Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Oogoninia.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
 |
|
|
C:\Program Files (x86)\Fljtenists.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsqBBFB.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\slavelivets\Bagpaa.Mon
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\slavelivets\Condign.Str
|
data
|
dropped
|
||
|
C:\Users\user\slavelivets\alsmekill.sta
|
data
|
dropped
|
||
|
C:\Users\user\slavelivets\boat.ast
|
data
|
dropped
|
||
|
C:\Users\user\slavelivets\rupis.txt
|
ASCII text, with no line terminators
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Oogoninia.exe
|
"C:\Users\user\Desktop\Oogoninia.exe"
|
|
|
|
C:\Users\user\Desktop\Oogoninia.exe
|
"C:\Users\user\Desktop\Oogoninia.exe"
|
|
|
|
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
|
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
|
|
|
|
C:\Windows\SysWOW64\grpconv.exe
|
"C:\Windows\SysWOW64\grpconv.exe"
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.msn.com/v1/news/Feed/Windows?
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/MostlyCloudyNight.pn
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gowI
|
unknown
|
||
|
https://www.msn.com/en-us/news/politics/chris-christie-former-trump-debate-coach-offers-key-pieces-o
|
unknown
|
||
|
https://api.msn.com/J
|
unknown
|
||
|
https://www.msn.com/en-us/sports/nfl/49ers-win-over-jets-ends-with-final-score-that-s-never-been-see
|
unknown
|
||
|
https://www.msn.com/en-us/news/us/james-earl-jones-s-talents-went-far-far-beyond-his-magnificent-voi
|
unknown
|
||
|
https://www.msn.com/en-us/money/retirement/a-youtuber-asked-a-group-of-americans-aged-70-to-80-what-
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW
|
unknown
|
||
|
https://www.msn.com/en-us/money/markets?id=a3oxnm
|
unknown
|
||
|
https://api.msn.com:443/v1/news/Feed/Windows?
|
unknown
|
||
|
https://www.msn.com/en-us/feed
|
unknown
|
||
|
https://www.msn.com/en-us/autos/other/24-used-sports-cars-that-are-notoriously-reliable-yet-crazy-ch
|
unknown
|
||
|
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.
|
unknown
|
||
|
https://www.msn.com/en-us/foodanddrink/recipes/i-asked-3-farmers-the-best-way-to-cook-zucchini-they-
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gowI-dark
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gyvW-dark
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Teaser/humidity.png
|
unknown
|
||
|
https://cdn.query.prod.cms.m
|
unknown
|
||
|
https://excel.office.com
|
unknown
|
||
|
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Stock_In
|
unknown
|
||
|
https://www.msn.com/en-us/channel/source/AZ%20Animals%20US/sr-vid-7etr9q8xun6k6508c3nufaum0de3dqktiq
|
unknown
|
||
|
http://schemas.micro
|
unknown
|
||
|
http://www.gopher.ftp://ftp.
|
unknown
|
||
|
https://powerpoint.office.comEM
|
unknown
|
||
|
https://www.msn.com/en-us/weather/hourlyforecast/in-Santa-Clara%2CCalifornia?loc=eyJsIjoiU2FudGEgQ2x
|
unknown
|
||
|
https://api.msn.com/B
|
unknown
|
||
|
https://word.office.com64.exe
|
unknown
|
||
|
https://www.msn.com/en-us/news/crime/dick-van-dyke-forever-young/ar-AA1lDpRD
|
unknown
|
||
|
https://aka.ms/odirm
|
unknown
|
||
|
https://www.google.com
|
unknown
|
||
|
http://www.w3c.org/TR/1999/REC-html401-19991224/frameset.dtd
|
unknown
|
||
|
https://windows.msn.com:443/shell?osLocale=en-US&chosenMarketReason=ImplicitNew
|
unknown
|
||
|
https://drive.google.com/
|
unknown
|
||
|
https://ntp.msn.com/edge/ntp?cm=en-us&ocid=widgetonlockscreenwin10&cvid=a7af015c-55f5-465b-b0e4-6fef
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13pwi3
|
unknown
|
||
|
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214
|
unknown
|
||
|
https://www.msn.com/en-us/news/us/trump-repeats-false-claims-that-children-are-undergoing-transgende
|
unknown
|
||
|
https://apis.google.com
|
unknown
|
||
|
https://ocsp.quovadisoffshore.com0
|
unknown
|
||
|
https://www.msn.com/en-us/money/retirement/middle-aged-americans-are-leaving-work-for-months-years-t
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/MostlyCloudyNight.sv
|
unknown
|
||
|
https://www.msn.com/en-us/money/markets?id=a33k6h
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/20240402.1/Weather/W36_Most
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13pwi3-dark
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fgwm
|
unknown
|
||
|
https://windows.msn.com:443/shellv2?osLocale=en-US&chosenMarketReason=ImplicitNew
|
unknown
|
||
|
https://www.msn.com/en-us/weather/forecast/in-Santa-Clara%2CCalifornia?loc=eyJsIjoiU2FudGEgQ2xhcmEiL
|
unknown
|
||
|
https://www.msn.com/en-us/money/markets?id=a6qja2
|
unknown
|
||
|
https://www.msn.com/en-us/tv/news/the-bold-the-beautiful-young-and-the-restless-more-get-premiere-da
|
unknown
|
||
|
https://drive.usercontent.google.com/OlG
|
unknown
|
||
|
https://outlook.comO
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/finance/taskbar/icons/earnings/svg/light/blue.svg
|
unknown
|
||
|
https://www.msn.com/en-us/news/politics/jd-vance-spreads-outrageous-lie-about-haitian-immigrants/ar-
|
unknown
|
||
|
https://www.msn.com/en-us/money/personalfinance/18-everyday-household-items-that-are-surprisingly-va
|
unknown
|
||
|
https://drive.usercontent.google.com/
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Teaser/humidity.svg
|
unknown
|
||
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
||
|
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fgwm-dark
|
unknown
|
||
|
https://www.glamour.com/story/shag-haircut-photos-products
|
unknown
|
||
|
https://www.msn.com/en-us/news/politics/6-things-to-watch-for-when-kamala-harris-debates-donald-trum
|
unknown
|
||
|
https://www.msn.com/en-us/entertainment/news/james-earl-jones-dies-at-93-all-about-his-son-flynn/ar-
|
unknown
|
||
|
https://www.msn.com/en-us/news/crime/tyreek-hill-s-traffic-stop-shows-interactions-with-police-can-b
|
unknown
|
||
|
http://nsis.sf.net/NSIS_Error
|
unknown
|
||
|
https://www.msn.com/en-us/lifestyle/beauty/40-shag-haircuts-to-inspire-your-next-salon-visit/ss-AA1p
|
unknown
|
||
|
https://www.msn.com/en-us/health/medical/2-egg-brands-have-been-recalled-due-to-a-serious-salmonella
|
unknown
|
||
|
https://assets.msn.com/weathermapdata/1/static/weather/taskbar/animation/20240402.1/WeatherInsight/W
|
unknown
|
||
|
http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
|
unknown
|
||
|
https://www.instyle.com/hair/shag-haircut-face-shape
|
unknown
|
||
|
http://www.quovadis.bm0
|
unknown
|
||
|
https://api.msn.com/v1/news/Feed/Windows?activityId=DC09251A71C5472DA2BDFD73DC109609&timeOut=5000&oc
|
unknown
|
||
|
https://www.msn.com/en-us/travel/news/scientists-finally-solve-mystery-behind-bermuda-triangle-disap
|
unknown
|
||
|
https://www.msn.com/en-us/news/world/gaza-authorities-say-deadly-blasts-hit-humanitarian-zone/ar-AA1
|
unknown
|
There are 64 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
drive.google.com
|
142.250.80.78
|
||
|
drive.usercontent.google.com
|
142.251.40.129
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.251.40.129
|
drive.usercontent.google.com
|
United States
|
||
|
142.250.80.78
|
drive.google.com
|
United States
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\fjerkrraad\Uninstall\pennie\kamphane
|
feeable
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithProgids
|
Unpacker
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{5985FC23-2588-4D9A-B38B-7E7AFFAB3155} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\OpenWithProgids
|
WMP11.AssocFile.3G2
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithProgids
|
WMP11.AssocFile.3GP
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\OpenWithProgids
|
WMP11.AssocFile.3G2
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\OpenWithProgids
|
WMP11.AssocFile.3GP
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aac\OpenWithProgids
|
WMP11.AssocFile.ADTS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.adt\OpenWithProgids
|
WMP11.AssocFile.ADTS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithProgids
|
WMP11.AssocFile.ASF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\OpenWithProgids
|
WMP11.AssocFile.ASX
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\OpenWithProgids
|
WMP11.AssocFile.AU
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au3\OpenWithProgids
|
AutoIt3Script
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithProgids
|
WMP11.AssocFile.AVI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithProgids
|
Paint.Picture
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cab\OpenWithProgids
|
CABFolder
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cdxml\OpenWithProgids
|
Microsoft.PowerShellCmdletDefinitionXML.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.css\OpenWithProgids
|
CSSfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csv\OpenWithProgids
|
Excel.CSV
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dds\OpenWithProgids
|
ddsfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\OpenWithProgids
|
Paint.Picture
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dll\OpenWithProgids
|
dllfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithProgids
|
Word.Document.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docm\OpenWithProgids
|
Word.DocumentMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithProgids
|
Word.Document.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dot\OpenWithProgids
|
Word.Template.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotm\OpenWithProgids
|
Word.TemplateMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotx\OpenWithProgids
|
Word.Template.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\OpenWithProgids
|
emffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids
|
exefile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\OpenWithProgids
|
WMP11.AssocFile.FLAC
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fon\OpenWithProgids
|
fonfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithProgids
|
giffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithProgids
|
htmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids
|
htmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\OpenWithProgids
|
icofile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inf\OpenWithProgids
|
inffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithProgids
|
inifile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\OpenWithProgids
|
pjpegfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithProgids
|
jpegfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithProgids
|
jpegfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithProgids
|
jpegfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jxr\OpenWithProgids
|
wdpfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids
|
lnkfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\OpenWithProgids
|
WMP11.AssocFile.M2TS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M2V\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\OpenWithProgids
|
WMP11.AssocFile.m3u
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\OpenWithProgids
|
WMP11.AssocFile.M4A
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\OpenWithProgids
|
WMP11.AssocFile.MP4
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\OpenWithProgids
|
mhtmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\OpenWithProgids
|
mhtmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mk3d\OpenWithProgids
|
WMP11.AssocFile.MK3D
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\OpenWithProgids
|
WMP11.AssocFile.MKA
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\OpenWithProgids
|
WMP11.AssocFile.MKV
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithProgids
|
WMP11.AssocFile.MOV
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP2\OpenWithProgids
|
WMP11.AssocFile.MP3
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\OpenWithProgids
|
WMP11.AssocFile.MP4
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msg\OpenWithProgids
|
Outlook.File.msg.15
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\OpenWithProgids
|
WMP11.AssocFile.M2TS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ocx\OpenWithProgids
|
ocxfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odp\OpenWithProgids
|
PowerPoint.OpenDocumentPresentation.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ods\OpenWithProgids
|
Excel.OpenDocumentSpreadsheet.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odt\OpenWithProgids
|
Word.OpenDocumentText.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.otf\OpenWithProgids
|
otffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithProgids
|
pngfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pot\OpenWithProgids
|
PowerPoint.Template.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potm\OpenWithProgids
|
PowerPoint.TemplateMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potx\OpenWithProgids
|
PowerPoint.Template.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppam\OpenWithProgids
|
PowerPoint.Addin.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsm\OpenWithProgids
|
PowerPoint.SlideShowMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsx\OpenWithProgids
|
PowerPoint.SlideShow.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\OpenWithProgids
|
PowerPoint.Show.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptm\OpenWithProgids
|
PowerPoint.ShowMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\OpenWithProgids
|
PowerPoint.Show.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1\OpenWithProgids
|
Microsoft.PowerShellScript.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1xml\OpenWithProgids
|
Microsoft.PowerShellXMLData.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd1\OpenWithProgids
|
Microsoft.PowerShellData.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psm1\OpenWithProgids
|
Microsoft.PowerShellModule.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pssc\OpenWithProgids
|
Microsoft.PowerShellSessionConfiguration.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\OpenWithProgids
|
rlefile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids
|
Word.RTF.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scf\OpenWithProgids
|
SHCmdFile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.search-ms\OpenWithProgids
|
SearchFolder
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\OpenWithProgids
|
shtmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldm\OpenWithProgids
|
PowerPoint.SlideMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldx\OpenWithProgids
|
PowerPoint.Slide.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\OpenWithProgids
|
WMP11.AssocFile.AU
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sys\OpenWithProgids
|
sysfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithProgids
|
TIFImage.Document
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\OpenWithProgids
|
TIFImage.Document
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TS\OpenWithProgids
|
WMP11.AssocFile.TTS
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\OpenWithProgids
|
ttcfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\OpenWithProgids
|
ttffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\OpenWithProgids
|
txtfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vsto\OpenWithProgids
|
bootstrap.vsto.1
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\OpenWithProgids
|
WMP11.AssocFile.WAV
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\OpenWithProgids
|
WMP11.AssocFile.WAX
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wdp\OpenWithProgids
|
wdpfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\OpenWithProgids
|
WMP11.AssocFile.ASF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\OpenWithProgids
|
WMP11.AssocFile.WMA
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\OpenWithProgids
|
wmffile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\OpenWithProgids
|
WMP11.AssocFile.WMV
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\OpenWithProgids
|
WMP11.AssocFile.ASX
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WPL\OpenWithProgids
|
WMP11.AssocFile.WPL
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\OpenWithProgids
|
WMP11.AssocFile.WVX
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlam\OpenWithProgids
|
Excel.AddInMacroEnabled
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithProgids
|
Excel.Sheet.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsb\OpenWithProgids
|
Excel.SheetBinaryMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsm\OpenWithProgids
|
Excel.SheetMacroEnabled.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithProgids
|
Excel.Sheet.12
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlt\OpenWithProgids
|
Excel.Template.8
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xltm\OpenWithProgids
|
Excel.TemplateMacroEnabled
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xltx\OpenWithProgids
|
Excel.Template
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\OpenWithProgids
|
xmlfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xsl\OpenWithProgids
|
xslfile
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
|
LastUpdate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
|
LastUpdate
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
|
LastUpdate
|
There are 183 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4A20000
|
trusted library allocation
|
page read and write
|
|
|
|
321D0000
|
unclassified section
|
page execute and read and write
|
|
|
|
49D0000
|
trusted library allocation
|
page read and write
|
|
|
|
2E02000
|
direct allocation
|
page execute and read and write
|
|
|
|
7FF5281CF000
|
unkown
|
page readonly
|
||
|
21E9000
|
heap
|
page read and write
|
||
|
C817000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
10001000
|
unkown
|
page execute read
|
||
|
E21D000
|
unkown
|
page read and write
|
||
|
17C0000
|
unkown
|
page readonly
|
||
|
7FF5281D5000
|
unkown
|
page readonly
|
||
|
21FD000
|
heap
|
page read and write
|
||
|
DEA7000
|
unkown
|
page read and write
|
||
|
D970000
|
unkown
|
page read and write
|
||
|
20EE000
|
stack
|
page read and write
|
||
|
AE90000
|
unkown
|
page read and write
|
||
|
37D0000
|
direct allocation
|
page read and write
|
||
|
21E2000
|
heap
|
page read and write
|
||
|
E03C000
|
unkown
|
page read and write
|
||
|
7FF528115000
|
unkown
|
page readonly
|
||
|
3983000
|
unkown
|
page read and write
|
||
|
7FF52839C000
|
unkown
|
page readonly
|
||
|
2616000
|
unkown
|
page read and write
|
||
|
7FF528269000
|
unkown
|
page readonly
|
||
|
5DAC000
|
unkown
|
page read and write
|
||
|
17C0000
|
unkown
|
page readonly
|
||
|
7FF52813E000
|
unkown
|
page readonly
|
||
|
3975000
|
unkown
|
page read and write
|
||
|
21C0000
|
unkown
|
page read and write
|
||
|
E202000
|
unkown
|
page read and write
|
||
|
D2D1000
|
unkown
|
page read and write
|
||
|
7FF527C44000
|
unkown
|
page readonly
|
||
|
A0B0000
|
unkown
|
page read and write
|
||
|
39DE000
|
unkown
|
page read and write
|
||
|
B50000
|
unkown
|
page read and write
|
||
|
212E000
|
stack
|
page read and write
|
||
|
5280000
|
unkown
|
page read and write
|
||
|
13CDA000
|
heap
|
page read and write
|
||
|
A0C0000
|
unkown
|
page read and write
|
||
|
7FF527D3F000
|
unkown
|
page readonly
|
||
|
13CD2000
|
heap
|
page read and write
|
||
|
7FF528416000
|
unkown
|
page readonly
|
||
|
DD8A000
|
unkown
|
page read and write
|
||
|
BA0000
|
heap
|
page read and write
|
||
|
7FF527A16000
|
unkown
|
page readonly
|
||
|
DD9F000
|
unkown
|
page read and write
|
||
|
7FF5278CF000
|
unkown
|
page readonly
|
||
|
CC84000
|
unkown
|
page read and write
|
||
|
7FF527FF3000
|
unkown
|
page readonly
|
||
|
DF70000
|
unkown
|
page read and write
|
||
|
1381B000
|
unkown
|
page read and write
|
||
|
5200000
|
unkown
|
page read and write
|
||
|
2287000
|
heap
|
page read and write
|
||
|
137D6000
|
unkown
|
page read and write
|
||
|
7FF528536000
|
unkown
|
page readonly
|
||
|
9FA4000
|
unkown
|
page read and write
|
||
|
9C4D000
|
unkown
|
page read and write
|
||
|
7FF52810C000
|
unkown
|
page readonly
|
||
|
4F92000
|
unkown
|
page read and write
|
||
|
11B4D000
|
unkown
|
page read and write
|
||
|
267D000
|
unkown
|
page read and write
|
||
|
DB48000
|
unkown
|
page read and write
|
||
|
407000
|
unkown
|
page readonly
|
||
|
11A53000
|
unkown
|
page read and write
|
||
|
118A0000
|
unkown
|
page read and write
|
||
|
A410000
|
unkown
|
page readonly
|
||
|
7FF5282ED000
|
unkown
|
page readonly
|
||
|
7FF527AEF000
|
unkown
|
page readonly
|
||
|
B70000
|
unkown
|
page read and write
|
||
|
7FF527B79000
|
unkown
|
page readonly
|
||
|
21CD000
|
heap
|
page read and write
|
||
|
FA70000
|
unkown
|
page readonly
|
||
|
4EB7000
|
unkown
|
page read and write
|
||
|
7FF527F47000
|
unkown
|
page readonly
|
||
|
2AEF000
|
stack
|
page read and write
|
||
|
7FF528118000
|
unkown
|
page readonly
|
||
|
EE0000
|
unkown
|
page readonly
|
||
|
7FF52797F000
|
unkown
|
page readonly
|
||
|
7FF52852C000
|
unkown
|
page readonly
|
||
|
30A3000
|
heap
|
page read and write
|
||
|
E068000
|
unkown
|
page read and write
|
||
|
38ED000
|
unkown
|
page read and write
|
||
|
2363000
|
heap
|
page read and write
|
||
|
A8DB000
|
stack
|
page read and write
|
||
|
7FF52808B000
|
unkown
|
page readonly
|
||
|
26EE000
|
unkown
|
page read and write
|
||
|
7FF527F6E000
|
unkown
|
page readonly
|
||
|
7FF527AFF000
|
unkown
|
page readonly
|
||
|
B60000
|
unkown
|
page read and write
|
||
|
30A3000
|
heap
|
page read and write
|
||
|
CADF000
|
stack
|
page read and write
|
||
|
7FF527951000
|
unkown
|
page readonly
|
||
|
7FF527B67000
|
unkown
|
page readonly
|
||
|
7FF527D08000
|
unkown
|
page readonly
|
||
|
2C34000
|
heap
|
page read and write
|
||
|
4F82000
|
unclassified section
|
page read and write
|
||
|
7FF527F47000
|
unkown
|
page readonly
|
||
|
7FF52808D000
|
unkown
|
page readonly
|
||
|
F9D9000
|
stack
|
page read and write
|
||
|
7FF52796E000
|
unkown
|
page readonly
|
||
|
3993000
|
unkown
|
page read and write
|
||
|
7FF527975000
|
unkown
|
page readonly
|
||
|
27EF000
|
stack
|
page read and write
|
||
|
30000
|
heap
|
page read and write
|
||
|
BFD4000
|
unkown
|
page read and write
|
||
|
9BE0000
|
unkown
|
page read and write
|
||
|
22B0000
|
unkown
|
page read and write
|
||
|
30000
|
heap
|
page read and write
|
||
|
A220000
|
unkown
|
page readonly
|
||
|
EC60000
|
unkown
|
page readonly
|
||
|
A9DE000
|
stack
|
page read and write
|
||
|
501D000
|
unkown
|
page read and write
|
||
|
7FF52794A000
|
unkown
|
page readonly
|
||
|
7FF527AF7000
|
unkown
|
page readonly
|
||
|
4F3C000
|
unkown
|
page read and write
|
||
|
DD9B000
|
unkown
|
page read and write
|
||
|
9EFA000
|
unkown
|
page read and write
|
||
|
3978000
|
unkown
|
page read and write
|
||
|
9EFA000
|
unkown
|
page read and write
|
||
|
3E0E000
|
stack
|
page read and write
|
||
|
DFF6000
|
unkown
|
page read and write
|
||
|
21E9000
|
heap
|
page read and write
|
||
|
D9C0000
|
unkown
|
page read and write
|
||
|
C010000
|
unkown
|
page readonly
|
||
|
AE01000
|
unkown
|
page read and write
|
||
|
3993000
|
unkown
|
page read and write
|
||
|
26E8000
|
unkown
|
page read and write
|
||
|
7FF527E9A000
|
unkown
|
page readonly
|
||
|
5C5F000
|
unkown
|
page read and write
|
||
|
48E4000
|
heap
|
page read and write
|
||
|
216E000
|
stack
|
page read and write
|
||
|
2E80000
|
trusted library allocation
|
page read and write
|
||
|
3070000
|
unkown
|
page readonly
|
||
|
7FF527B18000
|
unkown
|
page readonly
|
||
|
21FE000
|
heap
|
page read and write
|
||
|
CC9F000
|
unkown
|
page read and write
|
||
|
38E0000
|
unkown
|
page read and write
|
||
|
7FF527BC0000
|
unkown
|
page readonly
|
||
|
7FF527D9C000
|
unkown
|
page readonly
|
||
|
501A000
|
unkown
|
page read and write
|
||
|
118AB000
|
unkown
|
page read and write
|
||
|
510000
|
heap
|
page read and write
|
||
|
7FF5284B4000
|
unkown
|
page readonly
|
||
|
E22E000
|
unkown
|
page read and write
|
||
|
7FF527C5D000
|
unkown
|
page readonly
|
||
|
A280000
|
unkown
|
page readonly
|
||
|
7FF527A98000
|
unkown
|
page readonly
|
||
|
590000
|
unkown
|
page readonly
|
||
|
7FF5278A9000
|
unkown
|
page readonly
|
||
|
DF2A000
|
unkown
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
2242000
|
heap
|
page read and write
|
||
|
E06F000
|
unkown
|
page read and write
|
||
|
D33D000
|
unkown
|
page read and write
|
||
|
DD15000
|
unkown
|
page read and write
|
||
|
31E4F000
|
stack
|
page read and write
|
||
|
7FF527DD6000
|
unkown
|
page readonly
|
||
|
DD39000
|
unkown
|
page read and write
|
||
|
5C7000
|
heap
|
page read and write
|
||
|
DD39000
|
unkown
|
page read and write
|
||
|
7FF528078000
|
unkown
|
page readonly
|
||
|
23A0000
|
heap
|
page read and write
|
||
|
2FC0000
|
heap
|
page read and write
|
||
|
1381B000
|
unkown
|
page read and write
|
||
|
9EA4000
|
unkown
|
page read and write
|
||
|
7FF527B40000
|
unkown
|
page readonly
|
||
|
7D3000
|
unkown
|
page readonly
|
||
|
3830000
|
direct allocation
|
page read and write
|
||
|
E0E0000
|
unkown
|
page read and write
|
||
|
7FF528452000
|
unkown
|
page readonly
|
||
|
26D7000
|
unkown
|
page read and write
|
||
|
7FF52833A000
|
unkown
|
page readonly
|
||
|
118C1000
|
unkown
|
page read and write
|
||
|
4167000
|
unkown
|
page execute and read and write
|
||
|
2360000
|
heap
|
page read and write
|
||
|
2230000
|
unkown
|
page read and write
|
||
|
A230000
|
unkown
|
page readonly
|
||
|
DD7D000
|
unkown
|
page read and write
|
||
|
7FF527BC0000
|
unkown
|
page readonly
|
||
|
7FF506DE0000
|
unkown
|
page readonly
|
||
|
2631000
|
unkown
|
page read and write
|
||
|
7FF52811A000
|
unkown
|
page readonly
|
||
|
7FF5283B7000
|
unkown
|
page readonly
|
||
|
2CEF000
|
stack
|
page read and write
|
||
|
32840000
|
unclassified section
|
page execute and read and write
|
||
|
397C000
|
unkown
|
page read and write
|
||
|
BB0000
|
unkown
|
page readonly
|
||
|
9E51000
|
unkown
|
page read and write
|
||
|
321D0000
|
direct allocation
|
page read and write
|
||
|
7FF528078000
|
unkown
|
page readonly
|
||
|
9DC1000
|
unkown
|
page read and write
|
||
|
3011000
|
heap
|
page read and write
|
||
|
3BB0000
|
unkown
|
page read and write
|
||
|
A043000
|
unkown
|
page read and write
|
||
|
2640000
|
heap
|
page read and write
|
||
|
7FF528444000
|
unkown
|
page readonly
|
||
|
13854000
|
unkown
|
page read and write
|
||
|
7FF527AC2000
|
unkown
|
page readonly
|
||
|
7DC000
|
unkown
|
page readonly
|
||
|
DD94000
|
unkown
|
page read and write
|
||
|
3978000
|
unkown
|
page read and write
|
||
|
7FF506DE0000
|
unkown
|
page readonly
|
||
|
7FF527AEF000
|
unkown
|
page readonly
|
||
|
7FF5284AA000
|
unkown
|
page readonly
|
||
|
37F0000
|
direct allocation
|
page read and write
|
||
|
4FB0000
|
unkown
|
page read and write
|
||
|
31E0E000
|
stack
|
page read and write
|
||
|
7FF52844B000
|
unkown
|
page readonly
|
||
|
7FF528131000
|
unkown
|
page readonly
|
||
|
7FF52835C000
|
unkown
|
page readonly
|
||
|
7FF52834B000
|
unkown
|
page readonly
|
||
|
1189A000
|
unkown
|
page read and write
|
||
|
7FF52794A000
|
unkown
|
page readonly
|
||
|
13A000
|
stack
|
page read and write
|
||
|
274F000
|
stack
|
page read and write
|
||
|
2242000
|
heap
|
page read and write
|
||
|
4EF2000
|
unkown
|
page read and write
|
||
|
5290000
|
unkown
|
page read and write
|
||
|
D94D000
|
stack
|
page read and write
|
||
|
4960000
|
heap
|
page read and write
|
||
|
3978000
|
unkown
|
page read and write
|
||
|
DA70000
|
unkown
|
page read and write
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
261A000
|
unkown
|
page read and write
|
||
|
22F0000
|
heap
|
page read and write
|
||
|
BFF0000
|
unkown
|
page read and write
|
||
|
F85000
|
stack
|
page read and write
|
||
|
21E2000
|
heap
|
page read and write
|
||
|
11963000
|
unkown
|
page read and write
|
||
|
397C000
|
unkown
|
page read and write
|
||
|
7FF527E42000
|
unkown
|
page readonly
|
||
|
26EE000
|
unkown
|
page read and write
|
||
|
D320000
|
unkown
|
page read and write
|
||
|
7FF5283BC000
|
unkown
|
page readonly
|
||
|
5C68000
|
unkown
|
page read and write
|
||
|
327C0000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5283E4000
|
unkown
|
page readonly
|
||
|
E03C000
|
unkown
|
page read and write
|
||
|
9FB5000
|
unkown
|
page read and write
|
||
|
7FF527B49000
|
unkown
|
page readonly
|
||
|
C770000
|
unkown
|
page readonly
|
||
|
14D9E000
|
unkown
|
page read and write
|
||
|
260E000
|
unkown
|
page read and write
|
||
|
7FF527C5D000
|
unkown
|
page readonly
|
||
|
32619000
|
direct allocation
|
page execute and read and write
|
||
|
7AF0000
|
unkown
|
page read and write | page write combine
|
||
|
3860000
|
direct allocation
|
page read and write
|
||
|
26D0000
|
unkown
|
page read and write
|
||
|
264A000
|
unkown
|
page read and write
|
||
|
4FFC000
|
unkown
|
page read and write
|
||
|
1780000
|
unkown
|
page readonly
|
||
|
7FF5282BD000
|
unkown
|
page readonly
|
||
|
1300000
|
unkown
|
page readonly
|
||
|
D31E000
|
unkown
|
page read and write
|
||
|
D329000
|
unkown
|
page read and write
|
||
|
D8CD000
|
stack
|
page read and write
|
||
|
3991000
|
unkown
|
page read and write
|
||
|
5D03000
|
unkown
|
page read and write
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
DD3C000
|
unkown
|
page read and write
|
||
|
3987000
|
unkown
|
page read and write
|
||
|
7FF5284F3000
|
unkown
|
page readonly
|
||
|
DC51000
|
unkown
|
page read and write
|
||
|
7FF506DDA000
|
unkown
|
page readonly
|
||
|
2631000
|
unkown
|
page read and write
|
||
|
ED68000
|
stack
|
page read and write
|
||
|
3850000
|
direct allocation
|
page read and write
|
||
|
E206000
|
unkown
|
page read and write
|
||
|
7D3000
|
unkown
|
page readonly
|
||
|
9BF0000
|
unkown
|
page read and write
|
||
|
7FF528296000
|
unkown
|
page readonly
|
||
|
11B75000
|
unkown
|
page read and write
|
||
|
118A0000
|
unkown
|
page read and write
|
||
|
DA6A000
|
stack
|
page read and write
|
||
|
31C8F000
|
stack
|
page read and write
|
||
|
520000
|
unkown
|
page read and write
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
9C30000
|
unkown
|
page read and write
|
||
|
500000
|
unkown
|
page readonly
|
||
|
7FF52836A000
|
unkown
|
page readonly
|
||
|
FE5F000
|
stack
|
page read and write
|
||
|
CBE2000
|
unkown
|
page read and write
|
||
|
39DE000
|
unkown
|
page read and write
|
||
|
EDEA000
|
stack
|
page read and write
|
||
|
7FF527C51000
|
unkown
|
page readonly
|
||
|
500C000
|
unkown
|
page read and write
|
||
|
7FF527D98000
|
unkown
|
page readonly
|
||
|
7FF527A6F000
|
unkown
|
page readonly
|
||
|
FCDF000
|
stack
|
page read and write
|
||
|
7DF42A960000
|
unkown
|
page readonly
|
||
|
17B5000
|
heap
|
page read and write
|
||
|
4D5D000
|
direct allocation
|
page execute and read and write
|
||
|
7FF528300000
|
unkown
|
page readonly
|
||
|
70000
|
heap
|
page read and write
|
||
|
FAC0000
|
unkown
|
page read and write
|
||
|
2360000
|
heap
|
page read and write
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
7FF52855B000
|
unkown
|
page readonly
|
||
|
119F4000
|
unkown
|
page read and write
|
||
|
1339000
|
heap
|
page read and write
|
||
|
490C000
|
system
|
page read and write
|
||
|
31D4D000
|
stack
|
page read and write
|
||
|
7FF52830A000
|
unkown
|
page readonly
|
||
|
C010000
|
unkown
|
page readonly
|
||
|
A2F0000
|
unkown
|
page readonly
|
||
|
9C26000
|
unkown
|
page read and write
|
||
|
DE58000
|
unkown
|
page read and write
|
||
|
7FF5284D6000
|
unkown
|
page readonly
|
||
|
DD94000
|
unkown
|
page read and write
|
||
|
2300000
|
unkown
|
page read and write
|
||
|
7FF52832B000
|
unkown
|
page readonly
|
||
|
5EA000
|
unkown
|
page execute read
|
||
|
7FF5284C7000
|
unkown
|
page readonly
|
||
|
9D09000
|
unkown
|
page read and write
|
||
|
26B2000
|
unkown
|
page read and write
|
||
|
263F000
|
unkown
|
page read and write
|
||
|
7FF52800C000
|
unkown
|
page readonly
|
||
|
ECEE000
|
stack
|
page read and write
|
||
|
1F0000
|
unkown
|
page readonly
|
||
|
CC87000
|
unkown
|
page read and write
|
||
|
265D000
|
unkown
|
page read and write
|
||
|
4F0000
|
unkown
|
page read and write
|
||
|
C750000
|
unkown
|
page readonly
|
||
|
DADC000
|
unkown
|
page read and write
|
||
|
36D0000
|
heap
|
page read and write
|
||
|
25F7000
|
heap
|
page read and write
|
||
|
256D000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
296C000
|
stack
|
page read and write
|
||
|
7FF527A8D000
|
unkown
|
page readonly
|
||
|
7FF527FB0000
|
unkown
|
page readonly
|
||
|
15B0000
|
unkown
|
page read and write
|
||
|
51B0000
|
unkown
|
page read and write
|
||
|
39D1000
|
unkown
|
page read and write
|
||
|
3011000
|
heap
|
page read and write
|
||
|
7FF5281D8000
|
unkown
|
page readonly
|
||
|
7FF5284C9000
|
unkown
|
page readonly
|
||
|
CC95000
|
unkown
|
page read and write
|
||
|
4F76000
|
unkown
|
page read and write
|
||
|
26A8000
|
unkown
|
page read and write
|
||
|
590000
|
unkown
|
page readonly
|
||
|
CAF0000
|
unkown
|
page read and write
|
||
|
261A000
|
unkown
|
page read and write
|
||
|
C817000
|
stack
|
page read and write
|
||
|
4FF2000
|
unkown
|
page read and write
|
||
|
7FF527FB3000
|
unkown
|
page readonly
|
||
|
DD3E000
|
unkown
|
page read and write
|
||
|
7FF5284FC000
|
unkown
|
page readonly
|
||
|
32185000
|
heap
|
page read and write
|
||
|
B94000
|
unkown
|
page read and write
|
||
|
4FC4000
|
unkown
|
page read and write
|
||
|
2626000
|
unkown
|
page read and write
|
||
|
31FB0000
|
remote allocation
|
page read and write
|
||
|
7FF528284000
|
unkown
|
page readonly
|
||
|
D337000
|
unkown
|
page read and write
|
||
|
21E9000
|
heap
|
page read and write
|
||
|
7FF527CA8000
|
unkown
|
page readonly
|
||
|
2697000
|
unkown
|
page read and write
|
||
|
9C20000
|
unkown
|
page read and write
|
||
|
7FF52784F000
|
unkown
|
page readonly
|
||
|
5C32000
|
unkown
|
page read and write
|
||
|
7FF527AC2000
|
unkown
|
page readonly
|
||
|
2AEF000
|
stack
|
page read and write
|
||
|
A100000
|
unkown
|
page readonly
|
||
|
DAD1000
|
unkown
|
page read and write
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
517B000
|
unkown
|
page read and write
|
||
|
48DB000
|
heap
|
page read and write
|
||
|
F140000
|
unkown
|
page read and write
|
||
|
262C000
|
unkown
|
page read and write
|
||
|
3469000
|
stack
|
page read and write
|
||
|
9DAB000
|
unkown
|
page read and write
|
||
|
CBE2000
|
unkown
|
page read and write
|
||
|
7FF528255000
|
unkown
|
page readonly
|
||
|
21CB000
|
heap
|
page read and write
|
||
|
3983000
|
unkown
|
page read and write
|
||
|
2570000
|
unkown
|
page read and write
|
||
|
7FF5282C5000
|
unkown
|
page readonly
|
||
|
CD3E000
|
unkown
|
page read and write
|
||
|
FC0000
|
unkown
|
page readonly
|
||
|
AF25000
|
unkown
|
page read and write
|
||
|
A85F000
|
stack
|
page read and write
|
||
|
FC0000
|
unkown
|
page readonly
|
||
|
EDEA000
|
stack
|
page read and write
|
||
|
FA90000
|
heap
|
page read and write
|
||
|
13829000
|
unkown
|
page read and write
|
||
|
7FF5281F7000
|
unkown
|
page readonly
|
||
|
CBC0000
|
unkown
|
page read and write
|
||
|
9D9D000
|
unkown
|
page read and write
|
||
|
CA5F000
|
stack
|
page read and write
|
||
|
2600000
|
heap
|
page read and write
|
||
|
2645000
|
unkown
|
page read and write
|
||
|
20000
|
unkown
|
page readonly
|
||
|
7FF527A16000
|
unkown
|
page readonly
|
||
|
26CC000
|
unkown
|
page read and write
|
||
|
BA4E000
|
stack
|
page read and write
|
||
|
269F000
|
unkown
|
page read and write
|
||
|
9EA4000
|
unkown
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
12A60000
|
heap
|
page read and write
|
||
|
322A8000
|
heap
|
page read and write
|
||
|
38E0000
|
unkown
|
page read and write
|
||
|
5C5F000
|
unkown
|
page read and write
|
||
|
3983000
|
unkown
|
page read and write
|
||
|
7FF5281D8000
|
unkown
|
page readonly
|
||
|
4FC6000
|
unkown
|
page read and write
|
||
|
1760000
|
unkown
|
page read and write
|
||
|
7FF527E6B000
|
unkown
|
page readonly
|
||
|
11BA3000
|
unkown
|
page read and write
|
||
|
E04A000
|
unkown
|
page read and write
|
||
|
A7D0000
|
unkown
|
page readonly
|
||
|
4FF8000
|
unkown
|
page read and write
|
||
|
9E54000
|
unkown
|
page read and write
|
||
|
7FF528437000
|
unkown
|
page readonly
|
||
|
262A000
|
unkown
|
page read and write
|
||
|
7FF5282FC000
|
unkown
|
page readonly
|
||
|
13B1D000
|
unkown
|
page read and write
|
||
|
2CCA000
|
heap
|
page read and write
|
||
|
7FF527DEB000
|
unkown
|
page readonly
|
||
|
7FF5282C0000
|
unkown
|
page readonly
|
||
|
3993000
|
unkown
|
page read and write
|
||
|
3810000
|
direct allocation
|
page read and write
|
||
|
7FF52800C000
|
unkown
|
page readonly
|
||
|
409000
|
unkown
|
page read and write
|
||
|
321D0000
|
direct allocation
|
page read and write
|
||
|
3B10000
|
unkown
|
page read and write
|
||
|
7FF527984000
|
unkown
|
page readonly
|
||
|
262A000
|
unkown
|
page read and write
|
||
|
CB8A000
|
unkown
|
page read and write
|
||
|
7FF527FB5000
|
unkown
|
page readonly
|
||
|
7FF528144000
|
unkown
|
page readonly
|
||
|
9F57000
|
unkown
|
page read and write
|
||
|
C66D000
|
stack
|
page read and write
|
||
|
31840000
|
direct allocation
|
page read and write
|
||
|
14A9000
|
stack
|
page read and write
|
||
|
7FF528437000
|
unkown
|
page readonly
|
||
|
7FF5284EA000
|
unkown
|
page readonly
|
||
|
26D3000
|
unkown
|
page read and write
|
||
|
CC84000
|
unkown
|
page read and write
|
||
|
7FF527B1A000
|
unkown
|
page readonly
|
||
|
7FF52848C000
|
unkown
|
page readonly
|
||
|
2654000
|
unkown
|
page read and write
|
||
|
17E000
|
stack
|
page read and write
|
||
|
2285000
|
heap
|
page read and write
|
||
|
7FF528371000
|
unkown
|
page readonly
|
||
|
AEB1000
|
unkown
|
page read and write
|
||
|
CCA1000
|
unkown
|
page read and write
|
||
|
CB76000
|
unkown
|
page read and write
|
||
|
26E8000
|
unkown
|
page read and write
|
||
|
7FF528374000
|
unkown
|
page readonly
|
||
|
7FF528423000
|
unkown
|
page readonly
|
||
|
A388000
|
stack
|
page read and write
|
||
|
7DF42A940000
|
unkown
|
page readonly
|
||
|
D396000
|
unkown
|
page read and write
|
||
|
32220000
|
direct allocation
|
page execute and read and write
|
||
|
34EA000
|
stack
|
page read and write
|
||
|
10005000
|
unkown
|
page readonly
|
||
|
A9DE000
|
stack
|
page read and write
|
||
|
7FF528371000
|
unkown
|
page readonly
|
||
|
9DAB000
|
unkown
|
page read and write
|
||
|
DDDE000
|
unkown
|
page read and write
|
||
|
7FF52848C000
|
unkown
|
page readonly
|
||
|
E073000
|
unkown
|
page read and write
|
||
|
14D94000
|
unkown
|
page read and write
|
||
|
7FF52829B000
|
unkown
|
page readonly
|
||
|
7FF527951000
|
unkown
|
page readonly
|
||
|
1330000
|
heap
|
page read and write
|
||
|
4FFC000
|
unkown
|
page read and write
|
||
|
245F000
|
stack
|
page read and write
|
||
|
31890000
|
direct allocation
|
page read and write
|
||
|
2370000
|
unkown
|
page read and write
|
||
|
DE62000
|
unkown
|
page read and write
|
||
|
7FF5282B0000
|
unkown
|
page readonly
|
||
|
D970000
|
unkown
|
page read and write
|
||
|
E270000
|
unkown
|
page read and write
|
||
|
DF2A000
|
unkown
|
page read and write
|
||
|
DBF4000
|
unkown
|
page read and write
|
||
|
1339000
|
heap
|
page read and write
|
||
|
3011000
|
heap
|
page read and write
|
||
|
DD70000
|
unkown
|
page read and write
|
||
|
C740000
|
unkown
|
page read and write
|
||
|
7FF527984000
|
unkown
|
page readonly
|
||
|
A043000
|
unkown
|
page read and write
|
||
|
7FF5280E0000
|
unkown
|
page readonly
|
||
|
2651000
|
unkown
|
page read and write
|
||
|
7FF528408000
|
unkown
|
page readonly
|
||
|
6C0000
|
system
|
page execute and read and write
|
||
|
21F5000
|
heap
|
page read and write
|
||
|
2178000
|
heap
|
page read and write
|
||
|
264D000
|
unkown
|
page read and write
|
||
|
7FF527AE0000
|
unkown
|
page readonly
|
||
|
3983000
|
unkown
|
page read and write
|
||
|
7FF528284000
|
unkown
|
page readonly
|
||
|
22F3000
|
heap
|
page read and write
|
||
|
5274000
|
unclassified section
|
page read and write
|
||
|
E16A000
|
unkown
|
page read and write
|
||
|
21CC000
|
heap
|
page read and write
|
||
|
DDAF000
|
unkown
|
page read and write
|
||
|
7FF52843B000
|
unkown
|
page readonly
|
||
|
C9F000
|
stack
|
page read and write
|
||
|
C1BD000
|
stack
|
page read and write
|
||
|
649000
|
unkown
|
page execute read
|
||
|
82E000
|
stack
|
page read and write
|
||
|
37E0000
|
direct allocation
|
page read and write
|
||
|
13829000
|
unkown
|
page read and write
|
||
|
A2E0000
|
unkown
|
page readonly
|
||
|
22F3000
|
heap
|
page read and write
|
||
|
7FF527FF1000
|
unkown
|
page readonly
|
||
|
7FF527B05000
|
unkown
|
page readonly
|
||
|
E001000
|
unkown
|
page read and write
|
||
|
7FF52833A000
|
unkown
|
page readonly
|
||
|
7FF52835C000
|
unkown
|
page readonly
|
||
|
7FF52845D000
|
unkown
|
page readonly
|
||
|
224C000
|
heap
|
page read and write
|
||
|
7FF527D67000
|
unkown
|
page readonly
|
||
|
5194000
|
unkown
|
page read and write
|
||
|
7FF527A9E000
|
unkown
|
page readonly
|
||
|
4F92000
|
unkown
|
page read and write
|
||
|
9C4D000
|
unkown
|
page read and write
|
||
|
3011000
|
heap
|
page read and write
|
||
|
2810000
|
heap
|
page read and write
|
||
|
8CA000
|
heap
|
page read and write
|
||
|
7FF5278C6000
|
unkown
|
page readonly
|
||
|
FA70000
|
unkown
|
page readonly
|
||
|
A260000
|
unkown
|
page readonly
|
||
|
7FF527B1E000
|
unkown
|
page readonly
|
||
|
22F8000
|
heap
|
page read and write
|
||
|
12CEE000
|
stack
|
page read and write
|
||
|
DC6A000
|
unkown
|
page read and write
|
||
|
260E000
|
unkown
|
page read and write
|
||
|
FF5E000
|
stack
|
page read and write
|
||
|
9C3A000
|
unkown
|
page read and write
|
||
|
DC51000
|
unkown
|
page read and write
|
||
|
DDBC000
|
unkown
|
page read and write
|
||
|
7FF528384000
|
unkown
|
page readonly
|
||
|
CB8E000
|
unkown
|
page read and write
|
||
|
7FF528430000
|
unkown
|
page readonly
|
||
|
2245000
|
heap
|
page read and write
|
||
|
F550000
|
unkown
|
page read and write
|
||
|
4FA2000
|
unkown
|
page read and write
|
||
|
7FF527AEB000
|
unkown
|
page readonly
|
||
|
118F4000
|
unkown
|
page read and write
|
||
|
5009000
|
unkown
|
page read and write
|
||
|
21FE000
|
heap
|
page read and write
|
||
|
13CD0000
|
heap
|
page read and write
|
||
|
7FF528346000
|
unkown
|
page readonly
|
||
|
26D9000
|
unkown
|
page read and write
|
||
|
7FF5284C7000
|
unkown
|
page readonly
|
||
|
7FF5284DE000
|
unkown
|
page readonly
|
||
|
11963000
|
unkown
|
page read and write
|
||
|
7FF528525000
|
unkown
|
page readonly
|
||
|
4F90000
|
unkown
|
page read and write
|
||
|
A8DB000
|
stack
|
page read and write
|
||
|
2670000
|
unkown
|
page read and write
|
||
|
7FF528120000
|
unkown
|
page readonly
|
||
|
3910000
|
unkown
|
page read and write
|
||
|
13B10000
|
unkown
|
page read and write
|
||
|
263F000
|
unkown
|
page read and write
|
||
|
CBD7000
|
unkown
|
page read and write
|
||
|
F65F000
|
stack
|
page read and write
|
||
|
7FF52795B000
|
unkown
|
page readonly
|
||
|
7DC000
|
unkown
|
page readonly
|
||
|
10000000
|
unkown
|
page readonly
|
||
|
7FF527DF5000
|
unkown
|
page readonly
|
||
|
4FBA000
|
unkown
|
page read and write
|
||
|
7FF52784F000
|
unkown
|
page readonly
|
||
|
11B07000
|
unkown
|
page read and write
|
||
|
7FF5284C5000
|
unkown
|
page readonly
|
||
|
D9D0000
|
unkown
|
page readonly
|
||
|
48C5000
|
heap
|
page read and write
|
||
|
262E000
|
unkown
|
page read and write
|
||
|
DD70000
|
unkown
|
page read and write
|
||
|
2623000
|
unkown
|
page read and write
|
||
|
7FF528525000
|
unkown
|
page readonly
|
||
|
7FF5284DE000
|
unkown
|
page readonly
|
||
|
9F57000
|
unkown
|
page read and write
|
||
|
4F8E000
|
unkown
|
page read and write
|
||
|
7FF52854C000
|
unkown
|
page readonly
|
||
|
7FF52842C000
|
unkown
|
page readonly
|
||
|
AEB1000
|
unkown
|
page read and write
|
||
|
25F0000
|
heap
|
page read and write
|
||
|
FE1000
|
unkown
|
page readonly
|
||
|
CCAE000
|
unkown
|
page read and write
|
||
|
4BAB000
|
heap
|
page read and write
|
||
|
4F07000
|
unkown
|
page read and write
|
||
|
9BD0000
|
unkown
|
page read and write
|
||
|
DDAF000
|
unkown
|
page read and write
|
||
|
13A000
|
stack
|
page read and write
|
||
|
77F000
|
unkown
|
page read and write
|
||
|
EC60000
|
unkown
|
page readonly
|
||
|
3B13000
|
unkown
|
page read and write
|
||
|
2300000
|
unkown
|
page read and write
|
||
|
7FF527D9F000
|
unkown
|
page readonly
|
||
|
7FF52832E000
|
unkown
|
page readonly
|
||
|
2370000
|
unkown
|
page read and write
|
||
|
BFD4000
|
unkown
|
page read and write
|
||
|
14D94000
|
unkown
|
page read and write
|
||
|
7FF528334000
|
unkown
|
page readonly
|
||
|
7FF527CAF000
|
unkown
|
page readonly
|
||
|
4E1000
|
unkown
|
page readonly
|
||
|
21FC000
|
heap
|
page read and write
|
||
|
7FF527B49000
|
unkown
|
page readonly
|
||
|
C71E000
|
stack
|
page read and write
|
||
|
4F07000
|
unkown
|
page read and write
|
||
|
7FF527C51000
|
unkown
|
page readonly
|
||
|
DFBC000
|
unkown
|
page read and write
|
||
|
E007000
|
unkown
|
page read and write
|
||
|
9BE0000
|
unkown
|
page read and write
|
||
|
2CB8000
|
heap
|
page read and write
|
||
|
7FF52854F000
|
unkown
|
page readonly
|
||
|
292C000
|
stack
|
page read and write
|
||
|
8CE000
|
heap
|
page read and write
|
||
|
4916000
|
system
|
page read and write
|
||
|
7FF527AEB000
|
unkown
|
page readonly
|
||
|
CD4A000
|
unkown
|
page read and write
|
||
|
7E2000
|
unkown
|
page readonly
|
||
|
30A0000
|
heap
|
page read and write
|
||
|
D317000
|
unkown
|
page read and write
|
||
|
3AB0000
|
unkown
|
page readonly
|
||
|
626000
|
unkown
|
page execute read
|
||
|
14D9E000
|
unkown
|
page read and write
|
||
|
7FF527DD6000
|
unkown
|
page readonly
|
||
|
7FF528416000
|
unkown
|
page readonly
|
||
|
CB00000
|
unkown
|
page read and write
|
||
|
9FC3000
|
unkown
|
page read and write
|
||
|
7FF527CBC000
|
unkown
|
page readonly
|
||
|
12E0000
|
unkown
|
page read and write
|
||
|
11A67000
|
unkown
|
page read and write
|
||
|
E068000
|
unkown
|
page read and write
|
||
|
4BD0000
|
trusted library allocation
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
3130000
|
unkown
|
page read and write
|
||
|
17B0000
|
heap
|
page read and write
|
||
|
264A000
|
unkown
|
page read and write
|
||
|
7D3000
|
unkown
|
page readonly
|
||
|
21D6000
|
heap
|
page read and write
|
||
|
B94000
|
unkown
|
page read and write
|
||
|
48C3000
|
heap
|
page read and write
|
||
|
7FF528492000
|
unkown
|
page readonly
|
||
|
39D5000
|
unkown
|
page read and write
|
||
|
9FF8000
|
unkown
|
page read and write
|
||
|
7FF527968000
|
unkown
|
page readonly
|
||
|
9C00000
|
unkown
|
page read and write
|
||
|
D31B000
|
unkown
|
page read and write
|
||
|
2682000
|
unkown
|
page read and write
|
||
|
118C1000
|
unkown
|
page read and write
|
||
|
DD3C000
|
unkown
|
page read and write
|
||
|
7FF52808B000
|
unkown
|
page readonly
|
||
|
A388000
|
stack
|
page read and write
|
||
|
7FF528303000
|
unkown
|
page readonly
|
||
|
F65F000
|
stack
|
page read and write
|
||
|
9E31000
|
unkown
|
page read and write
|
||
|
5003000
|
unkown
|
page read and write
|
||
|
7FF5284AA000
|
unkown
|
page readonly
|
||
|
22E0000
|
unkown
|
page readonly
|
||
|
4B20000
|
trusted library allocation
|
page execute and read and write
|
||
|
9FAE000
|
unkown
|
page read and write
|
||
|
DDB4000
|
unkown
|
page read and write
|
||
|
5B8A000
|
unkown
|
page read and write
|
||
|
318A0000
|
direct allocation
|
page read and write
|
||
|
9C28000
|
unkown
|
page read and write
|
||
|
7FF527FE1000
|
unkown
|
page readonly
|
||
|
7FF527D9C000
|
unkown
|
page readonly
|
||
|
DA6A000
|
stack
|
page read and write
|
||
|
7FF528482000
|
unkown
|
page readonly
|
||
|
225B000
|
heap
|
page read and write
|
||
|
7FF527D3F000
|
unkown
|
page readonly
|
||
|
7FF528423000
|
unkown
|
page readonly
|
||
|
31FEE000
|
stack
|
page read and write
|
||
|
C730000
|
unkown
|
page readonly
|
||
|
E14E000
|
unkown
|
page read and write
|
||
|
510000
|
heap
|
page read and write
|
||
|
26A8000
|
unkown
|
page read and write
|
||
|
13793000
|
unkown
|
page read and write
|
||
|
50D0000
|
unkown
|
page read and write
|
||
|
13B46000
|
unkown
|
page read and write
|
||
|
AFB9000
|
unkown
|
page read and write
|
||
|
7FF528103000
|
unkown
|
page readonly
|
||
|
E3ED000
|
stack
|
page read and write
|
||
|
11A08000
|
unkown
|
page read and write
|
||
|
28EF000
|
stack
|
page read and write
|
||
|
11A61000
|
unkown
|
page read and write
|
||
|
7FF528103000
|
unkown
|
page readonly
|
||
|
FAD0000
|
unkown
|
page read and write
|
||
|
21D6000
|
heap
|
page read and write
|
||
|
137DB000
|
unkown
|
page read and write
|
||
|
500F000
|
unkown
|
page read and write
|
||
|
7FF527A98000
|
unkown
|
page readonly
|
||
|
7FF527953000
|
unkown
|
page readonly
|
||
|
36E0000
|
heap
|
page read and write
|
||
|
26C1000
|
unkown
|
page read and write
|
||
|
9C21000
|
unkown
|
page read and write
|
||
|
FAD0000
|
unkown
|
page read and write
|
||
|
7FF527DEB000
|
unkown
|
page readonly
|
||
|
DD67000
|
unkown
|
page read and write
|
||
|
7FF5282D5000
|
unkown
|
page readonly
|
||
|
1300000
|
unkown
|
page readonly
|
||
|
11B4A000
|
unkown
|
page read and write
|
||
|
DDB4000
|
unkown
|
page read and write
|
||
|
21F2000
|
heap
|
page read and write
|
||
|
7FF527AFC000
|
unkown
|
page readonly
|
||
|
7FF528118000
|
unkown
|
page readonly
|
||
|
7FF5284D1000
|
unkown
|
page readonly
|
||
|
7AF0000
|
unkown
|
page read and write | page write combine
|
||
|
21FC000
|
heap
|
page read and write
|
||
|
7FF528444000
|
unkown
|
page readonly
|
||
|
C750000
|
unkown
|
page readonly
|
||
|
26B7000
|
unkown
|
page read and write
|
||
|
26A3000
|
unkown
|
page read and write
|
||
|
7FF528531000
|
unkown
|
page readonly
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
265D000
|
unkown
|
page read and write
|
||
|
7FF528391000
|
unkown
|
page readonly
|
||
|
4F00000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5284C3000
|
unkown
|
page readonly
|
||
|
D2DC000
|
unkown
|
page read and write
|
||
|
7FF527C9B000
|
unkown
|
page readonly
|
||
|
11ADE000
|
unkown
|
page read and write
|
||
|
2616000
|
unkown
|
page read and write
|
||
|
180000
|
unkown
|
page read and write
|
||
|
7FF527A87000
|
unkown
|
page readonly
|
||
|
21FC000
|
heap
|
page read and write
|
||
|
25F0000
|
heap
|
page read and write
|
||
|
7FF5284FC000
|
unkown
|
page readonly
|
||
|
E274000
|
unkown
|
page read and write
|
||
|
7FF5282ED000
|
unkown
|
page readonly
|
||
|
DD9B000
|
unkown
|
page read and write
|
||
|
CBAD000
|
unkown
|
page read and write
|
||
|
31860000
|
direct allocation
|
page read and write
|
||
|
A40E000
|
stack
|
page read and write
|
||
|
149000
|
stack
|
page read and write
|
||
|
39D5000
|
unkown
|
page read and write
|
||
|
7FF527C56000
|
unkown
|
page readonly
|
||
|
7FF5281A4000
|
unkown
|
page readonly
|
||
|
890000
|
heap
|
page read and write
|
||
|
7FF5282A1000
|
unkown
|
page readonly
|
||
|
9D09000
|
unkown
|
page read and write
|
||
|
21F0000
|
heap
|
page read and write
|
||
|
FA80000
|
unkown
|
page read and write
|
||
|
409000
|
unkown
|
page write copy
|
||
|
2670000
|
unkown
|
page read and write
|
||
|
7FF52814B000
|
unkown
|
page readonly
|
||
|
263E000
|
stack
|
page read and write
|
||
|
32B97000
|
unclassified section
|
page execute and read and write
|
||
|
C770000
|
unkown
|
page readonly
|
||
|
11860000
|
unkown
|
page read and write
|
||
|
17A0000
|
unkown
|
page readonly
|
||
|
2CCA000
|
heap
|
page read and write
|
||
|
7E2000
|
unkown
|
page readonly
|
||
|
DB1000
|
unkown
|
page readonly
|
||
|
14AA2000
|
unkown
|
page read and write
|
||
|
A2C0000
|
unkown
|
page readonly
|
||
|
CB00000
|
unkown
|
page read and write
|
||
|
407000
|
unkown
|
page readonly
|
||
|
7C3000
|
unkown
|
page readonly
|
||
|
4F43000
|
unkown
|
page read and write
|
||
|
9D9D000
|
unkown
|
page read and write
|
||
|
397C000
|
unkown
|
page read and write
|
||
|
F549000
|
stack
|
page read and write
|
||
|
14D7C000
|
unkown
|
page read and write
|
||
|
D317000
|
unkown
|
page read and write
|
||
|
14D86000
|
unkown
|
page read and write
|
||
|
A95F000
|
stack
|
page read and write
|
||
|
9FAE000
|
unkown
|
page read and write
|
||
|
2651000
|
unkown
|
page read and write
|
||
|
A5CD000
|
stack
|
page read and write
|
||
|
E22E000
|
unkown
|
page read and write
|
||
|
26D9000
|
unkown
|
page read and write
|
||
|
500000
|
unkown
|
page readonly
|
||
|
7DF42A971000
|
unkown
|
page execute read
|
||
|
5F2000
|
unkown
|
page execute read
|
||
|
7FF528255000
|
unkown
|
page readonly
|
||
|
3978000
|
unkown
|
page read and write
|
||
|
51D0000
|
unkown
|
page read and write
|
||
|
4EFC000
|
direct allocation
|
page execute and read and write
|
||
|
3880000
|
direct allocation
|
page read and write
|
||
|
7FF528490000
|
unkown
|
page readonly
|
||
|
7FF527CBF000
|
unkown
|
page readonly
|
||
|
2C80000
|
direct allocation
|
page execute and read and write
|
||
|
E129000
|
unkown
|
page read and write
|
||
|
3961000
|
unkown
|
page read and write
|
||
|
7FF527948000
|
unkown
|
page readonly
|
||
|
7FF527AC5000
|
unkown
|
page readonly
|
||
|
7FF527AFC000
|
unkown
|
page readonly
|
||
|
13B42000
|
unkown
|
page read and write
|
||
|
26B2000
|
unkown
|
page read and write
|
||
|
5DB1000
|
unkown
|
page read and write
|
||
|
7FF5281F7000
|
unkown
|
page readonly
|
||
|
E46A000
|
stack
|
page read and write
|
||
|
D345000
|
unkown
|
page read and write
|
||
|
517B000
|
unkown
|
page read and write
|
||
|
7FF5281CB000
|
unkown
|
page readonly
|
||
|
21B8000
|
heap
|
page read and write
|
||
|
EC50000
|
unkown
|
page readonly
|
||
|
500C000
|
unkown
|
page read and write
|
||
|
7FF528472000
|
unkown
|
page readonly
|
||
|
7FF527AE0000
|
unkown
|
page readonly
|
||
|
7FF52796E000
|
unkown
|
page readonly
|
||
|
7C5000
|
unkown
|
page readonly
|
||
|
7FF52835E000
|
unkown
|
page readonly
|
||
|
11B75000
|
unkown
|
page read and write
|
||
|
7FF528408000
|
unkown
|
page readonly
|
||
|
D31B000
|
unkown
|
page read and write
|
||
|
A85F000
|
stack
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
5C57000
|
unkown
|
page read and write
|
||
|
7FF527FB5000
|
unkown
|
page readonly
|
||
|
7FF5278C6000
|
unkown
|
page readonly
|
||
|
500F000
|
unkown
|
page read and write
|
||
|
2CDA000
|
heap
|
page read and write
|
||
|
CC87000
|
unkown
|
page read and write
|
||
|
A7D0000
|
unkown
|
page readonly
|
||
|
21F0000
|
heap
|
page read and write
|
||
|
D352000
|
unkown
|
page read and write
|
||
|
1760000
|
unkown
|
page read and write
|
||
|
11C33000
|
unkown
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
7FF5282D0000
|
unkown
|
page readonly
|
||
|
3B10000
|
unkown
|
page read and write
|
||
|
7FF527B79000
|
unkown
|
page readonly
|
||
|
39DE000
|
unkown
|
page read and write
|
||
|
11ADE000
|
unkown
|
page read and write
|
||
|
3961000
|
unkown
|
page read and write
|
||
|
A648000
|
stack
|
page read and write
|
||
|
2750000
|
heap
|
page read and write
|
||
|
F549000
|
stack
|
page read and write
|
||
|
7FF527E05000
|
unkown
|
page readonly
|
||
|
E04A000
|
unkown
|
page read and write
|
||
|
312E000
|
stack
|
page read and write
|
||
|
7FF527DF2000
|
unkown
|
page readonly
|
||
|
CCA1000
|
unkown
|
page read and write
|
||
|
CD42000
|
unkown
|
page read and write
|
||
|
E073000
|
unkown
|
page read and write
|
||
|
32468000
|
heap
|
page read and write
|
||
|
67A000
|
heap
|
page read and write
|
||
|
21E9000
|
heap
|
page read and write
|
||
|
1660000
|
remote allocation
|
page execute and read and write
|
||
|
356A000
|
stack
|
page read and write
|
||
|
CBC5000
|
unkown
|
page read and write
|
||
|
7FF528513000
|
unkown
|
page readonly
|
||
|
501A000
|
unkown
|
page read and write
|
||
|
39D5000
|
unkown
|
page read and write
|
||
|
CCAC000
|
unkown
|
page read and write
|
||
|
7FF5278B0000
|
unkown
|
page readonly
|
||
|
527E000
|
unclassified section
|
page read and write
|
||
|
12A60000
|
heap
|
page read and write
|
||
|
9BD0000
|
unkown
|
page read and write
|
||
|
13B31000
|
unkown
|
page read and write
|
||
|
7FF527C56000
|
unkown
|
page readonly
|
||
|
7FF528342000
|
unkown
|
page readonly
|
||
|
5EC000
|
unkown
|
page execute read
|
||
|
7FF527B05000
|
unkown
|
page readonly
|
||
|
38D3000
|
stack
|
page read and write
|
||
|
7FF52811A000
|
unkown
|
page readonly
|
||
|
3961000
|
unkown
|
page read and write
|
||
|
25FE000
|
stack
|
page read and write
|
||
|
7FF52843F000
|
unkown
|
page readonly
|
||
|
E206000
|
unkown
|
page read and write
|
||
|
7FF5284EA000
|
unkown
|
page readonly
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
9C5000
|
heap
|
page read and write
|
||
|
3975000
|
unkown
|
page read and write
|
||
|
FEDE000
|
stack
|
page read and write
|
||
|
D337000
|
unkown
|
page read and write
|
||
|
7DEE000
|
stack
|
page read and write
|
||
|
11860000
|
unkown
|
page read and write
|
||
|
7FF5284F3000
|
unkown
|
page readonly
|
||
|
7FF528384000
|
unkown
|
page readonly
|
||
|
324F0000
|
direct allocation
|
page execute and read and write
|
||
|
3B13000
|
unkown
|
page read and write
|
||
|
137D6000
|
unkown
|
page read and write
|
||
|
DAE4000
|
unkown
|
page read and write
|
||
|
7FF5280E0000
|
unkown
|
page readonly
|
||
|
F140000
|
unkown
|
page read and write
|
||
|
7FF52814B000
|
unkown
|
page readonly
|
||
|
39D1000
|
unkown
|
page read and write
|
||
|
7FF527B5C000
|
unkown
|
page readonly
|
||
|
2C30000
|
heap
|
page read and write
|
||
|
7FF52810C000
|
unkown
|
page readonly
|
||
|
31E60000
|
heap
|
page read and write
|
||
|
DDA6000
|
unkown
|
page read and write
|
||
|
2FDE000
|
stack
|
page read and write
|
||
|
41DA000
|
unkown
|
page execute and read and write
|
||
|
7DF42A971000
|
unkown
|
page execute read
|
||
|
DFF3000
|
unkown
|
page read and write
|
||
|
71000
|
heap
|
page read and write
|
||
|
DE58000
|
unkown
|
page read and write
|
||
|
7FF527FE1000
|
unkown
|
page readonly
|
||
|
17A0000
|
unkown
|
page readonly
|
||
|
2674000
|
unkown
|
page read and write
|
||
|
7FF527968000
|
unkown
|
page readonly
|
||
|
7FF527F6E000
|
unkown
|
page readonly
|
||
|
2635000
|
unkown
|
page read and write
|
||
|
4F43000
|
unkown
|
page read and write
|
||
|
E007000
|
unkown
|
page read and write
|
||
|
7FF5283C3000
|
unkown
|
page readonly
|
||
|
2170000
|
heap
|
page read and write
|
||
|
7FF52832B000
|
unkown
|
page readonly
|
||
|
7FF5278A9000
|
unkown
|
page readonly
|
||
|
EBE9000
|
stack
|
page read and write
|
||
|
21C0000
|
unkown
|
page read and write
|
||
|
48C0000
|
trusted library allocation
|
page read and write
|
||
|
38F3000
|
unkown
|
page read and write
|
||
|
7FF5284D6000
|
unkown
|
page readonly
|
||
|
7FF5281CB000
|
unkown
|
page readonly
|
||
|
7FF528545000
|
unkown
|
page readonly
|
||
|
7FF52834D000
|
unkown
|
page readonly
|
||
|
7FF527B0E000
|
unkown
|
page readonly
|
||
|
7FF506DDA000
|
unkown
|
page readonly
|
||
|
266A000
|
unkown
|
page read and write
|
||
|
7FF52820A000
|
unkown
|
page readonly
|
||
|
7DF42A941000
|
unkown
|
page execute read
|
||
|
E001000
|
unkown
|
page read and write
|
||
|
4FAD000
|
unkown
|
page read and write
|
||
|
5C32000
|
unkown
|
page read and write
|
||
|
4FCA000
|
unkown
|
page read and write
|
||
|
3246C000
|
heap
|
page read and write
|
||
|
7FF527CAF000
|
unkown
|
page readonly
|
||
|
22B0000
|
unkown
|
page read and write
|
||
|
E056000
|
unkown
|
page read and write
|
||
|
86E000
|
stack
|
page read and write
|
||
|
7FF528131000
|
unkown
|
page readonly
|
||
|
7FF528452000
|
unkown
|
page readonly
|
||
|
FDDF000
|
stack
|
page read and write
|
||
|
11967000
|
unkown
|
page read and write
|
||
|
7C3000
|
unkown
|
page readonly
|
||
|
7FF52854C000
|
unkown
|
page readonly
|
||
|
119FC000
|
unkown
|
page read and write
|
||
|
11A53000
|
unkown
|
page read and write
|
||
|
DD6A000
|
unkown
|
page read and write
|
||
|
7FF5284B4000
|
unkown
|
page readonly
|
||
|
409000
|
unkown
|
page write copy
|
||
|
7FF52853E000
|
unkown
|
page readonly
|
||
|
2686000
|
unkown
|
page read and write
|
||
|
9DC1000
|
unkown
|
page read and write
|
||
|
DD97000
|
unkown
|
page read and write
|
||
|
7FF52843F000
|
unkown
|
page readonly
|
||
|
7DC000
|
unkown
|
page readonly
|
||
|
ED68000
|
stack
|
page read and write
|
||
|
31850000
|
direct allocation
|
page read and write
|
||
|
13B10000
|
unkown
|
page read and write
|
||
|
DD99000
|
unkown
|
page read and write
|
||
|
7FF527A2E000
|
unkown
|
page readonly
|
||
|
3C20000
|
direct allocation
|
page read and write
|
||
|
21CC000
|
heap
|
page read and write
|
||
|
11AD4000
|
unkown
|
page read and write
|
||
|
DFBC000
|
unkown
|
page read and write
|
||
|
A0C0000
|
unkown
|
page read and write
|
||
|
7FF528342000
|
unkown
|
page readonly
|
||
|
3BA0000
|
unkown
|
page readonly
|
||
|
7FF528545000
|
unkown
|
page readonly
|
||
|
D31B000
|
unkown
|
page read and write
|
||
|
7DF42A961000
|
unkown
|
page execute read
|
||
|
D317000
|
unkown
|
page read and write
|
||
|
E16C000
|
unkown
|
page read and write
|
||
|
AE90000
|
unkown
|
page read and write
|
||
|
11914000
|
unkown
|
page read and write
|
||
|
7FF527E6B000
|
unkown
|
page readonly
|
||
|
7FF527E9C000
|
unkown
|
page readonly
|
||
|
13812000
|
unkown
|
page read and write
|
||
|
7FF527EA0000
|
unkown
|
page readonly
|
||
|
7FF5278B0000
|
unkown
|
page readonly
|
||
|
DADC000
|
unkown
|
page read and write
|
||
|
269F000
|
unkown
|
page read and write
|
||
|
1330000
|
heap
|
page read and write
|
||
|
CD42000
|
unkown
|
page read and write
|
||
|
DDD6000
|
unkown
|
page read and write
|
||
|
F85000
|
stack
|
page read and write
|
||
|
FB5F000
|
stack
|
page read and write
|
||
|
9FB5000
|
unkown
|
page read and write
|
||
|
31FB0000
|
remote allocation
|
page read and write
|
||
|
21F2000
|
heap
|
page read and write
|
||
|
CA5F000
|
stack
|
page read and write
|
||
|
7FF527D4F000
|
unkown
|
page readonly
|
||
|
7FF527D7A000
|
unkown
|
page readonly
|
||
|
2697000
|
unkown
|
page read and write
|
||
|
DC6E000
|
unkown
|
page read and write
|
||
|
7FF5280A0000
|
unkown
|
page readonly
|
||
|
4FAD000
|
unkown
|
page read and write
|
||
|
268B000
|
unkown
|
page read and write
|
||
|
DE62000
|
unkown
|
page read and write
|
||
|
CA0000
|
heap
|
page read and write
|
||
|
7FF527C9B000
|
unkown
|
page readonly
|
||
|
7FF5278D8000
|
unkown
|
page readonly
|
||
|
CB50000
|
unkown
|
page read and write
|
||
|
7FF527A8D000
|
unkown
|
page readonly
|
||
|
A0A0000
|
unkown
|
page read and write
|
||
|
13754000
|
unkown
|
page read and write
|
||
|
11C02000
|
unkown
|
page read and write
|
||
|
7FF528513000
|
unkown
|
page readonly
|
||
|
9FB2000
|
unkown
|
page read and write
|
||
|
39DE000
|
unkown
|
page read and write
|
||
|
36EA000
|
stack
|
page read and write
|
||
|
21F5000
|
heap
|
page read and write
|
||
|
239F000
|
stack
|
page read and write
|
||
|
26D3000
|
unkown
|
page read and write
|
||
|
EC50000
|
unkown
|
page readonly
|
||
|
7FF528476000
|
unkown
|
page readonly
|
||
|
7FF52813E000
|
unkown
|
page readonly
|
||
|
26BC000
|
unkown
|
page read and write
|
||
|
CC3F000
|
unkown
|
page read and write
|
||
|
22F0000
|
heap
|
page read and write
|
||
|
520000
|
unkown
|
page read and write
|
||
|
7FF527AD1000
|
unkown
|
page readonly
|
||
|
7FF5283FB000
|
unkown
|
page readonly
|
||
|
D950000
|
unkown
|
page read and write
|
||
|
E03C000
|
unkown
|
page read and write
|
||
|
DDA6000
|
unkown
|
page read and write
|
||
|
3987000
|
unkown
|
page read and write
|
||
|
13B1D000
|
unkown
|
page read and write
|
||
|
CB92000
|
unkown
|
page read and write
|
||
|
11A08000
|
unkown
|
page read and write
|
||
|
7FF5281D5000
|
unkown
|
page readonly
|
||
|
FFDF000
|
stack
|
page read and write
|
||
|
118B7000
|
unkown
|
page read and write
|
||
|
7FF5283BC000
|
unkown
|
page readonly
|
||
|
9EE5000
|
unkown
|
page read and write
|
||
|
31F4E000
|
stack
|
page read and write
|
||
|
7FF5281A4000
|
unkown
|
page readonly
|
||
|
7FF527CAC000
|
unkown
|
page readonly
|
||
|
3910000
|
unkown
|
page read and write
|
||
|
DFF5000
|
unkown
|
page read and write
|
||
|
11885000
|
unkown
|
page read and write
|
||
|
2C5F000
|
stack
|
page read and write
|
||
|
DEF3000
|
unkown
|
page read and write
|
||
|
7FF527B08000
|
unkown
|
page readonly
|
||
|
7FF52836C000
|
unkown
|
page readonly
|
||
|
4632000
|
system
|
page read and write
|
||
|
7FF527E3A000
|
unkown
|
page readonly
|
||
|
9C00000
|
unkown
|
page read and write
|
||
|
DFF8000
|
unkown
|
page read and write
|
||
|
7FF528303000
|
unkown
|
page readonly
|
||
|
7FF52797F000
|
unkown
|
page readonly
|
||
|
FA90000
|
heap
|
page read and write
|
||
|
31F0E000
|
stack
|
page read and write
|
||
|
2BEF000
|
stack
|
page read and write
|
||
|
11A04000
|
unkown
|
page read and write
|
||
|
7DAD000
|
stack
|
page read and write
|
||
|
11885000
|
unkown
|
page read and write
|
||
|
A2F0000
|
unkown
|
page readonly
|
||
|
7FF5280A0000
|
unkown
|
page readonly
|
||
|
E0E0000
|
unkown
|
page read and write
|
||
|
7FF527A27000
|
unkown
|
page readonly
|
||
|
7FF527CB9000
|
unkown
|
page readonly
|
||
|
7FF527AC0000
|
unkown
|
page readonly
|
||
|
5C68000
|
unkown
|
page read and write
|
||
|
21FE000
|
heap
|
page read and write
|
||
|
26C1000
|
unkown
|
page read and write
|
||
|
4EEB000
|
unkown
|
page read and write
|
||
|
9FB2000
|
unkown
|
page read and write
|
||
|
11A25000
|
unkown
|
page read and write
|
||
|
119F7000
|
unkown
|
page read and write
|
||
|
2C34000
|
heap
|
page read and write
|
||
|
DD6A000
|
unkown
|
page read and write
|
||
|
7FF528490000
|
unkown
|
page readonly
|
||
|
32180000
|
direct allocation
|
page read and write
|
||
|
CB8E000
|
unkown
|
page read and write
|
||
|
DD3E000
|
unkown
|
page read and write
|
||
|
67A000
|
heap
|
page read and write
|
||
|
4F89000
|
unkown
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
118AF000
|
unkown
|
page read and write
|
||
|
7FF527BE1000
|
unkown
|
page readonly
|
||
|
E056000
|
unkown
|
page read and write
|
||
|
2645000
|
unkown
|
page read and write
|
||
|
DAFB000
|
unkown
|
page read and write
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
E001000
|
unkown
|
page read and write
|
||
|
5DAC000
|
unkown
|
page read and write
|
||
|
C899000
|
stack
|
page read and write
|
||
|
7FF527CAC000
|
unkown
|
page readonly
|
||
|
3010000
|
heap
|
page read and write
|
||
|
7FF52856C000
|
unkown
|
page readonly
|
||
|
11A6F000
|
unkown
|
page read and write
|
||
|
180000
|
unkown
|
page read and write
|
||
|
CBC5000
|
unkown
|
page read and write
|
||
|
D9D0000
|
unkown
|
page readonly
|
||
|
224C000
|
heap
|
page read and write
|
||
|
5C57000
|
unkown
|
page read and write
|
||
|
318B0000
|
direct allocation
|
page read and write
|
||
|
7FF528562000
|
unkown
|
page readonly
|
||
|
7FF52820A000
|
unkown
|
page readonly
|
||
|
12E0000
|
unkown
|
page read and write
|
||
|
48CC000
|
heap
|
page read and write
|
||
|
7FF528252000
|
unkown
|
page readonly
|
||
|
118AF000
|
unkown
|
page read and write
|
||
|
27EF000
|
stack
|
page read and write
|
||
|
FC5E000
|
stack
|
page read and write
|
||
|
492E000
|
system
|
page read and write
|
||
|
CCB8000
|
unkown
|
page read and write
|
||
|
11B01000
|
unkown
|
page read and write
|
||
|
7A8000
|
unkown
|
page read and write
|
||
|
21D6000
|
heap
|
page read and write
|
||
|
7FF528476000
|
unkown
|
page readonly
|
||
|
7FF5282D5000
|
unkown
|
page readonly
|
||
|
5D10000
|
unkown
|
page read and write
|
||
|
39D5000
|
unkown
|
page read and write
|
||
|
A220000
|
unkown
|
page readonly
|
||
|
5EE000
|
unkown
|
page execute read
|
||
|
22F8000
|
heap
|
page read and write
|
||
|
A280000
|
unkown
|
page readonly
|
||
|
7FF527BD8000
|
unkown
|
page readonly
|
||
|
CBC7000
|
unkown
|
page read and write
|
||
|
7FF528536000
|
unkown
|
page readonly
|
||
|
2200000
|
heap
|
page read and write
|
||
|
7FF527A2E000
|
unkown
|
page readonly
|
||
|
3230000
|
unkown
|
page readonly
|
||
|
4FC0000
|
unkown
|
page read and write
|
||
|
241E000
|
stack
|
page read and write
|
||
|
7FF52836A000
|
unkown
|
page readonly
|
||
|
7FF528472000
|
unkown
|
page readonly
|
||
|
7FF5284D1000
|
unkown
|
page readonly
|
||
|
E007000
|
unkown
|
page read and write
|
||
|
7FF5280FC000
|
unkown
|
page readonly
|
||
|
9AD0000
|
unkown
|
page read and write
|
||
|
7DF42A940000
|
unkown
|
page readonly
|
||
|
AE70000
|
unkown
|
page readonly
|
||
|
DAE4000
|
unkown
|
page read and write
|
||
|
14AB000
|
stack
|
page read and write
|
||
|
C740000
|
unkown
|
page read and write
|
||
|
9C30000
|
unkown
|
page read and write
|
||
|
DA70000
|
unkown
|
page read and write
|
||
|
26A3000
|
unkown
|
page read and write
|
||
|
FF5E000
|
stack
|
page read and write
|
||
|
CD4A000
|
unkown
|
page read and write
|
||
|
11B96000
|
unkown
|
page read and write
|
||
|
7FF527D7A000
|
unkown
|
page readonly
|
||
|
5CB000
|
heap
|
page read and write
|
||
|
22D0000
|
unkown
|
page readonly
|
||
|
7FF527A94000
|
unkown
|
page readonly
|
||
|
12DEF000
|
stack
|
page read and write
|
||
|
11B6D000
|
unkown
|
page read and write
|
||
|
F5D0000
|
unkown
|
page readonly
|
||
|
7FF527D08000
|
unkown
|
page readonly
|
||
|
D346000
|
unkown
|
page read and write
|
||
|
265A000
|
unkown
|
page read and write
|
||
|
C1BD000
|
stack
|
page read and write
|
||
|
3C30000
|
direct allocation
|
page read and write
|
||
|
AFB9000
|
unkown
|
page read and write
|
||
|
17B0000
|
heap
|
page read and write
|
||
|
7FF5284C9000
|
unkown
|
page readonly
|
||
|
4A70000
|
trusted library allocation
|
page read and write
|
||
|
2242000
|
heap
|
page read and write
|
||
|
608000
|
heap
|
page read and write
|
||
|
FDDF000
|
stack
|
page read and write
|
||
|
9C20000
|
unkown
|
page read and write
|
||
|
7FF52811D000
|
unkown
|
page readonly
|
||
|
26BC000
|
unkown
|
page read and write
|
||
|
7DF42A941000
|
unkown
|
page execute read
|
||
|
11B79000
|
unkown
|
page read and write
|
||
|
13B46000
|
unkown
|
page read and write
|
||
|
2699000
|
unkown
|
page read and write
|
||
|
7FF52842C000
|
unkown
|
page readonly
|
||
|
7FF52824C000
|
unkown
|
page readonly
|
||
|
DB48000
|
unkown
|
page read and write
|
||
|
7FF52796B000
|
unkown
|
page readonly
|
||
|
3C20000
|
unkown
|
page read and write
|
||
|
A230000
|
unkown
|
page readonly
|
||
|
7FF52811D000
|
unkown
|
page readonly
|
||
|
51C0000
|
unkown
|
page read and write
|
||
|
D31E000
|
unkown
|
page read and write
|
||
|
3011000
|
heap
|
page read and write
|
||
|
5ADA000
|
unkown
|
page read and write
|
||
|
327BC000
|
direct allocation
|
page execute and read and write
|
||
|
E46B000
|
stack
|
page read and write
|
||
|
119FF000
|
unkown
|
page read and write
|
||
|
3BA0000
|
unkown
|
page readonly
|
||
|
29EF000
|
stack
|
page read and write
|
||
|
D31E000
|
unkown
|
page read and write
|
||
|
7E2000
|
unkown
|
page readonly
|
||
|
7FF52839C000
|
unkown
|
page readonly
|
||
|
7FF527975000
|
unkown
|
page readonly
|
||
|
7FF527AD1000
|
unkown
|
page readonly
|
||
|
267A000
|
unkown
|
page read and write
|
||
|
268E000
|
unkown
|
page read and write
|
||
|
525C000
|
unclassified section
|
page read and write
|
||
|
4EB0000
|
unkown
|
page read and write
|
||
|
F8F0000
|
unkown
|
page readonly
|
||
|
118EA000
|
unkown
|
page read and write
|
||
|
D320000
|
unkown
|
page read and write
|
||
|
A2C0000
|
unkown
|
page readonly
|
||
|
2CCC000
|
heap
|
page read and write
|
||
|
2230000
|
unkown
|
page read and write
|
||
|
7FF5282C5000
|
unkown
|
page readonly
|
||
|
7FF527AD5000
|
unkown
|
page readonly
|
||
|
A648000
|
stack
|
page read and write
|
||
|
ECEE000
|
stack
|
page read and write
|
||
|
52A0000
|
unkown
|
page read and write
|
||
|
26B7000
|
unkown
|
page read and write
|
||
|
4BD0000
|
trusted library allocation
|
page read and write
|
||
|
FD5E000
|
stack
|
page read and write
|
||
|
DD9D000
|
unkown
|
page read and write
|
||
|
5290000
|
unkown
|
page read and write
|
||
|
32C0A000
|
unclassified section
|
page execute and read and write
|
||
|
9FCF000
|
unkown
|
page read and write
|
||
|
7FF528005000
|
unkown
|
page readonly
|
||
|
11ABF000
|
unkown
|
page read and write
|
||
|
4EEB000
|
unkown
|
page read and write
|
||
|
A0A0000
|
unkown
|
page read and write
|
||
|
7FF52834D000
|
unkown
|
page readonly
|
||
|
5E8000
|
unkown
|
page execute read
|
||
|
3217C000
|
stack
|
page read and write
|
||
|
31CCE000
|
stack
|
page read and write
|
||
|
A5CD000
|
stack
|
page read and write
|
||
|
87F000
|
stack
|
page read and write
|
||
|
898000
|
heap
|
page read and write
|
||
|
DD97000
|
unkown
|
page read and write
|
||
|
4FC4000
|
unkown
|
page read and write
|
||
|
3C20000
|
unkown
|
page read and write
|
||
|
B70000
|
unkown
|
page read and write
|
||
|
DC6A000
|
unkown
|
page read and write
|
||
|
7FF527A20000
|
unkown
|
page readonly
|
||
|
2CDB000
|
heap
|
page read and write
|
||
|
2245000
|
heap
|
page read and write
|
||
|
4A7E000
|
heap
|
page read and write
|
||
|
4EB0000
|
unkown
|
page read and write
|
||
|
7FF52824C000
|
unkown
|
page readonly
|
||
|
79F000
|
unkown
|
page read and write
|
||
|
4F8E000
|
unkown
|
page read and write
|
||
|
DD8C000
|
unkown
|
page read and write
|
||
|
7FF5281CF000
|
unkown
|
page readonly
|
||
|
4FBA000
|
unkown
|
page read and write
|
||
|
35E9000
|
stack
|
page read and write
|
||
|
5CB000
|
heap
|
page read and write
|
||
|
BA0000
|
heap
|
page read and write
|
||
|
DD17000
|
unkown
|
page read and write
|
||
|
DD8A000
|
unkown
|
page read and write
|
||
|
7FF5282F3000
|
unkown
|
page readonly
|
||
|
4F56000
|
unkown
|
page read and write
|
||
|
CBC0000
|
unkown
|
page read and write
|
||
|
7C0000
|
unkown
|
page read and write
|
||
|
E00A000
|
unkown
|
page read and write
|
||
|
7FF527B40000
|
unkown
|
page readonly
|
||
|
4F90000
|
unkown
|
page read and write
|
||
|
E056000
|
unkown
|
page read and write
|
||
|
7FF52843B000
|
unkown
|
page readonly
|
||
|
39D1000
|
unkown
|
page read and write
|
||
|
2623000
|
unkown
|
page read and write
|
||
|
26D0000
|
unkown
|
page read and write
|
||
|
DD99000
|
unkown
|
page read and write
|
||
|
7FF527DBA000
|
unkown
|
page readonly
|
||
|
34EA000
|
stack
|
page read and write
|
||
|
DD8C000
|
unkown
|
page read and write
|
||
|
F550000
|
unkown
|
page read and write
|
||
|
1620000
|
unkown
|
page read and write
|
||
|
3987000
|
unkown
|
page read and write
|
||
|
CC95000
|
unkown
|
page read and write
|
||
|
DD7D000
|
unkown
|
page read and write
|
||
|
7FF527AC0000
|
unkown
|
page readonly
|
||
|
13854000
|
unkown
|
page read and write
|
||
|
7FF5281B0000
|
unkown
|
page readonly
|
||
|
7FF528354000
|
unkown
|
page readonly
|
||
|
3230000
|
unkown
|
page readonly
|
||
|
9D05000
|
unkown
|
page read and write
|
||
|
29A0000
|
system
|
page execute and read and write
|
||
|
3993000
|
unkown
|
page read and write
|
||
|
1B51000
|
unkown
|
page readonly
|
||
|
B60000
|
unkown
|
page read and write
|
||
|
4D59000
|
direct allocation
|
page execute and read and write
|
||
|
A2E0000
|
unkown
|
page readonly
|
||
|
266A000
|
unkown
|
page read and write
|
||
|
7FF5283CD000
|
unkown
|
page readonly
|
||
|
D320000
|
unkown
|
page read and write
|
||
|
D950000
|
unkown
|
page read and write
|
||
|
7FF527A6F000
|
unkown
|
page readonly
|
||
|
7FF527BD8000
|
unkown
|
page readonly
|
||
|
7FF527A87000
|
unkown
|
page readonly
|
||
|
31870000
|
direct allocation
|
page read and write
|
||
|
7FF5282FC000
|
unkown
|
page readonly
|
||
|
4EB7000
|
unkown
|
page read and write
|
||
|
5280000
|
unkown
|
page read and write
|
||
|
C730000
|
unkown
|
page readonly
|
||
|
7FF528252000
|
unkown
|
page readonly
|
||
|
2635000
|
unkown
|
page read and write
|
||
|
5270000
|
unkown
|
page read and write
|
||
|
137DB000
|
unkown
|
page read and write
|
||
|
7FF506DE4000
|
unkown
|
page readonly
|
||
|
14AA2000
|
unkown
|
page read and write
|
||
|
31880000
|
direct allocation
|
page read and write
|
||
|
7FF528080000
|
unkown
|
page readonly
|
||
|
CB76000
|
unkown
|
page read and write
|
||
|
7FF528531000
|
unkown
|
page readonly
|
||
|
E16C000
|
unkown
|
page read and write
|
||
|
21FC000
|
heap
|
page read and write
|
||
|
7FF528296000
|
unkown
|
page readonly
|
||
|
7DF42A960000
|
unkown
|
page readonly
|
||
|
3910000
|
unkown
|
page read and write
|
||
|
7FF5283CD000
|
unkown
|
page readonly
|
||
|
FE1000
|
unkown
|
page readonly
|
||
|
7FF5283FB000
|
unkown
|
page readonly
|
||
|
7FF527BE1000
|
unkown
|
page readonly
|
||
|
7FF527E46000
|
unkown
|
page readonly
|
||
|
397C000
|
unkown
|
page read and write
|
||
|
21F5000
|
heap
|
page read and write
|
||
|
7FF527CBF000
|
unkown
|
page readonly
|
||
|
21F2000
|
heap
|
page read and write
|
||
|
C899000
|
stack
|
page read and write
|
||
|
7FF5280B1000
|
unkown
|
page readonly
|
||
|
21FC000
|
heap
|
page read and write
|
||
|
7FF528388000
|
unkown
|
page readonly
|
||
|
FD0000
|
unkown
|
page readonly
|
||
|
7FF527DFC000
|
unkown
|
page readonly
|
||
|
21F2000
|
heap
|
page read and write
|
||
|
3BB0000
|
unkown
|
page read and write
|
||
|
7FF527C44000
|
unkown
|
page readonly
|
||
|
30A0000
|
heap
|
page read and write
|
||
|
7FF52855B000
|
unkown
|
page readonly
|
||
|
407000
|
unkown
|
page readonly
|
||
|
13B31000
|
unkown
|
page read and write
|
||
|
11B42000
|
unkown
|
page read and write
|
||
|
D9A0000
|
unkown
|
page readonly
|
||
|
7FF52856C000
|
unkown
|
page readonly
|
||
|
7FF5282B0000
|
unkown
|
page readonly
|
||
|
5DB1000
|
unkown
|
page read and write
|
||
|
2693000
|
unkown
|
page read and write
|
||
|
26D7000
|
unkown
|
page read and write
|
||
|
118AF000
|
unkown
|
page read and write
|
||
|
7FF527AE5000
|
unkown
|
page readonly
|
||
|
264F000
|
unkown
|
page read and write
|
||
|
7FF5282DF000
|
unkown
|
page readonly
|
||
|
4EF2000
|
unkown
|
page read and write
|
||
|
7FF5282A1000
|
unkown
|
page readonly
|
||
|
608000
|
heap
|
page read and write
|
||
|
4F3C000
|
unkown
|
page read and write
|
||
|
3975000
|
unkown
|
page read and write
|
||
|
7FF527DFC000
|
unkown
|
page readonly
|
||
|
A95F000
|
stack
|
page read and write
|
||
|
4D0000
|
unkown
|
page readonly
|
||
|
7FF5280F5000
|
unkown
|
page readonly
|
||
|
7FF528269000
|
unkown
|
page readonly
|
||
|
7FF527C8C000
|
unkown
|
page readonly
|
||
|
7FF5283E4000
|
unkown
|
page readonly
|
||
|
5B8A000
|
unkown
|
page read and write
|
||
|
CADF000
|
stack
|
page read and write
|
||
|
BB0000
|
unkown
|
page readonly
|
||
|
7FF5283B7000
|
unkown
|
page readonly
|
||
|
11B42000
|
unkown
|
page read and write
|
||
|
CAF0000
|
unkown
|
page read and write
|
||
|
7FF528354000
|
unkown
|
page readonly
|
||
|
D94D000
|
stack
|
page read and write
|
||
|
D84C000
|
stack
|
page read and write
|
||
|
5270000
|
unkown
|
page read and write
|
||
|
D9A0000
|
unkown
|
page readonly
|
||
|
13754000
|
unkown
|
page read and write
|
||
|
7FF527FB3000
|
unkown
|
page readonly
|
||
|
3820000
|
direct allocation
|
page read and write
|
||
|
7FF527D67000
|
unkown
|
page readonly
|
||
|
7FF527A20000
|
unkown
|
page readonly
|
||
|
13CD2000
|
heap
|
page read and write
|
||
|
7FF52845D000
|
unkown
|
page readonly
|
||
|
21F0000
|
heap
|
page read and write
|
||
|
2CEF000
|
stack
|
page read and write
|
||
|
FA80000
|
unkown
|
page read and write
|
||
|
CCB8000
|
unkown
|
page read and write
|
||
|
D2D1000
|
unkown
|
page read and write
|
||
|
BFF0000
|
unkown
|
page read and write
|
||
|
DC6E000
|
unkown
|
page read and write
|
||
|
7FF528430000
|
unkown
|
page readonly
|
||
|
11B79000
|
unkown
|
page read and write
|
||
|
7FF52847A000
|
unkown
|
page readonly
|
||
|
50F5000
|
unkown
|
page read and write
|
||
|
DDBC000
|
unkown
|
page read and write
|
||
|
7FF528482000
|
unkown
|
page readonly
|
||
|
13B42000
|
unkown
|
page read and write
|
||
|
7FF5278CF000
|
unkown
|
page readonly
|
||
|
4F76000
|
unkown
|
page read and write
|
||
|
3AB0000
|
unkown
|
page readonly
|
||
|
4ED8000
|
unkown
|
page read and write
|
||
|
5D10000
|
unkown
|
page read and write
|
||
|
36E8000
|
stack
|
page read and write
|
||
|
7FF528300000
|
unkown
|
page readonly
|
||
|
7FF528144000
|
unkown
|
page readonly
|
||
|
7FF528346000
|
unkown
|
page readonly
|
||
|
14D86000
|
unkown
|
page read and write
|
||
|
1620000
|
unkown
|
page read and write
|
||
|
CB8A000
|
unkown
|
page read and write
|
||
|
D1E000
|
stack
|
page read and write
|
||
|
D2DC000
|
unkown
|
page read and write
|
||
|
2654000
|
unkown
|
page read and write
|
||
|
7FF527AD8000
|
unkown
|
page readonly
|
||
|
D396000
|
unkown
|
page read and write
|
||
|
DB1000
|
unkown
|
page readonly
|
||
|
A100000
|
unkown
|
page readonly
|
||
|
CBAD000
|
unkown
|
page read and write
|
||
|
263B000
|
unkown
|
page read and write
|
||
|
7FF52784B000
|
unkown
|
page readonly
|
||
|
263B000
|
unkown
|
page read and write
|
||
|
E262000
|
unkown
|
page read and write
|
||
|
7FF528120000
|
unkown
|
page readonly
|
||
|
7FF527B67000
|
unkown
|
page readonly
|
||
|
3469000
|
stack
|
page read and write
|
||
|
FD5E000
|
stack
|
page read and write
|
||
|
7DF42A961000
|
unkown
|
page execute read
|
||
|
9E94000
|
unkown
|
page read and write
|
||
|
7FF5283A8000
|
unkown
|
page readonly
|
||
|
11914000
|
unkown
|
page read and write
|
||
|
7FF527BB3000
|
unkown
|
page readonly
|
||
|
10003000
|
unkown
|
page readonly
|
||
|
FC5E000
|
stack
|
page read and write
|
||
|
17B5000
|
heap
|
page read and write
|
||
|
2682000
|
unkown
|
page read and write
|
||
|
7FF5283A3000
|
unkown
|
page readonly
|
||
|
3870000
|
direct allocation
|
page read and write
|
||
|
12D6E000
|
stack
|
page read and write
|
||
|
9C3A000
|
unkown
|
page read and write
|
||
|
C66D000
|
stack
|
page read and write
|
||
|
DEA7000
|
unkown
|
page read and write
|
||
|
D9C0000
|
unkown
|
page read and write
|
||
|
268E000
|
unkown
|
page read and write
|
||
|
EE0000
|
unkown
|
page readonly
|
||
|
7FF52853E000
|
unkown
|
page readonly
|
||
|
7FF527FB0000
|
unkown
|
page readonly
|
||
|
11B6D000
|
unkown
|
page read and write
|
||
|
21F0000
|
heap
|
page read and write
|
||
|
E129000
|
unkown
|
page read and write
|
||
|
7DF42A950000
|
unkown
|
page readonly
|
||
|
118C1000
|
unkown
|
page read and write
|
||
|
5194000
|
unkown
|
page read and write
|
||
|
51D0000
|
unkown
|
page read and write
|
||
|
7FF5284C5000
|
unkown
|
page readonly
|
||
|
119F7000
|
unkown
|
page read and write
|
||
|
2CB0000
|
heap
|
page read and write
|
||
|
3233F000
|
heap
|
page read and write
|
||
|
11B01000
|
unkown
|
page read and write
|
||
|
9FF8000
|
unkown
|
page read and write
|
||
|
F8F0000
|
unkown
|
page readonly
|
||
|
27F0000
|
heap
|
page read and write
|
||
|
7FF52823F000
|
unkown
|
page readonly
|
||
|
7FF52835E000
|
unkown
|
page readonly
|
||
|
3987000
|
unkown
|
page read and write
|
||
|
E06F000
|
unkown
|
page read and write
|
||
|
FCDF000
|
stack
|
page read and write
|
||
|
15B0000
|
unkown
|
page read and write
|
||
|
118B7000
|
unkown
|
page read and write
|
||
|
31FB0000
|
remote allocation
|
page read and write
|
||
|
E1ED000
|
unkown
|
page read and write
|
||
|
7FF527D4F000
|
unkown
|
page readonly
|
||
|
2363000
|
heap
|
page read and write
|
||
|
9FC3000
|
unkown
|
page read and write
|
||
|
AF25000
|
unkown
|
page read and write
|
||
|
7FF527DBA000
|
unkown
|
page readonly
|
||
|
4FA2000
|
unkown
|
page read and write
|
||
|
DB6B000
|
unkown
|
page read and write
|
||
|
ED0000
|
heap
|
page read and write
|
||
|
5009000
|
unkown
|
page read and write
|
||
|
7FF527FEB000
|
unkown
|
page readonly
|
||
|
401000
|
unkown
|
page execute read
|
||
|
13B1D000
|
unkown
|
page read and write
|
||
|
E3ED000
|
stack
|
page read and write
|
||
|
2FDE000
|
stack
|
page read and write
|
||
|
5D03000
|
unkown
|
page read and write
|
||
|
7FF527BB3000
|
unkown
|
page readonly
|
||
|
CB50000
|
unkown
|
page read and write
|
||
|
7FF52836C000
|
unkown
|
page readonly
|
||
|
10000
|
heap
|
page read and write
|
||
|
E0DE000
|
unkown
|
page read and write
|
||
|
3130000
|
unkown
|
page read and write
|
||
|
7FF527D9F000
|
unkown
|
page readonly
|
||
|
7FF52830A000
|
unkown
|
page readonly
|
||
|
21F2000
|
heap
|
page read and write
|
||
|
E04A000
|
unkown
|
page read and write
|
||
|
CBD7000
|
unkown
|
page read and write
|
||
|
7FF527AD5000
|
unkown
|
page readonly
|
||
|
1B51000
|
unkown
|
page readonly
|
||
|
4FB0000
|
unkown
|
page read and write
|
||
|
7FF527E3A000
|
unkown
|
page readonly
|
||
|
264D000
|
unkown
|
page read and write
|
||
|
E15F000
|
unkown
|
page read and write
|
||
|
CCAC000
|
unkown
|
page read and write
|
||
|
7FF528374000
|
unkown
|
page readonly
|
||
|
9AD0000
|
unkown
|
page read and write
|
||
|
D353000
|
unkown
|
page read and write
|
||
|
7FF527B44000
|
unkown
|
page readonly
|
||
|
2CD5000
|
heap
|
page read and write
|
||
|
7FF528400000
|
unkown
|
page readonly
|
||
|
3202F000
|
stack
|
page read and write
|
||
|
7FF527D98000
|
unkown
|
page readonly
|
||
|
7FF527B44000
|
unkown
|
page readonly
|
||
|
DD15000
|
unkown
|
page read and write
|
||
|
7FF527A27000
|
unkown
|
page readonly
|
||
|
DD9D000
|
unkown
|
page read and write
|
||
|
7FF528492000
|
unkown
|
page readonly
|
||
|
321D0000
|
direct allocation
|
page read and write
|
||
|
13B31000
|
unkown
|
page read and write
|
||
|
CBC7000
|
unkown
|
page read and write
|
||
|
7FF527B1E000
|
unkown
|
page readonly
|
||
|
35E9000
|
stack
|
page read and write
|
||
|
E1ED000
|
unkown
|
page read and write
|
||
|
2280000
|
heap
|
page read and write
|
||
|
170000
|
direct allocation
|
page read and write
|
||
|
267A000
|
unkown
|
page read and write
|
||
|
FE5F000
|
stack
|
page read and write
|
||
|
20000
|
unkown
|
page readonly
|
||
|
A260000
|
unkown
|
page readonly
|
||
|
7FF527AC5000
|
unkown
|
page readonly
|
||
|
E14E000
|
unkown
|
page read and write
|
||
|
25F7000
|
heap
|
page read and write
|
||
|
7FF527CBC000
|
unkown
|
page readonly
|
||
|
51B0000
|
unkown
|
page read and write
|
||
|
CB92000
|
unkown
|
page read and write
|
||
|
DC68000
|
unkown
|
page read and write
|
||
|
7FF528115000
|
unkown
|
page readonly
|
||
|
7FF5282BD000
|
unkown
|
page readonly
|
||
|
9FBA000
|
unkown
|
page read and write
|
||
|
DFF8000
|
unkown
|
page read and write
|
||
|
2570000
|
unkown
|
page read and write
|
||
|
7FF52784B000
|
unkown
|
page readonly
|
||
|
5003000
|
unkown
|
page read and write
|
||
|
A40E000
|
stack
|
page read and write
|
||
|
DBF4000
|
unkown
|
page read and write
|
||
|
50D0000
|
unkown
|
page read and write
|
||
|
D33D000
|
unkown
|
page read and write
|
||
|
118F7000
|
unkown
|
page read and write
|
||
|
FB5F000
|
stack
|
page read and write
|
||
|
9FA4000
|
unkown
|
page read and write
|
||
|
CC9F000
|
unkown
|
page read and write
|
||
|
7FF5284BA000
|
unkown
|
page readonly
|
||
|
1780000
|
unkown
|
page readonly
|
||
|
256D000
|
stack
|
page read and write
|
||
|
9FCF000
|
unkown
|
page read and write
|
||
|
7FF528334000
|
unkown
|
page readonly
|
||
|
7FF528391000
|
unkown
|
page readonly
|
||
|
262C000
|
unkown
|
page read and write
|
||
|
2674000
|
unkown
|
page read and write
|
||
|
CC3F000
|
unkown
|
page read and write
|
||
|
DD67000
|
unkown
|
page read and write
|
||
|
7FF527948000
|
unkown
|
page readonly
|
||
|
DEF3000
|
unkown
|
page read and write
|
||
|
4F66000
|
unkown
|
page read and write
|
||
|
515000
|
heap
|
page read and write
|
||
|
3975000
|
unkown
|
page read and write
|
||
|
1F0000
|
unkown
|
page readonly
|
||
|
7FF5283A8000
|
unkown
|
page readonly
|
||
|
3207C000
|
stack
|
page read and write
|
||
|
4F56000
|
unkown
|
page read and write
|
||
|
E202000
|
unkown
|
page read and write
|
||
|
118A6000
|
unkown
|
page read and write
|
||
|
7DF42A951000
|
unkown
|
page execute read
|
||
|
11A03000
|
unkown
|
page read and write
|
||
|
2310000
|
unkown
|
page read and write
|
||
|
7FF527FF3000
|
unkown
|
page readonly
|
||
|
A410000
|
unkown
|
page readonly
|
||
|
3261D000
|
direct allocation
|
page execute and read and write
|
||
|
7FF52788D000
|
unkown
|
page readonly
|
||
|
AE01000
|
unkown
|
page read and write
|
||
|
7FF527FF1000
|
unkown
|
page readonly
|
||
|
4924000
|
system
|
page read and write
|
||
|
7FF527A9E000
|
unkown
|
page readonly
|
||
|
21E9000
|
heap
|
page read and write
|
||
|
7FF52844B000
|
unkown
|
page readonly
|
||
|
7FF5284BA000
|
unkown
|
page readonly
|
||
|
E00A000
|
unkown
|
page read and write
|
||
|
7FF527B08000
|
unkown
|
page readonly
|
||
|
3011000
|
heap
|
page read and write
|
||
|
2310000
|
unkown
|
page read and write
|
||
|
267D000
|
unkown
|
page read and write
|
||
|
FAC0000
|
unkown
|
page read and write
|
||
|
620000
|
heap
|
page read and write
|
||
|
A790000
|
unkown
|
page readonly
|
||
|
784000
|
unkown
|
page read and write
|
||
|
11A60000
|
unkown
|
page read and write
|
||
|
787000
|
unkown
|
page read and write
|
||
|
DDD6000
|
unkown
|
page read and write
|
||
|
3800000
|
direct allocation
|
page read and write
|
||
|
C71E000
|
stack
|
page read and write
|
||
|
7FF527B18000
|
unkown
|
page readonly
|
||
|
2699000
|
unkown
|
page read and write
|
||
|
7C5000
|
unkown
|
page readonly
|
||
|
7FF527AF7000
|
unkown
|
page readonly
|
||
|
7FF5282C0000
|
unkown
|
page readonly
|
||
|
DB6B000
|
unkown
|
page read and write
|
||
|
7FF52852C000
|
unkown
|
page readonly
|
||
|
7FF527E47000
|
unkown
|
page readonly
|
||
|
1189A000
|
unkown
|
page read and write
|
||
|
13CD0000
|
heap
|
page read and write
|
||
|
11AD7000
|
unkown
|
page read and write
|
||
|
DD9F000
|
unkown
|
page read and write
|
||
|
A790000
|
unkown
|
page readonly
|
||
|
7FF527C8C000
|
unkown
|
page readonly
|
||
|
7FF527A96000
|
unkown
|
page readonly
|
||
|
CD3E000
|
unkown
|
page read and write
|
||
|
51C0000
|
unkown
|
page read and write
|
||
|
264F000
|
unkown
|
page read and write
|
||
|
7FF52849D000
|
unkown
|
page readonly
|
||
|
DD17000
|
unkown
|
page read and write
|
||
|
2246000
|
heap
|
page read and write
|
||
|
3D0F000
|
stack
|
page read and write
|
||
|
28EF000
|
stack
|
page read and write
|
||
|
7FF5284C3000
|
unkown
|
page readonly
|
||
|
7FF527AFF000
|
unkown
|
page readonly
|
||
|
7FF52832E000
|
unkown
|
page readonly
|
||
|
620000
|
heap
|
page read and write
|
||
|
26CC000
|
unkown
|
page read and write
|
||
|
E1F000
|
stack
|
page read and write
|
||
|
118B7000
|
unkown
|
page read and write
|
||
|
7FF528108000
|
unkown
|
page readonly
|
||
|
7FF5280B1000
|
unkown
|
page readonly
|
||
|
3070000
|
unkown
|
page readonly
|
||
|
7FF5282F8000
|
unkown
|
page readonly
|
||
|
7FF52829B000
|
unkown
|
page readonly
|
||
|
DAFB000
|
unkown
|
page read and write
|
||
|
7FF5282F3000
|
unkown
|
page readonly
|
||
|
7FF527B5C000
|
unkown
|
page readonly
|
||
|
F9D9000
|
stack
|
page read and write
|
||
|
B50000
|
unkown
|
page read and write
|
||
|
13793000
|
unkown
|
page read and write
|
||
|
4D0000
|
unkown
|
page readonly
|
||
|
7FF5280FC000
|
unkown
|
page readonly
|
||
|
2BEF000
|
stack
|
page read and write
|
||
|
7C3000
|
unkown
|
page readonly
|
||
|
7FF528562000
|
unkown
|
page readonly
|
||
|
4F0000
|
unkown
|
page read and write
|
||
|
4FC6000
|
unkown
|
page read and write
|
||
|
4BA7000
|
heap
|
page read and write
|
||
|
4FC0000
|
unkown
|
page read and write
|
||
|
7FF5281B0000
|
unkown
|
page readonly
|
||
|
4F66000
|
unkown
|
page read and write
|
||
|
7FF527EA0000
|
unkown
|
page readonly
|
||
|
5C7000
|
heap
|
page read and write
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
50F5000
|
unkown
|
page read and write
|
||
|
DFF3000
|
unkown
|
page read and write
|
||
|
11B04000
|
unkown
|
page read and write
|
||
|
17E2000
|
remote allocation
|
page execute and read and write
|
||
|
7FF527B1A000
|
unkown
|
page readonly
|
||
|
DF28000
|
unkown
|
page read and write
|
||
|
F5D0000
|
unkown
|
page readonly
|
||
|
4F89000
|
unkown
|
page read and write
|
||
|
7FF52847A000
|
unkown
|
page readonly
|
||
|
E00A000
|
unkown
|
page read and write
|
||
|
268B000
|
unkown
|
page read and write
|
||
|
7FF5282D0000
|
unkown
|
page readonly
|
||
|
400000
|
unkown
|
page readonly
|
||
|
2200000
|
heap
|
page read and write
|
||
|
7FF527AD8000
|
unkown
|
page readonly
|
||
|
FEDE000
|
stack
|
page read and write
|
||
|
5200000
|
unkown
|
page read and write
|
||
|
11B4D000
|
unkown
|
page read and write
|
||
|
7FF52808D000
|
unkown
|
page readonly
|
||
|
DF70000
|
unkown
|
page read and write
|
||
|
7FF528400000
|
unkown
|
page readonly
|
||
|
AE70000
|
unkown
|
page readonly
|
||
|
5F0000
|
unkown
|
page execute read
|
||
|
E25D000
|
unkown
|
page read and write
|
||
|
515000
|
heap
|
page read and write
|
||
|
5266000
|
unclassified section
|
page read and write
|
||
|
11C38000
|
unkown
|
page read and write
|
||
|
7DF42A951000
|
unkown
|
page execute read
|
||
|
DF28000
|
unkown
|
page read and write
|
||
|
ED0000
|
heap
|
page read and write
|
||
|
7FF506DE4000
|
unkown
|
page readonly
|
||
|
4ED8000
|
unkown
|
page read and write
|
||
|
D8CD000
|
stack
|
page read and write
|
||
|
262E000
|
unkown
|
page read and write
|
||
|
7FF527CA8000
|
unkown
|
page readonly
|
||
|
13812000
|
unkown
|
page read and write
|
||
|
149000
|
stack
|
page read and write
|
||
|
3961000
|
unkown
|
page read and write
|
||
|
D84C000
|
stack
|
page read and write
|
||
|
29EF000
|
stack
|
page read and write
|
||
|
DC68000
|
unkown
|
page read and write
|
||
|
52A0000
|
unkown
|
page read and write
|
||
|
9FBA000
|
unkown
|
page read and write
|
||
|
11B42000
|
unkown
|
page read and write
|
||
|
21F5000
|
heap
|
page read and write
|
||
|
E16A000
|
unkown
|
page read and write
|
||
|
22D0000
|
unkown
|
page readonly
|
||
|
2CDB000
|
heap
|
page read and write
|
||
|
7FF528388000
|
unkown
|
page readonly
|
||
|
21E2000
|
heap
|
page read and write
|
||
|
DAD1000
|
unkown
|
page read and write
|
||
|
9E94000
|
unkown
|
page read and write
|
||
|
A54D000
|
stack
|
page read and write
|
||
|
31D8D000
|
stack
|
page read and write
|
||
|
2693000
|
unkown
|
page read and write
|
||
|
EBE9000
|
stack
|
page read and write
|
||
|
265A000
|
unkown
|
page read and write
|
||
|
14D7C000
|
unkown
|
page read and write
|
||
|
7FF527CB9000
|
unkown
|
page readonly
|
||
|
2200000
|
heap
|
page read and write
|
||
|
7FF5280F5000
|
unkown
|
page readonly
|
||
|
11A99000
|
unkown
|
page read and write
|
||
|
39E0000
|
unkown
|
page write copy
|
||
|
DACC000
|
unkown
|
page read and write
|
||
|
356A000
|
stack
|
page read and write
|
||
|
7FF527953000
|
unkown
|
page readonly
|
||
|
4BD0000
|
trusted library allocation
|
page read and write
|
||
|
13CDA000
|
heap
|
page read and write
|
||
|
E126000
|
unkown
|
page read and write
|
||
|
7DF42A950000
|
unkown
|
page readonly
|
||
|
28C0000
|
heap
|
page read and write
|
||
|
2686000
|
unkown
|
page read and write
|
||
|
CCAE000
|
unkown
|
page read and write
|
||
|
7FF5282F8000
|
unkown
|
page readonly
|
||
|
77A000
|
unkown
|
page read and write
|
||
|
3840000
|
direct allocation
|
page read and write
|
||
|
4FCA000
|
unkown
|
page read and write
|
||
|
7C5000
|
unkown
|
page readonly
|
||
|
DFF1000
|
unkown
|
page read and write
|
||
|
7FF527DB4000
|
unkown
|
page readonly
|
||
|
2626000
|
unkown
|
page read and write
|
||
|
5ADA000
|
unkown
|
page read and write
|
||
|
4FF8000
|
unkown
|
page read and write
|
||
|
FFDF000
|
stack
|
page read and write
|
||
|
118EC000
|
unkown
|
page read and write
|
||
|
7FF52823F000
|
unkown
|
page readonly
|
||
|
4E1000
|
unkown
|
page readonly
|
||
|
9E80000
|
unkown
|
page read and write
|
||
|
7FF5283A3000
|
unkown
|
page readonly
|
||
|
7FF5283C3000
|
unkown
|
page readonly
|
||
|
501D000
|
unkown
|
page read and write
|
||
|
7FF527E9C000
|
unkown
|
page readonly
|
||
|
DDDE000
|
unkown
|
page read and write
|
||
|
9EE5000
|
unkown
|
page read and write
|
||
|
7FF52854F000
|
unkown
|
page readonly
|
||
|
B9F000
|
stack
|
page read and write
|
||
|
7FF527E05000
|
unkown
|
page readonly
|
||
|
A54D000
|
stack
|
page read and write
|
||
|
7FF527FEB000
|
unkown
|
page readonly
|
||
|
11A84000
|
unkown
|
page read and write
|
||
|
7FF528005000
|
unkown
|
page readonly
|
||
|
2242000
|
heap
|
page read and write
|
||
|
7FF527B0E000
|
unkown
|
page readonly
|
||
|
31D0F000
|
stack
|
page read and write
|
||
|
4C30000
|
direct allocation
|
page execute and read and write
|
||
|
7FF52849D000
|
unkown
|
page readonly
|
||
|
7FF52834B000
|
unkown
|
page readonly
|
||
|
7FF52795B000
|
unkown
|
page readonly
|
||
|
39E0000
|
unkown
|
page write copy
|
||
|
3110000
|
heap
|
page read and write
|
||
|
390E000
|
unkown
|
page read and write
|
||
|
7FF527E9A000
|
unkown
|
page readonly
|
||
|
9D05000
|
unkown
|
page read and write
|
||
|
9CD7000
|
unkown
|
page read and write
|
||
|
31C4E000
|
stack
|
page read and write
|
||
|
A0B0000
|
unkown
|
page read and write
|
||
|
7FF527E42000
|
unkown
|
page readonly
|
||
|
38D3000
|
stack
|
page read and write
|
||
|
7FF528108000
|
unkown
|
page readonly
|
||
|
2C34000
|
heap
|
page read and write
|
||
|
9BF0000
|
unkown
|
page read and write
|
||
|
49E8000
|
heap
|
page read and write
|
||
|
39D1000
|
unkown
|
page read and write
|
||
|
DFF1000
|
unkown
|
page read and write
|
||
|
32180000
|
direct allocation
|
page read and write
|
||
|
4FF2000
|
unkown
|
page read and write
|
||
|
3E10000
|
unkown
|
page execute and read and write
|
There are 1738 hidden memdumps, click here to show them.