Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Pago pendiente.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Pago pendiente.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4hq5muto.t5w.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_55p0e2oa.xna.psm1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_iofqxz1p.z2x.ps1
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rjup3hke.pmc.psm1
|
ASCII text, with no line terminators
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Pago pendiente.exe
|
"C:\Users\user\Desktop\Pago pendiente.exe"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\Desktop\Pago pendiente.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
|
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
|
|
|
C:\Windows\SysWOW64\control.exe
|
"C:\Windows\SysWOW64\control.exe"
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\SysWOW64\cmd.exe
|
/c del "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.tronbank.club/gs12/?4h0=l5+ohMyXvfUY1BXURi/VBBPK89EwzQ1xmTW49ppdAXwminvYBxYYysXiCF4Xd1c73Byq&vT=LtxxLba
|
103.224.212.216
|
|
|
|
www.lolabeautystudios.com/gs12/
|
|
||
|
http://www.k2securityhn.com/gs12/?4h0=q59tBajeIo68CyAO1CDG6iJlXnRVkR/RpgQvK7vE3BQj9j+5I7CNTMK9jJbO36qf2KSo&vT=LtxxLba
|
3.33.130.190
|
|
|
|
http://www.signomo.com/gs12/?4h0=sKMZ9JWmyHzsFnuZp0fZtWbmtlVDzCM4ZbYLfRKv+HtPtGiIGUjdRyYwPYcfKf7QGcOF&vT=LtxxLba
|
3.33.130.190
|
|
|
|
http://www.sports565.com/gs12/
|
unknown
|
||
|
https://word.office.comon
|
unknown
|
||
|
http://www.eternalknot1008.com/gs12/
|
unknown
|
||
|
http://www.signomo.com/gs12/www.urxetqt.com
|
unknown
|
||
|
http://www.y2llvq.vip/gs12/
|
unknown
|
||
|
http://www.eternalknot1008.comReferer:
|
unknown
|
||
|
http://www.hjgd.xyz
|
unknown
|
||
|
http://www.k2securityhn.com/gs12/
|
unknown
|
||
|
http://www.actnowgreen.com/gs12/
|
unknown
|
||
|
https://powerpoint.office.comcember
|
unknown
|
||
|
http://tempuri.org/DataSet1.xsd
|
unknown
|
||
|
http://www.actnowgreen.com
|
unknown
|
||
|
http://www.urxetqt.com/gs12/www.hjgd.xyz
|
unknown
|
||
|
http://www.tronbank.club/gs12/
|
unknown
|
||
|
http://www.signomo.comReferer:
|
unknown
|
||
|
http://www.y2llvq.vip
|
unknown
|
||
|
http://www.umastyle.clubReferer:
|
unknown
|
||
|
http://www.zgcple.info/gs12/
|
unknown
|
||
|
https://excel.office.com
|
unknown
|
||
|
http://schemas.micro
|
unknown
|
||
|
http://www.51win.ink/gs12/
|
unknown
|
||
|
http://www.tronbank.club/gs12/www.signomo.com
|
unknown
|
||
|
http://www.51win.inkReferer:
|
unknown
|
||
|
http://www.sports565.com
|
unknown
|
||
|
http://www.airzf.comReferer:
|
unknown
|
||
|
http://www.eternalknot1008.com/gs12/www.zgcple.info
|
unknown
|
||
|
http://www.lolabeautystudios.com/gs12/www.y2llvq.vip
|
unknown
|
||
|
http://www.zgcple.infoReferer:
|
unknown
|
||
|
http://www.lolabeautystudios.com
|
unknown
|
||
|
http://www.airzf.com/gs12/www.actnowgreen.com
|
unknown
|
||
|
http://www.actnowgreen.com/gs12/www.udin88b.us
|
unknown
|
||
|
http://www.hjgd.xyz/gs12/www.airzf.com
|
unknown
|
||
|
http://www.y2llvq.vipReferer:
|
unknown
|
||
|
http://www.k2securityhn.comReferer:
|
unknown
|
||
|
http://www.sports565.comReferer:
|
unknown
|
||
|
https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppcrobat.exe
|
unknown
|
||
|
http://www.umastyle.club
|
unknown
|
||
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
|
http://www.eternalknot1008.com
|
unknown
|
||
|
http://www.airzf.com
|
unknown
|
||
|
http://www.y2llvq.vip/gs12/www.51win.ink
|
unknown
|
||
|
http://www.hjgd.xyzReferer:
|
unknown
|
||
|
https://wns.windows.com/)s
|
unknown
|
||
|
http://www.signomo.com
|
unknown
|
||
|
http://www.urxetqt.com
|
unknown
|
||
|
http://www.wonderdread.cloud/gs12/www.umastyle.club
|
unknown
|
||
|
http://www.udin88b.us
|
unknown
|
||
|
http://www.51win.ink
|
unknown
|
||
|
http://www.umastyle.club/gs12/www.sports565.com
|
unknown
|
||
|
http://www.51win.ink/gs12/ch_cf
|
unknown
|
||
|
http://www.lolabeautystudios.comReferer:
|
unknown
|
||
|
http://www.lolabeautystudios.com/gs12/
|
unknown
|
||
|
http://www.udin88b.usReferer:
|
unknown
|
||
|
http://www.zgcple.info/gs12/www.k2securityhn.com
|
unknown
|
||
|
https://outlook.com
|
unknown
|
||
|
http://www.wonderdread.cloud/gs12/
|
unknown
|
||
|
http://www.wonderdread.cloud
|
unknown
|
||
|
https://www.cloudflare.com/5xx-error-landing
|
unknown
|
||
|
http://www.udin88b.us/gs12/
|
unknown
|
||
|
http://www.urxetqt.comReferer:
|
unknown
|
||
|
http://www.tronbank.clubReferer:
|
unknown
|
||
|
http://www.hjgd.xyz/gs12/
|
unknown
|
||
|
http://www.umastyle.club/gs12/
|
unknown
|
||
|
http://www.airzf.com/gs12/?4h0=DR9+51q0CIrIDgcjStoZ4W0ewB14phJf97sbOZAiDLbqJph64OQ6FfPwpz0r/rXmCdIn&vT=LtxxLba
|
154.12.38.29
|
||
|
http://www.zgcple.info
|
unknown
|
||
|
http://www.tronbank.club
|
unknown
|
||
|
https://android.notify.windows.com/iOS
|
unknown
|
||
|
http://www.urxetqt.com/gs12/
|
unknown
|
||
|
http://www.wonderdread.cloudReferer:
|
unknown
|
||
|
http://www.airzf.com/gs12/
|
unknown
|
||
|
http://www.udin88b.us/gs12/www.eternalknot1008.com
|
unknown
|
||
|
http://www.signomo.com/gs12/
|
unknown
|
||
|
http://www.k2securityhn.com
|
unknown
|
||
|
https://api.msn.com/
|
unknown
|
||
|
http://www.sports565.com/gs12/www.lolabeautystudios.com
|
unknown
|
||
|
http://www.actnowgreen.comReferer:
|
unknown
|
||
|
http://crl.v
|
unknown
|
||
|
http://www.k2securityhn.com/gs12/www.wonderdread.cloud
|
unknown
|
There are 72 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.tronbank.club
|
103.224.212.216
|
|
|
|
signomo.com
|
3.33.130.190
|
|
|
|
k2securityhn.com
|
3.33.130.190
|
|
|
|
www.actnowgreen.com
|
unknown
|
|
|
|
www.zgcple.info
|
unknown
|
|
|
|
www.wonderdread.cloud
|
unknown
|
|
|
|
www.urxetqt.com
|
unknown
|
|
|
|
www.signomo.com
|
unknown
|
|
|
|
www.k2securityhn.com
|
unknown
|
|
|
|
www.eternalknot1008.com
|
unknown
|
|
|
|
www.airzf.com
|
154.12.38.29
|
||
|
www.udin88b.us
|
154.83.2.141
|
||
|
parkingpage.namecheap.com
|
91.195.240.19
|
||
|
shops.myshopify.com
|
23.227.38.74
|
||
|
www.umastyle.club
|
103.224.212.210
|
There are 5 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
3.33.130.190
|
signomo.com
|
United States
|
|
|
|
103.224.212.216
|
www.tronbank.club
|
Australia
|
|
|
|
154.12.38.29
|
www.airzf.com
|
United States
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Excel.CSV
|
|
|
|
unknown
|
Word.Document.8
|
|
|
|
unknown
|
Word.DocumentMacroEnabled.12
|
|
|
|
unknown
|
Word.Document.12
|
|
|
|
unknown
|
Word.Template.8
|
|
|
|
unknown
|
Word.TemplateMacroEnabled.12
|
|
|
|
unknown
|
Word.Template.12
|
|
|
|
unknown
|
Outlook.File.msg.15
|
|
|
|
unknown
|
PowerPoint.OpenDocumentPresentation.12
|
|
|
|
unknown
|
Excel.OpenDocumentSpreadsheet.12
|
|
|
|
unknown
|
Word.OpenDocumentText.12
|
|
|
|
unknown
|
PowerPoint.Template.8
|
|
|
|
unknown
|
PowerPoint.TemplateMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Template.12
|
|
|
|
unknown
|
PowerPoint.Addin.12
|
|
|
|
unknown
|
PowerPoint.SlideShowMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.SlideShow.12
|
|
|
|
unknown
|
PowerPoint.Show.8
|
|
|
|
unknown
|
PowerPoint.ShowMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Show.12
|
|
|
|
unknown
|
Word.RTF.8
|
|
|
|
unknown
|
PowerPoint.SlideMacroEnabled.12
|
|
|
|
unknown
|
PowerPoint.Slide.12
|
|
|
|
unknown
|
bootstrap.vsto.1
|
|
|
|
unknown
|
Excel.AddInMacroEnabled
|
|
|
|
unknown
|
Excel.Sheet.8
|
|
|
|
unknown
|
Excel.SheetBinaryMacroEnabled.12
|
|
|
|
unknown
|
Excel.SheetMacroEnabled.12
|
|
|
|
unknown
|
Excel.Sheet.12
|
|
|
|
unknown
|
Excel.Template.8
|
|
|
|
unknown
|
Excel.TemplateMacroEnabled
|
|
|
|
unknown
|
Excel.Template
|
|
|
|
unknown
|
Unpacker
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
@explorerframe.dll,-13137
|
|
|
|
unknown
|
@explorerframe.dll,-13138
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
{33154C99-BF49-443D-A73C-303A23ABBE97} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
Classes
|
|
|
|
unknown
|
~reserved~
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
WMP11.AssocFile.3G2
|
|
|
|
unknown
|
WMP11.AssocFile.3GP
|
|
|
|
unknown
|
WMP11.AssocFile.3G2
|
|
|
|
unknown
|
WMP11.AssocFile.ADTS
|
|
|
|
unknown
|
WMP11.AssocFile.AIFF
|
|
|
|
unknown
|
WMP11.AssocFile.ASF
|
|
|
|
unknown
|
WMP11.AssocFile.ASX
|
|
|
|
unknown
|
WMP11.AssocFile.AU
|
|
|
|
unknown
|
AutoIt3Script
|
|
|
|
unknown
|
WMP11.AssocFile.AVI
|
|
|
|
unknown
|
Paint.Picture
|
|
|
|
unknown
|
CABFolder
|
|
|
|
unknown
|
Microsoft.PowerShellCmdletDefinitionXML.1
|
|
|
|
unknown
|
CSSfile
|
|
|
|
unknown
|
ddsfile
|
|
|
|
unknown
|
Paint.Picture
|
|
|
|
unknown
|
dllfile
|
|
|
|
unknown
|
emffile
|
|
|
|
unknown
|
exefile
|
|
|
|
unknown
|
WMP11.AssocFile.FLAC
|
|
|
|
unknown
|
fonfile
|
|
|
|
unknown
|
giffile
|
|
|
|
unknown
|
htmlfile
|
|
|
|
unknown
|
icofile
|
|
|
|
unknown
|
inffile
|
|
|
|
unknown
|
inifile
|
|
|
|
unknown
|
pjpegfile
|
|
|
|
unknown
|
jpegfile
|
|
|
|
unknown
|
wdpfile
|
|
|
|
unknown
|
lnkfile
|
|
|
|
unknown
|
WMP11.AssocFile.MPEG
|
|
|
|
unknown
|
WMP11.AssocFile.M2TS
|
|
|
|
unknown
|
WMP11.AssocFile.m3u
|
|
|
|
unknown
|
WMP11.AssocFile.M4A
|
|
|
|
unknown
|
WMP11.AssocFile.MP4
|
|
|
|
unknown
|
mhtmlfile
|
|
|
|
unknown
|
WMP11.AssocFile.MIDI
|
|
|
|
unknown
|
WMP11.AssocFile.MK3D
|
|
|
|
unknown
|
WMP11.AssocFile.MKA
|
|
|
|
unknown
|
WMP11.AssocFile.MKV
|
|
|
|
unknown
|
WMP11.AssocFile.MOV
|
|
|
|
unknown
|
WMP11.AssocFile.MP3
|
|
|
|
unknown
|
WMP11.AssocFile.MP4
|
|
|
|
unknown
|
WMP11.AssocFile.MP4
|
|
|
|
unknown
|
WMP11.AssocFile.MPEG
|
|
|
|
unknown
|
WMP11.AssocFile.M2TS
|
|
|
|
unknown
|
ocxfile
|
|
|
|
unknown
|
otffile
|
|
|
|
unknown
|
pngfile
|
|
|
|
unknown
|
Microsoft.PowerShellScript.1
|
|
|
|
unknown
|
Microsoft.PowerShellXMLData.1
|
|
|
|
unknown
|
Microsoft.PowerShellData.1
|
|
|
|
unknown
|
Microsoft.PowerShellModule.1
|
|
|
|
unknown
|
Microsoft.PowerShellSessionConfiguration.1
|
|
|
|
unknown
|
rlefile
|
|
|
|
unknown
|
WMP11.AssocFile.MIDI
|
|
|
|
unknown
|
SHCmdFile
|
|
|
|
unknown
|
SearchFolder
|
|
|
|
unknown
|
shtmlfile
|
|
|
|
unknown
|
WMP11.AssocFile.AU
|
|
|
|
unknown
|
sysfile
|
|
|
|
unknown
|
TIFImage.Document
|
|
|
|
unknown
|
TIFImage.Document
|
|
|
|
unknown
|
WMP11.AssocFile.TTS
|
|
|
|
unknown
|
ttcfile
|
|
|
|
unknown
|
ttffile
|
|
|
|
unknown
|
WMP11.AssocFile.TTS
|
|
|
|
unknown
|
txtfile
|
|
|
|
unknown
|
WMP11.AssocFile.WAV
|
|
|
|
unknown
|
WMP11.AssocFile.WAX
|
|
|
|
unknown
|
wdpfile
|
|
|
|
unknown
|
WMP11.AssocFile.ASF
|
|
|
|
unknown
|
WMP11.AssocFile.WMA
|
|
|
|
unknown
|
wmffile
|
|
|
|
unknown
|
WMP11.AssocFile.WMV
|
|
|
|
unknown
|
WMP11.AssocFile.ASX
|
|
|
|
unknown
|
WMP11.AssocFile.WPL
|
|
|
|
unknown
|
WMP11.AssocFile.WVX
|
|
|
|
unknown
|
xmlfile
|
|
|
|
unknown
|
xslfile
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
unknown
|
SlowContextMenuEntries
|
|
|
|
unknown
|
TaskbarStateLastRun
|
|
|
|
unknown
|
Implementing
|
|
|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{0BF754AA-C967-445C-AB3D-D8FDA9BAE7EF} {000214E4-0000-0000-C000-000000000046} 0xFFFF
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Windows\System32\display.dll,-4
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Windows\system32\themecpl.dll,-10
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-123
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-174
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-131
|
||
|
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
|
@C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-101
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
Classes
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
|
~reserved~
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
|
CheckSetting
|
There are 180 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2C20000
|
unclassified section
|
page execute and read and write
|
|
|
|
4DCF000
|
trusted library allocation
|
page read and write
|
|
|
|
2C50000
|
trusted library allocation
|
page read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
44AE000
|
trusted library allocation
|
page read and write
|
|
|
|
25A0000
|
system
|
page execute and read and write
|
|
|
|
761E000
|
unkown
|
page read and write
|
||
|
7FF5D770F000
|
unkown
|
page readonly
|
||
|
35B0000
|
unkown
|
page read and write
|
||
|
49FD000
|
unkown
|
page read and write
|
||
|
F294000
|
unkown
|
page read and write
|
||
|
10BE1000
|
unkown
|
page read and write
|
||
|
33F0000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
49BB000
|
unkown
|
page read and write
|
||
|
B4D0000
|
unkown
|
page readonly
|
||
|
7FF5D7694000
|
unkown
|
page readonly
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
C44F000
|
stack
|
page read and write
|
||
|
7FF5D744E000
|
unkown
|
page readonly
|
||
|
9EB0000
|
unkown
|
page readonly
|
||
|
C933000
|
unkown
|
page read and write
|
||
|
8870000
|
unkown
|
page readonly
|
||
|
3630000
|
unkown
|
page readonly
|
||
|
312E000
|
stack
|
page read and write
|
||
|
16CD000
|
direct allocation
|
page execute and read and write
|
||
|
35CF000
|
unkown
|
page read and write
|
||
|
7DF4F2460000
|
unkown
|
page readonly
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D762F000
|
unkown
|
page readonly
|
||
|
7CB0000
|
unkown
|
page readonly
|
||
|
AA0B000
|
unkown
|
page read and write
|
||
|
C863000
|
unkown
|
page read and write
|
||
|
A2A2000
|
unkown
|
page read and write
|
||
|
7FF5D76D7000
|
unkown
|
page readonly
|
||
|
7FF5D75DF000
|
unkown
|
page readonly
|
||
|
7FF5D7740000
|
unkown
|
page readonly
|
||
|
C7C6000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
B0E0000
|
unkown
|
page readonly
|
||
|
85BE000
|
stack
|
page read and write
|
||
|
7FF5D7450000
|
unkown
|
page readonly
|
||
|
FA7000
|
heap
|
page read and write
|
||
|
4AEA000
|
unkown
|
page read and write
|
||
|
7FF5D77C7000
|
unkown
|
page readonly
|
||
|
33C0000
|
unkown
|
page read and write
|
||
|
2EC0000
|
unkown
|
page readonly
|
||
|
84BB000
|
stack
|
page read and write
|
||
|
7FF5D7230000
|
unkown
|
page readonly
|
||
|
7FF5D770A000
|
unkown
|
page readonly
|
||
|
7618000
|
unkown
|
page read and write
|
||
|
7FF5D768B000
|
unkown
|
page readonly
|
||
|
1160000
|
unkown
|
page read and write
|
||
|
5800000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D77CD000
|
unkown
|
page readonly
|
||
|
C86B000
|
unkown
|
page read and write
|
||
|
5815000
|
trusted library allocation
|
page read and write
|
||
|
12D0000
|
unkown
|
page readonly
|
||
|
7D3E000
|
stack
|
page read and write
|
||
|
5B00000
|
heap
|
page read and write
|
||
|
96FE000
|
stack
|
page read and write
|
||
|
7FF5D6A4B000
|
unkown
|
page readonly
|
||
|
133F000
|
heap
|
page read and write
|
||
|
A237000
|
unkown
|
page read and write
|
||
|
7FF5D7455000
|
unkown
|
page readonly
|
||
|
7FF5D7391000
|
unkown
|
page readonly
|
||
|
AA8D000
|
unkown
|
page read and write
|
||
|
35C9000
|
unkown
|
page read and write
|
||
|
7FF5D766E000
|
unkown
|
page readonly
|
||
|
35BD000
|
unkown
|
page read and write
|
||
|
1360000
|
unkown
|
page readonly
|
||
|
8050000
|
trusted library section
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
9A8C000
|
unkown
|
page read and write
|
||
|
C1CC000
|
stack
|
page read and write
|
||
|
4580000
|
trusted library allocation
|
page read and write
|
||
|
13ED000
|
heap
|
page read and write
|
||
|
A3B6000
|
unkown
|
page read and write
|
||
|
7605000
|
unkown
|
page read and write
|
||
|
7FF5D762F000
|
unkown
|
page readonly
|
||
|
7FF5D75D9000
|
unkown
|
page readonly
|
||
|
9BB1000
|
unkown
|
page read and write
|
||
|
35B5000
|
unkown
|
page read and write
|
||
|
7FF5D77DA000
|
unkown
|
page readonly
|
||
|
A220000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
7FF5D7722000
|
unkown
|
page readonly
|
||
|
B220000
|
unkown
|
page read and write
|
||
|
7FF5D75F9000
|
unkown
|
page readonly
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
7FF5D74F2000
|
unkown
|
page readonly
|
||
|
C863000
|
unkown
|
page read and write
|
||
|
4A71000
|
unkown
|
page read and write
|
||
|
7FF5D6BEF000
|
unkown
|
page readonly
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
1910000
|
trusted library allocation
|
page read and write
|
||
|
8C39000
|
stack
|
page read and write
|
||
|
1350000
|
unkown
|
page readonly
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
C5FD000
|
unkown
|
page read and write
|
||
|
C483000
|
unkown
|
page read and write
|
||
|
1748000
|
direct allocation
|
page execute and read and write
|
||
|
463E000
|
stack
|
page read and write
|
||
|
768E000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D75FF000
|
unkown
|
page readonly
|
||
|
49FD000
|
unkown
|
page read and write
|
||
|
8890000
|
unkown
|
page readonly
|
||
|
86D0000
|
unkown
|
page readonly
|
||
|
3170000
|
heap
|
page read and write
|
||
|
C9A7000
|
unkown
|
page read and write
|
||
|
7FF5D7482000
|
unkown
|
page readonly
|
||
|
57F0000
|
trusted library allocation
|
page read and write
|
||
|
77AE000
|
stack
|
page read and write
|
||
|
33F0000
|
unkown
|
page read and write
|
||
|
96BE000
|
stack
|
page read and write
|
||
|
7FF5D72D7000
|
unkown
|
page readonly
|
||
|
46B0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D72DF000
|
unkown
|
page readonly
|
||
|
C65E000
|
unkown
|
page read and write
|
||
|
153E000
|
stack
|
page read and write
|
||
|
35C9000
|
unkown
|
page read and write
|
||
|
58A0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7604000
|
unkown
|
page readonly
|
||
|
7FF5D7407000
|
unkown
|
page readonly
|
||
|
9D67000
|
unkown
|
page read and write
|
||
|
7FF5D7523000
|
unkown
|
page readonly
|
||
|
7FF5D71D7000
|
unkown
|
page readonly
|
||
|
7FF5D7404000
|
unkown
|
page readonly
|
||
|
7FF5D7202000
|
unkown
|
page readonly
|
||
|
7FF5D77CD000
|
unkown
|
page readonly
|
||
|
35B0000
|
unkown
|
page read and write
|
||
|
3540000
|
unkown
|
page read and write
|
||
|
A237000
|
unkown
|
page read and write
|
||
|
7DC0000
|
unkown
|
page readonly
|
||
|
12D0000
|
unkown
|
page readonly
|
||
|
764A000
|
heap
|
page read and write
|
||
|
9D42000
|
unkown
|
page read and write
|
||
|
B8DB000
|
stack
|
page read and write
|
||
|
7642000
|
heap
|
page read and write
|
||
|
10E7F000
|
system
|
page read and write
|
||
|
362D000
|
unkown
|
page read and write
|
||
|
7FF5D7452000
|
unkown
|
page readonly
|
||
|
C96F000
|
unkown
|
page read and write
|
||
|
7DF4F2471000
|
unkown
|
page execute read
|
||
|
7B10000
|
unkown
|
page read and write
|
||
|
B980000
|
unkown
|
page readonly
|
||
|
7FF5D765F000
|
unkown
|
page readonly
|
||
|
7FF5D769E000
|
unkown
|
page readonly
|
||
|
FE0000
|
heap
|
page read and write
|
||
|
7618000
|
unkown
|
page read and write
|
||
|
7FF5D7292000
|
unkown
|
page readonly
|
||
|
F0D000
|
unclassified section
|
page execute and read and write
|
||
|
7FF5D7764000
|
unkown
|
page readonly
|
||
|
9A84000
|
unkown
|
page read and write
|
||
|
E2F000
|
unclassified section
|
page execute and read and write
|
||
|
35D5000
|
unkown
|
page read and write
|
||
|
AA9B000
|
unkown
|
page read and write
|
||
|
9207000
|
unkown
|
page read and write
|
||
|
74A0000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D77E3000
|
unkown
|
page readonly
|
||
|
7FF5D74A6000
|
unkown
|
page readonly
|
||
|
7FF5D7837000
|
unkown
|
page readonly
|
||
|
60000
|
system
|
page execute and read and write
|
||
|
804E000
|
stack
|
page read and write
|
||
|
7AB0000
|
unkown
|
page read and write
|
||
|
7FF5D75BF000
|
unkown
|
page readonly
|
||
|
8C39000
|
stack
|
page read and write
|
||
|
7693000
|
unkown
|
page read and write
|
||
|
7DC0000
|
unkown
|
page readonly
|
||
|
1917000
|
trusted library allocation
|
page execute and read and write
|
||
|
A2A2000
|
unkown
|
page read and write
|
||
|
2B90000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D73F5000
|
unkown
|
page readonly
|
||
|
7FF5D7546000
|
unkown
|
page readonly
|
||
|
7FF5D771A000
|
unkown
|
page readonly
|
||
|
7FF5D75FF000
|
unkown
|
page readonly
|
||
|
C450000
|
unkown
|
page read and write
|
||
|
4AB0000
|
unkown
|
page read and write
|
||
|
7FF5D7236000
|
unkown
|
page readonly
|
||
|
7FF5D75A6000
|
unkown
|
page readonly
|
||
|
AA9B000
|
unkown
|
page read and write
|
||
|
7637000
|
unkown
|
page read and write
|
||
|
997C000
|
stack
|
page read and write
|
||
|
7FF5D75D6000
|
unkown
|
page readonly
|
||
|
29D0000
|
heap
|
page read and write
|
||
|
1380000
|
heap
|
page read and write
|
||
|
45FF000
|
heap
|
page read and write
|
||
|
C9A7000
|
unkown
|
page read and write
|
||
|
C73E000
|
unkown
|
page read and write
|
||
|
7FF5D7669000
|
unkown
|
page readonly
|
||
|
A391000
|
unkown
|
page read and write
|
||
|
C7CB000
|
unkown
|
page read and write
|
||
|
77DB000
|
unkown
|
page read and write
|
||
|
7AC0000
|
unkown
|
page read and write
|
||
|
2810000
|
heap
|
page read and write
|
||
|
35FA000
|
unkown
|
page read and write
|
||
|
C47F000
|
unkown
|
page read and write
|
||
|
7FF5D7458000
|
unkown
|
page readonly
|
||
|
1900000
|
trusted library allocation
|
page read and write
|
||
|
FA0000
|
heap
|
page read and write
|
||
|
7FF5D706E000
|
unkown
|
page readonly
|
||
|
9FAF000
|
stack
|
page read and write
|
||
|
7FF5D7376000
|
unkown
|
page readonly
|
||
|
49D6000
|
unkown
|
page read and write
|
||
|
9A80000
|
unkown
|
page read and write
|
||
|
C61B000
|
unkown
|
page read and write
|
||
|
7FF5D723C000
|
unkown
|
page readonly
|
||
|
A313000
|
unkown
|
page read and write
|
||
|
11C1000
|
unkown
|
page read and write
|
||
|
C7CB000
|
unkown
|
page read and write
|
||
|
2EFD000
|
stack
|
page read and write
|
||
|
A23A000
|
unkown
|
page read and write
|
||
|
C62D000
|
unkown
|
page read and write
|
||
|
30E0000
|
trusted library allocation
|
page read and write
|
||
|
1750000
|
unclassified section
|
page execute and read and write
|
||
|
C605000
|
unkown
|
page read and write
|
||
|
9ADB000
|
unkown
|
page read and write
|
||
|
7FF5D75F9000
|
unkown
|
page readonly
|
||
|
2FF9000
|
stack
|
page read and write
|
||
|
7FF5D760B000
|
unkown
|
page readonly
|
||
|
7FF5D752F000
|
unkown
|
page readonly
|
||
|
C605000
|
unkown
|
page read and write
|
||
|
F13000
|
heap
|
page read and write
|
||
|
A220000
|
unkown
|
page read and write
|
||
|
7FF5D7442000
|
unkown
|
page readonly
|
||
|
8DCB000
|
stack
|
page read and write
|
||
|
C61D000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7AA0000
|
unkown
|
page read and write
|
||
|
B220000
|
unkown
|
page read and write
|
||
|
4A71000
|
unkown
|
page read and write
|
||
|
C24E000
|
stack
|
page read and write
|
||
|
3310000
|
unkown
|
page read and write
|
||
|
7435000
|
stack
|
page read and write
|
||
|
1902000
|
trusted library allocation
|
page read and write
|
||
|
9C22000
|
unkown
|
page read and write
|
||
|
9C96000
|
unkown
|
page read and write
|
||
|
7FF5D76DA000
|
unkown
|
page readonly
|
||
|
16C6000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D75EE000
|
unkown
|
page readonly
|
||
|
C86B000
|
unkown
|
page read and write
|
||
|
7FF5D7591000
|
unkown
|
page readonly
|
||
|
7FF5D74A6000
|
unkown
|
page readonly
|
||
|
7FF5D743F000
|
unkown
|
page readonly
|
||
|
7FF5D6BDB000
|
unkown
|
page readonly
|
||
|
AA0B000
|
unkown
|
page read and write
|
||
|
139F000
|
stack
|
page read and write
|
||
|
2EC0000
|
unkown
|
page readonly
|
||
|
3500000
|
stack
|
page read and write
|
||
|
75F8000
|
unkown
|
page read and write
|
||
|
C89C000
|
unkown
|
page read and write
|
||
|
7605000
|
unkown
|
page read and write
|
||
|
7FF5D7691000
|
unkown
|
page readonly
|
||
|
C8C1000
|
unkown
|
page read and write
|
||
|
937E000
|
stack
|
page read and write
|
||
|
FE5000
|
heap
|
page read and write
|
||
|
7FF5D7267000
|
unkown
|
page readonly
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
10BBE000
|
unkown
|
page read and write
|
||
|
57B4000
|
trusted library allocation
|
page read and write
|
||
|
35E4000
|
unkown
|
page read and write
|
||
|
32D1000
|
trusted library allocation
|
page read and write
|
||
|
957E000
|
stack
|
page read and write
|
||
|
C899000
|
unkown
|
page read and write
|
||
|
191B000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D71C8000
|
unkown
|
page readonly
|
||
|
CA17000
|
unkown
|
page read and write
|
||
|
1940000
|
heap
|
page read and write
|
||
|
AA92000
|
unkown
|
page read and write
|
||
|
7FF5D76C8000
|
unkown
|
page readonly
|
||
|
A9FD000
|
unkown
|
page read and write
|
||
|
7FF5D7230000
|
unkown
|
page readonly
|
||
|
C609000
|
unkown
|
page read and write
|
||
|
B85A000
|
stack
|
page read and write
|
||
|
97FC000
|
stack
|
page read and write
|
||
|
14F5000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
57B0000
|
trusted library allocation
|
page read and write
|
||
|
F213000
|
unkown
|
page read and write
|
||
|
3532000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
2F7E000
|
stack
|
page read and write
|
||
|
C94D000
|
unkown
|
page read and write
|
||
|
B4D0000
|
unkown
|
page readonly
|
||
|
E450000
|
system
|
page execute and read and write
|
||
|
479D000
|
heap
|
page read and write
|
||
|
7FF5D76CD000
|
unkown
|
page readonly
|
||
|
18D0000
|
trusted library allocation
|
page read and write
|
||
|
9EB0000
|
unkown
|
page readonly
|
||
|
7FF5D77F0000
|
unkown
|
page readonly
|
||
|
7FF5D7641000
|
unkown
|
page readonly
|
||
|
12B0000
|
unkown
|
page read and write
|
||
|
362A000
|
unkown
|
page read and write
|
||
|
5820000
|
trusted library allocation
|
page read and write
|
||
|
4CFF000
|
unclassified section
|
page read and write
|
||
|
A28D000
|
unkown
|
page read and write
|
||
|
C642000
|
unkown
|
page read and write
|
||
|
AA91000
|
unkown
|
page read and write
|
||
|
942C000
|
stack
|
page read and write
|
||
|
4AC0000
|
unkown
|
page read and write
|
||
|
49FA000
|
unkown
|
page read and write
|
||
|
7675000
|
heap
|
page read and write
|
||
|
4A16000
|
unkown
|
page read and write
|
||
|
C615000
|
unkown
|
page read and write
|
||
|
5CB9000
|
heap
|
page read and write
|
||
|
C861000
|
unkown
|
page read and write
|
||
|
AA04000
|
unkown
|
page read and write
|
||
|
130E000
|
heap
|
page read and write
|
||
|
7CB0000
|
unkown
|
page readonly
|
||
|
98FD000
|
stack
|
page read and write
|
||
|
C8C4000
|
unkown
|
page read and write
|
||
|
7AF1000
|
unkown
|
page read and write
|
||
|
1160000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7C80000
|
unkown
|
page read and write
|
||
|
58C0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D74FA000
|
unkown
|
page readonly
|
||
|
49C2000
|
unkown
|
page read and write
|
||
|
4ADA000
|
unkown
|
page read and write
|
||
|
6D000
|
system
|
page execute and read and write
|
||
|
768C000
|
unkown
|
page read and write
|
||
|
35E4000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D781A000
|
unkown
|
page readonly
|
||
|
5B4B000
|
stack
|
page read and write
|
||
|
A9E9000
|
unkown
|
page read and write
|
||
|
BA9A000
|
trusted library allocation
|
page read and write
|
||
|
FD0000
|
heap
|
page read and write
|
||
|
10BC4000
|
unkown
|
page read and write
|
||
|
4A40000
|
unkown
|
page read and write
|
||
|
9AA0000
|
unkown
|
page read and write
|
||
|
C86E000
|
unkown
|
page read and write
|
||
|
7FF5D7438000
|
unkown
|
page readonly
|
||
|
30FB000
|
stack
|
page read and write
|
||
|
5330000
|
unkown
|
page write copy
|
||
|
7FF5D76E8000
|
unkown
|
page readonly
|
||
|
1731000
|
unkown
|
page readonly
|
||
|
C806000
|
unkown
|
page read and write
|
||
|
EB6000
|
stack
|
page read and write
|
||
|
A23A000
|
unkown
|
page read and write
|
||
|
7FF5D77D2000
|
unkown
|
page readonly
|
||
|
1912000
|
trusted library allocation
|
page read and write
|
||
|
C48B000
|
unkown
|
page read and write
|
||
|
99BA000
|
unkown
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
1281000
|
unkown
|
page readonly
|
||
|
7FF5D748A000
|
unkown
|
page readonly
|
||
|
7FF5D77E9000
|
unkown
|
page readonly
|
||
|
7FF5D7272000
|
unkown
|
page readonly
|
||
|
9ADB000
|
unkown
|
page read and write
|
||
|
46B0000
|
trusted library allocation
|
page read and write
|
||
|
A12F000
|
stack
|
page read and write
|
||
|
8A46000
|
unkown
|
page read and write
|
||
|
A1AF000
|
stack
|
page read and write
|
||
|
7FF5D75CB000
|
unkown
|
page readonly
|
||
|
843F000
|
stack
|
page read and write
|
||
|
7460000
|
unkown
|
page read and write
|
||
|
91F0000
|
unkown
|
page readonly
|
||
|
7FF5D71CC000
|
unkown
|
page readonly
|
||
|
35D1000
|
unkown
|
page read and write
|
||
|
8A70000
|
unkown
|
page read and write
|
||
|
10BB1000
|
unkown
|
page read and write
|
||
|
7FF5D71AF000
|
unkown
|
page readonly
|
||
|
C5F8000
|
unkown
|
page read and write
|
||
|
F2EE000
|
stack
|
page read and write
|
||
|
7FF5D71EA000
|
unkown
|
page readonly
|
||
|
9A98000
|
unkown
|
page read and write
|
||
|
7AF1000
|
unkown
|
page read and write
|
||
|
3535000
|
unkown
|
page read and write
|
||
|
2838000
|
heap
|
page read and write
|
||
|
C460000
|
unkown
|
page read and write
|
||
|
35F4000
|
unkown
|
page read and write
|
||
|
7FF5D66E8000
|
unkown
|
page readonly
|
||
|
9AAA000
|
unkown
|
page read and write
|
||
|
7FF5D7244000
|
unkown
|
page readonly
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
32CF000
|
stack
|
page read and write
|
||
|
1383000
|
heap
|
page read and write
|
||
|
9BAF000
|
unkown
|
page read and write
|
||
|
9A92000
|
unkown
|
page read and write
|
||
|
F42C000
|
stack
|
page read and write
|
||
|
7FF5D71A6000
|
unkown
|
page readonly
|
||
|
A1AF000
|
stack
|
page read and write
|
||
|
2BDE000
|
unkown
|
page read and write
|
||
|
4B00000
|
unkown
|
page read and write
|
||
|
7FF5D72FB000
|
unkown
|
page readonly
|
||
|
10BE1000
|
unkown
|
page read and write
|
||
|
7DF4F2491000
|
unkown
|
page execute read
|
||
|
7FF5D772C000
|
unkown
|
page readonly
|
||
|
5910000
|
heap
|
page read and write
|
||
|
C907000
|
unkown
|
page read and write
|
||
|
7600000
|
heap
|
page read and write
|
||
|
7FF5D7425000
|
unkown
|
page readonly
|
||
|
35D3000
|
unkown
|
page read and write
|
||
|
7FF5D7262000
|
unkown
|
page readonly
|
||
|
35E4000
|
unkown
|
page read and write
|
||
|
779E000
|
unkown
|
page read and write
|
||
|
7FF5D7648000
|
unkown
|
page readonly
|
||
|
4327000
|
trusted library allocation
|
page read and write
|
||
|
7B10000
|
unkown
|
page read and write
|
||
|
7FF5D66E8000
|
unkown
|
page readonly
|
||
|
7637000
|
unkown
|
page read and write
|
||
|
7FF5D7593000
|
unkown
|
page readonly
|
||
|
BB10000
|
heap
|
page read and write
|
||
|
7FF5D7752000
|
unkown
|
page readonly
|
||
|
A416000
|
unkown
|
page read and write
|
||
|
C8F6000
|
unkown
|
page read and write
|
||
|
13A0000
|
unkown
|
page readonly
|
||
|
7FF5D77B9000
|
unkown
|
page readonly
|
||
|
7FF5D775C000
|
unkown
|
page readonly
|
||
|
7FF5D710B000
|
unkown
|
page readonly
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
3530000
|
unkown
|
page read and write
|
||
|
9AB2000
|
unkown
|
page read and write
|
||
|
99B0000
|
unkown
|
page read and write
|
||
|
76F8000
|
unkown
|
page read and write
|
||
|
E4FB000
|
system
|
page execute and read and write
|
||
|
C0BA000
|
stack
|
page read and write
|
||
|
472C000
|
heap
|
page read and write
|
||
|
7FF5D7591000
|
unkown
|
page readonly
|
||
|
AFBE000
|
stack
|
page read and write
|
||
|
A02E000
|
stack
|
page read and write
|
||
|
7FF5D723F000
|
unkown
|
page readonly
|
||
|
7611000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
B330000
|
unkown
|
page read and write
|
||
|
7FF5D729E000
|
unkown
|
page readonly
|
||
|
A33F000
|
unkown
|
page read and write
|
||
|
35B3000
|
unkown
|
page read and write
|
||
|
7B60000
|
unkown
|
page readonly
|
||
|
7FF5D74F2000
|
unkown
|
page readonly
|
||
|
C035000
|
stack
|
page read and write
|
||
|
7FF5D777A000
|
unkown
|
page readonly
|
||
|
9D67000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
115E000
|
stack
|
page read and write
|
||
|
AAA6000
|
unkown
|
page read and write
|
||
|
E10000
|
unclassified section
|
page execute and read and write
|
||
|
5479000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
3544000
|
unkown
|
page read and write
|
||
|
7FF5D7507000
|
unkown
|
page readonly
|
||
|
7609000
|
unkown
|
page read and write
|
||
|
98FD000
|
stack
|
page read and write
|
||
|
7FF5D7752000
|
unkown
|
page readonly
|
||
|
9A6A000
|
unkown
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
A39F000
|
unkown
|
page read and write
|
||
|
7691000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D72BF000
|
unkown
|
page readonly
|
||
|
2B21000
|
heap
|
page read and write
|
||
|
10BCA000
|
unkown
|
page read and write
|
||
|
977E000
|
stack
|
page read and write
|
||
|
10B8C000
|
unkown
|
page read and write
|
||
|
A9FD000
|
unkown
|
page read and write
|
||
|
9D67000
|
unkown
|
page read and write
|
||
|
E450000
|
unkown
|
page read and write
|
||
|
7FF5D752F000
|
unkown
|
page readonly
|
||
|
8F49000
|
stack
|
page read and write
|
||
|
7FF5D7797000
|
unkown
|
page readonly
|
||
|
7FF5D7236000
|
unkown
|
page readonly
|
||
|
7A65000
|
trusted library allocation
|
page read and write
|
||
|
35CD000
|
unkown
|
page read and write
|
||
|
4AA0000
|
unkown
|
page read and write
|
||
|
46B0000
|
trusted library allocation
|
page read and write
|
||
|
C653000
|
unkown
|
page read and write
|
||
|
2F3E000
|
stack
|
page read and write
|
||
|
A2B5000
|
unkown
|
page read and write
|
||
|
A251000
|
unkown
|
page read and write
|
||
|
9A84000
|
unkown
|
page read and write
|
||
|
C800000
|
unkown
|
page read and write
|
||
|
9A96000
|
unkown
|
page read and write
|
||
|
7FF5D738E000
|
unkown
|
page readonly
|
||
|
7FF5D7534000
|
unkown
|
page readonly
|
||
|
7FF5D7396000
|
unkown
|
page readonly
|
||
|
53E1000
|
unkown
|
page read and write
|
||
|
BB0A000
|
stack
|
page read and write
|
||
|
7FF5D7425000
|
unkown
|
page readonly
|
||
|
7FF5D7799000
|
unkown
|
page readonly
|
||
|
7FF5D7262000
|
unkown
|
page readonly
|
||
|
C908000
|
unkown
|
page read and write
|
||
|
1136F000
|
system
|
page read and write
|
||
|
5300000
|
trusted library section
|
page read and write
|
||
|
7810000
|
unkown
|
page read and write
|
||
|
7FF5D6A4B000
|
unkown
|
page readonly
|
||
|
35F4000
|
unkown
|
page read and write
|
||
|
AA08000
|
unkown
|
page read and write
|
||
|
7FF5D7523000
|
unkown
|
page readonly
|
||
|
7AC2000
|
trusted library allocation
|
page read and write
|
||
|
8A46000
|
unkown
|
page read and write
|
||
|
C8C1000
|
unkown
|
page read and write
|
||
|
3400000
|
unkown
|
page read and write
|
||
|
1250000
|
unkown
|
page read and write
|
||
|
4AB0000
|
unkown
|
page read and write
|
||
|
7FF5D75A6000
|
unkown
|
page readonly
|
||
|
1300000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
B8DB000
|
stack
|
page read and write
|
||
|
18E0000
|
trusted library allocation
|
page read and write
|
||
|
768C000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
95FB000
|
stack
|
page read and write
|
||
|
EF0000
|
heap
|
page read and write
|
||
|
10B7A000
|
heap
|
page read and write
|
||
|
1930000
|
heap
|
page read and write
|
||
|
3310000
|
heap
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
35CF000
|
unkown
|
page read and write
|
||
|
7FF5D769E000
|
unkown
|
page readonly
|
||
|
57BB000
|
trusted library allocation
|
page read and write
|
||
|
C450000
|
unkown
|
page read and write
|
||
|
44E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
7740000
|
trusted library section
|
page read and write
|
||
|
A251000
|
unkown
|
page read and write
|
||
|
7DF4F2461000
|
unkown
|
page execute read
|
||
|
9AA0000
|
unkown
|
page read and write
|
||
|
546C000
|
stack
|
page read and write
|
||
|
49BB000
|
unkown
|
page read and write
|
||
|
4A44000
|
unkown
|
page read and write
|
||
|
5930000
|
heap
|
page read and write
|
||
|
7FF5D7289000
|
unkown
|
page readonly
|
||
|
86D0000
|
unkown
|
page readonly
|
||
|
9A76000
|
unkown
|
page read and write
|
||
|
9A6A000
|
unkown
|
page read and write
|
||
|
E42000
|
unkown
|
page readonly
|
||
|
7FF5D71BF000
|
unkown
|
page readonly
|
||
|
7FF5D7703000
|
unkown
|
page readonly
|
||
|
35DC000
|
unkown
|
page read and write
|
||
|
9AF9000
|
unkown
|
page read and write
|
||
|
2838000
|
heap
|
page read and write
|
||
|
7FF5D732D000
|
unkown
|
page readonly
|
||
|
1270000
|
unkown
|
page read and write
|
||
|
E00000
|
unkown
|
page readonly
|
||
|
C914000
|
unkown
|
page read and write
|
||
|
7FF5D728E000
|
unkown
|
page readonly
|
||
|
C62D000
|
unkown
|
page read and write
|
||
|
75FD000
|
unkown
|
page read and write
|
||
|
167E000
|
stack
|
page read and write
|
||
|
77DB000
|
unkown
|
page read and write
|
||
|
35F4000
|
unkown
|
page read and write
|
||
|
A9DF000
|
unkown
|
page read and write
|
||
|
7FF5D7452000
|
unkown
|
page readonly
|
||
|
7FF5D71AF000
|
unkown
|
page readonly
|
||
|
7FF5D7215000
|
unkown
|
page readonly
|
||
|
A39F000
|
unkown
|
page read and write
|
||
|
2C90000
|
heap
|
page read and write
|
||
|
9B2C000
|
unkown
|
page read and write
|
||
|
7FF5D775C000
|
unkown
|
page readonly
|
||
|
A273000
|
unkown
|
page read and write
|
||
|
11C1000
|
unkown
|
page read and write
|
||
|
8360000
|
unkown
|
page read and write
|
||
|
7FF5D7820000
|
unkown
|
page readonly
|
||
|
85BE000
|
stack
|
page read and write
|
||
|
35FA000
|
unkown
|
page read and write
|
||
|
3520000
|
unkown
|
page readonly
|
||
|
4440000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D7682000
|
unkown
|
page readonly
|
||
|
7FF5D7376000
|
unkown
|
page readonly
|
||
|
7FF5D7558000
|
unkown
|
page readonly
|
||
|
7FF5D766E000
|
unkown
|
page readonly
|
||
|
7FF5D6BE4000
|
unkown
|
page readonly
|
||
|
760D000
|
unkown
|
page read and write
|
||
|
10B7A000
|
heap
|
page read and write
|
||
|
F2D4000
|
unkown
|
page read and write
|
||
|
A384000
|
unkown
|
page read and write
|
||
|
9207000
|
unkown
|
page read and write
|
||
|
760D000
|
unkown
|
page read and write
|
||
|
7FF5D720F000
|
unkown
|
page readonly
|
||
|
7FF5D781A000
|
unkown
|
page readonly
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7686000
|
unkown
|
page read and write
|
||
|
7FF5D7077000
|
unkown
|
page readonly
|
||
|
7FF5D66E3000
|
unkown
|
page readonly
|
||
|
7FF5D751F000
|
unkown
|
page readonly
|
||
|
35DC000
|
unkown
|
page read and write
|
||
|
3626000
|
unkown
|
page read and write
|
||
|
760B000
|
unkown
|
page read and write
|
||
|
EB5000
|
stack
|
page read and write
|
||
|
13A0000
|
unkown
|
page readonly
|
||
|
C1CC000
|
stack
|
page read and write
|
||
|
5933000
|
heap
|
page read and write
|
||
|
7FF5D7289000
|
unkown
|
page readonly
|
||
|
C8EF000
|
unkown
|
page read and write
|
||
|
5479000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
10B80000
|
unkown
|
page read and write
|
||
|
7FF5D7558000
|
unkown
|
page readonly
|
||
|
7FF5D72BF000
|
unkown
|
page readonly
|
||
|
4A16000
|
unkown
|
page read and write
|
||
|
7FF5D6ABD000
|
unkown
|
page readonly
|
||
|
7FF5D779E000
|
unkown
|
page readonly
|
||
|
49A8000
|
unkown
|
page read and write
|
||
|
7FF5D7792000
|
unkown
|
page readonly
|
||
|
94AB000
|
stack
|
page read and write
|
||
|
7FF5D716B000
|
unkown
|
page readonly
|
||
|
C5F0000
|
unkown
|
page read and write
|
||
|
9A94000
|
unkown
|
page read and write
|
||
|
7FF5D77C2000
|
unkown
|
page readonly
|
||
|
4AEA000
|
unkown
|
page read and write
|
||
|
9D42000
|
unkown
|
page read and write
|
||
|
7FF5D6BDB000
|
unkown
|
page readonly
|
||
|
7FF5D7507000
|
unkown
|
page readonly
|
||
|
C9E3000
|
unkown
|
page read and write
|
||
|
9B81000
|
unkown
|
page read and write
|
||
|
7FF5D748C000
|
unkown
|
page readonly
|
||
|
7FF5D7534000
|
unkown
|
page readonly
|
||
|
95C000
|
stack
|
page read and write
|
||
|
7FF5D748A000
|
unkown
|
page readonly
|
||
|
7FF5D7462000
|
unkown
|
page readonly
|
||
|
8815000
|
stack
|
page read and write
|
||
|
2B21000
|
heap
|
page read and write
|
||
|
7FF5D747F000
|
unkown
|
page readonly
|
||
|
C7BE000
|
unkown
|
page read and write
|
||
|
C621000
|
unkown
|
page read and write
|
||
|
78B0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D77E0000
|
unkown
|
page readonly
|
||
|
A2D7000
|
unkown
|
page read and write
|
||
|
7FF5D77DD000
|
unkown
|
page readonly
|
||
|
3110000
|
unkown
|
page readonly
|
||
|
37DF000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D71EA000
|
unkown
|
page readonly
|
||
|
9ABD000
|
unkown
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D7808000
|
unkown
|
page readonly
|
||
|
8880000
|
unkown
|
page readonly
|
||
|
7FF5D774C000
|
unkown
|
page readonly
|
||
|
CA27000
|
unkown
|
page read and write
|
||
|
5920000
|
heap
|
page read and write
|
||
|
9C21000
|
unkown
|
page read and write
|
||
|
9A76000
|
unkown
|
page read and write
|
||
|
7A50000
|
trusted library allocation
|
page execute and read and write
|
||
|
AA08000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
2832000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
C78A000
|
unkown
|
page read and write
|
||
|
7FF5D75F6000
|
unkown
|
page readonly
|
||
|
4A0E000
|
unkown
|
page read and write
|
||
|
89FC000
|
stack
|
page read and write
|
||
|
7FF5D768B000
|
unkown
|
page readonly
|
||
|
769A000
|
unkown
|
page read and write
|
||
|
10BC4000
|
unkown
|
page read and write
|
||
|
3280000
|
unkown
|
page read and write
|
||
|
7FF5D776F000
|
unkown
|
page readonly
|
||
|
9A8C000
|
unkown
|
page read and write
|
||
|
7FF5D7593000
|
unkown
|
page readonly
|
||
|
B980000
|
unkown
|
page readonly
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
AAAA000
|
unkown
|
page read and write
|
||
|
1341000
|
heap
|
page read and write
|
||
|
AA08000
|
unkown
|
page read and write
|
||
|
8360000
|
unkown
|
page read and write
|
||
|
A2D7000
|
unkown
|
page read and write
|
||
|
35C1000
|
unkown
|
page read and write
|
||
|
C46F000
|
unkown
|
page read and write
|
||
|
35C9000
|
unkown
|
page read and write
|
||
|
7FF5D72E9000
|
unkown
|
page readonly
|
||
|
A264000
|
unkown
|
page read and write
|
||
|
C44F000
|
stack
|
page read and write
|
||
|
7DF4F2480000
|
unkown
|
page readonly
|
||
|
1731000
|
unkown
|
page readonly
|
||
|
7FF5D76E8000
|
unkown
|
page readonly
|
||
|
9B41000
|
unkown
|
page read and write
|
||
|
5AD0000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D77A4000
|
unkown
|
page readonly
|
||
|
7FF5D71E6000
|
unkown
|
page readonly
|
||
|
2827000
|
heap
|
page read and write
|
||
|
C81C000
|
unkown
|
page read and write
|
||
|
E40000
|
unkown
|
page readonly
|
||
|
7E58000
|
stack
|
page read and write
|
||
|
298F000
|
stack
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7DF4F24A1000
|
unkown
|
page execute read
|
||
|
C5FA000
|
unkown
|
page read and write
|
||
|
F2AF000
|
stack
|
page read and write
|
||
|
10B70000
|
heap
|
page read and write
|
||
|
C035000
|
stack
|
page read and write
|
||
|
760B000
|
unkown
|
page read and write
|
||
|
7FF5D7820000
|
unkown
|
page readonly
|
||
|
4AFA000
|
unkown
|
page read and write
|
||
|
46B0000
|
trusted library allocation
|
page read and write
|
||
|
7C90000
|
unkown
|
page read and write
|
||
|
7FF5D770F000
|
unkown
|
page readonly
|
||
|
3500000
|
heap
|
page read and write
|
||
|
7DF4F24A1000
|
unkown
|
page execute read
|
||
|
C8F7000
|
unkown
|
page read and write
|
||
|
7FF5D76CD000
|
unkown
|
page readonly
|
||
|
7DF4F2460000
|
unkown
|
page readonly
|
||
|
BF3E000
|
stack
|
page read and write
|
||
|
C617000
|
unkown
|
page read and write
|
||
|
7FF5D7272000
|
unkown
|
page readonly
|
||
|
33B0000
|
unkown
|
page readonly
|
||
|
C615000
|
unkown
|
page read and write
|
||
|
E00000
|
unkown
|
page readonly
|
||
|
F00000
|
unclassified section
|
page execute and read and write
|
||
|
7FF5D77E9000
|
unkown
|
page readonly
|
||
|
49D6000
|
unkown
|
page read and write
|
||
|
4A7D000
|
direct allocation
|
page execute and read and write
|
||
|
4580000
|
trusted library allocation
|
page read and write
|
||
|
BB9B000
|
unkown
|
page read and write
|
||
|
76F8000
|
unkown
|
page read and write
|
||
|
AA17000
|
unkown
|
page read and write
|
||
|
16B1000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D6BE4000
|
unkown
|
page readonly
|
||
|
7E58000
|
stack
|
page read and write
|
||
|
3626000
|
unkown
|
page read and write
|
||
|
BDC0000
|
unkown
|
page read and write
|
||
|
7FF5D7385000
|
unkown
|
page readonly
|
||
|
C621000
|
unkown
|
page read and write
|
||
|
E7E000
|
stack
|
page read and write
|
||
|
C96F000
|
unkown
|
page read and write
|
||
|
7FF5D72CE000
|
unkown
|
page readonly
|
||
|
F06E000
|
stack
|
page read and write
|
||
|
1360000
|
unkown
|
page readonly
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
F16E000
|
stack
|
page read and write
|
||
|
353D000
|
unkown
|
page read and write
|
||
|
7440000
|
unkown
|
page read and write
|
||
|
7609000
|
unkown
|
page read and write
|
||
|
BB10000
|
heap
|
page read and write
|
||
|
A3B9000
|
unkown
|
page read and write
|
||
|
7DD0000
|
heap
|
page read and write
|
||
|
7A60000
|
trusted library allocation
|
page read and write
|
||
|
7DF4F2470000
|
unkown
|
page readonly
|
||
|
7FF5D72BD000
|
unkown
|
page readonly
|
||
|
46B0000
|
trusted library allocation
|
page read and write
|
||
|
B7DC000
|
stack
|
page read and write
|
||
|
A3C3000
|
unkown
|
page read and write
|
||
|
57CE000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7360000
|
unkown
|
page readonly
|
||
|
9A8E000
|
unkown
|
page read and write
|
||
|
4AA0000
|
unkown
|
page read and write
|
||
|
7FF5D7077000
|
unkown
|
page readonly
|
||
|
3280000
|
unkown
|
page read and write
|
||
|
7FF5D723F000
|
unkown
|
page readonly
|
||
|
7FF5D71F9000
|
unkown
|
page readonly
|
||
|
7A40000
|
trusted library allocation
|
page read and write
|
||
|
A3AC000
|
unkown
|
page read and write
|
||
|
4375000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7639000
|
unkown
|
page readonly
|
||
|
10B70000
|
heap
|
page read and write
|
||
|
7FF5D72D0000
|
unkown
|
page readonly
|
||
|
177F000
|
stack
|
page read and write
|
||
|
17BE000
|
stack
|
page read and write
|
||
|
7FF5D7760000
|
unkown
|
page readonly
|
||
|
3554000
|
unkown
|
page read and write
|
||
|
1281000
|
unkown
|
page readonly
|
||
|
74AE000
|
heap
|
page read and write
|
||
|
7FF5D71D7000
|
unkown
|
page readonly
|
||
|
7FF5CE343000
|
unkown
|
page readonly
|
||
|
7FF5D720A000
|
unkown
|
page readonly
|
||
|
C5FD000
|
unkown
|
page read and write
|
||
|
9FAF000
|
stack
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
75FD000
|
unkown
|
page read and write
|
||
|
7FF5D7589000
|
unkown
|
page readonly
|
||
|
9579000
|
stack
|
page read and write
|
||
|
100D0000
|
unkown
|
page execute and read and write
|
||
|
282D000
|
heap
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
7FF5D75DF000
|
unkown
|
page readonly
|
||
|
7435000
|
stack
|
page read and write
|
||
|
7FF5D7797000
|
unkown
|
page readonly
|
||
|
9AAC000
|
unkown
|
page read and write
|
||
|
35D5000
|
unkown
|
page read and write
|
||
|
7FF5D6BEF000
|
unkown
|
page readonly
|
||
|
7FF5D745B000
|
unkown
|
page readonly
|
||
|
89FC000
|
stack
|
page read and write
|
||
|
49FA000
|
unkown
|
page read and write
|
||
|
8870000
|
unkown
|
page readonly
|
||
|
A28D000
|
unkown
|
page read and write
|
||
|
7A6E000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D717C000
|
unkown
|
page readonly
|
||
|
152D000
|
direct allocation
|
page execute and read and write
|
||
|
7DF4F2471000
|
unkown
|
page execute read
|
||
|
456E000
|
heap
|
page read and write
|
||
|
35CD000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7B60000
|
unkown
|
page readonly
|
||
|
10BC4000
|
unkown
|
page read and write
|
||
|
F52C000
|
stack
|
page read and write
|
||
|
F13000
|
heap
|
page read and write
|
||
|
7DBD000
|
stack
|
page read and write
|
||
|
7FF5D747F000
|
unkown
|
page readonly
|
||
|
4580000
|
trusted library allocation
|
page read and write
|
||
|
163E000
|
stack
|
page read and write
|
||
|
AA01000
|
unkown
|
page read and write
|
||
|
7FF5D719C000
|
unkown
|
page readonly
|
||
|
75E0000
|
unkown
|
page read and write
|
||
|
1891000
|
unclassified section
|
page execute and read and write
|
||
|
7FF5CE343000
|
unkown
|
page readonly
|
||
|
7FF5D7455000
|
unkown
|
page readonly
|
||
|
A408000
|
unkown
|
page read and write
|
||
|
7FF5D71C8000
|
unkown
|
page readonly
|
||
|
7FF5D7604000
|
unkown
|
page readonly
|
||
|
A3C3000
|
unkown
|
page read and write
|
||
|
4AC0000
|
unkown
|
page read and write
|
||
|
42D1000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7202000
|
unkown
|
page readonly
|
||
|
9BAF000
|
unkown
|
page read and write
|
||
|
34E3000
|
trusted library allocation
|
page read and write
|
||
|
B03B000
|
stack
|
page read and write
|
||
|
C914000
|
unkown
|
page read and write
|
||
|
7691000
|
unkown
|
page read and write
|
||
|
7FF5D7458000
|
unkown
|
page readonly
|
||
|
7631000
|
unkown
|
page read and write
|
||
|
7FF5D7760000
|
unkown
|
page readonly
|
||
|
18E4000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D75D9000
|
unkown
|
page readonly
|
||
|
7FF5D75C1000
|
unkown
|
page readonly
|
||
|
3170000
|
unkown
|
page read and write
|
||
|
7C90000
|
unkown
|
page read and write
|
||
|
35FA000
|
unkown
|
page read and write
|
||
|
7B20000
|
unkown
|
page read and write
|
||
|
C46F000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7648000
|
unkown
|
page readonly
|
||
|
3110000
|
unkown
|
page readonly
|
||
|
C4DC000
|
unkown
|
page read and write
|
||
|
7760000
|
trusted library allocation
|
page read and write
|
||
|
8A00000
|
unkown
|
page read and write
|
||
|
7FF5D7267000
|
unkown
|
page readonly
|
||
|
78AE000
|
stack
|
page read and write
|
||
|
9BB1000
|
unkown
|
page read and write
|
||
|
282D000
|
heap
|
page read and write
|
||
|
F3EE000
|
stack
|
page read and write
|
||
|
7FF5D7391000
|
unkown
|
page readonly
|
||
|
F2D4000
|
unkown
|
page read and write
|
||
|
7F4E000
|
stack
|
page read and write
|
||
|
77A2000
|
unkown
|
page read and write
|
||
|
7FF5D765F000
|
unkown
|
page readonly
|
||
|
A9A0000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
7631000
|
unkown
|
page read and write
|
||
|
9AAC000
|
unkown
|
page read and write
|
||
|
7FF5D75B3000
|
unkown
|
page readonly
|
||
|
379E000
|
trusted library allocation
|
page read and write
|
||
|
AA04000
|
unkown
|
page read and write
|
||
|
7FF5D76F5000
|
unkown
|
page readonly
|
||
|
5463000
|
unkown
|
page read and write
|
||
|
9AB4000
|
unkown
|
page read and write
|
||
|
7FF5D75E9000
|
unkown
|
page readonly
|
||
|
C8BC000
|
unkown
|
page read and write
|
||
|
131F000
|
heap
|
page read and write
|
||
|
C483000
|
unkown
|
page read and write
|
||
|
C669000
|
unkown
|
page read and write
|
||
|
58F0000
|
heap
|
page read and write
|
||
|
C4C6000
|
unkown
|
page read and write
|
||
|
7FF5D66E3000
|
unkown
|
page readonly
|
||
|
10BB5000
|
unkown
|
page read and write
|
||
|
5900000
|
trusted library section
|
page readonly
|
||
|
7FF5D77EB000
|
unkown
|
page readonly
|
||
|
9A72000
|
unkown
|
page read and write
|
||
|
7FF5D77C2000
|
unkown
|
page readonly
|
||
|
9A8E000
|
unkown
|
page read and write
|
||
|
3531000
|
unkown
|
page read and write
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
129F000
|
stack
|
page read and write
|
||
|
330F000
|
stack
|
page read and write
|
||
|
7FF5D7745000
|
unkown
|
page readonly
|
||
|
7FF5D74FA000
|
unkown
|
page readonly
|
||
|
7FF5D710B000
|
unkown
|
page readonly
|
||
|
3140000
|
unkown
|
page read and write
|
||
|
881C000
|
stack
|
page read and write
|
||
|
7FF5D7396000
|
unkown
|
page readonly
|
||
|
2B20000
|
heap
|
page read and write
|
||
|
C609000
|
unkown
|
page read and write
|
||
|
7FF5D71F9000
|
unkown
|
page readonly
|
||
|
7FF5D7694000
|
unkown
|
page readonly
|
||
|
4728000
|
heap
|
page read and write
|
||
|
7FF5D7257000
|
unkown
|
page readonly
|
||
|
2800000
|
heap
|
page read and write
|
||
|
75F8000
|
unkown
|
page read and write
|
||
|
7FF5D72C8000
|
unkown
|
page readonly
|
||
|
C9F6000
|
unkown
|
page read and write
|
||
|
7FF5D7385000
|
unkown
|
page readonly
|
||
|
99C0000
|
unkown
|
page read and write
|
||
|
7FF5D6ABD000
|
unkown
|
page readonly
|
||
|
10BCA000
|
unkown
|
page read and write
|
||
|
C5F4000
|
unkown
|
page read and write
|
||
|
51EF000
|
unclassified section
|
page read and write
|
||
|
7FF5D7257000
|
unkown
|
page readonly
|
||
|
8E4E000
|
stack
|
page read and write
|
||
|
7FF5D770A000
|
unkown
|
page readonly
|
||
|
7FF5D778A000
|
unkown
|
page readonly
|
||
|
9AC3000
|
unkown
|
page read and write
|
||
|
7FF5D7485000
|
unkown
|
page readonly
|
||
|
7FF5D720A000
|
unkown
|
page readonly
|
||
|
7FF5D76DA000
|
unkown
|
page readonly
|
||
|
C81C000
|
unkown
|
page read and write
|
||
|
F0C000
|
heap
|
page read and write
|
||
|
7FF5D7360000
|
unkown
|
page readonly
|
||
|
7FF5D71DA000
|
unkown
|
page readonly
|
||
|
7FF5D7215000
|
unkown
|
page readonly
|
||
|
9D67000
|
unkown
|
page read and write
|
||
|
BE90000
|
unkown
|
page read and write
|
||
|
7693000
|
unkown
|
page read and write
|
||
|
7FF5D777A000
|
unkown
|
page readonly
|
||
|
769A000
|
unkown
|
page read and write
|
||
|
B0BD000
|
stack
|
page read and write
|
||
|
9A9E000
|
unkown
|
page read and write
|
||
|
159E000
|
direct allocation
|
page execute and read and write
|
||
|
4A40000
|
unkown
|
page read and write
|
||
|
3530000
|
unkown
|
page read and write
|
||
|
7FF5D7462000
|
unkown
|
page readonly
|
||
|
C7BE000
|
unkown
|
page read and write
|
||
|
A313000
|
unkown
|
page read and write
|
||
|
7FF5D77F7000
|
unkown
|
page readonly
|
||
|
2832000
|
heap
|
page read and write
|
||
|
35B5000
|
unkown
|
page read and write
|
||
|
7FF5D7398000
|
unkown
|
page readonly
|
||
|
2C20000
|
trusted library allocation
|
page read and write
|
||
|
138F000
|
heap
|
page read and write
|
||
|
8880000
|
unkown
|
page readonly
|
||
|
294D000
|
stack
|
page read and write
|
||
|
AA91000
|
unkown
|
page read and write
|
||
|
7FF5D7284000
|
unkown
|
page readonly
|
||
|
7FF5D7309000
|
unkown
|
page readonly
|
||
|
A2B5000
|
unkown
|
page read and write
|
||
|
9EAE000
|
stack
|
page read and write
|
||
|
7DF4F2470000
|
unkown
|
page readonly
|
||
|
9AB2000
|
unkown
|
page read and write
|
||
|
C4BD000
|
unkown
|
page read and write
|
||
|
57D6000
|
trusted library allocation
|
page read and write
|
||
|
35D5000
|
unkown
|
page read and write
|
||
|
7FF5D72D3000
|
unkown
|
page readonly
|
||
|
49A8000
|
unkown
|
page read and write
|
||
|
7FF5D71DA000
|
unkown
|
page readonly
|
||
|
4A12000
|
unkown
|
page read and write
|
||
|
9A96000
|
unkown
|
page read and write
|
||
|
7FF5D7799000
|
unkown
|
page readonly
|
||
|
7FF5D745B000
|
unkown
|
page readonly
|
||
|
C7C6000
|
unkown
|
page read and write
|
||
|
10BB1000
|
unkown
|
page read and write
|
||
|
7FF5D716B000
|
unkown
|
page readonly
|
||
|
2B70000
|
heap
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
AA96000
|
unkown
|
page read and write
|
||
|
84BB000
|
stack
|
page read and write
|
||
|
7810000
|
unkown
|
page read and write
|
||
|
7FF5D71EF000
|
unkown
|
page readonly
|
||
|
10211000
|
unkown
|
page execute and read and write
|
||
|
C806000
|
unkown
|
page read and write
|
||
|
7FF5D7795000
|
unkown
|
page readonly
|
||
|
BE70000
|
unkown
|
page readonly
|
||
|
5850000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7073000
|
unkown
|
page readonly
|
||
|
3489000
|
stack
|
page read and write
|
||
|
AA0B000
|
unkown
|
page read and write
|
||
|
A3B9000
|
unkown
|
page read and write
|
||
|
7FF5D77C7000
|
unkown
|
page readonly
|
||
|
7FF5D75AF000
|
unkown
|
page readonly
|
||
|
7FF5D7336000
|
unkown
|
page readonly
|
||
|
1529000
|
direct allocation
|
page execute and read and write
|
||
|
4980000
|
unkown
|
page read and write
|
||
|
190A000
|
trusted library allocation
|
page execute and read and write
|
||
|
A384000
|
unkown
|
page read and write
|
||
|
43C3000
|
trusted library allocation
|
page read and write
|
||
|
94F4000
|
unkown
|
page read and write
|
||
|
10B72000
|
heap
|
page read and write
|
||
|
C663000
|
unkown
|
page read and write
|
||
|
2F7E000
|
stack
|
page read and write
|
||
|
7FF5D717C000
|
unkown
|
page readonly
|
||
|
7FF5D77B6000
|
unkown
|
page readonly
|
||
|
7FF5D7700000
|
unkown
|
page readonly
|
||
|
252C000
|
stack
|
page read and write
|
||
|
7FF5D76F5000
|
unkown
|
page readonly
|
||
|
BFB8000
|
stack
|
page read and write
|
||
|
2B0D000
|
stack
|
page read and write
|
||
|
7FF5D77D2000
|
unkown
|
page readonly
|
||
|
C90D000
|
unkown
|
page read and write
|
||
|
7FF5D7284000
|
unkown
|
page readonly
|
||
|
3500000
|
stack
|
page read and write
|
||
|
35DC000
|
unkown
|
page read and write
|
||
|
AA08000
|
unkown
|
page read and write
|
||
|
7FF5D77FD000
|
unkown
|
page readonly
|
||
|
7FF5D77E3000
|
unkown
|
page readonly
|
||
|
B4BF000
|
stack
|
page read and write
|
||
|
1906000
|
trusted library allocation
|
page execute and read and write
|
||
|
35CD000
|
unkown
|
page read and write
|
||
|
7FF5D7795000
|
unkown
|
page readonly
|
||
|
18F0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D779E000
|
unkown
|
page readonly
|
||
|
9AA8000
|
unkown
|
page read and write
|
||
|
7FF5D7784000
|
unkown
|
page readonly
|
||
|
7FF5D7429000
|
unkown
|
page readonly
|
||
|
7FF5D74C3000
|
unkown
|
page readonly
|
||
|
7FF5D7336000
|
unkown
|
page readonly
|
||
|
7FF5D7404000
|
unkown
|
page readonly
|
||
|
48D9000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D7244000
|
unkown
|
page readonly
|
||
|
99C0000
|
unkown
|
page read and write
|
||
|
C5F0000
|
unkown
|
page read and write
|
||
|
7FF5D75BF000
|
unkown
|
page readonly
|
||
|
57D1000
|
trusted library allocation
|
page read and write
|
||
|
8D39000
|
stack
|
page read and write
|
||
|
9A90000
|
unkown
|
page read and write
|
||
|
3534000
|
unkown
|
page read and write
|
||
|
7FF5D7691000
|
unkown
|
page readonly
|
||
|
3520000
|
unkown
|
page readonly
|
||
|
4A90000
|
unkown
|
page read and write
|
||
|
BEA0000
|
unkown
|
page readonly
|
||
|
10BA0000
|
unkown
|
page read and write
|
||
|
10B80000
|
unkown
|
page read and write
|
||
|
34ED000
|
trusted library allocation
|
page read and write
|
||
|
9576000
|
stack
|
page read and write
|
||
|
1350000
|
unkown
|
page readonly
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
18F3000
|
trusted library allocation
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
2B80000
|
heap
|
page read and write
|
||
|
AA05000
|
unkown
|
page read and write
|
||
|
7FF5D776F000
|
unkown
|
page readonly
|
||
|
7FF5D7442000
|
unkown
|
page readonly
|
||
|
7DF4F2481000
|
unkown
|
page execute read
|
||
|
58F5000
|
heap
|
page read and write
|
||
|
AA17000
|
unkown
|
page read and write
|
||
|
137B000
|
heap
|
page read and write
|
||
|
C908000
|
unkown
|
page read and write
|
||
|
7686000
|
unkown
|
page read and write
|
||
|
7FF5D7700000
|
unkown
|
page readonly
|
||
|
7FF5D75B8000
|
unkown
|
page readonly
|
||
|
C617000
|
unkown
|
page read and write
|
||
|
C932000
|
unkown
|
page read and write
|
||
|
3630000
|
unkown
|
page readonly
|
||
|
7FF5D75F6000
|
unkown
|
page readonly
|
||
|
7FF5D71C4000
|
unkown
|
page readonly
|
||
|
A12F000
|
stack
|
page read and write
|
||
|
2B21000
|
heap
|
page read and write
|
||
|
7FF5D7740000
|
unkown
|
page readonly
|
||
|
3120000
|
unkown
|
page read and write
|
||
|
13F6000
|
heap
|
page read and write
|
||
|
7FF5D77DD000
|
unkown
|
page readonly
|
||
|
7FF5D7488000
|
unkown
|
page readonly
|
||
|
7FF5D7292000
|
unkown
|
page readonly
|
||
|
BE90000
|
unkown
|
page read and write
|
||
|
362A000
|
unkown
|
page read and write
|
||
|
7720000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D75F2000
|
unkown
|
page readonly
|
||
|
7FF5D7764000
|
unkown
|
page readonly
|
||
|
4980000
|
unkown
|
page read and write
|
||
|
BFB8000
|
stack
|
page read and write
|
||
|
9AB4000
|
unkown
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7482000
|
unkown
|
page readonly
|
||
|
B0E0000
|
unkown
|
page readonly
|
||
|
7FF5D77DA000
|
unkown
|
page readonly
|
||
|
33B0000
|
unkown
|
page readonly
|
||
|
35C1000
|
unkown
|
page read and write
|
||
|
8A00000
|
unkown
|
page read and write
|
||
|
AAAA000
|
unkown
|
page read and write
|
||
|
362A000
|
unkown
|
page read and write
|
||
|
7FF5D774A000
|
unkown
|
page readonly
|
||
|
9B0B000
|
unkown
|
page read and write
|
||
|
7FF5D7280000
|
unkown
|
page readonly
|
||
|
7FF5D7669000
|
unkown
|
page readonly
|
||
|
9E2D000
|
stack
|
page read and write
|
||
|
7FF5D77B6000
|
unkown
|
page readonly
|
||
|
362D000
|
unkown
|
page read and write
|
||
|
35B5000
|
unkown
|
page read and write
|
||
|
7FF5D758D000
|
unkown
|
page readonly
|
||
|
7FF5D728E000
|
unkown
|
page readonly
|
||
|
7FF5D77B9000
|
unkown
|
page readonly
|
||
|
B85A000
|
stack
|
page read and write
|
||
|
4986000
|
unkown
|
page read and write
|
||
|
EF0000
|
heap
|
page read and write
|
||
|
A9E9000
|
unkown
|
page read and write
|
||
|
7654000
|
unkown
|
page read and write
|
||
|
86E0000
|
unkown
|
page readonly
|
||
|
4A12000
|
unkown
|
page read and write
|
||
|
31A0000
|
trusted library allocation
|
page execute and read and write
|
||
|
A273000
|
unkown
|
page read and write
|
||
|
C800000
|
unkown
|
page read and write
|
||
|
7FF5D72CE000
|
unkown
|
page readonly
|
||
|
7FF5D71BF000
|
unkown
|
page readonly
|
||
|
A233000
|
unkown
|
page read and write
|
||
|
F256000
|
unkown
|
page read and write
|
||
|
C663000
|
unkown
|
page read and write
|
||
|
7F750000
|
trusted library allocation
|
page execute and read and write
|
||
|
10B72000
|
heap
|
page read and write
|
||
|
4986000
|
unkown
|
page read and write
|
||
|
7460000
|
unkown
|
page read and write
|
||
|
7FF5D71E0000
|
unkown
|
page readonly
|
||
|
2832000
|
heap
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
A40E000
|
unkown
|
page read and write
|
||
|
C8DE000
|
unkown
|
page read and write
|
||
|
3310000
|
unkown
|
page read and write
|
||
|
7FF5D7206000
|
unkown
|
page readonly
|
||
|
7C80000
|
unkown
|
page read and write
|
||
|
F213000
|
unkown
|
page read and write
|
||
|
BEA0000
|
unkown
|
page readonly
|
||
|
F0C000
|
heap
|
page read and write
|
||
|
C4DC000
|
unkown
|
page read and write
|
||
|
9A98000
|
unkown
|
page read and write
|
||
|
7FF5D7485000
|
unkown
|
page readonly
|
||
|
843F000
|
stack
|
page read and write
|
||
|
9B2C000
|
unkown
|
page read and write
|
||
|
A39C000
|
unkown
|
page read and write
|
||
|
97FF000
|
stack
|
page read and write
|
||
|
1937000
|
heap
|
page read and write
|
||
|
B4BF000
|
stack
|
page read and write
|
||
|
9ABD000
|
unkown
|
page read and write
|
||
|
7AA0000
|
unkown
|
page read and write
|
||
|
9A94000
|
unkown
|
page read and write
|
||
|
9E2E000
|
stack
|
page read and write
|
||
|
2910000
|
trusted library allocation
|
page read and write
|
||
|
3540000
|
unkown
|
page read and write
|
||
|
C0BA000
|
stack
|
page read and write
|
||
|
1395000
|
heap
|
page read and write
|
||
|
5AF0000
|
trusted library allocation
|
page read and write
|
||
|
7AB0000
|
unkown
|
page read and write
|
||
|
49C2000
|
unkown
|
page read and write
|
||
|
E10000
|
unkown
|
page readonly
|
||
|
93BD000
|
stack
|
page read and write
|
||
|
C625000
|
unkown
|
page read and write
|
||
|
7FF5D75CB000
|
unkown
|
page readonly
|
||
|
A416000
|
unkown
|
page read and write
|
||
|
42D8000
|
trusted library allocation
|
page read and write
|
||
|
7B80000
|
unkown
|
page readonly
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
7FF5D76D5000
|
unkown
|
page readonly
|
||
|
91F0000
|
unkown
|
page readonly
|
||
|
7FF5D7546000
|
unkown
|
page readonly
|
||
|
FF0000
|
heap
|
page read and write
|
||
|
35D3000
|
unkown
|
page read and write
|
||
|
137F000
|
heap
|
page read and write
|
||
|
353D000
|
unkown
|
page read and write
|
||
|
BE49000
|
stack
|
page read and write
|
||
|
7FF5D783B000
|
unkown
|
page readonly
|
||
|
7654000
|
unkown
|
page read and write
|
||
|
13AC000
|
heap
|
page read and write
|
||
|
A9A0000
|
unkown
|
page read and write
|
||
|
BB9B000
|
unkown
|
page read and write
|
||
|
761E000
|
unkown
|
page read and write
|
||
|
AA8D000
|
unkown
|
page read and write
|
||
|
283D000
|
heap
|
page read and write
|
||
|
7B80000
|
unkown
|
page readonly
|
||
|
C61D000
|
unkown
|
page read and write
|
||
|
35C3000
|
unkown
|
page read and write
|
||
|
2832000
|
heap
|
page read and write
|
||
|
B950000
|
unkown
|
page readonly
|
||
|
9A90000
|
unkown
|
page read and write
|
||
|
C4BD000
|
unkown
|
page read and write
|
||
|
256C000
|
stack
|
page read and write
|
||
|
4B06000
|
unclassified section
|
page read and write
|
||
|
7FF5D71E6000
|
unkown
|
page readonly
|
||
|
7FF5D7705000
|
unkown
|
page readonly
|
||
|
7989000
|
stack
|
page read and write
|
||
|
7FF5D771A000
|
unkown
|
page readonly
|
||
|
7AE0000
|
unkown
|
page read and write
|
||
|
C8E8000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
768E000
|
unkown
|
page read and write
|
||
|
35D1000
|
unkown
|
page read and write
|
||
|
7FF5D7682000
|
unkown
|
page readonly
|
||
|
86E0000
|
unkown
|
page readonly
|
||
|
7FF5D7065000
|
unkown
|
page readonly
|
||
|
E2B000
|
unclassified section
|
page execute and read and write
|
||
|
A408000
|
unkown
|
page read and write
|
||
|
12F6000
|
stack
|
page read and write
|
||
|
7DF4F2481000
|
unkown
|
page execute read
|
||
|
75E0000
|
unkown
|
page read and write
|
||
|
7AE0000
|
unkown
|
page read and write
|
||
|
779E000
|
unkown
|
page read and write
|
||
|
A40E000
|
unkown
|
page read and write
|
||
|
7C31000
|
unkown
|
page read and write
|
||
|
7FF5D7589000
|
unkown
|
page readonly
|
||
|
7FF5D76D5000
|
unkown
|
page readonly
|
||
|
3554000
|
unkown
|
page read and write
|
||
|
EA0000
|
heap
|
page read and write
|
||
|
761C000
|
heap
|
page read and write
|
||
|
7700000
|
trusted library section
|
page read and write
|
||
|
B0BD000
|
stack
|
page read and write
|
||
|
7FF5D71EF000
|
unkown
|
page readonly
|
||
|
9679000
|
stack
|
page read and write
|
||
|
2818000
|
heap
|
page read and write
|
||
|
3100000
|
unkown
|
page read and write
|
||
|
4A90000
|
unkown
|
page read and write
|
||
|
F25B000
|
unkown
|
page read and write
|
||
|
7FF5D7784000
|
unkown
|
page readonly
|
||
|
5C7D000
|
stack
|
page read and write
|
||
|
96FE000
|
stack
|
page read and write
|
||
|
4AFA000
|
unkown
|
page read and write
|
||
|
997C000
|
stack
|
page read and write
|
||
|
77A2000
|
unkown
|
page read and write
|
||
|
7FF5D764F000
|
unkown
|
page readonly
|
||
|
5330000
|
unkown
|
page write copy
|
||
|
4A81000
|
direct allocation
|
page execute and read and write
|
||
|
7FF5D772C000
|
unkown
|
page readonly
|
||
|
99B0000
|
unkown
|
page read and write
|
||
|
C472000
|
unkown
|
page read and write
|
||
|
760F000
|
unkown
|
page read and write
|
||
|
7FF5D74B8000
|
unkown
|
page readonly
|
||
|
C48B000
|
unkown
|
page read and write
|
||
|
7B00000
|
unkown
|
page readonly
|
||
|
AAA6000
|
unkown
|
page read and write
|
||
|
8CB8000
|
stack
|
page read and write
|
||
|
7FF5D72DF000
|
unkown
|
page readonly
|
||
|
7FF5D738E000
|
unkown
|
page readonly
|
||
|
7FF5D720F000
|
unkown
|
page readonly
|
||
|
1395000
|
heap
|
page read and write
|
||
|
5CBB000
|
heap
|
page read and write
|
||
|
7FF5D75E9000
|
unkown
|
page readonly
|
||
|
7FF5D7280000
|
unkown
|
page readonly
|
||
|
A33F000
|
unkown
|
page read and write
|
||
|
4580000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D749B000
|
unkown
|
page readonly
|
||
|
5810000
|
trusted library allocation
|
page read and write
|
||
|
A02E000
|
stack
|
page read and write
|
||
|
7FF5D71E0000
|
unkown
|
page readonly
|
||
|
AA40000
|
unkown
|
page read and write
|
||
|
1390000
|
heap
|
page read and write
|
||
|
18E3000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D760B000
|
unkown
|
page readonly
|
||
|
4AF2000
|
direct allocation
|
page execute and read and write
|
||
|
3140000
|
unkown
|
page read and write
|
||
|
494E000
|
direct allocation
|
page execute and read and write
|
||
|
A3AA000
|
unkown
|
page read and write
|
||
|
7FF5D76D7000
|
unkown
|
page readonly
|
||
|
35C1000
|
unkown
|
page read and write
|
||
|
10BCA000
|
unkown
|
page read and write
|
||
|
7FF5D723C000
|
unkown
|
page readonly
|
||
|
35C3000
|
unkown
|
page read and write
|
||
|
444B000
|
heap
|
page read and write
|
||
|
A3AC000
|
unkown
|
page read and write
|
||
|
7FF5D7837000
|
unkown
|
page readonly
|
||
|
35B3000
|
unkown
|
page read and write
|
||
|
E10000
|
unkown
|
page readonly
|
||
|
AA0E000
|
unkown
|
page read and write
|
||
|
AE1D000
|
stack
|
page read and write
|
||
|
AA05000
|
unkown
|
page read and write
|
||
|
9B41000
|
unkown
|
page read and write
|
||
|
7FF5D6AB6000
|
unkown
|
page readonly
|
||
|
A233000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D7438000
|
unkown
|
page readonly
|
||
|
7FF5D774A000
|
unkown
|
page readonly
|
||
|
2EA1000
|
unkown
|
page read and write
|
||
|
E8D000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D71CC000
|
unkown
|
page readonly
|
||
|
9A80000
|
unkown
|
page read and write
|
||
|
9A72000
|
unkown
|
page read and write
|
||
|
7FF5D7792000
|
unkown
|
page readonly
|
||
|
C642000
|
unkown
|
page read and write
|
||
|
3190000
|
heap
|
page execute and read and write
|
||
|
AA0F000
|
unkown
|
page read and write
|
||
|
7AC0000
|
unkown
|
page read and write
|
||
|
7FF5D705D000
|
unkown
|
page readonly
|
||
|
35B3000
|
unkown
|
page read and write
|
||
|
1383000
|
heap
|
page read and write
|
||
|
E0E000
|
stack
|
page read and write
|
||
|
8ECC000
|
stack
|
page read and write
|
||
|
F294000
|
unkown
|
page read and write
|
||
|
57E0000
|
trusted library allocation
|
page read and write
|
||
|
AA01000
|
unkown
|
page read and write
|
||
|
7FF5CE33D000
|
unkown
|
page readonly
|
||
|
7FF5D77A4000
|
unkown
|
page readonly
|
||
|
35D3000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
B330000
|
unkown
|
page read and write
|
||
|
362D000
|
unkown
|
page read and write
|
||
|
9A9E000
|
unkown
|
page read and write
|
||
|
14F0000
|
heap
|
page read and write
|
||
|
7FF5D6AB6000
|
unkown
|
page readonly
|
||
|
7FF5D75EE000
|
unkown
|
page readonly
|
||
|
2AF0000
|
heap
|
page read and write
|
||
|
8CB8000
|
stack
|
page read and write
|
||
|
7FF5D74B8000
|
unkown
|
page readonly
|
||
|
C24E000
|
stack
|
page read and write
|
||
|
7440000
|
unkown
|
page read and write
|
||
|
7FF5D7643000
|
unkown
|
page readonly
|
||
|
1390000
|
heap
|
page read and write
|
||
|
18BF000
|
stack
|
page read and write
|
||
|
7FF5D75D6000
|
unkown
|
page readonly
|
||
|
7FF5D719C000
|
unkown
|
page readonly
|
||
|
A39C000
|
unkown
|
page read and write
|
||
|
5C80000
|
heap
|
page read and write
|
||
|
7DF4F2480000
|
unkown
|
page readonly
|
||
|
282B000
|
heap
|
page read and write
|
||
|
AA0F000
|
unkown
|
page read and write
|
||
|
7750000
|
trusted library section
|
page read and write
|
||
|
7FF5D732D000
|
unkown
|
page readonly
|
||
|
4ADA000
|
unkown
|
page read and write
|
||
|
7FF5D705D000
|
unkown
|
page readonly
|
||
|
7FF5D7407000
|
unkown
|
page readonly
|
||
|
7FF5D7065000
|
unkown
|
page readonly
|
||
|
C47F000
|
unkown
|
page read and write
|
||
|
4A0E000
|
unkown
|
page read and write
|
||
|
967E000
|
stack
|
page read and write
|
||
|
7FF5D749B000
|
unkown
|
page readonly
|
||
|
7FF5D76C8000
|
unkown
|
page readonly
|
||
|
FF0000
|
unkown
|
page readonly
|
||
|
7B00000
|
unkown
|
page readonly
|
||
|
3160000
|
unkown
|
page read and write
|
||
|
C61B000
|
unkown
|
page read and write
|
||
|
7FF5D7429000
|
unkown
|
page readonly
|
||
|
7FF5D72C8000
|
unkown
|
page readonly
|
||
|
4580000
|
trusted library allocation
|
page read and write
|
||
|
897F000
|
stack
|
page read and write
|
||
|
18FD000
|
trusted library allocation
|
page execute and read and write
|
||
|
C472000
|
unkown
|
page read and write
|
||
|
9C92000
|
unkown
|
page read and write
|
||
|
35D1000
|
unkown
|
page read and write
|
||
|
1250000
|
unkown
|
page read and write
|
||
|
57DD000
|
trusted library allocation
|
page read and write
|
||
|
B03B000
|
stack
|
page read and write
|
||
|
1327000
|
heap
|
page read and write
|
||
|
F1AE000
|
stack
|
page read and write
|
||
|
7FF5D72BD000
|
unkown
|
page readonly
|
||
|
9E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
5CB1000
|
heap
|
page read and write
|
||
|
AAAA000
|
unkown
|
page read and write
|
||
|
7FF5D7075000
|
unkown
|
page readonly
|
||
|
5890000
|
heap
|
page read and write
|
||
|
10BBD000
|
unkown
|
page read and write
|
||
|
7FF5D7722000
|
unkown
|
page readonly
|
||
|
7FF5D776D000
|
unkown
|
page readonly
|
||
|
2832000
|
heap
|
page read and write
|
||
|
1340000
|
unkown
|
page read and write
|
||
|
7FF5D7808000
|
unkown
|
page readonly
|
||
|
7D3E000
|
stack
|
page read and write
|
||
|
7FF5D7394000
|
unkown
|
page readonly
|
||
|
2832000
|
heap
|
page read and write
|
||
|
35C3000
|
unkown
|
page read and write
|
||
|
C5F4000
|
unkown
|
page read and write
|
||
|
C5FA000
|
unkown
|
page read and write
|
||
|
B950000
|
unkown
|
page readonly
|
||
|
7660000
|
heap
|
page read and write
|
||
|
7FF5D729E000
|
unkown
|
page readonly
|
||
|
7FF5D774C000
|
unkown
|
page readonly
|
||
|
C9A7000
|
unkown
|
page read and write
|
||
|
7FF5D72D0000
|
unkown
|
page readonly
|
||
|
A286000
|
unkown
|
page read and write
|
||
|
35BD000
|
unkown
|
page read and write
|
||
|
10BB5000
|
unkown
|
page read and write
|
||
|
3120000
|
unkown
|
page read and write
|
||
|
7E60000
|
unkown
|
page read and write
|
||
|
7FF5D73F5000
|
unkown
|
page readonly
|
||
|
7DD0000
|
heap
|
page read and write
|
||
|
C460000
|
unkown
|
page read and write
|
||
|
3400000
|
unkown
|
page read and write
|
||
|
A264000
|
unkown
|
page read and write
|
||
|
7FF5D7073000
|
unkown
|
page readonly
|
||
|
C866000
|
unkown
|
page read and write
|
||
|
7FF5D743F000
|
unkown
|
page readonly
|
||
|
7FF5D764F000
|
unkown
|
page readonly
|
||
|
4A44000
|
unkown
|
page read and write
|
||
|
7FF5D77EB000
|
unkown
|
page readonly
|
||
|
C496000
|
unkown
|
page read and write
|
||
|
7DF4F2491000
|
unkown
|
page execute read
|
||
|
B559000
|
stack
|
page read and write
|
||
|
7C70000
|
unkown
|
page readonly
|
||
|
E4E6000
|
system
|
page execute and read and write
|
||
|
7FF5D76AF000
|
unkown
|
page readonly
|
||
|
7FF5CE33D000
|
unkown
|
page readonly
|
||
|
35CF000
|
unkown
|
page read and write
|
||
|
C78A000
|
unkown
|
page read and write
|
||
|
7FF5D72E9000
|
unkown
|
page readonly
|
||
|
AA40000
|
unkown
|
page read and write
|
||
|
C9E8000
|
unkown
|
page read and write
|
||
|
3626000
|
unkown
|
page read and write
|
||
|
10BB2000
|
unkown
|
page read and write
|
||
|
7FF5D7639000
|
unkown
|
page readonly
|
||
|
7FF5D72FB000
|
unkown
|
page readonly
|
||
|
7FF5D7703000
|
unkown
|
page readonly
|
||
|
7FF5D776D000
|
unkown
|
page readonly
|
||
|
7FF5D7488000
|
unkown
|
page readonly
|
||
|
9A92000
|
unkown
|
page read and write
|
||
|
7FF5D76AF000
|
unkown
|
page readonly
|
||
|
2F40000
|
heap
|
page read and write
|
||
|
CFB000
|
stack
|
page read and write
|
||
|
3160000
|
unkown
|
page read and write
|
||
|
8DCB000
|
stack
|
page read and write
|
||
|
C653000
|
unkown
|
page read and write
|
||
|
9679000
|
stack
|
page read and write
|
||
|
7FF5D7705000
|
unkown
|
page readonly
|
||
|
7FF5D7398000
|
unkown
|
page readonly
|
||
|
320F000
|
unkown
|
page read and write
|
||
|
E4D6000
|
system
|
page execute and read and write
|
||
|
7FF5D7309000
|
unkown
|
page readonly
|
||
|
316B000
|
stack
|
page read and write
|
||
|
94F4000
|
unkown
|
page read and write
|
||
|
2F4C000
|
heap
|
page read and write
|
||
|
9D0000
|
heap
|
page read and write
|
||
|
8890000
|
unkown
|
page readonly
|
||
|
853B000
|
stack
|
page read and write
|
||
|
AFBE000
|
stack
|
page read and write
|
||
|
7FF5D748C000
|
unkown
|
page readonly
|
||
|
7FF5D77A8000
|
unkown
|
page readonly
|
||
|
53E1000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
AA91000
|
unkown
|
page read and write
|
||
|
7FF5D7394000
|
unkown
|
page readonly
|
||
|
FF0000
|
unkown
|
page readonly
|
||
|
760F000
|
unkown
|
page read and write
|
||
|
7FF5D75B3000
|
unkown
|
page readonly
|
||
|
5463000
|
unkown
|
page read and write
|
||
|
C9DE000
|
unkown
|
page read and write
|
||
|
7FF5D75F2000
|
unkown
|
page readonly
|
||
|
2827000
|
heap
|
page read and write
|
||
|
10BBD000
|
unkown
|
page read and write
|
||
|
57E2000
|
trusted library allocation
|
page read and write
|
||
|
C94D000
|
unkown
|
page read and write
|
||
|
1400000
|
direct allocation
|
page execute and read and write
|
||
|
9BB1000
|
unkown
|
page read and write
|
||
|
7FF5D75B8000
|
unkown
|
page readonly
|
||
|
7FF5D72D7000
|
unkown
|
page readonly
|
||
|
35BD000
|
unkown
|
page read and write
|
||
|
AA40000
|
unkown
|
page read and write
|
||
|
C669000
|
unkown
|
page read and write
|
||
|
8FD9000
|
stack
|
page read and write
|
||
|
9B0B000
|
unkown
|
page read and write
|
||
|
AA9B000
|
unkown
|
page read and write
|
||
|
35B0000
|
unkown
|
page read and write
|
||
|
10BB2000
|
unkown
|
page read and write
|
||
|
A9DF000
|
unkown
|
page read and write
|
||
|
7FF5D783B000
|
unkown
|
page readonly
|
||
|
7FF5D744E000
|
unkown
|
page readonly
|
||
|
C73E000
|
unkown
|
page read and write
|
||
|
2990000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D71A6000
|
unkown
|
page readonly
|
||
|
5C90000
|
heap
|
page read and write
|
||
|
AAA6000
|
unkown
|
page read and write
|
||
|
AA19000
|
unkown
|
page read and write
|
||
|
9AAA000
|
unkown
|
page read and write
|
||
|
8A70000
|
unkown
|
page read and write
|
||
|
3549000
|
unkown
|
page read and write
|
||
|
F6A000
|
stack
|
page read and write
|
||
|
7DF4F2461000
|
unkown
|
page execute read
|
||
|
AA0B000
|
unkown
|
page read and write
|
||
|
7FF5D778A000
|
unkown
|
page readonly
|
||
|
18ED000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FF5D72D3000
|
unkown
|
page readonly
|
||
|
C5F8000
|
unkown
|
page read and write
|
||
|
9D42000
|
unkown
|
page read and write
|
||
|
29D4000
|
heap
|
page read and write
|
||
|
BF3E000
|
stack
|
page read and write
|
||
|
C496000
|
unkown
|
page read and write
|
||
|
5B70000
|
heap
|
page execute and read and write
|
||
|
7FF5D77E0000
|
unkown
|
page readonly
|
||
|
A3AA000
|
unkown
|
page read and write
|
||
|
C65E000
|
unkown
|
page read and write
|
||
|
F25B000
|
unkown
|
page read and write
|
||
|
7FF5D77F7000
|
unkown
|
page readonly
|
||
|
7FF5D706F000
|
unkown
|
page readonly
|
||
|
4B00000
|
unkown
|
page read and write
|
||
|
BDC0000
|
unkown
|
page read and write
|
||
|
1270000
|
unkown
|
page read and write
|
||
|
7FF5D7641000
|
unkown
|
page readonly
|
||
|
7FF5D7643000
|
unkown
|
page readonly
|
||
|
1340000
|
unkown
|
page read and write
|
||
|
A3B6000
|
unkown
|
page read and write
|
||
|
C625000
|
unkown
|
page read and write
|
||
|
F256000
|
unkown
|
page read and write
|
||
|
7FF5D71C4000
|
unkown
|
page readonly
|
||
|
10C86000
|
system
|
page read and write
|
||
|
33C0000
|
unkown
|
page read and write
|
||
|
12B0000
|
unkown
|
page read and write
|
||
|
1380000
|
heap
|
page read and write
|
||
|
9AC3000
|
unkown
|
page read and write
|
||
|
7E60000
|
unkown
|
page read and write
|
||
|
9AA8000
|
unkown
|
page read and write
|
||
|
BE49000
|
stack
|
page read and write
|
||
|
3170000
|
unkown
|
page read and write
|
||
|
97BE000
|
stack
|
page read and write
|
||
|
58B0000
|
trusted library allocation
|
page execute and read and write
|
||
|
7C31000
|
unkown
|
page read and write
|
||
|
7FF5D77A8000
|
unkown
|
page readonly
|
||
|
2FF9000
|
stack
|
page read and write
|
||
|
37F5000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D758D000
|
unkown
|
page readonly
|
||
|
45FE000
|
stack
|
page read and write
|
||
|
7FF5D74C3000
|
unkown
|
page readonly
|
||
|
7FF5D77FD000
|
unkown
|
page readonly
|
||
|
7611000
|
unkown
|
page read and write
|
||
|
C4C6000
|
unkown
|
page read and write
|
||
|
A0A8000
|
stack
|
page read and write
|
||
|
31B0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D75AF000
|
unkown
|
page readonly
|
||
|
5EE0000
|
trusted library allocation
|
page read and write
|
||
|
7FF5D77F0000
|
unkown
|
page readonly
|
||
|
7DBD000
|
stack
|
page read and write
|
||
|
7FF5D7075000
|
unkown
|
page readonly
|
||
|
C926000
|
unkown
|
page read and write
|
||
|
A391000
|
unkown
|
page read and write
|
||
|
9AF9000
|
unkown
|
page read and write
|
||
|
7B20000
|
unkown
|
page read and write
|
||
|
7FF5D69BB000
|
unkown
|
page readonly
|
||
|
8FD9000
|
stack
|
page read and write
|
||
|
10BB4000
|
unkown
|
page read and write
|
||
|
C8EB000
|
unkown
|
page read and write
|
||
|
7FF5D7745000
|
unkown
|
page readonly
|
||
|
AE1D000
|
stack
|
page read and write
|
||
|
7FF5D75C1000
|
unkown
|
page readonly
|
||
|
9BB1000
|
unkown
|
page read and write
|
||
|
7FF5D751F000
|
unkown
|
page readonly
|
||
|
3100000
|
unkown
|
page read and write
|
There are 1495 hidden memdumps, click here to show them.