IOC Report
brief nr. 001150_51_2024-11-19_134943.docx.exe

loading gif

Files

File Path
Type
Category
Malicious
brief nr. 001150_51_2024-11-19_134943.docx.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Temp\aut4CA8.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\togging
data
modified

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\brief nr. 001150_51_2024-11-19_134943.docx.exe
"C:\Users\user\Desktop\brief nr. 001150_51_2024-11-19_134943.docx.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\Desktop\brief nr. 001150_51_2024-11-19_134943.docx.exe"
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\help.exe
"C:\Windows\SysWOW64\help.exe"
 malicious
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Windows\SysWOW64\svchost.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
www.2creativedesign.online/ud04/
malicious
http://www.el-radu-easy4y.one/ud04/www.asik-eye-surgery-63293.bond
unknown
http://www.ec.baby/ud04/www.2creativedesign.online
unknown
http://www.narchists.info/ud04/www.ec.baby
unknown
http://www.2creativedesign.online/ud04/
unknown
https://api.msn.com:443/v1/news/Feed/Windows?t
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV
unknown
http://www.iuxy.host/ud04/www.df.clinic
unknown
https://www.msn.com/en-us/sports/other/simone-biles-leads-u-s-women-s-team-to-seventh-straight-world
unknown
https://api.msn.com:443/v1/news/Feed/Windows?
unknown
https://www.msn.com/en-us/weather/topstories/here-s-who-could-see-above-average-snowfall-this-winter
unknown
http://www.ec.baby
unknown
http://www.narchists.info
unknown
https://excel.office.com
unknown
https://www.msn.com/en-us/money/realestate/why-this-florida-city-is-a-safe-haven-from-hurricanes/ar-
unknown
http://www.gzvmt.info/ud04/
unknown
http://www.narchists.info/ud04/
unknown
http://www.uy-now-pay-later-74776.bond/ud04/
unknown
http://www.lranchomx.xyz/ud04/www.1130.vip
unknown
http://www.akrzus.pro
unknown
http://www.unluoren.top
unknown
http://www.df.clinic
unknown
https://api.msn.com/v1/news/Feed/Windows?activityId=DD4083B70FE54739AB05D6BBA3484042&timeOut=5000&oc
unknown
http://www.uy-now-pay-later-74776.bond
unknown
https://wns.windows.com/
unknown
http://www.ybzert.online/ud04/
unknown
http://www.uy-now-pay-later-74776.bondReferer:
unknown
http://www.lranchomx.xyz/ud04/
unknown
http://www.autoitscript.com/autoit3/J
unknown
http://www.uy-now-pay-later-74776.bond/ud04/www.akrzus.pro
unknown
http://www.lranchomx.xyz
unknown
http://www.1130.vip/ud04/www.el-radu-easy4y.one
unknown
https://word.office.com
unknown
http://www.ybzert.online
unknown
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
unknown
http://www.akrzus.pro/ud04/www.gzvmt.info
unknown
http://www.df.clinicReferer:
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
unknown
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
https://outlook.com
unknown
http://www.1130.vip
unknown
http://www.edcn.link
unknown
https://android.notify.windows.com/iOS
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp
unknown
https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the
unknown
http://www.asik-eye-surgery-63293.bondReferer:
unknown
http://www.edcn.link/ud04/www.ybzert.online
unknown
http://www.akrzus.proReferer:
unknown
http://www.unluoren.top/ud04/www.narchists.info
unknown
http://www.2creativedesign.online/ud04/www.edcn.link
unknown
http://www.df.clinic/ud04/
unknown
https://api.msn.com/v1/news/Feed/Windows?
unknown
https://www.msn.com/en-us/lifestyle/lifestyle-buzz/what-to-do-if-a-worst-case-nuclear-scenario-actua
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
unknown
https://www.pollensense.com/
unknown
http://www.ybzert.onlineReferer:
unknown
http://www.gzvmt.info/ud04/P
unknown
http://www.1130.vip/ud04/
unknown
http://www.asik-eye-surgery-63293.bond
unknown
http://www.rofilern.net
unknown
https://www.msn.com/en-us/news/politics/kinzinger-has-theory-about-who-next-house-speaker-will-be/vi
unknown
http://www.ybzert.online/ud04/www.iuxy.host
unknown
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
unknown
http://schemas.micro
unknown
http://www.iuxy.hostReferer:
unknown
https://www.msn.com/en-us/weather/topstories/us-winter-forecast-for-the-2023-2024-season/ar-AA1hGINt
unknown
http://www.lranchomx.xyzReferer:
unknown
http://www.unluoren.top/ud04/
unknown
https://www.msn.com/en-us/news/technology/prehistoric-comet-impacted-earth-and-triggered-the-switch-
unknown
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
http://www.unluoren.topReferer:
unknown
https://www.msn.com/en-us/money/markets/costco-is-seeing-a-gold-rush-what-s-behind-the-demand-for-it
unknown
http://www.2creativedesign.online
unknown
http://www.el-radu-easy4y.one
unknown
http://www.2creativedesign.onlineReferer:
unknown
http://www.el-radu-easy4y.one/ud04/
unknown
https://www.msn.com/en-us/music/news/6-rock-ballads-that-tug-at-the-heartstrings/ar-AA1hIdsm
unknown
http://www.gzvmt.infoReferer:
unknown
http://www.akrzus.pro/ud04/
unknown
http://www.asik-eye-surgery-63293.bond/ud04/
unknown
http://www.iuxy.host/ud04/
unknown
http://schemas.microsoft.
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/AAehwh2.svg
unknown
https://powerpoint.office.com
unknown
http://www.foreca.com
unknown
http://www.rofilern.netReferer:
unknown
http://www.df.clinic/ud04/www.lranchomx.xyz
unknown
http://www.iuxy.host
unknown
http://www.edcn.link/ud04/
unknown
http://www.edcn.linkReferer:
unknown
http://www.asik-eye-surgery-63293.bond/ud04/www.rofilern.net
unknown
http://www.narchists.infoReferer:
unknown
http://www.ec.babyReferer:
unknown
http://www.rofilern.net/ud04/www.uy-now-pay-later-74776.bond
unknown
http://www.1130.vipReferer:
unknown
https://api.msn.com/
unknown
http://www.el-radu-easy4y.oneReferer:
unknown
http://www.rofilern.net/ud04/
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV-dark
unknown
https://www.msn.com:443/en-us/feed
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.unluoren.top
unknown
 malicious
www.ec.baby
unknown
 malicious
www.edcn.link
unknown
 malicious
www.narchists.info
unknown
 malicious
www.2creativedesign.online
unknown
 malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{5985FC23-2588-4D9A-B38B-7E7AFFAB3155} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR
KGLToGCSUpdatedRevision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
There are 35 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2BB0000
unclassified section
page execute and read and write
 malicious
3950000
unclassified section
page execute and read and write
 malicious
3A90000
direct allocation
page read and write
 malicious
400000
system
page execute and read and write
 malicious
30B0000
system
page execute and read and write
 malicious
3590000
trusted library allocation
page read and write
 malicious
3550000
unclassified section
page execute and read and write
 malicious
7FF557661000
unkown
page readonly
3163000
heap
page read and write
7FF557535000
unkown
page readonly
C04F000
unkown
page read and write
FFC000
stack
page read and write
E83D000
stack
page read and write
3990000
unclassified section
page execute and read and write
8EEE000
unkown
page read and write
B4A6000
stack
page read and write
484000
unkown
page readonly
7FF557429000
unkown
page readonly
7FF5574A9000
unkown
page readonly
B82A000
stack
page read and write
C3A8000
unkown
page read and write
7A60000
unkown
page readonly
B080000
unkown
page read and write
7FF557416000
unkown
page readonly
17D000
stack
page read and write
3660000
trusted library allocation
page execute and read and write
A08D000
stack
page read and write
7FF5575AB000
unkown
page readonly
1131000
heap
page read and write
104A000
heap
page read and write
7FF557387000
unkown
page readonly
84DC000
stack
page read and write
A0FF000
unkown
page read and write
7FF55708D000
unkown
page readonly
51F9000
unkown
page read and write
7FF55761F000
unkown
page readonly
7FF557095000
unkown
page readonly
7FF5572C9000
unkown
page readonly
90DB000
unkown
page read and write
B5AE000
stack
page read and write
8321000
unkown
page read and write
A8CC000
unkown
page read and write
5161000
unkown
page read and write
7FF556E7C000
unkown
page readonly
76B0000
unkown
page read and write
4810000
unkown
page read and write
7FF5573D3000
unkown
page readonly
7E05000
stack
page read and write
A0BF000
unkown
page read and write
9E0000
heap
page read and write
36C4000
heap
page read and write
7FF55700F000
unkown
page readonly
7FF55714F000
unkown
page readonly
E8BF000
stack
page read and write
7FF557413000
unkown
page readonly
A873000
unkown
page read and write
8F09000
unkown
page read and write
86CE000
stack
page read and write
7FF557037000
unkown
page readonly
7FF5570FE000
unkown
page readonly
730B000
unkown
page read and write
E260000
unkown
page read and write
7FF5570BB000
unkown
page readonly
71A4000
unkown
page read and write
E32E000
stack
page read and write
7FF557426000
unkown
page readonly
7FF556E4A000
unkown
page readonly
8949000
stack
page read and write
1086000
heap
page read and write
C214000
unkown
page read and write
3157000
heap
page read and write
7FF5575B9000
unkown
page readonly
3401000
heap
page read and write
BFD0000
unkown
page read and write
10CAC000
unkown
page execute and read and write
7FF5570A6000
unkown
page readonly
32DB000
unkown
page read and write
12DC000
heap
page read and write
AF0000
heap
page readonly
8D68000
unkown
page read and write
3DFE000
direct allocation
page read and write
4781000
unkown
page read and write
155E000
stack
page read and write
51E3000
unkown
page read and write
3E2E000
direct allocation
page read and write
7FF5570CA000
unkown
page readonly
A0BF000
unkown
page read and write
AD10000
unkown
page readonly
7DF468990000
unkown
page readonly
2F90000
unkown
page readonly
3C1000
unkown
page execute read
B7AA000
stack
page read and write
F465000
unkown
page read and write
7162000
unkown
page read and write
7FF557579000
unkown
page readonly
9F0E000
stack
page read and write
3729000
direct allocation
page execute and read and write
3220000
unkown
page readonly
90CF000
unkown
page read and write
9580000
unkown
page readonly
1085000
heap
page read and write
FD0000
unkown
page readonly
489E000
stack
page read and write
3274000
heap
page read and write
BF3F000
stack
page read and write
4830000
unkown
page read and write
C0F9000
unkown
page read and write
7300000
unkown
page read and write
7FF557235000
unkown
page readonly
E13B000
stack
page read and write
8C59000
stack
page read and write
842F000
stack
page read and write
487A000
unkown
page read and write
129C000
heap
page read and write
7FF557437000
unkown
page readonly
A215000
unkown
page read and write
7FF55720D000
unkown
page readonly
A882000
unkown
page read and write
7FF5572C1000
unkown
page readonly
7FF557106000
unkown
page readonly
7FF556F2A000
unkown
page readonly
3A82000
direct allocation
page execute and read and write
8BD9000
stack
page read and write
8F4D000
unkown
page read and write
3274000
heap
page read and write
AE2B000
stack
page read and write
359E000
heap
page read and write
77B0000
unkown
page read and write
842F000
stack
page read and write
B1A0000
unkown
page read and write
3274000
heap
page read and write
7FF556F26000
unkown
page readonly
7FF5575E3000
unkown
page readonly
995E000
stack
page read and write
A156000
unkown
page read and write
ADAF000
stack
page read and write
C12D000
unkown
page read and write
7DF4689B1000
unkown
page execute read
72FE000
unkown
page read and write
BFD0000
unkown
page read and write
7FF5572BD000
unkown
page readonly
C1DF000
unkown
page read and write
9050000
unkown
page read and write
A0A8000
unkown
page read and write
7FF557302000
unkown
page readonly
8BD9000
stack
page read and write
7FF556F84000
unkown
page readonly
7FF5573F3000
unkown
page readonly
612E000
stack
page read and write
7FF55720B000
unkown
page readonly
7FF55765C000
unkown
page readonly
7DF468980000
unkown
page readonly
A8CC000
unkown
page read and write
C328000
unkown
page read and write
307B000
stack
page read and write
7169000
unkown
page read and write
3220000
unkown
page readonly
373E000
stack
page read and write
7FF556E7E000
unkown
page readonly
88A0000
unkown
page read and write
7FF556FEE000
unkown
page readonly
3274000
heap
page read and write
A8E6000
unkown
page read and write
8D86000
unkown
page read and write
3012000
heap
page read and write
9086000
unkown
page read and write
902C000
unkown
page read and write
73C5000
stack
page read and write
10674000
unkown
page read and write
C3F7000
unkown
page read and write
C374000
unkown
page read and write
7FF557531000
unkown
page readonly
7FF5570D6000
unkown
page readonly
90C9000
unkown
page read and write
7FF557280000
unkown
page readonly
7FF5573CB000
unkown
page readonly
46F6000
unkown
page read and write
2D8A000
stack
page read and write
3AF0000
direct allocation
page read and write
A218000
unkown
page read and write
105B2000
unkown
page read and write
7DF4689B1000
unkown
page execute read
8F09000
unkown
page read and write
7FF556E47000
unkown
page readonly
C59000
heap
page read and write
83AC000
stack
page read and write
10574000
unkown
page read and write
9D8E000
stack
page read and write
C23A000
unkown
page read and write
4880000
unkown
page read and write
7FF557571000
unkown
page readonly
90DB000
unkown
page read and write
7FF557239000
unkown
page readonly
BBC0000
unkown
page read and write
128A000
heap
page read and write
7FF5573D5000
unkown
page readonly
F472000
unkown
page read and write
7FF55733F000
unkown
page readonly
7FF556FD2000
unkown
page readonly
BF3F000
stack
page read and write
2BC0000
heap
page read and write
3350000
trusted library allocation
page read and write
4746000
unkown
page read and write
3274000
heap
page read and write
7FF5573C1000
unkown
page readonly
A877000
unkown
page read and write
7FF5573BB000
unkown
page readonly
8530000
unkown
page readonly
7FF5571E6000
unkown
page readonly
7FF55708D000
unkown
page readonly
7FF55752A000
unkown
page readonly
A280000
unkown
page read and write
7FF55733B000
unkown
page readonly
7FF557095000
unkown
page readonly
F552000
heap
page read and write
C244000
unkown
page read and write
3350000
trusted library allocation
page read and write
7FF557476000
unkown
page readonly
9F0000
unkown
page readonly
7FF5572B6000
unkown
page readonly
7FF556FE3000
unkown
page readonly
19B0000
heap
page read and write
7BC1000
unkown
page read and write
3350000
trusted library allocation
page read and write
35C0000
trusted library allocation
page execute and read and write
26AE000
unkown
page read and write
7FF5572A2000
unkown
page readonly
19B4000
heap
page read and write
105BB000
unkown
page read and write
7FF55748F000
unkown
page readonly
A114000
unkown
page read and write
7FF5574F1000
unkown
page readonly
10BF0000
unkown
page execute and read and write
8820000
unkown
page readonly
C20000
unkown
page read and write
9C0000
heap
page read and write
A131000
unkown
page read and write
7FF55756D000
unkown
page readonly
47DB000
unkown
page read and write
715C000
unkown
page read and write
7FF55738F000
unkown
page readonly
7FF557099000
unkown
page readonly
6170000
trusted library allocation
page read and write
1440000
unkown
page readonly
961B000
stack
page read and write
8D60000
unkown
page read and write
2E02000
heap
page read and write
C2E4000
unkown
page read and write
33D1000
heap
page read and write
7FF5572C9000
unkown
page readonly
C328000
unkown
page read and write
7FF557653000
unkown
page readonly
A858000
unkown
page read and write
7FF5575E0000
unkown
page readonly
7FF556E8D000
unkown
page readonly
7FF55720D000
unkown
page readonly
F462000
unkown
page read and write
7FF5570E7000
unkown
page readonly
3213000
stack
page read and write
C1DF000
unkown
page read and write
2E13000
heap
page read and write
900000
unkown
page readonly
9259000
stack
page read and write
7185000
unkown
page read and write
3529000
heap
page read and write
8510000
unkown
page readonly
C46C000
unkown
page read and write
3230000
unkown
page read and write
7FF5572B6000
unkown
page readonly
A8E1000
unkown
page read and write
128A000
heap
page read and write
7FF5569F1000
unkown
page readonly
7FF557549000
unkown
page readonly
3110000
heap
page read and write
46E0000
unkown
page read and write
C22B000
unkown
page read and write
7FF556E66000
unkown
page readonly
2E00000
heap
page read and write
3230000
unkown
page read and write
7DF468971000
unkown
page execute read
2C8F000
stack
page read and write
10DE0000
heap
page read and write
A0BD000
unkown
page read and write
105C9000
unkown
page read and write
7D0E000
stack
page read and write
4769000
unkown
page read and write
C123000
unkown
page read and write
7A4B000
stack
page read and write
26EE000
stack
page read and write
C091000
unkown
page read and write
32F3000
unkown
page read and write
C10000
unkown
page read and write
1060000
unkown
page read and write
7FF5575BD000
unkown
page readonly
7FF556E75000
unkown
page readonly
AE2B000
stack
page read and write
F552000
heap
page read and write
7FF556F90000
unkown
page readonly
256D000
stack
page read and write
C1DB000
unkown
page read and write
BC00000
unkown
page readonly
10534000
unkown
page read and write
717A000
unkown
page read and write
C3E7000
unkown
page read and write
A8CC000
unkown
page read and write
3597000
heap
page read and write
3984000
unclassified section
page execute and read and write
7FF557602000
unkown
page readonly
7FF557065000
unkown
page readonly
7FF556F2A000
unkown
page readonly
9B5000
stack
page read and write
9050000
unkown
page read and write
C10B000
unkown
page read and write
9B5000
stack
page read and write
7FF5575BF000
unkown
page readonly
7FF55738F000
unkown
page readonly
7FF5574EF000
unkown
page readonly
487A000
unkown
page read and write
7FF557617000
unkown
page readonly
3350000
trusted library allocation
page read and write
106B4000
unkown
page read and write
90C9000
unkown
page read and write
7FF5572D4000
unkown
page readonly
7DF4689A1000
unkown
page execute read
98B000
stack
page read and write
7FF557174000
unkown
page readonly
A8D7000
unkown
page read and write
A110000
unkown
page read and write
3274000
heap
page read and write
7140000
unkown
page read and write
7FF557239000
unkown
page readonly
C22F000
unkown
page read and write
3DFE000
direct allocation
page read and write
7FF557280000
unkown
page readonly
8510000
unkown
page readonly
E13B000
stack
page read and write
3D89000
direct allocation
page read and write
C3ED000
unkown
page read and write
C74000
heap
page read and write
A286000
unkown
page read and write
C43A000
unkown
page read and write
7FF55719C000
unkown
page readonly
7FF557467000
unkown
page readonly
7FF557437000
unkown
page readonly
717C000
unkown
page read and write
8EB8000
unkown
page read and write
32DB000
unkown
page read and write
7FF557285000
unkown
page readonly
E1B9000
stack
page read and write
7FF557033000
unkown
page readonly
7FF557352000
unkown
page readonly
1A00000
heap
page read and write
A8E3000
unkown
page read and write
7FF557434000
unkown
page readonly
3D89000
direct allocation
page read and write
717E000
unkown
page read and write
7FF5572D4000
unkown
page readonly
48DE000
stack
page read and write
A850000
unkown
page read and write
3274000
heap
page read and write
3450000
unkown
page read and write
7FF5571A1000
unkown
page readonly
C6D000
heap
page read and write
7909000
stack
page read and write
C42C000
unkown
page read and write
105B2000
unkown
page read and write
3C60000
direct allocation
page read and write
8DA6000
unkown
page read and write
AFFF000
stack
page read and write
47EE000
unkown
page read and write
77F0000
unkown
page read and write
12DB000
heap
page read and write
C23A000
unkown
page read and write
7909000
stack
page read and write
7FF5575BD000
unkown
page readonly
2D0B000
stack
page read and write
1289000
heap
page execute and read and write
278C000
heap
page read and write
47C0000
unkown
page read and write
A884000
unkown
page read and write
47A000
unkown
page read and write
8F4D000
unkown
page read and write
90F2000
unkown
page read and write
904C000
unkown
page read and write
3C90000
direct allocation
page read and write
7FF55752E000
unkown
page readonly
77C0000
unkown
page read and write
7FF5575A1000
unkown
page readonly
BBC0000
unkown
page read and write
FBC000
stack
page read and write
8D78000
unkown
page read and write
3274000
heap
page read and write
44D000
unkown
page readonly
3274000
heap
page read and write
12EB000
heap
page read and write
7FF55726A000
unkown
page readonly
7FF557426000
unkown
page readonly
3274000
heap
page read and write
C072000
unkown
page read and write
8ECE000
unkown
page read and write
7FF5571DF000
unkown
page readonly
7FF557493000
unkown
page readonly
84E0000
unkown
page readonly
BBE0000
unkown
page readonly
10A0000
heap
page read and write
8EC5000
unkown
page read and write
7FF557434000
unkown
page readonly
46E000
unkown
page readonly
472C000
unkown
page read and write
BC00000
unkown
page readonly
7FF5575B1000
unkown
page readonly
4730000
unkown
page read and write
C427000
unkown
page read and write
C233000
unkown
page read and write
8B4F000
unkown
page read and write
9854000
unkown
page read and write
7FF55764C000
unkown
page readonly
7FF55706A000
unkown
page readonly
874E000
stack
page read and write
7FF557210000
unkown
page readonly
7FF55719C000
unkown
page readonly
47C6000
unkown
page read and write
2E13000
heap
page read and write
7FF5573C1000
unkown
page readonly
3350000
trusted library allocation
page read and write
7FF5575E0000
unkown
page readonly
7FF55703C000
unkown
page readonly
C59000
heap
page read and write
3450000
unkown
page read and write
7FF5573EA000
unkown
page readonly
8DA6000
unkown
page read and write
7FF5575D0000
unkown
page readonly
32D7000
unkown
page read and write
91D6000
stack
page read and write
38CD000
direct allocation
page execute and read and write
477D000
unkown
page read and write
3DBD000
direct allocation
page read and write
3274000
heap
page read and write
1086000
heap
page read and write
7FF5573DE000
unkown
page readonly
BEBF000
stack
page read and write
7FF557568000
unkown
page readonly
3A11000
direct allocation
page execute and read and write
2A7F000
stack
page read and write
90CF000
unkown
page read and write
B42F000
stack
page read and write
C3ED000
unkown
page read and write
716E000
unkown
page read and write
7FF5574B3000
unkown
page readonly
E2A0000
heap
page read and write
352D000
heap
page read and write
C43D000
unkown
page read and write
7FF55707D000
unkown
page readonly
76B0000
unkown
page read and write
46E0000
unkown
page read and write
7FF5575C5000
unkown
page readonly
ACBB000
stack
page read and write
BBBB000
stack
page read and write
616F000
stack
page read and write
7FF5575EA000
unkown
page readonly
7FF5573B0000
unkown
page readonly
32C9000
unkown
page read and write
3AC0000
direct allocation
page read and write
A129000
unkown
page read and write
C54B000
unkown
page read and write
1063B000
unkown
page read and write
8ED5000
unkown
page read and write
7FF557661000
unkown
page readonly
7178000
unkown
page read and write
3C90000
direct allocation
page read and write
7FF5571AC000
unkown
page readonly
C441000
unkown
page read and write
C374000
unkown
page read and write
7FF5575B1000
unkown
page readonly
F430000
unkown
page read and write
7FF55714F000
unkown
page readonly
104E000
heap
page read and write
7FF556FFB000
unkown
page readonly
7A4B000
stack
page read and write
7C60000
unkown
page readonly
7FF55747D000
unkown
page readonly
A810000
unkown
page read and write
8F27000
unkown
page read and write
7FF55753D000
unkown
page readonly
AFFF000
stack
page read and write
7FF5573DE000
unkown
page readonly
88C0000
unkown
page read and write
7DF468990000
unkown
page readonly
A884000
unkown
page read and write
3BE3000
direct allocation
page read and write
4718000
unkown
page read and write
3274000
heap
page read and write
60EF000
stack
page read and write
7FF557535000
unkown
page readonly
486A000
unkown
page read and write
199E000
stack
page read and write
9F8F000
stack
page read and write
7FF5573B0000
unkown
page readonly
C6D000
heap
page read and write
7FF5573E2000
unkown
page readonly
C22B000
unkown
page read and write
B42F000
stack
page read and write
C244000
unkown
page read and write
9CDC000
stack
page read and write
F48E000
unkown
page read and write
7FF5575B9000
unkown
page readonly
6170000
trusted library allocation
page read and write
90F2000
unkown
page read and write
C23A000
unkown
page read and write
717E000
unkown
page read and write
7FF557065000
unkown
page readonly
2F59000
unkown
page read and write
7FF557103000
unkown
page readonly
7FF557487000
unkown
page readonly
B6AA000
stack
page read and write
3274000
heap
page read and write
3700000
trusted library allocation
page read and write
4732000
unkown
page read and write
A114000
unkown
page read and write
7D8D000
stack
page read and write
3942000
direct allocation
page execute and read and write
1020000
heap
page read and write
32E3000
unkown
page read and write
7FF556E6C000
unkown
page readonly
4830000
unkown
page read and write
79B0000
unkown
page read and write
7FF55765C000
unkown
page readonly
3274000
heap
page read and write
47C0000
unkown
page read and write
7FF55725B000
unkown
page readonly
A22F000
unkown
page read and write
1510000
heap
page read and write
7FF557387000
unkown
page readonly
3274000
heap
page read and write
3440000
unkown
page readonly
7FF5570E7000
unkown
page readonly
A873000
unkown
page read and write
798E000
stack
page read and write
C3AE000
unkown
page read and write
C3A8000
unkown
page read and write
7FF557187000
unkown
page readonly
7FF557669000
unkown
page readonly
7FF55741C000
unkown
page readonly
B7AA000
stack
page read and write
7FF557083000
unkown
page readonly
4800000
unkown
page read and write
7E03000
stack
page read and write
7FF5569E8000
unkown
page readonly
73D0000
unkown
page read and write
7E03000
stack
page read and write
8AE6000
unkown
page read and write
3C0000
unkown
page readonly
1142000
heap
page read and write
7FF556FC4000
unkown
page readonly
8D60000
unkown
page read and write
7FF557463000
unkown
page readonly
7FF557257000
unkown
page readonly
91D6000
stack
page read and write
7FF557599000
unkown
page readonly
C2D3000
unkown
page read and write
C04F000
unkown
page read and write
8EB8000
unkown
page read and write
C18A000
unkown
page read and write
7FF5574F9000
unkown
page readonly
8F4D000
unkown
page read and write
7FF5573E6000
unkown
page readonly
7FF5573A9000
unkown
page readonly
A118000
unkown
page read and write
C0FB000
unkown
page read and write
902C000
unkown
page read and write
C3B3000
unkown
page read and write
3E2E000
direct allocation
page read and write
7FF556FD2000
unkown
page readonly
8F27000
unkown
page read and write
7FF5571AC000
unkown
page readonly
44D000
unkown
page readonly
32C7000
unkown
page read and write
7FF55764C000
unkown
page readonly
7FF5570BB000
unkown
page readonly
716E000
unkown
page read and write
BC10000
unkown
page read and write
2E13000
heap
page read and write
7FF557594000
unkown
page readonly
107D000
heap
page read and write
910000
unkown
page readonly
A225000
unkown
page read and write
7FF557045000
unkown
page readonly
7FF556FEE000
unkown
page readonly
315F000
heap
page read and write
7176000
unkown
page read and write
88A0000
unkown
page read and write
7FF5570C5000
unkown
page readonly
7E10000
unkown
page read and write
3274000
heap
page read and write
1030000
heap
page read and write
330A000
unkown
page read and write
38D1000
direct allocation
page execute and read and write
7FF55742B000
unkown
page readonly
7FF55741A000
unkown
page readonly
C569000
unkown
page read and write
3029000
stack
page read and write
3005000
heap
page read and write
7FF5575BF000
unkown
page readonly
B010000
unkown
page readonly
A87F000
unkown
page read and write
7C70000
unkown
page readonly
9CDC000
stack
page read and write
7169000
unkown
page read and write
2C04000
stack
page read and write
C233000
unkown
page read and write
7FF5575E3000
unkown
page readonly
9E0F000
stack
page read and write
C1DD000
unkown
page read and write
8C59000
stack
page read and write
7DF4689A1000
unkown
page execute read
7FF5570C1000
unkown
page readonly
C41F000
unkown
page read and write
7306000
unkown
page read and write
A156000
unkown
page read and write
9F0E000
stack
page read and write
C470000
unkown
page read and write
7FF556E4A000
unkown
page readonly
A858000
unkown
page read and write
7FF557045000
unkown
page readonly
7FF557009000
unkown
page readonly
A877000
unkown
page read and write
C74000
heap
page read and write
34D0000
trusted library allocation
page read and write
7162000
unkown
page read and write
7FF55745B000
unkown
page readonly
7FF557393000
unkown
page readonly
3173000
heap
page read and write
7FF556FFF000
unkown
page readonly
718B000
unkown
page read and write
7FF55751D000
unkown
page readonly
9C0000
system
page execute and read and write
77D0000
unkown
page read and write
3C13000
direct allocation
page read and write
7FF55706A000
unkown
page readonly
4734000
unkown
page read and write
7FF55733B000
unkown
page readonly
7FF5574C6000
unkown
page readonly
7FF556E6C000
unkown
page readonly
A8E1000
unkown
page read and write
105BB000
unkown
page read and write
7FF5574A9000
unkown
page readonly
7FF5575D0000
unkown
page readonly
7FF5573F3000
unkown
page readonly
3000000
heap
page read and write
7FF557026000
unkown
page readonly
7FF55728F000
unkown
page readonly
10AE000
heap
page read and write
F461000
unkown
page read and write
32F3000
unkown
page read and write
8D70000
unkown
page read and write
7FF557330000
unkown
page readonly
C40E000
unkown
page read and write
995E000
stack
page read and write
C24F000
unkown
page read and write
9052000
unkown
page read and write
BBE0000
unkown
page readonly
6170000
trusted library allocation
page read and write
4746000
unkown
page read and write
7FF557602000
unkown
page readonly
71B2000
unkown
page read and write
7C60000
unkown
page readonly
A110000
unkown
page read and write
89C0000
unkown
page read and write
7FF5569FA000
unkown
page readonly
1023000
heap
page read and write
7FF557106000
unkown
page readonly
AEE7000
stack
page read and write
BBD0000
unkown
page readonly
B4A6000
stack
page read and write
7DF468981000
unkown
page execute read
7FF557148000
unkown
page readonly
8EDD000
unkown
page read and write
7FF556F87000
unkown
page readonly
105C9000
unkown
page read and write
7FF546F2F000
unkown
page readonly
7160000
unkown
page read and write
7FF5570F7000
unkown
page readonly
7FF556F84000
unkown
page readonly
3AC0000
direct allocation
page read and write
7FF5571E2000
unkown
page readonly
3460000
unkown
page read and write
7173000
unkown
page read and write
7FF5570CF000
unkown
page readonly
716B000
unkown
page read and write
7FF557062000
unkown
page readonly
7FF557531000
unkown
page readonly
8D80000
unkown
page read and write
3AF0000
direct allocation
page read and write
33D1000
heap
page read and write
8DAD000
unkown
page read and write
1440000
unkown
page readonly
904C000
unkown
page read and write
2E0A000
stack
page read and write
3735000
heap
page read and write
C233000
unkown
page read and write
7FF557487000
unkown
page readonly
7FF557627000
unkown
page readonly
10FEF000
system
page read and write
7FF55732D000
unkown
page readonly
7FF557467000
unkown
page readonly
1040000
heap
page read and write
46F0000
unkown
page read and write
9BA000
stack
page read and write
F472000
unkown
page read and write
7FF55722A000
unkown
page readonly
3274000
heap
page read and write
3AB0000
trusted library allocation
page execute and read and write
C12D000
unkown
page read and write
8D72000
unkown
page read and write
106B4000
unkown
page read and write
8B4F000
unkown
page read and write
51F9000
unkown
page read and write
3274000
heap
page read and write
3DB9000
direct allocation
page read and write
E270000
unkown
page read and write
7A50000
unkown
page readonly
C20000
unkown
page read and write
72C3000
unkown
page read and write
A225000
unkown
page read and write
6170000
trusted library allocation
page read and write
7FF5571CC000
unkown
page readonly
8820000
unkown
page readonly
90F2000
unkown
page read and write
3DBD000
direct allocation
page read and write
F550000
heap
page read and write
8D7A000
unkown
page read and write
3274000
heap
page read and write
4769000
unkown
page read and write
7FF55704A000
unkown
page readonly
7FF5573EA000
unkown
page readonly
AF6D000
stack
page read and write
73F0000
unkown
page read and write
3350000
trusted library allocation
page read and write
3118000
stack
page read and write
4718000
unkown
page read and write
3C13000
direct allocation
page read and write
C0F3000
unkown
page read and write
F46D000
unkown
page read and write
3158000
heap
page read and write
3017000
heap
page read and write
7FF55710F000
unkown
page readonly
3700000
trusted library allocation
page read and write
7FF55710A000
unkown
page readonly
6170000
trusted library allocation
page read and write
4732000
unkown
page read and write
C00000
heap
page read and write
3350000
unkown
page readonly
8D68000
unkown
page read and write
4781000
unkown
page read and write
3274000
heap
page read and write
3C1000
unkown
page execute read
7FF557554000
unkown
page readonly
E290000
unkown
page read and write
7FF557669000
unkown
page readonly
8D74000
unkown
page read and write
A87F000
unkown
page read and write
E280000
unkown
page read and write
7FF55714D000
unkown
page readonly
2BE0000
trusted library allocation
page execute and read and write
913F000
unkown
page read and write
B070000
unkown
page read and write
3274000
heap
page read and write
7FF557429000
unkown
page readonly
A129000
unkown
page read and write
9C4000
system
page execute and read and write
A08D000
stack
page read and write
90C9000
unkown
page read and write
9E8E000
stack
page read and write
7FF5575BB000
unkown
page readonly
7FF556FC4000
unkown
page readonly
7FF55707D000
unkown
page readonly
8DFE000
unkown
page read and write
A85A000
unkown
page read and write
C101000
unkown
page read and write
7306000
unkown
page read and write
195F000
stack
page read and write
485A000
unkown
page read and write
35AF000
stack
page read and write
7FF557328000
unkown
page readonly
7FF557026000
unkown
page readonly
3950000
trusted library allocation
page read and write
8EEE000
unkown
page read and write
7FF557617000
unkown
page readonly
E370000
unkown
page read and write
88C0000
unkown
page read and write
7FF5573B5000
unkown
page readonly
7FF55725B000
unkown
page readonly
7FF55752A000
unkown
page readonly
7FF5572B4000
unkown
page readonly
32FF000
stack
page read and write
47A000
unkown
page write copy
1020000
heap
page read and write
7FF5571DF000
unkown
page readonly
9580000
unkown
page readonly
9052000
unkown
page read and write
7FF55761F000
unkown
page readonly
716B000
unkown
page read and write
7FF5573D5000
unkown
page readonly
BEBF000
stack
page read and write
486A000
unkown
page read and write
7FF5573A9000
unkown
page readonly
A885000
unkown
page read and write
7FF557416000
unkown
page readonly
C40D000
unkown
page read and write
7FF55720B000
unkown
page readonly
7FF5573D3000
unkown
page readonly
7FF55741A000
unkown
page readonly
2E13000
heap
page read and write
7FF5570D6000
unkown
page readonly
7FF557302000
unkown
page readonly
C3FD000
unkown
page read and write
7FF5570A6000
unkown
page readonly
A154000
unkown
page read and write
A23B000
unkown
page read and write
C1DB000
unkown
page read and write
E60000
unkown
page readonly
3350000
trusted library allocation
page read and write
910000
unkown
page readonly
E1B9000
stack
page read and write
5161000
unkown
page read and write
7FF55742B000
unkown
page readonly
7FF5574F1000
unkown
page readonly
71FC000
unkown
page read and write
77B0000
unkown
page read and write
FB0000
unkown
page read and write
B050000
unkown
page read and write
9086000
unkown
page read and write
3160000
heap
page read and write
C1E9000
unkown
page read and write
3980000
unclassified section
page execute and read and write
A0DA000
unkown
page read and write
E260000
unkown
page read and write
C101000
unkown
page read and write
C3A8000
unkown
page read and write
3350000
trusted library allocation
page read and write
7FF556F90000
unkown
page readonly
3440000
unkown
page readonly
7FF557210000
unkown
page readonly
7FF55750F000
unkown
page readonly
84E0000
unkown
page readonly
3600000
direct allocation
page execute and read and write
7FF55703F000
unkown
page readonly
7FF55710A000
unkown
page readonly
7FF55731B000
unkown
page readonly
7FF55752E000
unkown
page readonly
A0A5000
unkown
page read and write
3700000
trusted library allocation
page read and write
8DFE000
unkown
page read and write
10DE0000
heap
page read and write
7DF468991000
unkown
page execute read
7FF557501000
unkown
page readonly
C54E000
unkown
page read and write
7DF468980000
unkown
page readonly
8810000
unkown
page readonly
7FF557293000
unkown
page readonly
7FF556A1B000
unkown
page readonly
7FF557554000
unkown
page readonly
7FF55726C000
unkown
page readonly
46F0000
unkown
page read and write
8F09000
unkown
page read and write
84DC000
stack
page read and write
7FF557501000
unkown
page readonly
50B0000
unkown
page write copy
7FF557571000
unkown
page readonly
7FF5574BA000
unkown
page readonly
732E000
unkown
page read and write
7FF55756D000
unkown
page readonly
2F09000
stack
page read and write
7FF557187000
unkown
page readonly
79A0000
unkown
page read and write
3120000
heap
page read and write
3274000
heap
page read and write
7FF5570D4000
unkown
page readonly
A0B9000
unkown
page read and write
32C4000
unkown
page read and write
B030000
unkown
page readonly
8EF5000
unkown
page read and write
8D70000
unkown
page read and write
7FF557476000
unkown
page readonly
71FC000
unkown
page read and write
9D8E000
stack
page read and write
71A4000
unkown
page read and write
7FF557579000
unkown
page readonly
10A5000
heap
page read and write
3274000
heap
page read and write
7FF55714D000
unkown
page readonly
C0F3000
unkown
page read and write
C3B3000
unkown
page read and write
C124000
unkown
page read and write
7FF546F35000
unkown
page readonly
72FE000
unkown
page read and write
EEB000
stack
page read and write
C091000
unkown
page read and write
C464000
unkown
page read and write
980E000
stack
page read and write
7FF5569FA000
unkown
page readonly
3274000
heap
page read and write
7FF557589000
unkown
page readonly
7173000
unkown
page read and write
7FF5574EF000
unkown
page readonly
A10000
heap
page read and write
7FF556FF3000
unkown
page readonly
98DA000
stack
page read and write
7E10000
unkown
page read and write
8EC5000
unkown
page read and write
A8E1000
unkown
page read and write
50B0000
unkown
page write copy
10B0000
unkown
page readonly
7FF5572AC000
unkown
page readonly
C12D000
unkown
page read and write
7FF5575FC000
unkown
page readonly
47C6000
unkown
page read and write
7FF556F9E000
unkown
page readonly
7FF5574BD000
unkown
page readonly
F464000
unkown
page read and write
C2E4000
unkown
page read and write
7C70000
unkown
page readonly
4820000
unkown
page read and write
904C000
unkown
page read and write
36C0000
heap
page read and write
7FF55714A000
unkown
page readonly
7FF557062000
unkown
page readonly
3274000
heap
page read and write
F48E000
unkown
page read and write
7DF468970000
unkown
page readonly
3400000
heap
page read and write
107C000
heap
page read and write
7320000
unkown
page read and write
C24F000
unkown
page read and write
7FF557607000
unkown
page readonly
7FF5575FC000
unkown
page readonly
7FF557642000
unkown
page readonly
C22F000
unkown
page read and write
4880000
unkown
page read and write
3869000
direct allocation
page execute and read and write
32D3000
unkown
page read and write
7FF5575AB000
unkown
page readonly
B050000
unkown
page read and write
A882000
unkown
page read and write
3C60000
direct allocation
page read and write
7FF5570D4000
unkown
page readonly
3274000
heap
page read and write
7FF557083000
unkown
page readonly
8F27000
unkown
page read and write
7B99000
stack
page read and write
106F0000
system
page execute and read and write
A0FC000
unkown
page read and write
9050000
unkown
page read and write
AD10000
unkown
page readonly
73F0000
unkown
page read and write
C2D3000
unkown
page read and write
7FF557420000
unkown
page readonly
7C00000
unkown
page readonly
32E6000
unkown
page read and write
7FF557420000
unkown
page readonly
7FF5571E6000
unkown
page readonly
7FF5570FE000
unkown
page readonly
7FF5570CF000
unkown
page readonly
3274000
heap
page read and write
7FF557330000
unkown
page readonly
B10000
trusted library allocation
page read and write
3AF0000
direct allocation
page read and write
47EE000
unkown
page read and write
3700000
trusted library allocation
page read and write
7FF557293000
unkown
page readonly
C06D000
unkown
page read and write
7FF557009000
unkown
page readonly
7176000
unkown
page read and write
FB0000
unkown
page read and write
7FF557352000
unkown
page readonly
315A000
heap
page read and write
7FF5574F4000
unkown
page readonly
A85E000
unkown
page read and write
C0FB000
unkown
page read and write
C2D3000
unkown
page read and write
7FF55722A000
unkown
page readonly
90DB000
unkown
page read and write
C072000
unkown
page read and write
A231000
unkown
page read and write
9052000
unkown
page read and write
485A000
unkown
page read and write
10574000
unkown
page read and write
A154000
unkown
page read and write
3350000
trusted library allocation
page read and write
9F8F000
stack
page read and write
3005000
heap
page read and write
2F59000
unkown
page read and write
C22B000
unkown
page read and write
3274000
heap
page read and write
7FF557493000
unkown
page readonly
128A000
heap
page read and write
7FF5571CC000
unkown
page readonly
7FF5570CA000
unkown
page readonly
7FF556FFF000
unkown
page readonly
B82A000
stack
page read and write
3C13000
direct allocation
page read and write
C1E9000
unkown
page read and write
7FF5574BD000
unkown
page readonly
7FF5571B3000
unkown
page readonly
C063000
unkown
page read and write
4785000
unkown
page read and write
C3ED000
unkown
page read and write
7FF5574B3000
unkown
page readonly
A280000
unkown
page read and write
A85A000
unkown
page read and write
7FF557042000
unkown
page readonly
7D0E000
stack
page read and write
2E13000
heap
page read and write
7FF5573ED000
unkown
page readonly
8321000
unkown
page read and write
2660000
heap
page read and write
79B0000
unkown
page read and write
A131000
unkown
page read and write
A810000
unkown
page read and write
3274000
heap
page read and write
7FF55763D000
unkown
page readonly
C409000
unkown
page read and write
7803000
unkown
page read and write
7FF55760F000
unkown
page readonly
AEE7000
stack
page read and write
F46D000
unkown
page read and write
7FF557456000
unkown
page readonly
7178000
unkown
page read and write
106F0000
unkown
page read and write
107AB000
system
page execute and read and write
32E6000
unkown
page read and write
A87A000
unkown
page read and write
7FF55748F000
unkown
page readonly
7FF557382000
unkown
page readonly
1F0000
heap
page read and write
F48E000
unkown
page read and write
3AC0000
direct allocation
page read and write
EEC000
stack
page read and write
7FF557257000
unkown
page readonly
89C0000
unkown
page read and write
32C9000
unkown
page read and write
864F000
stack
page read and write
C3AE000
unkown
page read and write
7FF556F87000
unkown
page readonly
32D3000
unkown
page read and write
7FF5572BD000
unkown
page readonly
3274000
heap
page read and write
7FF557285000
unkown
page readonly
A850000
unkown
page read and write
3164000
heap
page read and write
8D76000
unkown
page read and write
7FF557411000
unkown
page readonly
A22F000
unkown
page read and write
8D78000
unkown
page read and write
3700000
trusted library allocation
page read and write
9854000
unkown
page read and write
3BE3000
direct allocation
page read and write
717A000
unkown
page read and write
10636000
unkown
page read and write
297F000
unkown
page read and write
3460000
unkown
page read and write
9E0F000
stack
page read and write
7FF556E98000
unkown
page readonly
7FF5573E6000
unkown
page readonly
73D0000
unkown
page read and write
C1DF000
unkown
page read and write
C063000
unkown
page read and write
8D86000
unkown
page read and write
7FF557642000
unkown
page readonly
8DB0000
unkown
page read and write
7FF5575BB000
unkown
page readonly
A00A000
stack
page read and write
46E000
unkown
page readonly
8EEE000
unkown
page read and write
A222000
unkown
page read and write
7FF5575EA000
unkown
page readonly
B5AE000
stack
page read and write
7FF556E75000
unkown
page readonly
A87A000
unkown
page read and write
C567000
unkown
page read and write
7FF55728F000
unkown
page readonly
3350000
trusted library allocation
page read and write
3A0D000
direct allocation
page execute and read and write
C06D000
unkown
page read and write
7FF556E7E000
unkown
page readonly
7FF556FF3000
unkown
page readonly
B72B000
stack
page read and write
A231000
unkown
page read and write
7FF557393000
unkown
page readonly
C3F7000
unkown
page read and write
7FF5571A1000
unkown
page readonly
B628000
stack
page read and write
3740000
direct allocation
page execute and read and write
7DF468970000
unkown
page readonly
3580000
heap
page read and write
3213000
stack
page read and write
F550000
heap
page read and write
2E0A000
stack
page read and write
7FF556E47000
unkown
page readonly
7FF556FFB000
unkown
page readonly
7321000
unkown
page read and write
4810000
unkown
page read and write
7FF5573FF000
unkown
page readonly
7FF55732D000
unkown
page readonly
B52B000
stack
page read and write
2E86000
stack
page read and write
7300000
unkown
page read and write
2E13000
heap
page read and write
E270000
unkown
page read and write
BFBE000
stack
page read and write
C04B000
unkown
page read and write
7FF55747D000
unkown
page readonly
7FF55703F000
unkown
page readonly
7FF5573E2000
unkown
page readonly
C3E7000
unkown
page read and write
8D72000
unkown
page read and write
7FF556A1B000
unkown
page readonly
7FF55723F000
unkown
page readonly
C18A000
unkown
page read and write
C214000
unkown
page read and write
F6C000
stack
page read and write
913F000
unkown
page read and write
3274000
heap
page read and write
715C000
unkown
page read and write
B6AA000
stack
page read and write
7FF557113000
unkown
page readonly
7276000
unkown
page read and write
3A96000
unclassified section
page read and write
F46E000
unkown
page read and write
301F000
heap
page read and write
7FF557463000
unkown
page readonly
10B0000
unkown
page readonly
7FF5573D8000
unkown
page readonly
3D89000
direct allocation
page read and write
7FF557113000
unkown
page readonly
7FF5570B5000
unkown
page readonly
A1FD000
unkown
page read and write
8D6A000
unkown
page read and write
8ECE000
unkown
page read and write
7FF5570C1000
unkown
page readonly
7FF557411000
unkown
page readonly
4820000
unkown
page read and write
7FF556F31000
unkown
page readonly
7FF5569F1000
unkown
page readonly
3C0000
unkown
page readonly
C3B3000
unkown
page read and write
10A0000
heap
page read and write
3274000
heap
page read and write
A215000
unkown
page read and write
10636000
unkown
page read and write
1020000
heap
page read and write
A85E000
unkown
page read and write
BBD0000
unkown
page readonly
FDB000
stack
page read and write
1086000
heap
page read and write
B010000
unkown
page readonly
107BB000
system
page execute and read and write
33D1000
heap
page read and write
7FF5569E8000
unkown
page readonly
A286000
unkown
page read and write
9E8E000
stack
page read and write
7FF557599000
unkown
page readonly
E7BD000
stack
page read and write
7C00000
unkown
page readonly
7FF5571B3000
unkown
page readonly
3DB9000
direct allocation
page read and write
ACBB000
stack
page read and write
D1D000
heap
page read and write
A8D7000
unkown
page read and write
7A80000
unkown
page readonly
7FF5574BA000
unkown
page readonly
7185000
unkown
page read and write
F55A000
heap
page read and write
1080000
unkown
page readonly
E280000
unkown
page read and write
7FF556F26000
unkown
page readonly
C541000
unkown
page read and write
38DE000
direct allocation
page execute and read and write
9259000
stack
page read and write
7FF5574C6000
unkown
page readonly
7FF5573D8000
unkown
page readonly
7FF5570F7000
unkown
page readonly
D14000
heap
page read and write
3200000
heap
page read and write
7FF557235000
unkown
page readonly
7FF557099000
unkown
page readonly
864F000
stack
page read and write
1023000
heap
page read and write
472C000
unkown
page read and write
C31000
unkown
page readonly
913F000
unkown
page read and write
F55A000
heap
page read and write
C448000
unkown
page read and write
1161000
heap
page read and write
E290000
unkown
page read and write
3350000
unkown
page readonly
9013000
unkown
page read and write
F472000
unkown
page read and write
7FF557568000
unkown
page readonly
94C000
stack
page read and write
10DF6000
system
page read and write
3249000
unkown
page read and write
3274000
heap
page read and write
AF6E000
stack
page read and write
47DB000
unkown
page read and write
7276000
unkown
page read and write
4730000
unkown
page read and write
A0B9000
unkown
page read and write
7FF556F31000
unkown
page readonly
10674000
unkown
page read and write
A0A8000
unkown
page read and write
7FF55751D000
unkown
page readonly
717C000
unkown
page read and write
7FF546F2F000
unkown
page readonly
D1D000
heap
page read and write
3D8D000
direct allocation
page read and write
C428000
unkown
page read and write
BBBB000
stack
page read and write
C24F000
unkown
page read and write
F48F000
unkown
page read and write
7FF557264000
unkown
page readonly
7FF557653000
unkown
page readonly
7FF5573B5000
unkown
page readonly
3274000
heap
page read and write
7FF557245000
unkown
page readonly
3A70000
heap
page read and write
7FF55724C000
unkown
page readonly
386D000
direct allocation
page execute and read and write
7FF55702F000
unkown
page readonly
7FF5572B4000
unkown
page readonly
484000
unkown
page readonly
7FF5573FF000
unkown
page readonly
7FF557456000
unkown
page readonly
4800000
unkown
page read and write
32C4000
unkown
page read and write
7FF5575C5000
unkown
page readonly
7FF556E9A000
unkown
page readonly
3E2E000
direct allocation
page read and write
3274000
heap
page read and write
7FF556E9A000
unkown
page readonly
10534000
unkown
page read and write
C3AE000
unkown
page read and write
72C3000
unkown
page read and write
7FF556E85000
unkown
page readonly
7FF5570C5000
unkown
page readonly
7FF557413000
unkown
page readonly
BC10000
unkown
page read and write
7FF55741C000
unkown
page readonly
86CC000
stack
page read and write
7FF55702F000
unkown
page readonly
7FF55763D000
unkown
page readonly
7318000
unkown
page read and write
7FF557549000
unkown
page readonly
2F90000
unkown
page readonly
8EDD000
unkown
page read and write
ADAF000
stack
page read and write
4840000
unkown
page read and write
32D7000
unkown
page read and write
3274000
heap
page read and write
10A5000
heap
page read and write
7FF557174000
unkown
page readonly
E2A0000
heap
page read and write
4785000
unkown
page read and write
C244000
unkown
page read and write
7DF468991000
unkown
page execute read
7FF557382000
unkown
page readonly
8D7A000
unkown
page read and write
372D000
direct allocation
page execute and read and write
C589000
unkown
page read and write
A0DA000
unkown
page read and write
3C90000
direct allocation
page read and write
C40C000
unkown
page read and write
B8E000
stack
page read and write
C46C000
unkown
page read and write
7160000
unkown
page read and write
77C0000
unkown
page read and write
7FF557245000
unkown
page readonly
105F3000
unkown
page read and write
8D76000
unkown
page read and write
3323000
heap
page read and write
3D8D000
direct allocation
page read and write
4840000
unkown
page read and write
73C5000
stack
page read and write
718B000
unkown
page read and write
8ED5000
unkown
page read and write
7A60000
unkown
page readonly
3C8F000
unclassified section
page read and write
C422000
unkown
page read and write
3DFE000
direct allocation
page read and write
7FF5574F9000
unkown
page readonly
7DF468971000
unkown
page execute read
3270000
heap
page read and write
8D6C000
unkown
page read and write
32E3000
unkown
page read and write
7FF557583000
unkown
page readonly
C50000
heap
page read and write
72FC000
unkown
page read and write
10A4000
heap
page read and write
788B000
stack
page read and write
1060000
unkown
page read and write
7FF557148000
unkown
page readonly
8D6C000
unkown
page read and write
33D1000
heap
page read and write
3274000
heap
page read and write
8D74000
unkown
page read and write
7FF557594000
unkown
page readonly
C1DD000
unkown
page read and write
85CC000
stack
page read and write
3274000
heap
page read and write
C50000
heap
page read and write
77D0000
unkown
page read and write
2D0B000
stack
page read and write
B628000
stack
page read and write
7FF5575A1000
unkown
page readonly
F461000
unkown
page read and write
7FF55731B000
unkown
page readonly
7FF5572A2000
unkown
page readonly
A0FF000
unkown
page read and write
7FF55724C000
unkown
page readonly
11F5000
heap
page read and write
C10B000
unkown
page read and write
E370000
unkown
page read and write
7FF556E7B000
unkown
page readonly
B040000
unkown
page readonly
1063B000
unkown
page read and write
9013000
unkown
page read and write
8EF5000
unkown
page read and write
8530000
unkown
page readonly
7FF557264000
unkown
page readonly
A23B000
unkown
page read and write
C4F6000
unkown
page read and write
3274000
heap
page read and write
3029000
stack
page read and write
79A0000
unkown
page read and write
7FF556E8D000
unkown
page readonly
C31000
unkown
page readonly
3150000
heap
page read and write
7FF557589000
unkown
page readonly
7FF5573BB000
unkown
page readonly
C3E7000
unkown
page read and write
7FF55726A000
unkown
page readonly
C45B000
unkown
page read and write
9013000
unkown
page read and write
7FF5573ED000
unkown
page readonly
C45B000
unkown
page read and write
2E13000
heap
page read and write
3017000
heap
page read and write
8D80000
unkown
page read and write
A1FD000
unkown
page read and write
7FF557328000
unkown
page readonly
E60000
unkown
page readonly
326A000
unkown
page read and write
4734000
unkown
page read and write
C18A000
unkown
page read and write
33FF000
stack
page read and write
3A4C000
unclassified section
page execute and read and write
7FF55730C000
unkown
page readonly
B4E000
stack
page read and write
FCE000
stack
page read and write
7FF556E66000
unkown
page readonly
1E0000
heap
page read and write
FD0000
unkown
page readonly
E23A000
stack
page read and write
7E05000
stack
page read and write
7FF55700F000
unkown
page readonly
7FF5572AC000
unkown
page readonly
105F3000
unkown
page read and write
7FF556E98000
unkown
page readonly
3101000
heap
page read and write
33D0000
heap
page read and write
C2E4000
unkown
page read and write
379E000
direct allocation
page execute and read and write
C00000
heap
page read and write
2780000
heap
page read and write
2F09000
stack
page read and write
7802000
unkown
page read and write
8EB8000
unkown
page read and write
10B1000
heap
page read and write
730A000
unkown
page read and write
3118000
stack
page read and write
51E3000
unkown
page read and write
C1DD000
unkown
page read and write
7A50000
unkown
page readonly
3274000
heap
page read and write
7FF556FE3000
unkown
page readonly
128D000
heap
page read and write
7FF5575D5000
unkown
page readonly
7FF55745B000
unkown
page readonly
C374000
unkown
page read and write
7FF55704A000
unkown
page readonly
D14000
heap
page read and write
C22F000
unkown
page read and write
C3F7000
unkown
page read and write
3C60000
direct allocation
page read and write
3BE3000
direct allocation
page read and write
9086000
unkown
page read and write
7FF55726C000
unkown
page readonly
303C000
stack
page read and write
8810000
unkown
page readonly
8DFE000
unkown
page read and write
32B9000
unkown
page read and write
7FF546F35000
unkown
page readonly
77F0000
unkown
page read and write
7FF55703C000
unkown
page readonly
A222000
unkown
page read and write
7FF557037000
unkown
page readonly
7FF557042000
unkown
page readonly
1086000
heap
page read and write
32B9000
unkown
page read and write
C0F9000
unkown
page read and write
732B000
unkown
page read and write
7FF5571E2000
unkown
page readonly
8EF5000
unkown
page read and write
7FF55750F000
unkown
page readonly
C1DB000
unkown
page read and write
F430000
unkown
page read and write
7FF55710F000
unkown
page readonly
7FF557103000
unkown
page readonly
8EDD000
unkown
page read and write
3350000
trusted library allocation
page read and write
A218000
unkown
page read and write
7FF55733F000
unkown
page readonly
3DBD000
direct allocation
page read and write
3274000
heap
page read and write
7FF55753D000
unkown
page readonly
B040000
unkown
page readonly
7FF5570B5000
unkown
page readonly
7FF55714A000
unkown
page readonly
32C7000
unkown
page read and write
8D5D000
stack
page read and write
B070000
unkown
page read and write
B080000
unkown
page read and write
900000
unkown
page readonly
7FF55730C000
unkown
page readonly
798E000
stack
page read and write
8D6A000
unkown
page read and write
C1E9000
unkown
page read and write
7FF55760F000
unkown
page readonly
7140000
unkown
page read and write
1132000
heap
page read and write
2C06000
stack
page read and write
47F000
unkown
page write copy
34F4000
heap
page read and write
8AE6000
unkown
page read and write
7D8D000
stack
page read and write
8ED5000
unkown
page read and write
90CF000
unkown
page read and write
7FF556F9E000
unkown
page readonly
7FF556E85000
unkown
page readonly
C328000
unkown
page read and write
A8D7000
unkown
page read and write
7A80000
unkown
page readonly
72FC000
unkown
page read and write
8EC5000
unkown
page read and write
7FF5574F4000
unkown
page readonly
B1A0000
unkown
page read and write
3249000
unkown
page read and write
7FF557583000
unkown
page readonly
2C8F000
stack
page read and write
A0BD000
unkown
page read and write
8ECE000
unkown
page read and write
A118000
unkown
page read and write
477D000
unkown
page read and write
3D8D000
direct allocation
page read and write
7BC1000
unkown
page read and write
A0FC000
unkown
page read and write
7DF468981000
unkown
page execute read
C04B000
unkown
page read and write
7FF557627000
unkown
page readonly
A0A5000
unkown
page read and write
2E13000
heap
page read and write
3DB9000
direct allocation
page read and write
C10000
unkown
page read and write
3274000
heap
page read and write
9F0000
unkown
page readonly
3274000
heap
page read and write
C214000
unkown
page read and write
7FF5575D5000
unkown
page readonly
7FF557607000
unkown
page readonly
319C000
stack
page read and write
330A000
unkown
page read and write
46F6000
unkown
page read and write
B00000
heap
page read and write
7B99000
stack
page read and write
1080000
unkown
page readonly
There are 1475 hidden memdumps, click here to show them.