IOC Report
PROFORMA INVOICE.xlsx

loading gif

Files

File Path
Type
Category
Malicious
PROFORMA INVOICE.xlsx
CDFV2 Encrypted
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vbc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Temp\tmp7282.tmp
XML 1.0 document, ASCII text
dropped
 malicious
C:\Users\user\AppData\Roaming\dDqpEdJEtzi.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\Desktop\~$PROFORMA INVOICE.xlsx
data
dropped
 malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\13D6C471.wmf
ms-windows metafont .wmf
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\19CBAA30.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4A37827C.wmf
ms-windows metafont .wmf
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6731B0A7.wmf
ms-windows metafont .wmf
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C335FFBE.wmf
ms-windows metafont .wmf
dropped
C:\Users\user\AppData\Local\Temp\~DF3A9718BB32954321.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF6BDEF7AB5AFB6A2C.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFB5BF52C584DCD599.TMP
CDFV2 Encrypted
dropped
C:\Users\user\AppData\Local\Temp\~DFC72BCB116CB2ED22.TMP
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\80IVWTICKZQK6HB0AL5T.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms (copy)
data
dropped
There are 7 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
 malicious
C:\Users\Public\vbc.exe
"C:\Users\Public\vbc.exe"
malicious
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\dDqpEdJEtzi.exe
 malicious
C:\Windows\SysWOW64\schtasks.exe
C:\Windows\System32\schtasks.exe" /Create /TN "Updates\dDqpEdJEtzi" /XML "C:\Users\user\AppData\Local\Temp\tmp7282.tmp
 malicious
C:\Users\Public\vbc.exe
C:\Users\Public\vbc.exe
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\mstsc.exe
C:\Windows\SysWOW64\mstsc.exe
 malicious
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\Firefox.exe
 malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding

URLs

Name
IP
Malicious
http://www.dems-clicks.com/n6g4/?Rju=oW3KVVYfOUtMWnx9E4fO+4eOl+SZoa0wNCifvEB8Y9jnCg3EyPPrm8173PHAA8seoyylQg==&ohA=4hdXYFAH
5.183.8.183
 malicious
http://198.12.89.166/55/vbc.exe
198.12.89.166
 malicious
www.admincost.com/n6g4/
malicious
http://www.employeebnsf.com/n6g4/?ohA=4hdXYFAH&Rju=/8Ga1vKBK5Zv+SvpDfc9R87wDDB6IH5FC+aL3DgDAA8ZWL71dgMkGG8I5dFlam/RYjehgQ==
185.53.179.171
 malicious
http://www.windows.com/pctv.
unknown
http://investor.msn.com
unknown
http://www.msnbc.com/news/ticker.txt
unknown
http://wellformedweb.org/CommentAPI/
unknown
http://198.12.89.166/55/vbc.exehhC:
unknown
http://www.iis.fhg.de/audioPA
unknown
http://www.piriform.com/ccleanerq
unknown
http://www.mozilla.com0
unknown
http://www.piriform.com/ccleaner1SPS0
unknown
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
http://www.hotmail.com/oe
unknown
http://treyresearch.net
unknown
http://198.12.89.166/55/vbc.exej
unknown
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
http://java.sun.com
unknown
http://www.icra.org/vocabulary/.
unknown
http://198.12.89.166/55/vbc.exen
unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
http://investor.msn.com/
unknown
http://www.piriform.com/ccleaner
unknown
http://computername/printers/printername/.printer
unknown
http://www.%s.comPA
unknown
http://www.autoitscript.com/autoit3
unknown
https://support.mozilla.org
unknown
http://www.piriform.com/ccleanerv
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
http://servername/isapibackend.dll
unknown
http://198.12.89.166/55/vbc.exeg
unknown
There are 23 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.employeebnsf.com
185.53.179.171
 malicious
www.dems-clicks.com
5.183.8.183
 malicious
www.cariniclinicalconsulting.com
104.21.75.67

IPs

IP
Domain
Country
Malicious
198.12.89.166
unknown
United States
malicious
5.183.8.183
www.dems-clicks.com
Germany
malicious
185.53.179.171
www.employeebnsf.com
Germany
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
$3*
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\6758D
6758D
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
oe*
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\6CAED
6CAED
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\6E9E2
6E9E2
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Item 1
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 21
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\6CAED
6CAED
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
There are 31 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
140000
unclassified section
page execute and read and write
 malicious
2721000
trusted library allocation
page read and write
 malicious
3842000
trusted library allocation
page read and write
 malicious
C0000
system
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
B6A9000
unkown
page execute and read and write
 malicious
C0000
system
page execute and read and write
 malicious
B6A9000
unkown
page execute and read and write
 malicious
380000
unclassified section
page execute and read and write
 malicious
C0000
system
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
230000
unclassified section
page execute and read and write
 malicious
260000
trusted library allocation
page read and write
 malicious
27CF000
trusted library allocation
page read and write
 malicious
6FC4000
heap
page read and write
2AB000
unkown
page read and write
44F0000
unkown
page readonly
B563000
heap
page read and write
6E8C000
stack
page read and write
1260000
unkown
page readonly
26BA000
unkown
page read and write
3990000
unkown
page readonly
79F0000
heap
page read and write
82CC000
unkown
page read and write
6FC4000
heap
page read and write
310000
heap
page read and write
570000
trusted library allocation
page read and write
B263000
unkown
page read and write
87FC000
unkown
page read and write
410C000
stack
page read and write
2CB000
unkown
page read and write
6F0000
trusted library allocation
page read and write
D40000
trusted library allocation
page read and write
4450000
unkown
page read and write
250000
unkown
page read and write
39D0000
unkown
page read and write
73EF000
trusted library allocation
page read and write
449D000
trusted library allocation
page read and write
2830000
trusted library allocation
page execute and read and write
2F0F000
stack
page read and write
2BFE000
stack
page read and write
7539000
stack
page read and write
1262000
unkown
page execute read
410C000
stack
page read and write
44B6000
unkown
page read and write
6C2F000
trusted library allocation
page read and write
39B0000
unkown
page read and write
2511000
trusted library allocation
page read and write
506000
unkown
page read and write
3A60000
unkown
page read and write
7934000
heap
page read and write
8675000
unkown
page read and write
8611000
unkown
page read and write
84D2000
unkown
page read and write
3FD000
heap
page read and write
3CF7000
unkown
page readonly
82C5000
unkown
page read and write
2821000
trusted library allocation
page execute and read and write
74BE000
stack
page read and write
2FC0000
heap
page read and write
410C000
stack
page read and write
D60000
trusted library allocation
page read and write
2F0000
heap
page read and write
85F2000
unkown
page read and write
2B20000
unkown
page read and write
44D0000
unkown
page readonly
407C000
unkown
page read and write
29B000
trusted library allocation
page execute and read and write
1DD0000
unkown
page readonly
42D0000
unkown
page read and write
10000
heap
page read and write
400000
remote allocation
page execute and read and write
7E0000
trusted library allocation
page read and write
210000
unkown
page readonly
88BD000
unkown
page read and write
7064000
heap
page read and write
756D000
stack
page read and write
27A000
unkown
page read and write
4385000
unkown
page read and write
85FA000
unkown
page read and write
6E0000
trusted library allocation
page read and write
290000
unkown
page readonly
28C0000
unkown
page read and write
487000
heap
page read and write
4C00000
heap
page read and write
414000
heap
page read and write
830000
unkown
page readonly
690000
unkown
page readonly
2FC9000
heap
page read and write
4120000
unkown
page read and write
A8B9000
stack
page read and write
3FB5000
stack
page read and write
2AB000
unkown
page read and write
8600000
unkown
page read and write
2CBC000
unkown
page read and write
A510000
stack
page read and write
8371000
unkown
page read and write
1262000
unkown
page execute read
181D000
system
page read and write
860E000
unkown
page read and write
2E9F000
stack
page read and write
5000000
trusted library allocation
page read and write
317000
heap
page read and write
4180000
unkown
page read and write
2FC9000
heap
page read and write
4180000
unkown
page read and write
10000
heap
page read and write
6D4B000
stack
page read and write
6C44000
trusted library allocation
page read and write
690000
heap
page read and write
350000
heap
page read and write
4210000
unkown
page read and write
2F9E000
stack
page read and write
4030000
unkown
page execute read
7060000
heap
page read and write
3A6000
heap
page read and write
3FC0000
unkown
page read and write
2420000
trusted library allocation
page read and write
4C10000
heap
page read and write
2A0000
unkown
page read and write
1D13000
unkown
page read and write
8807000
unkown
page read and write
8691000
unkown
page read and write
450000
unkown
page read and write
87E8000
unkown
page read and write
1260000
unkown
page readonly
B224000
unkown
page read and write
1314000
unkown
page readonly
2FC0000
heap
page read and write
3F0000
heap
page read and write
1C30000
unkown
page readonly
2FC5000
heap
page read and write
84EE000
unkown
page read and write
580000
trusted library allocation
page read and write
904000
heap
page read and write
51B2000
trusted library allocation
page read and write
2CB000
unkown
page read and write
8E0000
heap
page read and write
85F7000
unkown
page read and write
410C000
stack
page read and write
B1E0000
unkown
page read and write
335000
heap
page read and write
84C0000
unkown
page read and write
83A7000
unkown
page read and write
4550000
unkown
page readonly
335000
heap
page read and write
65B0000
trusted library allocation
page read and write
290000
heap
page read and write
4730000
trusted library allocation
page read and write
6E0000
trusted library allocation
page read and write
C20000
trusted library allocation
page read and write
4120000
unkown
page read and write
256000
unkown
page read and write
440D000
unkown
page read and write
87FF000
unkown
page read and write
59B8000
heap
page read and write
D0000
unkown
page readonly
85F7000
unkown
page read and write
4464000
unkown
page read and write
1260000
unkown
page readonly
924000
heap
page read and write
4210000
unkown
page read and write
4620000
unkown
page read and write
B2E0000
unkown
page read and write
88BD000
unkown
page read and write
7AF0000
trusted library allocation
page read and write
2643000
unkown
page read and write
12D000
stack
page read and write
4188000
unkown
page read and write
329000
heap
page read and write
2BB000
unkown
page read and write
45A0000
unkown
page readonly
6E0000
trusted library allocation
page read and write
82FD000
unkown
page read and write
44F0000
unkown
page readonly
18A000
stack
page read and write
37B000
heap
page read and write
690000
unkown
page readonly
8844000
unkown
page read and write
2960000
trusted library allocation
page read and write
1D30000
unkown
page read and write
860E000
unkown
page read and write
79F000
stack
page read and write
6A0000
trusted library allocation
page read and write
1D55000
heap
page read and write
2CA0000
unkown
page read and write
2CB9000
unkown
page read and write
2FCE000
heap
page read and write
2CA2000
unkown
page read and write
1C30000
unkown
page readonly
4C05000
heap
page read and write
719B000
stack
page read and write
317000
heap
page read and write
25F0000
unkown
page readonly
39A0000
unkown
page read and write
2F0000
heap
page read and write
488F000
stack
page read and write
2CA2000
unkown
page read and write
506000
unkown
page read and write
CC2000
system
page read and write
1D0000
trusted library allocation
page read and write
10FF000
stack
page read and write
AC60000
unkown
page read and write
2C2F000
stack
page read and write
39E0000
heap
page read and write
2CA5000
unkown
page read and write
8558000
unkown
page read and write
6F3F000
stack
page read and write
B2E0000
unkown
page read and write
71A0000
heap
page read and write
A95E000
stack
page read and write
42E000
unkown
page read and write
B263000
unkown
page read and write
26B0000
trusted library allocation
page execute and read and write
41E0000
unkown
page read and write
48E000
heap
page read and write
94A000
system
page read and write
1D30000
unkown
page read and write
3FD000
heap
page read and write
6E5A000
stack
page read and write
6D49000
stack
page read and write
450000
unkown
page read and write
2690000
trusted library allocation
page execute and read and write
869E000
unkown
page read and write
41C0000
unkown
page readonly
7E29000
stack
page read and write
8805000
unkown
page read and write
2CB9000
unkown
page read and write
4FFE000
stack
page read and write
851A000
unkown
page read and write
4423000
unkown
page read and write
580000
trusted library allocation
page read and write
430000
heap
page read and write
D70000
trusted library allocation
page read and write
2ADF000
stack
page read and write
627000
heap
page read and write
1314000
unkown
page readonly
1260000
unkown
page readonly
B545000
heap
page read and write
B1E0000
unkown
page read and write
82CC000
unkown
page read and write
4A4000
heap
page read and write
41A8000
unkown
page read and write
6C78000
stack
page read and write
8569000
unkown
page read and write
10000
heap
page read and write
49F0000
trusted library section
page read and write
1262000
unkown
page execute read
C3F000
stack
page read and write
D80000
trusted library allocation
page read and write
6FC0000
heap
page read and write
3FAF000
stack
page read and write
88FD000
unkown
page read and write
4040000
unkown
page readonly
670000
trusted library allocation
page read and write
110000
unkown
page read and write
6BF8000
stack
page read and write
830000
unkown
page readonly
22CE000
stack
page read and write
CD0000
trusted library allocation
page read and write
6F3F000
stack
page read and write
7EFE0000
unkown
page readonly
4464000
unkown
page read and write
41C0000
unkown
page readonly
46CC000
stack
page read and write
785E000
stack
page read and write
D0000
unkown
page readonly
290000
unkown
page readonly
8617000
unkown
page read and write
8337000
unkown
page read and write
4457000
unkown
page read and write
2E0000
heap
page read and write
7539000
stack
page read and write
CC2000
system
page read and write
44D0000
unkown
page readonly
12D000
trusted library allocation
page execute and read and write
65AE000
stack
page read and write
4A9000
heap
page read and write
7539000
stack
page read and write
445E000
stack
page read and write
4D5E000
stack
page read and write
A95E000
stack
page read and write
46CC000
stack
page read and write
4E44000
heap
page read and write
8558000
unkown
page read and write
6F3F000
stack
page read and write
C70000
trusted library allocation
page read and write
2FCE000
heap
page read and write
4210000
unkown
page read and write
D5F000
stack
page read and write
43F0000
unkown
page read and write
CC2000
system
page read and write
3D0000
trusted library allocation
page read and write
434F000
unkown
page read and write
3CF7000
unkown
page readonly
88F5000
unkown
page read and write
81F000
stack
page read and write
28F0000
unkown
page read and write
7083000
heap
page read and write
3FD000
heap
page read and write
63D1000
trusted library allocation
page read and write
6BF8000
stack
page read and write
AC7E000
unkown
page read and write
923000
heap
page read and write
37B000
heap
page read and write
6C1D000
trusted library allocation
page read and write
21DD000
trusted library allocation
page read and write
4457000
unkown
page read and write
7D1000
trusted library allocation
page read and write
3A6000
heap
page read and write
CD0000
trusted library allocation
page read and write
87BB000
unkown
page read and write
830000
heap
page read and write
2898000
stack
page read and write
28BA000
unclassified section
page read and write
B540000
heap
page read and write
2CA8000
unkown
page read and write
45A0000
unkown
page readonly
41C000
system
page execute and read and write
8371000
unkown
page read and write
4A7000
heap
page read and write
290000
trusted library allocation
page execute and read and write
879E000
unkown
page read and write
6FF000
heap
page read and write
4C00000
heap
page read and write
4C10000
heap
page read and write
88F5000
unkown
page read and write
3FAF000
stack
page read and write
6E4E000
stack
page read and write
3A70000
unkown
page read and write
841B000
unkown
page read and write
270000
trusted library allocation
page read and write
448F000
unkown
page read and write
8617000
unkown
page read and write
1260000
unkown
page readonly
284000
heap
page read and write
2CBC000
unkown
page read and write
10000
heap
page read and write
37B000
heap
page read and write
4220000
unkown
page readonly
63CD000
trusted library allocation
page read and write
850D000
unkown
page read and write
DE0000
heap
page read and write
6750000
unkown
page read and write
B563000
heap
page read and write
A510000
stack
page read and write
110000
trusted library allocation
page read and write
4030000
unkown
page execute read
2B50000
unkown
page readonly
8807000
unkown
page read and write
240000
heap
page read and write
4D5E000
stack
page read and write
2F1B000
stack
page read and write
B2A0000
unkown
page read and write
1D0000
trusted library allocation
page read and write
4F60000
heap
page read and write
650000
trusted library allocation
page read and write
79F0000
heap
page read and write
2CA0000
unkown
page read and write
4130000
unkown
page read and write
8569000
unkown
page read and write
510000
trusted library allocation
page read and write
124000
trusted library allocation
page read and write
5610000
trusted library allocation
page read and write
85FD000
unkown
page read and write
44D000
unkown
page read and write
2730000
trusted library allocation
page execute and read and write
85F4000
unkown
page read and write
700000
trusted library allocation
page read and write
2CDD000
stack
page read and write
680000
trusted library allocation
page read and write
8611000
unkown
page read and write
B60000
trusted library allocation
page execute and read and write
82D1000
unkown
page read and write
473F000
trusted library allocation
page read and write
4C05000
heap
page read and write
3FD0000
unkown
page read and write
4570000
unkown
page readonly
79FA000
heap
page read and write
2D0000
unkown
page readonly
2F1B000
stack
page read and write
6F9000
heap
page read and write
8521000
unkown
page read and write
9E0000
trusted library allocation
page execute and read and write
6FDF000
stack
page read and write
4C10000
heap
page read and write
4A50000
heap
page read and write
4110000
unkown
page read and write
1D73000
heap
page read and write
6750000
unkown
page read and write
46D0000
unkown
page readonly
1D50000
heap
page read and write
3EE000
stack
page read and write
AC60000
unkown
page read and write
65E000
heap
page read and write
3FC0000
unkown
page read and write
88BD000
unkown
page read and write
2B30000
unkown
page readonly
79FA000
heap
page read and write
28B0000
unkown
page readonly
4188000
unkown
page read and write
8820000
unkown
page read and write
84D2000
unkown
page read and write
4CDD000
stack
page read and write
2CBF000
unkown
page read and write
E0000
unkown
page read and write
94A000
system
page read and write
8608000
unkown
page read and write
6E5A000
stack
page read and write
2D0000
unkown
page readonly
84D2000
unkown
page read and write
B5C0000
unkown
page execute and read and write
719B000
stack
page read and write
449B000
unkown
page read and write
7E40000
heap
page read and write
7060000
heap
page read and write
244000
heap
page read and write
1262000
unkown
page execute read
766B000
stack
page read and write
33F000
stack
page read and write
8900000
unkown
page read and write
1314000
unkown
page readonly
B263000
unkown
page read and write
87E8000
unkown
page read and write
4CDD000
stack
page read and write
240000
heap
page read and write
2CAB000
unkown
page read and write
4317000
unkown
page read and write
7567000
heap
page read and write
5A0000
trusted library allocation
page read and write
4E62000
heap
page read and write
590000
trusted library allocation
page read and write
2643000
unkown
page read and write
3B10000
unkown
page readonly
87FF000
unkown
page read and write
560E000
stack
page read and write
8802000
unkown
page read and write
8864000
unkown
page read and write
2B30000
unkown
page readonly
1C0000
trusted library allocation
page read and write
2FC0000
heap
page read and write
2BB000
unkown
page read and write
28C0000
unkown
page read and write
3CF7000
unkown
page readonly
B2E0000
unkown
page read and write
4110000
unkown
page read and write
7953000
heap
page read and write
1F0000
unkown
page readonly
407C000
unkown
page read and write
84C0000
unkown
page read and write
7E29000
stack
page read and write
D40000
trusted library allocation
page read and write
7D4000
trusted library allocation
page read and write
6DF000
heap
page read and write
8844000
unkown
page read and write
23AE000
stack
page read and write
39E0000
heap
page read and write
2BDC000
stack
page read and write
410000
unkown
page read and write
4180000
unkown
page read and write
1C30000
unkown
page readonly
87BB000
unkown
page read and write
6D4B000
stack
page read and write
180000
heap
page read and write
7660000
stack
page read and write
4130000
unkown
page read and write
7230000
heap
page read and write
929000
heap
page read and write
886A000
unkown
page read and write
563D000
trusted library allocation
page read and write
8820000
unkown
page read and write
766B000
stack
page read and write
1A9000
stack
page read and write
3B00000
unkown
page read and write
4150000
unkown
page read and write
6E40000
heap
page read and write
44D0000
unkown
page readonly
4AA000
heap
page read and write
282000
trusted library allocation
page read and write
43C000
heap
page read and write
82C5000
unkown
page read and write
83A7000
unkown
page read and write
1D20000
unkown
page read and write
2B30000
unkown
page readonly
D60000
unclassified section
page execute and read and write
287000
trusted library allocation
page execute and read and write
2F1B000
stack
page read and write
87F9000
unkown
page read and write
110000
unkown
page read and write
2801000
unkown
page read and write
1140000
unclassified section
page execute and read and write
6FE3000
heap
page read and write
2B30000
unkown
page readonly
6EC0000
heap
page read and write
7AF0000
trusted library allocation
page read and write
1D50000
heap
page read and write
19F000
stack
page read and write
1262000
unkown
page execute read
60000
unkown
page readonly
85F2000
unkown
page read and write
27F0000
unkown
page read and write
83E2000
unkown
page read and write
26C6000
unkown
page read and write
3690000
trusted library allocation
page read and write
288D000
stack
page read and write
26BA000
unkown
page read and write
1262000
unkown
page execute read
6D0000
trusted library allocation
page read and write
A51B000
stack
page read and write
4140000
unkown
page read and write
268000
stack
page read and write
323000
heap
page read and write
8602000
unkown
page read and write
85D2000
unkown
page read and write
123000
trusted library allocation
page execute and read and write
449B000
unkown
page read and write
1262000
unkown
page execute read
4188000
unkown
page read and write
30000
trusted library allocation
page read and write
20000
trusted library allocation
page read and write
60E000
stack
page read and write
87BB000
unkown
page read and write
4A30000
trusted library allocation
page read and write
B163000
unkown
page read and write
530000
heap
page execute and read and write
26F0000
unkown
page read and write
2CB6000
unkown
page read and write
1314000
unkown
page readonly
4040000
unkown
page readonly
3721000
trusted library allocation
page read and write
886D000
unkown
page read and write
6FE3000
heap
page read and write
44B6000
unkown
page read and write
785E000
stack
page read and write
2910000
unkown
page readonly
2B50000
unkown
page readonly
310000
heap
page read and write
28B000
stack
page read and write
4150000
unkown
page read and write
866C000
unkown
page read and write
2FC5000
heap
page read and write
26F0000
unkown
page read and write
1B0000
unkown
page read and write
4510000
unkown
page execute and read and write
4AD0000
trusted library allocation
page read and write
4338000
unkown
page read and write
27F0000
unkown
page read and write
2B0000
unkown
page read and write
4423000
unkown
page read and write
DD0000
trusted library allocation
page read and write
7190000
stack
page read and write
28A0000
trusted library allocation
page execute and read and write
830000
unkown
page readonly
4423000
unkown
page read and write
210000
unkown
page readonly
41D0000
unkown
page readonly
CF0000
trusted library allocation
page read and write
3FD000
heap
page read and write
7549000
heap
page read and write
5B0000
trusted library allocation
page read and write
708000
trusted library allocation
page read and write
288D000
stack
page read and write
39B0000
unkown
page read and write
766B000
stack
page read and write
4110000
unkown
page read and write
4E38000
stack
page read and write
26C6000
unkown
page read and write
2D0000
unkown
page readonly
8558000
unkown
page read and write
2D2B000
heap
page read and write
B224000
unkown
page read and write
329000
heap
page read and write
4F0000
trusted library allocation
page read and write
869E000
unkown
page read and write
2FC5000
heap
page read and write
B6E9000
unkown
page execute and read and write
100000
unkown
page read and write
74BE000
stack
page read and write
2CB3000
unkown
page read and write
690000
trusted library allocation
page read and write
3B0000
system
page execute and read and write
8807000
unkown
page read and write
7540000
heap
page read and write
4A10000
trusted library allocation
page read and write
450000
heap
page read and write
4520000
unkown
page readonly
C70000
trusted library allocation
page read and write
2CA8000
unkown
page read and write
4484000
unkown
page read and write
2BFE000
stack
page read and write
B163000
unkown
page read and write
220000
unkown
page read and write
1314000
unkown
page readonly
6450000
unkown
page readonly
223F000
stack
page read and write
60000
unkown
page readonly
223F000
stack
page read and write
1D0000
trusted library allocation
page read and write
1C30000
unkown
page readonly
FEF000
stack
page read and write
370000
heap
page read and write
23CF000
stack
page read and write
B540000
heap
page read and write
2C0000
unkown
page read and write
8669000
unkown
page read and write
2B50000
unkown
page readonly
AC60000
unkown
page read and write
6E3C000
stack
page read and write
82C0000
unkown
page read and write
43F0000
unkown
page read and write
785E000
stack
page read and write
6C78000
stack
page read and write
1F7000
heap
page read and write
506000
unkown
page read and write
B545000
heap
page read and write
7953000
heap
page read and write
6F4A000
stack
page read and write
6EA0000
heap
page read and write
3FB7000
stack
page read and write
8602000
unkown
page read and write
1260000
unkown
page readonly
510000
unkown
page readonly
7AF0000
trusted library allocation
page read and write
E70000
trusted library allocation
page read and write
329000
heap
page read and write
4A20000
trusted library allocation
page read and write
1314000
unkown
page readonly
72C0000
heap
page read and write
1B0000
unkown
page read and write
C50000
trusted library allocation
page read and write
2910000
unkown
page readonly
2C9C000
trusted library allocation
page read and write
3F0000
trusted library section
page readonly
4EED000
stack
page read and write
7930000
heap
page read and write
41A8000
unkown
page read and write
4A56000
heap
page read and write
65B0000
trusted library allocation
page read and write
2CA8000
unkown
page read and write
85F4000
unkown
page read and write
41C000
system
page execute and read and write
7E29000
stack
page read and write
590000
trusted library allocation
page read and write
690000
unkown
page readonly
46CC000
stack
page read and write
29B000
stack
page read and write
30000
trusted library allocation
page read and write
2D1C000
stack
page read and write
85FA000
unkown
page read and write
B68000
trusted library allocation
page read and write
699E000
stack
page read and write
45A0000
unkown
page readonly
7D7000
trusted library allocation
page read and write
8605000
unkown
page read and write
D0000
unkown
page readonly
82CC000
unkown
page read and write
8805000
unkown
page read and write
480000
heap
page read and write
181D000
system
page read and write
4530000
unkown
page readonly
8669000
unkown
page read and write
4DB000
heap
page read and write
8E7000
heap
page read and write
22C0000
trusted library allocation
page execute and read and write
2EBF000
stack
page read and write
683E000
stack
page read and write
449B000
unkown
page read and write
7060000
heap
page read and write
820000
trusted library allocation
page read and write
434F000
unkown
page read and write
7E40000
heap
page read and write
8861000
unkown
page read and write
2898000
stack
page read and write
2643000
unkown
page read and write
4560000
unkown
page readonly
8802000
unkown
page read and write
DE4000
heap
page read and write
6FF000
heap
page read and write
4540000
unkown
page readonly
44B8000
unkown
page read and write
75AC000
stack
page read and write
856B000
unkown
page read and write
6D49000
stack
page read and write
726D000
stack
page read and write
2FC9000
heap
page read and write
A8B9000
stack
page read and write
4550000
unkown
page readonly
8636000
unkown
page read and write
2F9E000
stack
page read and write
1314000
unkown
page readonly
2BFE000
stack
page read and write
6E4E000
stack
page read and write
21C0000
trusted library allocation
page read and write
4140000
unkown
page read and write
3AF000
stack
page read and write
6E0000
trusted library allocation
page read and write
113E000
stack
page read and write
3FAF000
stack
page read and write
87E6000
unkown
page read and write
360000
trusted library allocation
page execute and read and write
856B000
unkown
page read and write
77F000
unclassified section
page execute and read and write
85FD000
unkown
page read and write
1314000
unkown
page readonly
1D73000
heap
page read and write
841B000
unkown
page read and write
82D1000
unkown
page read and write
2CB0000
unkown
page read and write
2CB9000
unkown
page read and write
220000
unkown
page read and write
94A000
system
page read and write
39D0000
unkown
page read and write
4338000
unkown
page read and write
690000
trusted library allocation
page read and write
AC88000
unkown
page read and write
87F9000
unkown
page read and write
2600000
unkown
page readonly
8521000
unkown
page read and write
B323000
unkown
page read and write
886A000
unkown
page read and write
1F0000
unkown
page readonly
710000
trusted library allocation
page read and write
4130000
unkown
page read and write
42AE000
stack
page read and write
280000
heap
page read and write
7660000
stack
page read and write
28C0000
unkown
page read and write
5910000
trusted library section
page read and write
60F000
stack
page read and write
3F4000
trusted library section
page readonly
E89000
unclassified section
page execute and read and write
83A7000
unkown
page read and write
D70000
trusted library allocation
page read and write
6C3F000
trusted library allocation
page read and write
10000
heap
page read and write
6B8C000
stack
page read and write
AE4000
trusted library allocation
page execute and read and write
239D000
trusted library allocation
page read and write
2CB000
unkown
page read and write
879E000
unkown
page read and write
448C000
unkown
page read and write
6DFD000
stack
page read and write
1314000
unkown
page readonly
B323000
unkown
page read and write
228F000
stack
page read and write
44D000
unkown
page read and write
310000
heap
page read and write
39B0000
unkown
page read and write
41E0000
unkown
page read and write
7083000
heap
page read and write
88F5000
unkown
page read and write
B540000
heap
page read and write
448F000
unkown
page read and write
59B0000
heap
page read and write
4A40000
trusted library allocation
page read and write
290000
unkown
page readonly
4520000
unkown
page readonly
1D20000
unkown
page read and write
879E000
unkown
page read and write
27D000
trusted library allocation
page execute and read and write
2C32000
unclassified section
page read and write
E50000
trusted library allocation
page read and write
8521000
unkown
page read and write
1260000
unkown
page readonly
8903000
unkown
page read and write
26F0000
unkown
page read and write
489000
heap
page read and write
2CAE000
unkown
page read and write
8844000
unkown
page read and write
7953000
heap
page read and write
2A0000
unkown
page read and write
88C0000
unkown
page read and write
839000
heap
page read and write
E02000
heap
page read and write
2F7000
heap
page read and write
719B000
stack
page read and write
4510000
unkown
page execute and read and write
4EED000
stack
page read and write
10000
heap
page read and write
2C21000
unkown
page read and write
6BF0000
stack
page read and write
2524000
heap
page read and write
8926000
unkown
page read and write
883B000
unkown
page read and write
323000
heap
page read and write
65EE000
stack
page read and write
250000
unkown
page read and write
2890000
trusted library allocation
page execute and read and write
74BE000
stack
page read and write
3A6000
heap
page read and write
6DDE000
stack
page read and write
93C000
heap
page read and write
181D000
system
page read and write
6E0000
trusted library allocation
page read and write
2A2000
heap
page read and write
883B000
unkown
page read and write
2E0000
unkown
page readonly
2CAE000
unkown
page read and write
4450000
unkown
page read and write
724000
heap
page read and write
3F0000
heap
page read and write
F7E000
stack
page read and write
6FE3000
heap
page read and write
50000
unkown
page readonly
20000
unkown
page readonly
3B10000
unkown
page readonly
454000
heap
page read and write
AC88000
unkown
page read and write
860E000
unkown
page read and write
2CAE000
unkown
page read and write
288D000
stack
page read and write
8664000
unkown
page read and write
87E4000
unkown
page read and write
82C5000
unkown
page read and write
1DD0000
unkown
page readonly
85D2000
unkown
page read and write
690000
unkown
page readonly
82D1000
unkown
page read and write
1CB000
stack
page read and write
6BF0000
stack
page read and write
918000
heap
page read and write
87FF000
unkown
page read and write
27A000
unkown
page read and write
669000
heap
page read and write
6450000
unkown
page readonly
7083000
heap
page read and write
288D000
stack
page read and write
1D13000
unkown
page read and write
5164000
trusted library allocation
page read and write
88FD000
unkown
page read and write
4338000
unkown
page read and write
856B000
unkown
page read and write
4220000
unkown
page readonly
6F0000
trusted library allocation
page read and write
6CF000
stack
page read and write
25F0000
unkown
page readonly
3FAF000
stack
page read and write
4110000
unkown
page read and write
2CB3000
unkown
page read and write
28F0000
unkown
page read and write
1D0000
trusted library allocation
page read and write
4530000
unkown
page readonly
6B4E000
stack
page read and write
83E2000
unkown
page read and write
50E0000
trusted library allocation
page read and write
223F000
stack
page read and write
2801000
unkown
page read and write
923000
heap
page read and write
6B6E000
stack
page read and write
8608000
unkown
page read and write
4A00000
trusted library allocation
page read and write
506000
unkown
page read and write
669E000
stack
page read and write
E0000
unkown
page read and write
4540000
unkown
page readonly
6D4B000
stack
page read and write
44B8000
unkown
page read and write
13C000
stack
page read and write
3A4000
heap
page read and write
1A9000
stack
page read and write
82D5000
unkown
page read and write
4150000
unkown
page read and write
4570000
unkown
page readonly
3A70000
unkown
page read and write
4D5E000
stack
page read and write
2E0000
trusted library allocation
page execute and read and write
1314000
unkown
page readonly
1D30000
unkown
page read and write
100000
unkown
page read and write
2CB0000
unkown
page read and write
83E2000
unkown
page read and write
610000
heap
page execute and read and write
851A000
unkown
page read and write
10000
heap
page read and write
967000
trusted library allocation
page execute and read and write
3A4000
heap
page read and write
B224000
unkown
page read and write
4F60000
heap
page read and write
28F0000
unkown
page read and write
41D0000
unkown
page readonly
87E8000
unkown
page read and write
407C000
unkown
page read and write
6A2E000
stack
page read and write
4140000
unkown
page read and write
1D55000
heap
page read and write
4385000
unkown
page read and write
8506000
unkown
page read and write
7540000
heap
page read and write
6394000
trusted library allocation
page read and write
76AC000
stack
page read and write
8864000
unkown
page read and write
660000
trusted library allocation
page read and write
250000
unkown
page read and write
2C71000
unkown
page read and write
6C00000
trusted library allocation
page read and write
236000
heap
page read and write
82C0000
unkown
page read and write
3FB5000
stack
page read and write
449F000
unkown
page read and write
8575000
unkown
page read and write
1A9000
stack
page read and write
6FC0000
heap
page read and write
244000
heap
page read and write
3F9000
trusted library section
page readonly
7549000
heap
page read and write
26BA000
unkown
page read and write
2CA2000
unkown
page read and write
223F000
stack
page read and write
89000
stack
page read and write
4484000
unkown
page read and write
79FA000
heap
page read and write
7934000
heap
page read and write
2B0000
unkown
page read and write
49CD000
stack
page read and write
510000
unkown
page readonly
6D0000
trusted library allocation
page read and write
28A000
trusted library allocation
page execute and read and write
1D20000
unkown
page read and write
2F0F000
stack
page read and write
478E000
stack
page read and write
8611000
unkown
page read and write
41D0000
unkown
page readonly
6D7E000
stack
page read and write | page guard
73B0000
trusted library allocation
page read and write
736E000
stack
page read and write
19F000
stack
page read and write
71A0000
heap
page read and write
22D000
heap
page read and write
1DD0000
unkown
page readonly
82FD000
unkown
page read and write
1D73000
heap
page read and write
440D000
unkown
page read and write
4E38000
stack
page read and write
886D000
unkown
page read and write
2CAB000
unkown
page read and write
E0000
unkown
page read and write
26A7000
trusted library allocation
page execute and read and write
8371000
unkown
page read and write
87E6000
unkown
page read and write
7030000
heap
page read and write
88C0000
unkown
page read and write
281E000
stack
page read and write
3B0000
trusted library allocation
page read and write
6F0000
trusted library allocation
page read and write
510000
unkown
page readonly
39E0000
heap
page read and write
45F000
stack
page read and write
11AC000
unclassified section
page execute and read and write
72C0000
heap
page read and write
C00000
trusted library allocation
page read and write
60000
unkown
page readonly
3A70000
unkown
page read and write
B545000
heap
page read and write
2C0000
unkown
page read and write
4720000
trusted library allocation
page read and write
82D5000
unkown
page read and write
4188000
unkown
page read and write
8600000
unkown
page read and write
2CB0000
unkown
page read and write
1260000
unkown
page readonly
8675000
unkown
page read and write
E78000
trusted library allocation
page read and write
8861000
unkown
page read and write
3AF0000
unkown
page read and write
2FCE000
heap
page read and write
1D55000
heap
page read and write
434F000
unkown
page read and write
2910000
unkown
page readonly
50000
unkown
page readonly
44D000
unkown
page read and write
42D0000
unkown
page read and write
42D0000
unkown
page read and write
41C0000
unkown
page readonly
2CA2000
unkown
page read and write
B323000
unkown
page read and write
4BBF000
stack
page read and write
AD0000
trusted library allocation
page execute and read and write
252F000
stack
page read and write
76C0000
heap
page read and write
7370000
trusted library allocation
page read and write
4C05000
heap
page read and write
2500000
trusted library allocation
page read and write
4570000
unkown
page readonly
2F9E000
stack
page read and write
86CF000
unkown
page read and write
DCC000
stack
page read and write
AC88000
unkown
page read and write
2FC9000
heap
page read and write
86CF000
unkown
page read and write
28B0000
unkown
page readonly
8B0000
system
page execute and read and write
2600000
unkown
page readonly
8864000
unkown
page read and write
D50000
trusted library allocation
page execute and read and write
5A0000
trusted library allocation
page read and write
6320000
trusted library allocation
page read and write
929000
heap
page read and write
41D0000
unkown
page readonly
39D0000
unkown
page read and write
440D000
unkown
page read and write
4560000
unkown
page readonly
47E000
stack
page read and write
964000
trusted library allocation
page execute and read and write
680000
trusted library allocation
page execute and read and write
239A000
trusted library allocation
page read and write
7549000
heap
page read and write
26C6000
unkown
page read and write
2CAB000
unkown
page read and write
860B000
unkown
page read and write
4210000
unkown
page read and write
3FB5000
stack
page read and write
1260000
unkown
page readonly
2CB6000
unkown
page read and write
2910000
unkown
page readonly
19F000
stack
page read and write
452F000
stack
page read and write
4ABE000
stack
page read and write
2E9F000
stack
page read and write
50000
unkown
page readonly
6FC0000
heap
page read and write
2E0000
heap
page read and write
65B0000
trusted library allocation
page read and write
2E0000
unkown
page readonly
3FB7000
stack
page read and write
3A60000
unkown
page read and write
C60000
trusted library allocation
page read and write
6450000
unkown
page readonly
3990000
unkown
page readonly
C80000
heap
page read and write
6DF000
heap
page read and write
250000
unkown
page read and write
4150000
unkown
page read and write
520000
trusted library section
page read and write
680000
trusted library allocation
page read and write
4317000
unkown
page read and write
8ED000
system
page execute and read and write
860000
trusted library allocation
page execute and read and write
2A0000
unkown
page read and write
6B0E000
stack
page read and write
26C6000
unkown
page read and write
39A0000
unkown
page read and write
AF0000
trusted library allocation
page execute and read and write
3B00000
unkown
page read and write
2B50000
unkown
page readonly
689000
heap
page read and write
2FC0000
heap
page read and write
2C0000
unkown
page read and write
4450000
unkown
page read and write
580000
trusted library allocation
page read and write
2827000
trusted library allocation
page execute and read and write
9F0000
trusted library allocation
page execute and read and write
85FD000
unkown
page read and write
4220000
unkown
page readonly
27A000
unkown
page read and write
2542000
heap
page read and write
407C000
unkown
page read and write
3DF000
stack
page read and write
86C9000
unkown
page read and write
24DE000
stack
page read and write
44E0000
unkown
page read and write
860B000
unkown
page read and write
3A6000
heap
page read and write
1CB0000
direct allocation
page read and write
39A0000
unkown
page read and write
6A6000
heap
page read and write
689000
heap
page read and write
3CF7000
unkown
page readonly
2B0000
unkown
page read and write
3B00000
unkown
page read and write
8337000
unkown
page read and write
8B000
stack
page read and write
72C0000
heap
page read and write
620000
heap
page read and write
CE0000
trusted library allocation
page read and write
1140000
trusted library allocation
page read and write
27DF000
stack
page read and write
6FC4000
heap
page read and write
170000
trusted library allocation
page execute and read and write
59B4000
heap
page read and write
1F0000
unkown
page readonly
85F4000
unkown
page read and write
4464000
unkown
page read and write
8820000
unkown
page read and write
8900000
unkown
page read and write
700000
trusted library allocation
page read and write
26A4000
trusted library allocation
page execute and read and write
5C0000
trusted library allocation
page read and write
88C0000
unkown
page read and write
1DD0000
unkown
page readonly
6750000
unkown
page read and write
20000
heap
page read and write
B163000
unkown
page read and write
2C0000
trusted library allocation
page execute and read and write
B1E0000
unkown
page read and write
63B9000
trusted library allocation
page read and write
6E4E000
stack
page read and write
2B0000
unkown
page read and write
4385000
unkown
page read and write
3B10000
unkown
page readonly
2AB000
unkown
page read and write
1262000
unkown
page execute read
448C000
unkown
page read and write
244000
heap
page read and write
7C0000
trusted library allocation
page read and write
1B0000
unkown
page read and write
6D49000
stack
page read and write
6A6000
heap
page read and write
50000
unkown
page readonly
B2A0000
unkown
page read and write
22C0000
trusted library allocation
page read and write
3FD0000
unkown
page read and write
6D0000
trusted library allocation
page execute and read and write
2FB0000
unkown
page read and write
28B0000
unkown
page readonly
1F0000
heap
page read and write
39E0000
heap
page read and write
8900000
unkown
page read and write
5030000
heap
page read and write
2CA0000
unkown
page read and write
2810000
trusted library allocation
page execute and read and write
110000
unkown
page read and write
3A60000
unkown
page read and write
580000
trusted library allocation
page read and write
E20000
trusted library allocation
page read and write
4550000
unkown
page readonly
28A0000
unkown
page read and write
87FC000
unkown
page read and write
4338000
unkown
page read and write
7567000
heap
page read and write
210000
unkown
page readonly
4E38000
stack
page read and write
73B1000
trusted library allocation
page read and write
4040000
unkown
page readonly
2BFE000
stack
page read and write
7064000
heap
page read and write
2FC5000
heap
page read and write
28B0000
unkown
page readonly
6E5A000
stack
page read and write
16B000
stack
page read and write
4B5F000
stack
page read and write
41E0000
unkown
page read and write
4620000
unkown
page read and write
AC7E000
unkown
page read and write
7EC0000
unkown
page read and write
2410000
trusted library allocation
page read and write
82D5000
unkown
page read and write
A51B000
stack
page read and write
6DDE000
stack
page read and write
B1A3000
unkown
page read and write
71A0000
heap
page read and write
7934000
heap
page read and write
6D7F000
stack
page read and write
2CA5000
unkown
page read and write
6BC0000
heap
page read and write
8802000
unkown
page read and write
3B00000
unkown
page read and write
6F4A000
stack
page read and write
8867000
unkown
page read and write
7BE0000
heap
page read and write
44C3000
unkown
page read and write
1B0000
unkown
page read and write
E56000
trusted library allocation
page read and write
39A0000
unkown
page read and write
2CB0000
unkown
page read and write
2B20000
unkown
page read and write
8858000
unkown
page read and write
644000
heap
page read and write
6C0000
trusted library allocation
page read and write
20000
unkown
page readonly
2520000
heap
page read and write
6E0000
unclassified section
page execute and read and write
7EC0000
unkown
page read and write
4520000
unkown
page readonly
87FC000
unkown
page read and write
39D0000
unkown
page read and write
84EE000
unkown
page read and write
86CF000
unkown
page read and write
37B000
heap
page read and write
6B0000
heap
page read and write
3A4000
heap
page read and write
7E40000
heap
page read and write
25B0000
trusted library allocation
page execute and read and write
7540000
heap
page read and write
49F0000
trusted library allocation
page read and write
5810000
trusted library allocation
page read and write
700000
heap
page read and write
44C3000
unkown
page read and write
D50000
trusted library allocation
page read and write
A95E000
stack
page read and write
84EE000
unkown
page read and write
8667000
unkown
page read and write
4A0E000
stack
page read and write
8600000
unkown
page read and write
4970000
trusted library allocation
page read and write
4120000
unkown
page read and write
8605000
unkown
page read and write
2898000
stack
page read and write
449F000
unkown
page read and write
1A9000
stack
page read and write
4030000
unkown
page execute read
100000
unkown
page read and write
2CBC000
unkown
page read and write
2CB3000
unkown
page read and write
6C0000
trusted library allocation
page read and write
1D55000
heap
page read and write
450000
unkown
page read and write
B563000
heap
page read and write
8617000
unkown
page read and write
850D000
unkown
page read and write
2D20000
heap
page read and write
4460000
trusted library allocation
page read and write
6DDE000
stack
page read and write
92B000
heap
page read and write
1262000
unkown
page execute read
2C21000
unkown
page read and write
D60000
trusted library allocation
page read and write
2CBF000
unkown
page read and write
6F9000
heap
page read and write
1D20000
unkown
page read and write
6E0000
trusted library allocation
page read and write
20000
unkown
page readonly
44D000
unkown
page read and write
7230000
heap
page read and write
44C3000
unkown
page read and write
8805000
unkown
page read and write
6EC0000
heap
page read and write
91A000
heap
page read and write
851A000
unkown
page read and write
2CA5000
unkown
page read and write
2C21000
unkown
page read and write
1D13000
unkown
page read and write
229000
stack
page read and write
2CB000
unkown
page read and write
B50000
trusted library allocation
page execute and read and write
8667000
unkown
page read and write
1314000
unkown
page readonly
2E0000
unkown
page readonly
6F4A000
stack
page read and write
3F7000
heap
page read and write
378D000
unclassified section
page read and write
B6E9000
unkown
page execute and read and write
3FB5000
stack
page read and write
4E40000
heap
page read and write
1D0000
trusted library allocation
page read and write
4317000
unkown
page read and write
4BBF000
stack
page read and write
716E000
stack
page read and write
3FF000
trusted library section
page readonly
3FD0000
unkown
page read and write
2E0000
unkown
page readonly
4BBF000
stack
page read and write
42AE000
stack
page read and write
926000
heap
page read and write
323000
heap
page read and write
8667000
unkown
page read and write
44E0000
unkown
page read and write
94A000
system
page read and write
2710000
trusted library allocation
page execute and read and write
85F2000
unkown
page read and write
10000
heap
page read and write
28A0000
unkown
page read and write
41E0000
unkown
page read and write
869E000
unkown
page read and write
4540000
unkown
page readonly
27CD000
trusted library allocation
page read and write
2FB0000
unkown
page read and write
4A3000
heap
page read and write
39B0000
unkown
page read and write
2720000
trusted library allocation
page execute and read and write
866C000
unkown
page read and write
2D0000
unkown
page readonly
580000
trusted library allocation
page read and write
244000
heap
page read and write
500000
trusted library allocation
page read and write
4530000
unkown
page readonly
240000
heap
page read and write
26A0000
trusted library allocation
page execute and read and write
8575000
unkown
page read and write
19F000
stack
page read and write
65A000
trusted library allocation
page read and write
2FCE000
heap
page read and write
7190000
stack
page read and write
8926000
unkown
page read and write
932000
heap
page read and write
20000
unkown
page readonly
2517000
trusted library allocation
page read and write
4C00000
heap
page read and write
448F000
unkown
page read and write
1250000
trusted library allocation
page read and write
C10000
trusted library allocation
page read and write
6E0000
trusted library allocation
page read and write
D60000
trusted library allocation
page read and write
8675000
unkown
page read and write
2CBC000
unkown
page read and write
6BF3000
stack
page read and write
582D000
trusted library allocation
page read and write
42E000
unkown
page read and write
317000
heap
page read and write
2520000
trusted library allocation
page read and write
866C000
unkown
page read and write
66E000
stack
page read and write
220000
unkown
page read and write
4CDD000
stack
page read and write
1260000
unkown
page readonly
8903000
unkown
page read and write
830000
unkown
page readonly
86C9000
unkown
page read and write
4620000
unkown
page read and write
8506000
unkown
page read and write
8664000
unkown
page read and write
210000
unkown
page readonly
DD0000
trusted library allocation
page read and write
918000
heap
page read and write
8669000
unkown
page read and write
2FB0000
unkown
page read and write
840000
trusted library allocation
page read and write
27A000
unkown
page read and write
D3D000
stack
page read and write
2CAB000
unkown
page read and write
2824000
trusted library allocation
page execute and read and write
C30000
trusted library allocation
page read and write
7064000
heap
page read and write
335000
heap
page read and write
510000
unkown
page readonly
1D50000
heap
page read and write
CF0000
trusted library allocation
page read and write
1D73000
heap
page read and write
51A6000
trusted library allocation
page read and write
6EC0000
heap
page read and write
AE7000
trusted library allocation
page execute and read and write
2C71000
unkown
page read and write
48F000
heap
page read and write
10000
heap
page read and write
8512000
unkown
page read and write
3990000
unkown
page readonly
6BF3000
stack
page read and write
181D000
system
page read and write
410000
unkown
page read and write
E60000
trusted library allocation
page read and write
23B000
heap
page read and write
410000
unkown
page read and write
6C0000
trusted library allocation
page read and write
2CAE000
unkown
page read and write
8575000
unkown
page read and write
9D0000
trusted library allocation
page execute and read and write
3FD0000
unkown
page read and write
2F0F000
stack
page read and write
AC7E000
unkown
page read and write
6D0000
heap
page read and write
2BB000
unkown
page read and write
4484000
unkown
page read and write
2F9E000
stack
page read and write
C40000
trusted library allocation
page read and write
2F1B000
stack
page read and write
6D0000
trusted library allocation
page read and write
C4E000
stack
page read and write
B5C0000
unkown
page execute and read and write
CCE000
stack
page read and write
2C71000
unkown
page read and write
82FD000
unkown
page read and write
2600000
unkown
page readonly
26F0000
unkown
page read and write
256000
unkown
page read and write
2D0000
trusted library allocation
page read and write
28A0000
unkown
page read and write
85D2000
unkown
page read and write
27F0000
unkown
page read and write
4EED000
stack
page read and write
2B20000
unkown
page read and write
886D000
unkown
page read and write
2898000
stack
page read and write
29F000
stack
page read and write
79F0000
heap
page read and write
2643000
unkown
page read and write
8867000
unkown
page read and write
A51B000
stack
page read and write
970000
trusted library allocation
page execute and read and write
3FB7000
stack
page read and write
450000
unkown
page read and write
5173000
trusted library allocation
page read and write
2CA5000
unkown
page read and write
8636000
unkown
page read and write
42E000
unkown
page read and write
8691000
unkown
page read and write
7660000
stack
page read and write
4140000
unkown
page read and write
2580000
trusted library allocation
page read and write
590000
trusted library allocation
page read and write
26BA000
unkown
page read and write
87F9000
unkown
page read and write
449F000
unkown
page read and write
490000
heap
page read and write
6D0000
trusted library allocation
page read and write
950000
trusted library allocation
page execute and read and write
8691000
unkown
page read and write
60000
unkown
page readonly
82C0000
unkown
page read and write
2BB000
unkown
page read and write
3FC0000
unkown
page read and write
7190000
stack
page read and write
42AE000
stack
page read and write
295D000
stack
page read and write
823000
trusted library allocation
page read and write
886A000
unkown
page read and write
580000
trusted library allocation
page read and write
41C0000
unkown
page readonly
2C0000
unkown
page read and write
2FB0000
unkown
page read and write
2E9F000
stack
page read and write
6D0000
trusted library allocation
page read and write
46D0000
unkown
page readonly
4560000
unkown
page readonly
B1A3000
unkown
page read and write
2C71000
unkown
page read and write
570000
trusted library allocation
page read and write
87E6000
unkown
page read and write
E0000
unkown
page read and write
3AF0000
unkown
page read and write
317000
heap
page read and write
2F0000
heap
page read and write
46D0000
unkown
page readonly
291F000
stack
page read and write
2C30000
trusted library allocation
page read and write
51AD000
trusted library allocation
page read and write
3FC0000
unkown
page read and write
841B000
unkown
page read and write
42AE000
stack
page read and write
43F0000
unkown
page read and write
B2A0000
unkown
page read and write
883B000
unkown
page read and write
4510000
unkown
page execute and read and write
8903000
unkown
page read and write
25A0000
trusted library allocation
page execute and read and write
1260000
unkown
page readonly
710000
trusted library allocation
page read and write
D70000
trusted library allocation
page read and write
6BF0000
stack
page read and write
2D28000
heap
page read and write
1D0000
trusted library allocation
page read and write
4180000
unkown
page read and write
7930000
heap
page read and write
448C000
unkown
page read and write
329000
heap
page read and write
5030000
heap
page read and write
520000
trusted library allocation
page read and write
51A0000
trusted library allocation
page read and write
2B20000
unkown
page read and write
63B6000
trusted library allocation
page read and write
44E0000
unkown
page read and write
88FD000
unkown
page read and write
2E9F000
stack
page read and write
8636000
unkown
page read and write
65D000
trusted library allocation
page read and write
2D24000
heap
page read and write
4457000
unkown
page read and write
240000
heap
page read and write
23B0000
trusted library allocation
page read and write
8569000
unkown
page read and write
1D50000
heap
page read and write
87E4000
unkown
page read and write
6FF000
heap
page read and write
292000
trusted library allocation
page read and write
3FB7000
stack
page read and write
4F60000
heap
page read and write
100000
unkown
page read and write
2CB6000
unkown
page read and write
2801000
unkown
page read and write
AE1000
trusted library allocation
page execute and read and write
310000
heap
page read and write
84C0000
unkown
page read and write
CC2000
system
page read and write
6BF3000
stack
page read and write
4BDE000
stack
page read and write
44B8000
unkown
page read and write
51BC000
trusted library allocation
page read and write
B1A3000
unkown
page read and write
7EC0000
unkown
page read and write
1F0000
unkown
page readonly
5142000
trusted library allocation
page read and write
42D0000
unkown
page read and write
8858000
unkown
page read and write
41A8000
unkown
page read and write
67EF000
stack
page read and write
297000
trusted library allocation
page execute and read and write
520000
trusted library allocation
page read and write
8512000
unkown
page read and write
2CA8000
unkown
page read and write
1D30000
unkown
page read and write
2600000
unkown
page readonly
870000
trusted library allocation
page execute and read and write
2CB9000
unkown
page read and write
860B000
unkown
page read and write
707000
heap
page read and write
240000
heap
page read and write
41A8000
unkown
page read and write
220000
unkown
page read and write
2CB6000
unkown
page read and write
86C9000
unkown
page read and write
3AF0000
unkown
page read and write
7567000
heap
page read and write
8608000
unkown
page read and write
4120000
unkown
page read and write
27F0000
unkown
page read and write
3990000
unkown
page readonly
2C21000
unkown
page read and write
4220000
unkown
page readonly
8605000
unkown
page read and write
D0000
unkown
page readonly
44F0000
unkown
page readonly
42E000
unkown
page read and write
44B6000
unkown
page read and write
8602000
unkown
page read and write
8512000
unkown
page read and write
43A000
heap
page read and write
A8B9000
stack
page read and write
3A60000
unkown
page read and write
CE0000
trusted library allocation
page read and write
2A0000
unkown
page read and write
5118000
trusted library allocation
page read and write
50A0000
heap
page execute and read and write
87E4000
unkown
page read and write
2CB3000
unkown
page read and write
2801000
unkown
page read and write
110000
unkown
page read and write
2CA0000
unkown
page read and write
4030000
unkown
page execute read
5030000
heap
page read and write
850D000
unkown
page read and write
85FA000
unkown
page read and write
2514000
trusted library allocation
page read and write
8664000
unkown
page read and write
1262000
unkown
page execute read
3B10000
unkown
page readonly
4317000
unkown
page read and write
8867000
unkown
page read and write
26DD000
stack
page read and write
25F0000
unkown
page readonly
8861000
unkown
page read and write
3A70000
unkown
page read and write
7230000
heap
page read and write
6BF8000
stack
page read and write
1D13000
unkown
page read and write
186000
heap
page read and write
3A4000
heap
page read and write
25F0000
unkown
page readonly
6C78000
stack
page read and write
4740000
trusted library allocation
page read and write
2F0F000
stack
page read and write
8926000
unkown
page read and write
3B0000
system
page execute and read and write
290000
unkown
page readonly
4040000
unkown
page readonly
326000
heap
page read and write
7930000
heap
page read and write
8858000
unkown
page read and write
410000
unkown
page read and write
7BE0000
heap
page read and write
323000
heap
page read and write
8506000
unkown
page read and write
2CBF000
unkown
page read and write
518C000
trusted library allocation
page read and write
335000
heap
page read and write
10000
heap
page read and write
960000
trusted library allocation
page execute and read and write
2D0000
trusted library allocation
page execute and read and write
85F7000
unkown
page read and write
2CBF000
unkown
page read and write
8337000
unkown
page read and write
A510000
stack
page read and write
2AB000
unkown
page read and write
4130000
unkown
page read and write
6E0000
trusted library allocation
page read and write
256000
unkown
page read and write
1262000
unkown
page execute read
256000
unkown
page read and write
7BE0000
heap
page read and write
434F000
unkown
page read and write
6D0000
trusted library allocation
page read and write
3AF0000
unkown
page read and write
There are 1570 hidden memdumps, click here to show them.