IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Vecchio debito_SKTGH_465585484754.xlsx
CDFV2 Encrypted
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vbc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\Desktop\~$Vecchio debito_SKTGH_465585484754.xlsx
data
dropped
 malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2DB33C54.png
PNG image data, 139 x 180, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\36C7354D.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x160, frames 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\50F3279B.png
PNG image data, 413 x 220, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\537A6982.png
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\549B41E3.png
PNG image data, 458 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5BDF62EA.png
PNG image data, 139 x 180, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5CFCF9D6.png
PNG image data, 139 x 180, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\74ED78E9.png
PNG image data, 413 x 220, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\974DCA88.png
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A0578845.png
PNG image data, 458 x 211, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AC1E237C.png
PNG image data, 139 x 180, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E50395A7.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EA49F3DF.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x160, frames 3
dropped
C:\Users\user\AppData\Local\Temp\~DF0F29F80801BE30A4.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF4803FEB401DB7C3E.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF89B48201BCEFC563.TMP
CDFV2 Encrypted
dropped
C:\Users\user\AppData\Local\Temp\~DFFC2F894EABD35FFF.TMP
data
dropped
There are 11 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
 malicious
C:\Users\Public\vbc.exe
"C:\Users\Public\vbc.exe"
malicious
C:\Users\Public\vbc.exe
C:\Users\Public\vbc.exe
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\cscript.exe
C:\Windows\SysWOW64\cscript.exe
 malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Users\Public\vbc.exe"

URLs

Name
IP
Malicious
http://www.hevenorfeed.com/yrcy/?jdfhnl=EvxTDFUPJ2-xUnMP&aN=H+0J8LIoM8xANCuc1KZRmbjixQokhoGpIPkQBETMRHrzrLtxV7SOMJUbaHNEQWxSCcCQ4A==
216.177.167.5
 malicious
http://www.laqueenbeautybar.supplies/yrcy/?jdfhnl=EvxTDFUPJ2-xUnMP&aN=v3r6hW97z/ZOf9TDdHCkxkGayxrL9igaQBwyCSAaMVPNp+0Lw1V9xr9SflbU5XGqGaZNIw==
206.188.192.2
 malicious
http://103.167.92.57/CRC/vbc.exe
103.167.92.57
 malicious
http://www.dairatwsl.com/yrcy/?aN=e/RF5Wkvcu2kD6Q92hYVOLL0JiY85m+wPQ7mJBVhAbkMJKQBASQfBcFHsaVDtw323W8DmA==&jdfhnl=EvxTDFUPJ2-xUnMP
162.241.244.46
 malicious
www.drmichaelirvine.com/yrcy/
malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
http://www.windows.com/pctv.
unknown
http://java.sun.com
unknown
http://investor.msn.com
unknown
http://www.msnbc.com/news/ticker.txt
unknown
http://blog.iandreev.com/
unknown
http://www.icra.org/vocabulary/.
unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
http://investor.msn.com/
unknown
http://blog.iandreev.com
unknown
http://www.piriform.com/ccleaner
unknown
http://www.%s.comPA
unknown
http://www.autoitscript.com/autoit3
unknown
https://support.mozilla.org
unknown
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
http://www.hotmail.com/oe
unknown
http://servername/isapibackend.dll
unknown
There are 13 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.laqueenbeautybar.supplies
206.188.192.2
 malicious
dairatwsl.com
162.241.244.46
 malicious
www.hevenorfeed.com
216.177.167.5
 malicious
www.vacoveco.com
unknown
 malicious
www.dairatwsl.com
unknown
 malicious

IPs

IP
Domain
Country
Malicious
162.241.244.46
dairatwsl.com
United States
malicious
206.188.192.2
www.laqueenbeautybar.supplies
United States
malicious
216.177.167.5
www.hevenorfeed.com
United States
malicious
103.167.92.57
unknown
unknown
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
"l,
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2DC89
2DC89
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
`t,
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\32848
32848
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3424D
3424D
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Item 1
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 21
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\32848
32848
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath
There are 31 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1C0000
unclassified section
page execute and read and write
 malicious
70000
system
page execute and read and write
 malicious
140000
unclassified section
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
97CB000
unkown
page execute and read and write
 malicious
24C1000
trusted library allocation
page read and write
 malicious
97CB000
unkown
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
34C9000
trusted library allocation
page read and write
 malicious
1D0000
trusted library allocation
page read and write
 malicious
5B0000
unclassified section
page execute and read and write
 malicious
2550000
trusted library allocation
page read and write
 malicious
32A9000
heap
page read and write
5390000
heap
page read and write
69AF000
stack
page read and write
31D000
heap
page read and write
154000
heap
page read and write
FC0000
trusted library allocation
page read and write
729A000
stack
page read and write
6A75000
trusted library allocation
page read and write
243000
heap
page read and write
4890000
trusted library allocation
page read and write
447A000
unkown
page read and write
6B02000
trusted library allocation
page read and write
460B000
unkown
page read and write
48A0000
heap
page read and write
243000
heap
page read and write
4DD0000
heap
page read and write
29E0000
unkown
page read and write
674000
heap
page read and write
74B4000
heap
page read and write
5B0000
unkown
page readonly
673A000
trusted library allocation
page read and write
2520000
unkown
page read and write
8437000
unkown
page read and write
73B9000
stack
page read and write
2A50000
unkown
page read and write
45CF000
unkown
page read and write
430000
unkown
page readonly
57EF000
stack
page read and write
1B83000
heap
page read and write
6D48000
stack
page read and write
887000
trusted library allocation
page execute and read and write
A01000
trusted library allocation
page execute and read and write
79F0000
heap
page read and write
6F50000
trusted library allocation
page read and write
4C0000
heap
page read and write
528B000
trusted library allocation
page read and write
F80000
heap
page read and write
6579000
trusted library allocation
page read and write
2540000
trusted library allocation
page read and write
2CC7000
unkown
page readonly
255000
heap
page read and write
C20000
trusted library allocation
page read and write
8C20000
unkown
page read and write
5360000
unkown
page read and write
41E8000
stack
page read and write
29D0000
unkown
page read and write
2300000
trusted library allocation
page read and write
4DD0000
heap
page read and write
2F98000
unkown
page read and write
2500000
unkown
page readonly
E0000
heap
page read and write
71CC000
stack
page read and write
2F98000
unkown
page read and write
28FA000
unclassified section
page read and write
5C0000
trusted library allocation
page read and write
6AF7000
trusted library allocation
page read and write
5146000
trusted library allocation
page read and write
5E0000
trusted library allocation
page read and write
2740000
unkown
page readonly
4E5E000
stack
page read and write
29B000
heap
page read and write
3D4B000
stack
page read and write
1F0000
trusted library allocation
page execute and read and write
8C3E000
unkown
page read and write
30D0000
unkown
page readonly
8320000
unkown
page read and write
F10000
trusted library allocation
page read and write
4AF0000
unkown
page readonly
4575000
unkown
page read and write
3D50000
unkown
page read and write
728E000
stack
page read and write
170000
trusted library allocation
page read and write
37B000
heap
page read and write
29C0000
unkown
page read and write
7E1E000
stack
page read and write
81AE000
stack
page read and write
2120000
unkown
page read and write
10B4000
unkown
page write copy
20B6000
unkown
page read and write
56F000
stack
page read and write
2A20000
unkown
page read and write
32A5000
heap
page read and write
5410000
heap
page read and write
1CE000
stack
page read and write
620000
unclassified section
page execute and read and write
4A7E000
stack
page read and write
68BE000
trusted library allocation
page read and write
31D000
heap
page read and write
23D000
heap
page read and write
10B6000
unkown
page readonly
657000
heap
page read and write
45A1000
unkown
page read and write
6660000
trusted library allocation
page read and write
2A40000
unkown
page read and write
4D40000
unkown
page readonly
25C0000
trusted library allocation
page read and write
5240000
trusted library allocation
page read and write
74D3000
heap
page read and write
845A000
unkown
page read and write
29D0000
unkown
page read and write
74B0000
heap
page read and write
D3E000
trusted library allocation
page read and write
6688000
trusted library allocation
page read and write
556F000
stack
page read and write
728E000
stack
page read and write
780000
trusted library allocation
page execute and read and write
75B0000
trusted library allocation
page read and write
4B00000
unkown
page readonly
656C000
trusted library allocation
page read and write
729A000
stack
page read and write
4D50000
unkown
page readonly
618E000
trusted library allocation
page read and write
36B000
unkown
page read and write
6C92000
stack
page read and write
3DF8000
unkown
page read and write
69AF000
stack
page read and write
729A000
stack
page read and write
C10000
trusted library allocation
page read and write
71CC000
stack
page read and write
2A10000
unkown
page read and write
4D70000
unkown
page readonly
21BF000
stack
page read and write
1BE0000
unkown
page readonly
661B000
trusted library allocation
page read and write
1B50000
unkown
page read and write
E40000
trusted library allocation
page read and write
2B6B000
unclassified section
page read and write
4F90000
trusted library section
page read and write
688000
heap
page read and write
73B9000
stack
page read and write
64C4000
trusted library allocation
page read and write
10000
heap
page read and write
7EFE0000
unkown
page readonly
6463000
trusted library allocation
page read and write
6A80000
trusted library allocation
page read and write
6F17000
trusted library allocation
page read and write
249000
heap
page read and write
4DB1000
unkown
page read and write
34E000
unkown
page read and write
651F000
trusted library allocation
page read and write
43B0000
heap
page read and write
2A10000
unkown
page read and write
612B000
trusted library allocation
page read and write
8456000
unkown
page read and write
5B0000
unkown
page readonly
4AAD000
stack
page read and write
4F8E000
stack
page read and write
230000
heap
page read and write
2C7000
heap
page read and write
62C2000
trusted library allocation
page read and write
4300000
stack
page read and write
4C9F000
stack
page read and write
67F000
stack
page read and write
457A000
unkown
page read and write
208000
stack
page read and write
45CB000
unkown
page read and write
50ED000
trusted library allocation
page read and write
1065000
unkown
page execute read
2560000
trusted library allocation
page read and write
468000
trusted library allocation
page read and write
7D20000
heap
page read and write
3130000
unkown
page readonly
FF0000
unkown
page readonly
7D20000
heap
page read and write
880000
trusted library allocation
page execute and read and write
4450000
unkown
page read and write
30C0000
unkown
page read and write
790000
trusted library allocation
page execute and read and write
50000
unkown
page readonly
2130000
unkown
page read and write
1D7000
stack
page read and write
24F0000
unkown
page readonly
48AC000
heap
page read and write
7CFE000
stack
page read and write
5390000
heap
page read and write
C00000
trusted library allocation
page read and write
50EC000
trusted library allocation
page read and write
2100000
unkown
page readonly
26E4000
trusted library allocation
page execute and read and write
28E9000
unkown
page read and write
5B0000
unkown
page readonly
4300000
stack
page read and write
304000
heap
page read and write
457A000
unkown
page read and write
66A5000
trusted library allocation
page read and write
237000
trusted library allocation
page execute and read and write
2A40000
unkown
page read and write
E4000
heap
page read and write
2A90000
unkown
page read and write
66EB000
trusted library allocation
page read and write
2AF7000
unclassified section
page read and write
6F10000
trusted library allocation
page read and write
1BE0000
unkown
page readonly
3D90000
unkown
page read and write
2EC1000
unkown
page read and write
2110000
unkown
page read and write
39C000
stack
page read and write
96A3000
unkown
page read and write
8720000
unkown
page read and write
2130000
unkown
page read and write
63FC000
trusted library allocation
page read and write
456F000
unkown
page read and write
4BB0000
heap
page read and write
834B000
unkown
page read and write
233E000
stack
page read and write
2A30000
unkown
page read and write
7839000
stack
page read and write
36F000
unkown
page read and write
20B6000
unkown
page read and write
29C0000
unkown
page read and write
6BEC000
trusted library allocation
page read and write
8720000
unkown
page read and write
4E5E000
stack
page read and write
28E9000
unkown
page read and write
3CC0000
unkown
page readonly
8374000
unkown
page read and write
36F000
unkown
page read and write
3D50000
unkown
page read and write
399000
heap
page read and write
5410000
heap
page read and write
263C000
unkown
page read and write
6D48000
stack
page read and write
3145000
heap
page read and write
4DC0000
unkown
page read and write
4D70000
unkown
page readonly
C5E000
stack
page read and write
30F0000
unkown
page readonly
6AB8000
trusted library allocation
page read and write
83F8000
unkown
page read and write
7E1E000
stack
page read and write
96A3000
unkown
page read and write
680000
heap
page read and write
744D000
stack
page read and write
7BD0000
heap
page read and write
4C7A000
heap
page read and write
FF2000
unkown
page execute read
9F0000
trusted library allocation
page execute and read and write
1B50000
unkown
page read and write
2F70000
unkown
page read and write
73BB000
stack
page read and write
4389000
stack
page read and write
449C000
unkown
page read and write
67F8000
trusted library allocation
page read and write
74DD000
trusted library allocation
page read and write
210000
heap
page read and write
34E000
unkown
page read and write
617F000
trusted library allocation
page read and write
2AA0000
unkown
page read and write
170000
trusted library allocation
page read and write
6C97000
stack
page read and write
1B65000
heap
page read and write
6A45000
trusted library allocation
page read and write
5132000
trusted library allocation
page read and write
2AE0000
unkown
page readonly
FF0000
unkown
page readonly
980B000
unkown
page execute and read and write
32A0000
heap
page read and write
2A50000
unkown
page read and write
8374000
unkown
page read and write
30C0000
unkown
page read and write
21D000
stack
page read and write
FF0000
unkown
page readonly
44E7000
unkown
page read and write
4DC0000
unkown
page read and write
3D50000
unkown
page read and write
4D70000
unkown
page readonly
7B50000
heap
page read and write
FF2000
unkown
page execute read
7F49000
stack
page read and write
6D48000
stack
page read and write
27E0000
unkown
page read and write
4B00000
unkown
page readonly
23D000
heap
page read and write
8320000
unkown
page read and write
3140000
heap
page read and write
6490000
trusted library allocation
page read and write
9760000
unkown
page execute and read and write
10B6000
unkown
page readonly
66D7000
trusted library allocation
page read and write
4E60000
unkown
page read and write
7CFE000
stack
page read and write
A9F000
stack
page read and write
970000
trusted library allocation
page read and write
330000
heap
page read and write
30000
trusted library allocation
page read and write
27C0000
unkown
page read and write
4575000
unkown
page read and write
2F70000
unkown
page read and write
7B40000
stack
page read and write
7B50000
heap
page read and write
8E5E000
stack
page read and write
7B50000
heap
page read and write
79F0000
heap
page read and write
8451000
unkown
page read and write
371000
unkown
page read and write
6B3B000
trusted library allocation
page read and write
3D40000
stack
page read and write
3E0000
heap
page read and write
970000
trusted library allocation
page read and write
661E000
trusted library allocation
page read and write
637E000
trusted library allocation
page read and write
83CD000
unkown
page read and write
6780000
trusted library allocation
page read and write
6F7000
trusted library allocation
page read and write
6ED4000
trusted library allocation
page read and write
6694000
trusted library allocation
page read and write
23D000
stack
page read and write
3145000
heap
page read and write
FF2000
unkown
page execute read
62F2000
trusted library allocation
page read and write
57A000
trusted library allocation
page read and write
7B40000
stack
page read and write
7B4B000
stack
page read and write
75C2000
trusted library allocation
page read and write
4E5E000
stack
page read and write
6A7E000
trusted library allocation
page read and write
301E000
stack
page read and write
4D30000
unkown
page readonly
371000
unkown
page read and write
3CA0000
unkown
page read and write
447A000
unkown
page read and write
560000
trusted library allocation
page read and write
4D20000
unkown
page execute and read and write
FF0000
unkown
page readonly
33C000
heap
page read and write
2740000
unkown
page readonly
130000
trusted library allocation
page read and write
2A60000
unkown
page read and write
9945000
heap
page read and write
170000
trusted library allocation
page read and write
31FF000
stack
page read and write
10B6000
unkown
page readonly
FF0000
unkown
page readonly
3E50000
unkown
page readonly
4B6E000
stack
page read and write
32A5000
heap
page read and write
170000
trusted library allocation
page read and write
20DA000
unkown
page read and write
16B000
stack
page read and write
2110000
unkown
page read and write
170000
trusted library allocation
page read and write
6110000
trusted library allocation
page read and write
20B6000
unkown
page read and write
5176000
trusted library allocation
page read and write
556F000
stack
page read and write
227000
trusted library allocation
page execute and read and write
6B43000
trusted library allocation
page read and write
3CC0000
unkown
page readonly
71CC000
stack
page read and write
6BBE000
stack
page read and write
4A0000
trusted library allocation
page read and write
30E0000
unkown
page readonly
1D7000
stack
page read and write
237000
heap
page read and write
2533000
unkown
page read and write
66D9000
trusted library allocation
page read and write
5270000
unkown
page execute read
750000
unkown
page readonly
FF2000
unkown
page execute read
834B000
unkown
page read and write
29F0000
unkown
page read and write
6B41000
trusted library allocation
page read and write
7839000
stack
page read and write
30F0000
unkown
page readonly
2EF000
heap
page read and write
596E000
stack
page read and write
8374000
unkown
page read and write
32A5000
heap
page read and write
3D50000
unkown
page read and write
4D80000
unkown
page readonly
678E000
trusted library allocation
page read and write
77B9000
stack
page read and write
32A9000
heap
page read and write
4AAD000
stack
page read and write
2CC7000
unkown
page readonly
1AC000
stack
page read and write
6CDA000
trusted library allocation
page read and write
6B39000
trusted library allocation
page read and write
50000
unkown
page readonly
79BF000
stack
page read and write
237000
heap
page read and write
5162000
trusted library allocation
page read and write
213B000
unkown
page read and write
6BBE000
stack
page read and write
9624000
unkown
page read and write
3140000
heap
page read and write
520000
heap
page execute and read and write
6E50000
heap
page read and write
6691000
trusted library allocation
page read and write
2F70000
unkown
page read and write
36B000
unkown
page read and write
60000
unkown
page readonly
2550000
unkown
page read and write
1B60000
heap
page read and write
8320000
unkown
page read and write
66D2000
trusted library allocation
page read and write
2550000
unkown
page read and write
10B6000
unkown
page readonly
D0000
unkown
page readonly
683000
heap
page read and write
2740000
unkown
page readonly
20000
trusted library allocation
page read and write
8437000
unkown
page read and write
212B000
unkown
page read and write
4450000
unkown
page read and write
20000
heap
page read and write
3CA0000
unkown
page read and write
6E0000
trusted library allocation
page read and write
4C7A000
heap
page read and write
4D20000
unkown
page execute and read and write
48FE000
stack
page read and write
43B0000
heap
page read and write
8720000
unkown
page read and write
4D60000
unkown
page readonly
69AF000
stack
page read and write
26E7000
trusted library allocation
page execute and read and write
DEF000
stack
page read and write
7EAE000
stack
page read and write
4308000
stack
page read and write
24F0000
unkown
page readonly
ED0000
system
page execute and read and write
645F000
trusted library allocation
page read and write
6606000
trusted library allocation
page read and write
5132000
trusted library allocation
page read and write
32A5000
heap
page read and write
237000
heap
page read and write
654F000
trusted library allocation
page read and write
10000
heap
page read and write
9963000
heap
page read and write
449C000
unkown
page read and write
900000
trusted library allocation
page execute and read and write
782F000
stack
page read and write
430000
unkown
page readonly
9624000
unkown
page read and write
49C0000
trusted library allocation
page read and write
A00000
trusted library allocation
page read and write
6437000
trusted library allocation
page read and write
5176000
trusted library allocation
page read and write
FF0000
unkown
page readonly
23D000
heap
page read and write
6878000
trusted library allocation
page read and write
2740000
unkown
page readonly
5040000
heap
page execute and read and write
61CE000
trusted library allocation
page read and write
170000
trusted library allocation
page read and write
28E9000
unkown
page read and write
9963000
heap
page read and write
631B000
trusted library allocation
page read and write
21BF000
stack
page read and write
751B000
trusted library allocation
page read and write
232000
trusted library allocation
page read and write
10000
heap
page read and write
15B000
heap
page read and write
625E000
trusted library allocation
page read and write
3D4B000
stack
page read and write
4E6F000
stack
page read and write
F0000
unkown
page read and write
30E0000
unkown
page readonly
728E000
stack
page read and write
6951000
trusted library allocation
page read and write
2A30000
unkown
page read and write
31FF000
stack
page read and write
4513000
unkown
page read and write
6686000
trusted library allocation
page read and write
D0000
unkown
page readonly
20D000
stack
page read and write
2646000
unkown
page read and write
249000
heap
page read and write
140000
unkown
page readonly
E3E000
stack
page read and write
7B4B000
stack
page read and write
4A0000
unclassified section
page execute and read and write
5F0000
heap
page execute and read and write
447A000
unkown
page read and write
2AA0000
unkown
page read and write
9945000
heap
page read and write
243000
heap
page read and write
1065000
unkown
page execute read
220000
unkown
page readonly
5176000
trusted library allocation
page read and write
330000
unkown
page read and write
235000
trusted library allocation
page execute and read and write
3D40000
stack
page read and write
29E0000
unkown
page read and write
7F49000
stack
page read and write
7EAE000
stack
page read and write
5107000
trusted library allocation
page read and write
1FD0000
unkown
page readonly
7839000
stack
page read and write
3C90000
unkown
page read and write
FF2000
unkown
page execute read
5124000
trusted library allocation
page read and write
E4000
heap
page read and write
10B4000
unkown
page write copy
140000
unkown
page readonly
2EE000
heap
page read and write
744D000
stack
page read and write
4D50000
unkown
page readonly
2750000
unkown
page read and write
45CF000
unkown
page read and write
29F0000
unkown
page read and write
309E000
stack
page read and write
95A3000
unkown
page read and write
69B7000
stack
page read and write
68D000
heap
page read and write
3A6000
heap
page read and write
6BBE000
stack
page read and write
69AF000
stack
page read and write
4C30000
unkown
page read and write
2533000
unkown
page read and write
3D90000
unkown
page read and write
4150000
unkown
page readonly
E0000
heap
page read and write
1C0000
heap
page read and write
6BBE000
stack
page read and write
67E000
heap
page read and write
230000
heap
page read and write
2540000
unkown
page read and write
960000
trusted library allocation
page read and write
6646000
trusted library allocation
page read and write
2A00000
unkown
page read and write
4D80000
unkown
page readonly
A10000
trusted library allocation
page read and write
FD0000
trusted library allocation
page read and write
4BB0000
heap
page read and write
728E000
stack
page read and write
2A70000
unkown
page read and write
5146000
trusted library allocation
page read and write
6D48000
stack
page read and write
1BE0000
unkown
page readonly
44E7000
unkown
page read and write
45CB000
unkown
page read and write
1E0000
unkown
page read and write
9723000
unkown
page read and write
45D6000
unkown
page read and write
5123000
trusted library allocation
page read and write
4160000
unkown
page read and write
669E000
trusted library allocation
page read and write
301E000
stack
page read and write
8C20000
unkown
page read and write
10B4000
unkown
page write copy
B9F000
stack
page read and write
34C1000
trusted library allocation
page read and write
36B000
unkown
page read and write
45CB000
unkown
page read and write
2943000
unkown
page read and write
61E1000
trusted library allocation
page read and write
6C97000
stack
page read and write
4D80000
unkown
page readonly
230000
heap
page read and write
6E50000
heap
page read and write
2551000
trusted library allocation
page read and write
8456000
unkown
page read and write
990000
trusted library allocation
page read and write
750000
unkown
page readonly
29C0000
unkown
page read and write
4AC0000
unkown
page read and write
1E0000
unkown
page read and write
30F0000
unkown
page readonly
4AC0000
unkown
page read and write
E8E000
stack
page read and write
71CC000
stack
page read and write
A70000
trusted library allocation
page execute and read and write
9963000
heap
page read and write
1B50000
unkown
page read and write
4308000
stack
page read and write
10B6000
unkown
page readonly
3D40000
stack
page read and write
7B40000
stack
page read and write
72EE000
trusted library allocation
page read and write
744D000
stack
page read and write
45ED000
unkown
page read and write
6411000
trusted library allocation
page read and write
50EC000
trusted library allocation
page read and write
36F000
unkown
page read and write
50000
unkown
page readonly
32A9000
heap
page read and write
79F0000
heap
page read and write
C00000
trusted library allocation
page read and write
5360000
unkown
page read and write
2E7000
heap
page read and write
42B000
heap
page read and write
83F8000
unkown
page read and write
2A90000
unkown
page read and write
170000
trusted library allocation
page read and write
6C97000
stack
page read and write
430000
unkown
page readonly
1B60000
heap
page read and write
4C70000
heap
page read and write
5390000
heap
page read and write
50C4000
trusted library allocation
page read and write
4D70000
unkown
page readonly
3CA0000
unkown
page read and write
10000
heap
page read and write
2AA0000
unkown
page read and write
1E0000
unkown
page read and write
1FA0000
trusted library allocation
page read and write
4650000
unkown
page readonly
8451000
unkown
page read and write
2A50000
unkown
page read and write
2C7000
heap
page read and write
4AAD000
stack
page read and write
8E5E000
stack
page read and write
2A80000
unkown
page read and write
8355000
unkown
page read and write
3B0000
trusted library allocation
page read and write
95A3000
unkown
page read and write
32AE000
heap
page read and write
81AE000
stack
page read and write
2A60000
unkown
page read and write
48B0000
trusted library allocation
page read and write
8C3E000
unkown
page read and write
77B9000
stack
page read and write
6AFD000
trusted library allocation
page read and write
6C92000
stack
page read and write
34E000
unkown
page read and write
6A96000
trusted library allocation
page read and write
1FD0000
unkown
page readonly
2943000
unkown
page read and write
2A90000
unkown
page read and write
8456000
unkown
page read and write
668C000
trusted library allocation
page read and write
4D80000
unkown
page readonly
6582000
trusted library allocation
page read and write
73B9000
stack
page read and write
32A0000
heap
page read and write
41D000
heap
page read and write
2A30000
unkown
page read and write
4D60000
unkown
page readonly
456F000
unkown
page read and write
E90000
trusted library allocation
page read and write
6167000
trusted library allocation
page read and write
2500000
unkown
page readonly
6E26000
trusted library allocation
page read and write
C10000
trusted library allocation
page read and write
5F0000
trusted library allocation
page read and write
230000
heap
page read and write
1B65000
heap
page read and write
212B000
unkown
page read and write
1FBD000
trusted library allocation
page read and write
2EC1000
unkown
page read and write
74D3000
heap
page read and write
447A000
unkown
page read and write
29C0000
unkown
page read and write
7D20000
heap
page read and write
330000
unkown
page read and write
73BB000
stack
page read and write
C20000
trusted library allocation
page read and write
9E0000
trusted library allocation
page read and write
4300000
stack
page read and write
6A60000
heap
page read and write
29B000
heap
page read and write
95E0000
unkown
page read and write
4650000
unkown
page readonly
4D60000
unkown
page readonly
2520000
unkown
page read and write
5340000
trusted library allocation
page read and write
890000
trusted library allocation
page execute and read and write
66EF000
trusted library allocation
page read and write
6496000
trusted library allocation
page read and write
110000
unkown
page read and write
2F78000
unkown
page read and write
456F000
unkown
page read and write
61FE000
trusted library allocation
page read and write
29D0000
unkown
page read and write
FF0000
unkown
page readonly
2450000
trusted library allocation
page read and write
237000
heap
page read and write
69B7000
stack
page read and write
D2E000
stack
page read and write | page guard
3E50000
unkown
page readonly
2AE0000
unkown
page readonly
67CB000
trusted library allocation
page read and write
1D7000
stack
page read and write
532E000
stack
page read and write
6514000
trusted library allocation
page read and write
30A8000
stack
page read and write
980B000
unkown
page execute and read and write
8C20000
unkown
page read and write
4DC0000
unkown
page read and write
29E0000
unkown
page read and write
9F0000
trusted library allocation
page read and write
6C39000
trusted library allocation
page read and write
9DE000
stack
page read and write
41E8000
stack
page read and write
5BE000
stack
page read and write
2554000
trusted library allocation
page read and write
6193000
trusted library allocation
page read and write
910000
heap
page read and write
73BB000
stack
page read and write
243000
heap
page read and write
6310000
trusted library allocation
page read and write
2100000
unkown
page readonly
2A20000
unkown
page read and write
6C92000
stack
page read and write
2760000
trusted library allocation
page execute and read and write
20000
unkown
page readonly
67C000
heap
page read and write
2850000
trusted library allocation
page execute and read and write
8437000
unkown
page read and write
6111000
trusted library allocation
page read and write
4E60000
unkown
page read and write
E0000
trusted library allocation
page read and write
5390000
heap
page read and write
5146000
trusted library allocation
page read and write
7CFE000
stack
page read and write
10B4000
unkown
page write copy
211B000
unkown
page read and write
28E0000
trusted library allocation
page execute and read and write
8C3E000
unkown
page read and write
4DB1000
unkown
page read and write
44E7000
unkown
page read and write
2500000
unkown
page readonly
430000
unkown
page readonly
6FCF000
trusted library allocation
page read and write
371000
unkown
page read and write
FE0000
trusted library allocation
page read and write
27E0000
unkown
page read and write
2A40000
unkown
page read and write
23B000
trusted library allocation
page execute and read and write
75AA000
trusted library allocation
page read and write
10000
heap
page read and write
10B4000
unkown
page write copy
2540000
unkown
page read and write
67C000
heap
page read and write
FD9000
trusted library allocation
page read and write
1065000
unkown
page execute read
2550000
unkown
page read and write
1D7000
stack
page read and write
211B000
unkown
page read and write
66F2000
trusted library allocation
page read and write
6A60000
heap
page read and write
F0000
unkown
page read and write
4D30000
unkown
page readonly
24F0000
unkown
page readonly
263C000
unkown
page read and write
7CFE000
stack
page read and write
4DB1000
unkown
page read and write
5162000
trusted library allocation
page read and write
21D000
trusted library allocation
page execute and read and write
2120000
unkown
page read and write
212B000
unkown
page read and write
30F0000
unkown
page readonly
57D000
trusted library allocation
page read and write
1CE000
stack
page read and write
F1E000
trusted library allocation
page read and write
950000
trusted library allocation
page read and write
43B0000
heap
page read and write
2861000
trusted library allocation
page execute and read and write
95E0000
unkown
page read and write
D2F000
stack
page read and write
4160000
unkown
page read and write
2F78000
unkown
page read and write
4E5E000
stack
page read and write
FD000
trusted library allocation
page execute and read and write
649A000
trusted library allocation
page read and write
68D2000
trusted library allocation
page read and write
884000
trusted library allocation
page execute and read and write
6F61000
trusted library allocation
page read and write
656E000
trusted library allocation
page read and write
2AE0000
unkown
page readonly
45D6000
unkown
page read and write
83F8000
unkown
page read and write
2533000
unkown
page read and write
75C6000
trusted library allocation
page read and write
9723000
unkown
page read and write
212B000
unkown
page read and write
4389000
stack
page read and write
6401000
trusted library allocation
page read and write
4513000
unkown
page read and write
3CC0000
unkown
page readonly
8355000
unkown
page read and write
2110000
unkown
page read and write
2460000
trusted library allocation
page read and write
AB000
stack
page read and write
33A000
heap
page read and write
FF0000
unkown
page readonly
26D0000
trusted library allocation
page execute and read and write
456F000
unkown
page read and write
7E1E000
stack
page read and write
4389000
stack
page read and write
29E0000
unkown
page read and write
6919000
trusted library allocation
page read and write
4C7A000
heap
page read and write
32AE000
heap
page read and write
2F7000
heap
page read and write
3D40000
stack
page read and write
C20000
trusted library allocation
page read and write
45B4000
unkown
page read and write
74B4000
heap
page read and write
4450000
unkown
page read and write
6749000
trusted library allocation
page read and write
32A0000
heap
page read and write
65FE000
trusted library allocation
page read and write
49FE000
stack
page read and write
43A0000
unkown
page readonly
30D0000
unkown
page readonly
69B7000
stack
page read and write
4A20000
trusted library allocation
page read and write
2943000
unkown
page read and write
45A1000
unkown
page read and write
2A00000
unkown
page read and write
301E000
stack
page read and write
60000
unkown
page readonly
30D0000
unkown
page readonly
F70000
trusted library allocation
page read and write
6CB5000
trusted library allocation
page read and write
4D40000
unkown
page readonly
213B000
unkown
page read and write
2A10000
unkown
page read and write
30A8000
stack
page read and write
263C000
unkown
page read and write
423000
trusted library allocation
page read and write
729A000
stack
page read and write
3DF8000
unkown
page read and write
32AE000
heap
page read and write
D30000
trusted library allocation
page read and write
8E5E000
stack
page read and write
220000
unkown
page readonly
79F0000
heap
page read and write
23D000
heap
page read and write
2110000
unkown
page read and write
3D4B000
stack
page read and write
5E0000
trusted library allocation
page read and write
5E0000
trusted library allocation
page read and write
45B4000
unkown
page read and write
10B6000
unkown
page readonly
31D000
heap
page read and write
9945000
heap
page read and write
25C3000
unkown
page read and write
4B00000
unkown
page readonly
255000
heap
page read and write
5360000
unkown
page read and write
25E0000
trusted library allocation
page execute and read and write
9624000
unkown
page read and write
4D30000
unkown
page readonly
4450000
unkown
page read and write
63FA000
trusted library allocation
page read and write
4B9D000
stack
page read and write
330000
unkown
page read and write
FF2000
unkown
page execute read
6B56000
trusted library allocation
page read and write
1CE000
stack
page read and write
532E000
stack
page read and write
2100000
unkown
page readonly
50E8000
trusted library allocation
page read and write
2CC7000
unkown
page readonly
5BC000
stack
page read and write
4AC0000
unkown
page read and write
665E000
trusted library allocation
page read and write
6C92000
stack
page read and write
314000
heap
page read and write
57EE000
stack
page read and write | page guard
4D20000
unkown
page execute and read and write
6D40000
stack
page read and write
222000
trusted library allocation
page read and write
66E5000
trusted library allocation
page read and write
20000
unkown
page readonly
100000
heap
page read and write
532E000
stack
page read and write
45BF000
unkown
page read and write
220000
unkown
page readonly
4389000
stack
page read and write
4870000
trusted library allocation
page read and write
2A50000
unkown
page read and write
211B000
unkown
page read and write
2F20000
unkown
page read and write
2AA0000
unkown
page read and write
28E9000
unkown
page read and write
3C90000
unkown
page read and write
2A00000
unkown
page read and write
21BF000
stack
page read and write
2C7000
heap
page read and write
31FF000
stack
page read and write
67BC000
trusted library allocation
page read and write
21BF000
stack
page read and write
41E8000
stack
page read and write
10000
heap
page read and write
9940000
heap
page read and write
2F98000
unkown
page read and write
1C6000
heap
page read and write
30C0000
unkown
page read and write
27A0000
unkown
page readonly
244F000
stack
page read and write
170000
trusted library allocation
page read and write
249000
heap
page read and write
110000
unkown
page read and write
2120000
unkown
page read and write
74B0000
heap
page read and write
1065000
unkown
page execute read
7BD0000
heap
page read and write
45CB000
unkown
page read and write
45BE000
unkown
page read and write
5109000
trusted library allocation
page read and write
D0000
unkown
page readonly
2F98000
unkown
page read and write
2750000
unkown
page read and write
5410000
heap
page read and write
6430000
trusted library allocation
page read and write
4160000
unkown
page read and write
96E0000
unkown
page read and write
4160000
unkown
page read and write
2120000
unkown
page read and write
6A3B000
trusted library allocation
page read and write
74D3000
heap
page read and write
10000
heap
page read and write
83CD000
unkown
page read and write
28D0000
trusted library allocation
page execute and read and write
74B4000
heap
page read and write
79BF000
stack
page read and write
5162000
trusted library allocation
page read and write
10B6000
unkown
page readonly
6A33000
trusted library allocation
page read and write
F4000
trusted library allocation
page read and write
687000
heap
page read and write
642A000
trusted library allocation
page read and write
27E0000
unkown
page read and write
10B6000
unkown
page readonly
2E0000
heap
page read and write
140000
unkown
page readonly
6AFA000
trusted library allocation
page read and write
4D50000
unkown
page readonly
211B000
unkown
page read and write
45A1000
unkown
page read and write
10B4000
unkown
page write copy
2500000
unkown
page readonly
6A60000
heap
page read and write
4300000
stack
page read and write
6657000
trusted library allocation
page read and write
6587000
trusted library allocation
page read and write
10B4000
unkown
page write copy
30C0000
unkown
page read and write
487000
heap
page read and write
6B18000
trusted library allocation
page read and write
2550000
unkown
page read and write
2A80000
unkown
page read and write
7BD0000
heap
page read and write
6807000
trusted library allocation
page read and write
36F000
unkown
page read and write
3140000
heap
page read and write
2F78000
unkown
page read and write
9760000
unkown
page execute and read and write
5D0000
heap
page read and write
5C0000
heap
page read and write
66CF000
trusted library allocation
page read and write
9723000
unkown
page read and write
6A94000
trusted library allocation
page read and write
2760000
unkown
page readonly
C00000
trusted library allocation
page execute and read and write
4513000
unkown
page read and write
31FF000
stack
page read and write
1B50000
unkown
page read and write
3CC0000
unkown
page readonly
650000
heap
page read and write
2760000
unkown
page readonly
6C97000
stack
page read and write
2870000
trusted library allocation
page execute and read and write
29B000
heap
page read and write
2760000
unkown
page readonly
170000
trusted library allocation
page read and write
69AB000
trusted library allocation
page read and write
FF2000
unkown
page execute read
2130000
unkown
page read and write
910000
trusted library allocation
page execute and read and write
20DA000
unkown
page read and write
10B4000
unkown
page write copy
68B000
heap
page read and write
4BB0000
heap
page read and write
45BE000
unkown
page read and write
4A4000
heap
page read and write
6A3E000
trusted library allocation
page read and write
6665000
trusted library allocation
page read and write
A07000
trusted library allocation
page execute and read and write
6619000
trusted library allocation
page read and write
4B9D000
stack
page read and write
600000
trusted library allocation
page read and write
63B9000
trusted library allocation
page read and write
E0000
heap
page read and write
36B000
unkown
page read and write
246000
heap
page read and write
990000
trusted library section
page read and write
6ACB000
trusted library allocation
page read and write
8320000
unkown
page read and write
E4000
heap
page read and write
1E0000
unkown
page read and write
5080000
trusted library allocation
page read and write
49BF000
stack
page read and write
2770000
trusted library allocation
page execute and read and write
1065000
unkown
page execute read
79BF000
stack
page read and write
2A80000
unkown
page read and write
2513000
trusted library allocation
page read and write
457A000
unkown
page read and write
2533000
unkown
page read and write
2520000
unkown
page read and write
782F000
stack
page read and write
3D90000
unkown
page read and write
45B8000
unkown
page read and write
29D0000
unkown
page read and write
688C000
trusted library allocation
page read and write
45BE000
unkown
page read and write
95A3000
unkown
page read and write
69B7000
stack
page read and write
4308000
stack
page read and write
309000
heap
page read and write
77B9000
stack
page read and write
43A0000
unkown
page readonly
A50000
trusted library allocation
page read and write
2A60000
unkown
page read and write
A10000
trusted library allocation
page execute and read and write
980000
trusted library allocation
page read and write
11FF000
stack
page read and write
43B0000
heap
page read and write
60000
unkown
page readonly
6641000
trusted library allocation
page read and write
63D5000
trusted library allocation
page read and write
4790000
trusted library allocation
page read and write
27A0000
unkown
page readonly
96E0000
unkown
page read and write
258F000
stack
page read and write
66A7000
trusted library allocation
page read and write
4150000
unkown
page readonly
5C0000
trusted library allocation
page read and write
2750000
unkown
page read and write
5C0000
trusted library allocation
page execute and read and write
62AE000
trusted library allocation
page read and write
6272000
trusted library allocation
page read and write
2C72000
unclassified section
page read and write
110000
unkown
page read and write
4A30000
trusted library allocation
page read and write
2A60000
unkown
page read and write
2AE0000
unkown
page readonly
310000
heap
page read and write
309E000
stack
page read and write
17D000
stack
page read and write
D0000
unkown
page readonly
2520000
unkown
page read and write
7B4B000
stack
page read and write
2EC1000
unkown
page read and write
6580000
trusted library allocation
page read and write
5270000
unkown
page execute read
4DC0000
unkown
page read and write
6408000
trusted library allocation
page read and write
4B9D000
stack
page read and write
F0000
unkown
page read and write
551E000
stack
page read and write
6434000
trusted library allocation
page read and write
FA2000
heap
page read and write
20DA000
unkown
page read and write
7B50000
heap
page read and write
34E000
unkown
page read and write
2646000
unkown
page read and write
26E0000
trusted library allocation
page execute and read and write
652C000
trusted library allocation
page read and write
29F0000
unkown
page read and write
F5C000
stack
page read and write
4150000
unkown
page readonly
632F000
trusted library allocation
page read and write
6C75000
trusted library allocation
page read and write
8451000
unkown
page read and write
834B000
unkown
page read and write
73BB000
stack
page read and write
2646000
unkown
page read and write
4308000
stack
page read and write
1BE0000
unkown
page readonly
249000
heap
page read and write
2A70000
unkown
page read and write
95E0000
unkown
page read and write
4513000
unkown
page read and write
4C7A000
heap
page read and write
6B05000
trusted library allocation
page read and write
4D60000
unkown
page readonly
F60000
trusted library allocation
page read and write
1065000
unkown
page execute read
6A60000
heap
page read and write
54B000
unclassified section
page execute and read and write
10B6000
unkown
page readonly
6AC3000
trusted library allocation
page read and write
6710000
trusted library allocation
page read and write
7B40000
stack
page read and write
4D50000
unkown
page readonly
687000
heap
page read and write
255000
heap
page read and write
2646000
unkown
page read and write
4650000
unkown
page readonly
5410000
heap
page read and write
FF0000
unkown
page readonly
FF2000
unkown
page execute read
532E000
stack
page read and write
32AE000
heap
page read and write
664D000
trusted library allocation
page read and write
62B0000
trusted library allocation
page read and write
2A20000
unkown
page read and write
4AC0000
unkown
page read and write
FF2000
unkown
page execute read
45B4000
unkown
page read and write
45A1000
unkown
page read and write
2A40000
unkown
page read and write
4C70000
heap
page read and write
309E000
stack
page read and write
95A3000
unkown
page read and write
556F000
stack
page read and write
6617000
trusted library allocation
page read and write
4E60000
unkown
page read and write
8355000
unkown
page read and write
FF2000
unkown
page execute read
460B000
unkown
page read and write
23DD000
trusted library allocation
page read and write
1FD0000
unkown
page readonly
1065000
unkown
page execute read
27E0000
unkown
page read and write
3D4B000
stack
page read and write
30D0000
unkown
page readonly
7D20000
heap
page read and write
556F000
stack
page read and write
CAE000
stack
page read and write
140000
unkown
page readonly
20000
unkown
page readonly
64C0000
trusted library allocation
page read and write
6D40000
stack
page read and write
BB0000
trusted library allocation
page read and write
1B83000
heap
page read and write
5B0000
unkown
page readonly
1B60000
heap
page read and write
8F0000
trusted library allocation
page execute and read and write
2F0000
heap
page read and write
6B4B000
trusted library allocation
page read and write
460B000
unkown
page read and write
3130000
unkown
page readonly
1CE000
stack
page read and write
4880000
trusted library allocation
page read and write
FF2000
unkown
page execute read
3AC000
stack
page read and write
60000
unkown
page readonly
5D9000
heap
page read and write
43A0000
unkown
page readonly
480000
heap
page read and write
45D6000
unkown
page read and write
3E50000
unkown
page readonly
301E000
stack
page read and write
30A8000
stack
page read and write
213B000
unkown
page read and write
F3000
trusted library allocation
page execute and read and write
6F25000
trusted library allocation
page read and write
27A0000
unkown
page readonly
2F70000
unkown
page read and write
6260000
trusted library allocation
page read and write
45B4000
unkown
page read and write
E4000
heap
page read and write
5132000
trusted library allocation
page read and write
10000
heap
page read and write
8720000
unkown
page read and write
E0000
heap
page read and write
210000
heap
page read and write
150000
heap
page read and write
4C70000
heap
page read and write
330000
unkown
page read and write
664A000
trusted library allocation
page read and write
BFE000
stack
page read and write
1B65000
heap
page read and write
750000
unkown
page readonly
2A00000
unkown
page read and write
1B83000
heap
page read and write
2557000
trusted library allocation
page read and write
6603000
trusted library allocation
page read and write
73BA000
trusted library allocation
page read and write
41E8000
stack
page read and write
73B9000
stack
page read and write
29F0000
unkown
page read and write
2864000
trusted library allocation
page execute and read and write
25C3000
unkown
page read and write
56B000
trusted library allocation
page read and write
6EFA000
trusted library allocation
page read and write
510000
trusted library allocation
page read and write
760000
trusted library allocation
page read and write
2C7000
heap
page read and write
24F0000
unkown
page readonly
4B9D000
stack
page read and write
2EC1000
unkown
page read and write
3130000
unkown
page readonly
4150000
unkown
page readonly
83F8000
unkown
page read and write
FF0000
unkown
page readonly
2540000
unkown
page read and write
A20000
trusted library allocation
page read and write
30A8000
stack
page read and write
213B000
unkown
page read and write
535D000
trusted library allocation
page read and write
F0000
unkown
page read and write
25F0000
trusted library allocation
page execute and read and write
1B83000
heap
page read and write
A80000
trusted library allocation
page execute and read and write
2A70000
unkown
page read and write
4D30000
unkown
page readonly
10B6000
unkown
page readonly
6848000
trusted library allocation
page read and write
5107000
trusted library allocation
page read and write
8374000
unkown
page read and write
6A54000
trusted library allocation
page read and write
3C90000
unkown
page read and write
2A90000
unkown
page read and write
F84000
heap
page read and write
27C0000
unkown
page read and write
2F78000
unkown
page read and write
5270000
unkown
page execute read
74B0000
heap
page read and write
6F4000
trusted library allocation
page read and write
2515000
trusted library allocation
page read and write
45D6000
unkown
page read and write
960000
trusted library allocation
page read and write
96E0000
unkown
page read and write
649D000
trusted library allocation
page read and write
25C3000
unkown
page read and write
668E000
trusted library allocation
page read and write
4650000
unkown
page readonly
449C000
unkown
page read and write
50E8000
trusted library allocation
page read and write
4AF0000
unkown
page readonly
3E50000
unkown
page readonly
26F0000
trusted library allocation
page execute and read and write
20B6000
unkown
page read and write
5360000
unkown
page read and write
8355000
unkown
page read and write
45CF000
unkown
page read and write
6526000
trusted library allocation
page read and write
4D20000
unkown
page execute and read and write
27A0000
unkown
page readonly
A90000
heap
page read and write
2E9000
heap
page read and write
22A000
trusted library allocation
page execute and read and write
43A0000
unkown
page readonly
4D40000
unkown
page readonly
1FD0000
unkown
page readonly
50000
unkown
page readonly
3E7000
heap
page read and write
4B00000
unkown
page readonly
61F000
stack
page read and write
68D000
heap
page read and write
20000
unkown
page readonly
83CD000
unkown
page read and write
32A9000
heap
page read and write
4E60000
unkown
page read and write
2943000
unkown
page read and write
700000
trusted library allocation
page read and write
1065000
unkown
page execute read
2A20000
unkown
page read and write
7B4B000
stack
page read and write
10B4000
unkown
page write copy
6D40000
stack
page read and write
4BB0000
heap
page read and write
2750000
trusted library allocation
page execute and read and write
3CA0000
unkown
page read and write
30E0000
unkown
page readonly
870000
trusted library allocation
page execute and read and write
6405000
trusted library allocation
page read and write
2A80000
unkown
page read and write
1065000
unkown
page execute read
74D3000
heap
page read and write
6A04000
trusted library allocation
page read and write
9624000
unkown
page read and write
7BD0000
heap
page read and write
10B4000
unkown
page write copy
6D40000
stack
page read and write
509D000
trusted library allocation
page read and write
309E000
stack
page read and write
2CC7000
unkown
page readonly
240000
heap
page read and write
7F49000
stack
page read and write
1CE000
stack
page read and write
66AC000
trusted library allocation
page read and write
4DD0000
heap
page read and write
83CD000
unkown
page read and write
6F1000
trusted library allocation
page read and write
2A10000
unkown
page read and write
A04000
trusted library allocation
page execute and read and write
44E7000
unkown
page read and write
750000
unkown
page readonly
1065000
unkown
page execute read
4575000
unkown
page read and write
63DA000
trusted library allocation
page read and write
4C70000
heap
page read and write
3DF8000
unkown
page read and write
782F000
stack
page read and write
1B60000
heap
page read and write
10B4000
unkown
page write copy
220000
unkown
page readonly
110000
unkown
page read and write
E40000
trusted library allocation
page read and write
10000
heap
page read and write
77B9000
stack
page read and write
6A88000
trusted library allocation
page read and write
DB0000
trusted library allocation
page execute and read and write
4AF0000
unkown
page readonly
457A000
unkown
page read and write
5270000
unkown
page execute read
3DF8000
unkown
page read and write
6611000
trusted library allocation
page read and write
81AE000
stack
page read and write
290000
trusted library allocation
page execute and read and write
6A52000
trusted library allocation
page read and write
9940000
heap
page read and write
2100000
unkown
page readonly
4575000
unkown
page read and write
9940000
heap
page read and write
3D90000
unkown
page read and write
4AF0000
unkown
page readonly
4DD0000
heap
page read and write
ED0000
system
page execute and read and write
7839000
stack
page read and write
29B000
heap
page read and write
10B6000
unkown
page readonly
96A3000
unkown
page read and write
7EAE000
stack
page read and write
30E0000
unkown
page readonly
25C3000
unkown
page read and write
65FA000
trusted library allocation
page read and write
449C000
unkown
page read and write
834B000
unkown
page read and write
23DA000
trusted library allocation
page read and write
645D000
trusted library allocation
page read and write
744D000
stack
page read and write
FF0000
unkown
page readonly
500000
trusted library allocation
page execute and read and write
263C000
unkown
page read and write
95E0000
unkown
page read and write
6B0D000
trusted library allocation
page read and write
3145000
heap
page read and write
400000
remote allocation
page execute and read and write
6E50000
heap
page read and write
D30000
trusted library allocation
page read and write
81AE000
stack
page read and write
45CF000
unkown
page read and write
3C90000
unkown
page read and write
31D000
heap
page read and write
2540000
unkown
page read and write
782F000
stack
page read and write
2A30000
unkown
page read and write
32A0000
heap
page read and write
426000
heap
page read and write
2A70000
unkown
page read and write
1B65000
heap
page read and write
66A0000
trusted library allocation
page read and write
460B000
unkown
page read and write
75A5000
trusted library allocation
page read and write
20DA000
unkown
page read and write
74B0000
heap
page read and write
5241000
trusted library allocation
page read and write
5123000
trusted library allocation
page read and write
636A000
trusted library allocation
page read and write
371000
unkown
page read and write
1065000
unkown
page execute read
4DB1000
unkown
page read and write
210000
trusted library allocation
page read and write
2750000
unkown
page read and write
6E50000
heap
page read and write
2760000
unkown
page readonly
6AD7000
trusted library allocation
page read and write
255000
heap
page read and write
2130000
unkown
page read and write
6465000
trusted library allocation
page read and write
2867000
trusted library allocation
page execute and read and write
E8E000
stack
page read and write
72E000
stack
page read and write
6835000
trusted library allocation
page read and write
74B4000
heap
page read and write
6AC0000
trusted library allocation
page read and write
4D40000
unkown
page readonly
7E1E000
stack
page read and write
4AAD000
stack
page read and write
There are 1372 hidden memdumps, click here to show them.