Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
WeChat-Setup (3).exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
initial sample
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\LICENSE.electron.txt
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\LICENSES.chromium.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\chrome_100_percent.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\chrome_200_percent.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\d3dcompiler_47.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\ffmpeg.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\icudtl.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\libEGL.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\libGLESv2.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\resources.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\snapshot_blob.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\uninstallerIcon.ico
|
MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\v8_context_snapshot.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\vk_swiftshader.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\vk_swiftshader_icd.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Programs\wechatapp\vulkan-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\LICENSE.electron.txt
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\LICENSES.chromium.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\WeChat.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\chrome_100_percent.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\chrome_200_percent.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\d3dcompiler_47.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\ffmpeg.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\icudtl.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\libEGL.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\libGLESv2.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\af.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\am.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ar.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\bg.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\bn.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ca.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\cs.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\da.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\de.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\el.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\en-GB.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\en-US.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\es-419.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\es.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\et.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\fa.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\fi.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\fil.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\fr.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\gu.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\he.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\hi.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\hr.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\hu.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\id.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\it.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ja.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\kn.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ko.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\lt.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\lv.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ml.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\mr.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ms.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\nb.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\nl.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\pl.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\pt-BR.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\pt-PT.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ro.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ru.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\sk.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\sl.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\sr.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\sv.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\sw.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ta.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\te.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\th.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\tr.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\uk.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\ur.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\vi.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\zh-CN.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\locales\zh-TW.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\resources.pak
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\resources\app-update.yml
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\resources\app.asar
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\resources\elevate.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\snapshot_blob.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\v8_context_snapshot.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\vk_swiftshader.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\vk_swiftshader_icd.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\7z-out\vulkan-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\SpiderBanner.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\StdUtils.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\app-64.7z
|
7-zip archive data, version 0.4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\nsExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nsoAF77.tmp\nsis7z.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.acl
|
Unicode text, UTF-16, little-endian text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.dic
|
Unicode text, UTF-16, little-endian text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Spelling\en-GB\default.exc
|
Unicode text, UTF-16, little-endian text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\59fea2de-3dad-4f6b-82c6-66f02dad1df8.tmp
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\72135633-c26a-4622-b38f-ee3aae7a3916.tmp
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\js\index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\js\index-dir\temp-index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\js\index-dir\the-real-index (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\wasm\index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\wasm\index-dir\temp-index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Code Cache\wasm\index-dir\the-real-index (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnGraphiteCache\data_0
|
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnGraphiteCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnGraphiteCache\data_2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnGraphiteCache\data_3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnGraphiteCache\index
|
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnWebGPUCache\data_0
|
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnWebGPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnWebGPUCache\data_2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnWebGPUCache\data_3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\DawnWebGPUCache\index
|
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\GPUCache\data_0
|
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\GPUCache\data_2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\GPUCache\data_3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\GPUCache\index
|
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Local State (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Local Storage\leveldb\000001.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Local Storage\leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Local Storage\leveldb\MANIFEST-000001
|
OpenPGP Secret Key
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Network\715f8655-bca1-464e-a9be-e3c18491423a.tmp
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Network\Network Persistent State (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Network\Trust Tokens
|
SQLite 3.x database, last written using SQLite version 3046000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8,
version-valid-for 3
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Preferences (copy)
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Shared Dictionary\cache\index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Shared Dictionary\cache\index-dir\temp-index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Shared Dictionary\cache\index-dir\the-real-index (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\WeChat\Shared Dictionary\db
|
SQLite 3.x database, last written using SQLite version 3046000, file counter 2, database pages 11, cookie 0x8, schema 4, UTF-8,
version-valid-for 2
|
dropped
|
There are 127 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\WeChat-Setup (3).exe
|
"C:\Users\user\Desktop\WeChat-Setup (3).exe"
|
 |
|
|
C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe
|
"C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe"
|
|
|
|
C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe
|
"C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\WeChat"
--gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA
--field-trial-handle=1800,i,12753569820527524874,9323361878095804256,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand
--variations-seed-version --mojo-platform-channel-handle=1792 /prefetch:2
|
|
|
|
C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe
|
"C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe" --type=utility --utility-sub-type=network.mojom.NetworkService
--lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\WeChat" --field-trial-handle=3268,i,12753569820527524874,9323361878095804256,262144
--disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version
--mojo-platform-channel-handle=3160 /prefetch:3
|
|
|
|
C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe
|
"C:\Users\user\AppData\Local\Programs\wechatapp\WeChat.exe" --type=renderer --user-data-dir="C:\Users\user\AppData\Roaming\WeChat"
--app-path="C:\Users\user\AppData\Local\Programs\wechatapp\resources\app.asar" --enable-sandbox --disable-background-timer-throttling
--video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation
--renderer-client-id=4 --time-ticks-at-unix-epoch=-1732562556198562 --launch-time-ticks=4871634903 --field-trial-handle=3412,i,12753569820527524874,9323361878095804256,262144
--disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version
--mojo-platform-channel-handle=3400 --high-entropy-va /prefetch:1
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://github.com/simplejson/simplejson
|
unknown
|
||
|
http://anglebug.com/40096661
|
unknown
|
||
|
http://anglebug.com/42262161
|
unknown
|
||
|
https://anglebug.com/42265794
|
unknown
|
||
|
http://anglebug.com/42263010
|
unknown
|
||
|
https://anglebug.com/42265792
|
unknown
|
||
|
http://anglebug.com/42262286
|
unknown
|
||
|
http://anglebug.com/42262166
|
unknown
|
||
|
http://anglebug.com/42262287
|
unknown
|
||
|
https://crbug.com/1356053
|
unknown
|
||
|
https://www.patreon.com/feross
|
unknown
|
||
|
https://goo.gl/t5IS6M).
|
unknown
|
||
|
http://crbug.com/110263
|
unknown
|
||
|
https://github.com/ChALkeR
|
unknown
|
||
|
https://anglebug.com/42265782
|
unknown
|
||
|
http://example.sub
|
unknown
|
||
|
http://127.0.0.1/32
|
unknown
|
||
|
https://github.com/google/pprof/tree/master/proto
|
unknown
|
||
|
http://anglebug.com/42264571forceInitShaderVariablesForce-enable
|
unknown
|
||
|
http://anglebug.com/42266652
|
unknown
|
||
|
https://github.com/jrmuizel/qcms/tree/v4
|
unknown
|
||
|
https://chromium.googlesource.com/chromium/src/
|
unknown
|
||
|
https://github.com/wesleytodd/setprototypeof
|
unknown
|
||
|
https://crbug.com/593024
|
unknown
|
||
|
https://anglebug.com/42266748
|
unknown
|
||
|
https://github.com/tensorflow/models
|
unknown
|
||
|
https://anglebug.com/42266745
|
unknown
|
||
|
https://github.com/KhronosGroup/SPIRV-Headers.git
|
unknown
|
||
|
https://www.npmjs.com/package/safe-buffer)
|
unknown
|
||
|
https://github.com/w3c/ServiceWorker/issues/1356.Property
|
unknown
|
||
|
https://anglebug.com/42266740
|
unknown
|
||
|
http://anglebug.com/42263031
|
unknown
|
||
|
https://issuetracker.google.com/161903006
|
unknown
|
||
|
http://127.0.0.1
|
unknown
|
||
|
https://crbug.com/1300575
|
unknown
|
||
|
http://anglebug.com/42266666
|
unknown
|
||
|
https://crbug.com/710443
|
unknown
|
||
|
http://anglebug.com/42263158
|
unknown
|
||
|
https://github.com/tensorflow/tflite-support
|
unknown
|
||
|
https://github.com/WICG/scheduling-apis
|
unknown
|
||
|
http://anglebug.com/42264008
|
unknown
|
||
|
https://pypi.org/project/pyparsing
|
unknown
|
||
|
https://sqlite.org/
|
unknown
|
||
|
https://crbug.com/1060012
|
unknown
|
||
|
https://code.google.com/p/chromium/issues/detail?id=25916
|
unknown
|
||
|
https://github.com/ljharb/qs.git
|
unknown
|
||
|
http://anglebug.com/42263580disableDrawBuffersIndexedDisable
|
unknown
|
||
|
http://crbug.com/642605
|
unknown
|
||
|
http://anglebug.com/40096454
|
unknown
|
||
|
http://anglebug.com/42266842uncurrentEglSurfaceUponSurfaceDestroyMake
|
unknown
|
||
|
https://tukaani.org/xz/>.
|
unknown
|
||
|
https://github.com/joyeecheung/node-dep-codemod#dep005)
|
unknown
|
||
|
https://sizzlejs.com/
|
unknown
|
||
|
http://anglebug.com/345244067
|
unknown
|
||
|
http://anglebug.com/42263049
|
unknown
|
||
|
http://anglebug.com/40644663
|
unknown
|
||
|
http://lao-dictionary.googlecode.com/git/Lao-Dictionary-LICENSE.txt
|
unknown
|
||
|
https://crbug.com/650547callClearTwiceUsing
|
unknown
|
||
|
http://anglebug.com/42262249
|
unknown
|
||
|
http://anglebug.com/42264669
|
unknown
|
||
|
http://anglebug.com/42265516
|
unknown
|
||
|
http://crbug.com/1420130
|
unknown
|
||
|
https://github.com/facebook/react-native/pull/1632
|
unknown
|
||
|
http://www.portaudio.com
|
unknown
|
||
|
http://www.unicode.org/copyright.html
|
unknown
|
||
|
https://anglebug.com/42265636
|
unknown
|
||
|
https://anglebug.com/42265637
|
unknown
|
||
|
https://anglebug.com/42265877
|
unknown
|
||
|
https://issuetracker.google.com/347601787
|
unknown
|
||
|
https://anglebug.com/42266842
|
unknown
|
||
|
https://w3c.github.io/aria/#aria-hidden.
|
unknown
|
||
|
https://developer.chrome.com/docs/extensions/mv3/cross-origin-isolation/.
|
unknown
|
||
|
https://github.com/WICG/construct-stylesheets/issues/119#issuecomment-588352418.
|
unknown
|
||
|
https://github.com/google/shell-encryption
|
unknown
|
||
|
http://anglebug.com/42266842
|
unknown
|
||
|
http://anglebug.com/42264422
|
unknown
|
||
|
http://anglebug.com/42265995
|
unknown
|
||
|
https://github.com/wasdk/wasmparser
|
unknown
|
||
|
http://anglebug.com/42266725
|
unknown
|
||
|
http://anglebug.com/42262247
|
unknown
|
||
|
http://anglebug.com/42265878
|
unknown
|
||
|
http://anglebug.com/42266602
|
unknown
|
||
|
http://anglebug.com/42265407
|
unknown
|
||
|
https://github.com/dpranke/typ.git
|
unknown
|
||
|
http://anglebug.com/42266232disableProgramCachingDisables
|
unknown
|
||
|
https://issuetracker.google.com/309028728
|
unknown
|
||
|
http://stackoverflow.com/a/16459606/376773
|
unknown
|
||
|
http://anglebug.com/40096758
|
unknown
|
||
|
http://anglebug.com/42263580
|
unknown
|
||
|
https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
|
unknown
|
||
|
http://anglebug.com/42261924allowClearForRobustResourceInitSome
|
unknown
|
||
|
https://www.khronos.org/registry/
|
unknown
|
||
|
http://anglebug.com/40096838cacheCompiledShaderEnable
|
unknown
|
||
|
http://anglebug.com/42266610
|
unknown
|
||
|
http://stackoverflow.com/a/5982798/376773
|
unknown
|
||
|
https://github.com/sponsors/feross
|
unknown
|
||
|
http://anglebug.com/42262258
|
unknown
|
||
|
http://anglebug.com/42265647
|
unknown
|
||
|
http://anglebug.com/42266976
|
unknown
|
||
|
http://anglebug.com/42263239
|
unknown
|
There are 90 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\d1788b9d-fe46-5f15-8398-75060bd3532c
|
InstallLocation
|
||
|
HKEY_CURRENT_USER\SOFTWARE\d1788b9d-fe46-5f15-8398-75060bd3532c
|
KeepShortcuts
|
||
|
HKEY_CURRENT_USER\SOFTWARE\d1788b9d-fe46-5f15-8398-75060bd3532c
|
ShortcutName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
DisplayName
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
UninstallString
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
QuietUninstallString
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
DisplayVersion
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
DisplayIcon
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
Publisher
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
NoModify
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
NoRepair
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d1788b9d-fe46-5f15-8398-75060bd3532c
|
EstimatedSize
|
||
|
HKEY_CURRENT_USER_Classes\.wechat
|
WeChat File_backup
|
||
|
HKEY_CURRENT_USER_Classes\.wechat
|
NULL
|
||
|
HKEY_CURRENT_USER_Classes\WeChat File
|
NULL
|
||
|
HKEY_CURRENT_USER_Classes\WeChat File\DefaultIcon
|
NULL
|
||
|
HKEY_CURRENT_USER_Classes\WeChat File\shell
|
NULL
|
||
|
HKEY_CURRENT_USER_Classes\WeChat File\shell\open
|
NULL
|
||
|
HKEY_CURRENT_USER_Classes\WeChat File\shell\open\command
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
|
GlobalAssocChangedCounter
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
pbz.jrpung.frghc
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{5985FC23-2588-4D9A-B38B-7E7AFFAB3155} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
|
CheckSetting
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts
|
LastUpdate
|
There are 42 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5ED1D6000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
6CE000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF697791000
|
unkown
|
page execute read
|
||
|
526A000
|
heap
|
page read and write
|
||
|
7FF5ED1BC000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
10C0000
|
unkown
|
page readonly
|
||
|
1505000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5370000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF691D91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B7A5000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B170000
|
unkown
|
page readonly
|
||
|
FA84000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4DB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C34000
|
unkown
|
page read and write
|
||
|
5FD8000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED449000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
76C0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED849000
|
unkown
|
page readonly
|
||
|
A4A1000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
87E0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
37A8000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FDA4000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FFE000
|
stack
|
page read and write
|
||
|
C89C000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4B78000
|
unkown
|
page read and write
|
||
|
90B000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
59F000
|
unkown
|
page readonly
|
||
|
FD9D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8B6000
|
heap
|
page read and write
|
||
|
B629000
|
stack
|
page read and write
|
||
|
5FD4000
|
heap
|
page read and write
|
||
|
7FF5ED418000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4BDC000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C6C1000
|
unkown
|
page read and write
|
||
|
37B0000
|
unkown
|
page read and write
|
||
|
7867000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED68F000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
5531000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
98A8000
|
unkown
|
page read and write
|
||
|
7FF5ED818000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA14000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED556000
|
unkown
|
page readonly
|
||
|
4D31000
|
heap
|
page read and write
|
||
|
7FF5EDA0B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
54F1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9893000
|
unkown
|
page read and write
|
||
|
4C4B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CB96000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FB84000
|
unkown
|
page read and write
|
||
|
8FC000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8FB9000
|
stack
|
page read and write
|
||
|
7FF5ED743000
|
unkown
|
page readonly
|
||
|
7FF5ED519000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4FD000
|
unkown
|
page readonly
|
||
|
7FF5ED4B4000
|
unkown
|
page readonly
|
||
|
797D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
917000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
E619000
|
stack
|
page read and write
|
||
|
91C000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FD4000
|
heap
|
page read and write
|
||
|
3240000
|
unkown
|
page read and write
|
||
|
8C6000
|
heap
|
page read and write
|
||
|
7E11000
|
unkown
|
page read and write
|
||
|
3220000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FC8000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D2000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
97A9000
|
unkown
|
page read and write
|
||
|
7FF5ED996000
|
unkown
|
page readonly
|
||
|
5F70000
|
heap
|
page read and write
|
||
|
5FB3000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED779000
|
unkown
|
page readonly
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693B91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FEB000
|
heap
|
page read and write
|
||
|
A29E000
|
stack
|
page read and write
|
||
|
19A000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7C80000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FBB000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
128AB000
|
unkown
|
page read and write
|
||
|
7FF5D1CD4000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1230000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5531000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C57F000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7CC0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED2A4000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
810000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9C9D000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF696D91000
|
unkown
|
page execute read
|
||
|
7865000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
E599000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
BAF9000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C857000
|
unkown
|
page read and write
|
||
|
AB72000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3040000
|
unkown
|
page readonly
|
||
|
6072000
|
heap
|
page read and write
|
||
|
8BF0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7CE0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED3D6000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C8E1000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
408000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED404000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9815000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF695991000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
BA4D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED3EA000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C6D8000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9550000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5CE000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D9000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5D30000
|
direct allocation
|
page read and write
|
||
|
7FF5ED714000
|
unkown
|
page readonly
|
||
|
7FF5ED9D6000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8C1000
|
heap
|
page read and write
|
||
|
BD98000
|
stack
|
page read and write
|
||
|
7FF696391000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
7775000
|
direct allocation
|
page read and write
|
||
|
C6F2000
|
unkown
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C507000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C6CF000
|
unkown
|
page read and write
|
||
|
1440000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C700000
|
unkown
|
page read and write
|
||
|
7FF694591000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C41F000
|
stack
|
page read and write
|
||
|
51DB000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A11F000
|
stack
|
page read and write
|
||
|
986B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FBD9000
|
unkown
|
page read and write
|
||
|
35A0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
5641000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FCC000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED1B6000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7F30000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FD2000
|
heap
|
page read and write
|
||
|
785B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA2A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E4C000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2DD0000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
7FF5ED942000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C51E000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3800000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5431000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8D90000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF694591000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9C6000
|
unkown
|
page readonly
|
||
|
7FF5ED412000
|
unkown
|
page readonly
|
||
|
B728000
|
stack
|
page read and write
|
||
|
913000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4CE0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D6000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED7C4000
|
unkown
|
page readonly
|
||
|
1490000
|
unkown
|
page read and write
|
||
|
A2F000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
7FF5ED810000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
12844000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693B91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
C7C5000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4EF000
|
unkown
|
page readonly
|
||
|
8710000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1340000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA47000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4E30000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
97AD000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FE3000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
40A000
|
unkown
|
page write copy
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED40D000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED660000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED77C000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
37F2000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF695991000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4E31000
|
heap
|
page read and write
|
||
|
8FC000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FB8000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A19F000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5C5000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED349000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FE3000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED8FF000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
8B60000
|
unkown
|
page readonly
|
||
|
7FF5ED3F3000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
3795000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
900000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9977000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
36D3000
|
stack
|
page read and write
|
||
|
43F0000
|
trusted library allocation
|
page read and write
|
||
|
6B30000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56D9000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED46A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
891000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
139F000
|
unkown
|
page read and write
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E91000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7D00000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7884000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA38000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
6730000
|
direct allocation
|
page read and write
|
||
|
A49E000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5531000
|
heap
|
page read and write
|
||
|
710000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4E70000
|
heap
|
page read and write
|
||
|
7F2E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CB92000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
863000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED803000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4B0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FCD000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3071000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5830000
|
direct allocation
|
page read and write
|
||
|
5FDF000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED67D000
|
unkown
|
page readonly
|
||
|
B82A000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FEBA000
|
heap
|
page read and write
|
||
|
7FF5ED7FD000
|
unkown
|
page readonly
|
||
|
B8AB000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED86B000
|
unkown
|
page readonly
|
||
|
B2AC000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
884000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9798000
|
unkown
|
page read and write
|
||
|
7FF5ED735000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5158000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B8B0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4E71000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9F2000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED814000
|
unkown
|
page readonly
|
||
|
12881000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED6A5000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED3D0000
|
unkown
|
page readonly
|
||
|
51DD000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
25C4000
|
heap
|
page read and write
|
||
|
5631000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
BDA0000
|
unkown
|
page readonly
|
||
|
7FF5ED576000
|
unkown
|
page readonly
|
||
|
3756000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED669000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED71E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
AF0C000
|
stack
|
page read and write
|
||
|
7FF5ED4BB000
|
unkown
|
page readonly
|
||
|
7FF5ED695000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
BDD0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA08000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
8BE0000
|
unkown
|
page readonly
|
||
|
23CF000
|
stack
|
page read and write
|
||
|
5670000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A494000
|
unkown
|
page read and write
|
||
|
5FF0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
50F9000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5590000
|
unkown
|
page write copy
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED68B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED586000
|
unkown
|
page readonly
|
||
|
965C000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4CC0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AAF2000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED8E2000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2448000
|
heap
|
page read and write
|
||
|
CB89000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED867000
|
unkown
|
page readonly
|
||
|
98000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
892000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8CEA000
|
stack
|
page read and write
|
||
|
5B30000
|
direct allocation
|
page read and write
|
||
|
7FF5ED915000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED93B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
A50B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9070000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3290000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED337000
|
unkown
|
page readonly
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8BB0000
|
unkown
|
page readonly
|
||
|
7EC000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED97A000
|
unkown
|
page readonly
|
||
|
6F30000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C18000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FF1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF691D91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
59F000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
4DB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
891000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CB1F000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3791000
|
unkown
|
page read and write
|
||
|
C6E3000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5557000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED530000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4B8B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED62F000
|
unkown
|
page readonly
|
||
|
7DF4F3061000
|
unkown
|
page execute read
|
||
|
71D6000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E96000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9F1E000
|
stack
|
page read and write
|
||
|
7FF5ED821000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3700000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4F34000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A4B8000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
40E000
|
unkown
|
page read and write
|
||
|
7FF5ED80C000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D7000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5F7000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED65C000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
777E000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E98000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A502000
|
unkown
|
page read and write
|
||
|
37AC000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FBCB000
|
unkown
|
page read and write
|
||
|
7FF5ED92C000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
C561000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED961000
|
unkown
|
page readonly
|
||
|
CC7B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8000000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF698B91000
|
unkown
|
page execute read
|
||
|
4E32000
|
heap
|
page read and write
|
||
|
92D000
|
heap
|
page read and write
|
||
|
C4D0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED445000
|
unkown
|
page readonly
|
||
|
FDC4000
|
unkown
|
page read and write
|
||
|
4FB000
|
unkown
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
33B9000
|
stack
|
page read and write
|
||
|
1264D000
|
stack
|
page read and write
|
||
|
2E91000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5CF0000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5532000
|
heap
|
page read and write
|
||
|
7FF5ED7F1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7723000
|
direct allocation
|
page read and write
|
||
|
8720000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
92D000
|
heap
|
page read and write
|
||
|
3166000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8BF000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AA90000
|
unkown
|
page read and write
|
||
|
2F10000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3319000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A379000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8FF000
|
heap
|
page read and write
|
||
|
4C31000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA11000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AF8D000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7E60000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4CB0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED674000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C5A0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED265000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED990000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
10C80000
|
unkown
|
page read and write
|
||
|
7FF5ED43A000
|
unkown
|
page readonly
|
||
|
1240000
|
heap
|
page read and write
|
||
|
7FF5ED8B4000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED50A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA0D000
|
unkown
|
page readonly
|
||
|
5FBB000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5770000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2DD0000
|
trusted library allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8AE000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED74A000
|
unkown
|
page readonly
|
||
|
7863000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
408000
|
unkown
|
page readonly
|
||
|
7FF5ED7CF000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FEB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3154000
|
unkown
|
page read and write
|
||
|
5F30000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED3CE000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9881000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
143B000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED8AC000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
DD0000
|
unkown
|
page readonly
|
||
|
2EAC000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED71B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
3590000
|
unkown
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
51D3000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A33E000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED64F000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A491000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
78AD000
|
unkown
|
page read and write
|
||
|
7859000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9E6A000
|
stack
|
page read and write
|
||
|
92D000
|
heap
|
page read and write
|
||
|
4C60000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED26E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9A1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D4000
|
heap
|
page read and write
|
||
|
37AE000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
259E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED7E9000
|
unkown
|
page readonly
|
||
|
7FF5ED975000
|
unkown
|
page readonly
|
||
|
8D6B000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C89A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C563000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED85F000
|
unkown
|
page readonly
|
||
|
CA7C000
|
unkown
|
page read and write
|
||
|
C6F4000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9660000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED956000
|
unkown
|
page readonly
|
||
|
25C0000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
C516000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED471000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
254C000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
54B1000
|
heap
|
page read and write
|
||
|
7DF4F3050000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED91A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
97D4000
|
unkown
|
page read and write
|
||
|
A4AE000
|
unkown
|
page read and write
|
||
|
51DB000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9A5B000
|
unkown
|
page read and write
|
||
|
7695000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FDA6000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF694F91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3659000
|
stack
|
page read and write
|
||
|
53F0000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C50A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7857000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7CA0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9D63000
|
unkown
|
page read and write
|
||
|
553000
|
unkown
|
page read and write
|
||
|
7FF5ED7E0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
35D0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C52C000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7852000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4BE1000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
40A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9B8000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
30D0000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
BDC0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2EA4000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693191000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
C962000
|
unkown
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693191000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED697000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3031000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
36F0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C1E000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
54F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA31000
|
unkown
|
page readonly
|
||
|
37F9000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
91B000
|
heap
|
page read and write
|
||
|
2F11000
|
heap
|
page read and write
|
||
|
9877000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
12800000
|
unkown
|
page read and write
|
||
|
5FB2000
|
heap
|
page read and write
|
||
|
88EE000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4BC9000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
830000
|
heap
|
page read and write
|
||
|
7FF5ED33F000
|
unkown
|
page readonly
|
||
|
7CD0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED8C6000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
C893000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E91000
|
heap
|
page read and write
|
||
|
5046000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8AE000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED692000
|
unkown
|
page readonly
|
||
|
A391000
|
unkown
|
page read and write
|
||
|
90C000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4B93000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
DE0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
BD1D000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
308A000
|
stack
|
page read and write
|
||
|
CA16000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED670000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
11E0000
|
unkown
|
page readonly
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E91000
|
heap
|
page read and write
|
||
|
917000
|
heap
|
page read and write
|
||
|
C512000
|
unkown
|
page read and write
|
||
|
93BE000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3758000
|
unkown
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
7FF5ED9E1000
|
unkown
|
page readonly
|
||
|
FB03000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED73D000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
10D0000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
5771000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF692791000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
8B5000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AAF9000
|
unkown
|
page read and write
|
||
|
7861000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED980000
|
unkown
|
page readonly
|
||
|
C5A3000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2995000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED94A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
910000
|
heap
|
page read and write
|
||
|
7D40000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
838000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5EB000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AB75000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A01E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CA1E000
|
unkown
|
page read and write
|
||
|
7237000
|
direct allocation
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CB36000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED55F000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
918000
|
heap
|
page read and write
|
||
|
5770000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56C3000
|
unkown
|
page read and write
|
||
|
7FF5ED847000
|
unkown
|
page readonly
|
||
|
7FF691390000
|
unkown
|
page readonly
|
||
|
37BD000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5C1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9A10000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4D3E000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7A34000
|
unkown
|
page read and write
|
||
|
7FF5ED41C000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9885000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED76D000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8208000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
987B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
34E8000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
14B0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8A6E000
|
stack
|
page read and write
|
||
|
C6BF000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A32A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2C80000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5671000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED48A000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA76000
|
unkown
|
page readonly
|
||
|
7FF5ED3DA000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF698191000
|
unkown
|
page execute read
|
||
|
7FF694F91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
11B0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5431000
|
heap
|
page read and write
|
||
|
5FD4000
|
heap
|
page read and write
|
||
|
B140000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FB46000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9FF000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C84D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED77E000
|
unkown
|
page readonly
|
||
|
7FF5ED93E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
AAD1000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3748000
|
unkown
|
page read and write
|
||
|
7FF5ED8E7000
|
unkown
|
page readonly
|
||
|
7FF692791000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED781000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7C90000
|
unkown
|
page read and write
|
||
|
B190000
|
unkown
|
page read and write
|
||
|
B22B000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED81B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C6C9000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C4A0000
|
unkown
|
page read and write
|
||
|
C964000
|
unkown
|
page read and write
|
||
|
7FF5ED3A7000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4D31000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
5FB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED342000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FD91000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8CF000
|
heap
|
page read and write
|
||
|
987D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF691391000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E90000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5630000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
76A0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
913000
|
heap
|
page read and write
|
||
|
7B80000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED7DB000
|
unkown
|
page readonly
|
||
|
79FB000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED409000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
90C000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A433000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF696D91000
|
unkown
|
page execute read
|
||
|
8AF000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C544000
|
unkown
|
page read and write
|
||
|
4FF000
|
unkown
|
page read and write
|
||
|
C88B000
|
unkown
|
page read and write
|
||
|
2DD0000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7323000
|
direct allocation
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED853000
|
unkown
|
page readonly
|
||
|
91C000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E0E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF692791000
|
unkown
|
page execute read
|
||
|
37A0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
977A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C811000
|
unkown
|
page read and write
|
||
|
3580000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF697791000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8CF000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A37D000
|
unkown
|
page read and write
|
||
|
A375000
|
unkown
|
page read and write
|
||
|
FBC2000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C80000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED750000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
6071000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED644000
|
unkown
|
page readonly
|
||
|
FEB2000
|
heap
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF695991000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FF0000
|
heap
|
page read and write
|
||
|
979C000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7869000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CA63000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED793000
|
unkown
|
page readonly
|
||
|
7FF691391000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C54A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
760000
|
heap
|
page read and write
|
||
|
5430000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4BA6000
|
unkown
|
page read and write
|
||
|
7E50000
|
unkown
|
page readonly
|
||
|
7FF5ED87D000
|
unkown
|
page readonly
|
||
|
7FF5ED516000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
4DF0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED451000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CA06000
|
unkown
|
page read and write
|
||
|
7FF691390000
|
unkown
|
page readonly
|
||
|
787C000
|
unkown
|
page read and write
|
||
|
56B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7900000
|
unkown
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
54B1000
|
heap
|
page read and write
|
||
|
2B8F000
|
stack
|
page read and write
|
||
|
923E000
|
stack
|
page read and write
|
||
|
5FDF000
|
heap
|
page read and write
|
||
|
896B000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8FF000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1500000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E93000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B08D000
|
stack
|
page read and write
|
||
|
A479000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9875000
|
unkown
|
page read and write
|
||
|
5B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF691391000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3051000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED295000
|
unkown
|
page readonly
|
||
|
9DED000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9CA000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF694591000
|
unkown
|
page execute read
|
||
|
5FEB000
|
heap
|
page read and write
|
||
|
FD60000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FAC4000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5530000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3030000
|
unkown
|
page readonly
|
||
|
3797000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B650000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9AE000
|
unkown
|
page readonly
|
||
|
A09B000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED933000
|
unkown
|
page readonly
|
||
|
7FF5ED433000
|
unkown
|
page readonly
|
||
|
57F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56B0000
|
heap
|
page read and write
|
||
|
5731000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
9873000
|
unkown
|
page read and write
|
||
|
78A0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
54B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5470000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
785D000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED602000
|
unkown
|
page readonly
|
||
|
89E0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
722D000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FF0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7D53000
|
unkown
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3738000
|
unkown
|
page read and write
|
||
|
9879000
|
unkown
|
page read and write
|
||
|
3210000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B640000
|
unkown
|
page read and write
|
||
|
512D000
|
stack
|
page read and write
|
||
|
7FF5ED937000
|
unkown
|
page readonly
|
||
|
A4AB000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
E518000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7D20000
|
unkown
|
page readonly
|
||
|
8860000
|
unkown
|
page read and write
|
||
|
7FF5ED864000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
4D70000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5A8000
|
unkown
|
page readonly
|
||
|
9137000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2F11000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9BE000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
2EAD000
|
heap
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
880000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1510000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED279000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
C08A000
|
stack
|
page read and write
|
||
|
A323000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
BC9B000
|
stack
|
page read and write
|
||
|
9792000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
18A1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9B60000
|
unkown
|
page readonly
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1480000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4F3000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED5C9000
|
unkown
|
page readonly
|
||
|
2440000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693B91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED97E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4DB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
7FF5ED800000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED2A9000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
97C3000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB2000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B5AE000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
89C000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5F31000
|
heap
|
page read and write
|
||
|
96DF000
|
unkown
|
page read and write
|
||
|
7FF5ED986000
|
unkown
|
page readonly
|
||
|
7FF5ED476000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA70000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
79D3000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED39E000
|
unkown
|
page readonly
|
||
|
7FF691390000
|
unkown
|
page readonly
|
||
|
5570000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
785F000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED286000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED806000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A364000
|
unkown
|
page read and write
|
||
|
87E000
|
heap
|
page read and write
|
||
|
3141000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7D6C000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8108000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF693191000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
982D000
|
unkown
|
page read and write
|
||
|
310E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
786B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
91B9000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2990000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A37B000
|
unkown
|
page read and write
|
||
|
7FF5D1CCD000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
51D7000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3209000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
913000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
54B0000
|
heap
|
page read and write
|
||
|
7847000
|
unkown
|
page read and write
|
||
|
7FF5ED8C1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF694F91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5531000
|
heap
|
page read and write
|
||
|
7FF691D91000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED850000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
6B30000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4CD0000
|
unkown
|
page read and write
|
||
|
A21E000
|
stack
|
page read and write
|
||
|
37F6000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
FB4B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B6A0000
|
heap
|
page read and write
|
||
|
7FF5ED9A6000
|
unkown
|
page readonly
|
||
|
A327000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED39B000
|
unkown
|
page readonly
|
||
|
B10D000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A310000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4E8000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
B2F000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7F40000
|
unkown
|
page readonly
|
||
|
CA42000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
36D5000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
926000
|
heap
|
page read and write
|
||
|
92D000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
92D000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C92D000
|
unkown
|
page read and write
|
||
|
C49E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C557000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7766000
|
direct allocation
|
page read and write
|
||
|
7FF5ED1CB000
|
unkown
|
page readonly
|
||
|
5FBA000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
89A0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF698191000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED505000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9C8000
|
unkown
|
page readonly
|
||
|
4B56000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
37D2000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED8A4000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
90E000
|
heap
|
page read and write
|
||
|
4E31000
|
heap
|
page read and write
|
||
|
7FF5ED4DF000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED872000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
412000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7278000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9D1E000
|
stack
|
page read and write
|
||
|
A4FC000
|
unkown
|
page read and write
|
||
|
978E000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
57B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
F0B0000
|
heap
|
page read and write
|
||
|
4D70000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
92E000
|
heap
|
page read and write
|
||
|
1281E000
|
unkown
|
page read and write
|
||
|
891000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
56F1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
524D000
|
heap
|
page read and write
|
||
|
7FF5ECED2000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4C2000
|
unkown
|
page readonly
|
||
|
7FF5ED844000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED495000
|
unkown
|
page readonly
|
||
|
4C70000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5F70000
|
heap
|
page read and write
|
||
|
8730000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9869000
|
unkown
|
page read and write
|
||
|
7FF5ED4A1000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED939000
|
unkown
|
page readonly
|
||
|
9871000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CA0A000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
884000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8210000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF696D91000
|
unkown
|
page execute read
|
||
|
7FF5ED9CC000
|
unkown
|
page readonly
|
||
|
4B90000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
92E000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED59E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED426000
|
unkown
|
page readonly
|
||
|
56F0000
|
heap
|
page read and write
|
||
|
818D000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7430000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
3110000
|
unkown
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
91B000
|
heap
|
page read and write
|
||
|
986F000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1095000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
90B000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED1CF000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C50000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
1451000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
448000
|
unkown
|
page read and write
|
||
|
C5AA000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
502F000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7DF4F3041000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA69000
|
unkown
|
page readonly
|
||
|
7FF5ED507000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
55F1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FD2000
|
heap
|
page read and write
|
||
|
7FF5ED6DB000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
6031000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FB7000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
9F9C000
|
stack
|
page read and write
|
||
|
C846000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8EC6000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
97B5000
|
unkown
|
page read and write
|
||
|
7FF698B91000
|
unkown
|
page execute read
|
||
|
3150000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C6F8000
|
unkown
|
page read and write
|
||
|
B00B000
|
stack
|
page read and write
|
||
|
9795000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
987F000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
A361000
|
unkown
|
page read and write
|
||
|
2F11000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B8C0000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
8DA0000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
784A000
|
unkown
|
page read and write
|
||
|
5FCD000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED503000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
A3BE000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4DB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED42B000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
899000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
41E000
|
unkown
|
page read and write
|
||
|
7FF5ED8F9000
|
unkown
|
page readonly
|
||
|
7FF5ED9D2000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED28E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4B50000
|
unkown
|
page read and write
|
||
|
4BE3000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
906E000
|
stack
|
page read and write
|
||
|
7FF5ED6B8000
|
unkown
|
page readonly
|
||
|
A39B000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
B150000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C31000
|
heap
|
page read and write
|
||
|
90F000
|
heap
|
page read and write
|
||
|
943D000
|
stack
|
page read and write
|
||
|
4C90000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AADB000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF696391000
|
unkown
|
page execute read
|
||
|
764000
|
heap
|
page read and write
|
||
|
5FF0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED928000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AB19000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C503000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5D16000
|
direct allocation
|
page read and write
|
||
|
5FEB000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
5670000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9D9000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5EDA53000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E91000
|
heap
|
page read and write
|
||
|
4DF1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7AE000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
91C000
|
heap
|
page read and write
|
||
|
79B1000
|
unkown
|
page read and write
|
||
|
4EB1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4D30000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
5F31000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4C30000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
C10A000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED9ED000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
469000
|
unkown
|
page read and write
|
||
|
4EB0000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED46E000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF696391000
|
unkown
|
page execute read
|
||
|
55B1000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
AAF6000
|
unkown
|
page read and write
|
||
|
7FF5ED755000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED534000
|
unkown
|
page readonly
|
||
|
379E000
|
unkown
|
page read and write
|
||
|
765000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED625000
|
unkown
|
page readonly
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
7FF5ED4C6000
|
unkown
|
page readonly
|
||
|
8C6000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
2E99000
|
heap
|
page read and write
|
||
|
5730000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
4F30000
|
direct allocation
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
8C1000
|
heap
|
page read and write
|
||
|
904000
|
heap
|
page read and write
|
||
|
70E000
|
stack
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
CC3E000
|
unkown
|
page read and write
|
||
|
7FF5ED7D6000
|
unkown
|
page readonly
|
||
|
89C0000
|
unkown
|
page read and write
|
||
|
9883000
|
unkown
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
||
|
764000
|
heap
|
page read and write
|
There are 2764 hidden memdumps, click here to show them.