Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- "Process:","dnscrypt-proxy.exe"
- "PID:","4364"
- "Type","Size","Committed","Private","Total WS","Private WS","Shareable WS","Shared WS","Locked WS","Blocks","Largest",
- "Total","60 120","45 108","27 276","1 556","1 088","468","256","4","171",""
- "Image","16 420","16 420","592","600","144","456","244","","123","8 188"
- "Mapped File","644","644","","","","","","","5","260"
- "Shareable","3 552","1 348","","4","","4","4","","13","1 036"
- "Heap","1 664","196","184","92","88","4","4","","9","1 024"
- "Managed Heap","","","","","","","","","",""
- "Stack","4 096","120","120","68","68","","","4","6","2 048"
- "Private Data","31 836","25 972","25 972","384","380","4","4","","15","16 384"
- "Page Table","408","408","408","408","408","","","","",""
- "Unusable","1 500","","","","","","","","","60"
- "Free","2 037 376","","","","","","","","20","1 514 880"
- "Address","Type","Size","Committed","Private","Total WS","Private WS","Shareable WS","Shared WS","Locked WS","Blocks","Protection","Details",
- "00000000","Free","64","","","","","","","","","",""
- "00010000","Private Data","4","4","4","","","","","","1","Read/Write",""
- " 00010000","Private Data","4","4","4","","","","","","","Read/Write",""
- "00011000","Unusable","60","","","","","","","","","",""
- "00020000","Private Data","4","4","4","4","4","","","","1","Read/Write",""
- " 00020000","Private Data","4","4","4","4","4","","","","","Read/Write",""
- "00021000","Unusable","60","","","","","","","","","",""
- "00030000","Thread Stack","2 048","16","16","","","","","","3","Read/Write/Guard","Thread ID: 1276"
- " 00030000","Thread Stack","2 032","","","","","","","","","Reserved",""
- " 0022C000","Thread Stack","4","4","4","","","","","","","Read/Write/Guard",""
- " 0022D000","Thread Stack","12","12","12","","","","","","","Read/Write",""
- "00230000","Shareable","20","20","","","","","","","1","Read",""
- " 00230000","Shareable","20","20","","","","","","","","Read",""
- "00235000","Unusable","44","","","","","","","","","",""
- "00240000","Heap (Private Data)","1 024","56","56","52","52","","","","2","Read/Write","Heap ID: 0 (Default) [LOW FRAGMENTATION]"
- " 00240000","Heap (Private Data)","56","56","56","52","52","","","","","Read/Write","Heap ID: 0 (Default) [LOW FRAGMENTATION]"
- " 0024E000","Heap (Private Data)","968","","","","","","","","","Reserved","Heap ID: 0 (Default) [LOW FRAGMENTATION]"
- "00340000","Heap (Shareable)","64","12","","4","","4","4","","2","Read/Write","Heap ID: 1"
- " 00340000","Heap (Shareable)","12","12","","4","","4","4","","","Read/Write","Heap ID: 1"
- " 00343000","Heap (Shareable)","52","","","","","","","","","Reserved","Heap ID: 1"
- "00350000","Mapped File","88","88","","","","","","","1","Read","C:\WINDOWS\system32\unicode.nls"
- " 00350000","Mapped File","88","88","","","","","","","","Read",""
- "00366000","Unusable","40","","","","","","","","","",""
- "00370000","Mapped File","260","260","","","","","","","1","Read","C:\WINDOWS\system32\locale.nls"
- " 00370000","Mapped File","260","260","","","","","","","","Read",""
- "003B1000","Unusable","60","","","","","","","","","",""
- "003C0000","Mapped File","24","24","","","","","","","1","Read","C:\WINDOWS\system32\sorttbls.nls"
- " 003C0000","Mapped File","24","24","","","","","","","","Read",""
- "003C6000","Unusable","40","","","","","","","","","",""
- "003D0000","Heap (Private Data)","64","64","64","16","16","","","","1","Read/Write","Heap ID: 2"
- " 003D0000","Heap (Private Data)","64","64","64","16","16","","","","","Read/Write","Heap ID: 2"
- "003E0000","Mapped File","12","12","","","","","","","1","Read","C:\WINDOWS\system32\ctype.nls"
- " 003E0000","Mapped File","12","12","","","","","","","","Read",""
- "003E3000","Unusable","52","","","","","","","","","",""
- "003F0000","Private Data","4","4","4","","","","","","1","Read/Write",""
- " 003F0000","Private Data","4","4","4","","","","","","","Read/Write",""
- "003F1000","Unusable","60","","","","","","","","","",""
- "00400000","Image (ASLR)","256","256","208","108","12","96","","","7","Execute/Copy on Write","C:\Programs\dnscrypt-proxy-win32\dnscrypt-proxy.exe"
- " 00400000","Image (ASLR)","4","4","","4","","4","","","","Read","Header"
- " 00401000","Image (ASLR)","4","4","","","","","","","","Execute/Read",".text"
- " 00402000","Image (ASLR)","180","180","180","76","","76","","","","Execute/Copy on Write",".text"
- " 0042F000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".data"
- " 00430000","Image (ASLR)","40","40","","8","","8","","","","Read",".rdata"
- " 0043A000","Image (ASLR)","12","12","12","8","8","","","","","Read/Write",".bss"
- " 0043D000","Image (ASLR)","4","4","4","","","","","","","Copy on write",".idata"
- " 0043E000","Image (ASLR)","4","4","4","4","","4","","","","Copy on write",".CRT"
- " 0043F000","Image (ASLR)","4","4","4","4","","4","","","","Copy on write",".tls"
- "00440000","Mapped File","260","260","","","","","","","1","Read","C:\WINDOWS\system32\sortkey.nls"
- " 00440000","Mapped File","260","260","","","","","","","","Read",""
- "00481000","Unusable","60","","","","","","","","","",""
- "00490000","Shareable","800","20","","4","","4","4","","4","Execute/Read",""
- " 00490000","Shareable","12","12","","","","","","","","Execute/Read",""
- " 00493000","Shareable","756","","","","","","","","","Reserved",""
- " 00550000","Shareable","8","8","","4","","4","4","","","Execute/Read",""
- " 00552000","Shareable","24","","","","","","","","","Reserved",""
- "00558000","Unusable","32","","","","","","","","","",""
- "00560000","Shareable","1 036","1 036","","","","","","","1","Read",""
- " 00560000","Shareable","1 036","1 036","","","","","","","","Read",""
- "00663000","Unusable","52","","","","","","","","","",""
- "00670000","Shareable","512","84","","","","","","","2","Execute/Read",""
- " 00670000","Shareable","84","84","","","","","","","","Execute/Read",""
- " 00685000","Shareable","428","","","","","","","","","Reserved",""
- "006F0000","Private Data","4","4","4","","","","","","1","Read/Write",""
- " 006F0000","Private Data","4","4","4","","","","","","","Read/Write",""
- "006F1000","Unusable","60","","","","","","","","","",""
- "00700000","Free","64","","","","","","","","","",""
- "00710000","Shareable","8","8","","","","","","","1","Read",""
- " 00710000","Shareable","8","8","","","","","","","","Read",""
- "00712000","Unusable","56","","","","","","","","","",""
- "00720000","Heap (Private Data)","256","52","52","8","8","","","","2","Read/Write","Heap ID: 3"
- " 00720000","Heap (Private Data)","52","52","52","8","8","","","","","Read/Write","Heap ID: 3"
- " 0072D000","Heap (Private Data)","204","","","","","","","","","Reserved","Heap ID: 3"
- "00760000","Thread Stack","2 048","104","104","68","68","","","4","3","Read/Write/Guard","Thread ID: 2516"
- " 00760000","Thread Stack","1 944","","","","","","","","","Reserved",""
- " 00946000","Thread Stack","4","4","4","","","","","","","Read/Write/Guard",""
- " 00947000","Thread Stack","100","100","100","68","68","","","4","","Read/Write",""
- "00960000","Private Data","1 024","1 024","1 024","4","4","","","","1","Read/Write",""
- " 00960000","Private Data","1 024","1 024","1 024","4","4","","","","","Read/Write",""
- "00A60000","Heap (Private Data)","256","12","12","12","12","","","","2","Read/Write","Heap ID: 4"
- " 00A60000","Heap (Private Data)","12","12","12","12","12","","","","","Read/Write","Heap ID: 4"
- " 00A63000","Heap (Private Data)","244","","","","","","","","","Reserved","Heap ID: 4"
- "00AA0000","Private Data","2 048","2 048","2 048","4","4","","","","1","Read/Write",""
- " 00AA0000","Private Data","2 048","2 048","2 048","4","4","","","","","Read/Write",""
- "00CA0000","Free","2 432","","","","","","","","","",""
- "00F00000","Shareable","8","8","","","","","","","1","Read",""
- " 00F00000","Shareable","8","8","","","","","","","","Read",""
- "00F02000","Unusable","56","","","","","","","","","",""
- "00F10000","Private Data","4 096","4 096","4 096","8","8","","","","1","Read/Write",""
- " 00F10000","Private Data","4 096","4 096","4 096","8","8","","","","","Read/Write",""
- "01310000","Private Data","8 192","8 192","8 192","4","4","","","","1","Read/Write",""
- " 01310000","Private Data","8 192","8 192","8 192","4","4","","","","","Read/Write",""
- "01B10000","Private Data","16 384","10 580","10 580","348","348","","","","2","Read/Write",""
- " 01B10000","Private Data","10 580","10 580","10 580","348","348","","","","","Read/Write",""
- " 02565000","Private Data","5 804","","","","","","","","","Reserved",""
- "02B10000","Free","1 514 880","","","","","","","","","",""
- "5F270000","Image","360","360","4","","","","","","4","Execute/Read","C:\WINDOWS\system32\hnetcfg.dll"
- " 5F270000","Image","4","4","","","","","","","","Read","Header"
- " 5F271000","Image","260","260","","","","","","","","Execute/Read",".text"
- " 5F2B2000","Image","4","4","","","","","","","","Execute/Read",".orpc"
- " 5F2B3000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 5F2B4000","Image","68","68","","","","","","","","Read",".rsrc"
- " 5F2C5000","Image","20","20","","","","","","","","Read",".reloc"
- "5F2CA000","Unusable","24","","","","","","","","","",""
- "5F2D0000","Free","90 560","","","","","","","","","",""
- "64B40000","Image","76","76","24","40","12","28","","","9","Execute/Read","C:\Programs\dnscrypt-proxy-win32\libwinpthread-1.dll"
- " 64B40000","Image","4","4","","4","","4","","","","Read","Header"
- " 64B41000","Image","32","32","","16","","16","","","","Execute/Read",".text"
- " 64B49000","Image","4","4","4","4","4","","","","","Read/Write",".data"
- " 64B4A000","Image","4","4","","","","","","","","Read",".rdata"
- " 64B4B000","Image","4","4","4","4","4","","","","","Read/Write",".bss"
- " 64B4C000","Image","8","8","","","","","","","","Read",".edata"
- " 64B4E000","Image","4","4","4","4","4","","","","","Read/Write",".idata"
- " 64B4F000","Image","4","4","4","4","","4","","","","Copy on write",".CRT"
- " 64B50000","Image","4","4","4","4","","4","","","","Copy on write",".tls"
- " 64B51000","Image","4","4","4","","","","","","","Copy on write",".rsrc"
- " 64B52000","Image","4","4","","","","","","","","Read",".reloc"
- "64B53000","Unusable","52","","","","","","","","","",""
- "64B60000","Free","39 552","","","","","","","","","",""
- "67200000","Image (ASLR)","768","768","20","64","12","52","","","9","Execute/Read","C:\Programs\dnscrypt-proxy-win32\libsodium-18.dll"
- " 67200000","Image (ASLR)","4","4","","4","","4","","","","Read","Header"
- " 67201000","Image (ASLR)","392","392","","40","","40","","","","Execute/Read",".text"
- " 67263000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".data"
- " 67264000","Image (ASLR)","40","40","","","","","","","","Read",".rdata"
- " 6726E000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".bss"
- " 6726F000","Image (ASLR)","24","24","","","","","","","","Read",".edata"
- " 67275000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".idata"
- " 67276000","Image (ASLR)","4","4","4","4","","4","","","","Copy on write",".CRT"
- " 67277000","Image (ASLR)","4","4","4","4","","4","","","","Copy on write",".tls"
- " 67278000","Image (ASLR)","4","4","","","","","","","","Read",".reloc"
- " 67279000","Image (ASLR)","4","4","","","","","","","","Read","/4"
- " 6727A000","Image (ASLR)","244","244","","","","","","","","Read","/19"
- " 672B7000","Image (ASLR)","8","8","","","","","","","","Read","/31"
- " 672B9000","Image (ASLR)","12","12","","","","","","","","Read","/45"
- " 672BC000","Image (ASLR)","4","4","","","","","","","","Read","/57"
- " 672BD000","Image (ASLR)","4","4","","","","","","","","Read","/70"
- " 672BE000","Image (ASLR)","4","4","","","","","","","","Read","/81"
- " 672BF000","Image (ASLR)","4","4","","","","","","","","Read","/92"
- "672C0000","Free","39 168","","","","","","","","","",""
- "69900000","Image (ASLR)","360","360","20","24","12","12","","","9","Execute/Read","C:\Programs\dnscrypt-proxy-win32\libdcplugin_example_cache.dll"
- " 69900000","Image (ASLR)","4","4","","","","","","","","Read","Header"
- " 69901000","Image (ASLR)","12","12","","12","","12","","","","Execute/Read",".text"
- " 69904000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".data"
- " 69905000","Image (ASLR)","4","4","","","","","","","","Read",".rdata"
- " 69906000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".bss"
- " 69907000","Image (ASLR)","4","4","","","","","","","","Read",".edata"
- " 69908000","Image (ASLR)","4","4","4","4","4","","","","","Read/Write",".idata"
- " 69909000","Image (ASLR)","4","4","4","","","","","","","Copy on write",".CRT"
- " 6990A000","Image (ASLR)","4","4","4","","","","","","","Copy on write",".tls"
- " 6990B000","Image (ASLR)","4","4","","","","","","","","Read",".reloc"
- " 6990C000","Image (ASLR)","4","4","","","","","","","","Read","/4"
- " 6990D000","Image (ASLR)","264","264","","","","","","","","Read","/19"
- " 6994F000","Image (ASLR)","12","12","","","","","","","","Read","/31"
- " 69952000","Image (ASLR)","12","12","","","","","","","","Read","/45"
- " 69955000","Image (ASLR)","4","4","","","","","","","","Read","/57"
- " 69956000","Image (ASLR)","4","4","","","","","","","","Read","/70"
- " 69957000","Image (ASLR)","8","8","","","","","","","","Read","/81"
- " 69959000","Image (ASLR)","4","4","","","","","","","","Read","/92"
- "6995A000","Unusable","24","","","","","","","","","",""
- "69960000","Free","56 704","","","","","","","","","",""
- "6D0C0000","Image","120","120","20","36","12","24","","","9","Execute/Read","C:\Programs\dnscrypt-proxy-win32\libgcc_s_sjlj-1.dll"
- " 6D0C0000","Image","4","4","","4","","4","","","","Read","Header"
- " 6D0C1000","Image","80","80","","12","","12","","","","Execute/Read",".text"
- " 6D0D5000","Image","4","4","4","4","4","","","","","Read/Write",".data"
- " 6D0D6000","Image","8","8","","","","","","","","Read",".rdata"
- " 6D0D8000","Image","4","4","4","4","4","","","","","Read/Write",".bss"
- " 6D0D9000","Image","4","4","","","","","","","","Read",".edata"
- " 6D0DA000","Image","4","4","4","4","4","","","","","Read/Write",".idata"
- " 6D0DB000","Image","4","4","4","4","","4","","","","Copy on write",".CRT"
- " 6D0DC000","Image","4","4","4","4","","4","","","","Copy on write",".tls"
- " 6D0DD000","Image","4","4","","","","","","","","Read",".reloc"
- "6D0DE000","Unusable","8","","","","","","","","","",""
- "6D0E0000","Free","75 776","","","","","","","","","",""
- "71AE0000","Image","32","32","4","4","4","","","","4","Execute/Read","C:\WINDOWS\system32\wshtcpip.dll"
- " 71AE0000","Image","4","4","","","","","","","","Read","Header"
- " 71AE1000","Image","16","16","4","4","4","","","","","Execute/Read",".text"
- " 71AE5000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 71AE6000","Image","4","4","","","","","","","","Read",".rsrc"
- " 71AE7000","Image","4","4","","","","","","","","Read",".reloc"
- "71AE8000","Unusable","32","","","","","","","","","",""
- "71AF0000","Free","192","","","","","","","","","",""
- "71B20000","Image","260","260","8","24","8","16","16","","5","Execute/Read","C:\WINDOWS\system32\mswsock.dll"
- " 71B20000","Image","4","4","","","","","","","","Read","Header"
- " 71B21000","Image","164","164","4","20","4","16","16","","","Execute/Read",".text"
- " 71B4A000","Image","60","60","","","","","","","","Execute/Read","SANONTCP"
- " 71B59000","Image","4","4","4","4","4","","","","","Read/Write",".data"
- " 71B5A000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 71B5B000","Image","12","12","","","","","","","","Read",".rsrc"
- " 71B5E000","Image","12","12","","","","","","","","Read",".reloc"
- "71B61000","Unusable","60","","","","","","","","","",""
- "71B70000","Free","512","","","","","","","","","",""
- "71BF0000","Image","32","32","4","4","4","","","","4","Execute/Read","C:\WINDOWS\system32\ws2help.dll"
- " 71BF0000","Image","4","4","","","","","","","","Read","Header"
- " 71BF1000","Image","16","16","4","4","4","","","","","Execute/Read",".text"
- " 71BF5000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 71BF6000","Image","4","4","","","","","","","","Read",".rsrc"
- " 71BF7000","Image","4","4","","","","","","","","Read",".reloc"
- "71BF8000","Unusable","32","","","","","","","","","",""
- "71C00000","Image","92","92","4","24","8","16","16","","4","Execute/Read","C:\WINDOWS\system32\ws2_32.dll"
- " 71C00000","Image","4","4","","","","","","","","Read","Header"
- " 71C01000","Image","76","76","4","20","4","16","16","","","Execute/Read",".text"
- " 71C14000","Image","4","4","4","4","4","","","","","Read/Write",".data"
- " 71C15000","Image","4","4","","","","","","","","Read",".rsrc"
- " 71C16000","Image","4","4","","","","","","","","Read",".reloc"
- "71C17000","Unusable","36","","","","","","","","","",""
- "71C20000","Free","72 128","","","","","","","","","",""
- "76290000","Image","116","116","4","12","8","4","4","","4","Execute/Read","C:\WINDOWS\system32\imm32.dll"
- " 76290000","Image","4","4","","","","","","","","Read","Header"
- " 76291000","Image","84","84","4","8","4","4","4","","","Execute/Read",".text"
- " 762A6000","Image","4","4","4","4","4","","","","","Read/Write",".data"
- " 762A7000","Image","20","20","","","","","","","","Read",".rsrc"
- " 762AC000","Image","4","4","","","","","","","","Read",".reloc"
- "762AD000","Unusable","12","","","","","","","","","",""
- "762B0000","Free","12 928","","","","","","","","","",""
- "76F50000","Image","76","76","4","","","","","","4","Execute/Read","C:\WINDOWS\system32\secur32.dll"
- " 76F50000","Image","4","4","","","","","","","","Read","Header"
- " 76F51000","Image","60","60","","","","","","","","Execute/Read",".text"
- " 76F60000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 76F61000","Image","4","4","","","","","","","","Read",".rsrc"
- " 76F62000","Image","4","4","","","","","","","","Read",".reloc"
- "76F63000","Unusable","52","","","","","","","","","",""
- "76F70000","Free","4 160","","","","","","","","","",""
- "77380000","Image","580","580","8","","","","","","5","Execute/Read","C:\WINDOWS\system32\user32.dll"
- " 77380000","Image","4","4","","","","","","","","Read","Header"
- " 77381000","Image","384","384","","","","","","","","Execute/Read",".text"
- " 773E1000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 773E2000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 773E3000","Image","172","172","","","","","","","","Read",".rsrc"
- " 7740E000","Image","12","12","","","","","","","","Read",".reloc"
- "77411000","Unusable","60","","","","","","","","","",""
- "77420000","Image","1 036","1 036","4","","","","","","4","Execute/Read","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.5190_x-ww_319264BE\comctl32.dll"
- " 77420000","Image","4","4","","","","","","","","Read","Header"
- " 77421000","Image","580","580","","","","","","","","Execute/Read",".text"
- " 774B2000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 774B3000","Image","424","424","","","","","","","","Read",".rsrc"
- " 7751D000","Image","24","24","","","","","","","","Read",".reloc"
- "77523000","Unusable","52","","","","","","","","","",""
- "77530000","Free","6 592","","","","","","","","","",""
- "77BA0000","Image","360","360","28","60","16","44","44","","5","Execute/Read","C:\WINDOWS\system32\msvcrt.dll"
- " 77BA0000","Image","4","4","","","","","","","","Read","Header"
- " 77BA1000","Image","312","312","4","48","4","44","44","","","Execute/Read",".text"
- " 77BEF000","Image","8","8","8","","","","","","","Copy on write",".data"
- " 77BF1000","Image","20","20","20","12","12","","","","","Read/Write",".data"
- " 77BF6000","Image","4","4","","","","","","","","Read",".rsrc"
- " 77BF7000","Image","12","12","","","","","","","","Read",".reloc"
- "77BFA000","Unusable","24","","","","","","","","","",""
- "77C00000","Image","292","292","8","","","","","","5","Execute/Read","C:\WINDOWS\system32\gdi32.dll"
- " 77C00000","Image","4","4","","","","","","","","Read","Header"
- " 77C01000","Image","268","268","","","","","","","","Execute/Read",".text"
- " 77C44000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 77C45000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 77C46000","Image","4","4","","","","","","","","Read",".rsrc"
- " 77C47000","Image","8","8","","","","","","","","Read",".reloc"
- "77C49000","Unusable","28","","","","","","","","","",""
- "77C50000","Image","644","644","4","8","","8","8","","4","Execute/Read","C:\WINDOWS\system32\rpcrt4.dll"
- " 77C50000","Image","4","4","","","","","","","","Read","Header"
- " 77C51000","Image","584","584","","8","","8","8","","","Execute/Read",".text"
- " 77CE3000","Image","28","28","","","","","","","","Execute/Read",".orpc"
- " 77CEA000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 77CEB000","Image","4","4","","","","","","","","Read",".rsrc"
- " 77CEC000","Image","20","20","","","","","","","","Read",".reloc"
- "77CF1000","Unusable","60","","","","","","","","","",""
- "77D00000","Free","1 280","","","","","","","","","",""
- "77E40000","Image","1 040","1 040","20","44","8","36","36","","5","Execute/Read","C:\WINDOWS\system32\kernel32.dll"
- " 77E40000","Image","4","4","","","","","","","","Read","Header"
- " 77E41000","Image","560","560","4","40","4","36","36","","","Execute/Read",".text"
- " 77ECD000","Image","12","12","12","4","4","","","","","Read/Write",".data"
- " 77ED0000","Image","8","8","8","","","","","","","Copy on write",".data"
- " 77ED2000","Image","428","428","","","","","","","","Read",".rsrc"
- " 77F3D000","Image","28","28","","","","","","","","Read",".reloc"
- "77F44000","Unusable","48","","","","","","","","","",""
- "77F50000","Free","74 432","","","","","","","","","",""
- "7C800000","Image","780","780","24","120","12","108","108","","7","Execute/Read","C:\WINDOWS\system32\ntdll.dll"
- " 7C800000","Image","4","4","","","","","","","","Read","Header"
- " 7C801000","Image","548","548","","108","","108","108","","","Execute/Read",".text"
- " 7C88A000","Image","12","12","12","12","12","","","","","Read/Write",".data"
- " 7C88D000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 7C88E000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 7C88F000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 7C890000","Image","188","188","","","","","","","","Read",".rsrc"
- " 7C8BF000","Image","16","16","","","","","","","","Read",".reloc"
- "7C8C3000","Unusable","52","","","","","","","","","",""
- "7C8D0000","Image","8 188","8 188","116","12","8","4","4","","6","Execute/Read","C:\WINDOWS\system32\shell32.dll"
- " 7C8D0000","Image","4","4","","","","","","","","Read","Header"
- " 7C8D1000","Image","2 056","2 056","4","8","4","4","4","","","Execute/Read",".text"
- " 7CAD3000","Image","72","72","72","","","","","","","Copy on write",".data"
- " 7CAE5000","Image","20","20","20","4","4","","","","","Read/Write",".data"
- " 7CAEA000","Image","24","24","24","","","","","","","Copy on write",".data"
- " 7CAF0000","Image","5 904","5 904","","","","","","","","Read",".rsrc"
- " 7D0B4000","Image","108","108","","","","","","","","Read",".reloc"
- "7D0CF000","Unusable","4","","","","","","","","","",""
- "7D0D0000","Free","704","","","","","","","","","",""
- "7D180000","Image","328","328","8","","","","","","5","Execute/Read","C:\WINDOWS\system32\shlwapi.dll"
- " 7D180000","Image","4","4","","","","","","","","Read","Header"
- " 7D181000","Image","296","296","","","","","","","","Execute/Read",".text"
- " 7D1CB000","Image","4","4","4","","","","","","","Read/Write",".data"
- " 7D1CC000","Image","4","4","4","","","","","","","Copy on write",".data"
- " 7D1CD000","Image","8","8","","","","","","","","Read",".rsrc"
- " 7D1CF000","Image","12","12","","","","","","","","Read",".reloc"
- "7D1D2000","Unusable","56","","","","","","","","","",""
- "7D1E0000","Image","624","624","16","16","8","8","8","","5","Execute/Read","C:\WINDOWS\system32\advapi32.dll"
- " 7D1E0000","Image","4","4","","","","","","","","Read","Header"
- " 7D1E1000","Image","448","448","","8","","8","8","","","Execute/Read",".text"
- " 7D251000","Image","8","8","8","8","8","","","","","Read/Write",".data"
- " 7D253000","Image","8","8","8","","","","","","","Copy on write",".data"
- " 7D255000","Image","136","136","","","","","","","","Read",".rsrc"
- " 7D277000","Image","20","20","","","","","","","","Read",".reloc"
- "7D27C000","Unusable","16","","","","","","","","","",""
- "7D280000","Free","37 312","","","","","","","","","",""
- "7F6F0000","Shareable","1 024","28","","","","","","","2","Execute/Read",""
- " 7F6F0000","Shareable","28","28","","","","","","","","Execute/Read",""
- " 7F6F7000","Shareable","996","","","","","","","","","Reserved",""
- "7F7F0000","Free","7 936","","","","","","","","","",""
- "7FFB0000","Shareable","144","144","","","","","","","1","Read",""
- " 7FFB0000","Shareable","144","144","","","","","","","","Read",""
- "7FFD4000","Unusable","36","","","","","","","","","",""
- "7FFDD000","Private Data","4","4","4","4","4","","","","1","Read/Write","Process Environment Block"
- " 7FFDD000","Private Data","4","4","4","4","4","","","","","Read/Write","Process Environment Block"
- "7FFDE000","Private Data","4","4","4","4","4","","","","1","Read/Write","Thread Environment Block ID: 2516"
- " 7FFDE000","Private Data","4","4","4","4","4","","","","","Read/Write","Thread Environment Block ID: 2516"
- "7FFDF000","Private Data","4","4","4","","","","","","1","Read/Write","Thread Environment Block ID: 1276"
- " 7FFDF000","Private Data","4","4","4","","","","","","","Read/Write","Thread Environment Block ID: 1276"
- "7FFE0000","Private Data","64","4","4","4","","4","4","","2","Read",""
- " 7FFE0000","Private Data","4","4","4","4","","4","4","","","Read",""
- " 7FFE1000","Private Data","60","","","","","","","","","Reserved",""
Advertisement
Add Comment
Please, Sign In to add comment