IOCReport

loading gif

Files

File Path
Type
Category
Malicious
0b31c0f0_by_Libranalysis.xls
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: van-van, Last Saved By: vi-vi, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Wed May 12 08:24:11 2021, Security: 0
initial sample
malicious
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\0b31c0f0_by_Libranalysis.xls.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:46 2020, mtime=Thu May 13 03:00:50 2021, atime=Thu May 13 03:00:50 2021, length=177152, window=hide
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F29B1D57-CE95-4888-B145-4A6EF177D137
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\B6A10000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu Jun 27 16:19:49 2019, mtime=Thu May 13 03:00:50 2021, atime=Thu May 13 03:00:50 2021, length=12288, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\Desktop\E7A10000
Applesoft BASIC program data, first line number 16
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 59863 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
clean
C:\Users\user\AppData\Local\Temp\C6DE0000
data
dropped
clean
C:\Users\user\AppData\Local\Temp\CabE15B.tmp
Microsoft Cabinet archive data, 59863 bytes, 1 file
dropped
clean
C:\Users\user\AppData\Local\Temp\TarE15C.tmp
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\0b31c0f0_by_Libranalysis.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu May 13 02:52:28 2021, mtime=Thu May 13 02:52:40 2021, atime=Thu May 13 02:52:40 2021, length=174080, window=hide
dropped
clean
C:\Users\user\Desktop\97DE0000
Applesoft BASIC program data, first line number 16
dropped
clean
There are 6 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32 ..\ritofm.cvm,DllRegisterServer
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32 ..\ritofm.cvm1,DllRegisterServer
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\System32\rundll32.exe
rundll32 ..\ritofm.cvm,DllRegisterServer
malicious
C:\Windows\System32\rundll32.exe
rundll32 ..\ritofm.cvm1,DllRegisterServer
malicious

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
clean
https://directory.services.
unknown
clean
https://login.windows-ppe.net/common/oauth2/authorize
unknown
clean
https://staging.cortana.ai
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://investor.msn.com/
unknown
clean
There are 98 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
signifysystem.com
192.185.39.58
clean
fcventasyservicios.cl
192.185.32.232
clean

IPs

IP
Domain
Country
Malicious
192.185.39.58
signifysystem.com
United States
clean
192.185.32.232
fcventasyservicios.cl
United States
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
0g0
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1g0
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
19C5B
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A2D3
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A45A
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A592
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A748
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1A8AF
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
;}0
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
2F3BD
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
2FB5E
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
*-8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED1C0
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED4DC
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED5D6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED672
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED76B
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED865
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
98
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\system32\qagentrt.dll,-10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1115B2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1121C3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SavedLegacySettings
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
There are 170 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2469DA6B000
unkown
page read and write
clean
7FF51B721000
unkown
page readonly
clean
7FF50ABAE000
unkown
page readonly
clean
7FF53A083000
unkown
page readonly
clean
7FF5600DA000
unkown
page readonly
clean
7FF502B2E000
unkown
page readonly
clean
7FF593D7F000
unkown
page readonly
clean
16EA1F02000
unkown
page read and write
clean
17697246000
unkown
page read and write
clean
7FF53A8A5000
unkown
page readonly
clean
7D5000
unkown
page read and write
clean
7FF59DEAA000
unkown
page readonly
clean
530A3FF000
unkown
page read and write
clean
22245660000
unkown
page readonly
clean
7FF52357C000
unkown
page readonly
clean
7FF50DEB6000
unkown
page readonly
clean
17697120000
unkown
page read and write
clean
2D7054D1000
unkown
page read and write
clean
7FF5A4248000
unkown
page readonly
clean
7FF5ED97A000
unkown
page readonly
clean
7FF593FF9000
unkown
page readonly
clean
7FF582505000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
7FF57DD85000
unkown
page readonly
clean
7FF51B636000
unkown
page readonly
clean
1AC47500000
unkown
page read and write
clean
7FF52340D000
unkown
page readonly
clean
7FF5C9CC9000
unkown
page readonly
clean
2C40000
unkown
page readonly
clean
7FF50DE61000
unkown
page readonly
clean
1281D5F5000
unkown
page read and write
clean
31D7000
unkown
page read and write
clean
22245802000
unkown
page read and write
clean
7FF5637E9000
unkown
page readonly
clean
7FF5824D2000
unkown
page readonly
clean
2D7098B6000
unkown
page read and write
clean
C1FFDFF000
unkown
page read and write
clean
7FF59C661000
unkown
page readonly
clean
2D7096A0000
unkown
page read and write
clean
C2AF0FF000
unkown
page read and write
clean
26619610000
heap private
page read and write
clean
7FF5EDB65000
unkown
page readonly
clean
7FF5C9C2D000
unkown
page readonly
clean
1CB1328C000
unkown
page read and write
clean
23EA8670000
unkown
page read and write
clean
7FF5BB6FE000
unkown
page readonly
clean
5FAEA7E000
unkown
page read and write
clean
2B2AD400000
unkown
page readonly
clean
2A98000
unkown
page readonly
clean
1E935102000
unkown
page read and write
clean
22245A00000
unkown
page readonly
clean
1AC46CBA000
unkown
page read and write
clean
3391000
unkown
page read and write
clean
7FF59DF5A000
unkown
page readonly
clean
1F303D7F000
heap private
page read and write
clean
7FF502D1F000
unkown
page readonly
clean
2D70428C000
unkown
page read and write
clean
7FF502F16000
unkown
page readonly
clean
1CB13D40000
unkown
page readonly
clean
1281D60A000
unkown
page read and write
clean
22FD7313000
unkown
page read and write
clean
66C0000
unkown
page readonly
clean
7FF50A9CA000
unkown
page readonly
clean
2D7096A8000
unkown
page read and write
clean
7FF5BB6D6000
unkown
page readonly
clean
752F0F9000
unkown
page read and write
clean
7FF53A77E000
unkown
page readonly
clean
3F1E5FB000
unkown
page read and write
clean
22FD9190000
unkown
page readonly
clean
7FF5B9B07000
unkown
page readonly
clean
1E933010000
heap private
page read and write
clean
17C47B000
unkown
page read and write
clean
7FF51AFB6000
unkown
page readonly
clean
3330000
unkown
page read and write
clean
7FF559F45000
unkown
page readonly
clean
7FF5A41D0000
unkown
page readonly
clean
7FF50DF9E000
unkown
page readonly
clean
7FF559C33000
unkown
page readonly
clean
7FF50DEF9000
unkown
page readonly
clean
2D70427B000
unkown
page read and write
clean
2661988D000
unkown
page read and write
clean
1F5EE7E000
unkown
page read and write
clean
1F303B00000
unkown
page readonly
clean
29CB000
unkown
page readonly
clean
7FF502D4C000
unkown
page readonly
clean
7FF59DC80000
unkown
page readonly
clean
17697300000
unkown
page read and write
clean
7FF5E6FDE000
unkown
page readonly
clean
178E5E3F000
unkown
page read and write
clean
7FF5B9C1A000
unkown
page readonly
clean
7FF50AC17000
unkown
page readonly
clean
2CD4000
unkown
page readonly
clean
7FF5EDB6F000
unkown
page readonly
clean
1F3026D0000
unkown
page readonly
clean
7FF57E142000
unkown
page readonly
clean
7FF52337F000
unkown
page readonly
clean
7FF502E5B000
unkown
page readonly
clean
1281D62B000
unkown
page read and write
clean
7FF50DF37000
unkown
page readonly
clean
7FF559F1D000
unkown
page readonly
clean
2D704FA0000
unkown
page readonly
clean
7FF5EDB9C000
unkown
page readonly
clean
1F301FA0000
unkown
page readonly
clean
2D709590000
unkown
page read and write
clean
1CFAC029000
unkown
page read and write
clean
16ABCC60000
unkown
page readonly
clean
7FF53A910000
unkown
page readonly
clean
7FF59C604000
unkown
page readonly
clean
2D704790000
unkown
page readonly
clean
7FF5B9CF9000
unkown
page readonly
clean
187E5CE0000
unkown
page read and write
clean
7FF57E18F000
unkown
page readonly
clean
7FF59C29B000
unkown
page readonly
clean
2B2AD25E000
unkown
page read and write
clean
7FF53A908000
unkown
page readonly
clean
2D7047B0000
unkown
page read and write
clean
7FF582285000
unkown
page readonly
clean
7FF5637DE000
unkown
page readonly
clean
1564122A000
unkown
page read and write
clean
7FF523508000
unkown
page readonly
clean
2D709810000
unkown
page read and write
clean
23EA8800000
unkown
page readonly
clean
2D704400000
unkown
page readonly
clean
7FF50AC10000
unkown
page readonly
clean
FFE507F000
unkown
page read and write
clean
2D7042FE000
unkown
page read and write
clean
17697313000
unkown
page read and write
clean
23EA8629000
unkown
page read and write
clean
2BD9000
unkown
page readonly
clean
7FF5B9C08000
unkown
page readonly
clean
7DC617F000
unkown
page read and write
clean
338A000
unkown
page read and write
clean
7FF523535000
unkown
page readonly
clean
7FF563025000
unkown
page readonly
clean
7FF59E0F6000
unkown
page readonly
clean
7FF5E7217000
unkown
page readonly
clean
7FF5EDA33000
unkown
page readonly
clean
23EA8E02000
unkown
page read and write
clean
1281D60C000
unkown
page read and write
clean
1CFABF30000
unkown
page readonly
clean
2D704130000
unkown
page readonly
clean
2989000
unkown
page readonly
clean
7FF502D58000
unkown
page readonly
clean
7FF5BB767000
unkown
page readonly
clean
FFE537E000
unkown
page read and write
clean
1281D646000
unkown
page read and write
clean
7FF5BB69C000
unkown
page readonly
clean
2B2AD110000
unkown
page readonly
clean
7FF5E6ED4000
unkown
page readonly
clean
1CB1324F000
unkown
page read and write
clean
7F9000
unkown
page read and write
clean
7FF5EDB79000
unkown
page readonly
clean
16EA1D30000
heap default
page read and write
clean
7FF593F5D000
unkown
page readonly
clean
6893CAB000
unkown
page read and write
clean
2D709B20000
unkown
page readonly
clean
B52737C000
unkown
page read and write
clean
23EA8650000
unkown
page read and write
clean
7FF53A57E000
unkown
page readonly
clean
16EA1E4A000
unkown
page read and write
clean
2D70429E000
unkown
page read and write
clean
1CB13255000
unkown
page read and write
clean
2D704913000
unkown
page read and write
clean
16EA3970000
unkown
page readonly
clean
1E935240000
unkown
page read and write
clean
7FF5A444F000
unkown
page readonly
clean
7FF5C9B97000
unkown
page readonly
clean
7FF59C4A1000
unkown
page readonly
clean
1F303AF0000
unkown
page readonly
clean
2D709800000
unkown
page read and write
clean
2D709770000
unkown
page read and write
clean
7FF51B68D000
unkown
page readonly
clean
1E933286000
unkown
page read and write
clean
2D704271000
unkown
page read and write
clean
7FF57E1C6000
unkown
page readonly
clean
7FF560336000
unkown
page readonly
clean
7FF502B10000
unkown
page readonly
clean
7FF502CFE000
unkown
page readonly
clean
FFE57FE000
unkown
page read and write
clean
B70000
unkown
page readonly
clean
7FF559EC8000
unkown
page readonly
clean
22FD7317000
unkown
page read and write
clean
7FF50ABDD000
unkown
page readonly
clean
7FF50DCFA000
unkown
page readonly
clean
7FF5E7068000
unkown
page readonly
clean
204D3F9000
unkown
page read and write
clean
7FF5BB67A000
unkown
page readonly
clean
26619900000
unkown
page read and write
clean
22FD9100000
unkown
page readonly
clean
7FF5EDC29000
unkown
page readonly
clean
7FF5C98E5000
unkown
page readonly
clean
B292AFE000
unkown
page read and write
clean
2469DA69000
unkown
page read and write
clean
17C57F000
unkown
page read and write
clean
17697400000
unkown
page readonly
clean
2D704F80000
unkown
page readonly
clean
1EB0E2A0000
unkown
page readonly
clean
22FD9170000
unkown
page readonly
clean
15641170000
unkown
page readonly
clean
2469DA00000
unkown
page read and write
clean
2C60000
unkown
page readonly
clean
7FF523590000
unkown
page readonly
clean
7FF502E67000
unkown
page readonly
clean
7FF50DE7A000
unkown
page readonly
clean
23EA8713000
unkown
page read and write
clean
2B2AD213000
unkown
page read and write
clean
2A2A000
unkown
page readonly
clean
7FF50262A000
unkown
page readonly
clean
7FF5602C8000
unkown
page readonly
clean
2D7097B0000
unkown
page read and write
clean
1AC47190000
unkown
page readonly
clean
26619A00000
unkown
page readonly
clean
7FF59E0FC000
unkown
page readonly
clean
2D704918000
unkown
page read and write
clean
7FF50AB2A000
unkown
page readonly
clean
1AC46B90000
unkown
page write copy
clean
7FF5C9894000
unkown
page readonly
clean
22FD72E1000
unkown
page read and write
clean
7FF593E85000
unkown
page readonly
clean
7FF5E6EE3000
unkown
page readonly
clean
7FF559F54000
unkown
page readonly
clean
FFE54FD000
unkown
page read and write
clean
7FF50DF44000
unkown
page readonly
clean
1E933080000
unkown
page readonly
clean
7FF5A4495000
unkown
page readonly
clean
22FD9323000
unkown
page read and write
clean
7FF582567000
unkown
page readonly
clean
7FF57E156000
unkown
page readonly
clean
1E9332A3000
unkown
page read and write
clean
1EB0C868000
unkown
page read and write
clean
1F30213B000
heap default
page read and write
clean
1CB13308000
unkown
page read and write
clean
1CB12FC0000
heap private
page read and write
clean
1EB0C868000
unkown
page read and write
clean
178E5C70000
unkown
page readonly
clean
222452D0000
unkown
page readonly
clean
7FF50DC17000
unkown
page readonly
clean
1F303C80000
heap private
page read and write
clean
7FF5BB51A000
unkown
page readonly
clean
17C6FE000
unkown
page read and write
clean
7FF559EEE000
unkown
page readonly
clean
2661984B000
unkown
page read and write
clean
7FF5A4412000
unkown
page readonly
clean
7FF502EFD000
unkown
page readonly
clean
419557E000
unkown
page read and write
clean
7FF593CC0000
unkown
page readonly
clean
1281D490000
unkown
page read and write
clean
2469DB02000
unkown
page read and write
clean
1E936010000
unkown
page read and write
clean
7FF55FA0B000
unkown
page readonly
clean
204D2F9000
unkown
page read and write
clean
16ABC63D000
unkown
page read and write
clean
7FF502F99000
unkown
page readonly
clean
7FF5E7207000
unkown
page readonly
clean
7FF5EDB96000
unkown
page readonly
clean
7BADA7B000
unkown
page read and write
clean
23EA8681000
unkown
page read and write
clean
7FF502EA6000
unkown
page readonly
clean
2D70422A000
unkown
page read and write
clean
7FF5E7087000
unkown
page readonly
clean
22FD7300000
unkown
page read and write
clean
7FF593DB8000
unkown
page readonly
clean
7FF5A403D000
unkown
page readonly
clean
7FF523594000
unkown
page readonly
clean
1281D5CB000
unkown
page read and write
clean
7FF5C9CC1000
unkown
page readonly
clean
7FF5825C1000
unkown
page readonly
clean
2469D990000
unkown
page readonly
clean
5309FFE000
unkown
page read and write
clean
1EB0C902000
unkown
page read and write
clean
7FF5823D3000
unkown
page readonly
clean
2B27000
unkown
page readonly
clean
7BADE7C000
unkown
page read and write
clean
7FF593655000
unkown
page readonly
clean
1EB0C833000
unkown
page read and write
clean
187E4229000
unkown
page read and write
clean
7FF5B9CF1000
unkown
page readonly
clean
7FF5A428F000
unkown
page readonly
clean
7FF50AB31000
unkown
page readonly
clean
2C26000
unkown
page readonly
clean
7FF5C9C46000
unkown
page readonly
clean
2693000
unkown
page readonly
clean
187E4256000
unkown
page read and write
clean
7FF58249C000
unkown
page readonly
clean
7FF57DF77000
unkown
page readonly
clean
7FF5A4164000
unkown
page readonly
clean
2B15000
unkown
page readonly
clean
7FF53A9B7000
unkown
page readonly
clean
35AF000
unkown
page read and write
clean
7FF560354000
unkown
page readonly
clean
7FF50DEE5000
unkown
page readonly
clean
FFE4BFC000
unkown
page read and write
clean
1F302120000
unkown
page readonly
clean
7DC627F000
unkown
page read and write
clean
2D704200000
unkown
page read and write
clean
1281D62D000
unkown
page read and write
clean
37FC0FF000
unkown
page read and write
clean
7FF57E0E7000
unkown
page readonly
clean
7FF59E124000
unkown
page readonly
clean
97D447F000
unkown
page read and write
clean
3460000
unkown
page readonly
clean
7FF593F1A000
unkown
page readonly
clean
97D4377000
unkown
page read and write
clean
2B2AD25C000
unkown
page read and write
clean
7FF50DF2C000
unkown
page readonly
clean
7FF53A601000
unkown
page readonly
clean
17697202000
unkown
page read and write
clean
7FF5EDC1E000
unkown
page readonly
clean
29D6000
unkown
page readonly
clean
7FF5B9C49000
unkown
page readonly
clean
7FF59C5A5000
unkown
page readonly
clean
29BD000
unkown
page readonly
clean
7FF57E1CC000
unkown
page readonly
clean
7FF57E138000
unkown
page readonly
clean
5A90000
unkown
page read and write
clean
2D709784000
unkown
page readonly
clean
178E77A0000
unkown
page read and write
clean
1E933213000
unkown
page read and write
clean
3F1E37E000
unkown
page read and write
clean
1E93331A000
unkown
page read and write
clean
7FF522E0B000
unkown
page readonly
clean
15641213000
unkown
page read and write
clean
7FF5E726E000
unkown
page readonly
clean
2B2AD302000
unkown
page read and write
clean
7FF5A42F8000
unkown
page readonly
clean
7FF502AD3000
unkown
page readonly
clean
7FF5A43DA000
unkown
page readonly
clean
15641A02000
unkown
page read and write
clean
7FF5A4476000
unkown
page readonly
clean
2B2AD269000
unkown
page read and write
clean
7FF582224000
unkown
page readonly
clean
7FF59DF9D000
unkown
page readonly
clean
7FF5E7279000
unkown
page readonly
clean
7FF5823B8000
unkown
page readonly
clean
C2AF1FE000
unkown
page read and write
clean
2A25000
unkown
page readonly
clean
7FF51AEC4000
unkown
page readonly
clean
7FF5636D8000
unkown
page readonly
clean
7FF523506000
unkown
page readonly
clean
7FF5597AC000
unkown
page readonly
clean
7FF5B99B5000
unkown
page readonly
clean
5FAE79B000
unkown
page read and write
clean
7FF51B6A6000
unkown
page readonly
clean
7FF593CA7000
unkown
page readonly
clean
7FF5E7131000
unkown
page readonly
clean
7FF5E71B5000
unkown
page readonly
clean
C2AF37F000
unkown
page read and write
clean
7FF5A4173000
unkown
page readonly
clean
338D000
unkown
page read and write
clean
7FF50DFA9000
unkown
page readonly
clean
1EB0C829000
unkown
page read and write
clean
7F2000
unkown
page read and write
clean
7BADEF9000
unkown
page read and write
clean
7FF5EDB32000
unkown
page readonly
clean
7FF562E63000
unkown
page readonly
clean
2D7096E4000
unkown
page read and write
clean
7FF5603AE000
unkown
page readonly
clean
967000
heap private
page read and write
clean
1AC46C13000
unkown
page read and write
clean
97D41FB000
unkown
page read and write
clean
16ABD000000
unkown
page readonly
clean
7DC5BCC000
unkown
page read and write
clean
2D704313000
unkown
page read and write
clean
7FF50AA83000
unkown
page readonly
clean
2B2AD27A000
unkown
page read and write
clean
1CB13302000
unkown
page read and write
clean
7FF50AB86000
unkown
page readonly
clean
32D0000
heap default
page read and write
clean
7FF559FB9000
unkown
page readonly
clean
7FF559F50000
unkown
page readonly
clean
17C77F000
unkown
page read and write
clean
7FF5A4486000
unkown
page readonly
clean
7FF5A41C5000
unkown
page readonly
clean
7FF53A8FC000
unkown
page readonly
clean
7FF5A418C000
unkown
page readonly
clean
7FF5602B0000
unkown
page readonly
clean
7FF502F06000
unkown
page readonly
clean
1281D62B000
unkown
page read and write
clean
2D709510000
unkown
page read and write
clean
17698BF0000
unkown
page readonly
clean
178E5F02000
unkown
page read and write
clean
7FF5637E1000
unkown
page readonly
clean
7FF5B9BAA000
unkown
page readonly
clean
2D709862000
unkown
page read and write
clean
7FF5A443E000
unkown
page readonly
clean
7FF5602FF000
unkown
page readonly
clean
740000
unkown
page readonly
clean
7FF57E1B1000
unkown
page readonly
clean
7FF53AA0E000
unkown
page readonly
clean
7FF502D60000
unkown
page readonly
clean
7FF57E0FA000
unkown
page readonly
clean
2224503E000
unkown
page read and write
clean
2D709770000
unkown
page write copy
clean
2D709550000
unkown
page readonly
clean
7FF50DE5A000
unkown
page readonly
clean
7FF559EDA000
unkown
page readonly
clean
7FF5603B1000
unkown
page readonly
clean
7FF53A9B4000
unkown
page readonly
clean
7FF502F25000
unkown
page readonly
clean
1281D4D0000
unkown
page readonly
clean
C1FF72E000
unkown
page read and write
clean
7FF50DEBA000
unkown
page readonly
clean
7FF50AB82000
unkown
page readonly
clean
7FF5C9BD8000
unkown
page readonly
clean
7FF5BAFD9000
unkown
page readonly
clean
7FF52322B000
unkown
page readonly
clean
3610000
heap private
page read and write
clean
2469DA69000
unkown
page read and write
clean
22245102000
unkown
page read and write
clean
3389000
unkown
page read and write
clean
29F2000
unkown
page readonly
clean
7FF5A3BE5000
unkown
page readonly
clean
7FF563725000
unkown
page readonly
clean
22FD9170000
unkown
page read and write
clean
7DD000
unkown
page read and write
clean
7FF5B9AE8000
unkown
page readonly
clean
7FF582519000
unkown
page readonly
clean
7FF559FB1000
unkown
page readonly
clean
7FF563784000
unkown
page readonly
clean
7FF5A44FE000
unkown
page readonly
clean
2D7098B4000
unkown
page read and write
clean
7FF53A97D000
unkown
page readonly
clean
7FF5E7210000
unkown
page readonly
clean
1281E060000
unkown
page read and write
clean
2FBB000
unkown
page read and write
clean
1CB13030000
unkown
page readonly
clean
1F302330000
heap private
page read and write
clean
2D7096C1000
unkown
page read and write
clean
2469DA3F000
unkown
page read and write
clean
4194EFE000
unkown
page read and write
clean
7FF5A426E000
unkown
page readonly
clean
1F5F0FD000
unkown
page read and write
clean
7FF563787000
unkown
page readonly
clean
1281D555000
heap private
page read and write
clean
1EB0C86E000
unkown
page read and write
clean
1281E310000
unkown
page read and write
clean
7FF5A41BE000
unkown
page readonly
clean
2A90000
unkown
page readonly
clean
2D709887000
unkown
page read and write
clean
6893D2F000
unkown
page read and write
clean
22FDA010000
unkown
page read and write
clean
1AC46CC1000
unkown
page read and write
clean
7FF502EA8000
unkown
page readonly
clean
7FF5C9BC0000
unkown
page readonly
clean
7FF5E71DD000
unkown
page readonly
clean
7FF50BE3C000
unkown
page readonly
clean
1CFABE00000
heap default
page read and write
clean
3340000
unkown
page read and write
clean
419517F000
unkown
page read and write
clean
7FF57E01A000
unkown
page readonly
clean
2C65000
unkown
page readonly
clean
7FF593FF9000
unkown
page readonly
clean
338E000
unkown
page read and write
clean
7FF5235F9000
unkown
page readonly
clean
7FF5824D8000
unkown
page readonly
clean
1AC46C6E000
unkown
page read and write
clean
7FF5BB433000
unkown
page readonly
clean
7FF59E106000
unkown
page readonly
clean
17697288000
unkown
page read and write
clean
FFE517F000
unkown
page read and write
clean
7FF5E7279000
unkown
page readonly
clean
FFE50FF000
unkown
page read and write
clean
23EA85B0000
unkown
page read and write
clean
1281D540000
unkown
page read and write
clean
7FF593EF2000
unkown
page readonly
clean
1E933268000
unkown
page read and write
clean
7FF57E158000
unkown
page readonly
clean
7FF5C9BFE000
unkown
page readonly
clean
178E5E29000
unkown
page read and write
clean
7FF5A4177000
unkown
page readonly
clean
7FF5ED893000
unkown
page readonly
clean
1EB0C868000
unkown
page read and write
clean
1281D560000
heap default
page read and write
clean
7FF5C9CBE000
unkown
page readonly
clean
1769722A000
unkown
page read and write
clean
7FF5B9C87000
unkown
page readonly
clean
1EB0C600000
heap default
page read and write
clean
7FF5BB6DA000
unkown
page readonly
clean
22245002000
unkown
page read and write
clean
2469DA69000
unkown
page read and write
clean
7FF5BB681000
unkown
page readonly
clean
17C679000
unkown
page read and write
clean
7FF56031D000
unkown
page readonly
clean
7FF59D999000
unkown
page readonly
clean
7FF5603B9000
unkown
page readonly
clean
2D709A00000
unkown
page readonly
clean
7FF59C160000
unkown
page readonly
clean
28D1000
unkown
page readonly
clean
7FF5B9C76000
unkown
page readonly
clean
2C75000
unkown
page readonly
clean
26619908000
unkown
page read and write
clean
23EA864A000
unkown
page read and write
clean
7FF59DFFC000
unkown
page readonly
clean
7FF56344D000
unkown
page readonly
clean
7FF5BB677000
unkown
page readonly
clean
7FF59E127000
unkown
page readonly
clean
7FF5C9C0F000
unkown
page readonly
clean
7FF50AC07000
unkown
page readonly
clean
22FD72A4000
unkown
page read and write
clean
1281D570000
heap default
page read and write
clean
1EB0CA00000
unkown
page readonly
clean
7FF5C9B8B000
unkown
page readonly
clean
7FF502EE9000
unkown
page readonly
clean
23EA8520000
heap private
page read and write
clean
7FF5E69E3000
unkown
page readonly
clean
7FF562E49000
unkown
page readonly
clean
7FF5E6FAC000
unkown
page readonly
clean
1F303AE0000
unkown
page readonly
clean
2469DA34000
unkown
page read and write
clean
7FF559C3C000
unkown
page readonly
clean
7DD000
unkown
page read and write
clean
2661A200000
unkown
page readonly
clean
7FF53A897000
unkown
page readonly
clean
1AC46B50000
unkown
page read and write
clean
7FF59C473000
unkown
page readonly
clean
2B2AD246000
unkown
page read and write
clean
7FF5B9967000
unkown
page readonly
clean
5FAEDF7000
unkown
page read and write
clean
1F5ED7E000
unkown
page read and write
clean
7FF59DC90000
unkown
page readonly
clean
7FF563756000
unkown
page readonly
clean
7FF5BB5B8000
unkown
page readonly
clean
7FF56013F000
unkown
page readonly
clean
6600000
unkown
page readonly
clean
7FF5BB437000
unkown
page readonly
clean
1F302186000
unkown
page read and write
clean
2D704302000
unkown
page read and write
clean
82F27FF000
unkown
page read and write
clean
2D709A40000
unkown
page readonly
clean
1EB0C913000
unkown
page read and write
clean
7FF559F36000
unkown
page readonly
clean
22245013000
unkown
page read and write
clean
7FF50ABB5000
unkown
page readonly
clean
2C37000
unkown
page readonly
clean
2B2A000
unkown
page readonly
clean
2C11000
unkown
page readonly
clean
7BA000
heap default
page read and write
clean
7FF5B9963000
unkown
page readonly
clean
B292BFE000
unkown
page read and write
clean
7FF5C9BD2000
unkown
page readonly
clean
22FD7265000
unkown
page read and write
clean
82F287E000
unkown
page read and write
clean
16EA1E13000
unkown
page read and write
clean
7FF502EDF000
unkown
page readonly
clean
204CE8B000
unkown
page read and write
clean
17697302000
unkown
page read and write
clean
7FF5EDB36000
unkown
page readonly
clean
7FF50DC13000
unkown
page readonly
clean
187E4202000
unkown
page read and write
clean
7DC647B000
unkown
page read and write
clean
7FF5BB764000
unkown
page readonly
clean
22FD7254000
unkown
page read and write
clean
2D7097E0000
unkown
page read and write
clean
2D709817000
unkown
page read and write
clean
B527A7E000
unkown
page read and write
clean
7FF51B63A000
unkown
page readonly
clean
F8AE2CB000
unkown
page read and write
clean
7FF5A43DC000
unkown
page readonly
clean
7FF5B9C02000
unkown
page readonly
clean
1E935133000
unkown
page read and write
clean
1F302000000
unkown
page readonly
clean
7FF50DF16000
unkown
page readonly
clean
1F302186000
unkown
page read and write
clean
2D7097F0000
unkown
page read and write
clean
7FF5E71EC000
unkown
page readonly
clean
7FF5635B9000
unkown
page readonly
clean
7FF51B6AC000
unkown
page readonly
clean
2B2AD1E0000
unkown
page readonly
clean
7E7000
unkown
page read and write
clean
7FF593D5E000
unkown
page readonly
clean
7FF59C59E000
unkown
page readonly
clean
7FF5EDBA6000
unkown
page readonly
clean
1EB0C900000
unkown
page read and write
clean
3360000
heap default
page read and write
clean
2AC7000
unkown
page readonly
clean
B292CF5000
unkown
page read and write
clean
2B2AD0A0000
heap private
page read and write
clean
22FD8DA0000
unkown
page readonly
clean
7FF559F57000
unkown
page readonly
clean
7FF57DD83000
unkown
page readonly
clean
16ABC800000
unkown
page readonly
clean
7BADC7A000
unkown
page read and write
clean
7FF5824FE000
unkown
page readonly
clean
16ABC613000
unkown
page read and write
clean
7FF502F30000
unkown
page readonly
clean
7FF5A3BE1000
unkown
page readonly
clean
7FF50DFA1000
unkown
page readonly
clean
2D704293000
unkown
page read and write
clean
B527B7E000
unkown
page read and write
clean
22FD9160000
unkown
page readonly
clean
7FF50DD98000
unkown
page readonly
clean
2D7096AE000
unkown
page read and write
clean
7FF51B696000
unkown
page readonly
clean
7FF59C5D6000
unkown
page readonly
clean
7FF5EDB8D000
unkown
page readonly
clean
2D704276000
unkown
page read and write
clean
338D000
unkown
page read and write
clean
1E933400000
unkown
page readonly
clean
26619829000
unkown
page read and write
clean
7FF5C9887000
unkown
page readonly
clean
2A7B000
unkown
page readonly
clean
7FF5BB69A000
unkown
page readonly
clean
7FF50AB8A000
unkown
page readonly
clean
7FF50AB88000
unkown
page readonly
clean
7FF5B9C66000
unkown
page readonly
clean
C2AF2FE000
unkown
page read and write
clean
1281D646000
unkown
page read and write
clean
7FF593F08000
unkown
page readonly
clean
530A4FE000
unkown
page read and write
clean
1564123D000
unkown
page read and write
clean
7FF593D98000
unkown
page readonly
clean
204D27B000
unkown
page read and write
clean
1AC46E00000
unkown
page readonly
clean
7FF50BE3C000
unkown
page readonly
clean
7FF502D3E000
unkown
page readonly
clean
FFE4DFE000
unkown
page read and write
clean
7FF593F49000
unkown
page readonly
clean
7FF502E92000
unkown
page readonly
clean
7FF5E71AE000
unkown
page readonly
clean
7FF5EDBC7000
unkown
page readonly
clean
7FF53A926000
unkown
page readonly
clean
1AC46A60000
unkown
page readonly
clean
22245730000
unkown
page read and write
clean
7FF502C60000
unkown
page readonly
clean
1E934CA0000
unkown
page readonly
clean
7FF559ECA000
unkown
page readonly
clean
7FF5E7157000
unkown
page readonly
clean
7FF563775000
unkown
page readonly
clean
7FF5E6DAD000
unkown
page readonly
clean
7FF53A98C000
unkown
page readonly
clean
7FF5E714A000
unkown
page readonly
clean
7FF5C9BC2000
unkown
page readonly
clean
7FF5A43EC000
unkown
page readonly
clean
1E935240000
unkown
page read and write
clean
1CFAC200000
unkown
page readonly
clean
5EC0000
unkown
page read and write
clean
1E934FE0000
heap private
page read and write
clean
15641190000
unkown
page read and write
clean
7FF502D51000
unkown
page readonly
clean
1F5F1FD000
unkown
page read and write
clean
22FD7302000
unkown
page read and write
clean
7FF5A4400000
unkown
page readonly
clean
2D709B00000
unkown
page readonly
clean
7FF5BB757000
unkown
page readonly
clean
7BADAFE000
unkown
page read and write
clean
7FF56341A000
unkown
page readonly
clean
39B000
unkown
page read and write
clean
33A9000
unkown
page read and write
clean
7FF58231A000
unkown
page readonly
clean
7FF582560000
unkown
page readonly
clean
22245059000
unkown
page read and write
clean
7FF582477000
unkown
page readonly
clean
7FF563588000
unkown
page readonly
clean
7FF5E71F6000
unkown
page readonly
clean
C1FFCFE000
unkown
page read and write
clean
22FD9326000
unkown
page read and write
clean
7FF5ED884000
unkown
page readonly
clean
2D704F90000
unkown
page readonly
clean
7FF5BB7C1000
unkown
page readonly
clean
7FF50DEDE000
unkown
page readonly
clean
7FF53A8EA000
unkown
page readonly
clean
2D7047A0000
unkown
page read and write
clean
7FF5233CA000
unkown
page readonly
clean
7FF563782000
unkown
page readonly
clean
7FF502F0C000
unkown
page readonly
clean
1CB13270000
unkown
page read and write
clean
7FF502E17000
unkown
page readonly
clean
2469F4A0000
unkown
page readonly
clean
530A2FF000
unkown
page read and write
clean
7FF50DC04000
unkown
page readonly
clean
7FF5A422B000
unkown
page readonly
clean
28E3000
unkown
page readonly
clean
7FF5A447C000
unkown
page readonly
clean
7FF563550000
unkown
page readonly
clean
7FF502AD1000
unkown
page readonly
clean
79E000
unkown
page read and write
clean
1281D360000
unkown
page read and write
clean
16EA1CD0000
heap private
page read and write
clean
7FF5634B0000
unkown
page readonly
clean
68940FA000
unkown
page read and write
clean
7FF523597000
unkown
page readonly
clean
7FF58250F000
unkown
page readonly
clean
2D709580000
unkown
page read and write
clean
7FF502E77000
unkown
page readonly
clean
2469DA02000
unkown
page read and write
clean
1AC469F0000
heap private
page read and write
clean
15641275000
unkown
page read and write
clean
17697100000
unkown
page readonly
clean
7FF559634000
unkown
page readonly
clean
7FF5EDB3A000
unkown
page readonly
clean
7FF5E6F9B000
unkown
page readonly
clean
7FF5824D6000
unkown
page readonly
clean
7FF50ABEC000
unkown
page readonly
clean
7FF5ED301000
unkown
page readonly
clean
7FF523431000
unkown
page readonly
clean
7FF560309000
unkown
page readonly
clean
7FF50AB27000
unkown
page readonly
clean
7FF59C600000
unkown
page readonly
clean
7FF5ED897000
unkown
page readonly
clean
7FF59C4DC000
unkown
page readonly
clean
960000
heap private
page read and write
clean
2D709500000
unkown
page read and write
clean
7FF57E249000
unkown
page readonly
clean
7FF51AED1000
unkown
page readonly
clean
2CE8000
unkown
page readonly
clean
689417F000
unkown
page read and write
clean
1281DC00000
unkown
page readonly
clean
17697247000
unkown
page read and write
clean
7FF563325000
unkown
page readonly
clean
2D704FC0000
unkown
page readonly
clean
7FF5A41B7000
unkown
page readonly
clean
187E4520000
unkown
page readonly
clean
7FF55FA0E000
unkown
page readonly
clean
26619E60000
unkown
page readonly
clean
178E5D90000
unkown
page readonly
clean
1281D61C000
unkown
page read and write
clean
7FF50DDB3000
unkown
page readonly
clean
2469DA6B000
unkown
page read and write
clean
1564125C000
unkown
page read and write
clean
7FF5602F5000
unkown
page readonly
clean
FFE52FF000
unkown
page read and write
clean
1F3020F0000
unkown
page read and write
clean
1E935002000
unkown
page read and write
clean
1EB0C868000
unkown
page read and write
clean
26619770000
unkown
page read and write
clean
17697240000
unkown
page read and write
clean
1E935240000
unkown
page read and write
clean
7FF5EDADA000
unkown
page readonly
clean
2D709A50000
unkown
page readonly
clean
7FF59E0CF000
unkown
page readonly
clean
7FF5ED8E5000
unkown
page readonly
clean
7FF56032C000
unkown
page readonly
clean
1F302335000
heap private
page read and write
clean
1CB13300000
unkown
page read and write
clean
1CB13020000
heap default
page read and write
clean
1281D646000
unkown
page read and write
clean
7FF559EB0000
unkown
page readonly
clean
7FF57E140000
unkown
page readonly
clean
7FF53A5F2000
unkown
page readonly
clean
1E933150000
unkown
page write copy
clean
22FD9170000
unkown
page read and write
clean
2D7096D0000
unkown
page read and write
clean
1EB0C856000
unkown
page read and write
clean
1CFAC000000
unkown
page read and write
clean
1F5EA7C000
unkown
page read and write
clean
1AC46C3E000
unkown
page read and write
clean
2D704FD0000
unkown
page read and write
clean
7FF53A91D000
unkown
page readonly
clean
7FF53A9B0000
unkown
page readonly
clean
7FF563766000
unkown
page readonly
clean
7FF51B679000
unkown
page readonly
clean
1281D3C0000
unkown
page readonly
clean
2D704802000
unkown
page read and write
clean
1E93323F000
unkown
page read and write
clean
7FF523576000
unkown
page readonly
clean
187E44D0000
unkown
page write copy
clean
2469DA13000
unkown
page read and write
clean
7FF57E1B6000
unkown
page readonly
clean
26619881000
unkown
page read and write
clean
1281D5F5000
unkown
page read and write
clean
1CFAC013000
unkown
page read and write
clean
7FF5635F7000
unkown
page readonly
clean
178E5E02000
unkown
page read and write
clean
7FF593F94000
unkown
page readonly
clean
7FF5A43B4000
unkown
page readonly
clean
7FF57E0F7000
unkown
page readonly
clean
7FF593F35000
unkown
page readonly
clean
7FF593F97000
unkown
page readonly
clean
7FF59E098000
unkown
page readonly
clean
187E4720000
unkown
page readonly
clean
1F5EFFF000
unkown
page read and write
clean
7FF50AC71000
unkown
page readonly
clean
26619680000
unkown
page readonly
clean
7FF5235F9000
unkown
page readonly
clean
5FAEAFE000
unkown
page read and write
clean
1281D646000
unkown
page read and write
clean
7FF53A928000
unkown
page readonly
clean
1281D5CB000
unkown
page read and write
clean
1E93510A000
unkown
page read and write
clean
15641180000
unkown
page readonly
clean
530A6FE000
unkown
page read and write
clean
1281D5AD000
unkown
page read and write
clean
31DB000
unkown
page read and write
clean
7FF50ABFC000
unkown
page readonly
clean
1EB0C5A0000
heap private
page read and write
clean
7FF59E17E000
unkown
page readonly
clean
1E933300000
unkown
page read and write
clean
7FF59C170000
unkown
page readonly
clean
7FF5825C9000
unkown
page readonly
clean
7FF59E10C000
unkown
page readonly
clean
1281D641000
unkown
page read and write
clean
7FF502D69000
unkown
page readonly
clean
68941FF000
unkown
page read and write
clean
1AC46B40000
unkown
page readonly
clean
7FF5B9463000
unkown
page readonly
clean
7DC667F000
unkown
page read and write
clean
7FF53A83C000
unkown
page readonly
clean
7DC63FD000
unkown
page read and write
clean
7FF5B9A4A000
unkown
page readonly
clean
16EA2000000
unkown
page readonly
clean
750000
unkown
page readonly
clean
2B2AD202000
unkown
page read and write
clean
2C0D000
unkown
page readonly
clean
56F000
unkown
page read and write
clean
1F5F27E000
unkown
page read and write
clean
7FF562E47000
unkown
page readonly
clean
16EA1E02000
unkown
page read and write
clean
2D7097C0000
unkown
page read and write
clean
7FF5603B9000
unkown
page readonly
clean
419527F000
unkown
page read and write
clean
176971B0000
unkown
page read and write
clean
7FF5EDAFA000
unkown
page readonly
clean
F8AE77E000
unkown
page read and write
clean
2D704815000
unkown
page read and write
clean
37FC1FA000
unkown
page read and write
clean
16ABC676000
unkown
page read and write
clean
26619852000
unkown
page read and write
clean
7FF5E7170000
unkown
page readonly
clean
2B2ADA02000
unkown
page read and write
clean
338D000
unkown
page read and write
clean
7FF5A44A0000
unkown
page readonly
clean
7FF5C9C55000
unkown
page readonly
clean
7FF50DEB8000
unkown
page readonly
clean
7FF59C65E000
unkown
page readonly
clean
7FF59C669000
unkown
page readonly
clean
7FF52331A000
unkown
page readonly
clean
7FF5B9BB1000
unkown
page readonly
clean
7FF59C42E000
unkown
page readonly
clean
29A1000
unkown
page readonly
clean
2AD3000
unkown
page readonly
clean
B52797F000
unkown
page read and write
clean
7FF50DEEF000
unkown
page readonly
clean
3385000
unkown
page read and write
clean
22245064000
unkown
page read and write
clean
2B2AD22D000
unkown
page read and write
clean
7FF5E7271000
unkown
page readonly
clean
1281D559000
heap private
page read and write
clean
7FF59D993000
unkown
page readonly
clean
4194AFC000
unkown
page read and write
clean
17697020000
heap default
page read and write
clean
7FF5A43B7000
unkown
page readonly
clean
1AC46CE2000
unkown
page read and write
clean
7FF5B9BCA000
unkown
page readonly
clean
7FF5C9316000
unkown
page readonly
clean
7FF51B65E000
unkown
page readonly
clean
2D705190000
unkown
page readonly
clean
7FF50AB9A000
unkown
page readonly
clean
7FF5234F0000
unkown
page readonly
clean
7FF5BB736000
unkown
page readonly
clean
7FF5E7205000
unkown
page readonly
clean
1EB0C868000
unkown
page read and write
clean
C1FF7AE000
unkown
page read and write
clean
7FF559F5D000
unkown
page readonly
clean
7FF5E6FFF000
unkown
page readonly
clean
7FF5E71BF000
unkown
page readonly
clean
33A2000
unkown
page read and write
clean
7FF560326000
unkown
page readonly
clean
2D704120000
unkown
page readonly
clean
7FF523437000
unkown
page readonly
clean
2D7096A0000
unkown
page read and write
clean
2D704279000
unkown
page read and write
clean
7FF5E6EFC000
unkown
page readonly
clean
22244F70000
heap private
page read and write
clean
29B2000
unkown
page readonly
clean
7FF523403000
unkown
page readonly
clean
7FF5A43AA000
unkown
page readonly
clean
7FF52353F000
unkown
page readonly
clean
1E935164000
unkown
page read and write
clean
FFE4A77000
unkown
page read and write
clean
7BADD7A000
unkown
page read and write
clean
7FF56356F000
unkown
page readonly
clean
2B2AD22F000
unkown
page read and write
clean
26619902000
unkown
page read and write
clean
7FF50A8D4000
unkown
page readonly
clean
7FF5E719A000
unkown
page readonly
clean
7FF50266B000
unkown
page readonly
clean
7FF5A4471000
unkown
page readonly
clean
7FF593B33000
unkown
page readonly
clean
7FF502BAF000
unkown
page readonly
clean
22FD7213000
unkown
page read and write
clean
3389000
unkown
page read and write
clean
7FF5B9C0A000
unkown
page readonly
clean
1F30214E000
heap default
page read and write
clean
7FF57E199000
unkown
page readonly
clean
2B2AD231000
unkown
page read and write
clean
1CB13400000
unkown
page readonly
clean
7FF53A88C000
unkown
page readonly
clean
7FF502F1C000
unkown
page readonly
clean
7FF5636E2000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
7FF53A99C000
unkown
page readonly
clean
22245028000
unkown
page read and write
clean
1AC47260000
unkown
page readonly
clean
7DD000
unkown
page read and write
clean
7FF5A4509000
unkown
page readonly
clean
7FF59E096000
unkown
page readonly
clean
23EA863C000
unkown
page read and write
clean
33A9000
unkown
page read and write
clean
28D7000
unkown
page readonly
clean
7FF56371E000
unkown
page readonly
clean
7FF50AB4C000
unkown
page readonly
clean
1CB13802000
unkown
page read and write
clean
2469D940000
unkown
page write copy
clean
178E5D40000
unkown
page write copy
clean
FFE51FF000
unkown
page read and write
clean
7FF53A981000
unkown
page readonly
clean
1281E2C0000
unkown
page read and write
clean
1E933302000
unkown
page read and write
clean
7FF5BB705000
unkown
page readonly
clean
2D704257000
unkown
page read and write
clean
26619750000
unkown
page readonly
clean
7FF59C5F5000
unkown
page readonly
clean
7FF53A996000
unkown
page readonly
clean
2C32000
unkown
page readonly
clean
7FF582546000
unkown
page readonly
clean
7FF59E181000
unkown
page readonly
clean
22245069000
unkown
page read and write
clean
1AC47600000
unkown
page readonly
clean
1AC46C00000
unkown
page read and write
clean
7FF559F3C000
unkown
page readonly
clean
7FF5A446D000
unkown
page readonly
clean
7FF502E88000
unkown
page readonly
clean
1281D550000
heap private
page read and write
clean
2469DC00000
unkown
page readonly
clean
2D709821000
unkown
page read and write
clean
1E935250000
unkown
page readonly
clean
7FF59C5E6000
unkown
page readonly
clean
7FF50DF0D000
unkown
page readonly
clean
22FD9300000
unkown
page read and write
clean
7FF53A5EF000
unkown
page readonly
clean
3389000
unkown
page read and write
clean
37FC179000
unkown
page read and write
clean
82F28FD000
unkown
page read and write
clean
2B2AD25B000
unkown
page read and write
clean
7E4000
unkown
page read and write
clean
5FAEEFE000
unkown
page read and write
clean
16EA1E29000
unkown
page read and write
clean
26619913000
unkown
page read and write
clean
2D704213000
unkown
page read and write
clean
7FF58254C000
unkown
page readonly
clean
97D3CDB000
unkown
page read and write
clean
7FF593FEE000
unkown
page readonly
clean
7FF559F09000
unkown
page readonly
clean
1CB13A00000
unkown
page readonly
clean
7FF50DE57000
unkown
page readonly
clean
7FF53A827000
unkown
page readonly
clean
5B70000
heap private
page read and write
clean
7FF502E51000
unkown
page readonly
clean
7FF5636E0000
unkown
page readonly
clean
7FF5B9C7C000
unkown
page readonly
clean
2B2AD860000
unkown
page read and write
clean
2661A002000
unkown
page read and write
clean
7FF502E73000
unkown
page readonly
clean
7FF59E0BE000
unkown
page readonly
clean
15641400000
unkown
page readonly
clean
7FF57DFB0000
unkown
page readonly
clean
2469F3A0000
unkown
page read and write
clean
7FF57E101000
unkown
page readonly
clean
2D704800000
unkown
page read and write
clean
7FF59C58A000
unkown
page readonly
clean
7FF59E0C5000
unkown
page readonly
clean
178E78A0000
unkown
page readonly
clean
752F07F000
unkown
page read and write
clean
23EA864D000
unkown
page read and write
clean
7FF502E05000
unkown
page readonly
clean
17697200000
unkown
page read and write
clean
7FF523549000
unkown
page readonly
clean
7FF5E7127000
unkown
page readonly
clean
178E5C00000
heap private
page read and write
clean
7FF559BCC000
unkown
page readonly
clean
7FF5BB5D7000
unkown
page readonly
clean
7FF51B6B5000
unkown
page readonly
clean
7FF53A95F000
unkown
page readonly
clean
7FF582330000
unkown
page readonly
clean
7D5000
unkown
page read and write
clean
7FF5230EA000
unkown
page readonly
clean
23EA88D0000
unkown
page readonly
clean
22FD9313000
unkown
page read and write
clean
7FF50DF26000
unkown
page readonly
clean
3F1E7FF000
unkown
page read and write
clean
7DD000
unkown
page read and write
clean
5309EFD000
unkown
page read and write
clean
1CB131F0000
unkown
page read and write
clean
7FF5C9C05000
unkown
page readonly
clean
2B2AD257000
unkown
page read and write
clean
338D000
unkown
page read and write
clean
2661986C000
unkown
page read and write
clean
7FF5E712A000
unkown
page readonly
clean
7FF502EA2000
unkown
page readonly
clean
7FF560350000
unkown
page readonly
clean
7FF59BE73000
unkown
page readonly
clean
7FF5636F8000
unkown
page readonly
clean
7FF5E7124000
unkown
page readonly
clean
7FF59C669000
unkown
page readonly
clean
7FF502BCA000
unkown
page readonly
clean
7DC677F000
unkown
page read and write
clean
1281D5A6000
unkown
page read and write
clean
7FF563739000
unkown
page readonly
clean
7FF59DF0F000
unkown
page readonly
clean
1E9331F0000
unkown
page readonly
clean
7FF502C1C000
unkown
page readonly
clean
23EA85A0000
unkown
page readonly
clean
B52787B000
unkown
page read and write
clean
2B2AD25A000
unkown
page read and write
clean
7FF5EDBAC000
unkown
page readonly
clean
2D7097D0000
unkown
page read and write
clean
7FF593DC9000
unkown
page readonly
clean
2CCB000
unkown
page readonly
clean
7FF5E70E5000
unkown
page readonly
clean
1E935240000
unkown
page read and write
clean
156411C0000
unkown
page read and write
clean
1E9331E0000
unkown
page read and write
clean
1F5EF7D000
unkown
page read and write
clean
7FF5233BE000
unkown
page readonly
clean
7FF51AFB1000
unkown
page readonly
clean
7FF57E240000
unkown
page readonly
clean
1CFABDA0000
heap private
page read and write
clean
2D709A60000
unkown
page readonly
clean
7FF5ED990000
unkown
page readonly
clean
29A5000
unkown
page readonly
clean
7FF5A425A000
unkown
page readonly
clean
7FF593F02000
unkown
page readonly
clean
7FF53A64E000
unkown
page readonly
clean
7FF50A355000
unkown
page readonly
clean
26619670000
heap default
page read and write
clean
23EA8590000
unkown
page readonly
clean
7FF50AC79000
unkown
page readonly
clean
7FF559F62000
unkown
page readonly
clean
7FF5EDBB7000
unkown
page readonly
clean
7FF5E6F35000
unkown
page readonly
clean
17C4FE000
unkown
page read and write
clean
640000
unkown
page read and write
clean
C2AF07B000
unkown
page read and write
clean
1CFAD9A0000
unkown
page read and write
clean
7FF53AA19000
unkown
page readonly
clean
7FF502ED5000
unkown
page readonly
clean
16ABC713000
unkown
page read and write
clean
16EA1E55000
unkown
page read and write
clean
7FF5EDAE1000
unkown
page readonly
clean
2D7054F3000
unkown
page read and write
clean
F8AE67E000
unkown
page read and write
clean
7FF502EBA000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
7FF5E71E6000
unkown
page readonly
clean
7FF559F2C000
unkown
page readonly
clean
15641030000
heap private
page read and write
clean
7FF523566000
unkown
page readonly
clean
7FF5824EA000
unkown
page readonly
clean
7FF50D945000
unkown
page readonly
clean
7FF59E115000
unkown
page readonly
clean
7FF59C607000
unkown
page readonly
clean
7FF5A4416000
unkown
page readonly
clean
2C1B000
unkown
page readonly
clean
338E000
unkown
page read and write
clean
7FF5E71FC000
unkown
page readonly
clean
1281D4E0000
unkown
page readonly
clean
7FF53A93A000
unkown
page readonly
clean
7FF53AA19000
unkown
page readonly
clean
7FF502AD5000
unkown
page readonly
clean
7FF5A43F8000
unkown
page readonly
clean
2D7095A0000
unkown
page read and write
clean
1281D530000
unkown
page read and write
clean
2469DA69000
unkown
page read and write
clean
7FF559FAE000
unkown
page readonly
clean
82F233C000
unkown
page read and write
clean
3F1E3FA000
unkown
page read and write
clean
7FF559E5E000
unkown
page readonly
clean
7FF5635AA000
unkown
page readonly
clean
530A5FF000
unkown
page read and write
clean
B292E77000
unkown
page read and write
clean
2D703FE0000
heap private
page read and write
clean
32C0000
unkown
page readonly
clean
2D709A00000
unkown
page read and write
clean
6AC0000
unkown
page read and write
clean
7FF51B71E000
unkown
page readonly
clean
1281D568000
heap default
page read and write
clean
3F1E87F000
unkown
page read and write
clean
7D8000
unkown
page read and write
clean
28DA000
unkown
page readonly
clean
2C24000
unkown
page readonly
clean
22FD72C1000
unkown
page read and write
clean
7FF59C3EF000
unkown
page readonly
clean
2469DA6E000
unkown
page read and write
clean
7FF5EDAFC000
unkown
page readonly
clean
17697790000
unkown
page readonly
clean
7FF5A43BA000
unkown
page readonly
clean
2661983C000
unkown
page read and write
clean
97D427F000
unkown
page read and write
clean
7FF59DC7A000
unkown
page readonly
clean
7FF51B4C3000
unkown
page readonly
clean
7FF50A940000
unkown
page readonly
clean
1E9332E5000
unkown
page read and write
clean
17697030000
unkown
page readonly
clean
1CB13213000
unkown
page read and write
clean
16EA1E3F000
unkown
page read and write
clean
7FF581D33000
unkown
page readonly
clean
2B2AD258000
unkown
page read and write
clean
689427D000
unkown
page read and write
clean
FFE4CFA000
unkown
page read and write
clean
17697257000
unkown
page read and write
clean
1281D584000
unkown
page read and write
clean
7FF5637E9000
unkown
page readonly
clean
2D704918000
unkown
page read and write
clean
7FF51B729000
unkown
page readonly
clean
950000
unkown
page read and write
clean
F8AE6F9000
unkown
page read and write
clean
1CB13202000
unkown
page read and write
clean
752ED7F000
unkown
page read and write
clean
2B2AD25F000
unkown
page read and write
clean
7FF5A4013000
unkown
page readonly
clean
7FF523100000
unkown
page readonly
clean
7FF59C458000
unkown
page readonly
clean
2D709A00000
unkown
page read and write
clean
17697257000
unkown
page read and write
clean
16ABC67A000
unkown
page read and write
clean
7FF5B9BCC000
unkown
page readonly
clean
176971F0000
unkown
page read and write
clean
29BA000
unkown
page readonly
clean
1281E2A0000
unkown
page readonly
clean
7FF5B9CF9000
unkown
page readonly
clean
7FF5BB70F000
unkown
page readonly
clean
1281D5E0000
unkown
page read and write
clean
7BADBFA000
unkown
page read and write
clean
96A000
heap private
page read and write
clean
7FF559E5A000
unkown
page readonly
clean
7FF51B665000
unkown
page readonly
clean
7FF502BAC000
unkown
page readonly
clean
7FF5E7182000
unkown
page readonly
clean
FFE4EFA000
unkown
page read and write
clean
7FF5A43C1000
unkown
page readonly
clean
7FF5824DA000
unkown
page readonly
clean
7FF559EC6000
unkown
page readonly
clean
2469D860000
heap default
page read and write
clean
7FF5E6F2E000
unkown
page readonly
clean
7FF52355D000
unkown
page readonly
clean
22FD9202000
unkown
page read and write
clean
2B2AD266000
unkown
page read and write
clean
7FF5ED8F0000
unkown
page readonly
clean
7FF5C9C31000
unkown
page readonly
clean
1281D4B0000
unkown
page read and write
clean
1281E290000
unkown
page read and write
clean
7FF50ABBF000
unkown
page readonly
clean
15641860000
unkown
page read and write
clean
156411C0000
unkown
page read and write
clean
7F9000
unkown
page read and write
clean
573000
unkown
page read and write
clean
7FF5E69E7000
unkown
page readonly
clean
2D70982F000
unkown
page read and write
clean
22FD72E8000
unkown
page read and write
clean
23EA8580000
heap default
page read and write
clean
7FF559F26000
unkown
page readonly
clean
B292B7B000
unkown
page read and write
clean
26619849000
unkown
page read and write
clean
7FF5636F2000
unkown
page readonly
clean
7FF59C4A7000
unkown
page readonly
clean
7FF52352E000
unkown
page readonly
clean
7FF5C9C36000
unkown
page readonly
clean
7FF56372F000
unkown
page readonly
clean
2B2AD26C000
unkown
page read and write
clean
7FF56033C000
unkown
page readonly
clean
2B2AD276000
unkown
page read and write
clean
2B2AD279000
unkown
page read and write
clean
5990000
unkown
page readonly
clean
187E4213000
unkown
page read and write
clean
3F1E2FF000
unkown
page read and write
clean
7FF502E31000
unkown
page readonly
clean
7FF5E7153000
unkown
page readonly
clean
7FF56374D000
unkown
page readonly
clean
2C20000
unkown
page readonly
clean
156411C0000
unkown
page read and write
clean
7FF5A4459000
unkown
page readonly
clean
2D709AE0000
unkown
page readonly
clean
2B2AD100000
heap default
page read and write
clean
1AC46D02000
unkown
page read and write
clean
530A0FF000
unkown
page read and write
clean
7FF5E6FE0000
unkown
page readonly
clean
7FF5636F6000
unkown
page readonly
clean
3617000
heap private
page read and write
clean
178E5E00000
unkown
page read and write
clean
7FF5B9C90000
unkown
page readonly
clean
16ABCE02000
unkown
page read and write
clean
3240000
unkown
page readonly
clean
7BADDFB000
unkown
page read and write
clean
7FF5E714C000
unkown
page readonly
clean
7FF5BB6D8000
unkown
page readonly
clean
752ECFB000
unkown
page read and write
clean
1281D62D000
unkown
page read and write
clean
2B2AD245000
unkown
page read and write
clean
3F1E57A000
unkown
page read and write
clean
7DA000
unkown
page read and write
clean
2469DA69000
unkown
page read and write
clean
2B2AD261000
unkown
page read and write
clean
1AC46C29000
unkown
page read and write
clean
1CFAC102000
unkown
page read and write
clean
7FF5825BE000
unkown
page readonly
clean
7FF5A4497000
unkown
page readonly
clean
7DC657C000
unkown
page read and write
clean
7FF50ABE6000
unkown
page readonly
clean
752EDF9000
unkown
page read and write
clean
2D7054F0000
unkown
page read and write
clean
7FF502E90000
unkown
page readonly
clean
16EA1D40000
unkown
page write copy
clean
2B2AD260000
unkown
page read and write
clean
7FF5EDC21000
unkown
page readonly
clean
2D709A00000
unkown
page read and write
clean
7FF50AC6E000
unkown
page readonly
clean
7FF53AA10000
unkown
page readonly
clean
C1FFBFE000
unkown
page read and write
clean
22FD731A000
unkown
page read and write
clean
F8AE3C9000
unkown
page read and write
clean
16ABC560000
unkown
page readonly
clean
2D704900000
unkown
page read and write
clean
7FF5A442A000
unkown
page readonly
clean
7FF52356C000
unkown
page readonly
clean
1EB0C868000
unkown
page read and write
clean
7FF5E7186000
unkown
page readonly
clean
1F302260000
unkown
page readonly
clean
2C16000
unkown
page readonly
clean
361A000
heap private
page read and write
clean
7FF5602DA000
unkown
page readonly
clean
5FAEB7B000
unkown
page read and write
clean
7FF51B595000
unkown
page readonly
clean
7FF560345000
unkown
page readonly
clean
22FD7200000
unkown
page read and write
clean
7BADF7D000
unkown
page read and write
clean
C2AF279000
unkown
page read and write
clean
22FD76D0000
unkown
page readonly
clean
7FF59DF78000
unkown
page readonly
clean
16ABC65A000
unkown
page read and write
clean
7FF582536000
unkown
page readonly
clean
7FF593EDC000
unkown
page readonly
clean
7FF5BB74C000
unkown
page readonly
clean
16ABC8D0000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
3250000
unkown
page readonly
clean
329E000
unkown
page read and write
clean
7FF5C9C19000
unkown
page readonly
clean
7FF502620000
unkown
page readonly
clean
16ABC580000
unkown
page read and write
clean
5A8F000
unkown
page read and write
clean
C1FF6AB000
unkown
page read and write
clean
2D704959000
unkown
page read and write
clean
178E5E58000
unkown
page read and write
clean
7FF5B9C94000
unkown
page readonly
clean
7FF5E6F27000
unkown
page readonly
clean
7FF53A986000
unkown
page readonly
clean
7FF5E71C9000
unkown
page readonly
clean
15641202000
unkown
page read and write
clean
7FF5A423C000
unkown
page readonly
clean
1F302130000
heap default
page read and write
clean
17697110000
unkown
page readonly
clean
336A000
heap default
page read and write
clean
1E9332AE000
unkown
page read and write
clean
1281D870000
unkown
page readonly
clean
1281D60C000
unkown
page read and write
clean
187E4302000
unkown
page read and write
clean
2B2AD27D000
unkown
page read and write
clean
17697275000
unkown
page read and write
clean
17698BE0000
unkown
page readonly
clean
2D7098B8000
unkown
page read and write
clean
7FF5A4313000
unkown
page readonly
clean
7FF502F8E000
unkown
page readonly
clean
1AC46B30000
unkown
page readonly
clean
1281D62B000
unkown
page read and write
clean
7FF582237000
unkown
page readonly
clean
1EB0C730000
unkown
page readonly
clean
22FD9302000
unkown
page read and write
clean
2469DA69000
unkown
page read and write
clean
7FF56375C000
unkown
page readonly
clean
2D70984F000
unkown
page read and write
clean
23EA8700000
unkown
page read and write
clean
2A76000
unkown
page readonly
clean
7FF59C560000
unkown
page readonly
clean
7FF50267E000
unkown
page readonly
clean
2469DB13000
unkown
page read and write
clean
29C6000
unkown
page readonly
clean
17699140000
unkown
page write copy
clean
7FF5823D7000
unkown
page readonly
clean
17697329000
unkown
page read and write
clean
2C02000
unkown
page readonly
clean
2D704040000
heap default
page read and write
clean
82F277D000
unkown
page read and write
clean
7FF593CB5000
unkown
page readonly
clean
17697256000
unkown
page read and write
clean
29E7000
unkown
page readonly
clean
FFE4FFB000
unkown
page read and write
clean
7FF53A922000
unkown
page readonly
clean
7FF56338D000
unkown
page readonly
clean
1CB13100000
unkown
page readonly
clean
22245200000
unkown
page readonly
clean
2B2AD242000
unkown
page read and write
clean
B292F7E000
unkown
page read and write
clean
1F303EC0000
heap private
page read and write
clean
17698C02000
unkown
page read and write
clean
7FF582557000
unkown
page readonly
clean
2B2AD26A000
unkown
page read and write
clean
7FF563675000
unkown
page readonly
clean
1281D5B6000
unkown
page read and write
clean
7FF5B99C0000
unkown
page readonly
clean
7FF5E70EC000
unkown
page readonly
clean
7FF50DC65000
unkown
page readonly
clean
7FF559E64000
unkown
page readonly
clean
7FF502B68000
unkown
page readonly
clean
7FF50AA87000
unkown
page readonly
clean
1CB1323C000
unkown
page read and write
clean
28C5000
unkown
page readonly
clean
2D709780000
unkown
page readonly
clean
2A84000
unkown
page readonly
clean
16EA1E00000
unkown
page read and write
clean
530A1FD000
unkown
page read and write
clean
23EA9340000
unkown
page readonly
clean
419537C000
unkown
page read and write
clean
22244FE0000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
7A0000
unkown
page read and write
clean
7FF523585000
unkown
page readonly
clean
7FF59364F000
unkown
page readonly
clean
7FF53A830000
unkown
page readonly
clean
7FF5ED305000
unkown
page readonly
clean
2CE8000
unkown
page readonly
clean
7FF53A582000
unkown
page readonly
clean
178E5E13000
unkown
page read and write
clean
7FF502ECE000
unkown
page readonly
clean
22FD71B0000
unkown
page write copy
clean
7FF58252D000
unkown
page readonly
clean
2D7098AD000
unkown
page read and write
clean
7FF53A94E000
unkown
page readonly
clean
7FF59DFC7000
unkown
page readonly
clean
22FDA013000
unkown
page read and write
clean
7FF563321000
unkown
page readonly
clean
17697213000
unkown
page read and write
clean
15641224000
unkown
page read and write
clean
7FF5A4317000
unkown
page readonly
clean
7FF5C9CC9000
unkown
page readonly
clean
35D0000
heap private
page read and write
clean
15641200000
unkown
page read and write
clean
7FF502E0C000
unkown
page readonly
clean
23EA9000000
unkown
page readonly
clean
7FF59C5EC000
unkown
page readonly
clean
7FF59E0AA000
unkown
page readonly
clean
7FF5A4445000
unkown
page readonly
clean
97D457F000
unkown
page read and write
clean
2D709842000
unkown
page read and write
clean
7FF50DDB7000
unkown
page readonly
clean
1281D5E0000
unkown
page read and write
clean
3320000
unkown
page readonly
clean
7FF50A8E3000
unkown
page readonly
clean
7FF5A4270000
unkown
page readonly
clean
2661984F000
unkown
page read and write
clean
7FF5A43E7000
unkown
page readonly
clean
7DC62FC000
unkown
page read and write
clean
97D3D5E000
unkown
page read and write
clean
7FF50DECA000
unkown
page readonly
clean
7FF59E092000
unkown
page readonly
clean
7FF53A666000
unkown
page readonly
clean
37FBDBB000
unkown
page read and write
clean
2D704050000
unkown
page readonly
clean
7FF5C9A4F000
unkown
page readonly
clean
7DE000
unkown
page read and write
clean
16ABC5A0000
unkown
page readonly
clean
17697247000
unkown
page read and write
clean
3385000
unkown
page read and write
clean
7FF59C15A000
unkown
page readonly
clean
22FD90F0000
unkown
page read and write
clean
8EF000
unkown
page read and write
clean
1CFAC002000
unkown
page read and write
clean
7FF593FF1000
unkown
page readonly
clean
22244FF0000
unkown
page readonly
clean
7BADB7E000
unkown
page read and write
clean
2CC0000
unkown
page readonly
clean
29E2000
unkown
page readonly
clean
7FF50DEB2000
unkown
page readonly
clean
1AC46A50000
heap default
page read and write
clean
7FF5235F1000
unkown
page readonly
clean
7FF582290000
unkown
page readonly
clean
7FF57E17E000
unkown
page readonly
clean
1E933313000
unkown
page read and write
clean
5B74000
heap private
page read and write
clean
7FF502F99000
unkown
page readonly
clean
2D709774000
unkown
page readonly
clean
7FF57E1BC000
unkown
page readonly
clean
7FF50DF40000
unkown
page readonly
clean
2B2AD24D000
unkown
page read and write
clean
7FF5B9467000
unkown
page readonly
clean
7FF593F3F000
unkown
page readonly
clean
17C5F9000
unkown
page read and write
clean
7FF5B9C6C000
unkown
page readonly
clean
7FF52351A000
unkown
page readonly
clean
1E933278000
unkown
page read and write
clean
7FF57E23E000
unkown
page readonly
clean
7BADFFF000
unkown
page read and write
clean
7FF523502000
unkown
page readonly
clean
32A0000
unkown
page read and write
clean
7FF560357000
unkown
page readonly
clean
2D7096D0000
unkown
page read and write
clean
29D0000
unkown
page readonly
clean
7FF5233E8000
unkown
page readonly
clean
7FF50A9E0000
unkown
page readonly
clean
660000
heap default
page read and write
clean
22FD71A0000
heap default
page read and write
clean
7FF51B537000
unkown
page readonly
clean
7FF5B9BA7000
unkown
page readonly
clean
7FF5C9880000
unkown
page readonly
clean
7FF50D949000
unkown
page readonly
clean
5309DFB000
unkown
page read and write
clean
7FF59C5CD000
unkown
page readonly
clean
2F7A000
unkown
page read and write
clean
1281D5AD000
unkown
page read and write
clean
2A70000
unkown
page readonly
clean
7FF502BA6000
unkown
page readonly
clean
7FF502CCC000
unkown
page readonly
clean
1281DCD0000
unkown
page readonly
clean
23EA8613000
unkown
page read and write
clean
7FF53A955000
unkown
page readonly
clean
7FF5230F0000
unkown
page readonly
clean
C2AF3FD000
unkown
page read and write
clean
7FF502F37000
unkown
page readonly
clean
2D704F70000
unkown
page readonly
clean
7FF5BB760000
unkown
page readonly
clean
7FF57E249000
unkown
page readonly
clean
1281E2B0000
unkown
page read and write
clean
2D709800000
unkown
page read and write
clean
752F17F000
unkown
page read and write
clean
2469DB00000
unkown
page read and write
clean
1CB13200000
unkown
page read and write
clean
1E9332B2000
unkown
page read and write
clean
7FF5A4402000
unkown
page readonly
clean
7FF5234F2000
unkown
page readonly
clean
3F1E479000
unkown
page read and write
clean
2469D870000
unkown
page readonly
clean
7FF59C5AF000
unkown
page readonly
clean
2B2AD244000
unkown
page read and write
clean
1281D660000
unkown
page read and write
clean
1AC46C88000
unkown
page read and write
clean
7FF5E6FB8000
unkown
page readonly
clean
7FF5BAFD5000
unkown
page readonly
clean
7FF59C38A000
unkown
page readonly
clean
1EB0C802000
unkown
page read and write
clean
7FF502C47000
unkown
page readonly
clean
2B2AD23D000
unkown
page read and write
clean
7FF5634A5000
unkown
page readonly
clean
7FF5BB530000
unkown
page readonly
clean
1F302110000
unkown
page readonly
clean
7DC5FFC000
unkown
page read and write
clean
16ABC550000
heap default
page read and write
clean
97D3DDE000
unkown
page read and write
clean
2B2AD283000
unkown
page read and write
clean
7FF5A448C000
unkown
page readonly
clean
7FF56376C000
unkown
page readonly
clean
2BF1000
unkown
page readonly
clean
7FF502CD8000
unkown
page readonly
clean
1281D520000
unkown
page read and write
clean
7FF5E6F40000
unkown
page readonly
clean
7FF5E6D83000
unkown
page readonly
clean
7FF593ECA000
unkown
page readonly
clean
2D7097AC000
unkown
page readonly
clean
7FF53A912000
unkown
page readonly
clean
2D7097A8000
unkown
page write copy
clean
22FD9110000
heap private
page read and write
clean
6893DAA000
unkown
page read and write
clean
7FF5BB5D3000
unkown
page readonly
clean
7FF59DFC1000
unkown
page readonly
clean
F8AE34F000
unkown
page read and write
clean
2877000
unkown
page readonly
clean
7FF593EF0000
unkown
page readonly
clean
7FF57E152000
unkown
page readonly
clean
1AC46CCB000
unkown
page read and write
clean
670000
unkown
page readonly
clean
5B80000
unkown
page readonly
clean
17697263000
unkown
page read and write
clean
7FF593F7C000
unkown
page readonly
clean
2469DA29000
unkown
page read and write
clean
7FF50ABC9000
unkown
page readonly
clean
7FF57E1D5000
unkown
page readonly
clean
7FF5C9C3C000
unkown
page readonly
clean
7FF502E7C000
unkown
page readonly
clean
176971F0000
unkown
page read and write
clean
7FF5B9C97000
unkown
page readonly
clean
7FF5BB485000
unkown
page readonly
clean
7FF5B9CEE000
unkown
page readonly
clean
7FF57E12C000
unkown
page readonly
clean
7FF57E1E4000
unkown
page readonly
clean
1E933200000
unkown
page read and write
clean
7FF5BB73C000
unkown
page readonly
clean
7FF5E7168000
unkown
page readonly
clean
204D37E000
unkown
page read and write
clean
7FF5EDBC4000
unkown
page readonly
clean
2469DA56000
unkown
page read and write
clean
7FF5EDA37000
unkown
page readonly
clean
16ABC629000
unkown
page read and write
clean
419507F000
unkown
page read and write
clean
7FF582233000
unkown
page readonly
clean
7FF502C4E000
unkown
page readonly
clean
7FF5B9C2E000
unkown
page readonly
clean
1EB0C868000
unkown
page read and write
clean
7FF5BB72D000
unkown
page readonly
clean
7FF58249A000
unkown
page readonly
clean
2708000
unkown
page readonly
clean
7FF593F66000
unkown
page readonly
clean
2BF5000
unkown
page readonly
clean
7FF5A44A7000
unkown
page readonly
clean
C2AF179000
unkown
page read and write
clean
B29307F000
unkown
page read and write
clean
16EA3870000
unkown
page read and write
clean
4DC0000
unkown
page readonly
clean
2D709876000
unkown
page read and write
clean
1281D585000
unkown
page read and write
clean
7FF502F01000
unkown
page readonly
clean
7FF5BB719000
unkown
page readonly
clean
7FF53A7B8000
unkown
page readonly
clean
7FF59C43A000
unkown
page readonly
clean
7FF59E0D9000
unkown
page readonly
clean
2D704902000
unkown
page read and write
clean
7FF5BB490000
unkown
page readonly
clean
FFE487B000
unkown
page read and write
clean
7FF51AECF000
unkown
page readonly
clean
1F303B30000
heap private
page read and write
clean
22FD7400000
unkown
page readonly
clean
17697170000
unkown
page read and write
clean
1EB0C6E0000
unkown
page write copy
clean
187E4190000
heap private
page read and write
clean
2C53000
unkown
page readonly
clean
7FF50A351000
unkown
page readonly
clean
7FF5B9C3F000
unkown
page readonly
clean
26619800000
unkown
page read and write
clean
16EA1D90000
unkown
page readonly
clean
7FF5602EE000
unkown
page readonly
clean
7FF5A4418000
unkown
page readonly
clean
1281E310000
unkown
page read and write
clean
7FF59C578000
unkown
page readonly
clean
7FF5BB6D2000
unkown
page readonly
clean
1CB13313000
unkown
page read and write
clean
2C7A000
unkown
page readonly
clean
7FF559EF5000
unkown
page readonly
clean
1E933070000
heap default
page read and write
clean
22FD7140000
heap private
page read and write
clean
29C1000
unkown
page readonly
clean
7FF57DE18000
unkown
page readonly
clean
35D4000
heap private
page read and write
clean
7FF57E1AD000
unkown
page readonly
clean
3DB000
unkown
page read and write
clean
7FF5E71E1000
unkown
page readonly
clean
23EA8600000
unkown
page read and write
clean
1E935270000
unkown
page readonly
clean
1281D60D000
unkown
page read and write
clean
7B0000
heap default
page read and write
clean
7FF593CAE000
unkown
page readonly
clean
22FD9357000
unkown
page read and write
clean
5FAEFFE000
unkown
page read and write
clean
1AC46B80000
unkown
page readonly
clean
1EB0E1A0000
unkown
page read and write
clean
7FF5BB424000
unkown
page readonly
clean
2B2AD23E000
unkown
page read and write
clean
1281D530000
unkown
page read and write
clean
7FF5602C6000
unkown
page readonly
clean
1EB0C800000
unkown
page read and write
clean
7FF52346C000
unkown
page readonly
clean
22FD9400000
unkown
page readonly
clean
7FF502B9D000
unkown
page readonly
clean
7FF59E0ED000
unkown
page readonly
clean
1EB0C868000
unkown
page read and write
clean
7FF5A43E3000
unkown
page readonly
clean
689407F000
unkown
page read and write
clean
1E93335C000
unkown
page read and write
clean
7FF59E080000
unkown
page readonly
clean
7FF5BB7C9000
unkown
page readonly
clean
1CFABE10000
unkown
page readonly
clean
419547C000
unkown
page read and write
clean
16ABC602000
unkown
page read and write
clean
7FF57E1E7000
unkown
page readonly
clean
7FF59C562000
unkown
page readonly
clean
3620000
unkown
page readonly
clean
7FF559FB9000
unkown
page readonly
clean
17698E00000
unkown
page readonly
clean
2CC6000
unkown
page readonly
clean
7FF5B9A60000
unkown
page readonly
clean
7FF53A969000
unkown
page readonly
clean
1281D5AD000
unkown
page read and write
clean
7FF502F90000
unkown
page readonly
clean
2D70423F000
unkown
page read and write
clean
7FF59C5DC000
unkown
page readonly
clean
7FF581D37000
unkown
page readonly
clean
7FF5C9883000
unkown
page readonly
clean
7FF5B9C5D000
unkown
page readonly
clean
7FF593F06000
unkown
page readonly
clean
7FF582564000
unkown
page readonly
clean
17697140000
unkown
page read and write
clean
2B2AD1F0000
unkown
page readonly
clean
1CFAC054000
unkown
page read and write
clean
2A15000
unkown
page readonly
clean
23EA8708000
unkown
page read and write
clean
16ABC570000
unkown
page readonly
clean
7FF5E7188000
unkown
page readonly
clean
2469DA69000
unkown
page read and write
clean
2D7042A0000
unkown
page read and write
clean
1E93511E000
unkown
page read and write
clean
1F302250000
heap private
page read and write
clean
7FF53A9A5000
unkown
page readonly
clean
7FF50DFA9000
unkown
page readonly
clean
7FF59E120000
unkown
page readonly
clean
2C42000
unkown
page readonly
clean
7FF5B9C35000
unkown
page readonly
clean
7FF593F2E000
unkown
page readonly
clean
5FAECFE000
unkown
page read and write
clean
356E000
unkown
page read and write
clean
1F302340000
unkown
page readonly
clean
1E933229000
unkown
page read and write
clean
29F0000
unkown
page readonly
clean
1CFADAA0000
unkown
page readonly
clean
FFE55FA000
unkown
page read and write
clean
7BADCFF000
unkown
page read and write
clean
26619855000
unkown
page read and write
clean
7FF50DD10000
unkown
page readonly
clean
1E935100000
unkown
page read and write
clean
7FF5E6EE7000
unkown
page readonly
clean
2A10000
unkown
page readonly
clean
1E935123000
unkown
page read and write
clean
22245100000
unkown
page read and write
clean
1F30216A000
heap default
page read and write
clean
1AC47402000
unkown
page read and write
clean
7FF5E715C000
unkown
page readonly
clean
2D704958000
unkown
page read and write
clean
2B2AD22A000
unkown
page read and write
clean
1EB0C83F000
unkown
page read and write
clean
7FF5BB746000
unkown
page readonly
clean
7FF5E6FCA000
unkown
page readonly
clean
1E933255000
unkown
page read and write
clean
3F1E4FF000
unkown
page read and write
clean
2C0A000
unkown
page readonly
clean
B292D7E000
unkown
page read and write
clean
7FF5EDB38000
unkown
page readonly
clean
26619760000
unkown
page readonly
clean
1EB0C813000
unkown
page read and write
clean
3F1E779000
unkown
page read and write
clean
7FF5EDBC0000
unkown
page readonly
clean
22FD9170000
unkown
page read and write
clean
2D7096E0000
unkown
page read and write
clean
7FF59DDC0000
unkown
page readonly
clean
7FF58247A000
unkown
page readonly
clean
7FF59DF93000
unkown
page readonly
clean
22FD7240000
unkown
page read and write
clean
2B2AD23A000
unkown
page read and write
clean
7FF5E7214000
unkown
page readonly
clean
15641790000
unkown
page readonly
clean
15641302000
unkown
page read and write
clean
900000
unkown
page readonly
clean
7FF59DF4E000
unkown
page readonly
clean
2661984D000
unkown
page read and write
clean
2958000
unkown
page readonly
clean
23EA8702000
unkown
page read and write
clean
22244FD0000
heap default
page read and write
clean
7FF5BB7BE000
unkown
page readonly
clean
7FF59E189000
unkown
page readonly
clean
7FF593F85000
unkown
page readonly
clean
1CB13229000
unkown
page read and write
clean
7FF5B9C06000
unkown
page readonly
clean
7FF53A79F000
unkown
page readonly
clean
7FF59C576000
unkown
page readonly
clean
3F1E67F000
unkown
page read and write
clean
1281D62D000
unkown
page read and write
clean
B292A7C000
unkown
page read and write
clean
2D7042BC000
unkown
page read and write
clean
16EA20D0000
unkown
page readonly
clean
7FF5B9B03000
unkown
page readonly
clean
1E935280000
unkown
page readonly
clean
1281D61B000
unkown
page read and write
clean
1E935230000
unkown
page readonly
clean
7D1000
unkown
page read and write
clean
7FF57DE7E000
unkown
page readonly
clean
7FF5E7111000
unkown
page readonly
clean
7FF51B69C000
unkown
page readonly
clean
2883000
unkown
page readonly
clean
7FF5EDB4A000
unkown
page readonly
clean
7FF5BB6EA000
unkown
page readonly
clean
2D709889000
unkown
page read and write
clean
7FF5C9C64000
unkown
page readonly
clean
7FF57E185000
unkown
page readonly
clean
7FF5E7172000
unkown
page readonly
clean
7FF593EE8000
unkown
page readonly
clean
15641090000
heap default
page read and write
clean
1CFAC03F000
unkown
page read and write
clean
7FF5EDC29000
unkown
page readonly
clean
2D7098B2000
unkown
page read and write
clean
22FD7229000
unkown
page read and write
clean
29D4000
unkown
page readonly
clean
7FF5A4509000
unkown
page readonly
clean
22FD8CA0000
unkown
page read and write
clean
7FF5A437C000
unkown
page readonly
clean
2A03000
unkown
page readonly
clean
FFE53FF000
unkown
page read and write
clean
7FF559F21000
unkown
page readonly
clean
1CB131E0000
unkown
page readonly
clean
7FF51B553000
unkown
page readonly
clean
7FF50DF1C000
unkown
page readonly
clean
7FF502F34000
unkown
page readonly
clean
3F1E27B000
unkown
page read and write
clean
7FF593F90000
unkown
page readonly
clean
7FF502E47000
unkown
page readonly
clean
7FF5EDB5E000
unkown
page readonly
clean
7FF5636D4000
unkown
page readonly
clean
7FF59C47D000
unkown
page readonly
clean
1CB13286000
unkown
page read and write
clean
2224507B000
unkown
page read and write
clean
2B2AD241000
unkown
page read and write
clean
331F000
unkown
page read and write
clean
187E4400000
unkown
page readonly
clean
7FF5A43A1000
unkown
page readonly
clean
2D7096C0000
unkown
page read and write
clean
7FF582481000
unkown
page readonly
clean
7FF51B729000
unkown
page readonly
clean
2CE0000
unkown
page readonly
clean
7FF502B27000
unkown
page readonly
clean
1E9331A0000
unkown
page readonly
clean
3220000
unkown
page read and write
clean
1F3020D0000
unkown
page read and write
clean
1281D5B6000
unkown
page read and write
clean
1AC46D13000
unkown
page read and write
clean
970000
unkown
page readonly
clean
7FF59C5B9000
unkown
page readonly
clean
7FF5BB7C9000
unkown
page readonly
clean
7FF59BE79000
unkown
page readonly
clean
26619813000
unkown
page read and write
clean
1F5ECFE000
unkown
page read and write
clean
2D705500000
unkown
page read and write
clean
22FD74D0000
unkown
page readonly
clean
7FF59C572000
unkown
page readonly
clean
37FC07E000
unkown
page read and write
clean
22245000000
unkown
page read and write
clean
94E000
unkown
page read and write
clean
3F1E6FC000
unkown
page read and write
clean
7FF5A44A4000
unkown
page readonly
clean
7FF50AB4A000
unkown
page readonly
clean
7FF50AC79000
unkown
page readonly
clean
22245113000
unkown
page read and write
clean
7FF593F76000
unkown
page readonly
clean
16ABC702000
unkown
page read and write
clean
7FF59E082000
unkown
page readonly
clean
7FF50A8E7000
unkown
page readonly
clean
1E934BA0000
unkown
page read and write
clean
187E4241000
unkown
page read and write
clean
2B2AD248000
unkown
page read and write
clean
176971F0000
unkown
page read and write
clean
7FF5A4375000
unkown
page readonly
clean
7FF50AC14000
unkown
page readonly
clean
7FF5027D5000
unkown
page readonly
clean
1EB0C610000
unkown
page readonly
clean
2D7096C4000
unkown
page read and write
clean
7FF563513000
unkown
page readonly
clean
187E4200000
unkown
page read and write
clean
53099EC000
unkown
page read and write
clean
7FF502C55000
unkown
page readonly
clean
2A98000
unkown
page readonly
clean
7FF51B59C000
unkown
page readonly
clean
7FF5825C9000
unkown
page readonly
clean
2D7050B0000
unkown
page read and write
clean
23EA8655000
unkown
page read and write
clean
7FF50AA68000
unkown
page readonly
clean
7FF5E7083000
unkown
page readonly
clean
2D704FB0000
unkown
page readonly
clean
7FF50DC70000
unkown
page readonly
clean
2B2AD200000
unkown
page read and write
clean
7FF5A4501000
unkown
page readonly
clean
6A00000
unkown
page read and write
clean
7FF57DD81000
unkown
page readonly
clean
7FF593BC8000
unkown
page readonly
clean
2469D800000
heap private
page read and write
clean
7FF5C9C67000
unkown
page readonly
clean
7FF50A935000
unkown
page readonly
clean
1CFABEE0000
unkown
page write copy
clean
752F1FF000
unkown
page read and write
clean
7FF5E711A000
unkown
page readonly
clean
156410A0000
unkown
page readonly
clean
187E5DE0000
unkown
page readonly
clean
22FD72C5000
unkown
page read and write
clean
16ABC4F0000
heap private
page read and write
clean
7FF50DE7C000
unkown
page readonly
clean
7FF50DF47000
unkown
page readonly
clean
187E41F0000
heap default
page read and write
clean
7FF5B9954000
unkown
page readonly
clean
108C000
unkown
page readonly
clean
7FF502CBB000
unkown
page readonly
clean
7FF50ABF6000
unkown
page readonly
clean
17696FC0000
heap private
page read and write
clean
7FF5EDAD7000
unkown
page readonly
clean
7FF58253C000
unkown
page readonly
clean
22FD9354000
unkown
page read and write
clean
1E9332BD000
unkown
page read and write
clean
7FF5235EE000
unkown
page readonly
clean
16ABC600000
unkown
page read and write
clean
7FF5EDA18000
unkown
page readonly
clean
C60000
unkown
page read and write
clean
7FF593F6C000
unkown
page readonly
clean
178E6000000
unkown
page readonly
clean
7FF559EB2000
unkown
page readonly
clean
178E5C60000
heap default
page read and write
clean
37FC27F000
unkown
page read and write
clean
2B21000
unkown
page readonly
clean
7FF59E189000
unkown
page readonly
clean
7FF51B638000
unkown
page readonly
clean
7FF5C9C4C000
unkown
page readonly
clean
There are 1790 hidden memdumps, click here to show them.