IOC Report
AKQlHV2OJ0aENUv.exe

loading gif

Files

File Path
Type
Category
Malicious
AKQlHV2OJ0aENUv.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\AKQlHV2OJ0aENUv.exe.log
ASCII text, with CRLF line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\AKQlHV2OJ0aENUv.exe
"C:\Users\user\Desktop\AKQlHV2OJ0aENUv.exe"
 malicious
C:\Users\user\Desktop\AKQlHV2OJ0aENUv.exe
"C:\Users\user\Desktop\AKQlHV2OJ0aENUv.exe"
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\colorcpl.exe
"C:\Windows\SysWOW64\colorcpl.exe"
 malicious
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Users\user\Desktop\AKQlHV2OJ0aENUv.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
http://www.1510soliveavenue.com/be03/?Ktx=f+lA/QCztT1lqcvHxn3+xtGvw5Bdz2w6Roq8c2s49e4fYYMkvFWkHVmjwtIhu/nWDsj5&FH1dsn=fdWtyHz8Gp
64.98.135.96
 malicious
www.j88.kids/be03/
malicious
http://www.458q14v4ams2.com/be03/?FH1dsn=fdWtyHz8Gp&Ktx=tdmJXmeeurL3VyXQGugFKYG2cAAEk1C0W1C0l9oBPl3gfP464eXYcWjmtestmZt6Bmfv
118.107.45.77
 malicious
http://www.6ixsoft.comReferer:
unknown
http://www.6ixsoft.com/be03/www.truck-driver-jobs-2024.online
unknown
https://api.msn.com:443/v1/news/Feed/Windows?
unknown
http://www.j88.kids/be03/www.wnkj001.site
unknown
http://www.j88.kidsReferer:
unknown
http://www.growthpfad.com/be03/www.yteam.tech
unknown
https://excel.office.com
unknown
http://www.groundswellmag.life
unknown
http://www.6ixsoft.com
unknown
http://www.wnkj001.site
unknown
http://www.truck-driver-jobs-2024.online
unknown
http://www.1510soliveavenue.comReferer:
unknown
http://www.6ixsoft.com/be03/
unknown
https://api.msn.com/v1/news/Feed/Windows?activityId=3B22F7CF85C14EF68AA6229BF5B3705E&timeOut=5000&oc
unknown
http://www.roofing-jobs4-in-205nz.today/be03/www.stmerry888.com
unknown
http://www.stupididiotmoron.com
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13pwi3
unknown
http://www.yteam.tech/be03/www.6ixsoft.com
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppexe
unknown
https://www.msn.com/en-us/health/medical/mayo-clinic-minute-who-benefits-from-taking-statins/ar-AA1h
unknown
http://www.roofing-jobs4-in-205nz.today
unknown
http://www.abandoned-houses-se-0.bond/be03/www.24laura.info
unknown
http://www.yteam.tech
unknown
https://www.rd.com/list/best-cities-by-generation/
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13pwi3-dark
unknown
http://www.stmerry888.com
unknown
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/WeatherInsights/WeatherInsi
unknown
http://www.1510soliveavenue.com/be03/www.458q14v4ams2.com
unknown
http://www.autoitscript.com/autoit3/J
unknown
https://www.msn.com/en-us/news/us/counterpoint-individual-parents-rights-do-not-translate-to-a-licen
unknown
http://www.abandoned-houses-se-0.bond/be03/
unknown
https://word.office.com
unknown
http://www.1510soliveavenue.com
unknown
http://www.stupididiotmoron.com/be03/www.growthpfad.com
unknown
http://www.groundswellmag.lifeReferer:
unknown
http://www.okltyf.xyz
unknown
http://www.roofing-jobs4-in-205nz.todayReferer:
unknown
https://www.msn.com/en-us/money/realestate/my-husband-and-i-paid-off-our-mortgage-more-than-15-years
unknown
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
unknown
http://www.458q14v4ams2.com/be03/
unknown
https://buy.live.com/
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
unknown
https://login.microsoftonline.co
unknown
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
http://www.yteam.tech/be03/
unknown
http://www.okltyf.xyz/be03/www.1510soliveavenue.com
unknown
https://outlook.com
unknown
http://www.okltyf.xyzReferer:
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMeu
unknown
https://android.notify.windows.com/iOS
unknown
https://www.msn.com/en-us/lifestyle/home-and-garden/10-vital-home-maintenance-tasks-you-ll-regret-if
unknown
http://www.growthpfad.com
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/MostlyClearNight.svg
unknown
http://www.okltyf.xyz/be03/
unknown
http://www.stmerry888.com/be03/
unknown
https://premierestateproperties.com/homes-for-sale-details/1510-S-OLIVE-AVENUE-WEST-PALM-BEACH-FL-33
unknown
http://www.truck-driver-jobs-2024.online/be03/
unknown
http://www.abandoned-houses-se-0.bondReferer:
unknown
https://api.msn.com/v1/news/Feed/Windows?
unknown
http://www.groundswellmag.life/be03/
unknown
https://passwordreset.micros
unknown
http://www.24laura.info/be03/www.roofing-jobs4-in-205nz.today
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
unknown
https://account.activedirectory.
unknown
https://www.msn.com/en-us/news/politics/kinzinger-has-theory-about-who-next-house-speaker-will-be/vi
unknown
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
unknown
http://schemas.micro
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Teaser/recordhigh.svg
unknown
https://wns.windows.com/EM0
unknown
https://www.msn.com/en-us/weather/topstories/us-winter-forecast-for-the-2023-2024-season/ar-AA1hGINt
unknown
http://www.stupididiotmoron.com/be03/
unknown
https://android.notify.windows.com/iOSdX
unknown
http://www.24laura.info
unknown
http://www.growthpfad.com/be03/
unknown
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
https://www.msn.com/en-us/news/politics/vote-to-oust-mccarthy-is-a-warning-sign-for-democracy-schola
unknown
https://account.li
unknown
https://www.msn.com/en-us/news/politics/here-s-what-house-rules-say-about-trump-serving-as-speaker-o
unknown
https://www.msn.com/en-us/news/world/pastor-of-atlanta-based-megachurch-faces-backlash-after-controv
unknown
http://www.j88.kids
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMeu-dark
unknown
http://www.458q14v4ams2.comReferer:
unknown
http://www.abandoned-houses-se-0.bond
unknown
http://www.wnkj001.site/be03/
unknown
http://www.roofing-jobs4-in-205nz.today/be03/
unknown
http://www.24laura.info/be03/
unknown
https://www.msn.com/en-us/money/personalfinance/the-no-1-phrase-people-who-are-good-at-small-talk-al
unknown
http://www.j88.kids/be03/
unknown
https://www.msn.com/en-us/news/world/ukraine-live-briefing-biden-does-worry-house-drama-will-impact-
unknown
http://www.truck-driver-jobs-2024.onlineReferer:
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMhz
unknown
http://www.truck-driver-jobs-2024.online/be03/www.j88.kids
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMhz-dark
unknown
https://www.chiark.greenend.org.uk/~sgtatham/putty/0
unknown
https://www.msn.com/en-us/money/personalfinance/money-matters-changing-institution-of-marriage/ar-AA
unknown
http://www.stmerry888.comReferer:
unknown
http://www.wnkj001.siteReferer:
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.1510soliveavenue.com
64.98.135.96
 malicious
www.458q14v4ams2.com
118.107.45.77
 malicious
www.abandoned-houses-se-0.bond
unknown
 malicious

IPs

IP
Domain
Country
Malicious
64.98.135.96
www.1510soliveavenue.com
Canada
malicious
118.107.45.77
www.458q14v4ams2.com
Singapore
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.check.0
CheckSetting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{852FB1F8-5CC6-4567-9C0E-7C330F8807C2}.check.100
CheckSetting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Shell\Bags\1\Desktop
IconLayouts
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR
KGLToGCSUpdatedRevision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
SlowContextMenuEntries
There are 26 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
3270000
unclassified section
page execute and read and write
 malicious
6800000
trusted library section
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
367E000
trusted library allocation
page read and write
 malicious
2DD0000
system
page execute and read and write
 malicious
34C0000
trusted library allocation
page read and write
 malicious
2712000
trusted library allocation
page read and write
 malicious
24A1000
trusted library allocation
page read and write
 malicious
E98F000
unkown
page read and write
A186000
unkown
page read and write
BD18000
unkown
page read and write
7FF59BC91000
unkown
page readonly
3FBD000
unkown
page read and write
BDCF000
unkown
page read and write
BF3F000
unkown
page read and write
88AB000
unkown
page read and write
A183000
unkown
page read and write
7FF59BCDD000
unkown
page readonly
7FF59BB6E000
unkown
page readonly
88B3000
unkown
page read and write
80CF000
stack
page read and write
7FF59BCE5000
unkown
page readonly
10E4F000
system
page read and write
BB94000
unkown
page read and write
7FF59B9CD000
unkown
page readonly
7FF59B9B4000
unkown
page readonly
7FF59B97F000
unkown
page readonly
7FF59BA78000
unkown
page readonly
7FF59B79B000
unkown
page readonly
5CD000
stack
page read and write
A17F000
unkown
page read and write
515000
heap
page read and write
9788000
unkown
page read and write
5030000
direct allocation
page execute and read and write
ADD0000
unkown
page read and write
E30000
heap
page read and write
E978000
unkown
page read and write
7FF59B5AD000
unkown
page readonly
9798000
unkown
page read and write
BA61000
unkown
page read and write
7FF59B5F5000
unkown
page readonly
7FF59BC8F000
unkown
page readonly
4A90000
trusted library allocation
page execute and read and write
BD22000
unkown
page read and write
170000
unkown
page readonly
7FF59B6EE000
unkown
page readonly
101B9000
unkown
page execute and read and write
E964000
unkown
page read and write
7FF59B680000
unkown
page readonly
8733000
unkown
page read and write
2599000
stack
page read and write
49C0000
heap
page read and write
BD1D000
unkown
page read and write
7FF59B775000
unkown
page readonly
88A5000
unkown
page read and write
9779000
unkown
page read and write
8899000
unkown
page read and write
7FF59BBE2000
unkown
page readonly
C5AB000
stack
page read and write
6FF000
heap
page read and write
E97A000
unkown
page read and write
97F4000
unkown
page read and write
3E40000
unkown
page read and write
7FF59B843000
unkown
page readonly
3FE3000
unkown
page read and write
7FF59BB22000
unkown
page readonly
7FF59BB9B000
unkown
page readonly
875F000
unkown
page read and write
7FF59B5E7000
unkown
page readonly
13F1000
trusted library allocation
page execute and read and write
26A6000
stack
page read and write
BBBB000
unkown
page read and write
E97A000
unkown
page read and write
7FF59B930000
unkown
page readonly
32E6000
heap
page read and write
7360000
heap
page read and write
7FF59BD16000
unkown
page readonly
7AE000
stack
page read and write
7FF59B80F000
unkown
page readonly
7FF59B5E2000
unkown
page readonly
7FF59BC80000
unkown
page readonly
7FF59BC0D000
unkown
page readonly
4AA0000
trusted library allocation
page read and write
7FF59BD83000
unkown
page readonly
6A9A000
unkown
page read and write
5372000
direct allocation
page execute and read and write
BD5D000
unkown
page read and write
10A0000
heap
page read and write
A32000
trusted library allocation
page read and write
32DB000
heap
page read and write
4A83000
heap
page read and write
7FF59BC87000
unkown
page readonly
E58000
heap
page read and write
49A9000
unkown
page read and write
7DF49DC71000
unkown
page execute read
7FF59BCD3000
unkown
page readonly
889D000
unkown
page read and write
7FF59BB9B000
unkown
page readonly
27C9000
stack
page read and write
7FF59BD18000
unkown
page readonly
9819000
unkown
page read and write
7FF59BC07000
unkown
page readonly
87C2000
unkown
page read and write
7FF59BB51000
unkown
page readonly
7DF49DCB1000
unkown
page execute read
7BEB000
stack
page read and write
7FF59BCA3000
unkown
page readonly
875F000
unkown
page read and write
7FF59BC7B000
unkown
page readonly
E96E000
unkown
page read and write
7FF59B94D000
unkown
page readonly
871B000
unkown
page read and write
5A0000
heap
page read and write
7FF59B9C6000
unkown
page readonly
7FF59B794000
unkown
page readonly
3FE5000
unkown
page read and write
6BA0000
unkown
page read and write
BB8A000
unkown
page read and write
A18A000
unkown
page read and write
8369000
stack
page read and write
7FF59BA18000
unkown
page readonly
FB36000
unkown
page read and write
ADA0000
unkown
page readonly
6F70000
unkown
page read and write
7FF59B7E4000
unkown
page readonly
179D000
trusted library allocation
page execute and read and write
3120000
trusted library allocation
page read and write
B980000
unkown
page readonly
A1E7000
unkown
page read and write
81F0000
unkown
page read and write
3FB6000
unkown
page read and write
BA1A000
unkown
page read and write
7FF59BD96000
unkown
page readonly
4F45000
heap
page read and write
3FE1000
unkown
page read and write
7FF59B6E2000
unkown
page readonly
7FF59BC5B000
unkown
page readonly
7FF59B9E3000
unkown
page readonly
97BE000
unkown
page read and write
AC4F000
stack
page read and write
7FF59BC48000
unkown
page readonly
7FF59BCFB000
unkown
page readonly
7FF59BA81000
unkown
page readonly
977D000
unkown
page read and write
B87000
heap
page read and write
9765000
unkown
page read and write
8632000
unkown
page read and write
8974000
unkown
page read and write
BA41000
unkown
page read and write
7FF59BA72000
unkown
page readonly
7FF59BB72000
unkown
page readonly
6946000
unkown
page read and write
3FCA000
unkown
page read and write
7FF59BAE6000
unkown
page readonly
7FF59BBC3000
unkown
page readonly
7FF59BB48000
unkown
page readonly
BBB3000
unkown
page read and write
92BE000
stack
page read and write
7FF59BB1C000
unkown
page readonly
7FF59B9AB000
unkown
page readonly
7FF59B94D000
unkown
page readonly
7FF59BB57000
unkown
page readonly
7FF59BDAD000
unkown
page readonly
6810000
trusted library allocation
page read and write
71F1000
unkown
page read and write
725000
heap
page read and write
BA22000
unkown
page read and write
31D4000
heap
page read and write
7350000
unkown
page readonly
A810000
unkown
page readonly
BA13000
unkown
page read and write
BF2C000
unkown
page read and write
71A0000
unkown
page readonly
BA1A000
unkown
page read and write
83E9000
stack
page read and write
9816000
unkown
page read and write
32E6000
heap
page read and write
E978000
unkown
page read and write
7FF59BD62000
unkown
page readonly
7FF59BB44000
unkown
page readonly
7FF59BC69000
unkown
page readonly
BA55000
unkown
page read and write
7FF59B79B000
unkown
page readonly
BA16000
unkown
page read and write
88B8000
unkown
page read and write
3FC8000
unkown
page read and write
7FF59BAA2000
unkown
page readonly
88AF000
unkown
page read and write
160000
unkown
page readonly
3F14000
unkown
page read and write
BD1D000
unkown
page read and write
88AF000
unkown
page read and write
7FF59BB16000
unkown
page readonly
691C000
unkown
page read and write
7290000
unkown
page readonly
6DD000
trusted library allocation
page execute and read and write
32C8000
heap
page read and write
7FF59B8BA000
unkown
page readonly
6F60000
unkown
page read and write
7FF59B163000
unkown
page readonly
7FF59BAE6000
unkown
page readonly
459B000
stack
page read and write
7FF59B898000
unkown
page readonly
98F8000
unkown
page read and write
6D0000
trusted library allocation
page read and write
7FF59B8D1000
unkown
page readonly
816F000
unkown
page read and write
A61B000
stack
page read and write
9A8E000
stack
page read and write
3120000
trusted library allocation
page read and write
7FF59BB3B000
unkown
page readonly
7FF59BD18000
unkown
page readonly
7FF59BC77000
unkown
page readonly
FC5A000
system
page execute and read and write
7FF59BBB4000
unkown
page readonly
BA75000
unkown
page read and write
E0AE000
stack
page read and write
7FF59B79E000
unkown
page readonly
2A60000
stack
page read and write
7FF59B5D3000
unkown
page readonly
BA55000
unkown
page read and write
7FF59B5D3000
unkown
page readonly
9943000
unkown
page read and write
A718000
stack
page read and write
1400000
direct allocation
page execute and read and write
3FBD000
unkown
page read and write
7FF59B800000
unkown
page readonly
BC4F000
unkown
page read and write
7FF59B71A000
unkown
page readonly
7FF59BCE1000
unkown
page readonly
2A62000
stack
page read and write
7FF59BC1E000
unkown
page readonly
977F000
unkown
page read and write
31D4000
heap
page read and write
7FF59B7A1000
unkown
page readonly
2BB0000
unkown
page read and write
6A1F000
unkown
page read and write
55F0000
heap
page read and write
7FF59BBD7000
unkown
page readonly
A960000
unkown
page read and write
4E88000
heap
page read and write
490D000
trusted library allocation
page read and write
7FF59B9C4000
unkown
page readonly
BF2B000
unkown
page read and write
954F000
stack
page read and write
BA22000
unkown
page read and write
BBBD000
unkown
page read and write
7FF59BA15000
unkown
page readonly
7FF59BAC8000
unkown
page readonly
7C60000
unkown
page read and write
FAF000
unclassified section
page execute and read and write
B7FF000
stack
page read and write
6930000
unkown
page read and write
7FF59BABA000
unkown
page readonly
7FF59B74C000
unkown
page readonly
7FF59BBE2000
unkown
page readonly
3520000
heap
page read and write
7FF59ADD3000
unkown
page readonly
A1EC000
unkown
page read and write
31D4000
heap
page read and write
722000
heap
page read and write
7FF59B7C9000
unkown
page readonly
29C0000
unkown
page read and write
BE95000
unkown
page read and write
B8F9000
stack
page read and write
FAF3000
unkown
page read and write
2A80000
unkown
page readonly
170000
unkown
page readonly
BD5D000
unkown
page read and write
BA2E000
unkown
page read and write
79C000
stack
page read and write
BA5A000
unkown
page read and write
7FF59BD0B000
unkown
page readonly
BC97000
unkown
page read and write
7FF59BDC1000
unkown
page readonly
C22D000
stack
page read and write
9768000
unkown
page read and write
930000
heap
page read and write
7FF59B9BF000
unkown
page readonly
BC4F000
unkown
page read and write
BF16000
unkown
page read and write
A187000
unkown
page read and write
E96D000
unkown
page read and write
3E83000
unkown
page read and write
BC5F000
unkown
page read and write
7FF59B5EF000
unkown
page readonly
49D0000
trusted library allocation
page read and write
7F70000
unkown
page readonly
85F0000
unkown
page read and write
6946000
unkown
page read and write
A1D6000
unkown
page read and write
A4E000
unkown
page read and write
BCB000
stack
page read and write
31D4000
heap
page read and write
7FF59B7D6000
unkown
page readonly
977D000
unkown
page read and write
88AB000
unkown
page read and write
7FF59BD0B000
unkown
page readonly
7FF59B7ED000
unkown
page readonly
8608000
unkown
page read and write
88A9000
unkown
page read and write
88A5000
unkown
page read and write
7FF59BD44000
unkown
page readonly
BA04000
unkown
page read and write
4FCF000
stack
page read and write
3110000
trusted library allocation
page read and write
BDF3000
unkown
page read and write
97AE000
unkown
page read and write
A120000
unkown
page read and write
3FDB000
unkown
page read and write
8EB4000
unkown
page read and write
2DCC000
heap
page read and write
3220000
heap
page read and write
7DF49DC90000
unkown
page readonly
7FF59BC1E000
unkown
page readonly
7FF59BA8C000
unkown
page readonly
7FF59B840000
unkown
page readonly
7FF59BC8A000
unkown
page readonly
BA4B000
unkown
page read and write
98DF000
unkown
page read and write
7DF49DCA1000
unkown
page execute read
8EB4000
unkown
page read and write
7FF59B99F000
unkown
page readonly
1EA000
stack
page read and write
C2A5000
stack
page read and write
2470000
trusted library allocation
page execute and read and write
7F40000
unkown
page read and write
9E0E000
stack
page read and write
993C000
unkown
page read and write
29B0000
unkown
page read and write
7319000
stack
page read and write
7FF59B9D1000
unkown
page readonly
6B80000
unkown
page read and write
88A9000
unkown
page read and write
7FF59BD8F000
unkown
page readonly
B910000
heap
page read and write
7FF59BA64000
unkown
page readonly
3EB9000
unkown
page read and write
7FF59BB57000
unkown
page readonly
BC4F000
unkown
page read and write
6FC0000
unkown
page readonly
159E000
direct allocation
page execute and read and write
87C2000
unkown
page read and write
BF0C000
unkown
page read and write
7FF59B9E3000
unkown
page readonly
866C000
unkown
page read and write
E930000
unkown
page read and write
A36000
trusted library allocation
page execute and read and write
6EE000
heap
page read and write
2544000
trusted library allocation
page read and write
88AD000
unkown
page read and write
7FF59B8AD000
unkown
page readonly
7CEF000
stack
page read and write
8903000
unkown
page read and write
241A000
stack
page read and write
7FF59B751000
unkown
page readonly
3ED1000
unkown
page read and write
4E70000
heap
page read and write
31D4000
heap
page read and write
4CD8000
heap
page read and write
B980000
unkown
page readonly
4EE0000
trusted library allocation
page read and write
7FF59B895000
unkown
page readonly
BA55000
unkown
page read and write
B9F5000
unkown
page read and write
33C1000
heap
page read and write
2023000
heap
page read and write
87FE000
unkown
page read and write
6FB2000
unkown
page read and write
7FF59BCC1000
unkown
page readonly
7FF59B9E6000
unkown
page readonly
7FF59B8EF000
unkown
page readonly
BD5D000
unkown
page read and write
2BB0000
unkown
page read and write
FAB4000
unkown
page read and write
7570000
unkown
page read and write
ADB0000
unkown
page readonly
7FF59BCD3000
unkown
page readonly
8974000
unkown
page read and write
BD22000
unkown
page read and write
3545000
trusted library allocation
page read and write
B568000
stack
page read and write
BB94000
unkown
page read and write
4B30000
heap
page execute and read and write
BEB8000
unkown
page read and write
7FF59BCC6000
unkown
page readonly
2FBF000
stack
page read and write
26A6000
stack
page read and write
5301000
direct allocation
page execute and read and write
7FF59B95E000
unkown
page readonly
4911000
unkown
page read and write
7FF59B9CD000
unkown
page readonly
7FF59BC07000
unkown
page readonly
7FF59B839000
unkown
page readonly
BD18000
unkown
page read and write
590000
heap
page read and write
8497000
trusted library allocation
page read and write
7FF59B751000
unkown
page readonly
31D4000
heap
page read and write
97AE000
unkown
page read and write
BD22000
unkown
page read and write
7FF59BCE5000
unkown
page readonly
97BE000
unkown
page read and write
BB8E000
unkown
page read and write
3FA8000
unkown
page read and write
6F70000
unkown
page read and write
3FC5000
unkown
page read and write
BE95000
unkown
page read and write
3FEB000
unkown
page read and write
98F8000
unkown
page read and write
9816000
unkown
page read and write
96CF000
stack
page read and write
803000
system
page execute and read and write
7379000
heap
page read and write
67F0000
trusted library allocation
page execute and read and write
BBBD000
unkown
page read and write
6930000
unkown
page read and write
7CEF000
stack
page read and write
BA16000
unkown
page read and write
BF7F000
unkown
page read and write
7FF59BA83000
unkown
page readonly
A718000
stack
page read and write
7FF59BD7A000
unkown
page readonly
BBD1000
unkown
page read and write
BBA1000
unkown
page read and write
4FD0000
trusted library allocation
page read and write
81F0000
unkown
page read and write
78C000
heap
page read and write
BDE7000
unkown
page read and write
7FF59BBBA000
unkown
page readonly
7060000
unkown
page read and write
2BA0000
unkown
page readonly
48E0000
trusted library allocation
page read and write
FD20000
system
page execute and read and write
3120000
trusted library allocation
page read and write
800000
system
page execute and read and write
32EC000
heap
page read and write
4CC0000
heap
page read and write
7FF59BB77000
unkown
page readonly
BC97000
unkown
page read and write
91E000
stack
page read and write
3120000
trusted library allocation
page read and write
EAC0000
heap
page read and write
595000
heap
page read and write
550000
unkown
page read and write
7FF59B9CF000
unkown
page readonly
804E000
stack
page read and write
7FF59B8B7000
unkown
page readonly
475000
stack
page read and write
7FF5782A7000
unkown
page readonly
A60000
trusted library allocation
page read and write
3FC8000
unkown
page read and write
7FF59BBD5000
unkown
page readonly
93CE000
stack
page read and write
A192000
unkown
page read and write
2970000
unkown
page read and write
BC4B000
unkown
page read and write
BA61000
unkown
page read and write
A1D6000
unkown
page read and write
3220000
unclassified section
page execute and read and write
8106000
unkown
page read and write
66F0000
heap
page read and write
27F0000
unkown
page readonly
7FF59BAB5000
unkown
page readonly
BBC9000
unkown
page read and write
7FF59ADD3000
unkown
page readonly
97DD000
unkown
page read and write
7FF59BDBD000
unkown
page readonly
954F000
stack
page read and write
BBD1000
unkown
page read and write
7FF59BD77000
unkown
page readonly
7FF59BB33000
unkown
page readonly
7FF59BD36000
unkown
page readonly
A940000
unkown
page read and write
8E5E000
stack
page read and write
1748000
direct allocation
page execute and read and write
97BE000
unkown
page read and write
7FF5782AD000
unkown
page readonly
3ED4000
unkown
page read and write
870B000
unkown
page read and write
3FFC000
unkown
page read and write
4930000
trusted library allocation
page read and write
BB9C000
unkown
page read and write
31D4000
heap
page read and write
7FF59BA06000
unkown
page readonly
4912000
trusted library allocation
page read and write
8708000
unkown
page read and write
FE2A000
system
page execute and read and write
97F4000
unkown
page read and write
7FF59BD36000
unkown
page readonly
7FF59BB24000
unkown
page readonly
85BB000
unkown
page read and write
33C1000
heap
page read and write
48FE000
trusted library allocation
page read and write
7FF59BC54000
unkown
page readonly
6B80000
unkown
page read and write
2AB0000
unkown
page readonly
7FF59B5EF000
unkown
page readonly
88A5000
unkown
page read and write
73DE000
stack
page read and write
1E0000
heap
page read and write
3E96000
unkown
page read and write
BF07000
unkown
page read and write
B2000
unkown
page readonly
34A9000
trusted library allocation
page read and write
7FF59BAAF000
unkown
page readonly
B9D6000
unkown
page read and write
98EE000
unkown
page read and write
32DB000
heap
page read and write
889F000
unkown
page read and write
E965000
unkown
page read and write
BF2B000
unkown
page read and write
7FF59B158000
unkown
page readonly
3120000
trusted library allocation
page read and write
A1EA000
unkown
page read and write
85FC000
unkown
page read and write
BE95000
unkown
page read and write
AC4F000
stack
page read and write
BD57000
unkown
page read and write
7FF59BD23000
unkown
page readonly
E961000
unkown
page read and write
7FF59B840000
unkown
page readonly
8903000
unkown
page read and write
4F8E000
stack
page read and write
BC48000
unkown
page read and write
A1D6000
unkown
page read and write
88AD000
unkown
page read and write
7FF59B7C5000
unkown
page readonly
7AD000
heap
page read and write
B4EE000
stack
page read and write
7FF59BA0E000
unkown
page readonly
9A19000
stack
page read and write
9A92000
heap
page read and write
3FCF000
unkown
page read and write
AD4B000
stack
page read and write
7FF59BA72000
unkown
page readonly
A59F000
stack
page read and write
52FD000
direct allocation
page execute and read and write
BA26000
unkown
page read and write
BBBB000
unkown
page read and write
A1EA000
unkown
page read and write
7FF59BBA1000
unkown
page readonly
974D000
stack
page read and write
BBC9000
unkown
page read and write
7FF59B8AD000
unkown
page readonly
BA61000
unkown
page read and write
7FF59BB22000
unkown
page readonly
7FF59BB4B000
unkown
page readonly
48E4000
trusted library allocation
page read and write
7FF59B9E6000
unkown
page readonly
68F0000
unkown
page read and write
BD8C000
unkown
page read and write
9C8E000
stack
page read and write
A699000
stack
page read and write
BA34000
unkown
page read and write
7FF59BCFB000
unkown
page readonly
7FF5782A7000
unkown
page readonly
BC4B000
unkown
page read and write
7FF59BB67000
unkown
page readonly
8986000
unkown
page read and write
33C1000
heap
page read and write
BE8F000
unkown
page read and write
27E0000
unkown
page readonly
95CE000
stack
page read and write
BB8A000
unkown
page read and write
7C50000
unkown
page read and write
7FF59B6EE000
unkown
page readonly
26C1000
unkown
page read and write
7FF59B9F6000
unkown
page readonly
6FA0000
unkown
page read and write
31D4000
heap
page read and write
BD18000
unkown
page read and write
7FF59B9D1000
unkown
page readonly
2023000
heap
page read and write
A960000
unkown
page read and write
31D4000
heap
page read and write
4CDE000
heap
page read and write
88A9000
unkown
page read and write
FBB4000
unkown
page read and write
68A000
heap
page read and write
FE05000
system
page execute and read and write
7FF59BA06000
unkown
page readonly
4B2B000
stack
page read and write
7FF59B5AA000
unkown
page readonly
EACA000
heap
page read and write
820000
unkown
page readonly
BCE3000
unkown
page read and write
BC48000
unkown
page read and write
BF3D000
unkown
page read and write
7FF59B909000
unkown
page readonly
3E46000
unkown
page read and write
29E0000
unkown
page read and write
87B0000
unkown
page read and write
7FF59BCCD000
unkown
page readonly
7FF59B73E000
unkown
page readonly
E992000
unkown
page read and write
71F1000
unkown
page read and write
FC99000
system
page execute and read and write
7FF59B691000
unkown
page readonly
7320000
unkown
page readonly
7FF59BB61000
unkown
page readonly
FB74000
unkown
page read and write
6911000
unkown
page read and write
7FF59BB24000
unkown
page readonly
4970000
trusted library allocation
page read and write
3FD5000
unkown
page read and write
ADD0000
unkown
page read and write
31D4000
heap
page read and write
3F2A000
unkown
page read and write
FB36000
unkown
page read and write
87D8000
unkown
page read and write
1529000
direct allocation
page execute and read and write
8608000
unkown
page read and write
7FF59B7C9000
unkown
page readonly
6932000
unkown
page read and write
3593000
trusted library allocation
page read and write
BCE3000
unkown
page read and write
88A7000
unkown
page read and write
7FF59BB69000
unkown
page readonly
7FF59B76D000
unkown
page readonly
E12E000
stack
page read and write
F90000
unclassified section
page execute and read and write
475000
stack
page read and write
7569000
stack
page read and write
B9E4000
unkown
page read and write
7FF59BAB5000
unkown
page readonly
8715000
unkown
page read and write
7FF59B954000
unkown
page readonly
FBF0000
system
page execute and read and write
7FF59BD77000
unkown
page readonly
97DD000
unkown
page read and write
4FB5000
heap
page read and write
7FF59BDB4000
unkown
page readonly
98D4000
unkown
page read and write
7FF59B8D1000
unkown
page readonly
98D4000
unkown
page read and write
2020000
heap
page read and write
693A000
unkown
page read and write
ADE0000
unkown
page readonly
BBD1000
unkown
page read and write
5620000
heap
page read and write
7F60000
unkown
page readonly
4E6D000
stack
page read and write
3F09000
unkown
page read and write
7FF59BCE1000
unkown
page readonly
AAA0000
unkown
page read and write
7190000
unkown
page readonly
A930000
unkown
page read and write
85A0000
unkown
page read and write
BBB7000
unkown
page read and write
557F000
unclassified section
page read and write
7BEB000
stack
page read and write
595000
heap
page read and write
7FF59BBC3000
unkown
page readonly
BB94000
unkown
page read and write
6929000
unkown
page read and write
550000
unkown
page read and write
630000
heap
page read and write
7FF59B7A6000
unkown
page readonly
7FF59B7A6000
unkown
page readonly
7FF59B9B4000
unkown
page readonly
866C000
unkown
page read and write
BE8F000
unkown
page read and write
5A0000
heap
page read and write
BA75000
unkown
page read and write
7FF59BBB4000
unkown
page readonly
7FF59BDC1000
unkown
page readonly
E20000
heap
page read and write
7FF59BA5D000
unkown
page readonly
7FF59B7E4000
unkown
page readonly
FBB4000
unkown
page read and write
7FF59B680000
unkown
page readonly
7FF59B898000
unkown
page readonly
3FD3000
unkown
page read and write
A4B000
trusted library allocation
page execute and read and write
B9E9000
unkown
page read and write
B77F000
stack
page read and write
7B6F000
stack
page read and write
4040000
unkown
page read and write
7FF59BCC1000
unkown
page readonly
25A0000
unkown
page read and write
BF18000
unkown
page read and write
BF2B000
unkown
page read and write
B5E6000
stack
page read and write
3FF4000
unkown
page read and write
7FF59B724000
unkown
page readonly
97DD000
unkown
page read and write
3FD3000
unkown
page read and write
7FF59B9F6000
unkown
page readonly
7FF59B163000
unkown
page readonly
7FF59BD13000
unkown
page readonly
7F60000
unkown
page readonly
6D3000
trusted library allocation
page execute and read and write
7FF59B772000
unkown
page readonly
7FF59BBA7000
unkown
page readonly
5030000
trusted library section
page read and write
4027000
unkown
page read and write
7FF59B79E000
unkown
page readonly
4860000
unkown
page write copy
98E1000
unkown
page read and write
3ECC000
unkown
page read and write
8749000
unkown
page read and write
7FF59BC9B000
unkown
page readonly
BA26000
unkown
page read and write
7FF59BAB2000
unkown
page readonly
E5E000
heap
page read and write
7FF59BB7A000
unkown
page readonly
4DA1000
trusted library allocation
page execute and read and write
889D000
unkown
page read and write
7FF59B9F3000
unkown
page readonly
7C50000
unkown
page read and write
6A6C000
unkown
page read and write
6B90000
trusted library allocation
page execute and read and write
7FF59BC14000
unkown
page readonly
BC5F000
unkown
page read and write
E930000
unkown
page read and write
8903000
unkown
page read and write
7FF59BC4F000
unkown
page readonly
E992000
unkown
page read and write
7FF59B8BA000
unkown
page readonly
7DF49DC70000
unkown
page readonly
FA34000
unkown
page read and write
97E9000
unkown
page read and write
1FC0000
unkown
page read and write
74ED000
stack
page read and write
705A000
stack
page read and write
ACC000
stack
page read and write
88B1000
unkown
page read and write
BC42000
unkown
page read and write
799000
heap
page read and write
E50000
heap
page read and write
964F000
stack
page read and write
3120000
trusted library allocation
page read and write
27E0000
unkown
page readonly
7FF59BA67000
unkown
page readonly
FAF3000
unkown
page read and write
32E5000
heap
page read and write
3F40000
unkown
page read and write
717E000
stack
page read and write
9F0E000
stack
page read and write
A920000
unkown
page read and write
2BC0000
unkown
page read and write
98D4000
unkown
page read and write
2490000
heap
page read and write
6A1F000
unkown
page read and write
249E000
stack
page read and write
A810000
unkown
page readonly
5026000
heap
page read and write
7FF59BAAF000
unkown
page readonly
88A3000
unkown
page read and write
5159000
direct allocation
page execute and read and write
7FF59B7F1000
unkown
page readonly
2AB0000
unkown
page readonly
97E9000
unkown
page read and write
7FF59B9DA000
unkown
page readonly
29E0000
unkown
page read and write
7DF49DC80000
unkown
page readonly
7FF59B772000
unkown
page readonly
7AEB000
stack
page read and write
BA41000
unkown
page read and write
7FF59BB1C000
unkown
page readonly
A7CD000
stack
page read and write
4F4E000
stack
page read and write
7FF59BCAD000
unkown
page readonly
2966000
stack
page read and write
7B6F000
stack
page read and write
6FB2000
unkown
page read and write
7FF59BBFB000
unkown
page readonly
A160000
unkown
page read and write
7FF59BB69000
unkown
page readonly
6914000
unkown
page read and write
693A000
unkown
page read and write
6930000
trusted library allocation
page read and write
E98F000
unkown
page read and write
320D000
trusted library allocation
page execute and read and write
3FCF000
unkown
page read and write
889D000
unkown
page read and write
BE4F000
unkown
page read and write
618E000
stack
page read and write
7FF59BD5A000
unkown
page readonly
BF49000
unkown
page read and write
FA72000
unkown
page read and write
70FB000
stack
page read and write
7569000
stack
page read and write
A1F000
stack
page read and write
7FF59BC48000
unkown
page readonly
7FF59BC93000
unkown
page readonly
7FF59BB51000
unkown
page readonly
4F7000
stack
page read and write
7FF59BA18000
unkown
page readonly
3F94000
unkown
page read and write
7FF59B9CF000
unkown
page readonly
3FE7000
unkown
page read and write
7FF59B988000
unkown
page readonly
32EC000
heap
page read and write
4F40000
heap
page read and write
7EE1000
unkown
page read and write
B8F9000
stack
page read and write
8733000
unkown
page read and write
74ED000
stack
page read and write
7FF59BB29000
unkown
page readonly
100F0000
unkown
page execute and read and write
B66A000
stack
page read and write
32E6000
heap
page read and write
3120000
trusted library allocation
page read and write
FB3B000
unkown
page read and write
98EE000
unkown
page read and write
6911000
unkown
page read and write
7FF59B775000
unkown
page readonly
7FF59BB7A000
unkown
page readonly
7FF59B5A2000
unkown
page readonly
7FF59BB72000
unkown
page readonly
BB8A000
unkown
page read and write
7DF49DC81000
unkown
page execute read
BB1000
unkown
page readonly
FAB4000
unkown
page read and write
BF02000
unkown
page read and write
4ED0000
trusted library allocation
page read and write
2BC0000
unkown
page read and write
7F40000
unkown
page read and write
7FF59B7EA000
unkown
page readonly
BA04000
unkown
page read and write
561000
unkown
page readonly
68A000
heap
page read and write
FA89000
unkown
page read and write
7FF59B7F1000
unkown
page readonly
3FD5000
unkown
page read and write
88A1000
unkown
page read and write
691C000
unkown
page read and write
7FF59BB3B000
unkown
page readonly
9CCE000
stack
page read and write
3FDB000
unkown
page read and write
EAC2000
heap
page read and write
933C000
stack
page read and write
3FDD000
unkown
page read and write
7FF59BBF9000
unkown
page readonly
7FF59B77B000
unkown
page readonly
85F0000
unkown
page read and write
7FF59BDB4000
unkown
page readonly
7FF59BCCB000
unkown
page readonly
7FF59B7C7000
unkown
page readonly
7FF59B724000
unkown
page readonly
3FC5000
unkown
page read and write
6932000
unkown
page read and write
BEB3000
unkown
page read and write
49D2000
trusted library allocation
page read and write
3FAD000
unkown
page read and write
7FF59BCA3000
unkown
page readonly
8974000
unkown
page read and write
7DF49DCA1000
unkown
page execute read
3FB6000
unkown
page read and write
BC5F000
unkown
page read and write
6E60000
unkown
page read and write
129F000
stack
page read and write
7FF59B76D000
unkown
page readonly
BBC9000
unkown
page read and write
87FE000
unkown
page read and write
7FF59B794000
unkown
page readonly
61CF000
stack
page read and write
7FF59BABE000
unkown
page readonly
88DF000
unkown
page read and write
BC97000
unkown
page read and write
7FF59B14F000
unkown
page readonly
FAB000
unclassified section
page execute and read and write
B568000
stack
page read and write
BDEA000
unkown
page read and write
7FF59B7D6000
unkown
page readonly
C32D000
stack
page read and write
695E000
unkown
page read and write
28E9000
stack
page read and write
97D8000
unkown
page read and write
88AB000
unkown
page read and write
BBBD000
unkown
page read and write
7FF59B77B000
unkown
page readonly
BB9C000
unkown
page read and write
7FF59BD16000
unkown
page readonly
A3A000
trusted library allocation
page execute and read and write
AD4B000
stack
page read and write
BA4B000
unkown
page read and write
BA2C000
unkown
page read and write
3120000
trusted library allocation
page read and write
7FF59B909000
unkown
page readonly
AEE000
stack
page read and write
8F3C000
stack
page read and write
3FD9000
unkown
page read and write
3030000
heap
page read and write
97D1000
unkown
page read and write
2990000
unkown
page read and write
2A60000
stack
page read and write
9943000
unkown
page read and write
993C000
unkown
page read and write
7FF59B7C7000
unkown
page readonly
6968000
unkown
page read and write
BC42000
unkown
page read and write
85FC000
unkown
page read and write
BC4B000
unkown
page read and write
BBD1000
unkown
page read and write
BAFD000
unkown
page read and write
9A90000
heap
page read and write
2748000
stack
page read and write
7FF59BB40000
unkown
page readonly
7E00000
unkown
page readonly
71A000
stack
page read and write
3FE9000
unkown
page read and write
4027000
unkown
page read and write
A23000
trusted library allocation
page read and write
BB0000
unkown
page readonly
7FF59BAD3000
unkown
page readonly
6FC0000
unkown
page readonly
859F000
stack
page read and write
7DF49DC71000
unkown
page execute read
9943000
unkown
page read and write
3F3D000
unkown
page read and write
4ED0000
trusted library allocation
page read and write
964F000
stack
page read and write
9A19000
stack
page read and write
7FF59BD25000
unkown
page readonly
933C000
stack
page read and write
B2E000
stack
page read and write
7FF59B806000
unkown
page readonly
BBB3000
unkown
page read and write
7FF59BB35000
unkown
page readonly
AA70000
unkown
page read and write
BA13000
unkown
page read and write
E97A000
unkown
page read and write
E96D000
unkown
page read and write
BA04000
unkown
page read and write
BA26000
unkown
page read and write
7FF59BAA2000
unkown
page readonly
6929000
unkown
page read and write
6A7E000
unkown
page read and write
7FF59BD50000
unkown
page readonly
BA13000
unkown
page read and write
7FF59BA5D000
unkown
page readonly
7FF59BD1E000
unkown
page readonly
6CDE000
stack
page read and write
88B1000
unkown
page read and write
88A3000
unkown
page read and write
7FF59B5F5000
unkown
page readonly
7FF59B930000
unkown
page readonly
BB91000
unkown
page read and write
3FCA000
unkown
page read and write
4911000
unkown
page read and write
E02F000
stack
page read and write
7FF59B904000
unkown
page readonly
7FF59BA83000
unkown
page readonly
4007000
unkown
page read and write
B5E6000
stack
page read and write
150000
unkown
page readonly
4AC0000
trusted library allocation
page execute and read and write
A17F000
unkown
page read and write
7FF59B6E2000
unkown
page readonly
7FF59B765000
unkown
page readonly
BEB8000
unkown
page read and write
6EA000
heap
page read and write
717E000
stack
page read and write
7FF59B94F000
unkown
page readonly
7FF59B843000
unkown
page readonly
A160000
unkown
page read and write
8899000
unkown
page read and write
6F60000
unkown
page read and write
7281000
unkown
page read and write
7FF59BC0D000
unkown
page readonly
994B000
unkown
page read and write
BF7F000
unkown
page read and write
B87D000
stack
page read and write
4901000
trusted library allocation
page read and write
BD7B000
unkown
page read and write
32E1000
heap
page read and write
A70000
heap
page read and write
7DF49DC81000
unkown
page execute read
BE26000
unkown
page read and write
88B3000
unkown
page read and write
7FF59B833000
unkown
page readonly
7FF59B75C000
unkown
page readonly
9DCE000
stack
page read and write
32E1000
heap
page read and write
ADC0000
unkown
page readonly
1F0000
unkown
page read and write
BC5F000
unkown
page read and write
4A80000
heap
page read and write
3E68000
unkown
page read and write
E962000
unkown
page read and write
590000
heap
page read and write
7FF59BB4B000
unkown
page readonly
9798000
unkown
page read and write
735F000
stack
page read and write
2020000
heap
page read and write
3E40000
unkown
page read and write
7FF59B988000
unkown
page readonly
7FF59B14F000
unkown
page readonly
A69C000
stack
page read and write
7FF59B8B7000
unkown
page readonly
7FF59BDAD000
unkown
page readonly
BA34000
unkown
page read and write
BEC7000
unkown
page read and write
889F000
unkown
page read and write
98DF000
unkown
page read and write
7FF59BC01000
unkown
page readonly
7FF59B85A000
unkown
page readonly
A50000
heap
page read and write
3110000
trusted library allocation
page read and write
7FF59B689000
unkown
page readonly
88B8000
unkown
page read and write
889B000
unkown
page read and write
BB8E000
unkown
page read and write
BBB3000
unkown
page read and write
7FF59BB77000
unkown
page readonly
BA22000
unkown
page read and write
875C000
unkown
page read and write
BBBB000
unkown
page read and write
4E30000
trusted library allocation
page execute and read and write
BD5D000
unkown
page read and write
BD22000
unkown
page read and write
7FF59BD13000
unkown
page readonly
BA34000
unkown
page read and write
BEE000
stack
page read and write
BB9C000
unkown
page read and write
1FE0000
unkown
page readonly
7FF59BD4D000
unkown
page readonly
4950000
trusted library allocation
page read and write
2970000
unkown
page read and write
BD7B000
unkown
page read and write
7FF59BA8C000
unkown
page readonly
2D9C000
stack
page read and write
A950000
unkown
page readonly
7FF59B5DB000
unkown
page readonly
31D0000
heap
page read and write
3270000
trusted library allocation
page read and write
7FF59B94B000
unkown
page readonly
7FF59B7C5000
unkown
page readonly
A183000
unkown
page read and write
7FF59BB35000
unkown
page readonly
7FF59B95E000
unkown
page readonly
31D4000
heap
page read and write
B80000
heap
page read and write
7FF59BC80000
unkown
page readonly
BD57000
unkown
page read and write
4007000
unkown
page read and write
6A02000
unkown
page read and write
7FF59B94F000
unkown
page readonly
7FF59BA29000
unkown
page readonly
B9B0000
unkown
page read and write
7FF59BA67000
unkown
page readonly
BC48000
unkown
page read and write
7FF59BB61000
unkown
page readonly
3F09000
unkown
page read and write
88AF000
unkown
page read and write
7FF59BA29000
unkown
page readonly
6940000
trusted library allocation
page execute and read and write
BB91000
unkown
page read and write
51CE000
direct allocation
page execute and read and write
7FF59BBBA000
unkown
page readonly
A1E7000
unkown
page read and write
49A9000
unkown
page read and write
4860000
unkown
page write copy
7470000
trusted library allocation
page read and write
6C0000
trusted library allocation
page read and write
BBBB000
unkown
page read and write
FE03000
system
page execute and read and write
6B75000
stack
page read and write
B9D6000
unkown
page read and write
8FD000
stack
page read and write
BA2C000
unkown
page read and write
3F3A000
unkown
page read and write
B46B000
stack
page read and write
F8E000
stack
page read and write
29A0000
unkown
page read and write
7DF49DC91000
unkown
page execute read
BD1D000
unkown
page read and write
994B000
unkown
page read and write
7FF59BB48000
unkown
page readonly
7FF59B7F6000
unkown
page readonly
3FF4000
unkown
page read and write
3F3A000
unkown
page read and write
7FF59BB20000
unkown
page readonly
BBB3000
unkown
page read and write
3F94000
unkown
page read and write
7FF59B9AF000
unkown
page readonly
7FF59BA81000
unkown
page readonly
B77F000
stack
page read and write
B10C000
stack
page read and write
7FF59B99F000
unkown
page readonly
4940000
trusted library allocation
page read and write
7FF59B833000
unkown
page readonly
3223000
unclassified section
page execute and read and write
7FF59BD50000
unkown
page readonly
4945000
trusted library allocation
page read and write
6FA0000
unkown
page read and write
4AD0000
trusted library allocation
page read and write
85BB000
unkown
page read and write
7F70000
unkown
page readonly
6A9D000
unkown
page read and write
97D8000
unkown
page read and write
7FF59BCEE000
unkown
page readonly
7FF59B765000
unkown
page readonly
FC0000
heap
page read and write
7FF59B689000
unkown
page readonly
BDFA000
unkown
page read and write
7FF59BC01000
unkown
page readonly
3120000
trusted library allocation
page read and write
7FF59B895000
unkown
page readonly
88A3000
unkown
page read and write
A18A000
unkown
page read and write
4EBE000
stack
page read and write
977F000
unkown
page read and write
7FF59BD7A000
unkown
page readonly
85A0000
unkown
page read and write
3FE9000
unkown
page read and write
7FF59BC31000
unkown
page readonly
6A6C000
unkown
page read and write
7FF59BC9B000
unkown
page readonly
7FF59BABA000
unkown
page readonly
2A62000
stack
page read and write
7FF59B691000
unkown
page readonly
249E000
stack
page read and write
7FF59B802000
unkown
page readonly
4040000
unkown
page read and write
7FF59B5DB000
unkown
page readonly
12DE000
stack
page read and write
A2D000
trusted library allocation
page execute and read and write
88DF000
unkown
page read and write
7FF59BC54000
unkown
page readonly
97D1000
unkown
page read and write
7FF59BA88000
unkown
page readonly
BCE3000
unkown
page read and write
3FE7000
unkown
page read and write
BA5A000
unkown
page read and write
7FF59BBA1000
unkown
page readonly
7FF59BC69000
unkown
page readonly
889F000
unkown
page read and write
BA5A000
unkown
page read and write
71EF000
stack
page read and write
7FF59B6E5000
unkown
page readonly
A18E000
unkown
page read and write
BBB7000
unkown
page read and write
16B1000
direct allocation
page execute and read and write
BBB7000
unkown
page read and write
7FF59B7BA000
unkown
page readonly
BBB7000
unkown
page read and write
8899000
unkown
page read and write
31D4000
heap
page read and write
8708000
unkown
page read and write
A950000
unkown
page readonly
3FD1000
unkown
page read and write
BC42000
unkown
page read and write
7FF59BC31000
unkown
page readonly
7FF59B839000
unkown
page readonly
BE8F000
unkown
page read and write
6E60000
unkown
page read and write
7FF59BD25000
unkown
page readonly
A186000
unkown
page read and write
A1E0000
unkown
page read and write
7FF59BD8B000
unkown
page readonly
81B0000
unkown
page readonly
7FF59B9F3000
unkown
page readonly
E02F000
stack
page read and write
7FF59BA04000
unkown
page readonly
4993000
unkown
page read and write
27F0000
unkown
page readonly
B910000
heap
page read and write
7FF59BB29000
unkown
page readonly
7FF59BBCD000
unkown
page readonly
7FF59B986000
unkown
page readonly
98EC000
unkown
page read and write
88B1000
unkown
page read and write
A42000
trusted library allocation
page read and write
7FF59B7CE000
unkown
page readonly
ACCA000
stack
page read and write
7FF59BC77000
unkown
page readonly
7FF59BAB2000
unkown
page readonly
7FF59BA5A000
unkown
page readonly
6E0000
heap
page read and write
88AD000
unkown
page read and write
7350000
unkown
page readonly
2BA0000
unkown
page readonly
4F3E000
stack
page read and write
BB91000
unkown
page read and write
7FF59BA64000
unkown
page readonly
EACA000
heap
page read and write
BA16000
unkown
page read and write
7FF59BDBD000
unkown
page readonly
7FF59B893000
unkown
page readonly
7FF59BA04000
unkown
page readonly
993C000
unkown
page read and write
3FDF000
unkown
page read and write
8720000
unkown
page read and write
81B0000
unkown
page readonly
88A7000
unkown
page read and write
8C6C000
stack
page read and write
AA90000
unkown
page read and write
A47000
trusted library allocation
page execute and read and write
3F2A000
unkown
page read and write
7FF59BA78000
unkown
page readonly
3E83000
unkown
page read and write
17D0000
heap
page read and write
10766000
system
page read and write
7FF59B7ED000
unkown
page readonly
B10C000
stack
page read and write
E961000
unkown
page read and write
7FF59B80F000
unkown
page readonly
A20000
trusted library allocation
page read and write
BD7B000
unkown
page read and write
7FF59B7F4000
unkown
page readonly
BA75000
unkown
page read and write
7FF59B97F000
unkown
page readonly
7FF59BD44000
unkown
page readonly
98E1000
unkown
page read and write
8180000
unkown
page read and write
5386000
unclassified section
page read and write
AAA0000
unkown
page read and write
3F14000
unkown
page read and write
98F8000
unkown
page read and write
32C0000
heap
page read and write
4990000
heap
page read and write
3FDF000
unkown
page read and write
7FF59BCC6000
unkown
page readonly
A930000
unkown
page read and write
30F0000
unclassified section
page execute and read and write
7FF59B85A000
unkown
page readonly
7FF59BCCD000
unkown
page readonly
FD10000
heap
page read and write
7FF59BB20000
unkown
page readonly
6914000
unkown
page read and write
6D4000
trusted library allocation
page read and write
7FF59B893000
unkown
page readonly
4993000
unkown
page read and write
7FF59BD05000
unkown
page readonly
7FF59B9A5000
unkown
page readonly
3FEB000
unkown
page read and write
98EE000
unkown
page read and write
BEFF000
unkown
page read and write
FA7B000
unkown
page read and write
6FD0000
unkown
page read and write
160000
unkown
page readonly
7FF59BAC8000
unkown
page readonly
7DF49DC91000
unkown
page execute read
97E9000
unkown
page read and write
7FF59BBA7000
unkown
page readonly
AA70000
unkown
page read and write
EAC2000
heap
page read and write
1FE0000
unkown
page readonly
BB91000
unkown
page read and write
7FF59BD83000
unkown
page readonly
7FF59BD8F000
unkown
page readonly
33C0000
heap
page read and write
2990000
unkown
page read and write
8DE000
stack
page read and write
32E6000
heap
page read and write
31D4000
heap
page read and write
7FF59B9C6000
unkown
page readonly
B7F000
unkown
page read and write
BB8E000
unkown
page read and write
7060000
unkown
page read and write
3ECC000
unkown
page read and write
7FF59B954000
unkown
page readonly
3F40000
unkown
page read and write
BBBD000
unkown
page read and write
BD57000
unkown
page read and write
FA89000
unkown
page read and write
7FF59B75C000
unkown
page readonly
7FF59B9C4000
unkown
page readonly
3FD7000
unkown
page read and write
6FD0000
unkown
page read and write
89B8000
unkown
page read and write
7290000
unkown
page readonly
97D8000
unkown
page read and write
2DC0000
heap
page read and write
152D000
direct allocation
page execute and read and write
88B8000
unkown
page read and write
3FAD000
unkown
page read and write
3FFC000
unkown
page read and write
1FC0000
unkown
page read and write
4DFB000
heap
page read and write
7FF59B71A000
unkown
page readonly
68F0000
unkown
page read and write
29B0000
unkown
page read and write
8106000
unkown
page read and write
87B0000
unkown
page read and write
8715000
unkown
page read and write
BB8E000
unkown
page read and write
3E7B000
unkown
page read and write
7FF59B802000
unkown
page readonly
7FF59B9DA000
unkown
page readonly
7FF59B5E3000
unkown
page readonly
7FF59BBFB000
unkown
page readonly
690E000
unkown
page read and write
816F000
unkown
page read and write
7FF59B7F6000
unkown
page readonly
7FF59BCAD000
unkown
page readonly
1095F000
system
page read and write
FE15000
system
page execute and read and write
BD1D000
unkown
page read and write
FA72000
unkown
page read and write
4F0E000
stack
page read and write
3E96000
unkown
page read and write
A1EA000
unkown
page read and write
7FF59B806000
unkown
page readonly
7FF59B73E000
unkown
page readonly
889B000
unkown
page read and write
6C9E000
stack
page read and write
7DF49DCB1000
unkown
page execute read
B66C000
stack
page read and write
73E0000
unkown
page read and write
3FD7000
unkown
page read and write
BC48000
unkown
page read and write
BA2C000
unkown
page read and write
88DF000
unkown
page read and write
7FF59B904000
unkown
page readonly
FA34000
unkown
page read and write
1D0000
unkown
page readonly
7FF59BD8B000
unkown
page readonly
7FF59BCDD000
unkown
page readonly
7FF5782AD000
unkown
page readonly
3F3D000
unkown
page read and write
89B8000
unkown
page read and write
98EC000
unkown
page read and write
3FE3000
unkown
page read and write
8720000
unkown
page read and write
BA41000
unkown
page read and write
9768000
unkown
page read and write
7FF59BC4F000
unkown
page readonly
7FF59BC14000
unkown
page readonly
BA4B000
unkown
page read and write
3EB9000
unkown
page read and write
2A80000
unkown
page readonly
7FF59B7CE000
unkown
page readonly
BDDE000
unkown
page read and write
4D90000
trusted library allocation
page execute and read and write
7FF59B88F000
unkown
page readonly
550000
heap
page read and write
BC4B000
unkown
page read and write
16C6000
direct allocation
page execute and read and write
A30000
trusted library allocation
page read and write
B9E9000
unkown
page read and write
7FF59B9AB000
unkown
page readonly
A940000
unkown
page read and write
3FE1000
unkown
page read and write
7FF59B800000
unkown
page readonly
7FF59BA0E000
unkown
page readonly
7FF59B73A000
unkown
page readonly
3120000
trusted library allocation
page read and write
AAE000
stack
page read and write
88A1000
unkown
page read and write
18E8000
unclassified section
page execute and read and write
BC97000
unkown
page read and write
34A1000
trusted library allocation
page read and write
C5AB000
stack
page read and write
7FF59BD96000
unkown
page readonly
2519000
stack
page read and write
98EC000
unkown
page read and write
7FF59B7EA000
unkown
page readonly
561000
unkown
page readonly
1D0000
unkown
page readonly
4ED0000
trusted library allocation
page read and write
9765000
unkown
page read and write
ADA0000
unkown
page readonly
9798000
unkown
page read and write
7FF59B9AF000
unkown
page readonly
6B75000
stack
page read and write
7FF59BD4D000
unkown
page readonly
889B000
unkown
page read and write
A1EA000
unkown
page read and write
87FE000
unkown
page read and write
97F4000
unkown
page read and write
7FF59BABE000
unkown
page readonly
7FF59BC8A000
unkown
page readonly
9A98000
heap
page read and write
7FF59B88F000
unkown
page readonly
974D000
stack
page read and write
BD8D000
unkown
page read and write
4FB1000
heap
page read and write
7DF49DC70000
unkown
page readonly
515D000
direct allocation
page execute and read and write
3199000
unclassified section
page execute and read and write
871B000
unkown
page read and write
7C60000
unkown
page read and write
BE97000
unkown
page read and write
87F8000
unkown
page read and write
BEB3000
unkown
page read and write
BC4F000
unkown
page read and write
B06D000
stack
page read and write
7E00000
unkown
page readonly
72B000
stack
page read and write
7319000
stack
page read and write
7190000
unkown
page readonly
7FF59BD31000
unkown
page readonly
BD7B000
unkown
page read and write
4E41000
trusted library allocation
page execute and read and write
3FE5000
unkown
page read and write
B9E9000
unkown
page read and write
6D12000
trusted library allocation
page read and write
6BA0000
unkown
page read and write
3FA8000
unkown
page read and write
695E000
unkown
page read and write
510000
heap
page read and write
7FF59BC8F000
unkown
page readonly
7FF59BB44000
unkown
page readonly
3ED1000
unkown
page read and write
71A0000
unkown
page readonly
7FF59BC5B000
unkown
page readonly
87D5000
unkown
page read and write
7FF59BB40000
unkown
page readonly
BBA1000
unkown
page read and write
A8BD000
stack
page read and write
B50000
heap
page read and write
13E0000
trusted library allocation
page execute and read and write
3FD1000
unkown
page read and write
BBA1000
unkown
page read and write
7FF59BCEE000
unkown
page readonly
7FF59BBF9000
unkown
page readonly
BC42000
unkown
page read and write
8986000
unkown
page read and write
A1E1000
unkown
page read and write
7DF49DC80000
unkown
page readonly
8986000
unkown
page read and write
29A0000
unkown
page read and write
5600000
heap
page read and write
6A02000
unkown
page read and write
31D4000
heap
page read and write
B9B0000
unkown
page read and write
AA90000
unkown
page read and write
32E6000
heap
page read and write
16CD000
direct allocation
page execute and read and write
4906000
trusted library allocation
page read and write
7FF59BB16000
unkown
page readonly
A7CE000
stack
page read and write
7FF59BA5A000
unkown
page readonly
7FF59B74C000
unkown
page readonly
7FF59B158000
unkown
page readonly
7AEB000
stack
page read and write
97D1000
unkown
page read and write
7FF59BD1E000
unkown
page readonly
9779000
unkown
page read and write
7FF59BD05000
unkown
page readonly
7FF59BCCB000
unkown
page readonly
88A1000
unkown
page read and write
9816000
unkown
page read and write
253B000
trusted library allocation
page read and write
7FF59B6E5000
unkown
page readonly
FA7B000
unkown
page read and write
7FF59B986000
unkown
page readonly
7FF59BD31000
unkown
page readonly
98E1000
unkown
page read and write
E978000
unkown
page read and write
7FF59BC87000
unkown
page readonly
4920000
trusted library allocation
page read and write
246B000
stack
page read and write
7FF59BD5A000
unkown
page readonly
ADE0000
unkown
page readonly
96CF000
stack
page read and write
8180000
unkown
page read and write
25A0000
unkown
page read and write
BD18000
unkown
page read and write
7FF59BD62000
unkown
page readonly
719000
heap
page read and write
7FF59BBD5000
unkown
page readonly
3E46000
unkown
page read and write
7FF59BA88000
unkown
page readonly
3E7B000
unkown
page read and write
31D4000
heap
page read and write
7FF59B73A000
unkown
page readonly
8369000
stack
page read and write
13DF000
stack
page read and write
BB00000
unkown
page read and write
B9F9000
unkown
page read and write
6F80000
unkown
page read and write
994B000
unkown
page read and write
B7FF000
stack
page read and write
92BE000
stack
page read and write
7FF59BB33000
unkown
page readonly
783000
heap
page read and write
9A99000
stack
page read and write
4C30000
trusted library section
page readonly
A920000
unkown
page read and write
7FF59B94B000
unkown
page readonly
83E9000
stack
page read and write
A1E7000
unkown
page read and write
32E6000
heap
page read and write
73DE000
stack
page read and write
BA1A000
unkown
page read and write
A120000
unkown
page read and write
7EE1000
unkown
page read and write
B4EE000
stack
page read and write
BD57000
unkown
page read and write
7570000
unkown
page read and write
7FF59B5E7000
unkown
page readonly
BA2E000
unkown
page read and write
3FD9000
unkown
page read and write
BA0000
heap
page read and write
1F0000
unkown
page read and write
A61B000
stack
page read and write
3FDD000
unkown
page read and write
870B000
unkown
page read and write
242E000
stack
page read and write
7FF59B7BA000
unkown
page readonly
3ED4000
unkown
page read and write
7FF59BD23000
unkown
page readonly
5A6F000
unclassified section
page read and write
8749000
unkown
page read and write
2542000
trusted library allocation
page read and write
6AF0000
trusted library section
page read and write
BB94000
unkown
page read and write
7FF59BA15000
unkown
page readonly
692D000
trusted library allocation
page read and write
BB8A000
unkown
page read and write
BA2E000
unkown
page read and write
BCE3000
unkown
page read and write
101F8000
unkown
page execute and read and write
BBC9000
unkown
page read and write
8600000
unkown
page read and write
FB3B000
unkown
page read and write
3E68000
unkown
page read and write
81B000
stack
page read and write
B9E5000
unkown
page read and write
7320000
unkown
page readonly
93CE000
stack
page read and write
6F80000
unkown
page read and write
7FF59BB5B000
unkown
page readonly
2629000
stack
page read and write
88A7000
unkown
page read and write
67D000
stack
page read and write
6A7B000
unkown
page read and write
BB9C000
unkown
page read and write
BBA1000
unkown
page read and write
5A8000
heap
page read and write
7FF59BAD3000
unkown
page readonly
7FF59B9BF000
unkown
page readonly
89B8000
unkown
page read and write
6920000
trusted library allocation
page read and write
ACCA000
stack
page read and write
34F7000
trusted library allocation
page read and write
ADC0000
unkown
page readonly
1E0000
heap
page read and write
98DF000
unkown
page read and write
7FF59BB6E000
unkown
page readonly
2480000
trusted library allocation
page read and write
7FF59BB5B000
unkown
page readonly
97AE000
unkown
page read and write
48EB000
trusted library allocation
page read and write
8632000
unkown
page read and write
7FF59B7A1000
unkown
page readonly
B70000
heap
page execute and read and write
B0000
unkown
page readonly
95CE000
stack
page read and write
7DF49DC90000
unkown
page readonly
73E0000
unkown
page read and write
7FF59BBD7000
unkown
page readonly
A1E7000
unkown
page read and write
7FF59BBCD000
unkown
page readonly
7FF59BB67000
unkown
page readonly
88B3000
unkown
page read and write
17E0000
unclassified section
page execute and read and write
6A0000
heap
page read and write
2D5C000
stack
page read and write
820000
unkown
page readonly
A59F000
stack
page read and write
3120000
trusted library allocation
page read and write
FB74000
unkown
page read and write
7FF59BC7B000
unkown
page readonly
BEC7000
unkown
page read and write
EAC0000
heap
page read and write
29C0000
unkown
page read and write
There are 1553 hidden memdumps, click here to show them.