IOC Report
Hbi8WUpShm.exe

loading gif

Files

File Path
Type
Category
Malicious
Hbi8WUpShm.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
JSON data
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Hbi8WUpShm.exe
C:\Users\user\Desktop\Hbi8WUpShm.exe
 malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
 malicious
C:\Windows\SysWOW64\chkdsk.exe
C:\Windows\SysWOW64\chkdsk.exe
 malicious
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Users\user\Desktop\Hbi8WUpShm.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
http://www.alexwright.xyz/nu06/
unknown
 malicious
http://www.smartmetersystems.co.uk/nu06/
unknown
 malicious
http://www.alessandromargonari.com/nu06/www.languageforall.africa
unknown
 malicious
http://www.alessandromargonari.com/nu06/
unknown
 malicious
http://www.ballinc.online/nu06/
unknown
 malicious
http://www.edu-degrees-89998.com/nu06/www.arrindellnotary.com
unknown
 malicious
http://www.arrindellnotary.com/nu06/
unknown
 malicious
http://www.hervelegerdressshop.co.uk/nu06/
unknown
 malicious
http://www.hervelegerdressshop.co.uk/nu06/www.edu-degrees-89998.com
unknown
 malicious
http://www.heikeshuwu.com/nu06/
unknown
 malicious
http://www.letstalkreparation.com/nu06/www.zwangerschapvanweektotweek.net
unknown
 malicious
http://www.eltres-iot.info/nu06/www.smartmetersystems.co.uk
unknown
 malicious
http://www.heikeshuwu.com/nu06/www.alessandromargonari.com
unknown
 malicious
http://www.edu-degrees-89998.com/nu06/
unknown
 malicious
http://www.smartmetersystems.co.uk/nu06/www.alexwright.xyz
unknown
 malicious
www.eltres-iot.info/nu06/
malicious
http://www.gonulserezart.com/nu06/?UrZ=9rv4vpj&4h8xq=XguJjI6AKJ7iGHg0sIvbxor8PKuuNZIswUYLv8brtIVcEL19nblZmBuHZOHdf2lpP/kE
34.117.168.233
 malicious
http://www.ballinc.online/nu06/www.hervelegerdressshop.co.uk
unknown
 malicious
http://www.zwangerschapvanweektotweek.net/nu06/?4h8xq=RzhUDSljQ8La7qrFgsCqcMZ5F/GKaWYSy/YExKb0zDK6Qw0jyiEXU4SBBDL3oY4sWHH+&UrZ=9rv4vpj
91.218.127.118
 malicious
http://www.alexwright.xyz/nu06/www.ballinc.online
unknown
 malicious
http://www.zwangerschapvanweektotweek.net
unknown
http://www.alexwright.xyz
unknown
http://www.eltres-iot.info
unknown
http://www.coiffeur-kosmetik-basel1.chReferer:
unknown
http://www.eltres-iot.infoReferer:
unknown
http://www.evaluatemyathlete.com/nu06/www.coiffeur-kosmetik-basel1.ch
unknown
http://www.zwangerschapvanweektotweek.net/nu06/www.gonulserezart.com
unknown
http://www.languageforall.africa/nu06/www.eltres-iot.info
unknown
http://www.languageforall.africa/nu06/
unknown
http://www.evaluatemyathlete.comReferer:
unknown
http://www.evaluatemyathlete.com/nu06/?4h8xq=AAU7dHxOAmD1XA8vVT3AMGpmmEX+lZnDYwXHz32oiklDU/SqaBIxIuHdufVlmX9k3aqv&UrZ=9rv4vpj
34.98.99.30
http://www.pyvob.xyz
unknown
http://www.eltres-iot.info/nu06/
unknown
http://www.evaluatemyathlete.com
unknown
http://www.letstalkreparation.com
unknown
http://www.arrindellnotary.comReferer:
unknown
http://www.languageforall.africa
unknown
http://www.pyvob.xyz/nu06/www.heikeshuwu.com
unknown
http://www.gonulserezart.com
unknown
http://www.gonulserezart.comReferer:
unknown
http://www.ballinc.onlineReferer:
unknown
http://www.edu-degrees-89998.comReferer:
unknown
http://www.coiffeur-kosmetik-basel1.ch/nu06/www.pyvob.xyz
unknown
http://www.autoitscript.com/autoit3/J
unknown
http://www.gonulserezart.com/nu06/
unknown
http://www.gonulserezart.com/nu06/www.evaluatemyathlete.com
unknown
http://www.arrindellnotary.com
unknown
http://www.hervelegerdressshop.co.uk
unknown
http://www.smartmetersystems.co.uk
unknown
http://www.alexwright.xyzReferer:
unknown
http://www.edu-degrees-89998.com
unknown
http://www.evaluatemyathlete.com/nu06/
unknown
http://www.smartmetersystems.co.ukReferer:
unknown
http://www.coiffeur-kosmetik-basel1.ch/nu06/
unknown
http://www.letstalkreparation.comReferer:
unknown
http://www.pyvob.xyzReferer:
unknown
http://www.pyvob.xyz/nu06/
unknown
http://www.alessandromargonari.comReferer:
unknown
http://www.zwangerschapvanweektotweek.netReferer:
unknown
http://www.heikeshuwu.comReferer:
unknown
http://www.hervelegerdressshop.co.ukReferer:
unknown
http://www.heikeshuwu.com
unknown
http://www.languageforall.africaReferer:
unknown
http://www.alessandromargonari.com
unknown
http://www.letstalkreparation.com/nu06/
unknown
http://www.zwangerschapvanweektotweek.net/nu06/
unknown
http://www.coiffeur-kosmetik-basel1.ch
unknown
http://www.ballinc.online
unknown
There are 58 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
td-ccm-168-233.wixdns.net
34.117.168.233
 malicious
www.zwangerschapvanweektotweek.net
91.218.127.118
 malicious
www.letstalkreparation.com
unknown
 malicious
www.evaluatemyathlete.com
unknown
 malicious
www.gonulserezart.com
unknown
 malicious
evaluatemyathlete.com
34.98.99.30
letstalkreparation.com
34.102.136.180

IPs

IP
Domain
Country
Malicious
34.117.168.233
td-ccm-168-233.wixdns.net
United States
malicious
91.218.127.118
www.zwangerschapvanweektotweek.net
Netherlands
malicious
34.102.136.180
letstalkreparation.com
United States
34.98.99.30
evaluatemyathlete.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\f0\52C64B7E
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-101
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} {0000013A-0000-0000-C000-000000000046} 0xFFFF
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.101
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.100
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance
MessageTime

Memdumps

Base Address
Regiontype
Protect
Malicious
831000
unkown
page execute read
 malicious
DC0000
trusted library allocation
page read and write
 malicious
AE4000
heap
page read and write
 malicious
D90000
unclassified section
page execute and read and write
 malicious
831000
unkown
page execute read
 malicious
58AF000
unclassified section
page read and write
 malicious
D50000
unclassified section
page execute and read and write
 malicious
D20000
unclassified section
page execute and read and write
 malicious
8F0000
system
page execute and read and write
 malicious
152CF000
system
page read and write
 malicious
10385000
unkown
page read and write
477E000
unkown
page read and write
7FF5856DA000
unkown
page readonly
6624000
unkown
page read and write
63F0000
heap
page read and write
4C64000
unkown
page read and write
7A70000
unkown
page read and write
56D0000
unkown
page readonly
71F3000
unkown
page readonly
F02E000
unkown
page read and write
87C8000
unkown
page read and write
ECA1000
unkown
page read and write
EF3E000
unkown
page read and write
88E000
heap
page read and write
10392000
unkown
page read and write
4860000
unkown
page readonly
7FF5858F6000
unkown
page readonly
830000
unkown
page read and write
27CA000
stack
page read and write
4756000
unkown
page read and write
53C0000
unkown
page readonly
7FF585C66000
unkown
page readonly
7FF585AA6000
unkown
page readonly
7FF585952000
unkown
page readonly
9A4000
heap
page read and write
10434000
unkown
page read and write
EE88000
unkown
page read and write
65D0000
unkown
page read and write
4499000
unkown
page read and write
2AC1000
unkown
page read and write
EBFA000
unkown
page read and write
7FF585C06000
unkown
page readonly
F00E000
unkown
page read and write
8E4000
heap
page read and write
87B7000
unkown
page read and write
895A000
unkown
page read and write
2640000
unkown
page read and write
A80000
trusted library allocation
page read and write
EC67000
unkown
page read and write
2A8B000
unkown
page read and write
CE66000
unkown
page read and write
4880000
unkown
page readonly
DD84000
unkown
page read and write
ED16000
unkown
page read and write
7FF585CE4000
unkown
page readonly
86B6000
unkown
page read and write
CDF000
stack
page read and write
CCB2000
unkown
page read and write
4B3B000
stack
page read and write
41BA000
unkown
page read and write
2A0F000
unkown
page read and write
7FF585E3E000
unkown
page readonly
CCBB000
unkown
page read and write
7FF585D05000
unkown
page readonly
88E000
heap
page read and write
6A90000
unkown
page readonly
AF07000
stack
page read and write
DD7F000
unkown
page read and write
7FFA131BA000
unkown
page read and write
879D000
unkown
page read and write
8645000
unkown
page read and write
ECA5000
unkown
page read and write
4C62000
unkown
page read and write
10387000
unkown
page read and write
B008000
stack
page read and write
71C3000
unkown
page readonly
EDF5000
unkown
page read and write
71B5000
unkown
page readonly
7FF585A2C000
unkown
page readonly
7FF585A4E000
unkown
page readonly
41F0000
unkown
page read and write
2640000
unkown
page read and write
87DC000
unkown
page read and write
2E30000
unkown
page readonly
CE66000
unkown
page read and write
CFE000
stack
page read and write
7FF585D69000
unkown
page readonly
7185000
unkown
page readonly
9A4000
heap
page read and write
EC55000
unkown
page read and write
103B2000
unkown
page read and write
7FF585A31000
unkown
page readonly
AC1E000
unkown
page read and write
71B5000
unkown
page readonly
4190000
unkown
page read and write
7FF585E45000
unkown
page readonly
7FF5855F2000
unkown
page readonly
EF3E000
unkown
page read and write
7FF585C72000
unkown
page readonly
7FF577B72000
unkown
page readonly
2A9C000
unkown
page read and write
F0AA000
unkown
page read and write
7FF577B72000
unkown
page readonly
ED30000
unkown
page read and write
4C66000
unkown
page read and write
4860000
unkown
page readonly
EFC7000
unkown
page read and write
7FF5856C3000
unkown
page readonly
540000
unkown
page read and write
A80000
trusted library allocation
page read and write
2A95000
unkown
page read and write
7FF585998000
unkown
page readonly
7FF585E0E000
unkown
page readonly
A03000
heap
page read and write
8E4000
heap
page read and write
4310000
unkown
page read and write
4C55000
stack
page read and write
7FF58577B000
unkown
page readonly
85EC000
unkown
page read and write
9FD000
heap
page read and write
7FF585D8B000
unkown
page readonly
5FB000
stack
page read and write
7DF49B311000
unkown
page execute read
7FF585BA6000
unkown
page readonly
9FC000
heap
page read and write
2975000
unkown
page read and write
F0A8000
unkown
page read and write
63F0000
heap
page read and write
87DF000
unkown
page read and write
8831000
unkown
page read and write
2A9C000
unkown
page read and write
7FF585E16000
unkown
page readonly
7FF585C46000
unkown
page readonly
7FF585767000
unkown
page readonly
87D9000
unkown
page read and write
68C7000
stack
page read and write
7FF585D05000
unkown
page readonly
7FF58573A000
unkown
page readonly
E380000
unkown
page execute and read and write
2B4C000
stack
page read and write
B290000
unkown
page read and write
EF7D000
unkown
page read and write
B68A000
stack
page read and write
F02E000
unkown
page read and write
8804000
unkown
page read and write
7FF585CCD000
unkown
page readonly
CCA3000
unkown
page read and write
B290000
unkown
page read and write
F12D000
unkown
page read and write
7FF5859BD000
unkown
page readonly
E10000
trusted library allocation
page execute and read and write
87DF000
unkown
page read and write
71DE000
unkown
page readonly
7FF585998000
unkown
page readonly
64B0000
unkown
page readonly
ED56000
unkown
page read and write
103C2000
unkown
page read and write
41CA000
unkown
page read and write
103B2000
unkown
page read and write
7FF5859CE000
unkown
page readonly
F50000
trusted library allocation
page read and write
8950000
unkown
page read and write
7FF585AB9000
unkown
page readonly
E65000
heap
page read and write
7FF58567F000
unkown
page readonly
81D0000
unkown
page readonly
4320000
unkown
page read and write
7FF5856C3000
unkown
page readonly
7FF585B3A000
unkown
page readonly
7FF585D51000
unkown
page readonly
2990000
unkown
page read and write
7FF585D1C000
unkown
page readonly
7FF585DD9000
unkown
page readonly
953000
heap
page read and write
7FF585978000
unkown
page readonly
CCAA000
unkown
page read and write
EF11000
unkown
page read and write
7FF585AD7000
unkown
page readonly
ED66000
unkown
page read and write
EDD1000
unkown
page read and write
29D0000
unkown
page read and write
7FF585E45000
unkown
page readonly
2960000
unkown
page read and write
EEC2000
unkown
page read and write
7D89000
stack
page read and write
F0AA000
unkown
page read and write
AF0000
unkown
page readonly
29B0000
unkown
page read and write
EF2B000
unkown
page read and write
85E1000
unkown
page read and write
7FF585D4D000
unkown
page readonly
5233000
unkown
page read and write
F0AC000
unkown
page read and write
7FF585C85000
unkown
page readonly
7FF585E07000
unkown
page readonly
103F4000
unkown
page read and write
6518000
unkown
page read and write
7FF585793000
unkown
page readonly
7FF585D5F000
unkown
page readonly
7FF585752000
unkown
page readonly
EFC1000
unkown
page read and write
B409000
stack
page read and write
85E1000
unkown
page read and write
EC67000
unkown
page read and write
B20A000
stack
page read and write
EBE4000
unkown
page read and write
CE08000
unkown
page read and write
12E7B000
unkown
page read and write
7299000
unkown
page readonly
CCC5000
unkown
page read and write
6412000
heap
page read and write
103B9000
unkown
page read and write
F05E000
unkown
page read and write
87DF000
unkown
page read and write
AF07000
stack
page read and write
7FF585C5F000
unkown
page readonly
7FF585DB1000
unkown
page readonly
884E000
unkown
page read and write
480A000
stack
page read and write
B589000
stack
page read and write
4310000
unkown
page read and write
7FF585770000
unkown
page readonly
AD0000
heap
page read and write
8804000
unkown
page read and write
7FF585DA2000
unkown
page readonly
EF11000
unkown
page read and write
AEB000
heap
page read and write
DD76000
unkown
page read and write
7FF58596F000
unkown
page readonly
126F0000
unkown
page read and write
2720000
unkown
page readonly
E376000
heap
page read and write
7FF585E74000
unkown
page readonly
EEB7000
unkown
page read and write
7FF585DA6000
unkown
page readonly
7FF585DE2000
unkown
page readonly
8820000
unkown
page read and write
87F4000
unkown
page read and write
CE4E000
unkown
page read and write
AEB000
heap
page read and write
B20000
unkown
page readonly
6412000
heap
page read and write
7FF5859E0000
unkown
page readonly
126E3000
unkown
page read and write
126B0000
unkown
page read and write
7FF5859A5000
unkown
page readonly
7FF585974000
unkown
page readonly
8604000
unkown
page read and write
EF2B000
unkown
page read and write
126EA000
unkown
page read and write
10374000
unkown
page read and write
AC10000
unkown
page read and write
10290000
unkown
page read and write
9FD000
heap
page read and write
881D000
unkown
page read and write
65DB000
unkown
page read and write
7FFA131BE000
unkown
page read and write
6460000
unkown
page read and write
71DE000
unkown
page readonly
9A4000
heap
page read and write
7FF5859CE000
unkown
page readonly
7FF585ADC000
unkown
page readonly
10406000
unkown
page read and write
7FF585E16000
unkown
page readonly
2B4E000
stack
page read and write
7F85000
stack
page read and write
7FFA131C3000
unkown
page readonly
7FF585CC0000
unkown
page readonly
881D000
unkown
page read and write
6518000
unkown
page read and write
447B000
unkown
page read and write
6AC2000
unkown
page readonly
103B4000
unkown
page read and write
8B9000
heap
page read and write
7FF585AB9000
unkown
page readonly
549F000
direct allocation
page execute and read and write
EBF6000
unkown
page read and write
85D8000
unkown
page read and write
2849000
stack
page read and write
85DF000
unkown
page read and write
B00000
unkown
page readonly
D95000
heap
page read and write
4C64000
unkown
page read and write
6410000
heap
page read and write
2980000
unkown
page read and write
86C0000
unkown
page read and write
DDA0000
heap
page read and write
7FF585929000
unkown
page readonly
7FF585E32000
unkown
page readonly
D90000
heap
page read and write
7FF5855F2000
unkown
page readonly
9A4000
heap
page read and write
7283000
unkown
page readonly
7FF585B6C000
unkown
page readonly
7FF585C19000
unkown
page readonly
1270B000
unkown
page read and write
838C000
stack
page read and write
F0F1000
unkown
page read and write
6F85000
unkown
page readonly
EF3E000
unkown
page read and write
6FAF000
unkown
page readonly
10434000
unkown
page read and write
7FF585DB1000
unkown
page readonly
8989000
unkown
page read and write
87DC000
unkown
page read and write
12716000
unkown
page read and write
85CC000
unkown
page read and write
4B3B000
stack
page read and write
7FF585BB8000
unkown
page readonly
2AAD000
unkown
page read and write
E00000
heap
page read and write
7FF585D97000
unkown
page readonly
56B0000
heap
page read and write
7FF585767000
unkown
page readonly
8645000
unkown
page read and write
881B000
unkown
page read and write
EE65000
unkown
page read and write
7FF585DCA000
unkown
page readonly
8E4000
heap
page read and write
2BDB000
unkown
page read and write
B409000
stack
page read and write
641A000
heap
page read and write
480A000
stack
page read and write
7FF585C8E000
unkown
page readonly
5810000
unkown
page read and write
87E3000
unkown
page read and write
126F2000
unkown
page read and write
F50000
trusted library allocation
page read and write
878000
heap
page read and write
2973000
unkown
page read and write
9A4000
heap
page read and write
126E6000
unkown
page read and write
AE5000
heap
page read and write
4499000
unkown
page read and write
7FF585935000
unkown
page readonly
10314000
unkown
page read and write
86B6000
unkown
page read and write
43B0000
unkown
page read and write
9A4000
heap
page read and write
ED0000
unkown
page readonly
7FF585E21000
unkown
page readonly
7FF585A34000
unkown
page readonly
7FF585CDD000
unkown
page readonly
2700000
unkown
page readonly
7FF58578B000
unkown
page readonly
87DC000
unkown
page read and write
10388000
unkown
page read and write
8487000
stack
page read and write
7DF49B2E0000
unkown
page readonly
F00E000
unkown
page read and write
8409000
stack
page read and write
A80000
trusted library allocation
page read and write
5880000
unkown
page read and write
7FF58594F000
unkown
page readonly
ECF6000
unkown
page read and write
EC17000
unkown
page read and write
1322E000
stack
page read and write
A80000
trusted library allocation
page read and write
F12D000
unkown
page read and write
562B000
direct allocation
page execute and read and write
7FF585D9D000
unkown
page readonly
12705000
unkown
page read and write
2904000
unkown
page read and write
FBB8000
system
page execute and read and write
709A000
unkown
page readonly
7232000
unkown
page readonly
FA8E000
stack
page read and write
2950000
unkown
page read and write
7FF58594C000
unkown
page readonly
7FF5856DA000
unkown
page readonly
29EE000
unkown
page read and write
E370000
heap
page read and write
7FF585779000
unkown
page readonly
718C000
unkown
page readonly
87CD000
unkown
page read and write
8783000
unkown
page read and write
12DB3000
unkown
page read and write
6775000
unkown
page read and write
7FF585940000
unkown
page readonly
CE7E000
unkown
page read and write
7FF585A9F000
unkown
page readonly
7FF585B6C000
unkown
page readonly
F2F000
direct allocation
page execute and read and write
7FF5856B0000
unkown
page readonly
F05E000
unkown
page read and write
CE73000
unkown
page read and write
7FF585BA9000
unkown
page readonly
881B000
unkown
page read and write
7FF5859E0000
unkown
page readonly
126E0000
unkown
page read and write
F02E000
unkown
page read and write
7FF585A4A000
unkown
page readonly
9FD000
heap
page read and write
1035E000
unkown
page read and write
10314000
unkown
page read and write
F0AA000
unkown
page read and write
7FF585DCA000
unkown
page readonly
7FF585CE4000
unkown
page readonly
6ABB000
unkown
page readonly
7FF585C70000
unkown
page readonly
7FFA131BC000
unkown
page read and write
7FF585CDD000
unkown
page readonly
6A90000
unkown
page readonly
7163000
unkown
page readonly
EBD2000
unkown
page read and write
7FF585922000
unkown
page readonly
2A8B000
unkown
page read and write
2AC1000
unkown
page read and write
43B0000
unkown
page read and write
F0A8000
unkown
page read and write
897C000
unkown
page read and write
2660000
unkown
page readonly
7FFA131BA000
unkown
page read and write
530000
heap
page read and write
9EA000
heap
page read and write
5910000
unkown
page read and write
7FF5858FA000
unkown
page readonly
7FF585DF3000
unkown
page readonly
12E72000
unkown
page read and write
B18A000
stack
page read and write
1621D000
stack
page read and write
27CA000
stack
page read and write
1312B000
stack
page read and write
6EC7000
unkown
page readonly
726E000
unkown
page readonly
FA0F000
stack
page read and write
8E4000
heap
page read and write
B18A000
stack
page read and write
DA0000
unclassified section
page execute and read and write
7125000
unkown
page readonly
8820000
unkown
page read and write
85E5000
unkown
page read and write
EF3F000
unkown
page read and write
4330000
unkown
page read and write
7FF585C0A000
unkown
page readonly
7FF585CF6000
unkown
page readonly
7FF585770000
unkown
page readonly
ECFA000
unkown
page read and write
7FF585DE2000
unkown
page readonly
5710000
unkown
page read and write
EC54000
unkown
page read and write
7FF5856B0000
unkown
page readonly
7FF5859B1000
unkown
page readonly
2AC1000
unkown
page read and write
EFC1000
unkown
page read and write
2A0F000
unkown
page read and write
571A000
unkown
page read and write
CCAA000
unkown
page read and write
7FF585974000
unkown
page readonly
85D0000
unkown
page read and write
7FF5856FF000
unkown
page readonly
2ACE000
unkown
page read and write
9F0000
heap
page read and write
87C2000
unkown
page read and write
7FF585C06000
unkown
page readonly
7FF585DA6000
unkown
page readonly
EC17000
unkown
page read and write
AC0000
unkown
page readonly
4494000
unkown
page read and write
2F00000
unkown
page read and write
D3E000
unkown
page read and write
EC55000
unkown
page read and write
85E3000
unkown
page read and write
72A5000
unkown
page readonly
10387000
unkown
page read and write
881D000
unkown
page read and write
87B7000
unkown
page read and write
7FF585DC2000
unkown
page readonly
727C000
unkown
page readonly
AF1000
heap
page read and write
AC20000
unkown
page read and write
6360000
unkown
page read and write
C76000
heap
page read and write
12E0000
heap
page read and write
6360000
unkown
page read and write
8E4000
heap
page read and write
87F4000
unkown
page read and write
4BC0000
unkown
page read and write
7FF5859AB000
unkown
page readonly
820000
unkown
page readonly
7FF585D6B000
unkown
page readonly
B887000
stack
page read and write
126F0000
unkown
page read and write
29C8000
stack
page read and write
8820000
unkown
page read and write
6EC7000
unkown
page readonly
9A4000
heap
page read and write
2E30000
unkown
page readonly
7FF585935000
unkown
page readonly
72AC000
unkown
page readonly
87BA000
unkown
page read and write
EE2D000
unkown
page read and write
72AC000
unkown
page readonly
8409000
stack
page read and write
818E000
stack
page read and write
9A4000
heap
page read and write
7DF49B2F0000
unkown
page readonly
134DE000
stack
page read and write
FC0C000
stack
page read and write
7FF585E21000
unkown
page readonly
A60000
unkown
page readonly
87E5000
unkown
page read and write
7FFA1321F000
unkown
page readonly
12DB3000
unkown
page read and write
EC5F000
unkown
page read and write
EF7D000
unkown
page read and write
6849000
stack
page read and write
41E0000
unkown
page read and write
882F000
unkown
page read and write
12718000
unkown
page read and write
F043000
unkown
page read and write
8E4000
heap
page read and write
E60B000
stack
page read and write
126F2000
unkown
page read and write
7FF5858F0000
unkown
page readonly
8783000
unkown
page read and write
EEC2000
unkown
page read and write
7FF585E3E000
unkown
page readonly
7FF585C99000
unkown
page readonly
F05E000
unkown
page read and write
940000
heap
page read and write
7FF585ED3000
unkown
page readonly
2A40000
unkown
page read and write
87B7000
unkown
page read and write
7FF585A75000
unkown
page readonly
7FF585A50000
unkown
page readonly
1031C000
unkown
page read and write
7FF5859E5000
unkown
page readonly
85C0000
unkown
page read and write
10311000
unkown
page read and write
98D000
stack
page read and write
ED69000
unkown
page read and write
72C2000
unkown
page readonly
7FF58590B000
unkown
page readonly
7FF585ADC000
unkown
page readonly
1038A000
unkown
page read and write
B1A000
heap
page read and write
D710000
unkown
page read and write
F019000
unkown
page read and write
12E34000
unkown
page read and write
7FF58592C000
unkown
page readonly
103B4000
unkown
page read and write
ECDA000
unkown
page read and write
2ABF000
unkown
page read and write
4180000
unkown
page read and write
126F2000
unkown
page read and write
2F20000
unkown
page read and write
7FF585853000
unkown
page readonly
F0AA000
unkown
page read and write
F0DD000
unkown
page read and write
980000
heap
page read and write
12AF000
stack
page read and write
2983000
unkown
page read and write
72B9000
unkown
page readonly
150D6000
system
page read and write
C90000
heap
page read and write
86E7000
unkown
page read and write
8E4000
heap
page read and write
892F000
unkown
page read and write
EDA1000
unkown
page read and write
12E89000
unkown
page read and write
10377000
unkown
page read and write
6F68000
unkown
page readonly
F01D000
unkown
page read and write
103B2000
unkown
page read and write
4820000
unkown
page readonly
85F3000
unkown
page read and write
7FF585C9F000
unkown
page readonly
7FF58592C000
unkown
page readonly
7FF585CD1000
unkown
page readonly
2F00000
unkown
page read and write
126E6000
unkown
page read and write
920000
heap
page read and write
F084000
unkown
page read and write
7FF585CEA000
unkown
page readonly
2A4F000
unkown
page read and write
EF7D000
unkown
page read and write
661A000
unkown
page read and write
DD55000
unkown
page read and write
AF0000
unkown
page readonly
4350000
unkown
page read and write
571D000
unkown
page read and write
ED50000
unkown
page read and write
2A95000
unkown
page read and write
EC16000
unkown
page read and write
7FF585940000
unkown
page readonly
7FF585D97000
unkown
page readonly
7032000
unkown
page readonly
9A4000
heap
page read and write
7FF585D78000
unkown
page readonly
2A40000
unkown
page read and write
EF7D000
unkown
page read and write
44B0000
unkown
page read and write
7FF585A2E000
unkown
page readonly
7FF585A69000
unkown
page readonly
7FF5859EF000
unkown
page readonly
7FF585A98000
unkown
page readonly
EC61000
unkown
page read and write
EE86000
unkown
page read and write
2A4F000
unkown
page read and write
7FF585AD9000
unkown
page readonly
AC20000
unkown
page read and write
4499000
unkown
page read and write
7FF58570C000
unkown
page readonly
2B4C000
stack
page read and write
EB04000
stack
page read and write
7FF585B9A000
unkown
page readonly
2F10000
unkown
page readonly
72A5000
unkown
page readonly
F185000
unkown
page read and write
10385000
unkown
page read and write
7FF585971000
unkown
page readonly
E494000
unkown
page execute and read and write
4686000
stack
page read and write
AD8E000
stack
page read and write
7FFA13020000
unkown
page readonly
DD68000
unkown
page read and write
7FF58570C000
unkown
page readonly
EF3E000
unkown
page read and write
AC10000
unkown
page read and write
2E27000
stack
page read and write
2DA0000
unkown
page readonly
879D000
unkown
page read and write
530000
heap
page read and write
7FF585CC9000
unkown
page readonly
8E4000
heap
page read and write
F0BB000
unkown
page read and write
70FC000
unkown
page readonly
E60000
heap
page read and write
6F97000
unkown
page readonly
87E1000
unkown
page read and write
EE64000
unkown
page read and write
7FF585779000
unkown
page readonly
10377000
unkown
page read and write
CE7E000
unkown
page read and write
85D0000
unkown
page read and write
7FF5859E5000
unkown
page readonly
9A4000
heap
page read and write
87E7000
unkown
page read and write
F03A000
unkown
page read and write
7FF585619000
unkown
page readonly
B80B000
stack
page read and write
B50E000
stack
page read and write
87D000
stack
page read and write
3241000
heap
page read and write
FA0F000
stack
page read and write
41D0000
unkown
page read and write
9A4000
heap
page read and write
F0B9000
unkown
page read and write
7FF58574B000
unkown
page readonly
AE89000
stack
page read and write
EBD2000
unkown
page read and write
2A13000
unkown
page read and write
2A9C000
unkown
page read and write
DDA0000
heap
page read and write
87E1000
unkown
page read and write
7FF585C72000
unkown
page readonly
F083000
unkown
page read and write
7FFA131DA000
unkown
page readonly
103A1000
unkown
page read and write
2A8B000
unkown
page read and write
EF2B000
unkown
page read and write
9A4000
heap
page read and write
2A4F000
unkown
page read and write
ECFA000
unkown
page read and write
738B000
stack
page read and write
43A0000
unkown
page readonly
7FF585904000
unkown
page readonly
7FF585AD7000
unkown
page readonly
5F0000
heap
page read and write
887C000
unkown
page read and write
85C8000
unkown
page read and write
F01A000
unkown
page read and write
5350000
heap
page read and write
91F000
heap
page read and write
7FF585937000
unkown
page readonly
ECA5000
unkown
page read and write
8831000
unkown
page read and write
D50000
trusted library allocation
page read and write
4BC0000
unkown
page read and write
EC67000
unkown
page read and write
661A000
unkown
page read and write
F00E000
unkown
page read and write
2AAD000
unkown
page read and write
8939000
unkown
page read and write
921000
heap
page read and write
7FF585722000
unkown
page readonly
6F9F000
unkown
page readonly
126E0000
unkown
page read and write
8804000
unkown
page read and write
7BC0000
heap
page read and write
7FF5859B7000
unkown
page readonly
897C000
unkown
page read and write
ED0000
unkown
page readonly
EFEC000
unkown
page read and write
EDB9000
unkown
page read and write
4C62000
unkown
page read and write
6AC2000
unkown
page readonly
2849000
stack
page read and write
2ACE000
unkown
page read and write
5E5000
stack
page read and write
7FF5859B4000
unkown
page readonly
10D0000
heap
page read and write
5600000
unkown
page read and write
7FF585E6E000
unkown
page readonly
2D25000
stack
page read and write
8939000
unkown
page read and write
86E7000
unkown
page read and write
7FF585CEA000
unkown
page readonly
C91000
heap
page read and write
8B21000
unkown
page read and write
126F2000
unkown
page read and write
87CD000
unkown
page read and write
1039C000
unkown
page read and write
1611C000
stack
page read and write
850000
unkown
page execute read
F0AA000
unkown
page read and write
6ABE000
unkown
page readonly
E80A000
stack
page read and write
41AA000
unkown
page read and write
8989000
unkown
page read and write
2A6B000
unkown
page read and write
ED50000
unkown
page read and write
B00000
unkown
page readonly
7FF585930000
unkown
page readonly
726E000
unkown
page readonly
1088D000
stack
page read and write
882F000
unkown
page read and write
EC76000
unkown
page read and write
D70C000
stack
page read and write
2A40000
unkown
page read and write
7FF585CFD000
unkown
page readonly
7FF585A0F000
unkown
page readonly
470A000
stack
page read and write
2660000
unkown
page readonly
7024000
unkown
page readonly
7FF585D28000
unkown
page readonly
9E0000
heap
page read and write
7FF585684000
unkown
page readonly
9A4000
heap
page read and write
4C90000
heap
page read and write
9FD000
heap
page read and write
7FF585A4A000
unkown
page readonly
F07A000
unkown
page read and write
ED22000
unkown
page read and write
2901000
unkown
page read and write
6F9F000
unkown
page readonly
7FF585B4C000
unkown
page readonly
7FF585D7C000
unkown
page readonly
8E4000
heap
page read and write
4CE0000
unkown
page read and write
87E3000
unkown
page read and write
B008000
stack
page read and write
87D9000
unkown
page read and write
E376000
heap
page read and write
7FF58598B000
unkown
page readonly
9C0000
trusted library allocation
page execute and read and write
12E72000
unkown
page read and write
EDBD000
unkown
page read and write
4C60000
unkown
page read and write
1332C000
stack
page read and write
87C6000
unkown
page read and write
8939000
unkown
page read and write
7FF5859A5000
unkown
page readonly
AE1000
heap
page read and write
7FF585BF5000
unkown
page readonly
12E89000
unkown
page read and write
7FF58593D000
unkown
page readonly
B589000
stack
page read and write
7FF585BA9000
unkown
page readonly
7FF5856E8000
unkown
page readonly
7FF585D66000
unkown
page readonly
12DF6000
unkown
page read and write
F00E000
unkown
page read and write
B50E000
stack
page read and write
953000
heap
page read and write
8812000
unkown
page read and write
7FF585BF5000
unkown
page readonly
7FF585CA3000
unkown
page readonly
7FFA13109000
unkown
page readonly
7FF585D9D000
unkown
page readonly
87C2000
unkown
page read and write
AE89000
stack
page read and write
8307000
stack
page read and write
7FF585E53000
unkown
page readonly
7FF585AC1000
unkown
page readonly
1039C000
unkown
page read and write
DD7C000
unkown
page read and write
86E7000
unkown
page read and write
ECDA000
unkown
page read and write
7FF585C02000
unkown
page readonly
72B9000
unkown
page readonly
ADF000
heap
page read and write
EB90000
unkown
page read and write
881B000
unkown
page read and write
7FF585B4C000
unkown
page readonly
10BB000
direct allocation
page execute and read and write
7FF58596C000
unkown
page readonly
5580000
unkown
page readonly
4756000
unkown
page read and write
EBEF000
unkown
page read and write
E377000
heap
page read and write
87BA000
unkown
page read and write
87DF000
unkown
page read and write
ECEF000
unkown
page read and write
7FF5856F4000
unkown
page readonly
7DF49B311000
unkown
page execute read
6F97000
unkown
page readonly
F0AA000
unkown
page read and write
7FF585C6D000
unkown
page readonly
7FFA13227000
unkown
page readonly
7FF585A2E000
unkown
page readonly
7FF585C64000
unkown
page readonly
7FF5856F4000
unkown
page readonly
2AC1000
unkown
page read and write
44B0000
unkown
page read and write
2F10000
unkown
page readonly
87B7000
unkown
page read and write
7FF585CA1000
unkown
page readonly
718C000
unkown
page readonly
882F000
unkown
page read and write
ECFA000
unkown
page read and write
7FFA131BC000
unkown
page read and write
7FF585E0E000
unkown
page readonly
9A4000
heap
page read and write
A80000
trusted library allocation
page read and write
F00E000
unkown
page read and write
7FF585E80000
unkown
page readonly
F185000
unkown
page read and write
F50000
trusted library allocation
page read and write
9F9000
heap
page read and write
CE69000
unkown
page read and write
647D000
unkown
page read and write
7290000
unkown
page readonly
EBFA000
unkown
page read and write
7FF585C6D000
unkown
page readonly
5711000
unkown
page read and write
7290000
unkown
page readonly
8949000
unkown
page read and write
7FF585CA3000
unkown
page readonly
7FFA131BD000
unkown
page write copy
1039C000
unkown
page read and write
7FF585CFD000
unkown
page readonly
7FF58578B000
unkown
page readonly
10311000
unkown
page read and write
7FF585ABC000
unkown
page readonly
840000
unkown
page readonly
8E4000
heap
page read and write
EDBD000
unkown
page read and write
41CA000
unkown
page read and write
F989000
stack
page read and write
1038A000
unkown
page read and write
126EA000
unkown
page read and write
126E6000
unkown
page read and write
8783000
unkown
page read and write
879D000
unkown
page read and write
EFEC000
unkown
page read and write
103C2000
unkown
page read and write
65D0000
unkown
page read and write
4ABE000
stack
page read and write
D80000
trusted library allocation
page execute and read and write
6775000
unkown
page read and write
B28E000
stack
page read and write
CE88000
unkown
page read and write
87E3000
unkown
page read and write
B28E000
stack
page read and write
F0A8000
unkown
page read and write
7FF585E32000
unkown
page readonly
87E7000
unkown
page read and write
2A0A000
unkown
page read and write
EDAC000
unkown
page read and write
ED1E000
unkown
page read and write
22E0000
heap
page read and write
126E1000
unkown
page read and write
87D1000
unkown
page read and write
8831000
unkown
page read and write
CE88000
unkown
page read and write
7FF577B76000
unkown
page readonly
5710000
unkown
page read and write
EFC7000
unkown
page read and write
838C000
stack
page read and write
2A6B000
unkown
page read and write
9A4000
heap
page read and write
7FF585B50000
unkown
page readonly
9A4000
heap
page read and write
5700000
unkown
page read and write
87D9000
unkown
page read and write
E58F000
stack
page read and write
7FF585DE0000
unkown
page readonly
7FF585755000
unkown
page readonly
1619C000
stack
page read and write
7FF585E53000
unkown
page readonly
7FF585ACA000
unkown
page readonly
7FF585937000
unkown
page readonly
41D0000
unkown
page read and write
4C90000
heap
page read and write
882F000
unkown
page read and write
6370000
unkown
page readonly
2700000
unkown
page readonly
7F85000
stack
page read and write
9A4000
heap
page read and write
DD7F000
unkown
page read and write
87E7000
unkown
page read and write
7FF5856BF000
unkown
page readonly
8107000
stack
page read and write
10357000
unkown
page read and write
71F3000
unkown
page readonly
878000
heap
page read and write
778D000
stack
page read and write
7297000
unkown
page readonly
7FF585DF3000
unkown
page readonly
103A7000
unkown
page read and write
7FF585AC1000
unkown
page readonly
7FF585D28000
unkown
page readonly
4850000
unkown
page readonly
7FF585D1C000
unkown
page readonly
4340000
unkown
page read and write
1376000
system
page execute and read and write
6350000
unkown
page readonly
4686000
stack
page read and write
7FF585908000
unkown
page readonly
9A4000
heap
page read and write
8831000
unkown
page read and write
12E7B000
unkown
page read and write
2DA0000
unkown
page readonly
22E0000
heap
page read and write
29D0000
unkown
page read and write
7FF585D81000
unkown
page readonly
8E0000
heap
page read and write
7FF585E5D000
unkown
page readonly
2A4F000
unkown
page read and write
EF2B000
unkown
page read and write
8804000
unkown
page read and write
FBA3000
system
page execute and read and write
714E000
unkown
page readonly
F04A000
unkown
page read and write
7FF585A69000
unkown
page readonly
7FF5855ED000
unkown
page readonly
7FF585846000
unkown
page readonly
2A40000
unkown
page read and write
7FF585AD9000
unkown
page readonly
7FF585DDC000
unkown
page readonly
12DFB000
unkown
page read and write
470A000
stack
page read and write
85EC000
unkown
page read and write
F989000
stack
page read and write
87D1000
unkown
page read and write
7FF5859B1000
unkown
page readonly
7FF585AA8000
unkown
page readonly
87E1000
unkown
page read and write
6370000
unkown
page readonly
6ABE000
unkown
page readonly
7FF585ACD000
unkown
page readonly
7FF585DD9000
unkown
page readonly
8307000
stack
page read and write
7FF58584B000
unkown
page readonly
7FF585DDC000
unkown
page readonly
EE65000
unkown
page read and write
1270B000
unkown
page read and write
10368000
unkown
page read and write
43A0000
unkown
page readonly
7FF585AE2000
unkown
page readonly
EC9D000
unkown
page read and write
7FF585E26000
unkown
page readonly
126EA000
unkown
page read and write
10290000
unkown
page read and write
7FF5859AB000
unkown
page readonly
87E1000
unkown
page read and write
2A63000
unkown
page read and write
EF7D000
unkown
page read and write
16099000
stack
page read and write
81D0000
unkown
page readonly
22E3000
heap
page read and write
28CE000
stack
page read and write
9A4000
heap
page read and write
87CD000
unkown
page read and write
7FFA13227000
unkown
page readonly
10370000
unkown
page read and write
E05000
heap
page read and write
6210000
unkown
page readonly
ED50000
unkown
page read and write
7032000
unkown
page readonly
7FF585D7C000
unkown
page readonly
9A4000
heap
page read and write
4210000
unkown
page read and write
7FF585A9F000
unkown
page readonly
87D1000
unkown
page read and write
11BE000
stack
page read and write
EFC1000
unkown
page read and write
8949000
unkown
page read and write
4C60000
unkown
page read and write
86B6000
unkown
page read and write
85DD000
unkown
page read and write
12DF6000
unkown
page read and write
887F000
unkown
page read and write
4810000
unkown
page read and write
7FF585A2C000
unkown
page readonly
130AC000
stack
page read and write
70FC000
unkown
page readonly
7FF585C66000
unkown
page readonly
4810000
unkown
page read and write
ED55000
unkown
page read and write
7FF5859EB000
unkown
page readonly
F073000
unkown
page read and write
DD5E000
unkown
page read and write
7232000
unkown
page readonly
7FF585ED1000
unkown
page readonly
AEB000
heap
page read and write
41BA000
unkown
page read and write
85D8000
unkown
page read and write
3426000
heap
page read and write
4ABE000
stack
page read and write
5380000
direct allocation
page execute and read and write
6AD3000
unkown
page readonly
EDDB000
unkown
page read and write
7FF5859D2000
unkown
page readonly
7FF585DB6000
unkown
page readonly
7245000
unkown
page readonly
897E000
unkown
page read and write
68C7000
stack
page read and write
F50000
trusted library allocation
page read and write
EEC2000
unkown
page read and write
ED28000
unkown
page read and write
4BBD000
stack
page read and write
830000
unkown
page read and write
2A95000
unkown
page read and write
7FF585AE2000
unkown
page readonly
10370000
unkown
page read and write
126E6000
unkown
page read and write
6F68000
unkown
page readonly
855000
heap
page read and write
810000
heap
page read and write
10434000
unkown
page read and write
DDB0000
unkown
page read and write
BF8000
heap
page read and write
103EB000
unkown
page read and write
ECA5000
unkown
page read and write
7FF585A31000
unkown
page readonly
7FF585A4E000
unkown
page readonly
53C0000
unkown
page readonly
7FF585DEA000
unkown
page readonly
41AA000
unkown
page read and write
28D0000
unkown
page readonly
820000
unkown
page readonly
879D000
unkown
page read and write
549B000
direct allocation
page execute and read and write
EC55000
unkown
page read and write
9F2000
heap
page read and write
727C000
unkown
page readonly
87C8000
unkown
page read and write
10376000
unkown
page read and write
2ACE000
unkown
page read and write
EC5F000
unkown
page read and write
7FF585B49000
unkown
page readonly
6F41000
unkown
page readonly
F0ED000
unkown
page read and write
F01A000
unkown
page read and write
3426000
heap
page read and write
ED22000
unkown
page read and write
7FF585619000
unkown
page readonly
7FF585A50000
unkown
page readonly
8B00000
unkown
page read and write
AB0000
unkown
page read and write
477E000
unkown
page read and write
7FFA131C3000
unkown
page readonly
ECFA000
unkown
page read and write
7FFA13021000
unkown
page execute read
7FF585D2E000
unkown
page readonly
2EF0000
unkown
page readonly
7FF585A34000
unkown
page readonly
C91000
heap
page read and write
7FF585752000
unkown
page readonly
EEC2000
unkown
page read and write
7FF585684000
unkown
page readonly
8631000
unkown
page read and write
ED27000
unkown
page read and write
EF3E000
unkown
page read and write
EC9D000
unkown
page read and write
9A4000
heap
page read and write
830000
unkown
page readonly
F50000
trusted library allocation
page read and write
29A0000
unkown
page read and write
447B000
unkown
page read and write
85C8000
unkown
page read and write
CCA3000
unkown
page read and write
A03000
heap
page read and write
7FF585D3F000
unkown
page readonly
9A4000
heap
page read and write
4751000
unkown
page read and write
EE87000
unkown
page read and write
7FF585B9A000
unkown
page readonly
7FF58575F000
unkown
page readonly
56E0000
unkown
page readonly
7FF585ED1000
unkown
page readonly
7FF5859B7000
unkown
page readonly
7FF5859B4000
unkown
page readonly
2F20000
unkown
page read and write
7FF58596C000
unkown
page readonly
9FD000
heap
page read and write
7FF585C33000
unkown
page readonly
3426000
heap
page read and write
EF7D000
unkown
page read and write
AE0000
heap
page read and write
7FF5859BD000
unkown
page readonly
157BF000
system
page read and write
FB5000
heap
page read and write
7FF585DCC000
unkown
page readonly
881B000
unkown
page read and write
8949000
unkown
page read and write
7FF585775000
unkown
page readonly
1036E000
unkown
page read and write
9F4000
heap
page read and write
7FFA13021000
unkown
page execute read
7FF585BA6000
unkown
page readonly
8989000
unkown
page read and write
7FF5856BF000
unkown
page readonly
EC5F000
unkown
page read and write
490000
heap
page read and write
10D4000
heap
page read and write
87C2000
unkown
page read and write
7FF58584B000
unkown
page readonly
6849000
stack
page read and write
87D9000
unkown
page read and write
2A0F000
unkown
page read and write
9F2000
heap
page read and write
7FF585846000
unkown
page readonly
7FF585B5A000
unkown
page readonly
2E27000
stack
page read and write
E70F000
stack
page read and write
A80000
trusted library allocation
page read and write
8631000
unkown
page read and write
7A70000
unkown
page read and write
F02E000
unkown
page read and write
4320000
unkown
page read and write
870000
heap
page read and write
4880000
unkown
page readonly
85DD000
unkown
page read and write
2ABF000
unkown
page read and write
EC67000
unkown
page read and write
8E4000
heap
page read and write
7FF585722000
unkown
page readonly
ECF5000
unkown
page read and write
7FF5856E6000
unkown
page readonly
709A000
unkown
page readonly
4830000
unkown
page read and write
7FF585773000
unkown
page readonly
87E5000
unkown
page read and write
858B000
stack
page read and write
12F2A000
stack
page read and write
6460000
unkown
page read and write
56B6000
unclassified section
page read and write
850E000
stack
page read and write
7FF585B5A000
unkown
page readonly
4390000
unkown
page read and write
7FF58573A000
unkown
page readonly
7FF585B61000
unkown
page readonly
4536000
stack
page read and write
2A6B000
unkown
page read and write
E66000
heap
page read and write
F04A000
unkown
page read and write
87C6000
unkown
page read and write
EDB9000
unkown
page read and write
EC76000
unkown
page read and write
D90000
trusted library allocation
page read and write
897E000
unkown
page read and write
EE2D000
unkown
page read and write
F0A8000
unkown
page read and write
F07A000
unkown
page read and write
7FF585D63000
unkown
page readonly
ADC000
heap
page read and write
850E000
stack
page read and write
7FF5855ED000
unkown
page readonly
E70F000
stack
page read and write
10376000
unkown
page read and write
E58F000
stack
page read and write
7DF49B2F1000
unkown
page execute read
7FF585782000
unkown
page readonly
1088D000
stack
page read and write
536A000
unkown
page read and write
7FF585E80000
unkown
page readonly
4492000
unkown
page read and write
DD68000
unkown
page read and write
132AD000
stack
page read and write
EBFA000
unkown
page read and write
EF3E000
unkown
page read and write
8487000
stack
page read and write
45BA000
stack
page read and write
65C7000
stack
page read and write
7FF58575D000
unkown
page readonly
F02E000
unkown
page read and write
830000
unkown
page readonly
126E1000
unkown
page read and write
7FF585BE6000
unkown
page readonly
7FF585773000
unkown
page readonly
2D60000
unkown
page read and write
1404000
unclassified section
page execute and read and write
29EE000
unkown
page read and write
7FF585C9F000
unkown
page readonly
E10000
direct allocation
page execute and read and write
52F0000
unkown
page readonly
7FF585DC2000
unkown
page readonly
4370000
unkown
page read and write
8E4000
heap
page read and write
F50000
trusted library allocation
page read and write
ED50000
unkown
page read and write
B753000
unkown
page read and write
126E000
stack
page read and write
7FF58590B000
unkown
page readonly
2A95000
unkown
page read and write
2970000
unkown
page read and write
7283000
unkown
page readonly
E378000
heap
page read and write
7FF585AA6000
unkown
page readonly
ED55000
unkown
page read and write
7FF585929000
unkown
page readonly
540000
unkown
page read and write
AB8E000
stack
page read and write
1039C000
unkown
page read and write
7FF58567F000
unkown
page readonly
12705000
unkown
page read and write
103B4000
unkown
page read and write
4340000
unkown
page read and write
7FF58575F000
unkown
page readonly
4779000
unkown
page read and write
7FF585D74000
unkown
page readonly
892F000
unkown
page read and write
F0A8000
unkown
page read and write
9A4000
heap
page read and write
87E3000
unkown
page read and write
2D40000
unkown
page readonly
DA6000
unclassified section
page execute and read and write
7185000
unkown
page readonly
12DFB000
unkown
page read and write
7125000
unkown
page readonly
B609000
stack
page read and write
7FF585A0F000
unkown
page readonly
562F000
direct allocation
page execute and read and write
7FF585E74000
unkown
page readonly
F00E000
unkown
page read and write
F50000
trusted library allocation
page read and write
6DFD000
unkown
page readonly
840000
unkown
page readonly
7297000
unkown
page readonly
7FF58591F000
unkown
page readonly
71C3000
unkown
page readonly
7FF585853000
unkown
page readonly
EBFA000
unkown
page read and write
A60000
unkown
page readonly
5350000
heap
page read and write
87F4000
unkown
page read and write
2A9C000
unkown
page read and write
EFC5000
unkown
page read and write
EB0000
trusted library allocation
page execute and read and write
126EA000
unkown
page read and write
A07000
heap
page read and write
3241000
heap
page read and write
F0CC000
unkown
page read and write
28D0000
unkown
page readonly
E370000
heap
page read and write
7FF585A75000
unkown
page readonly
7FF585ACA000
unkown
page readonly
9FD000
heap
page read and write
F083000
unkown
page read and write
7FF585E7A000
unkown
page readonly
7FF585DEA000
unkown
page readonly
C8B2000
unkown
page read and write
EF2B000
unkown
page read and write
850000
heap
page read and write
7FF58598B000
unkown
page readonly
B10E000
stack
page read and write
7FF58571E000
unkown
page readonly
7FF585D66000
unkown
page readonly
AB0000
unkown
page read and write
7FF585C1C000
unkown
page readonly
4350000
unkown
page read and write
7FF5859EB000
unkown
page readonly
12EE000
stack
page read and write
12F2A000
stack
page read and write
2ACE000
unkown
page read and write
2A0D000
unkown
page read and write
8B9000
heap
page read and write
EFDB000
unkown
page read and write
6ABB000
unkown
page readonly
7FF585DD7000
unkown
page readonly
4C66000
unkown
page read and write
AC0A000
stack
page read and write
7FF585D6E000
unkown
page readonly
CE4E000
unkown
page read and write
7FF585B61000
unkown
page readonly
4210000
unkown
page read and write
590C000
stack
page read and write
ECB3000
unkown
page read and write
6210000
unkown
page readonly
881D000
unkown
page read and write
DD7C000
unkown
page read and write
7FF585B50000
unkown
page readonly
6FAF000
unkown
page readonly
D91000
heap
page read and write
7FF585E4C000
unkown
page readonly
7FF585D63000
unkown
page readonly
7FF5858F6000
unkown
page readonly
4330000
unkown
page read and write
B80B000
stack
page read and write
EDB9000
unkown
page read and write
9A4000
heap
page read and write
7FF585904000
unkown
page readonly
7FF585C85000
unkown
page readonly
2A0F000
unkown
page read and write
AD7000
heap
page read and write
4A35000
stack
page read and write
8644000
unkown
page read and write
4390000
unkown
page read and write
FB09000
stack
page read and write
EC5F000
unkown
page read and write
2A0A000
unkown
page read and write
B40000
unkown
page readonly
AEB000
heap
page read and write
126DB000
unkown
page read and write
7FF58571E000
unkown
page readonly
850000
heap
page read and write
8B00000
unkown
page read and write
6F7E000
unkown
page readonly
7FF5859EF000
unkown
page readonly
FA8E000
stack
page read and write
4200000
unkown
page read and write
7FF58593D000
unkown
page readonly
7FF585930000
unkown
page readonly
7FF585E36000
unkown
page readonly
7FFA131B3000
unkown
page read and write
AC0000
unkown
page readonly
7FF585E07000
unkown
page readonly
7FF58594C000
unkown
page readonly
2D60000
unkown
page read and write
7FF585A91000
unkown
page readonly
7FF585C19000
unkown
page readonly
7FFA131B5000
unkown
page read and write
AE1000
heap
page read and write
87C6000
unkown
page read and write
EF11000
unkown
page read and write
86B6000
unkown
page read and write
8E4000
heap
page read and write
ECDA000
unkown
page read and write
7FF585E7A000
unkown
page readonly
87C8000
unkown
page read and write
2A63000
unkown
page read and write
EDF5000
unkown
page read and write
10BF000
direct allocation
page execute and read and write
12F0000
unclassified section
page execute and read and write
7FF585D01000
unkown
page readonly
7FF5856B7000
unkown
page readonly
4536000
stack
page read and write
5D9F000
unclassified section
page read and write
ECA5000
unkown
page read and write
8BA3000
unkown
page read and write
4C80000
unkown
page readonly
7FF585DE0000
unkown
page readonly
7FF585922000
unkown
page readonly
87DC000
unkown
page read and write
D1E000
stack
page read and write
AF89000
stack
page read and write
F0EE000
unkown
page read and write
85C4000
unkown
page read and write
7FF585D6B000
unkown
page readonly
9A4000
heap
page read and write
131AB000
stack
page read and write
7FF585E6E000
unkown
page readonly
B70B000
stack
page read and write
5600000
unkown
page read and write
F0AA000
unkown
page read and write
EC67000
unkown
page read and write
7FF585D2E000
unkown
page readonly
7FF5856B7000
unkown
page readonly
880000
heap
page read and write
DD84000
unkown
page read and write
8812000
unkown
page read and write
DD55000
unkown
page read and write
7FF585978000
unkown
page readonly
7FF585971000
unkown
page readonly
7FF585CCD000
unkown
page readonly
4180000
unkown
page read and write
AEB000
heap
page read and write
897E000
unkown
page read and write
9A4000
heap
page read and write
890000
trusted library allocation
page read and write
770E000
stack
page read and write
1038A000
unkown
page read and write
7FF58594F000
unkown
page readonly
7FFA13020000
unkown
page readonly
8107000
stack
page read and write
4FC000
stack
page read and write
770E000
stack
page read and write
F0B6000
unkown
page read and write
4200000
unkown
page read and write
5233000
unkown
page read and write
8E4000
heap
page read and write
ED22000
unkown
page read and write
EF0E000
unkown
page read and write
1631C000
stack
page read and write
7FF585D46000
unkown
page readonly
4C80000
unkown
page readonly
7FF585A91000
unkown
page readonly
CC90000
unkown
page read and write
87C2000
unkown
page read and write
7FF585CC9000
unkown
page readonly
EFBE000
unkown
page read and write
855000
heap
page read and write
7FF5859F3000
unkown
page readonly
7FFA131B5000
unkown
page read and write
7FF5858FA000
unkown
page readonly
CCBB000
unkown
page read and write
2ABF000
unkown
page read and write
10377000
unkown
page read and write
7163000
unkown
page readonly
1038A000
unkown
page read and write
2A6B000
unkown
page read and write
10368000
unkown
page read and write
8E4000
heap
page read and write
F00E000
unkown
page read and write
870000
heap
page read and write
721C000
unkown
page readonly
9A4000
heap
page read and write
10434000
unkown
page read and write
F18D000
unkown
page read and write
52C0000
unkown
page readonly
B20A000
stack
page read and write
7FF585E36000
unkown
page readonly
7FF58591F000
unkown
page readonly
7FF5859FA000
unkown
page readonly
EF7D000
unkown
page read and write
ADF000
heap
page read and write
B00A000
stack
page read and write
2A0D000
unkown
page read and write
85E3000
unkown
page read and write
4CE0000
unkown
page read and write
9A4000
heap
page read and write
103EB000
unkown
page read and write
4370000
unkown
page read and write
6350000
unkown
page readonly
87CD000
unkown
page read and write
7DF49B2E1000
unkown
page execute read
7BC0000
heap
page read and write
940000
heap
page read and write
2EF0000
unkown
page readonly
892F000
unkown
page read and write
85DA000
unkown
page read and write
2A63000
unkown
page read and write
2BDB000
unkown
page read and write
22E3000
heap
page read and write
CDDB000
unkown
page read and write
7FF585C5F000
unkown
page readonly
2A8B000
unkown
page read and write
7FF585908000
unkown
page readonly
FB8C000
stack
page read and write
8783000
unkown
page read and write
B753000
unkown
page read and write
7FF585D3F000
unkown
page readonly
85C0000
unkown
page read and write
7FF5859FA000
unkown
page readonly
3420000
heap
page read and write
AEB000
heap
page read and write
7FF5856BC000
unkown
page readonly
85DF000
unkown
page read and write
4C55000
stack
page read and write
DDB0000
unkown
page read and write
5880000
unkown
page read and write
ECFA000
unkown
page read and write
F03A000
unkown
page read and write
536A000
unkown
page read and write
7FFA131B3000
unkown
page read and write
7FF585B46000
unkown
page readonly
87E7000
unkown
page read and write
7FF585D46000
unkown
page readonly
7FF585CC0000
unkown
page readonly
7FF585952000
unkown
page readonly
7FF585D4D000
unkown
page readonly
7FF585A98000
unkown
page readonly
AE2000
heap
page read and write
11FE000
stack
page read and write
8604000
unkown
page read and write
1031C000
unkown
page read and write
8812000
unkown
page read and write
7FF585C24000
unkown
page readonly
B00A000
stack
page read and write
7FF585E5D000
unkown
page readonly
87F4000
unkown
page read and write
132F000
stack
page read and write
F50000
trusted library allocation
page read and write
7FF585BB8000
unkown
page readonly
EF2B000
unkown
page read and write
EF7D000
unkown
page read and write
41E0000
unkown
page read and write
EB90000
unkown
page read and write
7FF585D01000
unkown
page readonly
8590000
unkown
page read and write
7FF585D81000
unkown
page readonly
7FF5858E1000
unkown
page readonly
895A000
unkown
page read and write
86E7000
unkown
page read and write
AE5000
heap
page read and write
4850000
unkown
page readonly
9A4000
heap
page read and write
7FF585C21000
unkown
page readonly
7FFA131DA000
unkown
page readonly
8E4000
heap
page read and write
7FF585B3A000
unkown
page readonly
4190000
unkown
page read and write
7FF585CD1000
unkown
page readonly
FB09000
stack
page read and write
56E0000
unkown
page readonly
87E5000
unkown
page read and write
FB93000
system
page execute and read and write
7FF585B46000
unkown
page readonly
87BA000
unkown
page read and write
7FF585C64000
unkown
page readonly
714E000
unkown
page readonly
2A63000
unkown
page read and write
7FF585E4C000
unkown
page readonly
EE2D000
unkown
page read and write
103B4000
unkown
page read and write
87BA000
unkown
page read and write
72C2000
unkown
page readonly
7FF585AF5000
unkown
page readonly
CCC5000
unkown
page read and write
45C0000
unkown
page write copy
590C000
stack
page read and write
7FFA131BD000
unkown
page write copy
85F3000
unkown
page read and write
AB8E000
stack
page read and write
EEC1000
unkown
page read and write
CE69000
unkown
page read and write
DD5E000
unkown
page read and write
1035C000
unkown
page read and write
87C8000
unkown
page read and write
7FF585C99000
unkown
page readonly
9A4000
heap
page read and write
2B4E000
stack
page read and write
7FF585E26000
unkown
page readonly
87D1000
unkown
page read and write
7FF585DD7000
unkown
page readonly
CDDB000
unkown
page read and write
A80000
trusted library allocation
page read and write
7FF585CF6000
unkown
page readonly
103EB000
unkown
page read and write
4437000
unkown
page read and write
738B000
stack
page read and write
FC8C000
stack
page read and write
85E5000
unkown
page read and write
87E5000
unkown
page read and write
126B0000
unkown
page read and write
CCB2000
unkown
page read and write
EB04000
stack
page read and write
10370000
unkown
page read and write
7FF585CC5000
unkown
page readonly
2AAD000
unkown
page read and write
2950000
unkown
page read and write
CE73000
unkown
page read and write
E16000
heap
page read and write
45BA000
stack
page read and write
CE08000
unkown
page read and write
112F000
unkown
page read and write
7FF585C1C000
unkown
page readonly
B20000
unkown
page readonly
647D000
unkown
page read and write
6DFD000
unkown
page readonly
AD8E000
stack
page read and write
F2B000
direct allocation
page execute and read and write
EDAA000
unkown
page read and write
1370000
system
page execute and read and write
7FF5856E8000
unkown
page readonly
7FF585D69000
unkown
page readonly
103EB000
unkown
page read and write
85CC000
unkown
page read and write
7FF585ECC000
unkown
page readonly
65C7000
stack
page read and write
103A1000
unkown
page read and write
884E000
unkown
page read and write
7FF585ECC000
unkown
page readonly
4830000
unkown
page read and write
2720000
unkown
page readonly
7FF585C0A000
unkown
page readonly
7FF5859D2000
unkown
page readonly
6F41000
unkown
page readonly
28CF000
stack
page read and write
F07A000
unkown
page read and write
F01A000
unkown
page read and write
7FFA1321F000
unkown
page readonly
7FF585DB6000
unkown
page readonly
5E5000
stack
page read and write
7FF5858F0000
unkown
page readonly
721C000
unkown
page readonly
EC5F000
unkown
page read and write
F0A8000
unkown
page read and write
7FF585775000
unkown
page readonly
8BC000
stack
page read and write
2D40000
unkown
page readonly
7FF585D6E000
unkown
page readonly
ED9C000
unkown
page read and write
AF89000
stack
page read and write
7FF58574B000
unkown
page readonly
6410000
heap
page read and write
F05D000
unkown
page read and write
F0A8000
unkown
page read and write
7FF585CD4000
unkown
page readonly
7FF585992000
unkown
page readonly
7FFA13109000
unkown
page readonly
641A000
heap
page read and write
103B2000
unkown
page read and write
7FF585755000
unkown
page readonly
A80000
trusted library allocation
page read and write
7FF5856BC000
unkown
page readonly
9A0000
heap
page read and write
7FF585DCC000
unkown
page readonly
2A13000
unkown
page read and write
7FF585ED3000
unkown
page readonly
4A35000
stack
page read and write
56B0000
heap
page read and write
4BBD000
stack
page read and write
EF2B000
unkown
page read and write
7FF58577B000
unkown
page readonly
45C0000
unkown
page write copy
7FF585D78000
unkown
page readonly
10357000
unkown
page read and write
2D25000
stack
page read and write
7FF585C21000
unkown
page readonly
AC0A000
stack
page read and write
778D000
stack
page read and write
6651000
unkown
page read and write
123F000
stack
page read and write
7FF585ACD000
unkown
page readonly
A80000
trusted library allocation
page read and write
2CAA000
stack
page read and write
B68A000
stack
page read and write
7FF585AF5000
unkown
page readonly
EEB7000
unkown
page read and write
B887000
stack
page read and write
C8B2000
unkown
page read and write
CC90000
unkown
page read and write
2A13000
unkown
page read and write
7FF585ABC000
unkown
page readonly
7299000
unkown
page readonly
7FF585CD4000
unkown
page readonly
6AD3000
unkown
page readonly
7FF585D74000
unkown
page readonly
7FF585C8E000
unkown
page readonly
2A13000
unkown
page read and write
91F000
heap
page read and write
E60B000
stack
page read and write
4779000
unkown
page read and write
E88C000
stack
page read and write
895A000
unkown
page read and write
52F0000
unkown
page readonly
7FF58575D000
unkown
page readonly
B40000
unkown
page readonly
84F000
unkown
page execute and read and write
2AAD000
unkown
page read and write
2ABF000
unkown
page read and write
7FF585C33000
unkown
page readonly
EBF6000
unkown
page read and write
8820000
unkown
page read and write
EBE4000
unkown
page read and write
897C000
unkown
page read and write
ECB0000
unkown
page read and write
12718000
unkown
page read and write
EC5F000
unkown
page read and write
7FF5859F3000
unkown
page readonly
AE1000
heap
page read and write
AF1000
heap
page read and write
10370000
unkown
page read and write
7FF585B49000
unkown
page readonly
818E000
stack
page read and write
7FF585AA8000
unkown
page readonly
12E34000
unkown
page read and write
7FF585782000
unkown
page readonly
2CAA000
stack
page read and write
7FF585DA2000
unkown
page readonly
ED27000
unkown
page read and write
AC1E000
unkown
page read and write
858B000
stack
page read and write
7FF585D51000
unkown
page readonly
12716000
unkown
page read and write
7245000
unkown
page readonly
85DA000
unkown
page read and write
52C0000
unkown
page readonly
E88C000
stack
page read and write
B70B000
stack
page read and write
FB10000
system
page execute and read and write
7FF585D8B000
unkown
page readonly
B609000
stack
page read and write
7FF5856E6000
unkown
page readonly
5910000
unkown
page read and write
103B9000
unkown
page read and write
9A4000
heap
page read and write
C91000
heap
page read and write
56D0000
unkown
page readonly
5580000
unkown
page readonly
7FF577B76000
unkown
page readonly
EF0E000
unkown
page read and write
8812000
unkown
page read and write
64B0000
unkown
page readonly
661A000
unkown
page read and write
DD76000
unkown
page read and write
6624000
unkown
page read and write
EDB9000
unkown
page read and write
7FF585992000
unkown
page readonly
7FF585CA1000
unkown
page readonly
7FF58596F000
unkown
page readonly
1395A000
stack
page read and write
7FF585D5F000
unkown
page readonly
6651000
unkown
page read and write
EF3E000
unkown
page read and write
7DF49B301000
unkown
page execute read
EDBD000
unkown
page read and write
7FF5858E1000
unkown
page readonly
85C4000
unkown
page read and write
F0F1000
unkown
page read and write
7FF585CC5000
unkown
page readonly
ED55000
unkown
page read and write
D70C000
stack
page read and write
9A4000
heap
page read and write
87C6000
unkown
page read and write
8590000
unkown
page read and write
7FF585793000
unkown
page readonly
41F0000
unkown
page read and write
7FFA131BE000
unkown
page read and write
8CE000
stack
page read and write
9A4000
heap
page read and write
EDBD000
unkown
page read and write
7FF585C70000
unkown
page readonly
7024000
unkown
page readonly
4751000
unkown
page read and write
7FF5856FF000
unkown
page readonly
6624000
unkown
page read and write
126BC000
unkown
page read and write
5700000
unkown
page read and write
6F85000
unkown
page readonly
6F7E000
unkown
page readonly
EFC1000
unkown
page read and write
EC67000
unkown
page read and write
There are 1728 hidden memdumps, click here to show them.