IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Refusal-743510550-01212021.xlsm
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-743510550-01212021.xlsm.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:43 2020, mtime=Tue Jan 26 01:15:17 2021, atime=Tue Jan 26 01:15:17 2021, length=25989, window=hide
dropped
malicious
C:\Users\user\Desktop\~$Refusal-743510550-01212021.xlsm
data
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\47DB79C7-3182-45D7-9E77-20E9958CA999
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2CBD62F1.png
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\39BFA2B0.png
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4B8458AB.png
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\41B10000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu Jun 27 16:19:49 2019, mtime=Tue Jan 26 01:15:17 2021, atime=Tue Jan 26 01:15:17 2021, length=8192, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\Desktop\72B10000
data
dropped
clean
C:\msdownld.tmp\AS01B7F1.tmp\5555555555.jpg
empty
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\770B65DC.png
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\88A5D42D.png
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BB5AB44A.png
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\100F0000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-743510550-01212021.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15 2020, mtime=Tue Jan 26 01:09:50 2021, atime=Tue Jan 26 01:09:51 2021, length=26117, window=hide
dropped
clean
C:\Users\user\Desktop\B00F0000
data
dropped
clean
There are 8 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32 ..\Flopers.GGRRDDFF,DllRegisterServer
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
malicious

URLs

Name
IP
Malicious
http://www.toteteca.com/qzkiodlofm/5555555555.jpg
172.107.2.98
malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://wus2-000.contentsync.
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://wus2-000.pagecontentsync.
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://ncus-000.contentsync.
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://contentstorage.omex.office.net/addinclassifier/officeentities
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
clean
https://directory.services.
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
toteteca.com
172.107.2.98
malicious
www.toteteca.com
unknown
malicious

IPs

IP
Domain
Country
Active
Malicious
172.107.2.98
unknown
United States
unknown
malicious

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
9m-
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
:m-
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A95B
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1AFA5
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1B189
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1B2B2
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
, -
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
28D14
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
28E3D
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
-i8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EFC97
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EFF74
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F006E
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F00FA
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
vq8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F87A7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F899A
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductNonBootFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductNonBootFilesIntl_1033
clean
There are 153 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2FD8EE70000
unkown
page readonly
clean
1ECEDCD2000
unkown
page read and write
clean
7FF581A27000
unkown
page readonly
clean
163707E000
unkown
page read and write
clean
19225665000
unkown
page read and write
clean
22F47B81000
unkown
page read and write
clean
1E470610000
heap private
page read and write
clean
7FF5816F3000
unkown
page readonly
clean
25024813000
unkown
page read and write
clean
B2B1B2B000
unkown
page read and write
clean
1ECEFD74000
unkown
page read and write
clean
22F472C5000
unkown
page read and write
clean
7FF5916E1000
unkown
page readonly
clean
7FF5610BA000
unkown
page readonly
clean
7FF540900000
unkown
page readonly
clean
1ECEDD20000
unkown
page read and write
clean
22E31E6A000
unkown
page read and write
clean
7FF54069C000
unkown
page readonly
clean
7FF540821000
unkown
page readonly
clean
22E31E69000
unkown
page read and write
clean
22E31D70000
unkown
page readonly
clean
66D66FD000
unkown
page read and write
clean
1ECF1100000
unkown
page read and write
clean
2FD8E83F000
unkown
page read and write
clean
1ECF0510000
unkown
page read and write
clean
BD23FFB000
unkown
page read and write
clean
1E4705E0000
unkown
page read and write
clean
22F47B64000
unkown
page read and write
clean
7FF4F3897000
unkown
page readonly
clean
7FF57B8EA000
unkown
page readonly
clean
7FF4EEDE5000
unkown
page readonly
clean
7FF5A6A3A000
unkown
page readonly
clean
20183A60000
unkown
page readonly
clean
1ECEDD72000
unkown
page read and write
clean
7FF558294000
unkown
page readonly
clean
7FF5408D6000
unkown
page readonly
clean
7FF583822000
unkown
page readonly
clean
E32077E000
unkown
page read and write
clean
7FF540801000
unkown
page readonly
clean
1ECEFD6E000
unkown
page read and write
clean
7FF593011000
unkown
page readonly
clean
172C75A0000
unkown
page write copy
clean
23B70200000
unkown
page readonly
clean
7FF540960000
unkown
page readonly
clean
22F47B66000
unkown
page read and write
clean
19491BA0000
unkown
page readonly
clean
19227740000
unkown
page write copy
clean
172C7613000
unkown
page read and write
clean
1E4706BF000
unkown
page read and write
clean
20183400000
unkown
page read and write
clean
22F47B2B000
unkown
page read and write
clean
7FF561139000
unkown
page readonly
clean
22F47B61000
unkown
page read and write
clean
FEFB3FF000
unkown
page read and write
clean
B2B21F7000
unkown
page read and write
clean
1E47070C000
unkown
page read and write
clean
19491C31000
unkown
page read and write
clean
1E470724000
unkown
page read and write
clean
7FF5C38F5000
unkown
page readonly
clean
1ECEDD1F000
unkown
page read and write
clean
7FF583B9C000
unkown
page readonly
clean
7FF540858000
unkown
page readonly
clean
29CA4730000
unkown
page readonly
clean
1ECF1000000
unkown
page read and write
clean
7FF56E933000
unkown
page readonly
clean
22F47B82000
unkown
page read and write
clean
23B43000000
unkown
page read and write
clean
7FF56E985000
unkown
page readonly
clean
7FF528373000
unkown
page readonly
clean
7FF5C3957000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
1E4714E0000
unkown
page read and write
clean
22F47B4A000
unkown
page read and write
clean
22F47B5C000
unkown
page read and write
clean
29CA4750000
unkown
page read and write
clean
7FF4FA850000
unkown
page readonly
clean
19225649000
unkown
page read and write
clean
7FF5581F0000
unkown
page readonly
clean
22F48002000
unkown
page read and write
clean
22F47B0A000
unkown
page read and write
clean
23B6FF90000
unkown
page readonly
clean
BD2427E000
unkown
page read and write
clean
1E47068E000
unkown
page read and write
clean
19491C4E000
unkown
page read and write
clean
7FF4FA27E000
unkown
page readonly
clean
2FB6000
unkown
page readonly
clean
1E47070C000
unkown
page read and write
clean
23B70060000
unkown
page read and write
clean
7FF56ECC9000
unkown
page readonly
clean
1ECEFDFA000
unkown
page read and write
clean
2FD8E857000
unkown
page read and write
clean
15403260000
unkown
page readonly
clean
242F6413000
unkown
page read and write
clean
2FD8F002000
unkown
page read and write
clean
7FF528491000
unkown
page readonly
clean
7FF5A6A9C000
unkown
page readonly
clean
7FF56EAD7000
unkown
page readonly
clean
19E6385F000
unkown
page read and write
clean
FEFB07B000
unkown
page read and write
clean
7FF592EFC000
unkown
page readonly
clean
29CA4800000
unkown
page read and write
clean
1E470722000
unkown
page read and write
clean
23B42F90000
unkown
page write copy
clean
23B3ED00000
unkown
page read and write
clean
22F479F0000
unkown
page read and write
clean
7FF57BB64000
unkown
page readonly
clean
7FF540969000
unkown
page readonly
clean
7FF4EEDF9000
unkown
page readonly
clean
22E31E00000
unkown
page read and write
clean
19E6387D000
unkown
page read and write
clean
7FF592FB4000
unkown
page readonly
clean
7FF56B602000
unkown
page readonly
clean
22F47B51000
unkown
page read and write
clean
7FF540730000
unkown
page readonly
clean
1ECEDC97000
unkown
page read and write
clean
22F4724D000
unkown
page read and write
clean
DE2A0FE000
unkown
page read and write
clean
D9B000
stack
page read and write
clean
7FF4EEE2C000
unkown
page readonly
clean
7FF59300E000
unkown
page readonly
clean
23B7005B000
unkown
page read and write
clean
7FF5819CF000
unkown
page readonly
clean
7FF56B1A5000
unkown
page readonly
clean
23B3DA8B000
unkown
page read and write
clean
23B70802000
unkown
page read and write
clean
22F472A7000
unkown
page read and write
clean
1ECEDD21000
unkown
page read and write
clean
15403600000
unkown
page readonly
clean
22F47B5D000
unkown
page read and write
clean
3280000
unkown
page readonly
clean
23B42EE4000
unkown
page read and write
clean
DE29E7C000
unkown
page read and write
clean
29CA4A00000
unkown
page readonly
clean
1E470695000
unkown
page read and write
clean
172C7602000
unkown
page read and write
clean
1ECF1102000
unkown
page read and write
clean
22F47B45000
unkown
page read and write
clean
1ECEDC9F000
unkown
page read and write
clean
10E0000
unkown
page read and write
clean
66D5C7A000
unkown
page read and write
clean
22F47B14000
unkown
page read and write
clean
22F47C00000
unkown
page readonly
clean
EC7C0FF000
unkown
page read and write
clean
7FF5673F0000
unkown
page readonly
clean
7FF592DE9000
unkown
page readonly
clean
22F47B51000
unkown
page read and write
clean
7FF5819F6000
unkown
page readonly
clean
22E337A0000
unkown
page read and write
clean
7FF56EBFE000
unkown
page readonly
clean
7FF50A1D5000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
BD242FE000
unkown
page read and write
clean
7FF4FAA56000
unkown
page readonly
clean
7FF4EEA67000
unkown
page readonly
clean
22F47B61000
unkown
page read and write
clean
22F47B11000
unkown
page read and write
clean
1149000
unkown
page read and write
clean
7FF590D84000
unkown
page readonly
clean
EC7C47A000
unkown
page read and write
clean
7FF56B669000
unkown
page readonly
clean
7FF5406A8000
unkown
page readonly
clean
A1AEBFE000
unkown
page read and write
clean
66D59BE000
unkown
page read and write
clean
3078000
unkown
page readonly
clean
3005000
unkown
page readonly
clean
7FF57B7FA000
unkown
page readonly
clean
4B50000
unkown
page readonly
clean
25024829000
unkown
page read and write
clean
7FF592F10000
unkown
page readonly
clean
1ECEDAA0000
heap default
page read and write
clean
7FF581998000
unkown
page readonly
clean
1ECEDC9C000
unkown
page read and write
clean
DE2A3FF000
unkown
page read and write
clean
1D48B530000
heap default
page read and write
clean
22F47B56000
unkown
page read and write
clean
2DC40C02000
unkown
page read and write
clean
19E63A00000
unkown
page readonly
clean
EC7C37F000
unkown
page read and write
clean
172C78D0000
unkown
page readonly
clean
7FF5408DC000
unkown
page readonly
clean
1ECEDD02000
unkown
page read and write
clean
7FF56B3EF000
unkown
page readonly
clean
1E47070C000
heap default
page read and write
clean
407D5FC000
unkown
page read and write
clean
7FF592D9F000
unkown
page readonly
clean
7FF4F38F9000
unkown
page readonly
clean
1ECEFD91000
unkown
page read and write
clean
7FF56B325000
unkown
page readonly
clean
22F47B7E000
unkown
page read and write
clean
29CA4902000
unkown
page read and write
clean
19225C60000
unkown
page readonly
clean
25024868000
unkown
page read and write
clean
19E6383A000
unkown
page read and write
clean
7FF4FAA5C000
unkown
page readonly
clean
7FF5676FD000
unkown
page readonly
clean
22F47B7E000
unkown
page read and write
clean
7FF56B5D6000
unkown
page readonly
clean
172C7600000
unkown
page read and write
clean
7FF4FAAE9000
unkown
page readonly
clean
FF5217B000
unkown
page read and write
clean
66D607B000
unkown
page read and write
clean
7FF5610F8000
unkown
page readonly
clean
1000000
unkown
page read and write
clean
19227080000
unkown
page read and write
clean
29CA483C000
unkown
page read and write
clean
7FF583C45000
unkown
page readonly
clean
20183500000
unkown
page read and write
clean
7FF5408A5000
unkown
page readonly
clean
22F47B81000
unkown
page read and write
clean
8B0C2F9000
unkown
page read and write
clean
7FF54088A000
unkown
page readonly
clean
7FF55822E000
unkown
page readonly
clean
407D57D000
unkown
page read and write
clean
7FF56EBD8000
unkown
page readonly
clean
172C75F0000
unkown
page readonly
clean
7FF540728000
unkown
page readonly
clean
1922563F000
unkown
page read and write
clean
1ECEDCA6000
unkown
page read and write
clean
7FF55816C000
unkown
page readonly
clean
22F47B17000
unkown
page read and write
clean
192270D0000
unkown
page read and write
clean
7FF581941000
unkown
page readonly
clean
7FF4FAA2F000
unkown
page readonly
clean
7FF56B560000
unkown
page readonly
clean
1ECEDC9B000
unkown
page read and write
clean
7FF57BB19000
unkown
page readonly
clean
7FF54056D000
unkown
page readonly
clean
7FF50A1CE000
unkown
page readonly
clean
22F47B41000
unkown
page read and write
clean
1922568A000
unkown
page read and write
clean
23B42ED0000
unkown
page read and write
clean
1E471280000
unkown
page read and write
clean
1ECF0010000
unkown
page read and write
clean
1ECEDC6D000
unkown
page read and write
clean
7FF583AC7000
unkown
page readonly
clean
7FF4FA9FA000
unkown
page readonly
clean
7FF5582EE000
unkown
page readonly
clean
7FF540860000
unkown
page readonly
clean
1E471210000
unkown
page read and write
clean
22F47B90000
unkown
page read and write
clean
7FF5C39B0000
unkown
page readonly
clean
22F47B37000
unkown
page read and write
clean
7FF583CB0000
unkown
page readonly
clean
23B3E158000
unkown
page read and write
clean
19227202000
unkown
page read and write
clean
19225800000
unkown
page readonly
clean
192255F0000
unkown
page readonly
clean
19491BC5000
heap private
page read and write
clean
23B3E118000
unkown
page read and write
clean
19491B90000
unkown
page readonly
clean
7FF56E990000
unkown
page readonly
clean
23B70013000
unkown
page read and write
clean
7FF591513000
unkown
page readonly
clean
1ECEFD10000
unkown
page read and write
clean
7FF590D8D000
unkown
page readonly
clean
1E470721000
unkown
page read and write
clean
22F47B6C000
unkown
page read and write
clean
23B3E930000
unkown
page readonly
clean
22F47B8F000
unkown
page read and write
clean
1E470695000
unkown
page read and write
clean
7FF57BBBE000
unkown
page readonly
clean
7FF4F367F000
unkown
page readonly
clean
23B42D10000
unkown
page read and write
clean
7FF52814E000
unkown
page readonly
clean
1E4706EC000
unkown
page read and write
clean
7FF50A299000
unkown
page readonly
clean
23B3E102000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
29CA4913000
unkown
page read and write
clean
7FF56112F000
unkown
page readonly
clean
1E471540000
unkown
page read and write
clean
7FF528331000
unkown
page readonly
clean
22F47B5C000
unkown
page read and write
clean
F69B0FE000
unkown
page read and write
clean
7FF4F386C000
unkown
page readonly
clean
7FF52833A000
unkown
page readonly
clean
23B42EC4000
unkown
page read and write
clean
F69B07E000
unkown
page read and write
clean
7FF4FAA84000
unkown
page readonly
clean
7FF558276000
unkown
page readonly
clean
22F47970000
unkown
page write copy
clean
7FF592EA5000
unkown
page readonly
clean
19E6386C000
unkown
page read and write
clean
1E471222000
unkown
page read and write
clean
19225659000
unkown
page read and write
clean
7FF583B8A000
unkown
page readonly
clean
242F644B000
unkown
page read and write
clean
7FF528347000
unkown
page readonly
clean
DE2A17E000
unkown
page read and write
clean
7FF5404A1000
unkown
page readonly
clean
1E470EB0000
unkown
page readonly
clean
7FF581A0C000
unkown
page readonly
clean
1ECEFA10000
heap private
page read and write
clean
1ECEFA00000
unkown
page readonly
clean
FEFB7FF000
unkown
page read and write
clean
22E31E6A000
unkown
page read and write
clean
114D000
unkown
page read and write
clean
19491C20000
heap default
page read and write
clean
22E31E6A000
unkown
page read and write
clean
7FF56EC60000
unkown
page readonly
clean
2502486D000
unkown
page read and write
clean
7FF540817000
unkown
page readonly
clean
7FF57B6D0000
unkown
page readonly
clean
7FF5405EC000
unkown
page readonly
clean
7FF58195C000
unkown
page readonly
clean
7FF583A3F000
unkown
page readonly
clean
1E470740000
unkown
page readonly
clean
23B3DC00000
unkown
page readonly
clean
1E4706EB000
unkown
page read and write
clean
1ECEFDE2000
unkown
page read and write
clean
7FF540721000
unkown
page readonly
clean
7FF540837000
unkown
page readonly
clean
7FF540000000
unkown
page readonly
clean
7FF593019000
unkown
page readonly
clean
7FF592B53000
unkown
page readonly
clean
7FF5A67E0000
unkown
page readonly
clean
7FF56B5A5000
unkown
page readonly
clean
7FF5A692D000
unkown
page readonly
clean
7FF528288000
unkown
page readonly
clean
22F472A3000
unkown
page read and write
clean
1E471270000
unkown
page read and write
clean
FEFB6FD000
unkown
page read and write
clean
DE2A67F000
unkown
page read and write
clean
23B3DA00000
unkown
page read and write
clean
29CA486B000
unkown
page read and write
clean
7FF56B5DC000
unkown
page readonly
clean
7FF509ED0000
unkown
page readonly
clean
20183502000
unkown
page read and write
clean
F69B37B000
unkown
page read and write
clean
172C7590000
heap default
page read and write
clean
192271B0000
unkown
page readonly
clean
19E6386A000
unkown
page read and write
clean
7FF4EEC2F000
unkown
page readonly
clean
7FF558208000
unkown
page readonly
clean
7FF5816E4000
unkown
page readonly
clean
22F47B6E000
unkown
page read and write
clean
23B3DA56000
unkown
page read and write
clean
23B43040000
unkown
page readonly
clean
7FF56EA30000
unkown
page readonly
clean
FEFB9FF000
unkown
page read and write
clean
7FF54084C000
unkown
page readonly
clean
1ECF0110000
unkown
page read and write
clean
7FF557DF0000
unkown
page readonly
clean
23B3DA73000
unkown
page read and write
clean
B2B257F000
unkown
page read and write
clean
19491D20000
unkown
page readonly
clean
66D61FB000
unkown
page read and write
clean
1ECEDC9B000
unkown
page read and write
clean
15402D13000
unkown
page read and write
clean
7FF4F3835000
unkown
page readonly
clean
19227190000
unkown
page read and write
clean
15403350000
unkown
page write copy
clean
7FF52811C000
unkown
page readonly
clean
7FF50A232000
unkown
page readonly
clean
7FF54089E000
unkown
page readonly
clean
7FF560E44000
unkown
page readonly
clean
7FF5283D5000
unkown
page readonly
clean
7FF4FA9BA000
unkown
page readonly
clean
23B42F70000
unkown
page read and write
clean
F69B57F000
unkown
page read and write
clean
7FF528377000
unkown
page readonly
clean
7FF56EC46000
unkown
page readonly
clean
E24000
unkown
page read and write
clean
242F6400000
unkown
page read and write
clean
19227190000
unkown
page read and write
clean
DE74E7B000
unkown
page read and write
clean
B2B1E7E000
unkown
page read and write
clean
7FF56EC2D000
unkown
page readonly
clean
20183402000
unkown
page read and write
clean
19491B60000
unkown
page read and write
clean
1ECF0510000
unkown
page read and write
clean
19225659000
unkown
page read and write
clean
7FF5677E2000
unkown
page readonly
clean
7FF592F8C000
unkown
page readonly
clean
1E471220000
unkown
page read and write
clean
3070000
unkown
page readonly
clean
7FF567721000
unkown
page readonly
clean
19E6385A000
unkown
page read and write
clean
66D5FFA000
unkown
page read and write
clean
7FF5C38FF000
unkown
page readonly
clean
FEFB8FE000
unkown
page read and write
clean
1D48D070000
unkown
page read and write
clean
7FF5580CA000
unkown
page readonly
clean
7FF528434000
unkown
page readonly
clean
13526CB000
unkown
page read and write
clean
7FF581A06000
unkown
page readonly
clean
20183B40000
unkown
page read and write
clean
6850000
unkown
page read and write
clean
B2B24F9000
unkown
page read and write
clean
19225657000
unkown
page read and write
clean
19225647000
unkown
page read and write
clean
22F47B5D000
unkown
page read and write
clean
7FF52834A000
unkown
page readonly
clean
19227400000
unkown
page readonly
clean
7FF5817F0000
unkown
page readonly
clean
7FF56B65E000
unkown
page readonly
clean
7FF561180000
unkown
page readonly
clean
1F4AAFF000
unkown
page read and write
clean
7FF57BAC2000
unkown
page readonly
clean
22F47B20000
unkown
page read and write
clean
2502486D000
unkown
page read and write
clean
163717F000
unkown
page read and write
clean
FEFB27B000
unkown
page read and write
clean
19E63848000
unkown
page read and write
clean
2F9D000
unkown
page readonly
clean
22F4724F000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
7FF4FAA25000
unkown
page readonly
clean
7FF4FA99A000
unkown
page readonly
clean
25024A00000
unkown
page readonly
clean
7FF540625000
unkown
page readonly
clean
22F47B5B000
unkown
page read and write
clean
7FF56B661000
unkown
page readonly
clean
1ECEDC9B000
unkown
page read and write
clean
DE2A5FD000
unkown
page read and write
clean
1ECEFDEA000
unkown
page read and write
clean
7FF583C1D000
unkown
page readonly
clean
7FF581A24000
unkown
page readonly
clean
23B3DAF9000
unkown
page read and write
clean
7FF56EBD6000
unkown
page readonly
clean
7FF56AE54000
unkown
page readonly
clean
7FF5404FE000
unkown
page readonly
clean
22F479C0000
unkown
page readonly
clean
7FF583B2C000
unkown
page readonly
clean
2FC7000
unkown
page readonly
clean
1116BCF000
unkown
page read and write
clean
7FF540538000
unkown
page readonly
clean
25024868000
unkown
page read and write
clean
7FF5281D8000
unkown
page readonly
clean
1116B4A000
unkown
page read and write
clean
7FF5A6B0E000
unkown
page readonly
clean
1E470640000
heap default
page read and write
clean
25024854000
unkown
page read and write
clean
1D48B700000
unkown
page read and write
clean
23B42FF0000
unkown
page read and write
clean
7FF56B59E000
unkown
page readonly
clean
7FF56115C000
unkown
page readonly
clean
29CA4650000
heap default
page read and write
clean
172C7702000
unkown
page read and write
clean
FF51EFE000
unkown
page read and write
clean
23B43000000
unkown
page read and write
clean
19E63866000
unkown
page read and write
clean
7FF5408D1000
unkown
page readonly
clean
7FF5678E1000
unkown
page readonly
clean
407D2FE000
unkown
page read and write
clean
2DC40B60000
unkown
page read and write
clean
7FF57BAFE000
unkown
page readonly
clean
19E63833000
unkown
page read and write
clean
7FF57B35E000
unkown
page readonly
clean
19E63857000
unkown
page read and write
clean
407D7FE000
unkown
page read and write
clean
7FF5915F8000
unkown
page readonly
clean
22E31F02000
unkown
page read and write
clean
1ECEFDEB000
unkown
page read and write
clean
22F47B32000
unkown
page read and write
clean
22F47B7F000
unkown
page read and write
clean
2E51000
unkown
page readonly
clean
7FF567825000
unkown
page readonly
clean
29CA5002000
unkown
page read and write
clean
22E31C40000
heap default
page read and write
clean
A1AE6F5000
unkown
page read and write
clean
7FF4EED6B000
unkown
page readonly
clean
1E47122A000
unkown
page read and write
clean
7FF540878000
unkown
page readonly
clean
23B42ED0000
unkown
page read and write
clean
7FF5C378A000
unkown
page readonly
clean
22F47B5B000
unkown
page read and write
clean
15402C40000
unkown
page read and write
clean
1ECF0510000
unkown
page read and write
clean
22E31E6A000
unkown
page read and write
clean
7FF591675000
unkown
page readonly
clean
7FF528390000
unkown
page readonly
clean
29CA4813000
unkown
page read and write
clean
7FF558297000
unkown
page readonly
clean
2DC41402000
unkown
page read and write
clean
407D17B000
unkown
page read and write
clean
1ECEDCA3000
unkown
page read and write
clean
7FF540872000
unkown
page readonly
clean
23B42F70000
unkown
page readonly
clean
BD2437A000
unkown
page read and write
clean
23B70660000
unkown
page readonly
clean
1E470600000
unkown
page readonly
clean
19491C5E000
unkown
page read and write
clean
25024913000
unkown
page read and write
clean
23B430E0000
unkown
page readonly
clean
23B70113000
unkown
page read and write
clean
7FF540843000
unkown
page readonly
clean
23B42D80000
unkown
page read and write
clean
23B3DA90000
unkown
page read and write
clean
192270A0000
unkown
page read and write
clean
407CD7C000
unkown
page read and write
clean
22F472E5000
unkown
page read and write
clean
E32067B000
unkown
page read and write
clean
1ECEDC95000
unkown
page read and write
clean
1ECEDCA3000
unkown
page read and write
clean
22F47B92000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
7FF5A62AE000
unkown
page readonly
clean
23B70029000
unkown
page read and write
clean
19491BC0000
heap private
page read and write
clean
7FF583C26000
unkown
page readonly
clean
1E470A20000
unkown
page readonly
clean
1F4A8FC000
unkown
page read and write
clean
66D5DFA000
unkown
page read and write
clean
22F47BBF000
unkown
page read and write
clean
23B3D930000
unkown
page readonly
clean
7FF5406EF000
unkown
page readonly
clean
7FF56EBEA000
unkown
page readonly
clean
1ECEFDFA000
unkown
page read and write
clean
1ECEFE36000
unkown
page read and write
clean
22F47B45000
unkown
page read and write
clean
7FF4EEE1C000
unkown
page readonly
clean
22F47B00000
unkown
page read and write
clean
22E338A0000
unkown
page readonly
clean
7FF5283CE000
unkown
page readonly
clean
1ECEDCDC000
unkown
page read and write
clean
1116EFC000
unkown
page read and write
clean
3078000
unkown
page readonly
clean
25024868000
unkown
page read and write
clean
2FD8E700000
unkown
page readonly
clean
22F47B32000
unkown
page read and write
clean
A1AE9FE000
unkown
page read and write
clean
2FD8E85B000
unkown
page read and write
clean
7FF56109A000
unkown
page readonly
clean
7FF5582F1000
unkown
page readonly
clean
7FF5A6AB7000
unkown
page readonly
clean
1ECF1042000
unkown
page read and write
clean
1ECEFE00000
unkown
page read and write
clean
7FF56B1A1000
unkown
page readonly
clean
7FF528305000
unkown
page readonly
clean
66D63FA000
unkown
page read and write
clean
7FF50A299000
unkown
page readonly
clean
7FF5C3926000
unkown
page readonly
clean
7FF4F38F9000
unkown
page readonly
clean
22F479E0000
unkown
page read and write
clean
22F47B5B000
unkown
page read and write
clean
7FF528430000
unkown
page readonly
clean
114D000
unkown
page read and write
clean
107E000
unkown
page read and write
clean
7FF5817DA000
unkown
page readonly
clean
7FF56B669000
unkown
page readonly
clean
15402C88000
unkown
page read and write
clean
23B4323F000
unkown
page read and write
clean
1ECEDC29000
unkown
page read and write
clean
1ECEFEA4000
unkown
page read and write
clean
1ECF0510000
unkown
page read and write
clean
22F47B4A000
unkown
page read and write
clean
7FF592F08000
unkown
page readonly
clean
23B3DA6D000
unkown
page read and write
clean
22F47B4A000
unkown
page read and write
clean
23B7005F000
unkown
page read and write
clean
19491C4E000
unkown
page read and write
clean
19E6385D000
unkown
page read and write
clean
1ECEDE00000
unkown
page readonly
clean
EC7C27F000
unkown
page read and write
clean
22F47B7B000
unkown
page read and write
clean
7FF5A6A26000
unkown
page readonly
clean
1ECEDC9F000
unkown
page read and write
clean
7FF5A69B1000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
23B3E940000
unkown
page readonly
clean
250261A0000
unkown
page read and write
clean
7FF57B94F000
unkown
page readonly
clean
7FF4EEE9E000
unkown
page readonly
clean
15403940000
unkown
page readonly
clean
7FF59161E000
unkown
page readonly
clean
23B3DFB0000
unkown
page read and write
clean
1ECF0000000
unkown
page read and write
clean
B2B277D000
unkown
page read and write
clean
7FF5C3857000
unkown
page readonly
clean
22F47B28000
unkown
page read and write
clean
7FF560E57000
unkown
page readonly
clean
7FF56B578000
unkown
page readonly
clean
7FF5611DE000
unkown
page readonly
clean
7FF4FAAE1000
unkown
page readonly
clean
7FF583ADC000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
250245C0000
heap private
page read and write
clean
2DC40C5C000
unkown
page read and write
clean
2FD8E870000
unkown
page read and write
clean
7FF56116C000
unkown
page readonly
clean
2502486F000
unkown
page read and write
clean
1120000
heap default
page read and write
clean
7FF592CD5000
unkown
page readonly
clean
7FF4FA744000
unkown
page readonly
clean
1ECEDC9F000
unkown
page read and write
clean
22F47B34000
unkown
page read and write
clean
1F4A6FE000
unkown
page read and write
clean
1D48D170000
unkown
page readonly
clean
7FF56ACCB000
unkown
page readonly
clean
22F47B28000
unkown
page read and write
clean
19E637A0000
heap default
page read and write
clean
23B7005C000
unkown
page read and write
clean
1D48B63F000
unkown
page read and write
clean
15402CC1000
unkown
page read and write
clean
7FF58381E000
unkown
page readonly
clean
29CA45F0000
heap private
page read and write
clean
7FF5A698C000
unkown
page readonly
clean
19491C36000
heap default
page read and write
clean
7FF5A683A000
unkown
page readonly
clean
7FF56EC05000
unkown
page readonly
clean
7FF567875000
unkown
page readonly
clean
7FF591483000
unkown
page readonly
clean
7FF583C09000
unkown
page readonly
clean
7FF5A6AA5000
unkown
page readonly
clean
7FF583C3C000
unkown
page readonly
clean
22F47B5E000
unkown
page read and write
clean
7FF5819FC000
unkown
page readonly
clean
7FF5A6AB0000
unkown
page readonly
clean
22F47270000
unkown
page read and write
clean
7FF5A6923000
unkown
page readonly
clean
172C9170000
unkown
page readonly
clean
22F47B69000
unkown
page read and write
clean
7FF5A6927000
unkown
page readonly
clean
7FF583BC2000
unkown
page readonly
clean
7FF58121E000
unkown
page readonly
clean
7FF4F3885000
unkown
page readonly
clean
B2B23F8000
unkown
page read and write
clean
469BB9B000
unkown
page read and write
clean
7FF558103000
unkown
page readonly
clean
7FF560F3A000
unkown
page readonly
clean
7FF56786C000
unkown
page readonly
clean
7FF592F9C000
unkown
page readonly
clean
66D637B000
unkown
page read and write
clean
7FF56EB7A000
unkown
page readonly
clean
22F47B7F000
unkown
page read and write
clean
242F6508000
unkown
page read and write
clean
7FF5582F9000
unkown
page readonly
clean
7FF5C34F5000
unkown
page readonly
clean
FF51E7E000
unkown
page read and write
clean
1E470615000
heap private
page read and write
clean
23B42EA8000
unkown
page read and write
clean
7FF5581F2000
unkown
page readonly
clean
23B6FEB0000
unkown
page readonly
clean
7FF5408AF000
unkown
page readonly
clean
7FF54057C000
unkown
page readonly
clean
7FF5C38B2000
unkown
page readonly
clean
22F47940000
unkown
page readonly
clean
1145000
unkown
page read and write
clean
23B4322D000
unkown
page read and write
clean
22F47BBF000
unkown
page read and write
clean
7FF566F31000
unkown
page readonly
clean
2C7D000
unkown
page readonly
clean
7FF56785C000
unkown
page readonly
clean
1ECEDCE7000
unkown
page read and write
clean
1ECEDAB0000
unkown
page readonly
clean
23B43100000
unkown
page readonly
clean
1D48B600000
unkown
page read and write
clean
22F4724A000
unkown
page read and write
clean
2CEE000
unkown
page readonly
clean
7FF4F3806000
unkown
page readonly
clean
1F4A5FE000
unkown
page read and write
clean
7FF56EB9C000
unkown
page readonly
clean
1D48B602000
unkown
page read and write
clean
6510000
unkown
page readonly
clean
7FF4FA9F8000
unkown
page readonly
clean
22F47B69000
unkown
page read and write
clean
7FF58195A000
unkown
page readonly
clean
3530000
heap private
page read and write
clean
7FF592CC7000
unkown
page readonly
clean
7FF56B4F5000
unkown
page readonly
clean
7FF57BA01000
unkown
page readonly
clean
7FF540154000
unkown
page readonly
clean
22F47B5B000
unkown
page read and write
clean
23B42EC1000
unkown
page read and write
clean
1ECF0310000
unkown
page read and write
clean
22E31E3F000
unkown
page read and write
clean
1ECEDC71000
unkown
page read and write
clean
7FF5C3936000
unkown
page readonly
clean
7FF4FA8F3000
unkown
page readonly
clean
19E63846000
unkown
page read and write
clean
2DC40B90000
unkown
page read and write
clean
23B43000000
unkown
page read and write
clean
19E6387A000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
3064000
unkown
page readonly
clean
25024620000
heap default
page read and write
clean
20183457000
unkown
page read and write
clean
22F47250000
unkown
page read and write
clean
29CA5200000
unkown
page readonly
clean
1ECEFA90000
unkown
page read and write
clean
7FF57B9DD000
unkown
page readonly
clean
7FF5819AA000
unkown
page readonly
clean
2DC40ED0000
unkown
page readonly
clean
23B3D7E0000
heap private
page read and write
clean
23B42F73000
unkown
page readonly
clean
7FF56B558000
unkown
page readonly
clean
66D687F000
unkown
page read and write
clean
22F47B7F000
unkown
page read and write
clean
172C9070000
unkown
page read and write
clean
22E31F13000
unkown
page read and write
clean
22F47B33000
unkown
page read and write
clean
22F47B52000
unkown
page read and write
clean
19E63879000
unkown
page read and write
clean
7FF5283A8000
unkown
page readonly
clean
7FF5282A3000
unkown
page readonly
clean
23B6FFA0000
unkown
page read and write
clean
2FD8E690000
heap private
page read and write
clean
7FF528427000
unkown
page readonly
clean
22F47B81000
unkown
page read and write
clean
6910000
unkown
page read and write
clean
7FF592DD8000
unkown
page readonly
clean
1169000
unkown
page read and write
clean
7FF528499000
unkown
page readonly
clean
7FF583892000
unkown
page readonly
clean
7FF592F86000
unkown
page readonly
clean
1ECEFDFD000
unkown
page read and write
clean
15402C13000
unkown
page read and write
clean
7FF5A62CB000
unkown
page readonly
clean
7FF583CAE000
unkown
page readonly
clean
3537000
heap private
page read and write
clean
7FF5281EA000
unkown
page readonly
clean
7FF581745000
unkown
page readonly
clean
7FF5A6A5F000
unkown
page readonly
clean
19225600000
unkown
page read and write
clean
125D000
unkown
page read and write
clean
7FF56B5B9000
unkown
page readonly
clean
7FF5611E9000
unkown
page readonly
clean
19E63883000
unkown
page read and write
clean
7FF528437000
unkown
page readonly
clean
7FF56EB81000
unkown
page readonly
clean
1636EFE000
unkown
page read and write
clean
23B3DAAA000
unkown
page read and write
clean
7FF5A67D5000
unkown
page readonly
clean
2DC41600000
unkown
page read and write
clean
F69B67E000
unkown
page read and write
clean
22F4723C000
unkown
page read and write
clean
7FF5A69F7000
unkown
page readonly
clean
1E4706D4000
unkown
page read and write
clean
7FF5283A6000
unkown
page readonly
clean
7FF56EC57000
unkown
page readonly
clean
7FF583BB0000
unkown
page readonly
clean
1155000
unkown
page read and write
clean
172C7800000
unkown
page readonly
clean
7FF5C392C000
unkown
page readonly
clean
7FF56EC0F000
unkown
page readonly
clean
1ECEDCE9000
unkown
page read and write
clean
FF5247F000
unkown
page read and write
clean
22F47160000
heap private
page read and write
clean
7FF58193A000
unkown
page readonly
clean
7FF56B3D0000
unkown
page readonly
clean
7FF57BB55000
unkown
page readonly
clean
7FF5283E9000
unkown
page readonly
clean
6480000
heap private
page read and write
clean
29CA4855000
unkown
page read and write
clean
7FF4EEE35000
unkown
page readonly
clean
29CA484A000
unkown
page read and write
clean
25024802000
unkown
page read and write
clean
23B3DB02000
unkown
page read and write
clean
7FF5408E6000
unkown
page readonly
clean
15403500000
unkown
page read and write
clean
7FF4EEEA9000
unkown
page readonly
clean
2FD8E913000
unkown
page read and write
clean
7FF558290000
unkown
page readonly
clean
1ECEFAB0000
unkown
page readonly
clean
2E57000
unkown
page readonly
clean
7FF4FAADE000
unkown
page readonly
clean
7FF4F381A000
unkown
page readonly
clean
1E471490000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
7FF583B37000
unkown
page readonly
clean
7FF592F3A000
unkown
page readonly
clean
2DC40E00000
unkown
page readonly
clean
1100000
unkown
page readonly
clean
23B3E015000
unkown
page read and write
clean
19E63862000
unkown
page read and write
clean
7FF57BB2D000
unkown
page readonly
clean
1ECEDD20000
unkown
page read and write
clean
7FF4F361A000
unkown
page readonly
clean
22F47302000
unkown
page read and write
clean
7FF583CB9000
unkown
page readonly
clean
FEFBAFE000
unkown
page read and write
clean
7FF56111E000
unkown
page readonly
clean
19E63740000
heap private
page read and write
clean
1ECEFDFE000
unkown
page read and write
clean
7FF528103000
unkown
page readonly
clean
7FF5A6858000
unkown
page readonly
clean
7FF54057F000
unkown
page readonly
clean
10C0000
heap default
page read and write
clean
7FF527C16000
unkown
page readonly
clean
7FF5C38C6000
unkown
page readonly
clean
1922562A000
unkown
page read and write
clean
22F47B39000
unkown
page read and write
clean
19E6383D000
unkown
page read and write
clean
111707F000
unkown
page read and write
clean
1ECEFD0B000
unkown
page read and write
clean
1D48B540000
unkown
page write copy
clean
7FF56B5CD000
unkown
page readonly
clean
7FF5816F7000
unkown
page readonly
clean
22F479D0000
unkown
page readonly
clean
7FF56ACF8000
unkown
page readonly
clean
7FF5676AE000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
22F47B30000
unkown
page read and write
clean
1030000
unkown
page readonly
clean
15403402000
unkown
page read and write
clean
7FF5A658D000
unkown
page readonly
clean
1ECEFA80000
unkown
page read and write
clean
22F48054000
unkown
page read and write
clean
1ECEDC50000
unkown
page read and write
clean
E31FFAB000
unkown
page read and write
clean
7FF5819BE000
unkown
page readonly
clean
22E31E69000
unkown
page read and write
clean
23B3E100000
unkown
page read and write
clean
7FF4F385D000
unkown
page readonly
clean
7FF4EEAC5000
unkown
page readonly
clean
7FF5407D5000
unkown
page readonly
clean
DE2A27E000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
7FF583C2C000
unkown
page readonly
clean
7FF561187000
unkown
page readonly
clean
22E31E68000
unkown
page read and write
clean
7FF5916DE000
unkown
page readonly
clean
2DC41260000
unkown
page readonly
clean
7FF5A68CC000
unkown
page readonly
clean
7FF5819D9000
unkown
page readonly
clean
7FF592CCE000
unkown
page readonly
clean
22F48000000
unkown
page read and write
clean
7FF4EEDDE000
unkown
page readonly
clean
19225718000
unkown
page read and write
clean
1ECEDD14000
unkown
page read and write
clean
7FF558202000
unkown
page readonly
clean
112A000
heap default
page read and write
clean
22F47BA3000
unkown
page read and write
clean
2DC40AD0000
heap private
page read and write
clean
1ECEDC94000
unkown
page read and write
clean
B2B1FFE000
unkown
page read and write
clean
E32057B000
unkown
page read and write
clean
7FF528155000
unkown
page readonly
clean
1ECEDC9C000
unkown
page read and write
clean
15402E00000
unkown
page readonly
clean
29CA4740000
unkown
page readonly
clean
1ECF0310000
unkown
page read and write
clean
1ECEFE3A000
unkown
page read and write
clean
7FF592F22000
unkown
page readonly
clean
7FF56114D000
unkown
page readonly
clean
7FF57BAD2000
unkown
page readonly
clean
22F47B62000
unkown
page read and write
clean
A1AE8F7000
unkown
page read and write
clean
19E63864000
unkown
page read and write
clean
1ECF0410000
unkown
page read and write
clean
7FF592F96000
unkown
page readonly
clean
7FF583A58000
unkown
page readonly
clean
242F6280000
heap private
page read and write
clean
22F47B4A000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
7FF528392000
unkown
page readonly
clean
1E47068E000
unkown
page read and write
clean
7FF54071C000
unkown
page readonly
clean
1E4706E9000
unkown
page read and write
clean
23B42DA0000
unkown
page read and write
clean
22F47B5F000
unkown
page read and write
clean
2F78000
unkown
page readonly
clean
23B6FEA0000
heap default
page read and write
clean
22F47B31000
unkown
page read and write
clean
1636F79000
unkown
page read and write
clean
22F47B7B000
unkown
page read and write
clean
23B3DA13000
unkown
page read and write
clean
7FF56ECC9000
unkown
page readonly
clean
7FF59155C000
unkown
page readonly
clean
EC7BE7F000
unkown
page read and write
clean
2DC40C00000
unkown
page read and write
clean
19227190000
unkown
page read and write
clean
7FF4EEA63000
unkown
page readonly
clean
7FF592F55000
unkown
page readonly
clean
7FF5A689F000
unkown
page readonly
clean
172C7530000
heap private
page read and write
clean
6450000
unkown
page read and write
clean
F69B27E000
unkown
page read and write
clean
7FF5C391D000
unkown
page readonly
clean
1D48B713000
unkown
page read and write
clean
A1AE37E000
unkown
page read and write
clean
7FF56EB9A000
unkown
page readonly
clean
22F47B7D000
unkown
page read and write
clean
BD2447E000
unkown
page read and write
clean
1ECEDC7E000
unkown
page read and write
clean
22E31D20000
unkown
page write copy
clean
23B3E770000
unkown
page read and write
clean
7FF4FA997000
unkown
page readonly
clean
7FF5A69D1000
unkown
page readonly
clean
7FF528388000
unkown
page readonly
clean
1E471224000
unkown
page read and write
clean
25024800000
unkown
page read and write
clean
23B42D00000
unkown
page read and write
clean
7FF5A6A4E000
unkown
page readonly
clean
23B42F7C000
unkown
page write copy
clean
7FF56EBDA000
unkown
page readonly
clean
22F472BE000
unkown
page read and write
clean
25024900000
unkown
page read and write
clean
7FF557A8E000
unkown
page readonly
clean
7FF4FAA87000
unkown
page readonly
clean
23B43255000
unkown
page read and write
clean
7FF4FA8F7000
unkown
page readonly
clean
7FF560E53000
unkown
page readonly
clean
29CA486B000
unkown
page read and write
clean
7FF4F2F59000
unkown
page readonly
clean
1D48B4D0000
heap private
page read and write
clean
2DC40B90000
unkown
page read and write
clean
19225602000
unkown
page read and write
clean
7FF5C34F1000
unkown
page readonly
clean
469BF7A000
unkown
page read and write
clean
1E47070C000
unkown
page read and write
clean
7FF52830C000
unkown
page readonly
clean
1E4714C0000
unkown
page readonly
clean
7FF583BA8000
unkown
page readonly
clean
15402CCB000
unkown
page read and write
clean
7FF50A28E000
unkown
page readonly
clean
EC7C17F000
unkown
page read and write
clean
25024902000
unkown
page read and write
clean
66D5CFA000
unkown
page read and write
clean
F69B1F5000
unkown
page read and write
clean
23B43220000
unkown
page read and write
clean
22F47BC0000
unkown
page read and write
clean
1ECF1202000
unkown
page read and write
clean
2FA1000
unkown
page readonly
clean
1ECEDC9C000
unkown
page read and write
clean
7FF5283DF000
unkown
page readonly
clean
1ECEFD79000
unkown
page read and write
clean
66D647B000
unkown
page read and write
clean
7FF4FA9F6000
unkown
page readonly
clean
7FF4EEE16000
unkown
page readonly
clean
7FF509A4B000
unkown
page readonly
clean
7FF4EEE0D000
unkown
page readonly
clean
1E471200000
unkown
page read and write
clean
1ECF1182000
unkown
page read and write
clean
7FF567839000
unkown
page readonly
clean
23B4324C000
unkown
page read and write
clean
22F47A02000
unkown
page read and write
clean
7FF5677F6000
unkown
page readonly
clean
20183380000
heap private
page read and write
clean
16370FF000
unkown
page read and write
clean
242F6429000
unkown
page read and write
clean
7FF56EC4C000
unkown
page readonly
clean
1ECEFE12000
unkown
page read and write
clean
7FF4F387C000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
7FF56EC19000
unkown
page readonly
clean
23B3DB13000
unkown
page read and write
clean
23B3D840000
heap default
page read and write
clean
1163000
unkown
page read and write
clean
1ECEDCAB000
unkown
page read and write
clean
7FF528406000
unkown
page readonly
clean
FF52277000
unkown
page read and write
clean
1ECEFA70000
unkown
page read and write
clean
7FF5A660A000
unkown
page readonly
clean
22F47B2B000
unkown
page read and write
clean
66D62FB000
unkown
page read and write
clean
7FF5A6589000
unkown
page readonly
clean
23B6FF80000
unkown
page readonly
clean
29CA4900000
unkown
page read and write
clean
19E63831000
unkown
page read and write
clean
7FF50A20C000
unkown
page readonly
clean
7FF583C57000
unkown
page readonly
clean
1E470DB0000
unkown
page readonly
clean
1ECEDC9C000
unkown
page read and write
clean
1D48B655000
unkown
page read and write
clean
7FF56EAB8000
unkown
page readonly
clean
22F47B8D000
unkown
page read and write
clean
23B3E990000
unkown
page readonly
clean
2DC40C13000
unkown
page read and write
clean
15402ED0000
unkown
page readonly
clean
7FF558206000
unkown
page readonly
clean
7FF54068B000
unkown
page readonly
clean
7FF540847000
unkown
page readonly
clean
172C7629000
unkown
page read and write
clean
7FF4FA9A1000
unkown
page readonly
clean
7FF5C389C000
unkown
page readonly
clean
1ECEDC9C000
unkown
page read and write
clean
7FF57B6BA000
unkown
page readonly
clean
7FF5678E9000
unkown
page readonly
clean
23B42FB0000
unkown
page read and write
clean
22E31E13000
unkown
page read and write
clean
7FF56E44A000
unkown
page readonly
clean
EC7BF79000
unkown
page read and write
clean
66D657B000
unkown
page read and write
clean
7FF56782F000
unkown
page readonly
clean
7FF560966000
unkown
page readonly
clean
19E637D0000
unkown
page read and write
clean
22F47308000
unkown
page read and write
clean
469BFFA000
unkown
page read and write
clean
22E31F00000
unkown
page read and write
clean
20183466000
unkown
page read and write
clean
7FF52848E000
unkown
page readonly
clean
7FF5C34F3000
unkown
page readonly
clean
7FF4EEA60000
unkown
page readonly
clean
19E63800000
unkown
page read and write
clean
7FF4F3876000
unkown
page readonly
clean
25024868000
unkown
page read and write
clean
B2B2678000
unkown
page read and write
clean
1116F79000
unkown
page read and write
clean
1352BFE000
unkown
page read and write
clean
242F62E0000
heap default
page read and write
clean
1ECF0210000
unkown
page read and write
clean
19225580000
heap private
page read and write
clean
29CA4908000
unkown
page read and write
clean
22F47BC2000
unkown
page read and write
clean
1ECEFD5E000
unkown
page read and write
clean
22F47B2B000
unkown
page read and write
clean
A1AEAFF000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
22F47B36000
unkown
page read and write
clean
22F472F8000
unkown
page read and write
clean
2FA6000
unkown
page readonly
clean
7FF5A687E000
unkown
page readonly
clean
1ECEFDD1000
unkown
page read and write
clean
7FF4F383F000
unkown
page readonly
clean
22F47B69000
unkown
page read and write
clean
469BE7F000
unkown
page read and write
clean
19491C45000
unkown
page read and write
clean
7FF5610F2000
unkown
page readonly
clean
FF51FF5000
unkown
page read and write
clean
7FF56B439000
unkown
page readonly
clean
1ECEDC9F000
unkown
page read and write
clean
15402C24000
unkown
page read and write
clean
20183413000
unkown
page read and write
clean
7FF5580BE000
unkown
page readonly
clean
22F472D3000
unkown
page read and write
clean
22F47B7E000
unkown
page read and write
clean
1E470686000
unkown
page read and write
clean
1ECEDD41000
unkown
page read and write
clean
23B3E159000
unkown
page read and write
clean
23B42D90000
unkown
page read and write
clean
22E31E69000
unkown
page read and write
clean
1ECEDC75000
unkown
page read and write
clean
7FF567866000
unkown
page readonly
clean
7FF52841C000
unkown
page readonly
clean
66D60FA000
unkown
page read and write
clean
7FF5915F6000
unkown
page readonly
clean
20183E00000
unkown
page readonly
clean
23B43000000
unkown
page readonly
clean
7FF5C3720000
unkown
page readonly
clean
7FF54070E000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
7FF561184000
unkown
page readonly
clean
7FF4FAA39000
unkown
page readonly
clean
7FF581878000
unkown
page readonly
clean
114D000
unkown
page read and write
clean
7FF560FD8000
unkown
page readonly
clean
1ECEFF00000
unkown
page read and write
clean
1D48B629000
unkown
page read and write
clean
22F47288000
unkown
page read and write
clean
7FF558266000
unkown
page readonly
clean
23B3DA87000
unkown
page read and write
clean
7FF54082B000
unkown
page readonly
clean
7FF5678E9000
unkown
page readonly
clean
22F47B24000
unkown
page read and write
clean
7FF5C38EE000
unkown
page readonly
clean
7FF56B20D000
unkown
page readonly
clean
22F472E0000
unkown
page read and write
clean
1E471530000
unkown
page read and write
clean
7FF590F71000
unkown
page readonly
clean
23B43000000
unkown
page read and write
clean
7FF50A291000
unkown
page readonly
clean
7FF5838A1000
unkown
page readonly
clean
7FF56EC64000
unkown
page readonly
clean
22F47B5B000
unkown
page read and write
clean
1ECEFDD6000
unkown
page read and write
clean
19E6384E000
unkown
page read and write
clean
22F47B7F000
unkown
page read and write
clean
29CA4884000
unkown
page read and write
clean
7FF5A68D1000
unkown
page readonly
clean
7FF56B604000
unkown
page readonly
clean
1ECF0410000
unkown
page read and write
clean
7FF592F12000
unkown
page readonly
clean
242F6502000
unkown
page read and write
clean
7FF5673DA000
unkown
page readonly
clean
7FF5407DC000
unkown
page readonly
clean
22E31E68000
unkown
page read and write
clean
1ECEF6A0000
unkown
page readonly
clean
22F47B7F000
unkown
page read and write
clean
1ECEDCAD000
unkown
page read and write
clean
1ECF0110000
unkown
page read and write
clean
7FF55827C000
unkown
page readonly
clean
7FF5C386A000
unkown
page readonly
clean
2E9D000
unkown
page readonly
clean
7FF5C3945000
unkown
page readonly
clean
23B43120000
unkown
page readonly
clean
1ECEF9F0000
unkown
page read and write
clean
7FF5A6750000
unkown
page readonly
clean
7FF592EEA000
unkown
page readonly
clean
23B432B2000
unkown
page read and write
clean
FF5207E000
unkown
page read and write
clean
7FF5A6A22000
unkown
page readonly
clean
2FE3000
unkown
page readonly
clean
22F47B36000
unkown
page read and write
clean
66D58BB000
unkown
page read and write
clean
19491C5E000
unkown
page read and write
clean
7FF56B5AF000
unkown
page readonly
clean
23B43060000
unkown
page readonly
clean
7FF56EC36000
unkown
page readonly
clean
1D48B66D000
unkown
page read and write
clean
1D48B5D0000
unkown
page read and write
clean
7FF4FAA0A000
unkown
page readonly
clean
23B70A00000
unkown
page readonly
clean
22F47B7C000
unkown
page read and write
clean
1E4706AA000
unkown
page read and write
clean
7FF4EE4B1000
unkown
page readonly
clean
7FF4FAA1E000
unkown
page readonly
clean
7FF566F45000
unkown
page readonly
clean
7FF581897000
unkown
page readonly
clean
22F47B69000
unkown
page read and write
clean
7FF5A6A8C000
unkown
page readonly
clean
23B42FD0000
unkown
page read and write
clean
7FF540862000
unkown
page readonly
clean
7FF4FAA6C000
unkown
page readonly
clean
2F7F000
unkown
page readonly
clean
1ECEFD80000
unkown
page read and write
clean
7FF581A17000
unkown
page readonly
clean
23B3ECF3000
unkown
page read and write
clean
19E63842000
unkown
page read and write
clean
23B3E950000
unkown
page readonly
clean
7FF5C39AE000
unkown
page readonly
clean
7FF4EED77000
unkown
page readonly
clean
7FF5914F7000
unkown
page readonly
clean
22F47B38000
unkown
page read and write
clean
7FF56EAD3000
unkown
page readonly
clean
7FF57BA07000
unkown
page readonly
clean
1ECF0210000
unkown
page read and write
clean
7FF5A672C000
unkown
page readonly
clean
1ECF0210000
unkown
page read and write
clean
23B432B2000
unkown
page read and write
clean
469C0FF000
unkown
page read and write
clean
19E63802000
unkown
page read and write
clean
242F63E0000
unkown
page read and write
clean
7FF57BBC1000
unkown
page readonly
clean
2FD0000
unkown
page readonly
clean
7FF5C38A8000
unkown
page readonly
clean
22F472E8000
unkown
page read and write
clean
7FF561097000
unkown
page readonly
clean
7FF52836A000
unkown
page readonly
clean
2FAB000
unkown
page readonly
clean
7FF4EEDB2000
unkown
page readonly
clean
6390000
unkown
page readonly
clean
7FF581992000
unkown
page readonly
clean
7FF55801A000
unkown
page readonly
clean
1116E7F000
unkown
page read and write
clean
8B0C479000
unkown
page read and write
clean
22F47B7C000
unkown
page read and write
clean
7FF56B572000
unkown
page readonly
clean
242F6500000
unkown
page read and write
clean
7FF590E76000
unkown
page readonly
clean
23B3ECD1000
unkown
page read and write
clean
15403340000
unkown
page readonly
clean
7FF4EEDEF000
unkown
page readonly
clean
19E63876000
unkown
page read and write
clean
19491C4E000
unkown
page read and write
clean
201833E0000
heap default
page read and write
clean
1D48B800000
unkown
page readonly
clean
7FF5408B9000
unkown
page readonly
clean
7FF5580E8000
unkown
page readonly
clean
7FF5A6833000
unkown
page readonly
clean
10BF000
stack
page read and write
clean
DE74EFF000
unkown
page read and write
clean
22E31E69000
unkown
page read and write
clean
FF51BCB000
unkown
page read and write
clean
7FF4FA27A000
unkown
page readonly
clean
25024750000
unkown
page readonly
clean
23B42EAE000
unkown
page read and write
clean
7FF5408F5000
unkown
page readonly
clean
66D5E7A000
unkown
page read and write
clean
22F47B7C000
unkown
page read and write
clean
3056000
unkown
page readonly
clean
2FD8E6F0000
heap default
page read and write
clean
7FF5A69F3000
unkown
page readonly
clean
7FF5582F9000
unkown
page readonly
clean
7FF540739000
unkown
page readonly
clean
7FF5A6B19000
unkown
page readonly
clean
22F47B2C000
unkown
page read and write
clean
1163000
unkown
page read and write
clean
1110000
unkown
page readonly
clean
7FF527C1A000
unkown
page readonly
clean
2FD8E82A000
unkown
page read and write
clean
7FF58121A000
unkown
page readonly
clean
7FF4F3894000
unkown
page readonly
clean
1ECEFF83000
unkown
page read and write
clean
22F47BBF000
unkown
page read and write
clean
7FF56760A000
unkown
page readonly
clean
201836D0000
unkown
page readonly
clean
19491A70000
unkown
page readonly
clean
2FD8E7D0000
unkown
page readonly
clean
23B42D50000
unkown
page readonly
clean
F69B477000
unkown
page read and write
clean
7FF4EEE11000
unkown
page readonly
clean
22F47F40000
unkown
page readonly
clean
7FF56ACCD000
unkown
page readonly
clean
242F648D000
unkown
page read and write
clean
7FF56096A000
unkown
page readonly
clean
7FF5A6A7D000
unkown
page readonly
clean
15402BE0000
unkown
page read and write
clean
23B42EC0000
unkown
page read and write
clean
1ECF0310000
unkown
page read and write
clean
7FF5A6A96000
unkown
page readonly
clean
7FF5280F4000
unkown
page readonly
clean
22F47B63000
unkown
page read and write
clean
23B3DF90000
unkown
page readonly
clean
7FF567880000
unkown
page readonly
clean
2502486E000
unkown
page read and write
clean
19E63858000
unkown
page read and write
clean
7FF5404F7000
unkown
page readonly
clean
19225702000
unkown
page read and write
clean
7FF50A206000
unkown
page readonly
clean
22F472A7000
unkown
page read and write
clean
22F47BDA000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
DE7517F000
unkown
page read and write
clean
1636E7E000
unkown
page read and write
clean
19225700000
unkown
page read and write
clean
22F47B5D000
unkown
page read and write
clean
7FF5A69CA000
unkown
page readonly
clean
7FF56EB77000
unkown
page readonly
clean
7FF50A1DF000
unkown
page readonly
clean
7FF56B330000
unkown
page readonly
clean
FEFB4FB000
unkown
page read and write
clean
7FF5A6B19000
unkown
page readonly
clean
7FF581A89000
unkown
page readonly
clean
22F47B69000
unkown
page read and write
clean
23B3ECF0000
unkown
page read and write
clean
7FF5C35EE000
unkown
page readonly
clean
7FF5610FA000
unkown
page readonly
clean
25024630000
unkown
page readonly
clean
7FF583C36000
unkown
page readonly
clean
23B42FA4000
unkown
page write copy
clean
19E63845000
unkown
page read and write
clean
2F9A000
unkown
page readonly
clean
7FF55810D000
unkown
page readonly
clean
15402BB0000
heap default
page read and write
clean
7FF560FF3000
unkown
page readonly
clean
22F474D0000
unkown
page readonly
clean
7FF56B607000
unkown
page readonly
clean
1E470580000
unkown
page read and write
clean
7FF557F2A000
unkown
page readonly
clean
1E47068D000
unkown
page read and write
clean
7FF5677F2000
unkown
page readonly
clean
7FF592F69000
unkown
page readonly
clean
23B3E118000
unkown
page read and write
clean
7FF5915FA000
unkown
page readonly
clean
23B42EA0000
unkown
page read and write
clean
22F47B35000
unkown
page read and write
clean
1E470810000
unkown
page read and write
clean
7FF5282A7000
unkown
page readonly
clean
D5B000
unkown
page read and write
clean
19E63840000
unkown
page read and write
clean
19E637B0000
unkown
page readonly
clean
7FF5A68DE000
unkown
page readonly
clean
7FF55826C000
unkown
page readonly
clean
23B42F94000
unkown
page readonly
clean
22E31E29000
unkown
page read and write
clean
2FB4000
unkown
page readonly
clean
7FF53FFED000
unkown
page readonly
clean
7FF528200000
unkown
page readonly
clean
7FF583BF5000
unkown
page readonly
clean
7FF560EA5000
unkown
page readonly
clean
2FD8E802000
unkown
page read and write
clean
7FF5676BA000
unkown
page readonly
clean
7FF57B99A000
unkown
page readonly
clean
2FD8E7E0000
unkown
page readonly
clean
7FF528147000
unkown
page readonly
clean
66D5D7E000
unkown
page read and write
clean
1F4A27B000
unkown
page read and write
clean
A1AE3FE000
unkown
page read and write
clean
22F47B4A000
unkown
page read and write
clean
6484000
heap private
page read and write
clean
7FF5610A1000
unkown
page readonly
clean
A1AE2FB000
unkown
page read and write
clean
7FF581A89000
unkown
page readonly
clean
22F47313000
unkown
page read and write
clean
1ECEFD40000
unkown
page read and write
clean
EC7C1FE000
unkown
page read and write
clean
7FF540617000
unkown
page readonly
clean
7FF5A6957000
unkown
page readonly
clean
1E4714B0000
unkown
page read and write
clean
7FF5C3954000
unkown
page readonly
clean
1ECF1200000
unkown
page read and write
clean
7E019B6F9000
unkown
page readonly
clean
7FF57BB67000
unkown
page readonly
clean
1ECEDC9F000
unkown
page read and write
clean
7FF5839E4000
unkown
page readonly
clean
7FF5281FE000
unkown
page readonly
clean
172C763F000
unkown
page read and write
clean
7FF560F50000
unkown
page readonly
clean
22E31E02000
unkown
page read and write
clean
7FF55821A000
unkown
page readonly
clean
FEFB5FE000
unkown
page read and write
clean
23B42FA7000
unkown
page write copy
clean
7FF5676D8000
unkown
page readonly
clean
22F47B51000
unkown
page read and write
clean
2FD8E876000
unkown
page read and write
clean
242F644F000
unkown
page read and write
clean
8B0C3FE000
unkown
page read and write
clean
23B70108000
unkown
page read and write
clean
22F47400000
unkown
page readonly
clean
15402C6D000
unkown
page read and write
clean
15402BD0000
unkown
page readonly
clean
7FF55825D000
unkown
page readonly
clean
DE74F7A000
unkown
page read and write
clean
22F47200000
unkown
page read and write
clean
201833F0000
unkown
page readonly
clean
7FF4FAA66000
unkown
page readonly
clean
7FF5A6A86000
unkown
page readonly
clean
E28000
unkown
page read and write
clean
1ECEDC9F000
unkown
page read and write
clean
7FF5611E1000
unkown
page readonly
clean
7FF4FAAE9000
unkown
page readonly
clean
22E31BE0000
heap private
page read and write
clean
23B3D850000
unkown
page readonly
clean
1ECF0110000
unkown
page read and write
clean
22F47B7E000
unkown
page read and write
clean
7FF5406CE000
unkown
page readonly
clean
1E47069C000
unkown
page read and write
clean
7FF5610F6000
unkown
page readonly
clean
7FF5A69C7000
unkown
page readonly
clean
7FF5C3909000
unkown
page readonly
clean
22F47213000
unkown
page read and write
clean
7FF557DEA000
unkown
page readonly
clean
7FF583BB2000
unkown
page readonly
clean
2E63000
unkown
page readonly
clean
242F6E00000
unkown
page readonly
clean
1ECF0310000
unkown
page read and write
clean
1ECEFF83000
unkown
page read and write
clean
1ECEF5A0000
unkown
page read and write
clean
7FF592F5F000
unkown
page readonly
clean
7FF592BE8000
unkown
page readonly
clean
7FF56E937000
unkown
page readonly
clean
7FF5C3921000
unkown
page readonly
clean
A1AE7FB000
unkown
page read and write
clean
23B3DA3D000
unkown
page read and write
clean
7FF528344000
unkown
page readonly
clean
192255E0000
heap default
page read and write
clean
1E4714D0000
unkown
page read and write
clean
23B3E002000
unkown
page read and write
clean
7FF5404A5000
unkown
page readonly
clean
7FF50A1E9000
unkown
page readonly
clean
22F47B5C000
unkown
page read and write
clean
7FF583AD0000
unkown
page readonly
clean
7FF5C393C000
unkown
page readonly
clean
7FF590F76000
unkown
page readonly
clean
7FF58388F000
unkown
page readonly
clean
19E6382A000
unkown
page read and write
clean
469BEFF000
unkown
page read and write
clean
2502483F000
unkown
page read and write
clean
10D0000
unkown
page readonly
clean
7FF50A225000
unkown
page readonly
clean
7FF57BBC9000
unkown
page readonly
clean
23B7002F000
unkown
page read and write
clean
1E471210000
unkown
page read and write
clean
1ECEDC00000
unkown
page read and write
clean
1ECEDC68000
unkown
page read and write
clean
1ECEDBD0000
unkown
page readonly
clean
7FF592687000
unkown
page readonly
clean
22F47B51000
unkown
page read and write
clean
1D48B702000
unkown
page read and write
clean
EC7BB77000
unkown
page read and write
clean
19225713000
unkown
page read and write
clean
22F47B30000
unkown
page read and write
clean
7FF59164D000
unkown
page readonly
clean
7FF54095E000
unkown
page readonly
clean
66D65FA000
unkown
page read and write
clean
1ECF1400000
unkown
page readonly
clean
114A000
unkown
page read and write
clean
1ECEFA70000
unkown
page read and write
clean
3050000
unkown
page readonly
clean
EC7B76C000
unkown
page read and write
clean
7FF50A1A8000
unkown
page readonly
clean
23B70081000
unkown
page read and write
clean
B2B22FF000
unkown
page read and write
clean
7FF528401000
unkown
page readonly
clean
23B70000000
unkown
page read and write
clean
242F6470000
unkown
page read and write
clean
7FF560EB0000
unkown
page readonly
clean
23B43200000
unkown
page read and write
clean
7FF57BB05000
unkown
page readonly
clean
242F6600000
unkown
page readonly
clean
7FF561177000
unkown
page readonly
clean
19E63902000
unkown
page read and write
clean
7FF58199A000
unkown
page readonly
clean
7FF59166C000
unkown
page readonly
clean
23B3E113000
unkown
page read and write
clean
7FF540969000
unkown
page readonly
clean
2FD8E878000
unkown
page read and write
clean
2018343C000
unkown
page read and write
clean
7FF527FA3000
unkown
page readonly
clean
19E63869000
unkown
page read and write
clean
407D8FC000
unkown
page read and write
clean
7FF4F3890000
unkown
page readonly
clean
7FF567856000
unkown
page readonly
clean
22F47B8F000
unkown
page read and write
clean
7FF56B562000
unkown
page readonly
clean
7FF5A672F000
unkown
page readonly
clean
19E63826000
unkown
page read and write
clean
1E4706FB000
unkown
page read and write
clean
7FF56EC3C000
unkown
page readonly
clean
114E000
unkown
page read and write
clean
7FF5A6B11000
unkown
page readonly
clean
1ECEFDAD000
unkown
page read and write
clean
7FF56110A000
unkown
page readonly
clean
1636FF9000
unkown
page read and write
clean
7FF583BEE000
unkown
page readonly
clean
2F92000
unkown
page readonly
clean
2DC40B50000
unkown
page readonly
clean
2DC40B90000
unkown
page read and write
clean
23B42FE0000
unkown
page read and write
clean
19E63813000
unkown
page read and write
clean
7FF56B408000
unkown
page readonly
clean
114D000
unkown
page read and write
clean
FF5237F000
unkown
page read and write
clean
23B3D920000
unkown
page readonly
clean
23B43262000
unkown
page read and write
clean
22F479E0000
unkown
page read and write
clean
469C07F000
unkown
page read and write
clean
7FF5C36E7000
unkown
page readonly
clean
DE2A4FD000
unkown
page read and write
clean
7FF5C38B0000
unkown
page readonly
clean
22F47B36000
unkown
page read and write
clean
1ECEFE84000
unkown
page read and write
clean
7FF4EEA74000
unkown
page readonly
clean
2DC40B40000
unkown
page readonly
clean
7FF567727000
unkown
page readonly
clean
EC7C2FE000
unkown
page read and write
clean
25024868000
unkown
page read and write
clean
2FD8ED90000
unkown
page readonly
clean
B2B1BAD000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
7FF591625000
unkown
page readonly
clean
E32087E000
unkown
page read and write
clean
64CE000
unkown
page read and write
clean
7FF527FCD000
unkown
page readonly
clean
22F48061000
unkown
page read and write
clean
1F4A7FF000
unkown
page read and write
clean
22F47B6E000
unkown
page read and write
clean
19491C46000
unkown
page read and write
clean
7FF5281BB000
unkown
page readonly
clean
7FF593019000
unkown
page readonly
clean
23B3DFA0000
unkown
page read and write
clean
7FF56B477000
unkown
page readonly
clean
22F4724B000
unkown
page read and write
clean
29CA484F000
unkown
page read and write
clean
22F471E0000
unkown
page readonly
clean
7FF581750000
unkown
page readonly
clean
19225613000
unkown
page read and write
clean
19E63861000
unkown
page read and write
clean
2DC40B30000
heap default
page read and write
clean
22F47B51000
unkown
page read and write
clean
7FF56B5F5000
unkown
page readonly
clean
242F644C000
unkown
page read and write
clean
23B6FE40000
heap private
page read and write
clean
7FF57BAEA000
unkown
page readonly
clean
DE750FF000
unkown
page read and write
clean
1E470619000
heap private
page read and write
clean
7FF56E924000
unkown
page readonly
clean
1169000
unkown
page read and write
clean
407D3FE000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
1F4ABFC000
unkown
page read and write
clean
7FF50A216000
unkown
page readonly
clean
7FF5A6620000
unkown
page readonly
clean
1ECEFAA0000
unkown
page read and write
clean
250262A0000
unkown
page readonly
clean
305B000
unkown
page readonly
clean
242F6513000
unkown
page read and write
clean
7FF583A7B000
unkown
page readonly
clean
23B3DA25000
unkown
page read and write
clean
7FF57BBC9000
unkown
page readonly
clean
7FF5C3588000
unkown
page readonly
clean
1ECEFD00000
unkown
page read and write
clean
1ECEDC9F000
unkown
page read and write
clean
1ECEFA70000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
407D47C000
unkown
page read and write
clean
22F47B5B000
unkown
page read and write
clean
15402CBA000
unkown
page read and write
clean
7FF5678DE000
unkown
page readonly
clean
8B0BF0B000
unkown
page read and write
clean
2502486F000
unkown
page read and write
clean
2DC40C40000
unkown
page read and write
clean
7FF4F38F1000
unkown
page readonly
clean
22F472E8000
unkown
page read and write
clean
7FF583BC8000
unkown
page readonly
clean
EC7C67E000
unkown
page read and write
clean
7FF56EA1A000
unkown
page readonly
clean
1ECEDCE8000
unkown
page read and write
clean
7FF4FA9F2000
unkown
page readonly
clean
7FF50A1AA000
unkown
page readonly
clean
192258D0000
unkown
page readonly
clean
23B3E301000
unkown
page read and write
clean
7FF4FA9BC000
unkown
page readonly
clean
7FF592DB8000
unkown
page readonly
clean
7FF592F28000
unkown
page readonly
clean
23B43213000
unkown
page read and write
clean
7FF57B9B8000
unkown
page readonly
clean
7FF4FA7A5000
unkown
page readonly
clean
22F47B7F000
unkown
page read and write
clean
7FF56B5E6000
unkown
page readonly
clean
7FF52837C000
unkown
page readonly
clean
300A000
unkown
page readonly
clean
1ECEFF83000
unkown
page read and write
clean
22F47B66000
unkown
page read and write
clean
7FF583BC6000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
7FF5404E0000
unkown
page readonly
clean
22F47B5C000
unkown
page read and write
clean
7FF581DFC000
unkown
page readonly
clean
1E470695000
unkown
page read and write
clean
7FF57BB3C000
unkown
page readonly
clean
7FF4EEE44000
unkown
page readonly
clean
7FF581DFC000
unkown
page readonly
clean
7FF56ACDD000
unkown
page readonly
clean
1D48B66C000
unkown
page read and write
clean
242F643C000
unkown
page read and write
clean
7FF4F382E000
unkown
page readonly
clean
7FF592FB0000
unkown
page readonly
clean
23B432AE000
unkown
page read and write
clean
1ECEDC94000
unkown
page read and write
clean
7FF5611E9000
unkown
page readonly
clean
407D9FE000
unkown
page read and write
clean
19227110000
unkown
page read and write
clean
7FF4EEE26000
unkown
page readonly
clean
7FF592D7E000
unkown
page readonly
clean
7FF591555000
unkown
page readonly
clean
7FF56B5EC000
unkown
page readonly
clean
22F47B30000
unkown
page read and write
clean
2502486D000
unkown
page read and write
clean
192271A0000
unkown
page readonly
clean
22F479E0000
unkown
page readonly
clean
15402D02000
unkown
page read and write
clean
407D6FC000
unkown
page read and write
clean
7FF557E00000
unkown
page readonly
clean
66D617B000
unkown
page read and write
clean
2FD2000
unkown
page readonly
clean
19E637C0000
unkown
page readonly
clean
66D677C000
unkown
page read and write
clean
1ECF1002000
unkown
page read and write
clean
7FF5A6A12000
unkown
page readonly
clean
19225682000
unkown
page read and write
clean
22E31C50000
unkown
page readonly
clean
7FF583906000
unkown
page readonly
clean
7FF57BA3C000
unkown
page readonly
clean
7FF5A6610000
unkown
page readonly
clean
29CA4E60000
unkown
page readonly
clean
66D64FB000
unkown
page read and write
clean
7FF528425000
unkown
page readonly
clean
22F48002000
unkown
page read and write
clean
7FF5A68EA000
unkown
page readonly
clean
7FF5677F8000
unkown
page readonly
clean
7FF583C54000
unkown
page readonly
clean
7FF56775C000
unkown
page readonly
clean
7FF52836C000
unkown
page readonly
clean
1E470E80000
unkown
page readonly
clean
7FF57BB36000
unkown
page readonly
clean
1ECF0210000
unkown
page read and write
clean
19227070000
unkown
page readonly
clean
8B0C37E000
unkown
page read and write
clean
25024868000
unkown
page read and write
clean
7FF4FA83A000
unkown
page readonly
clean
66D627B000
unkown
page read and write
clean
23B3E000000
unkown
page read and write
clean
29CA4829000
unkown
page read and write
clean
7FF5819ED000
unkown
page readonly
clean
1ECEFD71000
unkown
page read and write
clean
7FF581A7E000
unkown
page readonly
clean
7FF4F3808000
unkown
page readonly
clean
2F6E000
unkown
page readonly
clean
7FF5283A2000
unkown
page readonly
clean
66D5F79000
unkown
page read and write
clean
1ECEDC9B000
unkown
page read and write
clean
22F47B60000
unkown
page read and write
clean
7FF57B9D3000
unkown
page readonly
clean
7FF5819C5000
unkown
page readonly
clean
2FD8EA00000
unkown
page readonly
clean
7FF5838EE000
unkown
page readonly
clean
7FF5A69FC000
unkown
page readonly
clean
23B42EE0000
unkown
page read and write
clean
7FF591666000
unkown
page readonly
clean
7FF57BAC0000
unkown
page readonly
clean
7FF56B393000
unkown
page readonly
clean
7FF5673E0000
unkown
page readonly
clean
7FF592F4E000
unkown
page readonly
clean
7FF561156000
unkown
page readonly
clean
7FF56B576000
unkown
page readonly
clean
66D593E000
unkown
page read and write
clean
22F47B34000
unkown
page read and write
clean
B2B1F75000
unkown
page read and write
clean
7FF583BBD000
unkown
page readonly
clean
1ECEFD9C000
unkown
page read and write
clean
1E470719000
unkown
page read and write
clean
7FF56EBD2000
unkown
page readonly
clean
7FF540576000
unkown
page readonly
clean
DE74FFF000
unkown
page read and write
clean
7FF558235000
unkown
page readonly
clean
7FF5C38C2000
unkown
page readonly
clean
7FF54061E000
unkown
page readonly
clean
22F47B11000
unkown
page read and write
clean
7FF5C3867000
unkown
page readonly
clean
242F6C02000
unkown
page read and write
clean
7FF5C3871000
unkown
page readonly
clean
20183428000
unkown
page read and write
clean
1ECEDC3F000
unkown
page read and write
clean
1145000
unkown
page read and write
clean
20183C02000
unkown
page read and write
clean
7FF5A6651000
unkown
page readonly
clean
1ECEFC02000
unkown
page read and write
clean
7FF4FA757000
unkown
page readonly
clean
19E64002000
unkown
page read and write
clean
1ECEDC9B000
unkown
page read and write
clean
650F000
stack
page read and write
clean
7FF591639000
unkown
page readonly
clean
7FF55807F000
unkown
page readonly
clean
2FD8E813000
unkown
page read and write
clean
1ECEFD47000
unkown
page read and write
clean
DE2A37D000
unkown
page read and write
clean
66D667A000
unkown
page read and write
clean
7FF57BB60000
unkown
page readonly
clean
1352CFE000
unkown
page read and write
clean
1ECEFDFD000
unkown
page read and write
clean
1E47069C000
unkown
page read and write
clean
7FF57BB4C000
unkown
page readonly
clean
FEFBBFF000
unkown
page read and write
clean
7FF4EEDA2000
unkown
page readonly
clean
19225649000
unkown
page read and write
clean
19491B40000
unkown
page read and write
clean
3540000
unkown
page readonly
clean
1ECEDC9D000
unkown
page read and write
clean
22F48200000
unkown
page readonly
clean
1ECEFAD0000
unkown
page readonly
clean
7FF53FFF7000
unkown
page readonly
clean
7FF540630000
unkown
page readonly
clean
29CA4660000
unkown
page readonly
clean
1ECEDCF7000
unkown
page read and write
clean
7FF5677E0000
unkown
page readonly
clean
172C7654000
unkown
page read and write
clean
22E31E68000
unkown
page read and write
clean
EC7BD7B000
unkown
page read and write
clean
7FF583CB9000
unkown
page readonly
clean
1ECF0010000
unkown
page read and write
clean
1E471226000
unkown
page read and write
clean
1ECEDB80000
unkown
page write copy
clean
7FF57BAD6000
unkown
page readonly
clean
7FF56E446000
unkown
page readonly
clean
7FF52821F000
unkown
page readonly
clean
22F47B5C000
unkown
page read and write
clean
7FF5408EC000
unkown
page readonly
clean
1636BFB000
unkown
page read and write
clean
2FB0000
unkown
page readonly
clean
7FF4EEDA0000
unkown
page readonly
clean
242F644D000
unkown
page read and write
clean
2DC40D02000
unkown
page read and write
clean
22F471D0000
unkown
page readonly
clean
7FF57BB0F000
unkown
page readonly
clean
7FF56B2CD000
unkown
page readonly
clean
23B3DA29000
unkown
page read and write
clean
15402BC0000
unkown
page readonly
clean
7FF59165C000
unkown
page readonly
clean
23B3E980000
unkown
page readonly
clean
7FF5A6A28000
unkown
page readonly
clean
7FF5916E9000
unkown
page readonly
clean
7FF4FAA77000
unkown
page readonly
clean
23B42FC0000
unkown
page read and write
clean
3520000
unkown
page read and write
clean
23B70054000
unkown
page read and write
clean
1ECEFA60000
unkown
page readonly
clean
23B7008C000
unkown
page read and write
clean
7FF4F38EE000
unkown
page readonly
clean
22F47B5B000
unkown
page read and write
clean
1F4A9FC000
unkown
page read and write
clean
7FF4F3849000
unkown
page readonly
clean
7FF4FA7B0000
unkown
page readonly
clean
7FF4EEEA1000
unkown
page readonly
clean
2FD8E902000
unkown
page read and write
clean
7FF57BB46000
unkown
page readonly
clean
15402B50000
heap private
page read and write
clean
7FF57B98E000
unkown
page readonly
clean
7FF567884000
unkown
page readonly
clean
15402C00000
unkown
page read and write
clean
23B70102000
unkown
page read and write
clean
2FD8F200000
unkown
page readonly
clean
1ECEDD61000
unkown
page read and write
clean
22E31E56000
unkown
page read and write
clean
7FF528416000
unkown
page readonly
clean
EC7BC7D000
unkown
page read and write
clean
23B4329C000
unkown
page read and write
clean
7FF5C39B9000
unkown
page readonly
clean
1ECEFDC5000
unkown
page read and write
clean
1ECEDA40000
heap private
page read and write
clean
2FD8E7F0000
unkown
page read and write
clean
23B3E970000
unkown
page readonly
clean
1157000
unkown
page read and write
clean
7FF4F3866000
unkown
page readonly
clean
1ECF0310000
unkown
page read and write
clean
22F479E0000
unkown
page read and write
clean
2FF5000
unkown
page readonly
clean
23B3DA9C000
unkown
page read and write
clean
7FF5610BC000
unkown
page readonly
clean
22F47B4A000
unkown
page read and write
clean
22F47B36000
unkown
page read and write
clean
1E47070C000
unkown
page read and write
clean
20183600000
unkown
page readonly
clean
135274E000
unkown
page read and write
clean
7FF5676F3000
unkown
page readonly
clean
7FF57B6C0000
unkown
page readonly
clean
66D5EFA000
unkown
page read and write
clean
7FF4FAA4D000
unkown
page readonly
clean
7FF5283FD000
unkown
page readonly
clean
7FF540907000
unkown
page readonly
clean
22E31E6A000
unkown
page read and write
clean
23B70064000
unkown
page read and write
clean
2018347D000
unkown
page read and write
clean
7FF56B42A000
unkown
page readonly
clean
23B70100000
unkown
page read and write
clean
7FF583BFF000
unkown
page readonly
clean
23B70063000
unkown
page read and write
clean
7FF558285000
unkown
page readonly
clean
7FF4EEDB8000
unkown
page readonly
clean
7FF5916E9000
unkown
page readonly
clean
242F6488000
unkown
page read and write
clean
7FF558137000
unkown
page readonly
clean
7FF528351000
unkown
page readonly
clean
7FF561125000
unkown
page readonly
clean
7FF5A6A10000
unkown
page readonly
clean
7FF55823F000
unkown
page readonly
clean
7FF5A6951000
unkown
page readonly
clean
22F47280000
unkown
page read and write
clean
22E32000000
unkown
page readonly
clean
7FF4FAA80000
unkown
page readonly
clean
1ECEDD30000
unkown
page read and write
clean
23B70067000
unkown
page read and write
clean
1352DFF000
unkown
page read and write
clean
1ECEFF43000
unkown
page read and write
clean
23B3DA77000
unkown
page read and write
clean
7FF5A6A69000
unkown
page readonly
clean
23B42EA0000
unkown
page read and write
clean
1020000
unkown
page readonly
clean
7FF540904000
unkown
page readonly
clean
7FF56B554000
unkown
page readonly
clean
19E6385C000
unkown
page read and write
clean
7FF5A6A55000
unkown
page readonly
clean
7FF583C21000
unkown
page readonly
clean
B2B20F7000
unkown
page read and write
clean
7FF540876000
unkown
page readonly
clean
22F47B51000
unkown
page read and write
clean
22F471F0000
unkown
page read and write
clean
7FF583C50000
unkown
page readonly
clean
7FF583BDA000
unkown
page readonly
clean
1ECEDC55000
unkown
page read and write
clean
7FF5C38C8000
unkown
page readonly
clean
7FF583B45000
unkown
page readonly
clean
7FF4EEE47000
unkown
page readonly
clean
242F62F0000
unkown
page readonly
clean
DE75079000
unkown
page read and write
clean
7FF581996000
unkown
page readonly
clean
66D67FC000
unkown
page read and write
clean
23B432B0000
unkown
page read and write
clean
242F6A90000
unkown
page readonly
clean
F69ADBB000
unkown
page read and write
clean
1ECEDC9C000
unkown
page read and write
clean
1163000
unkown
page read and write
clean
7FF592FA5000
unkown
page readonly
clean
1ECEDC13000
unkown
page read and write
clean
1E470620000
unkown
page read and write
clean
7FF528499000
unkown
page readonly
clean
7FF56766F000
unkown
page readonly
clean
EC7C07B000
unkown
page read and write
clean
7FF560FF7000
unkown
page readonly
clean
22F471C0000
heap default
page read and write
clean
7FF592F7D000
unkown
page readonly
clean
7FF558249000
unkown
page readonly
clean
2FF0000
unkown
page readonly
clean
7FF4F37F0000
unkown
page readonly
clean
23B7003C000
unkown
page read and write
clean
22F47BC0000
unkown
page read and write
clean
29CA4870000
unkown
page read and write
clean
1D48B590000
unkown
page readonly
clean
1ECEFD30000
unkown
page read and write
clean
351E000
stack
page read and write
clean
1ECF0410000
unkown
page read and write
clean
7FF581A81000
unkown
page readonly
clean
242F63D0000
unkown
page readonly
clean
7FF4EEEA9000
unkown
page readonly
clean
22F47316000
unkown
page read and write
clean
7FF592F26000
unkown
page readonly
clean
7FF528107000
unkown
page readonly
clean
25024700000
unkown
page write copy
clean
7FF4FA753000
unkown
page readonly
clean
23B3E850000
unkown
page read and write
clean
1E470722000
unkown
page read and write
clean
7FF56ECC1000
unkown
page readonly
clean
7FF5281CC000
unkown
page readonly
clean
1ECF0010000
unkown
page read and write
clean
7FF57BAD8000
unkown
page readonly
clean
353A000
heap private
page read and write
clean
19491C5E000
unkown
page read and write
clean
22F47B4A000
unkown
page read and write
clean
1D48B8D0000
unkown
page readonly
clean
7FF56784D000
unkown
page readonly
clean
7FF56EC67000
unkown
page readonly
clean
7FF581937000
unkown
page readonly
clean
7FF592CE0000
unkown
page readonly
clean
23B3E960000
unkown
page readonly
clean
7FF581893000
unkown
page readonly
clean
13527CE000
unkown
page read and write
clean
1ECEFD2B000
unkown
page read and write
clean
7FF583A1E000
unkown
page readonly
clean
1D48B66C000
unkown
page read and write
clean
7FF561166000
unkown
page readonly
clean
7FF5404A3000
unkown
page readonly
clean
1ECEFE53000
unkown
page read and write
clean
7FF56781E000
unkown
page readonly
clean
2FC2000
unkown
page readonly
clean
22F47B6A000
unkown
page read and write
clean
22F47B4C000
unkown
page read and write
clean
22F47B36000
unkown
page read and write
clean
7FF50A1FD000
unkown
page readonly
clean
2DC40C29000
unkown
page read and write
clean
7FF592FB7000
unkown
page readonly
clean
1ECEFA70000
unkown
page read and write
clean
19E63AD0000
unkown
page readonly
clean
22F47229000
unkown
page read and write
clean
242F63C0000
unkown
page readonly
clean
7FF5A682F000
unkown
page readonly
clean
BD243FA000
unkown
page read and write
clean
22F47227000
unkown
page read and write
clean
22F47B81000
unkown
page read and write
clean
1ECEFDFC000
unkown
page read and write
clean
7FF5283BA000
unkown
page readonly
clean
7FF56780A000
unkown
page readonly
clean
7FF5407E7000
unkown
page readonly
clean
7FF558131000
unkown
page readonly
clean
1D48B668000
unkown
page read and write
clean
7FF5A684C000
unkown
page readonly
clean
1D48B613000
unkown
page read and write
clean
7FF5A6A08000
unkown
page readonly
clean
1ECEFF43000
unkown
page read and write
clean
23B43050000
unkown
page readonly
clean
7FF4FA8D8000
unkown
page readonly
clean
20183513000
unkown
page read and write
clean
7FF5C39B9000
unkown
page readonly
clean
1ECEFDE7000
unkown
page read and write
clean
2FD8E800000
unkown
page read and write
clean
7FF591656000
unkown
page readonly
clean
7FF50A21C000
unkown
page readonly
clean
7FF528160000
unkown
page readonly
clean
7FF5A679C000
unkown
page readonly
clean
22F472B1000
unkown
page read and write
clean
7FF56ECBE000
unkown
page readonly
clean
7FF52840C000
unkown
page readonly
clean
7FF5A6908000
unkown
page readonly
clean
20183B30000
unkown
page readonly
clean
7FF5A6AB4000
unkown
page readonly
clean
7FF567887000
unkown
page readonly
clean
7FF5408CD000
unkown
page readonly
clean
1ECEFD13000
unkown
page read and write
clean
2018346A000
unkown
page read and write
clean
7FF581A20000
unkown
page readonly
clean
1116FFE000
unkown
page read and write
clean
22F48002000
unkown
page read and write
clean
There are 1843 hidden memdumps, click here to show them.