Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
LI180_win-1.5.1.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\2E5DCE8F\23667BEE\SiLib.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\51845961\DBD131B5\SiLib.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\55E6A65E\DBD131B5\SIUSBXP.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\A3F0088A\23667BEE\SIUSBXP.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\2E5DCE8F\23667BEE\SiLib.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\51845961\DBD131B5\SiLib.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\55E6A65E\DBD131B5\SIUSBXP.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\A3F0088A\23667BEE\SIUSBXP.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\2E5DCE8F\23667BEE\SiLib.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\51845961\DBD131B5\SiLib.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\55E6A65E\DBD131B5\SIUSBXP.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\A3F0088A\23667BEE\SIUSBXP.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.lnk
|
UTF-8 Unicode text, with no line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.par
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\instance.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\ProgramData\{E6FF8B17-66F1-4213-A668-EBEAEBBA4AEB}\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\III\7z.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7z6C81.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7z9094.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zAEDA.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\Install Fonts IDE-PlugIn.dll\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\1EA7FD63\B65B8ED4\box_feature.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x581,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\353AD105\E1510A13\USBXpressInstaller.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\3575565E\3EF45B9E\ANSI_2008.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\36706E48\3EF45B9E\ANSI.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\383E736B\B65B8ED4\square.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 36x36,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\409F08AF\B65B8ED4\box_information.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 1396x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\44DB77AB\7AF51026\LICOR.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:23], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\453607F8\E1510A13\siusbxp.cat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\587D056C\9426740A\CHK_20131028_165820.xls
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\609B42C1\B65B8ED4\box_feature_ppf.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x498,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\655BFA89\B65B8ED4\LI-COR-logo.jpg
|
[TIFF image data, big-endian, direntries=12, height=684, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3447],
baseline, precision 8, 800x158, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\655FCA3B\B65B8ED4\box_basic.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 646x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\67ACD331\98FBEBF9\Reference Spectrum.xlsx
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\6B339451\B65B8ED4\chart_criw.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 674x635,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\6B481F13\B65B8ED4\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:14:42], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\6C0AF2E8\BE4A257\LICORlang.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\6DBFE203\342BBCE8\Cold.asz
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\7021623\B65B8ED4\chart_cie1976w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\7493ECCE\C0705257\CIEO.CFG
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\774E815E\526B362B\LICOR-about.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 145x435,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\8C4586D2\7AF51026\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:30:04], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\9847A14B\B6D77E4E\ESPD_LI-180-000.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\AD9FE403\7AF51026\GAI.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:11:20 16:36:56], baseline, precision 8, 394x472, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\B7ED429E\E1510A13\setup.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\C3C84A4C\E1510A13\SiUSBXp.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\C9AB7ACB\7AF51026\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:39:41], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\D2758F69\B65B8ED4\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:15:12], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\D35647E\E023D589\LI-180 Spectrometer.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\D532E401\20073942\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\D83B2FF9\7AF51026\tm30image.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2015:12:30 17:35:06], baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\DAA0442\526B362B\LICOR-start.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x360,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\DC702C7E\E023D589\SiUSBXp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\E379E83C\7AF51026\CRI2.jpg
|
[TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=945],
baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\E5444EFD\CD0E66BD\LI-180_Log_Example.xls
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\ECC34BEC\3EF45B9E\ANSI_Ellipse.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\F28C57DF\B65B8ED4\chart_cie1931w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\F4ED2515\3EF45B9E\ANSI_2011.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\FC8C594\7AF51026\LICORC.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:55], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\Install Fonts IDE-PlugIn.dll\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\1EA7FD63\B65B8ED4\box_feature.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x581,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\353AD105\E1510A13\USBXpressInstaller.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\3575565E\3EF45B9E\ANSI_2008.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\36706E48\3EF45B9E\ANSI.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\383E736B\B65B8ED4\square.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 36x36,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\409F08AF\B65B8ED4\box_information.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 1396x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\44DB77AB\7AF51026\LICOR.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:23], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\453607F8\E1510A13\siusbxp.cat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\587D056C\9426740A\CHK_20131028_165820.xls
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\609B42C1\B65B8ED4\box_feature_ppf.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x498,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\655BFA89\B65B8ED4\LI-COR-logo.jpg
|
[TIFF image data, big-endian, direntries=12, height=684, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3447],
baseline, precision 8, 800x158, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\655FCA3B\B65B8ED4\box_basic.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 646x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\67ACD331\98FBEBF9\Reference Spectrum.xlsx
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\6B339451\B65B8ED4\chart_criw.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 674x635,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\6B481F13\B65B8ED4\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:14:42], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\6C0AF2E8\BE4A257\LICORlang.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\6DBFE203\342BBCE8\Cold.asz
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\7021623\B65B8ED4\chart_cie1976w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\7493ECCE\C0705257\CIEO.CFG
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\774E815E\526B362B\LICOR-about.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 145x435,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\8C4586D2\7AF51026\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:30:04], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\9847A14B\B6D77E4E\ESPD_LI-180-000.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\AD9FE403\7AF51026\GAI.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:11:20 16:36:56], baseline, precision 8, 394x472, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\B7ED429E\E1510A13\setup.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\C3C84A4C\E1510A13\SiUSBXp.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\C9AB7ACB\7AF51026\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:39:41], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\D2758F69\B65B8ED4\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:15:12], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\D35647E\E023D589\LI-180 Spectrometer.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\D532E401\20073942\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\D83B2FF9\7AF51026\tm30image.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2015:12:30 17:35:06], baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\DAA0442\526B362B\LICOR-start.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x360,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\DC702C7E\E023D589\SiUSBXp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\E379E83C\7AF51026\CRI2.jpg
|
[TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=945],
baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\E5444EFD\CD0E66BD\LI-180_Log_Example.xls
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\ECC34BEC\3EF45B9E\ANSI_Ellipse.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\F28C57DF\B65B8ED4\chart_cie1931w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\F4ED2515\3EF45B9E\ANSI_2011.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\FC8C594\7AF51026\LICORC.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:55], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\Install Fonts IDE-PlugIn.dll\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\1EA7FD63\B65B8ED4\box_feature.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x581,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\353AD105\E1510A13\USBXpressInstaller.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\3575565E\3EF45B9E\ANSI_2008.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\36706E48\3EF45B9E\ANSI.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\383E736B\B65B8ED4\square.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 36x36,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\409F08AF\B65B8ED4\box_information.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 1396x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\44DB77AB\7AF51026\LICOR.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:23], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\453607F8\E1510A13\siusbxp.cat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\587D056C\9426740A\CHK_20131028_165820.xls
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\609B42C1\B65B8ED4\box_feature_ppf.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x498,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\655BFA89\B65B8ED4\LI-COR-logo.jpg
|
[TIFF image data, big-endian, direntries=12, height=684, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3447],
baseline, precision 8, 800x158, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\655FCA3B\B65B8ED4\box_basic.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 646x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\67ACD331\98FBEBF9\Reference Spectrum.xlsx
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\6B339451\B65B8ED4\chart_criw.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 674x635,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\6B481F13\B65B8ED4\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:14:42], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\6C0AF2E8\BE4A257\LICORlang.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\6DBFE203\342BBCE8\Cold.asz
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\7021623\B65B8ED4\chart_cie1976w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\7493ECCE\C0705257\CIEO.CFG
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\774E815E\526B362B\LICOR-about.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 145x435,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\8C4586D2\7AF51026\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:30:04], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\9847A14B\B6D77E4E\ESPD_LI-180-000.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\AD9FE403\7AF51026\GAI.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:11:20 16:36:56], baseline, precision 8, 394x472, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\B7ED429E\E1510A13\setup.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\C3C84A4C\E1510A13\SiUSBXp.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\C9AB7ACB\7AF51026\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:39:41], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\D2758F69\B65B8ED4\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:15:12], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\D35647E\E023D589\LI-180 Spectrometer.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\D532E401\20073942\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\D83B2FF9\7AF51026\tm30image.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2015:12:30 17:35:06], baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\DAA0442\526B362B\LICOR-start.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x360,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\DC702C7E\E023D589\SiUSBXp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\E379E83C\7AF51026\CRI2.jpg
|
[TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=945],
baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\E5444EFD\CD0E66BD\LI-180_Log_Example.xls
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\ECC34BEC\3EF45B9E\ANSI_Ellipse.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\F28C57DF\B65B8ED4\chart_cie1931w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\F4ED2515\3EF45B9E\ANSI_2011.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\FC8C594\7AF51026\LICORC.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:55], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\IAW4D1E.tmp
|
MS-DOS executable, NE for MS Windows 3.x
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\lang.loc
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia.tmp
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\componentstree.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\componentstree.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\destination.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\destination.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\finish.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\finish.dfm.miaf
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\icon.ico
|
MS Windows icon resource - 6 icons, 256x256 withPNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel,
128x128, 32 bits/pixel
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\installaware.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\license.rtf
|
Rich Text Format data, version 1, unknown character set
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\licensecheck.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\licensecheck.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\maintenance.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\maintenance.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\prereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\prereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progress.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progress.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progressprereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\progressprereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\readme.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\readme.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registration.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registration.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registrationwithserial.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\registrationwithserial.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\setuptype.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\setuptype.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startinstallation.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startinstallation.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startmenu.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\startmenu.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\welcome.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\welcome.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\wizard.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia1\wizard.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\componentstree.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\componentstree.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\destination.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\destination.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\finish.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\finish.dfm.miaf
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\icon.ico
|
MS Windows icon resource - 6 icons, 256x256 withPNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel,
128x128, 32 bits/pixel
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\installaware.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\license.rtf
|
Rich Text Format data, version 1, unknown character set
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\licensecheck.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\licensecheck.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\maintenance.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\maintenance.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\prereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\prereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\progress.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\progress.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\progressprereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\progressprereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\readme.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\readme.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\registration.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\registration.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\registrationwithserial.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\registrationwithserial.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\setuptype.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\setuptype.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\startinstallation.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\startinstallation.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\startmenu.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\startmenu.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\welcome.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\welcome.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\wizard.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia2\wizard.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\componentstree.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\componentstree.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\destination.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\destination.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\finish.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\finish.dfm.miaf
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\icon.ico
|
MS Windows icon resource - 6 icons, 256x256 withPNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel,
128x128, 32 bits/pixel
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\installaware.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\license.rtf
|
Rich Text Format data, version 1, unknown character set
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\licensecheck.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\licensecheck.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\maintenance.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\maintenance.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\prereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\prereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\progress.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\progress.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\progressprereq.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\progressprereq.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\readme.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\readme.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\registration.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\registration.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\registrationwithserial.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\registrationwithserial.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\setuptype.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\setuptype.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\startinstallation.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\startinstallation.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\startmenu.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\startmenu.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\welcome.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\welcome.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\wizard.dfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\mia3\wizard.dfm.miaf
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{13f65283-831c-8c4d-923b-fdfe8501521e}\SET2959.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{13f65283-831c-8c4d-923b-fdfe8501521e}\SET295A.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{13f65283-831c-8c4d-923b-fdfe8501521e}\x64\SET295B.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{13f65283-831c-8c4d-923b-fdfe8501521e}\x64\SET298B.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{4963F2A4-325D-4774-8D8D-86D68B3EE27C}
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\DPINST.LOG
|
data
|
modified
|
|
|
|
C:\Windows\Fonts\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Windows\INF\oem3.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{c6046bf1-6c64-0e48-bda1-28966b32d534}\SET2CF3.tmp
|
data
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{c6046bf1-6c64-0e48-bda1-28966b32d534}\SET2D32.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{c6046bf1-6c64-0e48-bda1-28966b32d534}\x64\SET2D33.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{c6046bf1-6c64-0e48-bda1-28966b32d534}\x64\SET2D34.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\catroot2\dberr.txt
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\7z759F.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.res
|
7-zip archive data, version 0.3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-180_Installer.msi
|
0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\Install Fonts IDE-PlugIn.dll\Install Fonts EXE-PlugIn.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\mDIFxEXE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\1EA7FD63\B65B8ED4\box_feature.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x581,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\2E5DCE8F\23667BEE\SiLib.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\353AD105\E1510A13\USBXpressInstaller.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\3575565E\3EF45B9E\ANSI_2008.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\36706E48\3EF45B9E\ANSI.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\383E736B\B65B8ED4\square.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 36x36,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\409F08AF\B65B8ED4\box_information.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 1396x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\44DB77AB\7AF51026\LICOR.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:23], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\453607F8\E1510A13\siusbxp.cat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\51845961\DBD131B5\SiLib.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\55E6A65E\DBD131B5\SIUSBXP.sys
|
PE32 executable (native) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\587D056C\9426740A\CHK_20131028_165820.xls
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\609B42C1\B65B8ED4\box_feature_ppf.jpg
|
JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2152x498,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\655BFA89\B65B8ED4\LI-COR-logo.jpg
|
[TIFF image data, big-endian, direntries=12, height=684, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3447],
baseline, precision 8, 800x158, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\655FCA3B\B65B8ED4\box_basic.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 646x416,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\67ACD331\98FBEBF9\Reference Spectrum.xlsx
|
Microsoft Excel 2007+
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6B339451\B65B8ED4\chart_criw.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 674x635,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6B481F13\B65B8ED4\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:14:42], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6C0AF2E8\BE4A257\LICORlang.ini
|
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\6DBFE203\342BBCE8\Cold.asz
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\7021623\B65B8ED4\chart_cie1976w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\7493ECCE\C0705257\CIEO.CFG
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\774E815E\526B362B\LICOR-about.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 145x435,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\8C4586D2\7AF51026\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:30:04], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\9847A14B\B6D77E4E\ESPD_LI-180-000.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\A3F0088A\23667BEE\SIUSBXP.sys
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\AD9FE403\7AF51026\GAI.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:11:20 16:36:56], baseline, precision 8, 394x472, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\B7ED429E\E1510A13\setup.ini
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\C3C84A4C\E1510A13\SiUSBXp.inf
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\C9AB7ACB\7AF51026\cie1931.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2013:08:09 15:39:41], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D2758F69\B65B8ED4\cie1976.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:05:23 17:15:12], baseline, precision 8, 1600x1600, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D35647E\E023D589\LI-180 Spectrometer.exe
|
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D532E401\20073942\mdd_0.ttf
|
TrueType Font data, 15 tables, 1st "OS/2", name offset 0x30a0dc
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\D83B2FF9\7AF51026\tm30image.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS3 Windows, datetime=2015:12:30 17:35:06], baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\DAA0442\526B362B\LICOR-start.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x360,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\DC702C7E\E023D589\SiUSBXp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\E379E83C\7AF51026\CRI2.jpg
|
[TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=945],
baseline, precision 8, 800x800, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\E5444EFD\CD0E66BD\LI-180_Log_Example.xls
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\ECC34BEC\3EF45B9E\ANSI_Ellipse.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\F28C57DF\B65B8ED4\chart_cie1931w.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 1152x1152, segment length 16, baseline, precision 8, 663x654,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\F4ED2515\3EF45B9E\ANSI_2011.xls
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\FC8C594\7AF51026\LICORC.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS5.1 Windows, datetime=2018:08:07 16:10:55], baseline, precision 8, 424x389, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\mia.lib
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\IAW1FEA.tmp
|
MS-DOS executable, NE for MS Windows 3.x
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\SETF04E.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\SETF04F.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\x64\SETF07E.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\x64\SETF07F.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\SETF59D.tmp
|
data
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\SETF5CD.tmp
|
Windows setup INFormation, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\x64\SETF5CE.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
|
|
C:\Windows\System32\DriverStore\Temp\{e09d9f86-101e-864a-b600-9318f3cd459f}\x64\SETF5CF.tmp
|
PE32+ executable (native) x86-64, for MS Windows
|
dropped
|
|
There are 354 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
'C:\Users\user\Desktop\LI180_win-1.5.1.exe' -install
|
|
|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
'C:\Users\user\Desktop\LI180_win-1.5.1.exe' /install
|
|
|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
'C:\Users\user\Desktop\LI180_win-1.5.1.exe' /load
|
|
|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
'C:\Users\user\Desktop\LI180_win-1.5.1.exe'
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
.\LI-180_Installer.exe -install /m='C:\Users\user\Desktop\LI180_~1.EXE' /k=''
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\LI-180_Installer.exe
|
.\LI-180_Installer.exe /install /m='C:\Users\user\Desktop\LI180_~1.EXE' /k=''
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\LI-180_Installer.exe
|
.\LI-180_Installer.exe /load /m='C:\Users\user\Desktop\LI180_~1.EXE' /k=''
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 71E95B410ABC515A6ABA0566A4073125
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR~1\mDIFxIDE.dll\x64DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Windows\System32\drvinst.exe
|
DrvInst.exe '4' '0' 'C:\Users\user\AppData\Local\Temp\{13f65283-831c-8c4d-923b-fdfe8501521e}\siusbxp.inf' '9' '4ae43d7fb'
'00000000000001BC' 'WinSta0\Default' '00000000000001C0' '208' 'c:\progra~2\li-180~1\driver'
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR~1\mDIFxIDE.dll\x86DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding CCF296E1DF7FA7E357D3B10A86C0BEB2
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR~1\mDIFxIDE.dll\x64DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\data\LI-COR~1\mDIFxIDE.dll\x86DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding FCA266DDB967C0E28D252C5FC68B1467
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR~1\mDIFxIDE.dll\x64DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\data\LI-COR~1\mDIFxIDE.dll\x86DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\LI-180_Installer.exe
|
.\LI-180_Installer.exe /m='C:\Users\user~1\Desktop\LI180_~1.EXE' /k=''
|
|
|
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding BA9949B78EE4EB19368DAA67058A42BA
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
C:\Users\user~1\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR~1\mDIFxIDE.dll\x64DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
|
|
C:\Windows\System32\drvinst.exe
|
DrvInst.exe '4' '0' 'C:\Users\user~1\AppData\Local\Temp\{546a2256-27f6-d746-9372-a5af287c59d0}\siusbxp.inf' '9' '4ae43d7fb'
'00000000000001A8' 'WinSta0\Default' '00000000000001AC' '208' 'c:\progra~2\li-180~1\driver'
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x86DPInst.exe
|
C:\Users\user~1\AppData\Local\Temp\7zS5C99.tmp\data\LI-COR~1\mDIFxIDE.dll\x86DPInst.exe /SW /SE /EL /PATH C:\PROGRA~2\\LI-180~1\Driver\
/D /SA /LM /F
|
|
There are 12 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.licor.com
|
unknown
|
|
|
|
https://www.licor.com/
|
unknown
|
|
|
|
http://support.uprtek.com/DB/uploads/SW/versions.asp?section=&keyword=00SOFTWARE_PCUSPECTRUMLI-180
|
unknown
|
|
|
|
http://support.uprtek.com/DB/uploads/SW/uSpectrum_Installer.zip
|
unknown
|
|
|
|
http://www.licor.comPut
|
unknown
|
|
|
|
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis
|
unknown
|
|
|
|
http://www.steema.com/exceptions/add.php?ide=
|
unknown
|
|
|
|
http://standards.iso.org/iso/19770/-2/2008/schema.xsd
|
unknown
|
|
|
|
http://www.installaware.comz
|
unknown
|
|
|
|
http://www.quickreport.co.uk
|
unknown
|
|
|
|
http://www.licor.comAbacusPosAP
|
unknown
|
|
|
|
http://www.ascendercorp.com/http://ascendercorp.com/eula10.html
|
unknown
|
|
|
|
http://www.indyproject.org/
|
unknown
|
|
|
|
http://support.uprtek.com/DB/uploads/SW/uSpectrum_Installer.zipM_VER_LAUNCH_INSTALLER_AFTER_DOWNLOAD
|
unknown
|
|
|
|
http://www.uprtek.com
|
unknown
|
|
|
|
http://support.steema.com
|
unknown
|
|
|
|
http://www.licor.com1g
|
unknown
|
|
|
|
http://www.installaware.com
|
unknown
|
|
|
|
http://www.installaware.com/
|
unknown
|
|
|
|
http://support.uprtek.com/DB/uploads/SW/versions.asp?section=
|
unknown
|
|
|
|
http://crl.microsof8
|
unknown
|
|
There are 11 hidden URLs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\LI180_win-1.5.1.exe
|
IsHostApp
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
IsHostApp
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
UninstallString
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
DisplayIcon
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
DisplayName
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
UninstallString
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
ModifyPath
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
Publisher
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
Contact
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
HelpLink
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
URLUpdateInfo
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
Comments
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
DisplayVersion
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
VersionMajor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
VersionMinor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
InstallLocation
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
VersionMajor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
VersionMinor
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
NULL
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
Droid Sans Fallback
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\LI-180_Installer.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS64E0.tmp\LI-180_Installer.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS7952.tmp\LI-180_Installer.exe
|
GlobalAssocChangedCounter
|
|
|
|
C:\Users\user\AppData\Local\Temp\7zS51C5.tmp\data\LI-COR Spectrum\mDIFxIDE.dll\x64DPInst.exe
|
setupapi.dev.log
|
|
|
|
C:\Windows\System32\drvinst.exe
|
LanguageList
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\ci.dll,-100
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\ci.dll,-101
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\dnsapi.dll,-103
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
|
|
|
|
C:\Windows\System32\drvinst.exe
|
@%SystemRoot%\system32\NgcRecovery.dll,-100
|
|
There are 23 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2825000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
heap private
|
page read and write
|
|
|
|
2C53000
|
unkown
|
page readonly
|
|
|
|
C43000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8B6000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EAE000
|
unkown
|
page readonly
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
5F28000
|
unkown
|
page read and write
|
|
|
|
7FF5D3042000
|
unkown
|
page readonly
|
|
|
|
5184000
|
unkown
|
page readonly
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
7FF5D30AD000
|
unkown
|
page readonly
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
CBE000
|
unkown
|
page read and write
|
|
|
|
7FF516F4D000
|
unkown
|
page readonly
|
|
|
|
777000
|
unkown
|
page read and write
|
|
|
|
D1D000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
5ECB000
|
unkown
|
page read and write
|
|
|
|
D18000
|
unkown
|
page read and write
|
|
|
|
7FF718531000
|
unkown image
|
page execute read
|
|
|
|
619EF77000
|
unkown
|
page read and write
|
|
|
|
7FF512F29000
|
unkown
|
page readonly
|
|
|
|
C51000
|
unkown
|
page read and write
|
|
|
|
7FF4F3651000
|
unkown
|
page readonly
|
|
|
|
2A04000
|
unkown
|
page read and write
|
|
|
|
D60000
|
heap default
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
C41000
|
unkown
|
page read and write
|
|
|
|
7FF7FA2B1000
|
unkown image
|
page write copy
|
|
|
|
516000
|
unkown
|
page read and write
|
|
|
|
C3F000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
7FF52D2A6000
|
unkown
|
page readonly
|
|
|
|
7FF575670000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
5190000
|
heap private
|
page read and write
|
|
|
|
7FF568BF5000
|
unkown
|
page readonly
|
|
|
|
50EC000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
282C000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
28D7A718000
|
unkown
|
page read and write
|
|
|
|
21C0000
|
heap private
|
page read and write
|
|
|
|
7FF5AADD8000
|
unkown
|
page readonly
|
|
|
|
7FF51AB79000
|
unkown
|
page readonly
|
|
|
|
7FF4F35DC000
|
unkown
|
page readonly
|
|
|
|
25480291000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
25482059000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC13000
|
unkown
|
page readonly
|
|
|
|
5981000
|
unkown
|
page read and write
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
2114EE81000
|
unkown
|
page read and write
|
|
|
|
2E44000
|
unkown
|
page readonly
|
|
|
|
4E7F000
|
unkown
|
page read and write
|
|
|
|
2114EE13000
|
unkown
|
page read and write
|
|
|
|
244E000
|
unkown
|
page read and write
|
|
|
|
5140000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB66000
|
unkown
|
page readonly
|
|
|
|
28E0000
|
heap private
|
page read and write
|
|
|
|
29E0000
|
heap private
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
514000
|
unkown
|
page read and write
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
47A0000
|
unkown
|
page read and write
|
|
|
|
D21437A000
|
unkown
|
page read and write
|
|
|
|
E2A000
|
unkown
|
page read and write
|
|
|
|
28956350000
|
unkown
|
page readonly
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
7FF4F35F4000
|
unkown
|
page readonly
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
254803FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CC264000
|
unkown
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page readonly
|
|
|
|
35B0000
|
heap private
|
page read and write
|
|
|
|
596B000
|
unkown
|
page read and write
|
|
|
|
C5B000
|
unkown
|
page read and write
|
|
|
|
534A000
|
unkown
|
page read and write
|
|
|
|
C2D000
|
unkown
|
page read and write
|
|
|
|
1503000
|
unkown
|
page read and write
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
2924000
|
unkown
|
page read and write
|
|
|
|
26C0000
|
unkown
|
page read and write
|
|
|
|
3F0CE8C000
|
unkown
|
page read and write
|
|
|
|
BEA000
|
unkown
|
page read and write
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
7FF575B79000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFD0000
|
unkown
|
page readonly
|
|
|
|
72B000
|
unkown
|
page read and write
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
C51000
|
unkown
|
page read and write
|
|
|
|
2F56000
|
heap private
|
page read and write
|
|
|
|
564D000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
FF6557E000
|
unkown
|
page read and write
|
|
|
|
28DF87E000
|
unkown
|
page read and write
|
|
|
|
7FF54B057000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
CED000
|
unkown
|
page read and write
|
|
|
|
3C11000
|
unkown
|
page read and write
|
|
|
|
C34000
|
unkown
|
page read and write
|
|
|
|
7FF4F35F0000
|
unkown
|
page readonly
|
|
|
|
5F80000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
2C46000
|
heap private
|
page read and write
|
|
|
|
840000
|
unkown image
|
page write copy
|
|
|
|
CDD000
|
unkown
|
page read and write
|
|
|
|
2890000
|
unkown
|
page read and write
|
|
|
|
18EB3E60000
|
unkown
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
7FF6E8570000
|
unkown image
|
page readonly
|
|
|
|
254802B9000
|
unkown
|
page read and write
|
|
|
|
50CF000
|
unkown
|
page read and write
|
|
|
|
533000
|
unkown image
|
page write copy
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
7FF5DD0D9000
|
unkown
|
page readonly
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
53F0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF512E8D000
|
unkown
|
page readonly
|
|
|
|
25480229000
|
unkown
|
page read and write
|
|
|
|
6000000
|
heap private
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page readonly
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
266F000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
4A30000
|
unkown
|
page read and write
|
|
|
|
FF65B7D000
|
unkown
|
page read and write
|
|
|
|
C91000
|
unkown
|
page read and write
|
|
|
|
E2A000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
25481FB0000
|
heap private
|
page read and write
|
|
|
|
1BDFE97D000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
7FF568C02000
|
unkown
|
page readonly
|
|
|
|
102D000
|
stack
|
page read and write
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
1CE8CF80000
|
unkown
|
page readonly
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
100B000
|
heap default
|
page read and write
|
|
|
|
7FF52D2B5000
|
unkown
|
page readonly
|
|
|
|
3F2000
|
unkown
|
page read and write
|
|
|
|
D1E000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
26D0000
|
unkown
|
page execute and read and write
|
|
|
|
6031000
|
unkown
|
page read and write
|
|
|
|
2E62000
|
unkown
|
page readonly
|
|
|
|
20BFD9E0000
|
heap private
|
page read and write
|
|
|
|
7FF5205ED000
|
unkown
|
page readonly
|
|
|
|
7FF56831C000
|
unkown
|
page readonly
|
|
|
|
55EB000
|
unkown
|
page read and write
|
|
|
|
DDE000
|
unkown
|
page read and write
|
|
|
|
16925ED0000
|
unkown
|
page readonly
|
|
|
|
7FF596591000
|
unkown
|
page readonly
|
|
|
|
2548026D000
|
unkown
|
page read and write
|
|
|
|
E26000
|
unkown
|
page read and write
|
|
|
|
25C0000
|
heap private
|
page read and write
|
|
|
|
7FF516D3A000
|
unkown
|
page readonly
|
|
|
|
7FF516EF8000
|
unkown
|
page readonly
|
|
|
|
3BE31FE000
|
unkown
|
page read and write
|
|
|
|
7FF59649C000
|
unkown
|
page readonly
|
|
|
|
600000
|
heap default
|
page read and write
|
|
|
|
1BDFE93C000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
7FF5DD074000
|
unkown
|
page readonly
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
E2A000
|
unkown
|
page read and write
|
|
|
|
477A000
|
unkown
|
page read and write
|
|
|
|
D6A000
|
heap default
|
page read and write
|
|
|
|
4C5000
|
unkown
|
page read and write
|
|
|
|
25D0000
|
heap private
|
page read and write
|
|
|
|
49CF000
|
unkown
|
page read and write
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
2114EE85000
|
unkown
|
page read and write
|
|
|
|
CBE000
|
unkown
|
page read and write
|
|
|
|
841000
|
unkown image
|
page read and write
|
|
|
|
7FF7FA231000
|
unkown image
|
page execute read
|
|
|
|
6E21F000
|
unkown image
|
page readonly
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
7FF52D2C4000
|
unkown
|
page readonly
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
7FF5CC2C9000
|
unkown
|
page readonly
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
7FF52D321000
|
unkown
|
page readonly
|
|
|
|
5E53000
|
unkown
|
page read and write
|
|
|
|
18EB3874000
|
unkown
|
page read and write
|
|
|
|
5189000
|
unkown
|
page readonly
|
|
|
|
7038F000
|
unkown image
|
page readonly
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
31A8000
|
heap default
|
page read and write
|
|
|
|
4B90000
|
unkown
|
page readonly
|
|
|
|
289BBE84000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
BE804FF000
|
unkown
|
page read and write
|
|
|
|
7FF596596000
|
unkown
|
page readonly
|
|
|
|
7FF568BAF000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA57000
|
unkown
|
page readonly
|
|
|
|
7FF5BE939000
|
unkown
|
page readonly
|
|
|
|
1BDFE8EF000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
7FF7FA231000
|
unkown image
|
page execute read
|
|
|
|
2500000
|
heap private
|
page read and write
|
|
|
|
58FD000
|
unkown
|
page read and write
|
|
|
|
28D79E30000
|
heap default
|
page read and write
|
|
|
|
20BFDC6F000
|
unkown
|
page read and write
|
|
|
|
25482260000
|
unkown
|
page readonly
|
|
|
|
2CA9000
|
unkown
|
page read and write
|
|
|
|
7FF5BE848000
|
unkown
|
page readonly
|
|
|
|
B5DDEFE000
|
unkown
|
page read and write
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
1BDFE90A000
|
unkown
|
page read and write
|
|
|
|
4E7000
|
unkown
|
page read and write
|
|
|
|
7FF59635C000
|
unkown
|
page readonly
|
|
|
|
2910000
|
heap private
|
page read and write
|
|
|
|
B7A000
|
heap default
|
page read and write
|
|
|
|
254824C9000
|
unkown
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
B5DE17D000
|
unkown
|
page read and write
|
|
|
|
E03000
|
unkown
|
page read and write
|
|
|
|
2C31000
|
unkown
|
page read and write
|
|
|
|
1D28A3E0000
|
unkown
|
page read and write
|
|
|
|
2840000
|
heap private
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF596621000
|
unkown
|
page readonly
|
|
|
|
2E46000
|
unkown
|
page readonly
|
|
|
|
2715000
|
heap private
|
page read and write
|
|
|
|
6A0000
|
unkown
|
page readonly
|
|
|
|
49B000
|
unkown
|
page read and write
|
|
|
|
244F000
|
stack
|
page read and write
|
|
|
|
7FF5AAE46000
|
unkown
|
page readonly
|
|
|
|
5EAD000
|
unkown
|
page read and write
|
|
|
|
72D000
|
unkown
|
page read and write
|
|
|
|
2480000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
7FF5BFBBD000
|
unkown
|
page readonly
|
|
|
|
D93000
|
unkown
|
page read and write
|
|
|
|
72D000
|
unkown
|
page read and write
|
|
|
|
6033000
|
heap private
|
page read and write
|
|
|
|
2D70000
|
unkown
|
page readonly
|
|
|
|
28D7A700000
|
unkown
|
page read and write
|
|
|
|
287F000
|
unkown
|
page read and write
|
|
|
|
D24000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
2EE0000
|
unkown
|
page readonly
|
|
|
|
FF65A7A000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
7FF5CBE98000
|
unkown
|
page readonly
|
|
|
|
254802AF000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
5EBC000
|
unkown
|
page read and write
|
|
|
|
16F5AF40000
|
unkown
|
page readonly
|
|
|
|
6B4617E000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA01000
|
unkown
|
page readonly
|
|
|
|
2E2D000
|
unkown
|
page readonly
|
|
|
|
CFA000
|
unkown
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
7FF568B62000
|
unkown
|
page readonly
|
|
|
|
CC6000
|
unkown
|
page read and write
|
|
|
|
343A000
|
unkown
|
page read and write
|
|
|
|
1BDFE904000
|
unkown
|
page read and write
|
|
|
|
2710000
|
heap private
|
page read and write
|
|
|
|
7FF5DD056000
|
unkown
|
page readonly
|
|
|
|
E2A000
|
unkown
|
page read and write
|
|
|
|
1FBB9E02000
|
unkown
|
page read and write
|
|
|
|
2114EE3F000
|
unkown
|
page read and write
|
|
|
|
1BDFE93C000
|
unkown
|
page read and write
|
|
|
|
1FBB81C0000
|
heap private
|
page read and write
|
|
|
|
B97000
|
unkown
|
page read and write
|
|
|
|
5E1000
|
unkown
|
page read and write
|
|
|
|
2E2D000
|
unkown
|
page readonly
|
|
|
|
C77000
|
unkown
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
28D7A200000
|
unkown
|
page readonly
|
|
|
|
25482583000
|
unkown
|
page read and write
|
|
|
|
296C000
|
unkown
|
page read and write
|
|
|
|
C48000
|
unkown
|
page read and write
|
|
|
|
21657A30000
|
heap private
|
page read and write
|
|
|
|
E53000
|
unkown
|
page read and write
|
|
|
|
4ACA000
|
unkown
|
page read and write
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
2114EE00000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown
|
page read and write
|
|
|
|
100BB000
|
unkown image
|
page write copy
|
|
|
|
CEA000
|
unkown
|
page read and write
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
2E62000
|
unkown
|
page readonly
|
|
|
|
510A000
|
unkown
|
page read and write
|
|
|
|
7FF7185B3000
|
unkown image
|
page readonly
|
|
|
|
2DB000
|
unkown
|
page read and write
|
|
|
|
CB7000
|
unkown
|
page read and write
|
|
|
|
465000
|
unkown image
|
page readonly
|
|
|
|
29D1000
|
unkown
|
page read and write
|
|
|
|
5E96000
|
unkown
|
page read and write
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
7FF5D2802000
|
unkown
|
page readonly
|
|
|
|
5948000
|
unkown
|
page read and write
|
|
|
|
26CB000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
72C84FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D30B1000
|
unkown
|
page readonly
|
|
|
|
6DF000
|
unkown
|
page read and write
|
|
|
|
DFC000
|
unkown
|
page read and write
|
|
|
|
C13000
|
unkown
|
page read and write
|
|
|
|
1BDFE92D000
|
unkown
|
page read and write
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
577E000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
heap private
|
page read and write
|
|
|
|
7FF52D2D2000
|
unkown
|
page readonly
|
|
|
|
7FF5DD01F000
|
unkown
|
page readonly
|
|
|
|
370C000
|
unkown
|
page readonly
|
|
|
|
579D000
|
unkown
|
page read and write
|
|
|
|
7FF516E9A000
|
unkown
|
page readonly
|
|
|
|
C27000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
C39000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
7FF54B18F000
|
unkown
|
page readonly
|
|
|
|
7FF596532000
|
unkown
|
page readonly
|
|
|
|
14E8000
|
heap default
|
page read and write
|
|
|
|
C2D000
|
unkown
|
page read and write
|
|
|
|
1FBB9DE0000
|
unkown
|
page readonly
|
|
|
|
4B2FB79000
|
unkown
|
page read and write
|
|
|
|
1FBB8426000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFD2000
|
unkown
|
page readonly
|
|
|
|
7FF57589A000
|
unkown
|
page readonly
|
|
|
|
1FBB83F0000
|
unkown
|
page read and write
|
|
|
|
28D7A0FC000
|
unkown
|
page read and write
|
|
|
|
27DA000
|
unkown
|
page read and write
|
|
|
|
50E4000
|
unkown
|
page read and write
|
|
|
|
289BC0D0000
|
unkown
|
page readonly
|
|
|
|
5F04000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
7FF5962AC000
|
unkown
|
page readonly
|
|
|
|
730000
|
unkown
|
page read and write
|
|
|
|
C36000
|
unkown
|
page read and write
|
|
|
|
346B000
|
unkown
|
page read and write
|
|
|
|
28D7F5F0000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC4E000
|
unkown
|
page readonly
|
|
|
|
28D7F910000
|
unkown
|
page readonly
|
|
|
|
2700000
|
heap private
|
page read and write
|
|
|
|
34F0000
|
unkown
|
page readonly
|
|
|
|
1D28A210000
|
heap default
|
page read and write
|
|
|
|
2114EE7F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8AC000
|
unkown
|
page readonly
|
|
|
|
A99A8FB000
|
unkown
|
page read and write
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
28D7F49E000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
1939A4D0000
|
unkown
|
page readonly
|
|
|
|
7FF54B17E000
|
unkown
|
page readonly
|
|
|
|
4B8000
|
unkown
|
page read and write
|
|
|
|
7FF568B76000
|
unkown
|
page readonly
|
|
|
|
CA9000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
C47000
|
unkown
|
page read and write
|
|
|
|
E03000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
46C8000
|
unkown
|
page read and write
|
|
|
|
28956402000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
289BBE50000
|
unkown
|
page read and write
|
|
|
|
C0B000
|
unkown
|
page read and write
|
|
|
|
289BBE7A000
|
unkown
|
page read and write
|
|
|
|
4DB000
|
unkown
|
page read and write
|
|
|
|
474F000
|
unkown
|
page read and write
|
|
|
|
832000
|
unkown image
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
2EF4000
|
unkown
|
page readonly
|
|
|
|
5EF6000
|
unkown
|
page read and write
|
|
|
|
E5209FE000
|
unkown
|
page read and write
|
|
|
|
E2B000
|
unkown
|
page read and write
|
|
|
|
7AF66FF000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
2C5F000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
58E0000
|
unkown
|
page read and write
|
|
|
|
621000
|
unkown
|
page read and write
|
|
|
|
C15000
|
unkown
|
page read and write
|
|
|
|
1BDFE948000
|
unkown
|
page read and write
|
|
|
|
DB5000
|
unkown
|
page read and write
|
|
|
|
C8E000
|
unkown
|
page read and write
|
|
|
|
28D7F61F000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
7FF520611000
|
unkown
|
page readonly
|
|
|
|
C22000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
C82000
|
unkown
|
page read and write
|
|
|
|
930000
|
unkown
|
page readonly
|
|
|
|
25481C70000
|
unkown
|
page readonly
|
|
|
|
C70000
|
unkown
|
page readonly
|
|
|
|
CE3000
|
unkown
|
page read and write
|
|
|
|
7FF5DD029000
|
unkown
|
page readonly
|
|
|
|
455F000
|
stack
|
page read and write
|
|
|
|
7FF512F29000
|
unkown
|
page readonly
|
|
|
|
3D0000
|
unkown
|
page readonly
|
|
|
|
702B0000
|
unkown image
|
page readonly
|
|
|
|
1BDFE930000
|
unkown
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
DD8000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
254802A8000
|
unkown
|
page read and write
|
|
|
|
7FF5D2ECF000
|
unkown
|
page readonly
|
|
|
|
3FE0C7F000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
2C32000
|
unkown
|
page read and write
|
|
|
|
28D7AF90000
|
unkown
|
page readonly
|
|
|
|
41C1000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
1BDFE90A000
|
unkown
|
page read and write
|
|
|
|
7AF65FD000
|
unkown
|
page read and write
|
|
|
|
2114F120000
|
unkown
|
page readonly
|
|
|
|
E13000
|
unkown
|
page read and write
|
|
|
|
DEE000
|
unkown
|
page read and write
|
|
|
|
25480020000
|
heap private
|
page read and write
|
|
|
|
7FF516F84000
|
unkown
|
page readonly
|
|
|
|
4B2FBFF000
|
unkown
|
page read and write
|
|
|
|
7FF512E38000
|
unkown
|
page readonly
|
|
|
|
271B000
|
heap private
|
page read and write
|
|
|
|
4A72000
|
unkown
|
page read and write
|
|
|
|
7FF520746000
|
unkown
|
page readonly
|
|
|
|
7FF4F3448000
|
unkown
|
page readonly
|
|
|
|
2730000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D1F000
|
unkown
|
page readonly
|
|
|
|
7FF5759B1000
|
unkown
|
page readonly
|
|
|
|
18EB384F000
|
unkown
|
page read and write
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
47F000
|
unkown
|
page read and write
|
|
|
|
4A9F000
|
unkown
|
page read and write
|
|
|
|
2114EE83000
|
unkown
|
page read and write
|
|
|
|
7FF512DC4000
|
unkown
|
page readonly
|
|
|
|
7FF5689EF000
|
unkown
|
page readonly
|
|
|
|
2235000
|
heap private
|
page read and write
|
|
|
|
254802C7000
|
unkown
|
page read and write
|
|
|
|
50B2000
|
unkown
|
page read and write
|
|
|
|
C6B000
|
unkown
|
page read and write
|
|
|
|
7FF501BD5000
|
unkown
|
page readonly
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
115E000
|
unkown
|
page read and write
|
|
|
|
25482067000
|
unkown
|
page read and write
|
|
|
|
58BA000
|
unkown
|
page read and write
|
|
|
|
7FF52D329000
|
unkown
|
page readonly
|
|
|
|
4E7000
|
unkown
|
page read and write
|
|
|
|
1D28AA02000
|
unkown
|
page read and write
|
|
|
|
5ED2000
|
unkown
|
page read and write
|
|
|
|
10C0000
|
unkown
|
page readonly
|
|
|
|
7FD60000
|
unkown
|
page read and write
|
|
|
|
28DFA77000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
4AB4000
|
unkown
|
page read and write
|
|
|
|
27EA000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
B80000
|
unkown
|
page read and write
|
|
|
|
28D7F560000
|
unkown
|
page read and write
|
|
|
|
4D4000
|
unkown
|
page read and write
|
|
|
|
C42000
|
unkown
|
page read and write
|
|
|
|
1D28A513000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
unkown
|
page readonly
|
|
|
|
5FCC000
|
unkown
|
page read and write
|
|
|
|
4B10000
|
heap private
|
page read and write
|
|
|
|
4BD000
|
unkown
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
7FF501C99000
|
unkown
|
page readonly
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
C3F000
|
unkown
|
page read and write
|
|
|
|
7FF5CC246000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1C0000
|
unkown
|
page readonly
|
|
|
|
CFD000
|
unkown
|
page read and write
|
|
|
|
7FF501A1F000
|
unkown
|
page readonly
|
|
|
|
7FF568BEC000
|
unkown
|
page readonly
|
|
|
|
289BBE60000
|
unkown
|
page read and write
|
|
|
|
83E000
|
stack
|
page read and write
|
|
|
|
28D7F60D000
|
unkown
|
page read and write
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
7FDF0000
|
unkown
|
page read and write
|
|
|
|
3212000
|
unkown
|
page read and write
|
|
|
|
BC5000
|
unkown
|
page read and write
|
|
|
|
450000
|
heap default
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
254802EE000
|
unkown
|
page read and write
|
|
|
|
1BDFE927000
|
unkown
|
page read and write
|
|
|
|
7FF5DD0D0000
|
unkown
|
page readonly
|
|
|
|
CEB000
|
unkown
|
page read and write
|
|
|
|
C53000
|
unkown
|
page read and write
|
|
|
|
79E000
|
unkown
|
page read and write
|
|
|
|
1FBB8447000
|
unkown
|
page read and write
|
|
|
|
28D79F10000
|
unkown
|
page readonly
|
|
|
|
8BA000
|
stack
|
page read and write
|
|
|
|
511000
|
unkown
|
page read and write
|
|
|
|
61C0000
|
unkown
|
page readonly
|
|
|
|
1BDFE8F9000
|
unkown
|
page read and write
|
|
|
|
2114EDE0000
|
unkown
|
page readonly
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
741000
|
unkown
|
page read and write
|
|
|
|
254802DA000
|
unkown
|
page read and write
|
|
|
|
20BFDD13000
|
unkown
|
page read and write
|
|
|
|
7FF54B0F7000
|
unkown
|
page readonly
|
|
|
|
1939A213000
|
unkown
|
page read and write
|
|
|
|
1FF6DC00000
|
unkown
|
page read and write
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
BF7000
|
unkown
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
7FF54B15A000
|
unkown
|
page readonly
|
|
|
|
7DC1E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC59000
|
unkown
|
page readonly
|
|
|
|
18EB3780000
|
unkown
|
page readonly
|
|
|
|
25482702000
|
unkown
|
page read and write
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
2912000
|
unkown
|
page read and write
|
|
|
|
254802AE000
|
unkown
|
page read and write
|
|
|
|
7AF61FD000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
D19000
|
unkown
|
page read and write
|
|
|
|
3510000
|
unkown
|
page read and write
|
|
|
|
36DE000
|
unkown
|
page read and write
|
|
|
|
5964000
|
unkown
|
page read and write
|
|
|
|
254824D3000
|
unkown
|
page read and write
|
|
|
|
51C000
|
unkown
|
page read and write
|
|
|
|
CBF000
|
unkown
|
page read and write
|
|
|
|
834000
|
unkown image
|
page write copy
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
2EE6000
|
unkown
|
page readonly
|
|
|
|
7FF51AA46000
|
unkown
|
page readonly
|
|
|
|
7FF5AAB85000
|
unkown
|
page readonly
|
|
|
|
7FD60000
|
unkown
|
page read and write
|
|
|
|
7FF56830B000
|
unkown
|
page readonly
|
|
|
|
7FF54B1C6000
|
unkown
|
page readonly
|
|
|
|
7FF568BA5000
|
unkown
|
page readonly
|
|
|
|
580000
|
unkown
|
page readonly
|
|
|
|
7FF52064C000
|
unkown
|
page readonly
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
E4B000
|
unkown
|
page read and write
|
|
|
|
2982000
|
unkown
|
page read and write
|
|
|
|
25480273000
|
unkown
|
page read and write
|
|
|
|
E53000
|
unkown
|
page read and write
|
|
|
|
453000
|
unkown image
|
page read and write
|
|
|
|
7FF5BE931000
|
unkown
|
page readonly
|
|
|
|
7FF568C69000
|
unkown
|
page readonly
|
|
|
|
5773000
|
unkown
|
page read and write
|
|
|
|
1BDFE91B000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
5F97000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page readonly
|
|
|
|
10EE000
|
unkown
|
page read and write
|
|
|
|
1009000
|
heap default
|
page read and write
|
|
|
|
29512400000
|
heap default
|
page read and write
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
28D7A718000
|
unkown
|
page read and write
|
|
|
|
2777000
|
unkown
|
page read and write
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
5F79000
|
unkown
|
page read and write
|
|
|
|
7FF5AAEBE000
|
unkown
|
page readonly
|
|
|
|
2D18000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F6C000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
4C1000
|
unkown
|
page read and write
|
|
|
|
B70000
|
heap private
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
D1E000
|
unkown
|
page read and write
|
|
|
|
28D7F840000
|
unkown
|
page readonly
|
|
|
|
1CE8B5D0000
|
heap default
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
5FC0000
|
unkown
|
page read and write
|
|
|
|
7FF5206D0000
|
unkown
|
page readonly
|
|
|
|
254820CE000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF52D236000
|
unkown
|
page readonly
|
|
|
|
289BBE6B000
|
unkown
|
page read and write
|
|
|
|
7FF5CC2BE000
|
unkown
|
page readonly
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
7FF512DFA000
|
unkown
|
page readonly
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
107D000
|
stack
|
page read and write
|
|
|
|
840000
|
unkown image
|
page write copy
|
|
|
|
C60000
|
heap private
|
page read and write
|
|
|
|
5964000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
50F3000
|
unkown
|
page read and write
|
|
|
|
16925A6A000
|
unkown
|
page read and write
|
|
|
|
FF6577E000
|
unkown
|
page read and write
|
|
|
|
A70000
|
heap private
|
page read and write
|
|
|
|
7FF59655E000
|
unkown
|
page readonly
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
18EB36A0000
|
unkown
|
page readonly
|
|
|
|
35D4000
|
unkown
|
page read and write
|
|
|
|
100BD000
|
unkown image
|
page write copy
|
|
|
|
5FCC000
|
unkown
|
page read and write
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
6270000
|
heap private
|
page read and write
|
|
|
|
7FF5BE8D7000
|
unkown
|
page readonly
|
|
|
|
7FF568B58000
|
unkown
|
page readonly
|
|
|
|
2230000
|
unkown
|
page readonly
|
|
|
|
2951263C000
|
unkown
|
page read and write
|
|
|
|
7FF5BE7E7000
|
unkown
|
page readonly
|
|
|
|
51C0000
|
unkown
|
page read and write
|
|
|
|
7FF57594A000
|
unkown
|
page readonly
|
|
|
|
C6B000
|
unkown
|
page read and write
|
|
|
|
1FBB8457000
|
unkown
|
page read and write
|
|
|
|
1024000
|
unkown
|
page read and write
|
|
|
|
28EE000
|
unkown
|
page read and write
|
|
|
|
2220000
|
heap private
|
page read and write
|
|
|
|
7FF52D29C000
|
unkown
|
page readonly
|
|
|
|
26B0000
|
unkown
|
page read and write
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
5F0C000
|
unkown
|
page read and write
|
|
|
|
6DA000
|
unkown
|
page read and write
|
|
|
|
2FB0000
|
heap private
|
page read and write
|
|
|
|
1FBB8457000
|
unkown
|
page read and write
|
|
|
|
D02000
|
unkown
|
page read and write
|
|
|
|
7FF501BFD000
|
unkown
|
page readonly
|
|
|
|
5E69000
|
unkown
|
page read and write
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
70270000
|
unkown image
|
page readonly
|
|
|
|
26B3000
|
unkown
|
page read and write
|
|
|
|
4A73000
|
unkown
|
page read and write
|
|
|
|
1BDFE992000
|
unkown
|
page read and write
|
|
|
|
58D9000
|
unkown
|
page read and write
|
|
|
|
5863000
|
heap private
|
page read and write
|
|
|
|
E90000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CAE000
|
unkown
|
page readonly
|
|
|
|
4B20000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page read and write
|
|
|
|
5108000
|
unkown
|
page read and write
|
|
|
|
765000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
600000
|
unkown
|
page readonly
|
|
|
|
C4A000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
heap private
|
page read and write
|
|
|
|
49B000
|
heap default
|
page read and write
|
|
|
|
58C9000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
1FBB843D000
|
unkown
|
page read and write
|
|
|
|
6DF000
|
unkown
|
page read and write
|
|
|
|
5924000
|
unkown
|
page read and write
|
|
|
|
29BC000
|
unkown
|
page read and write
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
25482059000
|
unkown
|
page read and write
|
|
|
|
25482043000
|
unkown
|
page read and write
|
|
|
|
58E0000
|
unkown
|
page read and write
|
|
|
|
A99AEFF000
|
unkown
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
6620000
|
unkown
|
page read and write
|
|
|
|
2479000
|
heap private
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
16F5A302000
|
unkown
|
page read and write
|
|
|
|
D12000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
1939A130000
|
heap default
|
page read and write
|
|
|
|
E1E000
|
unkown
|
page read and write
|
|
|
|
3500000
|
unkown
|
page readonly
|
|
|
|
A99A7FB000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
7FF512A05000
|
unkown
|
page readonly
|
|
|
|
5EFD000
|
unkown
|
page read and write
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
2548200E000
|
unkown
|
page read and write
|
|
|
|
48DE000
|
unkown
|
page read and write
|
|
|
|
25480270000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
7FF4F357A000
|
unkown
|
page readonly
|
|
|
|
837000
|
unkown image
|
page read and write
|
|
|
|
254820B1000
|
unkown
|
page read and write
|
|
|
|
519C000
|
unkown
|
page readonly
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7FF5AA680000
|
unkown
|
page readonly
|
|
|
|
27E5000
|
heap private
|
page read and write
|
|
|
|
6D50F000
|
unkown image
|
page readonly
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
2440000
|
heap private
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
4B2FD7F000
|
unkown
|
page read and write
|
|
|
|
6023000
|
unkown
|
page read and write
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
DDE000
|
unkown
|
page read and write
|
|
|
|
D88000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
1939A257000
|
unkown
|
page read and write
|
|
|
|
BFE000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
18EB3630000
|
heap private
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
7FF5AA705000
|
unkown
|
page readonly
|
|
|
|
2464000
|
unkown
|
page read and write
|
|
|
|
4B2FAFE000
|
unkown
|
page read and write
|
|
|
|
289BBE3B000
|
unkown
|
page read and write
|
|
|
|
7FF5D2FBC000
|
unkown
|
page readonly
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
30F2000
|
unkown
|
page read and write
|
|
|
|
CE3000
|
unkown
|
page read and write
|
|
|
|
3C7000
|
unkown
|
page read and write
|
|
|
|
1BDFE97F000
|
unkown
|
page read and write
|
|
|
|
C2C000
|
unkown
|
page read and write
|
|
|
|
46C1000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
7FF5964FC000
|
unkown
|
page readonly
|
|
|
|
28956990000
|
unkown
|
page readonly
|
|
|
|
1014000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
21657C13000
|
unkown
|
page read and write
|
|
|
|
542F000
|
stack
|
page read and write
|
|
|
|
7FF5DCE40000
|
unkown
|
page readonly
|
|
|
|
4D3000
|
unkown
|
page read and write
|
|
|
|
925000
|
heap private
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
7FF5CBE03000
|
unkown
|
page readonly
|
|
|
|
7FF575A82000
|
unkown
|
page readonly
|
|
|
|
289BBE49000
|
unkown
|
page read and write
|
|
|
|
25482025000
|
unkown
|
page read and write
|
|
|
|
2E73000
|
unkown
|
page readonly
|
|
|
|
100A5000
|
unkown image
|
page readonly
|
|
|
|
7FF501C8E000
|
unkown
|
page readonly
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
516000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBD6000
|
unkown
|
page readonly
|
|
|
|
7FF54AFB0000
|
unkown
|
page readonly
|
|
|
|
2548204D000
|
unkown
|
page read and write
|
|
|
|
ABE7175000
|
unkown
|
page read and write
|
|
|
|
1CE8CFF0000
|
unkown
|
page readonly
|
|
|
|
1BDFE99D000
|
unkown
|
page read and write
|
|
|
|
7FF54B1AD000
|
unkown
|
page readonly
|
|
|
|
1CE8B6F5000
|
heap private
|
page read and write
|
|
|
|
4C8000
|
unkown
|
page read and write
|
|
|
|
25480274000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown
|
page read and write
|
|
|
|
453000
|
unkown image
|
page write copy
|
|
|
|
29512700000
|
unkown
|
page read and write
|
|
|
|
7FF596629000
|
unkown
|
page readonly
|
|
|
|
119E000
|
stack
|
page read and write
|
|
|
|
6038000
|
unkown
|
page read and write
|
|
|
|
7FF5DD03D000
|
unkown
|
page readonly
|
|
|
|
621000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
4723000
|
unkown
|
page read and write
|
|
|
|
1BDFE91B000
|
unkown
|
page read and write
|
|
|
|
5EAD000
|
unkown
|
page read and write
|
|
|
|
4520000
|
unkown
|
page readonly
|
|
|
|
2E36000
|
unkown
|
page readonly
|
|
|
|
1CE8D22F000
|
heap private
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5BE8A6000
|
unkown
|
page readonly
|
|
|
|
1D28A600000
|
unkown
|
page readonly
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
28D7F4C0000
|
unkown
|
page read and write
|
|
|
|
C6C000
|
unkown
|
page read and write
|
|
|
|
C68000
|
unkown
|
page read and write
|
|
|
|
246B000
|
unkown
|
page read and write
|
|
|
|
16F5A1E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE743000
|
unkown
|
page readonly
|
|
|
|
28D7B2D1000
|
unkown
|
page read and write
|
|
|
|
E04000
|
unkown
|
page read and write
|
|
|
|
7FF501BDF000
|
unkown
|
page readonly
|
|
|
|
7FF516C57000
|
unkown
|
page readonly
|
|
|
|
6003000
|
heap private
|
page read and write
|
|
|
|
4D3000
|
unkown
|
page read and write
|
|
|
|
3FE0A7B000
|
unkown
|
page read and write
|
|
|
|
E4B000
|
unkown
|
page read and write
|
|
|
|
7FF52D1D4000
|
unkown
|
page readonly
|
|
|
|
7FF5AAB77000
|
unkown
|
page readonly
|
|
|
|
CFE000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
5727000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8BC000
|
unkown
|
page readonly
|
|
|
|
7FF5758FF000
|
unkown
|
page readonly
|
|
|
|
D3F000
|
stack
|
page read and write
|
|
|
|
2C35000
|
unkown
|
page read and write
|
|
|
|
D19000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
2548026B000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
heap default
|
page read and write
|
|
|
|
D07000
|
unkown
|
page read and write
|
|
|
|
5EEF000
|
unkown
|
page read and write
|
|
|
|
1D28A508000
|
unkown
|
page read and write
|
|
|
|
7FF52071F000
|
unkown
|
page readonly
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
1BDFE930000
|
unkown
|
page read and write
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
35C0000
|
heap private
|
page read and write
|
|
|
|
7FF5CC04F000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
CF6000
|
unkown
|
page read and write
|
|
|
|
1939AC00000
|
unkown
|
page readonly
|
|
|
|
320E000
|
unkown
|
page read and write
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
2C38000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
7E1000
|
unkown
|
page read and write
|
|
|
|
289BBE62000
|
unkown
|
page read and write
|
|
|
|
7FF516F66000
|
unkown
|
page readonly
|
|
|
|
7FD5A000
|
unkown
|
page read and write
|
|
|
|
D03000
|
unkown
|
page read and write
|
|
|
|
7FF4F35C6000
|
unkown
|
page readonly
|
|
|
|
4B8000
|
unkown
|
page read and write
|
|
|
|
551E000
|
unkown
|
page read and write
|
|
|
|
BEFF71B000
|
unkown
|
page read and write
|
|
|
|
7FF52CFA3000
|
unkown
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
7FF5D2D7E000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown image
|
page write copy
|
|
|
|
7AF67FF000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
527000
|
unkown
|
page read and write
|
|
|
|
7FF4F3595000
|
unkown
|
page readonly
|
|
|
|
26EE000
|
unkown
|
page read and write
|
|
|
|
72E000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC15000
|
unkown
|
page readonly
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
25480241000
|
unkown
|
page read and write
|
|
|
|
7FF52D23A000
|
unkown
|
page readonly
|
|
|
|
D2141FA000
|
unkown
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
DB0000
|
unkown
|
page read and write
|
|
|
|
4996000
|
unkown
|
page read and write
|
|
|
|
FF658FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F33DF000
|
unkown
|
page readonly
|
|
|
|
1CE8B6F0000
|
heap private
|
page read and write
|
|
|
|
7FF4F34CC000
|
unkown
|
page readonly
|
|
|
|
28DF97B000
|
unkown
|
page read and write
|
|
|
|
736000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page readonly
|
|
|
|
746000
|
unkown
|
page read and write
|
|
|
|
1BDFE90F000
|
unkown
|
page read and write
|
|
|
|
2890000
|
heap private
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
1BDFE8F9000
|
unkown
|
page read and write
|
|
|
|
2870000
|
unkown
|
page read and write
|
|
|
|
832000
|
unkown image
|
page read and write
|
|
|
|
21657B80000
|
unkown
|
page readonly
|
|
|
|
25480275000
|
unkown
|
page read and write
|
|
|
|
C44000
|
unkown
|
page read and write
|
|
|
|
7FF54B16A000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFE8000
|
unkown
|
page readonly
|
|
|
|
34B0000
|
unkown
|
page read and write
|
|
|
|
619E9AE000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown
|
page read and write
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
28D7F69A000
|
unkown
|
page read and write
|
|
|
|
299F000
|
unkown
|
page read and write
|
|
|
|
2114EE68000
|
unkown
|
page read and write
|
|
|
|
7FF5BE7EA000
|
unkown
|
page readonly
|
|
|
|
7FF4F3497000
|
unkown
|
page readonly
|
|
|
|
28D7F615000
|
unkown
|
page read and write
|
|
|
|
2461000
|
unkown
|
page read and write
|
|
|
|
2330000
|
unkown
|
page read and write
|
|
|
|
7FF6E8570000
|
unkown image
|
page readonly
|
|
|
|
7FF52D1CE000
|
unkown
|
page readonly
|
|
|
|
1D28AF40000
|
unkown
|
page readonly
|
|
|
|
1D28A44D000
|
unkown
|
page read and write
|
|
|
|
72C86FF000
|
unkown
|
page read and write
|
|
|
|
2776000
|
unkown
|
page read and write
|
|
|
|
619E8AB000
|
unkown
|
page read and write
|
|
|
|
28D7AD63000
|
unkown
|
page read and write
|
|
|
|
7FF52D220000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
2E46000
|
unkown
|
page readonly
|
|
|
|
28D7A600000
|
unkown
|
page read and write
|
|
|
|
26A0000
|
heap private
|
page read and write
|
|
|
|
62D0000
|
unkown
|
page read and write
|
|
|
|
7FF512E65000
|
unkown
|
page readonly
|
|
|
|
100BF000
|
unkown image
|
page read and write
|
|
|
|
3BE2C7F000
|
unkown
|
page read and write
|
|
|
|
841000
|
unkown image
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
7FF4F2D15000
|
unkown
|
page readonly
|
|
|
|
254824C6000
|
unkown
|
page read and write
|
|
|
|
3746000
|
unkown
|
page readonly
|
|
|
|
3060000
|
unkown
|
page readonly
|
|
|
|
25483110000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE60000
|
unkown
|
page readonly
|
|
|
|
254802BE000
|
unkown
|
page read and write
|
|
|
|
24B0000
|
heap private
|
page read and write
|
|
|
|
7FF5BE594000
|
unkown
|
page readonly
|
|
|
|
FF65D7E000
|
unkown
|
page read and write
|
|
|
|
60E000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
25481FF0000
|
unkown
|
page readonly
|
|
|
|
6274000
|
heap private
|
page read and write
|
|
|
|
1BDFE97D000
|
unkown
|
page read and write
|
|
|
|
E2C000
|
unkown
|
page read and write
|
|
|
|
7FF5CC2C1000
|
unkown
|
page readonly
|
|
|
|
2300000
|
unkown
|
page read and write
|
|
|
|
1D28A2F0000
|
unkown
|
page readonly
|
|
|
|
26D2000
|
unkown
|
page read and write
|
|
|
|
25483213000
|
unkown
|
page read and write
|
|
|
|
6D41F000
|
unkown image
|
page readonly
|
|
|
|
7FF512CEB000
|
unkown
|
page readonly
|
|
|
|
2928000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE4C000
|
unkown
|
page readonly
|
|
|
|
468F000
|
unkown
|
page read and write
|
|
|
|
2F2E000
|
stack
|
page read and write
|
|
|
|
7FF516F6C000
|
unkown
|
page readonly
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
2AE000
|
unkown
|
page read and write
|
|
|
|
18EB3800000
|
unkown
|
page read and write
|
|
|
|
4654000
|
unkown
|
page read and write
|
|
|
|
3580000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
heap private
|
page read and write
|
|
|
|
58AC000
|
unkown
|
page read and write
|
|
|
|
7FF512CF9000
|
unkown
|
page readonly
|
|
|
|
72C000
|
unkown
|
page read and write
|
|
|
|
591C000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page write copy
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
7FF5AA67E000
|
unkown
|
page readonly
|
|
|
|
316F000
|
unkown
|
page read and write
|
|
|
|
16F5A2E1000
|
unkown
|
page read and write
|
|
|
|
289BBDB0000
|
unkown
|
page readonly
|
|
|
|
D01000
|
unkown
|
page read and write
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
6290000
|
unkown
|
page read and write
|
|
|
|
289BBE67000
|
unkown
|
page read and write
|
|
|
|
20BFDC00000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
heap private
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
1FF6DD00000
|
unkown
|
page read and write
|
|
|
|
56F7000
|
unkown
|
page read and write
|
|
|
|
52D000
|
unkown
|
page read and write
|
|
|
|
CD4000
|
unkown
|
page read and write
|
|
|
|
7FF5CC1C2000
|
unkown
|
page readonly
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
2548026F000
|
unkown
|
page read and write
|
|
|
|
602A000
|
unkown
|
page read and write
|
|
|
|
7FF501C25000
|
unkown
|
page readonly
|
|
|
|
7FF52D291000
|
unkown
|
page readonly
|
|
|
|
BEFFFFD000
|
unkown
|
page read and write
|
|
|
|
72C85F9000
|
unkown
|
page read and write
|
|
|
|
16F5A1F0000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
7FF50132A000
|
unkown
|
page readonly
|
|
|
|
7FF5D30E0000
|
unkown
|
page readonly
|
|
|
|
2DFE000
|
unkown
|
page readonly
|
|
|
|
58B3000
|
unkown
|
page read and write
|
|
|
|
5EC4000
|
unkown
|
page read and write
|
|
|
|
7FF596565000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
7FF5CC267000
|
unkown
|
page readonly
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
788000
|
unkown
|
page read and write
|
|
|
|
9A0000
|
unkown
|
page readonly
|
|
|
|
45B7000
|
unkown
|
page read and write
|
|
|
|
46C8000
|
unkown
|
page read and write
|
|
|
|
2114EE7E000
|
unkown
|
page read and write
|
|
|
|
C30000
|
heap default
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
7FF4F35CC000
|
unkown
|
page readonly
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
7FD68000
|
unkown
|
page read and write
|
|
|
|
7FF59654A000
|
unkown
|
page readonly
|
|
|
|
7FF54B249000
|
unkown
|
page readonly
|
|
|
|
D80000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
7FF4F35E5000
|
unkown
|
page readonly
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
4C2000
|
unkown
|
page read and write
|
|
|
|
7FF54AEA4000
|
unkown
|
page readonly
|
|
|
|
7FF5AABEB000
|
unkown
|
page readonly
|
|
|
|
1939A228000
|
unkown
|
page read and write
|
|
|
|
DE0000
|
heap private
|
page read and write
|
|
|
|
6B0000
|
heap default
|
page read and write
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
5F21000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
28D7A702000
|
unkown
|
page read and write
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
502000
|
unkown
|
page read and write
|
|
|
|
294F000
|
unkown
|
page read and write
|
|
|
|
7FF5D3140000
|
unkown
|
page readonly
|
|
|
|
2834000
|
unkown
|
page read and write
|
|
|
|
25480279000
|
unkown
|
page read and write
|
|
|
|
1BDFE936000
|
unkown
|
page read and write
|
|
|
|
58F6000
|
unkown
|
page read and write
|
|
|
|
4696000
|
unkown
|
page read and write
|
|
|
|
D21407B000
|
unkown
|
page read and write
|
|
|
|
85B000
|
unkown image
|
page write copy
|
|
|
|
28DF7F5000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
E25000
|
unkown
|
page read and write
|
|
|
|
469D000
|
unkown
|
page read and write
|
|
|
|
1BDFE92A000
|
unkown
|
page read and write
|
|
|
|
732000
|
unkown
|
page read and write
|
|
|
|
D26000
|
unkown
|
page read and write
|
|
|
|
6030000
|
heap private
|
page read and write
|
|
|
|
14F2000
|
unkown
|
page read and write
|
|
|
|
25483010000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
7FF5965AC000
|
unkown
|
page readonly
|
|
|
|
7FF501C16000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
510000
|
unkown
|
page readonly
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
254824D0000
|
unkown
|
page read and write
|
|
|
|
A99A57A000
|
unkown
|
page read and write
|
|
|
|
A6D000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
1FBB83F0000
|
unkown
|
page read and write
|
|
|
|
732000
|
unkown
|
page read and write
|
|
|
|
2114EE54000
|
unkown
|
page read and write
|
|
|
|
1350000
|
heap default
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
7FF5202CA000
|
unkown
|
page readonly
|
|
|
|
105F000
|
stack
|
page read and write
|
|
|
|
1BDFE90C000
|
unkown
|
page read and write
|
|
|
|
7FF5AADD2000
|
unkown
|
page readonly
|
|
|
|
29512600000
|
unkown
|
page read and write
|
|
|
|
1340000
|
heap private
|
page read and write
|
|
|
|
7FF516E97000
|
unkown
|
page readonly
|
|
|
|
7FF54A9EB000
|
unkown
|
page readonly
|
|
|
|
72C847B000
|
unkown
|
page read and write
|
|
|
|
7FF516EF6000
|
unkown
|
page readonly
|
|
|
|
7FF5CC2C9000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA03000
|
unkown
|
page readonly
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
2114EDD0000
|
heap default
|
page read and write
|
|
|
|
4CE000
|
unkown
|
page read and write
|
|
|
|
6280000
|
unkown
|
page readonly
|
|
|
|
25482059000
|
unkown
|
page read and write
|
|
|
|
289BBE4A000
|
unkown
|
page read and write
|
|
|
|
21657AA0000
|
unkown
|
page readonly
|
|
|
|
D93000
|
unkown
|
page read and write
|
|
|
|
7FF516EA1000
|
unkown
|
page readonly
|
|
|
|
2850000
|
unkown
|
page readonly
|
|
|
|
25480273000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBC6000
|
unkown
|
page readonly
|
|
|
|
2E85000
|
unkown
|
page readonly
|
|
|
|
516000
|
unkown
|
page read and write
|
|
|
|
7FF512F1E000
|
unkown
|
page readonly
|
|
|
|
48D000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
73E000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
7FF568B78000
|
unkown
|
page readonly
|
|
|
|
CCB000
|
unkown
|
page read and write
|
|
|
|
C22000
|
unkown
|
page read and write
|
|
|
|
E39000
|
unkown
|
page read and write
|
|
|
|
790000
|
heap private
|
page read and write
|
|
|
|
2210000
|
heap private
|
page read and write
|
|
|
|
1D28A46E000
|
unkown
|
page read and write
|
|
|
|
25482056000
|
unkown
|
page read and write
|
|
|
|
2FEE000
|
stack
|
page read and write
|
|
|
|
50E000
|
unkown
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
7FF5BE86E000
|
unkown
|
page readonly
|
|
|
|
1BDFE8F3000
|
unkown
|
page read and write
|
|
|
|
E31000
|
unkown
|
page read and write
|
|
|
|
2548204F000
|
unkown
|
page read and write
|
|
|
|
35AB000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
28D7F64C000
|
unkown
|
page read and write
|
|
|
|
245B000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE2D000
|
unkown
|
page readonly
|
|
|
|
2E2D000
|
unkown
|
page readonly
|
|
|
|
468F000
|
unkown
|
page read and write
|
|
|
|
26F0000
|
unkown
|
page readonly
|
|
|
|
737000
|
unkown
|
page read and write
|
|
|
|
4A8C000
|
unkown
|
page read and write
|
|
|
|
62C0000
|
unkown
|
page readonly
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
1BDFE99C000
|
unkown
|
page read and write
|
|
|
|
18EB4002000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB68000
|
unkown
|
page readonly
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2F57000
|
unkown
|
page readonly
|
|
|
|
D02000
|
unkown
|
page read and write
|
|
|
|
7FF575968000
|
unkown
|
page readonly
|
|
|
|
254820C6000
|
unkown
|
page read and write
|
|
|
|
4E3000
|
unkown
|
page read and write
|
|
|
|
CE8000
|
unkown
|
page read and write
|
|
|
|
25482093000
|
unkown
|
page read and write
|
|
|
|
C31000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3BE274B000
|
unkown
|
page read and write
|
|
|
|
289BBE45000
|
unkown
|
page read and write
|
|
|
|
20BFF5A0000
|
unkown
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
25482600000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
F5E000
|
stack
|
page read and write
|
|
|
|
111E000
|
stack
|
page read and write
|
|
|
|
3460000
|
heap private
|
page read and write
|
|
|
|
21657BC0000
|
unkown
|
page read and write
|
|
|
|
7FF52073D000
|
unkown
|
page readonly
|
|
|
|
28AF000
|
unkown
|
page read and write
|
|
|
|
16F5A224000
|
unkown
|
page read and write
|
|
|
|
507000
|
unkown
|
page read and write
|
|
|
|
C02000
|
unkown
|
page read and write
|
|
|
|
254820A1000
|
unkown
|
page read and write
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
7FD5A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
heap private
|
page read and write
|
|
|
|
169259B0000
|
unkown
|
page write copy
|
|
|
|
AEE000
|
stack
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
heap private
|
page read and write
|
|
|
|
2C1C000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
CFB000
|
unkown
|
page read and write
|
|
|
|
49B000
|
unkown
|
page read and write
|
|
|
|
96000
|
unkown
|
page read and write
|
|
|
|
16925B13000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
4B2FC79000
|
unkown
|
page read and write
|
|
|
|
577E000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
7FF568B9E000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
5647000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
DDD000
|
unkown
|
page read and write
|
|
|
|
E53000
|
unkown
|
page read and write
|
|
|
|
21657E00000
|
unkown
|
page readonly
|
|
|
|
2DFE000
|
unkown
|
page readonly
|
|
|
|
254802F7000
|
unkown
|
page read and write
|
|
|
|
28D7AF80000
|
unkown
|
page readonly
|
|
|
|
4FD000
|
unkown
|
page read and write
|
|
|
|
5973000
|
unkown
|
page read and write
|
|
|
|
16925A6E000
|
unkown
|
page read and write
|
|
|
|
289BBE63000
|
unkown
|
page read and write
|
|
|
|
CDD000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page readonly
|
|
|
|
25480345000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBE5000
|
unkown
|
page readonly
|
|
|
|
28D7F600000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC88000
|
unkown
|
page readonly
|
|
|
|
E15000
|
unkown
|
page read and write
|
|
|
|
DAE000
|
stack
|
page read and write
|
|
|
|
25482029000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page execute and read and write
|
|
|
|
2470000
|
heap private
|
page read and write
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
5520000
|
unkown
|
page read and write
|
|
|
|
E38000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA05000
|
unkown
|
page readonly
|
|
|
|
7FF575B14000
|
unkown
|
page readonly
|
|
|
|
1BDFE8EC000
|
heap default
|
page read and write
|
|
|
|
7FF5AAAD6000
|
unkown
|
page readonly
|
|
|
|
254802C9000
|
unkown
|
page read and write
|
|
|
|
5EF6000
|
unkown
|
page read and write
|
|
|
|
36F6000
|
unkown
|
page readonly
|
|
|
|
50A000
|
unkown
|
page read and write
|
|
|
|
5F21000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF54AF05000
|
unkown
|
page readonly
|
|
|
|
28D7F5F0000
|
unkown
|
page read and write
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
3530000
|
unkown
|
page read and write
|
|
|
|
3130000
|
unkown
|
page read and write
|
|
|
|
CBE000
|
unkown
|
page read and write
|
|
|
|
C55000
|
unkown
|
page read and write
|
|
|
|
2E46000
|
unkown
|
page readonly
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
1BDFE99D000
|
unkown
|
page read and write
|
|
|
|
4A89000
|
unkown
|
page read and write
|
|
|
|
1CE8CFD0000
|
unkown
|
page readonly
|
|
|
|
C21000
|
unkown
|
page read and write
|
|
|
|
16925A6D000
|
unkown
|
page read and write
|
|
|
|
28D7F490000
|
unkown
|
page read and write
|
|
|
|
7FF59634B000
|
unkown
|
page readonly
|
|
|
|
4AD8000
|
unkown
|
page read and write
|
|
|
|
2364000
|
heap private
|
page read and write
|
|
|
|
7FF5965B7000
|
unkown
|
page readonly
|
|
|
|
25483110000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
7FF501C1C000
|
unkown
|
page readonly
|
|
|
|
10AC000
|
stack
|
page read and write
|
|
|
|
1BDFE90A000
|
unkown
|
page read and write
|
|
|
|
7FF6E85F1000
|
unkown image
|
page read and write
|
|
|
|
D08000
|
unkown
|
page read and write
|
|
|
|
48E000
|
unkown
|
page read and write
|
|
|
|
D09000
|
unkown
|
page read and write
|
|
|
|
C8E000
|
unkown
|
page read and write
|
|
|
|
549A000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
2DFE000
|
unkown
|
page readonly
|
|
|
|
5914000
|
unkown
|
page read and write
|
|
|
|
28D7F4D0000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
D27000
|
unkown
|
page read and write
|
|
|
|
CC1000
|
unkown
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
6D3F0000
|
unkown image
|
page readonly
|
|
|
|
5EEF000
|
unkown
|
page read and write
|
|
|
|
E03000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
741000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
A99AA7A000
|
unkown
|
page read and write
|
|
|
|
831000
|
unkown image
|
page write copy
|
|
|
|
7FF5D2D22000
|
unkown
|
page readonly
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
5F22000
|
unkown
|
page read and write
|
|
|
|
7FF596433000
|
unkown
|
page readonly
|
|
|
|
7FF501B90000
|
unkown
|
page readonly
|
|
|
|
C6B000
|
unkown
|
page read and write
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
5EBC000
|
unkown
|
page read and write
|
|
|
|
4764000
|
unkown
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
26BE000
|
unkown
|
page read and write
|
|
|
|
17B0000
|
heap private
|
page read and write
|
|
|
|
295125D0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
617A000
|
heap private
|
page read and write
|
|
|
|
310C000
|
unkown
|
page read and write
|
|
|
|
7FF596538000
|
unkown
|
page readonly
|
|
|
|
7FF52D24A000
|
unkown
|
page readonly
|
|
|
|
7FF501C99000
|
unkown
|
page readonly
|
|
|
|
69E000
|
unkown
|
page read and write
|
|
|
|
781000
|
unkown
|
page read and write
|
|
|
|
58E7000
|
unkown
|
page read and write
|
|
|
|
7FF568A77000
|
unkown
|
page readonly
|
|
|
|
BB1000
|
unkown
|
page read and write
|
|
|
|
CCB000
|
unkown
|
page read and write
|
|
|
|
D18000
|
unkown
|
page read and write
|
|
|
|
25482098000
|
unkown
|
page read and write
|
|
|
|
1939A313000
|
unkown
|
page read and write
|
|
|
|
D23000
|
unkown
|
page read and write
|
|
|
|
1BDFE8F0000
|
heap default
|
page read and write
|
|
|
|
5F40000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
C46000
|
unkown
|
page read and write
|
|
|
|
254802A3000
|
unkown
|
page read and write
|
|
|
|
289BC602000
|
unkown
|
page read and write
|
|
|
|
758000
|
unkown
|
page read and write
|
|
|
|
2C30000
|
unkown
|
page read and write
|
|
|
|
16925C00000
|
unkown
|
page readonly
|
|
|
|
3160000
|
unkown
|
page execute and read and write
|
|
|
|
2548204F000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
5FF0000
|
unkown
|
page read and write
|
|
|
|
7FF51AB14000
|
unkown
|
page readonly
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3552000
|
unkown
|
page readonly
|
|
|
|
457000
|
unkown image
|
page readonly
|
|
|
|
ABE73F7000
|
unkown
|
page read and write
|
|
|
|
7FF575AE6000
|
unkown
|
page readonly
|
|
|
|
2471000
|
unkown
|
page read and write
|
|
|
|
28D7AF50000
|
unkown
|
page readonly
|
|
|
|
7FF516FE9000
|
unkown
|
page readonly
|
|
|
|
18EB3813000
|
unkown
|
page read and write
|
|
|
|
6B4607E000
|
unkown
|
page read and write
|
|
|
|
50FA000
|
unkown
|
page read and write
|
|
|
|
28D7AD70000
|
unkown
|
page read and write
|
|
|
|
7FF5BE747000
|
unkown
|
page readonly
|
|
|
|
E05000
|
unkown
|
page read and write
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
20BFF6A0000
|
unkown
|
page readonly
|
|
|
|
2800000
|
unkown
|
page readonly
|
|
|
|
28956502000
|
unkown
|
page read and write
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
25482200000
|
unkown
|
page read and write
|
|
|
|
738000
|
unkown
|
page read and write
|
|
|
|
C82000
|
unkown
|
page read and write
|
|
|
|
7FF5BF30C000
|
unkown
|
page readonly
|
|
|
|
3560000
|
unkown image
|
page readonly
|
|
|
|
18EB3881000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
1FBB8320000
|
unkown
|
page read and write
|
|
|
|
254802E8000
|
unkown
|
page read and write
|
|
|
|
50AA000
|
unkown
|
page read and write
|
|
|
|
288E000
|
unkown
|
page read and write
|
|
|
|
C1D000
|
unkown
|
page read and write
|
|
|
|
28AA000
|
unkown
|
page read and write
|
|
|
|
7FF52CFAC000
|
unkown
|
page readonly
|
|
|
|
5E79000
|
unkown
|
page read and write
|
|
|
|
96000
|
unkown
|
page read and write
|
|
|
|
85F000
|
unkown image
|
page read and write
|
|
|
|
7FF5964CA000
|
unkown
|
page readonly
|
|
|
|
1CE8B4F0000
|
unkown
|
page readonly
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD61000
|
unkown
|
page readonly
|
|
|
|
7FE000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
2860000
|
unkown
|
page read and write
|
|
|
|
7FF5CB97C000
|
unkown
|
page readonly
|
|
|
|
25482220000
|
unkown
|
page read and write
|
|
|
|
7FD5A000
|
unkown
|
page read and write
|
|
|
|
5A30000
|
heap private
|
page read and write
|
|
|
|
35D2000
|
unkown
|
page read and write
|
|
|
|
254802CB000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page readonly
|
|
|
|
C3F000
|
unkown
|
page read and write
|
|
|
|
7DC1B9E000
|
unkown
|
page read and write
|
|
|
|
5300000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
29BC000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page readonly
|
|
|
|
25480255000
|
unkown
|
page read and write
|
|
|
|
1FBB8456000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown image
|
page write copy
|
|
|
|
7FF5CC20F000
|
unkown
|
page readonly
|
|
|
|
E52087E000
|
unkown
|
page read and write
|
|
|
|
16925A29000
|
unkown
|
page read and write
|
|
|
|
28956600000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF5018B5000
|
unkown
|
page readonly
|
|
|
|
7FF5AAADC000
|
unkown
|
page readonly
|
|
|
|
5400000
|
unkown
|
page read and write
|
|
|
|
7FF596418000
|
unkown
|
page readonly
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
7FF52CF3C000
|
unkown
|
page readonly
|
|
|
|
55A0000
|
unkown
|
page read and write
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
29512410000
|
unkown
|
page readonly
|
|
|
|
254801F0000
|
unkown
|
page readonly
|
|
|
|
7FF5689D0000
|
unkown
|
page readonly
|
|
|
|
E5D000
|
unkown
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
1FBB842A000
|
unkown
|
page read and write
|
|
|
|
8AE000
|
unkown
|
page read and write
|
|
|
|
254824DC000
|
unkown
|
page read and write
|
|
|
|
A99A2FF000
|
unkown
|
page read and write
|
|
|
|
28D79E40000
|
unkown
|
page readonly
|
|
|
|
7FF5CC088000
|
unkown
|
page readonly
|
|
|
|
465000
|
unkown image
|
page readonly
|
|
|
|
25482026000
|
unkown
|
page read and write
|
|
|
|
2E85000
|
unkown
|
page readonly
|
|
|
|
7FF5D2FC7000
|
unkown
|
page readonly
|
|
|
|
4D3000
|
unkown
|
page read and write
|
|
|
|
1CE8D130000
|
heap private
|
page read and write
|
|
|
|
3BE2E7F000
|
unkown
|
page read and write
|
|
|
|
1FF6DC02000
|
unkown
|
page read and write
|
|
|
|
C46000
|
unkown
|
page read and write
|
|
|
|
1CE8B5F6000
|
heap default
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
1BDFE8E0000
|
heap default
|
page read and write
|
|
|
|
55C000
|
stack
|
page read and write
|
|
|
|
5DF000
|
unkown
|
page read and write
|
|
|
|
7FF5CC205000
|
unkown
|
page readonly
|
|
|
|
20BFDD02000
|
unkown
|
page read and write
|
|
|
|
322C000
|
unkown
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
7FF5BE8D0000
|
unkown
|
page readonly
|
|
|
|
C77000
|
unkown
|
page read and write
|
|
|
|
82E000
|
unkown
|
page read and write
|
|
|
|
7FF5AAACD000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown image
|
page readonly
|
|
|
|
E07000
|
unkown
|
page read and write
|
|
|
|
7FF5207D9000
|
unkown
|
page readonly
|
|
|
|
7FF6E8608000
|
unkown image
|
page readonly
|
|
|
|
7FF52D279000
|
unkown
|
page readonly
|
|
|
|
512000
|
unkown
|
page read and write
|
|
|
|
7FF7FA2B3000
|
unkown image
|
page readonly
|
|
|
|
597A000
|
unkown
|
page read and write
|
|
|
|
1BDFE800000
|
unkown
|
page read and write
|
|
|
|
2895000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
289BBE65000
|
unkown
|
page read and write
|
|
|
|
46B3000
|
unkown
|
page read and write
|
|
|
|
7FF54B158000
|
unkown
|
page readonly
|
|
|
|
619E92E000
|
unkown
|
page read and write
|
|
|
|
722000
|
unkown
|
page read and write
|
|
|
|
58EF000
|
unkown
|
page read and write
|
|
|
|
2FC0000
|
unkown
|
page readonly
|
|
|
|
5FBD000
|
unkown
|
page read and write
|
|
|
|
D09000
|
unkown
|
page read and write
|
|
|
|
1FF6DD15000
|
unkown
|
page read and write
|
|
|
|
46AC000
|
unkown
|
page read and write
|
|
|
|
7FF575B10000
|
unkown
|
page readonly
|
|
|
|
314E000
|
stack
|
page read and write
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
4654000
|
unkown
|
page read and write
|
|
|
|
4781000
|
unkown
|
page read and write
|
|
|
|
2EEB000
|
unkown
|
page readonly
|
|
|
|
C36000
|
unkown
|
page read and write
|
|
|
|
746000
|
unkown
|
page read and write
|
|
|
|
2D1000
|
unkown
|
page read and write
|
|
|
|
596C000
|
unkown
|
page read and write
|
|
|
|
2E95000
|
unkown
|
page readonly
|
|
|
|
7FF718530000
|
unkown image
|
page readonly
|
|
|
|
7FF5BFB8E000
|
unkown
|
page readonly
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
7FF5D30D5000
|
unkown
|
page readonly
|
|
|
|
C52000
|
unkown
|
page read and write
|
|
|
|
2E57000
|
unkown
|
page readonly
|
|
|
|
1939A277000
|
unkown
|
page read and write
|
|
|
|
16F5A890000
|
unkown
|
page write copy
|
|
|
|
339E000
|
unkown
|
page read and write
|
|
|
|
28D7F4C0000
|
unkown
|
page read and write
|
|
|
|
25483210000
|
unkown
|
page read and write
|
|
|
|
C3E000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC2E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE875000
|
unkown
|
page readonly
|
|
|
|
28D7F4B0000
|
unkown
|
page read and write
|
|
|
|
60C0000
|
unkown
|
page read and write
|
|
|
|
29C3000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
4739000
|
unkown
|
page read and write
|
|
|
|
1030000
|
unkown
|
page readonly
|
|
|
|
1024000
|
heap default
|
page read and write
|
|
|
|
7FF5BE728000
|
unkown
|
page readonly
|
|
|
|
A99AE7C000
|
unkown
|
page read and write
|
|
|
|
6600000
|
unkown
|
page read and write
|
|
|
|
357A000
|
unkown
|
page read and write
|
|
|
|
1BDFE9A0000
|
unkown
|
page read and write
|
|
|
|
7FF5688CD000
|
unkown
|
page readonly
|
|
|
|
2990000
|
unkown
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFE2000
|
unkown
|
page readonly
|
|
|
|
CF1000
|
unkown
|
page read and write
|
|
|
|
1D28A42A000
|
unkown
|
page read and write
|
|
|
|
5237000
|
unkown
|
page read and write
|
|
|
|
2951268E000
|
unkown
|
page read and write
|
|
|
|
D2140FF000
|
unkown
|
page read and write
|
|
|
|
28BA000
|
unkown
|
page read and write
|
|
|
|
45E0000
|
unkown image
|
page readonly
|
|
|
|
CD5000
|
unkown
|
page read and write
|
|
|
|
4CB000
|
unkown
|
page read and write
|
|
|
|
5FBD000
|
unkown
|
page read and write
|
|
|
|
25480313000
|
unkown
|
page read and write
|
|
|
|
1FBB8370000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
20BFDA50000
|
unkown
|
page readonly
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
7FF568AF5000
|
unkown
|
page readonly
|
|
|
|
5F1A000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC08000
|
unkown
|
page readonly
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
25482080000
|
unkown
|
page read and write
|
|
|
|
7FF52D2CD000
|
unkown
|
page readonly
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
516000
|
unkown
|
page read and write
|
|
|
|
29E000
|
unkown
|
page read and write
|
|
|
|
46C1000
|
unkown
|
page read and write
|
|
|
|
7FF5CC1EA000
|
unkown
|
page readonly
|
|
|
|
289BBE2A000
|
unkown
|
page read and write
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
E09000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
4BB000
|
unkown
|
page read and write
|
|
|
|
25480000000
|
heap private
|
page read and write
|
|
|
|
5932000
|
unkown
|
page read and write
|
|
|
|
1939A23C000
|
unkown
|
page read and write
|
|
|
|
894000
|
unkown
|
page read and write
|
|
|
|
25482041000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
211509C0000
|
unkown
|
page readonly
|
|
|
|
28D7AE50000
|
unkown
|
page read and write
|
|
|
|
6080000
|
unkown
|
page read and write
|
|
|
|
512000
|
unkown
|
page read and write
|
|
|
|
7FF516F25000
|
unkown
|
page readonly
|
|
|
|
7FF596284000
|
unkown
|
page readonly
|
|
|
|
2114EE02000
|
unkown
|
page read and write
|
|
|
|
C22000
|
unkown
|
page read and write
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
7FF516C44000
|
unkown
|
page readonly
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
7FF51AB17000
|
unkown
|
page readonly
|
|
|
|
20BFDB20000
|
unkown
|
page write copy
|
|
|
|
4F4C000
|
stack
|
page read and write
|
|
|
|
7FF7185B3000
|
unkown image
|
page readonly
|
|
|
|
2335000
|
heap private
|
page read and write
|
|
|
|
619F07F000
|
unkown
|
page read and write
|
|
|
|
7FF5AABFC000
|
unkown
|
page readonly
|
|
|
|
2DF000
|
unkown
|
page read and write
|
|
|
|
737000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC4F000
|
unkown
|
page readonly
|
|
|
|
A99AC7B000
|
unkown
|
page read and write
|
|
|
|
2EEE000
|
stack
|
page read and write
|
|
|
|
2238000
|
heap private
|
page read and write
|
|
|
|
7FF596536000
|
unkown
|
page readonly
|
|
|
|
FF657FF000
|
unkown
|
page read and write
|
|
|
|
C26000
|
unkown
|
page read and write
|
|
|
|
5E53000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
100BD000
|
unkown image
|
page write copy
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
5FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5963AF000
|
unkown
|
page readonly
|
|
|
|
29512688000
|
unkown
|
page read and write
|
|
|
|
28D7A113000
|
unkown
|
page read and write
|
|
|
|
7FF51AAFC000
|
unkown
|
page readonly
|
|
|
|
498000
|
heap default
|
page read and write
|
|
|
|
2E57000
|
unkown
|
page readonly
|
|
|
|
64E000
|
unkown
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page readonly
|
|
|
|
1503000
|
unkown
|
page read and write
|
|
|
|
CF3000
|
unkown
|
page read and write
|
|
|
|
32E0000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
BC3000
|
unkown
|
page read and write
|
|
|
|
1260000
|
heap private
|
page read and write
|
|
|
|
C66000
|
unkown
|
page read and write
|
|
|
|
4DC000
|
unkown
|
page read and write
|
|
|
|
2CF5000
|
unkown
|
page read and write
|
|
|
|
7FF52D296000
|
unkown
|
page readonly
|
|
|
|
7FF54B0FA000
|
unkown
|
page readonly
|
|
|
|
CAE000
|
unkown
|
page read and write
|
|
|
|
837000
|
unkown image
|
page read and write
|
|
|
|
7FF52075C000
|
unkown
|
page readonly
|
|
|
|
2910000
|
unkown
|
page readonly
|
|
|
|
2895000
|
unkown
|
page read and write
|
|
|
|
1CE8B611000
|
unkown
|
page read and write
|
|
|
|
7FF5CC24C000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
heap private
|
page read and write
|
|
|
|
2EF4000
|
unkown
|
page readonly
|
|
|
|
2912000
|
unkown
|
page read and write
|
|
|
|
5A8000
|
heap default
|
page read and write
|
|
|
|
4B8000
|
unkown
|
page read and write
|
|
|
|
7FF516F56000
|
unkown
|
page readonly
|
|
|
|
18EB383C000
|
unkown
|
page read and write
|
|
|
|
ABE75FD000
|
unkown
|
page read and write
|
|
|
|
2C7F000
|
unkown
|
page readonly
|
|
|
|
CBD000
|
unkown
|
page read and write
|
|
|
|
254824CF000
|
unkown
|
page read and write
|
|
|
|
1BDFE99D000
|
unkown
|
page read and write
|
|
|
|
C53000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD81000
|
unkown
|
page readonly
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
16F5A22A000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
4AB0000
|
unkown
|
page read and write
|
|
|
|
28D7F5F0000
|
unkown
|
page readonly
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
21657C29000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown
|
page execute and read and write
|
|
|
|
DED000
|
unkown
|
page read and write
|
|
|
|
BEFFDFB000
|
unkown
|
page read and write
|
|
|
|
548000
|
heap private
|
page read and write
|
|
|
|
7FF5D30B6000
|
unkown
|
page readonly
|
|
|
|
C6E000
|
unkown
|
page read and write
|
|
|
|
591C000
|
unkown
|
page read and write
|
|
|
|
7FF596368000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page readonly
|
|
|
|
26E0000
|
unkown
|
page read and write
|
|
|
|
28DE000
|
unkown
|
page read and write
|
|
|
|
3CE8000
|
unkown
|
page read and write
|
|
|
|
BEFFEFE000
|
unkown
|
page read and write
|
|
|
|
625000
|
unkown
|
page read and write
|
|
|
|
4FDE000
|
unkown
|
page read and write
|
|
|
|
254820DB000
|
unkown
|
page read and write
|
|
|
|
63D000
|
unkown
|
page read and write
|
|
|
|
25480289000
|
unkown
|
page read and write
|
|
|
|
25482043000
|
unkown
|
page read and write
|
|
|
|
16925940000
|
heap private
|
page read and write
|
|
|
|
1FBB8220000
|
heap default
|
page read and write
|
|
|
|
28D79DD0000
|
heap private
|
page read and write
|
|
|
|
28D7A057000
|
unkown
|
page read and write
|
|
|
|
7FF501BE9000
|
unkown
|
page readonly
|
|
|
|
7FF501864000
|
unkown
|
page readonly
|
|
|
|
25480275000
|
unkown
|
page read and write
|
|
|
|
4C8000
|
unkown
|
page read and write
|
|
|
|
E2C000
|
unkown
|
page read and write
|
|
|
|
1BDFE927000
|
unkown
|
page read and write
|
|
|
|
D15000
|
unkown
|
page read and write
|
|
|
|
6610000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
28D7F564000
|
unkown
|
page readonly
|
|
|
|
14CA000
|
heap default
|
page read and write
|
|
|
|
4679000
|
unkown
|
page read and write
|
|
|
|
E2D000
|
unkown
|
page read and write
|
|
|
|
2893000
|
heap private
|
page read and write
|
|
|
|
1BDFE948000
|
unkown
|
page read and write
|
|
|
|
25483000000
|
unkown
|
page read and write
|
|
|
|
970000
|
unkown
|
page readonly
|
|
|
|
7FF5DD015000
|
unkown
|
page readonly
|
|
|
|
7FF568B72000
|
unkown
|
page readonly
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
7FF59637A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE5F5000
|
unkown
|
page readonly
|
|
|
|
C52000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
unkown
|
page read and write
|
|
|
|
20BFDD00000
|
unkown
|
page read and write
|
|
|
|
7FF4F35D6000
|
unkown
|
page readonly
|
|
|
|
DC3000
|
unkown
|
page read and write
|
|
|
|
121E000
|
stack
|
page read and write
|
|
|
|
46BA000
|
unkown
|
page read and write
|
|
|
|
1BDFE99A000
|
unkown
|
page read and write
|
|
|
|
100BD000
|
unkown image
|
page write copy
|
|
|
|
A50000
|
unkown
|
page read and write
|
|
|
|
2140000
|
heap private
|
page read and write
|
|
|
|
7FF5AAEC9000
|
unkown
|
page readonly
|
|
|
|
1BDFE93E000
|
unkown
|
page read and write
|
|
|
|
CEA000
|
unkown
|
page read and write
|
|
|
|
2945000
|
unkown
|
page read and write
|
|
|
|
5F0C000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown image
|
page write copy
|
|
|
|
7FF5DCF87000
|
unkown
|
page readonly
|
|
|
|
779000
|
unkown
|
page read and write
|
|
|
|
1000000
|
unkown
|
page readonly
|
|
|
|
16F5AA02000
|
unkown
|
page read and write
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
4679000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
197000
|
stack
|
page read and write
|
|
|
|
21657C74000
|
unkown
|
page read and write
|
|
|
|
1390000
|
unkown
|
page readonly
|
|
|
|
21E4000
|
heap private
|
page read and write
|
|
|
|
7DC1EFF000
|
unkown
|
page read and write
|
|
|
|
254802A6000
|
unkown
|
page read and write
|
|
|
|
16F5A0F0000
|
heap default
|
page read and write
|
|
|
|
25480090000
|
unkown
|
page readonly
|
|
|
|
5B2F000
|
stack
|
page read and write
|
|
|
|
7FF575AEC000
|
unkown
|
page readonly
|
|
|
|
2548202A000
|
unkown
|
page read and write
|
|
|
|
7FF568C04000
|
unkown
|
page readonly
|
|
|
|
2E36000
|
unkown
|
page readonly
|
|
|
|
16927590000
|
unkown
|
page readonly
|
|
|
|
1FF6DC4D000
|
unkown
|
page read and write
|
|
|
|
20BFDA40000
|
heap default
|
page read and write
|
|
|
|
CE9000
|
unkown
|
page read and write
|
|
|
|
75B000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB7A000
|
unkown
|
page readonly
|
|
|
|
2C81000
|
unkown
|
page readonly
|
|
|
|
B5DE2FD000
|
unkown
|
page read and write
|
|
|
|
857000
|
unkown image
|
page read and write
|
|
|
|
1BDFE904000
|
unkown
|
page read and write
|
|
|
|
25482543000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page read and write
|
|
|
|
D21427A000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
28D7F830000
|
unkown
|
page readonly
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
7FF596579000
|
unkown
|
page readonly
|
|
|
|
25483010000
|
unkown
|
page read and write
|
|
|
|
25483310000
|
unkown
|
page read and write
|
|
|
|
7FF575B05000
|
unkown
|
page readonly
|
|
|
|
C72000
|
unkown
|
page read and write
|
|
|
|
C40000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown
|
page readonly
|
|
|
|
339E000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
25482702000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
FF651F7000
|
unkown
|
page read and write
|
|
|
|
7FF595DCB000
|
unkown
|
page readonly
|
|
|
|
294C000
|
unkown
|
page read and write
|
|
|
|
A99A07B000
|
unkown
|
page read and write
|
|
|
|
289BBE31000
|
unkown
|
page read and write
|
|
|
|
254802BB000
|
unkown
|
page read and write
|
|
|
|
5F6A000
|
unkown
|
page read and write
|
|
|
|
20BFDC57000
|
unkown
|
page read and write
|
|
|
|
28DF39B000
|
unkown
|
page read and write
|
|
|
|
2C20000
|
heap private
|
page read and write
|
|
|
|
837000
|
unkown image
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD77000
|
unkown
|
page readonly
|
|
|
|
860000
|
heap default
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
50DD000
|
unkown
|
page read and write
|
|
|
|
C53000
|
unkown
|
page read and write
|
|
|
|
7FF5BE84A000
|
unkown
|
page readonly
|
|
|
|
3F1000
|
unkown image
|
page execute read
|
|
|
|
5940000
|
unkown
|
page read and write
|
|
|
|
7FF596390000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
heap default
|
page read and write
|
|
|
|
7FF5DD041000
|
unkown
|
page readonly
|
|
|
|
1939A860000
|
unkown
|
page readonly
|
|
|
|
16925B00000
|
unkown
|
page read and write
|
|
|
|
49BC000
|
unkown
|
page read and write
|
|
|
|
7FF52074C000
|
unkown
|
page readonly
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
21150D20000
|
unkown
|
page read and write
|
|
|
|
415C000
|
unkown
|
page read and write
|
|
|
|
2530000
|
heap private
|
page read and write
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
28D7A029000
|
unkown
|
page read and write
|
|
|
|
21657BC0000
|
unkown
|
page read and write
|
|
|
|
6B8000
|
heap default
|
page read and write
|
|
|
|
4AA0000
|
unkown
|
page read and write
|
|
|
|
5D50000
|
unkown
|
page read and write
|
|
|
|
25483410000
|
unkown
|
page read and write
|
|
|
|
489F000
|
stack
|
page read and write
|
|
|
|
6B45C7B000
|
unkown
|
page read and write
|
|
|
|
3730000
|
unkown
|
page readonly
|
|
|
|
832000
|
unkown image
|
page read and write
|
|
|
|
1FBB8502000
|
unkown
|
page read and write
|
|
|
|
7FF5DD04C000
|
unkown
|
page readonly
|
|
|
|
7FF568A08000
|
unkown
|
page readonly
|
|
|
|
D09000
|
unkown
|
page read and write
|
|
|
|
7FF575A72000
|
unkown
|
page readonly
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
1360000
|
heap private
|
page read and write
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
7FF501853000
|
unkown
|
page readonly
|
|
|
|
C2F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE842000
|
unkown
|
page readonly
|
|
|
|
20BFDB70000
|
unkown
|
page readonly
|
|
|
|
107C000
|
unkown
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
C66000
|
unkown
|
page read and write
|
|
|
|
7FF568B54000
|
unkown
|
page readonly
|
|
|
|
2E44000
|
unkown
|
page readonly
|
|
|
|
1FBB83F0000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
heap private
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
1CE8CFE0000
|
heap private
|
page read and write
|
|
|
|
28D7F300000
|
unkown
|
page read and write
|
|
|
|
18EB3855000
|
unkown
|
page read and write
|
|
|
|
7FF5AA862000
|
unkown
|
page readonly
|
|
|
|
BEFFB7B000
|
unkown
|
page read and write
|
|
|
|
546A000
|
unkown
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
29AE000
|
unkown
|
page read and write
|
|
|
|
7FF7185B1000
|
unkown image
|
page read and write
|
|
|
|
7FF596522000
|
unkown
|
page readonly
|
|
|
|
1320000
|
unkown
|
page readonly
|
|
|
|
D2142FF000
|
unkown
|
page read and write
|
|
|
|
733000
|
unkown
|
page read and write
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
DDD000
|
unkown
|
page read and write
|
|
|
|
26D2000
|
unkown
|
page read and write
|
|
|
|
5771000
|
unkown
|
page read and write
|
|
|
|
7FF516CA5000
|
unkown
|
page readonly
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
1D28A220000
|
unkown
|
page readonly
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
16F5A241000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
6170000
|
heap private
|
page read and write
|
|
|
|
16925A6D000
|
unkown
|
page read and write
|
|
|
|
DC2000
|
unkown
|
page read and write
|
|
|
|
2F6D000
|
unkown
|
page read and write
|
|
|
|
C0A000
|
unkown
|
page read and write
|
|
|
|
A99A97C000
|
unkown
|
page read and write
|
|
|
|
7FF5BE85A000
|
unkown
|
page readonly
|
|
|
|
747000
|
unkown
|
page read and write
|
|
|
|
5EFD000
|
unkown
|
page read and write
|
|
|
|
7FF7FA230000
|
unkown image
|
page readonly
|
|
|
|
1BDFEB75000
|
heap private
|
page read and write
|
|
|
|
5DF000
|
unkown
|
page read and write
|
|
|
|
4B5000
|
unkown
|
page read and write
|
|
|
|
7FF516C53000
|
unkown
|
page readonly
|
|
|
|
51B000
|
unkown
|
page read and write
|
|
|
|
28D80000000
|
unkown
|
page read and write
|
|
|
|
5691000
|
unkown
|
page read and write
|
|
|
|
6023000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown
|
page read and write
|
|
|
|
28AB000
|
unkown
|
page read and write
|
|
|
|
25482061000
|
unkown
|
page read and write
|
|
|
|
7FF5205E3000
|
unkown
|
page readonly
|
|
|
|
50B9000
|
unkown
|
page read and write
|
|
|
|
139F000
|
stack
|
page read and write
|
|
|
|
25480288000
|
unkown
|
page read and write
|
|
|
|
FF6537C000
|
unkown
|
page read and write
|
|
|
|
21657C02000
|
unkown
|
page read and write
|
|
|
|
5BF0000
|
unkown
|
page readonly
|
|
|
|
3FE0B7F000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
heap private
|
page read and write
|
|
|
|
25482078000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
C52000
|
unkown
|
page read and write
|
|
|
|
2951262A000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown image
|
page write copy
|
|
|
|
7FF516D50000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF77000
|
unkown
|
page readonly
|
|
|
|
289BBE00000
|
unkown
|
page read and write
|
|
|
|
18EB3902000
|
unkown
|
page read and write
|
|
|
|
28DFB7F000
|
unkown
|
page read and write
|
|
|
|
289BBE4D000
|
unkown
|
page read and write
|
|
|
|
7FF5AADA3000
|
unkown
|
page readonly
|
|
|
|
2114F000000
|
unkown
|
page readonly
|
|
|
|
7FF575A88000
|
unkown
|
page readonly
|
|
|
|
7FF575AC9000
|
unkown
|
page readonly
|
|
|
|
5EF0000
|
heap private
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
E52051B000
|
unkown
|
page read and write
|
|
|
|
825000
|
heap private
|
page read and write
|
|
|
|
197000
|
stack
|
page read and write
|
|
|
|
DC3000
|
unkown
|
page read and write
|
|
|
|
28D7A5A0000
|
unkown
|
page read and write
|
|
|
|
7FF4F341E000
|
unkown
|
page readonly
|
|
|
|
28D7F370000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF77000
|
unkown
|
page readonly
|
|
|
|
D00000
|
unkown
|
page read and write
|
|
|
|
21657B90000
|
unkown
|
page read and write
|
|
|
|
7FF51AADE000
|
unkown
|
page readonly
|
|
|
|
28D7F5B0000
|
unkown
|
page read and write
|
|
|
|
B5DE3FD000
|
unkown
|
page read and write
|
|
|
|
B2E000
|
unkown
|
page read and write
|
|
|
|
2C17000
|
unkown
|
page read and write
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
28D7AF30000
|
unkown
|
page readonly
|
|
|
|
7FF4F3463000
|
unkown
|
page readonly
|
|
|
|
28D7F584000
|
unkown
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
289BBE6D000
|
unkown
|
page read and write
|
|
|
|
100C8000
|
unkown image
|
page readonly
|
|
|
|
5C4000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
29E5000
|
heap private
|
page read and write
|
|
|
|
72F000
|
unkown
|
page read and write
|
|
|
|
2D10000
|
unkown
|
page readonly
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
CFC000
|
unkown
|
page read and write
|
|
|
|
C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AADAC000
|
unkown
|
page readonly
|
|
|
|
7FF5CC260000
|
unkown
|
page readonly
|
|
|
|
73A000
|
unkown
|
page read and write
|
|
|
|
25482485000
|
unkown
|
page read and write
|
|
|
|
4654000
|
unkown
|
page read and write
|
|
|
|
28FA000
|
unkown
|
page read and write
|
|
|
|
5FAD000
|
unkown
|
page read and write
|
|
|
|
1BDFE8F9000
|
unkown
|
page read and write
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
458000
|
heap default
|
page read and write
|
|
|
|
28D7F62D000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
28D7F8D0000
|
unkown
|
page readonly
|
|
|
|
4126000
|
unkown
|
page read and write
|
|
|
|
7FF59615D000
|
unkown
|
page readonly
|
|
|
|
32DF000
|
stack
|
page read and write
|
|
|
|
7FF568C61000
|
unkown
|
page readonly
|
|
|
|
20BFDC2A000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
7FF5204FA000
|
unkown
|
page readonly
|
|
|
|
5FF0000
|
unkown
|
page read and write
|
|
|
|
25482413000
|
unkown
|
page read and write
|
|
|
|
1D28A455000
|
unkown
|
page read and write
|
|
|
|
532F000
|
stack
|
page read and write
|
|
|
|
2922000
|
unkown
|
page read and write
|
|
|
|
BC3000
|
unkown
|
page read and write
|
|
|
|
16F5A790000
|
unkown
|
page readonly
|
|
|
|
16927490000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
25483310000
|
unkown
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
5981000
|
unkown
|
page read and write
|
|
|
|
245E000
|
unkown
|
page read and write
|
|
|
|
254820C2000
|
unkown
|
page read and write
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
16F5A400000
|
unkown
|
page readonly
|
|
|
|
7FF52D2C7000
|
unkown
|
page readonly
|
|
|
|
574E000
|
stack
|
page read and write
|
|
|
|
E47000
|
unkown
|
page read and write
|
|
|
|
86A000
|
heap default
|
page read and write
|
|
|
|
36E0000
|
unkown
|
page readonly
|
|
|
|
7FF516CB0000
|
unkown
|
page readonly
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
7FF5BF9DF000
|
unkown
|
page readonly
|
|
|
|
7FF516F1E000
|
unkown
|
page readonly
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
289BBE2C000
|
unkown
|
page read and write
|
|
|
|
4BD000
|
unkown
|
page read and write
|
|
|
|
7FF5759EC000
|
unkown
|
page readonly
|
|
|
|
7FF5DD00E000
|
unkown
|
page readonly
|
|
|
|
2E57000
|
unkown
|
page readonly
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
7F8D0000
|
unkown
|
page read and write
|
|
|
|
C19000
|
unkown
|
page read and write
|
|
|
|
EA0000
|
unkown
|
page readonly
|
|
|
|
73A000
|
unkown
|
page read and write
|
|
|
|
72B000
|
unkown
|
page read and write
|
|
|
|
5A34000
|
heap private
|
page read and write
|
|
|
|
5ED9000
|
unkown
|
page read and write
|
|
|
|
2771000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
heap private
|
page read and write
|
|
|
|
7FF52D2AC000
|
unkown
|
page readonly
|
|
|
|
7FF5759B7000
|
unkown
|
page readonly
|
|
|
|
21F4000
|
heap private
|
page read and write
|
|
|
|
7FF5CC1D2000
|
unkown
|
page readonly
|
|
|
|
254800B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0F3000
|
unkown
|
page readonly
|
|
|
|
7FF5BE87F000
|
unkown
|
page readonly
|
|
|
|
25483610000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
heap default
|
page read and write
|
|
|
|
7FF52D25E000
|
unkown
|
page readonly
|
|
|
|
601C000
|
unkown
|
page read and write
|
|
|
|
C39000
|
unkown
|
page read and write
|
|
|
|
E16000
|
unkown
|
page read and write
|
|
|
|
7FF5CC1AC000
|
unkown
|
page readonly
|
|
|
|
3270000
|
unkown
|
page readonly
|
|
|
|
3F0D27D000
|
unkown
|
page read and write
|
|
|
|
2E0F000
|
unkown
|
page readonly
|
|
|
|
2346000
|
heap private
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
2114EE82000
|
unkown
|
page read and write
|
|
|
|
CE2000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
4AA6000
|
unkown
|
page read and write
|
|
|
|
CE9000
|
unkown
|
page read and write
|
|
|
|
62B0000
|
unkown
|
page readonly
|
|
|
|
3120000
|
unkown
|
page read and write
|
|
|
|
B5DE1FE000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
DC2000
|
unkown
|
page read and write
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
FB8000
|
unkown
|
page read and write
|
|
|
|
508000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
unkown
|
page readonly
|
|
|
|
C49000
|
unkown
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown
|
page read and write
|
|
|
|
BD5000
|
unkown
|
page read and write
|
|
|
|
7FDF0000
|
unkown
|
page read and write
|
|
|
|
4B2000
|
unkown
|
page read and write
|
|
|
|
619F17E000
|
unkown
|
page read and write
|
|
|
|
C23000
|
unkown
|
page read and write
|
|
|
|
7FF5965A6000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown
|
page readonly
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
513000
|
unkown
|
page read and write
|
|
|
|
7FF54AEB3000
|
unkown
|
page readonly
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
FFC000
|
stack
|
page read and write
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
5E87000
|
unkown
|
page read and write
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD8B000
|
unkown
|
page readonly
|
|
|
|
7FF516F39000
|
unkown
|
page readonly
|
|
|
|
479000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
1EB000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
25482093000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB7E000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
E09000
|
unkown
|
page read and write
|
|
|
|
4663000
|
unkown
|
page read and write
|
|
|
|
503000
|
unkown
|
page read and write
|
|
|
|
E52059E000
|
unkown
|
page read and write
|
|
|
|
CE1000
|
unkown
|
page read and write
|
|
|
|
1015000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page readonly
|
|
|
|
592B000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page readonly
|
|
|
|
DDC000
|
unkown
|
page read and write
|
|
|
|
1BDFE90B000
|
unkown
|
page read and write
|
|
|
|
289BBDA0000
|
heap default
|
page read and write
|
|
|
|
28D79F20000
|
unkown
|
page readonly
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
7FF54B053000
|
unkown
|
page readonly
|
|
|
|
5310000
|
unkown
|
page readonly
|
|
|
|
254802E7000
|
unkown
|
page read and write
|
|
|
|
7FF6E85F3000
|
unkown image
|
page readonly
|
|
|
|
BEE000
|
unkown
|
page read and write
|
|
|
|
2927000
|
unkown
|
page read and write
|
|
|
|
590D000
|
unkown
|
page read and write
|
|
|
|
7FF5207D1000
|
unkown
|
page readonly
|
|
|
|
7FF5CC068000
|
unkown
|
page readonly
|
|
|
|
29512622000
|
unkown
|
page read and write
|
|
|
|
46AC000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown
|
page read and write
|
|
|
|
2548204D000
|
unkown
|
page read and write
|
|
|
|
20BFDC34000
|
unkown
|
page read and write
|
|
|
|
27BD000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
4C8000
|
unkown
|
page read and write
|
|
|
|
7FF51AB71000
|
unkown
|
page readonly
|
|
|
|
BE9000
|
unkown
|
page read and write
|
|
|
|
25482583000
|
unkown
|
page read and write
|
|
|
|
C47000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
CFA000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2114EE29000
|
unkown
|
page read and write
|
|
|
|
600D000
|
unkown
|
page read and write
|
|
|
|
28D7F597000
|
unkown
|
page write copy
|
|
|
|
100BC000
|
unkown image
|
page read and write
|
|
|
|
2954000
|
unkown
|
page read and write
|
|
|
|
7F8D0000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
CB8000
|
unkown
|
page read and write
|
|
|
|
254802A4000
|
unkown
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
D21417E000
|
unkown
|
page read and write
|
|
|
|
6290000
|
unkown
|
page readonly
|
|
|
|
4F4E000
|
unkown
|
page read and write
|
|
|
|
D1B000
|
unkown
|
page read and write
|
|
|
|
7FF520774000
|
unkown
|
page readonly
|
|
|
|
2548026B000
|
unkown
|
page read and write
|
|
|
|
7FF54B185000
|
unkown
|
page readonly
|
|
|
|
B55000
|
heap default
|
page read and write
|
|
|
|
7FF5BE939000
|
unkown
|
page readonly
|
|
|
|
1BDFE942000
|
unkown
|
page read and write
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
2EE6000
|
unkown
|
page readonly
|
|
|
|
46BA000
|
unkown
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
25482059000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
25482583000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page readonly
|
|
|
|
2842000
|
unkown
|
page read and write
|
|
|
|
2892000
|
unkown
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
72D000
|
unkown
|
page read and write
|
|
|
|
16F5A2CE000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
5730000
|
unkown
|
page read and write
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
25480277000
|
unkown
|
page read and write
|
|
|
|
197000
|
stack
|
page read and write
|
|
|
|
1CE8B6D0000
|
unkown
|
page read and write
|
|
|
|
7FF575680000
|
unkown
|
page readonly
|
|
|
|
7FF5BFBF7000
|
unkown
|
page readonly
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
D02000
|
unkown
|
page read and write
|
|
|
|
25480388000
|
unkown
|
page read and write
|
|
|
|
7FF501B67000
|
unkown
|
page readonly
|
|
|
|
8A4000
|
unkown
|
page read and write
|
|
|
|
28956476000
|
unkown
|
page read and write
|
|
|
|
2114ED70000
|
heap private
|
page read and write
|
|
|
|
1CE8B720000
|
unkown
|
page readonly
|
|
|
|
2E0F000
|
unkown
|
page readonly
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
5757000
|
unkown
|
page read and write
|
|
|
|
2700000
|
heap private
|
page read and write
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
7FF501BCE000
|
unkown
|
page readonly
|
|
|
|
49F000
|
unkown
|
page read and write
|
|
|
|
295124E0000
|
unkown
|
page readonly
|
|
|
|
B5DE47E000
|
unkown
|
page read and write
|
|
|
|
590D000
|
unkown
|
page read and write
|
|
|
|
A99A5FB000
|
unkown
|
page read and write
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
CD4000
|
unkown
|
page read and write
|
|
|
|
727000
|
unkown
|
page read and write
|
|
|
|
5B7F000
|
stack
|
page read and write
|
|
|
|
58F0000
|
heap private
|
page read and write
|
|
|
|
5F5C000
|
unkown
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
7FF596437000
|
unkown
|
page readonly
|
|
|
|
7FF5AAD3C000
|
unkown
|
page readonly
|
|
|
|
5F97000
|
unkown
|
page read and write
|
|
|
|
25482454000
|
unkown
|
page read and write
|
|
|
|
29512C02000
|
unkown
|
page read and write
|
|
|
|
25482041000
|
unkown
|
page read and write
|
|
|
|
1014000
|
unkown
|
page read and write
|
|
|
|
841000
|
unkown image
|
page read and write
|
|
|
|
254802AA000
|
unkown
|
page read and write
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
5A6E000
|
stack
|
page read and write
|
|
|
|
28D7A713000
|
unkown
|
page read and write
|
|
|
|
7FF5206FA000
|
unkown
|
page readonly
|
|
|
|
4FD000
|
unkown
|
page read and write
|
|
|
|
7FF5D3058000
|
unkown
|
page readonly
|
|
|
|
1BDFE910000
|
unkown
|
page read and write
|
|
|
|
7DC1B1F000
|
unkown
|
page read and write
|
|
|
|
27C0000
|
heap private
|
page read and write
|
|
|
|
1BDFE90B000
|
unkown
|
page read and write
|
|
|
|
28D7F2F0000
|
unkown
|
page read and write
|
|
|
|
726000
|
unkown
|
page read and write
|
|
|
|
61D0000
|
unkown
|
page read and write
|
|
|
|
E2C000
|
unkown
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
6ED000
|
unkown
|
page read and write
|
|
|
|
2114EE7C000
|
unkown
|
page read and write
|
|
|
|
E48000
|
unkown
|
page read and write
|
|
|
|
1FBB8400000
|
unkown
|
page read and write
|
|
|
|
B30000
|
heap default
|
page read and write
|
|
|
|
2922000
|
unkown
|
page read and write
|
|
|
|
50A000
|
unkown
|
page read and write
|
|
|
|
C93000
|
unkown
|
page read and write
|
|
|
|
C42000
|
unkown
|
page read and write
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
469D000
|
unkown
|
page read and write
|
|
|
|
7FF575B79000
|
unkown
|
page readonly
|
|
|
|
7FF5D3149000
|
unkown
|
page readonly
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
47FE000
|
unkown
|
page read and write
|
|
|
|
E51000
|
unkown
|
page read and write
|
|
|
|
51B000
|
unkown
|
page read and write
|
|
|
|
2350000
|
heap private
|
page read and write
|
|
|
|
E56000
|
unkown
|
page read and write
|
|
|
|
72C8679000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
2216000
|
heap private
|
page read and write
|
|
|
|
3FE087E000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown
|
page read and write
|
|
|
|
1280000
|
heap private
|
page read and write
|
|
|
|
7FF718530000
|
unkown image
|
page readonly
|
|
|
|
254803C9000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0F7000
|
unkown
|
page readonly
|
|
|
|
289BBF02000
|
unkown
|
page read and write
|
|
|
|
7FF5D30BC000
|
unkown
|
page readonly
|
|
|
|
BB1000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
831000
|
unkown image
|
page write copy
|
|
|
|
E3C000
|
stack
|
page read and write
|
|
|
|
B80000
|
unkown
|
page execute and read and write
|
|
|
|
E2B000
|
unkown
|
page read and write
|
|
|
|
CC6000
|
unkown
|
page read and write
|
|
|
|
4DB000
|
unkown
|
page read and write
|
|
|
|
C7000
|
unkown image
|
page readonly
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
28D7F498000
|
unkown
|
page read and write
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
5798000
|
unkown
|
page read and write
|
|
|
|
4D1000
|
unkown image
|
page execute read
|
|
|
|
5DF000
|
unkown
|
page read and write
|
|
|
|
BE803FF000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE05000
|
unkown
|
page readonly
|
|
|
|
7FF52D1CA000
|
unkown
|
page readonly
|
|
|
|
BE801FE000
|
unkown
|
page read and write
|
|
|
|
A99ABFB000
|
unkown
|
page read and write
|
|
|
|
CBA000
|
unkown
|
page read and write
|
|
|
|
25482543000
|
unkown
|
page read and write
|
|
|
|
2C7F000
|
unkown
|
page readonly
|
|
|
|
7FF512E6F000
|
unkown
|
page readonly
|
|
|
|
7FF718531000
|
unkown image
|
page execute read
|
|
|
|
25D000
|
unkown
|
page read and write
|
|
|
|
289BBE7E000
|
unkown
|
page read and write
|
|
|
|
2926000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
unkown
|
page readonly
|
|
|
|
C11000
|
unkown
|
page read and write
|
|
|
|
D18000
|
unkown
|
page read and write
|
|
|
|
14E9000
|
unkown
|
page read and write
|
|
|
|
5F5C000
|
unkown
|
page read and write
|
|
|
|
254802A7000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
7FF52055F000
|
unkown
|
page readonly
|
|
|
|
331C000
|
unkown
|
page read and write
|
|
|
|
1FF6DC34000
|
unkown
|
page read and write
|
|
|
|
1CE8B612000
|
unkown
|
page read and write
|
|
|
|
2896000
|
unkown
|
page read and write
|
|
|
|
7FF5207CE000
|
unkown
|
page readonly
|
|
|
|
6D42A000
|
unkown image
|
page read and write
|
|
|
|
245B000
|
unkown
|
page read and write
|
|
|
|
25483410000
|
unkown
|
page read and write
|
|
|
|
C44000
|
unkown
|
page read and write
|
|
|
|
DDD000
|
unkown
|
page read and write
|
|
|
|
2114EE7C000
|
unkown
|
page read and write
|
|
|
|
2548029C000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3150000
|
unkown image
|
page readonly
|
|
|
|
D93000
|
unkown
|
page read and write
|
|
|
|
1BDFE93C000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
7FF5962F0000
|
unkown
|
page readonly
|
|
|
|
C38000
|
unkown
|
page read and write
|
|
|
|
C6F000
|
unkown
|
page read and write
|
|
|
|
5510000
|
unkown
|
page read and write
|
|
|
|
289BBE2E000
|
unkown
|
page read and write
|
|
|
|
73E000
|
unkown
|
page read and write
|
|
|
|
54C8000
|
unkown
|
page read and write
|
|
|
|
28E4000
|
unkown
|
page read and write
|
|
|
|
5F1A000
|
unkown
|
page read and write
|
|
|
|
26C4000
|
unkown
|
page read and write
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
6070000
|
heap private
|
page read and write
|
|
|
|
3CD5000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
595D000
|
unkown
|
page read and write
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
2774000
|
unkown
|
page read and write
|
|
|
|
289BBDD0000
|
unkown
|
page read and write
|
|
|
|
5FF8000
|
unkown
|
page read and write
|
|
|
|
1CE8CFC0000
|
unkown
|
page readonly
|
|
|
|
141F000
|
stack
|
page read and write
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
7FF5D308F000
|
unkown
|
page readonly
|
|
|
|
CEB000
|
unkown
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
28D7A07A000
|
unkown
|
page read and write
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
2330000
|
heap private
|
page read and write
|
|
|
|
7FF54B1E0000
|
unkown
|
page readonly
|
|
|
|
87C000
|
unkown
|
page read and write
|
|
|
|
7FF5207D9000
|
unkown
|
page readonly
|
|
|
|
21657C40000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
254824DD000
|
unkown
|
page read and write
|
|
|
|
35C0000
|
unkown
|
page read and write
|
|
|
|
5E9D000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
820000
|
heap private
|
page read and write
|
|
|
|
7FF4F3550000
|
unkown
|
page readonly
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
7FF5D3056000
|
unkown
|
page readonly
|
|
|
|
28D7A615000
|
unkown
|
page read and write
|
|
|
|
289BBE13000
|
unkown
|
page read and write
|
|
|
|
295E000
|
unkown
|
page read and write
|
|
|
|
29D2000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
heap private
|
page read and write
|
|
|
|
627A000
|
heap private
|
page read and write
|
|
|
|
3260000
|
unkown
|
page readonly
|
|
|
|
316A000
|
heap default
|
page read and write
|
|
|
|
7FF5BE846000
|
unkown
|
page readonly
|
|
|
|
2E0F000
|
unkown
|
page readonly
|
|
|
|
4CD000
|
unkown
|
page read and write
|
|
|
|
CED000
|
unkown
|
page read and write
|
|
|
|
4663000
|
unkown
|
page read and write
|
|
|
|
7FF59650C000
|
unkown
|
page readonly
|
|
|
|
5FD4000
|
unkown
|
page read and write
|
|
|
|
21657BC0000
|
unkown
|
page read and write
|
|
|
|
7FD68000
|
unkown
|
page read and write
|
|
|
|
53BA000
|
unkown
|
page read and write
|
|
|
|
D21447A000
|
unkown
|
page read and write
|
|
|
|
47A000
|
unkown
|
page read and write
|
|
|
|
6280000
|
unkown
|
page read and write
|
|
|
|
7FF52CABC000
|
unkown
|
page readonly
|
|
|
|
E31000
|
unkown
|
page read and write
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
290A000
|
unkown
|
page read and write
|
|
|
|
2550000
|
unkown
|
page read and write
|
|
|
|
7FF54B152000
|
unkown
|
page readonly
|
|
|
|
7FF54B156000
|
unkown
|
page readonly
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
522000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBDC000
|
unkown
|
page readonly
|
|
|
|
29512670000
|
unkown
|
page read and write
|
|
|
|
4CF000
|
unkown
|
page read and write
|
|
|
|
58D9000
|
unkown
|
page read and write
|
|
|
|
5924000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
7FF5964FA000
|
unkown
|
page readonly
|
|
|
|
145E000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown
|
page execute and read and write
|
|
|
|
62A0000
|
unkown
|
page read and write
|
|
|
|
25480334000
|
unkown
|
page read and write
|
|
|
|
CFE000
|
unkown
|
page read and write
|
|
|
|
1939AA02000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
5BF0000
|
unkown
|
page read and write
|
|
|
|
2114EF13000
|
unkown
|
page read and write
|
|
|
|
5FF8000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
5340000
|
unkown
|
page read and write
|
|
|
|
7FF54B199000
|
unkown
|
page readonly
|
|
|
|
5F90000
|
unkown
|
page read and write
|
|
|
|
22F0000
|
unkown
|
page readonly
|
|
|
|
7FF5CB982000
|
unkown
|
page readonly
|
|
|
|
577A000
|
unkown
|
page read and write
|
|
|
|
71A000
|
unkown
|
page read and write
|
|
|
|
1FBB8300000
|
unkown
|
page readonly
|
|
|
|
7FF6E8571000
|
unkown image
|
page execute read
|
|
|
|
2C81000
|
unkown
|
page readonly
|
|
|
|
63D0000
|
unkown
|
page read and write
|
|
|
|
2930000
|
unkown
|
page read and write
|
|
|
|
16925A6A000
|
unkown
|
page read and write
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF8A000
|
unkown
|
page readonly
|
|
|
|
5E1000
|
unkown
|
page read and write
|
|
|
|
7FF52D2C0000
|
unkown
|
page readonly
|
|
|
|
7FF520770000
|
unkown
|
page readonly
|
|
|
|
60D0000
|
unkown
|
page read and write
|
|
|
|
7FF568C5E000
|
unkown
|
page readonly
|
|
|
|
E2C000
|
unkown
|
page read and write
|
|
|
|
7FF5CC219000
|
unkown
|
page readonly
|
|
|
|
25483110000
|
unkown
|
page read and write
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
C36000
|
unkown
|
page read and write
|
|
|
|
25482200000
|
unkown
|
page read and write
|
|
|
|
211508C0000
|
unkown
|
page read and write
|
|
|
|
7FF596297000
|
unkown
|
page readonly
|
|
|
|
C53000
|
unkown
|
page read and write
|
|
|
|
D06000
|
unkown
|
page read and write
|
|
|
|
7FF51AA88000
|
unkown
|
page readonly
|
|
|
|
28D7AF40000
|
unkown
|
page readonly
|
|
|
|
ABE74FF000
|
unkown
|
page read and write
|
|
|
|
D21000
|
unkown
|
page read and write
|
|
|
|
CDB000
|
unkown
|
page read and write
|
|
|
|
254802C9000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
58F6000
|
unkown
|
page read and write
|
|
|
|
4773000
|
unkown
|
page read and write
|
|
|
|
BC5000
|
unkown
|
page read and write
|
|
|
|
25482200000
|
unkown
|
page read and write
|
|
|
|
2904000
|
unkown
|
page read and write
|
|
|
|
4DE000
|
unkown
|
page read and write
|
|
|
|
28D7A102000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
25482230000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
E1D000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
8FB000
|
unkown image
|
page readonly
|
|
|
|
7FF5D307E000
|
unkown
|
page readonly
|
|
|
|
28D7F594000
|
unkown
|
page write copy
|
|
|
|
DB1000
|
unkown
|
page read and write
|
|
|
|
7FF5D3038000
|
unkown
|
page readonly
|
|
|
|
7FF512EC4000
|
unkown
|
page readonly
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
738000
|
unkown
|
page read and write
|
|
|
|
36F4000
|
unkown
|
page readonly
|
|
|
|
4E2000
|
unkown
|
page read and write
|
|
|
|
1BDFE7E0000
|
unkown
|
page read and write
|
|
|
|
7DC1A95000
|
unkown
|
page read and write
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
7FF568C69000
|
unkown
|
page readonly
|
|
|
|
6014000
|
unkown
|
page read and write
|
|
|
|
70271000
|
unkown image
|
page execute read
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F3160000
|
unkown
|
page readonly
|
|
|
|
C47000
|
unkown
|
page read and write
|
|
|
|
FA8000
|
unkown
|
page read and write
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
C3000
|
unkown image
|
page read and write
|
|
|
|
7FF5DD065000
|
unkown
|
page readonly
|
|
|
|
506000
|
unkown
|
page read and write
|
|
|
|
7FF520765000
|
unkown
|
page readonly
|
|
|
|
4B9000
|
unkown
|
page read and write
|
|
|
|
BD9000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
A99A3FB000
|
unkown
|
page read and write
|
|
|
|
4696000
|
unkown
|
page read and write
|
|
|
|
1BDFE948000
|
unkown
|
page read and write
|
|
|
|
A99A67D000
|
unkown
|
page read and write
|
|
|
|
2921000
|
unkown
|
page read and write
|
|
|
|
25483510000
|
unkown
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
1FBB8447000
|
unkown
|
page read and write
|
|
|
|
375C000
|
unkown
|
page readonly
|
|
|
|
7F8E9000
|
unkown
|
page read and write
|
|
|
|
B70000
|
heap default
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
14F2000
|
unkown
|
page read and write
|
|
|
|
C3B000
|
unkown
|
page read and write
|
|
|
|
28D7F5D0000
|
unkown
|
page read and write
|
|
|
|
72B000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBF4000
|
unkown
|
page readonly
|
|
|
|
4FE3000
|
unkown
|
page read and write
|
|
|
|
CD5000
|
unkown
|
page read and write
|
|
|
|
7FF5964E1000
|
unkown
|
page readonly
|
|
|
|
7FF5CC19A000
|
unkown
|
page readonly
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC59000
|
unkown
|
page readonly
|
|
|
|
7FF4F314A000
|
unkown
|
page readonly
|
|
|
|
20E0000
|
unkown
|
page readonly
|
|
|
|
254802B2000
|
unkown
|
page read and write
|
|
|
|
4ABC000
|
unkown
|
page read and write
|
|
|
|
5E79000
|
unkown
|
page read and write
|
|
|
|
254802ED000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
1FBB8413000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
7FF596293000
|
unkown
|
page readonly
|
|
|
|
1939A27B000
|
unkown
|
page read and write
|
|
|
|
7FF51AABF000
|
unkown
|
page readonly
|
|
|
|
475D000
|
unkown
|
page read and write
|
|
|
|
7FF51AB79000
|
unkown
|
page readonly
|
|
|
|
FCE000
|
unkown
|
page read and write
|
|
|
|
7FF5BE7F1000
|
unkown
|
page readonly
|
|
|
|
1BDFE92A000
|
unkown
|
page read and write
|
|
|
|
1D28A413000
|
unkown
|
page read and write
|
|
|
|
7FF5BE889000
|
unkown
|
page readonly
|
|
|
|
1BDFE942000
|
unkown
|
page read and write
|
|
|
|
6B45E7E000
|
unkown
|
page read and write
|
|
|
|
246B000
|
unkown
|
page read and write
|
|
|
|
2820000
|
unkown
|
page execute and read and write
|
|
|
|
C4A000
|
unkown
|
page read and write
|
|
|
|
1FBB8340000
|
unkown
|
page read and write
|
|
|
|
4663000
|
unkown
|
page read and write
|
|
|
|
980000
|
heap private
|
page read and write
|
|
|
|
12D0000
|
unkown
|
page read and write
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
7FF516EBC000
|
unkown
|
page readonly
|
|
|
|
5F20000
|
unkown
|
page read and write
|
|
|
|
DB5000
|
unkown
|
page read and write
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
2E01000
|
unkown
|
page readonly
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
7FF596520000
|
unkown
|
page readonly
|
|
|
|
25480375000
|
unkown
|
page read and write
|
|
|
|
5939000
|
unkown
|
page read and write
|
|
|
|
C58000
|
unkown
|
page read and write
|
|
|
|
CF3000
|
unkown
|
page read and write
|
|
|
|
4CB000
|
unkown
|
page read and write
|
|
|
|
7FF57566A000
|
unkown
|
page readonly
|
|
|
|
50A000
|
unkown
|
page read and write
|
|
|
|
3BE2B7C000
|
unkown
|
page read and write
|
|
|
|
2548026F000
|
unkown
|
page read and write
|
|
|
|
46C1000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
C58000
|
unkown
|
page read and write
|
|
|
|
254804D0000
|
unkown
|
page readonly
|
|
|
|
51B0000
|
unkown
|
page read and write
|
|
|
|
E520BFF000
|
unkown
|
page read and write
|
|
|
|
D8E000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
7FF5AADB8000
|
unkown
|
page readonly
|
|
|
|
7FF5CC099000
|
unkown
|
page readonly
|
|
|
|
7FF4F3568000
|
unkown
|
page readonly
|
|
|
|
53E0000
|
unkown
|
page read and write
|
|
|
|
16F5A090000
|
heap private
|
page read and write
|
|
|
|
7FF5BE80A000
|
unkown
|
page readonly
|
|
|
|
5750000
|
unkown
|
page read and write
|
|
|
|
1FBB8990000
|
unkown
|
page readonly
|
|
|
|
4B2FA7B000
|
unkown
|
page read and write
|
|
|
|
25480276000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
364E000
|
unkown
|
page read and write
|
|
|
|
5DEE000
|
stack
|
page read and write
|
|
|
|
7FF5BF97A000
|
unkown
|
page readonly
|
|
|
|
28A0000
|
unkown
|
page read and write
|
|
|
|
14EA000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
2C3D000
|
unkown
|
page read and write
|
|
|
|
2979000
|
unkown
|
page read and write
|
|
|
|
CED000
|
unkown
|
page read and write
|
|
|
|
28956400000
|
unkown
|
page read and write
|
|
|
|
1939A300000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
C00000
|
unkown
|
page readonly
|
|
|
|
2548026F000
|
unkown
|
page read and write
|
|
|
|
C1B000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
25480213000
|
unkown
|
page read and write
|
|
|
|
5F13000
|
unkown
|
page read and write
|
|
|
|
5932000
|
unkown
|
page read and write
|
|
|
|
2965000
|
unkown
|
page read and write
|
|
|
|
2C89000
|
unkown
|
page readonly
|
|
|
|
930000
|
unkown
|
page read and write
|
|
|
|
25480010000
|
heap default
|
page read and write
|
|
|
|
293B000
|
unkown
|
page read and write
|
|
|
|
7FF5D30E7000
|
unkown
|
page readonly
|
|
|
|
5FAD000
|
unkown
|
page read and write
|
|
|
|
2962000
|
unkown
|
page read and write
|
|
|
|
2972000
|
unkown
|
page read and write
|
|
|
|
7FF5CC236000
|
unkown
|
page readonly
|
|
|
|
61E000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
7FF7FA2B3000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
unkown
|
page read and write
|
|
|
|
E06000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
71D000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
CED000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
7FF575A9A000
|
unkown
|
page readonly
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
C23000
|
unkown
|
page read and write
|
|
|
|
7FF596133000
|
unkown
|
page readonly
|
|
|
|
16F5A26F000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
7FF501BA2000
|
unkown
|
page readonly
|
|
|
|
C58000
|
unkown
|
page read and write
|
|
|
|
7FF575AB5000
|
unkown
|
page readonly
|
|
|
|
7FF596518000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
29513140000
|
unkown
|
page readonly
|
|
|
|
1BDFE936000
|
unkown
|
page read and write
|
|
|
|
7FF501C01000
|
unkown
|
page readonly
|
|
|
|
7FF568314000
|
unkown
|
page readonly
|
|
|
|
465B000
|
unkown
|
page read and write
|
|
|
|
5F9F000
|
unkown
|
page read and write
|
|
|
|
5FE000
|
unkown
|
page read and write
|
|
|
|
7FF5AADD6000
|
unkown
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page write copy
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page readonly
|
|
|
|
920000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC6E000
|
unkown
|
page readonly
|
|
|
|
7FF5CC02E000
|
unkown
|
page readonly
|
|
|
|
28D7F661000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown
|
page read and write
|
|
|
|
100BB000
|
unkown image
|
page write copy
|
|
|
|
5501000
|
unkown
|
page read and write
|
|
|
|
5988000
|
unkown
|
page read and write
|
|
|
|
637000
|
unkown
|
page read and write
|
|
|
|
7FF5DD0D9000
|
unkown
|
page readonly
|
|
|
|
1939A150000
|
unkown
|
page readonly
|
|
|
|
28DD000
|
unkown
|
page read and write
|
|
|
|
D2144FF000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
5F90000
|
unkown
|
page read and write
|
|
|
|
25483410000
|
unkown
|
page read and write
|
|
|
|
763000
|
unkown
|
page read and write
|
|
|
|
25482210000
|
unkown
|
page read and write
|
|
|
|
289BC000000
|
unkown
|
page readonly
|
|
|
|
C28000
|
unkown
|
page read and write
|
|
|
|
7FF54B11C000
|
unkown
|
page readonly
|
|
|
|
48F0000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
heap private
|
page read and write
|
|
|
|
25483210000
|
unkown
|
page read and write
|
|
|
|
28D7A09F000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
2E2D000
|
unkown
|
page read and write
|
|
|
|
1BDFE97D000
|
unkown
|
page read and write
|
|
|
|
254802B2000
|
unkown
|
page read and write
|
|
|
|
CE5000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2CE000
|
unkown
|
page read and write
|
|
|
|
254820CE000
|
unkown
|
page read and write
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
2DE3000
|
heap private
|
page read and write
|
|
|
|
1FBB8310000
|
unkown
|
page readonly
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
7FF5CC1D6000
|
unkown
|
page readonly
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
2C5D000
|
unkown
|
page readonly
|
|
|
|
25482500000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
4C5000
|
unkown
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
3F6000
|
unkown
|
page read and write
|
|
|
|
FB2000
|
unkown
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
2210000
|
heap private
|
page read and write
|
|
|
|
53CC000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown
|
page readonly
|
|
|
|
254824D7000
|
unkown
|
page read and write
|
|
|
|
5783000
|
unkown
|
page read and write
|
|
|
|
7FF5D30CC000
|
unkown
|
page readonly
|
|
|
|
1FBB83B0000
|
unkown
|
page read and write
|
|
|
|
A99A0FE000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page readonly
|
|
|
|
C52000
|
unkown
|
page read and write
|
|
|
|
289BBE6A000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
25480400000
|
unkown
|
page readonly
|
|
|
|
7FF5BE8C7000
|
unkown
|
page readonly
|
|
|
|
31C1000
|
unkown
|
page read and write
|
|
|
|
FBB000
|
unkown
|
page read and write
|
|
|
|
32AD000
|
unkown
|
page read and write
|
|
|
|
F5C000
|
unkown
|
page read and write
|
|
|
|
254824CF000
|
unkown
|
page read and write
|
|
|
|
100A000
|
unkown
|
page read and write
|
|
|
|
28956260000
|
heap default
|
page read and write
|
|
|
|
A99AD7C000
|
unkown
|
page read and write
|
|
|
|
7FF501C0C000
|
unkown
|
page readonly
|
|
|
|
254801D0000
|
unkown
|
page read and write
|
|
|
|
D18000
|
unkown
|
page read and write
|
|
|
|
25480298000
|
unkown
|
page read and write
|
|
|
|
7FF5AAADF000
|
unkown
|
page readonly
|
|
|
|
519000
|
unkown
|
page read and write
|
|
|
|
26B6000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
5E4C000
|
unkown
|
page read and write
|
|
|
|
5FFF000
|
unkown
|
page read and write
|
|
|
|
CE1000
|
unkown
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
BEC000
|
unkown
|
page read and write
|
|
|
|
4AAD000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
18EB3900000
|
unkown
|
page read and write
|
|
|
|
CFF000
|
unkown
|
page read and write
|
|
|
|
DED000
|
unkown
|
page read and write
|
|
|
|
2D20000
|
unkown
|
page read and write
|
|
|
|
1D28A43C000
|
unkown
|
page read and write
|
|
|
|
254802B8000
|
unkown
|
page read and write
|
|
|
|
1BDFE90B000
|
unkown
|
page read and write
|
|
|
|
68E000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB95000
|
unkown
|
page readonly
|
|
|
|
75F000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
5FA6000
|
unkown
|
page read and write
|
|
|
|
E04000
|
unkown
|
page read and write
|
|
|
|
254824D2000
|
unkown
|
page read and write
|
|
|
|
25482056000
|
unkown
|
page read and write
|
|
|
|
795000
|
heap private
|
page read and write
|
|
|
|
28D7F390000
|
unkown
|
page read and write
|
|
|
|
25482270000
|
unkown
|
page readonly
|
|
|
|
7FF6E8571000
|
unkown image
|
page execute read
|
|
|
|
7AA000
|
heap default
|
page read and write
|
|
|
|
31C5000
|
unkown
|
page read and write
|
|
|
|
7FF520617000
|
unkown
|
page readonly
|
|
|
|
19C000
|
stack
|
page read and write
|
|
|
|
31C3000
|
unkown
|
page read and write
|
|
|
|
E25000
|
unkown
|
page read and write
|
|
|
|
D07000
|
unkown
|
page read and write
|
|
|
|
7FF596503000
|
unkown
|
page readonly
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
1FBB8230000
|
unkown
|
page readonly
|
|
|
|
28D7F686000
|
unkown
|
page read and write
|
|
|
|
254802C9000
|
unkown
|
page read and write
|
|
|
|
CE2000
|
unkown
|
page read and write
|
|
|
|
7FF54B23E000
|
unkown
|
page readonly
|
|
|
|
6C0000
|
heap private
|
page read and write
|
|
|
|
7FF5CC1D8000
|
unkown
|
page readonly
|
|
|
|
4F8000
|
unkown
|
page read and write
|
|
|
|
25480273000
|
unkown
|
page read and write
|
|
|
|
7FF5964D4000
|
unkown
|
page readonly
|
|
|
|
11DE000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
7FF501C91000
|
unkown
|
page readonly
|
|
|
|
2E80000
|
unkown
|
page readonly
|
|
|
|
1FBB8518000
|
unkown
|
page read and write
|
|
|
|
96000
|
unkown
|
page read and write
|
|
|
|
7FF56880D000
|
unkown
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page write copy
|
|
|
|
7FF568930000
|
unkown
|
page readonly
|
|
|
|
1939A400000
|
unkown
|
page readonly
|
|
|
|
2226000
|
heap private
|
page read and write
|
|
|
|
254802A4000
|
unkown
|
page read and write
|
|
|
|
25482046000
|
unkown
|
page read and write
|
|
|
|
7FF568994000
|
unkown
|
page readonly
|
|
|
|
7FF5965B5000
|
unkown
|
page readonly
|
|
|
|
7FF7185B1000
|
unkown image
|
page write copy
|
|
|
|
5F28000
|
unkown
|
page read and write
|
|
|
|
100C8000
|
unkown image
|
page readonly
|
|
|
|
275D000
|
unkown
|
page read and write
|
|
|
|
335D000
|
stack
|
page read and write
|
|
|
|
21658260000
|
unkown
|
page read and write
|
|
|
|
45B2000
|
unkown
|
page read and write
|
|
|
|
D15000
|
unkown
|
page read and write
|
|
|
|
7FF5AA59A000
|
unkown
|
page readonly
|
|
|
|
490000
|
heap default
|
page read and write
|
|
|
|
C07000
|
unkown
|
page read and write
|
|
|
|
1D28AC00000
|
unkown
|
page readonly
|
|
|
|
16925CD0000
|
unkown
|
page readonly
|
|
|
|
25482240000
|
unkown
|
page readonly
|
|
|
|
B5DDC7C000
|
unkown
|
page read and write
|
|
|
|
52F0000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
254803BA000
|
unkown
|
page read and write
|
|
|
|
A99A77B000
|
unkown
|
page read and write
|
|
|
|
1FBB9DF0000
|
unkown
|
page readonly
|
|
|
|
2D13000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
2E52000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
16925A6D000
|
unkown
|
page read and write
|
|
|
|
7FF516F0A000
|
unkown
|
page readonly
|
|
|
|
7FF575B17000
|
unkown
|
page readonly
|
|
|
|
19E000
|
stack
|
page read and write
|
|
|
|
2950000
|
heap private
|
page read and write
|
|
|
|
2C34000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
A99A37F000
|
unkown
|
page read and write
|
|
|
|
C1F000
|
unkown
|
page read and write
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
601C000
|
unkown
|
page read and write
|
|
|
|
511000
|
unkown
|
page read and write
|
|
|
|
D19000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
2C5D000
|
unkown
|
page readonly
|
|
|
|
25480030000
|
unkown
|
page write copy
|
|
|
|
4B7000
|
unkown
|
page read and write
|
|
|
|
D04000
|
unkown
|
page read and write
|
|
|
|
5DC000
|
unkown
|
page read and write
|
|
|
|
E16000
|
unkown
|
page read and write
|
|
|
|
602A000
|
unkown
|
page read and write
|
|
|
|
CF1000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE36000
|
unkown
|
page readonly
|
|
|
|
26CB000
|
unkown
|
page read and write
|
|
|
|
834000
|
unkown image
|
page write copy
|
|
|
|
594F000
|
unkown
|
page read and write
|
|
|
|
2E73000
|
unkown
|
page readonly
|
|
|
|
470000
|
heap default
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
5A30000
|
unkown
|
page read and write
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
845000
|
unkown image
|
page read and write
|
|
|
|
FF6597F000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
2548026A000
|
unkown
|
page read and write
|
|
|
|
297B000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
5FA6000
|
unkown
|
page read and write
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
2338000
|
heap private
|
page read and write
|
|
|
|
7FF568BCD000
|
unkown
|
page readonly
|
|
|
|
7FF5DD046000
|
unkown
|
page readonly
|
|
|
|
4671000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown
|
page readonly
|
|
|
|
1D28A44A000
|
unkown
|
page read and write
|
|
|
|
5FE9000
|
unkown
|
page read and write
|
|
|
|
7FF4F3491000
|
unkown
|
page readonly
|
|
|
|
CCB000
|
unkown
|
page read and write
|
|
|
|
7FF5205AA000
|
unkown
|
page readonly
|
|
|
|
28DFC7E000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
292E000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
CE3000
|
unkown
|
page read and write
|
|
|
|
289BBE7B000
|
unkown
|
page read and write
|
|
|
|
7FF568925000
|
unkown
|
page readonly
|
|
|
|
46A4000
|
unkown
|
page read and write
|
|
|
|
289BBE44000
|
unkown
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
E4C000
|
unkown
|
page read and write
|
|
|
|
C28000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
26D2000
|
unkown
|
page read and write
|
|
|
|
1380000
|
heap private
|
page read and write
|
|
|
|
70270000
|
unkown image
|
page readonly
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
BC5000
|
unkown
|
page read and write
|
|
|
|
7FF5D30C6000
|
unkown
|
page readonly
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
7FF5CC1FE000
|
unkown
|
page readonly
|
|
|
|
DF4000
|
unkown
|
page read and write
|
|
|
|
4BA000
|
unkown
|
page read and write
|
|
|
|
4BB000
|
unkown
|
page read and write
|
|
|
|
169259A0000
|
heap default
|
page read and write
|
|
|
|
2920000
|
unkown
|
page read and write
|
|
|
|
B80000
|
unkown
|
page execute and read and write
|
|
|
|
25480275000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page readonly
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
7FF596495000
|
unkown
|
page readonly
|
|
|
|
1BDFE92D000
|
unkown
|
page read and write
|
|
|
|
18EB3870000
|
unkown
|
page read and write
|
|
|
|
7FF4F3562000
|
unkown
|
page readonly
|
|
|
|
7FF516F80000
|
unkown
|
page readonly
|
|
|
|
4C9000
|
unkown
|
page read and write
|
|
|
|
533000
|
unkown image
|
page read and write
|
|
|
|
7FF6E8608000
|
unkown image
|
page readonly
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
6CB000
|
heap default
|
page read and write
|
|
|
|
D15000
|
unkown
|
page read and write
|
|
|
|
3749000
|
unkown
|
page readonly
|
|
|
|
1CE8BAB0000
|
unkown
|
page readonly
|
|
|
|
1FF6DAA0000
|
unkown
|
page readonly
|
|
|
|
4B0000
|
unkown
|
page read and write
|
|
|
|
7FF568BB9000
|
unkown
|
page readonly
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
1BDFE99C000
|
unkown
|
page read and write
|
|
|
|
5860000
|
heap private
|
page read and write
|
|
|
|
7FF5965C7000
|
unkown
|
page readonly
|
|
|
|
48D000
|
unkown
|
page read and write
|
|
|
|
7FF5964C1000
|
unkown
|
page readonly
|
|
|
|
2548204D000
|
unkown
|
page read and write
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
2D2D000
|
unkown
|
page readonly
|
|
|
|
100BF000
|
unkown image
|
page read and write
|
|
|
|
1FBB8446000
|
unkown
|
page read and write
|
|
|
|
C14000
|
unkown
|
page read and write
|
|
|
|
7FF516F2F000
|
unkown
|
page readonly
|
|
|
|
BE800FF000
|
unkown
|
page read and write
|
|
|
|
1FBB8402000
|
unkown
|
page read and write
|
|
|
|
577E000
|
unkown
|
page read and write
|
|
|
|
2F6D000
|
unkown
|
page read and write
|
|
|
|
7FF512E7C000
|
unkown
|
page readonly
|
|
|
|
DC5000
|
unkown
|
page read and write
|
|
|
|
1CE8B5C0000
|
unkown
|
page readonly
|
|
|
|
763000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown
|
page readonly
|
|
|
|
2440000
|
unkown
|
page read and write
|
|
|
|
5DD000
|
unkown
|
page read and write
|
|
|
|
28DF67E000
|
unkown
|
page read and write
|
|
|
|
2580000
|
heap private
|
page read and write
|
|
|
|
845000
|
unkown image
|
page read and write
|
|
|
|
CC1000
|
unkown
|
page read and write
|
|
|
|
18EB4200000
|
unkown
|
page readonly
|
|
|
|
7FF4F346D000
|
unkown
|
page readonly
|
|
|
|
51F000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown
|
page read and write
|
|
|
|
2E95000
|
unkown
|
page readonly
|
|
|
|
7FF516F77000
|
unkown
|
page readonly
|
|
|
|
7FF5BF9A5000
|
unkown
|
page readonly
|
|
|
|
2E85000
|
unkown
|
page readonly
|
|
|
|
1939A26C000
|
unkown
|
page read and write
|
|
|
|
E17000
|
unkown
|
page read and write
|
|
|
|
7FF54B249000
|
unkown
|
page readonly
|
|
|
|
28D7F4D4000
|
unkown
|
page read and write
|
|
|
|
29512649000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page read and write
|
|
|
|
4B9000
|
unkown
|
page read and write
|
|
|
|
25482059000
|
unkown
|
page read and write
|
|
|
|
7FF5D313E000
|
unkown
|
page readonly
|
|
|
|
834000
|
unkown image
|
page write copy
|
|
|
|
7FF51AA70000
|
unkown
|
page readonly
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
C54000
|
unkown
|
page read and write
|
|
|
|
16925A6D000
|
unkown
|
page read and write
|
|
|
|
254820C6000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
heap private
|
page read and write
|
|
|
|
7FF5D3149000
|
unkown
|
page readonly
|
|
|
|
61000
|
unkown image
|
page execute read
|
|
|
|
3BE2D7F000
|
unkown
|
page read and write
|
|
|
|
CEA000
|
stack
|
page read and write
|
|
|
|
C04000
|
unkown
|
page read and write
|
|
|
|
FB5000
|
unkown
|
page read and write
|
|
|
|
289BBE2F000
|
unkown
|
page read and write
|
|
|
|
7FF501B92000
|
unkown
|
page readonly
|
|
|
|
2F2E000
|
stack
|
page read and write
|
|
|
|
4F7000
|
unkown
|
page read and write
|
|
|
|
637000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE3C000
|
unkown
|
page readonly
|
|
|
|
103D000
|
unkown
|
page read and write
|
|
|
|
FEA000
|
heap default
|
page read and write
|
|
|
|
254824D5000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
5300000
|
unkown
|
page readonly
|
|
|
|
295125C0000
|
unkown
|
page readonly
|
|
|
|
5771000
|
unkown
|
page read and write
|
|
|
|
1FBB8488000
|
unkown
|
page read and write
|
|
|
|
7FF516FE1000
|
unkown
|
page readonly
|
|
|
|
D05000
|
unkown
|
page read and write
|
|
|
|
7FF501B5B000
|
unkown
|
page readonly
|
|
|
|
254820D2000
|
unkown
|
page read and write
|
|
|
|
16F5A100000
|
unkown
|
page readonly
|
|
|
|
ABE6D0B000
|
unkown
|
page read and write
|
|
|
|
CE5000
|
unkown
|
page read and write
|
|
|
|
100BB000
|
unkown image
|
page write copy
|
|
|
|
28D7F4B1000
|
unkown
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
2893000
|
unkown
|
page read and write
|
|
|
|
7FF5202E0000
|
unkown
|
page readonly
|
|
|
|
7FF54AEB7000
|
unkown
|
page readonly
|
|
|
|
7FF516EBA000
|
unkown
|
page readonly
|
|
|
|
1D28A450000
|
unkown
|
page read and write
|
|
|
|
FF6527E000
|
unkown
|
page read and write
|
|
|
|
5940000
|
unkown
|
page read and write
|
|
|
|
4A7A000
|
unkown
|
page read and write
|
|
|
|
77B000
|
unkown
|
page read and write
|
|
|
|
254820D2000
|
unkown
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
3744000
|
unkown
|
page readonly
|
|
|
|
D20000
|
unkown
|
page read and write
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
254820CE000
|
unkown
|
page read and write
|
|
|
|
5A80000
|
unkown
|
page read and write
|
|
|
|
7FF5BE89D000
|
unkown
|
page readonly
|
|
|
|
ABE71FE000
|
unkown
|
page read and write
|
|
|
|
4B8000
|
unkown
|
page read and write
|
|
|
|
18EB3913000
|
unkown
|
page read and write
|
|
|
|
2894000
|
unkown
|
page read and write
|
|
|
|
1BDFE9A0000
|
unkown
|
page read and write
|
|
|
|
1D28A400000
|
unkown
|
page read and write
|
|
|
|
7FF568A39000
|
unkown
|
page readonly
|
|
|
|
9C5000
|
heap default
|
page read and write
|
|
|
|
21657C5E000
|
unkown
|
page read and write
|
|
|
|
20BFDE00000
|
unkown
|
page readonly
|
|
|
|
1FBB8600000
|
unkown
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
960000
|
unkown
|
page write copy
|
|
|
|
7FF5BE80C000
|
unkown
|
page readonly
|
|
|
|
E29000
|
unkown
|
page read and write
|
|
|
|
C7D000
|
unkown
|
page read and write
|
|
|
|
7FF5BE6A0000
|
unkown
|
page readonly
|
|
|
|
1BDFE97F000
|
unkown
|
page read and write
|
|
|
|
7FF5167A7000
|
unkown
|
page readonly
|
|
|
|
7FF5CC255000
|
unkown
|
page readonly
|
|
|
|
545000
|
unkown image
|
page readonly
|
|
|
|
259000
|
unkown
|
page read and write
|
|
|
|
2548026E000
|
unkown
|
page read and write
|
|
|
|
21658190000
|
unkown
|
page readonly
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
30EE000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA40000
|
unkown
|
page readonly
|
|
|
|
B00000
|
unkown
|
page readonly
|
|
|
|
C24000
|
unkown
|
page read and write
|
|
|
|
1FF6DA30000
|
unkown
|
page read and write
|
|
|
|
476C000
|
unkown
|
page read and write
|
|
|
|
592B000
|
unkown
|
page read and write
|
|
|
|
17C0000
|
unkown
|
page readonly
|
|
|
|
7FF5AAC90000
|
unkown
|
page readonly
|
|
|
|
DE8000
|
unkown
|
page read and write
|
|
|
|
31C2000
|
unkown
|
page read and write
|
|
|
|
1FBB8500000
|
unkown
|
page read and write
|
|
|
|
2810000
|
unkown
|
page read and write
|
|
|
|
7FF568B60000
|
unkown
|
page readonly
|
|
|
|
A40000
|
unkown
|
page readonly
|
|
|
|
29512613000
|
unkown
|
page read and write
|
|
|
|
27D0000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC11000
|
unkown
|
page readonly
|
|
|
|
2D16000
|
unkown
|
page readonly
|
|
|
|
5A3A000
|
heap private
|
page read and write
|
|
|
|
28D7F4B4000
|
unkown
|
page read and write
|
|
|
|
21657A90000
|
heap default
|
page read and write
|
|
|
|
465B000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
heap private
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
281E000
|
unkown
|
page read and write
|
|
|
|
2370000
|
unkown
|
page readonly
|
|
|
|
7FF5AADFE000
|
unkown
|
page readonly
|
|
|
|
55F0000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
5659000
|
unkown
|
page read and write
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
2349000
|
heap private
|
page read and write
|
|
|
|
5101000
|
unkown
|
page read and write
|
|
|
|
7FF4F3150000
|
unkown
|
page readonly
|
|
|
|
A99A47B000
|
unkown
|
page read and write
|
|
|
|
D03000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBCC000
|
unkown
|
page readonly
|
|
|
|
21E0000
|
heap private
|
page read and write
|
|
|
|
5FD4000
|
unkown
|
page read and write
|
|
|
|
C54000
|
unkown
|
page read and write
|
|
|
|
21657C00000
|
unkown
|
page read and write
|
|
|
|
577F000
|
unkown
|
page read and write
|
|
|
|
4696000
|
unkown
|
page read and write
|
|
|
|
2773000
|
unkown
|
page read and write
|
|
|
|
16F5A880000
|
unkown
|
page readonly
|
|
|
|
46C000
|
heap default
|
page read and write
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
3FE057C000
|
unkown
|
page read and write
|
|
|
|
46A4000
|
unkown
|
page read and write
|
|
|
|
295123A0000
|
heap private
|
page read and write
|
|
|
|
7FF5BFBA9000
|
unkown
|
page readonly
|
|
|
|
25E0000
|
heap private
|
page read and write
|
|
|
|
7FF7FA2C8000
|
unkown image
|
page readonly
|
|
|
|
C7000
|
unkown image
|
page readonly
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
6006000
|
unkown
|
page read and write
|
|
|
|
52C0000
|
unkown
|
page read and write
|
|
|
|
7FF520777000
|
unkown
|
page readonly
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
7FF516F87000
|
unkown
|
page readonly
|
|
|
|
A99ACFC000
|
unkown
|
page read and write
|
|
|
|
577E000
|
unkown
|
page read and write
|
|
|
|
28B2000
|
unkown
|
page read and write
|
|
|
|
CE5000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
254802A8000
|
unkown
|
page read and write
|
|
|
|
7FF5D306A000
|
unkown
|
page readonly
|
|
|
|
2230000
|
heap private
|
page read and write
|
|
|
|
1939A202000
|
unkown
|
page read and write
|
|
|
|
7FF5AAEC0000
|
unkown
|
page readonly
|
|
|
|
5FE2000
|
unkown
|
page read and write
|
|
|
|
7FF4F3659000
|
unkown
|
page readonly
|
|
|
|
7FF54B1D7000
|
unkown
|
page readonly
|
|
|
|
7FF501C06000
|
unkown
|
page readonly
|
|
|
|
289BBE41000
|
unkown
|
page read and write
|
|
|
|
4BF000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
7FF52D28D000
|
unkown
|
page readonly
|
|
|
|
2E62000
|
unkown
|
page readonly
|
|
|
|
72E000
|
unkown
|
page read and write
|
|
|
|
763000
|
unkown
|
page read and write
|
|
|
|
6180000
|
unkown
|
page read and write
|
|
|
|
25480271000
|
unkown
|
page read and write
|
|
|
|
7FF575A70000
|
unkown
|
page readonly
|
|
|
|
5EE0000
|
unkown
|
page read and write
|
|
|
|
4B5000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
50A3000
|
unkown
|
page read and write
|
|
|
|
28D7F5E0000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page readonly
|
|
|
|
C30000
|
heap default
|
page read and write
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
CB000
|
unkown
|
page read and write
|
|
|
|
7FF5DD0CE000
|
unkown
|
page readonly
|
|
|
|
2C7F000
|
unkown
|
page readonly
|
|
|
|
29B4000
|
unkown
|
page read and write
|
|
|
|
5E69000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
2114EE82000
|
unkown
|
page read and write
|
|
|
|
465B000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
unkown
|
page readonly
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
637000
|
unkown
|
page read and write
|
|
|
|
2897000
|
unkown
|
page read and write
|
|
|
|
7FF5206E6000
|
unkown
|
page readonly
|
|
|
|
289BBD40000
|
heap private
|
page read and write
|
|
|
|
E51000
|
unkown
|
page read and write
|
|
|
|
742000
|
unkown
|
page read and write
|
|
|
|
619ECF5000
|
unkown
|
page read and write
|
|
|
|
7FF5DCEAA000
|
unkown
|
page readonly
|
|
|
|
1BDFEB70000
|
heap private
|
page read and write
|
|
|
|
26B0000
|
unkown
|
page readonly
|
|
|
|
D14000
|
unkown
|
page read and write
|
|
|
|
2510000
|
unkown
|
page readonly
|
|
|
|
5E5A000
|
unkown
|
page read and write
|
|
|
|
7FF54B038000
|
unkown
|
page readonly
|
|
|
|
F9C000
|
stack
|
page read and write
|
|
|
|
642000
|
unkown
|
page read and write
|
|
|
|
2C53000
|
unkown
|
page readonly
|
|
|
|
1FF6DE02000
|
unkown
|
page read and write
|
|
|
|
E59000
|
unkown
|
page read and write
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
ADF000
|
stack
|
page read and write
|
|
|
|
B1A000
|
heap default
|
page read and write
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
85B000
|
unkown image
|
page write copy
|
|
|
|
289BBE42000
|
unkown
|
page read and write
|
|
|
|
629000
|
unkown
|
page read and write
|
|
|
|
CCB000
|
unkown
|
page read and write
|
|
|
|
7FF512E22000
|
unkown
|
page readonly
|
|
|
|
29512708000
|
unkown
|
page read and write
|
|
|
|
3150000
|
heap private
|
page read and write
|
|
|
|
ABE72FB000
|
unkown
|
page read and write
|
|
|
|
2420000
|
unkown
|
page read and write
|
|
|
|
58EF000
|
unkown
|
page read and write
|
|
|
|
743000
|
unkown
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
7FF575ABF000
|
unkown
|
page readonly
|
|
|
|
A60000
|
unkown
|
page readonly
|
|
|
|
3600000
|
heap private
|
page read and write
|
|
|
|
CD5000
|
unkown
|
page read and write
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
7FF5BE92E000
|
unkown
|
page readonly
|
|
|
|
6610000
|
unkown
|
page read and write
|
|
|
|
7FF6E8570000
|
unkown image
|
page readonly
|
|
|
|
D1C000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE67000
|
unkown
|
page readonly
|
|
|
|
2E01000
|
unkown
|
page readonly
|
|
|
|
6E100000
|
unkown image
|
page readonly
|
|
|
|
2EF4000
|
unkown
|
page readonly
|
|
|
|
7FF516FE9000
|
unkown
|
page readonly
|
|
|
|
607000
|
heap default
|
page read and write
|
|
|
|
4E7000
|
unkown
|
page read and write
|
|
|
|
D2143FA000
|
unkown
|
page read and write
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
7FF59661E000
|
unkown
|
page readonly
|
|
|
|
25482700000
|
unkown
|
page read and write
|
|
|
|
289BBE56000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC81000
|
unkown
|
page readonly
|
|
|
|
7FF575AFC000
|
unkown
|
page readonly
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
2800000
|
unkown
|
page read and write
|
|
|
|
227E000
|
unkown
|
page read and write
|
|
|
|
B95000
|
unkown
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
423F000
|
unkown
|
page read and write
|
|
|
|
597A000
|
unkown
|
page read and write
|
|
|
|
29512650000
|
unkown
|
page read and write
|
|
|
|
3FE09FD000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown image
|
page read and write
|
|
|
|
2C33000
|
unkown
|
page read and write
|
|
|
|
2548200A000
|
unkown
|
page read and write
|
|
|
|
5EE8000
|
unkown
|
page read and write
|
|
|
|
763000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page readonly
|
|
|
|
29B5000
|
unkown
|
page read and write
|
|
|
|
7FF5206E2000
|
unkown
|
page readonly
|
|
|
|
CF5000
|
unkown
|
page read and write
|
|
|
|
2951264B000
|
unkown
|
page read and write
|
|
|
|
21657C20000
|
unkown
|
page read and write
|
|
|
|
2760000
|
heap private
|
page read and write
|
|
|
|
7FF5D2D96000
|
unkown
|
page readonly
|
|
|
|
7FF59656F000
|
unkown
|
page readonly
|
|
|
|
FF6567B000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
2891000
|
unkown
|
page read and write
|
|
|
|
E5D000
|
unkown
|
page read and write
|
|
|
|
1CE8B5DB000
|
heap default
|
page read and write
|
|
|
|
16925B02000
|
unkown
|
page read and write
|
|
|
|
E34000
|
unkown
|
page read and write
|
|
|
|
58FD000
|
unkown
|
page read and write
|
|
|
|
C39000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB4C000
|
unkown
|
page readonly
|
|
|
|
33DF000
|
stack
|
page read and write
|
|
|
|
7FF5D2D31000
|
unkown
|
page readonly
|
|
|
|
7FF501850000
|
unkown
|
page readonly
|
|
|
|
C45000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
304F000
|
unkown
|
page read and write
|
|
|
|
E1C000
|
unkown
|
page read and write
|
|
|
|
29512702000
|
unkown
|
page read and write
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
25480275000
|
unkown
|
page read and write
|
|
|
|
FF64D9B000
|
unkown
|
page read and write
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
76F000
|
stack
|
page read and write
|
|
|
|
2880000
|
heap private
|
page read and write
|
|
|
|
619EDFB000
|
unkown
|
page read and write
|
|
|
|
7FF5AAB90000
|
unkown
|
page readonly
|
|
|
|
BC1000
|
unkown
|
page read and write
|
|
|
|
5EE0000
|
unkown
|
page read and write
|
|
|
|
2E36000
|
unkown
|
page readonly
|
|
|
|
52F0000
|
unkown
|
page read and write
|
|
|
|
D21000
|
unkown
|
page read and write
|
|
|
|
CDD000
|
unkown
|
page read and write
|
|
|
|
575D000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
5F89000
|
unkown
|
page read and write
|
|
|
|
3C5000
|
heap default
|
page read and write
|
|
|
|
1FBBA340000
|
unkown
|
page write copy
|
|
|
|
7FF5962DE000
|
unkown
|
page readonly
|
|
|
|
3160000
|
heap private
|
page read and write
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
4CF000
|
unkown
|
page read and write
|
|
|
|
2807000
|
unkown
|
page read and write
|
|
|
|
28956C02000
|
unkown
|
page read and write
|
|
|
|
28956E00000
|
unkown
|
page readonly
|
|
|
|
28956200000
|
heap private
|
page read and write
|
|
|
|
1CE8B700000
|
unkown
|
page read and write
|
|
|
|
2830000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown image
|
page readonly
|
|
|
|
7FF59658D000
|
unkown
|
page readonly
|
|
|
|
E53000
|
unkown
|
page read and write
|
|
|
|
920000
|
heap private
|
page read and write
|
|
|
|
1BDFE90B000
|
unkown
|
page read and write
|
|
|
|
6E12F000
|
unkown image
|
page readonly
|
|
|
|
E1F000
|
unkown
|
page read and write
|
|
|
|
FAC000
|
unkown
|
page read and write
|
|
|
|
1939A160000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
5F63000
|
unkown
|
page read and write
|
|
|
|
E0A000
|
unkown
|
page read and write
|
|
|
|
31D000
|
unkown
|
page read and write
|
|
|
|
3210000
|
heap private
|
page read and write
|
|
|
|
289BBE4B000
|
unkown
|
page read and write
|
|
|
|
7FF516F5C000
|
unkown
|
page readonly
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
unkown
|
page read and write
|
|
|
|
E5D000
|
unkown
|
page read and write
|
|
|
|
4D2000
|
unkown
|
page read and write
|
|
|
|
2810000
|
unkown
|
page execute and read and write
|
|
|
|
16F5AB00000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
D1A000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
47A000
|
heap default
|
page read and write
|
|
|
|
58C9000
|
unkown
|
page read and write
|
|
|
|
25483210000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
27EB000
|
heap private
|
page read and write
|
|
|
|
4B5000
|
unkown
|
page read and write
|
|
|
|
2548026A000
|
unkown
|
page read and write
|
|
|
|
1BDFE904000
|
unkown
|
page read and write
|
|
|
|
C51000
|
unkown
|
page read and write
|
|
|
|
289BBE3E000
|
unkown
|
page read and write
|
|
|
|
56DD000
|
unkown
|
page read and write
|
|
|
|
E47000
|
unkown
|
page read and write
|
|
|
|
28D7F6AE000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown image
|
page readonly
|
|
|
|
254824A7000
|
unkown
|
page read and write
|
|
|
|
1D28A1B0000
|
heap private
|
page read and write
|
|
|
|
25483310000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA5E000
|
unkown
|
page readonly
|
|
|
|
33B0000
|
unkown
|
page read and write
|
|
|
|
BD8000
|
unkown
|
page read and write
|
|
|
|
2548205B000
|
unkown
|
page read and write
|
|
|
|
1F40000
|
unkown
|
page readonly
|
|
|
|
25480200000
|
unkown
|
page read and write
|
|
|
|
501000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page readonly
|
|
|
|
4CF000
|
unkown
|
page read and write
|
|
|
|
254820C6000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
2471000
|
unkown
|
page read and write
|
|
|
|
7FF57593E000
|
unkown
|
page readonly
|
|
|
|
4E7000
|
unkown
|
page read and write
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
1BDFE93E000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
29C3000
|
unkown
|
page read and write
|
|
|
|
596C000
|
unkown
|
page read and write
|
|
|
|
7FF5D3099000
|
unkown
|
page readonly
|
|
|
|
D12000
|
unkown
|
page read and write
|
|
|
|
28D7F6B2000
|
unkown
|
page read and write
|
|
|
|
14F3000
|
unkown
|
page read and write
|
|
|
|
7FF575AF6000
|
unkown
|
page readonly
|
|
|
|
D1D000
|
unkown
|
page read and write
|
|
|
|
329E000
|
unkown
|
page read and write
|
|
|
|
7FF516DF7000
|
unkown
|
page readonly
|
|
|
|
2360000
|
heap private
|
page read and write
|
|
|
|
28D7A602000
|
unkown
|
page read and write
|
|
|
|
254803B6000
|
unkown
|
page read and write
|
|
|
|
7FF54B1B6000
|
unkown
|
page readonly
|
|
|
|
C49000
|
unkown
|
page read and write
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
4671000
|
unkown
|
page read and write
|
|
|
|
DFB000
|
unkown
|
page read and write
|
|
|
|
2E01000
|
unkown
|
page readonly
|
|
|
|
7FF4F341A000
|
unkown
|
page readonly
|
|
|
|
7FF6E85F1000
|
unkown image
|
page write copy
|
|
|
|
7FD68000
|
unkown
|
page read and write
|
|
|
|
BE802FF000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
7FF501C34000
|
unkown
|
page readonly
|
|
|
|
4D2000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown
|
page readonly
|
|
|
|
7FF54B1CC000
|
unkown
|
page readonly
|
|
|
|
7FF51AAB5000
|
unkown
|
page readonly
|
|
|
|
7FF4F337A000
|
unkown
|
page readonly
|
|
|
|
642000
|
unkown
|
page read and write
|
|
|
|
28D7F5F0000
|
unkown
|
page read and write
|
|
|
|
25482682000
|
unkown
|
page read and write
|
|
|
|
7FF52D329000
|
unkown
|
page readonly
|
|
|
|
4BE000
|
unkown
|
page read and write
|
|
|
|
58BA000
|
unkown
|
page read and write
|
|
|
|
7FF7FA2B1000
|
unkown image
|
page read and write
|
|
|
|
1FF6DC13000
|
unkown
|
page read and write
|
|
|
|
504000
|
unkown
|
page read and write
|
|
|
|
FF656FE000
|
unkown
|
page read and write
|
|
|
|
7FF575B71000
|
unkown
|
page readonly
|
|
|
|
58B3000
|
unkown
|
page read and write
|
|
|
|
28D7F69C000
|
unkown
|
page read and write
|
|
|
|
5F04000
|
unkown
|
page read and write
|
|
|
|
2778000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
4B2000
|
unkown
|
page read and write
|
|
|
|
BFB000
|
unkown
|
page read and write
|
|
|
|
857000
|
unkown image
|
page read and write
|
|
|
|
D09000
|
unkown
|
page read and write
|
|
|
|
7FF5AADA7000
|
unkown
|
page readonly
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
20BFDC6D000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
28D7A590000
|
unkown
|
page read and write
|
|
|
|
DDB000
|
unkown
|
page read and write
|
|
|
|
7FF54AF10000
|
unkown
|
page readonly
|
|
|
|
7FF575B6E000
|
unkown
|
page readonly
|
|
|
|
46B3000
|
unkown
|
page read and write
|
|
|
|
2772000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF7E000
|
unkown
|
page readonly
|
|
|
|
2149000
|
heap private
|
page read and write
|
|
|
|
1BDFE90B000
|
unkown
|
page read and write
|
|
|
|
7FF5CC155000
|
unkown
|
page readonly
|
|
|
|
7FF5D3052000
|
unkown
|
page readonly
|
|
|
|
28D7A08C000
|
unkown
|
page read and write
|
|
|
|
D5000
|
unkown image
|
page readonly
|
|
|
|
289BBE2D000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC99000
|
unkown
|
page readonly
|
|
|
|
28EC000
|
unkown
|
page read and write
|
|
|
|
483F000
|
stack
|
page read and write
|
|
|
|
577F000
|
unkown
|
page read and write
|
|
|
|
C80000
|
unkown
|
page readonly
|
|
|
|
7FF5206E8000
|
unkown
|
page readonly
|
|
|
|
28DF6FE000
|
unkown
|
page read and write
|
|
|
|
7FF5962E5000
|
unkown
|
page readonly
|
|
|
|
1D28A502000
|
unkown
|
page read and write
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
20BFDC6B000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown image
|
page write copy
|
|
|
|
7FF52D31E000
|
unkown
|
page readonly
|
|
|
|
CF8000
|
unkown
|
page read and write
|
|
|
|
2CCF000
|
unkown
|
page read and write
|
|
|
|
1BDFE92A000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
heap private
|
page read and write
|
|
|
|
5DF000
|
unkown
|
page read and write
|
|
|
|
746000
|
unkown
|
page read and write
|
|
|
|
16925A13000
|
unkown
|
page read and write
|
|
|
|
2720000
|
heap private
|
page read and write
|
|
|
|
7FF568BE6000
|
unkown
|
page readonly
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
7FF7185C8000
|
unkown image
|
page readonly
|
|
|
|
2340000
|
heap private
|
page read and write
|
|
|
|
25482200000
|
unkown
|
page read and write
|
|
|
|
D86000
|
unkown
|
page read and write
|
|
|
|
2450000
|
unkown
|
page read and write
|
|
|
|
4A6B000
|
unkown
|
page read and write
|
|
|
|
289BBE3A000
|
unkown
|
page read and write
|
|
|
|
25482642000
|
unkown
|
page read and write
|
|
|
|
CDF000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown
|
page write copy
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
2EE0000
|
unkown
|
page readonly
|
|
|
|
149E000
|
stack
|
page read and write
|
|
|
|
CB8000
|
unkown
|
page read and write
|
|
|
|
6E100000
|
unkown image
|
page readonly
|
|
|
|
C54000
|
unkown
|
page read and write
|
|
|
|
7FF5206D2000
|
unkown
|
page readonly
|
|
|
|
1FF6DC28000
|
unkown
|
page read and write
|
|
|
|
4CF000
|
unkown
|
page read and write
|
|
|
|
1BDFE915000
|
unkown
|
page read and write
|
|
|
|
727000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
C5B000
|
unkown
|
page read and write
|
|
|
|
1BDFE936000
|
unkown
|
page read and write
|
|
|
|
5DC0000
|
unkown
|
page read and write
|
|
|
|
10001000
|
unkown image
|
page execute read
|
|
|
|
7FF5AAE64000
|
unkown
|
page readonly
|
|
|
|
7FF575A86000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EE8000
|
unkown
|
page readonly
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
7FF5D3040000
|
unkown
|
page readonly
|
|
|
|
1BDFE90F000
|
unkown
|
page read and write
|
|
|
|
E24000
|
unkown
|
page read and write
|
|
|
|
7FF5D2CB2000
|
unkown
|
page readonly
|
|
|
|
3C0000
|
heap default
|
page read and write
|
|
|
|
A99A1F9000
|
unkown
|
page read and write
|
|
|
|
7FF4F35F7000
|
unkown
|
page readonly
|
|
|
|
7FF51AB6E000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
289BBDC0000
|
unkown
|
page readonly
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
3136000
|
unkown
|
page read and write
|
|
|
|
7FF520756000
|
unkown
|
page readonly
|
|
|
|
5EC0000
|
unkown
|
page read and write
|
|
|
|
85F000
|
unkown image
|
page read and write
|
|
|
|
D1E000
|
unkown
|
page read and write
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
28F5000
|
unkown
|
page read and write
|
|
|
|
7FF5D30E4000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1B8000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
28A3000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
600D000
|
unkown
|
page read and write
|
|
|
|
509B000
|
unkown
|
page read and write
|
|
|
|
CD4000
|
unkown
|
page read and write
|
|
|
|
2980000
|
unkown
|
page read and write
|
|
|
|
D02000
|
unkown
|
page read and write
|
|
|
|
C1D000
|
unkown
|
page read and write
|
|
|
|
4748000
|
unkown
|
page read and write
|
|
|
|
50C8000
|
unkown
|
page read and write
|
|
|
|
1FF6DC2C000
|
unkown
|
page read and write
|
|
|
|
5FDB000
|
unkown
|
page read and write
|
|
|
|
CD5000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF90000
|
unkown
|
page readonly
|
|
|
|
46B3000
|
unkown
|
page read and write
|
|
|
|
5ECB000
|
unkown
|
page read and write
|
|
|
|
732000
|
unkown
|
page read and write
|
|
|
|
254820D1000
|
unkown
|
page read and write
|
|
|
|
18EB3829000
|
unkown
|
page read and write
|
|
|
|
2820000
|
unkown
|
page read and write
|
|
|
|
5F63000
|
unkown
|
page read and write
|
|
|
|
7FF52D222000
|
unkown
|
page readonly
|
|
|
|
2E73000
|
unkown
|
page readonly
|
|
|
|
28D7F560000
|
unkown
|
page write copy
|
|
|
|
1FBB8513000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
CBE000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
100BC000
|
unkown image
|
page read and write
|
|
|
|
6610000
|
unkown
|
page read and write
|
|
|
|
29512E00000
|
unkown
|
page readonly
|
|
|
|
254802CA000
|
unkown
|
page read and write
|
|
|
|
FF6547A000
|
unkown
|
page read and write
|
|
|
|
51B000
|
unkown
|
page read and write
|
|
|
|
2951264D000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD0E000
|
unkown
|
page readonly
|
|
|
|
1BDFE930000
|
unkown
|
page read and write
|
|
|
|
B5DE07E000
|
unkown
|
page read and write
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB9F000
|
unkown
|
page readonly
|
|
|
|
3FE077F000
|
unkown
|
page read and write
|
|
|
|
7FF52040B000
|
unkown
|
page readonly
|
|
|
|
5405000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown image
|
page write copy
|
|
|
|
7FF5BE600000
|
unkown
|
page readonly
|
|
|
|
4AD1000
|
unkown
|
page read and write
|
|
|
|
7FF5BFBF0000
|
unkown
|
page readonly
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
28956340000
|
unkown
|
page readonly
|
|
|
|
2AB000
|
unkown
|
page read and write
|
|
|
|
1939A200000
|
unkown
|
page read and write
|
|
|
|
7FF5965C0000
|
unkown
|
page readonly
|
|
|
|
EF0000
|
unkown
|
page readonly
|
|
|
|
AA0000
|
unkown
|
page readonly
|
|
|
|
1CE8D430000
|
heap private
|
page read and write
|
|
|
|
7FF5AAD47000
|
unkown
|
page readonly
|
|
|
|
C51000
|
unkown
|
page read and write
|
|
|
|
5500000
|
unkown
|
page read and write
|
|
|
|
CF2000
|
unkown
|
page read and write
|
|
|
|
6014000
|
unkown
|
page read and write
|
|
|
|
7FF5687A1000
|
unkown
|
page readonly
|
|
|
|
7FF568BD6000
|
unkown
|
page readonly
|
|
|
|
29512655000
|
unkown
|
page read and write
|
|
|
|
4FA000
|
unkown
|
page read and write
|
|
|
|
5940000
|
heap private
|
page read and write
|
|
|
|
28E5000
|
heap private
|
page read and write
|
|
|
|
7FF5684A5000
|
unkown
|
page readonly
|
|
|
|
7FF59638E000
|
unkown
|
page readonly
|
|
|
|
7FF52D238000
|
unkown
|
page readonly
|
|
|
|
E49000
|
unkown
|
page read and write
|
|
|
|
49C9000
|
unkown
|
page read and write
|
|
|
|
50F000
|
unkown
|
page read and write
|
|
|
|
7FF4F358E000
|
unkown
|
page readonly
|
|
|
|
33E0000
|
heap private
|
page read and write
|
|
|
|
306E000
|
stack
|
page read and write
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
7FF57598D000
|
unkown
|
page readonly
|
|
|
|
254820CE000
|
unkown
|
page read and write
|
|
|
|
E520CFF000
|
unkown
|
page read and write
|
|
|
|
28D7F5F0000
|
unkown
|
page read and write
|
|
|
|
28D7A077000
|
unkown
|
page read and write
|
|
|
|
5C4000
|
unkown
|
page read and write
|
|
|
|
E5B000
|
unkown
|
page read and write
|
|
|
|
53BE000
|
unkown
|
page read and write
|
|
|
|
3414000
|
unkown
|
page read and write
|
|
|
|
1BDFE942000
|
unkown
|
page read and write
|
|
|
|
28956468000
|
unkown
|
page read and write
|
|
|
|
25480273000
|
unkown
|
page read and write
|
|
|
|
6BB000
|
heap default
|
page read and write
|
|
|
|
7FF516EF2000
|
unkown
|
page readonly
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
CAF000
|
unkown
|
page read and write
|
|
|
|
A99A279000
|
unkown
|
page read and write
|
|
|
|
7FF5167A3000
|
unkown
|
page readonly
|
|
|
|
46C8000
|
unkown
|
page read and write
|
|
|
|
16F5A2BD000
|
unkown
|
page read and write
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown
|
page readonly
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
51D000
|
unkown
|
page read and write
|
|
|
|
289BBE47000
|
unkown
|
page read and write
|
|
|
|
7FF52D265000
|
unkown
|
page readonly
|
|
|
|
281B000
|
unkown
|
page read and write
|
|
|
|
ABE6D8E000
|
unkown
|
page read and write
|
|
|
|
254802C3000
|
unkown
|
page read and write
|
|
|
|
4C6000
|
unkown
|
page read and write
|
|
|
|
C24000
|
unkown
|
page read and write
|
|
|
|
506000
|
unkown
|
page read and write
|
|
|
|
20BFDC02000
|
unkown
|
page read and write
|
|
|
|
254802EF000
|
unkown
|
page read and write
|
|
|
|
20BFDC3F000
|
unkown
|
page read and write
|
|
|
|
C21000
|
unkown
|
page read and write
|
|
|
|
5FE9000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
5973000
|
unkown
|
page read and write
|
|
|
|
2BE000
|
unkown
|
page read and write
|
|
|
|
7FF5964DA000
|
unkown
|
page readonly
|
|
|
|
2898000
|
unkown
|
page read and write
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
28D7B2F0000
|
unkown
|
page read and write
|
|
|
|
A99AAFB000
|
unkown
|
page read and write
|
|
|
|
100000
|
unkown
|
page readonly
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
1FF6DA90000
|
heap default
|
page read and write
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
DB3000
|
unkown
|
page read and write
|
|
|
|
28956270000
|
unkown
|
page readonly
|
|
|
|
293E000
|
unkown
|
page read and write
|
|
|
|
7FF59659C000
|
unkown
|
page readonly
|
|
|
|
5E96000
|
unkown
|
page read and write
|
|
|
|
7FF4F359F000
|
unkown
|
page readonly
|
|
|
|
CF9000
|
unkown
|
page read and write
|
|
|
|
7FF5DCE07000
|
unkown
|
page readonly
|
|
|
|
100BF000
|
unkown image
|
page read and write
|
|
|
|
1CE8B490000
|
unkown
|
page readonly
|
|
|
|
7FF5202D0000
|
unkown
|
page readonly
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
2A2000
|
unkown
|
page read and write
|
|
|
|
E44000
|
unkown
|
page read and write
|
|
|
|
7FF7FA2C8000
|
unkown image
|
page readonly
|
|
|
|
4DC000
|
unkown
|
page read and write
|
|
|
|
628000
|
unkown
|
page read and write
|
|
|
|
E07000
|
unkown
|
page read and write
|
|
|
|
5E87000
|
unkown
|
page read and write
|
|
|
|
5610000
|
unkown
|
page read and write
|
|
|
|
D50000
|
unkown
|
page readonly
|
|
|
|
C21000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
2F08000
|
unkown
|
page readonly
|
|
|
|
8A4000
|
heap default
|
page read and write
|
|
|
|
5320000
|
unkown
|
page read and write
|
|
|
|
7FF5D3085000
|
unkown
|
page readonly
|
|
|
|
CC1000
|
unkown
|
page read and write
|
|
|
|
2895642A000
|
unkown
|
page read and write
|
|
|
|
2C89000
|
unkown
|
page readonly
|
|
|
|
2340000
|
unkown
|
page read and write
|
|
|
|
254824CD000
|
unkown
|
page read and write
|
|
|
|
280E000
|
unkown
|
page read and write
|
|
|
|
16925A02000
|
unkown
|
page read and write
|
|
|
|
2461000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
heap default
|
page read and write
|
|
|
|
254820FD000
|
unkown
|
page read and write
|
|
|
|
5F9F000
|
unkown
|
page read and write
|
|
|
|
2548028E000
|
unkown
|
page read and write
|
|
|
|
289C000
|
unkown
|
page read and write
|
|
|
|
25483210000
|
unkown
|
page read and write
|
|
|
|
28D79FF0000
|
unkown
|
page readonly
|
|
|
|
5FDB000
|
unkown
|
page read and write
|
|
|
|
1CE8CEC0000
|
unkown
|
page readonly
|
|
|
|
7FF4F364E000
|
unkown
|
page readonly
|
|
|
|
2C89000
|
unkown
|
page readonly
|
|
|
|
EF0000
|
heap private
|
page read and write
|
|
|
|
4732000
|
unkown
|
page read and write
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
7FF5CC23C000
|
unkown
|
page readonly
|
|
|
|
2895643D000
|
unkown
|
page read and write
|
|
|
|
25482543000
|
unkown
|
page read and write
|
|
|
|
2548028A000
|
unkown
|
page read and write
|
|
|
|
7FF54B101000
|
unkown
|
page readonly
|
|
|
|
7FF501857000
|
unkown
|
page readonly
|
|
|
|
545000
|
heap private
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
254802B6000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
35D3000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown
|
page read and write
|
|
|
|
7FF568BDC000
|
unkown
|
page readonly
|
|
|
|
E28000
|
unkown
|
page read and write
|
|
|
|
25480279000
|
unkown
|
page read and write
|
|
|
|
D90000
|
unkown
|
page write copy
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
7FD60000
|
unkown
|
page read and write
|
|
|
|
E48000
|
unkown
|
page read and write
|
|
|
|
2EEB000
|
unkown
|
page readonly
|
|
|
|
5ED2000
|
unkown
|
page read and write
|
|
|
|
35A000
|
stack
|
page read and write
|
|
|
|
E2F000
|
unkown
|
page read and write
|
|
|
|
501000
|
unkown
|
page read and write
|
|
|
|
C3E000
|
unkown
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
18EB3790000
|
unkown
|
page read and write
|
|
|
|
25482053000
|
unkown
|
page read and write
|
|
|
|
5EE8000
|
unkown
|
page read and write
|
|
|
|
28F3000
|
unkown
|
page read and write
|
|
|
|
14C0000
|
heap default
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
859000
|
unkown image
|
page write copy
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
58E7000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
8B6000
|
unkown image
|
page readonly
|
|
|
|
2EEB000
|
unkown
|
page readonly
|
|
|
|
28956380000
|
unkown
|
page readonly
|
|
|
|
5E9D000
|
unkown
|
page read and write
|
|
|
|
18EB3770000
|
unkown
|
page readonly
|
|
|
|
7FF520715000
|
unkown
|
page readonly
|
|
|
|
7FF5DD077000
|
unkown
|
page readonly
|
|
|
|
511000
|
unkown
|
page read and write
|
|
|
|
4A98000
|
unkown
|
page read and write
|
|
|
|
5948000
|
unkown
|
page read and write
|
|
|
|
577F000
|
unkown
|
page read and write
|
|
|
|
25482085000
|
unkown
|
page read and write
|
|
|
|
7FF5BFB50000
|
unkown
|
page readonly
|
|
|
|
10000000
|
unkown image
|
page readonly
|
|
|
|
CAC000
|
unkown
|
page read and write
|
|
|
|
523000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
4688000
|
unkown
|
page read and write
|
|
|
|
85F000
|
unkown image
|
page read and write
|
|
|
|
468F000
|
unkown
|
page read and write
|
|
|
|
2548029B000
|
unkown
|
page read and write
|
|
|
|
28FC000
|
unkown
|
page read and write
|
|
|
|
7FF5AADEA000
|
unkown
|
page readonly
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
C12000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
9AE000
|
unkown
|
page read and write
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
7FF5D304D000
|
unkown
|
page readonly
|
|
|
|
2C50000
|
unkown
|
page readonly
|
|
|
|
2895645A000
|
unkown
|
page read and write
|
|
|
|
A99A17E000
|
unkown
|
page read and write
|
|
|
|
A99A6FA000
|
unkown
|
page read and write
|
|
|
|
16925A68000
|
unkown
|
page read and write
|
|
|
|
28D7F587000
|
unkown
|
page readonly
|
|
|
|
289BBE46000
|
unkown
|
page read and write
|
|
|
|
25482602000
|
unkown
|
page read and write
|
|
|
|
28FF000
|
unkown
|
page read and write
|
|
|
|
CE5000
|
unkown
|
page read and write
|
|
|
|
1D28A500000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5A3000
|
unkown
|
page readonly
|
|
|
|
3110000
|
unkown
|
page read and write
|
|
|
|
8FF000
|
stack
|
page read and write
|
|
|
|
E16000
|
unkown
|
page read and write
|
|
|
|
7FF5AADC2000
|
unkown
|
page readonly
|
|
|
|
2C49000
|
unkown
|
page readonly
|
|
|
|
141000
|
unkown
|
page read and write
|
|
|
|
18EB3908000
|
unkown
|
page read and write
|
|
|
|
61000
|
unkown image
|
page execute read
|
|
|
|
7FF51FE95000
|
unkown
|
page readonly
|
|
|
|
7FF54B241000
|
unkown
|
page readonly
|
|
|
|
7FF575AAE000
|
unkown
|
page readonly
|
|
|
|
2895000
|
heap private
|
page read and write
|
|
|
|
7F8D0000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA98000
|
unkown
|
page readonly
|
|
|
|
35D1000
|
unkown
|
page read and write
|
|
|
|
5F79000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
7FDF0000
|
unkown
|
page read and write
|
|
|
|
28D7A013000
|
unkown
|
page read and write
|
|
|
|
100A5000
|
unkown image
|
page readonly
|
|
|
|
28D7F5A0000
|
unkown
|
page read and write
|
|
|
|
108000
|
unkown
|
page read and write
|
|
|
|
29CB000
|
unkown
|
page read and write
|
|
|
|
2A21000
|
unkown
|
page read and write
|
|
|
|
4D5000
|
unkown
|
page read and write
|
|
|
|
2720000
|
heap private
|
page read and write
|
|
|
|
50D6000
|
unkown
|
page read and write
|
|
|
|
888000
|
unkown
|
page read and write
|
|
|
|
733000
|
unkown
|
page read and write
|
|
|
|
77A000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown
|
page readonly
|
|
|
|
1CE8B60B000
|
heap default
|
page read and write
|
|
|
|
6031000
|
unkown
|
page read and write
|
|
|
|
909000
|
unkown image
|
page readonly
|
|
|
|
DA1000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
6EE000
|
unkown
|
page read and write
|
|
|
|
254802AC000
|
unkown
|
page read and write
|
|
|
|
2D16000
|
unkown
|
page readonly
|
|
|
|
845000
|
unkown image
|
page read and write
|
|
|
|
BD8000
|
unkown
|
page read and write
|
|
|
|
4D7000
|
unkown
|
page read and write
|
|
|
|
986000
|
heap private
|
page read and write
|
|
|
|
7FF568C07000
|
unkown
|
page readonly
|
|
|
|
2859000
|
unkown
|
page read and write
|
|
|
|
46AC000
|
unkown
|
page read and write
|
|
|
|
25480292000
|
unkown
|
page read and write
|
|
|
|
7FF516EFA000
|
unkown
|
page readonly
|
|
|
|
2548026F000
|
unkown
|
page read and write
|
|
|
|
58AC000
|
unkown
|
page read and write
|
|
|
|
DDD000
|
unkown
|
page read and write
|
|
|
|
3560000
|
unkown image
|
page readonly
|
|
|
|
CEB000
|
unkown
|
page read and write
|
|
|
|
5EC4000
|
unkown
|
page read and write
|
|
|
|
5ED9000
|
unkown
|
page read and write
|
|
|
|
E36000
|
unkown
|
page read and write
|
|
|
|
CD3000
|
unkown
|
page read and write
|
|
|
|
5988000
|
unkown
|
page read and write
|
|
|
|
4B8000
|
unkown
|
page read and write
|
|
|
|
ABE707E000
|
unkown
|
page read and write
|
|
|
|
5EFE000
|
stack
|
page read and write
|
|
|
|
7FF54B11A000
|
unkown
|
page readonly
|
|
|
|
25482102000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3CB000
|
unkown
|
page read and write
|
|
|
|
E53000
|
unkown
|
page read and write
|
|
|
|
6006000
|
unkown
|
page read and write
|
|
|
|
734000
|
unkown
|
page read and write
|
|
|
|
594F000
|
unkown
|
page read and write
|
|
|
|
540000
|
heap private
|
page read and write
|
|
|
|
2775000
|
unkown
|
page read and write
|
|
|
|
B10000
|
heap default
|
page read and write
|
|
|
|
2EC0000
|
heap private
|
page read and write
|
|
|
|
7F8E9000
|
unkown
|
page read and write
|
|
|
|
DC0000
|
unkown
|
page read and write
|
|
|
|
3016000
|
unkown
|
page read and write
|
|
|
|
1BDFE93E000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F60000
|
unkown
|
page readonly
|
|
|
|
7FF516DF3000
|
unkown
|
page readonly
|
|
|
|
E03000
|
unkown
|
page read and write
|
|
|
|
C90000
|
unkown
|
page read and write
|
|
|
|
CF0000
|
unkown
|
page read and write
|
|
|
|
9B000
|
unkown
|
page read and write
|
|
|
|
1BDFEB80000
|
unkown
|
page readonly
|
|
|
|
7FF5AADC0000
|
unkown
|
page readonly
|
|
|
|
A99A87B000
|
unkown
|
page read and write
|
|
|
|
7FF5BFC51000
|
unkown
|
page readonly
|
|
|
|
140000
|
unkown
|
page readonly
|
|
|
|
7FF516FDE000
|
unkown
|
page readonly
|
|
|
|
4DF2000
|
unkown
|
page read and write
|
|
|
|
2461000
|
unkown
|
page read and write
|
|
|
|
254802CA000
|
unkown
|
page read and write
|
|
|
|
28956360000
|
unkown
|
page read and write
|
|
|
|
4FBB000
|
unkown
|
page read and write
|
|
|
|
C96000
|
unkown
|
page read and write
|
|
|
|
457000
|
unkown image
|
page readonly
|
|
|
|
BDB000
|
unkown
|
page read and write
|
|
|
|
7FF5205C8000
|
unkown
|
page readonly
|
|
|
|
7029F000
|
unkown image
|
page readonly
|
|
|
|
72B000
|
unkown
|
page read and write
|
|
|
|
21657B70000
|
unkown
|
page readonly
|
|
|
|
C3D000
|
unkown
|
page read and write
|
|
|
|
2069000
|
heap private
|
page read and write
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
28956413000
|
unkown
|
page read and write
|
|
|
|
4F0D000
|
unkown
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
2843000
|
heap private
|
page read and write
|
|
|
|
5510000
|
unkown
|
page read and write
|
|
|
|
415000
|
unkown image
|
page execute read
|
|
|
|
E47000
|
unkown
|
page read and write
|
|
|
|
7FF5BE8D4000
|
unkown
|
page readonly
|
|
|
|
5DFE000
|
stack
|
page read and write
|
|
|
|
4679000
|
unkown
|
page read and write
|
|
|
|
B6E000
|
stack
|
page read and write
|
|
|
|
25482583000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
893000
|
unkown
|
page read and write
|
|
|
|
254802B1000
|
unkown
|
page read and write
|
|
|
|
29512713000
|
unkown
|
page read and write
|
|
|
|
7FF5965C4000
|
unkown
|
page readonly
|
|
|
|
1BDFE8FE000
|
unkown
|
page read and write
|
|
|
|
13DE000
|
unkown
|
page read and write
|
|
|
|
11D000
|
unkown
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
28D7AF70000
|
unkown
|
page readonly
|
|
|
|
E45000
|
unkown
|
page read and write
|
|
|
|
1503000
|
unkown
|
page read and write
|
|
|
|
778000
|
unkown
|
page read and write
|
|
|
|
E12000
|
unkown
|
page read and write
|
|
|
|
7FF5AAEC9000
|
unkown
|
page readonly
|
|
|
|
CC6000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
28D7F850000
|
unkown
|
page readonly
|
|
|
|
3FE0D7D000
|
unkown
|
page read and write
|
|
|
|
28D7F340000
|
unkown
|
page readonly
|
|
|
|
27F2000
|
unkown
|
page read and write
|
|
|
|
16925A00000
|
unkown
|
page read and write
|
|
|
|
28D7F8F0000
|
unkown
|
page readonly
|
|
|
|
1BDFE97F000
|
unkown
|
page read and write
|
|
|
|
254820C6000
|
unkown
|
page read and write
|
|
|
|
1D28A489000
|
unkown
|
page read and write
|
|
|
|
51B000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
7FF54AF9A000
|
unkown
|
page readonly
|
|
|
|
54FF000
|
stack
|
page read and write
|
|
|
|
C30000
|
unkown
|
page read and write
|
|
|
|
702AA000
|
unkown image
|
page read and write
|
|
|
|
6E140000
|
unkown image
|
page readonly
|
|
|
|
7FF52070E000
|
unkown
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page read and write
|
|
|
|
E59000
|
unkown
|
page read and write
|
|
|
|
306E000
|
stack
|
page read and write
|
|
|
|
EB0000
|
unkown image
|
page readonly
|
|
|
|
6D3F0000
|
unkown image
|
page readonly
|
|
|
|
254820C9000
|
unkown
|
page read and write
|
|
|
|
26D2000
|
unkown
|
page read and write
|
|
|
|
28C2000
|
unkown
|
page read and write
|
|
|
|
491E000
|
stack
|
page read and write
|
|
|
|
A99A9FA000
|
unkown
|
page read and write
|
|
|
|
7FF5DCCA8000
|
unkown
|
page readonly
|
|
|
|
254820CE000
|
unkown
|
page read and write
|
|
|
|
3513000
|
unkown
|
page read and write
|
|
|
|
747000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
7FF7FA230000
|
unkown image
|
page readonly
|
|
|
|
7FF52059E000
|
unkown
|
page readonly
|
|
|
|
2927000
|
unkown
|
page read and write
|
|
|
|
7F8E9000
|
unkown
|
page read and write
|
|
|
|
2454000
|
unkown
|
page read and write
|
|
|
|
254824DB000
|
unkown
|
page read and write
|
|
|
|
D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5964D7000
|
unkown
|
page readonly
|
|
|
|
28D7F380000
|
unkown
|
page read and write
|
|
|
|
7FF4F3566000
|
unkown
|
page readonly
|
|
|
|
72C857F000
|
unkown
|
page read and write
|
|
|
|
D8F000
|
unkown
|
page read and write
|
|
|
|
1BDFE710000
|
unkown
|
page readonly
|
|
|
|
857000
|
unkown image
|
page read and write
|
|
|
|
DC3000
|
unkown
|
page read and write
|
|
|
|
5170000
|
unkown
|
page readonly
|
|
|
|
DC9000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
3BE2FFD000
|
unkown
|
page read and write
|
|
|
|
C57000
|
unkown
|
page read and write
|
|
|
|
5E8F000
|
unkown
|
page read and write
|
|
|
|
28D7A000000
|
unkown
|
page read and write
|
|
|
|
16F5A2C5000
|
unkown
|
page read and write
|
|
|
|
C32000
|
unkown
|
page read and write
|
|
|
|
E50000
|
unkown
|
page read and write
|
|
|
|
46BA000
|
unkown
|
page read and write
|
|
|
|
7FF516DD8000
|
unkown
|
page readonly
|
|
|
|
2BF1000
|
unkown
|
page read and write
|
|
|
|
2C2000
|
unkown
|
page read and write
|
|
|
|
36F9000
|
unkown
|
page readonly
|
|
|
|
289BBE77000
|
unkown
|
page read and write
|
|
|
|
28D7A091000
|
unkown
|
page read and write
|
|
|
|
16F5A287000
|
unkown
|
page read and write
|
|
|
|
3FE0E7F000
|
unkown
|
page read and write
|
|
|
|
28D7AF60000
|
unkown
|
page readonly
|
|
|
|
A99AB7A000
|
unkown
|
page read and write
|
|
|
|
52C0000
|
unkown
|
page read and write
|
|
|
|
106D000
|
unkown
|
page read and write
|
|
|
|
7FF575ADD000
|
unkown
|
page readonly
|
|
|
|
16925A56000
|
unkown
|
page read and write
|
|
|
|
D20000
|
unkown
|
page read and write
|
|
|
|
25482074000
|
unkown
|
page read and write
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
72C000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
6E101000
|
unkown image
|
page execute read
|
|
|
|
7FF4F35A9000
|
unkown
|
page readonly
|
|
|
|
4671000
|
unkown
|
page read and write
|
|
|
|
571D000
|
unkown
|
page read and write
|
|
|
|
7FF5962D7000
|
unkown
|
page readonly
|
|
|
|
BAE000
|
unkown
|
page read and write
|
|
|
|
4253000
|
unkown
|
page read and write
|
|
|
|
1024000
|
unkown
|
page read and write
|
|
|
|
C3000
|
unkown image
|
page write copy
|
|
|
|
6038000
|
unkown
|
page read and write
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
2548028B000
|
unkown
|
page read and write
|
|
|
|
519000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD35000
|
unkown
|
page readonly
|
|
|
|
516000
|
unkown
|
page read and write
|
|
|
|
16925A3F000
|
unkown
|
page read and write
|
|
|
|
2E80000
|
unkown
|
page readonly
|
|
|
|
738000
|
unkown
|
page read and write
|
|
|
|
25482056000
|
unkown
|
page read and write
|
|
|
|
4CE000
|
unkown
|
page read and write
|
|
|
|
508000
|
unkown
|
page read and write
|
|
|
|
7FF501C37000
|
unkown
|
page readonly
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
A99A4FB000
|
unkown
|
page read and write
|
|
|
|
28D7A075000
|
unkown
|
page read and write
|
|
|
|
2973000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
unkown
|
page readonly
|
|
|
|
C35000
|
unkown
|
page read and write
|
|
|
|
5E5A000
|
unkown
|
page read and write
|
|
|
|
772000
|
unkown
|
page read and write
|
|
|
|
3FE012B000
|
unkown
|
page read and write
|
|
|
|
7FF6E85F3000
|
unkown image
|
page readonly
|
|
|
|
C2A000
|
unkown
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page readonly
|
|
|
|
51B000
|
unkown
|
page read and write
|
|
|
|
A90000
|
heap default
|
page read and write
|
|
|
|
6ED000
|
unkown
|
page read and write
|
|
|
|
1060000
|
unkown
|
page readonly
|
|
|
|
7FF5CC22D000
|
unkown
|
page readonly
|
|
|
|
E3A000
|
unkown
|
page read and write
|
|
|
|
28D7A03F000
|
unkown
|
page read and write
|
|
|
|
1080000
|
unkown
|
page read and write
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
77F000
|
unkown
|
page read and write
|
|
|
|
4FD000
|
unkown
|
page read and write
|
|
|
|
6D430000
|
unkown image
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
7FE50000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page read and write
|
|
|
|
4788000
|
unkown
|
page read and write
|
|
|
|
254803B9000
|
unkown
|
page read and write
|
|
|
|
4BE000
|
unkown
|
page read and write
|
|
|
|
25482000000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF91000
|
unkown
|
page readonly
|
|
|
|
3BE32FC000
|
unkown
|
page read and write
|
|
|
|
7FF4F3659000
|
unkown
|
page readonly
|
|
|
|
E520AFE000
|
unkown
|
page read and write
|
|
|
|
7FF575983000
|
unkown
|
page readonly
|
|
|
|
28D7F490000
|
unkown
|
page read and write
|
|
|
|
289B000
|
heap private
|
page read and write
|
|
|
|
7FF5DD05C000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown image
|
page read and write
|
|
|
|
21657D02000
|
unkown
|
page read and write
|
|
|
|
2114EF02000
|
unkown
|
page read and write
|
|
|
|
3BE30FC000
|
unkown
|
page read and write
|
|
|
|
CDB000
|
unkown
|
page read and write
|
|
|
|
7FF512F21000
|
unkown
|
page readonly
|
|
|
|
AAE000
|
unkown
|
page read and write
|
|
|
|
254802BB000
|
unkown
|
page read and write
|
|
|
|
6E13A000
|
unkown image
|
page read and write
|
|
|
|
5F89000
|
unkown
|
page read and write
|
|
|
|
254802EC000
|
unkown
|
page read and write
|
|
|
|
4A6E000
|
unkown
|
page read and write
|
|
|
|
733000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
8A4000
|
unkown
|
page read and write
|
|
|
|
438000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
heap default
|
page read and write
|
|
|
|
1BDFE993000
|
unkown
|
page read and write
|
|
|
|
3F0D37E000
|
unkown
|
page read and write
|
|
|
|
2548028C000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF718530000
|
unkown image
|
page readonly
|
|
|
|
C6A000
|
unkown
|
page read and write
|
|
|
|
E25000
|
unkown
|
page read and write
|
|
|
|
1BDFE830000
|
unkown
|
page readonly
|
|
|
|
2548026F000
|
unkown
|
page read and write
|
|
|
|
41A000
|
unkown image
|
page execute read
|
|
|
|
4B9000
|
unkown
|
page read and write
|
|
|
|
E58000
|
unkown
|
page read and write
|
|
|
|
46A4000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
D09000
|
unkown
|
page read and write
|
|
|
|
254802E9000
|
unkown
|
page read and write
|
|
|
|
7FF7FA230000
|
unkown image
|
page readonly
|
|
|
|
25480354000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
7FF7185C8000
|
unkown image
|
page readonly
|
|
|
|
51000000
|
unkown image
|
page readonly
|
|
|
|
16F5A200000
|
unkown
|
page read and write
|
|
|
|
2CD4000
|
unkown
|
page read and write
|
|
|
|
10F000
|
unkown
|
page read and write
|
|
|
|
16F5A313000
|
unkown
|
page read and write
|
|
|
|
13A000
|
unkown
|
page read and write
|
|
|
|
753000
|
unkown
|
page read and write
|
|
|
|
7FF568419000
|
unkown
|
page readonly
|
|
|
|
5956000
|
unkown
|
page read and write
|
|
|
|
BEFFCFF000
|
unkown
|
page read and write
|
|
|
|
7FF4F35BD000
|
unkown
|
page readonly
|
|
|
|
CE3000
|
unkown
|
page read and write
|
|
|
|
1939A0D0000
|
heap private
|
page read and write
|
|
|
|
4AC3000
|
unkown
|
page read and write
|
|
|
|
C5A000
|
unkown
|
page read and write
|
|
|
|
784000
|
unkown
|
page read and write
|
|
|
|
5939000
|
unkown
|
page read and write
|
|
|
|
2890000
|
heap private
|
page read and write
|
|
|
|
49F000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
heap default
|
page read and write
|
|
|
|
410000
|
unkown
|
page readonly
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
5C4000
|
unkown
|
page read and write
|
|
|
|
CD5000
|
unkown
|
page read and write
|
|
|
|
DFE000
|
unkown
|
page read and write
|
|
|
|
2548032F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE68A000
|
unkown
|
page readonly
|
|
|
|
25D0000
|
unkown
|
page readonly
|
|
|
|
537000
|
unkown image
|
page readonly
|
|
|
|
A99ADFB000
|
unkown
|
page read and write
|
|
|
|
7FF501BA8000
|
unkown
|
page readonly
|
|
|
|
5FE2000
|
unkown
|
page read and write
|
|
|
|
7E6000
|
heap default
|
page read and write
|
|
|
|
508000
|
unkown
|
page read and write
|
|
|
|
EEF000
|
stack
|
page read and write
|
|
|
|
7FF5AAE0F000
|
unkown
|
page readonly
|
|
|
|
7FF54B1BC000
|
unkown
|
page readonly
|
|
|
|
680F000
|
stack
|
page read and write
|
|
|
|
593A000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page read and write
|
|
|
|
C29000
|
unkown
|
page read and write
|
|
|
|
49F000
|
unkown
|
page read and write
|
|
|
|
10BE000
|
unkown
|
page read and write
|
|
|
|
7FF5AAC7C000
|
unkown
|
page readonly
|
|
|
|
1200000
|
unkown
|
page readonly
|
|
|
|
72A000
|
unkown
|
page read and write
|
|
|
|
717000
|
unkown
|
page read and write
|
|
|
|
20BFDC13000
|
unkown
|
page read and write
|
|
|
|
7FF512DEB000
|
unkown
|
page readonly
|
|
|
|
4CD000
|
unkown
|
page read and write
|
|
|
|
889000
|
heap default
|
page read and write
|
|
|
|
16F5A213000
|
unkown
|
page read and write
|
|
|
|
5F6A000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
25482012000
|
unkown
|
page read and write
|
|
|
|
2770000
|
unkown
|
page read and write
|
|
|
|
7FF5D302C000
|
unkown
|
page readonly
|
|
|
|
25482682000
|
unkown
|
page read and write
|
|
|
|
28D7F5C0000
|
unkown
|
page read and write
|
|
|
|
E35000
|
unkown
|
page read and write
|
|
|
|
5D6000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page readonly
|
|
|
|
435000
|
unkown image
|
page readonly
|
|
|
|
2EE6000
|
unkown
|
page readonly
|
|
|
|
5E8F000
|
unkown
|
page read and write
|
|
|
|
C43000
|
unkown
|
page read and write
|
|
|
|
1CE8D020000
|
heap private
|
page read and write
|
|
|
|
FF6587F000
|
unkown
|
page read and write
|
|
|
|
7FF596507000
|
unkown
|
page readonly
|
|
|
|
28956513000
|
unkown
|
page read and write
|
|
|
|
12C000
|
unkown
|
page read and write
|
|
|
|
3440000
|
heap private
|
page read and write
|
|
|
|
4756000
|
unkown
|
page read and write
|
|
|
|
3F0D3FC000
|
unkown
|
page read and write
|
|
|
|
C62000
|
unkown
|
page read and write
|
|
|
|
D03000
|
unkown
|
page read and write
|
|
|
|
3380000
|
unkown
|
page read and write
|
|
|
|
C10000
|
unkown
|
page read and write
|
|
|
|
4870000
|
heap private
|
page read and write
|
|
|
|
4DC3000
|
unkown
|
page read and write
|
|
|
|
2471000
|
unkown
|
page read and write
|
|
|
|
5186000
|
unkown
|
page readonly
|
|
|
|
2060000
|
heap private
|
page read and write
|
|
|
|
41E8000
|
unkown
|
page read and write
|
|
|
|
2901000
|
unkown
|
page read and write
|
|
|
|
28D7F63F000
|
unkown
|
page read and write
|
|
|
|
4B2FCFF000
|
unkown
|
page read and write
|
|
|
|
6B45F7B000
|
unkown
|
page read and write
|
|
|
|
1939A140000
|
unkown
|
page readonly
|
|
|
|
831000
|
unkown image
|
page write copy
|
|
|
|
E4D000
|
unkown
|
page read and write
|
|
|
|
2C81000
|
unkown
|
page readonly
|
|
|
|
131E000
|
unkown
|
page read and write
|
|
|
|
100A5000
|
unkown image
|
page readonly
|
|
|
|
4B2000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
85B000
|
unkown image
|
page write copy
|
|
|
|
4D1000
|
unkown image
|
page execute read
|
|
|
|
2114F0D0000
|
unkown
|
page write copy
|
|
|
|
728000
|
unkown
|
page read and write
|
|
|
|
100C8000
|
unkown image
|
page readonly
|
|
|
|
7FF5AAE19000
|
unkown
|
page readonly
|
|
|
|
670E000
|
unkown
|
page read and write
|
|
|
|
28D7A070000
|
unkown
|
page read and write
|
|
|
|
7FF54B1E4000
|
unkown
|
page readonly
|
|
|
|
D18000
|
unkown
|
page read and write
|
|
|
|
28D7000
|
unkown
|
page read and write
|
|
|
|
7FF5D2FD5000
|
unkown
|
page readonly
|
|
|
|
CFA000
|
unkown
|
page read and write
|
|
|
|
18EB3690000
|
heap default
|
page read and write
|
|
|
|
25480274000
|
unkown
|
page read and write
|
|
|
|
2929000
|
unkown
|
page read and write
|
|
|
|
1BDFE90F000
|
unkown
|
page read and write
|
|
|
|
DD7000
|
unkown
|
page read and write
|
|
|
|
C3A000
|
heap default
|
page read and write
|
|
|
|
1BDFE8F5000
|
unkown
|
page read and write
|
|
|
|
D4000
|
unkown
|
page read and write
|
|
|
|
1FBBA000000
|
unkown
|
page readonly
|
|
|
|
578C000
|
unkown
|
page read and write
|
|
|
|
BD4000
|
unkown
|
page read and write
|
|
|
|
2C87000
|
unkown
|
page readonly
|
|
|
|
100BC000
|
unkown image
|
page read and write
|
|
|
|
29512800000
|
unkown
|
page readonly
|
|
|
|
25480277000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
unkown
|
page readonly
|
|
|
|
830000
|
unkown image
|
page read and write
|
|
|
|
DAA000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown image
|
page readonly
|
|
|
|
25482400000
|
unkown
|
page read and write
|
|
|
|
C2E000
|
unkown
|
page read and write
|
|
|
|
5F13000
|
unkown
|
page read and write
|
|
|
|
469D000
|
unkown
|
page read and write
|
|
|
|
F9E000
|
unkown
|
page read and write
|
|
|
|
7FF5D301A000
|
unkown
|
page readonly
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
E3000
|
unkown
|
page read and write
|
|
|
|
7FF5AAD97000
|
unkown
|
page readonly
|
|
|
|
7FF520729000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page readonly
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
3FE08FC000
|
unkown
|
page read and write
|
|
|
|
7FF5687A5000
|
unkown
|
page readonly
|
|
|
|
2A0C000
|
unkown
|
page read and write
|
|
|
|
3554000
|
unkown
|
page read and write
|
|
|
|
CA8000
|
unkown
|
page read and write
|
|
|
|
2840000
|
unkown
|
page readonly
|
|
|
|
1FBB8463000
|
unkown
|
page read and write
|
|
|
|
595D000
|
unkown
|
page read and write
|
|
|
|
5956000
|
unkown
|
page read and write
|
|
|
|
5E4C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFC8000
|
unkown
|
page readonly
|
|
|
|
CC4000
|
unkown
|
page read and write
|
|
|
|
25480331000
|
unkown
|
page read and write
|
|
|
|
4DA000
|
unkown
|
page read and write
|
|
|
|
7FF54B1E7000
|
unkown
|
page readonly
|
|
|
|
515000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
14F2000
|
unkown
|
page read and write
|
|
|
|
72D000
|
unkown
|
page read and write
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
25482023000
|
unkown
|
page read and write
|
|
|
|
7FF51AAF6000
|
unkown
|
page readonly
|
|
|
|
34E0000
|
unkown
|
page read and write
|
|
|
|
31C4000
|
unkown
|
page read and write
|
|
|
|
3110000
|
unkown
|
page readonly
|
|
|
|
21658402000
|
unkown
|
page read and write
|
|
|
|
1BDFE92D000
|
unkown
|
page read and write
|
|
|
|
7FF5BE5A7000
|
unkown
|
page readonly
|
|
|
|
28D7A09D000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFBC000
|
unkown
|
page readonly
|
|
|
|
7FF4F342A000
|
unkown
|
page readonly
|
|
|
|
3F0D2FF000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
heap private
|
page read and write
|
|
|
|
9C0000
|
heap default
|
page read and write
|
|
|
|
2852000
|
unkown
|
page read and write
|
|
|
|
EB0000
|
heap default
|
page read and write
|
|
|
|
E37000
|
unkown
|
page read and write
|
|
|
|
F1000
|
unkown
|
page read and write
|
|
|
|
CFE000
|
unkown
|
page read and write
|
|
|
|
564B000
|
unkown
|
page read and write
|
|
|
|
2940000
|
unkown
|
page read and write
|
|
|
|
7DD000
|
unkown
|
page read and write
|
|
|
|
2925000
|
unkown
|
page read and write
|
|
|
|
25482642000
|
unkown
|
page read and write
|
|
|
|
2E44000
|
unkown
|
page readonly
|
|
|
|
B5DDF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE31000
|
unkown
|
page readonly
|
|
|
|
2A13000
|
unkown
|
page read and write
|
|
|
|
16F5AC00000
|
unkown
|
page readonly
|
|
|
|
1939A302000
|
unkown
|
page read and write
|
|
|
|
27DF000
|
unkown
|
page read and write
|
|
|
|
18EB3A00000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFE6000
|
unkown
|
page readonly
|
|
|
|
35D5000
|
unkown
|
page read and write
|
|
|
|
4A82000
|
unkown
|
page read and write
|
|
|
|
990000
|
heap default
|
page read and write
|
|
|
|
BD6000
|
unkown
|
page read and write
|
|
|
|
7FF596629000
|
unkown
|
page readonly
|
|
|
|
7FF5CBF85000
|
unkown
|
page readonly
|
|
|
|
3F1000
|
unkown image
|
page execute read
|
|
|
|
619EE7E000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
heap default
|
page read and write
|
|
|
|
537000
|
unkown image
|
page readonly
|
|
|
|
DF5000
|
heap default
|
page read and write
|
|
|
|
B6E000
|
unkown
|
page read and write
|
|
|
|
28D7A054000
|
unkown
|
page read and write
|
|
|
|
16F5A1D0000
|
unkown
|
page readonly
|
|
|
|
6D3F1000
|
unkown image
|
page execute read
|
|
|
|
7FF512EC7000
|
unkown
|
page readonly
|
|
|
|
1BDFE927000
|
unkown
|
page read and write
|
|
|
|
6174000
|
heap private
|
page read and write
|
|
|
|
1FF6DD02000
|
unkown
|
page read and write
|
|
|
|
4D3000
|
unkown
|
page read and write
|
|
|
|
2E95000
|
unkown
|
page readonly
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
1D28A3D0000
|
unkown
|
page readonly
|
|
|
|
C58000
|
unkown
|
page read and write
|
|
|
|
1BDFE91B000
|
unkown
|
page read and write
|
|
|
|
7FF5AAE55000
|
unkown
|
page readonly
|
|
|
|
27C5000
|
heap private
|
page read and write
|
|
|
|
28EB000
|
unkown
|
page read and write
|
|
There are 4116 hidden memdumps, click here to show them.