IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Documents_13134976_1377491379.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\rtdsgfe[1].dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
downloaded
malicious
C:\Users\user\AppData\Local\Temp\L3YD7CE.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
malicious
C:\Users\user\Desktop\~$Documents_13134976_1377491379.xlsb
data
dropped
malicious
C:\Users\user\iepfusn.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 60080 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
modified
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\2CA63FBD-E4D0-4324-9237-CB578953FC60
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2FDD9604.png
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3DB5784F.png
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5E6A3635.png
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\682ADEB2.png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\86406406.png
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\18720000
data
dropped
clean
There are 4 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 -s ..\iepfusn.dll
malicious
C:\Windows\System32\regsvr32.exe
-s ..\iepfusn.dll
malicious
C:\Windows\System32\cmd.exe
cmd /c ping 8.8.7.7 -n 2 & start C:\Windows\system32\regsvr32.exe -s C:\Users\user\iepfusn.dll RV0KR
malicious
C:\Windows\System32\PING.EXE
ping 8.8.7.7 -n 2
malicious
C:\Windows\System32\regsvr32.exe
C:\Windows\system32\regsvr32.exe -s C:\Users\user\iepfusn.dll RV0KR
malicious
C:\Windows\System32\cmd.exe
cmd /c ping 8.8.7.7 -n 2 & start C:\Windows\system32\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll N8DG
malicious
C:\Windows\System32\PING.EXE
ping 8.8.7.7 -n 2
malicious
C:\Windows\System32\regsvr32.exe
C:\Windows\system32\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll N8DG
malicious
C:\Windows\System32\cmd.exe
cmd /c ping 8.8.7.7 -n 2 & start C:\Windows\system32\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll VE50DB
malicious
C:\Windows\System32\PING.EXE
ping 8.8.7.7 -n 2
malicious
C:\Windows\System32\regsvr32.exe
'C:\Windows\system32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll VE50DB
malicious
C:\Windows\System32\regsvr32.exe
C:\Windows\system32\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll VE50DB
malicious
C:\Windows\System32\regsvr32.exe
'C:\Windows\system32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\L3YD7CE.dll VE50DB
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
There are 7 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://18.117.84.120/18.188.86.8/
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://18.117.84.120/#
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://18.188.86.8/kenichi/special21new/trailer2a5
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://18.117.84.120/
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://18.117.84.120/kenichi/special21new/trailer2a5T0
unknown
clean
https://18.117.84.120/89b
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://18.188.86.8/Z
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://18.117.84.120/kenichi/special21new/trailer2a5
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://18.188.86.8:443/kenichi/special21new/trailer2a55
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
tpfcu.com
107.180.50.232
clean

IPs

IP
Domain
Country
Malicious
18.117.84.120
unknown
United States
malicious
8.8.7.7
unknown
United States
clean
192.168.2.1
unknown
unknown
clean
107.180.50.232
tpfcu.com
United States
clean

Registry

Path
Value
Malicious
C:\Windows\System32\regsvr32.exe
FX11S05YSR
malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
j;
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
!j;
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
26EAF
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
274BA
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
2774A
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
278A2
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
=};
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
There are 50 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF532F80000
unkown
page readonly
clean
7FF5492E1000
unkown
page readonly
clean
2A50000
unkown
page read and write
clean
181C5D55000
unkown
page read and write
clean
7FF598677000
unkown
page readonly
clean
7FF57FF79000
unkown
page readonly
clean
7FF593534000
unkown
page readonly
clean
385E0FF000
unkown
page read and write
clean
A00000
unkown
page readonly
clean
1E226156000
unkown
page read and write
clean
181C54FB000
unkown
page read and write
clean
7FF549467000
unkown
page readonly
clean
2E60000
unkown
page readonly
clean
1E226100000
unkown
page read and write
clean
7FF57FFDD000
unkown
page readonly
clean
1E22616E000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
7FF549457000
unkown
page readonly
clean
60D000
heap default
page read and write
clean
1E227410000
unkown
page read and write
clean
7FF57CB43000
unkown
page readonly
clean
F90000
unkown
page readonly
clean
7FF593781000
unkown
page readonly
clean
7FF57CB87000
unkown
page readonly
clean
1E509CD0000
unkown
page readonly
clean
7FF5AC647000
unkown
page readonly
clean
A78000
heap default
page read and write
clean
FF0000
heap default
page read and write
clean
7FF5ABDCE000
unkown
page readonly
clean
76A000
unkown
page read and write
clean
1E7BC917000
heap default
page read and write
clean
181C5D64000
unkown
page read and write
clean
7FF576329000
unkown
page readonly
clean
7FF5936F6000
unkown
page readonly
clean
7FF598655000
unkown
page readonly
clean
181C5D51000
unkown
page read and write
clean
7FF5B971F000
unkown
page readonly
clean
D20000
unkown
page readonly
clean
7FF548FAD000
unkown
page readonly
clean
7FF5984CF000
unkown
page readonly
clean
1CBDD04B000
unkown
page read and write
clean
1E226250000
unkown
page readonly
clean
21AD3E0D000
unkown
page read and write
clean
7FF57CBFB000
unkown
page readonly
clean
181C5DA3000
unkown
page read and write
clean
2BD1000
unkown
page readonly
clean
7FF593784000
unkown
page readonly
clean
1FBBD050000
unkown
page readonly
clean
A10000
unkown
page readonly
clean
7FF5A39E8000
unkown
page readonly
clean
1E50F140000
unkown
page readonly
clean
1E22432F000
unkown
page read and write
clean
181C5D97000
unkown
page read and write
clean
7FF548E70000
unkown
page readonly
clean
7FF512284000
unkown
page readonly
clean
AA7000
unkown
page read and write
clean
7FF5B987F000
unkown
page readonly
clean
7FF5763D7000
unkown
page readonly
clean
29E0000
unkown
page read and write
clean
7FF5B9977000
unkown
page readonly
clean
7FF533108000
unkown
page readonly
clean
1E226128000
unkown
page read and write
clean
7FF548F6F000
unkown
page readonly
clean
2C3D000
unkown
page readonly
clean
7FF57FF37000
unkown
page readonly
clean
1E509A58000
unkown
page read and write
clean
510000
unkown
page readonly
clean
1E50F2B0000
unkown
page read and write
clean
7FF5763AA000
unkown
page readonly
clean
7FF54903A000
unkown
page readonly
clean
1E2242D2000
unkown
page read and write
clean
7FF5B97F5000
unkown
page readonly
clean
7FF5AC4E4000
unkown
page readonly
clean
2DC0000
heap private
page read and write
clean
7FF57FED1000
unkown
page readonly
clean
A73000
heap default
page read and write
clean
7FF593302000
unkown
page readonly
clean
7FF51B5A4000
unkown
page readonly
clean
7FF5CA0A7000
unkown
page readonly
clean
1E509A2A000
unkown
page read and write
clean
1E50A1D0000
unkown
page read and write
clean
7FF57C95F000
unkown
page readonly
clean
C03131E000
unkown
page read and write
clean
1E50F0D8000
unkown
page write copy
clean
1E224241000
unkown
page read and write
clean
7FF532DDA000
unkown
page readonly
clean
12F0000
heap default
page read and write
clean
2A51000
unkown
page read and write
clean
440000
unkown
page read and write
clean
BE0000
unkown
page read and write
clean
1E50A501000
unkown
page read and write
clean
231D4613000
unkown
page read and write
clean
1E2242FE000
unkown
page read and write
clean
231D4717000
unkown
page read and write
clean
7FF57CC37000
unkown
page readonly
clean
4C730FF000
unkown
page read and write
clean
10E0000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
7FF5B964F000
unkown
page readonly
clean
7FF575FA6000
unkown
page readonly
clean
11868A55000
unkown
page read and write
clean
7FF5A3CD5000
unkown
page readonly
clean
FE7000
unkown
page execute and read and write
clean
7FF5937C3000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
7FF5122E4000
unkown
page readonly
clean
7FF5331F4000
unkown
page readonly
clean
12E4000
unkown
page execute and read and write
clean
7FF5AC636000
unkown
page readonly
clean
1E2241B0000
unkown
page read and write
clean
4C7337F000
unkown
page read and write
clean
1E50F001000
unkown
page read and write
clean
7FF5120E3000
unkown
page readonly
clean
7FF57CC26000
unkown
page readonly
clean
21D95040000
unkown
page read and write
clean
451000
unkown
page execute read
clean
7FF5CA408000
unkown
page readonly
clean
22BEB7E000
unkown
page read and write
clean
181C5D57000
unkown
page read and write
clean
1E50EEC0000
unkown
page read and write
clean
1E50F200000
unkown
page read and write
clean
181C5D50000
unkown
page read and write
clean
CA278FE000
unkown
page read and write
clean
7FF57631D000
unkown
page readonly
clean
7FF580097000
unkown
page readonly
clean
11868A8D000
unkown
page read and write
clean
181C5D50000
unkown
page read and write
clean
1E50F024000
unkown
page read and write
clean
1FBBCE29000
unkown
page read and write
clean
C031CFB000
unkown
page read and write
clean
7FF5329E0000
unkown
page readonly
clean
1E226172000
unkown
page read and write
clean
7FF5CA4F1000
unkown
page readonly
clean
7FF5A3D52000
unkown
page readonly
clean
11868A3C000
unkown
page read and write
clean
7FFD6966D000
unkown image
page read and write
clean
1CBDD029000
unkown
page read and write
clean
7FF5CA5F7000
unkown
page readonly
clean
7FF5936A7000
unkown
page readonly
clean
7FF5A3D33000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
21AD3CE0000
unkown
page read and write
clean
7FF593716000
unkown
page readonly
clean
5B0000
unkown
page read and write
clean
181C5D54000
unkown
page read and write
clean
4C7347D000
unkown
page read and write
clean
CA27AFB000
unkown
page read and write
clean
7FF51227E000
unkown
page readonly
clean
1E509B02000
unkown
page read and write
clean
7FF511E58000
unkown
page readonly
clean
7FF5C1374000
unkown
page readonly
clean
1E22617B000
unkown
page read and write
clean
7FF5AC541000
unkown
page readonly
clean
1E226405000
unkown
page read and write
clean
7FF5934A5000
unkown
page readonly
clean
7FF593618000
unkown
page readonly
clean
181C52D0000
heap default
page read and write
clean
7FF57CC32000
unkown
page readonly
clean
7FF5A3DFA000
unkown
page readonly
clean
AFD000
unkown
page read and write
clean
7FF51ADCE000
unkown
page readonly
clean
181C5AD0000
unkown
page readonly
clean
21AD4C50000
unkown
page read and write
clean
7FF51B4E7000
unkown
page readonly
clean
2C58000
unkown
page readonly
clean
7FF598694000
unkown
page readonly
clean
7FF5B986F000
unkown
page readonly
clean
7FF549464000
unkown
page readonly
clean
7FF57F81E000
unkown
page readonly
clean
7FF5984E0000
unkown
page readonly
clean
181C53D0000
unkown
page read and write
clean
7FFD69640000
unkown image
page readonly
clean
1E50AE60000
unkown
page read and write
clean
7FF532FA4000
unkown
page readonly
clean
7FF5986B3000
unkown
page readonly
clean
7FF59351B000
unkown
page readonly
clean
7FF580086000
unkown
page readonly
clean
7FFD69641000
unkown image
page execute read
clean
E67B7CD000
unkown
page read and write
clean
7FF5934E0000
unkown
page readonly
clean
1E226181000
unkown
page read and write
clean
7FF5B9896000
unkown
page readonly
clean
1E50F004000
unkown
page read and write
clean
181C5B10000
unkown
page readonly
clean
2A22000
unkown
page read and write
clean
1E226139000
unkown
page read and write
clean
1E50F000000
unkown
page read and write
clean
7FF5986BD000
unkown
page readonly
clean
7FF5B971D000
unkown
page readonly
clean
7FF5CA53D000
unkown
page readonly
clean
7FF57FE53000
unkown
page readonly
clean
7E0000
unkown
page readonly
clean
7FF583F89000
unkown
page readonly
clean
7FF512209000
unkown
page readonly
clean
1200000
unkown
page readonly
clean
7FF583FF4000
unkown
page readonly
clean
7FF5987A2000
unkown
page readonly
clean
7FFD6966D000
unkown image
page read and write
clean
CA275CB000
unkown
page read and write
clean
1CBDD04E000
unkown
page read and write
clean
1CBDCF00000
heap private
page read and write
clean
1E7BC930000
unkown
page read and write
clean
25F0000
unkown
page readonly
clean
7FFD696A1000
unkown image
page execute read
clean
1FBBCE13000
unkown
page read and write
clean
B30000
unkown
page readonly
clean
7FF5B9780000
unkown
page readonly
clean
7FF5122D7000
unkown
page readonly
clean
7FF583FE7000
unkown
page readonly
clean
1E22426B000
unkown
page read and write
clean
1CBDCF90000
unkown
page read and write
clean
231D4629000
unkown
page read and write
clean
D30000
unkown
page read and write
clean
7FF592FA0000
unkown
page readonly
clean
231D4702000
unkown
page read and write
clean
1E2242ED000
unkown
page read and write
clean
231D466C000
unkown
page read and write
clean
1E50F262000
unkown
page read and write
clean
22BF0FE000
unkown
page read and write
clean
7FF548C25000
unkown
page readonly
clean
1E50AB10000
unkown
page readonly
clean
EA1BA79000
unkown
page read and write
clean
7FF5936D1000
unkown
page readonly
clean
181C5D89000
unkown
page read and write
clean
7FF576387000
unkown
page readonly
clean
181C5D54000
unkown
page read and write
clean
7FF5C1307000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
7FF57CB4E000
unkown
page readonly
clean
7FF5986F9000
unkown
page readonly
clean
7FF5934AF000
unkown
page readonly
clean
7FF57FBBC000
unkown
page readonly
clean
F60000
unkown
page readonly
clean
7FF576394000
unkown
page readonly
clean
EA1BB7F000
unkown
page read and write
clean
14B5000
heap private
page read and write
clean
231D4480000
heap private
page read and write
clean
2A67000
unkown
page read and write
clean
7FF5760FF000
unkown
page readonly
clean
FC0000
heap private
page read and write
clean
7FF57FFD6000
unkown
page readonly
clean
A9A000
unkown
page read and write
clean
5AE000
unkown
page read and write
clean
181C5AF0000
unkown
page read and write
clean
7FFD696CD000
unkown image
page read and write
clean
1E224269000
unkown
page read and write
clean
181C5D8D000
unkown
page read and write
clean
2B7D000
unkown
page readonly
clean
7FF5492D1000
unkown
page readonly
clean
21D94F70000
unkown
page write copy
clean
21AD3E0D000
unkown
page read and write
clean
7FF580047000
unkown
page readonly
clean
7FF51B16C000
unkown
page readonly
clean
21D95000000
unkown
page read and write
clean
1E22617B000
unkown
page read and write
clean
7FF598647000
unkown
page readonly
clean
1E50A302000
unkown
page read and write
clean
7FF5331F7000
unkown
page readonly
clean
7FF5C0EDC000
unkown
page readonly
clean
7FF5C1364000
unkown
page readonly
clean
450000
unkown
page read and write
clean
7FF57FF34000
unkown
page readonly
clean
11868A70000
unkown
page read and write
clean
7FF5CA261000
unkown
page readonly
clean
1E50A200000
unkown
page read and write
clean
181C5D95000
unkown
page read and write
clean
7FF5C1173000
unkown
page readonly
clean
7FF583F4E000
unkown
page readonly
clean
7FF598767000
unkown
page readonly
clean
4C72B7D000
unkown
page read and write
clean
C03167A000
unkown
page read and write
clean
7FF592F70000
unkown
page readonly
clean
D10000
unkown
page read and write
clean
181C5513000
unkown
page read and write
clean
181C5D64000
unkown
page read and write
clean
AEB000
unkown
page read and write
clean
7FF54901D000
unkown
page readonly
clean
464000
unkown
page execute and read and write
clean
470000
heap default
page read and write
clean
1E2261FE000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
11868B08000
unkown
page read and write
clean
21AD4570000
unkown
page readonly
clean
7FF5CA5A1000
unkown
page readonly
clean
C03177F000
unkown
page read and write
clean
7FFD69640000
unkown image
page readonly
clean
B17000
heap default
page read and write
clean
C03187B000
unkown
page read and write
clean
318AFD000
unkown
page read and write
clean
7FF5A3D3E000
unkown
page readonly
clean
7FF5936C4000
unkown
page readonly
clean
181C5D82000
unkown
page read and write
clean
7FF5B9977000
unkown
page readonly
clean
181C5D58000
unkown
page read and write
clean
29E5000
unkown
page read and write
clean
181C5D55000
unkown
page read and write
clean
7FF5B96AE000
unkown
page readonly
clean
7FF57CB5A000
unkown
page readonly
clean
7FF576384000
unkown
page readonly
clean
181C5D91000
unkown
page read and write
clean
7FF575BC7000
unkown
page readonly
clean
7FF580054000
unkown
page readonly
clean
11869740000
unkown
page readonly
clean
7F0000
unkown
page read and write
clean
1E50F298000
unkown
page read and write
clean
1E509A13000
unkown
page read and write
clean
181C5D31000
unkown
page read and write
clean
7FF548F5F000
unkown
page readonly
clean
7FF51B566000
unkown
page readonly
clean
21AD3EC0000
unkown
page readonly
clean
231D4600000
unkown
page read and write
clean
1E50F0B0000
unkown
page read and write
clean
7FF593611000
unkown
page readonly
clean
D30000
unkown
page readonly
clean
1E2261FE000
unkown
page read and write
clean
7FF5C13B7000
unkown
page readonly
clean
7FF5B9937000
unkown
page readonly
clean
7FFD696BA000
unkown image
page readonly
clean
7FF59350E000
unkown
page readonly
clean
7FF512246000
unkown
page readonly
clean
E80000
unkown
page readonly
clean
7FF548FB9000
unkown
page readonly
clean
7FF5985B0000
unkown
page readonly
clean
B13000
heap default
page read and write
clean
11868B02000
unkown
page read and write
clean
B50000
unkown
page read and write
clean
FC0000
unkown
page read and write
clean
1E227310000
unkown
page read and write
clean
7FFD696D1000
unkown image
page readonly
clean
181C5AF0000
unkown
page read and write
clean
1E509A8B000
unkown
page read and write
clean
7FF5331FD000
unkown
page readonly
clean
1E5099B0000
unkown
page read and write
clean
7FF57CAE5000
unkown
page readonly
clean
7FF53319E000
unkown
page readonly
clean
7FF549454000
unkown
page readonly
clean
1E224050000
unkown
page readonly
clean
7FF5CA4EF000
unkown
page readonly
clean
7FF5C1299000
unkown
page readonly
clean
7FF5761C6000
unkown
page readonly
clean
1E224268000
unkown
page read and write
clean
2CDF000
unkown
page read and write
clean
7FF5AC58D000
unkown
page readonly
clean
7FF5331A4000
unkown
page readonly
clean
7FF5CA405000
unkown
page readonly
clean
2C4B000
unkown
page read and write
clean
7FF5B9209000
unkown
page readonly
clean
7FF5A3D66000
unkown
page readonly
clean
7FF5A3E22000
unkown
page readonly
clean
7D0000
unkown
page readonly
clean
1E2264C3000
unkown
page read and write
clean
1E50F010000
unkown
page read and write
clean
7FF5AC16C000
unkown
page readonly
clean
2A51000
unkown
page read and write
clean
1E226111000
unkown
page read and write
clean
231D466B000
unkown
page read and write
clean
7FF5AC178000
unkown
page readonly
clean
7FF51B4E4000
unkown
page readonly
clean
21D9506B000
unkown
page read and write
clean
22BED78000
unkown
page read and write
clean
21D95013000
unkown
page read and write
clean
7FF5A3E16000
unkown
page readonly
clean
21D9506B000
unkown
page read and write
clean
7FF580092000
unkown
page readonly
clean
7FF580083000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
181C5D64000
unkown
page read and write
clean
FD0000
unkown
page read and write
clean
7FF51B58D000
unkown
page readonly
clean
7FF5B988D000
unkown
page readonly
clean
EA1B6AB000
unkown
page read and write
clean
7FF59318A000
unkown
page readonly
clean
1E22426D000
unkown
page read and write
clean
11868C00000
unkown
page readonly
clean
FD0000
unkown
page read and write
clean
7FFD696A0000
unkown image
page readonly
clean
7FF5CA0A1000
unkown
page readonly
clean
1E226220000
unkown
page readonly
clean
7FF5C1377000
unkown
page readonly
clean
11868A87000
unkown
page read and write
clean
181C5B00000
unkown
page read and write
clean
7FFD6966F000
unkown image
page readonly
clean
1E509A9C000
unkown
page read and write
clean
1CBDD100000
unkown
page read and write
clean
7FF5B9205000
unkown
page readonly
clean
231D4800000
unkown
page write copy
clean
7FF5AC642000
unkown
page readonly
clean
C03129B000
unkown
page read and write
clean
1E50F100000
unkown
page read and write
clean
7FFD6965A000
unkown image
page readonly
clean
478000
heap default
page read and write
clean
1FBBCE02000
unkown
page read and write
clean
318F7E000
unkown
page read and write
clean
2B57000
unkown
page readonly
clean
7FF593794000
unkown
page readonly
clean
1E226482000
unkown
page read and write
clean
7FF5B950C000
unkown
page readonly
clean
7FF5B98BD000
unkown
page readonly
clean
7FFD6966F000
unkown image
page readonly
clean
E67BAFE000
unkown
page read and write
clean
2BFD000
unkown
page readonly
clean
181C5D5C000
unkown
page read and write
clean
7FF532A65000
unkown
page readonly
clean
1FBBCDC0000
unkown
page readonly
clean
7FF5A3D46000
unkown
page readonly
clean
181C5D72000
unkown
page read and write
clean
1E224229000
unkown
page read and write
clean
181C5D58000
unkown
page read and write
clean
7FF5329CE000
unkown
page readonly
clean
1E50A215000
unkown
page read and write
clean
21D95056000
unkown
page read and write
clean
7FF5AC60B000
unkown
page readonly
clean
7FF5A3C16000
unkown
page readonly
clean
1E2261AD000
unkown
page read and write
clean
7FF51B5F4000
unkown
page readonly
clean
1FBBE7F0000
unkown
page read and write
clean
7FF598596000
unkown
page readonly
clean
2C2B000
unkown
page read and write
clean
7FF5B9966000
unkown
page readonly
clean
7FF5492E8000
unkown
page readonly
clean
7FF5AC572000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
C0316FA000
unkown
page read and write
clean
1E226179000
unkown
page read and write
clean
7FF5AC59E000
unkown
page readonly
clean
7FF51B529000
unkown
page readonly
clean
1E50F010000
unkown
page read and write
clean
7FF52E34B000
unkown
page readonly
clean
7FF597F97000
unkown
page readonly
clean
7FF5A3DE7000
unkown
page readonly
clean
2BE8000
unkown
page readonly
clean
7FF5A3DDD000
unkown
page readonly
clean
7FF51B572000
unkown
page readonly
clean
7FF5CA3E6000
unkown
page readonly
clean
7FF5AC5A4000
unkown
page readonly
clean
1E226200000
unkown
page read and write
clean
181C54BD000
unkown
page read and write
clean
7FF598499000
unkown
page readonly
clean
21D969A0000
unkown
page read and write
clean
1E224282000
unkown
page read and write
clean
318CFB000
unkown
page read and write
clean
7FF5935A7000
unkown
page readonly
clean
CA27C77000
unkown
page read and write
clean
7FF5A3C30000
unkown
page readonly
clean
2BDE000
unkown
page read and write
clean
2C50000
unkown
page readonly
clean
7FF5AC481000
unkown
page readonly
clean
B0D000
unkown
page read and write
clean
21AD4159000
heap private
page read and write
clean
7FF593729000
unkown
page readonly
clean
1E50EFE0000
unkown
page read and write
clean
D30000
unkown
page read and write
clean
DB000
unkown
page read and write
clean
181C5D55000
unkown
page read and write
clean
181C544D000
unkown
page read and write
clean
231D463F000
unkown
page read and write
clean
181C5D00000
unkown
page read and write
clean
7FF593395000
unkown
page readonly
clean
1E50F140000
unkown
page read and write
clean
1CBDCF60000
heap default
page read and write
clean
6D0000
unkown
page readonly
clean
7FFD69640000
unkown image
page readonly
clean
30EA000
heap default
page read and write
clean
181C53C0000
unkown
page readonly
clean
7FF549053000
unkown
page readonly
clean
181C5429000
unkown
page read and write
clean
FD0000
unkown
page read and write
clean
21D9506B000
unkown
page read and write
clean
7C0000
unkown
page read and write
clean
7FF533204000
unkown
page readonly
clean
7FF5330E4000
unkown
page readonly
clean
7FF57CC0A000
unkown
page readonly
clean
7FF593698000
unkown
page readonly
clean
CA27B7F000
unkown
page read and write
clean
7FF532F50000
unkown
page readonly
clean
B4F000
unkown
page read and write
clean
1E50A9E0000
unkown
page read and write
clean
1E226582000
unkown
page read and write
clean
7FF5AC647000
unkown
page readonly
clean
7FFD6965A000
unkown image
page readonly
clean
7FF548D28000
unkown
page readonly
clean
7FF593641000
unkown
page readonly
clean
7FF584026000
unkown
page readonly
clean
7FF5986ED000
unkown
page readonly
clean
4C72C7D000
unkown
page read and write
clean
7FF598657000
unkown
page readonly
clean
21D95002000
unkown
page read and write
clean
AFD000
unkown
page read and write
clean
E67BB7E000
unkown
page read and write
clean
181C5D66000
unkown
page read and write
clean
318D7E000
unkown
page read and write
clean
7FF512313000
unkown
page readonly
clean
5C1000
unkown
page execute read
clean
1E2242AF000
unkown
page read and write
clean
2A85000
unkown
page readonly
clean
7FF549024000
unkown
page readonly
clean
1E22617B000
unkown
page read and write
clean
7FF548D21000
unkown
page readonly
clean
1E50F22E000
unkown
page read and write
clean
7FF51B61A000
unkown
page readonly
clean
7FF598684000
unkown
page readonly
clean
7FFD6966D000
unkown image
page read and write
clean
8B5000
heap private
page read and write
clean
11868A50000
unkown
page read and write
clean
7FF5B9680000
unkown
page readonly
clean
256B000
unkown
page read and write
clean
B27000
unkown
page read and write
clean
26A0000
unkown
page readonly
clean
1F4F000
unkown
page read and write
clean
7FF59378D000
unkown
page readonly
clean
7FF5CA522000
unkown
page readonly
clean
1E50A900000
unkown
page read and write
clean
1E2264C2000
unkown
page read and write
clean
7FF5B9825000
unkown
page readonly
clean
1E509AA4000
unkown
page read and write
clean
7FF5C0B3E000
unkown
page readonly
clean
7FF53321A000
unkown
page readonly
clean
7FF5A3AF5000
unkown
page readonly
clean
1E50F0B0000
unkown
page write copy
clean
7FFD6966F000
unkown image
page readonly
clean
7FF5936B4000
unkown
page readonly
clean
4C7327F000
unkown
page read and write
clean
38CE4FF000
unkown
page read and write
clean
1E2242CF000
unkown
page read and write
clean
11868970000
unkown
page readonly
clean
B84000
unkown
page execute and read and write
clean
7FF5986C6000
unkown
page readonly
clean
7FF5B9924000
unkown
page readonly
clean
7FF5762DF000
unkown
page readonly
clean
1E7BC93D000
unkown
page read and write
clean
7FF51B481000
unkown
page readonly
clean
1CBDD102000
unkown
page read and write
clean
7FF5CA4FF000
unkown
page readonly
clean
F70000
unkown
page read and write
clean
7FF5986CA000
unkown
page readonly
clean
7FF5986F7000
unkown
page readonly
clean
7FF57CB3F000
unkown
page readonly
clean
7FF512221000
unkown
page readonly
clean
2B4E000
unkown
page readonly
clean
7FFD69640000
unkown image
page readonly
clean
7FF548E27000
unkown
page readonly
clean
A10000
unkown
page read and write
clean
7FF5A3D77000
unkown
page readonly
clean
7FF51B5F7000
unkown
page readonly
clean
1E2261AD000
unkown
page read and write
clean
1E226210000
unkown
page readonly
clean
7FF549017000
unkown
page readonly
clean
7FF576302000
unkown
page readonly
clean
7FF5985B8000
unkown
page readonly
clean
7FF533197000
unkown
page readonly
clean
7FF59356A000
unkown
page readonly
clean
7FF5122D4000
unkown
page readonly
clean
C03139E000
unkown
page read and write
clean
7FF598651000
unkown
page readonly
clean
7FF5C13B7000
unkown
page readonly
clean
4C727AE000
unkown
page read and write
clean
21AD4C30000
unkown
page readonly
clean
1E226131000
unkown
page read and write
clean
21D95070000
unkown
page read and write
clean
7FF58006A000
unkown
page readonly
clean
21AD3DC0000
heap default
page read and write
clean
7FF5B95E1000
unkown
page readonly
clean
1CBDCF70000
unkown
page readonly
clean
181C5D56000
unkown
page read and write
clean
7FF5763D2000
unkown
page readonly
clean
1CBDD2D0000
unkown
page readonly
clean
7FF5CA50D000
unkown
page readonly
clean
7FF5A3DD7000
unkown
page readonly
clean
4C726AC000
unkown
page read and write
clean
EA1B72E000
unkown
page read and write
clean
181C54A3000
unkown
page read and write
clean
1E5099A0000
unkown
page readonly
clean
1E50F0DC000
unkown
page readonly
clean
7FF5C138A000
unkown
page readonly
clean
1E2242ED000
unkown
page read and write
clean
181C5D54000
unkown
page read and write
clean
1E7BC8F0000
heap private
page read and write
clean
1E2261FE000
unkown
page read and write
clean
1E226182000
unkown
page read and write
clean
7FF53318D000
unkown
page readonly
clean
21D95200000
unkown
page readonly
clean
B13000
unkown
page read and write
clean
1E22616E000
unkown
page read and write
clean
7FF533081000
unkown
page readonly
clean
38CE47F000
unkown
page read and write
clean
6C0000
heap private
page read and write
clean
7FF5AC599000
unkown
page readonly
clean
7FF5760FB000
unkown
page readonly
clean
1CBDDA00000
unkown
page readonly
clean
7FF5B97B8000
unkown
page readonly
clean
21AD3E05000
unkown
page read and write
clean
7FF5B98A2000
unkown
page readonly
clean
7FF512327000
unkown
page readonly
clean
7FF5CA547000
unkown
page readonly
clean
7FF51B541000
unkown
page readonly
clean
1EEF000
unkown
page read and write
clean
B27000
unkown
page read and write
clean
11868B00000
unkown
page read and write
clean
181C5D64000
unkown
page read and write
clean
7FFD696A0000
unkown image
page readonly
clean
7FF5A3617000
unkown
page readonly
clean
1E50A202000
unkown
page read and write
clean
11868A00000
unkown
page read and write
clean
7FF51224A000
unkown
page readonly
clean
7FFD69671000
unkown image
page readonly
clean
7FF5A39F6000
unkown
page readonly
clean
7FF598376000
unkown
page readonly
clean
7FF5936ED000
unkown
page readonly
clean
7FF5C13A6000
unkown
page readonly
clean
7FF5CA5E3000
unkown
page readonly
clean
12D1000
unkown
page execute read
clean
7FF57CBE4000
unkown
page readonly
clean
7FF5A3D6D000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
21AD4150000
heap private
page read and write
clean
1E225CA0000
unkown
page readonly
clean
1E509920000
heap private
page read and write
clean
181C6261000
unkown
page read and write
clean
7FF57FFE9000
unkown
page readonly
clean
7FF5121C4000
unkown
page readonly
clean
7FF584023000
unkown
page readonly
clean
1E226200000
unkown
page read and write
clean
33C0000
heap private
page read and write
clean
2BE5000
unkown
page readonly
clean
C031BFB000
unkown
page read and write
clean
21D9506B000
unkown
page read and write
clean
7FF580057000
unkown
page readonly
clean
D90000
heap private
page read and write
clean
7FF5A3E27000
unkown
page readonly
clean
21D9506B000
unkown
page read and write
clean
1CBDD000000
unkown
page read and write
clean
11869400000
unkown
page readonly
clean
1E226402000
unkown
page read and write
clean
BB0000
heap default
page read and write
clean
1CBDD108000
unkown
page read and write
clean
7FF59336A000
unkown
page readonly
clean
7FF548F92000
unkown
page readonly
clean
7FF51B56A000
unkown
page readonly
clean
7FF57CB07000
unkown
page readonly
clean
181C543C000
unkown
page read and write
clean
FD0000
unkown
page readonly
clean
1E50F256000
unkown
page read and write
clean
2A05000
unkown
page read and write
clean
181C54EC000
unkown
page read and write
clean
21AD4C40000
unkown
page read and write
clean
5C0000
unkown
page readonly
clean
7FFD69641000
unkown image
page execute read
clean
231D5FF0000
unkown
page read and write
clean
1E7BC930000
unkown
page read and write
clean
1E50F0C0000
unkown
page readonly
clean
C031B7B000
unkown
page read and write
clean
21AD49E0000
unkown
page read and write
clean
7FF5B9871000
unkown
page readonly
clean
5E0000
heap default
page read and write
clean
231D4850000
unkown
page readonly
clean
7FF5CA5BB000
unkown
page readonly
clean
22BF1FA000
unkown
page read and write
clean
21AD3D40000
unkown
page read and write
clean
2C58000
unkown
page readonly
clean
450000
unkown
page readonly
clean
1E50AAF0000
unkown
page readonly
clean
181C5D50000
unkown
page read and write
clean
231D44E0000
heap default
page read and write
clean
7FF5AC586000
unkown
page readonly
clean
21AD4C20000
unkown
page read and write
clean
1E2264C3000
unkown
page read and write
clean
1E224040000
heap default
page read and write
clean
C7E000
unkown
page read and write
clean
1E50A359000
unkown
page read and write
clean
1E50F130000
unkown
page read and write
clean
7FF5C9DFF000
unkown
page readonly
clean
1E50F2AE000
unkown
page read and write
clean
FB0000
unkown
page read and write
clean
7FF583FFB000
unkown
page readonly
clean
1E509A74000
unkown
page read and write
clean
2030000
heap private
page read and write
clean
21AD3D60000
unkown
page read and write
clean
2C22000
unkown
page readonly
clean
7FF5B93F3000
unkown
page readonly
clean
A6E000
heap default
page read and write
clean
7FF584037000
unkown
page readonly
clean
1E226442000
unkown
page read and write
clean
7FF548C1C000
unkown
page readonly
clean
12E7000
unkown
page execute and read and write
clean
21AD4370000
unkown
page readonly
clean
181C5D8E000
unkown
page read and write
clean
7FF5A3DD4000
unkown
page readonly
clean
7FF5AC5F7000
unkown
page readonly
clean
7FF53316A000
unkown
page readonly
clean
7FF5CA3B7000
unkown
page readonly
clean
C031DFC000
unkown
page read and write
clean
7FF598504000
unkown
page readonly
clean
38CE11A000
unkown
page read and write
clean
181C54AD000
unkown
page read and write
clean
101D000
heap default
page read and write
clean
7FF59371D000
unkown
page readonly
clean
1E22617B000
unkown
page read and write
clean
1E50F24C000
unkown
page read and write
clean
7FF580097000
unkown
page readonly
clean
7FF5A3CD7000
unkown
page readonly
clean
1E50F190000
unkown
page readonly
clean
7FF5762A7000
unkown
page readonly
clean
7FF5936B0000
unkown
page readonly
clean
181C5D40000
unkown
page read and write
clean
4C731FE000
unkown
page read and write
clean
7F0000
unkown
page readonly
clean
2A04000
unkown
page read and write
clean
2861000
unkown
page readonly
clean
1E2241D0000
heap private
page read and write
clean
1E224313000
unkown
page read and write
clean
231D4673000
unkown
page read and write
clean
5B0000
unkown
page read and write
clean
1E7BCAF0000
unkown
page readonly
clean
1E22433F000
unkown
page read and write
clean
7FF5A3CF7000
unkown
page readonly
clean
7FFD6966D000
unkown image
page read and write
clean
DA0000
unkown
page readonly
clean
1194000
heap private
page read and write
clean
7FF5937AA000
unkown
page readonly
clean
7FF5AC56A000
unkown
page readonly
clean
EA1B7AE000
unkown
page read and write
clean
385DBCB000
unkown
page read and write
clean
2C06000
unkown
page read and write
clean
1FBBCE00000
unkown
page read and write
clean
7FF5B96D4000
unkown
page readonly
clean
7FF59847F000
unkown
page readonly
clean
F70000
unkown
page read and write
clean
7FF5AC597000
unkown
page readonly
clean
1E50F1A0000
unkown
page readonly
clean
1E2242ED000
unkown
page read and write
clean
7FF5760AF000
unkown
page readonly
clean
29BF000
unkown
page read and write
clean
181C5D85000
unkown
page read and write
clean
11868990000
unkown
page read and write
clean
7FF5330E7000
unkown
page readonly
clean
1E226138000
unkown
page read and write
clean
7FF59357F000
unkown
page readonly
clean
7FF57CB56000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
1CBDD200000
unkown
page readonly
clean
181C5D8B000
unkown
page read and write
clean
7FF598689000
unkown
page readonly
clean
7FF533129000
unkown
page readonly
clean
7FF5985E8000
unkown
page readonly
clean
7FF576316000
unkown
page readonly
clean
7FF53313F000
unkown
page readonly
clean
11868960000
heap default
page read and write
clean
7FF59851F000
unkown
page readonly
clean
7FF593059000
unkown
page readonly
clean
7FF576287000
unkown
page readonly
clean
1E226187000
unkown
page read and write
clean
1CBDD113000
unkown
page read and write
clean
1E50A300000
unkown
page read and write
clean
116F000
unkown
page read and write
clean
B27000
unkown
page read and write
clean
7FF533120000
unkown
page readonly
clean
7FFD69640000
unkown image
page readonly
clean
7FF5C12DA000
unkown
page readonly
clean
7FF548EA8000
unkown
page readonly
clean
7FF583F7D000
unkown
page readonly
clean
1E226178000
unkown
page read and write
clean
7FF548F73000
unkown
page readonly
clean
7FF532D6C000
unkown
page readonly
clean
1E50EFE0000
unkown
page read and write
clean
22BF4F8000
unkown
page read and write
clean
7FF57CA40000
unkown
page readonly
clean
7FF549011000
unkown
page readonly
clean
7FF51B586000
unkown
page readonly
clean
2A57000
unkown
page read and write
clean
1E224257000
unkown
page read and write
clean
5D4000
unkown
page execute and read and write
clean
1E509A6F000
unkown
page read and write
clean
2A52000
unkown
page read and write
clean
11868B13000
unkown
page read and write
clean
1E50A359000
unkown
page read and write
clean
B27000
heap default
page read and write
clean
7FF57C427000
unkown
page readonly
clean
7FF59359F000
unkown
page readonly
clean
146E000
unkown
page read and write
clean
2C0E000
unkown
page readonly
clean
181C5D2B000
unkown
page read and write
clean
7FF57FF91000
unkown
page readonly
clean
1E50F110000
unkown
page read and write
clean
B23000
unkown
page read and write
clean
E7B000
unkown
page read and write
clean
2BE0000
unkown
page read and write
clean
4C7317F000
unkown
page read and write
clean
5E8000
heap default
page read and write
clean
7FF593727000
unkown
page readonly
clean
7FF58004D000
unkown
page readonly
clean
21AD4140000
unkown
page read and write
clean
91392FE000
unkown
page read and write
clean
11868A47000
unkown
page read and write
clean
7FF5C1314000
unkown
page readonly
clean
1E50A1E0000
unkown
page read and write
clean
1E509A91000
unkown
page read and write
clean
7FF5C11F1000
unkown
page readonly
clean
7FF57C7F8000
unkown
page readonly
clean
181C5D91000
unkown
page read and write
clean
7FF51B604000
unkown
page readonly
clean
181C54E2000
unkown
page read and write
clean
7FF5CA400000
unkown
page readonly
clean
7FF5985E1000
unkown
page readonly
clean
1E50F140000
unkown
page read and write
clean
7FF512327000
unkown
page readonly
clean
181C6202000
unkown
page read and write
clean
181C5AF0000
unkown
page read and write
clean
1E50F420000
unkown
page readonly
clean
1E50A1F0000
unkown
page read and write
clean
913907E000
unkown
page read and write
clean
5F0000
unkown
page read and write
clean
1CBDD03C000
unkown
page read and write
clean
7FF548EE5000
unkown
page readonly
clean
181C5D50000
unkown
page read and write
clean
231D45C0000
unkown
page readonly
clean
7FF5B9723000
unkown
page readonly
clean
D00000
unkown
page read and write
clean
7FF583FED000
unkown
page readonly
clean
1E2242F0000
unkown
page read and write
clean
181C53B0000
unkown
page readonly
clean
7FF5937C6000
unkown
page readonly
clean
22BF2FD000
unkown
page read and write
clean
7FF5936E3000
unkown
page readonly
clean
7FF5B93F6000
unkown
page readonly
clean
2B5E000
unkown
page readonly
clean
7FF51B488000
unkown
page readonly
clean
7C0000
unkown
page readonly
clean
7FF5B9785000
unkown
page readonly
clean
1E2242E9000
unkown
page read and write
clean
7FF57638D000
unkown
page readonly
clean
1E5099C0000
unkown
page read and write
clean
AFD000
heap default
page read and write
clean
7FF593577000
unkown
page readonly
clean
7FF54886F000
unkown
page readonly
clean
181C5D71000
unkown
page read and write
clean
7FF5122E7000
unkown
page readonly
clean
181C53F0000
unkown
page readonly
clean
4C732FF000
unkown
page read and write
clean
7FF5122FA000
unkown
page readonly
clean
7FF5986E6000
unkown
page readonly
clean
7FF598368000
unkown
page readonly
clean
1E50AAE0000
unkown
page readonly
clean
1E226125000
unkown
page read and write
clean
B71000
unkown
page execute read
clean
7FF5B9934000
unkown
page readonly
clean
1E7BCCF0000
unkown
page readonly
clean
AAC000
unkown
page read and write
clean
1E22615D000
unkown
page read and write
clean
7FF548F61000
unkown
page readonly
clean
7FFD69640000
unkown image
page readonly
clean
7FF5A3B9F000
unkown
page readonly
clean
7FF5C130E000
unkown
page readonly
clean
7FF57C806000
unkown
page readonly
clean
7FF5B98C9000
unkown
page readonly
clean
1FBBCE3F000
unkown
page read and write
clean
7FF5C0BD5000
unkown
page readonly
clean
7FF58380B000
unkown
page readonly
clean
181C5D40000
unkown
page read and write
clean
7FF533236000
unkown
page readonly
clean
7FF59877A000
unkown
page readonly
clean
181C5D58000
unkown
page read and write
clean
7FF59869F000
unkown
page readonly
clean
D2F000
unkown
page read and write
clean
91390FE000
unkown
page read and write
clean
21D95100000
unkown
page read and write
clean
7FF5AC61A000
unkown
page readonly
clean
D50000
unkown
page readonly
clean
131E000
heap default
page read and write
clean
7FF5C1367000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
74B000
unkown
page read and write
clean
7FF5B9921000
unkown
page readonly
clean
7FF51B5FD000
unkown
page readonly
clean
7FF5CA5A4000
unkown
page readonly
clean
181C6202000
unkown
page read and write
clean
7FF593797000
unkown
page readonly
clean
7FF57639B000
unkown
page readonly
clean
7FF5B94D2000
unkown
page readonly
clean
1E224170000
unkown
page readonly
clean
1E509A00000
unkown
page read and write
clean
1E50AB20000
unkown
page readonly
clean
4AE0000
heap private
page read and write
clean
D30000
unkown
page read and write
clean
231D44F0000
unkown
page readonly
clean
1E50EE90000
unkown
page readonly
clean
8C0000
unkown
page readonly
clean
7FF5B9927000
unkown
page readonly
clean
231D4713000
unkown
page read and write
clean
49F000
heap default
page read and write
clean
231D466D000
unkown
page read and write
clean
7FF593398000
unkown
page readonly
clean
7FF533199000
unkown
page readonly
clean
181C6202000
unkown
page read and write
clean
1E224370000
unkown
page read and write
clean
7FF583F76000
unkown
page readonly
clean
14C0000
unkown
page readonly
clean
7FF57CB7D000
unkown
page readonly
clean
7FFD69640000
unkown image
page readonly
clean
C031A7B000
unkown
page read and write
clean
2A75000
unkown
page read and write
clean
231D4602000
unkown
page read and write
clean
231D4655000
unkown
page read and write
clean
7FF5B9864000
unkown
page readonly
clean
385E07E000
unkown
page read and write
clean
7FF57CBF4000
unkown
page readonly
clean
7FF57C9AF000
unkown
page readonly
clean
2A52000
unkown
page read and write
clean
181C5D55000
unkown
page read and write
clean
181C5D6F000
unkown
page read and write
clean
7FF51B647000
unkown
page readonly
clean
B70000
unkown
page readonly
clean
7FF5CA549000
unkown
page readonly
clean
1E509AFB000
unkown
page read and write
clean
21D95113000
unkown
page read and write
clean
181C5D8D000
unkown
page read and write
clean
2B7A000
unkown
page readonly
clean
22BF077000
unkown
page read and write
clean
7FF5A3DEB000
unkown
page readonly
clean
7FF5CA438000
unkown
page readonly
clean
181C5D8B000
unkown
page read and write
clean
8B0000
heap private
page read and write
clean
7FF5AC604000
unkown
page readonly
clean
7FF5CA5AD000
unkown
page readonly
clean
1E224371000
unkown
page read and write
clean
7FF5CA38A000
unkown
page readonly
clean
22BEE77000
unkown
page read and write
clean
7FF593583000
unkown
page readonly
clean
181C6254000
unkown
page read and write
clean
7FF549451000
unkown
page readonly
clean
420000
unkown
page readonly
clean
21D94E30000
heap private
page read and write
clean
7FF5B914B000
unkown
page readonly
clean
7FF57CBE7000
unkown
page readonly
clean
181C5DCE000
unkown
page read and write
clean
7FF5762F6000
unkown
page readonly
clean
FB0000
unkown
page read and write
clean
7FFD69640000
unkown image
page readonly
clean
11868CD0000
unkown
page readonly
clean
22BF3FC000
unkown
page read and write
clean
9139179000
unkown
page read and write
clean
7FFD69671000
unkown image
page readonly
clean
D30000
unkown
page read and write
clean
181C5D31000
unkown
page read and write
clean
7FF593593000
unkown
page readonly
clean
7FFD69671000
unkown image
page readonly
clean
2C1E000
unkown
page readonly
clean
1E2261F6000
unkown
page read and write
clean
7FF548C15000
unkown
page readonly
clean
181C5D64000
unkown
page read and write
clean
11868A13000
unkown
page read and write
clean
1E50F120000
unkown
page read and write
clean
7FF5AC633000
unkown
page readonly
clean
2C06000
unkown
page readonly
clean
2C2C000
unkown
page read and write
clean
7FF5CA5F2000
unkown
page readonly
clean
7FFD69671000
unkown image
page readonly
clean
7FF533003000
unkown
page readonly
clean
1E226542000
unkown
page read and write
clean
7FF593483000
unkown
page readonly
clean
181C6200000
unkown
page read and write
clean
181C5D89000
unkown
page read and write
clean
22BEF7F000
unkown
page read and write
clean
2C13000
unkown
page readonly
clean
7FF58400A000
unkown
page readonly
clean
1E22617A000
unkown
page read and write
clean
7FF5B9854000
unkown
page readonly
clean
1E7BC930000
unkown
page read and write
clean
7FF5CA5B7000
unkown
page readonly
clean
7FF57614F000
unkown
page readonly
clean
7FF549067000
unkown
page readonly
clean
7FF5987A7000
unkown
page readonly
clean
181C5D64000
unkown
page read and write
clean
231D60F0000
unkown
page readonly
clean
7FF548E75000
unkown
page readonly
clean
21AD4160000
unkown
page read and write
clean
C93000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
7FF5C12D6000
unkown
page readonly
clean
A27000
unkown
page execute and read and write
clean
A78000
unkown
page read and write
clean
1E7BC8D0000
unkown
page read and write
clean
B23000
unkown
page read and write
clean
1E50EFE8000
unkown
page read and write
clean
7FF5937D7000
unkown
page readonly
clean
7FF512322000
unkown
page readonly
clean
181C5D3E000
unkown
page read and write
clean
7A0000
unkown
page read and write
clean
7FF5B9788000
unkown
page readonly
clean
7FF54946B000
unkown
page readonly
clean
11868980000
unkown
page readonly
clean
A30000
heap default
page read and write
clean
1E509990000
unkown
page readonly
clean
2C2F000
unkown
page readonly
clean
1E7BCA00000
unkown
page readonly
clean
7FF598757000
unkown
page readonly
clean
1FBBEC30000
unkown
page read and write
clean
D40000
heap private
page read and write
clean
1E50A318000
unkown
page read and write
clean
181C6400000
unkown
page readonly
clean
7FF57CC23000
unkown
page readonly
clean
7E0000
unkown
page read and write
clean
1E50AB00000
unkown
page readonly
clean
1CBDD04A000
unkown
page read and write
clean
7FF5121C7000
unkown
page readonly
clean
1E509980000
heap default
page read and write
clean
A73000
unkown
page read and write
clean
7FF5AC488000
unkown
page readonly
clean
7FF5A3D2F000
unkown
page readonly
clean
7FF512252000
unkown
page readonly
clean
FD1000
unkown
page execute read
clean
181C5516000
unkown
page read and write
clean
2FD0000
heap default
page read and write
clean
7FF5986A1000
unkown
page readonly
clean
1E7BE2A0000
unkown
page read and write
clean
7FF5760A5000
unkown
page readonly
clean
7FF57CB89000
unkown
page readonly
clean
181C5D85000
unkown
page read and write
clean
7FFD69641000
unkown image
page execute read
clean
7FF532F8B000
unkown
page readonly
clean
440000
unkown
page read and write
clean
FF8000
heap default
page read and write
clean
7FF57CB62000
unkown
page readonly
clean
7FF576397000
unkown
page readonly
clean
11868A4A000
unkown
page read and write
clean
11869202000
unkown
page read and write
clean
1CB000
unkown
page read and write
clean
7FF598796000
unkown
page readonly
clean
7FF5A3E13000
unkown
page readonly
clean
1CBDCF80000
unkown
page readonly
clean
F1B000
unkown
page read and write
clean
7FF5ABE65000
unkown
page readonly
clean
7FF548F86000
unkown
page readonly
clean
22BEAFE000
unkown
page read and write
clean
181C5450000
unkown
page read and write
clean
4C7307B000
unkown
page read and write
clean
1E50F2AC000
unkown
page read and write
clean
E67BC7E000
unkown
page read and write
clean
1E224380000
unkown
page read and write
clean
7FF5C12FD000
unkown
page readonly
clean
FA0000
unkown
page readonly
clean
231D4671000
unkown
page read and write
clean
C031EFC000
unkown
page read and write
clean
1E227000000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
AAC000
heap default
page read and write
clean
7FF57FFEE000
unkown
page readonly
clean
7FF533242000
unkown
page readonly
clean
2A44000
unkown
page read and write
clean
7FF533141000
unkown
page readonly
clean
7FF549496000
unkown
page readonly
clean
7FF512277000
unkown
page readonly
clean
7FF54902B000
unkown
page readonly
clean
7FF5936FA000
unkown
page readonly
clean
7FF5761E8000
unkown
page readonly
clean
1E50EFEE000
unkown
page read and write
clean
1FBBCC80000
heap private
page read and write
clean
7FF583F56000
unkown
page readonly
clean
7FF5934DA000
unkown
page readonly
clean
7FF548E78000
unkown
page readonly
clean
B27000
unkown
page read and write
clean
1E50F2AC000
unkown
page read and write
clean
181C549F000
unkown
page read and write
clean
231D4700000
unkown
page read and write
clean
21D94E90000
heap default
page read and write
clean
7FF5AC5FD000
unkown
page readonly
clean
1E50F140000
unkown
page read and write
clean
7FF576285000
unkown
page readonly
clean
1E50F460000
unkown
page readonly
clean
467000
unkown
page execute and read and write
clean
7FF598492000
unkown
page readonly
clean
780000
unkown
page read and write
clean
181C5448000
unkown
page read and write
clean
7FF5CA503000
unkown
page readonly
clean
E67BA7E000
unkown
page read and write
clean
11868A4D000
unkown
page read and write
clean
C031C7A000
unkown
page read and write
clean
21D96AA0000
unkown
page readonly
clean
7FF5A39FA000
unkown
page readonly
clean
7FFD69671000
unkown image
page readonly
clean
430000
unkown
page readonly
clean
1E50A1B1000
unkown
page read and write
clean
181C5D58000
unkown
page read and write
clean
7FF533247000
unkown
page readonly
clean
1E226500000
unkown
page read and write
clean
181C5D51000
unkown
page read and write
clean
7FF5762EE000
unkown
page readonly
clean
7FF533233000
unkown
page readonly
clean
7FFD69641000
unkown image
page execute read
clean
25EB000
unkown
page read and write
clean
181C5D50000
unkown
page read and write
clean
7FFD69640000
unkown image
page readonly
clean
7FF59318F000
unkown
page readonly
clean
7FF5CA1B5000
unkown
page readonly
clean
B50000
unkown
page read and write
clean
7FF593510000
unkown
page readonly
clean
7FF532F7E000
unkown
page readonly
clean
1E50F220000
unkown
page read and write
clean
7FF533150000
unkown
page readonly
clean
12FB000
heap default
page read and write
clean
4C72F7A000
unkown
page read and write
clean
2A65000
unkown
page read and write
clean
38CE5FF000
unkown
page read and write
clean
1CBDD047000
unkown
page read and write
clean
7FF512316000
unkown
page readonly
clean
7FF5C136D000
unkown
page readonly
clean
1FBBCE55000
unkown
page read and write
clean
B23000
heap default
page read and write
clean
1E50A060000
unkown
page readonly
clean
7FF5C1309000
unkown
page readonly
clean
CA279F5000
unkown
page read and write
clean
7FF5A3AFF000
unkown
page readonly
clean
7A0000
unkown
page read and write
clean
7FF5984EB000
unkown
page readonly
clean
21D94FC0000
unkown
page readonly
clean
7FF57FFF4000
unkown
page readonly
clean
7FF5122EB000
unkown
page readonly
clean
7FF580044000
unkown
page readonly
clean
21D95029000
unkown
page read and write
clean
7FF54922C000
unkown
page readonly
clean
7FF548F7D000
unkown
page readonly
clean
7FF5B917F000
unkown
page readonly
clean
C0319FD000
unkown
page read and write
clean
318E77000
unkown
page read and write
clean
110000
unkown
page readonly
clean
B70000
unkown
page readonly
clean
1E226600000
unkown
page read and write
clean
5C0000
unkown
page read and write
clean
7FF57CC37000
unkown
page readonly
clean
1E50F277000
unkown
page read and write
clean
1E223FE0000
heap private
page read and write
clean
1FBBD000000
unkown
page write copy
clean
BC0000
unkown
page read and write
clean
21AD4155000
heap private
page read and write
clean
7FF5AC566000
unkown
page readonly
clean
7FF549056000
unkown
page readonly
clean
7FF511E4C000
unkown
page readonly
clean
1E226200000
unkown
page read and write
clean
7FF5CA5B4000
unkown
page readonly
clean
181C5D8B000
unkown
page read and write
clean
1E22433F000
unkown
page read and write
clean
181C5D65000
unkown
page read and write
clean
7FF5494A7000
unkown
page readonly
clean
21AD3D80000
unkown
page readonly
clean
7FF548B11000
unkown
page readonly
clean
B80000
unkown
page readonly
clean
7FF52E34B000
unkown
page readonly
clean
181C5A80000
unkown
page write copy
clean
7FF5CA516000
unkown
page readonly
clean
7FF5763C3000
unkown
page readonly
clean
385DEF9000
unkown
page read and write
clean
7FF59357D000
unkown
page readonly
clean
7FF5AC553000
unkown
page readonly
clean
1E224302000
unkown
page read and write
clean
7FF5492B8000
unkown
page readonly
clean
7E0000
unkown
page read and write
clean
1E50F440000
unkown
page readonly
clean
7FF5984CB000
unkown
page readonly
clean
C031979000
unkown
page read and write
clean
7FF5AC529000
unkown
page readonly
clean
181C5D65000
unkown
page read and write
clean
7FF5C12B1000
unkown
page readonly
clean
7FF533124000
unkown
page readonly
clean
2C06000
unkown
page read and write
clean
1E226442000
unkown
page read and write
clean
181C544C000
unkown
page read and write
clean
181C5270000
heap private
page read and write
clean
7FF5937D2000
unkown
page readonly
clean
4C7367E000
unkown
page read and write
clean
4C72D79000
unkown
page read and write
clean
1E22618B000
unkown
page read and write
clean
7FF59339A000
unkown
page readonly
clean
1E509A56000
unkown
page read and write
clean
1E226482000
unkown
page read and write
clean
7FF5B9827000
unkown
page readonly
clean
1E226642000
unkown
page read and write
clean
1E226502000
unkown
page read and write
clean
F90000
unkown
page read and write
clean
7FF5AC607000
unkown
page readonly
clean
7FF59372E000
unkown
page readonly
clean
1E7BC8B0000
unkown
page read and write
clean
7FF51B636000
unkown
page readonly
clean
7FF512266000
unkown
page readonly
clean
181C5D97000
unkown
page read and write
clean
1E50F0C4000
unkown
page readonly
clean
181C5E00000
unkown
page readonly
clean
7FF583FE4000
unkown
page readonly
clean
181C54EB000
unkown
page read and write
clean
4C7272E000
unkown
page read and write
clean
7FF549014000
unkown
page readonly
clean
7FF5936DF000
unkown
page readonly
clean
7FF548E56000
unkown
page readonly
clean
181C5D82000
unkown
page read and write
clean
7FF5CA475000
unkown
page readonly
clean
7FF57FFB6000
unkown
page readonly
clean
7FF51B553000
unkown
page readonly
clean
7FF598286000
unkown
page readonly
clean
7FF57FFE7000
unkown
page readonly
clean
A24000
unkown
page execute and read and write
clean
7FF5B992D000
unkown
page readonly
clean
7FF5B9883000
unkown
page readonly
clean
1E224120000
unkown
page write copy
clean
7FFD6965A000
unkown image
page readonly
clean
12D0000
unkown
page readonly
clean
7FF5C0EE8000
unkown
page readonly
clean
1E50AAC0000
unkown
page readonly
clean
7FFD69641000
unkown image
page execute read
clean
A00000
unkown
page read and write
clean
7FF533207000
unkown
page readonly
clean
7FF598475000
unkown
page readonly
clean
7FF533247000
unkown
page readonly
clean
7FF5CA51A000
unkown
page readonly
clean
1E224400000
unkown
page readonly
clean
7FF57C905000
unkown
page readonly
clean
181C52E0000
unkown
page readonly
clean
21AD4CA0000
unkown
page read and write
clean
1E226129000
unkown
page read and write
clean
1E50F0F0000
unkown
page read and write
clean
7FF5B9535000
unkown
page readonly
clean
1E22615D000
unkown
page read and write
clean
1E509C00000
unkown
page readonly
clean
14B0000
heap private
page read and write
clean
1E50AAD0000
unkown
page readonly
clean
7FF5934C9000
unkown
page readonly
clean
7FF5A3D79000
unkown
page readonly
clean
7FF5762E3000
unkown
page readonly
clean
A9A000
heap default
page read and write
clean
385DFF9000
unkown
page read and write
clean
7FF532D78000
unkown
page readonly
clean
7FF5C11F8000
unkown
page readonly
clean
7FF549067000
unkown
page readonly
clean
2B8B000
unkown
page readonly
clean
C0318FB000
unkown
page read and write
clean
1FBBCCF0000
unkown
page readonly
clean
2A50000
unkown
page read and write
clean
21D94EA0000
unkown
page readonly
clean
7FF5C13B2000
unkown
page readonly
clean
1CBDDD40000
unkown
page readonly
clean
181C5D31000
unkown
page read and write
clean
181C5D71000
unkown
page read and write
clean
1E7BC900000
heap default
page read and write
clean
7FF5936B9000
unkown
page readonly
clean
7FF5B9859000
unkown
page readonly
clean
7FF592FB7000
unkown
page readonly
clean
7FF5B9972000
unkown
page readonly
clean
181C5D16000
unkown
page read and write
clean
7FF5B9421000
unkown
page readonly
clean
D45000
heap private
page read and write
clean
A38000
heap default
page read and write
clean
7FF57CB76000
unkown
page readonly
clean
B90000
heap private
page read and write
clean
1E227110000
unkown
page read and write
clean
1E227010000
unkown
page read and write
clean
4C72AF7000
unkown
page read and write
clean
7FF593787000
unkown
page readonly
clean
7FF57FBC8000
unkown
page readonly
clean
1E226240000
unkown
page readonly
clean
30E0000
heap default
page read and write
clean
181C5DA6000
unkown
page read and write
clean
F50000
unkown
page read and write
clean
7FF57FFC2000
unkown
page readonly
clean
400000
unkown
page read and write
clean
267E000
unkown
page read and write
clean
1E509AAB000
unkown
page read and write
clean
7FF5493F9000
unkown
page readonly
clean
7FF5986AF000
unkown
page readonly
clean
C0317FA000
unkown
page read and write
clean
EA1BAFA000
unkown
page read and write
clean
7FFD69640000
unkown image
page readonly
clean
11A0000
unkown
page readonly
clean
7FF5B9850000
unkown
page readonly
clean
7FF5CA536000
unkown
page readonly
clean
7FF584037000
unkown
page readonly
clean
7FF59875D000
unkown
page readonly
clean
7FF598754000
unkown
page readonly
clean
1E509B13000
unkown
page read and write
clean
C031AFB000
unkown
page read and write
clean
7FF5B9427000
unkown
page readonly
clean
181C5D64000
unkown
page read and write
clean
1E227210000
unkown
page read and write
clean
7FF5763C6000
unkown
page readonly
clean
AAC000
unkown
page read and write
clean
7FF51B647000
unkown
page readonly
clean
7FF5934D6000
unkown
page readonly
clean
7FF5A3D4A000
unkown
page readonly
clean
CA2787E000
unkown
page read and write
clean
1E226602000
unkown
page read and write
clean
7FF51B403000
unkown
page readonly
clean
181C5400000
unkown
page read and write
clean
181C5D8D000
unkown
page read and write
clean
21D9506B000
unkown
page read and write
clean
7FF59853A000
unkown
page readonly
clean
7FF54947A000
unkown
page readonly
clean
7FF57CAE7000
unkown
page readonly
clean
181C544B000
unkown
page read and write
clean
2A44000
unkown
page read and write
clean
7FF5987A7000
unkown
page readonly
clean
7FF583F43000
unkown
page readonly
clean
B23000
unkown
page read and write
clean
D95000
heap private
page read and write
clean
7FF533166000
unkown
page readonly
clean
7FF5CA5CA000
unkown
page readonly
clean
7FF532A2D000
unkown
page readonly
clean
7FF575FAA000
unkown
page readonly
clean
C97000
unkown
page read and write
clean
7FF5A3C38000
unkown
page readonly
clean
1E226191000
unkown
page read and write
clean
E67BCF9000
unkown
page read and write
clean
181C5D5C000
unkown
page read and write
clean
7FF5936CF000
unkown
page readonly
clean
7FFD696CF000
unkown image
page readonly
clean
7FF51AE65000
unkown
page readonly
clean
7FF583BCC000
unkown
page readonly
clean
7FF511AAE000
unkown
page readonly
clean
B87000
unkown
page execute and read and write
clean
1E50A1D3000
unkown
page read and write
clean
7FF5B994A000
unkown
page readonly
clean
33D0000
unkown
page readonly
clean
7FF593702000
unkown
page readonly
clean
181C5413000
unkown
page read and write
clean
7FF51B178000
unkown
page readonly
clean
1E7BC926000
unkown
page read and write
clean
181C5DA6000
unkown
page read and write
clean
7FF533134000
unkown
page readonly
clean
7FF5A3E27000
unkown
page readonly
clean
1E50A318000
unkown
page read and write
clean
7FF549062000
unkown
page readonly
clean
2C34000
unkown
page readonly
clean
7FF57C95B000
unkown
page readonly
clean
1E509A79000
unkown
page read and write
clean
7FF593188000
unkown
page readonly
clean
181C5D66000
unkown
page read and write
clean
181C5600000
unkown
page readonly
clean
2C4B000
unkown
page read and write
clean
1E7BC912000
unkown
page read and write
clean
7FFD6965A000
unkown image
page readonly
clean
181C5D5C000
unkown
page read and write
clean
1E22613A000
unkown
page read and write
clean
CA27E7F000
unkown
page read and write
clean
7FF59334C000
unkown
page readonly
clean
1E226400000
unkown
page read and write
clean
7FF532FDA000
unkown
page readonly
clean
7FF5B9645000
unkown
page readonly
clean
181C5D58000
unkown
page read and write
clean
7FF533186000
unkown
page readonly
clean
7FFD6965A000
unkown image
page readonly
clean
2B85000
unkown
page readonly
clean
7FF5493B4000
unkown
page readonly
clean
1F50000
unkown
page read and write
clean
7FF5CA5A7000
unkown
page readonly
clean
1E2261CE000
unkown
page read and write
clean
7FF54939F000
unkown
page readonly
clean
2690000
heap private
page read and write
clean
7FF575F98000
unkown
page readonly
clean
7FF593655000
unkown
page readonly
clean
7FF548FB7000
unkown
page readonly
clean
7FF511B45000
unkown
page readonly
clean
31907E000
unkown
page read and write
clean
7FF51B633000
unkown
page readonly
clean
1CBDD002000
unkown
page read and write
clean
231D466B000
unkown
page read and write
clean
7FF5493C6000
unkown
page readonly
clean
181C5D8D000
unkown
page read and write
clean
1E225BA0000
unkown
page read and write
clean
7FF5C12E2000
unkown
page readonly
clean
181C5D40000
unkown
page read and write
clean
4C72E7E000
unkown
page read and write
clean
181C5D97000
unkown
page read and write
clean
7FF549027000
unkown
page readonly
clean
7FF5493E6000
unkown
page readonly
clean
FE4000
unkown
page execute and read and write
clean
7FF5CA5E6000
unkown
page readonly
clean
7FF5A3B4B000
unkown
page readonly
clean
913927F000
unkown
page read and write
clean
7FF5B96B0000
unkown
page readonly
clean
7FF57CBF7000
unkown
page readonly
clean
7FFD6966F000
unkown image
page readonly
clean
7FF59347D000
unkown
page readonly
clean
1E22427D000
unkown
page read and write
clean
38CE19F000
unkown
page read and write
clean
7FF583FE1000
unkown
page readonly
clean
1E226402000
unkown
page read and write
clean
C031D7F000
unkown
page read and write
clean
A11000
unkown
page execute read
clean
181C5AE0000
unkown
page readonly
clean
38CE579000
unkown
page read and write
clean
181C5449000
unkown
page read and write
clean
318A7E000
unkown
page read and write
clean
7FF548FA6000
unkown
page readonly
clean
7FF5C1257000
unkown
page readonly
clean
1E226200000
unkown
page read and write
clean
2A5E000
unkown
page read and write
clean
7FF548C5B000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
D10000
unkown
page readonly
clean
7FF59837A000
unkown
page readonly
clean
7FF5AC5F4000
unkown
page readonly
clean
7FF5763D7000
unkown
page readonly
clean
181C5488000
unkown
page read and write
clean
7FF5B96BB000
unkown
page readonly
clean
7FF5AC4E7000
unkown
page readonly
clean
7FF583F87000
unkown
page readonly
clean
1E50A313000
unkown
page read and write
clean
1E226002000
unkown
page read and write
clean
7FF593498000
unkown
page readonly
clean
1190000
heap private
page read and write
clean
1E50F213000
unkown
page read and write
clean
1E50F180000
unkown
page readonly
clean
181C5C02000
unkown
page read and write
clean
2B61000
unkown
page readonly
clean
7FF5986D2000
unkown
page readonly
clean
AAC000
unkown
page read and write
clean
7FF5C12C3000
unkown
page readonly
clean
F70000
unkown
page read and write
clean
7FF54945D000
unkown
page readonly
clean
7FF593359000
unkown
page readonly
clean
7FF57FED8000
unkown
page readonly
clean
7FF598793000
unkown
page readonly
clean
7FF598764000
unkown
page readonly
clean
1E224329000
unkown
page read and write
clean
181C5DD8000
unkown
page read and write
clean
7FF512161000
unkown
page readonly
clean
7FF53315E000
unkown
page readonly
clean
1E50F140000
unkown
page read and write
clean
7FF5761E0000
unkown
page readonly
clean
3187EB000
unkown
page read and write
clean
7FF512168000
unkown
page readonly
clean
21D9506B000
unkown
page read and write
clean
CA27D7E000
unkown
page read and write
clean
7FF583FF7000
unkown
page readonly
clean
1E50F23F000
unkown
page read and write
clean
7FF593332000
unkown
page readonly
clean
7FF59821E000
unkown
page readonly
clean
181C5D88000
unkown
page read and write
clean
B23000
unkown
page read and write
clean
1E7BC93E000
unkown
page read and write
clean
7FF5A3B4F000
unkown
page readonly
clean
21AD3E0D000
unkown
page read and write
clean
1E227013000
unkown
page read and write
clean
7FF548B17000
unkown
page readonly
clean
7FF51B599000
unkown
page readonly
clean
181C5D8C000
unkown
page read and write
clean
181C5508000
unkown
page read and write
clean
1E2264C2000
unkown
page read and write
clean
5D7000
unkown
page execute and read and write
clean
7FF512233000
unkown
page readonly
clean
1E224332000
unkown
page read and write
clean
9138DDB000
unkown
page read and write
clean
7FF548F8A000
unkown
page readonly
clean
7FF576327000
unkown
page readonly
clean
181C5D64000
unkown
page read and write
clean
1FBBCF02000
unkown
page read and write
clean
7FF5B9737000
unkown
page readonly
clean
1E50F0B4000
unkown
page readonly
clean
E67BBFA000
unkown
page read and write
clean
7FF5CA5F7000
unkown
page readonly
clean
7FF5B98C7000
unkown
page readonly
clean
1E2241C0000
unkown
page readonly
clean
B13000
unkown
page read and write
clean
7FF5762FA000
unkown
page readonly
clean
4D0000
unkown
page read and write
clean
7FF593685000
unkown
page readonly
clean
181C54E8000
unkown
page read and write
clean
1E50F020000
unkown
page read and write
clean
F50000
unkown
page readonly
clean
181C5AF0000
unkown
page readonly
clean
B13000
unkown
page read and write
clean
1E7BC8F5000
heap private
page read and write
clean
1FBBE8F0000
unkown
page readonly
clean
1FBBCCE0000
heap default
page read and write
clean
7FF57FFA3000
unkown
page readonly
clean
1CBDD802000
unkown
page read and write
clean
7FF512279000
unkown
page readonly
clean
181C5D8C000
unkown
page read and write
clean
1E226172000
unkown
page read and write
clean
7FF57C80A000
unkown
page readonly
clean
7FF51B607000
unkown
page readonly
clean
11868900000
heap private
page read and write
clean
1E50EEE0000
unkown
page read and write
clean
7FF5C137B000
unkown
page readonly
clean
7FF5B98B6000
unkown
page readonly
clean
385DE7E000
unkown
page read and write
clean
1E7BC927000
unkown
page read and write
clean
7FF51B59E000
unkown
page readonly
clean
38CE67D000
unkown
page read and write
clean
B50000
unkown
page read and write
clean
1E2242EB000
unkown
page read and write
clean
21AD4640000
unkown
page readonly
clean
21AD3DC7000
heap default
page read and write
clean
650000
heap private
page read and write
clean
21AD49D0000
unkown
page read and write
clean
1CBDD049000
unkown
page read and write
clean
7FF5984DE000
unkown
page readonly
clean
1E50EED0000
unkown
page read and write
clean
7FF51B597000
unkown
page readonly
clean
7FF5122DD000
unkown
page readonly
clean
181C5502000
unkown
page read and write
clean
7FF533172000
unkown
page readonly
clean
181C5D55000
unkown
page read and write
clean
181C5D14000
unkown
page read and write
clean
181C54C4000
unkown
page read and write
clean
21AD3D90000
unkown
page readonly
clean
A9D000
unkown
page read and write
clean
7FF5493ED000
unkown
page readonly
clean
22BEA7B000
unkown
page read and write
clean
181C5D82000
unkown
page read and write
clean
7FF548DFA000
unkown
page readonly
clean
1E224213000
unkown
page read and write
clean
181C5DD8000
unkown
page read and write
clean
1E22612C000
unkown
page read and write
clean
520000
unkown
page readonly
clean
2A4C000
unkown
page read and write
clean
1E227010000
unkown
page read and write
clean
7FF548C23000
unkown
page readonly
clean
7FF5936A4000
unkown
page readonly
clean
1E7BCAE0000
unkown
page readonly
clean
1E22434F000
unkown
page read and write
clean
870000
unkown
page read and write
clean
7FF57CBED000
unkown
page readonly
clean
7FF5493F7000
unkown
page readonly
clean
7FF57F8B5000
unkown
page readonly
clean
7FF583F45000
unkown
page readonly
clean
1E509A40000
unkown
page read and write
clean
181C6202000
unkown
page read and write
clean
7FF5B9766000
unkown
page readonly
clean
7FF57C90F000
unkown
page readonly
clean
7FF51226D000
unkown
page readonly
clean
181C5D5C000
unkown
page read and write
clean
181C546F000
unkown
page read and write
clean
7FF5C13A3000
unkown
page readonly
clean
7FF548CD1000
unkown
page readonly
clean
D10000
unkown
page read and write
clean
7FF5986FE000
unkown
page readonly
clean
181C5D54000
unkown
page read and write
clean
7FF5A3DE4000
unkown
page readonly
clean
1CBDD04D000
unkown
page read and write
clean
7FF5C1254000
unkown
page readonly
clean
181C544F000
unkown
page read and write
clean
2B81000
unkown
page readonly
clean
1E226193000
unkown
page read and write
clean
F80000
unkown
page read and write
clean
7FFD6966F000
unkown image
page readonly
clean
2BFB000
unkown
page readonly
clean
1E7BC90B000
heap default
page read and write
clean
1E2264C2000
unkown
page read and write
clean
E67B74B000
unkown
page read and write
clean
6C4000
heap private
page read and write
clean
1E0000
unkown
page read and write
clean
7FF51B642000
unkown
page readonly
clean
11868A29000
unkown
page read and write
clean
29E1000
unkown
page read and write
clean
7FFD6966D000
unkown image
page read and write
clean
7FF5B989A000
unkown
page readonly
clean
231D466B000
unkown
page read and write
clean
7FF549493000
unkown
page readonly
clean
7FF5B9963000
unkown
page readonly
clean
181C5D55000
unkown
page read and write
clean
BB8000
heap default
page read and write
clean
7FF533153000
unkown
page readonly
clean
1CBDD013000
unkown
page read and write
clean
385DF7E000
unkown
page read and write
clean
1CBDD08A000
unkown
page read and write
clean
1E2242F1000
unkown
page read and write
clean
181C5D50000
unkown
page read and write
clean
1E227110000
unkown
page read and write
clean
1E226113000
unkown
page read and write
clean
1CBDD06E000
unkown
page read and write
clean
7FF5934D4000
unkown
page readonly
clean
7FF5494A7000
unkown
page readonly
clean
21AD4130000
unkown
page read and write
clean
1E227210000
unkown
page read and write
clean
7FF5934C2000
unkown
page readonly
clean
7FF5C12F6000
unkown
page readonly
clean
1E226156000
unkown
page read and write
clean
400000
unkown
page readonly
clean
1E224200000
unkown
page read and write
clean
7FF598680000
unkown
page readonly
clean
7FF533088000
unkown
page readonly
clean
C031E7D000
unkown
page read and write
clean
7FF548C1E000
unkown
page readonly
clean
181C54A3000
unkown
page read and write
clean
21D95102000
unkown
page read and write
clean
4C7377B000
unkown
page read and write
clean
7FF57CA26000
unkown
page readonly
clean
7FF5AC403000
unkown
page readonly
clean
7FF5B970A000
unkown
page readonly
clean
1E226184000
unkown
page read and write
clean
7FF57FFBA000
unkown
page readonly
clean
5EE000
unkown
page read and write
clean
91391F9000
unkown
page read and write
clean
7FF57CA48000
unkown
page readonly
clean
There are 1580 hidden memdumps, click here to show them.