IOC Report
hvix64.exe

loading gif

Files

File Path
Type
Category
Malicious
hvix64.exe
PE32+ executable (GUI) x86-64, for MS Windows
initial sample
 malicious
C:\Program Files\Windows Mail\ParphaCrashReport64.exe
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Program Files\Windows Mail\arphaDump64.dll
data
dropped
C:\Windows\System32\Tasks\Microsoft\Windows\MicrosoftMailUpdateTask
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\hvix64.exe
"C:\Users\user\Desktop\hvix64.exe"
 malicious
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
 malicious
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe -k netsvcs
 malicious
C:\Windows\System32\dllhost.exe
C:\Windows\system32\dllhost.exe /Processid:{F8284233-48F4-4680-ADDD-F8284233}
 malicious
C:\Program Files\Windows Mail\ParphaCrashReport64.exe
"C:\Program Files\Windows Mail\ParphaCrashReport64.exe"
 malicious

URLs

Name
IP
Malicious
https://support.google.com/chrome/answer/6098869?hl=es
unknown
https://support.google.com/chrome/answer/6098869
unknown
https://www.google.com/chrome/privacy/eula_text.html
unknown
https://www.google.com/chrome/privacy/eula_text.htmlAy&udaGestionado
unknown
https://chrome.google.com/webstore?hl=zh-TW&category=theme81https://myactivity.google.com/myactivity
unknown
https://chrome.google.com/webstore?hl=es-419Ctrl$1
unknown
https://chrome.google.com/webstore?hl=et&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://chrome.google.com/webstore?hl=af&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://chrome.google.com/webstore?hl=etCtrl$1
unknown
https://chrome.google.com/webstore?hl=es&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://chrome.google.com/webstore?hl=fi&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://passwords.google.comSaved
unknown
https://chrome.google.com/webstore?hl=zh-TWCtrl$1
unknown
https://myactivity.google.com/
unknown
https://chrome.google.com/webstore?hl=fr&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://www.google.com/chrome/privacy/eula_text.htmlH&elpManaged
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherExternalGreylistUrl
unknown
https://passwords.google.comSelle
unknown
https://passwords.google.comGestoorde
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherUrlList
unknown
https://passwords.google.com
unknown
https://policies.google.com/
unknown
https://chromestatus.com/features#browsers.chrome.status%3A%22Deprecated%22
unknown
https://chrome.google.com/webstore?hl=esCtrl$1
unknown
https://ejemplo.com.Se
unknown
https://chrome.google.com/webstore?hl=afCtrl$1
unknown
https://passwords.google.comSe
unknown
https://www.google.com/chrome/privacy/eula_text.html&AideG
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherEnabled
unknown
https://passwords.google.comMots
unknown
https://chrome.google.com/webstore/category/extensions
unknown
https://support.google.com/chromebook?p=app_intent
unknown
https://chrome.google.com/webstore?hl=frCtrl$1
unknown
https://chrome.google.com/webstore?hl=es-419&category=theme81https://myactivity.google.com/myactivit
unknown
https://passwords.google.comT
unknown
https://chrome.google.com/webstore?hl=en&category=theme81https://myactivity.google.com/myactivity/?u
unknown
https://chrome.google.com/webstore?hl=en-GB&category=theme81https://myactivity.google.com/myactivity
unknown
https://support.google.com/chrome/answer/96817
unknown
https://support.google.com/chrome/a/?p=browser_profile_details
unknown
https://chrome.google.com/webstore?hl=filCtrl$1
unknown
https://www.google.com/chrome/privacy/eula_text.htmlA&biHaldab
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherExternalSitelistUrl
unknown
https://www.google.com/chrome/privacy/eula_text.htmlT&ulongPinapamahalaan
unknown
https://passwords.google.comMga
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherUseIeSitelist
unknown
https://support.google.com/chrome/a/answer/9122284
unknown
https://chrome.google.com/webstore?hl=fil&category=theme81https://myactivity.google.com/myactivity/?
unknown
https://chrome.google.com/webstore?hl=enCtrl$1
unknown
https://passwords.google.comContrase
unknown
https://chrome.google.com/webstore?hl=fiCtrl$1
unknown
https://www.google.com/chrome/privacy/eula_text.htmlBestuur
unknown
https://www.google.com/chrome/privacy/eula_text.htmlO&hjeOrganisaatiosi
unknown
http://ejemplo.com
unknown
https://chromeenterprise.google/policies/#BrowserSwitcherUrlGreylist
unknown
https://www.google.com/chrome/privacy/eula_text.htmlA&yudaAdministrado
unknown
https://chrome.google.com/webstore?hl=en-GBCtrl$1
unknown
There are 46 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
18.166.193.8
unknown
United States

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\MicrosoftMailUpdateTask
SD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\MicrosoftMailUpdateTask
Id
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\MicrosoftMailUpdateTask
Index
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Hash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Schema
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Author
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
URI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Triggers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
Actions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
DynamicInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C34B5BC6-143A-40AB-82C9-7422823F3814}
DynamicInfo
HKEY_USERS.DEFAULT\Software\Microsoft\ActiveMovie\devenum 64-bit
Version
There are 6 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1845B533000
unkown
page read and write
2D9784CB000
unkown
page read and write
2D978C20000
direct allocation
page read and write
22FCB2DB000
heap
page read and write
2D977448000
heap
page read and write
2D977474000
heap
page read and write
1845AE00000
unkown
page readonly
22FCB2DB000
heap
page read and write
2D9784B9000
unkown
page read and write
18292444000
heap
page read and write
2D9784A9000
unkown
page read and write
1845B502000
unkown
page read and write
182923CC000
heap
page read and write
1845BA15000
unkown
page read and write
3F098FE000
stack
page read and write
2D978C30000
direct allocation
page read and write
2D978B90000
direct allocation
page read and write
7FF66709C000
unkown
page write copy
18294550000
unkown
page read and write
2D9784A7000
unkown
page read and write
1845BAA4000
unkown
page read and write
2D9784B5000
unkown
page read and write
5051FE000
unkown
page readonly
7FF54CFB7000
unkown
page readonly
18294576000
unkown
page read and write
2D97843B000
unkown
page read and write
7FF54CF6F000
unkown
page readonly
18292200000
remote allocation
page read and write
503F7E000
stack
page read and write
7FF66683F000
unkown
page write copy
1829456D000
unkown
page read and write
18294509000
unkown
page read and write
1845C380000
unkown
page read and write
7FF54CF84000
unkown
page readonly
22FCD02D000
heap
page read and write
1829246C000
heap
page read and write
180119000
direct allocation
page readonly
1845AA20000
unkown
page readonly
22FCB2DB000
heap
page read and write
2D977400000
heap
page read and write
2D9784B1000
unkown
page read and write
1845BAD2000
unkown
page read and write
2D977470000
heap
page read and write
1845BC7D000
unkown
page read and write
22FCD15D000
heap
page read and write
1845BDA7000
unkown
page read and write
22FC92E7000
heap
page read and write
1845AAA0000
heap
page read and write
22FCB2DB000
heap
page read and write
7FF54CF42000
unkown
page readonly
1845B533000
unkown
page read and write
2D9773E0000
heap
page read and write
1845B3A0000
unkown
page execute and read and write
1845BC48000
unkown
page read and write
182948A0000
direct allocation
page read and write
1845ACA7000
unkown
page read and write
1845B533000
unkown
page read and write
2D9784CA000
unkown
page read and write
1845B500000
unkown
page read and write
22FC922E000
heap
page read and write
7FF54CF9A000
unkown
page readonly
182945B0000
unkown
page read and write
1845B533000
unkown
page read and write
22FCB2DB000
heap
page read and write
2D978830000
direct allocation
page read and write
1845B533000
unkown
page read and write
2D9784B3000
unkown
page read and write
1845BAAC000
unkown
page read and write
50387B000
stack
page read and write
7FF54CCE9000
unkown
page readonly
1845AD02000
unkown
page read and write
F6EB8FF000
stack
page read and write
18294890000
unkown
page read and write
1845B533000
unkown
page read and write
182924BB000
heap
page read and write
1845C380000
unkown
page read and write
180000000
direct allocation
page read and write
1845BB43000
unkown
page read and write
7FF54CACF000
unkown
page readonly
2D97747C000
heap
page read and write
18294890000
direct allocation
page read and write
182948A0000
direct allocation
page read and write
1845AA20000
unkown
page readonly
1E140B40000
heap
page read and write
7FF66741A000
unkown
page readonly
22FCB2DB000
heap
page read and write
1845BAEC000
unkown
page read and write
2D9774B5000
heap
page read and write
2D978450000
unkown
page read and write
18292420000
heap
page read and write
7FF54CF16000
unkown
page readonly
7FF54CF78000
unkown
page readonly
7FF665E50000
unkown
page readonly
3F097FE000
stack
page read and write
22FCB2D4000
heap
page read and write
2D977505000
heap
page read and write
2D9774ED000
heap
page read and write
50467E000
stack
page read and write
7FF54CC9C000
unkown
page readonly
1845BB41000
unkown
page read and write
1845BD44000
unkown
page read and write
1845B533000
unkown
page read and write
7FF667472000
unkown
page readonly
180068000
direct allocation
page readonly
1845B400000
unkown
page read and write
1845C050000
unkown
page read and write
1829455E000
unkown
page read and write
2D97744A000
heap
page read and write
1845D010000
unkown
page read and write
18293E65000
heap
page read and write
18292423000
heap
page read and write
2D9784D2000
unkown
page read and write
1845BA59000
unkown
page read and write
1845ACA5000
unkown
page read and write
2D97750A000
heap
page read and write
182924B8000
heap
page read and write
1845BA3A000
unkown
page read and write
18294890000
direct allocation
page read and write
50417E000
stack
page read and write
1845BC0C000
unkown
page read and write
182948A0000
direct allocation
page read and write
182924B8000
heap
page read and write
1845B402000
unkown
page read and write
2D978C40000
direct allocation
page read and write
1845AC13000
unkown
page read and write
2D978BA0000
direct allocation
page read and write
2D978C20000
direct allocation
page read and write
1845BB75000
unkown
page read and write
1829452A000
unkown
page read and write
2D9774E3000
heap
page read and write
18294500000
unkown
page read and write
1845B533000
unkown
page read and write
1829244D000
heap
page read and write
F6EB0CA000
stack
page read and write
2D9774A5000
heap
page read and write
2D977524000
heap
page read and write
1845ACF8000
unkown
page read and write
1829452C000
unkown
page read and write
503A7E000
stack
page read and write
2D97744C000
heap
page read and write
22FCB18A000
heap
page read and write
1845B533000
unkown
page read and write
1845BA31000
unkown
page read and write
1845B533000
unkown
page read and write
2D9774F5000
heap
page read and write
182924C0000
direct allocation
page read and write
7FF54CEB2000
unkown
page readonly
22FC922B000
heap
page read and write
7FF54CFE0000
unkown
page readonly
2D9784C2000
unkown
page read and write
18292448000
heap
page read and write
1E140C0C000
heap
page read and write
18011D000
unkown
page read and write
2D97849A000
unkown
page read and write
2D9784B6000
unkown
page read and write
2D9774BE000
heap
page read and write
2D977525000
heap
page read and write
7FF54CC4B000
unkown
page readonly
2E022FF000
stack
page read and write
1845BA3C000
unkown
page read and write
1845BB50000
unkown
page read and write
18294559000
unkown
page read and write
22FC926C000
heap
page read and write
1845C0E0000
unkown
page read and write
18294577000
unkown
page read and write
2D978BB0000
direct allocation
page read and write
7FF664562000
unkown
page read and write
1845BAFA000
unkown
page read and write
1845AA80000
heap
page read and write
1845BC9E000
unkown
page read and write
1845BA3E000
unkown
page read and write
2D977F30000
direct allocation
page read and write
2D978486000
unkown
page read and write
4472EFE000
stack
page read and write
5042FE000
stack
page read and write
1845BE00000
remote allocation
page read and write
2D9774EE000
heap
page read and write
182944B0000
unkown
page read and write
22FC9278000
heap
page read and write
18294542000
unkown
page read and write
2D978469000
unkown
page read and write
1845BA91000
unkown
page read and write
1845BA5B000
unkown
page read and write
180000000
unkown
page read and write
2D9774E9000
heap
page read and write
7FF54CF49000
unkown
page readonly
F6EB7FE000
stack
page read and write
2E019FA000
stack
page read and write
1845BC3E000
unkown
page read and write
1845B533000
unkown
page read and write
22FC9226000
heap
page read and write
22FC9140000
heap
page read and write
1845AA10000
unkown
page readonly
18294500000
unkown
page read and write
2D97744E000
heap
page read and write
1845ACFE000
unkown
page read and write
2D978380000
direct allocation
page read and write
1829455E000
unkown
page read and write
2D978CC0000
direct allocation
page read and write
18294579000
unkown
page read and write
2D9784C5000
unkown
page read and write
1845B533000
unkown
page read and write
1845BA3E000
unkown
page read and write
7FF66708C000
unkown
page write copy
180001000
unkown
page execute read
1845BAD2000
unkown
page read and write
1845ACB6000
unkown
page read and write
7FF54CF36000
unkown
page readonly
2D978C30000
direct allocation
page read and write
180087000
direct allocation
page read and write
2D97749A000
heap
page read and write
7FF66736F000
unkown
page read and write
1845ACD7000
unkown
page read and write
1845BB6D000
unkown
page read and write
1845BAC1000
unkown
page read and write
1845AC5C000
unkown
page read and write
1845BA20000
unkown
page read and write
18294500000
unkown
page read and write
22FCAB50000
heap
page read and write
7FF664553000
unkown
page readonly
1845BB5C000
unkown
page read and write
1845ACF6000
unkown
page read and write
2D977454000
heap
page read and write
2D977413000
heap
page read and write
7FF54CF3A000
unkown
page readonly
2D9784BE000
unkown
page read and write
1845BA42000
unkown
page read and write
1845BB47000
unkown
page read and write
1845C0B8000
unkown
page readonly
7FF666815000
unkown
page read and write
1845BBD7000
unkown
page read and write
18294530000
unkown
page read and write
7FF667472000
unkown
page readonly
1845AB91000
unkown
page readonly
22FCB2CC000
heap
page read and write
2D978444000
unkown
page read and write
1845C402000
unkown
page read and write
7FF54CEF6000
unkown
page readonly
7FF54CED1000
unkown
page readonly
1845AC84000
unkown
page read and write
4472FFF000
stack
page read and write
2D978C20000
unkown
page read and write
1845BD23000
unkown
page read and write
1845BA27000
unkown
page read and write
2D9774FA000
heap
page read and write
2D9774F9000
heap
page read and write
18294760000
unkown
page read and write
2D9776D0000
direct allocation
page read and write
F6EB6FE000
stack
page read and write
7FF54CF84000
unkown
page readonly
5040FE000
unkown
page readonly
1845B533000
unkown
page read and write
18294890000
direct allocation
page read and write
7FF54CFA9000
unkown
page readonly
1829246C000
heap
page read and write
7FF54CEC6000
unkown
page readonly
1845C400000
unkown
page read and write
22FCB2C9000
heap
page read and write
1845B533000
unkown
page read and write
1829455E000
unkown
page read and write
1845AC93000
unkown
page read and write
1845AC3F000
unkown
page read and write
7FF54CF51000
unkown
page readonly
1845C051000
unkown
page execute read
7FF54CF1E000
unkown
page readonly
7FF54CFA2000
unkown
page readonly
7FF54CEA9000
unkown
page readonly
2D978690000
direct allocation
page read and write
18294566000
unkown
page read and write
1845BB0E000
unkown
page read and write
1845BA54000
unkown
page read and write
22FC9529000
heap
page read and write
1845B415000
unkown
page read and write
18294890000
unkown
page read and write
2D978AC0000
unkown
page read and write
2D978423000
unkown
page read and write
2D978C20000
direct allocation
page read and write
7FF54CE36000
unkown
page readonly
2D9774E7000
heap
page read and write
7FF54CF3A000
unkown
page readonly
2D977538000
heap
page read and write
2D978C20000
direct allocation
page read and write
7FF665E51000
unkown
page execute read
5051FE000
unkown
page readonly
2D978240000
unkown
page read and write
7FF54CFD9000
unkown
page readonly
1845BAEC000
unkown
page read and write
1845BD00000
unkown
page read and write
182924B8000
heap
page read and write
7FF54CF1E000
unkown
page readonly
2D97842B000
unkown
page read and write
1845BD33000
unkown
page read and write
1845AB80000
heap
page read and write
182944E1000
unkown
page read and write
1845BC21000
unkown
page read and write
1845BAA2000
unkown
page read and write
180082000
direct allocation
page readonly
18293D10000
direct allocation
page read and write
2D977450000
heap
page read and write
182948A0000
direct allocation
page read and write
503EFE000
unkown
page readonly
180122000
direct allocation
page read and write
22FC926E000
heap
page read and write
5043FE000
unkown
page readonly
1845BC7D000
unkown
page read and write
7FF54CF62000
unkown
page readonly
1845AA80000
heap
page read and write
2D9784C4000
unkown
page read and write
1845BC59000
unkown
page read and write
18294528000
unkown
page read and write
182924B8000
heap
page read and write
1845BB11000
unkown
page read and write
7FF54CE20000
unkown
page readonly
18011D000
direct allocation
page read and write
504AFE000
unkown
page readonly
1845BB5B000
unkown
page read and write
7FF54CE24000
unkown
page readonly
18294890000
direct allocation
page read and write
1829240F000
heap
page read and write
7FF54CEA7000
unkown
page readonly
2D977495000
heap
page read and write
1845BB5C000
unkown
page read and write
2D977446000
heap
page read and write
1845BB41000
unkown
page read and write
7FF66730B000
unkown
page write copy
1829240A000
heap
page read and write
1845BBC2000
unkown
page read and write
1845AC95000
unkown
page read and write
1845AB80000
heap
page read and write
2D977524000
heap
page read and write
2D9774FB000
heap
page read and write
504BFE000
unkown
page readonly
1845BAC1000
unkown
page read and write
7FF54CE36000
unkown
page readonly
182944A3000
heap
page read and write
1845BA39000
unkown
page read and write
5050FB000
stack
page read and write
18292445000
heap
page read and write
2D978C30000
direct allocation
page read and write
1845BA10000
unkown
page read and write
18292290000
remote allocation
page execute read
7FF54CF36000
unkown
page readonly
7FF66683D000
unkown
page read and write
182923F6000
heap
page read and write
2D97743A000
heap
page read and write
2E020FD000
stack
page read and write
2D9774BF000
heap
page read and write
18294532000
unkown
page read and write
18293E60000
heap
page read and write
7FF666843000
unkown
page write copy
5039FE000
unkown
page readonly
7FF54CF46000
unkown
page readonly
22FC926A000
heap
page read and write
1845B533000
unkown
page read and write
1845ACA1000
unkown
page read and write
7FF54CF3C000
unkown
page readonly
7FF54CE20000
unkown
page readonly
1845BBEB000
unkown
page read and write
2D978C20000
unkown
page read and write
1845AD1D000
unkown
page read and write
1845BBA1000
unkown
page read and write
2D978B40000
unkown
page read and write
22FCB2DA000
heap
page read and write
2D9774EE000
heap
page read and write
7FF54CDF5000
unkown
page readonly
1845BC75000
unkown
page read and write
2E023FE000
stack
page read and write
1845BAB0000
unkown
page read and write
7FF54CF46000
unkown
page readonly
1845BC00000
unkown
page read and write
7FF66685B000
unkown
page read and write
7FF54CFE6000
unkown
page readonly
2D978412000
unkown
page read and write
1845BA39000
unkown
page read and write
1845BB56000
unkown
page read and write
1845B533000
unkown
page read and write
2D977434000
heap
page read and write
18007C000
direct allocation
page read and write
7FF54CCDE000
unkown
page readonly
7FF54CFB7000
unkown
page readonly
1845BAB4000
unkown
page read and write
1845BAF5000
unkown
page read and write
2D978BB0000
unkown
page read and write
2D977320000
unkown
page read and write
18294890000
direct allocation
page read and write
1845AC9A000
unkown
page read and write
1829453A000
unkown
page read and write
1845BAD6000
unkown
page read and write
50417E000
stack
page read and write
7FF666855000
unkown
page write copy
1E140B30000
heap
page read and write
1845C0D2000
unkown
page readonly
182948A0000
direct allocation
page read and write
7FF66683C000
unkown
page write copy
2D978C20000
direct allocation
page read and write
18294528000
unkown
page read and write
18007C000
direct allocation
page read and write
2D9774F3000
heap
page read and write
2D9784DA000
unkown
page read and write
2D9784C7000
unkown
page read and write
18294930000
direct allocation
page read and write
18294890000
direct allocation
page read and write
18294528000
unkown
page read and write
18293D20000
direct allocation
page read and write
1845BF30000
unkown
page read and write
1845BA06000
unkown
page read and write
1845BB43000
unkown
page read and write
1845BB05000
unkown
page read and write
2D9784AB000
unkown
page read and write
1845BC21000
unkown
page read and write
1845B51F000
unkown
page read and write
1845BBE7000
unkown
page read and write
1845BA20000
unkown
page read and write
2D97846D000
unkown
page read and write
7FF54CF28000
unkown
page readonly
1845B400000
unkown
page read and write
1845BA4F000
unkown
page read and write
1845B370000
unkown
page execute and read and write
1829455C000
unkown
page read and write
7FF664552000
unkown
page readonly
18294534000
unkown
page read and write
18292490000
heap
page read and write
1845BB5A000
unkown
page read and write
50397F000
stack
page read and write
22FCCF00000
direct allocation
page read and write
2D9784B8000
unkown
page read and write
1845BC92000
unkown
page read and write
7FF54CE18000
unkown
page readonly
1845BAAB000
unkown
page read and write
22FC926E000
heap
page read and write
1845B191000
unkown
page readonly
1845ACF6000
unkown
page read and write
1845ACFB000
unkown
page read and write
7FF66747B000
unkown
page readonly
2D9774EA000
heap
page read and write
7FF666861000
unkown
page read and write
18294890000
direct allocation
page read and write
1845BC0A000
unkown
page read and write
2D978402000
unkown
page read and write
1845BBFC000
unkown
page read and write
1845BA91000
unkown
page read and write
182944D8000
unkown
page read and write
1845AD18000
unkown
page read and write
1829240F000
heap
page read and write
1845B513000
unkown
page read and write
1845B533000
unkown
page read and write
2D978900000
direct allocation
page read and write
1845C380000
unkown
page read and write
1845BD69000
unkown
page read and write
1845BB1A000
unkown
page read and write
2D97745F000
heap
page read and write
2D9784B7000
unkown
page read and write
18292490000
heap
page read and write
180000000
direct allocation
page read and write
182924BE000
heap
page read and write
1845BB4A000
unkown
page read and write
1845BA18000
unkown
page read and write
1845BBA1000
unkown
page read and write
182948A0000
direct allocation
page read and write
7FF54CF5E000
unkown
page readonly
7FF54CFC3000
unkown
page readonly
50527E000
stack
page read and write
503DFB000
stack
page read and write
180001000
direct allocation
page execute read
2D9784C1000
unkown
page read and write
1845AD02000
unkown
page read and write
1845B533000
unkown
page read and write
1845ACE6000
unkown
page read and write
7FF66741A000
unkown
page readonly
18294538000
unkown
page read and write
7FF54CCAD000
unkown
page readonly
1845B533000
unkown
page read and write
1845BA5B000
unkown
page read and write
1845B390000
remote allocation
page read and write
5042FE000
stack
page read and write
7FF665E51000
unkown
page execute read
1845AC9A000
unkown
page read and write
2D9774F1000
heap
page read and write
7FF664552000
unkown
page read and write
503CFE000
unkown
page readonly
7FF66683A000
unkown
page read and write
7FF666845000
unkown
page read and write
5049FC000
stack
page read and write
2D9774EF000
heap
page read and write
180001000
direct allocation
page execute read
1845B533000
unkown
page read and write
7FF54CDF5000
unkown
page readonly
182948A0000
direct allocation
page read and write
1845BC89000
unkown
page read and write
1845B533000
unkown
page read and write
1845B513000
unkown
page read and write
7FF666866000
unkown
page write copy
1845BC59000
unkown
page read and write
7FF54CF62000
unkown
page readonly
1845BA00000
unkown
page read and write
18293CF0000
heap
page read and write
1845BB50000
unkown
page read and write
2D9774E8000
heap
page read and write
7FF54CED1000
unkown
page readonly
22FC9274000
heap
page read and write
2D9774EC000
heap
page read and write
1845ACF4000
unkown
page read and write
1829457E000
unkown
page read and write
18294890000
unkown
page read and write
180001000
direct allocation
page execute read
5041FE000
unkown
page readonly
18294548000
unkown
page read and write
1845C0CC000
unkown
page read and write
2D977559000
heap
page read and write
182923F4000
heap
page read and write
182924BE000
heap
page read and write
2D977525000
heap
page read and write
7FF54CF81000
unkown
page readonly
1845ABB0000
unkown
page read and write
7FF54CFE6000
unkown
page readonly
1845BA1D000
unkown
page read and write
1845BA2F000
unkown
page read and write
18294410000
direct allocation
page read and write
7FF666815000
unkown
page write copy
2D9774F8000
heap
page read and write
2D97748C000
heap
page read and write
1845BA42000
unkown
page read and write
7FF54CEF2000
unkown
page readonly
2D9783F0000
direct allocation
page read and write
18294556000
unkown
page read and write
7FF54CF49000
unkown
page readonly
7FF666849000
unkown
page write copy
2D977513000
heap
page read and write
182924B8000
heap
page read and write
1845BB84000
unkown
page read and write
18294538000
unkown
page read and write
504B7E000
stack
page read and write
1845BD02000
unkown
page read and write
22FCAC00000
heap
page read and write
1845BB95000
unkown
page read and write
1845BA27000
unkown
page read and write
1845AC00000
unkown
page read and write
2D978465000
unkown
page read and write
1845AC13000
unkown
page read and write
1845AC8E000
unkown
page read and write
1845BA00000
unkown
page read and write
7FF54CFE0000
unkown
page readonly
5052FE000
unkown
page readonly
2D9774E6000
heap
page read and write
2D9774EB000
heap
page read and write
2D977BD0000
heap
page read and write
1845ACAB000
unkown
page read and write
1845BB0C000
unkown
page read and write
2D977540000
heap
page read and write
50527E000
stack
page read and write
1845BAE2000
unkown
page read and write
7FF665E50000
unkown
page readonly
1845BA40000
unkown
page read and write
1845B532000
unkown
page read and write
1845BA37000
unkown
page read and write
1845AB91000
unkown
page readonly
2D9784DA000
unkown
page read and write
1845BBC2000
unkown
page read and write
1845BA9A000
unkown
page read and write
1845BBA9000
unkown
page read and write
504AFE000
unkown
page readonly
2D97841A000
unkown
page read and write
2D977555000
heap
page read and write
1845BAF0000
unkown
page read and write
5039FE000
unkown
page readonly
2D978475000
unkown
page read and write
18294574000
unkown
page read and write
1829456D000
unkown
page read and write
F6EB57E000
stack
page read and write
1E140C00000
heap
page read and write
180121000
direct allocation
page readonly
7FF54CEA9000
unkown
page readonly
22FCB2C6000
heap
page read and write
22FC926E000
heap
page read and write
1845AC2B000
unkown
page read and write
1845BBEB000
unkown
page read and write
182944D8000
unkown
page read and write
1845AAA0000
heap
page read and write
2D9774E5000
heap
page read and write
1845BC1A000
unkown
page read and write
2D977540000
heap
page read and write
1845BB56000
unkown
page read and write
1845BB0A000
unkown
page read and write
18292498000
heap
page read and write
2D9774E4000
heap
page read and write
1845AE00000
unkown
page readonly
7FF54CF16000
unkown
page readonly
1845ACAF000
unkown
page read and write
7FF54CFD9000
unkown
page readonly
2D9784AF000
unkown
page read and write
7FF54CEF6000
unkown
page readonly
1845B191000
unkown
page readonly
5046FE000
unkown
page readonly
1845C380000
unkown
page read and write
1845AD02000
unkown
page read and write
180122000
unkown
page read and write
22FC9520000
heap
page read and write
7FF664565000
unkown
page readonly
7FF667407000
unkown
page read and write
1845BABA000
unkown
page read and write
18292444000
heap
page read and write
2E01FFE000
stack
page read and write
2D9774FD000
heap
page read and write
7FF664531000
unkown
page execute read
22FCB2DB000
heap
page read and write
2D9784BC000
unkown
page read and write
1845BA7C000
unkown
page read and write
22FC9251000
heap
page read and write
1845BA18000
unkown
page read and write
1845BA02000
unkown
page read and write
1845BA9A000
unkown
page read and write
503BFB000
stack
page read and write
18292471000
heap
page read and write
1845BAAE000
unkown
page read and write
7FF666860000
unkown
page write copy
1845ACFE000
unkown
page read and write
1845B532000
unkown
page read and write
5038FE000
unkown
page readonly
1829452E000
unkown
page read and write
2D9784CD000
unkown
page read and write
1845BC1B000
unkown
page read and write
18292445000
heap
page read and write
1845BAA2000
unkown
page read and write
182923E7000
heap
page read and write
1845AD02000
unkown
page read and write
1845B533000
unkown
page read and write
1845BB84000
unkown
page read and write
1845BB16000
unkown
page read and write
2D977472000
heap
page read and write
18294930000
direct allocation
page read and write
2D9784A8000
unkown
page read and write
1845BA0C000
unkown
page read and write
1845B533000
unkown
page read and write
1845AA90000
unkown
page readonly
18292407000
heap
page read and write
2D978240000
unkown
page read and write
1845ACFC000
unkown
page read and write
18294581000
unkown
page read and write
1845BC12000
unkown
page read and write
7FF54CF28000
unkown
page readonly
7FF54CF5E000
unkown
page readonly
1845B533000
unkown
page read and write
1829456B000
unkown
page read and write
7FF666854000
unkown
page read and write
18294528000
unkown
page read and write
1845ACAF000
unkown
page read and write
2D978380000
unkown
page read and write
2D9774FC000
heap
page read and write
7FF664531000
unkown
page execute read
18292495000
heap
page read and write
1845BBCE000
unkown
page read and write
2D978400000
unkown
page read and write
1845BBB5000
unkown
page read and write
2D9784AD000
unkown
page read and write
1845B415000
unkown
page read and write
1845AC98000
unkown
page read and write
2D977502000
heap
page read and write
7FF66685E000
unkown
page write copy
1845BA31000
unkown
page read and write
1845B533000
unkown
page read and write
1845BA54000
unkown
page read and write
1845BA13000
unkown
page read and write
7FF54CEA7000
unkown
page readonly
7FF666819000
unkown
page write copy
2D9784B0000
unkown
page read and write
7FF666862000
unkown
page write copy
7FF54CDF9000
unkown
page readonly
1845BAE2000
unkown
page read and write
2D978465000
unkown
page read and write
1845BAD8000
unkown
page read and write
1845B532000
unkown
page read and write
22FC952B000
heap
page read and write
1845B533000
unkown
page read and write
1845BBDE000
unkown
page read and write
2D9784B2000
unkown
page read and write
7FF66708C000
unkown
page write copy
180087000
direct allocation
page read and write
22FCAC03000
heap
page read and write
1845BD65000
unkown
page read and write
182923C0000
heap
page read and write
1845ACF9000
unkown
page read and write
2D97848A000
unkown
page read and write
7FF666810000
unkown
page readonly
2D97749D000
heap
page read and write
2D977443000
heap
page read and write
18292490000
heap
page read and write
7FF664565000
unkown
page readonly
503DFB000
stack
page read and write
2D9784CC000
unkown
page read and write
182948A0000
direct allocation
page read and write
7FF667409000
unkown
page read and write
1845B533000
unkown
page read and write
7FF54CEC6000
unkown
page readonly
F6EBBFE000
stack
page read and write
1845AA90000
unkown
page readonly
2D9783F0000
unkown
page read and write
2D978C20000
direct allocation
page read and write
7FF54CF42000
unkown
page readonly
2D9774E3000
heap
page read and write
50387B000
stack
page read and write
1845BC6A000
unkown
page read and write
7FF54CF3C000
unkown
page readonly
182923F8000
heap
page read and write
1845BBED000
unkown
page read and write
2D9774C2000
heap
page read and write
1845B533000
unkown
page read and write
1845ACA1000
unkown
page read and write
2D9784AC000
unkown
page read and write
7FF66747B000
unkown
page readonly
F6EB5FE000
stack
page read and write
2D978BC0000
direct allocation
page read and write
2D978433000
unkown
page read and write
2D978C30000
direct allocation
page read and write
3F096FD000
stack
page read and write
1845BBFC000
unkown
page read and write
1845BC2D000
unkown
page read and write
1845BBCE000
unkown
page read and write
2D97742A000
heap
page read and write
1845BC3E000
unkown
page read and write
2D9784BA000
unkown
page read and write
7FF66730B000
unkown
page write copy
1845ACA9000
unkown
page read and write
2D978C30000
direct allocation
page read and write
22FCB2C1000
heap
page read and write
7FF666810000
unkown
page readonly
1845BC1C000
unkown
page read and write
2D978380000
direct allocation
page read and write
1845AD13000
unkown
page read and write
2D9774F7000
heap
page read and write
182923FF000
heap
page read and write
1845ACF4000
unkown
page read and write
1845ABB0000
unkown
page read and write
182923EC000
heap
page read and write
7FF664530000
unkown
page readonly
7FF54CF78000
unkown
page readonly
5050FB000
stack
page read and write
2D9774F2000
heap
page read and write
1845BBE7000
unkown
page read and write
1845BA2F000
unkown
page read and write
5049FC000
stack
page read and write
2D978448000
unkown
page read and write
1845BBD7000
unkown
page read and write
7FF666865000
unkown
page read and write
503BFB000
stack
page read and write
5041FE000
unkown
page readonly
2D9784CD000
unkown
page read and write
182923CA000
heap
page read and write
1845AC96000
unkown
page read and write
1845AC2B000
unkown
page read and write
22FCCB22000
trusted library allocation
page read and write
180121000
unkown
page readonly
7FF54CE28000
unkown
page readonly
50577D000
stack
page read and write
F6EBAFF000
stack
page read and write
2D978BA0000
direct allocation
page read and write
22FC9340000
heap
page read and write
7FF54CE31000
unkown
page readonly
7FF54CF51000
unkown
page readonly
18294546000
unkown
page read and write
2D977514000
heap
page read and write
1845B532000
unkown
page read and write
7FF54CE24000
unkown
page readonly
1845BD50000
unkown
page read and write
7FF66685F000
unkown
page read and write
1845BAFA000
unkown
page read and write
7FF54CDF9000
unkown
page readonly
18294532000
unkown
page read and write
7FF54CEB2000
unkown
page readonly
1845BC48000
unkown
page read and write
7FF54CF81000
unkown
page readonly
2D977467000
heap
page read and write
18294556000
unkown
page read and write
2D977559000
heap
page read and write
7FF667413000
unkown
page read and write
18294890000
unkown
page read and write
1845BAF5000
unkown
page read and write
1845AA10000
unkown
page readonly
2D9784C4000
unkown
page read and write
1845BB28000
unkown
page read and write
2D9784C9000
unkown
page read and write
3F099FF000
stack
page read and write
1845BC89000
unkown
page read and write
5038FE000
unkown
page readonly
2D977502000
heap
page read and write
1845BDB3000
unkown
page read and write
2D977514000
heap
page read and write
7FF54CE18000
unkown
page readonly
7FF664530000
unkown
page readonly
2E021FE000
stack
page read and write
1845B3B0000
unkown
page read and write
1845AC84000
unkown
page read and write
1845BB73000
unkown
page read and write
2D9784C2000
unkown
page read and write
22FCB2C0000
heap
page read and write
1845B370000
unkown
page execute and read and write
503AFE000
unkown
page readonly
1845BB05000
unkown
page read and write
1845ACBB000
unkown
page read and write
2D9784D3000
unkown
page read and write
18294562000
unkown
page read and write
1845BAF0000
unkown
page read and write
1845B533000
unkown
page read and write
182944A0000
heap
page read and write
1845BB16000
unkown
page read and write
1845BD86000
unkown
page read and write
2D978454000
unkown
page read and write
1845BCD4000
unkown
page read and write
2D9784D0000
unkown
page read and write
1845ACF8000
unkown
page read and write
1845ACA7000
unkown
page read and write
18294546000
unkown
page read and write
18294569000
unkown
page read and write
22FC9320000
heap
page read and write
22FC9274000
heap
page read and write
182922B0000
heap
page read and write
1845AC00000
unkown
page read and write
22FCB2B8000
heap
page read and write
1845AC3F000
unkown
page read and write
1845BCB7000
unkown
page read and write
2D978BB0000
unkown
page read and write
7DFB65E66000
unkown
page readonly
1845BA13000
unkown
page read and write
2D97749C000
heap
page read and write
18292390000
heap
page read and write
1845BBBA000
unkown
page read and write
1845AD13000
unkown
page read and write
1845BC8B000
unkown
page read and write
2D9774AD000
heap
page read and write
1845BC6A000
unkown
page read and write
18292447000
heap
page read and write
2D9784CC000
unkown
page read and write
1845BA4F000
unkown
page read and write
1845BCB3000
unkown
page read and write
1845AD02000
unkown
page read and write
1845ACBB000
unkown
page read and write
2D978C30000
direct allocation
page read and write
1845BB75000
unkown
page read and write
22FC9525000
heap
page read and write
2D9774F0000
heap
page read and write
1829456F000
unkown
page read and write
7FF54CF11000
unkown
page readonly
1845B500000
unkown
page read and write
182948A0000
direct allocation
page read and write
1845BBBD000
unkown
page read and write
18292498000
heap
page read and write
2D978C20000
direct allocation
page read and write
2D977499000
heap
page read and write
F6EB4FA000
stack
page read and write
180082000
direct allocation
page readonly
2E01EFF000
stack
page read and write
7FF664562000
unkown
page write copy
1845BA35000
unkown
page read and write
2D977497000
heap
page read and write
1845C0D7000
unkown
page read and write
182944B1000
unkown
page read and write
1845BC81000
unkown
page read and write
1845AC5C000
unkown
page read and write
1845B502000
unkown
page read and write
1845BB80000
unkown
page read and write
1845C620000
unkown
page read and write
3F09338000
stack
page read and write
2D9784D2000
unkown
page read and write
22FC927F000
heap
page read and write
7FF667405000
unkown
page read and write
1845BA15000
unkown
page read and write
18294537000
unkown
page read and write
7FF54CFA2000
unkown
page readonly
1845BBA5000
unkown
page read and write
4472B9D000
stack
page read and write
1845B533000
unkown
page read and write
5052FE000
unkown
page readonly
1845BDAB000
unkown
page read and write
22FC927C000
heap
page read and write
503EFE000
unkown
page readonly
1845BA7C000
unkown
page read and write
7FF54CCA5000
unkown
page readonly
22FCB3E0000
heap
page read and write
2D977484000
heap
page read and write
7FF666842000
unkown
page read and write
1845AC96000
unkown
page read and write
2D9774F4000
heap
page read and write
1845BA06000
unkown
page read and write
7FF54CF7B000
unkown
page readonly
1845BBB5000
unkown
page read and write
7FF667416000
unkown
page read and write
1845BC0A000
unkown
page read and write
7FF54CE06000
unkown
page readonly
1845BB28000
unkown
page read and write
1845BBA9000
unkown
page read and write
5044FA000
unkown
page read and write
18294500000
unkown
page read and write
1845BB80000
unkown
page read and write
1845BA35000
unkown
page read and write
503FFE000
unkown
page readonly
18292490000
heap
page read and write
1845B533000
unkown
page read and write
1845B940000
unkown
page read and write
7FF54CE31000
unkown
page readonly
1845BC2D000
unkown
page read and write
1845BB11000
unkown
page read and write
1845ACD7000
unkown
page read and write
1845B51F000
unkown
page read and write
50407E000
stack
page read and write
2D977555000
heap
page read and write
7FF666863000
unkown
page read and write
1845BA0F000
unkown
page read and write
2D978C30000
direct allocation
page read and write
22FCB2B0000
heap
page read and write
2D9774FF000
heap
page read and write
7FF66709C000
unkown
page write copy
1845BC1C000
unkown
page read and write
1845ACE4000
unkown
page read and write
7FF54CE06000
unkown
page readonly
7FF54CF7B000
unkown
page readonly
18294890000
direct allocation
page read and write
50397F000
stack
page read and write
2D97845C000
unkown
page read and write
1845B533000
unkown
page read and write
18294528000
unkown
page read and write
182944B9000
unkown
page read and write
182948A0000
direct allocation
page read and write
1845BBBA000
unkown
page read and write
18293E30000
unkown
page read and write
180068000
direct allocation
page readonly
1845BC00000
unkown
page read and write
503CFE000
unkown
page readonly
2D9773B0000
unkown
page execute read
1845BABF000
unkown
page read and write
22FCAB70000
trusted library section
page readonly
7FF667371000
unkown
page write copy
1845BB4A000
unkown
page read and write
7FF54CF6F000
unkown
page readonly
182943B0000
unkown
page read and write
F6EB9FF000
stack
page read and write
1845ACE6000
unkown
page read and write
2D9774F6000
heap
page read and write
180119000
unkown
page readonly
7FF666864000
unkown
page write copy
2D978BA0000
direct allocation
page read and write
2D9773C0000
heap
page read and write
1845BB30000
unkown
page read and write
2D97840A000
unkown
page read and write
2D977F20000
direct allocation
page read and write
5057FE000
unkown
page readonly
1845ACB6000
unkown
page read and write
2D9774C1000
heap
page read and write
2D978B40000
unkown
page read and write
18294890000
direct allocation
page read and write
1845BC81000
unkown
page read and write
2D9784C6000
unkown
page read and write
1829456D000
unkown
page read and write
1845BB6D000
unkown
page read and write
1845B402000
unkown
page read and write
1845B533000
unkown
page read and write
18294500000
unkown
page read and write
1829240F000
heap
page read and write
22FC952D000
heap
page read and write
2D978AC0000
unkown
page read and write
1845BC1F000
unkown
page read and write
1845BBA5000
unkown
page read and write
2D977445000
heap
page read and write
1845BB71000
unkown
page read and write
182945B0000
unkown
page read and write
18294890000
direct allocation
page read and write
1845BABA000
unkown
page read and write
1845BAA4000
unkown
page read and write
1845BB30000
unkown
page read and write
1845BA1D000
unkown
page read and write
7FF54CEEF000
unkown
page readonly
2D977458000
heap
page read and write
7FF54CC7C000
unkown
page readonly
18294532000
unkown
page read and write
1845BB47000
unkown
page read and write
1845BBDE000
unkown
page read and write
7FF54CFC3000
unkown
page readonly
182924B8000
heap
page read and write
2D978C20000
direct allocation
page read and write
1845ACAC000
unkown
page read and write
1845BA25000
unkown
page read and write
180000000
direct allocation
page read and write
1845B533000
unkown
page read and write
18294546000
unkown
page read and write
18294528000
unkown
page read and write
5043FE000
unkown
page readonly
1845BBED000
unkown
page read and write
1845BBBD000
unkown
page read and write
1845BB95000
unkown
page read and write
7FF54CFA9000
unkown
page readonly
2D978250000
direct allocation
page read and write
22FC9220000
heap
page read and write
5045FE000
unkown
page readonly
22FC926E000
heap
page read and write
There are 982 hidden memdumps, click here to show them.