Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
New Order #60-958400861900.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\colliquefaction
|
data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\New Order #60-958400861900.exe
|
"C:\Users\user\Desktop\New Order #60-958400861900.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\New Order #60-958400861900.exe"
|
||
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
||
C:\Windows\SysWOW64\raserver.exe
|
"C:\Windows\SysWOW64\raserver.exe"
|
||
C:\Windows\SysWOW64\cmd.exe
|
/c del "C:\Windows\SysWOW64\svchost.exe"
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
www.orsaperevod.online/e62s/
|
|||
https://powerpoint.office.comer
|
unknown
|
||
http://www.pp-games-delearglu.xyz
|
unknown
|
||
http://www.ubuz.net/e62s/www.42bet.xyz
|
unknown
|
||
https://android.notify.windows.com/iOSA4
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV
|
unknown
|
||
http://www.yschoollist.kiwi/e62s/
|
unknown
|
||
http://www.anatanwater.net/e62s/
|
unknown
|
||
https://www.msn.com/en-us/sports/other/simone-biles-leads-u-s-women-s-team-to-seventh-straight-world
|
unknown
|
||
https://api.msn.com:443/v1/news/Feed/Windows?
|
unknown
|
||
https://excel.office.com
|
unknown
|
||
https://www.msn.com/en-us/money/personalfinance/the-big-3-mistakes-financial-advisors-say-that-the-1
|
unknown
|
||
http://www.atangtoto4.click/e62s/
|
unknown
|
||
http://www.anatanwater.net
|
unknown
|
||
http://www.pp-games-delearglu.xyzReferer:
|
unknown
|
||
http://www.ams.zone/e62s/
|
unknown
|
||
http://www.insgw.bond/e62s/www.yschoollist.kiwi
|
unknown
|
||
http://www.42bet.xyz
|
unknown
|
||
http://www.orsaperevod.online
|
unknown
|
||
https://upload.wikimedia.org/wikipedia/commons/thumb/8/84/Zealandia-Continent_map_en.svg/1870px-Zeal
|
unknown
|
||
http://www.mwquas.xyz/e62s/
|
unknown
|
||
http://www.microsoft.c
|
unknown
|
||
http://www.amingacor.clickReferer:
|
unknown
|
||
https://android.notify.windows.com/iOSd
|
unknown
|
||
http://www.dneshima.today
|
unknown
|
||
http://www.dneshima.today/e62s/www.anatanwater.net
|
unknown
|
||
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/WeatherInsights/WeatherInsi
|
unknown
|
||
http://www.autoitscript.com/autoit3/J
|
unknown
|
||
http://www.ubuz.net
|
unknown
|
||
http://www.orsaperevod.onlineReferer:
|
unknown
|
||
http://www.uckyspinph.xyz/e62s/www.ams.zone
|
unknown
|
||
http://www.nlinechat-mh.onlineReferer:
|
unknown
|
||
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
|
unknown
|
||
http://www.aspart.shop/e62s/www.uckyspinph.xyz
|
unknown
|
||
http://www.insgw.bond
|
unknown
|
||
http://www.mwquas.xyz/e62s/www.dneshima.today
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
|
unknown
|
||
http://www.arriage-therapy-72241.bond/e62s/
|
unknown
|
||
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
|
unknown
|
||
http://www.yschoollist.kiwiReferer:
|
unknown
|
||
https://outlook.com
|
unknown
|
||
http://www.pp-games-delearglu.xyz/e62s/
|
unknown
|
||
http://www.atangtoto4.clickReferer:
|
unknown
|
||
http://www.yschoollist.kiwi
|
unknown
|
||
http://www.aspart.shop
|
unknown
|
||
https://android.notify.windows.com/iOS
|
unknown
|
||
http://www.ams.zoneReferer:
|
unknown
|
||
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp
|
unknown
|
||
https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the
|
unknown
|
||
http://www.arriage-therapy-72241.bond
|
unknown
|
||
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/MostlyClearNight.svg
|
unknown
|
||
http://www.arriage-therapy-72241.bond/e62s/www.ubuz.net
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA
|
unknown
|
||
http://www.amingacor.click/e62s/
|
unknown
|
||
https://www.msn.com/en-us/sports/other/washington-state-ad-asks-ncaa-for-compassion-and-understandin
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gF9k-dark
|
unknown
|
||
https://api.msn.com/v1/news/Feed/Windows?
|
unknown
|
||
http://www.aspart.shop/e62s/
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
|
unknown
|
||
http://www.42bet.xyz/e62s/www.aspart.shop
|
unknown
|
||
http://www.anatanwater.netReferer:
|
unknown
|
||
http://www.amingacor.click/e62s/www.mwquas.xyz
|
unknown
|
||
http://www.mwquas.xyzReferer:
|
unknown
|
||
http://www.uckyspinph.xyzReferer:
|
unknown
|
||
https://www.msn.com/en-us/weather/topstories/first-map-of-earth-s-lost-continent-has-been-published/
|
unknown
|
||
https://www.msn.com/en-us/news/politics/kinzinger-has-theory-about-who-next-house-speaker-will-be/vi
|
unknown
|
||
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
|
unknown
|
||
http://schemas.micro
|
unknown
|
||
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Teaser/recordhigh.svg
|
unknown
|
||
http://www.insgw.bondReferer:
|
unknown
|
||
https://wns.windows.com/EM0
|
unknown
|
||
http://www.atangtoto4.click
|
unknown
|
||
http://www.insgw.bond/e62s/
|
unknown
|
||
https://www.msn.com/en-us/weather/topstories/us-winter-forecast-for-the-2023-2024-season/ar-AA1hGINt
|
unknown
|
||
http://www.42bet.xyz/e62s/
|
unknown
|
||
http://www.dneshima.todayReferer:
|
unknown
|
||
http://www.anatanwater.net/e62s/www.orsaperevod.online
|
unknown
|
||
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
|
unknown
|
||
http://www.mwquas.xyz
|
unknown
|
||
https://www.msn.com/en-us/money/markets/costco-is-seeing-a-gold-rush-what-s-behind-the-demand-for-it
|
unknown
|
||
https://www.msn.com/en-us/weather/topstories/stop-planting-new-forests-scientists-say/ar-AA1hFI09
|
unknown
|
||
http://www.orsaperevod.online/e62s/
|
unknown
|
||
http://www.nlinechat-mh.online/e62s/www.atangtoto4.click
|
unknown
|
||
http://www.ams.zone
|
unknown
|
||
http://www.arriage-therapy-72241.bondReferer:
|
unknown
|
||
https://www.msn.com/en-us/money/personalfinance/the-no-1-phrase-people-who-are-good-at-small-talk-al
|
unknown
|
||
http://www.aspart.shopReferer:
|
unknown
|
||
http://www.atangtoto4.click/e62s/www.pp-games-delearglu.xyz
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gF9k
|
unknown
|
||
http://www.nlinechat-mh.online/e62s/
|
unknown
|
||
http://www.pp-games-delearglu.xyz/e62s/www.amingacor.click
|
unknown
|
||
http://www.uckyspinph.xyz/e62s/
|
unknown
|
||
http://www.ubuz.net/e62s/
|
unknown
|
||
http://www.dneshima.today/e62s/
|
unknown
|
||
http://www.uckyspinph.xyz
|
unknown
|
||
http://ns.adobeS
|
unknown
|
||
http://www.orsaperevod.online/e62s/www.insgw.bond
|
unknown
|
||
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKBA-dark
|
unknown
|
||
http://www.yschoollist.kiwi/e62s/www.arriage-therapy-72241.bond
|
unknown
|
||
https://api.msn.com/v1/news/Feed/Windows?activityId=0E948A694F8C48079B908C8EA9DDF9EA&timeOut=5000&oc
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
www.ubuz.net
|
54.37.173.127
|
||
www.pp-games-delearglu.xyz
|
unknown
|
||
www.atangtoto4.click
|
unknown
|
||
www.anatanwater.net
|
unknown
|
||
www.orsaperevod.online
|
unknown
|
||
www.arriage-therapy-72241.bond
|
unknown
|
||
www.insgw.bond
|
unknown
|
||
www.dneshima.today
|
unknown
|
||
www.nlinechat-mh.online
|
unknown
|
||
www.amingacor.click
|
unknown
|
||
www.yschoollist.kiwi
|
unknown
|
There are 1 hidden domains, click here to show them.
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Excel.CSV
|
||
unknown
|
PowerPoint.Addin.12
|
||
unknown
|
bootstrap.vsto.1
|
||
unknown
|
Excel.AddInMacroEnabled
|
||
unknown
|
Unpacker
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
@explorerframe.dll,-13137
|
||
unknown
|
@explorerframe.dll,-13138
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
Classes
|
||
unknown
|
~reserved~
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
CheckSetting
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
WMP11.AssocFile.3G2
|
||
unknown
|
WMP11.AssocFile.3GP
|
||
unknown
|
WMP11.AssocFile.3GP
|
||
unknown
|
WMP11.AssocFile.ADTS
|
||
unknown
|
WMP11.AssocFile.ADTS
|
||
unknown
|
WMP11.AssocFile.ADTS
|
||
unknown
|
WMP11.AssocFile.AIFF
|
||
unknown
|
WMP11.AssocFile.ASF
|
||
unknown
|
WMP11.AssocFile.ASX
|
||
unknown
|
WMP11.AssocFile.AU
|
||
unknown
|
AutoIt3Script
|
||
unknown
|
WMP11.AssocFile.AVI
|
||
unknown
|
Paint.Picture
|
||
unknown
|
CABFolder
|
||
unknown
|
Microsoft.PowerShellCmdletDefinitionXML.1
|
||
unknown
|
CSSfile
|
||
unknown
|
ddsfile
|
||
unknown
|
dllfile
|
||
unknown
|
Word.Document.8
|
||
unknown
|
Word.DocumentMacroEnabled.12
|
||
unknown
|
Word.Document.12
|
||
unknown
|
Word.Template.8
|
||
unknown
|
Word.TemplateMacroEnabled.12
|
||
unknown
|
Word.Template.12
|
||
unknown
|
emffile
|
||
unknown
|
exefile
|
||
unknown
|
WMP11.AssocFile.FLAC
|
||
unknown
|
fonfile
|
||
unknown
|
giffile
|
||
unknown
|
htmlfile
|
||
unknown
|
htmlfile
|
||
unknown
|
icofile
|
||
unknown
|
inffile
|
||
unknown
|
inifile
|
||
unknown
|
pjpegfile
|
||
unknown
|
jpegfile
|
||
unknown
|
jpegfile
|
||
unknown
|
wdpfile
|
||
unknown
|
lnkfile
|
||
unknown
|
WMP11.AssocFile.MPEG
|
||
unknown
|
WMP11.AssocFile.M2TS
|
||
unknown
|
WMP11.AssocFile.MPEG
|
||
unknown
|
WMP11.AssocFile.m3u
|
||
unknown
|
WMP11.AssocFile.M4A
|
||
unknown
|
WMP11.AssocFile.MP4
|
||
unknown
|
mhtmlfile
|
||
unknown
|
mhtmlfile
|
||
unknown
|
WMP11.AssocFile.MIDI
|
||
unknown
|
WMP11.AssocFile.MIDI
|
||
unknown
|
WMP11.AssocFile.MK3D
|
||
unknown
|
WMP11.AssocFile.MKA
|
||
unknown
|
WMP11.AssocFile.MKV
|
||
unknown
|
WMP11.AssocFile.MOV
|
||
unknown
|
WMP11.AssocFile.MP3
|
||
unknown
|
WMP11.AssocFile.MP4
|
||
unknown
|
WMP11.AssocFile.MP4
|
||
unknown
|
Outlook.File.msg.15
|
||
unknown
|
WMP11.AssocFile.M2TS
|
||
unknown
|
ocxfile
|
||
unknown
|
PowerPoint.OpenDocumentPresentation.12
|
||
unknown
|
Excel.OpenDocumentSpreadsheet.12
|
||
unknown
|
Word.OpenDocumentText.12
|
||
unknown
|
otffile
|
||
unknown
|
pngfile
|
||
unknown
|
PowerPoint.Template.8
|
||
unknown
|
PowerPoint.TemplateMacroEnabled.12
|
||
unknown
|
PowerPoint.Template.12
|
||
unknown
|
PowerPoint.SlideShowMacroEnabled.12
|
||
unknown
|
PowerPoint.SlideShow.12
|
||
unknown
|
PowerPoint.Show.8
|
||
unknown
|
PowerPoint.ShowMacroEnabled.12
|
||
unknown
|
PowerPoint.Show.12
|
||
unknown
|
Microsoft.PowerShellScript.1
|
||
unknown
|
Microsoft.PowerShellXMLData.1
|
||
unknown
|
Microsoft.PowerShellData.1
|
||
unknown
|
Microsoft.PowerShellModule.1
|
||
unknown
|
Microsoft.PowerShellSessionConfiguration.1
|
||
unknown
|
rlefile
|
||
unknown
|
Word.RTF.8
|
||
unknown
|
SHCmdFile
|
||
unknown
|
SearchFolder
|
||
unknown
|
shtmlfile
|
||
unknown
|
PowerPoint.SlideMacroEnabled.12
|
||
unknown
|
PowerPoint.Slide.12
|
||
unknown
|
sysfile
|
||
unknown
|
TIFImage.Document
|
||
unknown
|
WMP11.AssocFile.TTS
|
||
unknown
|
ttcfile
|
||
unknown
|
ttffile
|
||
unknown
|
txtfile
|
||
unknown
|
WMP11.AssocFile.WAV
|
||
unknown
|
WMP11.AssocFile.WAX
|
||
unknown
|
wdpfile
|
||
unknown
|
WMP11.AssocFile.ASF
|
||
unknown
|
WMP11.AssocFile.WMA
|
||
unknown
|
wmffile
|
||
unknown
|
WMP11.AssocFile.WMV
|
||
unknown
|
WMP11.AssocFile.ASX
|
||
unknown
|
WMP11.AssocFile.WPL
|
||
unknown
|
WMP11.AssocFile.WVX
|
||
unknown
|
Excel.Sheet.8
|
||
unknown
|
Excel.SheetBinaryMacroEnabled.12
|
||
unknown
|
Excel.SheetMacroEnabled.12
|
||
unknown
|
Excel.Sheet.12
|
||
unknown
|
Excel.Template.8
|
||
unknown
|
Excel.TemplateMacroEnabled
|
||
unknown
|
Excel.Template
|
||
unknown
|
xmlfile
|
||
unknown
|
xslfile
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
TaskbarStateLastRun
|
||
unknown
|
Implementing
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
SlowContextMenuEntries
|
||
unknown
|
TaskbarStateLastRun
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
There are 186 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
3780000
|
unclassified section
|
page execute and read and write
|
||
2F10000
|
system
|
page execute and read and write
|
||
400000
|
system
|
page execute and read and write
|
||
33C0000
|
trusted library allocation
|
page read and write
|
||
3750000
|
unclassified section
|
page execute and read and write
|
||
3390000
|
unclassified section
|
page execute and read and write
|
||
92DD000
|
unkown
|
page read and write
|
||
7FF503129000
|
unkown
|
page readonly
|
||
BC08000
|
unkown
|
page read and write
|
||
977D000
|
stack
|
page read and write
|
||
3086000
|
unkown
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
90DA000
|
unkown
|
page read and write
|
||
3300000
|
heap
|
page read and write
|
||
C07C000
|
unkown
|
page read and write
|
||
BDF5000
|
unkown
|
page read and write
|
||
309D000
|
unkown
|
page read and write
|
||
7FF503130000
|
unkown
|
page readonly
|
||
7FF502D33000
|
unkown
|
page readonly
|
||
38E1000
|
trusted library allocation
|
page execute and read and write
|
||
43FD000
|
unkown
|
page read and write
|
||
7FF502E9C000
|
unkown
|
page readonly
|
||
37C0000
|
unclassified section
|
page execute and read and write
|
||
339E000
|
unkown
|
page read and write
|
||
C12E000
|
unkown
|
page read and write
|
||
43AC000
|
unkown
|
page read and write
|
||
9BDE000
|
unkown
|
page read and write
|
||
7FF502CD4000
|
unkown
|
page readonly
|
||
8100000
|
unkown
|
page readonly
|
||
7FF503055000
|
unkown
|
page readonly
|
||
6ED7000
|
unkown
|
page read and write
|
||
7FF503129000
|
unkown
|
page readonly
|
||
BE99000
|
unkown
|
page read and write
|
||
B33A000
|
stack
|
page read and write
|
||
9363000
|
unkown
|
page read and write
|
||
B78F000
|
stack
|
page read and write
|
||
43B0000
|
unkown
|
page read and write
|
||
977E000
|
stack
|
page read and write
|
||
B010000
|
unkown
|
page read and write
|
||
4548000
|
heap
|
page read and write
|
||
43B0000
|
unkown
|
page read and write
|
||
2F1F000
|
heap
|
page read and write
|
||
2F11000
|
heap
|
page read and write
|
||
9330000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF503298000
|
unkown
|
page readonly
|
||
7FF503354000
|
unkown
|
page readonly
|
||
BDCD000
|
unkown
|
page read and write
|
||
7FF503167000
|
unkown
|
page readonly
|
||
6EE4000
|
unkown
|
page read and write
|
||
454F000
|
heap
|
page read and write
|
||
9092000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502D20000
|
unkown
|
page readonly
|
||
821B000
|
stack
|
page read and write
|
||
2F1F000
|
heap
|
page read and write
|
||
7FF5031C3000
|
unkown
|
page readonly
|
||
2DE0000
|
unkown
|
page read and write
|
||
6EB0000
|
unkown
|
page read and write
|
||
7FF5026FF000
|
unkown
|
page readonly
|
||
ECBD000
|
unkown
|
page read and write
|
||
7FF50302D000
|
unkown
|
page readonly
|
||
30CD000
|
unkown
|
page read and write
|
||
43FD000
|
unkown
|
page read and write
|
||
44D0000
|
unkown
|
page read and write
|
||
7FF5031B7000
|
unkown
|
page readonly
|
||
34B4000
|
heap
|
page read and write
|
||
BDF0000
|
unkown
|
page read and write
|
||
BE99000
|
unkown
|
page read and write
|
||
34AC000
|
heap
|
page read and write
|
||
6FBF000
|
unkown
|
page read and write
|
||
7FF502D41000
|
unkown
|
page readonly
|
||
7FF503235000
|
unkown
|
page readonly
|
||
7FF502D15000
|
unkown
|
page readonly
|
||
4D00000
|
unkown
|
page write copy
|
||
30A3000
|
unkown
|
page read and write
|
||
C017000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7FF50326B000
|
unkown
|
page readonly
|
||
B237000
|
stack
|
page read and write
|
||
9B83000
|
unkown
|
page read and write
|
||
BE14000
|
unkown
|
page read and write
|
||
536D000
|
direct allocation
|
page execute and read and write
|
||
2DB0000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
30AC000
|
unkown
|
page read and write
|
||
9255000
|
unkown
|
page read and write
|
||
7FF502B88000
|
unkown
|
page readonly
|
||
8E0000
|
unkown
|
page readonly
|
||
919F000
|
unkown
|
page read and write
|
||
B1B000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF503161000
|
unkown
|
page readonly
|
||
800000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
3BF1000
|
heap
|
page read and write
|
||
3088000
|
unkown
|
page read and write
|
||
3099000
|
unkown
|
page read and write
|
||
BA1000
|
unkown
|
page read and write
|
||
A98F000
|
stack
|
page read and write
|
||
7FF502EF7000
|
unkown
|
page readonly
|
||
523E000
|
direct allocation
|
page execute and read and write
|
||
7FF503189000
|
unkown
|
page readonly
|
||
7FF502D45000
|
unkown
|
page readonly
|
||
BDE0000
|
unkown
|
page read and write
|
||
9220000
|
unkown
|
page read and write
|
||
ECE3000
|
unkown
|
page read and write
|
||
9CF4000
|
unkown
|
page read and write
|
||
30A3000
|
unkown
|
page read and write
|
||
C0BC000
|
unkown
|
page read and write
|
||
7FF502F47000
|
unkown
|
page readonly
|
||
BDF0000
|
unkown
|
page read and write
|
||
7FF503270000
|
unkown
|
page readonly
|
||
3901000
|
trusted library allocation
|
page execute and read and write
|
||
447A000
|
unkown
|
page read and write
|
||
7FF502C8C000
|
unkown
|
page readonly
|
||
9B87000
|
unkown
|
page read and write
|
||
7FF502EE3000
|
unkown
|
page readonly
|
||
4405000
|
unkown
|
page read and write
|
||
6FE3000
|
unkown
|
page read and write
|
||
2F1A000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
43B4000
|
unkown
|
page read and write
|
||
8596000
|
unkown
|
page read and write
|
||
C0E9000
|
unkown
|
page read and write
|
||
51CD000
|
direct allocation
|
page execute and read and write
|
||
4000000
|
heap
|
page read and write
|
||
3BF2000
|
heap
|
page read and write
|
||
8440000
|
unkown
|
page read and write
|
||
6FBF000
|
unkown
|
page read and write
|
||
7FF503235000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
E180000
|
unkown
|
page execute and read and write
|
||
30FF000
|
stack
|
page read and write
|
||
7FF5032D7000
|
unkown
|
page readonly
|
||
BDCD000
|
unkown
|
page read and write
|
||
BDE0000
|
unkown
|
page read and write
|
||
7FF503108000
|
unkown
|
page readonly
|
||
819F000
|
stack
|
page read and write
|
||
DD00000
|
heap
|
page read and write
|
||
2F12000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3201000
|
heap
|
page read and write
|
||
C39000
|
system
|
page execute and read and write
|
||
7FF5030FF000
|
unkown
|
page readonly
|
||
9092000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
454E000
|
heap
|
page read and write
|
||
7FF502DAD000
|
unkown
|
page readonly
|
||
2FED000
|
stack
|
page read and write
|
||
7FF502D20000
|
unkown
|
page readonly
|
||
7FF502B6C000
|
unkown
|
page readonly
|
||
3CF3000
|
heap
|
page read and write
|
||
7840000
|
unkown
|
page read and write
|
||
454F000
|
heap
|
page read and write
|
||
9BE3000
|
unkown
|
page read and write
|
||
BDCD000
|
unkown
|
page read and write
|
||
9D6B000
|
unkown
|
page read and write
|
||
6F30000
|
unkown
|
page read and write
|
||
C0BC000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7FF502FAF000
|
unkown
|
page readonly
|
||
BEE6000
|
unkown
|
page read and write
|
||
A36F000
|
unkown
|
page read and write
|
||
30A3000
|
unkown
|
page read and write
|
||
BC0C000
|
unkown
|
page read and write
|
||
2EF0000
|
stack
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502DD3000
|
unkown
|
page readonly
|
||
401000
|
unkown
|
page execute read
|
||
921D000
|
unkown
|
page read and write
|
||
BEAF000
|
unkown
|
page read and write
|
||
84F0000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF5030E6000
|
unkown
|
page readonly
|
||
76E0000
|
unkown
|
page readonly
|
||
7FF502EF3000
|
unkown
|
page readonly
|
||
359E000
|
direct allocation
|
page execute and read and write
|
||
3F01000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
B5E0000
|
unkown
|
page read and write
|
||
7FF502D68000
|
unkown
|
page readonly
|
||
9191000
|
unkown
|
page read and write
|
||
2C02000
|
heap
|
page read and write
|
||
BDE0000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF5030CE000
|
unkown
|
page readonly
|
||
DD20000
|
heap
|
page read and write
|
||
A34F000
|
unkown
|
page read and write
|
||
BEA3000
|
unkown
|
page read and write
|
||
7FF502F88000
|
unkown
|
page readonly
|
||
9CCF000
|
unkown
|
page read and write
|
||
2DC0000
|
unkown
|
page read and write
|
||
454C000
|
heap
|
page read and write
|
||
454B000
|
heap
|
page read and write
|
||
3029000
|
unkown
|
page read and write
|
||
9CCF000
|
unkown
|
page read and write
|
||
9BE3000
|
unkown
|
page read and write
|
||
ABCB000
|
stack
|
page read and write
|
||
7FF5032CF000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
2F20000
|
unkown
|
page readonly
|
||
7490000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
90BD000
|
unkown
|
page read and write
|
||
7FF503185000
|
unkown
|
page readonly
|
||
7FF502DD3000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
701E000
|
unkown
|
page read and write
|
||
2C13000
|
heap
|
page read and write
|
||
7FF502FB7000
|
unkown
|
page readonly
|
||
BFAE000
|
unkown
|
page read and write
|
||
89C0000
|
unkown
|
page readonly
|
||
7FF502E06000
|
unkown
|
page readonly
|
||
FE19000
|
unkown
|
page read and write
|
||
BF7A000
|
unkown
|
page read and write
|
||
7FF502D25000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
2E7C000
|
stack
|
page read and write
|
||
10EBF000
|
system
|
page execute and read and write
|
||
295E000
|
stack
|
page read and write
|
||
BCBC000
|
unkown
|
page read and write
|
||
BEA9000
|
unkown
|
page read and write
|
||
77FE000
|
stack
|
page read and write
|
||
918D000
|
unkown
|
page read and write
|
||
43AC000
|
unkown
|
page read and write
|
||
A32F000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
DD02000
|
heap
|
page read and write
|
||
7FF502EE3000
|
unkown
|
page readonly
|
||
ECDF000
|
unkown
|
page read and write
|
||
BDCB000
|
unkown
|
page read and write
|
||
7FF5032C2000
|
unkown
|
page readonly
|
||
A2F0000
|
unkown
|
page read and write
|
||
3BF1000
|
heap
|
page read and write
|
||
7FF502B5E000
|
unkown
|
page readonly
|
||
BC55000
|
unkown
|
page read and write
|
||
BE96000
|
unkown
|
page read and write
|
||
30B4000
|
unkown
|
page read and write
|
||
701E000
|
unkown
|
page read and write
|
||
B33A000
|
stack
|
page read and write
|
||
3091000
|
unkown
|
page read and write
|
||
2F17000
|
heap
|
page read and write
|
||
2F14000
|
heap
|
page read and write
|
||
A2F0000
|
unkown
|
page read and write
|
||
C07E000
|
unkown
|
page read and write
|
||
9D54000
|
unkown
|
page read and write
|
||
936E000
|
unkown
|
page read and write
|
||
BDA9000
|
unkown
|
page read and write
|
||
7FF5031E8000
|
unkown
|
page readonly
|
||
308F000
|
unkown
|
page read and write
|
||
7DF411ED1000
|
unkown
|
page execute read
|
||
7FF502B62000
|
unkown
|
page readonly
|
||
DD0A000
|
heap
|
page read and write
|
||
4D74000
|
heap
|
page read and write
|
||
E3CF000
|
stack
|
page read and write
|
||
7FF502F94000
|
unkown
|
page readonly
|
||
7FF503032000
|
unkown
|
page readonly
|
||
DD02000
|
heap
|
page read and write
|
||
BFF4000
|
unkown
|
page read and write
|
||
7FF50335D000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
8450000
|
unkown
|
page read and write
|
||
702D000
|
unkown
|
page read and write
|
||
2F11000
|
heap
|
page read and write
|
||
7089000
|
unkown
|
page read and write
|
||
91FB000
|
unkown
|
page read and write
|
||
2FFF000
|
stack
|
page read and write
|
||
ABD0000
|
unkown
|
page read and write
|
||
9E0000
|
unkown
|
page read and write
|
||
9BCB000
|
unkown
|
page read and write
|
||
ECDE000
|
unkown
|
page read and write
|
||
4402000
|
unkown
|
page read and write
|
||
7FF503110000
|
unkown
|
page readonly
|
||
93F6000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
B5E0000
|
unkown
|
page read and write
|
||
4398000
|
unkown
|
page read and write
|
||
3BF1000
|
heap
|
page read and write
|
||
76E0000
|
unkown
|
page readonly
|
||
7FF502D10000
|
unkown
|
page readonly
|
||
3BF3000
|
heap
|
page read and write
|
||
7FF502EB7000
|
unkown
|
page readonly
|
||
BFF4000
|
unkown
|
page read and write
|
||
9237000
|
unkown
|
page read and write
|
||
7FF50317C000
|
unkown
|
page readonly
|
||
7FF5030CE000
|
unkown
|
page readonly
|
||
7FF5030A3000
|
unkown
|
page readonly
|
||
7FF502D9D000
|
unkown
|
page readonly
|
||
7FF503082000
|
unkown
|
page readonly
|
||
BC80000
|
unkown
|
page read and write
|
||
7FF50335D000
|
unkown
|
page readonly
|
||
9366000
|
unkown
|
page read and write
|
||
6EE1000
|
unkown
|
page read and write
|
||
7FF5032F2000
|
unkown
|
page readonly
|
||
B2BA000
|
stack
|
page read and write
|
||
3030000
|
unkown
|
page read and write
|
||
9B9F000
|
unkown
|
page read and write
|
||
7651000
|
unkown
|
page read and write
|
||
2A80000
|
heap
|
page read and write
|
||
4F5E000
|
stack
|
page read and write
|
||
2F1C000
|
heap
|
page read and write
|
||
9330000
|
unkown
|
page read and write
|
||
7DF411F11000
|
unkown
|
page execute read
|
||
4546000
|
heap
|
page read and write
|
||
AA0B000
|
stack
|
page read and write
|
||
BE99000
|
unkown
|
page read and write
|
||
BDD5000
|
unkown
|
page read and write
|
||
7FF502B7F000
|
unkown
|
page readonly
|
||
9330000
|
unkown
|
page read and write
|
||
4E51000
|
trusted library allocation
|
page execute and read and write
|
||
BA8B000
|
stack
|
page read and write
|
||
C60000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
9064000
|
unkown
|
page read and write
|
||
7FF50326B000
|
unkown
|
page readonly
|
||
C136000
|
unkown
|
page read and write
|
||
B5A1000
|
unkown
|
page read and write
|
||
7FF5032DB000
|
unkown
|
page readonly
|
||
829B000
|
stack
|
page read and write
|
||
2F16000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF50324D000
|
unkown
|
page readonly
|
||
7550000
|
unkown
|
page read and write
|
||
C0FD000
|
unkown
|
page read and write
|
||
BFB9000
|
unkown
|
page read and write
|
||
2E1C000
|
heap
|
page read and write
|
||
3030000
|
unkown
|
page read and write
|
||
BF7A000
|
unkown
|
page read and write
|
||
7FF502FB4000
|
unkown
|
page readonly
|
||
2C13000
|
heap
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
BC0C000
|
unkown
|
page read and write
|
||
2E9C000
|
stack
|
page read and write
|
||
7FF502B5E000
|
unkown
|
page readonly
|
||
6FDB000
|
unkown
|
page read and write
|
||
BC21000
|
unkown
|
page read and write
|
||
7DF411EF0000
|
unkown
|
page readonly
|
||
2DA0000
|
unkown
|
page readonly
|
||
A7ED000
|
stack
|
page read and write
|
||
6F09000
|
unkown
|
page read and write
|
||
ABCB000
|
stack
|
page read and write
|
||
7FF502D00000
|
unkown
|
page readonly
|
||
9255000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
BEE6000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
9193000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502DC8000
|
unkown
|
page readonly
|
||
7FF503151000
|
unkown
|
page readonly
|
||
3086000
|
unkown
|
page read and write
|
||
3099000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
BCBC000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
BE96000
|
unkown
|
page read and write
|
||
6FDB000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3BF2000
|
heap
|
page read and write
|
||
7FF5030EF000
|
unkown
|
page readonly
|
||
7FF503187000
|
unkown
|
page readonly
|
||
8110000
|
unkown
|
page read and write
|
||
6ECE000
|
unkown
|
page read and write
|
||
9BAA000
|
unkown
|
page read and write
|
||
9CF4000
|
unkown
|
page read and write
|
||
964E000
|
stack
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2F20000
|
unkown
|
page readonly
|
||
7FF5031B0000
|
unkown
|
page readonly
|
||
BFB9000
|
unkown
|
page read and write
|
||
3F04000
|
heap
|
page read and write
|
||
55EF000
|
unclassified section
|
page read and write
|
||
BDA9000
|
unkown
|
page read and write
|
||
7FF502F2C000
|
unkown
|
page readonly
|
||
7FF503326000
|
unkown
|
page readonly
|
||
BC19000
|
unkown
|
page read and write
|
||
3091000
|
unkown
|
page read and write
|
||
BE0000
|
unkown
|
page readonly
|
||
7FF502F8A000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
BC21000
|
unkown
|
page read and write
|
||
7FF502D48000
|
unkown
|
page readonly
|
||
43EA000
|
unkown
|
page read and write
|
||
7FF503051000
|
unkown
|
page readonly
|
||
7FF5032B5000
|
unkown
|
page readonly
|
||
7FF502CFA000
|
unkown
|
page readonly
|
||
9450000
|
unkown
|
page readonly
|
||
BE1C000
|
unkown
|
page read and write
|
||
7609000
|
stack
|
page read and write
|
||
7FF502F7A000
|
unkown
|
page readonly
|
||
9B70000
|
unkown
|
page read and write
|
||
FEC4000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
BA8B000
|
stack
|
page read and write
|
||
44B0000
|
unkown
|
page read and write
|
||
7620000
|
unkown
|
page readonly
|
||
7FF502D65000
|
unkown
|
page readonly
|
||
308F000
|
unkown
|
page read and write
|
||
7FF502D41000
|
unkown
|
page readonly
|
||
ABE0000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
A36C000
|
unkown
|
page read and write
|
||
B580000
|
unkown
|
page read and write
|
||
7FF502F4B000
|
unkown
|
page readonly
|
||
3082000
|
unkown
|
page read and write
|
||
7FF5032BD000
|
unkown
|
page readonly
|
||
2BDA000
|
stack
|
page read and write
|
||
997F000
|
stack
|
page read and write
|
||
B1BF000
|
stack
|
page read and write
|
||
7FF50323B000
|
unkown
|
page readonly
|
||
1013F000
|
system
|
page read and write
|
||
3B0A000
|
heap
|
page read and write
|
||
AF7F000
|
stack
|
page read and write
|
||
C15D000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7DF411EF1000
|
unkown
|
page execute read
|
||
7FF502B9A000
|
unkown
|
page readonly
|
||
9D0D000
|
unkown
|
page read and write
|
||
4D41000
|
heap
|
page read and write
|
||
7FF5031B0000
|
unkown
|
page readonly
|
||
3529000
|
direct allocation
|
page execute and read and write
|
||
7FF5026F7000
|
unkown
|
page readonly
|
||
BC27000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2F16000
|
heap
|
page read and write
|
||
7FF503032000
|
unkown
|
page readonly
|
||
2F12000
|
heap
|
page read and write
|
||
7FF502CCE000
|
unkown
|
page readonly
|
||
3BF2000
|
heap
|
page read and write
|
||
9BDE000
|
unkown
|
page read and write
|
||
B549000
|
stack
|
page read and write
|
||
BEA3000
|
unkown
|
page read and write
|
||
2BD8000
|
stack
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
44B0000
|
unkown
|
page read and write
|
||
7FF503195000
|
unkown
|
page readonly
|
||
7FF5032D7000
|
unkown
|
page readonly
|
||
7FF502F4B000
|
unkown
|
page readonly
|
||
B5F0000
|
unkown
|
page readonly
|
||
2590000
|
heap
|
page read and write
|
||
454C000
|
heap
|
page read and write
|
||
B6D3000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
A8EA000
|
stack
|
page read and write
|
||
9CF2000
|
unkown
|
page read and write
|
||
BE14000
|
unkown
|
page read and write
|
||
9BF7000
|
unkown
|
page read and write
|
||
7DF411F11000
|
unkown
|
page execute read
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
ECC6000
|
unkown
|
page read and write
|
||
BEA3000
|
unkown
|
page read and write
|
||
7FF50316E000
|
unkown
|
page readonly
|
||
43B4000
|
unkown
|
page read and write
|
||
7FF502F8A000
|
unkown
|
page readonly
|
||
9D60000
|
unkown
|
page read and write
|
||
2F1F000
|
heap
|
page read and write
|
||
7FF5030FF000
|
unkown
|
page readonly
|
||
C0CA000
|
unkown
|
page read and write
|
||
7FF502D84000
|
unkown
|
page readonly
|
||
309F000
|
unkown
|
page read and write
|
||
AA8D000
|
stack
|
page read and write
|
||
2F11000
|
heap
|
page read and write
|
||
6EF3000
|
unkown
|
page read and write
|
||
7FF503187000
|
unkown
|
page readonly
|
||
7FF50331F000
|
unkown
|
page readonly
|
||
2C00000
|
heap
|
page read and write
|
||
2F13000
|
heap
|
page read and write
|
||
7FF50310B000
|
unkown
|
page readonly
|
||
255A000
|
stack
|
page read and write
|
||
7FF5032C8000
|
unkown
|
page readonly
|
||
3000000
|
heap
|
page read and write
|
||
7FF503189000
|
unkown
|
page readonly
|
||
9A7F000
|
stack
|
page read and write
|
||
BFEE000
|
unkown
|
page read and write
|
||
C136000
|
unkown
|
page read and write
|
||
ABE0000
|
unkown
|
page read and write
|
||
7FF502DF9000
|
unkown
|
page readonly
|
||
7DF411EE1000
|
unkown
|
page execute read
|
||
7FF5032F2000
|
unkown
|
page readonly
|
||
BC15000
|
unkown
|
page read and write
|
||
BC08000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
9C8A000
|
unkown
|
page read and write
|
||
2DE0000
|
unkown
|
page read and write
|
||
BE99000
|
unkown
|
page read and write
|
||
77FE000
|
stack
|
page read and write
|
||
7FF503006000
|
unkown
|
page readonly
|
||
BC55000
|
unkown
|
page read and write
|
||
7FF502EC2000
|
unkown
|
page readonly
|
||
84F0000
|
unkown
|
page read and write
|
||
A34A000
|
unkown
|
page read and write
|
||
7FF502C2E000
|
unkown
|
page readonly
|
||
2EF0000
|
stack
|
page read and write
|
||
7FF502B9A000
|
unkown
|
page readonly
|
||
BD6C000
|
unkown
|
page read and write
|
||
2593000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
74C2000
|
unkown
|
page read and write
|
||
7FF502EB7000
|
unkown
|
page readonly
|
||
6F30000
|
unkown
|
page read and write
|
||
BE14000
|
unkown
|
page read and write
|
||
BC19000
|
unkown
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
43C7000
|
unkown
|
page read and write
|
||
3088000
|
unkown
|
page read and write
|
||
7FF50308A000
|
unkown
|
page readonly
|
||
9416000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
C0BC000
|
unkown
|
page read and write
|
||
7FF4ECBEF000
|
unkown
|
page readonly
|
||
7FF502B93000
|
unkown
|
page readonly
|
||
339E000
|
heap
|
page read and write
|
||
6ECB000
|
unkown
|
page read and write
|
||
ECB1000
|
unkown
|
page read and write
|
||
7FF502E5E000
|
unkown
|
page readonly
|
||
7FF502CDD000
|
unkown
|
page readonly
|
||
2AC0000
|
unkown
|
page readonly
|
||
BEF6000
|
unkown
|
page read and write
|
||
93F6000
|
unkown
|
page read and write
|
||
7FF502EC9000
|
unkown
|
page readonly
|
||
7FF502B65000
|
unkown
|
page readonly
|
||
1090000
|
unkown
|
page readonly
|
||
2DB0000
|
unkown
|
page read and write
|
||
7FF5030B4000
|
unkown
|
page readonly
|
||
B570000
|
unkown
|
page read and write
|
||
7FF5030AA000
|
unkown
|
page readonly
|
||
3BF0000
|
heap
|
page read and write
|
||
4E33000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7FF502FB4000
|
unkown
|
page readonly
|
||
7FF50331B000
|
unkown
|
page readonly
|
||
2E05000
|
heap
|
page read and write
|
||
7FF502C9D000
|
unkown
|
page readonly
|
||
439B000
|
unkown
|
page read and write
|
||
A362000
|
unkown
|
page read and write
|
||
7FF503010000
|
unkown
|
page readonly
|
||
BC27000
|
unkown
|
page read and write
|
||
7FF50308A000
|
unkown
|
page readonly
|
||
2F14000
|
heap
|
page read and write
|
||
309F000
|
unkown
|
page read and write
|
||
2F14000
|
heap
|
page read and write
|
||
9D01000
|
unkown
|
page read and write
|
||
7470000
|
unkown
|
page read and write
|
||
30A5000
|
unkown
|
page read and write
|
||
5371000
|
direct allocation
|
page execute and read and write
|
||
A34F000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
6E15000
|
stack
|
page read and write
|
||
7FF502E1A000
|
unkown
|
page readonly
|
||
3742000
|
direct allocation
|
page execute and read and write
|
||
BDF0000
|
unkown
|
page read and write
|
||
7720000
|
unkown
|
page readonly
|
||
7FF5032DF000
|
unkown
|
page readonly
|
||
9D0D000
|
unkown
|
page read and write
|
||
FE19000
|
unkown
|
page read and write
|
||
38D0000
|
trusted library allocation
|
page execute and read and write
|
||
3F0D000
|
heap
|
page read and write
|
||
7FF50332C000
|
unkown
|
page readonly
|
||
29D9000
|
stack
|
page read and write
|
||
7FF502EBB000
|
unkown
|
page readonly
|
||
6ECB000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF503216000
|
unkown
|
page readonly
|
||
7630000
|
unkown
|
page readonly
|
||
90BD000
|
unkown
|
page read and write
|
||
4E49000
|
unkown
|
page read and write
|
||
454C000
|
heap
|
page read and write
|
||
7FF502F75000
|
unkown
|
page readonly
|
||
4D00000
|
unkown
|
page write copy
|
||
7FF502B62000
|
unkown
|
page readonly
|
||
3720000
|
heap
|
page read and write
|
||
ECB5000
|
unkown
|
page read and write
|
||
9D6B000
|
unkown
|
page read and write
|
||
7A58000
|
stack
|
page read and write
|
||
7A60000
|
unkown
|
page read and write
|
||
7FF5030AA000
|
unkown
|
page readonly
|
||
2F14000
|
heap
|
page read and write
|
||
7FF5032CF000
|
unkown
|
page readonly
|
||
308F000
|
unkown
|
page read and write
|
||
6EC0000
|
unkown
|
page read and write
|
||
9AFF000
|
stack
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
ECBE000
|
unkown
|
page read and write
|
||
810000
|
unkown
|
page readonly
|
||
BC27000
|
unkown
|
page read and write
|
||
7FF503347000
|
unkown
|
page readonly
|
||
7FF503227000
|
unkown
|
page readonly
|
||
400000
|
unkown
|
page readonly
|
||
7FF503231000
|
unkown
|
page readonly
|
||
7FF502C9D000
|
unkown
|
page readonly
|
||
7FF502D00000
|
unkown
|
page readonly
|
||
BBE8000
|
unkown
|
page read and write
|
||
7FF502DBC000
|
unkown
|
page readonly
|
||
3304000
|
heap
|
page read and write
|
||
2DF0000
|
unkown
|
page read and write
|
||
7FF5030C9000
|
unkown
|
page readonly
|
||
4544000
|
heap
|
page read and write
|
||
7FF502EC9000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
2EDC000
|
stack
|
page read and write
|
||
4F9E000
|
stack
|
page read and write
|
||
4378000
|
unkown
|
page read and write
|
||
C08E000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
BC55000
|
unkown
|
page read and write
|
||
BEAF000
|
unkown
|
page read and write
|
||
BDE0000
|
unkown
|
page read and write
|
||
7FF502E0A000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
7FF5026FF000
|
unkown
|
page readonly
|
||
7FF502D61000
|
unkown
|
page readonly
|
||
9237000
|
unkown
|
page read and write
|
||
6ED7000
|
unkown
|
page read and write
|
||
C083000
|
unkown
|
page read and write
|
||
30A3000
|
unkown
|
page read and write
|
||
7FF502F86000
|
unkown
|
page readonly
|
||
97FC000
|
stack
|
page read and write
|
||
44A0000
|
unkown
|
page read and write
|
||
74B0000
|
unkown
|
page read and write
|
||
7840000
|
unkown
|
page read and write
|
||
7FF4ECBEF000
|
unkown
|
page readonly
|
||
7FF502CD4000
|
unkown
|
page readonly
|
||
BA1000
|
unkown
|
page read and write
|
||
3401000
|
trusted library allocation
|
page execute and read and write
|
||
454C000
|
heap
|
page read and write
|
||
C1AB000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502C30000
|
unkown
|
page readonly
|
||
3082000
|
unkown
|
page read and write
|
||
BDD5000
|
unkown
|
page read and write
|
||
7FF502FA9000
|
unkown
|
page readonly
|
||
7FF502E9C000
|
unkown
|
page readonly
|
||
7FF503114000
|
unkown
|
page readonly
|
||
AAA0000
|
unkown
|
page readonly
|
||
4431000
|
unkown
|
page read and write
|
||
BD6C000
|
unkown
|
page read and write
|
||
3C81000
|
heap
|
page read and write
|
||
BDC7000
|
unkown
|
page read and write
|
||
EC80000
|
unkown
|
page read and write
|
||
7490000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2F01000
|
heap
|
page read and write
|
||
9D60000
|
unkown
|
page read and write
|
||
4D41000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2EF2000
|
stack
|
page read and write
|
||
7FF50322D000
|
unkown
|
page readonly
|
||
7FF503158000
|
unkown
|
page readonly
|
||
302D000
|
unkown
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
AF80000
|
unkown
|
page read and write
|
||
ECDE000
|
unkown
|
page read and write
|
||
997F000
|
stack
|
page read and write
|
||
A76D000
|
stack
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
987B000
|
stack
|
page read and write
|
||
7370000
|
unkown
|
page read and write
|
||
2BFE000
|
stack
|
page read and write
|
||
36D1000
|
direct allocation
|
page execute and read and write
|
||
3BF0000
|
heap
|
page read and write
|
||
6E15000
|
stack
|
page read and write
|
||
C175000
|
unkown
|
page read and write
|
||
95C4000
|
unkown
|
page read and write
|
||
7FF502FA0000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502F88000
|
unkown
|
page readonly
|
||
A20000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7FF503154000
|
unkown
|
page readonly
|
||
9CF6000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF5032EB000
|
unkown
|
page readonly
|
||
27BC000
|
stack
|
page read and write
|
||
6F33000
|
unkown
|
page read and write
|
||
4DB1000
|
unkown
|
page read and write
|
||
5020000
|
trusted library allocation
|
page read and write
|
||
7FF502F47000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
A7ED000
|
stack
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
2F1D000
|
heap
|
page read and write
|
||
7FF50334D000
|
unkown
|
page readonly
|
||
B590000
|
heap
|
page read and write
|
||
53E2000
|
direct allocation
|
page execute and read and write
|
||
91DE000
|
unkown
|
page read and write
|
||
AF7F000
|
stack
|
page read and write
|
||
918D000
|
unkown
|
page read and write
|
||
9237000
|
unkown
|
page read and write
|
||
BDCB000
|
unkown
|
page read and write
|
||
3490000
|
heap
|
page read and write
|
||
98FC000
|
stack
|
page read and write
|
||
8610000
|
unkown
|
page read and write
|
||
C02C000
|
unkown
|
page read and write
|
||
BFB4000
|
unkown
|
page read and write
|
||
2DC0000
|
unkown
|
page read and write
|
||
7FF502CF2000
|
unkown
|
page readonly
|
||
B549000
|
stack
|
page read and write
|
||
BEA3000
|
unkown
|
page read and write
|
||
93F6000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
34B4000
|
heap
|
page read and write
|
||
A376000
|
unkown
|
page read and write
|
||
7FF502EF3000
|
unkown
|
page readonly
|
||
ECCC000
|
unkown
|
page read and write
|
||
7FF5030A5000
|
unkown
|
page readonly
|
||
6FE3000
|
unkown
|
page read and write
|
||
2C2B000
|
unkown
|
page read and write
|
||
BDF5000
|
unkown
|
page read and write
|
||
2E4E000
|
heap
|
page read and write
|
||
9C8A000
|
unkown
|
page read and write
|
||
7FF503167000
|
unkown
|
page readonly
|
||
C170000
|
unkown
|
page read and write
|
||
30A5000
|
unkown
|
page read and write
|
||
7FF502D35000
|
unkown
|
page readonly
|
||
ECE3000
|
unkown
|
page read and write
|
||
3400000
|
direct allocation
|
page execute and read and write
|
||
99FF000
|
stack
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502F75000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
7FF503051000
|
unkown
|
page readonly
|
||
7FF503206000
|
unkown
|
page readonly
|
||
3067000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502E0D000
|
unkown
|
page readonly
|
||
2C70000
|
unkown
|
page readonly
|
||
7FF502D84000
|
unkown
|
page readonly
|
||
BE1C000
|
unkown
|
page read and write
|
||
6ED9000
|
unkown
|
page read and write
|
||
2F18000
|
heap
|
page read and write
|
||
7FF5030A3000
|
unkown
|
page readonly
|
||
2F19000
|
heap
|
page read and write
|
||
BC5C000
|
unkown
|
page read and write
|
||
C11F000
|
unkown
|
page read and write
|
||
BDF5000
|
unkown
|
page read and write
|
||
30AC000
|
unkown
|
page read and write
|
||
7FF5026F7000
|
unkown
|
page readonly
|
||
386F000
|
stack
|
page read and write
|
||
E90000
|
unkown
|
page readonly
|
||
7FF50312D000
|
unkown
|
page readonly
|
||
2F10000
|
heap
|
page read and write
|
||
C160000
|
unkown
|
page read and write
|
||
43C7000
|
unkown
|
page read and write
|
||
2F10000
|
heap
|
page read and write
|
||
BDC7000
|
unkown
|
page read and write
|
||
9C2C000
|
unkown
|
page read and write
|
||
9D01000
|
unkown
|
page read and write
|
||
E50000
|
unkown
|
page readonly
|
||
7FF503360000
|
unkown
|
page readonly
|
||
3082000
|
unkown
|
page read and write
|
||
9050000
|
unkown
|
page read and write
|
||
2F12000
|
heap
|
page read and write
|
||
7FF503335000
|
unkown
|
page readonly
|
||
3304000
|
heap
|
page read and write
|
||
7FF502CF5000
|
unkown
|
page readonly
|
||
50A0000
|
direct allocation
|
page execute and read and write
|
||
6FE3000
|
unkown
|
page read and write
|
||
BC30000
|
unkown
|
page read and write
|
||
7FF502DC0000
|
unkown
|
page readonly
|
||
BBB0000
|
unkown
|
page read and write
|
||
9C09000
|
unkown
|
page read and write
|
||
7FF502D65000
|
unkown
|
page readonly
|
||
BE14000
|
unkown
|
page read and write
|
||
FE02000
|
unkown
|
page read and write
|
||
C11F000
|
unkown
|
page read and write
|
||
4548000
|
heap
|
page read and write
|
||
7FF5031E8000
|
unkown
|
page readonly
|
||
7FF50303F000
|
unkown
|
page readonly
|
||
33E0000
|
heap
|
page read and write
|
||
9BCB000
|
unkown
|
page read and write
|
||
357C000
|
heap
|
page read and write
|
||
2C70000
|
unkown
|
page readonly
|
||
2F10000
|
heap
|
page read and write
|
||
ECC6000
|
unkown
|
page read and write
|
||
7FF502DB3000
|
unkown
|
page readonly
|
||
7FF50301B000
|
unkown
|
page readonly
|
||
7580000
|
unkown
|
page read and write
|
||
8D45000
|
stack
|
page read and write
|
||
2F12000
|
heap
|
page read and write
|
||
34A9000
|
heap
|
page read and write
|
||
8100000
|
unkown
|
page readonly
|
||
7FF503277000
|
unkown
|
page readonly
|
||
7FF503185000
|
unkown
|
page readonly
|
||
5020000
|
trusted library allocation
|
page read and write
|
||
7FF5031DA000
|
unkown
|
page readonly
|
||
7FF502DB3000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
FE0B000
|
unkown
|
page read and write
|
||
9D03000
|
unkown
|
page read and write
|
||
4545000
|
heap
|
page read and write
|
||
9D60000
|
unkown
|
page read and write
|
||
7609000
|
stack
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502F94000
|
unkown
|
page readonly
|
||
7560000
|
unkown
|
page readonly
|
||
7FF50328B000
|
unkown
|
page readonly
|
||
704E000
|
unkown
|
page read and write
|
||
7FF502FB7000
|
unkown
|
page readonly
|
||
2AA0000
|
unkown
|
page read and write
|
||
7FF503195000
|
unkown
|
page readonly
|
||
7FF502F96000
|
unkown
|
page readonly
|
||
B75000
|
unkown
|
page read and write
|
||
E50000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
449A000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
DCD9000
|
stack
|
page read and write
|
||
6EF3000
|
unkown
|
page read and write
|
||
2F19000
|
heap
|
page read and write
|
||
9255000
|
unkown
|
page read and write
|
||
7FF502E53000
|
unkown
|
page readonly
|
||
7FF503277000
|
unkown
|
page readonly
|
||
BDD5000
|
unkown
|
page read and write
|
||
8B5000
|
stack
|
page read and write
|
||
2560000
|
unkown
|
page read and write
|
||
C00A000
|
unkown
|
page read and write
|
||
ECDE000
|
unkown
|
page read and write
|
||
7FF5032C8000
|
unkown
|
page readonly
|
||
7FF5030C4000
|
unkown
|
page readonly
|
||
7FF503158000
|
unkown
|
page readonly
|
||
6FDB000
|
unkown
|
page read and write
|
||
E30000
|
unkown
|
page read and write
|
||
9BAA000
|
unkown
|
page read and write
|
||
307E000
|
unkown
|
page read and write
|
||
7FF502DCE000
|
unkown
|
page readonly
|
||
7FF503151000
|
unkown
|
page readonly
|
||
C03C000
|
unkown
|
page read and write
|
||
AB4C000
|
stack
|
page read and write
|
||
9BF7000
|
unkown
|
page read and write
|
||
8596000
|
unkown
|
page read and write
|
||
7FF502C2E000
|
unkown
|
page readonly
|
||
7FF502B8B000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
E90000
|
unkown
|
page readonly
|
||
2F17000
|
heap
|
page read and write
|
||
7FF503326000
|
unkown
|
page readonly
|
||
BDC7000
|
unkown
|
page read and write
|
||
309D000
|
unkown
|
page read and write
|
||
7FF50323B000
|
unkown
|
page readonly
|
||
7FF5030DE000
|
unkown
|
page readonly
|
||
4402000
|
unkown
|
page read and write
|
||
43EA000
|
unkown
|
page read and write
|
||
7FF50270A000
|
unkown
|
page readonly
|
||
6EE1000
|
unkown
|
page read and write
|
||
3067000
|
unkown
|
page read and write
|
||
7FF502D6B000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
7480000
|
unkown
|
page read and write
|
||
6FBF000
|
unkown
|
page read and write
|
||
50D9000
|
unclassified section
|
page execute and read and write
|
||
96CC000
|
stack
|
page read and write
|
||
7FF502E60000
|
unkown
|
page readonly
|
||
2C13000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
701E000
|
unkown
|
page read and write
|
||
4405000
|
unkown
|
page read and write
|
||
3BF0000
|
heap
|
page read and write
|
||
7FF502D9D000
|
unkown
|
page readonly
|
||
2F1D000
|
heap
|
page read and write
|
||
7FF502DC3000
|
unkown
|
page readonly
|
||
309F000
|
unkown
|
page read and write
|
||
9BA2000
|
unkown
|
page read and write
|
||
964E000
|
stack
|
page read and write
|
||
9D0D000
|
unkown
|
page read and write
|
||
89B0000
|
unkown
|
page readonly
|
||
7FF5030C4000
|
unkown
|
page readonly
|
||
8450000
|
unkown
|
page read and write
|
||
2E12000
|
heap
|
page read and write
|
||
7FF503206000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
7FF5031B7000
|
unkown
|
page readonly
|
||
C083000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
A8EA000
|
stack
|
page read and write
|
||
BC15000
|
unkown
|
page read and write
|
||
919F000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
E85000
|
heap
|
page read and write
|
||
A32F000
|
unkown
|
page read and write
|
||
821B000
|
stack
|
page read and write
|
||
3BF3000
|
heap
|
page read and write
|
||
7FF502B4D000
|
unkown
|
page readonly
|
||
9BCB000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
B11C000
|
stack
|
page read and write
|
||
9F1000
|
unkown
|
page readonly
|
||
800000
|
unkown
|
page readonly
|
||
7DF411EE1000
|
unkown
|
page execute read
|
||
4463000
|
unkown
|
page read and write
|
||
BE96000
|
unkown
|
page read and write
|
||
BDCD000
|
unkown
|
page read and write
|
||
BC21000
|
unkown
|
page read and write
|
||
33F0000
|
trusted library allocation
|
page execute and read and write
|
||
7FF5032AF000
|
unkown
|
page readonly
|
||
9450000
|
unkown
|
page readonly
|
||
7620000
|
unkown
|
page readonly
|
||
3304000
|
heap
|
page read and write
|
||
B2BA000
|
stack
|
page read and write
|
||
7FF502D29000
|
unkown
|
page readonly
|
||
7FF50331F000
|
unkown
|
page readonly
|
||
3086000
|
unkown
|
page read and write
|
||
4398000
|
unkown
|
page read and write
|
||
4548000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
30B4000
|
unkown
|
page read and write
|
||
FE0B000
|
unkown
|
page read and write
|
||
51C9000
|
direct allocation
|
page execute and read and write
|
||
91A7000
|
unkown
|
page read and write
|
||
7FF502D10000
|
unkown
|
page readonly
|
||
BDA9000
|
unkown
|
page read and write
|
||
B5F0000
|
unkown
|
page readonly
|
||
7FF502E60000
|
unkown
|
page readonly
|
||
7FF5032FE000
|
unkown
|
page readonly
|
||
3304000
|
heap
|
page read and write
|
||
9BE3000
|
unkown
|
page read and write
|
||
BBFA000
|
unkown
|
page read and write
|
||
3780000
|
trusted library allocation
|
page read and write
|
||
4370000
|
unkown
|
page read and write
|
||
8F0000
|
heap
|
page read and write
|
||
987B000
|
stack
|
page read and write
|
||
7FF502DDC000
|
unkown
|
page readonly
|
||
C083000
|
unkown
|
page read and write
|
||
B09B000
|
stack
|
page read and write
|
||
BDC7000
|
unkown
|
page read and write
|
||
4435000
|
unkown
|
page read and write
|
||
9B70000
|
unkown
|
page read and write
|
||
BD6C000
|
unkown
|
page read and write
|
||
7FF503354000
|
unkown
|
page readonly
|
||
7470000
|
unkown
|
page read and write
|
||
7FF503239000
|
unkown
|
page readonly
|
||
2E35000
|
heap
|
page read and write
|
||
7FF503087000
|
unkown
|
page readonly
|
||
30B4000
|
unkown
|
page read and write
|
||
7FF502CCE000
|
unkown
|
page readonly
|
||
1090000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
E30000
|
unkown
|
page read and write
|
||
9269000
|
unkown
|
page read and write
|
||
7FF5032A5000
|
unkown
|
page readonly
|
||
4431000
|
unkown
|
page read and write
|
||
7FF503333000
|
unkown
|
page readonly
|
||
BD6C000
|
unkown
|
page read and write
|
||
2F13000
|
heap
|
page read and write
|
||
7FF503126000
|
unkown
|
page readonly
|
||
7FF5031BC000
|
unkown
|
page readonly
|
||
7FF503082000
|
unkown
|
page readonly
|
||
2F14000
|
heap
|
page read and write
|
||
6FD7000
|
unkown
|
page read and write
|
||
7370000
|
unkown
|
page read and write
|
||
9BE6000
|
unkown
|
page read and write
|
||
3F11000
|
heap
|
page read and write
|
||
B570000
|
unkown
|
page read and write
|
||
2593000
|
heap
|
page read and write
|
||
7FF502E0A000
|
unkown
|
page readonly
|
||
9D54000
|
unkown
|
page read and write
|
||
805D000
|
stack
|
page read and write
|
||
74B0000
|
unkown
|
page read and write
|
||
5010000
|
trusted library allocation
|
page read and write
|
||
7FF502EC2000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
6F09000
|
unkown
|
page read and write
|
||
7FF502D04000
|
unkown
|
page readonly
|
||
7FF502DBC000
|
unkown
|
page readonly
|
||
6EE4000
|
unkown
|
page read and write
|
||
2590000
|
heap
|
page read and write
|
||
2A59000
|
stack
|
page read and write
|
||
50C0000
|
unclassified section
|
page execute and read and write
|
||
A36C000
|
unkown
|
page read and write
|
||
7FF5032C2000
|
unkown
|
page readonly
|
||
30A1000
|
unkown
|
page read and write
|
||
7FF5032BD000
|
unkown
|
page readonly
|
||
4D40000
|
heap
|
page read and write
|
||
9D0000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
B78F000
|
stack
|
page read and write
|
||
7FF502CF5000
|
unkown
|
page readonly
|
||
AF80000
|
unkown
|
page read and write
|
||
9416000
|
unkown
|
page read and write
|
||
9330000
|
unkown
|
page read and write
|
||
4545000
|
heap
|
page read and write
|
||
7FF50303F000
|
unkown
|
page readonly
|
||
7FF5032FE000
|
unkown
|
page readonly
|
||
FF46000
|
system
|
page read and write
|
||
B5D0000
|
unkown
|
page readonly
|
||
C07E000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
8E0000
|
unkown
|
page readonly
|
||
7FF502D91000
|
unkown
|
page readonly
|
||
7FF5030E4000
|
unkown
|
page readonly
|
||
309D000
|
unkown
|
page read and write
|
||
96CC000
|
stack
|
page read and write
|
||
BDCB000
|
unkown
|
page read and write
|
||
4DB1000
|
unkown
|
page read and write
|
||
7FF503368000
|
unkown
|
page readonly
|
||
C0FD000
|
unkown
|
page read and write
|
||
8110000
|
unkown
|
page read and write
|
||
7FF503175000
|
unkown
|
page readonly
|
||
6EB0000
|
unkown
|
page read and write
|
||
7FF503223000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
454A000
|
heap
|
page read and write
|
||
BB0000
|
unkown
|
page readonly
|
||
E80000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF503227000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
C0BC000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
30A1000
|
unkown
|
page read and write
|
||
4544000
|
heap
|
page read and write
|
||
9D54000
|
unkown
|
page read and write
|
||
7FF503087000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
3400000
|
heap
|
page read and write
|
||
9BE6000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
309F000
|
unkown
|
page read and write
|
||
2F1E000
|
heap
|
page read and write
|
||
FF04000
|
unkown
|
page read and write
|
||
295E000
|
stack
|
page read and write
|
||
9B8A000
|
unkown
|
page read and write
|
||
FE86000
|
unkown
|
page read and write
|
||
7FF4ECBF5000
|
unkown
|
page readonly
|
||
7DF411ED1000
|
unkown
|
page execute read
|
||
BEA9000
|
unkown
|
page read and write
|
||
701E000
|
unkown
|
page read and write
|
||
2F17000
|
heap
|
page read and write
|
||
4E70000
|
heap
|
page read and write
|
||
2D0C000
|
stack
|
page read and write
|
||
7FF502CF2000
|
unkown
|
page readonly
|
||
7FF502E3F000
|
unkown
|
page readonly
|
||
7FF502DB8000
|
unkown
|
page readonly
|
||
9416000
|
unkown
|
page read and write
|
||
BDA9000
|
unkown
|
page read and write
|
||
490000
|
unkown
|
page write copy
|
||
2C80000
|
unkown
|
page readonly
|
||
32D0000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
2F1C000
|
heap
|
page read and write
|
||
7FF503118000
|
unkown
|
page readonly
|
||
7FF5032F7000
|
unkown
|
page readonly
|
||
AA8D000
|
stack
|
page read and write
|
||
7FF502DF9000
|
unkown
|
page readonly
|
||
34A9000
|
heap
|
page read and write
|
||
2C13000
|
heap
|
page read and write
|
||
3099000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
C135000
|
unkown
|
page read and write
|
||
BE0000
|
unkown
|
page readonly
|
||
BBFA000
|
unkown
|
page read and write
|
||
708A000
|
unkown
|
page read and write
|
||
936E000
|
unkown
|
page read and write
|
||
9BE6000
|
unkown
|
page read and write
|
||
9D03000
|
unkown
|
page read and write
|
||
2F1D000
|
heap
|
page read and write
|
||
2F16000
|
heap
|
page read and write
|
||
7FF503126000
|
unkown
|
page readonly
|
||
9364000
|
unkown
|
page read and write
|
||
30CD000
|
unkown
|
page read and write
|
||
E110000
|
unkown
|
page execute and read and write
|
||
7FF502B80000
|
unkown
|
page readonly
|
||
6ED9000
|
unkown
|
page read and write
|
||
9D58000
|
unkown
|
page read and write
|
||
79DD000
|
stack
|
page read and write
|
||
7FF50270A000
|
unkown
|
page readonly
|
||
2F16000
|
heap
|
page read and write
|
||
79DD000
|
stack
|
page read and write
|
||
7FF503365000
|
unkown
|
page readonly
|
||
2B70000
|
heap
|
page read and write
|
||
7FF502F86000
|
unkown
|
page readonly
|
||
7FF4ECBF5000
|
unkown
|
page readonly
|
||
C60000
|
unkown
|
page readonly
|
||
7FF50328F000
|
unkown
|
page readonly
|
||
2E05000
|
heap
|
page read and write
|
||
BBB0000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
C0DE000
|
unkown
|
page read and write
|
||
31FF000
|
stack
|
page read and write
|
||
7FF502EBB000
|
unkown
|
page readonly
|
||
34B4000
|
heap
|
page read and write
|
||
B560000
|
unkown
|
page read and write
|
||
7FF502E3F000
|
unkown
|
page readonly
|
||
BEE8000
|
unkown
|
page read and write
|
||
A20000
|
heap
|
page read and write
|
||
BC0C000
|
unkown
|
page read and write
|
||
332D000
|
heap
|
page read and write
|
||
3570000
|
heap
|
page read and write
|
||
BF2E000
|
unkown
|
page read and write
|
||
7FF502F2C000
|
unkown
|
page readonly
|
||
7560000
|
unkown
|
page readonly
|
||
309D000
|
unkown
|
page read and write
|
||
9B87000
|
unkown
|
page read and write
|
||
BDF0000
|
unkown
|
page read and write
|
||
4549000
|
heap
|
page read and write
|
||
7FF502D8F000
|
unkown
|
page readonly
|
||
448A000
|
unkown
|
page read and write
|
||
7FF503287000
|
unkown
|
page readonly
|
||
9193000
|
unkown
|
page read and write
|
||
7FF503020000
|
unkown
|
page readonly
|
||
7DF411F01000
|
unkown
|
page execute read
|
||
7FF503333000
|
unkown
|
page readonly
|
||
7A58000
|
stack
|
page read and write
|
||
7FF502D18000
|
unkown
|
page readonly
|
||
2E17000
|
heap
|
page read and write
|
||
30A1000
|
unkown
|
page read and write
|
||
9D03000
|
unkown
|
page read and write
|
||
7FF5030A5000
|
unkown
|
page readonly
|
||
E1BF000
|
unkown
|
page execute and read and write
|
||
7FF503335000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
30CD000
|
unkown
|
page read and write
|
||
7FF502FA2000
|
unkown
|
page readonly
|
||
7FF503010000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
9CEA000
|
unkown
|
page read and write
|
||
5010000
|
trusted library allocation
|
page read and write
|
||
BC30000
|
unkown
|
page read and write
|
||
2C13000
|
heap
|
page read and write
|
||
BDD5000
|
unkown
|
page read and write
|
||
B6D3000
|
unkown
|
page read and write
|
||
AAA0000
|
unkown
|
page readonly
|
||
7FF502DD1000
|
unkown
|
page readonly
|
||
34B4000
|
heap
|
page read and write
|
||
7FF503257000
|
unkown
|
page readonly
|
||
BE96000
|
unkown
|
page read and write
|
||
BE1C000
|
unkown
|
page read and write
|
||
7FF50310B000
|
unkown
|
page readonly
|
||
4545000
|
heap
|
page read and write
|
||
BC5C000
|
unkown
|
page read and write
|
||
7FF503231000
|
unkown
|
page readonly
|
||
7FF502E02000
|
unkown
|
page readonly
|
||
BBE8000
|
unkown
|
page read and write
|
||
7FF502B65000
|
unkown
|
page readonly
|
||
BBE8000
|
unkown
|
page read and write
|
||
2A90000
|
unkown
|
page readonly
|
||
91DE000
|
unkown
|
page read and write
|
||
BC80000
|
unkown
|
page read and write
|
||
7FF5030D9000
|
unkown
|
page readonly
|
||
8889000
|
stack
|
page read and write
|
||
3099000
|
unkown
|
page read and write
|
||
10EC1000
|
system
|
page execute and read and write
|
||
2C2B000
|
unkown
|
page read and write
|
||
2B58000
|
stack
|
page read and write
|
||
7FF50312D000
|
unkown
|
page readonly
|
||
BB0E000
|
stack
|
page read and write
|
||
9CEA000
|
unkown
|
page read and write
|
||
BC15000
|
unkown
|
page read and write
|
||
7FF5032EE000
|
unkown
|
page readonly
|
||
C12A000
|
unkown
|
page read and write
|
||
7FF5031C3000
|
unkown
|
page readonly
|
||
919C000
|
unkown
|
page read and write
|
||
7480000
|
unkown
|
page read and write
|
||
795C000
|
stack
|
page read and write
|
||
447A000
|
unkown
|
page read and write
|
||
BBE3000
|
unkown
|
page read and write
|
||
2F1C000
|
heap
|
page read and write
|
||
9416000
|
unkown
|
page read and write
|
||
FE02000
|
unkown
|
page read and write
|
||
7FF503360000
|
unkown
|
page readonly
|
||
C091000
|
unkown
|
page read and write
|
||
7FF502CFA000
|
unkown
|
page readonly
|
||
9F1000
|
unkown
|
page readonly
|
||
FF04000
|
unkown
|
page read and write
|
||
2A90000
|
unkown
|
page readonly
|
||
4545000
|
heap
|
page read and write
|
||
7FF503216000
|
unkown
|
page readonly
|
||
B010000
|
unkown
|
page read and write
|
||
7FF5032AF000
|
unkown
|
page readonly
|
||
9366000
|
unkown
|
page read and write
|
||
3067000
|
unkown
|
page read and write
|
||
3BF1000
|
heap
|
page read and write
|
||
2BBE000
|
stack
|
page read and write
|
||
9C2C000
|
unkown
|
page read and write
|
||
7A60000
|
unkown
|
page read and write
|
||
7082000
|
unkown
|
page read and write
|
||
9BAA000
|
unkown
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
A378000
|
unkown
|
page read and write
|
||
9060000
|
unkown
|
page read and write
|
||
7FF503368000
|
unkown
|
page readonly
|
||
10E10000
|
system
|
page execute and read and write
|
||
7FF5031BC000
|
unkown
|
page readonly
|
||
7FF503270000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
7FF5030EF000
|
unkown
|
page readonly
|
||
9C8A000
|
unkown
|
page read and write
|
||
2B60000
|
heap
|
page readonly
|
||
4545000
|
heap
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
BFB4000
|
unkown
|
page read and write
|
||
7FF502D68000
|
unkown
|
page readonly
|
||
2A60000
|
unkown
|
page readonly
|
||
B11C000
|
stack
|
page read and write
|
||
4EF3000
|
heap
|
page read and write
|
||
7FF502D45000
|
unkown
|
page readonly
|
||
4435000
|
unkown
|
page read and write
|
||
4548000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
7FF502D04000
|
unkown
|
page readonly
|
||
2FBE000
|
stack
|
page read and write
|
||
9191000
|
unkown
|
page read and write
|
||
7FF502EF7000
|
unkown
|
page readonly
|
||
7FF502D3E000
|
unkown
|
page readonly
|
||
EC80000
|
unkown
|
page read and write
|
||
7710000
|
unkown
|
page readonly
|
||
2E1B000
|
heap
|
page read and write
|
||
3067000
|
unkown
|
page read and write
|
||
7DF411F01000
|
unkown
|
page execute read
|
||
7FF502D70000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
2DF0000
|
unkown
|
page read and write
|
||
7FF503275000
|
unkown
|
page readonly
|
||
7FF502D29000
|
unkown
|
page readonly
|
||
7FF503298000
|
unkown
|
page readonly
|
||
30AC000
|
unkown
|
page read and write
|
||
4EE0000
|
trusted library allocation
|
page read and write
|
||
3045000
|
unkown
|
page read and write
|
||
4545000
|
heap
|
page read and write
|
||
7FF5032B5000
|
unkown
|
page readonly
|
||
2AC0000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
91FB000
|
unkown
|
page read and write
|
||
7FF503055000
|
unkown
|
page readonly
|
||
ECB1000
|
unkown
|
page read and write
|
||
33DE000
|
stack
|
page read and write
|
||
7FF5032A5000
|
unkown
|
page readonly
|
||
7720000
|
unkown
|
page readonly
|
||
7610000
|
unkown
|
page readonly
|
||
7FF502E53000
|
unkown
|
page readonly
|
||
7FF502E62000
|
unkown
|
page readonly
|
||
2560000
|
unkown
|
page read and write
|
||
7DF411EF0000
|
unkown
|
page readonly
|
||
34B4000
|
heap
|
page read and write
|
||
6ED0000
|
unkown
|
page read and write
|
||
2E17000
|
heap
|
page read and write
|
||
BEAF000
|
unkown
|
page read and write
|
||
C15D000
|
unkown
|
page read and write
|
||
B7A000
|
unkown
|
page read and write
|
||
BC80000
|
unkown
|
page read and write
|
||
FE43000
|
unkown
|
page read and write
|
||
7FF502FA2000
|
unkown
|
page readonly
|
||
BC5C000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7DF411EF1000
|
unkown
|
page execute read
|
||
6E99000
|
stack
|
page read and write
|
||
A362000
|
unkown
|
page read and write
|
||
2F12000
|
heap
|
page read and write
|
||
2E4E000
|
heap
|
page read and write
|
||
454F000
|
heap
|
page read and write
|
||
7FF502F9F000
|
unkown
|
page readonly
|
||
7DF411EE0000
|
unkown
|
page readonly
|
||
454A000
|
heap
|
page read and write
|
||
9D6B000
|
unkown
|
page read and write
|
||
9B8A000
|
unkown
|
page read and write
|
||
6FDB000
|
unkown
|
page read and write
|
||
7FF5031AD000
|
unkown
|
page readonly
|
||
9C09000
|
unkown
|
page read and write
|
||
7FF502DB8000
|
unkown
|
page readonly
|
||
3091000
|
unkown
|
page read and write
|
||
DD0A000
|
heap
|
page read and write
|
||
7FF502D48000
|
unkown
|
page readonly
|
||
BCB9000
|
unkown
|
page read and write
|
||
95C4000
|
unkown
|
page read and write
|
||
3088000
|
unkown
|
page read and write
|
||
9E0000
|
unkown
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
2F1C000
|
heap
|
page read and write
|
||
7FF503110000
|
unkown
|
page readonly
|
||
2F14000
|
heap
|
page read and write
|
||
C057000
|
unkown
|
page read and write
|
||
9C2C000
|
unkown
|
page read and write
|
||
3530000
|
heap
|
page read and write
|
||
7DF411ED0000
|
unkown
|
page readonly
|
||
7FF50327C000
|
unkown
|
page readonly
|
||
7FF502E8E000
|
unkown
|
page readonly
|
||
A36C000
|
unkown
|
page read and write
|
||
BEAF000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
C1AB000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7630000
|
unkown
|
page readonly
|
||
7610000
|
unkown
|
page readonly
|
||
7FF503347000
|
unkown
|
page readonly
|
||
4544000
|
heap
|
page read and write
|
||
936E000
|
unkown
|
page read and write
|
||
BC08000
|
unkown
|
page read and write
|
||
7FF503114000
|
unkown
|
page readonly
|
||
2F15000
|
heap
|
page read and write
|
||
7FF502E62000
|
unkown
|
page readonly
|
||
9364000
|
unkown
|
page read and write
|
||
10ED1000
|
system
|
page execute and read and write
|
||
7FF502C4B000
|
unkown
|
page readonly
|
||
FE86000
|
unkown
|
page read and write
|
||
702D000
|
unkown
|
page read and write
|
||
BFEE000
|
unkown
|
page read and write
|
||
7FF503175000
|
unkown
|
page readonly
|
||
7046000
|
unkown
|
page read and write
|
||
89B0000
|
unkown
|
page readonly
|
||
4E49000
|
unkown
|
page read and write
|
||
3350000
|
heap
|
page read and write
|
||
7FF5032C0000
|
unkown
|
page readonly
|
||
7FF50318B000
|
unkown
|
page readonly
|
||
7FF502D3E000
|
unkown
|
page readonly
|
||
7FF502DD1000
|
unkown
|
page readonly
|
||
BEF6000
|
unkown
|
page read and write
|
||
BB0000
|
unkown
|
page readonly
|
||
44D0000
|
unkown
|
page read and write
|
||
B560000
|
unkown
|
page read and write
|
||
2DA0000
|
unkown
|
page readonly
|
||
2F1F000
|
heap
|
page read and write
|
||
7FF503257000
|
unkown
|
page readonly
|
||
3304000
|
heap
|
page read and write
|
||
7FF503239000
|
unkown
|
page readonly
|
||
3D12000
|
heap
|
page read and write
|
||
819F000
|
stack
|
page read and write
|
||
2F1F000
|
heap
|
page read and write
|
||
4545000
|
heap
|
page read and write
|
||
74C2000
|
unkown
|
page read and write
|
||
454B000
|
heap
|
page read and write
|
||
5091000
|
heap
|
page read and write
|
||
34BA000
|
heap
|
page read and write
|
||
B1B000
|
heap
|
page read and write
|
||
3200000
|
heap
|
page read and write
|
||
53F6000
|
unclassified section
|
page read and write
|
||
9D58000
|
unkown
|
page read and write
|
||
7FF502D15000
|
unkown
|
page readonly
|
||
7FFB000
|
stack
|
page read and write
|
||
702D000
|
unkown
|
page read and write
|
||
6F0F000
|
unkown
|
page read and write
|
||
44A0000
|
unkown
|
page read and write
|
||
2C13000
|
heap
|
page read and write
|
||
7FF502C8C000
|
unkown
|
page readonly
|
||
9CF2000
|
unkown
|
page read and write
|
||
FE43000
|
unkown
|
page read and write
|
||
7FF50316E000
|
unkown
|
page readonly
|
||
7FF5031FF000
|
unkown
|
page readonly
|
||
BB0E000
|
stack
|
page read and write
|
||
7FF502CDD000
|
unkown
|
page readonly
|
||
7FF5032DF000
|
unkown
|
page readonly
|
||
7FF502E0D000
|
unkown
|
page readonly
|
||
ECB4000
|
unkown
|
page read and write
|
||
831E000
|
stack
|
page read and write
|
||
7FF503006000
|
unkown
|
page readonly
|
||
4549000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7580000
|
unkown
|
page read and write
|
||
2A30000
|
heap
|
page read and write
|
||
4D41000
|
heap
|
page read and write
|
||
9D0000
|
unkown
|
page read and write
|
||
30CD000
|
unkown
|
page read and write
|
||
810000
|
unkown
|
page readonly
|
||
7FF5031DA000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF503245000
|
unkown
|
page readonly
|
||
7FF5032F7000
|
unkown
|
page readonly
|
||
BFAE000
|
unkown
|
page read and write
|
||
7FF502E43000
|
unkown
|
page readonly
|
||
9269000
|
unkown
|
page read and write
|
||
C00A000
|
unkown
|
page read and write
|
||
6EE6000
|
unkown
|
page read and write
|
||
2F12000
|
heap
|
page read and write
|
||
3082000
|
unkown
|
page read and write
|
||
831E000
|
stack
|
page read and write
|
||
C0E9000
|
unkown
|
page read and write
|
||
A346000
|
unkown
|
page read and write
|
||
7FF502B93000
|
unkown
|
page readonly
|
||
7FF5030DE000
|
unkown
|
page readonly
|
||
7FF50327C000
|
unkown
|
page readonly
|
||
5020000
|
trusted library allocation
|
page read and write
|
||
7FF502DC3000
|
unkown
|
page readonly
|
||
C093000
|
unkown
|
page read and write
|
||
9269000
|
unkown
|
page read and write
|
||
7FF502FAF000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
27FB000
|
stack
|
page read and write
|
||
4E40000
|
trusted library allocation
|
page execute and read and write
|
||
BC30000
|
unkown
|
page read and write
|
||
5020000
|
trusted library allocation
|
page read and write
|
||
ECCC000
|
unkown
|
page read and write
|
||
7FF50328F000
|
unkown
|
page readonly
|
||
7FF5030C9000
|
unkown
|
page readonly
|
||
7FF503287000
|
unkown
|
page readonly
|
||
4370000
|
unkown
|
page read and write
|
||
4EE0000
|
trusted library allocation
|
page read and write
|
||
C135000
|
unkown
|
page read and write
|
||
7FF5030E6000
|
unkown
|
page readonly
|
||
2C13000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3329000
|
heap
|
page read and write
|
||
C01A000
|
unkown
|
page read and write
|
||
BBFA000
|
unkown
|
page read and write
|
||
4378000
|
unkown
|
page read and write
|
||
B4CE000
|
stack
|
page read and write
|
||
7FF50302D000
|
unkown
|
page readonly
|
||
7FF502D6B000
|
unkown
|
page readonly
|
||
8A49000
|
stack
|
page read and write
|
||
448A000
|
unkown
|
page read and write
|
||
2D0E000
|
stack
|
page read and write
|
||
BDF5000
|
unkown
|
page read and write
|
||
3086000
|
unkown
|
page read and write
|
||
4D4D000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
703F000
|
unkown
|
page read and write
|
||
93F6000
|
unkown
|
page read and write
|
||
7FF502DC0000
|
unkown
|
page readonly
|
||
7FF50317C000
|
unkown
|
page readonly
|
||
3010000
|
unkown
|
page read and write
|
||
7FF502B88000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
454D000
|
heap
|
page read and write
|
||
7FF502B8B000
|
unkown
|
page readonly
|
||
30AC000
|
unkown
|
page read and write
|
||
7FF502F22000
|
unkown
|
page readonly
|
||
4EE0000
|
trusted library allocation
|
page read and write
|
||
3088000
|
unkown
|
page read and write
|
||
7549000
|
stack
|
page read and write
|
||
A28000
|
heap
|
page read and write
|
||
7FF50322D000
|
unkown
|
page readonly
|
||
A34D000
|
unkown
|
page read and write
|
||
BEA9000
|
unkown
|
page read and write
|
||
7FF503365000
|
unkown
|
page readonly
|
||
3123000
|
heap
|
page read and write
|
||
2A60000
|
unkown
|
page readonly
|
||
3091000
|
unkown
|
page read and write
|
||
6ED0000
|
unkown
|
page read and write
|
||
7FF5030E4000
|
unkown
|
page readonly
|
||
9330000
|
unkown
|
page read and write
|
||
439B000
|
unkown
|
page read and write
|
||
454B000
|
heap
|
page read and write
|
||
454C000
|
heap
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
C20000
|
system
|
page execute and read and write
|
||
6ECE000
|
unkown
|
page read and write
|
||
7FF502FA9000
|
unkown
|
page readonly
|
||
7550000
|
unkown
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
301B000
|
unkown
|
page read and write
|
||
4547000
|
heap
|
page read and write
|
||
A34A000
|
unkown
|
page read and write
|
||
3498000
|
heap
|
page read and write
|
||
B237000
|
stack
|
page read and write
|
||
3390000
|
trusted library allocation
|
page read and write
|
||
7FF5031AD000
|
unkown
|
page readonly
|
||
A36C000
|
unkown
|
page read and write
|
||
7FF503275000
|
unkown
|
page readonly
|
||
92DD000
|
unkown
|
page read and write
|
||
9D58000
|
unkown
|
page read and write
|
||
2E00000
|
heap
|
page read and write
|
||
8610000
|
unkown
|
page read and write
|
||
9CEA000
|
unkown
|
page read and write
|
||
99FF000
|
stack
|
page read and write
|
||
386F000
|
unclassified section
|
page execute and read and write
|
||
B44E000
|
stack
|
page read and write
|
||
7FF5032DB000
|
unkown
|
page readonly
|
||
91A7000
|
unkown
|
page read and write
|
||
454B000
|
heap
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
B1BF000
|
stack
|
page read and write
|
||
7FF503245000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
7FF502D1B000
|
unkown
|
page readonly
|
||
7FF502F7A000
|
unkown
|
page readonly
|
||
76A0000
|
unkown
|
page readonly
|
||
7FF50324D000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502D25000
|
unkown
|
page readonly
|
||
7FF502B78000
|
unkown
|
page readonly
|
||
2F19000
|
heap
|
page read and write
|
||
2B80000
|
trusted library allocation
|
page read and write
|
||
7FF5031FF000
|
unkown
|
page readonly
|
||
7FF502DCE000
|
unkown
|
page readonly
|
||
9BDE000
|
unkown
|
page read and write
|
||
454D000
|
heap
|
page read and write
|
||
454A000
|
heap
|
page read and write
|
||
7FF503161000
|
unkown
|
page readonly
|
||
7FF502DDC000
|
unkown
|
page readonly
|
||
9CF6000
|
unkown
|
page read and write
|
||
308F000
|
unkown
|
page read and write
|
||
7FF502C4B000
|
unkown
|
page readonly
|
||
6F33000
|
unkown
|
page read and write
|
||
2F10000
|
unkown
|
page readonly
|
||
2F1E000
|
heap
|
page read and write
|
||
76A0000
|
unkown
|
page readonly
|
||
7FF503223000
|
unkown
|
page readonly
|
||
9CF2000
|
unkown
|
page read and write
|
||
90DA000
|
unkown
|
page read and write
|
||
A36F000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
B09B000
|
stack
|
page read and write
|
||
BEE8000
|
unkown
|
page read and write
|
||
7FF502E1A000
|
unkown
|
page readonly
|
||
449A000
|
unkown
|
page read and write
|
||
7FF50331B000
|
unkown
|
page readonly
|
||
4000000
|
heap
|
page read and write
|
||
9BF7000
|
unkown
|
page read and write
|
||
34BA000
|
heap
|
page read and write
|
||
7FF5030B4000
|
unkown
|
page readonly
|
||
C039000
|
unkown
|
page read and write
|
||
84DE000
|
stack
|
page read and write
|
||
454E000
|
heap
|
page read and write
|
||
7FF502D18000
|
unkown
|
page readonly
|
||
A76B000
|
stack
|
page read and write
|
||
2C13000
|
heap
|
page read and write
|
||
34B4000
|
heap
|
page read and write
|
||
7FF502F96000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7FF502D8F000
|
unkown
|
page readonly
|
||
702D000
|
unkown
|
page read and write
|
||
9050000
|
unkown
|
page read and write
|
||
38F0000
|
trusted library allocation
|
page execute and read and write
|
||
9B83000
|
unkown
|
page read and write
|
||
7FF502E43000
|
unkown
|
page readonly
|
||
89C0000
|
unkown
|
page readonly
|
||
7DF411ED0000
|
unkown
|
page readonly
|
||
C039000
|
unkown
|
page read and write
|
||
BE1C000
|
unkown
|
page read and write
|
||
7FF502DC8000
|
unkown
|
page readonly
|
||
352D000
|
direct allocation
|
page execute and read and write
|
||
795D000
|
stack
|
page read and write
|
||
707F000
|
unkown
|
page read and write
|
||
7FF502E02000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
8B5000
|
stack
|
page read and write
|
||
7FF5032C0000
|
unkown
|
page readonly
|
||
5020000
|
heap
|
page read and write
|
||
376F000
|
unkown
|
page read and write
|
||
936E000
|
unkown
|
page read and write
|
||
ECBD000
|
unkown
|
page read and write
|
||
E85000
|
heap
|
page read and write
|
||
2F1D000
|
heap
|
page read and write
|
||
9C09000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7710000
|
unkown
|
page readonly
|
||
9CCF000
|
unkown
|
page read and write
|
||
ECB2000
|
unkown
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
6FBF000
|
unkown
|
page read and write
|
||
6FE3000
|
unkown
|
page read and write
|
||
92DF000
|
unkown
|
page read and write
|
||
7FF5032EB000
|
unkown
|
page readonly
|
||
7FF50328B000
|
unkown
|
page readonly
|
||
2C80000
|
unkown
|
page readonly
|
||
2A50000
|
heap
|
page read and write
|
||
919C000
|
unkown
|
page read and write
|
||
B590000
|
heap
|
page read and write
|
||
7FF503118000
|
unkown
|
page readonly
|
||
2F1B000
|
heap
|
page read and write
|
||
7FF502D1B000
|
unkown
|
page readonly
|
||
704B000
|
unkown
|
page read and write
|
||
BDCB000
|
unkown
|
page read and write
|
||
B580000
|
unkown
|
page read and write
|
||
7FF50334D000
|
unkown
|
page readonly
|
||
30A5000
|
unkown
|
page read and write
|
||
8F0000
|
heap
|
page read and write
|
||
6EE6000
|
unkown
|
page read and write
|
||
7FF50318B000
|
unkown
|
page readonly
|
||
30A5000
|
unkown
|
page read and write
|
||
9D01000
|
unkown
|
page read and write
|
||
DD00000
|
heap
|
page read and write
|
||
2AA0000
|
unkown
|
page read and write
|
||
C08A000
|
unkown
|
page read and write
|
||
30A1000
|
unkown
|
page read and write
|
||
32FD000
|
stack
|
page read and write
|
||
4463000
|
unkown
|
page read and write
|
||
7FF502C30000
|
unkown
|
page readonly
|
||
A346000
|
unkown
|
page read and write
|
||
2F10000
|
heap
|
page read and write
|
||
7FF502D61000
|
unkown
|
page readonly
|
||
3030000
|
unkown
|
page read and write
|
||
2F10000
|
unkown
|
page readonly
|
||
9CF6000
|
unkown
|
page read and write
|
||
7FF50332C000
|
unkown
|
page readonly
|
||
8BC9000
|
stack
|
page read and write
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502E06000
|
unkown
|
page readonly
|
||
BEA9000
|
unkown
|
page read and write
|
||
FE8B000
|
unkown
|
page read and write
|
||
6EC0000
|
unkown
|
page read and write
|
||
DD20000
|
heap
|
page read and write
|
||
7FF503108000
|
unkown
|
page readonly
|
||
30B4000
|
unkown
|
page read and write
|
||
ECA0000
|
unkown
|
page read and write
|
||
2EF2000
|
stack
|
page read and write
|
||
3304000
|
heap
|
page read and write
|
||
BF2E000
|
unkown
|
page read and write
|
||
FE8B000
|
unkown
|
page read and write
|
||
7FF502F22000
|
unkown
|
page readonly
|
||
3F81000
|
heap
|
page read and write
|
||
B009000
|
stack
|
page read and write
|
||
A98F000
|
stack
|
page read and write
|
||
E3CF000
|
stack
|
page read and write
|
||
C0DE000
|
unkown
|
page read and write
|
||
97FC000
|
stack
|
page read and write
|
||
9A7F000
|
stack
|
page read and write
|
||
7FF502E8E000
|
unkown
|
page readonly
|
||
7651000
|
unkown
|
page read and write
|
||
7FF50301B000
|
unkown
|
page readonly
|
||
4546000
|
heap
|
page read and write
|
||
BC19000
|
unkown
|
page read and write
|
||
7FF502DAD000
|
unkown
|
page readonly
|
||
9CF4000
|
unkown
|
page read and write
|
||
3830000
|
unclassified section
|
page execute and read and write
|
||
A34D000
|
unkown
|
page read and write
|
||
7FF5030D9000
|
unkown
|
page readonly
|
||
9AFF000
|
stack
|
page read and write
|
||
C056000
|
unkown
|
page read and write
|
||
7FF5032EE000
|
unkown
|
page readonly
|
||
ABD0000
|
unkown
|
page read and write
|
||
4000000
|
heap
|
page read and write
|
||
ECCC000
|
unkown
|
page read and write
|
||
3F81000
|
heap
|
page read and write
|
||
7DF411EE0000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
7FF502E5E000
|
unkown
|
page readonly
|
||
7FF503020000
|
unkown
|
page readonly
|
||
FEC4000
|
unkown
|
page read and write
|
||
ECC6000
|
unkown
|
page read and write
|
||
2F1B000
|
heap
|
page read and write
|
||
7FF502D91000
|
unkown
|
page readonly
|
||
4EE0000
|
trusted library allocation
|
page read and write
|
||
AA0B000
|
stack
|
page read and write
|
||
2F70000
|
heap
|
page read and write
|
||
BCB9000
|
unkown
|
page read and write
|
||
4E33000
|
unkown
|
page read and write
|
||
36CD000
|
direct allocation
|
page execute and read and write
|
||
501C000
|
heap
|
page read and write
|
||
7FF503130000
|
unkown
|
page readonly
|
||
7FF502D70000
|
unkown
|
page readonly
|
||
7FF502B6C000
|
unkown
|
page readonly
|
||
2F80000
|
trusted library allocation
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
E80000
|
heap
|
page read and write
|
||
8440000
|
unkown
|
page read and write
|
There are 1639 hidden memdumps, click here to show them.