IOC Report
PEDIDO-144848.exe

loading gif

Files

File Path
Type
Category
Malicious
PEDIDO-144848.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
 malicious
C:\Program Files (x86)\Fljtenists.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nsk7B73.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\slavelivets\Projektrapporten.Win
data
dropped
C:\Users\user\slavelivets\Skrne.Dam
ASCII text, with very long lines (65536), with no line terminators
dropped
C:\Users\user\slavelivets\alsmekill.sta
data
dropped
C:\Users\user\slavelivets\boat.ast
data
dropped
C:\Users\user\slavelivets\rupis.txt
ASCII text, with no line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\PEDIDO-144848.exe
"C:\Users\user\Desktop\PEDIDO-144848.exe"
 malicious
C:\Users\user\Desktop\PEDIDO-144848.exe
"C:\Users\user\Desktop\PEDIDO-144848.exe"
 malicious
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
 malicious
C:\Windows\SysWOW64\SecEdit.exe
"C:\Windows\SysWOW64\SecEdit.exe"
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious

URLs

Name
IP
Malicious
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.
unknown
https://drive.usercontent.google.com/h
unknown
https://www.google.com
unknown
http://www.quovadis.bm0
unknown
https://drive.usercontent.google.com/
unknown
http://nsis.sf.net/NSIS_Error
unknown
https://apis.google.com
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown
https://ocsp.quovadisoffshore.com0
unknown
http://www.gopher.ftp://ftp.
unknown
https://drive.google.com/
unknown
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214
unknown
There are 2 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
drive.google.com
142.250.80.46
drive.usercontent.google.com
142.251.40.97

IPs

IP
Domain
Country
Malicious
142.250.80.46
drive.google.com
United States
142.251.40.97
drive.usercontent.google.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\fjerkrraad\Uninstall\pennie\kamphane
feeable
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
LastUpdate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
LastUpdate
There are 25 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
17B8000
remote allocation
page execute and read and write
 malicious
2D80000
trusted library allocation
page read and write
 malicious
2DD0000
trusted library allocation
page read and write
 malicious
36930000
unclassified section
page execute and read and write
 malicious
2ED8000
direct allocation
page execute and read and write
 malicious
13632000
unkown
page read and write
2477000
unkown
page read and write
7FF546893000
unkown
page readonly
580000
unkown
page readonly
5040000
unkown
page read and write
401000
unkown
page execute read
23F4000
unkown
page read and write
2490000
heap
page read and write
5042000
unkown
page read and write
7FF546764000
unkown
page readonly
7FF546072000
unkown
page readonly
7DC000
unkown
page readonly
10F6F000
unkown
page read and write
23D1000
unkown
page read and write
D97B000
unkown
page read and write
10CEB000
unkown
page read and write
C577000
unkown
page read and write
6AA000
unkown
page read and write
7FF546640000
unkown
page readonly
4750000
unkown
page execute and read and write
3187000
unkown
page read and write
7FF54673D000
unkown
page readonly
2A41000
heap
page read and write
7FF545E53000
unkown
page readonly
6B6A000
heap
page read and write
2A41000
heap
page read and write
3073000
unkown
page read and write
10EB7000
unkown
page read and write
EB80000
unkown
page readonly
2A41000
heap
page read and write
51CD000
unkown
page read and write
CBA8000
unkown
page read and write
7FF545D43000
unkown
page readonly
2452000
unkown
page read and write
7FF54605F000
unkown
page readonly
2A00000
unkown
page readonly
7FF546218000
unkown
page readonly
10EA5000
unkown
page read and write
606000
heap
page read and write
7FF545E40000
unkown
page readonly
400000
unkown
page readonly
11002000
unkown
page read and write
7FF5468A7000
unkown
page readonly
7FF546A0B000
unkown
page readonly
4640000
unkown
page read and write
7FF546327000
unkown
page readonly
7FF545FE1000
unkown
page readonly
23DF000
unkown
page read and write
51FE000
unkown
page read and write
7FF545F74000
unkown
page readonly
C61E000
unkown
page read and write
7FF546054000
unkown
page readonly
30EF000
unkown
page read and write
D769000
unkown
page read and write
10E96000
unkown
page read and write
551000
unkown
page readonly
7FF546963000
unkown
page readonly
C493000
unkown
page read and write
7FF5466F2000
unkown
page readonly
2180000
unkown
page read and write
E392000
unkown
page read and write
D961000
unkown
page read and write
7FF545FAA000
unkown
page readonly
7FF5461EF000
unkown
page readonly
D950000
unkown
page read and write
74D8000
direct allocation
page execute and read and write
3382000
unclassified section
page read and write
E70000
unkown
page read and write
7FF54609A000
unkown
page readonly
23CC000
unkown
page read and write
21B3000
heap
page read and write
D93C000
unkown
page read and write
9640000
unkown
page read and write
2414000
unkown
page read and write
7FF546991000
unkown
page readonly
10C53000
unkown
page read and write
7FF5467B3000
unkown
page readonly
2433000
unkown
page read and write
7FF5461E4000
unkown
page readonly
2B98000
stack
page read and write
10C1B000
unkown
page read and write
7FF5469DA000
unkown
page readonly
9A60000
unkown
page readonly
7FF5467F1000
unkown
page readonly
7FF546007000
unkown
page readonly
10ED0000
unkown
page read and write
7DF44A300000
unkown
page readonly
7FF5467CC000
unkown
page readonly
7FF546456000
unkown
page readonly
ED10000
unkown
page read and write
2BE6000
heap
page read and write
9A20000
unkown
page readonly
7FF5465DF000
unkown
page readonly
DAB0000
unkown
page read and write
2ED0000
trusted library allocation
page execute and read and write
10000
heap
page read and write
2A41000
heap
page read and write
7C5000
unkown
page readonly
96FE000
unkown
page read and write
6AD8000
direct allocation
page execute and read and write
2A9F000
stack
page read and write
10F72000
unkown
page read and write
7FF545FB4000
unkown
page readonly
6B88000
heap
page read and write
7FF54658C000
unkown
page readonly
9850000
unkown
page read and write
3653F000
stack
page read and write
2439000
unkown
page read and write
7FF545DB6000
unkown
page readonly
99A0000
unkown
page readonly
2C98000
heap
page read and write
2473000
unkown
page read and write
47E0000
unkown
page read and write
3699F000
heap
page read and write
C00000
unkown
page readonly
D6A6000
unkown
page read and write
7FF54673B000
unkown
page readonly
3D50000
unkown
page execute and read and write
6B3C000
heap
page read and write
C90000
unkown
page readonly
2B9F000
stack
page read and write
241D000
unkown
page read and write
9CA0000
unkown
page read and write
9260000
unkown
page read and write
7FF5467C9000
unkown
page readonly
10FDA000
unkown
page read and write
2BDD000
heap
page read and write
7FF546637000
unkown
page readonly
400000
unkown
page readonly
7FF5462C5000
unkown
page readonly
D70000
unkown
page read and write
7FF546871000
unkown
page readonly
7FF545FBF000
unkown
page readonly
36A24000
heap
page read and write
71000
heap
page read and write
6980000
heap
page read and write
2A41000
heap
page read and write
D585000
unkown
page read and write
3168000
unkown
page read and write
7DF44A321000
unkown
page execute read
23C6000
unkown
page read and write
6B6E000
heap
page read and write
D65A000
unkown
page read and write
11D3B000
stack
page read and write
2234000
unkown
page read and write
10CAA000
unkown
page read and write
9370000
unkown
page read and write
D90A000
unkown
page read and write
10EB2000
unkown
page read and write
2290000
heap
page read and write
AEE000
heap
page read and write
407000
unkown
page readonly
E7CA000
stack
page read and write
312D000
unkown
page read and write
10CA2000
unkown
page read and write
7FF54632A000
unkown
page readonly
3671F000
stack
page read and write
10C57000
unkown
page read and write
10C1F000
unkown
page read and write
2A41000
heap
page read and write
2FB6000
heap
page read and write
D94D000
unkown
page read and write
E800000
unkown
page readonly
47AA000
unkown
page read and write
3159000
direct allocation
page execute and read and write
E60000
heap
page read and write
7FF545FD4000
unkown
page readonly
7FF5469D3000
unkown
page readonly
7FF546627000
unkown
page readonly
7FF546824000
unkown
page readonly
7FF5461F4000
unkown
page readonly
7FF545FE4000
unkown
page readonly
7FF546210000
unkown
page readonly
D340000
unkown
page read and write
E1F8000
stack
page read and write
F0DE000
stack
page read and write
C493000
unkown
page read and write
36870000
direct allocation
page read and write
2290000
heap
page read and write
F0DE000
stack
page read and write
7FF546A51000
unkown
page readonly
7FF546001000
unkown
page readonly
7FF546556000
unkown
page readonly
7FF5467D6000
unkown
page readonly
EE00000
unkown
page read and write
99B0000
unkown
page readonly
B864000
unkown
page read and write
10CEF000
unkown
page read and write
6B88000
heap
page read and write
6B8E000
heap
page read and write
10EB7000
unkown
page read and write
7FF5468AA000
unkown
page readonly
10F36000
unkown
page read and write
7FF5464D0000
unkown
page readonly
3162000
unkown
page read and write
2E89000
heap
page read and write
D3EA000
unkown
page read and write
10F6A000
unkown
page read and write
6A70000
direct allocation
page read and write
7FF546848000
unkown
page readonly
9C17000
stack
page read and write
7FF546A2F000
unkown
page readonly
2A41000
heap
page read and write
C443000
unkown
page read and write
7FF546991000
unkown
page readonly
243F000
unkown
page read and write
248E000
unkown
page read and write
53C2000
unkown
page read and write
D374000
unkown
page read and write
10EE4000
unkown
page read and write
C553000
unkown
page read and write
E7F0000
unkown
page read and write
7C0000
unkown
page readonly
30B0000
unkown
page read and write
7FF545DC1000
unkown
page readonly
9380000
unkown
page read and write
510D000
unkown
page read and write
6AB0000
direct allocation
page read and write
7FF54609A000
unkown
page readonly
7FF546732000
unkown
page readonly
36B51000
heap
page read and write
53E7000
unkown
page read and write
D64B000
unkown
page read and write
7C0000
unkown
page read and write
C280000
unkown
page read and write
315C000
unkown
page read and write
D503000
unkown
page read and write
970000
direct allocation
page read and write
930000
direct allocation
page read and write
33B0000
unkown
page read and write
7FF54613F000
unkown
page readonly
828000
heap
page read and write
7FF546A0D000
unkown
page readonly
9850000
unkown
page read and write
7FF546260000
unkown
page readonly
C553000
unkown
page read and write
2A41000
heap
page read and write
D51000
unkown
page readonly
E800000
unkown
page readonly
135BB000
unkown
page read and write
30000
heap
page read and write
7FF54627F000
unkown
page readonly
6970000
heap
page read and write
470000
heap
page read and write
2410000
unkown
page read and write
7FF546857000
unkown
page readonly
5E8000
unkown
page execute read
10C14000
unkown
page read and write
407000
unkown
page readonly
7FF545FB4000
unkown
page readonly
7FF5469BE000
unkown
page readonly
79F000
unkown
page read and write
7FF5462C5000
unkown
page readonly
7FF5465E7000
unkown
page readonly
3644D000
stack
page read and write
7FF5468CB000
unkown
page readonly
D19D000
stack
page read and write
46CB000
unkown
page read and write
B864000
unkown
page read and write
D35F000
unkown
page read and write
318B000
unkown
page read and write
EDC0000
unkown
page readonly
2477000
unkown
page read and write
6CCE000
stack
page read and write
590000
unkown
page readonly
7FF546789000
unkown
page readonly
7FF546874000
unkown
page readonly
D928000
unkown
page read and write
7FF546171000
unkown
page readonly
7FF546A17000
unkown
page readonly
241A000
unkown
page read and write
E5A0000
unkown
page read and write
7FF546862000
unkown
page readonly
C45E000
unkown
page read and write
10D0F000
unkown
page read and write
7FF5464D9000
unkown
page readonly
7C3000
unkown
page readonly
3666000
unclassified section
page read and write
8D0000
unkown
page readonly
7FF545FEA000
unkown
page readonly
7FF545DAD000
unkown
page readonly
D4C2000
unkown
page read and write
467D000
unkown
page read and write
51AD000
unkown
page read and write
7FF545E34000
unkown
page readonly
5A5E000
unkown
page execute and read and write
2457000
unkown
page read and write
23CA000
unkown
page read and write
6BE0000
heap
page read and write
7FF546891000
unkown
page readonly
6BDF000
heap
page read and write
23ED000
unkown
page read and write
AF70000
unkown
page read and write
47CA000
unkown
page read and write
7FF545E59000
unkown
page readonly
D689000
unkown
page read and write
7FF5469D3000
unkown
page readonly
3361000
unkown
page read and write
C0ED000
stack
page read and write
2BDB000
heap
page read and write
E039000
stack
page read and write
7FF5469A9000
unkown
page readonly
2BB8000
remote allocation
page execute and read and write
51B000
stack
page read and write
D558000
unkown
page read and write
606000
heap
page read and write
7FF546198000
unkown
page readonly
2461000
unkown
page read and write
7FF546878000
unkown
page readonly
7FF5462F3000
unkown
page readonly
6B81000
heap
page read and write
13956000
unkown
page read and write
7FF546751000
unkown
page readonly
7DF44A2F0000
unkown
page readonly
23C3000
unkown
page read and write
7FF545FF0000
unkown
page readonly
2A9F000
stack
page read and write
7FF5465FF000
unkown
page readonly
7FF5467CC000
unkown
page readonly
649000
unkown
page execute read
D340000
unkown
page read and write
10C62000
unkown
page read and write
149000
stack
page read and write
2439000
unkown
page read and write
10CEB000
unkown
page read and write
2270000
unkown
page readonly
6BE9000
heap
page read and write
9713000
unkown
page read and write
10FA7000
unkown
page read and write
C577000
unkown
page read and write
317F000
unkown
page read and write
DAE8000
unkown
page read and write
7FF545D97000
unkown
page readonly
7FF546985000
unkown
page readonly
DA72000
unkown
page read and write
7DF44A2F1000
unkown
page execute read
9738000
unkown
page read and write
7FF5467DA000
unkown
page readonly
2C9E000
stack
page read and write
7FF5460A5000
unkown
page readonly
2A41000
heap
page read and write
6A3F000
stack
page read and write
C584000
unkown
page read and write
EB0000
heap
page read and write
5AE000
heap
page read and write
10CB4000
unkown
page read and write
D5CF000
unkown
page read and write
CBDA000
unkown
page read and write
30B0000
unkown
page read and write
2F80000
trusted library allocation
page read and write
64D1000
unkown
page execute and read and write
2BE1000
heap
page read and write
E60000
heap
page read and write
7FF545F06000
unkown
page readonly
97D3000
unkown
page read and write
AA0000
direct allocation
page read and write
23F1000
unkown
page read and write
7FF54690F000
unkown
page readonly
EC0000
unkown
page readonly
9870000
unkown
page readonly
17E000
stack
page read and write
7FF5467D6000
unkown
page readonly
472B000
unkown
page read and write
7FF546264000
unkown
page readonly
23D5000
unkown
page read and write
7FF5467DF000
unkown
page readonly
DA65000
unkown
page read and write
2EB0000
unkown
page readonly
10C53000
unkown
page read and write
7FF54632E000
unkown
page readonly
6B8E000
heap
page read and write
4810000
unkown
page read and write
7FF545FF0000
unkown
page readonly
2410000
unkown
page read and write
51AD000
unkown
page read and write
9E48000
stack
page read and write
E1F8000
stack
page read and write
2BD8000
heap
page read and write
7412000
system
page read and write
473E000
unkown
page read and write
1396E000
unkown
page read and write
F25F000
stack
page read and write
9715000
unkown
page read and write
22A0000
unkown
page read and write
6B73000
heap
page read and write
7FF54693A000
unkown
page readonly
5127000
unkown
page read and write
2433000
unkown
page read and write
7FF545F06000
unkown
page readonly
7FF5467D2000
unkown
page readonly
7FF54604B000
unkown
page readonly
5A5000
heap
page read and write
269F000
stack
page read and write
7FF5468D0000
unkown
page readonly
7FF545FE3000
unkown
page readonly
10F6F000
unkown
page read and write
D4C6000
unkown
page read and write
7FF546814000
unkown
page readonly
E352000
heap
page read and write
3687C000
heap
page read and write
7FF546811000
unkown
page readonly
23AE000
unkown
page read and write
D33A000
stack
page read and write
7FF545F59000
unkown
page readonly
7FF5467BD000
unkown
page readonly
13632000
unkown
page read and write
23EF000
unkown
page read and write
9749000
unkown
page read and write
7FF54695D000
unkown
page readonly
D62C000
unkown
page read and write
2488000
unkown
page read and write
7C5000
unkown
page readonly
6B57000
heap
page read and write
7FF546210000
unkown
page readonly
2A41000
heap
page read and write
9A30000
unkown
page readonly
2CF2000
heap
page read and write
23EA000
unkown
page read and write
7FF546127000
unkown
page readonly
6BDF000
heap
page read and write
7DF44A2F0000
unkown
page readonly
E396000
unkown
page read and write
7FF54664B000
unkown
page readonly
2BE6000
heap
page read and write
10FA7000
unkown
page read and write
23CC000
unkown
page read and write
2B19000
stack
page read and write
C26E000
stack
page read and write
10F6A000
unkown
page read and write
D00000
unkown
page read and write
9C17000
stack
page read and write
299F000
stack
page read and write
A765000
unkown
page read and write
6AC0000
direct allocation
page read and write
5EC000
unkown
page execute read
6B18000
heap
page read and write
10005000
unkown
page readonly
56D8000
direct allocation
page execute and read and write
365C000
unclassified section
page read and write
A0DF000
stack
page read and write
7FF546989000
unkown
page readonly
6B88000
heap
page read and write
4CD8000
direct allocation
page execute and read and write
242E000
unkown
page read and write
51CD000
unkown
page read and write
7FF5466EE000
unkown
page readonly
7FF546569000
unkown
page readonly
10E5A000
unkown
page read and write
7FF5469C2000
unkown
page readonly
7FF545FAF000
unkown
page readonly
7FF546985000
unkown
page readonly
94D6000
unkown
page read and write
2A00000
unkown
page readonly
93B0000
unkown
page read and write
7FF545FEA000
unkown
page readonly
7FF5466F2000
unkown
page readonly
2250000
unkown
page read and write
2170000
unkown
page read and write
7FF546918000
unkown
page readonly
7FF546820000
unkown
page readonly
10E7E000
unkown
page read and write
2448000
unkown
page read and write
C61A000
unkown
page read and write
4750000
unkown
page read and write
D67F000
unkown
page read and write
4681000
unkown
page read and write
2A41000
heap
page read and write
4648000
unkown
page read and write
7FF546978000
unkown
page readonly
7FF5468E8000
unkown
page readonly
37920000
unclassified section
page execute and read and write
D8ED000
unkown
page read and write
7FF546290000
unkown
page readonly
2BF0000
heap
page read and write
E352000
heap
page read and write
6AA0000
direct allocation
page read and write
35B8000
remote allocation
page execute and read and write
D724000
unkown
page read and write
7FF5461E7000
unkown
page readonly
7FF54664B000
unkown
page readonly
7FF546824000
unkown
page readonly
7FF54662E000
unkown
page readonly
D8B8000
unkown
page read and write
2A41000
heap
page read and write
7FF546669000
unkown
page readonly
DB40000
unkown
page read and write
3D40000
unkown
page read and write
7FF5467B6000
unkown
page readonly
77A000
unkown
page read and write
D11D000
stack
page read and write
7FF5467AE000
unkown
page readonly
66B000
unkown
page read and write
49B8000
remote allocation
page execute and read and write
9C0000
heap
page read and write
7FF545E43000
unkown
page readonly
7FF5466D9000
unkown
page readonly
23EA000
unkown
page read and write
259D000
stack
page read and write
7FF546A2F000
unkown
page readonly
7FF5469C6000
unkown
page readonly
3350000
unkown
page read and write
B1E0000
unkown
page readonly
BB9D000
stack
page read and write
DA97000
unkown
page read and write
7FF54695D000
unkown
page readonly
245C000
unkown
page read and write
C50E000
unkown
page read and write
4669000
unkown
page read and write
21B3000
heap
page read and write
A7BA000
unkown
page read and write
EC0000
unkown
page readonly
53EF000
unkown
page read and write
7FF546891000
unkown
page readonly
7FF546264000
unkown
page readonly
10FF9000
unkown
page read and write
10F34000
unkown
page read and write
D5CC000
unkown
page read and write
A15B000
stack
page read and write
E35A000
heap
page read and write
10C29000
unkown
page read and write
7FF546A0B000
unkown
page readonly
7FF546637000
unkown
page readonly
7280000
unkown
page read and write | page write combine
D928000
unkown
page read and write
7A8000
unkown
page read and write
7FF546818000
unkown
page readonly
6C4E000
stack
page read and write
4685000
unkown
page read and write
7FF546218000
unkown
page readonly
7FF546648000
unkown
page readonly
7FF546893000
unkown
page readonly
135B6000
unkown
page read and write
A10000
unkown
page read and write
7FF5467D2000
unkown
page readonly
3D30000
unkown
page read and write
7FF545FD4000
unkown
page readonly
7FF54692E000
unkown
page readonly
7FF546963000
unkown
page readonly
7FF546643000
unkown
page readonly
CBCF000
unkown
page read and write
F1DF000
stack
page read and write
23F4000
unkown
page read and write
7FF5460BD000
unkown
page readonly
7FF546973000
unkown
page readonly
DA97000
unkown
page read and write
7FF5462E7000
unkown
page readonly
7FF546A33000
unkown
page readonly
7FF546978000
unkown
page readonly
368C0000
direct allocation
page read and write
96E4000
unkown
page read and write
2160000
unkown
page read and write
ECE9000
stack
page read and write
2A41000
heap
page read and write
10C1F000
unkown
page read and write
7FF546198000
unkown
page readonly
99A0000
unkown
page readonly
93A0000
unkown
page read and write
7DF44A301000
unkown
page execute read
7FF545FF6000
unkown
page readonly
6B6E000
heap
page read and write
EF5F000
stack
page read and write
23C6000
unkown
page read and write
5B0000
trusted library allocation
page read and write
7FF54673B000
unkown
page readonly
6BE0000
heap
page read and write
2490000
heap
page read and write
3020000
unkown
page readonly
E396000
unkown
page read and write
7FF54689F000
unkown
page readonly
3340000
unkown
page read and write
3648D000
stack
page read and write
660000
unkown
page readonly
D3A9000
unkown
page read and write
DAB2000
unkown
page read and write
7FF5466DC000
unkown
page readonly
7FF5469D6000
unkown
page readonly
C26E000
stack
page read and write
68D000
unkown
page read and write
53C2000
unkown
page read and write
13649000
unkown
page read and write
51B5000
unkown
page read and write
C443000
unkown
page read and write
C2A0000
unkown
page read and write
7FF5464E0000
unkown
page readonly
D357000
unkown
page read and write
DAAE000
unkown
page read and write
289F000
stack
page read and write
2B50000
trusted library allocation
page read and write
400000
unkown
page readonly
3340000
unkown
page read and write
2A41000
heap
page read and write
D35F000
unkown
page read and write
269F000
stack
page read and write
7FF546676000
unkown
page readonly
CBD2000
unkown
page read and write
7FF5469DA000
unkown
page readonly
6B57000
heap
page read and write
DA72000
unkown
page read and write
D724000
unkown
page read and write
36870000
direct allocation
page read and write
D669000
unkown
page read and write
10C0B000
unkown
page read and write
31AD000
unkown
page read and write
D884000
unkown
page read and write
7FF546836000
unkown
page readonly
38D8000
direct allocation
page execute and read and write
7FF5462E7000
unkown
page readonly
7FF5465C1000
unkown
page readonly
6B88000
heap
page read and write
366A0000
remote allocation
page read and write
7E1000
unkown
page readonly
EE00000
unkown
page read and write
D5D1000
unkown
page read and write
C00000
unkown
page readonly
2437000
unkown
page read and write
46CB000
unkown
page read and write
312D000
unkown
page read and write
7FF545FF6000
unkown
page readonly
5105000
unkown
page read and write
366A0000
remote allocation
page read and write
9414000
unkown
page read and write
7FF54613F000
unkown
page readonly
9A50000
unkown
page readonly
409000
unkown
page write copy
70000
heap
page read and write
9370000
unkown
page read and write
6BE0000
heap
page read and write
787000
unkown
page read and write
650000
heap
page read and write
21B0000
heap
page read and write
D953000
unkown
page read and write
2BDD000
heap
page read and write
7DC000
unkown
page readonly
94B5000
unkown
page read and write
135BB000
unkown
page read and write
D5D1000
unkown
page read and write
36BD0000
direct allocation
page execute and read and write
2426000
unkown
page read and write
2A41000
heap
page read and write
D7E9000
unkown
page read and write
6B81000
heap
page read and write
2A41000
heap
page read and write
7FF5464D9000
unkown
page readonly
2234000
unkown
page read and write
CBCB000
unkown
page read and write
7DF54C701000
unkown
page readonly
7FF5468FD000
unkown
page readonly
47D0000
unkown
page read and write
7FF546288000
unkown
page readonly
4760000
unkown
page read and write
9260000
unkown
page read and write
D70000
unkown
page read and write
9A60000
unkown
page readonly
E36D000
unkown
page read and write
7FF54624E000
unkown
page readonly
7FF5469AF000
unkown
page readonly
DE0000
unkown
page readonly
2BE6000
heap
page read and write
D651000
unkown
page read and write
7FF5467F1000
unkown
page readonly
D662000
unkown
page read and write
7FF545D4D000
unkown
page readonly
21B8000
heap
page read and write
10F36000
unkown
page read and write
5115000
unkown
page read and write
7E2000
unkown
page readonly
9AFF000
stack
page read and write
ECF0000
unkown
page read and write
36B4D000
heap
page read and write
53F8000
unkown
page read and write
681000
unkown
page read and write
CBB5000
unkown
page read and write
D658000
unkown
page read and write
3340000
unkown
page read and write
7E1000
unkown
page readonly
C50E000
unkown
page read and write
7FF545E43000
unkown
page readonly
93D3000
unkown
page read and write
7FF545FBF000
unkown
page readonly
D64B000
unkown
page read and write
3A36000
unkown
page read and write
EFDF000
stack
page read and write
E0ED000
stack
page read and write
54A0000
unkown
page read and write
D4C2000
unkown
page read and write
DE0000
unkown
page readonly
10D28000
unkown
page read and write
7FF546A0D000
unkown
page readonly
D769000
unkown
page read and write
7FF546836000
unkown
page readonly
7FF5461A5000
unkown
page readonly
7FF54602D000
unkown
page readonly
68EE000
stack
page read and write
C420000
unkown
page read and write
10EB2000
unkown
page read and write
36E9C000
direct allocation
page execute and read and write
7D3000
unkown
page readonly
23E5000
unkown
page read and write
7FF5465FF000
unkown
page readonly
5C0000
heap
page read and write
10EBD000
unkown
page read and write
A370000
heap
page read and write
4669000
unkown
page read and write
7FF5462FC000
unkown
page readonly
10C73000
unkown
page read and write
4E0000
unkown
page read and write
7FF5467C9000
unkown
page readonly
7FF5469AC000
unkown
page readonly
10D07000
unkown
page read and write
661000
unkown
page read and write
7FF5462A1000
unkown
page readonly
6A90000
direct allocation
page read and write
6AA000
unkown
page read and write
7D3000
unkown
page readonly
C58E000
unkown
page read and write
7FF5469D6000
unkown
page readonly
36EA0000
direct allocation
page execute and read and write
C618000
unkown
page read and write
2437000
unkown
page read and write
2470000
unkown
page read and write
29A0000
unkown
page readonly
620E000
stack
page read and write
9B000
stack
page read and write
CA0000
heap
page read and write
318E000
unkown
page read and write
7C3000
unkown
page readonly
7FF546926000
unkown
page readonly
EE40000
unkown
page read and write
3030000
direct allocation
page execute and read and write
7DF44A310000
unkown
page readonly
4719000
unkown
page read and write
7280000
unkown
page read and write | page write combine
510D000
unkown
page read and write
D641000
unkown
page read and write
7FF54671F000
unkown
page readonly
4716000
unkown
page read and write
7FF546388000
unkown
page readonly
2452000
unkown
page read and write
2FFD000
stack
page read and write
318B000
unkown
page read and write
7FF545D97000
unkown
page readonly
241A000
unkown
page read and write
7FF546127000
unkown
page readonly
6A80000
direct allocation
page read and write
2BDB000
heap
page read and write
2479000
unkown
page read and write
DAAC000
unkown
page read and write
93A0000
unkown
page read and write
531A000
unkown
page read and write
7FF546789000
unkown
page readonly
7FF546645000
unkown
page readonly
96FE000
unkown
page read and write
7FF545E64000
unkown
page readonly
7FF54632A000
unkown
page readonly
7FF546A04000
unkown
page readonly
10FDA000
unkown
page read and write
7FF545D47000
unkown
page readonly
2F31000
unkown
page read and write
EDE0000
unkown
page read and write
770E000
system
page read and write
D5CC000
unkown
page read and write
66B000
unkown
page read and write
1251000
unkown
page readonly
3350000
unkown
page read and write
EE50000
unkown
page read and write
C1EF000
stack
page read and write
D613000
unkown
page read and write
9840000
unkown
page read and write
2250000
unkown
page read and write
7FF545DAD000
unkown
page readonly
47E0000
unkown
page read and write
681000
unkown
page read and write
7FF546041000
unkown
page readonly
7FF54604B000
unkown
page readonly
7FF546620000
unkown
page readonly
2C1A000
stack
page read and write
692E000
stack
page read and write
C575000
unkown
page read and write
EB5000
heap
page read and write
E039000
stack
page read and write
7FF546871000
unkown
page readonly
7FF5461E4000
unkown
page readonly
7FF546041000
unkown
page readonly
E177000
stack
page read and write
7FF5469B8000
unkown
page readonly
4739000
unkown
page read and write
2BE1000
heap
page read and write
1394C000
unkown
page read and write
7FF54688C000
unkown
page readonly
7C3000
unkown
page readonly
4760000
unkown
page read and write
9A30000
unkown
page readonly
20000
unkown
page readonly
7FF546627000
unkown
page readonly
51B5000
unkown
page read and write
7FF545D4D000
unkown
page readonly
13649000
unkown
page read and write
971A000
unkown
page read and write
D3A9000
unkown
page read and write
13672000
unkown
page read and write
7FF5469C6000
unkown
page readonly
7FF54666F000
unkown
page readonly
23F1000
unkown
page read and write
10EA5000
unkown
page read and write
D51000
unkown
page readonly
6CE0000
heap
page read and write
6C8F000
stack
page read and write
1223E000
stack
page read and write
7FF5466D9000
unkown
page readonly
A765000
unkown
page read and write
47CA000
unkown
page read and write
7FF546862000
unkown
page readonly
4810000
unkown
page read and write
7FF5460BB000
unkown
page readonly
2CD7000
heap
page read and write
DA65000
unkown
page read and write
F25F000
stack
page read and write
23D1000
unkown
page read and write
289F000
stack
page read and write
36F20000
unclassified section
page execute and read and write
2F80000
trusted library allocation
page read and write
36CFD000
direct allocation
page execute and read and write
473C000
unkown
page read and write
7FF545FCA000
unkown
page readonly
740000
unkown
page readonly
7FF5468C6000
unkown
page readonly
5127000
unkown
page read and write
D7F3000
unkown
page read and write
23FA000
unkown
page read and write
2A41000
heap
page read and write
2BE2000
heap
page read and write
3229000
stack
page read and write
EE20000
heap
page read and write
10CAA000
unkown
page read and write
2461000
unkown
page read and write
94F2000
unkown
page read and write
10C3C000
unkown
page read and write
7FF545F0D000
unkown
page readonly
7FF546751000
unkown
page readonly
365FE000
stack
page read and write
2A41000
heap
page read and write
7FF5468AA000
unkown
page readonly
7FF5466DC000
unkown
page readonly
50E3000
unkown
page read and write
2B98000
stack
page read and write
550000
system
page execute and read and write
7FF5469AC000
unkown
page readonly
D585000
unkown
page read and write
2EB0000
unkown
page readonly
7FF54666F000
unkown
page readonly
10E8E000
unkown
page read and write
EDC0000
unkown
page readonly
E7E0000
unkown
page readonly
5541000
unkown
page read and write
7FF546783000
unkown
page readonly
D67F000
unkown
page read and write
D19D000
stack
page read and write
971A000
unkown
page read and write
2448000
unkown
page read and write
7BF000
unkown
page read and write
7FF528452000
unkown
page readonly
96E2000
unkown
page read and write
7FF5464D6000
unkown
page readonly
7FF546A51000
unkown
page readonly
7FF546814000
unkown
page readonly
2A41000
heap
page read and write
7FF54682E000
unkown
page readonly
407000
unkown
page readonly
526A000
unkown
page read and write
7FF5467DF000
unkown
page readonly
F2DE000
stack
page read and write
3187000
unkown
page read and write
4719000
unkown
page read and write
10F2C000
unkown
page read and write
473E000
unkown
page read and write
D689000
unkown
page read and write
3014000
stack
page read and write
C582000
unkown
page read and write
2FE0000
unkown
page read and write
2C9E000
stack
page read and write
467D000
unkown
page read and write
7FF546072000
unkown
page readonly
10E96000
unkown
page read and write
7FF5468E2000
unkown
page readonly
7FF54688C000
unkown
page readonly
242B000
unkown
page read and write
245C000
unkown
page read and write
D4C0000
unkown
page read and write
21C0000
unkown
page read and write
7DF44A311000
unkown
page execute read
7FF54677F000
unkown
page readonly
7FF5467AE000
unkown
page readonly
570000
heap
page read and write
9C5000
heap
page read and write
2170000
unkown
page read and write
13573000
unkown
page read and write
7FF54690B000
unkown
page readonly
7FF546346000
unkown
page readonly
7FF545D43000
unkown
page readonly
EB60000
unkown
page readonly
580000
unkown
page readonly
11D3B000
stack
page read and write
D4C4000
unkown
page read and write
D953000
unkown
page read and write
7FF545D47000
unkown
page readonly
E63000
heap
page read and write
AC0000
direct allocation
page read and write
10EE4000
unkown
page read and write
2C80000
heap
page read and write
D94D000
unkown
page read and write
23B6000
unkown
page read and write
23ED000
unkown
page read and write
7FF546132000
unkown
page readonly
D634000
unkown
page read and write
7FF5469A9000
unkown
page readonly
7FF546A3A000
unkown
page readonly
9B98000
stack
page read and write
3014000
stack
page read and write
10C3C000
unkown
page read and write
3073000
unkown
page read and write
38320000
unclassified section
page execute and read and write
2293000
heap
page read and write
7FF546051000
unkown
page readonly
950000
direct allocation
page read and write
69FE000
stack
page read and write
9DCE000
stack
page read and write
3020000
unkown
page readonly
ECE9000
stack
page read and write
2CDA000
heap
page read and write
3229000
stack
page read and write
7FF5468E2000
unkown
page readonly
7FF546382000
unkown
page readonly
F1DF000
stack
page read and write
7FF5467DA000
unkown
page readonly
7FF5464A8000
unkown
page readonly
7FF546313000
unkown
page readonly
CBE3000
unkown
page read and write
6BE0000
heap
page read and write
23CA000
unkown
page read and write
7FF54692B000
unkown
page readonly
A690000
unkown
page readonly
7FF54699B000
unkown
page readonly
D665000
unkown
page read and write
241D000
unkown
page read and write
2414000
unkown
page read and write
570000
heap
page read and write
5A5000
heap
page read and write
315C000
unkown
page read and write
990000
direct allocation
page read and write
2BEC000
heap
page read and write
EF5F000
stack
page read and write
7FF546028000
unkown
page readonly
242E000
unkown
page read and write
466C000
unkown
page read and write
740000
unkown
page readonly
7FF54699B000
unkown
page readonly
2DFA000
heap
page read and write
D3A1000
unkown
page read and write
10CB4000
unkown
page read and write
7FF54690B000
unkown
page readonly
CBB5000
unkown
page read and write
7FF5469EC000
unkown
page readonly
7C0000
unkown
page readonly
7FF5461E7000
unkown
page readonly
C46C000
unkown
page read and write
D2B0000
unkown
page readonly
7FF54686A000
unkown
page readonly
E040000
unkown
page readonly
7FF545F7D000
unkown
page readonly
E28A000
stack
page read and write
7FF545E50000
unkown
page readonly
D3EA000
unkown
page read and write
7FF5462CB000
unkown
page readonly
366A0000
remote allocation
page read and write
10ECC000
unkown
page read and write
4698000
unkown
page read and write
7FF54692B000
unkown
page readonly
2F31000
unkown
page read and write
36CF9000
direct allocation
page execute and read and write
368C0000
direct allocation
page read and write
10FF9000
unkown
page read and write
2BE7000
heap
page read and write
7FF5464E0000
unkown
page readonly
3A30000
unkown
page read and write
96E2000
unkown
page read and write
7FF546570000
unkown
page readonly
7DF54C701000
unkown
page readonly
7FF546288000
unkown
page readonly
23BA000
unkown
page read and write
7704000
system
page read and write
7FF546620000
unkown
page readonly
7FF5462A1000
unkown
page readonly
660000
unkown
page readonly
53B8000
remote allocation
page execute and read and write
7FF545FBB000
unkown
page readonly
4648000
unkown
page read and write
10C0B000
unkown
page read and write
76F6000
system
page read and write
7FF546615000
unkown
page readonly
E350000
heap
page read and write
ECF0000
unkown
page read and write
7FF5469A1000
unkown
page readonly
13534000
unkown
page read and write
368C0000
direct allocation
page read and write
94F2000
unkown
page read and write
7FF54618E000
unkown
page readonly
7DF44A310000
unkown
page readonly
7FF5468C6000
unkown
page readonly
30E0000
unkown
page readonly
7FF5461EF000
unkown
page readonly
7FF546284000
unkown
page readonly
7C5000
unkown
page readonly
4E0000
unkown
page read and write
D4C4000
unkown
page read and write
29A0000
unkown
page readonly
7FF546969000
unkown
page readonly
2BE6000
heap
page read and write
7FF54624E000
unkown
page readonly
7FF546A00000
unkown
page readonly
AF49000
stack
page read and write
7FF546932000
unkown
page readonly
10FC4000
unkown
page read and write
10FF6000
unkown
page read and write
3A33000
unkown
page read and write
D357000
unkown
page read and write
76EC000
system
page read and write
31D0000
unkown
page read and write
EB0000
heap
page read and write
EEDF000
stack
page read and write
C618000
unkown
page read and write
C61A000
unkown
page read and write
3168000
unkown
page read and write
2A41000
heap
page read and write
30000
heap
page read and write
60D8000
direct allocation
page execute and read and write
9CA0000
unkown
page read and write
7DF44A321000
unkown
page execute read
2A41000
heap
page read and write
21C0000
unkown
page read and write
10D28000
unkown
page read and write
C03D000
stack
page read and write
6BDF000
heap
page read and write
9414000
unkown
page read and write
7FF546640000
unkown
page readonly
409000
unkown
page read and write
7FF546570000
unkown
page readonly
7FF54690F000
unkown
page readonly
7FF5467F3000
unkown
page readonly
472B000
unkown
page read and write
97D3000
unkown
page read and write
7FF545FBB000
unkown
page readonly
180000
unkown
page read and write
7FF5460BB000
unkown
page readonly
7FF5464D0000
unkown
page readonly
A9C8000
stack
page read and write
279F000
stack
page read and write
A0DF000
stack
page read and write
46D3000
unkown
page read and write
23C3000
unkown
page read and write
318E000
unkown
page read and write
7FF545D74000
unkown
page readonly
10FC4000
unkown
page read and write
7FF546A04000
unkown
page readonly
4698000
unkown
page read and write
624000
heap
page read and write
7FF54697C000
unkown
page readonly
1396E000
unkown
page read and write
53EF000
unkown
page read and write
7FF54627F000
unkown
page readonly
D7B5000
unkown
page read and write
7FF546564000
unkown
page readonly
6AF0000
direct allocation
page read and write
E7E0000
unkown
page readonly
1F0000
unkown
page readonly
23D5000
unkown
page read and write
2479000
unkown
page read and write
D9C4000
unkown
page read and write
531A000
unkown
page read and write
13672000
unkown
page read and write
AF70000
unkown
page read and write
4739000
unkown
page read and write
63F000
unkown
page read and write
EE50000
unkown
page read and write
CBA8000
unkown
page read and write
2FE0000
unkown
page read and write
23DB000
unkown
page read and write
D8FA000
unkown
page read and write
AE60000
unkown
page read and write
7FF545F85000
unkown
page readonly
F15F000
stack
page read and write
10C62000
unkown
page read and write
13534000
unkown
page read and write
2660000
heap
page read and write
33B0000
unkown
page read and write
EDF0000
unkown
page readonly
7FF546932000
unkown
page readonly
94D6000
unkown
page read and write
7FF545D90000
unkown
page readonly
D684000
unkown
page read and write
13964000
unkown
page read and write
21B0000
heap
page read and write
7FF54691F000
unkown
page readonly
6AD0000
direct allocation
page read and write
7FF546878000
unkown
page readonly
7DF44A300000
unkown
page readonly
10F34000
unkown
page read and write
A370000
heap
page read and write
7FF5469F9000
unkown
page readonly
620000
heap
page read and write
C56C000
unkown
page read and write
10D0F000
unkown
page read and write
E040000
unkown
page readonly
4681000
unkown
page read and write
526A000
unkown
page read and write
7FF546669000
unkown
page readonly
2473000
unkown
page read and write
7FF545FCA000
unkown
page readonly
409000
unkown
page write copy
2B40000
heap
page read and write
4685000
unkown
page read and write
C575000
unkown
page read and write
D95B000
unkown
page read and write
10BF0000
unkown
page read and write
7FF546A59000
unkown
page readonly
3663E000
stack
page read and write
7FF5469F9000
unkown
page readonly
6BDF000
heap
page read and write
7FF546576000
unkown
page readonly
D2A0000
unkown
page readonly
661000
unkown
page read and write
6BDF000
heap
page read and write
7FF5469A1000
unkown
page readonly
2A41000
heap
page read and write
5493000
unkown
page read and write
E7F0000
unkown
page read and write
AD0000
direct allocation
page read and write
47F0000
unkown
page read and write
10C4D000
unkown
page read and write
D667000
unkown
page read and write
D658000
unkown
page read and write
7FF5468D0000
unkown
page readonly
7FF546138000
unkown
page readonly
7FF54697C000
unkown
page readonly
C58E000
unkown
page read and write
42D8000
direct allocation
page execute and read and write
2EC0000
unkown
page write copy
2293000
heap
page read and write
2BEC000
heap
page read and write
7FF5469BE000
unkown
page readonly
F05E000
stack
page read and write
D6A6000
unkown
page read and write
7FF54619E000
unkown
page readonly
36550000
heap
page read and write
29F0000
unkown
page readonly
170000
direct allocation
page read and write
7FF54687F000
unkown
page readonly
B1E0000
unkown
page readonly
50E3000
unkown
page read and write
C456000
unkown
page read and write
D66B000
unkown
page read and write
7FF546260000
unkown
page readonly
7FF546315000
unkown
page readonly
23E5000
unkown
page read and write
F15F000
stack
page read and write
7FF54662E000
unkown
page readonly
6B88000
heap
page read and write
23FA000
unkown
page read and write
2A41000
heap
page read and write
6B73000
heap
page read and write
6B3C000
heap
page read and write
850000
heap
page read and write
5C8000
heap
page read and write
3193000
unkown
page read and write
D669000
unkown
page read and write
7FF546989000
unkown
page readonly
3240000
unkown
page readonly
E360000
unkown
page read and write
9E48000
stack
page read and write
D65A000
unkown
page read and write
7FF545D4B000
unkown
page readonly
5105000
unkown
page read and write
7DF44A301000
unkown
page execute read
920000
direct allocation
page read and write
401000
unkown
page execute read
4740000
unkown
page read and write
13964000
unkown
page read and write
10D07000
unkown
page read and write
10C43000
unkown
page read and write
D64F000
unkown
page read and write
D69E000
unkown
page read and write
E0ED000
stack
page read and write
2443000
unkown
page read and write
7FF54665C000
unkown
page readonly
2BE7000
heap
page read and write
2B19000
stack
page read and write
2470000
unkown
page read and write
DAB0000
unkown
page read and write
10C57000
unkown
page read and write
7FF54686A000
unkown
page readonly
4712000
unkown
page read and write
D3A1000
unkown
page read and write
D684000
unkown
page read and write
31D0000
unkown
page read and write
6975000
heap
page read and write
10C43000
unkown
page read and write
7FF54678C000
unkown
page readonly
10C4D000
unkown
page read and write
68D000
unkown
page read and write
9840000
unkown
page read and write
7FF546315000
unkown
page readonly
7FF546346000
unkown
page readonly
7FF546569000
unkown
page readonly
10003000
unkown
page readonly
D958000
unkown
page read and write
C482000
unkown
page read and write
7FF545F74000
unkown
page readonly
1394C000
unkown
page read and write
6B3C000
heap
page read and write
E70000
unkown
page read and write
7FF54678C000
unkown
page readonly
D731000
unkown
page read and write
7FF546576000
unkown
page readonly
7FF546645000
unkown
page readonly
5C8000
heap
page read and write
650000
heap
page read and write
EEDF000
stack
page read and write
7FF5466EE000
unkown
page readonly
2FB2000
heap
page read and write
7FF546054000
unkown
page readonly
2A41000
heap
page read and write
466C000
unkown
page read and write
DAAC000
unkown
page read and write
7FF5469EC000
unkown
page readonly
C584000
unkown
page read and write
7FF546721000
unkown
page readonly
CBA0000
unkown
page read and write
C45A000
unkown
page read and write
2457000
unkown
page read and write
D60F000
unkown
page read and write
9380000
unkown
page read and write
46D3000
unkown
page read and write
240A000
unkown
page read and write
7FF545F85000
unkown
page readonly
6B3D000
heap
page read and write
D641000
unkown
page read and write
D7E9000
unkown
page read and write
7FF546874000
unkown
page readonly
7FF546844000
unkown
page readonly
53F8000
unkown
page read and write
3162000
unkown
page read and write
7FF5467BD000
unkown
page readonly
10ECC000
unkown
page read and write
F2DE000
stack
page read and write
7FF546848000
unkown
page readonly
D667000
unkown
page read and write
243F000
unkown
page read and write
7FF546958000
unkown
page readonly
2270000
unkown
page readonly
970F000
unkown
page read and write
9749000
unkown
page read and write
7FF545FC2000
unkown
page readonly
10CA2000
unkown
page read and write
7FF545E34000
unkown
page readonly
980000
direct allocation
page read and write
7FF545F0D000
unkown
page readonly
2CE3000
heap
page read and write
10F2C000
unkown
page read and write
DCBD000
stack
page read and write
7FF545D4B000
unkown
page readonly
D95B000
unkown
page read and write
9DCE000
stack
page read and write
3640F000
stack
page read and write
7D3000
unkown
page readonly
7FF545E45000
unkown
page readonly
D5CF000
unkown
page read and write
7FF54618E000
unkown
page readonly
7FF545DC1000
unkown
page readonly
7FF546204000
unkown
page readonly
C90000
unkown
page readonly
7FF546171000
unkown
page readonly
E7CA000
stack
page read and write
5541000
unkown
page read and write
C45A000
unkown
page read and write
6B73000
heap
page read and write
7FF54692E000
unkown
page readonly
E36D000
unkown
page read and write
2422000
unkown
page read and write
29F0000
unkown
page readonly
D884000
unkown
page read and write
7FF528452000
unkown
page readonly
D7B5000
unkown
page read and write
2E20000
trusted library allocation
page read and write
7FF546758000
unkown
page readonly
2F80000
trusted library allocation
page read and write
7FF546999000
unkown
page readonly
553C000
unkown
page read and write
3300000
direct allocation
page execute and read and write
7FF546204000
unkown
page readonly
D558000
unkown
page read and write
246C000
unkown
page read and write
23CE000
unkown
page read and write
7FF545E59000
unkown
page readonly
2A41000
heap
page read and write
560000
unkown
page read and write
6B88000
heap
page read and write
D21D000
stack
page read and write
9360000
unkown
page read and write
E392000
unkown
page read and write
626000
unkown
page execute read
2700000
heap
page read and write
AEE000
heap
page read and write
7FF545FAA000
unkown
page readonly
6B73000
heap
page read and write
D950000
unkown
page read and write
7FF546A3A000
unkown
page readonly
2A41000
heap
page read and write
EFDF000
stack
page read and write
5AD1000
unkown
page execute and read and write
D11D000
stack
page read and write
3A30000
unkown
page read and write
2422000
unkown
page read and write
299F000
stack
page read and write
23DB000
unkown
page read and write
180000
unkown
page read and write
7FF546A17000
unkown
page readonly
23B6000
unkown
page read and write
7FF546922000
unkown
page readonly
7FF5462CB000
unkown
page readonly
3193000
unkown
page read and write
9EC0000
unkown
page readonly
9360000
unkown
page read and write
6B6A000
heap
page read and write
7FF545E40000
unkown
page readonly
7FF545FE1000
unkown
page readonly
3686C000
stack
page read and write
2C1A000
stack
page read and write
7FF546918000
unkown
page readonly
C45E000
unkown
page read and write
7FF5469C2000
unkown
page readonly
BB9D000
stack
page read and write
77F000
unkown
page read and write
DAB2000
unkown
page read and write
7FF545E4B000
unkown
page readonly
C582000
unkown
page read and write
D672000
unkown
page read and write
21B8000
heap
page read and write
6BE0000
heap
page read and write
7FF54687F000
unkown
page readonly
367E000
unclassified section
page read and write
6B10000
heap
page read and write
10FAC000
unkown
page read and write
31AD000
unkown
page read and write
DB40000
unkown
page read and write
7FF52844D000
unkown
page readonly
7FF546764000
unkown
page readonly
7FF545E64000
unkown
page readonly
7FF52844D000
unkown
page readonly
96E4000
unkown
page read and write
3A36000
unkown
page read and write
7FF546944000
unkown
page readonly
7FF546132000
unkown
page readonly
2A41000
heap
page read and write
D90A000
unkown
page read and write
7FF5464A8000
unkown
page readonly
319B000
unkown
page read and write
7FF5464D6000
unkown
page readonly
EB80000
unkown
page readonly
319B000
unkown
page read and write
F05E000
stack
page read and write
E5A0000
unkown
page read and write
DA67000
unkown
page read and write
1251000
unkown
page readonly
3FB8000
remote allocation
page execute and read and write
7FF546633000
unkown
page readonly
3340000
unkown
page read and write
10C29000
unkown
page read and write
7FF5464AA000
unkown
page readonly
CBA0000
unkown
page read and write
A15B000
stack
page read and write
D651000
unkown
page read and write
DA67000
unkown
page read and write
551000
unkown
page readonly
2A41000
heap
page read and write
13573000
unkown
page read and write
9715000
unkown
page read and write
D838000
unkown
page read and write
7FF545FDC000
unkown
page readonly
2730000
heap
page read and write
D662000
unkown
page read and write
10000000
unkown
page readonly
D672000
unkown
page read and write
9C9E000
stack
page read and write
AF49000
stack
page read and write
7FF546051000
unkown
page readonly
7DF44A2F1000
unkown
page execute read
10FAC000
unkown
page read and write
CBD2000
unkown
page read and write
5A0000
heap
page read and write
A7BA000
unkown
page read and write
7FF546290000
unkown
page readonly
135F4000
unkown
page read and write
32FC000
direct allocation
page execute and read and write
2D80000
direct allocation
page execute and read and write
7FF5469C8000
unkown
page readonly
EB60000
unkown
page readonly
A690000
unkown
page readonly
6B81000
heap
page read and write
315D000
direct allocation
page execute and read and write
5150000
unkown
page execute and read and write
2A41000
heap
page read and write
D2A0000
unkown
page readonly
7FF5469AF000
unkown
page readonly
C0ED000
stack
page read and write
D97B000
unkown
page read and write
D634000
unkown
page read and write
47BA000
unkown
page read and write
10E5A000
unkown
page read and write
7FF54605F000
unkown
page readonly
68AE000
stack
page read and write
7FF5468A7000
unkown
page readonly
AE60000
unkown
page read and write
7FF546028000
unkown
page readonly
7FF5461F4000
unkown
page readonly
7FF546615000
unkown
page readonly
2CFB000
heap
page read and write
9A20000
unkown
page readonly
A10000
unkown
page read and write
6ED1000
unkown
page execute and read and write
D838000
unkown
page read and write
7FF54602D000
unkown
page readonly
11002000
unkown
page read and write
2488000
unkown
page read and write
5C0000
heap
page read and write
7FF545D74000
unkown
page readonly
7E2000
unkown
page readonly
6B57000
heap
page read and write
7FF545FAF000
unkown
page readonly
7FF546648000
unkown
page readonly
5042000
unkown
page read and write
7D0000
system
page execute and read and write
7FF546313000
unkown
page readonly
7FF5467AA000
unkown
page readonly
317F000
unkown
page read and write
2A41000
heap
page read and write
135B6000
unkown
page read and write
2B50000
heap
page read and write
7FF546138000
unkown
page readonly
7FF546818000
unkown
page readonly
7FF5467AA000
unkown
page readonly
47BA000
unkown
page read and write
13956000
unkown
page read and write
DCBD000
stack
page read and write
9640000
unkown
page read and write
51FE000
unkown
page read and write
D8ED000
unkown
page read and write
7FF546969000
unkown
page readonly
9830000
unkown
page read and write
624000
heap
page read and write
CBCB000
unkown
page read and write
10E7E000
unkown
page read and write
259D000
stack
page read and write
7FF5468E8000
unkown
page readonly
9AFF000
stack
page read and write
C61E000
unkown
page read and write
D93C000
unkown
page read and write
7FF545DB6000
unkown
page readonly
7FF545E45000
unkown
page readonly
21B8000
remote allocation
page execute and read and write
7FF54665C000
unkown
page readonly
7FF546676000
unkown
page readonly
10C73000
unkown
page read and write
7FF546643000
unkown
page readonly
2BE6000
heap
page read and write
7FF54693A000
unkown
page readonly
7FF545F59000
unkown
page readonly
4750000
unkown
page read and write
2EC0000
unkown
page write copy
4740000
unkown
page read and write
9B98000
stack
page read and write
7FF546922000
unkown
page readonly
23CE000
unkown
page read and write
D8B8000
unkown
page read and write
C03D000
stack
page read and write
9713000
unkown
page read and write
E35A000
heap
page read and write
6BDF000
heap
page read and write
9738000
unkown
page read and write
364FE000
stack
page read and write
7FF5460D3000
unkown
page readonly
7FF5467BA000
unkown
page readonly
7FF54671F000
unkown
page readonly
E0F0000
unkown
page readonly
820000
heap
page read and write
4DC000
stack
page read and write
246C000
unkown
page read and write
4712000
unkown
page read and write
7FF5468EF000
unkown
page readonly
D21D000
stack
page read and write
7FF546343000
unkown
page readonly
47AA000
unkown
page read and write
7FF546857000
unkown
page readonly
D33A000
stack
page read and write
5F2000
unkown
page execute read
10FF6000
unkown
page read and write
7FF5464F4000
unkown
page readonly
960000
direct allocation
page read and write
C46C000
unkown
page read and write
7FF54632E000
unkown
page readonly
5EA000
unkown
page execute read
5115000
unkown
page read and write
7FF54628A000
unkown
page readonly
20000
unkown
page readonly
6B8F000
heap
page read and write
53E7000
unkown
page read and write
6B6E000
heap
page read and write
7FF5464AA000
unkown
page readonly
7FF546633000
unkown
page readonly
D00000
unkown
page read and write
5F0000
unkown
page execute read
3D40000
unkown
page read and write
3676C000
stack
page read and write
7DC000
unkown
page readonly
6B8B000
heap
page read and write
3361000
unkown
page read and write
D66B000
unkown
page read and write
C280000
unkown
page read and write
D665000
unkown
page read and write
9C0000
unkown
page readonly
23AE000
unkown
page read and write
3674000
unclassified section
page read and write
7DF44A311000
unkown
page execute read
D503000
unkown
page read and write
23EF000
unkown
page read and write
7FF545D90000
unkown
page readonly
7FF5460D3000
unkown
page readonly
3240000
unkown
page readonly
624000
heap
page read and write
2A41000
heap
page read and write
7FF54682E000
unkown
page readonly
7FF546A59000
unkown
page readonly
10001000
unkown
page execute read
705000
stack
page read and write
EDF0000
unkown
page readonly
2BD0000
heap
page read and write
4790000
unkown
page read and write
AB0000
direct allocation
page read and write
7FF546388000
unkown
page readonly
2B9F000
stack
page read and write
13A000
stack
page read and write
7FF5467B3000
unkown
page readonly
23DF000
unkown
page read and write
940000
direct allocation
page read and write
7FF545FDC000
unkown
page readonly
2A41000
heap
page read and write
46FC000
unkown
page read and write
7FF5468CB000
unkown
page readonly
590000
unkown
page readonly
7FF545E53000
unkown
page readonly
7FF5465C1000
unkown
page readonly
7FF545E4B000
unkown
page readonly
10ED0000
unkown
page read and write
4790000
unkown
page read and write
7FF5465D8000
unkown
page readonly
4716000
unkown
page read and write
CE0000
unkown
page readonly
30E0000
unkown
page readonly
10E89000
unkown
page read and write
9724000
unkown
page read and write
7FF54658C000
unkown
page readonly
93B0000
unkown
page read and write
7FF54691F000
unkown
page readonly
7FF545F7D000
unkown
page readonly
D614000
unkown
page read and write
7FF546001000
unkown
page readonly
47D0000
unkown
page read and write
7FF5468A4000
unkown
page readonly
23FD000
unkown
page read and write
7FF5460BD000
unkown
page readonly
7FF545FAC000
unkown
page readonly
9830000
unkown
page read and write
6AE0000
direct allocation
page read and write
7FF546A00000
unkown
page readonly
5493000
unkown
page read and write
2A41000
heap
page read and write
401000
unkown
page execute read
46FC000
unkown
page read and write
7FF546999000
unkown
page readonly
7FF5469B8000
unkown
page readonly
7FF546944000
unkown
page readonly
9C9E000
stack
page read and write
6BEF000
heap
page read and write
47F0000
unkown
page read and write
7FF546456000
unkown
page readonly
7FF5465D8000
unkown
page readonly
22A0000
unkown
page read and write
7FF546007000
unkown
page readonly
D374000
unkown
page read and write
E360000
unkown
page read and write
784000
unkown
page read and write
EE20000
heap
page read and write
6A60000
direct allocation
page read and write
A30000
heap
page read and write
D64F000
unkown
page read and write
7FF545FC2000
unkown
page readonly
2650000
heap
page read and write
149000
stack
page read and write
7FF546343000
unkown
page readonly
93D3000
unkown
page read and write
D8FA000
unkown
page read and write
9724000
unkown
page read and write
240A000
unkown
page read and write
7FF546564000
unkown
page readonly
7FF546758000
unkown
page readonly
7FF54683A000
unkown
page readonly
1363B000
unkown
page read and write
E28A000
stack
page read and write
10EBD000
unkown
page read and write
D2B0000
unkown
page readonly
7FF546A33000
unkown
page readonly
D731000
unkown
page read and write
9C0000
unkown
page readonly
7FF54628A000
unkown
page readonly
7FF546844000
unkown
page readonly
C456000
unkown
page read and write
7FF5465E7000
unkown
page readonly
248E000
unkown
page read and write
7FF54673D000
unkown
page readonly
EE40000
unkown
page read and write
135F4000
unkown
page read and write
13A000
stack
page read and write
7FF5467F3000
unkown
page readonly
D69E000
unkown
page read and write
D4C6000
unkown
page read and write
473C000
unkown
page read and write
D961000
unkown
page read and write
36900000
direct allocation
page execute and read and write
D7F3000
unkown
page read and write
6B73000
heap
page read and write
7FF546973000
unkown
page readonly
366DE000
stack
page read and write
6B88000
heap
page read and write
A47F000
stack
page read and write
7FF5468FD000
unkown
page readonly
E0F0000
unkown
page readonly
C56C000
unkown
page read and write
CBCF000
unkown
page read and write
2A41000
heap
page read and write
E177000
stack
page read and write
23FD000
unkown
page read and write
279F000
stack
page read and write
7FF546049000
unkown
page readonly
7FF546820000
unkown
page readonly
7FF54677F000
unkown
page readonly
5A0000
heap
page read and write
ED10000
unkown
page read and write
9A50000
unkown
page readonly
D4C0000
unkown
page read and write
99B0000
unkown
page readonly
9EC0000
unkown
page readonly
7FF5469C8000
unkown
page readonly
7FF5460A5000
unkown
page readonly
CBE3000
unkown
page read and write
7FF546327000
unkown
page readonly
2180000
unkown
page read and write
7FF54689F000
unkown
page readonly
6B90000
heap
page read and write
2A40000
heap
page read and write
7FF5462F3000
unkown
page readonly
5040000
unkown
page read and write
2A00000
heap
page read and write
7FF54619E000
unkown
page readonly
6B6E000
heap
page read and write
3330000
unkown
page readonly
10F72000
unkown
page read and write
7FF5467B6000
unkown
page readonly
6BDF000
heap
page read and write
A30000
heap
page read and write
2426000
unkown
page read and write
7FF546556000
unkown
page readonly
94B5000
unkown
page read and write
DAE8000
unkown
page read and write
2160000
unkown
page read and write
3330000
unkown
page readonly
EB5000
heap
page read and write
7FF545FAC000
unkown
page readonly
7FF5468EF000
unkown
page readonly
E63000
heap
page read and write
553C000
unkown
page read and write
6B6A000
heap
page read and write
3A33000
unkown
page read and write
3D30000
unkown
page read and write
D62C000
unkown
page read and write
7FF546783000
unkown
page readonly
7FF5464F4000
unkown
page readonly
401000
unkown
page execute read
C482000
unkown
page read and write
23BA000
unkown
page read and write
7FF546732000
unkown
page readonly
696F000
stack
page read and write
10000
heap
page read and write
970F000
unkown
page read and write
242B000
unkown
page read and write
C420000
unkown
page read and write
7FF5461A5000
unkown
page readonly
7FF5465DF000
unkown
page readonly
7FF545E50000
unkown
page readonly
7E2000
unkown
page readonly
10E43000
unkown
page read and write
7FF546382000
unkown
page readonly
7FF5468A4000
unkown
page readonly
560000
unkown
page read and write
7FF546721000
unkown
page readonly
10BF0000
unkown
page read and write
1363B000
unkown
page read and write
A9C8000
stack
page read and write
2A41000
heap
page read and write
CBDA000
unkown
page read and write
5DB8000
remote allocation
page execute and read and write
10E88000
unkown
page read and write
7FF5467BA000
unkown
page readonly
EDE0000
unkown
page read and write
D9C4000
unkown
page read and write
3353000
unkown
page read and write
4640000
unkown
page read and write
7FF54683A000
unkown
page readonly
54A0000
unkown
page read and write
7FF546926000
unkown
page readonly
7FF5462FC000
unkown
page readonly
9870000
unkown
page readonly
A47F000
stack
page read and write
6BE9000
heap
page read and write
7FF546958000
unkown
page readonly
2443000
unkown
page read and write
E350000
heap
page read and write
7FF546049000
unkown
page readonly
7FF546284000
unkown
page readonly
2A41000
heap
page read and write
6B57000
heap
page read and write
705000
stack
page read and write
5EE000
unkown
page execute read
C2A0000
unkown
page read and write
5AE000
heap
page read and write
7FF546811000
unkown
page readonly
C1EF000
stack
page read and write
6977000
heap
page read and write
1F0000
unkown
page readonly
865000
heap
page read and write
1660000
remote allocation
page execute and read and write
There are 1743 hidden memdumps, click here to show them.