IOC Report
YofglD94L7.exe

loading gif

Files

File Path
Type
Category
Malicious
YofglD94L7.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Roaming\jefgchi
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\jefgchi:Zone.Identifier
ASCII text, with CRLF line terminators
modified
 malicious

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\YofglD94L7.exe
C:\Users\user\Desktop\YofglD94L7.exe
 malicious
C:\Users\user\Desktop\YofglD94L7.exe
C:\Users\user\Desktop\YofglD94L7.exe
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Users\user\AppData\Roaming\jefgchi
C:\Users\user\AppData\Roaming\jefgchi
 malicious
C:\Users\user\AppData\Roaming\jefgchi
C:\Users\user\AppData\Roaming\jefgchi
 malicious

URLs

Name
IP
Malicious
http://host-file-host6.com/
194.50.153.68
 malicious
http://host-host-file8.com/
malicious
http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.Tools.System.Groov
unknown
http://components.groove.net/Groove/Components/SystemComponents/SystemComponents.osd?Package=net.gro
unknown

Domains

Name
IP
Malicious
host-file-host6.com
194.50.153.68
 malicious
host-host-file8.com
unknown
 malicious

IPs

IP
Domain
Country
Malicious
194.50.153.68
host-file-host6.com
United Kingdom
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} {0000013A-0000-0000-C000-000000000046} 0xFFFF
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\f0\52C64B7E
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-123
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.101
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.100
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance
MessageTime

Memdumps

Base Address
Regiontype
Protect
Malicious
5C0000
direct allocation
page read and write
 malicious
22F1000
unclassified section
page read and write
 malicious
1F30000
direct allocation
page read and write
 malicious
5E1000
unclassified section
page read and write
 malicious
66B0000
unkown
page read and write
5C70000
unkown
page read and write
F5E2000
unkown
page read and write
52B9000
unkown
page read and write
5C70000
unkown
page read and write
7FF534DBC000
unkown
page readonly
8E6E000
stack
page read and write
66B0000
unkown
page read and write
5A50000
unkown
page readonly
5C70000
unkown
page read and write
3490000
unkown
page read and write
1595B000
stack
page read and write
9D9000
heap
page execute and read and write
7FF53487A000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
FE70000
heap
page read and write
5B67000
stack
page read and write
53CC67E000
stack
page read and write
4B23000
unkown
page read and write
7FF534D83000
unkown
page readonly
FB50000
unkown
page read and write
7FF534D9D000
unkown
page readonly
5C70000
unkown
page read and write
7FF534D3C000
unkown
page readonly
5C70000
unkown
page read and write
15D0000
unkown
page read and write
7FF534EDE000
unkown
page readonly
5340000
unkown
page read and write
5C70000
unkown
page read and write
670000
unkown
page readonly
8F31000
unkown
page read and write
7FF535008000
unkown
page readonly
3850000
unkown
page read and write
7FF535026000
unkown
page readonly
71F0000
unkown
page read and write
5C70000
unkown
page read and write
7FF5350FB000
unkown
page readonly
C100000
unkown
page read and write
33F6000
unkown
page read and write
F644000
unkown
page read and write
5C70000
unkown
page read and write
33B6000
unkown
page read and write
5280000
unkown
page readonly
3890000
unkown
page readonly
93E000
heap
page read and write
4D10000
unkown
page read and write
5C70000
unkown
page read and write
589D000
unkown
page read and write
53CC10B000
stack
page read and write
5C70000
unkown
page read and write
1980000
unkown
page readonly
3850000
unkown
page read and write
7E1C000
unkown
page readonly
5860000
unkown
page read and write
93F000
stack
page read and write
7FF534BB4000
unkown
page readonly
6238000
unkown
page read and write
4B33000
unkown
page read and write
1573000
heap
page read and write
5C70000
unkown
page read and write
F74F000
unkown
page read and write
34B0000
unkown
page read and write
89AF000
stack
page read and write
5C70000
unkown
page read and write
400000
unkown
page readonly
7FF51EC9E000
unkown
page readonly
5340000
unkown
page read and write
5C70000
unkown
page read and write
1F60000
heap
page read and write
7FF535086000
unkown
page readonly
7FF5348D7000
unkown
page readonly
7FF534DAF000
unkown
page readonly
5340000
unkown
page read and write
FF0000
unkown
page readonly
7F13000
unkown
page readonly
400000
unkown
page readonly
5C70000
unkown
page read and write
3490000
unkown
page read and write
33CC000
unkown
page read and write
EE5000
stack
page read and write
7FF535090000
unkown
page readonly
736B000
stack
page read and write
34B0000
unkown
page read and write
7FF534C14000
unkown
page readonly
8566000
unkown
page read and write
9C000
stack
page read and write
3850000
unkown
page read and write
7FF534E86000
unkown
page readonly
5106000
unkown
page read and write
7FF534EBF000
unkown
page readonly
7FF5350AF000
unkown
page readonly
5C70000
unkown
page read and write
7FF534F85000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
7FF534D1C000
unkown
page readonly
7FFC1B4EA000
unkown
page read and write
34B0000
unkown
page read and write
4F4000
heap
page read and write
15ADA000
stack
page read and write
3850000
unkown
page read and write
E40000
unkown
page read and write
61F0000
unkown
page read and write
7FF534944000
unkown
page readonly
66B0000
unkown
page read and write
7FF534BFF000
unkown
page readonly
5C70000
unkown
page read and write
3850000
unkown
page read and write
3850000
remote allocation
page read and write
4BA0000
unkown
page readonly
8545000
unkown
page read and write
B979000
stack
page read and write
3850000
remote allocation
page read and write
5C70000
unkown
page read and write
B4F0000
unkown
page read and write
5730000
unkown
page read and write
5370000
unkown
page readonly
4D70000
unkown
page read and write
7FF534FC1000
unkown
page readonly
53CC4FA000
stack
page read and write
4E8A000
stack
page read and write
3490000
unkown
page read and write
1230000
unkown
page readonly
57B0000
unkown
page read and write
7FF535072000
unkown
page readonly
3850000
unkown
page read and write
3490000
unkown
page read and write
3490000
unkown
page read and write
5BE5000
stack
page read and write
34B0000
unkown
page read and write
8F0C000
unkown
page read and write
1F40000
unclassified section
page read and write
7FF534FB2000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
7FF534D12000
unkown
page readonly
720000
direct allocation
page execute and read and write
5860000
unkown
page read and write
20BF000
stack
page read and write
F81F000
unkown
page read and write
5C70000
unkown
page read and write
7FF534B6A000
unkown
page readonly
1280000
unkown
page readonly
917E000
unkown
page read and write
52BE000
unkown
page read and write
4D20000
unkown
page read and write
5C70000
unkown
page read and write
3300000
unkown
page read and write
5730000
unkown
page read and write
629D000
unkown
page read and write
4BF0000
unkown
page read and write
66B0000
unkown
page read and write
1158B000
unkown
page read and write
7FF5349B7000
unkown
page readonly
5820000
unkown
page read and write
D8E2000
unkown
page read and write
5400000
unkown
page readonly
33DB000
unkown
page read and write
7FF534C64000
unkown
page readonly
7FF53502F000
unkown
page readonly
D88C000
unkown
page read and write
5730000
unkown
page read and write
338C000
unkown
page read and write
3850000
unkown
page read and write
F5EE000
unkown
page read and write
7FF534FBA000
unkown
page readonly
7FF5350A2000
unkown
page readonly
5C70000
unkown
page read and write
7DE000
stack
page read and write
7FF534BE1000
unkown
page readonly
7FF534ED3000
unkown
page readonly
7FF535114000
unkown
page readonly
8EF0000
unkown
page read and write
15B672B9000
heap
page read and write
57E000
stack
page read and write
8558000
unkown
page read and write
1370000
heap
page read and write
1665D000
stack
page read and write
6FEB000
stack
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
F5FD000
unkown
page read and write
7001000
unkown
page read and write
7FF534C0F000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
38A0000
unkown
page read and write
9D000
stack
page read and write
1364E000
stack
page read and write
12E0000
unkown
page readonly
7FF535024000
unkown
page readonly
7FF5349E7000
unkown
page readonly
3490000
unkown
page read and write
91D8000
unkown
page read and write
4B10000
unkown
page read and write
5C70000
unkown
page read and write
5730000
unkown
page read and write
15B67DC0000
trusted library allocation
page read and write
9157000
unkown
page read and write
6329000
unkown
page read and write
5C70000
unkown
page read and write
34B0000
unkown
page read and write
15F0000
unkown
page readonly
9201000
unkown
page read and write
F52A000
unkown
page read and write
3850000
unkown
page read and write
7FF535074000
unkown
page readonly
3490000
unkown
page read and write
66B0000
unkown
page read and write
91A000
heap
page read and write
57B0000
unkown
page read and write
5700000
unkown
page read and write
623F000
unkown
page read and write
5C70000
unkown
page read and write
7FF534C78000
unkown
page readonly
354E000
stack
page read and write
77E2000
unkown
page readonly
7FF534F9E000
unkown
page readonly
66B0000
unkown
page read and write
66B0000
unkown
page read and write
44E000
stack
page read and write
5C70000
unkown
page read and write
F5E4000
unkown
page read and write
5C70000
unkown
page read and write
A1F000
stack
page read and write
42A000
unkown
page write copy
58C0000
unkown
page read and write
3350000
unkown
page read and write
7FF534E77000
unkown
page readonly
5C70000
unkown
page read and write
7FF534E7E000
unkown
page readonly
3850000
unkown
page read and write
7FF534C67000
unkown
page readonly
3146000
stack
page read and write
7227000
unkown
page read and write
3490000
unkown
page read and write
61B000
heap
page read and write
7FF534F96000
unkown
page readonly
51B9000
stack
page read and write
F6CF000
unkown
page read and write
5C70000
unkown
page read and write
7EA5000
unkown
page readonly
454000
heap
page read and write
7F9C000
unkown
page readonly
15B66EB0000
heap
page read and write
5730000
unkown
page read and write
7FF534B3A000
unkown
page readonly
7FF534B4D000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
1F0000
heap
page read and write
7FF534880000
unkown
page readonly
66B0000
unkown
page read and write
77F000
stack
page read and write
6254000
unkown
page read and write
11603000
unkown
page read and write
7FF535055000
unkown
page readonly
34B0000
unkown
page read and write
5700000
unkown
page read and write
5130000
unkown
page readonly
3850000
unkown
page read and write
77F3000
unkown
page readonly
7FF534C9A000
unkown
page readonly
3820000
unkown
page readonly
5C70000
unkown
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
7FF535101000
unkown
page readonly
7FF5349B9000
unkown
page readonly
6FF0000
unkown
page read and write
401000
unkown
page execute read
5C70000
unkown
page read and write
7FF534B43000
unkown
page readonly
450000
heap
page read and write
62BF000
unkown
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
F749000
unkown
page read and write
628B000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
1F0000
heap
page read and write
2160000
heap
page read and write
BCF9000
stack
page read and write
7FF534EC5000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
D898000
unkown
page read and write
7FF534DE7000
unkown
page readonly
7FF534BEE000
unkown
page readonly
7FF5349D4000
unkown
page readonly
5C70000
unkown
page read and write
2480000
heap
page read and write
7FF5348E4000
unkown
page readonly
5C70000
unkown
page read and write
79E000
stack
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
7FF534DBF000
unkown
page readonly
7FF51EC9A000
unkown
page readonly
7FF534B62000
unkown
page readonly
8FC1000
unkown
page read and write
F8B5000
unkown
page read and write
7DF442331000
unkown
page execute read
7FF534EE2000
unkown
page readonly
1490000
unkown
page read and write
7FF534FF2000
unkown
page readonly
5730000
unkown
page read and write
90B5000
unkown
page read and write
90D6000
unkown
page read and write
7FF534F4B000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
5730000
unkown
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
7FFC1B50A000
unkown
page readonly
5C70000
unkown
page read and write
3850000
unkown
page read and write
B67B000
stack
page read and write
5C70000
unkown
page read and write
14D0000
unkown
page read and write
7FF534932000
unkown
page readonly
63B000
heap
page read and write
666B000
unkown
page read and write
5AEA000
stack
page read and write
3850000
unkown
page read and write
925F000
unkown
page read and write
13CCC000
stack
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
14D0000
unkown
page read and write
34B0000
unkown
page read and write
7FF534CA6000
unkown
page readonly
7FF534FBE000
unkown
page readonly
5C70000
unkown
page read and write
34B0000
unkown
page read and write
3490000
unkown
page read and write
1F0000
heap
page read and write
5C70000
unkown
page read and write
7FF535047000
unkown
page readonly
62D5000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
713B000
unkown
page read and write
E30000
heap
page read and write
D875000
unkown
page read and write
7FF535107000
unkown
page readonly
34B0000
unkown
page read and write
5730000
unkown
page read and write
7FF534E02000
unkown
page readonly
8F10000
unkown
page read and write
19C000
stack
page read and write
7FF534BC0000
unkown
page readonly
34B0000
unkown
page read and write
15B672A0000
trusted library allocation
page read and write
F270000
unkown
page read and write
7FF5349D2000
unkown
page readonly
1340000
unkown
page read and write
E964000
stack
page read and write
7FF534E6A000
unkown
page readonly
158DB000
stack
page read and write
5710000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
344B000
unkown
page read and write
854E000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
34B0000
unkown
page read and write
3850000
unkown
page read and write
7FF534C25000
unkown
page readonly
7FF534D73000
unkown
page readonly
7FF534F6C000
unkown
page readonly
7FF534D23000
unkown
page readonly
F85C000
unkown
page read and write
7FF534B76000
unkown
page readonly
7EFE000
unkown
page readonly
5860000
unkown
page read and write
15B67B40000
trusted library allocation
page read and write
B4BB000
stack
page read and write
34B0000
unkown
page read and write
81B0000
unkown
page read and write
F5E6000
unkown
page read and write
5C70000
unkown
page read and write
21F1000
heap
page read and write
15B67AE0000
trusted library allocation
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
401000
unkown
page execute read
B6FC000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
8F33000
unkown
page read and write
5C70000
unkown
page read and write
52F0000
unkown
page write copy
66B0000
unkown
page read and write
5C70000
unkown
page read and write
4B00000
unkown
page read and write
88AB000
stack
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
70E000
stack
page read and write
7CB7000
unkown
page readonly
610000
heap
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
670000
unkown
page readonly
5C70000
unkown
page read and write
3850000
unkown
page read and write
7FF534C27000
unkown
page readonly
7FF534FFE000
unkown
page readonly
7FF534F2A000
unkown
page readonly
7FF534F12000
unkown
page readonly
7FF534A99000
unkown
page readonly
62C8000
unkown
page read and write
7FF534C60000
unkown
page readonly
7EE3000
unkown
page readonly
400000
unkown
page readonly
5350000
unkown
page readonly
66B0000
unkown
page read and write
D867000
unkown
page read and write
3850000
unkown
page read and write
721D000
unkown
page read and write
7FF53493C000
unkown
page readonly
34B0000
unkown
page read and write
7FF53500F000
unkown
page readonly
D8DE000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
F70E000
unkown
page read and write
7FB0000
unkown
page readonly
5C70000
unkown
page read and write
3270000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
5063000
unkown
page read and write
15B66ED0000
heap
page read and write
3850000
unkown
page read and write
9D000
stack
page read and write
15B67D90000
trusted library allocation
page read and write
90D8000
unkown
page read and write
5C70000
unkown
page read and write
8F2F000
unkown
page read and write
7F65000
unkown
page readonly
1384E000
stack
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
34B0000
unkown
page read and write
8574000
unkown
page read and write
30000
heap
page read and write
66B0000
unkown
page read and write
15B672B5000
heap
page read and write
8D67000
stack
page read and write
4B90000
unkown
page read and write
19D000
stack
page read and write
57B0000
unkown
page read and write
12B0000
unkown
page readonly
8FD3000
unkown
page read and write
3310000
unkown
page readonly
6CE000
stack
page read and write
7FF535004000
unkown
page readonly
7FF534B48000
unkown
page readonly
3850000
unkown
page read and write
3850000
unkown
page read and write
7FF53503B000
unkown
page readonly
F751000
unkown
page read and write
401000
unkown
page execute read
910000
heap
page read and write
5C70000
unkown
page read and write
55B6000
stack
page read and write
7FE2000
unkown
page readonly
101AA000
stack
page read and write
23F0000
heap
page read and write
7FF534BF9000
unkown
page readonly
30000
heap
page read and write
3850000
unkown
page read and write
115C5000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
13B4A000
stack
page read and write
730000
heap
page read and write
7FF5348A7000
unkown
page readonly
5730000
unkown
page read and write
30000
heap
page read and write
3490000
unkown
page read and write
62AC000
unkown
page read and write
F2AC000
unkown
page read and write
3850000
remote allocation
page read and write
7FC5000
unkown
page readonly
5010000
unkown
page read and write
66B0000
unkown
page read and write
3850000
unkown
page read and write
BBF000
stack
page read and write
7FF534FD2000
unkown
page readonly
7FFC1B350000
unkown
page readonly
9C0000
heap
page read and write
7FF534FC5000
unkown
page readonly
5C70000
unkown
page read and write
F508000
unkown
page read and write
7FF534BA2000
unkown
page readonly
7FF534E0C000
unkown
page readonly
7133000
unkown
page read and write
7FF534B59000
unkown
page readonly
FBD0000
unkown
page read and write
81F0000
unkown
page read and write
34B0000
unkown
page read and write
34B0000
unkown
page read and write
7F52000
unkown
page readonly
7FF535019000
unkown
page readonly
6261000
unkown
page read and write
36CA000
stack
page read and write
53E000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
7FF535095000
unkown
page readonly
7FF534CF0000
unkown
page readonly
7FF534C19000
unkown
page readonly
14D0000
unkown
page read and write
34B0000
unkown
page read and write
5700000
unkown
page read and write
7FF534F7F000
unkown
page readonly
630000
heap
page read and write
11685000
unkown
page read and write
F4C4000
unkown
page read and write
56CE000
stack
page read and write
7FF534C21000
unkown
page readonly
1F72000
heap
page read and write
15B66F8C000
heap
page read and write
3850000
unkown
page read and write
7FFC1B351000
unkown
page execute read
34B0000
unkown
page read and write
7FFC1B54F000
unkown
page readonly
5C70000
unkown
page read and write
34B0000
unkown
page read and write
670000
unkown
page readonly
627C000
unkown
page read and write
5CF0000
unkown
page read and write
7FF53505E000
unkown
page readonly
5340000
unkown
page read and write
5C70000
unkown
page read and write
66B0000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
2150000
heap
page read and write
5730000
unkown
page read and write
90F000
stack
page read and write
23F1000
heap
page read and write
F607000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
7FFC1B4EE000
unkown
page read and write
5C70000
unkown
page read and write
8CEC000
stack
page read and write
8240000
heap
page read and write
5860000
unkown
page read and write
F5EC000
unkown
page read and write
7FF534F9A000
unkown
page readonly
81E000
stack
page read and write
7FF534DA5000
unkown
page readonly
CBF000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
1560000
unkown
page readonly
7FF534C34000
unkown
page readonly
6246000
unkown
page read and write
91CD000
unkown
page read and write
42A000
unkown
page write copy
66B0000
unkown
page read and write
722B000
unkown
page read and write
7FF534FB4000
unkown
page readonly
3490000
unkown
page read and write
9297000
unkown
page read and write
7FF534D17000
unkown
page readonly
7BE7000
unkown
page readonly
F72B000
unkown
page read and write
34B0000
unkown
page read and write
7FF534E1F000
unkown
page readonly
7249000
unkown
page read and write
5C70000
unkown
page read and write
134CF000
stack
page read and write
5C70000
unkown
page read and write
354C000
stack
page read and write
57A2000
unkown
page read and write
4B60000
unkown
page read and write
3250000
heap
page read and write
3490000
unkown
page read and write
724D000
unkown
page read and write
7FF5349C6000
unkown
page readonly
7FF53502D000
unkown
page readonly
15A5E000
stack
page read and write
5730000
unkown
page read and write
3256000
heap
page read and write
5360000
unkown
page read and write
5C70000
unkown
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
138D000
heap
page read and write
EB1E000
unkown
page read and write
D87F000
unkown
page read and write
5C70000
unkown
page read and write
1555A000
stack
page read and write
7FF534EC9000
unkown
page readonly
7C9E000
unkown
page readonly
34B0000
unkown
page read and write
8A3C000
stack
page read and write
66B0000
unkown
page read and write
7E83000
unkown
page readonly
5C70000
unkown
page read and write
73EB000
stack
page read and write
5730000
unkown
page read and write
5730000
unkown
page read and write
11646000
unkown
page read and write
3490000
unkown
page read and write
712D000
unkown
page read and write
7FF534ED0000
unkown
page readonly
6236000
unkown
page read and write
77DE000
unkown
page readonly
1378000
heap
page read and write
7FF534B33000
unkown
page readonly
BD77000
stack
page read and write
13347000
stack
page read and write
F5E8000
unkown
page read and write
35C8000
stack
page read and write
7FF534924000
unkown
page readonly
BF7A000
stack
page read and write
7CBF000
unkown
page readonly
7FF534F2E000
unkown
page readonly
500A000
stack
page read and write
5C70000
unkown
page read and write
5D0000
unclassified section
page read and write
401000
unkown
page execute read
66B0000
unkown
page read and write
5C70000
unkown
page read and write
842C000
stack
page read and write
5700000
unkown
page read and write
3850000
unkown
page read and write
921A000
unkown
page read and write
5C70000
unkown
page read and write
5730000
unkown
page read and write
66B0000
unkown
page read and write
3850000
unkown
page read and write
6325000
unkown
page read and write
15B66F40000
heap
page read and write
7235000
unkown
page read and write
5BE000
stack
page read and write
F6A0000
unkown
page read and write
7FF534BF1000
unkown
page readonly
34B0000
unkown
page read and write
BDF8000
stack
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
510F000
unkown
page read and write
14D0000
unkown
page read and write
7FF535035000
unkown
page readonly
157DE000
stack
page read and write
14D0000
unkown
page read and write
57B0000
unkown
page read and write
5C70000
unkown
page read and write
7FF534F73000
unkown
page readonly
5C70000
unkown
page read and write
132CC000
stack
page read and write
7C61000
unkown
page readonly
401000
unkown
page execute read
5C70000
unkown
page read and write
1002C000
stack
page read and write
5C70000
unkown
page read and write
1164B000
unkown
page read and write
7FF534F0B000
unkown
page readonly
4F88000
stack
page read and write
3850000
unkown
page read and write
5720000
unkown
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
7FF5349EA000
unkown
page readonly
C0FB000
stack
page read and write
5700000
unkown
page read and write
15B66F48000
heap
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
5730000
unkown
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
57B0000
unkown
page read and write
89B0000
unkown
page readonly
7578000
unkown
page read and write
11599000
unkown
page read and write
928E000
unkown
page read and write
F621000
unkown
page read and write
34B0000
unkown
page read and write
1425000
heap
page read and write
34B0000
unkown
page read and write
62F000
stack
page read and write
7ED5000
unkown
page readonly
4E08000
stack
page read and write
5C70000
unkown
page read and write
7FF5349C1000
unkown
page readonly
7FF5350AA000
unkown
page readonly
5C70000
unkown
page read and write
EB10000
unkown
page read and write
5C29000
unkown
page read and write
7FF5348FA000
unkown
page readonly
5C70000
unkown
page read and write
2540000
heap
page read and write
57B0000
unkown
page read and write
7FF534F44000
unkown
page readonly
1344A000
stack
page read and write
7FFC1B4E3000
unkown
page read and write
3808000
stack
page read and write
34B0000
unkown
page read and write
15B67B50000
trusted library allocation
page read and write
3850000
unkown
page read and write
7FF534E4C000
unkown
page readonly
7FFC1B4ED000
unkown
page write copy
7FF53509B000
unkown
page readonly
34B0000
unkown
page read and write
7FF534DAB000
unkown
page readonly
7FF534DF4000
unkown
page readonly
5A20000
unkown
page readonly
34B0000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
563E000
stack
page read and write
53CC579000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
7FCC000
unkown
page readonly
5C70000
unkown
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
7FF534C5D000
unkown
page readonly
7FF534B9B000
unkown
page readonly
58D0000
unkown
page readonly
7FF534BA6000
unkown
page readonly
5291000
unkown
page read and write
9CA000
heap
page read and write
7FF5348F0000
unkown
page readonly
F759000
unkown
page read and write
15B5E000
stack
page read and write
5C70000
unkown
page read and write
15B66F84000
heap
page read and write
1354B000
stack
page read and write
7CCF000
unkown
page readonly
7FFC1B439000
unkown
page readonly
90B1000
unkown
page read and write
5C70000
unkown
page read and write
F656000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
7FFC1B4E5000
unkown
page read and write
1310000
unkown
page readonly
5296000
unkown
page read and write
5340000
unkown
page read and write
1F50000
heap
page read and write
8F97000
unkown
page read and write
1360000
unkown
page readonly
8C2C000
stack
page read and write
3850000
unkown
page read and write
676C000
stack
page read and write
920F000
unkown
page read and write
15B67DA0000
heap
page readonly
5880000
unkown
page read and write
5020000
unkown
page read and write
9EF000
heap
page read and write
9C000
stack
page read and write
7D52000
unkown
page readonly
7FF534D9A000
unkown
page readonly
5340000
unkown
page read and write
5C70000
unkown
page read and write
7FF535017000
unkown
page readonly
7FF534BD4000
unkown
page readonly
400000
remote allocation
page execute and read and write
57B0000
unkown
page read and write
57B0000
unkown
page read and write
5C70000
unkown
page read and write
B439000
stack
page read and write
15B66F8E000
heap
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
7166000
unkown
page read and write
15E5000
heap
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
1575E000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
7FF53496E000
unkown
page readonly
F661000
unkown
page read and write
156DA000
stack
page read and write
5C70000
unkown
page read and write
66B0000
unkown
page read and write
D6F0000
unkown
page read and write
3371000
unkown
page read and write
42A000
unkown
page read and write
62E5000
unkown
page read and write
4B50000
unkown
page read and write
34B0000
unkown
page read and write
7FF534E4E000
unkown
page readonly
7FF534B5C000
unkown
page readonly
7FF534FCB000
unkown
page readonly
5C70000
unkown
page read and write
7FF534D0F000
unkown
page readonly
5C70000
unkown
page read and write
D88E000
unkown
page read and write
FCAD000
stack
page read and write
B879000
stack
page read and write
166DC000
stack
page read and write
34B0000
unkown
page read and write
7FF534BF6000
unkown
page readonly
7FF535043000
unkown
page readonly
5C70000
unkown
page read and write
670000
unkown
page readonly
5C70000
unkown
page read and write
5730000
unkown
page read and write
856F000
unkown
page read and write
34B0000
unkown
page read and write
7FF534F17000
unkown
page readonly
5C70000
unkown
page read and write
3490000
unkown
page read and write
7FFC1B4F3000
unkown
page readonly
3490000
unkown
page read and write
EB20000
unkown
page read and write
33E8000
unkown
page read and write
928000
heap
page execute and read and write
5C70000
unkown
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
7FF534E7C000
unkown
page readonly
57B0000
unkown
page read and write
137C9000
stack
page read and write
7FF535121000
unkown
page readonly
5C70000
unkown
page read and write
1220000
unkown
page readonly
7FF534F37000
unkown
page readonly
5C70000
unkown
page read and write
633A000
unkown
page read and write
1570000
heap
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
3390000
unkown
page read and write
7FF534D9F000
unkown
page readonly
3490000
unkown
page read and write
3490000
unkown
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
3490000
unkown
page read and write
8F54000
unkown
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
7FF5349CF000
unkown
page readonly
2390000
heap
page read and write
15B66F8C000
heap
page read and write
B8FA000
stack
page read and write
F5D0000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
7FF534EEE000
unkown
page readonly
940000
direct allocation
page execute and read and write
3850000
unkown
page read and write
66B0000
unkown
page read and write
7FF534B64000
unkown
page readonly
5C70000
unkown
page read and write
3850000
unkown
page read and write
159DC000
stack
page read and write
400000
unkown
page readonly
42A000
unkown
page write copy
D733000
unkown
page read and write
670000
unkown
page readonly
1445000
heap
page read and write
5700000
unkown
page read and write
100A8000
stack
page read and write
5C70000
unkown
page read and write
7FF534A71000
unkown
page readonly
5C70000
unkown
page read and write
3850000
unkown
page read and write
928B000
unkown
page read and write
5C70000
unkown
page read and write
400000
unkown
page readonly
7FF534B3E000
unkown
page readonly
BC7E000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
52D0000
unkown
page read and write
11582000
unkown
page read and write
7FF534916000
unkown
page readonly
7FF534CD0000
unkown
page readonly
632C000
unkown
page read and write
F5DA000
unkown
page read and write
8725000
stack
page read and write
7FF534EB3000
unkown
page readonly
34B0000
unkown
page read and write
8F2A000
unkown
page read and write
5C70000
unkown
page read and write
6322000
unkown
page read and write
5C70000
unkown
page read and write
7FF534FE4000
unkown
page readonly
2910000
heap
page read and write
7FF534F52000
unkown
page readonly
8F1C000
unkown
page read and write
14D0000
unkown
page read and write
5730000
unkown
page read and write
5C70000
unkown
page read and write
1590000
unkown
page readonly
5C70000
unkown
page read and write
6267000
unkown
page read and write
5C70000
unkown
page read and write
8F20000
unkown
page read and write
5C70000
unkown
page read and write
830000
heap
page read and write
7D44000
unkown
page readonly
7FF535051000
unkown
page readonly
21F0000
heap
page read and write
53CC5FF000
stack
page read and write
1290000
unkown
page read and write
66B0000
unkown
page read and write
3850000
unkown
page read and write
7FF534B7D000
unkown
page readonly
7E45000
unkown
page readonly
7E6E000
unkown
page readonly
4D30000
unkown
page read and write
57B0000
unkown
page read and write
7FFC1B4EC000
unkown
page read and write
80AD000
stack
page read and write
66B0000
unkown
page read and write
7B1D000
unkown
page readonly
8F14000
unkown
page read and write
5C70000
unkown
page read and write
62C6000
unkown
page read and write
5C70000
unkown
page read and write
8F42000
unkown
page read and write
14D0000
unkown
page read and write
631C000
unkown
page read and write
5340000
unkown
page read and write
F31B000
unkown
page read and write
34B0000
unkown
page read and write
3850000
unkown
page read and write
19D000
stack
page read and write
3646000
stack
page read and write
7FF534AA6000
unkown
page readonly
5C70000
unkown
page read and write
7C88000
unkown
page readonly
3490000
unkown
page read and write
92DD000
unkown
page read and write
5C70000
unkown
page read and write
E9EF000
stack
page read and write
B0F000
stack
page read and write
3490000
unkown
page read and write
8629000
stack
page read and write
623C000
unkown
page read and write
5C70000
unkown
page read and write
7FF534B55000
unkown
page readonly
34B0000
unkown
page read and write
66A0000
unkown
page readonly
77B0000
unkown
page readonly
7F8E000
unkown
page readonly
57B0000
unkown
page read and write
3850000
unkown
page read and write
34B0000
unkown
page read and write
9155000
unkown
page read and write
34B0000
unkown
page read and write
5C70000
unkown
page read and write
3490000
unkown
page read and write
8EEB000
stack
page read and write
34B0000
unkown
page read and write
7FF534F21000
unkown
page readonly
15B672B0000
heap
page read and write
7FF534F32000
unkown
page readonly
93B3000
unkown
page read and write
14D0000
unkown
page read and write
4F0000
heap
page read and write
F5A7000
unkown
page read and write
5C70000
unkown
page read and write
F4C8000
unkown
page read and write
11AB7000
stack
page read and write
7FF5348AC000
unkown
page readonly
7FF534877000
unkown
page readonly
324E000
stack
page read and write
4C10000
unkown
page read and write
15B66E50000
trusted library allocation
page read and write
5C70000
unkown
page read and write
7FF534DB3000
unkown
page readonly
7FF534885000
unkown
page readonly
3850000
unkown
page read and write
154DE000
stack
page read and write
15C0000
unkown
page readonly
34B0000
unkown
page read and write
5C70000
unkown
page read and write
F806000
unkown
page read and write
42A000
unkown
page read and write
5340000
unkown
page read and write
77DB000
unkown
page readonly
B57E000
stack
page read and write
5C70000
unkown
page read and write
FE72000
heap
page read and write
52E0000
unkown
page readonly
15B672C0000
trusted library allocation
page read and write
34B0000
unkown
page read and write
D881000
unkown
page read and write
7FF534FB7000
unkown
page readonly
3850000
unkown
page read and write
400000
unkown
page readonly
7FFC1B557000
unkown
page readonly
F069000
stack
page read and write
5C70000
unkown
page read and write
341A000
unkown
page read and write
7FF534BDB000
unkown
page readonly
34B0000
unkown
page read and write
3850000
unkown
page read and write
6770000
unkown
page read and write
34B0000
unkown
page read and write
F62F000
unkown
page read and write
5C70000
unkown
page read and write
5700000
unkown
page read and write
5730000
unkown
page read and write
34B0000
unkown
page read and write
14D0000
unkown
page read and write
9331000
unkown
page read and write
116C4000
unkown
page read and write
3490000
unkown
page read and write
5C70000
unkown
page read and write
401000
unkown
page execute read
5730000
unkown
page read and write
D864000
unkown
page read and write
30000
heap
page read and write
6274000
unkown
page read and write
10CD6000
unkown
page read and write
F49C000
unkown
page read and write
34B0000
unkown
page read and write
7FF534E65000
unkown
page readonly
F41C000
unkown
page read and write
57B0000
unkown
page read and write
5730000
unkown
page read and write
36D0000
unkown
page readonly
14D0000
unkown
page read and write
19C000
stack
page read and write
5C70000
unkown
page read and write
4C00000
unkown
page readonly
5340000
unkown
page read and write
7FB7000
unkown
page readonly
102A7000
stack
page read and write
7FD9000
unkown
page readonly
7FF534C2C000
unkown
page readonly
3850000
unkown
page read and write
7EAC000
unkown
page readonly
2720000
heap
page read and write
31CA000
stack
page read and write
7FF534C80000
unkown
page readonly
B3AF000
stack
page read and write
4BB0000
unkown
page readonly
5C70000
unkown
page read and write
33EE000
unkown
page read and write
D8EB000
unkown
page read and write
5C70000
unkown
page read and write
5730000
unkown
page read and write
3490000
unkown
page read and write
15B66F8C000
heap
page read and write
F5EA000
unkown
page read and write
3490000
unkown
page read and write
1300000
unkown
page read and write
15B67DB0000
trusted library allocation
page read and write
4D40000
unkown
page read and write
7FA3000
unkown
page readonly
34B0000
unkown
page read and write
670000
unkown
page readonly
F432000
unkown
page read and write
7FF534B41000
unkown
page readonly
3490000
unkown
page read and write
F74B000
unkown
page read and write
5730000
unkown
page read and write
7FF534FCF000
unkown
page readonly
7FF534FEB000
unkown
page readonly
53FC000
stack
page read and write
57D0000
unkown
page readonly
5C70000
unkown
page read and write
5C70000
unkown
page read and write
8F28000
unkown
page read and write
8F35000
unkown
page read and write
C077000
stack
page read and write
59F0000
unkown
page read and write
5C70000
unkown
page read and write
7FF535029000
unkown
page readonly
7FF534EE6000
unkown
page readonly
7FF534D2D000
unkown
page readonly
7FF534DFB000
unkown
page readonly
67E000
stack
page read and write
7FB9000
unkown
page readonly
5730000
unkown
page read and write
7FF534D26000
unkown
page readonly
3490000
unkown
page read and write
7257000
unkown
page read and write
4BC0000
unkown
page readonly
2172000
heap
page read and write
1585C000
stack
page read and write
5C70000
unkown
page read and write
66B0000
unkown
page read and write
4BE0000
unkown
page readonly
856C000
unkown
page read and write
34B0000
unkown
page read and write
5340000
unkown
page read and write
5730000
unkown
page read and write
7FF534A9E000
unkown
page readonly
14D0000
unkown
page read and write
BB78000
stack
page read and write
15E0000
heap
page read and write
34B0000
unkown
page read and write
7FF534DC9000
unkown
page readonly
15B67E10000
trusted library allocation
page read and write
400000
remote allocation
page execute and read and write
7F3C000
unkown
page readonly
1F0000
heap
page read and write
9289000
unkown
page read and write
4F09000
stack
page read and write
5340000
unkown
page read and write
5340000
unkown
page read and write
523C000
stack
page read and write
15BDD000
stack
page read and write
F5F5000
unkown
page read and write
9256000
unkown
page read and write
3850000
unkown
page read and write
7FF534E9B000
unkown
page readonly
5740000
unkown
page read and write
5730000
unkown
page read and write
7FF534E57000
unkown
page readonly
F2C3000
unkown
page read and write
3850000
unkown
page read and write
BAFD000
stack
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
34B0000
unkown
page read and write
7FF534EA5000
unkown
page readonly
7FF534C1D000
unkown
page readonly
71BA000
unkown
page read and write
42A000
unkown
page write copy
34B0000
unkown
page read and write
6230000
unkown
page read and write
71F000
stack
page read and write
5C70000
unkown
page read and write
7FF5347B1000
unkown
page readonly
66B0000
unkown
page read and write
3850000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
5120000
unkown
page readonly
FE7A000
heap
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
5C70000
unkown
page read and write
3850000
unkown
page read and write
22E0000
heap
page read and write
D312000
unkown
page read and write
7FF534D2A000
unkown
page readonly
5C70000
unkown
page read and write
7CA5000
unkown
page readonly
5730000
unkown
page read and write
5C70000
unkown
page read and write
7FF53490A000
unkown
page readonly
F367000
unkown
page read and write
F5D6000
unkown
page read and write
7FF534DCF000
unkown
page readonly
7DBA000
unkown
page readonly
15B66E40000
heap
page read and write
8F2D000
unkown
page read and write
34B0000
unkown
page read and write
7561000
unkown
page read and write
83AD000
stack
page read and write
5A10000
unkown
page read and write
3850000
unkown
page read and write
7FF534CAE000
unkown
page readonly
5C70000
unkown
page read and write
B9FF000
stack
page read and write
57B0000
unkown
page read and write
3850000
unkown
page read and write
4B43000
unkown
page read and write
3850000
unkown
page read and write
There are 1181 hidden memdumps, click here to show them.