Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
das.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44
2009, Create Time/Date: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page:
1252, Revision Number: {26C6701E-5BA5-48FD-87C5-16BC3575B429}, Number of Words: 10, Subject: GloryDory, Author: OrbitalMast
LLC, Name of Creating Application: GloryDory, Template: ;1033, Comments: This installer database contains the logic and data
required to install GloryDory., Title: Installation Database, Keywords: Installer, MSI, Database, Number of Pages: 200
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\vierm_soft_x64.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\Installer\MSIA029.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Config.Msi\6a9d67.rbs
|
data
|
modified
|
||
|
C:\Windows\Installer\6a9d65.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44
2009, Create Time/Date: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page:
1252, Revision Number: {26C6701E-5BA5-48FD-87C5-16BC3575B429}, Number of Words: 10, Subject: GloryDory, Author: OrbitalMast
LLC, Name of Creating Application: GloryDory, Template: ;1033, Comments: This installer database contains the logic and data
required to install GloryDory., Title: Installation Database, Keywords: Installer, MSI, Database, Number of Pages: 200
|
dropped
|
||
|
C:\Windows\Installer\MSI9E30.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSI9EBE.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSI9EEE.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSI9F0E.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\MSI9F7C.tmp
|
data
|
dropped
|
||
|
C:\Windows\Installer\SourceHash{68C54E68-8D6C-454F-B2BE-2596868E8867}
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Installer\inprogressinstallinfo.ipi
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\~DF02075D584703F341.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF2228D537A12EB273.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF2E6A567C6688D3A4.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF4196DC06748CAC57.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF44D704F3D664C1F7.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF5DC67D3219BCB6E9.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF742F03A360EF2F38.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF7ABF69294C7FCD6D.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DFA7A5BA52F9E65B8B.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DFC6EAAB40A232750B.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFCA08A5764B084AA7.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFF67737DC34EAA32A.TMP
|
data
|
dropped
|
There are 15 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\msiexec.exe
|
"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\das.msi"
|
|
|
|
C:\Windows\System32\msiexec.exe
|
C:\Windows\system32\msiexec.exe /V
|
|
|
|
C:\Windows\Installer\MSIA029.tmp
|
"C:\Windows\Installer\MSIA029.tmp" /DontWait C:/Windows/SysWOW64/rundll32.exe C:\Users\user\AppData\Roaming\vierm_soft_x64.dll,
GetDeepDVCState
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
"C:\Windows\SysWOW64\rundll32.exe" C:\Users\user\AppData\Roaming\vierm_soft_x64.dll, GetDeepDVCState
|
|
|
|
C:\Windows\System32\rundll32.exe
|
"C:\Windows\SysWOW64\rundll32.exe" C:\Users\user\AppData\Roaming\vierm_soft_x64.dll, GetDeepDVCState
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 042055341D46BDE43A4D1CB4423C312E
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://isomicrotich.com/
|
unknown
|
|
|
|
https://isomicrotich.com/test/
|
188.114.97.3
|
|
|
|
https://opewolumeras.com/test/
|
|
||
|
https://isomicrotich.com/test/2476756634-1003j
|
unknown
|
||
|
https://greshunka.com:8041/bazar.php%
|
unknown
|
||
|
https://isomicrotich.com/.7
|
unknown
|
||
|
https://isomicrotich.com/test/c
|
unknown
|
||
|
https://greshunka.com:8041/admin.phpx
|
unknown
|
||
|
https://api.msn.com:443/v1/news/Feed/Windows?t
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV
|
unknown
|
||
|
https://tiguanin.com:8041/admin.phpL
|
unknown
|
||
|
https://greshunka.com:8041/bazar.php.
|
unknown
|
||
|
https://www.msn.com/en-us/sports/other/simone-biles-leads-u-s-women-s-team-to-seventh-straight-world
|
unknown
|
||
|
https://api.msn.com:443/v1/news/Feed/Windows?
|
unknown
|
||
|
https://www.msn.com/en-us/weather/topstories/here-s-who-could-see-above-average-snowfall-this-winter
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phps
|
unknown
|
||
|
https://isomicrotich.com/test/MenuArray_151436-
|
unknown
|
||
|
https://tiguanin.com:8041/admin.phpT
|
unknown
|
||
|
https://excel.office.com
|
unknown
|
||
|
https://www.msn.com/en-us/money/realestate/why-this-florida-city-is-a-safe-haven-from-hurricanes/ar-
|
unknown
|
||
|
https://isomicrotich.com/1n8J
|
unknown
|
||
|
https://isomicrotich.com/test/O
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.php
|
unknown
|
||
|
https://tiguanin.com:8041/admin.phpl4
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpX
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpMM
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpQ
|
unknown
|
||
|
https://bazarunet.com:8041/u
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpT
|
unknown
|
||
|
https://isomicrotich.com/test/z
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpR
|
unknown
|
||
|
https://tiguanin.com:8041/admin.phpo
|
unknown
|
||
|
https://greshunka.com/S%
|
unknown
|
||
|
https://api.msn.com/v1/news/Feed/Windows?activityId=DD4083B70FE54739AB05D6BBA3484042&timeOut=5000&oc
|
unknown
|
||
|
https://bazarunet.com:8041/Y
|
unknown
|
||
|
https://isomicrotich.com/test/r
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpiP5
|
unknown
|
||
|
https://wns.windows.com/
|
unknown
|
||
|
https://isomicrotich.com/test/s
|
unknown
|
||
|
https://greshunka.com/
|
unknown
|
||
|
https://isomicrotich.com/5117-2476756634-1003
|
unknown
|
||
|
https://bazarunet.com:8041/s%
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.phpC
|
unknown
|
||
|
https://greshunka.com:8041/bazar.phpe
|
unknown
|
||
|
https://word.office.com
|
unknown
|
||
|
https://bazarunet.com:8041/net.com:8041/admin.php
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
|
unknown
|
||
|
https://bazarunet.com:8041/P
|
unknown
|
||
|
https://tiguanin.com:8041/azar.php
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
|
unknown
|
||
|
http://r10.o.lencr.org0#
|
unknown
|
||
|
https://bazarunet.com:8041/admin.phpCryptography
|
unknown
|
||
|
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
|
unknown
|
||
|
https://bazarunet.com:8041/:
|
unknown
|
||
|
https://outlook.com
|
unknown
|
||
|
https://greshunka.com:8041/bazar.php
|
unknown
|
||
|
https://isomicrotich.com/3
|
unknown
|
||
|
https://bazarunet.com:8041/bazar.php
|
unknown
|
||
|
https://isomicrotich.com/test/E
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpM
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpK
|
unknown
|
||
|
https://android.notify.windows.com/iOS
|
unknown
|
||
|
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp
|
unknown
|
||
|
https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the
|
unknown
|
||
|
https://tiguanin.com:8041/admin.php/4Q
|
unknown
|
||
|
https://greshunka.com:8041/bazar.php6
|
unknown
|
||
|
https://www.advancedinstaller.com
|
unknown
|
||
|
https://isomicrotich.com/test/7
|
unknown
|
||
|
https://bazarunet.com:8041/in.com:8041/
|
unknown
|
||
|
https://greshunka.com:8041/
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpV
|
unknown
|
||
|
https://bazarunet.com:8041/%
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpT
|
unknown
|
||
|
https://tiguanin.com:8041/j
|
unknown
|
||
|
http://r10.i.lencr.org/0
|
unknown
|
||
|
https://api.msn.com/v1/news/Feed/Windows?
|
unknown
|
||
|
https://isomicrotich.com/T
|
unknown
|
||
|
https://www.msn.com/en-us/lifestyle/lifestyle-buzz/what-to-do-if-a-worst-case-nuclear-scenario-actua
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.phpj
|
unknown
|
||
|
https://bazarunet.com:8041/admin.phpI
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
|
unknown
|
||
|
https://www.pollensense.com/
|
unknown
|
||
|
https://tiguanin.com:8041/:
|
unknown
|
||
|
https://bazarunet.com:8041/admin.phpC
|
unknown
|
||
|
https://tiguanin.com:8041/bazar.php~
|
unknown
|
||
|
https://bazarunet.com:8041/zar.php
|
unknown
|
||
|
https://www.msn.com/en-us/news/politics/kinzinger-has-theory-about-who-next-house-speaker-will-be/vi
|
unknown
|
||
|
https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
|
unknown
|
||
|
http://schemas.micro
|
unknown
|
||
|
https://bazarunet.com:8041/C%m
|
unknown
|
||
|
https://bazarunet.com:8041/K%e
|
unknown
|
||
|
https://bazarunet.com:8041/admin.phpX
|
unknown
|
||
|
https://isomicrotich.com/r
|
unknown
|
||
|
https://www.msn.com/en-us/weather/topstories/us-winter-forecast-for-the-2023-2024-season/ar-AA1hGINt
|
unknown
|
||
|
https://www.msn.com/en-us/news/technology/prehistoric-comet-impacted-earth-and-triggered-the-switch-
|
unknown
|
||
|
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
|
unknown
|
||
|
http://x1.c.lencr.org/0
|
unknown
|
||
|
http://x1.i.lencr.org/0
|
unknown
|
||
|
https://isomicrotich.com/5117-2476756634-1003J&
|
unknown
|
||
|
https://www.msn.com/en-us/money/markets/costco-is-seeing-a-gold-rush-what-s-behind-the-demand-for-it
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
isomicrotich.com
|
188.114.97.3
|
|
|
|
greshunka.com
|
82.115.223.39
|
|
|
|
tiguanin.com
|
80.78.24.30
|
|
|
|
bazarunet.com
|
80.78.24.30
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
188.114.97.3
|
isomicrotich.com
|
European Union
|
|
|
|
82.115.223.39
|
greshunka.com
|
Russian Federation
|
|
|
|
80.78.24.30
|
tiguanin.com
|
Cyprus
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
@explorerframe.dll,-13137
|
|
|
|
unknown
|
@explorerframe.dll,-13138
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
bootstrap.vsto.1
|
|
|
|
unknown
|
Unpacker
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
WMP11.AssocFile.3G2
|
|
|
|
unknown
|
WMP11.AssocFile.3GP
|
|
|
|
unknown
|
WMP11.AssocFile.3GP
|
|
|
|
unknown
|
WMP11.AssocFile.ADTS
|
|
|
|
unknown
|
WMP11.AssocFile.ADTS
|
|
|
|
unknown
|
WMP11.AssocFile.AIFF
|
|
|
|
unknown
|
WMP11.AssocFile.AIFF
|
|
|
|
unknown
|
WMP11.AssocFile.ASF
|
|
|
|
unknown
|
WMP11.AssocFile.ASX
|
|
|
|
unknown
|
WMP11.AssocFile.AU
|
|
|
|
unknown
|
AutoIt3Script
|
|
|
|
unknown
|
WMP11.AssocFile.AVI
|
|
|
|
unknown
|
Paint.Picture
|
|
|
|
unknown
|
CABFolder
|
|
|
|
unknown
|
Microsoft.PowerShellCmdletDefinitionXML.1
|
|
|
|
unknown
|
CSSfile
|
|
|
|
unknown
|
Excel.CSV
|
|
|
|
unknown
|
ddsfile
|
|
|
|
unknown
|
dllfile
|
|
|
|
unknown
|
Word.Document.8
|
|
|
|
unknown
|
Word.DocumentMacroEnabled.12
|
|
|
|
unknown
|
Word.Document.12
|
|
|
|
unknown
|
Word.Template.8
|
|
|
|
unknown
|
Word.TemplateMacroEnabled.12
|
|
|
|
unknown
|
Word.Template.12
|
|
|
|
unknown
|
emffile
|
|
|
|
unknown
|
exefile
|
|
|
|
unknown
|
WMP11.AssocFile.FLAC
|
|
|
|
unknown
|
fonfile
|
|
|
|
unknown
|
giffile
|
|
|
|
unknown
|
htmlfile
|
|
|
|
unknown
|
icofile
|
|
|
|
unknown
|
inffile
|
|
|
|
unknown
|
inifile
|
|
|
|
unknown
|
pjpegfile
|
|
|
|
unknown
|
jpegfile
|
|
|
|
unknown
|
wdpfile
|
|
|
|
unknown
|
lnkfile
|
|
|
|
unknown
|
WMP11.AssocFile.MPEG
|
|
|
|
unknown
|
WMP11.AssocFile.M2TS
|
|
|
|
unknown
|
WMP11.AssocFile.m3u
|
|
|
|
unknown
|
WMP11.AssocFile.M4A
|
|
|
|
unknown
|
WMP11.AssocFile.MP4
|
|
|
|
unknown
|
mhtmlfile
|
|
|
|
unknown
|
WMP11.AssocFile.MIDI
|
|
|
|
unknown
|
WMP11.AssocFile.MK3D
|
|
|
|
unknown
|
WMP11.AssocFile.MKA
|
|
|
|
unknown
|
WMP11.AssocFile.MKV
|
|
|
|
unknown
|
WMP11.AssocFile.MOV
|
|
|
|
unknown
|
WMP11.AssocFile.MP3
|
|
|
|
unknown
|
Outlook.File.msg.15
|
|
|
|
unknown
|
ocxfile
|
|
|
|
unknown
|
PowerPoint.OpenDocumentPresentation.12
|
|
|
|
unknown
|
Excel.OpenDocumentSpreadsheet.12
|
|
|
|
unknown
|
Word.OpenDocumentText.12
|
|
|
|
unknown
|
otffile
|
|
|
|
unknown
|
pngfile
|
|
|
|
unknown
|
PowerPoint.Template.8
|
|
|
|
unknown
|
PowerPoint.TemplateMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Template.12
|
|
|
|
unknown
|
PowerPoint.Addin.12
|
|
|
|
unknown
|
PowerPoint.SlideShowMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.SlideShow.12
|
|
|
|
unknown
|
PowerPoint.Show.8
|
|
|
|
unknown
|
PowerPoint.ShowMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Show.12
|
|
|
|
unknown
|
Microsoft.PowerShellScript.1
|
|
|
|
unknown
|
Microsoft.PowerShellXMLData.1
|
|
|
|
unknown
|
Microsoft.PowerShellData.1
|
|
|
|
unknown
|
Microsoft.PowerShellModule.1
|
|
|
|
unknown
|
Microsoft.PowerShellSessionConfiguration.1
|
|
|
|
unknown
|
rlefile
|
|
|
|
unknown
|
WMP11.AssocFile.MIDI
|
|
|
|
unknown
|
Word.RTF.8
|
|
|
|
unknown
|
SHCmdFile
|
|
|
|
unknown
|
SearchFolder
|
|
|
|
unknown
|
shtmlfile
|
|
|
|
unknown
|
PowerPoint.SlideMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Slide.12
|
|
|
|
unknown
|
sysfile
|
|
|
|
unknown
|
TIFImage.Document
|
|
|
|
unknown
|
WMP11.AssocFile.TTS
|
|
|
|
unknown
|
ttcfile
|
|
|
|
unknown
|
ttffile
|
|
|
|
unknown
|
txtfile
|
|
|
|
unknown
|
WMP11.AssocFile.WAV
|
|
|
|
unknown
|
WMP11.AssocFile.WAX
|
|
|
|
unknown
|
wdpfile
|
|
|
|
unknown
|
WMP11.AssocFile.ASF
|
|
|
|
unknown
|
WMP11.AssocFile.WMA
|
|
|
|
unknown
|
wmffile
|
|
|
|
unknown
|
WMP11.AssocFile.WMV
|
|
|
|
unknown
|
WMP11.AssocFile.ASX
|
|
|
|
unknown
|
WMP11.AssocFile.WPL
|
|
|
|
unknown
|
WMP11.AssocFile.WVX
|
|
|
|
unknown
|
Excel.AddInMacroEnabled
|
|
|
|
unknown
|
Excel.Sheet.8
|
|
|
|
unknown
|
Excel.SheetBinaryMacroEnabled.12
|
|
|
|
unknown
|
Excel.SheetMacroEnabled.12
|
|
|
|
unknown
|
Excel.Sheet.12
|
|
|
|
unknown
|
Excel.Template.8
|
|
|
|
unknown
|
Excel.TemplateMacroEnabled
|
|
|
|
unknown
|
Excel.Template
|
|
|
|
unknown
|
xmlfile
|
|
|
|
unknown
|
xslfile
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Config.Msi\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\6a9d67.rbs
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\6a9d67.rbsLow
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\Microsoft\Installer\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1003\Components\C72CC84B32896524285338B4DFD2D0BB
|
86E45C86C6D8F4542BEB526968E88876
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1003\Components\F5D323A437D662C4E893EB9882AD31BE
|
86E45C86C6D8F4542BEB526968E88876
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2246122658-3693405117-2476756634-1003\Components\125231B250E4E2E4391F06922EAD7B0E
|
86E45C86C6D8F4542BEB526968E88876
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\OrbitalMast LLC\GloryDory\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Users\user\AppData\Roaming\OrbitalMast LLC\
|
||
|
HKEY_CURRENT_USER\SOFTWARE\OrbitalMast LLC\GloryDory
|
Version
|
||
|
HKEY_CURRENT_USER\SOFTWARE\OrbitalMast LLC\GloryDory
|
Path
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8
|
Blob
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8
|
Blob
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8
|
Blob
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8
|
Blob
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
|
CheckSetting
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
There are 199 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
16AD2750000
|
direct allocation
|
page execute and read and write
|
|
|
|
16AD2873000
|
heap
|
page read and write
|
|
|
|
892C000
|
stack
|
page read and write
|
|
|
|
16AD28A2000
|
heap
|
page read and write
|
|
|
|
16AD28A2000
|
heap
|
page read and write
|
|
|
|
16AD2700000
|
direct allocation
|
page read and write
|
|
|
|
16AD28A2000
|
heap
|
page read and write
|
|
|
|
C00000
|
heap
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
7FF55738F000
|
unkown
|
page readonly
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
7FF5573C1000
|
unkown
|
page readonly
|
||
|
A898000
|
unkown
|
page read and write
|
||
|
A00000
|
heap
|
page read and write
|
||
|
77F0000
|
unkown
|
page read and write
|
||
|
9BA0000
|
unkown
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557264000
|
unkown
|
page readonly
|
||
|
7FF5573D5000
|
unkown
|
page readonly
|
||
|
7FF5569FA000
|
unkown
|
page readonly
|
||
|
16AD284B000
|
heap
|
page read and write
|
||
|
7FF557653000
|
unkown
|
page readonly
|
||
|
C59000
|
heap
|
page read and write
|
||
|
C0F3000
|
unkown
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
7FF546F35000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
7FF556FFB000
|
unkown
|
page readonly
|
||
|
7FF556F9E000
|
unkown
|
page readonly
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
B040000
|
unkown
|
page readonly
|
||
|
7E05000
|
stack
|
page read and write
|
||
|
7FF556FFF000
|
unkown
|
page readonly
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
9750000
|
unkown
|
page execute and read and write
|
||
|
9F0000
|
heap
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
F90000
|
unkown
|
page readonly
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
7FF5575E0000
|
unkown
|
page readonly
|
||
|
EF44000
|
unkown
|
page read and write
|
||
|
3460000
|
unkown
|
page read and write
|
||
|
267E000
|
stack
|
page read and write
|
||
|
C1E7000
|
unkown
|
page read and write
|
||
|
C072000
|
unkown
|
page read and write
|
||
|
7FF557531000
|
unkown
|
page readonly
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
16AD284A000
|
heap
|
page read and write
|
||
|
3213000
|
stack
|
page read and write
|
||
|
B1D0000
|
unkown
|
page execute and read and write
|
||
|
51F9000
|
unkown
|
page read and write
|
||
|
B710000
|
unkown
|
page execute and read and write
|
||
|
16AD0E25000
|
heap
|
page read and write
|
||
|
16AD2CE6000
|
heap
|
page read and write
|
||
|
10851000
|
unkown
|
page read and write
|
||
|
A118000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
7FF557393000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7A4B000
|
stack
|
page read and write
|
||
|
7FF557463000
|
unkown
|
page readonly
|
||
|
16AD288D000
|
heap
|
page read and write
|
||
|
A0FC000
|
unkown
|
page read and write
|
||
|
AC80000
|
unkown
|
page execute and read and write
|
||
|
BC00000
|
unkown
|
page readonly
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
1086A000
|
unkown
|
page read and write
|
||
|
7A80000
|
unkown
|
page readonly
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
7DF468971000
|
unkown
|
page execute read
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
46E0000
|
unkown
|
page read and write
|
||
|
7FF557602000
|
unkown
|
page readonly
|
||
|
7FF5574C6000
|
unkown
|
page readonly
|
||
|
A0FF000
|
unkown
|
page read and write
|
||
|
18007D000
|
unkown
|
page readonly
|
||
|
EEC6000
|
unkown
|
page read and write
|
||
|
7C00000
|
unkown
|
page readonly
|
||
|
9780000
|
unkown
|
page execute and read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
900000
|
unkown
|
page readonly
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
16AD284F000
|
heap
|
page read and write
|
||
|
3350000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
7FF5573B0000
|
unkown
|
page readonly
|
||
|
7FF5575BB000
|
unkown
|
page readonly
|
||
|
7FF557293000
|
unkown
|
page readonly
|
||
|
47DB000
|
unkown
|
page read and write
|
||
|
16AD28B2000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
9A90000
|
unkown
|
page execute and read and write
|
||
|
7FF5571A1000
|
unkown
|
page readonly
|
||
|
7FF5573BB000
|
unkown
|
page readonly
|
||
|
2F88000
|
stack
|
page read and write
|
||
|
9730000
|
unkown
|
page execute and read and write
|
||
|
7FF557045000
|
unkown
|
page readonly
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
FB0000
|
unkown
|
page read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
76B0000
|
unkown
|
page read and write
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
9D0000
|
heap
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
A87A000
|
unkown
|
page read and write
|
||
|
71A4000
|
unkown
|
page read and write
|
||
|
7FF55719C000
|
unkown
|
page readonly
|
||
|
A0BD000
|
unkown
|
page read and write
|
||
|
7FF55714F000
|
unkown
|
page readonly
|
||
|
16AD2965000
|
heap
|
page read and write
|
||
|
7318000
|
unkown
|
page read and write
|
||
|
C5D2000
|
unkown
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
263F000
|
stack
|
page read and write
|
||
|
9AD0000
|
unkown
|
page execute and read and write
|
||
|
7FF557607000
|
unkown
|
page readonly
|
||
|
B630000
|
unkown
|
page execute and read and write
|
||
|
10A5000
|
heap
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
72C3000
|
unkown
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
7FF5573FF000
|
unkown
|
page readonly
|
||
|
3220000
|
unkown
|
page readonly
|
||
|
C6D000
|
heap
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
7FF55733F000
|
unkown
|
page readonly
|
||
|
47C000
|
stack
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
B82A000
|
stack
|
page read and write
|
||
|
7FF5570C5000
|
unkown
|
page readonly
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
9500000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
472C000
|
unkown
|
page read and write
|
||
|
9E0F000
|
stack
|
page read and write
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
7FF557106000
|
unkown
|
page readonly
|
||
|
89C0000
|
unkown
|
page read and write
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
BEBF000
|
stack
|
page read and write
|
||
|
16AD28D2000
|
heap
|
page read and write
|
||
|
B720000
|
unkown
|
page execute and read and write
|
||
|
BFD0000
|
unkown
|
page read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
180000000
|
unkown
|
page readonly
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
27AF000
|
stack
|
page read and write
|
||
|
1020000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
902B000
|
unkown
|
page read and write
|
||
|
76B0000
|
unkown
|
page read and write
|
||
|
486A000
|
unkown
|
page read and write
|
||
|
EF04000
|
unkown
|
page read and write
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
8D74000
|
unkown
|
page read and write
|
||
|
C523000
|
unkown
|
page read and write
|
||
|
7DF468991000
|
unkown
|
page execute read
|
||
|
7FF557250000
|
unkown
|
page readonly
|
||
|
7FF557065000
|
unkown
|
page readonly
|
||
|
715C000
|
unkown
|
page read and write
|
||
|
9510000
|
unkown
|
page execute and read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
1087E000
|
unkown
|
page read and write
|
||
|
16AD2850000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C20C000
|
unkown
|
page read and write
|
||
|
7FF5573D5000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD285C000
|
heap
|
page read and write
|
||
|
28AF000
|
stack
|
page read and write
|
||
|
16AD2853000
|
heap
|
page read and write
|
||
|
16AD28BE000
|
heap
|
page read and write
|
||
|
A8D3000
|
unkown
|
page read and write
|
||
|
C04B000
|
unkown
|
page read and write
|
||
|
7FF5570FE000
|
unkown
|
page readonly
|
||
|
7FF5575B9000
|
unkown
|
page readonly
|
||
|
54B000
|
stack
|
page read and write
|
||
|
2D85000
|
stack
|
page read and write
|
||
|
716B000
|
unkown
|
page read and write
|
||
|
C072000
|
unkown
|
page read and write
|
||
|
7FF5572C1000
|
unkown
|
page readonly
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
842F000
|
stack
|
page read and write
|
||
|
8360000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
A157000
|
unkown
|
page read and write
|
||
|
7FF556E8D000
|
unkown
|
page readonly
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
4769000
|
unkown
|
page read and write
|
||
|
485A000
|
unkown
|
page read and write
|
||
|
9AA0000
|
unkown
|
page execute and read and write
|
||
|
C55C000
|
unkown
|
page read and write
|
||
|
7E03000
|
stack
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
8B53000
|
unkown
|
page read and write
|
||
|
7FF5575FC000
|
unkown
|
page readonly
|
||
|
E280000
|
unkown
|
page read and write
|
||
|
8D80000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
90DB000
|
unkown
|
page read and write
|
||
|
7FF557009000
|
unkown
|
page readonly
|
||
|
8350000
|
unkown
|
page execute and read and write
|
||
|
7300000
|
unkown
|
page read and write
|
||
|
16AD0DDD000
|
heap
|
page read and write
|
||
|
5B0000
|
heap
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
7FF55764C000
|
unkown
|
page readonly
|
||
|
9760000
|
unkown
|
page execute and read and write
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
9854000
|
unkown
|
page read and write
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
7FF5570BB000
|
unkown
|
page readonly
|
||
|
41B047B000
|
stack
|
page read and write
|
||
|
7803000
|
unkown
|
page read and write
|
||
|
7C60000
|
unkown
|
page execute and read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
7FF5575D5000
|
unkown
|
page readonly
|
||
|
C50000
|
heap
|
page read and write
|
||
|
7FF55741A000
|
unkown
|
page readonly
|
||
|
E33B000
|
unkown
|
page read and write
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
16AD0E27000
|
heap
|
page read and write
|
||
|
7FF55732D000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7169000
|
unkown
|
page read and write
|
||
|
C1F5000
|
unkown
|
page read and write
|
||
|
7FF5570C5000
|
unkown
|
page readonly
|
||
|
7BC1000
|
unkown
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
E13B000
|
stack
|
page read and write
|
||
|
7FF556E66000
|
unkown
|
page readonly
|
||
|
C5BE000
|
unkown
|
page read and write
|
||
|
A858000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
9B60000
|
unkown
|
page execute and read and write
|
||
|
7FF55714D000
|
unkown
|
page readonly
|
||
|
A0FF000
|
unkown
|
page read and write
|
||
|
16AD2D9A000
|
heap
|
page read and write
|
||
|
7178000
|
unkown
|
page read and write
|
||
|
A8D3000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD0E3D000
|
heap
|
page read and write
|
||
|
B290000
|
unkown
|
page execute and read and write
|
||
|
7FF55741C000
|
unkown
|
page readonly
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
9F0E000
|
stack
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
7FF556E25000
|
unkown
|
page readonly
|
||
|
7FF5574F4000
|
unkown
|
page readonly
|
||
|
7FF55761F000
|
unkown
|
page readonly
|
||
|
16AD281F000
|
heap
|
page read and write
|
||
|
C4A3000
|
unkown
|
page read and write
|
||
|
8370000
|
unkown
|
page execute and read and write
|
||
|
16AD27C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573A9000
|
unkown
|
page readonly
|
||
|
7FF557568000
|
unkown
|
page readonly
|
||
|
C31000
|
unkown
|
page readonly
|
||
|
A0A5000
|
unkown
|
page read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
7FF556FFB000
|
unkown
|
page readonly
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7FF557249000
|
unkown
|
page readonly
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
8AE6000
|
unkown
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
2B10000
|
heap
|
page read and write
|
||
|
7FF5573EA000
|
unkown
|
page readonly
|
||
|
BBBB000
|
stack
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2875000
|
heap
|
page read and write
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
9AB0000
|
unkown
|
page execute and read and write
|
||
|
16AD2D9A000
|
heap
|
page read and write
|
||
|
718B000
|
unkown
|
page read and write
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
7FF5570D4000
|
unkown
|
page readonly
|
||
|
7FF5572B6000
|
unkown
|
page readonly
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
F34000
|
unkown
|
page execute and read and write
|
||
|
9B70000
|
unkown
|
page execute and read and write
|
||
|
8530000
|
unkown
|
page readonly
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573E2000
|
unkown
|
page readonly
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
7FF55708D000
|
unkown
|
page readonly
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
7FF5570CA000
|
unkown
|
page readonly
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
8510000
|
unkown
|
page read and write
|
||
|
7FF557174000
|
unkown
|
page readonly
|
||
|
47DB000
|
unkown
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
7FF5571AC000
|
unkown
|
page readonly
|
||
|
7FF557429000
|
unkown
|
page readonly
|
||
|
7FF55760F000
|
unkown
|
page readonly
|
||
|
798D000
|
stack
|
page read and write
|
||
|
7178000
|
unkown
|
page read and write
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
16AD0FD5000
|
heap
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
3460000
|
unkown
|
page read and write
|
||
|
C206000
|
unkown
|
page read and write
|
||
|
7FF557554000
|
unkown
|
page readonly
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
5FE000
|
stack
|
page read and write
|
||
|
8380000
|
unkown
|
page execute and read and write
|
||
|
16AD27EA000
|
heap
|
page read and write
|
||
|
16AD288A000
|
heap
|
page read and write
|
||
|
B7AA000
|
stack
|
page read and write
|
||
|
F8C000
|
unkown
|
page read and write
|
||
|
46E0000
|
unkown
|
page read and write
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
46F6000
|
unkown
|
page read and write
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
A8DD000
|
unkown
|
page read and write
|
||
|
B640000
|
unkown
|
page execute and read and write
|
||
|
7FF557280000
|
unkown
|
page readonly
|
||
|
79A0000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
10864000
|
unkown
|
page read and write
|
||
|
9AB0000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF55753D000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD0D40000
|
heap
|
page read and write
|
||
|
7FF55700F000
|
unkown
|
page readonly
|
||
|
AFFF000
|
stack
|
page read and write
|
||
|
16AD0E3C000
|
heap
|
page read and write
|
||
|
7FF556E9A000
|
unkown
|
page readonly
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD2DEC000
|
heap
|
page read and write
|
||
|
16AD2DC7000
|
heap
|
page read and write
|
||
|
C20000
|
unkown
|
page read and write
|
||
|
E33B000
|
unkown
|
page read and write
|
||
|
8810000
|
unkown
|
page readonly
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
16AD0E2A000
|
heap
|
page read and write
|
||
|
717E000
|
unkown
|
page read and write
|
||
|
7FF557579000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD28B1000
|
heap
|
page read and write
|
||
|
16AD28BB000
|
heap
|
page read and write
|
||
|
7FF557571000
|
unkown
|
page readonly
|
||
|
842F000
|
stack
|
page read and write
|
||
|
73C5000
|
stack
|
page read and write
|
||
|
3256000
|
unkown
|
page read and write
|
||
|
46F6000
|
unkown
|
page read and write
|
||
|
9CDC000
|
stack
|
page read and write
|
||
|
486A000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
B370000
|
unkown
|
page execute and read and write
|
||
|
A114000
|
unkown
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
9021000
|
unkown
|
page read and write
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
F00000
|
unkown
|
page execute and read and write
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
7173000
|
unkown
|
page read and write
|
||
|
2E80000
|
unkown
|
page execute and read and write
|
||
|
94E0000
|
unkown
|
page execute and read and write
|
||
|
16AD28B1000
|
heap
|
page read and write
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
7FF55745B000
|
unkown
|
page readonly
|
||
|
7900000
|
unkown
|
page execute and read and write
|
||
|
7FF5573D8000
|
unkown
|
page readonly
|
||
|
7FF55750F000
|
unkown
|
page readonly
|
||
|
99E0000
|
unkown
|
page execute and read and write
|
||
|
16AD0D30000
|
heap
|
page readonly
|
||
|
A858000
|
unkown
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
EFC000
|
stack
|
page read and write
|
||
|
7FF5573F3000
|
unkown
|
page readonly
|
||
|
16AD28B8000
|
heap
|
page read and write
|
||
|
16AD28B9000
|
heap
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55706A000
|
unkown
|
page readonly
|
||
|
89C0000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55750F000
|
unkown
|
page readonly
|
||
|
7FF557037000
|
unkown
|
page readonly
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
C5BE000
|
unkown
|
page read and write
|
||
|
16AD0DDD000
|
heap
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
1441000
|
unkown
|
page readonly
|
||
|
7FF557285000
|
unkown
|
page readonly
|
||
|
7FF55708D000
|
unkown
|
page readonly
|
||
|
7FF5570F7000
|
unkown
|
page readonly
|
||
|
1060000
|
unkown
|
page read and write
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
F8C000
|
unkown
|
page write copy
|
||
|
AF6C000
|
stack
|
page read and write
|
||
|
C063000
|
unkown
|
page read and write
|
||
|
7FF556FC4000
|
unkown
|
page readonly
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
B320000
|
unkown
|
page execute and read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
7FF546F35000
|
unkown
|
page readonly
|
||
|
8FE1000
|
unkown
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF55724C000
|
unkown
|
page readonly
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
273F85000
|
direct allocation
|
page execute and read and write
|
||
|
3230000
|
unkown
|
page read and write
|
||
|
16AD0DB7000
|
heap
|
page read and write
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
995E000
|
stack
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
B6E0000
|
unkown
|
page execute and read and write
|
||
|
7FF557456000
|
unkown
|
page readonly
|
||
|
7FF557393000
|
unkown
|
page readonly
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
16AD2CE1000
|
heap
|
page read and write
|
||
|
7FF5570B5000
|
unkown
|
page readonly
|
||
|
7FF5574BD000
|
unkown
|
page readonly
|
||
|
B9A0000
|
unkown
|
page execute and read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
9F8F000
|
stack
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
F40000
|
unkown
|
page execute and read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
7FF55725B000
|
unkown
|
page readonly
|
||
|
16AD27EB000
|
heap
|
page read and write
|
||
|
7FF5575AB000
|
unkown
|
page readonly
|
||
|
7DF56AD85000
|
unkown
|
page readonly
|
||
|
7FF557416000
|
unkown
|
page readonly
|
||
|
A8CA000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
A4B000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
A129000
|
unkown
|
page read and write
|
||
|
C559000
|
unkown
|
page read and write
|
||
|
2F90000
|
unkown
|
page readonly
|
||
|
7FF5574EF000
|
unkown
|
page readonly
|
||
|
8DAD000
|
unkown
|
page read and write
|
||
|
F10000
|
unkown
|
page execute and read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
7FF5571B3000
|
unkown
|
page readonly
|
||
|
4732000
|
unkown
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
7FF5569E8000
|
unkown
|
page readonly
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
9BC0000
|
unkown
|
page execute and read and write
|
||
|
10851000
|
unkown
|
page read and write
|
||
|
10852000
|
unkown
|
page read and write
|
||
|
7A60000
|
unkown
|
page readonly
|
||
|
7DF457370000
|
direct allocation
|
page execute read
|
||
|
3269000
|
unkown
|
page read and write
|
||
|
718B000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55730C000
|
unkown
|
page readonly
|
||
|
7FF556E85000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7FF55731B000
|
unkown
|
page readonly
|
||
|
B8D0000
|
unkown
|
page execute and read and write
|
||
|
273F41000
|
direct allocation
|
page execute and read and write
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
50B0000
|
unkown
|
page write copy
|
||
|
7FF55747D000
|
unkown
|
page readonly
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
288A000
|
heap
|
page read and write
|
||
|
7FF55731B000
|
unkown
|
page readonly
|
||
|
EF04000
|
unkown
|
page read and write
|
||
|
C5D2000
|
unkown
|
page read and write
|
||
|
1441000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7FF557095000
|
unkown
|
page readonly
|
||
|
8D78000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
7D8E000
|
stack
|
page read and write
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
7FF557602000
|
unkown
|
page readonly
|
||
|
7276000
|
unkown
|
page read and write
|
||
|
7FF557302000
|
unkown
|
page readonly
|
||
|
16AD28B9000
|
heap
|
page read and write
|
||
|
16AD0D61000
|
heap
|
page read and write
|
||
|
73D0000
|
unkown
|
page read and write
|
||
|
16AD2D9A000
|
heap
|
page read and write
|
||
|
E60000
|
unkown
|
page readonly
|
||
|
B070000
|
unkown
|
page read and write
|
||
|
7FF557106000
|
unkown
|
page readonly
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
4880000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
3253000
|
unkown
|
page read and write
|
||
|
7FF55756D000
|
unkown
|
page readonly
|
||
|
7BC1000
|
unkown
|
page read and write
|
||
|
7FF5574F1000
|
unkown
|
page readonly
|
||
|
16AD284A000
|
heap
|
page read and write
|
||
|
7FF557210000
|
unkown
|
page readonly
|
||
|
A0BF000
|
unkown
|
page read and write
|
||
|
16AD2DBF000
|
heap
|
page read and write
|
||
|
C5BE000
|
unkown
|
page read and write
|
||
|
7FF557042000
|
unkown
|
page readonly
|
||
|
7FF55714A000
|
unkown
|
page readonly
|
||
|
4830000
|
unkown
|
page read and write
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
7FF5575D0000
|
unkown
|
page readonly
|
||
|
16AD2D9A000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
9D8E000
|
stack
|
page read and write
|
||
|
7FF55722A000
|
unkown
|
page readonly
|
||
|
7FF5570C1000
|
unkown
|
page readonly
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
7FF557669000
|
unkown
|
page readonly
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
910000
|
unkown
|
page readonly
|
||
|
8DAD000
|
unkown
|
page read and write
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
84E0000
|
unkown
|
page readonly
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
E260000
|
unkown
|
page read and write
|
||
|
7FF5572C1000
|
unkown
|
page readonly
|
||
|
C2F000
|
stack
|
page read and write
|
||
|
46F0000
|
unkown
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD0D9A000
|
heap
|
page read and write
|
||
|
9F0000
|
unkown
|
page readonly
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
7FF5575EA000
|
unkown
|
page readonly
|
||
|
7DF468991000
|
unkown
|
page execute read
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557387000
|
unkown
|
page readonly
|
||
|
F31000
|
unkown
|
page execute and read and write
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
73C5000
|
stack
|
page read and write
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
7DF468981000
|
unkown
|
page execute read
|
||
|
10855000
|
unkown
|
page read and write
|
||
|
97E1000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
C479000
|
unkown
|
page read and write
|
||
|
7FF55725B000
|
unkown
|
page readonly
|
||
|
16AD0D48000
|
heap
|
page read and write
|
||
|
16AD0FD0000
|
heap
|
page read and write
|
||
|
B628000
|
stack
|
page read and write
|
||
|
7FF556E98000
|
unkown
|
page readonly
|
||
|
C427000
|
unkown
|
page read and write
|
||
|
73F0000
|
unkown
|
page read and write
|
||
|
8530000
|
unkown
|
page readonly
|
||
|
C4A3000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF556F31000
|
unkown
|
page readonly
|
||
|
7FF5575B1000
|
unkown
|
page readonly
|
||
|
7DF4689A1000
|
unkown
|
page execute read
|
||
|
7FF5569FA000
|
unkown
|
page readonly
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
7FF5572B6000
|
unkown
|
page readonly
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
A0BF000
|
unkown
|
page read and write
|
||
|
C6D000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
A850000
|
unkown
|
page read and write
|
||
|
9F8F000
|
stack
|
page read and write
|
||
|
B030000
|
unkown
|
page execute and read and write
|
||
|
4820000
|
unkown
|
page read and write
|
||
|
717C000
|
unkown
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
B8E0000
|
unkown
|
page execute and read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
16AD0E2A000
|
heap
|
page read and write
|
||
|
A37000
|
heap
|
page read and write
|
||
|
B330000
|
unkown
|
page execute and read and write
|
||
|
1087F000
|
unkown
|
page read and write
|
||
|
7FF5575BD000
|
unkown
|
page readonly
|
||
|
1081A000
|
heap
|
page read and write
|
||
|
7FF5570A6000
|
unkown
|
page readonly
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
3440000
|
unkown
|
page readonly
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
7FF557627000
|
unkown
|
page readonly
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
A0B9000
|
unkown
|
page read and write
|
||
|
7FF5573DE000
|
unkown
|
page readonly
|
||
|
7FF55752E000
|
unkown
|
page readonly
|
||
|
16AD0DDC000
|
heap
|
page read and write
|
||
|
8D6A000
|
unkown
|
page read and write
|
||
|
180074000
|
unkown
|
page write copy
|
||
|
16AD28C5000
|
heap
|
page read and write
|
||
|
7FF5572AC000
|
unkown
|
page readonly
|
||
|
7FF55738F000
|
unkown
|
page readonly
|
||
|
9E8E000
|
stack
|
page read and write
|
||
|
7FF55700F000
|
unkown
|
page readonly
|
||
|
9BE0000
|
unkown
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2D08000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
A8DE000
|
unkown
|
page read and write
|
||
|
F10000
|
unkown
|
page read and write
|
||
|
7FF557437000
|
unkown
|
page readonly
|
||
|
C481000
|
unkown
|
page read and write
|
||
|
7FF557420000
|
unkown
|
page readonly
|
||
|
7FF5575C5000
|
unkown
|
page readonly
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
B340000
|
unkown
|
page execute and read and write
|
||
|
C04F000
|
unkown
|
page read and write
|
||
|
41B04FE000
|
stack
|
page read and write
|
||
|
1080000
|
unkown
|
page readonly
|
||
|
7FF5575A1000
|
unkown
|
page readonly
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
F30000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
717A000
|
unkown
|
page read and write
|
||
|
78E0000
|
unkown
|
page execute and read and write
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
16AD27A0000
|
direct allocation
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
1081A000
|
heap
|
page read and write
|
||
|
7FF557589000
|
unkown
|
page readonly
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
9854000
|
unkown
|
page read and write
|
||
|
D14000
|
heap
|
page read and write
|
||
|
16AD27E0000
|
heap
|
page read and write
|
||
|
10864000
|
unkown
|
page read and write
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
7A50000
|
unkown
|
page readonly
|
||
|
8FC000
|
stack
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
8850000
|
unkown
|
page execute and read and write
|
||
|
2E0A000
|
stack
|
page read and write
|
||
|
3450000
|
unkown
|
page read and write
|
||
|
C5CE000
|
unkown
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
4781000
|
unkown
|
page read and write
|
||
|
B390000
|
unkown
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
16AD2816000
|
heap
|
page read and write
|
||
|
7FF5570E7000
|
unkown
|
page readonly
|
||
|
C00000
|
heap
|
page read and write
|
||
|
7FF5573DE000
|
unkown
|
page readonly
|
||
|
7FF557302000
|
unkown
|
page readonly
|
||
|
9790000
|
unkown
|
page execute and read and write
|
||
|
B030000
|
unkown
|
page readonly
|
||
|
16AD28B1000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF55707D000
|
unkown
|
page readonly
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
16AD0D64000
|
heap
|
page read and write
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
7FF5575EA000
|
unkown
|
page readonly
|
||
|
2D0B000
|
stack
|
page read and write
|
||
|
16AD0E04000
|
heap
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
8D72000
|
unkown
|
page read and write
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
EEE000
|
stack
|
page read and write
|
||
|
7FF557062000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575FC000
|
unkown
|
page readonly
|
||
|
7FF557599000
|
unkown
|
page readonly
|
||
|
BF3F000
|
stack
|
page read and write
|
||
|
18007C000
|
unkown
|
page write copy
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
E2A0000
|
heap
|
page read and write
|
||
|
7FF556F87000
|
unkown
|
page readonly
|
||
|
A85E000
|
unkown
|
page read and write
|
||
|
16AD0E27000
|
heap
|
page read and write
|
||
|
E4FB000
|
stack
|
page read and write
|
||
|
4810000
|
unkown
|
page read and write
|
||
|
7FF557257000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
910000
|
unkown
|
page readonly
|
||
|
A85A000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7E10000
|
unkown
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
2C8E000
|
stack
|
page read and write
|
||
|
7FF55703C000
|
unkown
|
page readonly
|
||
|
B060000
|
unkown
|
page execute and read and write
|
||
|
7FF557187000
|
unkown
|
page readonly
|
||
|
732E000
|
unkown
|
page read and write
|
||
|
7FF556E98000
|
unkown
|
page readonly
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
E290000
|
unkown
|
page read and write
|
||
|
51F9000
|
unkown
|
page read and write
|
||
|
7FF557352000
|
unkown
|
page readonly
|
||
|
7FF557187000
|
unkown
|
page readonly
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
7FF556A1B000
|
unkown
|
page readonly
|
||
|
A873000
|
unkown
|
page read and write
|
||
|
16AD2850000
|
heap
|
page read and write
|
||
|
A877000
|
unkown
|
page read and write
|
||
|
7DF468990000
|
unkown
|
page readonly
|
||
|
F00000
|
unkown
|
page read and write
|
||
|
16AD2DF9000
|
heap
|
page read and write
|
||
|
C5D6000
|
unkown
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
7FF556FD2000
|
unkown
|
page readonly
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
71FC000
|
unkown
|
page read and write
|
||
|
C428000
|
unkown
|
page read and write
|
||
|
A154000
|
unkown
|
page read and write
|
||
|
16AD28AB000
|
heap
|
page read and write
|
||
|
7FF5573E6000
|
unkown
|
page readonly
|
||
|
4732000
|
unkown
|
page read and write
|
||
|
7FF557501000
|
unkown
|
page readonly
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
7FF5571DF000
|
unkown
|
page readonly
|
||
|
7FF5574AD000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
B360000
|
unkown
|
page execute and read and write
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
7173000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
7FF5572C9000
|
unkown
|
page readonly
|
||
|
C3FC000
|
unkown
|
page read and write
|
||
|
7FF556F87000
|
unkown
|
page readonly
|
||
|
7FF55726A000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
E2A0000
|
heap
|
page read and write
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
7FF557210000
|
unkown
|
page readonly
|
||
|
8D70000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557476000
|
unkown
|
page readonly
|
||
|
C123000
|
unkown
|
page read and write
|
||
|
7FF557239000
|
unkown
|
page readonly
|
||
|
8350000
|
unkown
|
page execute and read and write
|
||
|
7FF557148000
|
unkown
|
page readonly
|
||
|
BBD0000
|
unkown
|
page readonly
|
||
|
7FF55751D000
|
unkown
|
page readonly
|
||
|
7FF55710A000
|
unkown
|
page readonly
|
||
|
8D7A000
|
unkown
|
page read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
7FF557352000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
8D74000
|
unkown
|
page read and write
|
||
|
7140000
|
unkown
|
page read and write
|
||
|
732B000
|
unkown
|
page read and write
|
||
|
7DF468980000
|
unkown
|
page readonly
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
7FF5571AC000
|
unkown
|
page readonly
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
BC10000
|
unkown
|
page read and write
|
||
|
7FF5574B3000
|
unkown
|
page readonly
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
7FF557382000
|
unkown
|
page readonly
|
||
|
C0F9000
|
unkown
|
page read and write
|
||
|
7FF5569F1000
|
unkown
|
page readonly
|
||
|
1085E000
|
unkown
|
page read and write
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
4800000
|
unkown
|
page read and write
|
||
|
9530000
|
unkown
|
page execute and read and write
|
||
|
B650000
|
unkown
|
page execute and read and write
|
||
|
C1DD000
|
unkown
|
page read and write
|
||
|
77F0000
|
unkown
|
page read and write
|
||
|
E280000
|
unkown
|
page read and write
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
16AD2DC7000
|
heap
|
page read and write
|
||
|
7FF55702F000
|
unkown
|
page readonly
|
||
|
B1B0000
|
unkown
|
page execute and read and write
|
||
|
84DC000
|
stack
|
page read and write
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
7FF55710F000
|
unkown
|
page readonly
|
||
|
C0FB000
|
unkown
|
page read and write
|
||
|
C57A000
|
unkown
|
page read and write
|
||
|
7FF556F90000
|
unkown
|
page readonly
|
||
|
8390000
|
unkown
|
page execute and read and write
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
10810000
|
heap
|
page read and write
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
A0B9000
|
unkown
|
page read and write
|
||
|
C04F000
|
unkown
|
page read and write
|
||
|
180077000
|
unkown
|
page readonly
|
||
|
7FF557661000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575D0000
|
unkown
|
page readonly
|
||
|
7FF5573E2000
|
unkown
|
page readonly
|
||
|
16AD0B90000
|
heap
|
page read and write
|
||
|
8DA6000
|
unkown
|
page read and write
|
||
|
F30000
|
unkown
|
page readonly
|
||
|
7FF5570C1000
|
unkown
|
page readonly
|
||
|
A218000
|
unkown
|
page read and write
|
||
|
E260000
|
unkown
|
page read and write
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
97B0000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
B5AE000
|
stack
|
page read and write
|
||
|
1080000
|
unkown
|
page readonly
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
F31000
|
unkown
|
page execute read
|
||
|
7FF55704A000
|
unkown
|
page readonly
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
7FF5572B4000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD288E000
|
heap
|
page read and write
|
||
|
7FF556FC4000
|
unkown
|
page readonly
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
1085D000
|
unkown
|
page read and write
|
||
|
7FF557589000
|
unkown
|
page readonly
|
||
|
7FF5570BB000
|
unkown
|
page readonly
|
||
|
8CDD000
|
stack
|
page read and write
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
7FF557429000
|
unkown
|
page readonly
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
902C000
|
unkown
|
page read and write
|
||
|
B1A0000
|
unkown
|
page read and write
|
||
|
7FF5575BF000
|
unkown
|
page readonly
|
||
|
7FF55728F000
|
unkown
|
page readonly
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
7FF55726C000
|
unkown
|
page readonly
|
||
|
7FF556E85000
|
unkown
|
page readonly
|
||
|
7FF557554000
|
unkown
|
page readonly
|
||
|
A810000
|
unkown
|
page read and write
|
||
|
8D68000
|
unkown
|
page read and write
|
||
|
16AD28B2000
|
heap
|
page read and write
|
||
|
4800000
|
unkown
|
page read and write
|
||
|
A118000
|
unkown
|
page read and write
|
||
|
EFE000
|
stack
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557257000
|
unkown
|
page readonly
|
||
|
7FF556E66000
|
unkown
|
page readonly
|
||
|
3220000
|
unkown
|
page readonly
|
||
|
7FF55728F000
|
unkown
|
page readonly
|
||
|
7DF468971000
|
unkown
|
page execute read
|
||
|
7FF557330000
|
unkown
|
page readonly
|
||
|
C4B0000
|
unkown
|
page read and write
|
||
|
16AD27E1000
|
heap
|
page read and write
|
||
|
7FF556FF3000
|
unkown
|
page readonly
|
||
|
29AF000
|
stack
|
page read and write
|
||
|
7FF55742B000
|
unkown
|
page readonly
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
7FF5575B1000
|
unkown
|
page readonly
|
||
|
7FF55714F000
|
unkown
|
page readonly
|
||
|
8DB0000
|
unkown
|
page read and write
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C2D3000
|
unkown
|
page read and write
|
||
|
16AD0E2B000
|
heap
|
page read and write
|
||
|
A156000
|
unkown
|
page read and write
|
||
|
7B99000
|
stack
|
page read and write
|
||
|
7FF557045000
|
unkown
|
page readonly
|
||
|
7FF557487000
|
unkown
|
page readonly
|
||
|
7FF557437000
|
unkown
|
page readonly
|
||
|
B1E0000
|
unkown
|
page execute and read and write
|
||
|
7FF5575BD000
|
unkown
|
page readonly
|
||
|
7FF5574F9000
|
unkown
|
page readonly
|
||
|
16AD2D1B000
|
heap
|
page read and write
|
||
|
7FF557033000
|
unkown
|
page readonly
|
||
|
7FF5570D6000
|
unkown
|
page readonly
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
E4FB000
|
stack
|
page read and write
|
||
|
1023000
|
heap
|
page read and write
|
||
|
B080000
|
unkown
|
page read and write
|
||
|
A129000
|
unkown
|
page read and write
|
||
|
72C3000
|
unkown
|
page read and write
|
||
|
7FF546F2F000
|
unkown
|
page readonly
|
||
|
7FF557531000
|
unkown
|
page readonly
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
F77000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
C10B000
|
unkown
|
page read and write
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
7162000
|
unkown
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE0000
|
heap
|
page read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
16AD0D9A000
|
heap
|
page read and write
|
||
|
16AD2814000
|
heap
|
page read and write
|
||
|
3230000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
8D7A000
|
unkown
|
page read and write
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
9BB0000
|
unkown
|
page execute and read and write
|
||
|
97E1000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
8FE4000
|
unkown
|
page read and write
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
16AD28B5000
|
heap
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
4785000
|
unkown
|
page read and write
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
B190000
|
unkown
|
page execute and read and write
|
||
|
C101000
|
unkown
|
page read and write
|
||
|
16AD28E2000
|
heap
|
page read and write
|
||
|
AE2B000
|
stack
|
page read and write
|
||
|
9720000
|
unkown
|
page execute and read and write
|
||
|
7FF557239000
|
unkown
|
page readonly
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
16AD2D0A000
|
heap
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
10864000
|
unkown
|
page read and write
|
||
|
7FF556E75000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
83A0000
|
unkown
|
page execute and read and write
|
||
|
7FF5573B0000
|
unkown
|
page readonly
|
||
|
16AD28CC000
|
heap
|
page read and write
|
||
|
7306000
|
unkown
|
page read and write
|
||
|
32C9000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF5572D4000
|
unkown
|
page readonly
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
7FF557501000
|
unkown
|
page readonly
|
||
|
A114000
|
unkown
|
page read and write
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
7FF557617000
|
unkown
|
page readonly
|
||
|
C58E000
|
unkown
|
page read and write
|
||
|
7160000
|
unkown
|
page read and write
|
||
|
A8D3000
|
unkown
|
page read and write
|
||
|
7FF557285000
|
unkown
|
page readonly
|
||
|
AFFF000
|
stack
|
page read and write
|
||
|
ACA0000
|
unkown
|
page execute and read and write
|
||
|
A0A5000
|
unkown
|
page read and write
|
||
|
7FF556E6C000
|
unkown
|
page readonly
|
||
|
7FF556F26000
|
unkown
|
page readonly
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
16AD2D1B000
|
heap
|
page read and write
|
||
|
C4A3000
|
unkown
|
page read and write
|
||
|
7FF5570FE000
|
unkown
|
page readonly
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
7FF556E75000
|
unkown
|
page readonly
|
||
|
C5DA000
|
unkown
|
page read and write
|
||
|
16AD28C8000
|
heap
|
page read and write
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
16AD0D67000
|
heap
|
page read and write
|
||
|
7FF55765C000
|
unkown
|
page readonly
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
7DF468970000
|
unkown
|
page readonly
|
||
|
7FF557328000
|
unkown
|
page readonly
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
16AD0E3D000
|
heap
|
page read and write
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
7FF556FF3000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
EECB000
|
unkown
|
page read and write
|
||
|
C5BF000
|
unkown
|
page read and write
|
||
|
C430000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
2D8B000
|
stack
|
page read and write
|
||
|
7FF557579000
|
unkown
|
page readonly
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE1000
|
heap
|
page read and write
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
C5DA000
|
unkown
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
8D6C000
|
unkown
|
page read and write
|
||
|
7FF557607000
|
unkown
|
page readonly
|
||
|
FD40000
|
unkown
|
page read and write
|
||
|
7E03000
|
stack
|
page read and write
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
9D8E000
|
stack
|
page read and write
|
||
|
A0A8000
|
unkown
|
page read and write
|
||
|
7FF5575BB000
|
unkown
|
page readonly
|
||
|
7162000
|
unkown
|
page read and write
|
||
|
7FF5570F7000
|
unkown
|
page readonly
|
||
|
3350000
|
unkown
|
page readonly
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
7FF557594000
|
unkown
|
page readonly
|
||
|
900000
|
unkown
|
page readonly
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
8880000
|
unkown
|
page readonly
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
8D68000
|
unkown
|
page read and write
|
||
|
C3FB000
|
unkown
|
page read and write
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
8870000
|
unkown
|
page execute and read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
A0DA000
|
unkown
|
page read and write
|
||
|
8820000
|
unkown
|
page readonly
|
||
|
7FF557661000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557330000
|
unkown
|
page readonly
|
||
|
7FF55726C000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
10810000
|
heap
|
page read and write
|
||
|
9800000
|
unkown
|
page execute and read and write
|
||
|
7909000
|
stack
|
page read and write
|
||
|
BEBF000
|
stack
|
page read and write
|
||
|
7FF556F84000
|
unkown
|
page readonly
|
||
|
A28C000
|
unkown
|
page read and write
|
||
|
7FF5575D5000
|
unkown
|
page readonly
|
||
|
7FF5575B9000
|
unkown
|
page readonly
|
||
|
90CF000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
325F000
|
unkown
|
page read and write
|
||
|
7FF5573C1000
|
unkown
|
page readonly
|
||
|
8510000
|
unkown
|
page read and write
|
||
|
A156000
|
unkown
|
page read and write
|
||
|
16AD28C8000
|
heap
|
page read and write
|
||
|
7FF5574B3000
|
unkown
|
page readonly
|
||
|
7A80000
|
unkown
|
page readonly
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
7FF557095000
|
unkown
|
page readonly
|
||
|
180073000
|
unkown
|
page read and write
|
||
|
C04B000
|
unkown
|
page read and write
|
||
|
9770000
|
unkown
|
page execute and read and write
|
||
|
716E000
|
unkown
|
page read and write
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
41B0872000
|
stack
|
page read and write
|
||
|
C1DD000
|
unkown
|
page read and write
|
||
|
4730000
|
unkown
|
page read and write
|
||
|
7FF5575C5000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
A154000
|
unkown
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
A8CA000
|
unkown
|
page read and write
|
||
|
4830000
|
unkown
|
page read and write
|
||
|
8D86000
|
unkown
|
page read and write
|
||
|
8810000
|
unkown
|
page readonly
|
||
|
7FF557042000
|
unkown
|
page readonly
|
||
|
B010000
|
unkown
|
page readonly
|
||
|
26A0000
|
heap
|
page read and write
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
3249000
|
unkown
|
page read and write
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
B82A000
|
stack
|
page read and write
|
||
|
4718000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C481000
|
unkown
|
page read and write
|
||
|
7FF556FD2000
|
unkown
|
page readonly
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
7FF55763D000
|
unkown
|
page readonly
|
||
|
1020000
|
heap
|
page read and write
|
||
|
90C9000
|
unkown
|
page read and write
|
||
|
B980000
|
unkown
|
page execute and read and write
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
7169000
|
unkown
|
page read and write
|
||
|
7FF557487000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
AC60000
|
unkown
|
page execute and read and write
|
||
|
7FF557009000
|
unkown
|
page readonly
|
||
|
41B027A000
|
stack
|
page read and write
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
7FF55752A000
|
unkown
|
page readonly
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
7FF55703C000
|
unkown
|
page readonly
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
8500000
|
unkown
|
page execute and read and write
|
||
|
16AD28D3000
|
heap
|
page read and write
|
||
|
7FF556E9A000
|
unkown
|
page readonly
|
||
|
A8DD000
|
unkown
|
page read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
F20000
|
unkown
|
page execute and read and write
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
8D5F000
|
stack
|
page read and write
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
A08D000
|
stack
|
page read and write
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
BFD0000
|
unkown
|
page read and write
|
||
|
D14000
|
heap
|
page read and write
|
||
|
BBC0000
|
unkown
|
page read and write
|
||
|
79A0000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2852000
|
heap
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
9A90000
|
unkown
|
page execute and read and write
|
||
|
84DC000
|
stack
|
page read and write
|
||
|
18005F000
|
unkown
|
page readonly
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
7FF557535000
|
unkown
|
page readonly
|
||
|
C063000
|
unkown
|
page read and write
|
||
|
7FF557026000
|
unkown
|
page readonly
|
||
|
A0A8000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
78C0000
|
unkown
|
page execute and read and write
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
8D60000
|
unkown
|
page read and write
|
||
|
7FF5571E6000
|
unkown
|
page readonly
|
||
|
C50000
|
heap
|
page read and write
|
||
|
7FF55764C000
|
unkown
|
page readonly
|
||
|
798E000
|
stack
|
page read and write
|
||
|
7FF5572A7000
|
unkown
|
page readonly
|
||
|
7FF55752A000
|
unkown
|
page readonly
|
||
|
C523000
|
unkown
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
7FF5571E2000
|
unkown
|
page readonly
|
||
|
7890000
|
unkown
|
page execute and read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
7FF557583000
|
unkown
|
page readonly
|
||
|
16AD0E3D000
|
heap
|
page read and write
|
||
|
72FC000
|
unkown
|
page read and write
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
7FF55702F000
|
unkown
|
page readonly
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
A157000
|
unkown
|
page read and write
|
||
|
B380000
|
unkown
|
page execute and read and write
|
||
|
16AD286E000
|
heap
|
page read and write
|
||
|
7FF5572BD000
|
unkown
|
page readonly
|
||
|
7DF457300000
|
direct allocation
|
page read and write
|
||
|
8D72000
|
unkown
|
page read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
A810000
|
unkown
|
page read and write
|
||
|
7DF457364000
|
direct allocation
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
7185000
|
unkown
|
page read and write
|
||
|
A87A000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
84E0000
|
unkown
|
page readonly
|
||
|
7FF55730C000
|
unkown
|
page readonly
|
||
|
7FF5573ED000
|
unkown
|
page readonly
|
||
|
B050000
|
unkown
|
page read and write
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
16AD0E25000
|
heap
|
page read and write
|
||
|
7185000
|
unkown
|
page read and write
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
A30000
|
heap
|
page read and write
|
||
|
7FF55742B000
|
unkown
|
page readonly
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
7FF5574BD000
|
unkown
|
page readonly
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF556E25000
|
unkown
|
page readonly
|
||
|
41B087E000
|
stack
|
page read and write
|
||
|
E13B000
|
stack
|
page read and write
|
||
|
79B0000
|
unkown
|
page read and write
|
||
|
A225000
|
unkown
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
F34000
|
unkown
|
page execute and read and write
|
||
|
7FF5572AC000
|
unkown
|
page readonly
|
||
|
C0F9000
|
unkown
|
page read and write
|
||
|
7FF557250000
|
unkown
|
page readonly
|
||
|
AC70000
|
unkown
|
page execute and read and write
|
||
|
7FF55703F000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
1086A000
|
unkown
|
page read and write
|
||
|
7FF5574F9000
|
unkown
|
page readonly
|
||
|
7FF556E6C000
|
unkown
|
page readonly
|
||
|
180001000
|
unkown
|
page execute read
|
||
|
7FF557113000
|
unkown
|
page readonly
|
||
|
16AD2CE0000
|
remote allocation
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
F77000
|
unkown
|
page readonly
|
||
|
8820000
|
unkown
|
page readonly
|
||
|
8B53000
|
unkown
|
page read and write
|
||
|
9570000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
7FF55723D000
|
unkown
|
page readonly
|
||
|
7FF557434000
|
unkown
|
page readonly
|
||
|
AC50000
|
unkown
|
page execute and read and write
|
||
|
7FF557549000
|
unkown
|
page readonly
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
7FF556E2A000
|
unkown
|
page readonly
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
9740000
|
unkown
|
page execute and read and write
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
C20000
|
unkown
|
page read and write
|
||
|
864F000
|
stack
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
AC40000
|
unkown
|
page execute and read and write
|
||
|
7803000
|
unkown
|
page read and write
|
||
|
C3AE000
|
unkown
|
page read and write
|
||
|
7FF55710A000
|
unkown
|
page readonly
|
||
|
901F000
|
unkown
|
page read and write
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
8D80000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
43C000
|
stack
|
page read and write
|
||
|
7FF5574A9000
|
unkown
|
page readonly
|
||
|
16AD2818000
|
heap
|
page read and write
|
||
|
7DF457350000
|
direct allocation
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
7FF557535000
|
unkown
|
page readonly
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
77D0000
|
unkown
|
page read and write
|
||
|
8F09000
|
unkown
|
page read and write
|
||
|
8D6C000
|
unkown
|
page read and write
|
||
|
8350000
|
unkown
|
page readonly
|
||
|
7FF556F9E000
|
unkown
|
page readonly
|
||
|
7FF556E56000
|
unkown
|
page readonly
|
||
|
16AD288C000
|
heap
|
page read and write
|
||
|
7FF5572BD000
|
unkown
|
page readonly
|
||
|
7FF5574B9000
|
unkown
|
page readonly
|
||
|
7FF5572A2000
|
unkown
|
page readonly
|
||
|
ADAF000
|
stack
|
page read and write
|
||
|
7FF557571000
|
unkown
|
page readonly
|
||
|
7FF5573EA000
|
unkown
|
page readonly
|
||
|
472C000
|
unkown
|
page read and write
|
||
|
9F5000
|
heap
|
page read and write
|
||
|
A8CA000
|
unkown
|
page read and write
|
||
|
995E000
|
stack
|
page read and write
|
||
|
41B0367000
|
stack
|
page read and write
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573D8000
|
unkown
|
page readonly
|
||
|
16AD28AF000
|
heap
|
page read and write
|
||
|
9E8E000
|
stack
|
page read and write
|
||
|
7FF5570CA000
|
unkown
|
page readonly
|
||
|
C479000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD0C90000
|
heap
|
page read and write
|
||
|
8D6A000
|
unkown
|
page read and write
|
||
|
16AD28D3000
|
heap
|
page read and write
|
||
|
72FC000
|
unkown
|
page read and write
|
||
|
16AD2818000
|
heap
|
page read and write
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
B700000
|
unkown
|
page execute and read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
7A4B000
|
stack
|
page read and write
|
||
|
32C4000
|
unkown
|
page read and write
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
7FF557493000
|
unkown
|
page readonly
|
||
|
3450000
|
unkown
|
page read and write
|
||
|
7FF5575E3000
|
unkown
|
page readonly
|
||
|
B42F000
|
stack
|
page read and write
|
||
|
9B3000
|
stack
|
page read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
A850000
|
unkown
|
page read and write
|
||
|
4734000
|
unkown
|
page read and write
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
16AD28C8000
|
heap
|
page read and write
|
||
|
7FF546F2F000
|
unkown
|
page readonly
|
||
|
C532000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
C123000
|
unkown
|
page read and write
|
||
|
F19000
|
unkown
|
page read and write
|
||
|
7FF5572D4000
|
unkown
|
page readonly
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
7FF557249000
|
unkown
|
page readonly
|
||
|
16AD28B6000
|
heap
|
page read and write
|
||
|
9052000
|
unkown
|
page read and write
|
||
|
16AD0E30000
|
heap
|
page read and write
|
||
|
84F0000
|
unkown
|
page execute and read and write
|
||
|
16AD286B000
|
heap
|
page read and write
|
||
|
10B0000
|
unkown
|
page readonly
|
||
|
97F0000
|
unkown
|
page execute and read and write
|
||
|
84F0000
|
unkown
|
page execute and read and write
|
||
|
C091000
|
unkown
|
page read and write
|
||
|
9580000
|
unkown
|
page readonly
|
||
|
9520000
|
unkown
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573A9000
|
unkown
|
page readonly
|
||
|
16AD0D67000
|
heap
|
page read and write
|
||
|
A08D000
|
stack
|
page read and write
|
||
|
7FF5570B5000
|
unkown
|
page readonly
|
||
|
90D8000
|
unkown
|
page read and write
|
||
|
F10000
|
unkown
|
page execute and read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
9E0F000
|
stack
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
B5AE000
|
stack
|
page read and write
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
C22F000
|
unkown
|
page read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
16AD0DDD000
|
heap
|
page read and write
|
||
|
16AD28B2000
|
heap
|
page read and write
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
487A000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF5574F4000
|
unkown
|
page readonly
|
||
|
10812000
|
heap
|
page read and write
|
||
|
4746000
|
unkown
|
page read and write
|
||
|
16AD2DEC000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
8830000
|
unkown
|
page execute and read and write
|
||
|
650000
|
heap
|
page read and write
|
||
|
7FF556FE3000
|
unkown
|
page readonly
|
||
|
7FF556FFF000
|
unkown
|
page readonly
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
16AD2859000
|
heap
|
page read and write
|
||
|
7FF557413000
|
unkown
|
page readonly
|
||
|
9580000
|
unkown
|
page readonly
|
||
|
1087E000
|
unkown
|
page read and write
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557413000
|
unkown
|
page readonly
|
||
|
7FF557113000
|
unkown
|
page readonly
|
||
|
3440000
|
unkown
|
page readonly
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
7FF557476000
|
unkown
|
page readonly
|
||
|
ADAF000
|
stack
|
page read and write
|
||
|
9A00000
|
unkown
|
page execute and read and write
|
||
|
7306000
|
unkown
|
page read and write
|
||
|
16AD28C0000
|
heap
|
page read and write
|
||
|
41AFF3C000
|
stack
|
page read and write
|
||
|
3249000
|
unkown
|
page read and write
|
||
|
5161000
|
unkown
|
page read and write
|
||
|
7FF55732D000
|
unkown
|
page readonly
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
7FF557387000
|
unkown
|
page readonly
|
||
|
C23A000
|
unkown
|
page read and write
|
||
|
B8F0000
|
unkown
|
page execute and read and write
|
||
|
A131000
|
unkown
|
page read and write
|
||
|
7FF557467000
|
unkown
|
page readonly
|
||
|
16AD2849000
|
heap
|
page read and write
|
||
|
7DF457361000
|
direct allocation
|
page read and write
|
||
|
7FF55733B000
|
unkown
|
page readonly
|
||
|
715C000
|
unkown
|
page read and write
|
||
|
16AD28C1000
|
heap
|
page read and write
|
||
|
BC00000
|
unkown
|
page readonly
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
7FF55724C000
|
unkown
|
page readonly
|
||
|
4840000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
7FF557411000
|
unkown
|
page readonly
|
||
|
90DB000
|
unkown
|
page read and write
|
||
|
477D000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
46F0000
|
unkown
|
page read and write
|
||
|
1023000
|
heap
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
10840000
|
unkown
|
page read and write
|
||
|
C22B000
|
unkown
|
page read and write
|
||
|
7E10000
|
unkown
|
page read and write
|
||
|
7FF55704A000
|
unkown
|
page readonly
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
7FF557411000
|
unkown
|
page readonly
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
7A60000
|
unkown
|
page readonly
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5572A4000
|
unkown
|
page readonly
|
||
|
C5CE000
|
unkown
|
page read and write
|
||
|
C1DF000
|
unkown
|
page read and write
|
||
|
16AD0D65000
|
heap
|
page read and write
|
||
|
A883000
|
unkown
|
page read and write
|
||
|
7D0E000
|
stack
|
page read and write
|
||
|
7FF557235000
|
unkown
|
page readonly
|
||
|
32C7000
|
unkown
|
page read and write
|
||
|
A85A000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
16AD0E27000
|
heap
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
B6F0000
|
unkown
|
page execute and read and write
|
||
|
71FC000
|
unkown
|
page read and write
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
A8DD000
|
unkown
|
page read and write
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
E290000
|
unkown
|
page read and write
|
||
|
C2E4000
|
unkown
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
16AD0DB3000
|
heap
|
page read and write
|
||
|
E1B9000
|
stack
|
page read and write
|
||
|
2F90000
|
unkown
|
page readonly
|
||
|
16AD2816000
|
heap
|
page read and write
|
||
|
7FF556FE3000
|
unkown
|
page readonly
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
485A000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF556F31000
|
unkown
|
page readonly
|
||
|
A883000
|
unkown
|
page read and write
|
||
|
7DF468970000
|
unkown
|
page readonly
|
||
|
8DFE000
|
unkown
|
page read and write
|
||
|
EEC6000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE0000
|
remote allocation
|
page read and write
|
||
|
F31000
|
unkown
|
page execute read
|
||
|
7FF55726A000
|
unkown
|
page readonly
|
||
|
C596000
|
unkown
|
page read and write
|
||
|
16AD2848000
|
heap
|
page read and write
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
16AD2852000
|
heap
|
page read and write
|
||
|
7FF557103000
|
unkown
|
page readonly
|
||
|
B1A0000
|
unkown
|
page read and write
|
||
|
7FF557434000
|
unkown
|
page readonly
|
||
|
AC90000
|
unkown
|
page execute and read and write
|
||
|
7160000
|
unkown
|
page read and write
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
8F27000
|
unkown
|
page read and write
|
||
|
9AC0000
|
unkown
|
page execute and read and write
|
||
|
7FF557382000
|
unkown
|
page readonly
|
||
|
7FF557493000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
717A000
|
unkown
|
page read and write
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
A131000
|
unkown
|
page read and write
|
||
|
2C8E000
|
stack
|
page read and write
|
||
|
7FF55710F000
|
unkown
|
page readonly
|
||
|
16AD2CE0000
|
remote allocation
|
page read and write
|
||
|
7FF557293000
|
unkown
|
page readonly
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
7FF5570A6000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
AE2B000
|
stack
|
page read and write
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
90DB000
|
unkown
|
page read and write
|
||
|
7FF5572A2000
|
unkown
|
page readonly
|
||
|
94F0000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF5573F3000
|
unkown
|
page readonly
|
||
|
8EEE000
|
unkown
|
page read and write
|
||
|
C101000
|
unkown
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
AF6C000
|
stack
|
page read and write
|
||
|
C4CC000
|
unkown
|
page read and write
|
||
|
7FF55719C000
|
unkown
|
page readonly
|
||
|
32D3000
|
unkown
|
page read and write
|
||
|
4785000
|
unkown
|
page read and write
|
||
|
16AD28D2000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF557099000
|
unkown
|
page readonly
|
||
|
9570000
|
unkown
|
page readonly
|
||
|
C609000
|
unkown
|
page read and write
|
||
|
4E0000
|
heap
|
page read and write
|
||
|
A889000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF55753D000
|
unkown
|
page readonly
|
||
|
8D76000
|
unkown
|
page read and write
|
||
|
47EE000
|
unkown
|
page read and write
|
||
|
10820000
|
unkown
|
page read and write
|
||
|
5161000
|
unkown
|
page read and write
|
||
|
7FF557420000
|
unkown
|
page readonly
|
||
|
7FF557328000
|
unkown
|
page readonly
|
||
|
9B50000
|
unkown
|
page execute and read and write
|
||
|
273F40000
|
direct allocation
|
page read and write
|
||
|
2D0B000
|
stack
|
page read and write
|
||
|
7FF55756D000
|
unkown
|
page readonly
|
||
|
B070000
|
unkown
|
page read and write
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
A28C000
|
unkown
|
page read and write
|
||
|
7DF457320000
|
direct allocation
|
page readonly
|
||
|
78F0000
|
unkown
|
page execute and read and write
|
||
|
864F000
|
stack
|
page read and write
|
||
|
8D70000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
9BB0000
|
unkown
|
page execute and read and write
|
||
|
77C0000
|
unkown
|
page read and write
|
||
|
7FF55748F000
|
unkown
|
page readonly
|
||
|
83A0000
|
unkown
|
page execute and read and write
|
||
|
9BD0000
|
unkown
|
page execute and read and write
|
||
|
7FF5571E6000
|
unkown
|
page readonly
|
||
|
7FF55747D000
|
unkown
|
page readonly
|
||
|
C06D000
|
unkown
|
page read and write
|
||
|
7FF557083000
|
unkown
|
page readonly
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
9AA0000
|
unkown
|
page execute and read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
7DF4689A1000
|
unkown
|
page execute read
|
||
|
716B000
|
unkown
|
page read and write
|
||
|
C589000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
EAE000
|
stack
|
page read and write
|
||
|
8EF5000
|
unkown
|
page read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
41B03FD000
|
stack
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
B010000
|
unkown
|
page readonly
|
||
|
7FF55763D000
|
unkown
|
page readonly
|
||
|
16AD0D9F000
|
heap
|
page read and write
|
||
|
A894000
|
unkown
|
page read and write
|
||
|
7FF556E7C000
|
unkown
|
page readonly
|
||
|
7FF556A1B000
|
unkown
|
page readonly
|
||
|
7FF557463000
|
unkown
|
page readonly
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
7FF556F2A000
|
unkown
|
page readonly
|
||
|
16AD0E27000
|
heap
|
page read and write
|
||
|
10820000
|
unkown
|
page read and write
|
||
|
A88E000
|
unkown
|
page read and write
|
||
|
4730000
|
unkown
|
page read and write
|
||
|
B628000
|
stack
|
page read and write
|
||
|
16AD0E30000
|
heap
|
page read and write
|
||
|
8D78000
|
unkown
|
page read and write
|
||
|
7FF5572B4000
|
unkown
|
page readonly
|
||
|
7FF557599000
|
unkown
|
page readonly
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
16AD2852000
|
heap
|
page read and write
|
||
|
7FF557264000
|
unkown
|
page readonly
|
||
|
E1B9000
|
stack
|
page read and write
|
||
|
7FF556E7B000
|
unkown
|
page readonly
|
||
|
16AD28D3000
|
heap
|
page read and write
|
||
|
97B0000
|
heap
|
page read and write
|
||
|
90DB000
|
unkown
|
page read and write
|
||
|
7FF556F84000
|
unkown
|
page readonly
|
||
|
BBBB000
|
stack
|
page read and write
|
||
|
7FF5574BA000
|
unkown
|
page readonly
|
||
|
77D0000
|
unkown
|
page read and write
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
2880000
|
heap
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
9F0E000
|
stack
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD0E27000
|
heap
|
page read and write
|
||
|
7FF556E7E000
|
unkown
|
page readonly
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD28E0000
|
direct allocation
|
page read and write
|
||
|
16AD2854000
|
heap
|
page read and write
|
||
|
7FF55760F000
|
unkown
|
page readonly
|
||
|
7FF55720C000
|
unkown
|
page readonly
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
C1DD000
|
unkown
|
page read and write
|
||
|
C5D6000
|
unkown
|
page read and write
|
||
|
7FF55752E000
|
unkown
|
page readonly
|
||
|
AD10000
|
unkown
|
page readonly
|
||
|
717E000
|
unkown
|
page read and write
|
||
|
7FF5573E6000
|
unkown
|
page readonly
|
||
|
A0BD000
|
unkown
|
page read and write
|
||
|
32D7000
|
unkown
|
page read and write
|
||
|
16AD2824000
|
heap
|
page read and write
|
||
|
16AD284B000
|
heap
|
page read and write
|
||
|
7FF55714A000
|
unkown
|
page readonly
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
7FF55714D000
|
unkown
|
page readonly
|
||
|
7FF5574F1000
|
unkown
|
page readonly
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
8D76000
|
unkown
|
page read and write
|
||
|
7A50000
|
unkown
|
page readonly
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7FF5575A1000
|
unkown
|
page readonly
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
16AD0C70000
|
heap
|
page read and write
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
16AD27E6000
|
heap
|
page read and write
|
||
|
7FF55720C000
|
unkown
|
page readonly
|
||
|
3213000
|
stack
|
page read and write
|
||
|
4810000
|
unkown
|
page read and write
|
||
|
E370000
|
unkown
|
page read and write
|
||
|
7FF5575E0000
|
unkown
|
page readonly
|
||
|
7FF556F2A000
|
unkown
|
page readonly
|
||
|
717C000
|
unkown
|
page read and write
|
||
|
77B0000
|
unkown
|
page read and write
|
||
|
78B0000
|
unkown
|
page execute and read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
7FF55745B000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C244000
|
unkown
|
page read and write
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
72FE000
|
unkown
|
page read and write
|
||
|
10A5000
|
heap
|
page read and write
|
||
|
9B50000
|
unkown
|
page execute and read and write
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
7FF5574C6000
|
unkown
|
page readonly
|
||
|
16AD2D18000
|
heap
|
page read and write
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
7FF557617000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
32E6000
|
unkown
|
page read and write
|
||
|
79B0000
|
unkown
|
page read and write
|
||
|
9BC0000
|
unkown
|
page execute and read and write
|
||
|
7FF557026000
|
unkown
|
page readonly
|
||
|
9CDC000
|
stack
|
page read and write
|
||
|
16AD2D08000
|
heap
|
page read and write
|
||
|
9B3000
|
stack
|
page read and write
|
||
|
4781000
|
unkown
|
page read and write
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
C1F5000
|
unkown
|
page read and write
|
||
|
16AD0DA7000
|
heap
|
page read and write
|
||
|
4746000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
AEE6000
|
stack
|
page read and write
|
||
|
7FF5572A4000
|
unkown
|
page readonly
|
||
|
7FF5569E8000
|
unkown
|
page readonly
|
||
|
A889000
|
unkown
|
page read and write
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
E73000
|
unkown
|
page read and write
|
||
|
16AD27C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF557627000
|
unkown
|
page readonly
|
||
|
7FF55707D000
|
unkown
|
page readonly
|
||
|
7FF557148000
|
unkown
|
page readonly
|
||
|
7FF557549000
|
unkown
|
page readonly
|
||
|
EE83000
|
unkown
|
page read and write
|
||
|
7300000
|
unkown
|
page read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
E60000
|
unkown
|
page readonly
|
||
|
8860000
|
unkown
|
page execute and read and write
|
||
|
C74000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
A215000
|
unkown
|
page read and write
|
||
|
16AD28B9000
|
heap
|
page read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
E370000
|
unkown
|
page read and write
|
||
|
7D8E000
|
stack
|
page read and write
|
||
|
7DF468981000
|
unkown
|
page execute read
|
||
|
A231000
|
unkown
|
page read and write
|
||
|
9AB0000
|
unkown
|
page execute and read and write
|
||
|
C600000
|
unkown
|
page read and write
|
||
|
A110000
|
unkown
|
page read and write
|
||
|
C589000
|
unkown
|
page read and write
|
||
|
A280000
|
unkown
|
page read and write
|
||
|
B350000
|
unkown
|
page execute and read and write
|
||
|
902C000
|
unkown
|
page read and write
|
||
|
8D60000
|
unkown
|
page read and write
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
7FF557083000
|
unkown
|
page readonly
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
7FF557669000
|
unkown
|
page readonly
|
||
|
8EC5000
|
unkown
|
page read and write
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
7E05000
|
stack
|
page read and write
|
||
|
C328000
|
unkown
|
page read and write
|
||
|
716E000
|
unkown
|
page read and write
|
||
|
B8B0000
|
unkown
|
page execute and read and write
|
||
|
C10000
|
unkown
|
page read and write
|
||
|
8EDD000
|
unkown
|
page read and write
|
||
|
7FF5569CB000
|
unkown
|
page readonly
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
477D000
|
unkown
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
7FF557642000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
7DF4689B1000
|
unkown
|
page execute read
|
||
|
7FF55733F000
|
unkown
|
page readonly
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
9A00000
|
unkown
|
page execute and read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
4880000
|
unkown
|
page read and write
|
||
|
16AD281A000
|
heap
|
page read and write
|
||
|
C1E7000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF556E7E000
|
unkown
|
page readonly
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
9B80000
|
unkown
|
page execute and read and write
|
||
|
AEE7000
|
stack
|
page read and write
|
||
|
41B067F000
|
trusted library allocation
|
page read and write
|
||
|
ACB0000
|
unkown
|
page execute and read and write
|
||
|
B040000
|
unkown
|
page readonly
|
||
|
16AD2DF4000
|
heap
|
page read and write
|
||
|
16AD2CE1000
|
heap
|
page read and write
|
||
|
47EE000
|
unkown
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
C3ED000
|
unkown
|
page read and write
|
||
|
8DA6000
|
unkown
|
page read and write
|
||
|
487A000
|
unkown
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
9013000
|
unkown
|
page read and write
|
||
|
F90000
|
unkown
|
page readonly
|
||
|
BBD0000
|
unkown
|
page readonly
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
C24F000
|
unkown
|
page read and write
|
||
|
9AB0000
|
unkown
|
page execute and read and write
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
16AD2872000
|
heap
|
page read and write
|
||
|
C214000
|
unkown
|
page read and write
|
||
|
7FF5575E3000
|
unkown
|
page readonly
|
||
|
7FF5570D4000
|
unkown
|
page readonly
|
||
|
7FF557568000
|
unkown
|
page readonly
|
||
|
8ECE000
|
unkown
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
16AD28B6000
|
heap
|
page read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
32F3000
|
unkown
|
page read and write
|
||
|
A0FC000
|
unkown
|
page read and write
|
||
|
C1DB000
|
unkown
|
page read and write
|
||
|
7FF557642000
|
unkown
|
page readonly
|
||
|
32B9000
|
unkown
|
page read and write
|
||
|
85CE000
|
stack
|
page read and write
|
||
|
7FF5571B3000
|
unkown
|
page readonly
|
||
|
16AD28B9000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7FF557280000
|
unkown
|
page readonly
|
||
|
7FF557062000
|
unkown
|
page readonly
|
||
|
7FF5572A7000
|
unkown
|
page readonly
|
||
|
7176000
|
unkown
|
page read and write
|
||
|
C3F7000
|
unkown
|
page read and write
|
||
|
8380000
|
unkown
|
page execute and read and write
|
||
|
C3A8000
|
unkown
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
2E60000
|
unkown
|
page execute and read and write
|
||
|
10854000
|
unkown
|
page read and write
|
||
|
8880000
|
unkown
|
page readonly
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
7FF55706A000
|
unkown
|
page readonly
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
7FF5574A9000
|
unkown
|
page readonly
|
||
|
A222000
|
unkown
|
page read and write
|
||
|
4820000
|
unkown
|
page read and write
|
||
|
77C0000
|
unkown
|
page read and write
|
||
|
51E3000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
EECB000
|
unkown
|
page read and write
|
||
|
7FF55703F000
|
unkown
|
page readonly
|
||
|
16AD2DF8000
|
heap
|
page read and write
|
||
|
47C6000
|
unkown
|
page read and write
|
||
|
16AD2796000
|
direct allocation
|
page execute and read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
1060000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
7FF55733B000
|
unkown
|
page readonly
|
||
|
A8DE000
|
unkown
|
page read and write
|
||
|
78D0000
|
unkown
|
page execute and read and write
|
||
|
EF44000
|
unkown
|
page read and write
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
16AD286E000
|
heap
|
page read and write
|
||
|
7FF5574EF000
|
unkown
|
page readonly
|
||
|
7FF557099000
|
unkown
|
page readonly
|
||
|
16AD2817000
|
heap
|
page read and write
|
||
|
16AD0E31000
|
heap
|
page read and write
|
||
|
8F4D000
|
unkown
|
page read and write
|
||
|
BBC0000
|
unkown
|
page read and write
|
||
|
1087E000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
F20000
|
unkown
|
page execute and read and write
|
||
|
A877000
|
unkown
|
page read and write
|
||
|
B4A6000
|
stack
|
page read and write
|
||
|
4734000
|
unkown
|
page read and write
|
||
|
7FF5571DF000
|
unkown
|
page readonly
|
||
|
C0FB000
|
unkown
|
page read and write
|
||
|
C3B3000
|
unkown
|
page read and write
|
||
|
7FF5573ED000
|
unkown
|
page readonly
|
||
|
E70000
|
unkown
|
page read and write
|
||
|
C374000
|
unkown
|
page read and write
|
||
|
41B0675000
|
trusted library allocation
|
page read and write
|
||
|
C1E9000
|
unkown
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
F10000
|
heap
|
page read and write
|
||
|
7FF557594000
|
unkown
|
page readonly
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
8390000
|
unkown
|
page execute and read and write
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
C10000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
A873000
|
unkown
|
page read and write
|
||
|
8380000
|
unkown
|
page execute and read and write
|
||
|
47C6000
|
unkown
|
page read and write
|
||
|
16AD2864000
|
heap
|
page read and write
|
||
|
C0F3000
|
unkown
|
page read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
C233000
|
unkown
|
page read and write
|
||
|
A110000
|
unkown
|
page read and write
|
||
|
7FF556F26000
|
unkown
|
page readonly
|
||
|
7FF5572C9000
|
unkown
|
page readonly
|
||
|
7FF5571E2000
|
unkown
|
page readonly
|
||
|
99F0000
|
unkown
|
page execute and read and write
|
||
|
7FF5573FF000
|
unkown
|
page readonly
|
||
|
16AD2825000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
C12D000
|
unkown
|
page read and write
|
||
|
47C0000
|
unkown
|
page read and write
|
||
|
7DF468990000
|
unkown
|
page readonly
|
||
|
7140000
|
unkown
|
page read and write
|
||
|
D1D000
|
heap
|
page read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
7FF557467000
|
unkown
|
page readonly
|
||
|
9540000
|
unkown
|
page execute and read and write
|
||
|
BBE0000
|
unkown
|
page readonly
|
||
|
16AD28A5000
|
heap
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD26F0000
|
heap
|
page read and write
|
||
|
47C0000
|
unkown
|
page read and write
|
||
|
7DF4689B1000
|
unkown
|
page execute read
|
||
|
BF3F000
|
stack
|
page read and write
|
||
|
7FF557416000
|
unkown
|
page readonly
|
||
|
7FF557426000
|
unkown
|
page readonly
|
||
|
C3E7000
|
unkown
|
page read and write
|
||
|
9A00000
|
unkown
|
page execute and read and write
|
||
|
7276000
|
unkown
|
page read and write
|
||
|
C5BE000
|
unkown
|
page read and write
|
||
|
16AD27F2000
|
heap
|
page read and write
|
||
|
16AD2CE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5571A1000
|
unkown
|
page readonly
|
||
|
91D9000
|
stack
|
page read and write
|
||
|
9F0000
|
unkown
|
page readonly
|
||
|
7FF5575BF000
|
unkown
|
page readonly
|
||
|
7FF557653000
|
unkown
|
page readonly
|
||
|
9B90000
|
unkown
|
page execute and read and write
|
||
|
BBE0000
|
unkown
|
page readonly
|
||
|
16AD28BD000
|
heap
|
page read and write
|
||
|
4718000
|
unkown
|
page read and write
|
||
|
C52F000
|
unkown
|
page read and write
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
E6E000
|
stack
|
page read and write
|
||
|
41B067F000
|
stack
|
page read and write
|
||
|
7FF557235000
|
unkown
|
page readonly
|
||
|
7FF556E56000
|
unkown
|
page readonly
|
||
|
16AD27EC000
|
heap
|
page read and write
|
||
|
A15C000
|
unkown
|
page read and write
|
||
|
7FF55765C000
|
unkown
|
page readonly
|
||
|
88A0000
|
unkown
|
page read and write
|
||
|
904C000
|
unkown
|
page read and write
|
||
|
7DF468980000
|
unkown
|
page readonly
|
||
|
A894000
|
unkown
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
8AE6000
|
unkown
|
page read and write
|
||
|
16AD2884000
|
heap
|
page read and write
|
||
|
C10B000
|
unkown
|
page read and write
|
||
|
10812000
|
heap
|
page read and write
|
||
|
1085D000
|
unkown
|
page read and write
|
||
|
8D86000
|
unkown
|
page read and write
|
||
|
7FF557456000
|
unkown
|
page readonly
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
73D0000
|
unkown
|
page read and write
|
||
|
C59000
|
heap
|
page read and write
|
||
|
9086000
|
unkown
|
page read and write
|
||
|
913F000
|
unkown
|
page read and write
|
||
|
901E000
|
unkown
|
page read and write
|
||
|
7FF55761F000
|
unkown
|
page readonly
|
||
|
16AD0DA3000
|
heap
|
page read and write
|
||
|
7FF556E8D000
|
unkown
|
page readonly
|
||
|
77B0000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
B42F000
|
stack
|
page read and write
|
||
|
A898000
|
unkown
|
page read and write
|
||
|
10B0000
|
unkown
|
page readonly
|
||
|
330A000
|
unkown
|
page read and write
|
||
|
C52F000
|
unkown
|
page read and write
|
||
|
B280000
|
unkown
|
page execute and read and write
|
||
|
A0DA000
|
unkown
|
page read and write
|
||
|
7FF557583000
|
unkown
|
page readonly
|
||
|
C18A000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
A22F000
|
unkown
|
page read and write
|
||
|
B080000
|
unkown
|
page read and write
|
||
|
16AD2F00000
|
trusted library allocation
|
page read and write
|
||
|
50B0000
|
unkown
|
page write copy
|
||
|
B3A0000
|
unkown
|
page execute and read and write
|
||
|
C126000
|
unkown
|
page read and write
|
||
|
FB0000
|
unkown
|
page read and write
|
||
|
A23B000
|
unkown
|
page read and write
|
||
|
7176000
|
unkown
|
page read and write
|
||
|
7FF556FEE000
|
unkown
|
page readonly
|
||
|
8ED5000
|
unkown
|
page read and write
|
||
|
7FF557426000
|
unkown
|
page readonly
|
||
|
51E3000
|
unkown
|
page read and write
|
||
|
4840000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
C06D000
|
unkown
|
page read and write
|
||
|
A15C000
|
unkown
|
page read and write
|
||
|
A85E000
|
unkown
|
page read and write
|
||
|
16AD2814000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
B7AA000
|
stack
|
page read and write
|
||
|
7FF5575AB000
|
unkown
|
page readonly
|
||
|
16AD2D08000
|
heap
|
page read and write
|
||
|
B270000
|
unkown
|
page execute and read and write
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
10855000
|
unkown
|
page read and write
|
||
|
7FF55748F000
|
unkown
|
page readonly
|
||
|
1086A000
|
unkown
|
page read and write
|
||
|
7D0E000
|
stack
|
page read and write
|
||
|
16AD27ED000
|
heap
|
page read and write
|
||
|
C31000
|
unkown
|
page readonly
|
||
|
32E3000
|
unkown
|
page read and write
|
||
|
16AD286C000
|
heap
|
page read and write
|
||
|
16AD2EE0000
|
trusted library allocation
|
page read and write
|
||
|
AD10000
|
unkown
|
page readonly
|
||
|
16AD0E29000
|
heap
|
page read and write
|
||
|
7FF5573BB000
|
unkown
|
page readonly
|
||
|
7FF556FEE000
|
unkown
|
page readonly
|
||
|
B1C0000
|
unkown
|
page execute and read and write
|
||
|
7FF557065000
|
unkown
|
page readonly
|
||
|
7FF556F90000
|
unkown
|
page readonly
|
||
|
7FF5569F1000
|
unkown
|
page readonly
|
||
|
C428000
|
unkown
|
page read and write
|
||
|
88A0000
|
unkown
|
page read and write
|
||
|
C74000
|
heap
|
page read and write
|
||
|
C091000
|
unkown
|
page read and write
|
||
|
B050000
|
unkown
|
page read and write
|
||
|
732B000
|
unkown
|
page read and write
|
||
|
16AD2DDD000
|
heap
|
page read and write
|
||
|
16AD28A7000
|
heap
|
page read and write
|
||
|
16AD0E25000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
7C00000
|
unkown
|
page readonly
|
||
|
41B057B000
|
stack
|
page read and write
|
||
|
7FF55751D000
|
unkown
|
page readonly
|
||
|
16AD2D08000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
8EB8000
|
unkown
|
page read and write
|
||
|
B020000
|
unkown
|
page execute and read and write
|
||
|
C559000
|
unkown
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
90F2000
|
unkown
|
page read and write
|
||
|
EE83000
|
unkown
|
page read and write
|
||
|
2E70000
|
unkown
|
page execute and read and write
|
||
|
16AD28B9000
|
heap
|
page read and write
|
||
|
32DB000
|
unkown
|
page read and write
|
||
|
73F0000
|
unkown
|
page read and write
|
||
|
7FF557174000
|
unkown
|
page readonly
|
||
|
71A4000
|
unkown
|
page read and write
|
||
|
7FF5570D6000
|
unkown
|
page readonly
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
A1FD000
|
unkown
|
page read and write
|
||
|
16AD2868000
|
heap
|
page read and write
|
||
|
41B0775000
|
trusted library allocation
|
page read and write
|
||
|
2E0A000
|
stack
|
page read and write
|
||
|
7FF557103000
|
unkown
|
page readonly
|
||
|
7FF5573D3000
|
unkown
|
page readonly
|
||
|
7FF5570E7000
|
unkown
|
page readonly
|
||
|
4769000
|
unkown
|
page read and write
|
||
|
72FE000
|
unkown
|
page read and write
|
||
|
9050000
|
unkown
|
page read and write
|
||
|
41B077F000
|
trusted library allocation
|
page read and write
|
||
|
16AD2872000
|
heap
|
page read and write
|
||
|
C1DD000
|
unkown
|
page read and write
|
||
|
BC10000
|
unkown
|
page read and write
|
||
|
7FF557037000
|
unkown
|
page readonly
|
||
|
7FF55722A000
|
unkown
|
page readonly
|
There are 2008 hidden memdumps, click here to show them.