Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
LI180_win-1.5.1.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.lnk
|
UTF-8 Unicode text, with no line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.par
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\instance.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\III\7z.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7z759F.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\Install Fonts IDE-PlugIn.dll\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\1EA7FD63\B65B8ED4\box_feature.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x581,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\2E5DCE8F\23667BEE\SiLib.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\353AD105\E1510A13\USBXpressInstaller.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\3575565E\3EF45B9E\ANSI_2008.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\36706E48\3EF45B9E\ANSI.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\383E736B\B65B8ED4\square.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 36x36,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\409F08AF\B65B8ED4\box_information.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 1396x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\44DB77AB\7AF51026\LICOR.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:23], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\453607F8\E1510A13\siusbxp.cat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\51845961\DBD131B5\SiLib.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\55E6A65E\DBD131B5\SIUSBXP.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\587D056C\9426740A\CHK_20131028_165820.xls
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\609B42C1\B65B8ED4\box_feature_ppf.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x498,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\655BFA89\B65B8ED4\LI-COR-logo.jpg
|
[TIFF image data, big-endian, direntries=12, height=684, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3447],
baseline, precision 8, 800x158, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\655FCA3B\B65B8ED4\box_basic.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 646x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\67ACD331\98FBEBF9\Reference Spectrum.xlsx
|
Microsoft Excel 2007+
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6B339451\B65B8ED4\chart_criw.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 674x635,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6B481F13\B65B8ED4\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:14:42], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6C0AF2E8\BE4A257\LICORlang.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6DBFE203\342BBCE8\Cold.asz
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\7021623\B65B8ED4\chart_cie1976w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\7493ECCE\C0705257\CIEO.CFG
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\774E815E\526B362B\LICOR-about.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 145x435,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\8C4586D2\7AF51026\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:30:04], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\9847A14B\B6D77E4E\ESPD_LI-180-000.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\A3F0088A\23667BEE\SIUSBXP.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\AD9FE403\7AF51026\GAI.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:11:20 16:36:56], baseline, precision 8, 394x472, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\B7ED429E\E1510A13\setup.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\C3C84A4C\E1510A13\SiUSBXp.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\C9AB7ACB\7AF51026\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:39:41], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D2758F69\B65B8ED4\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:15:12], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D35647E\E023D589\LI-180 Spectrometer.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D532E401\20073942\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D83B2FF9\7AF51026\tm30image.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2015:12:30 17:35:06], baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\DAA0442\526B362B\LICOR-start.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x360,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\DC702C7E\E023D589\SiUSBXp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\E379E83C\7AF51026\CRI2.jpg
|
[TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=945],
baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\E5444EFD\CD0E66BD\LI-180_Log_Example.xls
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\ECC34BEC\3EF45B9E\ANSI_Ellipse.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\F28C57DF\B65B8ED4\chart_cie1931w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\F4ED2515\3EF45B9E\ANSI_2011.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\FC8C594\7AF51026\LICORC.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:55], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\IAW1FEA.tmp
|
MS-DOS executable, NE for MS Windows 3.x
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\lang.loc
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia.tmp
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\componentstree.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\componentstree.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\destination.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\destination.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\finish.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\finish.dfm.miaf
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\icon.ico
|
MS Windows icon resource - 6 icons, 256x256 withPNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel,
128x128, 32 bits/pixel
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\installaware.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\license.rtf
|
Rich Text Format data, version 1, unknown character set
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\licensecheck.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\licensecheck.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\maintenance.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\maintenance.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\prereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\prereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progress.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progress.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progressprereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progressprereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\readme.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\readme.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registration.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registration.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registrationwithserial.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registrationwithserial.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\setuptype.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\setuptype.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startinstallation.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startinstallation.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startmenu.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startmenu.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\welcome.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\welcome.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\wizard.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\wizard.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{4963F2A4-325D-4774-8D8D-86D68B3EE27C}
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\SETF04E.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\SETF04F.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\x64\SETF07E.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\x64\SETF07F.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\DPINST.LOG
|
data
|
modified
|
|
|
|
C:\Windows\Fonts\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Windows\INF\oem3.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\SETF59D.tmp
|
data
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\SETF5CD.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\x64\SETF5CE.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\x64\SETF5CF.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\catroot2\dberr.txt
|
ASCII text, with CRLF line terminators
|
modified
|
|
There are 108 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
'C:\Users\user\Desktop\LI180_win-1.5.1.exe'
|
 |
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
.\LI-180_Installer.exe /m='C:\Users\user~1\Desktop\LI180_~1.EXE' /k=''
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding BA9949B78EE4EB19368DAA67058A42BA
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
C:\Users\user~1\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR~1\mDIFxIDE.dll\x64DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Windows\System32\drvinst.exe
|
DrvInst.exe '4' '0' 'C:\Users\user~1\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\siusbxp.inf' '9' '4ae43d7fb'
'00000000000001A8' 'WinSta0\Default' '00000000000001AC' '208' 'c:\progra~2\li-180~1\driver'
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
C:\Users\user~1\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR~1\mDIFxIDE.dll\x86DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.installaware.comz
|
unknown
|
|
|
|
http://www.licor.com
|
unknown
|
|
|
|
https://www.licor.com/
|
unknown
|
|
|
|
http://www.ascendercorp.com/http://ascendercorp.com/eula10.html
|
unknown
|
|
|
|
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis
|
unknown
|
|
|
|
http://www.installaware.com
|
unknown
|
|
|
|
http://www.installaware.com/
|
unknown
|
|
|
|
http://crl.microsof8
|
unknown
|
|
|
|
http://standards.iso.org/iso/19770/-2/2008/schema.xsd
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
IsHostApp
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
IsHostApp
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
UninstallString
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
DisplayIcon
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
DisplayName
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
UninstallString
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
ModifyPath
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
Publisher
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
Contact
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
HelpLink
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
URLUpdateInfo
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
Comments
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
DisplayVersion
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
VersionMajor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
VersionMinor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
InstallLocation
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
VersionMajor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
VersionMinor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
NULL
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
Droid Sans Fallback
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
setupapi.dev.log
|
|
|
|
C:\Windows\System32\drvinst.exe
|
LanguageList
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
There are 21 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
58D000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
heap private
|
page read and write
|
|
|
|
4315AFB000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
15203F82000
|
unkown
|
page read and write
|
|
|
|
7FF5C376B000
|
unkown
|
page readonly
|
|
|
|
1E85AA00000
|
unkown
|
page readonly
|
|
|
|
26FF54EF000
|
heap default
|
page read and write
|
|
|
|
34D0000
|
unkown
|
page read and write
|
|
|
|
7FF523662000
|
unkown
|
page readonly
|
|
|
|
1E057602000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FF5AB933000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FF5A6221000
|
unkown
|
page readonly
|
|
|
|
837000
|
unkown image
|
page read and write
|
|
|
|
7FF5E3784000
|
unkown
|
page readonly
|
|
|
|
7FF5D33B6000
|
unkown
|
page readonly
|
|
|
|
DF8000
|
unkown
|
page read and write
|
|
|
|
3AE2A7A000
|
unkown
|
page read and write
|
|
|
|
7FF5038D0000
|
unkown
|
page readonly
|
|
|
|
15203EC5000
|
unkown
|
page read and write
|
|
|
|
2DC823A8000
|
unkown
|
page read and write
|
|
|
|
214E000
|
unkown
|
page read and write
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
15203D02000
|
unkown
|
page read and write
|
|
|
|
26FF5566000
|
unkown
|
page read and write
|
|
|
|
7FF54C6D8000
|
unkown
|
page readonly
|
|
|
|
7FF54CA86000
|
unkown
|
page readonly
|
|
|
|
7FF5038F1000
|
unkown
|
page readonly
|
|
|
|
7FF5232CC000
|
unkown
|
page readonly
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
F0E000
|
stack
|
page read and write
|
|
|
|
12B2000
|
heap default
|
page read and write
|
|
|
|
7FF5D30AA000
|
unkown
|
page readonly
|
|
|
|
7FF54FE29000
|
unkown
|
page readonly
|
|
|
|
3AE2F7F000
|
unkown
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8B0000
|
unkown
|
page readonly
|
|
|
|
1BE68809000
|
unkown
|
page read and write
|
|
|
|
188F9990000
|
heap default
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
1E0571D0000
|
unkown
|
page read and write
|
|
|
|
7FF5AB84F000
|
unkown
|
page readonly
|
|
|
|
7FF574E47000
|
unkown
|
page readonly
|
|
|
|
1E85A884000
|
unkown
|
page read and write
|
|
|
|
5D33FAD000
|
unkown
|
page read and write
|
|
|
|
26FF54E4000
|
unkown
|
page read and write
|
|
|
|
15201D7A000
|
unkown
|
page read and write
|
|
|
|
4316BFB000
|
unkown
|
page read and write
|
|
|
|
E46000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC62000
|
unkown
|
page readonly
|
|
|
|
DBB6C7E000
|
unkown
|
page read and write
|
|
|
|
DE4000
|
unkown
|
page read and write
|
|
|
|
26FF54B4000
|
unkown
|
page read and write
|
|
|
|
98041FE000
|
unkown
|
page read and write
|
|
|
|
1D52FA00000
|
unkown
|
page read and write
|
|
|
|
188FAE90000
|
unkown
|
page read and write
|
|
|
|
2F04000
|
unkown
|
page readonly
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
7FF5038D4000
|
unkown
|
page readonly
|
|
|
|
7FF5A61B8000
|
unkown
|
page readonly
|
|
|
|
E09000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
1E85A82F000
|
unkown
|
page read and write
|
|
|
|
599000
|
unkown
|
page read and write
|
|
|
|
DAE000
|
unkown
|
page read and write
|
|
|
|
54F000
|
stack
|
page read and write
|
|
|
|
1F31E86F000
|
unkown
|
page read and write
|
|
|
|
7FF5E3799000
|
unkown
|
page readonly
|
|
|
|
2DC82802000
|
unkown
|
page read and write
|
|
|
|
15204310000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA14000
|
unkown
|
page readonly
|
|
|
|
E5A000
|
unkown
|
page read and write
|
|
|
|
1E85A83E000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
5B19000
|
unkown
|
page read and write
|
|
|
|
7FF5C3863000
|
unkown
|
page readonly
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
2DC82353000
|
unkown
|
page read and write
|
|
|
|
7FF5A61C0000
|
unkown
|
page readonly
|
|
|
|
E0F000
|
unkown
|
page read and write
|
|
|
|
7FF5235A1000
|
unkown
|
page readonly
|
|
|
|
26FF5553000
|
heap default
|
page read and write
|
|
|
|
E55000
|
unkown
|
page read and write
|
|
|
|
E21000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9B1000
|
unkown
|
page readonly
|
|
|
|
1F31E813000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
7FF55E636000
|
unkown
|
page readonly
|
|
|
|
26FF54F0000
|
unkown
|
page read and write
|
|
|
|
455000
|
heap default
|
page read and write
|
|
|
|
C3C50FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8C1000
|
unkown
|
page readonly
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
15201C29000
|
unkown
|
page read and write
|
|
|
|
7FF54CA55000
|
unkown
|
page readonly
|
|
|
|
7FF50382C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFFA1000
|
unkown
|
page readonly
|
|
|
|
7FF5755E4000
|
unkown
|
page readonly
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
778A679000
|
unkown
|
page read and write
|
|
|
|
16E2A1D5000
|
heap private
|
page read and write
|
|
|
|
13FBA224000
|
unkown
|
page read and write
|
|
|
|
4F1000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9A4000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2995EB70000
|
unkown
|
page readonly
|
|
|
|
2700C913000
|
unkown
|
page read and write
|
|
|
|
7FF50369D000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
heap private
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
591000
|
unkown
|
page read and write
|
|
|
|
4315D7A000
|
unkown
|
page read and write
|
|
|
|
26FF54BC000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
7FF503944000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
AA73D7B000
|
unkown
|
page read and write
|
|
|
|
5F36000
|
unkown
|
page read and write
|
|
|
|
188FF0C0000
|
unkown
|
page read and write
|
|
|
|
7FF5C35CA000
|
unkown
|
page readonly
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
7FF5AB586000
|
unkown
|
page readonly
|
|
|
|
7FF54C2B7000
|
unkown
|
page readonly
|
|
|
|
7FF59F090000
|
unkown
|
page readonly
|
|
|
|
2700C866000
|
unkown
|
page read and write
|
|
|
|
7FF5500E6000
|
unkown
|
page readonly
|
|
|
|
E40000
|
unkown
|
page read and write
|
|
|
|
1E85A813000
|
unkown
|
page read and write
|
|
|
|
AA7477E000
|
unkown
|
page read and write
|
|
|
|
5E21A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5E376F000
|
unkown
|
page readonly
|
|
|
|
2DC81A87000
|
unkown
|
page read and write
|
|
|
|
7FF59E8FA000
|
unkown
|
page readonly
|
|
|
|
461B000
|
unkown
|
page read and write
|
|
|
|
15201D7A000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page write copy
|
|
|
|
7FF5D33D3000
|
unkown
|
page readonly
|
|
|
|
7FF5A62A3000
|
unkown
|
page readonly
|
|
|
|
2DC81990000
|
unkown
|
page readonly
|
|
|
|
7FF50066F000
|
unkown
|
page readonly
|
|
|
|
15203E37000
|
unkown
|
page read and write
|
|
|
|
15203E84000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
1E85A842000
|
unkown
|
page read and write
|
|
|
|
26FF54E6000
|
unkown
|
page read and write
|
|
|
|
4648000
|
unkown
|
page read and write
|
|
|
|
7FF547C14000
|
unkown
|
page readonly
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
F40000
|
heap private
|
page read and write
|
|
|
|
E18000
|
unkown
|
page read and write
|
|
|
|
7FF5D3301000
|
unkown
|
page readonly
|
|
|
|
7FF575134000
|
unkown
|
page readonly
|
|
|
|
1BE6886E000
|
unkown
|
page read and write
|
|
|
|
15203ECF000
|
unkown
|
page read and write
|
|
|
|
2DC82366000
|
unkown
|
page read and write
|
|
|
|
188FA313000
|
unkown
|
page read and write
|
|
|
|
7FF5D3356000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
7FF5C37B7000
|
unkown
|
page readonly
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
13FBA202000
|
unkown
|
page read and write
|
|
|
|
7FF5A61D1000
|
unkown
|
page readonly
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
7FF59E916000
|
unkown
|
page readonly
|
|
|
|
7FF5039B3000
|
unkown
|
page readonly
|
|
|
|
5B0B000
|
unkown
|
page read and write
|
|
|
|
AE19FF000
|
unkown
|
page read and write
|
|
|
|
466C000
|
unkown
|
page read and write
|
|
|
|
1D52FA70000
|
unkown
|
page read and write
|
|
|
|
7FF523621000
|
unkown
|
page readonly
|
|
|
|
53B0000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
26FF54F0000
|
unkown
|
page read and write
|
|
|
|
15203A60000
|
unkown
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
7FF5500A1000
|
unkown
|
page readonly
|
|
|
|
7FF5E37D9000
|
unkown
|
page readonly
|
|
|
|
7FF5A6180000
|
unkown
|
page readonly
|
|
|
|
7FF59F0E9000
|
unkown
|
page readonly
|
|
|
|
7FF5031A8000
|
unkown
|
page readonly
|
|
|
|
15205082000
|
unkown
|
page read and write
|
|
|
|
5B20000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
5B19000
|
unkown
|
page read and write
|
|
|
|
3AE2C7E000
|
unkown
|
page read and write
|
|
|
|
26FF54D4000
|
unkown
|
page read and write
|
|
|
|
188F9930000
|
heap private
|
page read and write
|
|
|
|
7FF503929000
|
unkown
|
page readonly
|
|
|
|
7FF5E37F4000
|
unkown
|
page readonly
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC8233B000
|
unkown
|
page read and write
|
|
|
|
15201CDF000
|
unkown
|
page read and write
|
|
|
|
7FF5036BE000
|
unkown
|
page readonly
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
26FF54D4000
|
heap default
|
page read and write
|
|
|
|
5B4C000
|
unkown
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
46E4000
|
unkown
|
page read and write
|
|
|
|
4639000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8FC000
|
unkown
|
page readonly
|
|
|
|
7FF7518A0000
|
unkown image
|
page readonly
|
|
|
|
7FF547E99000
|
unkown
|
page readonly
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
643B6FF000
|
unkown
|
page read and write
|
|
|
|
599000
|
unkown
|
page read and write
|
|
|
|
7FF5AB7AF000
|
unkown
|
page readonly
|
|
|
|
2DC8235E000
|
unkown
|
page read and write
|
|
|
|
15204410000
|
unkown
|
page read and write
|
|
|
|
3AE2B7B000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
unkown
|
page read and write
|
|
|
|
7FF5AF902000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F35000
|
unkown
|
page readonly
|
|
|
|
5E2167F000
|
unkown
|
page read and write
|
|
|
|
E57000
|
unkown
|
page read and write
|
|
|
|
7FF5AD8C0000
|
unkown
|
page readonly
|
|
|
|
7FF503712000
|
unkown
|
page readonly
|
|
|
|
E38000
|
unkown
|
page read and write
|
|
|
|
643B7F9000
|
unkown
|
page read and write
|
|
|
|
15203CFA000
|
unkown
|
page read and write
|
|
|
|
26FF54A9000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
1E85A846000
|
unkown
|
page read and write
|
|
|
|
6D580000
|
unkown image
|
page readonly
|
|
|
|
7FF5F0299000
|
unkown
|
page readonly
|
|
|
|
7FF5AB295000
|
unkown
|
page readonly
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
26FF54B2000
|
heap default
|
page read and write
|
|
|
|
2DC82354000
|
unkown
|
page read and write
|
|
|
|
7FF574D59000
|
unkown
|
page readonly
|
|
|
|
7FF57553C000
|
unkown
|
page readonly
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
7FF5AF986000
|
unkown
|
page readonly
|
|
|
|
465D000
|
unkown
|
page read and write
|
|
|
|
4DE000
|
heap default
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
7FF54FE2F000
|
unkown
|
page readonly
|
|
|
|
15201D4C000
|
unkown
|
page read and write
|
|
|
|
5AA1000
|
unkown
|
page read and write
|
|
|
|
2DC8238E000
|
unkown
|
page read and write
|
|
|
|
26FF5480000
|
heap private
|
page read and write
|
|
|
|
16E2A1E0000
|
unkown
|
page readonly
|
|
|
|
643B77F000
|
unkown
|
page read and write
|
|
|
|
2DC81B16000
|
unkown
|
page read and write
|
|
|
|
539000
|
unkown
|
page read and write
|
|
|
|
F50000
|
heap private
|
page read and write
|
|
|
|
188F99C0000
|
unkown
|
page read and write
|
|
|
|
22A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3778000
|
unkown
|
page readonly
|
|
|
|
13FBA1F0000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
7FF50052F000
|
unkown
|
page readonly
|
|
|
|
7FF5D3165000
|
unkown
|
page readonly
|
|
|
|
7FF5AF89F000
|
unkown
|
page readonly
|
|
|
|
15204310000
|
unkown
|
page read and write
|
|
|
|
2DC819C0000
|
unkown
|
page readonly
|
|
|
|
16E29F89000
|
heap default
|
page read and write
|
|
|
|
2DC82336000
|
unkown
|
page read and write
|
|
|
|
7FF547E92000
|
unkown
|
page readonly
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
2BF39F20000
|
heap default
|
page read and write
|
|
|
|
1D52FA41000
|
unkown
|
page read and write
|
|
|
|
15201CB3000
|
unkown
|
page read and write
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
7FF547E61000
|
unkown
|
page readonly
|
|
|
|
7FF5ADC5C000
|
unkown
|
page readonly
|
|
|
|
7FF5F0252000
|
unkown
|
page readonly
|
|
|
|
1E85A826000
|
unkown
|
page read and write
|
|
|
|
7FF5500CC000
|
unkown
|
page readonly
|
|
|
|
188F9AA0000
|
unkown
|
page read and write
|
|
|
|
1BE68800000
|
unkown
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
188FA1E0000
|
unkown
|
page read and write
|
|
|
|
26FF5490000
|
heap default
|
page read and write
|
|
|
|
7FF59F0E2000
|
unkown
|
page readonly
|
|
|
|
15201C92000
|
unkown
|
page read and write
|
|
|
|
925000
|
heap private
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
7FF503519000
|
unkown
|
page readonly
|
|
|
|
150000
|
unkown
|
page readonly
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
7FF5D3342000
|
unkown
|
page readonly
|
|
|
|
1BE68902000
|
unkown
|
page read and write
|
|
|
|
26FF54E6000
|
heap default
|
page read and write
|
|
|
|
2DC81AE7000
|
unkown
|
page read and write
|
|
|
|
7FF5AF618000
|
unkown
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FF5006F4000
|
unkown
|
page readonly
|
|
|
|
7FF5ADC10000
|
unkown
|
page readonly
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
1AEEFC00000
|
unkown
|
page readonly
|
|
|
|
6D5BA000
|
unkown image
|
page read and write
|
|
|
|
16B96520000
|
unkown
|
page readonly
|
|
|
|
32D0000
|
unkown
|
page read and write
|
|
|
|
15203C17000
|
unkown
|
page read and write
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
2E29000
|
unkown
|
page readonly
|
|
|
|
7FF5232D1000
|
unkown
|
page readonly
|
|
|
|
7FF5C384C000
|
unkown
|
page readonly
|
|
|
|
16E29F9A000
|
unkown
|
page read and write
|
|
|
|
15203EDD000
|
unkown
|
page read and write
|
|
|
|
7FF5AF919000
|
unkown
|
page readonly
|
|
|
|
15203E3F000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
7FF5D333B000
|
unkown
|
page readonly
|
|
|
|
7FF59F056000
|
unkown
|
page readonly
|
|
|
|
16B96255000
|
unkown
|
page read and write
|
|
|
|
2F4147E000
|
unkown
|
page read and write
|
|
|
|
7FF503880000
|
unkown
|
page readonly
|
|
|
|
643B67A000
|
unkown
|
page read and write
|
|
|
|
15203C51000
|
unkown
|
page read and write
|
|
|
|
26FF549F000
|
unkown
|
page read and write
|
|
|
|
15203F02000
|
unkown
|
page read and write
|
|
|
|
5ACF000
|
unkown
|
page read and write
|
|
|
|
7FF547E35000
|
unkown
|
page readonly
|
|
|
|
F1CC7BE000
|
unkown
|
page read and write
|
|
|
|
7FF575126000
|
unkown
|
page readonly
|
|
|
|
7FF5F0429000
|
unkown
|
page readonly
|
|
|
|
7FF57509B000
|
unkown
|
page readonly
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
1E85A82A000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
15203E53000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
4316CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5F0431000
|
unkown
|
page readonly
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
1D52FC00000
|
unkown
|
page write copy
|
|
|
|
5E21B7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C3780000
|
unkown
|
page readonly
|
|
|
|
7FF751921000
|
unkown image
|
page read and write
|
|
|
|
2937000
|
unkown
|
page read and write
|
|
|
|
7FF5232C0000
|
unkown
|
page readonly
|
|
|
|
28FB000
|
heap private
|
page read and write
|
|
|
|
7FF54CB03000
|
unkown
|
page readonly
|
|
|
|
188FF010000
|
unkown
|
page read and write
|
|
|
|
E11000
|
unkown
|
page read and write
|
|
|
|
464F000
|
unkown
|
page read and write
|
|
|
|
7FF5756B6000
|
unkown
|
page readonly
|
|
|
|
7FF5C3711000
|
unkown
|
page readonly
|
|
|
|
43168FB000
|
unkown
|
page read and write
|
|
|
|
1AEEFB00000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page readonly
|
|
|
|
2700CD90000
|
unkown
|
page readonly
|
|
|
|
7FF503546000
|
unkown
|
page readonly
|
|
|
|
1BE6886A000
|
unkown
|
page read and write
|
|
|
|
26FF54CF000
|
unkown
|
page read and write
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
188FF0D4000
|
unkown
|
page readonly
|
|
|
|
28F5000
|
heap private
|
page read and write
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
188FAB00000
|
unkown
|
page readonly
|
|
|
|
4316A7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AB8BA000
|
unkown
|
page readonly
|
|
|
|
2DC8237C000
|
unkown
|
page read and write
|
|
|
|
1F31E908000
|
unkown
|
page read and write
|
|
|
|
2995EC29000
|
unkown
|
page read and write
|
|
|
|
7FF5E35CA000
|
unkown
|
page readonly
|
|
|
|
15201CF1000
|
unkown
|
page read and write
|
|
|
|
26FF5543000
|
unkown
|
page read and write
|
|
|
|
7FF547A43000
|
unkown
|
page readonly
|
|
|
|
34D3000
|
unkown
|
page read and write
|
|
|
|
2BF39EE0000
|
unkown
|
page read and write
|
|
|
|
7FF5F0421000
|
unkown
|
page readonly
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
26FF54E4000
|
unkown
|
page read and write
|
|
|
|
15201CD2000
|
unkown
|
page read and write
|
|
|
|
26FF54EF000
|
unkown
|
page read and write
|
|
|
|
C3C4DF4000
|
unkown
|
page read and write
|
|
|
|
2DC82323000
|
unkown
|
page read and write
|
|
|
|
2DC81AE8000
|
unkown
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
7FF5D32B5000
|
unkown
|
page readonly
|
|
|
|
15203E3F000
|
unkown
|
page read and write
|
|
|
|
2700C6D0000
|
heap default
|
page read and write
|
|
|
|
7FF5C3675000
|
unkown
|
page readonly
|
|
|
|
15201C13000
|
unkown
|
page read and write
|
|
|
|
2190000
|
heap private
|
page read and write
|
|
|
|
14E76400000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page write copy
|
|
|
|
46B1000
|
unkown
|
page read and write
|
|
|
|
24E1000
|
unkown
|
page read and write
|
|
|
|
820000
|
heap private
|
page read and write
|
|
|
|
188FF2B6000
|
unkown
|
page read and write
|
|
|
|
7FF59F0F6000
|
unkown
|
page readonly
|
|
|
|
5B5A000
|
unkown
|
page read and write
|
|
|
|
E30000
|
unkown
|
page read and write
|
|
|
|
578000
|
unkown
|
page read and write
|
|
|
|
7FF5038BB000
|
unkown
|
page readonly
|
|
|
|
15203C00000
|
unkown
|
page read and write
|
|
|
|
2E34000
|
unkown
|
page readonly
|
|
|
|
2DC821D0000
|
unkown
|
page readonly
|
|
|
|
467A000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
188F9AB2000
|
unkown
|
page read and write
|
|
|
|
7FF5AB829000
|
unkown
|
page readonly
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
2340000
|
heap private
|
page read and write
|
|
|
|
188F9A76000
|
unkown
|
page read and write
|
|
|
|
2DC82A00000
|
unkown
|
page readonly
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
D9E000
|
unkown
|
page read and write
|
|
|
|
2BF39ED0000
|
heap private
|
page read and write
|
|
|
|
5D1000
|
unkown
|
page read and write
|
|
|
|
2DC82800000
|
unkown
|
page read and write
|
|
|
|
2DC82345000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
15203C02000
|
unkown
|
page read and write
|
|
|
|
15201C92000
|
unkown
|
page read and write
|
|
|
|
1FA51D00000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
188FF2A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D334C000
|
unkown
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
831000
|
unkown image
|
page write copy
|
|
|
|
3300000
|
unkown
|
page read and write
|
|
|
|
2E9000
|
unkown
|
page read and write
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
5C3000
|
unkown
|
page read and write
|
|
|
|
7FF5A613D000
|
unkown
|
page readonly
|
|
|
|
7FF5ADCF3000
|
unkown
|
page readonly
|
|
|
|
2B29FFF000
|
unkown
|
page read and write
|
|
|
|
DB3000
|
unkown
|
page read and write
|
|
|
|
26FF5563000
|
unkown
|
page read and write
|
|
|
|
14B0000
|
unkown
|
page readonly
|
|
|
|
7FF5755E0000
|
unkown
|
page readonly
|
|
|
|
15203A90000
|
unkown
|
page readonly
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
7FF5ADCF3000
|
unkown
|
page readonly
|
|
|
|
2700C800000
|
unkown
|
page read and write
|
|
|
|
16E2A070000
|
unkown
|
page readonly
|
|
|
|
7FF50361D000
|
unkown
|
page readonly
|
|
|
|
7FF5AB95C000
|
unkown
|
page readonly
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
410000
|
heap default
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
7FF5AF924000
|
unkown
|
page readonly
|
|
|
|
2F414FF000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
5E217FD000
|
unkown
|
page read and write
|
|
|
|
2DC82351000
|
unkown
|
page read and write
|
|
|
|
7FF5EFFF6000
|
unkown
|
page readonly
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
7FF5E37D2000
|
unkown
|
page readonly
|
|
|
|
2800000
|
unkown
|
page read and write
|
|
|
|
7FF5750F5000
|
unkown
|
page readonly
|
|
|
|
7FF5AB77F000
|
unkown
|
page readonly
|
|
|
|
1E05740D000
|
unkown
|
page read and write
|
|
|
|
2E01000
|
unkown
|
page readonly
|
|
|
|
11AE000
|
unkown
|
page read and write
|
|
|
|
26FF5551000
|
unkown
|
page read and write
|
|
|
|
8CF000
|
unkown
|
page read and write
|
|
|
|
15201BC0000
|
unkown
|
page readonly
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
26FF5400000
|
unkown
|
page read and write
|
|
|
|
15203AC0000
|
unkown
|
page readonly
|
|
|
|
57D0000
|
heap private
|
page read and write
|
|
|
|
2DC81A4B000
|
unkown
|
page read and write
|
|
|
|
1BE68813000
|
unkown
|
page read and write
|
|
|
|
7FF574D8A000
|
unkown
|
page readonly
|
|
|
|
C3C507F000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown
|
page read and write
|
|
|
|
58C000
|
unkown
|
page read and write
|
|
|
|
15203C04000
|
unkown
|
page read and write
|
|
|
|
16B964D0000
|
unkown
|
page write copy
|
|
|
|
1E85A831000
|
unkown
|
page read and write
|
|
|
|
2EFF000
|
unkown
|
page readonly
|
|
|
|
7FF5E3863000
|
unkown
|
page readonly
|
|
|
|
2BF39EA0000
|
unkown
|
page read and write
|
|
|
|
5DD000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
4648000
|
unkown
|
page read and write
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
5B53000
|
unkown
|
page read and write
|
|
|
|
2700C6E0000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
CBE000
|
unkown
|
page read and write
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
7FF5D2C2D000
|
unkown
|
page readonly
|
|
|
|
7FF54FE4D000
|
unkown
|
page readonly
|
|
|
|
15203E3B000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
26FF54E6000
|
unkown
|
page read and write
|
|
|
|
F1CCC78000
|
unkown
|
page read and write
|
|
|
|
7FF59F034000
|
unkown
|
page readonly
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
2995F600000
|
unkown
|
page readonly
|
|
|
|
13FBA930000
|
unkown
|
page readonly
|
|
|
|
1E057400000
|
unkown
|
page read and write
|
|
|
|
14E76260000
|
heap private
|
page read and write
|
|
|
|
1E85A872000
|
unkown
|
page read and write
|
|
|
|
7FF59F06C000
|
unkown
|
page readonly
|
|
|
|
1280000
|
heap default
|
page read and write
|
|
|
|
7FF5AF192000
|
unkown
|
page readonly
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
2995ED00000
|
unkown
|
page read and write
|
|
|
|
15203E3F000
|
unkown
|
page read and write
|
|
|
|
7FF5E37DC000
|
unkown
|
page readonly
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
188F9A29000
|
unkown
|
page read and write
|
|
|
|
58E000
|
unkown
|
page read and write
|
|
|
|
4A40000
|
unkown
|
page read and write
|
|
|
|
E22000
|
unkown
|
page read and write
|
|
|
|
7FF5A6174000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
188F9CD0000
|
unkown
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
5E2157F000
|
unkown
|
page read and write
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
1FA51C7D000
|
unkown
|
page read and write
|
|
|
|
C2E000
|
stack
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
3AE254B000
|
unkown
|
page read and write
|
|
|
|
7FF5D32A4000
|
unkown
|
page readonly
|
|
|
|
2C89000
|
unkown
|
page readonly
|
|
|
|
7FF52350A000
|
unkown
|
page readonly
|
|
|
|
7FF7518A0000
|
unkown image
|
page readonly
|
|
|
|
5F00000
|
unkown
|
page read and write
|
|
|
|
1D52FA02000
|
unkown
|
page read and write
|
|
|
|
2DC82363000
|
unkown
|
page read and write
|
|
|
|
D10000
|
unkown
|
page readonly
|
|
|
|
7FF547EB4000
|
unkown
|
page readonly
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
1BE68857000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown
|
page read and write
|
|
|
|
2995EC54000
|
unkown
|
page read and write
|
|
|
|
8E9000
|
heap private
|
page read and write
|
|
|
|
7FF5756A6000
|
unkown
|
page readonly
|
|
|
|
2F0B000
|
unkown
|
page readonly
|
|
|
|
1E85A83D000
|
unkown
|
page read and write
|
|
|
|
26FF54B4000
|
unkown
|
page read and write
|
|
|
|
7FF5A6219000
|
unkown
|
page readonly
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
7FF55E696000
|
unkown
|
page readonly
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
16B9623F000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA83000
|
unkown
|
page readonly
|
|
|
|
B9F78FE000
|
unkown
|
page read and write
|
|
|
|
E4F000
|
unkown
|
page read and write
|
|
|
|
2DC82331000
|
unkown
|
page read and write
|
|
|
|
7FF5AF993000
|
unkown
|
page readonly
|
|
|
|
2DC8233B000
|
unkown
|
page read and write
|
|
|
|
7FF5035A3000
|
unkown
|
page readonly
|
|
|
|
F5F000
|
stack
|
page read and write
|
|
|
|
15201D5A000
|
unkown
|
page read and write
|
|
|
|
16B96300000
|
unkown
|
page read and write
|
|
|
|
7FF547F0C000
|
unkown
|
page readonly
|
|
|
|
7FF5038AB000
|
unkown
|
page readonly
|
|
|
|
7FF503825000
|
unkown
|
page readonly
|
|
|
|
7FF5751CC000
|
unkown
|
page readonly
|
|
|
|
43165FB000
|
unkown
|
page read and write
|
|
|
|
58D000
|
unkown
|
page read and write
|
|
|
|
7FF5C3635000
|
unkown
|
page readonly
|
|
|
|
58F000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
D89000
|
unkown
|
page read and write
|
|
|
|
4623000
|
unkown
|
page read and write
|
|
|
|
857000
|
unkown image
|
page read and write
|
|
|
|
4316B7B000
|
unkown
|
page read and write
|
|
|
|
1F31F200000
|
unkown
|
page readonly
|
|
|
|
16B961E0000
|
unkown
|
page readonly
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8D1000
|
unkown
|
page readonly
|
|
|
|
7FF5F03EC000
|
unkown
|
page readonly
|
|
|
|
297B000
|
unkown
|
page read and write
|
|
|
|
82E000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5AF90C000
|
unkown
|
page readonly
|
|
|
|
26FF54E4000
|
unkown
|
page read and write
|
|
|
|
2DC8237C000
|
unkown
|
page read and write
|
|
|
|
188FA200000
|
unkown
|
page read and write
|
|
|
|
593000
|
unkown
|
page read and write
|
|
|
|
6D5AF000
|
unkown image
|
page readonly
|
|
|
|
7FF5005DC000
|
unkown
|
page readonly
|
|
|
|
2DC82361000
|
unkown
|
page read and write
|
|
|
|
15201CE2000
|
unkown
|
page read and write
|
|
|
|
7FF547735000
|
unkown
|
page readonly
|
|
|
|
15204000000
|
unkown
|
page read and write
|
|
|
|
2BF3B9F0000
|
heap private
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
2E66000
|
unkown
|
page readonly
|
|
|
|
7FF5C3430000
|
unkown
|
page readonly
|
|
|
|
7FF50375B000
|
unkown
|
page readonly
|
|
|
|
5AA9000
|
unkown
|
page read and write
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
2DC81CD0000
|
unkown
|
page readonly
|
|
|
|
4664000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown
|
page read and write
|
|
|
|
2DC82373000
|
unkown
|
page read and write
|
|
|
|
980407E000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
2F41579000
|
unkown
|
page read and write
|
|
|
|
15203CFA000
|
unkown
|
page read and write
|
|
|
|
E3C000
|
unkown
|
page read and write
|
|
|
|
7FF547AFC000
|
unkown
|
page readonly
|
|
|
|
1BE68740000
|
unkown
|
page readonly
|
|
|
|
7FF5750C0000
|
unkown
|
page readonly
|
|
|
|
23D6000
|
heap private
|
page read and write
|
|
|
|
5A8C000
|
unkown
|
page read and write
|
|
|
|
1AEEFB3A000
|
unkown
|
page read and write
|
|
|
|
5B20000
|
unkown
|
page read and write
|
|
|
|
1E85A87B000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
2DC82332000
|
unkown
|
page read and write
|
|
|
|
7FF550155000
|
unkown
|
page readonly
|
|
|
|
15203D02000
|
unkown
|
page read and write
|
|
|
|
2900000
|
unkown
|
page read and write
|
|
|
|
7FF500756000
|
unkown
|
page readonly
|
|
|
|
2995EE00000
|
unkown
|
page readonly
|
|
|
|
3AE30FE000
|
unkown
|
page read and write
|
|
|
|
1BE68610000
|
heap default
|
page read and write
|
|
|
|
15201CE2000
|
unkown
|
page read and write
|
|
|
|
4623000
|
unkown
|
page read and write
|
|
|
|
7FF547DC3000
|
unkown
|
page readonly
|
|
|
|
E15000
|
unkown
|
page read and write
|
|
|
|
1E057500000
|
unkown
|
page read and write
|
|
|
|
7FF59EED2000
|
unkown
|
page readonly
|
|
|
|
2700C7C0000
|
unkown
|
page readonly
|
|
|
|
DB0000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
D9E000
|
stack
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
2DC82382000
|
unkown
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
4701000
|
unkown
|
page read and write
|
|
|
|
15203C28000
|
unkown
|
page read and write
|
|
|
|
2EB7000
|
unkown
|
page readonly
|
|
|
|
1E85A87A000
|
unkown
|
page read and write
|
|
|
|
E40000
|
unkown
|
page read and write
|
|
|
|
100BF000
|
unkown image
|
page read and write
|
|
|
|
7FF59F15C000
|
unkown
|
page readonly
|
|
|
|
7FF5038E9000
|
unkown
|
page readonly
|
|
|
|
4315E7A000
|
unkown
|
page read and write
|
|
|
|
1E85A873000
|
unkown
|
page read and write
|
|
|
|
15203A80000
|
unkown
|
page read and write
|
|
|
|
15201D59000
|
unkown
|
page read and write
|
|
|
|
7FF5F0178000
|
unkown
|
page readonly
|
|
|
|
7FF5D3263000
|
unkown
|
page readonly
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
43166FB000
|
unkown
|
page read and write
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
26FF54DA000
|
unkown
|
page read and write
|
|
|
|
15203EDF000
|
unkown
|
page read and write
|
|
|
|
7FF550080000
|
unkown
|
page readonly
|
|
|
|
15203E15000
|
unkown
|
page read and write
|
|
|
|
1D52FA55000
|
unkown
|
page read and write
|
|
|
|
2700C7B0000
|
unkown
|
page readonly
|
|
|
|
7FF503508000
|
unkown
|
page readonly
|
|
|
|
1FA51A60000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
7FF57511C000
|
unkown
|
page readonly
|
|
|
|
16E29F7B000
|
heap default
|
page read and write
|
|
|
|
5B12000
|
unkown
|
page read and write
|
|
|
|
7FF59F081000
|
unkown
|
page readonly
|
|
|
|
2DC82342000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
431667D000
|
unkown
|
page read and write
|
|
|
|
7FF5AF976000
|
unkown
|
page readonly
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
188FF014000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
7FF54FEF5000
|
unkown
|
page readonly
|
|
|
|
7FF5C3784000
|
unkown
|
page readonly
|
|
|
|
7FF575422000
|
unkown
|
page readonly
|
|
|
|
26FF54CF000
|
unkown
|
page read and write
|
|
|
|
188FAB30000
|
unkown
|
page readonly
|
|
|
|
58A000
|
unkown
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
15203C70000
|
unkown
|
page read and write
|
|
|
|
3AE2E7B000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
DBB67F5000
|
unkown
|
page read and write
|
|
|
|
1E85A7A0000
|
unkown
|
page readonly
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
1E85A841000
|
unkown
|
page read and write
|
|
|
|
1D52FB00000
|
unkown
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
7FF5236DC000
|
unkown
|
page readonly
|
|
|
|
7FF59F173000
|
unkown
|
page readonly
|
|
|
|
5B44000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
heap private
|
page read and write
|
|
|
|
1FA519F0000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5ADB0A000
|
unkown
|
page readonly
|
|
|
|
7FF5ADCDC000
|
unkown
|
page readonly
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
15206110000
|
unkown
|
page read and write
|
|
|
|
7FF547C8A000
|
unkown
|
page readonly
|
|
|
|
7FF5038BF000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
7FF5AB98F000
|
unkown
|
page readonly
|
|
|
|
7FF550078000
|
unkown
|
page readonly
|
|
|
|
15201CDA000
|
unkown
|
page read and write
|
|
|
|
15205100000
|
unkown
|
page read and write
|
|
|
|
778A77F000
|
unkown
|
page read and write
|
|
|
|
14E77EB0000
|
unkown
|
page readonly
|
|
|
|
DED000
|
stack
|
page read and write
|
|
|
|
5D1000
|
unkown
|
page read and write
|
|
|
|
3AE2D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC84000
|
unkown
|
page readonly
|
|
|
|
7FF503765000
|
unkown
|
page readonly
|
|
|
|
E54000
|
unkown
|
page read and write
|
|
|
|
778A5FE000
|
unkown
|
page read and write
|
|
|
|
13FBA970000
|
unkown
|
page read and write
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
22A5000
|
heap private
|
page read and write
|
|
|
|
188FA1E3000
|
unkown
|
page read and write
|
|
|
|
1AEEFA02000
|
unkown
|
page read and write
|
|
|
|
7FF59F173000
|
unkown
|
page readonly
|
|
|
|
28E7000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
13FBAA02000
|
unkown
|
page read and write
|
|
|
|
2BF39F2B000
|
heap default
|
page read and write
|
|
|
|
1F31EA00000
|
unkown
|
page readonly
|
|
|
|
26FF54C1000
|
unkown
|
page read and write
|
|
|
|
BEE000
|
unkown
|
page read and write
|
|
|
|
2DC82343000
|
unkown
|
page read and write
|
|
|
|
1E85A86B000
|
unkown
|
page read and write
|
|
|
|
41A000
|
heap default
|
page read and write
|
|
|
|
5AD6000
|
unkown
|
page read and write
|
|
|
|
188FA1F0000
|
unkown
|
page read and write
|
|
|
|
7FF503830000
|
unkown
|
page readonly
|
|
|
|
431607B000
|
unkown
|
page read and write
|
|
|
|
3AE34FE000
|
unkown
|
page read and write
|
|
|
|
7FF50357D000
|
unkown
|
page readonly
|
|
|
|
2BF3B990000
|
unkown
|
page readonly
|
|
|
|
CFE000
|
unkown
|
page read and write
|
|
|
|
1F31EAD0000
|
unkown
|
page readonly
|
|
|
|
26FF54CF000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
AE1875000
|
unkown
|
page read and write
|
|
|
|
E4F000
|
unkown
|
page read and write
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
3AE32FA000
|
unkown
|
page read and write
|
|
|
|
5B68000
|
unkown
|
page read and write
|
|
|
|
51B000
|
heap default
|
page read and write
|
|
|
|
7FF5C3734000
|
unkown
|
page readonly
|
|
|
|
7FF5500B5000
|
unkown
|
page readonly
|
|
|
|
188FEFF8000
|
unkown
|
page read and write
|
|
|
|
294B000
|
unkown
|
page read and write
|
|
|
|
188F9C00000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown image
|
page readonly
|
|
|
|
1BE68869000
|
unkown
|
page read and write
|
|
|
|
7FF523669000
|
unkown
|
page readonly
|
|
|
|
4315C7A000
|
unkown
|
page read and write
|
|
|
|
DD3000
|
unkown
|
page read and write
|
|
|
|
16E29F9B000
|
unkown
|
page read and write
|
|
|
|
26FF54A9000
|
unkown
|
page read and write
|
|
|
|
B9F7AFB000
|
unkown
|
page read and write
|
|
|
|
1AEEF230000
|
unkown
|
page readonly
|
|
|
|
431647B000
|
unkown
|
page read and write
|
|
|
|
43169FB000
|
unkown
|
page read and write
|
|
|
|
1BE6883F000
|
unkown
|
page read and write
|
|
|
|
7FF5C343C000
|
unkown
|
page readonly
|
|
|
|
7FF57548D000
|
unkown
|
page readonly
|
|
|
|
14E762D0000
|
unkown
|
page readonly
|
|
|
|
24FB000
|
unkown
|
page read and write
|
|
|
|
1E85A82D000
|
unkown
|
page read and write
|
|
|
|
1D5314F0000
|
unkown
|
page readonly
|
|
|
|
7FF547F23000
|
unkown
|
page readonly
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
7FF59F085000
|
unkown
|
page readonly
|
|
|
|
1BE68A00000
|
unkown
|
page readonly
|
|
|
|
7FF523631000
|
unkown
|
page readonly
|
|
|
|
7FF5E37A1000
|
unkown
|
page readonly
|
|
|
|
2DC8235E000
|
unkown
|
page read and write
|
|
|
|
7FF575639000
|
unkown
|
page readonly
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
DBB6A77000
|
unkown
|
page read and write
|
|
|
|
7FF500678000
|
unkown
|
page readonly
|
|
|
|
1E85A863000
|
unkown
|
page read and write
|
|
|
|
2DC81B08000
|
unkown
|
page read and write
|
|
|
|
7FF5006DC000
|
unkown
|
page readonly
|
|
|
|
AE1CFF000
|
unkown
|
page read and write
|
|
|
|
3AE31FE000
|
unkown
|
page read and write
|
|
|
|
54E000
|
unkown
|
page read and write
|
|
|
|
2700C871000
|
unkown
|
page read and write
|
|
|
|
7FF59F0C5000
|
unkown
|
page readonly
|
|
|
|
26FF54E6000
|
unkown
|
page read and write
|
|
|
|
188FF020000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
7FF550163000
|
unkown
|
page readonly
|
|
|
|
188FAB50000
|
unkown
|
page readonly
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
188FF190000
|
unkown
|
page readonly
|
|
|
|
7FF54FFF3000
|
unkown
|
page readonly
|
|
|
|
7FF55E61F000
|
unkown
|
page readonly
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
AA7457D000
|
unkown
|
page read and write
|
|
|
|
15201CC0000
|
unkown
|
page read and write
|
|
|
|
7FF52366C000
|
unkown
|
page readonly
|
|
|
|
AE177E000
|
unkown
|
page read and write
|
|
|
|
980447E000
|
unkown
|
page read and write
|
|
|
|
7FF5C3799000
|
unkown
|
page readonly
|
|
|
|
2DC81980000
|
unkown
|
page readonly
|
|
|
|
15203CE3000
|
unkown
|
page read and write
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
7FF5C37CC000
|
unkown
|
page readonly
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
5E2187B000
|
unkown
|
page read and write
|
|
|
|
7FF7518A1000
|
unkown image
|
page execute read
|
|
|
|
7FF751938000
|
unkown image
|
page readonly
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
7FF547CF5000
|
unkown
|
page readonly
|
|
|
|
1F31E84F000
|
unkown
|
page read and write
|
|
|
|
2E10000
|
unkown
|
page readonly
|
|
|
|
F1CD077000
|
unkown
|
page read and write
|
|
|
|
13FBA940000
|
unkown
|
page read and write
|
|
|
|
DEA000
|
unkown
|
page read and write
|
|
|
|
7FF550034000
|
unkown
|
page readonly
|
|
|
|
7FF55E625000
|
unkown
|
page readonly
|
|
|
|
7FF59F0EC000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
7FF5F03FF000
|
unkown
|
page readonly
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
188FF1F0000
|
unkown
|
page readonly
|
|
|
|
B6E000
|
unkown
|
page read and write
|
|
|
|
2DC82802000
|
unkown
|
page read and write
|
|
|
|
AA7447F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB2C1000
|
unkown
|
page readonly
|
|
|
|
7FF54CAEC000
|
unkown
|
page readonly
|
|
|
|
2DC81AA6000
|
unkown
|
page read and write
|
|
|
|
E05000
|
unkown
|
page read and write
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
2DC81A3C000
|
unkown
|
page read and write
|
|
|
|
46B9000
|
unkown
|
page read and write
|
|
|
|
15201C6E000
|
unkown
|
page read and write
|
|
|
|
100BB000
|
unkown image
|
page write copy
|
|
|
|
15203E22000
|
unkown
|
page read and write
|
|
|
|
7FF574E5E000
|
unkown
|
page readonly
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
15201C5F000
|
unkown
|
page read and write
|
|
|
|
14A0000
|
heap private
|
page read and write
|
|
|
|
26FF54C1000
|
heap default
|
page read and write
|
|
|
|
550000
|
unkown
|
page readonly
|
|
|
|
7FF503936000
|
unkown
|
page readonly
|
|
|
|
15201B70000
|
unkown
|
page write copy
|
|
|
|
13FBA4D0000
|
unkown
|
page readonly
|
|
|
|
D60000
|
heap default
|
page read and write
|
|
|
|
7FF5AB9D5000
|
unkown
|
page readonly
|
|
|
|
7FF5F0408000
|
unkown
|
page readonly
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
1F31F540000
|
unkown
|
page readonly
|
|
|
|
4B0000
|
heap default
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
7FF5E376B000
|
unkown
|
page readonly
|
|
|
|
15206110000
|
unkown
|
page read and write
|
|
|
|
7FF550163000
|
unkown
|
page readonly
|
|
|
|
7FF550045000
|
unkown
|
page readonly
|
|
|
|
46CF000
|
unkown
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
7FF5C37D2000
|
unkown
|
page readonly
|
|
|
|
2B29D7E000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
188F99D0000
|
unkown
|
page read and write
|
|
|
|
7FF5C37F4000
|
unkown
|
page readonly
|
|
|
|
2502000
|
unkown
|
page read and write
|
|
|
|
7FF5D3311000
|
unkown
|
page readonly
|
|
|
|
DBB6B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5234C5000
|
unkown
|
page readonly
|
|
|
|
D5E000
|
unkown
|
page read and write
|
|
|
|
1FA51D02000
|
unkown
|
page read and write
|
|
|
|
2989000
|
unkown
|
page read and write
|
|
|
|
1E057240000
|
unkown
|
page readonly
|
|
|
|
7FF50374B000
|
unkown
|
page readonly
|
|
|
|
6EE000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
1D52FA29000
|
unkown
|
page read and write
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F31000
|
unkown
|
page readonly
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
13FBA302000
|
unkown
|
page read and write
|
|
|
|
1AEEF502000
|
unkown
|
page read and write
|
|
|
|
4DB000
|
heap default
|
page read and write
|
|
|
|
E38000
|
unkown
|
page read and write
|
|
|
|
5E2197D000
|
unkown
|
page read and write
|
|
|
|
7FF55006F000
|
unkown
|
page readonly
|
|
|
|
188F9A9E000
|
unkown
|
page read and write
|
|
|
|
7FF5235FF000
|
unkown
|
page readonly
|
|
|
|
4632000
|
unkown
|
page read and write
|
|
|
|
7FF5039B3000
|
unkown
|
page readonly
|
|
|
|
7FF5750B6000
|
unkown
|
page readonly
|
|
|
|
16B96200000
|
unkown
|
page read and write
|
|
|
|
2F10000
|
unkown
|
page execute and read and write
|
|
|
|
7FF59F07F000
|
unkown
|
page readonly
|
|
|
|
7FF5AB58C000
|
unkown
|
page readonly
|
|
|
|
6D5C0000
|
unkown image
|
page readonly
|
|
|
|
2EEE000
|
unkown
|
page readonly
|
|
|
|
2A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5006D2000
|
unkown
|
page readonly
|
|
|
|
7FF55E691000
|
unkown
|
page readonly
|
|
|
|
15205042000
|
unkown
|
page read and write
|
|
|
|
49FD000
|
unkown
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
15203C36000
|
unkown
|
page read and write
|
|
|
|
26FF54DD000
|
heap default
|
page read and write
|
|
|
|
7FF5E3846000
|
unkown
|
page readonly
|
|
|
|
7FF5E3713000
|
unkown
|
page readonly
|
|
|
|
7FF5C3595000
|
unkown
|
page readonly
|
|
|
|
7FF5AB830000
|
unkown
|
page readonly
|
|
|
|
15201A30000
|
heap private
|
page read and write
|
|
|
|
7FF57504D000
|
unkown
|
page readonly
|
|
|
|
188FA930000
|
unkown
|
page read and write
|
|
|
|
7FF574E64000
|
unkown
|
page readonly
|
|
|
|
7FF751923000
|
unkown image
|
page readonly
|
|
|
|
15203D02000
|
unkown
|
page read and write
|
|
|
|
7FF5750E1000
|
unkown
|
page readonly
|
|
|
|
2DC81AA9000
|
unkown
|
page read and write
|
|
|
|
2E45000
|
unkown
|
page readonly
|
|
|
|
ECE000
|
unkown
|
page read and write
|
|
|
|
57C000
|
unkown
|
page read and write
|
|
|
|
7FF5006D9000
|
unkown
|
page readonly
|
|
|
|
2BF39F79000
|
unkown
|
page read and write
|
|
|
|
7FF500699000
|
unkown
|
page readonly
|
|
|
|
1E85A861000
|
unkown
|
page read and write
|
|
|
|
26FF555C000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
15203C02000
|
unkown
|
page read and write
|
|
|
|
21F000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
B9F75CB000
|
unkown
|
page read and write
|
|
|
|
A30000
|
unkown
|
page readonly
|
|
|
|
2DC8235E000
|
unkown
|
page read and write
|
|
|
|
26FF54B2000
|
unkown
|
page read and write
|
|
|
|
15204410000
|
unkown
|
page read and write
|
|
|
|
E05000
|
unkown
|
page read and write
|
|
|
|
7F8E9000
|
unkown
|
page read and write
|
|
|
|
7FF523647000
|
unkown
|
page readonly
|
|
|
|
46FA000
|
unkown
|
page read and write
|
|
|
|
5E21C7F000
|
unkown
|
page read and write
|
|
|
|
7FF547AF0000
|
unkown
|
page readonly
|
|
|
|
7FF59F094000
|
unkown
|
page readonly
|
|
|
|
1E85A864000
|
unkown
|
page read and write
|
|
|
|
7FF500675000
|
unkown
|
page readonly
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8C9000
|
unkown
|
page readonly
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
2DC8233D000
|
unkown
|
page read and write
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
7FD68000
|
unkown
|
page read and write
|
|
|
|
15203CE1000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
7FF5AB960000
|
unkown
|
page readonly
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
2710000
|
heap private
|
page read and write
|
|
|
|
1FA52600000
|
unkown
|
page readonly
|
|
|
|
16B98120000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
7FF503890000
|
unkown
|
page readonly
|
|
|
|
367C000
|
unkown
|
page readonly
|
|
|
|
15205002000
|
unkown
|
page read and write
|
|
|
|
1E057428000
|
unkown
|
page read and write
|
|
|
|
4930000
|
unkown
|
page read and write
|
|
|
|
188FF29F000
|
unkown
|
page read and write
|
|
|
|
7FF575646000
|
unkown
|
page readonly
|
|
|
|
7FF5D32F0000
|
unkown
|
page readonly
|
|
|
|
7FF5F04F3000
|
unkown
|
page readonly
|
|
|
|
13FBA860000
|
unkown
|
page readonly
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
1E85A874000
|
unkown
|
page read and write
|
|
|
|
4315BFF000
|
unkown
|
page read and write
|
|
|
|
5E2000
|
unkown
|
page read and write
|
|
|
|
7FF575500000
|
unkown
|
page readonly
|
|
|
|
2B29E7F000
|
unkown
|
page read and write
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
7FF5A6226000
|
unkown
|
page readonly
|
|
|
|
2BF39F79000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC819F0000
|
unkown
|
page readonly
|
|
|
|
2F20000
|
heap private
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
E55000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown image
|
page readonly
|
|
|
|
2DC82347000
|
unkown
|
page read and write
|
|
|
|
7FF55005C000
|
unkown
|
page readonly
|
|
|
|
2DC82347000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
34D1000
|
unkown
|
page read and write
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
15201C8A000
|
unkown
|
page read and write
|
|
|
|
7FF54CA11000
|
unkown
|
page readonly
|
|
|
|
2502000
|
unkown
|
page read and write
|
|
|
|
4639000
|
unkown
|
page read and write
|
|
|
|
7FF5D32C0000
|
unkown
|
page readonly
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
7FF547D9C000
|
unkown
|
page readonly
|
|
|
|
7FF5F04D6000
|
unkown
|
page readonly
|
|
|
|
3AE2977000
|
unkown
|
page read and write
|
|
|
|
15201CEF000
|
unkown
|
page read and write
|
|
|
|
57C000
|
unkown
|
page read and write
|
|
|
|
12C3000
|
unkown
|
page read and write
|
|
|
|
7FF5ADAC5000
|
unkown
|
page readonly
|
|
|
|
1BE68869000
|
unkown
|
page read and write
|
|
|
|
5B04000
|
unkown
|
page read and write
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
7FF500691000
|
unkown
|
page readonly
|
|
|
|
7FF5C352F000
|
unkown
|
page readonly
|
|
|
|
15203CF2000
|
unkown
|
page read and write
|
|
|
|
5AB9000
|
unkown
|
page read and write
|
|
|
|
2344000
|
heap private
|
page read and write
|
|
|
|
15203C1F000
|
unkown
|
page read and write
|
|
|
|
2C84000
|
unkown
|
page readonly
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
7FF575632000
|
unkown
|
page readonly
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
C50000
|
unkown
|
page readonly
|
|
|
|
7FF5D32DC000
|
unkown
|
page readonly
|
|
|
|
188FAA10000
|
unkown
|
page read and write
|
|
|
|
7FF575043000
|
unkown
|
page readonly
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
2DC81A4E000
|
unkown
|
page read and write
|
|
|
|
15201D15000
|
unkown
|
page read and write
|
|
|
|
2EDA000
|
unkown
|
page readonly
|
|
|
|
95BF28B000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FF59F07B000
|
unkown
|
page readonly
|
|
|
|
7FF5500D9000
|
unkown
|
page readonly
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA75000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
2DC81A29000
|
unkown
|
page read and write
|
|
|
|
1AEEF3F0000
|
unkown
|
page read and write
|
|
|
|
585000
|
heap default
|
page read and write
|
|
|
|
1AEEF4C7000
|
unkown
|
page read and write
|
|
|
|
15203CE5000
|
unkown
|
page read and write
|
|
|
|
10D0000
|
heap private
|
page read and write
|
|
|
|
26FF54DA000
|
unkown
|
page read and write
|
|
|
|
1AEEF9B0000
|
unkown
|
page readonly
|
|
|
|
26FF5543000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown
|
page readonly
|
|
|
|
7FF5233BF000
|
unkown
|
page readonly
|
|
|
|
1F31E855000
|
unkown
|
page read and write
|
|
|
|
7FF547DCD000
|
unkown
|
page readonly
|
|
|
|
7FF751923000
|
unkown image
|
page readonly
|
|
|
|
7FF5E384C000
|
unkown
|
page readonly
|
|
|
|
58D000
|
unkown
|
page read and write
|
|
|
|
DD4000
|
unkown
|
page read and write
|
|
|
|
845000
|
unkown image
|
page read and write
|
|
|
|
57F000
|
unkown
|
page read and write
|
|
|
|
7FF5AD500000
|
unkown
|
page readonly
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
D00000
|
unkown
|
page readonly
|
|
|
|
1E85A85F000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
1E85AAD0000
|
unkown
|
page readonly
|
|
|
|
7FF5038E1000
|
unkown
|
page readonly
|
|
|
|
14E76402000
|
unkown
|
page read and write
|
|
|
|
2995EAA0000
|
unkown
|
page readonly
|
|
|
|
15203CF7000
|
unkown
|
page read and write
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
2995EC5B000
|
unkown
|
page read and write
|
|
|
|
2DC81A59000
|
unkown
|
page read and write
|
|
|
|
54AF000
|
stack
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
AA7417B000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
2E3F000
|
unkown
|
page readonly
|
|
|
|
7FF547B01000
|
unkown
|
page readonly
|
|
|
|
26FF54DA000
|
unkown
|
page read and write
|
|
|
|
15203C34000
|
unkown
|
page read and write
|
|
|
|
16B96202000
|
unkown
|
page read and write
|
|
|
|
518000
|
heap default
|
page read and write
|
|
|
|
15205102000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
5B61000
|
unkown
|
page read and write
|
|
|
|
2BF39EC0000
|
unkown
|
page readonly
|
|
|
|
280000
|
unkown
|
page read and write
|
|
|
|
5B2F000
|
unkown
|
page read and write
|
|
|
|
85F000
|
unkown image
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
7FF547D3A000
|
unkown
|
page readonly
|
|
|
|
2995ED02000
|
unkown
|
page read and write
|
|
|
|
1E85A857000
|
unkown
|
page read and write
|
|
|
|
7FF54CA6C000
|
unkown
|
page readonly
|
|
|
|
34C0000
|
heap private
|
page read and write
|
|
|
|
100BD000
|
unkown image
|
page write copy
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9A0000
|
unkown
|
page readonly
|
|
|
|
15205005000
|
unkown
|
page read and write
|
|
|
|
2DC82861000
|
unkown
|
page read and write
|
|
|
|
7FF5D32C9000
|
unkown
|
page readonly
|
|
|
|
7FF5A61A8000
|
unkown
|
page readonly
|
|
|
|
7FF5006A1000
|
unkown
|
page readonly
|
|
|
|
26FF54C5000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
15203C39000
|
unkown
|
page read and write
|
|
|
|
7FF5AD8D1000
|
unkown
|
page readonly
|
|
|
|
2DC81A13000
|
unkown
|
page read and write
|
|
|
|
2995EA30000
|
heap private
|
page read and write
|
|
|
|
7FF55E630000
|
unkown
|
page readonly
|
|
|
|
15203C80000
|
unkown
|
page read and write
|
|
|
|
152039F0000
|
heap private
|
page read and write
|
|
|
|
26FF54E4000
|
heap default
|
page read and write
|
|
|
|
AA7497F000
|
unkown
|
page read and write
|
|
|
|
1E85A86D000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
15205102000
|
unkown
|
page read and write
|
|
|
|
2BF3A480000
|
unkown
|
page readonly
|
|
|
|
96000
|
unkown
|
page read and write
|
|
|
|
14E76502000
|
unkown
|
page read and write
|
|
|
|
7FF547F06000
|
unkown
|
page readonly
|
|
|
|
152039E0000
|
unkown
|
page readonly
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
7FDF0000
|
unkown
|
page read and write
|
|
|
|
5AC7000
|
unkown
|
page read and write
|
|
|
|
2E14000
|
unkown
|
page readonly
|
|
|
|
DED000
|
unkown
|
page read and write
|
|
|
|
197000
|
stack
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page read and write
|
|
|
|
7FF5C37E6000
|
unkown
|
page readonly
|
|
|
|
1E85A845000
|
unkown
|
page read and write
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
B9F7B7F000
|
unkown
|
page read and write
|
|
|
|
2DC81B02000
|
unkown
|
page read and write
|
|
|
|
7FF5A619C000
|
unkown
|
page readonly
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
5B44000
|
unkown
|
page read and write
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
7FF5236D6000
|
unkown
|
page readonly
|
|
|
|
7FF59F165000
|
unkown
|
page readonly
|
|
|
|
2DC82398000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
1F31E770000
|
unkown
|
page readonly
|
|
|
|
596000
|
unkown
|
page read and write
|
|
|
|
7FF575119000
|
unkown
|
page readonly
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
5DA000
|
unkown
|
page read and write
|
|
|
|
15203D02000
|
unkown
|
page read and write
|
|
|
|
5E7000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA66000
|
unkown
|
page readonly
|
|
|
|
26FF54E4000
|
unkown
|
page read and write
|
|
|
|
DC4000
|
unkown
|
page read and write
|
|
|
|
7F8D0000
|
unkown
|
page read and write
|
|
|
|
188FEFFE000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
591000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
1E85A800000
|
unkown
|
page read and write
|
|
|
|
7FF50388C000
|
unkown
|
page readonly
|
|
|
|
1E85A868000
|
unkown
|
page read and write
|
|
|
|
7FF5AB708000
|
unkown
|
page readonly
|
|
|
|
7FF59F040000
|
unkown
|
page readonly
|
|
|
|
2A14000
|
unkown
|
page read and write
|
|
|
|
12C3000
|
unkown
|
page read and write
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
15204510000
|
unkown
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
15201CDA000
|
unkown
|
page read and write
|
|
|
|
6100000
|
unkown
|
page read and write
|
|
|
|
7FF5AB970000
|
unkown
|
page readonly
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
7FF5755D8000
|
unkown
|
page readonly
|
|
|
|
7FF5AB62A000
|
unkown
|
page readonly
|
|
|
|
E5E000
|
unkown
|
page read and write
|
|
|
|
5783000
|
heap private
|
page read and write
|
|
|
|
7FF5755CB000
|
unkown
|
page readonly
|
|
|
|
188FEEA0000
|
unkown
|
page readonly
|
|
|
|
7FF523676000
|
unkown
|
page readonly
|
|
|
|
1FA51E00000
|
unkown
|
page readonly
|
|
|
|
29E2000
|
unkown
|
page read and write
|
|
|
|
52C000
|
heap default
|
page read and write
|
|
|
|
7FF5ADBA3000
|
unkown
|
page readonly
|
|
|
|
4631000
|
unkown
|
page read and write
|
|
|
|
14E76456000
|
unkown
|
page read and write
|
|
|
|
1BE68869000
|
unkown
|
page read and write
|
|
|
|
7FF5AB7E2000
|
unkown
|
page readonly
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
920000
|
heap private
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
223000
|
unkown
|
page read and write
|
|
|
|
E03000
|
unkown image
|
page write copy
|
|
|
|
F1CD0FF000
|
unkown
|
page read and write
|
|
|
|
1E85A87E000
|
unkown
|
page read and write
|
|
|
|
2B29C7B000
|
unkown
|
page read and write
|
|
|
|
2DC82130000
|
unkown
|
page write copy
|
|
|
|
188F9A8C000
|
unkown
|
page read and write
|
|
|
|
7FF5006E6000
|
unkown
|
page readonly
|
|
|
|
FF6C19C000
|
unkown
|
page read and write
|
|
|
|
1FA51C3C000
|
unkown
|
page read and write
|
|
|
|
15203CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5AB931000
|
unkown
|
page readonly
|
|
|
|
FF6C67E000
|
unkown
|
page read and write
|
|
|
|
188FF2A3000
|
unkown
|
page read and write
|
|
|
|
2290000
|
heap private
|
page read and write
|
|
|
|
100A5000
|
unkown image
|
page readonly
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
7FF5750D9000
|
unkown
|
page readonly
|
|
|
|
15203CFD000
|
unkown
|
page read and write
|
|
|
|
7FF54CA7C000
|
unkown
|
page readonly
|
|
|
|
7FF5F04F3000
|
unkown
|
page readonly
|
|
|
|
26FF5330000
|
unkown
|
page readonly
|
|
|
|
15203E3B000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
2700C841000
|
unkown
|
page read and write
|
|
|
|
14E763F0000
|
unkown
|
page readonly
|
|
|
|
2BF3BAEF000
|
heap private
|
page read and write
|
|
|
|
5F30000
|
unkown
|
page read and write
|
|
|
|
7FF5036A4000
|
unkown
|
page readonly
|
|
|
|
7FF55E634000
|
unkown
|
page readonly
|
|
|
|
7FF523608000
|
unkown
|
page readonly
|
|
|
|
578000
|
unkown
|
page read and write
|
|
|
|
5B61000
|
unkown
|
page read and write
|
|
|
|
16E2A140000
|
unkown
|
page read and write
|
|
|
|
15201C00000
|
unkown
|
page read and write
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
heap private
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
7FF500763000
|
unkown
|
page readonly
|
|
|
|
7FF54CA31000
|
unkown
|
page readonly
|
|
|
|
15203CA8000
|
unkown
|
page read and write
|
|
|
|
E3C000
|
unkown
|
page read and write
|
|
|
|
7FF575654000
|
unkown
|
page readonly
|
|
|
|
2DC82854000
|
unkown
|
page read and write
|
|
|
|
5D343FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D3349000
|
unkown
|
page readonly
|
|
|
|
7FF5D32E5000
|
unkown
|
page readonly
|
|
|
|
7FF5037A1000
|
unkown
|
page readonly
|
|
|
|
1E85A83B000
|
unkown
|
page read and write
|
|
|
|
59B000
|
unkown
|
page read and write
|
|
|
|
7FF5E3675000
|
unkown
|
page readonly
|
|
|
|
E0D000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
E29000
|
unkown
|
page read and write
|
|
|
|
3AE317F000
|
unkown
|
page read and write
|
|
|
|
7FF5E37CC000
|
unkown
|
page readonly
|
|
|
|
1FA51C29000
|
unkown
|
page read and write
|
|
|
|
E2C000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown
|
page read and write
|
|
|
|
7FF500746000
|
unkown
|
page readonly
|
|
|
|
7FF5A61AF000
|
unkown
|
page readonly
|
|
|
|
7FF547E2F000
|
unkown
|
page readonly
|
|
|
|
431657A000
|
unkown
|
page read and write
|
|
|
|
4A0B000
|
unkown
|
page read and write
|
|
|
|
5A30000
|
unkown
|
page readonly
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
1E85A83A000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC82343000
|
unkown
|
page read and write
|
|
|
|
16E29F84000
|
unkown
|
page read and write
|
|
|
|
13FBA213000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
15201CE7000
|
unkown
|
page read and write
|
|
|
|
7FF5F036C000
|
unkown
|
page readonly
|
|
|
|
1D52FB02000
|
unkown
|
page read and write
|
|
|
|
13FBA970000
|
unkown
|
page read and write
|
|
|
|
7FF5E3430000
|
unkown
|
page readonly
|
|
|
|
AA7487F000
|
unkown
|
page read and write
|
|
|
|
4910000
|
unkown
|
page read and write
|
|
|
|
7FF5D32F4000
|
unkown
|
page readonly
|
|
|
|
7FF5003E8000
|
unkown
|
page readonly
|
|
|
|
26FF5543000
|
heap default
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
1BE6886E000
|
unkown
|
page read and write
|
|
|
|
7FF5751A3000
|
unkown
|
page readonly
|
|
|
|
188FF1A0000
|
unkown
|
page readonly
|
|
|
|
7FF5F0405000
|
unkown
|
page readonly
|
|
|
|
15201C57000
|
unkown
|
page read and write
|
|
|
|
43163FB000
|
unkown
|
page read and write
|
|
|
|
4681000
|
unkown
|
page read and write
|
|
|
|
1F31E884000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
heap private
|
page read and write
|
|
|
|
13FBA25C000
|
unkown
|
page read and write
|
|
|
|
7FF574D93000
|
unkown
|
page readonly
|
|
|
|
5E2000
|
unkown
|
page read and write
|
|
|
|
1BE6A1A0000
|
unkown
|
page read and write
|
|
|
|
7FF5751C6000
|
unkown
|
page readonly
|
|
|
|
7FF50351B000
|
unkown
|
page readonly
|
|
|
|
7FF500266000
|
unkown
|
page readonly
|
|
|
|
100BC000
|
unkown image
|
page read and write
|
|
|
|
2DC821A0000
|
unkown
|
page read and write
|
|
|
|
7FF4FFFA7000
|
unkown
|
page readonly
|
|
|
|
DBB667E000
|
unkown
|
page read and write
|
|
|
|
5B0B000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
469B000
|
unkown
|
page read and write
|
|
|
|
5B36000
|
unkown
|
page read and write
|
|
|
|
2DC81A00000
|
unkown
|
page read and write
|
|
|
|
7FF523614000
|
unkown
|
page readonly
|
|
|
|
7FF5C3713000
|
unkown
|
page readonly
|
|
|
|
CAA6FE000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FF5D33D3000
|
unkown
|
page readonly
|
|
|
|
5A7000
|
unkown
|
page read and write
|
|
|
|
5ADD000
|
unkown
|
page read and write
|
|
|
|
7FF523684000
|
unkown
|
page readonly
|
|
|
|
5D345FF000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page readonly
|
|
|
|
188FF0D0000
|
unkown
|
page readonly
|
|
|
|
4A50000
|
unkown
|
page read and write
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
1E85A87D000
|
unkown
|
page read and write
|
|
|
|
1F31E902000
|
unkown
|
page read and write
|
|
|
|
7FF5E352F000
|
unkown
|
page readonly
|
|
|
|
2DC82355000
|
unkown
|
page read and write
|
|
|
|
7FF54CA24000
|
unkown
|
page readonly
|
|
|
|
2E58000
|
unkown
|
page readonly
|
|
|
|
15203C89000
|
unkown
|
page read and write
|
|
|
|
15201D59000
|
unkown
|
page read and write
|
|
|
|
15203ED2000
|
unkown
|
page read and write
|
|
|
|
4315B79000
|
unkown
|
page read and write
|
|
|
|
2E36000
|
unkown
|
page readonly
|
|
|
|
2B29DF9000
|
unkown
|
page read and write
|
|
|
|
26FF54E6000
|
unkown
|
page read and write
|
|
|
|
54D000
|
unkown
|
page read and write
|
|
|
|
26FF54C1000
|
unkown
|
page read and write
|
|
|
|
7FF55E682000
|
unkown
|
page readonly
|
|
|
|
4FF000
|
unkown
|
page read and write
|
|
|
|
2DC82357000
|
unkown
|
page read and write
|
|
|
|
1FA51C13000
|
unkown
|
page read and write
|
|
|
|
2DC81A54000
|
unkown
|
page read and write
|
|
|
|
467A000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5F0414000
|
unkown
|
page readonly
|
|
|
|
7FF547E1B000
|
unkown
|
page readonly
|
|
|
|
E03000
|
unkown image
|
page read and write
|
|
|
|
15203ECD000
|
unkown
|
page read and write
|
|
|
|
980427E000
|
unkown
|
page read and write
|
|
|
|
7FF5AB658000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8E5000
|
unkown
|
page readonly
|
|
|
|
7FF5236F3000
|
unkown
|
page readonly
|
|
|
|
15201D7B000
|
unkown
|
page read and write
|
|
|
|
23D0000
|
heap private
|
page read and write
|
|
|
|
7FF5500D2000
|
unkown
|
page readonly
|
|
|
|
4315A7E000
|
unkown
|
page read and write
|
|
|
|
587000
|
unkown
|
page read and write
|
|
|
|
1E85A790000
|
heap default
|
page read and write
|
|
|
|
4681000
|
unkown
|
page read and write
|
|
|
|
15201C65000
|
unkown
|
page read and write
|
|
|
|
7FF5756C3000
|
unkown
|
page readonly
|
|
|
|
46EC000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5E9000
|
unkown
|
page readonly
|
|
|
|
7FF5ADC31000
|
unkown
|
page readonly
|
|
|
|
15203EDF000
|
unkown
|
page read and write
|
|
|
|
188FF29E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3863000
|
unkown
|
page readonly
|
|
|
|
16B97DC0000
|
unkown
|
page readonly
|
|
|
|
7FF503884000
|
unkown
|
page readonly
|
|
|
|
2DC82190000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5E343C000
|
unkown
|
page readonly
|
|
|
|
7FF500763000
|
unkown
|
page readonly
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
466C000
|
unkown
|
page read and write
|
|
|
|
2DC8232E000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
188FEED0000
|
unkown
|
page read and write
|
|
|
|
34D5000
|
unkown
|
page read and write
|
|
|
|
286000
|
unkown
|
page read and write
|
|
|
|
15204010000
|
unkown
|
page read and write
|
|
|
|
2DC82300000
|
unkown
|
page read and write
|
|
|
|
7FF5F03FB000
|
unkown
|
page readonly
|
|
|
|
5A7000
|
unkown
|
page read and write
|
|
|
|
16B96213000
|
unkown
|
page read and write
|
|
|
|
7FF5C3856000
|
unkown
|
page readonly
|
|
|
|
7FF547E2B000
|
unkown
|
page readonly
|
|
|
|
5B53000
|
unkown
|
page read and write
|
|
|
|
7FF5F02BF000
|
unkown
|
page readonly
|
|
|
|
5E216FC000
|
unkown
|
page read and write
|
|
|
|
4BA000
|
heap default
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
1E057230000
|
heap default
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
15203CFD000
|
unkown
|
page read and write
|
|
|
|
2BF3BCC0000
|
heap private
|
page read and write
|
|
|
|
2922000
|
unkown
|
page read and write
|
|
|
|
15201D3A000
|
unkown
|
page read and write
|
|
|
|
1FA51C4A000
|
unkown
|
page read and write
|
|
|
|
2DC82202000
|
unkown
|
page read and write
|
|
|
|
26FF54DD000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
7FF5F02BD000
|
unkown
|
page readonly
|
|
|
|
2BF3B980000
|
unkown
|
page readonly
|
|
|
|
2C8B000
|
unkown
|
page readonly
|
|
|
|
7FF547E9C000
|
unkown
|
page readonly
|
|
|
|
26FF54DA000
|
heap default
|
page read and write
|
|
|
|
15205000000
|
unkown
|
page read and write
|
|
|
|
1BE68829000
|
unkown
|
page read and write
|
|
|
|
26FF5590000
|
unkown
|
page readonly
|
|
|
|
AA7427F000
|
unkown
|
page read and write
|
|
|
|
464F000
|
unkown
|
page read and write
|
|
|
|
591D000
|
unkown
|
page read and write
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
7FF59F088000
|
unkown
|
page readonly
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
296B000
|
unkown
|
page read and write
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
34D2000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page readonly
|
|
|
|
46D6000
|
unkown
|
page read and write
|
|
|
|
188FF0C0000
|
unkown
|
page write copy
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
16B96313000
|
unkown
|
page read and write
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
7FF547C82000
|
unkown
|
page readonly
|
|
|
|
1AEEF300000
|
unkown
|
page readonly
|
|
|
|
15201CE2000
|
unkown
|
page read and write
|
|
|
|
13FBA1E0000
|
heap default
|
page read and write
|
|
|
|
7FF5F0330000
|
unkown
|
page readonly
|
|
|
|
4664000
|
unkown
|
page read and write
|
|
|
|
2955000
|
unkown
|
page read and write
|
|
|
|
28E3000
|
unkown
|
page read and write
|
|
|
|
2700C670000
|
heap private
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
15203CF6000
|
unkown
|
page read and write
|
|
|
|
DE5000
|
unkown
|
page read and write
|
|
|
|
2BF39ED5000
|
heap private
|
page read and write
|
|
|
|
B9F7C77000
|
unkown
|
page read and write
|
|
|
|
DB6000
|
unkown
|
page read and write
|
|
|
|
7FF5F0476000
|
unkown
|
page readonly
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
7FF5ADBA1000
|
unkown
|
page readonly
|
|
|
|
7FF575196000
|
unkown
|
page readonly
|
|
|
|
E0F000
|
unkown
|
page read and write
|
|
|
|
95BF30F000
|
unkown
|
page read and write
|
|
|
|
7FF5AF916000
|
unkown
|
page readonly
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
7FF55E641000
|
unkown
|
page readonly
|
|
|
|
7FF500680000
|
unkown
|
page readonly
|
|
|
|
2700C877000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
2EBF000
|
unkown
|
page readonly
|
|
|
|
1FA51C8D000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
E4F000
|
unkown
|
page read and write
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
1FA51D08000
|
unkown
|
page read and write
|
|
|
|
26FF54F0000
|
unkown
|
page read and write
|
|
|
|
16E2A1A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3846000
|
unkown
|
page readonly
|
|
|
|
2DC82320000
|
unkown
|
page read and write
|
|
|
|
2DC8233B000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9F2000
|
unkown
|
page readonly
|
|
|
|
14E76429000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
2390000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
26FF54DA000
|
unkown
|
page read and write
|
|
|
|
5AC0000
|
unkown
|
page read and write
|
|
|
|
2DC8237E000
|
unkown
|
page read and write
|
|
|
|
2DC8233D000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
7FF547DD1000
|
unkown
|
page readonly
|
|
|
|
24FB000
|
unkown
|
page read and write
|
|
|
|
B9F787D000
|
unkown
|
page read and write
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
15201C62000
|
unkown
|
page read and write
|
|
|
|
7FF5A61C6000
|
unkown
|
page readonly
|
|
|
|
7FF5755CF000
|
unkown
|
page readonly
|
|
|
|
188FF22F000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
14E763A0000
|
unkown
|
page write copy
|
|
|
|
2DC82345000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5F0445000
|
unkown
|
page readonly
|
|
|
|
15201CDF000
|
unkown
|
page read and write
|
|
|
|
4A15000
|
unkown
|
page read and write
|
|
|
|
15205042000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
2DC82400000
|
unkown
|
page readonly
|
|
|
|
1FA51C50000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page readonly
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
2DC82347000
|
unkown
|
page read and write
|
|
|
|
58D000
|
unkown
|
page read and write
|
|
|
|
26FF54CE000
|
unkown
|
page read and write
|
|
|
|
58F000
|
unkown
|
page read and write
|
|
|
|
2DC81AEA000
|
unkown
|
page read and write
|
|
|
|
2DC81AF7000
|
unkown
|
page read and write
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
7FF5750AF000
|
unkown
|
page readonly
|
|
|
|
7FF5006B5000
|
unkown
|
page readonly
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
7FF5D31EA000
|
unkown
|
page readonly
|
|
|
|
5A9A000
|
unkown
|
page read and write
|
|
|
|
16E29F70000
|
heap default
|
page read and write
|
|
|
|
2810000
|
unkown
|
page execute and read and write
|
|
|
|
15204310000
|
unkown
|
page read and write
|
|
|
|
5CF4000
|
heap private
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
5A4000
|
unkown
|
page read and write
|
|
|
|
2DC82357000
|
unkown
|
page read and write
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
1FA51C6F000
|
unkown
|
page read and write
|
|
|
|
7FF5AB8FC000
|
unkown
|
page readonly
|
|
|
|
5AB9000
|
unkown
|
page read and write
|
|
|
|
1E85A7B0000
|
unkown
|
page readonly
|
|
|
|
2995EC86000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
6D69F000
|
unkown image
|
page readonly
|
|
|
|
F1CCF78000
|
unkown
|
page read and write
|
|
|
|
7FF5AF13C000
|
unkown
|
page readonly
|
|
|
|
2EC4000
|
unkown
|
page readonly
|
|
|
|
7FF575047000
|
unkown
|
page readonly
|
|
|
|
7FF503996000
|
unkown
|
page readonly
|
|
|
|
26FF54E4000
|
unkown
|
page read and write
|
|
|
|
E12000
|
unkown
|
page read and write
|
|
|
|
188F9A89000
|
unkown
|
page read and write
|
|
|
|
5A7000
|
unkown
|
page read and write
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
2502000
|
unkown
|
page read and write
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
FF0000
|
unkown image
|
page readonly
|
|
|
|
24E7000
|
unkown
|
page read and write
|
|
|
|
5B36000
|
unkown
|
page read and write
|
|
|
|
15203A10000
|
unkown
|
page read and write
|
|
|
|
1E85A844000
|
unkown
|
page read and write
|
|
|
|
16B961D0000
|
heap default
|
page read and write
|
|
|
|
1AEEF4C9000
|
unkown
|
page read and write
|
|
|
|
2BF3B890000
|
unkown
|
page readonly
|
|
|
|
7FF5E367A000
|
unkown
|
page readonly
|
|
|
|
2DC81A70000
|
unkown
|
page read and write
|
|
|
|
24F4000
|
unkown
|
page read and write
|
|
|
|
7FF57510C000
|
unkown
|
page readonly
|
|
|
|
1F31F002000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
13FBAC00000
|
unkown
|
page read and write
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
7FF50065C000
|
unkown
|
page readonly
|
|
|
|
1E057434000
|
unkown
|
page read and write
|
|
|
|
152035A0000
|
unkown
|
page read and write
|
|
|
|
29AF000
|
unkown
|
page read and write
|
|
|
|
7FF5F00C9000
|
unkown
|
page readonly
|
|
|
|
7FF5D32DF000
|
unkown
|
page readonly
|
|
|
|
2DC82357000
|
unkown
|
page read and write
|
|
|
|
2DC82375000
|
unkown
|
page read and write
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
7FF5004C2000
|
unkown
|
page readonly
|
|
|
|
5AC7000
|
unkown
|
page read and write
|
|
|
|
15201D13000
|
unkown
|
page read and write
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
188FEFF0000
|
unkown
|
page read and write
|
|
|
|
2DC823CD000
|
unkown
|
page read and write
|
|
|
|
2DC82362000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
930000
|
unkown
|
page readonly
|
|
|
|
7FF5236F3000
|
unkown
|
page readonly
|
|
|
|
B9F7D7E000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
2BF39F10000
|
heap private
|
page read and write
|
|
|
|
7FF57518C000
|
unkown
|
page readonly
|
|
|
|
4631000
|
unkown
|
page read and write
|
|
|
|
11B2000
|
unkown
|
page read and write
|
|
|
|
2995EA90000
|
heap default
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
1F31E6F0000
|
heap private
|
page read and write
|
|
|
|
593000
|
unkown
|
page read and write
|
|
|
|
128A000
|
heap default
|
page read and write
|
|
|
|
54D000
|
unkown
|
page read and write
|
|
|
|
7FF575186000
|
unkown
|
page readonly
|
|
|
|
95BF7FF000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page readonly
|
|
|
|
26FF549B000
|
heap default
|
page read and write
|
|
|
|
7FF5AB895000
|
unkown
|
page readonly
|
|
|
|
7FF547E8C000
|
unkown
|
page readonly
|
|
|
|
26FF54CF000
|
unkown
|
page read and write
|
|
|
|
188FF100000
|
unkown
|
page read and write
|
|
|
|
1FA52260000
|
unkown
|
page readonly
|
|
|
|
15205002000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown image
|
page write copy
|
|
|
|
5B3D000
|
unkown
|
page read and write
|
|
|
|
5B04000
|
unkown
|
page read and write
|
|
|
|
1F31E750000
|
heap default
|
page read and write
|
|
|
|
7FF547E00000
|
unkown
|
page readonly
|
|
|
|
7FF523645000
|
unkown
|
page readonly
|
|
|
|
15203CE1000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown image
|
page readonly
|
|
|
|
7FF59F0F1000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB05000
|
unkown
|
page readonly
|
|
|
|
587000
|
unkown
|
page read and write
|
|
|
|
7FF575469000
|
unkown
|
page readonly
|
|
|
|
F1CC73E000
|
unkown
|
page read and write
|
|
|
|
7FF55E628000
|
unkown
|
page readonly
|
|
|
|
7FF5AB998000
|
unkown
|
page readonly
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
832000
|
unkown image
|
page read and write
|
|
|
|
24E0000
|
unkown
|
page read and write
|
|
|
|
E1E000
|
unkown
|
page read and write
|
|
|
|
2DC82180000
|
unkown
|
page readonly
|
|
|
|
7FF575348000
|
unkown
|
page readonly
|
|
|
|
1E057426000
|
unkown
|
page read and write
|
|
|
|
5A8000
|
unkown
|
page read and write
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
15201CDC000
|
unkown
|
page read and write
|
|
|
|
7FF5031C5000
|
unkown
|
page readonly
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
AD000
|
unkown
|
page read and write
|
|
|
|
7FF503679000
|
unkown
|
page readonly
|
|
|
|
2BF3A0F0000
|
unkown
|
page readonly
|
|
|
|
2B29CFE000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FF54FF51000
|
unkown
|
page readonly
|
|
|
|
AA7437D000
|
unkown
|
page read and write
|
|
|
|
43161FB000
|
unkown
|
page read and write
|
|
|
|
CAAAFE000
|
unkown
|
page read and write
|
|
|
|
2700C829000
|
unkown
|
page read and write
|
|
|
|
46DD000
|
unkown
|
page read and write
|
|
|
|
7FF57563C000
|
unkown
|
page readonly
|
|
|
|
1E05744D000
|
unkown
|
page read and write
|
|
|
|
2DC8236D000
|
unkown
|
page read and write
|
|
|
|
1BE6886E000
|
unkown
|
page read and write
|
|
|
|
5AE6000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
heap private
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
9803D9B000
|
unkown
|
page read and write
|
|
|
|
7FF5755D5000
|
unkown
|
page readonly
|
|
|
|
7FF5ADA25000
|
unkown
|
page readonly
|
|
|
|
7FF5ADC08000
|
unkown
|
page readonly
|
|
|
|
5D0000
|
heap default
|
page read and write
|
|
|
|
2995EC00000
|
unkown
|
page read and write
|
|
|
|
7FF59EE25000
|
unkown
|
page readonly
|
|
|
|
188FF400000
|
unkown
|
page readonly
|
|
|
|
7FF5A6229000
|
unkown
|
page readonly
|
|
|
|
26FF54A5000
|
unkown
|
page read and write
|
|
|
|
1BE6A2A0000
|
unkown
|
page readonly
|
|
|
|
7FF550075000
|
unkown
|
page readonly
|
|
|
|
DC9000
|
unkown
|
page read and write
|
|
|
|
1FA51B40000
|
unkown
|
page readonly
|
|
|
|
273000
|
unkown
|
page read and write
|
|
|
|
2700D200000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1E85B002000
|
unkown
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
7FF5AF993000
|
unkown
|
page readonly
|
|
|
|
2DC82373000
|
unkown
|
page read and write
|
|
|
|
46A3000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8B4000
|
unkown
|
page readonly
|
|
|
|
188FF460000
|
unkown
|
page readonly
|
|
|
|
7FF574EB9000
|
unkown
|
page readonly
|
|
|
|
E4A000
|
unkown
|
page read and write
|
|
|
|
15203AB0000
|
unkown
|
page readonly
|
|
|
|
7FF54CA20000
|
unkown
|
page readonly
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
7FF5D3364000
|
unkown
|
page readonly
|
|
|
|
53E000
|
unkown
|
page read and write
|
|
|
|
6D580000
|
unkown image
|
page readonly
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
4623000
|
unkown
|
page read and write
|
|
|
|
14E762C0000
|
heap default
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
7FF550146000
|
unkown
|
page readonly
|
|
|
|
1E85A7C0000
|
unkown
|
page read and write
|
|
|
|
188FA300000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
7FF54CA79000
|
unkown
|
page readonly
|
|
|
|
7FF5AB74F000
|
unkown
|
page readonly
|
|
|
|
5A3000
|
unkown
|
page read and write
|
|
|
|
2B29EFA000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
4673000
|
unkown
|
page read and write
|
|
|
|
5E2137C000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown image
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5ADC29000
|
unkown
|
page readonly
|
|
|
|
E20000
|
unkown
|
page read and write
|
|
|
|
15201CD1000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
2ED4000
|
unkown
|
page readonly
|
|
|
|
7FF57548F000
|
unkown
|
page readonly
|
|
|
|
188FF250000
|
unkown
|
page read and write
|
|
|
|
2BF3B9A0000
|
unkown
|
page readonly
|
|
|
|
23D9000
|
heap private
|
page read and write
|
|
|
|
7FF5AB7B5000
|
unkown
|
page readonly
|
|
|
|
1E85A85A000
|
unkown
|
page read and write
|
|
|
|
26FF54CE000
|
heap default
|
page read and write
|
|
|
|
5D1000
|
unkown
|
page read and write
|
|
|
|
7FF5A61C4000
|
unkown
|
page readonly
|
|
|
|
7FF5038A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D33C5000
|
unkown
|
page readonly
|
|
|
|
15203C02000
|
unkown
|
page read and write
|
|
|
|
7FF59F0DC000
|
unkown
|
page readonly
|
|
|
|
188FF150000
|
unkown
|
page read and write
|
|
|
|
F1CCE7E000
|
unkown
|
page read and write
|
|
|
|
7FF523610000
|
unkown
|
page readonly
|
|
|
|
13FBA400000
|
unkown
|
page readonly
|
|
|
|
1AEEF3E0000
|
unkown
|
page readonly
|
|
|
|
100C8000
|
unkown image
|
page readonly
|
|
|
|
4316AFB000
|
unkown
|
page read and write
|
|
|
|
7FF547E44000
|
unkown
|
page readonly
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
188FAB10000
|
unkown
|
page readonly
|
|
|
|
15201A90000
|
heap default
|
page read and write
|
|
|
|
7FF5038C5000
|
unkown
|
page readonly
|
|
|
|
1E057413000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
15201C5B000
|
unkown
|
page read and write
|
|
|
|
4DE000
|
unkown
|
page read and write
|
|
|
|
7FF54FF15000
|
unkown
|
page readonly
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
2DC82190000
|
unkown
|
page readonly
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
AE167B000
|
unkown
|
page read and write
|
|
|
|
7FF5D32E8000
|
unkown
|
page readonly
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
1BE6886A000
|
unkown
|
page read and write
|
|
|
|
2DC823CD000
|
unkown
|
page read and write
|
|
|
|
2DC82190000
|
unkown
|
page read and write
|
|
|
|
26FF5553000
|
unkown
|
page read and write
|
|
|
|
7FF547A40000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
15201C55000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
28E1000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
8E0000
|
heap private
|
page read and write
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
7FF59F156000
|
unkown
|
page readonly
|
|
|
|
15204010000
|
unkown
|
page read and write
|
|
|
|
7FF547E40000
|
unkown
|
page readonly
|
|
|
|
15203C1C000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
CAA57E000
|
unkown
|
page read and write
|
|
|
|
591000
|
unkown
|
page read and write
|
|
|
|
188FF150000
|
unkown
|
page readonly
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
188F9B02000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
2DC81AC4000
|
unkown
|
page read and write
|
|
|
|
1FA51C02000
|
unkown
|
page read and write
|
|
|
|
7FF54F911000
|
unkown
|
page readonly
|
|
|
|
15201D8A000
|
unkown
|
page read and write
|
|
|
|
7FF547A99000
|
unkown
|
page readonly
|
|
|
|
2DC823CD000
|
unkown
|
page read and write
|
|
|
|
7FF5AB97B000
|
unkown
|
page readonly
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
DBB697F000
|
unkown
|
page read and write
|
|
|
|
5AED000
|
unkown
|
page read and write
|
|
|
|
15201D5A000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
7FF5C37B5000
|
unkown
|
page readonly
|
|
|
|
DF6000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
heap default
|
page read and write
|
|
|
|
2360000
|
unkown
|
page read and write
|
|
|
|
DBB63CB000
|
unkown
|
page read and write
|
|
|
|
7FF547D95000
|
unkown
|
page readonly
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
7FF5ABA83000
|
unkown
|
page readonly
|
|
|
|
5780000
|
heap private
|
page read and write
|
|
|
|
2700CA00000
|
unkown
|
page readonly
|
|
|
|
7FF500684000
|
unkown
|
page readonly
|
|
|
|
15203A60000
|
unkown
|
page read and write
|
|
|
|
5B4C000
|
unkown
|
page read and write
|
|
|
|
188FA202000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
DC1000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
465D000
|
unkown
|
page read and write
|
|
|
|
7FF547DD3000
|
unkown
|
page readonly
|
|
|
|
CAA5FE000
|
unkown
|
page read and write
|
|
|
|
834000
|
unkown image
|
page write copy
|
|
|
|
7FF5C37DC000
|
unkown
|
page readonly
|
|
|
|
2DC81AB0000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
1FA52402000
|
unkown
|
page read and write
|
|
|
|
1FA51C4D000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
431637B000
|
unkown
|
page read and write
|
|
|
|
26FF54EF000
|
unkown
|
page read and write
|
|
|
|
E18000
|
unkown
|
page read and write
|
|
|
|
7FF5AB89A000
|
unkown
|
page readonly
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
1BE68913000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
5CFA000
|
heap private
|
page read and write
|
|
|
|
7FF55E713000
|
unkown
|
page readonly
|
|
|
|
13FBA180000
|
heap private
|
page read and write
|
|
|
|
7FF54F917000
|
unkown
|
page readonly
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
E16000
|
unkown
|
page read and write
|
|
|
|
289D000
|
unkown
|
page read and write
|
|
|
|
2DC82345000
|
unkown
|
page read and write
|
|
|
|
7FF5A62A3000
|
unkown
|
page readonly
|
|
|
|
3AE307F000
|
unkown
|
page read and write
|
|
|
|
E09000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
57A000
|
unkown
|
page read and write
|
|
|
|
7FF59EE8B000
|
unkown
|
page readonly
|
|
|
|
7FF503560000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
4B7000
|
unkown
|
page read and write
|
|
|
|
1BE68900000
|
unkown
|
page read and write
|
|
|
|
5AA1000
|
unkown
|
page read and write
|
|
|
|
7FF5D324C000
|
unkown
|
page readonly
|
|
|
|
431687A000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
643B97D000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown
|
page read and write
|
|
|
|
2700C802000
|
unkown
|
page read and write
|
|
|
|
2DC81AD1000
|
unkown
|
page read and write
|
|
|
|
7FF5EFD37000
|
unkown
|
page readonly
|
|
|
|
188FF262000
|
unkown
|
page read and write
|
|
|
|
15203C19000
|
unkown
|
page read and write
|
|
|
|
431677B000
|
unkown
|
page read and write
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
7FF7518A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5ABA06000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
1D52FC50000
|
unkown
|
page readonly
|
|
|
|
58C5000
|
unkown
|
page read and write
|
|
|
|
2DC82802000
|
unkown
|
page read and write
|
|
|
|
7FF54CA18000
|
unkown
|
page readonly
|
|
|
|
95BF77E000
|
unkown
|
page read and write
|
|
|
|
22A0000
|
heap private
|
page read and write
|
|
|
|
92F000
|
stack
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
98040FE000
|
unkown
|
page read and write
|
|
|
|
7FF5F04E6000
|
unkown
|
page readonly
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
15203A70000
|
unkown
|
page read and write
|
|
|
|
AFC000
|
unkown
|
page read and write
|
|
|
|
7FF5006CC000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
6200000
|
unkown
|
page read and write
|
|
|
|
7EF000
|
stack
|
page read and write
|
|
|
|
16E2A1B0000
|
unkown
|
page read and write
|
|
|
|
2DC82358000
|
unkown
|
page read and write
|
|
|
|
59B000
|
unkown
|
page read and write
|
|
|
|
7FF547EA6000
|
unkown
|
page readonly
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
15203C02000
|
unkown
|
page read and write
|
|
|
|
1D52F9E0000
|
unkown
|
page readonly
|
|
|
|
2995ED13000
|
unkown
|
page read and write
|
|
|
|
1F31E829000
|
unkown
|
page read and write
|
|
|
|
15203F00000
|
unkown
|
page read and write
|
|
|
|
7FF5755BC000
|
unkown
|
page readonly
|
|
|
|
1AEEF443000
|
unkown
|
page read and write
|
|
|
|
188F9A13000
|
unkown
|
page read and write
|
|
|
|
7FF5ADA5A000
|
unkown
|
page readonly
|
|
|
|
15206010000
|
unkown
|
page read and write
|
|
|
|
26FF54C9000
|
unkown
|
page read and write
|
|
|
|
15201D27000
|
unkown
|
page read and write
|
|
|
|
15201CA3000
|
unkown
|
page read and write
|
|
|
|
3AE2FFF000
|
unkown
|
page read and write
|
|
|
|
CAA97D000
|
unkown
|
page read and write
|
|
|
|
15203C7D000
|
unkown
|
page read and write
|
|
|
|
26FF54E0000
|
unkown
|
page read and write
|
|
|
|
7FF575601000
|
unkown
|
page readonly
|
|
|
|
43167FB000
|
unkown
|
page read and write
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
15201C79000
|
unkown
|
page read and write
|
|
|
|
58A000
|
unkown
|
page read and write
|
|
|
|
7FF5AB995000
|
unkown
|
page readonly
|
|
|
|
1F31E913000
|
unkown
|
page read and write
|
|
|
|
15201CCA000
|
unkown
|
page read and write
|
|
|
|
26FF5485000
|
heap private
|
page read and write
|
|
|
|
7FF503524000
|
unkown
|
page readonly
|
|
|
|
188FF243000
|
unkown
|
page read and write
|
|
|
|
24E4000
|
unkown
|
page read and write
|
|
|
|
7FF5ADCD6000
|
unkown
|
page readonly
|
|
|
|
980457F000
|
unkown
|
page read and write
|
|
|
|
188F9B25000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
E05000
|
unkown
|
page read and write
|
|
|
|
188F99B0000
|
unkown
|
page readonly
|
|
|
|
5D1000
|
unkown
|
page read and write
|
|
|
|
7FF5A61F7000
|
unkown
|
page readonly
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
2BF39E40000
|
unkown
|
page readonly
|
|
|
|
1E85A86F000
|
unkown
|
page read and write
|
|
|
|
7FF50321B000
|
unkown
|
page readonly
|
|
|
|
DE5000
|
unkown
|
page read and write
|
|
|
|
FF6C5FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AD9BF000
|
unkown
|
page readonly
|
|
|
|
4316EFB000
|
unkown
|
page read and write
|
|
|
|
2C45000
|
unkown
|
page readonly
|
|
|
|
1E057515000
|
unkown
|
page read and write
|
|
|
|
E54000
|
unkown
|
page read and write
|
|
|
|
7FF5C37A1000
|
unkown
|
page readonly
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
7FF50052D000
|
unkown
|
page readonly
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
F6C000
|
stack
|
page read and write
|
|
|
|
29DB000
|
unkown
|
page read and write
|
|
|
|
26FF5553000
|
unkown
|
page read and write
|
|
|
|
4315DFA000
|
unkown
|
page read and write
|
|
|
|
7FF751938000
|
unkown image
|
page readonly
|
|
|
|
24EE000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
5F31000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
unkown
|
page readonly
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
E5D000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
188FF130000
|
unkown
|
page read and write
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
16B96302000
|
unkown
|
page read and write
|
|
|
|
2DC82352000
|
unkown
|
page read and write
|
|
|
|
1E057502000
|
unkown
|
page read and write
|
|
|
|
7FF547DF4000
|
unkown
|
page readonly
|
|
|
|
22F000
|
unkown
|
page read and write
|
|
|
|
15203CA1000
|
unkown
|
page read and write
|
|
|
|
2995EC61000
|
unkown
|
page read and write
|
|
|
|
15203C49000
|
unkown
|
page read and write
|
|
|
|
22A8000
|
heap private
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
AE1AF7000
|
unkown
|
page read and write
|
|
|
|
841000
|
unkown image
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
15203CE1000
|
unkown
|
page read and write
|
|
|
|
28E8000
|
unkown
|
page read and write
|
|
|
|
16E2A160000
|
unkown
|
page read and write
|
|
|
|
28E4000
|
unkown
|
page read and write
|
|
|
|
29C5000
|
unkown
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
13FBA200000
|
unkown
|
page read and write
|
|
|
|
2DC821B0000
|
unkown
|
page readonly
|
|
|
|
15203CE6000
|
unkown
|
page read and write
|
|
|
|
2ECC000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
1F31E83C000
|
unkown
|
page read and write
|
|
|
|
7FF503905000
|
unkown
|
page readonly
|
|
|
|
5AC0000
|
unkown
|
page read and write
|
|
|
|
5ADD000
|
unkown
|
page read and write
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
2DC8238E000
|
unkown
|
page read and write
|
|
|
|
7FF5F032A000
|
unkown
|
page readonly
|
|
|
|
7FF5750B8000
|
unkown
|
page readonly
|
|
|
|
7FF5500DC000
|
unkown
|
page readonly
|
|
|
|
2F415FA000
|
unkown
|
page read and write
|
|
|
|
2995F402000
|
unkown
|
page read and write
|
|
|
|
188F9A00000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
224E000
|
unkown
|
page read and write
|
|
|
|
95BF67A000
|
unkown
|
page read and write
|
|
|
|
15201C9C000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
1E85A865000
|
unkown
|
page read and write
|
|
|
|
7FF5037C0000
|
unkown
|
page readonly
|
|
|
|
12B2000
|
unkown
|
page read and write
|
|
|
|
7FF50377D000
|
unkown
|
page readonly
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5D3325000
|
unkown
|
page readonly
|
|
|
|
7FF5E37E6000
|
unkown
|
page readonly
|
|
|
|
15201C3F000
|
unkown
|
page read and write
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
2F0B000
|
unkown
|
page readonly
|
|
|
|
15203E3B000
|
unkown
|
page read and write
|
|
|
|
15201D4C000
|
unkown
|
page read and write
|
|
|
|
26FF54A3000
|
unkown
|
page read and write
|
|
|
|
2E2D000
|
unkown
|
page readonly
|
|
|
|
1AEEF400000
|
unkown
|
page read and write
|
|
|
|
E15000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3132000
|
unkown
|
page readonly
|
|
|
|
15204510000
|
unkown
|
page read and write
|
|
|
|
1E85A84E000
|
unkown
|
page read and write
|
|
|
|
7FF547E59000
|
unkown
|
page readonly
|
|
|
|
2DC82354000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2995ED08000
|
unkown
|
page read and write
|
|
|
|
1AEEF4B8000
|
unkown
|
page read and write
|
|
|
|
2BF39F5C000
|
heap default
|
page read and write
|
|
|
|
7FF5F0469000
|
unkown
|
page readonly
|
|
|
|
5E6000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
2995EC13000
|
unkown
|
page read and write
|
|
|
|
1F31E760000
|
unkown
|
page readonly
|
|
|
|
FF6C6FC000
|
unkown
|
page read and write
|
|
|
|
16B96229000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
C3C517F000
|
unkown
|
page read and write
|
|
|
|
541000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
15203E12000
|
unkown
|
page read and write
|
|
|
|
2DC82343000
|
unkown
|
page read and write
|
|
|
|
DF8000
|
unkown
|
page read and write
|
|
|
|
4F1000
|
heap default
|
page read and write
|
|
|
|
2DC82373000
|
unkown
|
page read and write
|
|
|
|
7FF5E3856000
|
unkown
|
page readonly
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
7FF55E67C000
|
unkown
|
page readonly
|
|
|
|
18900000000
|
unkown
|
page read and write
|
|
|
|
7FF5E37B5000
|
unkown
|
page readonly
|
|
|
|
DBB68FB000
|
unkown
|
page read and write
|
|
|
|
5E6000
|
unkown
|
page read and write
|
|
|
|
1FA51D13000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F9D000
|
unkown
|
page readonly
|
|
|
|
28DE000
|
unkown
|
page read and write
|
|
|
|
26FF54C9000
|
unkown
|
page read and write
|
|
|
|
43162FB000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9B9000
|
unkown
|
page readonly
|
|
|
|
2DC82344000
|
unkown
|
page read and write
|
|
|
|
15203CDA000
|
unkown
|
page read and write
|
|
|
|
7FF54FE54000
|
unkown
|
page readonly
|
|
|
|
188FF2A1000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
1E057402000
|
unkown
|
page read and write
|
|
|
|
5E7000
|
unkown
|
page read and write
|
|
|
|
2DC819A0000
|
unkown
|
page read and write
|
|
|
|
294E000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
7FF50391B000
|
unkown
|
page readonly
|
|
|
|
188F9A3D000
|
unkown
|
page read and write
|
|
|
|
15201CDF000
|
unkown
|
page read and write
|
|
|
|
2F4167F000
|
unkown
|
page read and write
|
|
|
|
7FF5D30BC000
|
unkown
|
page readonly
|
|
|
|
7FF59EE29000
|
unkown
|
page readonly
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
1FA51B50000
|
unkown
|
page read and write
|
|
|
|
7FF547C0D000
|
unkown
|
page readonly
|
|
|
|
2DC81ACE000
|
unkown
|
page read and write
|
|
|
|
4316F7B000
|
unkown
|
page read and write
|
|
|
|
C7E000
|
stack
|
page read and write
|
|
|
|
CAA09C000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
1BE685B0000
|
heap private
|
page read and write
|
|
|
|
4316DFB000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page readonly
|
|
|
|
2DC8235E000
|
unkown
|
page read and write
|
|
|
|
7FF547DFC000
|
unkown
|
page readonly
|
|
|
|
5B2000
|
unkown
|
page read and write
|
|
|
|
46F3000
|
unkown
|
page read and write
|
|
|
|
E57000
|
unkown
|
page read and write
|
|
|
|
778A47B000
|
unkown
|
page read and write
|
|
|
|
188FA060000
|
unkown
|
page readonly
|
|
|
|
2DC82356000
|
unkown
|
page read and write
|
|
|
|
188FF0F8000
|
unkown
|
page write copy
|
|
|
|
7FF5750D1000
|
unkown
|
page readonly
|
|
|
|
7FF5C3863000
|
unkown
|
page readonly
|
|
|
|
188F9AFB000
|
unkown
|
page read and write
|
|
|
|
96E000
|
unkown
|
page read and write
|
|
|
|
7FF5755F9000
|
unkown
|
page readonly
|
|
|
|
2DC8236B000
|
unkown
|
page read and write
|
|
|
|
2B29F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5235FB000
|
unkown
|
page readonly
|
|
|
|
14E77DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5236E6000
|
unkown
|
page readonly
|
|
|
|
1E85A86A000
|
unkown
|
page read and write
|
|
|
|
7FF54FEC2000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
7FF523505000
|
unkown
|
page readonly
|
|
|
|
E6D000
|
stack
|
page read and write
|
|
|
|
7FF503895000
|
unkown
|
page readonly
|
|
|
|
188F9A93000
|
unkown
|
page read and write
|
|
|
|
F1CCB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3778000
|
unkown
|
page readonly
|
|
|
|
1AEEFB14000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
E17000
|
unkown
|
page read and write
|
|
|
|
15203CC0000
|
unkown
|
page read and write
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
5A4000
|
unkown
|
page read and write
|
|
|
|
188F9A70000
|
unkown
|
page read and write
|
|
|
|
7FF5EFD31000
|
unkown
|
page readonly
|
|
|
|
188FF0FC000
|
unkown
|
page readonly
|
|
|
|
2995EB90000
|
unkown
|
page read and write
|
|
|
|
643B87A000
|
unkown
|
page read and write
|
|
|
|
DC2000
|
unkown
|
page read and write
|
|
|
|
7FF55006B000
|
unkown
|
page readonly
|
|
|
|
DA1000
|
unkown image
|
page execute read
|
|
|
|
58B000
|
unkown
|
page read and write
|
|
|
|
E25000
|
unkown
|
page read and write
|
|
|
|
1BE68802000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
E05000
|
unkown
|
page read and write
|
|
|
|
15201AA0000
|
unkown
|
page readonly
|
|
|
|
467A000
|
unkown
|
page read and write
|
|
|
|
E15000
|
unkown
|
page read and write
|
|
|
|
1AEEF220000
|
heap default
|
page read and write
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
15203ED3000
|
unkown
|
page read and write
|
|
|
|
3310000
|
unkown
|
page readonly
|
|
|
|
7FF503874000
|
unkown
|
page readonly
|
|
|
|
7FF500339000
|
unkown
|
page readonly
|
|
|
|
7FF50392C000
|
unkown
|
page readonly
|
|
|
|
188FF020000
|
unkown
|
page read and write
|
|
|
|
2DC823A4000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
188FF0C4000
|
unkown
|
page readonly
|
|
|
|
465D000
|
unkown
|
page read and write
|
|
|
|
312F000
|
stack
|
page read and write
|
|
|
|
5AD6000
|
unkown
|
page read and write
|
|
|
|
4DB000
|
unkown
|
page read and write
|
|
|
|
4315FF9000
|
unkown
|
page read and write
|
|
|
|
16B96400000
|
unkown
|
page readonly
|
|
|
|
464F000
|
unkown
|
page read and write
|
|
|
|
AA7467E000
|
unkown
|
page read and write
|
|
|
|
7FF547730000
|
unkown
|
page readonly
|
|
|
|
2F416FF000
|
unkown
|
page read and write
|
|
|
|
5A8C000
|
unkown
|
page read and write
|
|
|
|
431627A000
|
unkown
|
page read and write
|
|
|
|
2DC81B13000
|
unkown
|
page read and write
|
|
|
|
7FF5AF6F2000
|
unkown
|
page readonly
|
|
|
|
4316E7D000
|
unkown
|
page read and write
|
|
|
|
5B5A000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
15204113000
|
unkown
|
page read and write
|
|
|
|
188FF249000
|
unkown
|
page read and write
|
|
|
|
4A34000
|
unkown
|
page read and write
|
|
|
|
14E76413000
|
unkown
|
page read and write
|
|
|
|
1E85A847000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
7FF57562C000
|
unkown
|
page readonly
|
|
|
|
1E85A85B000
|
unkown
|
page read and write
|
|
|
|
461B000
|
unkown
|
page read and write
|
|
|
|
1E85A730000
|
heap private
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
26FF54C7000
|
unkown
|
page read and write
|
|
|
|
7FF59F0A1000
|
unkown
|
page readonly
|
|
|
|
15201E00000
|
unkown
|
page readonly
|
|
|
|
26FF555C000
|
heap default
|
page read and write
|
|
|
|
7FF5C3070000
|
unkown
|
page readonly
|
|
|
|
7FF5E3780000
|
unkown
|
page readonly
|
|
|
|
7FF751921000
|
unkown image
|
page write copy
|
|
|
|
188FF140000
|
unkown
|
page read and write
|
|
|
|
2DC81C00000
|
unkown
|
page readonly
|
|
|
|
7FF5AB2C7000
|
unkown
|
page readonly
|
|
|
|
4315CFA000
|
unkown
|
page read and write
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
7FF503760000
|
unkown
|
page readonly
|
|
|
|
5B28000
|
unkown
|
page read and write
|
|
|
|
466C000
|
unkown
|
page read and write
|
|
|
|
2700C7D0000
|
unkown
|
page read and write
|
|
|
|
28D0000
|
heap private
|
page read and write
|
|
|
|
C30000
|
unkown
|
page readonly
|
|
|
|
26FF54A3000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC21000
|
unkown
|
page readonly
|
|
|
|
295C000
|
unkown
|
page read and write
|
|
|
|
580000
|
heap default
|
page read and write
|
|
|
|
58D000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
15203F02000
|
unkown
|
page read and write
|
|
|
|
28E6000
|
unkown
|
page read and write
|
|
|
|
1F31E869000
|
unkown
|
page read and write
|
|
|
|
1D52F900000
|
heap default
|
page read and write
|
|
|
|
7FF52365C000
|
unkown
|
page readonly
|
|
|
|
7FF5756C3000
|
unkown
|
page readonly
|
|
|
|
7FF5ADBFB000
|
unkown
|
page readonly
|
|
|
|
2995EC3C000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
188FF011000
|
unkown
|
page read and write
|
|
|
|
1FA51C55000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2350000
|
unkown
|
page readonly
|
|
|
|
2995F260000
|
unkown
|
page readonly
|
|
|
|
7FF5005A0000
|
unkown
|
page readonly
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
7FF5F045C000
|
unkown
|
page readonly
|
|
|
|
34D4000
|
unkown
|
page read and write
|
|
|
|
2DC82347000
|
unkown
|
page read and write
|
|
|
|
7FF5AB237000
|
unkown
|
page readonly
|
|
|
|
778A57A000
|
unkown
|
page read and write
|
|
|
|
2700C902000
|
unkown
|
page read and write
|
|
|
|
470000
|
unkown
|
page read and write
|
|
|
|
4681000
|
unkown
|
page read and write
|
|
|
|
7FF5E3791000
|
unkown
|
page readonly
|
|
|
|
5ACF000
|
unkown
|
page read and write
|
|
|
|
5E20F5B000
|
unkown
|
page read and write
|
|
|
|
43157DE000
|
unkown
|
page read and write
|
|
|
|
2DC823A8000
|
unkown
|
page read and write
|
|
|
|
2DC82345000
|
unkown
|
page read and write
|
|
|
|
7FF547C55000
|
unkown
|
page readonly
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
2BF39F00000
|
unkown
|
page readonly
|
|
|
|
58EC000
|
unkown
|
page read and write
|
|
|
|
95BF6FA000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page readonly
|
|
|
|
F1CD1F8000
|
unkown
|
page read and write
|
|
|
|
15201D4A000
|
unkown
|
page read and write
|
|
|
|
7FF5038C8000
|
unkown
|
page readonly
|
|
|
|
7FF5F0410000
|
unkown
|
page readonly
|
|
|
|
15203CCF000
|
unkown
|
page read and write
|
|
|
|
E0B000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown
|
page readonly
|
|
|
|
7FF55E667000
|
unkown
|
page readonly
|
|
|
|
7FF55E713000
|
unkown
|
page readonly
|
|
|
|
1380000
|
unkown
|
page readonly
|
|
|
|
2DC82802000
|
unkown
|
page read and write
|
|
|
|
3666000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown image
|
page read and write
|
|
|
|
7FF5AB9EC000
|
unkown
|
page readonly
|
|
|
|
188FA215000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
unkown
|
page read and write
|
|
|
|
2DC8236C000
|
unkown
|
page read and write
|
|
|
|
15201C9C000
|
unkown
|
page read and write
|
|
|
|
188FA318000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page readonly
|
|
|
|
26FF54B2000
|
unkown
|
page read and write
|
|
|
|
7FF5E3441000
|
unkown
|
page readonly
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
2995EC66000
|
unkown
|
page read and write
|
|
|
|
7FF550084000
|
unkown
|
page readonly
|
|
|
|
2F10000
|
unkown
|
page execute and read and write
|
|
|
|
2D38000
|
unkown
|
page readonly
|
|
|
|
16E2A1D0000
|
heap private
|
page read and write
|
|
|
|
43160FB000
|
unkown
|
page read and write
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
4664000
|
unkown
|
page read and write
|
|
|
|
1FA51A50000
|
heap default
|
page read and write
|
|
|
|
5B30000
|
unkown
|
page read and write
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
E57000
|
unkown
|
page read and write
|
|
|
|
57D000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9F9000
|
unkown
|
page readonly
|
|
|
|
46C8000
|
unkown
|
page read and write
|
|
|
|
15201C8A000
|
unkown
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
15201D3A000
|
unkown
|
page read and write
|
|
|
|
2C82000
|
unkown
|
page readonly
|
|
|
|
1E85A85C000
|
unkown
|
page read and write
|
|
|
|
DB1000
|
unkown
|
page read and write
|
|
|
|
15203CF6000
|
unkown
|
page read and write
|
|
|
|
12B3000
|
unkown
|
page read and write
|
|
|
|
26FF5450000
|
unkown
|
page readonly
|
|
|
|
2995EC5E000
|
unkown
|
page read and write
|
|
|
|
2DC81910000
|
heap private
|
page read and write
|
|
|
|
1AEEF310000
|
unkown
|
page readonly
|
|
|
|
AA74A7F000
|
unkown
|
page read and write
|
|
|
|
5B3D000
|
unkown
|
page read and write
|
|
|
|
29CC000
|
unkown
|
page read and write
|
|
|
|
4673000
|
unkown
|
page read and write
|
|
|
|
26FF54B4000
|
unkown
|
page read and write
|
|
|
|
26FF555C000
|
unkown
|
page read and write
|
|
|
|
2A38000
|
unkown
|
page read and write
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
1E85A85E000
|
unkown
|
page read and write
|
|
|
|
1E85A902000
|
unkown
|
page read and write
|
|
|
|
2DC81ADE000
|
unkown
|
page read and write
|
|
|
|
1FA51B30000
|
unkown
|
page readonly
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
15203A60000
|
unkown
|
page read and write
|
|
|
|
15201CC6000
|
unkown
|
page read and write
|
|
|
|
A6F000
|
stack
|
page read and write
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
7FF547E51000
|
unkown
|
page readonly
|
|
|
|
7FF503861000
|
unkown
|
page readonly
|
|
|
|
15204010000
|
unkown
|
page read and write
|
|
|
|
7FF522F00000
|
unkown
|
page readonly
|
|
|
|
2DC8233B000
|
unkown
|
page read and write
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
4316C7B000
|
unkown
|
page read and write
|
|
|
|
188F9B13000
|
unkown
|
page read and write
|
|
|
|
28E5000
|
unkown
|
page read and write
|
|
|
|
7DE000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page readonly
|
|
|
|
2DC82190000
|
unkown
|
page read and write
|
|
|
|
6000000
|
unkown
|
page read and write
|
|
|
|
D6A000
|
heap default
|
page read and write
|
|
|
|
1AEEF413000
|
unkown
|
page read and write
|
|
|
|
1F31E869000
|
unkown
|
page read and write
|
|
|
|
188FF222000
|
unkown
|
page read and write
|
|
|
|
27D000
|
unkown
|
page read and write
|
|
|
|
5BD000
|
unkown
|
page read and write
|
|
|
|
1AEEF513000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
E46000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
B70000
|
heap default
|
page read and write
|
|
|
|
7FF55E699000
|
unkown
|
page readonly
|
|
|
|
7FF5C3791000
|
unkown
|
page readonly
|
|
|
|
188F9A8E000
|
unkown
|
page read and write
|
|
|
|
7FF5ADCE6000
|
unkown
|
page readonly
|
|
|
|
1AEEF46B000
|
unkown
|
page read and write
|
|
|
|
DBB66FE000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
26FF54D4000
|
unkown
|
page read and write
|
|
|
|
7FF523629000
|
unkown
|
page readonly
|
|
|
|
431697B000
|
unkown
|
page read and write
|
|
|
|
1D5313F0000
|
unkown
|
page read and write
|
|
|
|
15201D39000
|
unkown
|
page read and write
|
|
|
|
188F9A57000
|
unkown
|
page read and write
|
|
|
|
1BE686F0000
|
unkown
|
page write copy
|
|
|
|
7FF547C4F000
|
unkown
|
page readonly
|
|
|
|
2DC82352000
|
unkown
|
page read and write
|
|
|
|
E0B000
|
unkown
|
page read and write
|
|
|
|
2E6B000
|
unkown
|
page readonly
|
|
|
|
5E2000
|
unkown
|
page read and write
|
|
|
|
15205042000
|
unkown
|
page read and write
|
|
|
|
1E85A875000
|
unkown
|
page read and write
|
|
|
|
302E000
|
stack
|
page read and write
|
|
|
|
26FF54BB000
|
unkown
|
page read and write
|
|
|
|
105F000
|
stack
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9C1000
|
unkown
|
page readonly
|
|
|
|
15203A60000
|
unkown
|
page read and write
|
|
|
|
7FF5036AF000
|
unkown
|
page readonly
|
|
|
|
15204010000
|
unkown
|
page read and write
|
|
|
|
29BE000
|
unkown
|
page read and write
|
|
|
|
EAE000
|
unkown
|
page read and write
|
|
|
|
1E85A862000
|
unkown
|
page read and write
|
|
|
|
15203CEF000
|
unkown
|
page read and write
|
|
|
|
E4A000
|
unkown
|
page read and write
|
|
|
|
188FF150000
|
unkown
|
page read and write
|
|
|
|
14E7643F000
|
unkown
|
page read and write
|
|
|
|
26FF54C9000
|
heap default
|
page read and write
|
|
|
|
2EF2000
|
unkown
|
page readonly
|
|
|
|
7FF547F23000
|
unkown
|
page readonly
|
|
|
|
188FF1D0000
|
unkown
|
page readonly
|
|
|
|
1BE6886A000
|
unkown
|
page read and write
|
|
|
|
F70000
|
unkown image
|
page readonly
|
|
|
|
188F9A79000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
2700D002000
|
unkown
|
page read and write
|
|
|
|
5AA9000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown image
|
page execute read
|
|
|
|
F1CD2FB000
|
unkown
|
page read and write
|
|
|
|
6D581000
|
unkown image
|
page execute read
|
|
|
|
5B20000
|
heap private
|
page read and write
|
|
|
|
2E5000
|
unkown
|
page read and write
|
|
|
|
15203CFD000
|
unkown
|
page read and write
|
|
|
|
5D1000
|
unkown
|
page read and write
|
|
|
|
291A000
|
unkown
|
page read and write
|
|
|
|
CAAA7D000
|
unkown
|
page read and write
|
|
|
|
188FEEF0000
|
unkown
|
page read and write
|
|
|
|
2995EB80000
|
unkown
|
page readonly
|
|
|
|
2DC8234D000
|
unkown
|
page read and write
|
|
|
|
15201CE3000
|
unkown
|
page read and write
|
|
|
|
52D0000
|
unkown
|
page read and write
|
|
|
|
7FF5500F4000
|
unkown
|
page readonly
|
|
|
|
2330000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC69000
|
unkown
|
page readonly
|
|
|
|
7FF547F15000
|
unkown
|
page readonly
|
|
|
|
12C3000
|
heap default
|
page read and write
|
|
|
|
1D52F8A0000
|
heap private
|
page read and write
|
|
|
|
1F31E780000
|
unkown
|
page read and write
|
|
|
|
2750000
|
heap private
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
F1CCD77000
|
unkown
|
page read and write
|
|
|
|
13FBA22A000
|
unkown
|
page read and write
|
|
|
|
7FF5AB965000
|
unkown
|
page readonly
|
|
|
|
DEA000
|
unkown
|
page read and write
|
|
|
|
1DE000
|
unkown
|
page read and write
|
|
|
|
4316D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5036E5000
|
unkown
|
page readonly
|
|
|
|
188FF110000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
152036A0000
|
unkown
|
page readonly
|
|
|
|
7FD60000
|
unkown
|
page read and write
|
|
|
|
7FF54CB03000
|
unkown
|
page readonly
|
|
|
|
15201C98000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8A5000
|
unkown
|
page readonly
|
|
|
|
2DC81ABF000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
2DC81A4C000
|
unkown
|
page read and write
|
|
|
|
7FF54CAF6000
|
unkown
|
page readonly
|
|
|
|
7FF550091000
|
unkown
|
page readonly
|
|
|
|
5D9000
|
unkown
|
page read and write
|
|
|
|
7FF5D33BC000
|
unkown
|
page readonly
|
|
|
|
7FF5C367A000
|
unkown
|
page readonly
|
|
|
|
15203E73000
|
unkown
|
page read and write
|
|
|
|
1490000
|
heap private
|
page read and write
|
|
|
|
1BE68620000
|
unkown
|
page readonly
|
|
|
|
15201DBB000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page readonly
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
7FF5035A9000
|
unkown
|
page readonly
|
|
|
|
2820000
|
unkown
|
page read and write
|
|
|
|
2DC82354000
|
unkown
|
page read and write
|
|
|
|
7FF5F0484000
|
unkown
|
page readonly
|
|
|
|
E12000
|
unkown
|
page read and write
|
|
|
|
15204010000
|
unkown
|
page read and write
|
|
|
|
7FF5E37B7000
|
unkown
|
page readonly
|
|
|
|
E46000
|
unkown
|
page read and write
|
|
|
|
2DC82351000
|
unkown
|
page read and write
|
|
|
|
1AEEF1C0000
|
heap private
|
page read and write
|
|
|
|
AE1BFF000
|
unkown
|
page read and write
|
|
|
|
7FF503922000
|
unkown
|
page readonly
|
|
|
|
26FF54C5000
|
unkown
|
page read and write
|
|
|
|
4315F7A000
|
unkown
|
page read and write
|
|
|
|
F1CC6BC000
|
unkown
|
page read and write
|
|
|
|
7FF5755F1000
|
unkown
|
page readonly
|
|
|
|
778A4FF000
|
unkown
|
page read and write
|
|
|
|
EEF000
|
stack
|
page read and write
|
|
|
|
2DEB000
|
unkown
|
page readonly
|
|
|
|
7FF5D3309000
|
unkown
|
page readonly
|
|
|
|
12A9000
|
heap default
|
page read and write
|
|
|
|
16E2A190000
|
unkown
|
page readonly
|
|
|
|
15203CC9000
|
unkown
|
page read and write
|
|
|
|
7FF5F02C5000
|
unkown
|
page readonly
|
|
|
|
58B000
|
unkown
|
page read and write
|
|
|
|
15201C9A000
|
unkown
|
page read and write
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
E3C000
|
unkown
|
page read and write
|
|
|
|
7FF5AB5EB000
|
unkown
|
page readonly
|
|
|
|
578000
|
unkown
|
page read and write
|
|
|
|
26FF54C7000
|
unkown
|
page read and write
|
|
|
|
1E85A860000
|
unkown
|
page read and write
|
|
|
|
58F000
|
unkown
|
page read and write
|
|
|
|
15203C37000
|
unkown
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
4673000
|
unkown
|
page read and write
|
|
|
|
7FF7518A1000
|
unkown image
|
page execute read
|
|
|
|
2840000
|
unkown
|
page readonly
|
|
|
|
5AE6000
|
unkown
|
page read and write
|
|
|
|
188FF030000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown image
|
page write copy
|
|
|
|
2963000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
43164FC000
|
unkown
|
page read and write
|
|
|
|
2BF3BB20000
|
heap private
|
page read and write
|
|
|
|
7FF5AF8A8000
|
unkown
|
page readonly
|
|
|
|
5B68000
|
unkown
|
page read and write
|
|
|
|
7FF547BEF000
|
unkown
|
page readonly
|
|
|
|
5BE000
|
unkown
|
page read and write
|
|
|
|
188FF034000
|
unkown
|
page read and write
|
|
|
|
7FF5C3441000
|
unkown
|
page readonly
|
|
|
|
7FF547D35000
|
unkown
|
page readonly
|
|
|
|
188FAB40000
|
unkown
|
page readonly
|
|
|
|
14E78210000
|
unkown
|
page read and write
|
|
|
|
1BE68870000
|
unkown
|
page read and write
|
|
|
|
1E85A879000
|
unkown
|
page read and write
|
|
|
|
5D346FC000
|
unkown
|
page read and write
|
|
|
|
7FF547E77000
|
unkown
|
page readonly
|
|
|
|
15201C8A000
|
unkown
|
page read and write
|
|
|
|
EA000
|
stack
|
page read and write
|
|
|
|
7FF5ADC47000
|
unkown
|
page readonly
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
7FF54FD2D000
|
unkown
|
page readonly
|
|
|
|
6640000
|
unkown
|
page read and write
|
|
|
|
5BB000
|
unkown
|
page read and write
|
|
|
|
E54000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page readonly
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
1FA51C00000
|
unkown
|
page read and write
|
|
|
|
7FF5036C1000
|
unkown
|
page readonly
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
7FD5A000
|
unkown
|
page read and write
|
|
|
|
26FF54A9000
|
heap default
|
page read and write
|
|
|
|
2DC8233C000
|
unkown
|
page read and write
|
|
|
|
DF8000
|
unkown
|
page read and write
|
|
|
|
7FF550099000
|
unkown
|
page readonly
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
2DC8235F000
|
unkown
|
page read and write
|
|
|
|
7FF547E38000
|
unkown
|
page readonly
|
|
|
|
15203CFA000
|
unkown
|
page read and write
|
|
|
|
4648000
|
unkown
|
page read and write
|
|
|
|
7FF5EFFFC000
|
unkown
|
page readonly
|
|
|
|
15203CEA000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown image
|
page write copy
|
|
|
|
95BF38F000
|
unkown
|
page read and write
|
|
|
|
1496000
|
heap private
|
page read and write
|
|
|
|
4656000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
778A6FE000
|
unkown
|
page read and write
|
|
|
|
4656000
|
unkown
|
page read and write
|
|
|
|
7FF5D31E5000
|
unkown
|
page readonly
|
|
|
|
DB6000
|
unkown
|
page read and write
|
|
|
|
1E85A858000
|
unkown
|
page read and write
|
|
|
|
4639000
|
unkown
|
page read and write
|
|
|
|
7FF547E10000
|
unkown
|
page readonly
|
|
|
|
30F0000
|
heap private
|
page read and write
|
|
|
|
7FF5235C4000
|
unkown
|
page readonly
|
|
|
|
188FF150000
|
unkown
|
page read and write
|
|
|
|
4708000
|
unkown
|
page read and write
|
|
|
|
7FF5A621C000
|
unkown
|
page readonly
|
|
|
|
7FF5F0462000
|
unkown
|
page readonly
|
|
|
|
7FF575112000
|
unkown
|
page readonly
|
|
|
|
5E7000
|
unkown
|
page read and write
|
|
|
|
7FF5A6164000
|
unkown
|
page readonly
|
|
|
|
188FAAF0000
|
unkown
|
page readonly
|
|
|
|
188FF150000
|
unkown
|
page read and write
|
|
|
|
7FF5C37D9000
|
unkown
|
page readonly
|
|
|
|
7FF50399C000
|
unkown
|
page readonly
|
|
|
|
AE197B000
|
unkown
|
page read and write
|
|
|
|
431617B000
|
unkown
|
page read and write
|
|
|
|
7FF5235A3000
|
unkown
|
page readonly
|
|
|
|
E3F000
|
unkown
|
page read and write
|
|
|
|
15203C17000
|
unkown
|
page read and write
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
heap private
|
page read and write
|
|
|
|
7FF5754FA000
|
unkown
|
page readonly
|
|
|
|
15201CDE000
|
unkown
|
page read and write
|
|
|
|
188FA302000
|
unkown
|
page read and write
|
|
|
|
15205002000
|
unkown
|
page read and write
|
|
|
|
2DC81AA5000
|
unkown
|
page read and write
|
|
|
|
188FA1C1000
|
unkown
|
page read and write
|
|
|
|
188FF2B5000
|
unkown
|
page read and write
|
|
|
|
15203CE7000
|
unkown
|
page read and write
|
|
|
|
1F31E800000
|
unkown
|
page read and write
|
|
|
|
2DC82323000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC76000
|
unkown
|
page readonly
|
|
|
|
188FA900000
|
unkown
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
1AEEFF90000
|
unkown
|
page readonly
|
|
|
|
3669000
|
unkown
|
page readonly
|
|
|
|
188FF120000
|
unkown
|
page read and write
|
|
|
|
26FF54F8000
|
unkown
|
page read and write
|
|
|
|
26FF5420000
|
unkown
|
page read and write
|
|
|
|
15201D17000
|
unkown
|
page read and write
|
|
|
|
26FF54D7000
|
heap default
|
page read and write
|
|
|
|
7FF550050000
|
unkown
|
page readonly
|
|
|
|
2981000
|
unkown
|
page read and write
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
2830000
|
heap private
|
page read and write
|
|
|
|
26FF54C2000
|
unkown
|
page read and write
|
|
|
|
D87000
|
unkown
|
page read and write
|
|
|
|
7FF52345A000
|
unkown
|
page readonly
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
1F31E88D000
|
unkown
|
page read and write
|
|
|
|
2835000
|
heap private
|
page read and write
|
|
|
|
15201CDD000
|
unkown
|
page read and write
|
|
|
|
7FF503562000
|
unkown
|
page readonly
|
|
|
|
12B2000
|
unkown
|
page read and write
|
|
|
|
5B28000
|
unkown
|
page read and write
|
|
|
|
2DC8234B000
|
unkown
|
page read and write
|
|
|
|
7FF54CAE6000
|
unkown
|
page readonly
|
|
|
|
2DC8232E000
|
unkown
|
page read and write
|
|
|
|
1FA51C8A000
|
unkown
|
page read and write
|
|
|
|
C3C51FE000
|
unkown
|
page read and write
|
|
|
|
2700C7F0000
|
unkown
|
page readonly
|
|
|
|
5CF0000
|
heap private
|
page read and write
|
|
|
|
5B2F000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown
|
page read and write
|
|
|
|
7FF50367F000
|
unkown
|
page readonly
|
|
|
|
E15000
|
unkown image
|
page readonly
|
|
|
|
7FF50059A000
|
unkown
|
page readonly
|
|
|
|
1AEEFF40000
|
unkown
|
page write copy
|
|
|
|
7FF500535000
|
unkown
|
page readonly
|
|
|
|
58E000
|
unkown
|
page read and write
|
|
|
|
2EF8000
|
unkown
|
page readonly
|
|
|
|
277000
|
unkown
|
page read and write
|
|
|
|
7FF54CA72000
|
unkown
|
page readonly
|
|
|
|
15201C59000
|
unkown
|
page read and write
|
|
|
|
591000
|
unkown
|
page read and write
|
|
|
|
188F99A0000
|
unkown
|
page readonly
|
|
|
|
2EE3000
|
unkown
|
page readonly
|
|
|
|
2DC81A6E000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
2F411FB000
|
unkown
|
page read and write
|
|
|
|
188FAB20000
|
unkown
|
page readonly
|
|
|
|
26FF54AE000
|
unkown
|
page read and write
|
|
|
|
7FF5AD8CC000
|
unkown
|
page readonly
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
188FF200000
|
unkown
|
page read and write
|
|
|
|
2DC8238C000
|
unkown
|
page read and write
|
|
|
|
3664000
|
unkown
|
page readonly
|
|
|
|
1AEEF429000
|
unkown
|
page read and write
|
|
|
|
16B96170000
|
heap private
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
2DC82348000
|
unkown
|
page read and write
|
|
|
|
C40000
|
heap default
|
page read and write
|
|
|
|
7FF500509000
|
unkown
|
page readonly
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
1D52FB13000
|
unkown
|
page read and write
|
|
|
|
2700C813000
|
unkown
|
page read and write
|
|
|
|
7FF5036DF000
|
unkown
|
page readonly
|
|
|
|
1D52FA13000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
5B12000
|
unkown
|
page read and write
|
|
|
|
188FEEE0000
|
unkown
|
page read and write
|
|
|
|
13FBA256000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC14000
|
unkown
|
page readonly
|
|
|
|
15201C8C000
|
unkown
|
page read and write
|
|
|
|
5AED000
|
unkown
|
page read and write
|
|
|
|
7FF5751A3000
|
unkown
|
page readonly
|
|
|
|
7FF575615000
|
unkown
|
page readonly
|
|
|
|
14E76600000
|
unkown
|
page readonly
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
29D3000
|
unkown
|
page read and write
|
|
|
|
188FF28B000
|
unkown
|
page read and write
|
|
|
|
1D52F910000
|
unkown
|
page readonly
|
|
|
|
15203F02000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
581000
|
unkown
|
page read and write
|
|
|
|
2DC8233F000
|
unkown
|
page read and write
|
|
|
|
7FF54CA0F000
|
unkown
|
page readonly
|
|
|
|
13FBA970000
|
unkown
|
page read and write
|
|
|
|
7FF5A5CC2000
|
unkown
|
page readonly
|
|
|
|
28E2000
|
unkown
|
page read and write
|
|
|
|
26FF54DA000
|
unkown
|
page read and write
|
|
|
|
2DC82317000
|
unkown
|
page read and write
|
|
|
|
7FF5039A5000
|
unkown
|
page readonly
|
|
|
|
26FF54C0000
|
unkown
|
page read and write
|
|
|
|
1BE68868000
|
unkown
|
page read and write
|
|
|
|
7FF5750C4000
|
unkown
|
page readonly
|
|
|
|
85B000
|
unkown image
|
page write copy
|
|
|
|
2999000
|
unkown
|
page read and write
|
|
|
|
5A1000
|
unkown
|
page read and write
|
|
|
|
7FF5AB9FC000
|
unkown
|
page readonly
|
|
|
|
13FBA23D000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
D20000
|
unkown
|
page read and write
|
|
|
|
643B8FE000
|
unkown
|
page read and write
|
|
|
|
7FF575495000
|
unkown
|
page readonly
|
|
|
|
2700C85B000
|
unkown
|
page read and write
|
|
|
|
2BF3A020000
|
unkown
|
page readonly
|
|
|
|
F2D000
|
unkown
|
page read and write
|
|
|
|
15203CE2000
|
unkown
|
page read and write
|
|
|
|
2DC8233B000
|
unkown
|
page read and write
|
|
|
|
188F9A25000
|
unkown
|
page read and write
|
|
|
|
188FA318000
|
unkown
|
page read and write
|
|
|
|
2DC8233F000
|
unkown
|
page read and write
|
|
|
|
7FF5AF909000
|
unkown
|
page readonly
|
|
|
|
7FF5ADBFF000
|
unkown
|
page readonly
|
|
|
|
24DF000
|
stack
|
page read and write
|
|
|
|
15203A50000
|
unkown
|
page readonly
|
|
|
|
7FF5AB855000
|
unkown
|
page readonly
|
|
|
|
7FF5ADC6C000
|
unkown
|
page readonly
|
|
|
|
12A8000
|
unkown
|
page read and write
|
|
|
|
7FF5AB348000
|
unkown
|
page readonly
|
|
|
|
2DC82346000
|
unkown
|
page read and write
|
|
|
|
431575B000
|
unkown
|
page read and write
|
|
|
|
1E85A867000
|
unkown
|
page read and write
|
|
|
|
2DC82374000
|
unkown
|
page read and write
|
|
|
|
7FF5F046C000
|
unkown
|
page readonly
|
|
|
|
4315EFA000
|
unkown
|
page read and write
|
|
|
|
2DC82365000
|
unkown
|
page read and write
|
|
|
|
B9F7E7F000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
980437F000
|
unkown
|
page read and write
|
|
|
|
2DC81A81000
|
unkown
|
page read and write
|
|
|
|
CAA87F000
|
unkown
|
page read and write
|
|
|
|
26FF54DD000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
26FF54CE000
|
unkown
|
page read and write
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
15201D2B000
|
unkown
|
page read and write
|
|
|
|
E12000
|
unkown
|
page read and write
|
|
|
|
7FF5E3070000
|
unkown
|
page readonly
|
|
|
|
7FF5AB98B000
|
unkown
|
page readonly
|
|
|
|
7FF5ADBC4000
|
unkown
|
page readonly
|
|
|
|
7FF5E3595000
|
unkown
|
page readonly
|
|
|
|
FF0000
|
unkown image
|
page readonly
|
|
|
|
2DC82359000
|
unkown
|
page read and write
|
|
|
|
26FF54CF000
|
unkown
|
page read and write
|
|
|
|
7FF523425000
|
unkown
|
page readonly
|
|
|
|
E23000
|
unkown
|
page read and write
|
|
|
|
16B97CC0000
|
unkown
|
page read and write
|
|
|
|
4A07000
|
unkown
|
page read and write
|
|
|
|
2A23000
|
unkown
|
page read and write
|
|
|
|
7FF547E75000
|
unkown
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
1D52FA6A000
|
unkown
|
page read and write
|
|
|
|
B3C000
|
stack
|
page read and write
|
|
|
|
7FF50026C000
|
unkown
|
page readonly
|
|
|
|
2DC82350000
|
unkown
|
page read and write
|
|
|
|
15201D38000
|
unkown
|
page read and write
|
|
|
|
7FF547E05000
|
unkown
|
page readonly
|
|
|
|
7FF5E3635000
|
unkown
|
page readonly
|
|
|
|
596000
|
unkown
|
page read and write
|
|
|
|
7FF5ADC45000
|
unkown
|
page readonly
|
|
|
|
290A000
|
unkown
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
5A9A000
|
unkown
|
page read and write
|
|
|
|
15203E00000
|
unkown
|
page read and write
|
|
|
|
7FF55E689000
|
unkown
|
page readonly
|
|
|
|
293E000
|
unkown
|
page read and write
|
|
|
|
2DC8234C000
|
unkown
|
page read and write
|
|
|
|
F70000
|
heap private
|
page read and write
|
|
|
|
7FF5AB8C0000
|
unkown
|
page readonly
|
|
|
|
1F31E900000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
FF6C57D000
|
unkown
|
page read and write
|
|
|
|
2DC8237C000
|
unkown
|
page read and write
|
|
|
|
1060000
|
unkown
|
page readonly
|
|
|
|
4656000
|
unkown
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
CAA7FD000
|
unkown
|
page read and write
|
|
|
|
E0B000
|
unkown
|
page read and write
|
|
|
|
6300000
|
unkown
|
page readonly
|
|
|
|
7FF50066B000
|
unkown
|
page readonly
|
|
|
|
188FEFF0000
|
unkown
|
page read and write
|
|
|
|
5C6000
|
unkown
|
page read and write
|
|
|
|
15204210000
|
unkown
|
page read and write
|
|
|
|
2DC82358000
|
unkown
|
page read and write
|
|
|
|
2250000
|
unkown
|
page readonly
|
|
|
|
E3D000
|
unkown
|
page read and write
|
|
|
|
AE16FD000
|
unkown
|
page read and write
|
|
|
|
15203F02000
|
unkown
|
page read and write
|
|
|
|
15203C1E000
|
unkown
|
page read and write
|
|
|
|
15201C9D000
|
unkown
|
page read and write
|
|
|
|
2DC8234E000
|
unkown
|
page read and write
|
|
|
|
26FF54E6000
|
unkown
|
page read and write
|
|
|
|
2DC81970000
|
heap default
|
page read and write
|
|
|
|
7FF5A61B5000
|
unkown
|
page readonly
|
|
|
|
7FF55E68C000
|
unkown
|
page readonly
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
7FF5C376F000
|
unkown
|
page readonly
|
|
|
|
15205102000
|
unkown
|
page read and write
|
|
|
|
24E2000
|
unkown
|
page read and write
|
|
|
|
E19000
|
unkown
|
page read and write
|
|
|
|
3650000
|
unkown
|
page readonly
|
|
|
|
7FF5D32CB000
|
unkown
|
page readonly
|
|
|
|
7FF5AB84D000
|
unkown
|
page readonly
|
|
|
|
15204110000
|
unkown
|
page read and write
|
|
|
|
7FF5E3734000
|
unkown
|
page readonly
|
|
|
|
1AEEF600000
|
unkown
|
page readonly
|
|
|
|
7FF5E3711000
|
unkown
|
page readonly
|
|
|
|
FA0000
|
heap private
|
page read and write
|
|
|
|
5F53000
|
unkown
|
page read and write
|
|
There are 2753 hidden memdumps, click here to show them.