IOC Report
INVOICE.exe

loading gif

Files

File Path
Type
Category
Malicious
INVOICE.exe
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_INVOICE.exe_fec790ac7eb5905e17bf10e44999f63291b7bd7_55fdea1e_25f9db32-c290-45ae-a857-99396b3e14f3\Report.wer
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
 malicious
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9D5C.tmp.dmp
Mini DuMP crash report, 16 streams, Fri Sep 27 15:22:06 2024, 0x1205a4 type
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9EC4.tmp.WERInternalMetadata.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9EF4.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\INVOICE.exe
"C:\Users\user\Desktop\INVOICE.exe"
 malicious
C:\Windows\System32\notepad.exe
"C:\Windows\System32\notepad.exe"
 malicious
C:\Windows\System32\calc.exe
"C:\Windows\System32\calc.exe"
 malicious
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe"
 malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\iexplore.exe"
 malicious
C:\Windows\SysWOW64\findstr.exe
"C:\Windows\SysWOW64\findstr.exe"
 malicious
C:\Windows\SysWOW64\findstr.exe
"C:\Windows\SysWOW64\findstr.exe"
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\System32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5892 -s 1088

URLs

Name
IP
Malicious
https://word.office.comon
unknown
http://upx.sf.net
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppcrobat.exe
unknown
https://api.msn.com/
unknown
https://excel.office.com
unknown
http://schemas.micro
unknown
http://crl.v
unknown
https://outlook.com
unknown
https://android.notify.windows.com/iOS
unknown
https://powerpoint.office.comcember
unknown
https://wns.windows.com/)s
unknown
There are 1 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
XXVLVHS08H
 malicious
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
ProgramId
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
FileId
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
LowerCaseLongPath
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
LongPathHash
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Name
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
OriginalFileName
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Publisher
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Version
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
BinFileVersion
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
BinaryType
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
ProductName
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
ProductVersion
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
LinkDate
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
BinProductVersion
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
AppxPackageFullName
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
AppxPackageRelativeId
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Size
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Language
\REGISTRY\A\{bfff0c35-055f-ae83-480b-d53524dda96c}\Root\InventoryApplicationFile\invoice.exe|8212dd41c89b7c23
Usn
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
There are 30 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
28520D19000
trusted library allocation
page read and write
 malicious
2600000
trusted library allocation
page read and write
 malicious
9CF0000
system
page execute and read and write
 malicious
2650000
trusted library allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
3C6E000
system
page execute and read and write
A3C3000
unkown
page read and write
7FF5D74FA000
unkown
page readonly
77DB000
unkown
page read and write
2857000
heap
page read and write
35F4000
unkown
page read and write
C9EA000
unkown
page read and write
2851000
heap
page read and write
7693000
unkown
page read and write
10294000
unkown
page read and write
AA0B000
unkown
page read and write
7FF5D7455000
unkown
page readonly
2851000
heap
page read and write
7FF848BD0000
trusted library allocation
page read and write
8900000
unkown
page read and write
7FF5D719C000
unkown
page readonly
9A6A000
unkown
page read and write
10194000
unkown
page read and write
23F0000
system
page execute and read and write
7FF5D777A000
unkown
page readonly
2851EE40000
heap
page read and write
3140000
unkown
page read and write
35C9000
unkown
page read and write
7FF5D710B000
unkown
page readonly
362D000
unkown
page read and write
A39F000
unkown
page read and write
C806000
unkown
page read and write
A28D000
unkown
page read and write
7FF5D7075000
unkown
page readonly
7FF5D710B000
unkown
page readonly
7FF5D71EF000
unkown
page readonly
2851000
heap
page read and write
7FF5D7641000
unkown
page readonly
94F4000
unkown
page read and write
C609000
unkown
page read and write
362A000
unkown
page read and write
7FF5D771A000
unkown
page readonly
3781000
heap
page read and write
B0E0000
unkown
page readonly
2F02000
unclassified section
page read and write
7E60000
unkown
page read and write
2AD0000
trusted library allocation
page execute and read and write
3626000
unkown
page read and write
7FF5D7073000
unkown
page readonly
C396BFE000
stack
page read and write
9A94000
unkown
page read and write
C46F000
unkown
page read and write
7FF5D75CB000
unkown
page readonly
35E4000
unkown
page read and write
CC000
stack
page read and write
3353000
unkown
page read and write
35DC000
unkown
page read and write
7FF5D766E000
unkown
page readonly
9D9C000
unkown
page read and write
3400000
unkown
page read and write
75FD000
unkown
page read and write
760D000
unkown
page read and write
7FF5D76F5000
unkown
page readonly
3626000
unkown
page read and write
C472000
unkown
page read and write
7FF5D764F000
unkown
page readonly
AA04000
unkown
page read and write
75F8000
unkown
page read and write
2851EEAC000
heap
page read and write
9B0B000
unkown
page read and write
3594000
heap
page read and write
7FF5D71E6000
unkown
page readonly
35E4000
unkown
page read and write
9A8E000
unkown
page read and write
7FF5D7752000
unkown
page readonly
760F000
unkown
page read and write
353D000
unkown
page read and write
8890000
unkown
page readonly
7FF5D66E3000
unkown
page readonly
7E58000
stack
page read and write
4A90000
unkown
page read and write
7693000
unkown
page read and write
C5FA000
unkown
page read and write
49BB000
unkown
page read and write
7FF5D720A000
unkown
page readonly
7FF5D75F6000
unkown
page readonly
A391000
unkown
page read and write
3120000
unkown
page read and write
BDC0000
unkown
page read and write
7FF5CE343000
unkown
page readonly
285313A4000
trusted library allocation
page read and write
13A0000
unkown
page readonly
7FF5D7534000
unkown
page readonly
A237000
unkown
page read and write
7FF5D75FF000
unkown
page readonly
7FF5D7682000
unkown
page readonly
7FF5D7394000
unkown
page readonly
C7CB000
unkown
page read and write
2851000
heap
page read and write
7FF5D7792000
unkown
page readonly
2A30000
trusted library allocation
page read and write
2CD9000
direct allocation
page execute and read and write
A3AA000
unkown
page read and write
C035000
stack
page read and write
7FF5D779E000
unkown
page readonly
275A000
heap
page read and write
2851000
heap
page read and write
7FF5D771A000
unkown
page readonly
7FF5D7280000
unkown
page readonly
7AA0000
unkown
page read and write
1A4000
heap
page read and write
7FF5D76DA000
unkown
page readonly
9A72000
unkown
page read and write
7FF5D77F0000
unkown
page readonly
2851000
heap
page read and write
7FF5D72FB000
unkown
page readonly
7637000
unkown
page read and write
C4DC000
unkown
page read and write
2851EEE5000
heap
page read and write
8935000
unkown
page read and write
9679000
stack
page read and write
4A44000
unkown
page read and write
7D3E000
stack
page read and write
C617000
unkown
page read and write
3594000
heap
page read and write
7FF5D75F2000
unkown
page readonly
7FF5D7643000
unkown
page readonly
7FF5D7482000
unkown
page readonly
2851000
heap
page read and write
C5FD000
unkown
page read and write
7FF5D748C000
unkown
page readonly
7FF5D72D0000
unkown
page readonly
35BD000
unkown
page read and write
3041000
unkown
page read and write
7FF5D75F9000
unkown
page readonly
A3B9000
unkown
page read and write
A3C3000
unkown
page read and write
75F8000
unkown
page read and write
84BB000
stack
page read and write
35FA000
unkown
page read and write
10252000
unkown
page read and write
760B000
unkown
page read and write
326E000
system
page execute and read and write
7989000
stack
page read and write
7FF5D74B8000
unkown
page readonly
7611000
unkown
page read and write
FF0000
unkown
page readonly
7FF5D75A6000
unkown
page readonly
7FF5D7289000
unkown
page readonly
C65E000
unkown
page read and write
B4D0000
unkown
page readonly
9A80000
unkown
page read and write
7605000
unkown
page read and write
B950000
unkown
page readonly
7FF5D7558000
unkown
page readonly
7FF5D66E8000
unkown
page readonly
7FF5D774A000
unkown
page readonly
7FF5D74A6000
unkown
page readonly
35DC000
unkown
page read and write
35B3000
unkown
page read and write
7FF5D77F7000
unkown
page readonly
997C000
stack
page read and write
7FF5D764F000
unkown
page readonly
9679000
stack
page read and write
7FF5D772C000
unkown
page readonly
7FF5D738E000
unkown
page readonly
9B2C000
unkown
page read and write
7FF5D774C000
unkown
page readonly
2851F390000
heap
page read and write
7609000
unkown
page read and write
2851F1B9000
heap
page read and write
A9DF000
unkown
page read and write
A313000
unkown
page read and write
B8DB000
stack
page read and write
7FF5D71CC000
unkown
page readonly
7FF5D77A4000
unkown
page readonly
7FF5D744E000
unkown
page readonly
7FF5D76D7000
unkown
page readonly
C1CC000
stack
page read and write
7DBC000
stack
page read and write
49FA000
unkown
page read and write
1281000
unkown
page readonly
2851ED60000
unkown
page readonly
7FF5D77E3000
unkown
page readonly
768E000
unkown
page read and write
7FF5D752F000
unkown
page readonly
2851F1F0000
heap
page read and write
A9DF000
unkown
page read and write
7FF5D769E000
unkown
page readonly
7FF5D7336000
unkown
page readonly
2851EEE2000
heap
page read and write
A408000
unkown
page read and write
35B0000
unkown
page read and write
1000000
heap
page read and write
7DF4F2491000
unkown
page execute read
7FF5D7292000
unkown
page readonly
7FF5D7427000
unkown
page readonly
7FF848BD2000
trusted library allocation
page read and write
9A94000
unkown
page read and write
3650000
heap
page read and write
7DF4F24A1000
unkown
page execute read
7C80000
unkown
page read and write
7FF5D7752000
unkown
page readonly
7691000
unkown
page read and write
7FF5D6A4B000
unkown
page readonly
7FF5D75F2000
unkown
page readonly
7FF5D7065000
unkown
page readonly
C90E000
unkown
page read and write
7FF5D762F000
unkown
page readonly
35D5000
unkown
page read and write
1340000
unkown
page read and write
1390000
heap
page read and write
397F000
unkown
page read and write
7FF5D7309000
unkown
page readonly
A2A2000
unkown
page read and write
2850000
heap
page read and write
2851000
heap
page read and write
7FF5D706F000
unkown
page readonly
3AE0000
direct allocation
page execute and read and write
1360000
unkown
page readonly
3550000
direct allocation
page read and write
A2D7000
unkown
page read and write
A9E9000
unkown
page read and write
C653000
unkown
page read and write
2851000
heap
page read and write
7FF5D77FD000
unkown
page readonly
7FF5D7236000
unkown
page readonly
C4DC000
unkown
page read and write
7FF5D7202000
unkown
page readonly
B03B000
stack
page read and write
2CDD000
direct allocation
page execute and read and write
7686000
unkown
page read and write
276C000
heap
page read and write
7FF5D7669000
unkown
page readonly
9D67000
unkown
page read and write
28520AE4000
trusted library allocation
page read and write
7FF5D71CC000
unkown
page readonly
5479000
unkown
page read and write
761E000
unkown
page read and write
768E000
unkown
page read and write
2851EEA6000
heap
page read and write
2851000
heap
page read and write
3626000
unkown
page read and write
9B2C000
unkown
page read and write
5330000
unkown
page write copy
1E0000
trusted library allocation
page read and write
1110000
unkown
page read and write
7FF5D77A4000
unkown
page readonly
B85A000
stack
page read and write
7FF5D7452000
unkown
page readonly
B4D0000
unkown
page readonly
7FF5D77A8000
unkown
page readonly
AFBE000
stack
page read and write
7FF5D7262000
unkown
page readonly
7FF5D717C000
unkown
page readonly
7FF5D75F6000
unkown
page readonly
35D3000
unkown
page read and write
7FF5D72BF000
unkown
page readonly
35BD000
unkown
page read and write
3550000
direct allocation
page read and write
1149000
unkown
page read and write
35D1000
unkown
page read and write
7FF5D6AB6000
unkown
page readonly
99B0000
unkown
page read and write
2380000
trusted library allocation
page read and write
7FF848BCD000
trusted library allocation
page execute and read and write
35D5000
unkown
page read and write
26C0000
trusted library allocation
page read and write
9578000
stack
page read and write
75E0000
unkown
page read and write
843F000
stack
page read and write
9EB0000
unkown
page readonly
9ABD000
unkown
page read and write
9A92000
unkown
page read and write
1160000
unkown
page read and write
C81C000
unkown
page read and write
9A92000
unkown
page read and write
C549000
unkown
page read and write
1380000
heap
page read and write
C621000
unkown
page read and write
1731000
unkown
page readonly
7FF5D7641000
unkown
page readonly
A251000
unkown
page read and write
997C000
stack
page read and write
10216000
unkown
page read and write
1350000
unkown
page readonly
7FF5D749B000
unkown
page readonly
7FF5D71BF000
unkown
page readonly
A2B5000
unkown
page read and write
7FF5D71D7000
unkown
page readonly
A3C3000
unkown
page read and write
7FF5D7394000
unkown
page readonly
7FF5D77E9000
unkown
page readonly
B559000
stack
page read and write
C9FA000
unkown
page read and write
3100000
unkown
page read and write
7654000
unkown
page read and write
C605000
unkown
page read and write
362D000
unkown
page read and write
4B00000
unkown
page read and write
C9B9000
unkown
page read and write
7FF5D75B3000
unkown
page readonly
7FF5D770F000
unkown
page readonly
A33F000
unkown
page read and write
1395000
heap
page read and write
F13000
heap
page read and write
7FF5D7396000
unkown
page readonly
35C3000
unkown
page read and write
7FF5D75C1000
unkown
page readonly
8880000
unkown
page readonly
BFB8000
stack
page read and write
9A8E000
unkown
page read and write
4A90000
unkown
page read and write
B980000
unkown
page readonly
28520A12000
trusted library allocation
page read and write
7FF5D7215000
unkown
page readonly
2851000
heap
page read and write
7CB0000
unkown
page readonly
2851F080000
trusted library allocation
page read and write
7440000
unkown
page read and write
C92C000
unkown
page read and write
3549000
unkown
page read and write
A39F000
unkown
page read and write
9BAA000
unkown
page read and write
7FF848BC2000
trusted library allocation
page read and write
3520000
unkown
page readonly
7FF5D75DF000
unkown
page readonly
769A000
unkown
page read and write
4A40000
unkown
page read and write
F1FA000
heap
page read and write
3140000
unkown
page read and write
7FF5D74A6000
unkown
page readonly
270000
heap
page read and write
C61B000
unkown
page read and write
BEA0000
unkown
page readonly
C50F000
unkown
page read and write
C8BE000
unkown
page read and write
205C000
system
page execute and read and write
7FF5D7391000
unkown
page readonly
C4BD000
unkown
page read and write
9ADB000
unkown
page read and write
AA93000
unkown
page read and write
8C39000
stack
page read and write
3C0D000
direct allocation
page execute and read and write
C5F4000
unkown
page read and write
34C0000
direct allocation
page read and write
4A0E000
unkown
page read and write
275F000
heap
page read and write
AA01000
unkown
page read and write
9AA0000
unkown
page read and write
AA0B000
unkown
page read and write
1380000
heap
page read and write
7FF848BC0000
trusted library allocation
page read and write
7FF5D72C8000
unkown
page readonly
9AAC000
unkown
page read and write
A251000
unkown
page read and write
A02E000
stack
page read and write
3E30000
unclassified section
page execute and read and write
2760000
heap
page read and write
C7C6000
unkown
page read and write
7FF5D7589000
unkown
page readonly
7FF5D7639000
unkown
page readonly
9AB2000
unkown
page read and write
7B10000
unkown
page read and write
7631000
unkown
page read and write
A40E000
unkown
page read and write
C1CC000
stack
page read and write
7FF5D776D000
unkown
page readonly
AA04000
unkown
page read and write
7FF5D71D7000
unkown
page readonly
7FF5D7455000
unkown
page readonly
1A0000
heap
page read and write
C549000
unkown
page read and write
7FF5D7604000
unkown
page readonly
7FF5D71EA000
unkown
page readonly
7FF5D705D000
unkown
page readonly
761E000
unkown
page read and write
E10000
unkown
page readonly
7FF5D75D9000
unkown
page readonly
7FF5D75FF000
unkown
page readonly
260000
heap
page read and write
9AF9000
unkown
page read and write
77A2000
unkown
page read and write
7FF5D720F000
unkown
page readonly
F1F0000
heap
page read and write
35D1000
unkown
page read and write
31DC000
unclassified section
page read and write
9AA8000
unkown
page read and write
4980000
unkown
page read and write
7FF5D769E000
unkown
page readonly
C8F0000
unkown
page read and write
10216000
unkown
page read and write
7FF5D781A000
unkown
page readonly
33F0000
unkown
page read and write
8932000
unkown
page read and write
7FF5D7376000
unkown
page readonly
7FF5D7488000
unkown
page readonly
7605000
unkown
page read and write
7AC0000
unkown
page read and write
C035000
stack
page read and write
7C70000
unkown
page readonly
7DC0000
unkown
page readonly
8932000
unkown
page read and write
7B20000
unkown
page read and write
368D000
heap
page read and write
400000
remote allocation
page execute and read and write
285309B7000
trusted library allocation
page read and write
7FF5D7820000
unkown
page readonly
7FF5D7820000
unkown
page readonly
7FF5D77F7000
unkown
page readonly
9A98000
unkown
page read and write
3530000
unkown
page read and write
2851000
heap
page read and write
7FF5D71E0000
unkown
page readonly
35C3000
unkown
page read and write
3110000
unkown
page readonly
7AF1000
unkown
page read and write
7FF5D774C000
unkown
page readonly
7FF5D7398000
unkown
page readonly
7FF5D7558000
unkown
page readonly
3489000
stack
page read and write
7FF5D760E000
unkown
page readonly
9A84000
unkown
page read and write
53E1000
unkown
page read and write
99C0000
unkown
page read and write
9E2D000
stack
page read and write
7FF5D72D3000
unkown
page readonly
A9E9000
unkown
page read and write
2851F1F5000
heap
page read and write
C62D000
unkown
page read and write
3100000
unkown
page read and write
35B0000
unkown
page read and write
3110000
unkown
page readonly
A39F000
unkown
page read and write
4AB0000
unkown
page read and write
A2DF000
unkown
page read and write
2851F140000
heap
page read and write
7FF5D7391000
unkown
page readonly
105AC000
unkown
page read and write
3E22000
direct allocation
page execute and read and write
7FF5D75DF000
unkown
page readonly
285311B9000
trusted library allocation
page read and write
C615000
unkown
page read and write
7FF5D72E9000
unkown
page readonly
3489000
stack
page read and write
F1F2000
heap
page read and write
7FF5D723F000
unkown
page readonly
7FF5D76AF000
unkown
page readonly
49C2000
unkown
page read and write
BE90000
unkown
page read and write
3006000
unkown
page read and write
2851ED62000
unkown
page readonly
A286000
unkown
page read and write
C4C6000
unkown
page read and write
9AB4000
unkown
page read and write
7440000
unkown
page read and write
12D0000
unkown
page readonly
285389E0000
trusted library allocation
page read and write
49BB000
unkown
page read and write
7FF5D77B9000
unkown
page readonly
7FF5D6A4B000
unkown
page readonly
7DF4F2471000
unkown
page execute read
AA93000
unkown
page read and write
C653000
unkown
page read and write
35F4000
unkown
page read and write
7FF5D7691000
unkown
page readonly
1240000
unkown
page read and write
779E000
unkown
page read and write
A39C000
unkown
page read and write
2D4E000
direct allocation
page execute and read and write
7FF5D77C7000
unkown
page readonly
7FF5D77DA000
unkown
page readonly
7DBC000
stack
page read and write
7FF848D90000
trusted library allocation
page read and write
2750000
heap
page read and write
7FF5D7799000
unkown
page readonly
8A46000
unkown
page read and write
99B0000
unkown
page read and write
7B10000
unkown
page read and write
7D3E000
stack
page read and write
33F0000
unkown
page read and write
C3968FE000
stack
page read and write
7FF5D748C000
unkown
page readonly
49C2000
unkown
page read and write
F0C000
heap
page read and write
7FF5D7700000
unkown
page readonly
A264000
unkown
page read and write
C916000
unkown
page read and write
7693000
unkown
page read and write
B220000
unkown
page read and write
9AC3000
unkown
page read and write
7FF5D75EE000
unkown
page readonly
2BB0000
direct allocation
page execute and read and write
7B20000
unkown
page read and write
4A0E000
unkown
page read and write
760B000
unkown
page read and write
35C1000
unkown
page read and write
C615000
unkown
page read and write
3693000
heap
page read and write
2851000
heap
page read and write
7FF5D77DA000
unkown
page readonly
7FF5D738E000
unkown
page readonly
7FF5D7799000
unkown
page readonly
3693000
heap
page read and write
368B000
heap
page read and write
3280000
unkown
page read and write
C48B000
unkown
page read and write
C5FA000
unkown
page read and write
C78A000
unkown
page read and write
2851000
heap
page read and write
9AC3000
unkown
page read and write
7FF5D7202000
unkown
page readonly
C8E8000
unkown
page read and write
70DE000
unclassified section
page execute and read and write
7810000
unkown
page read and write
1025B000
unkown
page read and write
C800000
unkown
page read and write
35FA000
unkown
page read and write
7FF5D7257000
unkown
page readonly
98FD000
stack
page read and write
2851EEC1000
heap
page read and write
7637000
unkown
page read and write
9ABD000
unkown
page read and write
7FF848DC0000
trusted library allocation
page read and write
7460000
unkown
page read and write
7FF5D748A000
unkown
page readonly
35B5000
unkown
page read and write
7FF5D752F000
unkown
page readonly
A3AA000
unkown
page read and write
1200000
unkown
page read and write
2851F395000
heap
page read and write
7FF5D7546000
unkown
page readonly
A33F000
unkown
page read and write
8A70000
unkown
page read and write
7FF5D7262000
unkown
page readonly
2B36000
heap
page read and write
AA99000
unkown
page read and write
9FAF000
stack
page read and write
7FF5D7257000
unkown
page readonly
7FF5D7438000
unkown
page readonly
5463000
unkown
page read and write
98DE000
unclassified section
page execute and read and write
7FF5D71A6000
unkown
page readonly
2851EEA0000
heap
page read and write
9A8C000
unkown
page read and write
C4C6000
unkown
page read and write
7FF5D751F000
unkown
page readonly
9EB0000
unkown
page readonly
7FF5D77E9000
unkown
page readonly
7FF5D77C2000
unkown
page readonly
2851EF10000
heap
page read and write
4986000
unkown
page read and write
2851000
heap
page read and write
3170000
unkown
page read and write
9A84000
unkown
page read and write
7FF5D723C000
unkown
page readonly
26C0000
trusted library allocation
page read and write
7FF5D75B8000
unkown
page readonly
3A7F000
stack
page read and write
362A000
unkown
page read and write
A3B6000
unkown
page read and write
2757000
heap
page read and write
7FF848D9E000
trusted library allocation
page read and write
1A4000
heap
page read and write
779E000
unkown
page read and write
A220000
unkown
page read and write
7FF5D717C000
unkown
page readonly
C549000
unkown
page read and write
7FF5D77B6000
unkown
page readonly
3280000
unkown
page read and write
7FF5D7280000
unkown
page readonly
7FF5D7267000
unkown
page readonly
C625000
unkown
page read and write
9A94000
unkown
page read and write
3DB1000
direct allocation
page execute and read and write
C61B000
unkown
page read and write
35DC000
unkown
page read and write
7C90000
unkown
page read and write
7FF5D77D2000
unkown
page readonly
35CD000
unkown
page read and write
3554000
unkown
page read and write
C5F0000
unkown
page read and write
9BA1000
unkown
page read and write
7FF5D7694000
unkown
page readonly
35CD000
unkown
page read and write
7DF4F2460000
unkown
page readonly
C9E9000
unkown
page read and write
7FF5D73F5000
unkown
page readonly
35C1000
unkown
page read and write
AE1D000
stack
page read and write
76F8000
unkown
page read and write
2851000
heap
page read and write
7FF848BE0000
trusted library allocation
page read and write
1021B000
unkown
page read and write
7FF5D7591000
unkown
page readonly
9AB2000
unkown
page read and write
10269000
unkown
page read and write
7FF848BEB000
trusted library allocation
page execute and read and write
2851000
heap
page read and write
35BD000
unkown
page read and write
C663000
unkown
page read and write
C61D000
unkown
page read and write
7FF5D7740000
unkown
page readonly
49FA000
unkown
page read and write
3781000
heap
page read and write
7FF5D77B6000
unkown
page readonly
7FF5D71C4000
unkown
page readonly
B85A000
stack
page read and write
512C000
unclassified section
page execute and read and write
7FF848C70000
trusted library allocation
page read and write
7FF5D76CD000
unkown
page readonly
D60000
system
page execute and read and write
7FF5D7284000
unkown
page readonly
4A16000
unkown
page read and write
A3AA000
unkown
page read and write
C7BE000
unkown
page read and write
2760000
heap
page read and write
327C000
stack
page read and write
85BE000
stack
page read and write
7FF5D77DD000
unkown
page readonly
2755000
heap
page read and write
35C3000
unkown
page read and write
7FF5D72E9000
unkown
page readonly
96FE000
stack
page read and write
7FF5D7075000
unkown
page readonly
2851000
heap
page read and write
4A12000
unkown
page read and write
7AC0000
unkown
page read and write
7FF5D77A8000
unkown
page readonly
7FF5D723C000
unkown
page readonly
7C31000
unkown
page read and write
9A6A000
unkown
page read and write
7FF848CA6000
trusted library allocation
page execute and read and write
A220000
unkown
page read and write
9A84000
unkown
page read and write
3550000
direct allocation
page read and write
7FF5D772C000
unkown
page readonly
2A09000
heap
page read and write
B03B000
stack
page read and write
B980000
unkown
page readonly
7FF5D7421000
unkown
page readonly
362A000
unkown
page read and write
9A80000
unkown
page read and write
10269000
unkown
page read and write
7FF5D766E000
unkown
page readonly
7FF5D72CE000
unkown
page readonly
3540000
heap
page read and write
7FF848DD0000
trusted library allocation
page read and write
7FF5D6BEF000
unkown
page readonly
A9A0000
unkown
page read and write
75E0000
unkown
page read and write
7FF5D72BD000
unkown
page readonly
275E000
heap
page read and write
7618000
unkown
page read and write
3594000
heap
page read and write
7FF5D72CE000
unkown
page readonly
7C90000
unkown
page read and write
5463000
unkown
page read and write
A12F000
stack
page read and write
C24E000
stack
page read and write
9AA0000
unkown
page read and write
368C000
heap
page read and write
A233000
unkown
page read and write
1270000
unkown
page read and write
4AB0000
unkown
page read and write
7FF5D71C4000
unkown
page readonly
5330000
unkown
page write copy
7FF5D74FA000
unkown
page readonly
2851EE00000
heap
page read and write
7FF5D776F000
unkown
page readonly
49D6000
unkown
page read and write
A313000
unkown
page read and write
7FF5D765F000
unkown
page readonly
3781000
heap
page read and write
C642000
unkown
page read and write
7FF5D72BF000
unkown
page readonly
7609000
unkown
page read and write
A3B9000
unkown
page read and write
35B3000
unkown
page read and write
7AE0000
unkown
page read and write
1025B000
unkown
page read and write
7FF5D7648000
unkown
page readonly
3630000
unkown
page readonly
7DD0000
heap
page read and write
7FF848BE4000
trusted library allocation
page read and write
7FF5D76E8000
unkown
page readonly
378C000
heap
page read and write
1D0000
heap
page read and write
84DE000
unclassified section
page execute and read and write
AA0E000
unkown
page read and write
A40E000
unkown
page read and write
C621000
unkown
page read and write
7AF1000
unkown
page read and write
C450000
unkown
page read and write
49A8000
unkown
page read and write
3531000
unkown
page read and write
9D9C000
unkown
page read and write
7FF5D71DA000
unkown
page readonly
7FF5D76F5000
unkown
page readonly
75FD000
unkown
page read and write
7FF5D76DA000
unkown
page readonly
AFBE000
stack
page read and write
7FF5D66E8000
unkown
page readonly
36AA000
heap
page read and write
9A96000
unkown
page read and write
7FF5D75EE000
unkown
page readonly
B4BD000
stack
page read and write
A33F000
unkown
page read and write
9A76000
unkown
page read and write
C617000
unkown
page read and write
AA01000
unkown
page read and write
7FF5D77DD000
unkown
page readonly
7FF5D74C3000
unkown
page readonly
7FF5D7795000
unkown
page readonly
C65E000
unkown
page read and write
35D5000
unkown
page read and write
7FF5D7442000
unkown
page readonly
A1AF000
stack
page read and write
7FF5D7700000
unkown
page readonly
2853130A000
trusted library allocation
page read and write
BB0C000
stack
page read and write
7FF5D7376000
unkown
page readonly
BFB8000
stack
page read and write
769A000
unkown
page read and write
2853942F000
heap
page read and write
7FF5D7398000
unkown
page readonly
7FF848D74000
trusted library allocation
page read and write
7FF5D7360000
unkown
page readonly
3610000
direct allocation
page execute and read and write
9AF9000
unkown
page read and write
7FF5D7230000
unkown
page readonly
7FF5D77E3000
unkown
page readonly
3DAD000
direct allocation
page execute and read and write
7FF5D76C8000
unkown
page readonly
3400000
unkown
page read and write
285209B1000
trusted library allocation
page read and write
B950000
unkown
page readonly
273C000
stack
page read and write
7FF5D75D6000
unkown
page readonly
35C3000
unkown
page read and write
7FF5D751F000
unkown
page readonly
2EC0000
unkown
page readonly
7CB0000
unkown
page readonly
7FF5D760B000
unkown
page readonly
506E000
system
page execute and read and write
C609000
unkown
page read and write
8880000
unkown
page readonly
C47F000
unkown
page read and write
7FF5D7795000
unkown
page readonly
7AB0000
unkown
page read and write
A2DD000
unkown
page read and write
7FF5D7065000
unkown
page readonly
C5F4000
unkown
page read and write
7FF5D7745000
unkown
page readonly
7FF5D71A6000
unkown
page readonly
1383000
heap
page read and write
7DF4F24A1000
unkown
page execute read
362A000
unkown
page read and write
7FF5D762F000
unkown
page readonly
1250000
unkown
page read and write
3543000
unkown
page read and write
9B2C000
unkown
page read and write
7DF4F2460000
unkown
page readonly
35B0000
unkown
page read and write
1A4000
heap
page read and write
7FF5D758D000
unkown
page readonly
7FF5CE33D000
unkown
page readonly
49FD000
unkown
page read and write
2851EE20000
heap
page read and write
9A96000
unkown
page read and write
AA05000
unkown
page read and write
1250000
unkown
page read and write
1248000
unkown
page read and write
C3969FE000
stack
page read and write
2851000
heap
page read and write
354E000
unkown
page read and write
AAAA000
unkown
page read and write
2955000
heap
page read and write
94F4000
unkown
page read and write
9A8C000
unkown
page read and write
7FF5D7837000
unkown
page readonly
3594000
heap
page read and write
7686000
unkown
page read and write
7FF5D776F000
unkown
page readonly
91F0000
unkown
page readonly
7631000
unkown
page read and write
9A9E000
unkown
page read and write
7FF5D7236000
unkown
page readonly
7FF5D776D000
unkown
page readonly
7FF5D77D2000
unkown
page readonly
7FF5D768B000
unkown
page readonly
7FF5D75B8000
unkown
page readonly
7FF5D7808000
unkown
page readonly
AAAA000
unkown
page read and write
1110000
unkown
page read and write
8CB8000
stack
page read and write
2EF2000
direct allocation
page execute and read and write
77DB000
unkown
page read and write
9A76000
unkown
page read and write
9ADB000
unkown
page read and write
7FF5D71F9000
unkown
page readonly
C9B9000
unkown
page read and write
140000
system
page execute and read and write
7FF5D774A000
unkown
page readonly
28539340000
heap
page execute and read and write
3540000
unkown
page read and write
1383000
heap
page read and write
8870000
unkown
page readonly
8A70000
unkown
page read and write
35C9000
unkown
page read and write
BF3D000
stack
page read and write
7FF848D79000
trusted library allocation
page read and write
7FF5D770A000
unkown
page readonly
10194000
unkown
page read and write
8EDE000
unclassified section
page execute and read and write
B8DB000
stack
page read and write
7FF5D7507000
unkown
page readonly
C396AFE000
stack
page read and write
AA0B000
unkown
page read and write
7FF5D783B000
unkown
page readonly
7FF5D7648000
unkown
page readonly
35BD000
unkown
page read and write
C5F0000
unkown
page read and write
33B0000
unkown
page readonly
A391000
unkown
page read and write
7FF848BC4000
trusted library allocation
page read and write
7FF5D7507000
unkown
page readonly
A391000
unkown
page read and write
77A2000
unkown
page read and write
7AE0000
unkown
page read and write
35B5000
unkown
page read and write
B220000
unkown
page read and write
2851EF0E000
heap
page read and write
8360000
unkown
page read and write
7FF5D7837000
unkown
page readonly
7FF5D76D5000
unkown
page readonly
7FF5D7309000
unkown
page readonly
35D1000
unkown
page read and write
7FF5D74F2000
unkown
page readonly
9AAA000
unkown
page read and write
7FF5D75C1000
unkown
page readonly
1390000
heap
page read and write
7FF5D7244000
unkown
page readonly
1A4000
heap
page read and write
7FF5D7407000
unkown
page readonly
706C000
unclassified section
page execute and read and write
7FF5D7797000
unkown
page readonly
760D000
unkown
page read and write
99C0000
unkown
page read and write
C396FFE000
stack
page read and write
4A71000
unkown
page read and write
35D3000
unkown
page read and write
7FF5D777A000
unkown
page readonly
A2A2000
unkown
page read and write
35D1000
unkown
page read and write
C669000
unkown
page read and write
101D3000
unkown
page read and write
9A9E000
unkown
page read and write
35B3000
unkown
page read and write
B0E0000
unkown
page readonly
3695000
heap
page read and write
7FF5D732D000
unkown
page readonly
C617000
unkown
page read and write
1340000
unkown
page read and write
1395000
heap
page read and write
7AA0000
unkown
page read and write
7FF5D72C8000
unkown
page readonly
7FF4E05C0000
trusted library allocation
page execute and read and write
3160000
unkown
page read and write
A02E000
stack
page read and write
2B32000
heap
page read and write
9AB4000
unkown
page read and write
C5FA000
unkown
page read and write
C73E000
unkown
page read and write
AA0E000
unkown
page read and write
2851000
heap
page read and write
7FF5D760E000
unkown
page readonly
BEA0000
unkown
page readonly
337B000
stack
page read and write
C5F8000
unkown
page read and write
285393F0000
heap
page read and write
7FF5D743F000
unkown
page readonly
2851000
heap
page read and write
35B3000
unkown
page read and write
9ADB000
unkown
page read and write
9D67000
unkown
page read and write
7FF5D77E0000
unkown
page readonly
7FF5D75B3000
unkown
page readonly
7B60000
unkown
page readonly
7FF5D77F0000
unkown
page readonly
7FF5D7077000
unkown
page readonly
A3AC000
unkown
page read and write
A39C000
unkown
page read and write
7FF848BED000
trusted library allocation
page execute and read and write
7FF5D73F5000
unkown
page readonly
C44F000
stack
page read and write
3160000
unkown
page read and write
C5F4000
unkown
page read and write
3594000
heap
page read and write
7FF5D720F000
unkown
page readonly
4AA0000
unkown
page read and write
2851000
heap
page read and write
102D2000
unkown
page read and write
7C80000
unkown
page read and write
7FF5D7272000
unkown
page readonly
2F7E000
stack
page read and write
7FF5D7643000
unkown
page readonly
49FD000
unkown
page read and write
3626000
unkown
page read and write
7FF5D783B000
unkown
page readonly
7FF5D7593000
unkown
page readonly
2851F090000
trusted library allocation
page read and write
9AAA000
unkown
page read and write
7FF5D7272000
unkown
page readonly
C512000
unkown
page read and write
400000
remote allocation
page execute and read and write
EF0000
heap
page read and write
7FF5D7722000
unkown
page readonly
7FF5D728E000
unkown
page readonly
3594000
heap
page read and write
86D0000
unkown
page readonly
35D5000
unkown
page read and write
C8BB000
unkown
page read and write
9D67000
unkown
page read and write
3353000
unkown
page read and write
7DF4F2471000
unkown
page execute read
7C31000
unkown
page read and write
F0C000
heap
page read and write
10294000
unkown
page read and write
3939000
heap
page read and write
C85F000
unkown
page read and write
9578000
stack
page read and write
EF0000
heap
page read and write
B559000
stack
page read and write
8C39000
stack
page read and write
285309B1000
trusted library allocation
page read and write
362D000
unkown
page read and write
35CF000
unkown
page read and write
35B0000
unkown
page read and write
B330000
unkown
page read and write
7FF5D7458000
unkown
page readonly
3520000
unkown
page readonly
1021B000
unkown
page read and write
7686000
unkown
page read and write
C862000
unkown
page read and write
2851EF65000
heap
page read and write
FF0000
unkown
page readonly
2851000
heap
page read and write
BDC0000
unkown
page read and write
9A72000
unkown
page read and write
7E60000
unkown
page read and write
C460000
unkown
page read and write
7FF5D7452000
unkown
page readonly
7FF5D7784000
unkown
page readonly
1A4000
heap
page read and write
9BA1000
unkown
page read and write
7FF5CE343000
unkown
page readonly
3535000
unkown
page read and write
3A66000
heap
page read and write
5479000
unkown
page read and write
C5F8000
unkown
page read and write
3C09000
direct allocation
page execute and read and write
362D000
unkown
page read and write
7FF5D7056000
unkown
page readonly
C9E6000
unkown
page read and write
C642000
unkown
page read and write
C615000
unkown
page read and write
7FF5D770A000
unkown
page readonly
7AB0000
unkown
page read and write
3590000
heap
page read and write
9A8C000
unkown
page read and write
9A92000
unkown
page read and write
9A90000
unkown
page read and write
2851000
heap
page read and write
7691000
unkown
page read and write
A3B6000
unkown
page read and write
2851F093000
trusted library allocation
page read and write
C3970FE000
stack
page read and write
77DB000
unkown
page read and write
1281000
unkown
page readonly
7FF5D74F2000
unkown
page readonly
E00000
unkown
page readonly
35FA000
unkown
page read and write
6C60000
unclassified section
page execute and read and write
7FF5D7604000
unkown
page readonly
3006000
unkown
page read and write
7FF5D72D0000
unkown
page readonly
C44F000
stack
page read and write
7FF5D75D6000
unkown
page readonly
7FF5D72BD000
unkown
page readonly
3594000
heap
page read and write
7FF5D7385000
unkown
page readonly
2851000
heap
page read and write
3542000
unkown
page read and write
A1AF000
stack
page read and write
A416000
unkown
page read and write
C9E9000
unkown
page read and write
3170000
unkown
page read and write
C669000
unkown
page read and write
7FF5D7230000
unkown
page readonly
7FF5D7593000
unkown
page readonly
1000000
heap
page read and write
C5FD000
unkown
page read and write
7FF5D745B000
unkown
page readonly
466E000
system
page execute and read and write
7FF5D6BDB000
unkown
page readonly
86E0000
unkown
page readonly
7FF5D7703000
unkown
page readonly
7FF5D770F000
unkown
page readonly
C61D000
unkown
page read and write
7FF5D7694000
unkown
page readonly
7DF4F2461000
unkown
page execute read
3550000
direct allocation
page read and write
7FF5D768B000
unkown
page readonly
33E0000
heap
page read and write
3120000
unkown
page read and write
C9E6000
unkown
page read and write
35C9000
unkown
page read and write
9ABD000
unkown
page read and write
7FF5D71AF000
unkown
page readonly
7DF4F2491000
unkown
page execute read
286E000
system
page execute and read and write
2BA7000
heap
page read and write
7FF5D7722000
unkown
page readonly
7FF5D7438000
unkown
page readonly
53E1000
unkown
page read and write
7FF5D77CD000
unkown
page readonly
7FF5D775C000
unkown
page readonly
35CD000
unkown
page read and write
2851F130000
heap
page execute and read and write
767C000
unkown
page read and write
7FF5D71EF000
unkown
page readonly
F1F0000
heap
page read and write
C0BA000
stack
page read and write
C5F0000
unkown
page read and write
7FF5D7523000
unkown
page readonly
7FF5D76D7000
unkown
page readonly
BE70000
unkown
page readonly
C916000
unkown
page read and write
49D6000
unkown
page read and write
7FF5D719C000
unkown
page readonly
8360000
unkown
page read and write
76F8000
unkown
page read and write
7FF5D7760000
unkown
page readonly
33B0000
unkown
page readonly
7ADE000
unclassified section
page execute and read and write
C496000
unkown
page read and write
7FF5D66E3000
unkown
page readonly
C899000
unkown
page read and write
843F000
stack
page read and write
1A4000
heap
page read and write
7FF848D70000
trusted library allocation
page read and write
9AAA000
unkown
page read and write
353E000
stack
page read and write
3534000
unkown
page read and write
7FF5D6AB6000
unkown
page readonly
7FF5D7421000
unkown
page readonly
A286000
unkown
page read and write
A313000
unkown
page read and write
7FF5D76E8000
unkown
page readonly
A23A000
unkown
page read and write
7FF5D7745000
unkown
page readonly
7FF5D6BEF000
unkown
page readonly
85BE000
stack
page read and write
7FF5D716B000
unkown
page readonly
7FF5D77CD000
unkown
page readonly
C958000
unkown
page read and write
4830000
unclassified section
page execute and read and write
297A000
heap
page read and write
7FF5D7056000
unkown
page readonly
C78A000
unkown
page read and write
A39C000
unkown
page read and write
7FF5D75D9000
unkown
page readonly
7FF5CE33D000
unkown
page readonly
12D0000
unkown
page readonly
8A46000
unkown
page read and write
7FF5D7639000
unkown
page readonly
35CF000
unkown
page read and write
B330000
unkown
page read and write
C609000
unkown
page read and write
3594000
heap
page read and write
7DF4F2470000
unkown
page readonly
7DD0000
heap
page read and write
7FF5D7797000
unkown
page readonly
C92C000
unkown
page read and write
7FF5D7669000
unkown
page readonly
AA0E000
unkown
page read and write
3A80000
direct allocation
page execute and read and write
9BB2000
unkown
page read and write
7FF5D77B9000
unkown
page readonly
C62D000
unkown
page read and write
35E4000
unkown
page read and write
9AB2000
unkown
page read and write
3781000
heap
page read and write
EB5000
stack
page read and write
26B0000
heap
page read and write
2EC0000
unkown
page readonly
10252000
unkown
page read and write
C605000
unkown
page read and write
4A44000
unkown
page read and write
C625000
unkown
page read and write
C5FD000
unkown
page read and write
86E0000
unkown
page readonly
A3B9000
unkown
page read and write
35B5000
unkown
page read and write
A3AC000
unkown
page read and write
C663000
unkown
page read and write
7FF5D723F000
unkown
page readonly
4A40000
unkown
page read and write
7FF5D7458000
unkown
page readonly
BE49000
stack
page read and write
C625000
unkown
page read and write
1ED62000
unkown
page read and write
2BAE000
stack
page read and write
A384000
unkown
page read and write
7FF5D74B8000
unkown
page readonly
7FF5D7427000
unkown
page readonly
7FF5D7442000
unkown
page readonly
368F000
heap
page read and write
760F000
unkown
page read and write
7FF5D72D7000
unkown
page readonly
A273000
unkown
page read and write
7FF5D71C8000
unkown
page readonly
A9A0000
unkown
page read and write
7FF5D77EB000
unkown
page readonly
7FF5D7482000
unkown
page readonly
7FF5D7077000
unkown
page readonly
7FF5D748A000
unkown
page readonly
7FF5D7244000
unkown
page readonly
4AC0000
unkown
page read and write
7FF5D732D000
unkown
page readonly
B0BD000
stack
page read and write
7FF5D76CD000
unkown
page readonly
7FF5D7546000
unkown
page readonly
35B5000
unkown
page read and write
767F000
unkown
page read and write
C496000
unkown
page read and write
9A6A000
unkown
page read and write
C62D000
unkown
page read and write
A408000
unkown
page read and write
A9FD000
unkown
page read and write
7FF848DA0000
trusted library allocation
page read and write
7FF848D60000
trusted library allocation
page read and write
10B000
stack
page read and write
4980000
unkown
page read and write
35F4000
unkown
page read and write
9BA1000
unkown
page read and write
7FF848C76000
trusted library allocation
page read and write
C8F0000
unkown
page read and write
C48B000
unkown
page read and write
BE90000
unkown
page read and write
7FF5D72D7000
unkown
page readonly
7FF5D7267000
unkown
page readonly
35CD000
unkown
page read and write
3594000
heap
page read and write
9A80000
unkown
page read and write
7FF5D7450000
unkown
page readonly
9A90000
unkown
page read and write
7DF4F2481000
unkown
page execute read
35E4000
unkown
page read and write
1160000
unkown
page read and write
7FF5D77FD000
unkown
page readonly
7FF5D76C8000
unkown
page readonly
9AA0000
unkown
page read and write
9B41000
unkown
page read and write
7654000
unkown
page read and write
7FF5D75AF000
unkown
page readonly
C483000
unkown
page read and write
768E000
unkown
page read and write
A3AC000
unkown
page read and write
9AAC000
unkown
page read and write
C396EFE000
stack
page read and write
7691000
unkown
page read and write
7FF5D720A000
unkown
page readonly
2851000
heap
page read and write
3630000
unkown
page readonly
2851000
heap
page read and write
7460000
unkown
page read and write
7FF5D747F000
unkown
page readonly
9AA8000
unkown
page read and write
9B0B000
unkown
page read and write
4A12000
unkown
page read and write
519F000
unclassified section
page execute and read and write
2851000
heap
page read and write
7FF5D6ABD000
unkown
page readonly
7FF5D7485000
unkown
page readonly
9B41000
unkown
page read and write
C806000
unkown
page read and write
8935000
unkown
page read and write
1A4000
heap
page read and write
1360000
unkown
page readonly
7B00000
unkown
page readonly
7FF848BDD000
trusted library allocation
page execute and read and write
7FF5D72DF000
unkown
page readonly
2851EECF000
heap
page read and write
2851000
heap
page read and write
7B80000
unkown
page readonly
7FF5D7404000
unkown
page readonly
7FF5D76D5000
unkown
page readonly
7FF848BC3000
trusted library allocation
page execute and read and write
84BB000
stack
page read and write
7FF5D71C8000
unkown
page readonly
3554000
unkown
page read and write
1731000
unkown
page readonly
7FF5D7407000
unkown
page readonly
A273000
unkown
page read and write
C8E8000
unkown
page read and write
BE49000
stack
page read and write
7FF5D7764000
unkown
page readonly
C73E000
unkown
page read and write
A9FD000
unkown
page read and write
7FF5D76AF000
unkown
page readonly
7FF5D7215000
unkown
page readonly
49A8000
unkown
page read and write
7FF5D7289000
unkown
page readonly
35CF000
unkown
page read and write
7FF5D765F000
unkown
page readonly
A416000
unkown
page read and write
86D0000
unkown
page readonly
1270000
unkown
page read and write
7FF5D744E000
unkown
page readonly
9E2D000
stack
page read and write
C47F000
unkown
page read and write
3680000
heap
page read and write
9A98000
unkown
page read and write
C621000
unkown
page read and write
4B00000
unkown
page read and write
7FF5D71BF000
unkown
page readonly
C396CFC000
stack
page read and write
9A72000
unkown
page read and write
7FF5D71E0000
unkown
page readonly
7FF5D75F9000
unkown
page readonly
7FF848DB0000
trusted library allocation
page execute and read and write
7FF5D72FB000
unkown
page readonly
7FF5D7764000
unkown
page readonly
7618000
unkown
page read and write
2851EF73000
heap
page read and write
7FF5D7485000
unkown
page readonly
9A98000
unkown
page read and write
7FF5D706E000
unkown
page readonly
1120000
unkown
page read and write
7FF5D7292000
unkown
page readonly
27FC000
system
page execute and read and write
35D3000
unkown
page read and write
3594000
heap
page read and write
7810000
unkown
page read and write
33C0000
unkown
page read and write
76F8000
unkown
page read and write
7DF4F2461000
unkown
page execute read
7FF5D72DF000
unkown
page readonly
7FF5D7523000
unkown
page readonly
A23A000
unkown
page read and write
C90E000
unkown
page read and write
368A000
heap
page read and write
7FF5D7589000
unkown
page readonly
E00000
unkown
page readonly
7FF5D7792000
unkown
page readonly
9FAF000
stack
page read and write
A2B5000
unkown
page read and write
1240000
unkown
page read and write
7FF5D75BF000
unkown
page readonly
9A8E000
unkown
page read and write
7FF5D7691000
unkown
page readonly
7FF5D6BDB000
unkown
page readonly
A416000
unkown
page read and write
7FF5D778A000
unkown
page readonly
7FF5D758D000
unkown
page readonly
3532000
unkown
page read and write
35FA000
unkown
page read and write
C5F8000
unkown
page read and write
2851F1B0000
heap
page read and write
C3CB000
stack
page read and write
BF3D000
stack
page read and write
2851000
heap
page read and write
7989000
stack
page read and write
C4BD000
unkown
page read and write
1350000
unkown
page readonly
C9A9000
unkown
page read and write
A408000
unkown
page read and write
3C7E000
direct allocation
page execute and read and write
C396523000
stack
page read and write
4A16000
unkown
page read and write
8CB8000
stack
page read and write
C512000
unkown
page read and write
7FF5D6ABD000
unkown
page readonly
C0BA000
stack
page read and write
7FF5D77C7000
unkown
page readonly
20CF000
system
page execute and read and write
7FF5D71EA000
unkown
page readonly
1200000
unkown
page read and write
3500000
stack
page read and write
35F0000
direct allocation
page read and write
7FF5D7534000
unkown
page readonly
7FF5D75A6000
unkown
page readonly
9B41000
unkown
page read and write
7FF5D74C3000
unkown
page readonly
3594000
heap
page read and write
2E7D000
direct allocation
page execute and read and write
28539350000
trusted library section
page read and write
7FF5D781A000
unkown
page readonly
7FF5D729E000
unkown
page readonly
35CF000
unkown
page read and write
A233000
unkown
page read and write
35C9000
unkown
page read and write
7DC0000
unkown
page readonly
C472000
unkown
page read and write
7FF5D6BE4000
unkown
page readonly
7FF5D72D3000
unkown
page readonly
A40E000
unkown
page read and write
9A9E000
unkown
page read and write
7FF848D80000
trusted library allocation
page read and write
7DF4F2470000
unkown
page readonly
C24E000
stack
page read and write
3AD7000
heap
page read and write
8A00000
unkown
page read and write
7FF5D775C000
unkown
page readonly
C3CB000
stack
page read and write
1140000
unkown
page read and write
9AAC000
unkown
page read and write
26C0000
trusted library allocation
page read and write
12B0000
unkown
page read and write
2E81000
direct allocation
page execute and read and write
7FF5D7284000
unkown
page readonly
C800000
unkown
page read and write
7FF5D7705000
unkown
page readonly
C7C6000
unkown
page read and write
4A71000
unkown
page read and write
3688000
heap
page read and write
102D2000
unkown
page read and write
7B60000
unkown
page readonly
2851000
heap
page read and write
35C1000
unkown
page read and write
A2D7000
unkown
page read and write
8A00000
unkown
page read and write
7FF5D71AF000
unkown
page readonly
1A4000
heap
page read and write
7FF5D75E9000
unkown
page readonly
7FF5D6BE4000
unkown
page readonly
7C70000
unkown
page readonly
7FF5D75CB000
unkown
page readonly
12B0000
unkown
page read and write
7B80000
unkown
page readonly
C81C000
unkown
page read and write
7FF5D7591000
unkown
page readonly
99C0000
unkown
page read and write
3550000
direct allocation
page read and write
7FF5D745B000
unkown
page readonly
F1F2000
heap
page read and write
1A4000
heap
page read and write
35A0000
direct allocation
page read and write
7435000
stack
page read and write
7FF5D75E9000
unkown
page readonly
7FF5D75BF000
unkown
page readonly
7FF5D7784000
unkown
page readonly
7E58000
stack
page read and write
7FF5D71DA000
unkown
page readonly
C450000
unkown
page read and write
A384000
unkown
page read and write
C8BE000
unkown
page read and write
7FF5D77C2000
unkown
page readonly
E10000
unkown
page readonly
AAAA000
unkown
page read and write
35DC000
unkown
page read and write
A12F000
stack
page read and write
7FF5D7705000
unkown
page readonly
9B0B000
unkown
page read and write
7435000
stack
page read and write
7FF5D7360000
unkown
page readonly
7FF848C80000
trusted library allocation
page execute and read and write
A264000
unkown
page read and write
1F03C000
unkown
page read and write
7FF5D7404000
unkown
page readonly
9AC3000
unkown
page read and write
1A4000
heap
page read and write
F13000
heap
page read and write
C61D000
unkown
page read and write
4986000
unkown
page read and write
7FF848DC5000
trusted library allocation
page read and write
C7BE000
unkown
page read and write
C8BB000
unkown
page read and write
1120000
unkown
page read and write
9D67000
unkown
page read and write
7FF5D7488000
unkown
page readonly
B0BD000
stack
page read and write
35C1000
unkown
page read and write
7FF5D7760000
unkown
page readonly
7FF5D71E6000
unkown
page readonly
7FF5D7703000
unkown
page readonly
1248000
unkown
page read and write
7FF848C7C000
trusted library allocation
page execute and read and write
3041000
unkown
page read and write
A384000
unkown
page read and write
779E000
unkown
page read and write
3554000
unkown
page read and write
9A96000
unkown
page read and write
7FF5D71F9000
unkown
page readonly
C958000
unkown
page read and write
7FF848C1C000
trusted library allocation
page execute and read and write
3550000
direct allocation
page read and write
BB10000
heap
page read and write
8890000
unkown
page readonly
9AB4000
unkown
page read and write
3780000
heap
page read and write
7FF5D77EB000
unkown
page readonly
7FF5D7396000
unkown
page readonly
BB0C000
stack
page read and write
7FF5D716B000
unkown
page readonly
7FF848CE0000
trusted library allocation
page execute and read and write
7FF5D7682000
unkown
page readonly
A28D000
unkown
page read and write
7FF5D7740000
unkown
page readonly
2851EE90000
trusted library allocation
page read and write
3530000
unkown
page read and write
1760000
system
page execute and read and write
A237000
unkown
page read and write
7FF5D747F000
unkown
page readonly
C483000
unkown
page read and write
C8E8000
unkown
page read and write
2853943E000
heap
page read and write
C460000
unkown
page read and write
2851EDF0000
heap
page read and write
7B00000
unkown
page readonly
285209F1000
trusted library allocation
page read and write
BB10000
heap
page read and write
33C0000
unkown
page read and write
F1FA000
heap
page read and write
7FF5D728E000
unkown
page readonly
38AF000
heap
page read and write
9AF9000
unkown
page read and write
B4BD000
stack
page read and write
98FD000
stack
page read and write
7FF5D7385000
unkown
page readonly
35F4000
unkown
page read and write
400000
remote allocation
page execute and read and write
7DF4F2480000
unkown
page readonly
7FF5D75AF000
unkown
page readonly
9A76000
unkown
page read and write
AA40000
unkown
page read and write
7FF5D7336000
unkown
page readonly
A3B6000
unkown
page read and write
3660000
direct allocation
page read and write
AA40000
unkown
page read and write
91F0000
unkown
page readonly
769A000
unkown
page read and write
101D3000
unkown
page read and write
7FF5D778A000
unkown
page readonly
7FF5D7073000
unkown
page readonly
9A90000
unkown
page read and write
13A0000
unkown
page readonly
2851000
heap
page read and write
2F7E000
stack
page read and write
7FF5D779E000
unkown
page readonly
C61B000
unkown
page read and write
C605000
unkown
page read and write
7FF5D77E0000
unkown
page readonly
7FF5D760B000
unkown
page readonly
C7CB000
unkown
page read and write
35D3000
unkown
page read and write
EB5000
stack
page read and write
C46F000
unkown
page read and write
7FF5D705D000
unkown
page readonly
3A62000
heap
page read and write
4AA0000
unkown
page read and write
34FE000
unkown
page read and write
3500000
stack
page read and write
7DF4F2481000
unkown
page execute read
4AC0000
unkown
page read and write
7FF5D729E000
unkown
page readonly
7611000
unkown
page read and write
96FE000
stack
page read and write
AE1D000
stack
page read and write
2851000
heap
page read and write
7FF5D7808000
unkown
page readonly
9AA8000
unkown
page read and write
105AC000
unkown
page read and write
77A2000
unkown
page read and write
8900000
unkown
page read and write
7FF5D749B000
unkown
page readonly
7FF5D743F000
unkown
page readonly
8870000
unkown
page readonly
7DF4F2480000
unkown
page readonly
There are 1471 hidden memdumps, click here to show them.