
CFAA000
unkown
page read and write
999F000
stack
page read and write
7FF5304AA000
unkown
page readonly
9D29000
unkown
page read and write
878E000
stack
page read and write
D3B1000
unkown
page read and write
7FF5304A2000
unkown
page readonly
4F30000
trusted library allocation
page execute and read and write
7FF5304E6000
unkown
page readonly
7FF52FDCC000
unkown
page readonly
7FF530743000
unkown
page readonly
34DD000
heap
page read and write
B130000
unkown
page read and write
980E000
stack
page read and write
C50000
unkown
page readonly
73B0000
unkown
page read and write
2C00000
unkown
page readonly
7410000
trusted library section
page read and write
6F7E000
unkown
page read and write
7FF5307D0000
unkown
page readonly
7FF530678000
unkown
page readonly
7FF53090B000
unkown
page readonly
3971000
trusted library allocation
page read and write
7032000
trusted library allocation
page read and write
7FF5304E3000
unkown
page readonly
6F94000
unkown
page read and write
825D000
stack
page read and write
330F000
stack
page read and write
7FF530A65000
unkown
page readonly
D173000
unkown
page read and write
772F000
stack
page read and write
9499000
unkown
page read and write
D2B8000
unkown
page read and write
7FF53087E000
unkown
page readonly
4460000
unkown
page read and write
958F000
unkown
page read and write
8CF9000
stack
page read and write
7FF5308A8000
unkown
page readonly
7FF53088E000
unkown
page readonly
9A1F000
stack
page read and write
250A000
stack
page read and write
991E000
stack
page read and write
7FF530928000
unkown
page readonly
503F000
heap
page read and write
7FF530511000
unkown
page readonly
D2A5000
unkown
page read and write
B130000
unkown
page read and write
7FF5305F0000
unkown
page readonly
7FF530536000
unkown
page readonly
7FF530698000
unkown
page readonly
8DE000
heap
page read and write
7FF530884000
unkown
page readonly
6F99000
unkown
page read and write
78D0000
unkown
page readonly
D604000
unkown
page read and write
7FF53066D000
unkown
page readonly
A4E4000
unkown
page read and write
D597000
unkown
page read and write
7849000
stack
page read and write
9E2B000
unkown
page read and write
AF40000
unkown
page read and write
EE54000
unkown
page read and write
6F74000
unkown
page read and write
5F0000
unkown
page readonly
980000
heap
page read and write
7FF53034E000
unkown
page readonly
7FF530256000
unkown
page readonly
2B8A000
trusted library allocation
page read and write
2D50000
unkown
page readonly
3033000
unkown
page read and write
7FF530673000
unkown
page readonly
7FF53033D000
unkown
page readonly
D647000
unkown
page read and write
43C5000
unkown
page read and write
B150000
unkown
page read and write
C50000
unkown
page readonly
590000
unkown
page readonly
DAAE000
stack
page read and write
7FF53029F000
unkown
page readonly
A9F0000
unkown
page readonly
B5C0000
unkown
page readonly
94B7000
unkown
page read and write
9D16000
unkown
page read and write
D2A1000
unkown
page read and write
3093000
unkown
page read and write
D2A1000
unkown
page read and write
41E8000
trusted library allocation
page read and write
7FF52FDD7000
unkown
page readonly
BD3000
heap
page read and write
7FF5305D7000
unkown
page readonly
ADC000
stack
page read and write
6B83000
heap
page read and write
7FF5305BB000
unkown
page readonly
2900000
heap
page execute and read and write
3324000
heap
page read and write
6BAD000
heap
page read and write
7FF530A37000
unkown
page readonly
744B000
stack
page read and write
758C000
stack
page read and write
7FF53090B000
unkown
page readonly
4307000
unkown
page read and write
A460000
unkown
page read and write
7FF5304F1000
unkown
page readonly
7FF5307D0000
unkown
page readonly
9DC1000
unkown
page read and write
876000
stack
page read and write
D2B0000
unkown
page read and write
EE42000
unkown
page read and write
4EA1000
trusted library allocation
page execute and read and write
A10000
trusted library allocation
page read and write
D899000
stack
page read and write
C01000
unkown
page readonly
286F000
stack
page read and write
3330000
trusted library allocation
page read and write
34E2000
heap
page read and write
6B40000
heap
page read and write
B5C0000
unkown
page readonly
7DF44D881000
unkown
page execute read
7FF5303E0000
unkown
page readonly
9C9D000
stack
page read and write
34E2000
heap
page read and write
7FF530289000
unkown
page readonly
7FF530433000
unkown
page readonly
4396000
unkown
page read and write
7FF53082E000
unkown
page readonly
D36B000
unkown
page read and write
AA7E000
stack
page read and write
7FF530668000
unkown
page readonly
8B70000
heap
page read and write
7FF5307C6000
unkown
page readonly
D486000
unkown
page read and write
D173000
unkown
page read and write
A4E4000
unkown
page read and write
4356000
unkown
page read and write
85A0000
unkown
page read and write
7FF530668000
unkown
page readonly
1080000
unkown
page readonly
78F0000
unkown
page readonly
6F63000
unkown
page read and write
7FF530437000
unkown
page readonly
7FF5308C1000
unkown
page readonly
9B1E000
stack
page read and write
433B000
unkown
page read and write
3086000
unkown
page read and write
78B0000
trusted library allocation
page read and write
D899000
stack
page read and write
94B3000
unkown
page read and write
6220000
trusted library allocation
page read and write
CFAC000
unkown
page read and write
B5A0000
unkown
page read and write
302D000
unkown
page read and write
AE20000
unkown
page read and write
4FD0000
trusted library allocation
page read and write
7FF530660000
unkown
page readonly
7FF5309FB000
unkown
page readonly
976A000
unkown
page read and write
7380000
unkown
page read and write
EFE0000
heap
page read and write
B120000
unkown
page read and write
79C1000
unkown
page read and write
7A00000
unkown
page read and write
B0C0000
unkown
page readonly
7FF530346000
unkown
page readonly
EFEA000
heap
page read and write
D4E5000
unkown
page read and write
34D7000
heap
page read and write
CFA7000
unkown
page read and write
7FF53081D000
unkown
page readonly
4420000
unkown
page read and write
F50000
heap
page read and write
A57000
trusted library allocation
page execute and read and write
7FF53079E000
unkown
page readonly
4D31000
unkown
page read and write
9C18000
stack
page read and write
E32F000
stack
page read and write
7DF44D861000
unkown
page execute read
6F60000
unkown
page read and write
50C0000
direct allocation
page execute and read and write
D15B000
unkown
page read and write
8E80000
unkown
page readonly
4D96000
heap
page read and write
1281000
trusted library allocation
page execute and read and write
78CC000
stack
page read and write
3035000
unkown
page read and write
CE0000
heap
page read and write
94AD000
unkown
page read and write
7FF530884000
unkown
page readonly
D2E5000
unkown
page read and write
258E000
stack
page read and write
C8A000
heap
page read and write
9D30000
unkown
page read and write
D617000
unkown
page read and write
CE5000
heap
page read and write
BF0000
unkown
page read and write
EE0000
trusted library allocation
page read and write
B5D0000
unkown
page read and write
7717000
stack
page read and write
EFE2000
heap
page read and write
BEA000
heap
page read and write
7FF5309D1000
unkown
page readonly
94A3000
unkown
page read and write
BD0000
unkown
page readonly
7DF44D881000
unkown
page execute read
6C7E000
stack
page read and write
3324000
heap
page read and write
D59B000
unkown
page read and write
7FF5304BF000
unkown
page readonly
D4EC000
unkown
page read and write
6220000
trusted library allocation
page read and write
309C000
unkown
page read and write
D4DC000
unkown
page read and write
7FF53057E000
unkown
page readonly
7FF52FE0C000
unkown
page readonly
EE10000
unkown
page read and write
9E97000
unkown
page read and write
7FF530819000
unkown
page readonly
94B5000
unkown
page read and write
6D90000
unkown
page read and write
7FF53076E000
unkown
page readonly
2EA0000
unkown
page readonly
335E000
stack
page read and write
8CF9000
stack
page read and write
7FF5307A6000
unkown
page readonly
EE70000
unkown
page read and write
3330000
trusted library allocation
page read and write
9E2D000
unkown
page read and write
109BF000
system
page read and write
786E000
stack
page read and write
9CC8000
unkown
page read and write
9A1F000
stack
page read and write
2B59000
stack
page read and write
9D16000
unkown
page read and write
7DF44D8A1000
unkown
page execute read
7FF5307E8000
unkown
page readonly
4E85000
heap
page read and write
2B18000
trusted library allocation
page read and write
A0E000
stack
page read and write
9495000
unkown
page read and write
9E07000
unkown
page read and write
7FF5309D7000
unkown
page readonly
7FF530524000
unkown
page readonly
7FF53080D000
unkown
page readonly
D2C8000
unkown
page read and write
9D2D000
unkown
page read and write
308A000
unkown
page read and write
8811000
unkown
page read and write
4356000
unkown
page read and write
7FF530A7B000
unkown
page readonly
7FF5309D5000
unkown
page readonly
D2C4000
unkown
page read and write
9495000
unkown
page read and write
AF30000
unkown
page read and write
7FF530917000
unkown
page readonly
D2ED000
unkown
page read and write
3086000
unkown
page read and write
340F000
heap
page read and write
A24000
trusted library allocation
page read and write
308A000
unkown
page read and write
CFAA000
unkown
page read and write
A30000
trusted library allocation
page read and write
D11A000
unkown
page read and write
A70000
trusted library allocation
page read and write
81D0000
unkown
page readonly
7FF530952000
unkown
page readonly
FF0000
heap
page read and write
7FF5302A2000
unkown
page readonly
A3D000
trusted library allocation
page execute and read and write
7FF530871000
unkown
page readonly
EE41000
unkown
page read and write
EE45000
unkown
page read and write
1360000
direct allocation
page execute and read and write
82DB000
stack
page read and write
7FF530961000
unkown
page readonly
9E97000
unkown
page read and write
3330000
trusted library allocation
page read and write
7FF5309E6000
unkown
page readonly
34A0000
heap
page read and write
D2AE000
unkown
page read and write
7FF530297000
unkown
page readonly
7FF5307EF000
unkown
page readonly
EA0F000
stack
page read and write
E27000
heap
page read and write
851F000
stack
page read and write
C09000
heap
page read and write
5CE000
stack
page read and write
9D56000
unkown
page read and write
7390000
unkown
page read and write
43FC000
unkown
page read and write
7FF527C9F000
unkown
page readonly
7717000
stack
page read and write
A23000
trusted library allocation
page execute and read and write
2593000
heap
page read and write
7FF5302A5000
unkown
page readonly
7FF530952000
unkown
page readonly
7FF5307FE000
unkown
page readonly
FFD3000
unkown
page read and write
7BBE000
stack
page read and write
D198000
unkown
page read and write
AEA9000
stack
page read and write
DF9C000
stack
page read and write
9A9F000
stack
page read and write
9E8F000
unkown
page read and write
9E07000
unkown
page read and write
7FF530A33000
unkown
page readonly
34DB000
heap
page read and write
7FF530944000
unkown
page readonly
7370000
unkown
page read and write
DAE000
stack
page read and write
B0F0000
unkown
page read and write
9B80000
unkown
page read and write
7FF5304D8000
unkown
page readonly
E54E000
stack
page read and write
3324000
heap
page read and write
8F7000
stack
page read and write
7460000
unkown
page read and write
7FF5307EA000
unkown
page readonly
7FF5306FB000
unkown
page readonly
81C0000
unkown
page readonly
D360000
unkown
page read and write
7FF53068B000
unkown
page readonly
7FF53084E000
unkown
page readonly
A420000
unkown
page read and write
10016000
unkown
page read and write
4392000
unkown
page read and write
7FF53093F000
unkown
page readonly
3324000
heap
page read and write
C16000
heap
page read and write
DFE000
stack
page read and write
2971000
trusted library allocation
page read and write
373E000
stack
page read and write
89B7000
unkown
page read and write
7FF530897000
unkown
page readonly
70CE000
unkown
page read and write
9CF8000
unkown
page read and write
70AD000
unkown
page read and write
7FF53068B000
unkown
page readonly
949B000
unkown
page read and write
1080000
unkown
page readonly
7FF5309C9000
unkown
page readonly
7FF530491000
unkown
page readonly
50B0000
heap
page read and write
CB0000
heap
page read and write
94B1000
unkown
page read and write
9A9F000
stack
page read and write
D47A000
unkown
page read and write
F16000
trusted library allocation
page read and write
590000
unkown
page readonly
7FF530413000
unkown
page readonly
504D000
stack
page read and write
2960000
heap
page execute and read and write
5391000
direct allocation
page execute and read and write
D2C8000
unkown
page read and write
43FC000
unkown
page read and write
9B60000
unkown
page read and write
7FF5309B9000
unkown
page readonly
7FF53089D000
unkown
page readonly
7FF53080F000
unkown
page readonly
70C9000
unkown
page read and write
7FF530A33000
unkown
page readonly
300C000
unkown
page read and write
BD0000
heap
page read and write
F70000
trusted library allocation
page read and write
C01000
unkown
page readonly
560F000
unclassified section
page read and write
A46000
trusted library allocation
page execute and read and write
D360000
unkown
page read and write
7FF530A02000
unkown
page readonly
7FF5308F3000
unkown
page readonly
7FF5307A1000
unkown
page readonly
7370000
unkown
page read and write
120B000
unclassified section
page execute and read and write
7FF530935000
unkown
page readonly
7FF5307A6000
unkown
page readonly
34E8000
heap
page read and write
7FF530873000
unkown
page readonly
F90000
trusted library allocation
page read and write
7FF530660000
unkown
page readonly
6F60000
unkown
page read and write
D167000
unkown
page read and write
2956000
stack
page read and write
7490000
trusted library allocation
page execute and read and write
7FF5302A5000
unkown
page readonly
4DB3000
unkown
page read and write
580000
unkown
page readonly
7FF530408000
unkown
page readonly
7FF53029F000
unkown
page readonly
A4D7000
unkown
page read and write
7270000
unkown
page read and write
73B0000
unkown
page read and write
7FF53066D000
unkown
page readonly
74DD000
stack
page read and write
7FF5309D3000
unkown
page readonly
7FF530991000
unkown
page readonly
7FF530678000
unkown
page readonly
89B7000
unkown
page read and write
77C5000
stack
page read and write
38F0000
heap
page read and write
87D6000
unkown
page read and write
744B000
stack
page read and write
1626000
direct allocation
page execute and read and write
7FF53050F000
unkown
page readonly
9CAE000
unkown
page read and write
52C0000
heap
page read and write
A47C000
unkown
page read and write
7FF5304B8000
unkown
page readonly
2C98000
stack
page read and write
34E4000
heap
page read and write
51ED000
direct allocation
page execute and read and write
2590000
heap
page read and write
958F000
unkown
page read and write
7FF530297000
unkown
page readonly
7DF44D870000
unkown
page readonly
DB0000
heap
page read and write
2950000
heap
page read and write
B60000
unkown
page read and write
There are 1436 hidden memdumps, click here to show them.