IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Delivery_Information_7038598.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sat1_0609_2[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
downloaded
malicious
C:\Users\user\Desktop\~$Delivery_Information_7038598.xlsb
data
dropped
malicious
C:\Users\user\kdldyeff.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\020EDADF-4CF2-4A17-8391-1EC74C095F72
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\31495E89.png
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\40C82274.png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CCF47EA8.png
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E47A0A7F.png
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F7C562F6.png
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\8AA40000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Little-endian UTF-16 Unicode text, with CR line terminators
dropped
clean
There are 2 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 -s ..\kdldyeff.dll
malicious

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
http://185.180.199.121/sat1_0609_2.dll
185.180.199.121
clean
https://store.office.cn/addinstemplate
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
http://ocsp.sectigo.com0
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://sectigo.com/CPS0
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
There are 90 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
185.180.199.121
unknown
Netherlands
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
3,>
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4,>
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4A025
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UpdateComplete
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4A6CC
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4A92E
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4ABAE
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
x`>
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FileFormatBallotBoxAppIDBootedOnce
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
There are 52 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF5B7DF4000
unkown
page readonly
clean
1D28A761000
unkown
page read and write
clean
7FF5B7D54000
unkown
page readonly
clean
7FF50AC6A000
unkown
page readonly
clean
1D28A761000
unkown
page read and write
clean
1D28A744000
unkown
page read and write
clean
1A2A2138000
unkown
page read and write
clean
4BC0000
unkown
page read and write
clean
31CEAFB000
unkown
page read and write
clean
7FF4F7614000
unkown
page readonly
clean
1A2A20D0000
unkown
page read and write
clean
1A2A4402000
unkown
page read and write
clean
2B32DC29000
unkown
page read and write
clean
7FF4F759B000
unkown
page readonly
clean
7FF5CE0D8000
unkown
page readonly
clean
288A000
unkown
page readonly
clean
1A2A417A000
unkown
page read and write
clean
1D28A7AE000
unkown
page read and write
clean
1D289ED6000
unkown
page read and write
clean
2FF0000
unkown
page readonly
clean
7FF5BA199000
unkown
page readonly
clean
1A2FB7A000
unkown
page read and write
clean
7FF58CF81000
unkown
page readonly
clean
1AF9E84E000
unkown
page read and write
clean
31CF6FB000
unkown
page read and write
clean
7FF4ECC23000
unkown
page readonly
clean
7FF5CE0CE000
unkown
page readonly
clean
7FF5B7D7E000
unkown
page readonly
clean
1D28A759000
unkown
page read and write
clean
1AF9E84E000
unkown
page read and write
clean
7FF50AC74000
unkown
page readonly
clean
7FF4ECCEC000
unkown
page readonly
clean
28F1000
unkown
page readonly
clean
B0D33AE000
unkown
page read and write
clean
1AF9E750000
unkown
page readonly
clean
7FF5BA12B000
unkown
page readonly
clean
1D28A77E000
unkown
page read and write
clean
1A2A5410000
unkown
page read and write
clean
2B32DC88000
unkown
page read and write
clean
28D5000
unkown
page readonly
clean
7FF5B7A87000
unkown
page readonly
clean
252F202A000
unkown
page read and write
clean
1A2A2128000
unkown
page read and write
clean
D841F75000
unkown
page read and write
clean
1D28A798000
unkown
page read and write
clean
7FF58CC66000
unkown
page readonly
clean
7FF5BA174000
unkown
page readonly
clean
7FF5BA19D000
unkown
page readonly
clean
9F160FE000
unkown
page read and write
clean
319A000
heap default
page read and write
clean
1D28A755000
unkown
page read and write
clean
4F7DC7F000
unkown
page read and write
clean
7FF4ECBD1000
unkown
page readonly
clean
124E8E51000
unkown
page read and write
clean
1D28A789000
unkown
page read and write
clean
1AF9E760000
unkown
page readonly
clean
1D28A745000
unkown
page read and write
clean
7FF4ECD8B000
unkown
page readonly
clean
1A2A214B000
unkown
page read and write
clean
7FF4EC477000
unkown
page readonly
clean
7FF4F7817000
unkown
page readonly
clean
4F7D8BA000
unkown
page read and write
clean
1A2A41C3000
unkown
page read and write
clean
7FF5B7D10000
unkown
page readonly
clean
1A2A4442000
unkown
page read and write
clean
11CFAA13000
unkown
page read and write
clean
11CFA950000
unkown
page readonly
clean
1D28A790000
unkown
page read and write
clean
2B32DC13000
unkown
page read and write
clean
287C000
unkown
page readonly
clean
1D28A75E000
unkown
page read and write
clean
1D28AC61000
unkown
page read and write
clean
1A2A4196000
unkown
page read and write
clean
7FF5CDF51000
unkown
page readonly
clean
9F15E7E000
unkown
page read and write
clean
1A2A1F10000
heap default
page read and write
clean
2902000
unkown
page readonly
clean
1F48AC28000
unkown
page read and write
clean
1D289E3C000
unkown
page read and write
clean
1D28A767000
unkown
page read and write
clean
7FF58D06F000
unkown
page readonly
clean
7FF5DBFFB000
unkown
page readonly
clean
1AF9E850000
unkown
page read and write
clean
1D28A745000
unkown
page read and write
clean
28A5000
unkown
page readonly
clean
7FF5B7D1B000
unkown
page readonly
clean
1AF9E84E000
unkown
page read and write
clean
9F163F9000
unkown
page read and write
clean
7FF5DC06D000
unkown
page readonly
clean
67290000
unkown image
page readonly
clean
1D28A761000
unkown
page read and write
clean
1D28A4B0000
unkown
page write copy
clean
90BB0FE000
unkown
page read and write
clean
2B32DC50000
unkown
page read and write
clean
7FF5DC0D4000
unkown
page readonly
clean
31CE53F000
unkown
page read and write
clean
1A2A4137000
unkown
page read and write
clean
1D28A520000
unkown
page readonly
clean
7FF5CE15A000
unkown
page readonly
clean
1A2A2072000
unkown
page read and write
clean
1D28A76D000
unkown
page read and write
clean
1A2A1EB0000
heap private
page read and write
clean
7FF5B740D000
unkown
page readonly
clean
1A2A2097000
unkown
page read and write
clean
7FF5BA204000
unkown
page readonly
clean
1D28A76C000
unkown
page read and write
clean
1A2A4288000
unkown
page read and write
clean
1D28A78B000
unkown
page read and write
clean
7FF5CE09C000
unkown
page readonly
clean
7FF50AC20000
unkown
page readonly
clean
7FF4F7824000
unkown
page readonly
clean
1A2A2081000
unkown
page read and write
clean
1A2A41DB000
unkown
page read and write
clean
7FF4ECDE8000
unkown
page readonly
clean
7FF4F73B9000
unkown
page readonly
clean
1D28A520000
unkown
page read and write
clean
1A2F87E000
unkown
page read and write
clean
2B32DD13000
unkown
page read and write
clean
11CFAC00000
unkown
page readonly
clean
1D28A7AD000
unkown
page read and write
clean
1D289DF0000
unkown
page readonly
clean
252F2200000
unkown
page readonly
clean
11CFAA6F000
unkown
page read and write
clean
31CEA7F000
unkown
page read and write
clean
7FF4ECDFD000
unkown
page readonly
clean
7FF50AC1E000
unkown
page readonly
clean
7FF4ECE71000
unkown
page readonly
clean
1D28A460000
unkown
page read and write
clean
7FF5DC069000
unkown
page readonly
clean
7FF50AC9D000
unkown
page readonly
clean
7FF4F782A000
unkown
page readonly
clean
1D289EC5000
unkown
page read and write
clean
252F1F90000
heap default
page read and write
clean
1A2A3EE0000
unkown
page read and write
clean
11CFA880000
unkown
page readonly
clean
1D28A510000
unkown
page readonly
clean
7FF5B7D89000
unkown
page readonly
clean
1A2A20FD000
unkown
page read and write
clean
7FF4ECDDF000
unkown
page readonly
clean
31CF7FE000
unkown
page read and write
clean
7FF5DBD6F000
unkown
page readonly
clean
7FF58CC75000
unkown
page readonly
clean
7FF4F7605000
unkown
page readonly
clean
2B32DC7B000
unkown
page read and write
clean
1A2A203F000
unkown
page read and write
clean
1D289DE0000
unkown
page readonly
clean
1D289EF1000
unkown
page read and write
clean
7FF50AC0A000
unkown
page readonly
clean
7FF5B7B61000
unkown
page readonly
clean
1A2A2169000
unkown
page read and write
clean
1D28A769000
unkown
page read and write
clean
3190000
heap default
page read and write
clean
1A2A4382000
unkown
page read and write
clean
7FF58CE5B000
unkown
page readonly
clean
1D28A769000
unkown
page read and write
clean
2972000
unkown
page readonly
clean
7FF5CDE95000
unkown
page readonly
clean
28C9000
unkown
page readonly
clean
7FF4F7834000
unkown
page readonly
clean
1F48AC00000
unkown
page read and write
clean
7FF5CE06A000
unkown
page readonly
clean
7FF5B7CFA000
unkown
page readonly
clean
1D28A746000
unkown
page read and write
clean
27B0000
unkown
page readonly
clean
2B32DC52000
unkown
page read and write
clean
1A2A20AA000
unkown
page read and write
clean
1A2A4300000
unkown
page read and write
clean
2B32DE00000
unkown
page readonly
clean
9F16678000
unkown
page read and write
clean
7FF5CE0BA000
unkown
page readonly
clean
1A2A2013000
unkown
page read and write
clean
7FF50AD11000
unkown
page readonly
clean
1D28A74D000
unkown
page read and write
clean
1D28A520000
unkown
page read and write
clean
1AF9E850000
unkown
page read and write
clean
7FF4F70E1000
unkown
page readonly
clean
7FF5CDD2C000
unkown
page readonly
clean
1A2A4302000
unkown
page read and write
clean
1A2A1F20000
unkown
page readonly
clean
7FF5CE0DE000
unkown
page readonly
clean
1D28A745000
unkown
page read and write
clean
1D28A77C000
unkown
page read and write
clean
1D28A796000
unkown
page read and write
clean
2B32DC4A000
unkown
page read and write
clean
124EA7A0000
unkown
page read and write
clean
124E9000000
unkown
page readonly
clean
7FF4F7041000
unkown
page readonly
clean
7FF58CF9E000
unkown
page readonly
clean
1F48AC13000
unkown
page read and write
clean
11CFA810000
heap private
page read and write
clean
1A2A4213000
unkown
page read and write
clean
1D28A798000
unkown
page read and write
clean
1D28AC00000
unkown
page read and write
clean
7FF5BA16A000
unkown
page readonly
clean
1D28A77E000
unkown
page read and write
clean
7FF4ECE72000
unkown
page readonly
clean
7FF58CC60000
unkown
page readonly
clean
7FF50AA71000
unkown
page readonly
clean
1A2A5310000
unkown
page read and write
clean
31CECFB000
unkown
page read and write
clean
7FF4ECE6A000
unkown
page readonly
clean
252F2066000
unkown
page read and write
clean
1AF9E831000
unkown
page read and write
clean
7FF4ECCE4000
unkown
page readonly
clean
1D28AC02000
unkown
page read and write
clean
11CFAB02000
unkown
page read and write
clean
7FF4F7342000
unkown
page readonly
clean
1A2A3F00000
unkown
page read and write
clean
7FF4ECC7B000
unkown
page readonly
clean
1D28A745000
unkown
page read and write
clean
2B32DBD0000
unkown
page readonly
clean
1A2A3F20000
unkown
page readonly
clean
252F2802000
unkown
page read and write
clean
7FF4F77F7000
unkown
page readonly
clean
7FF5DBFF0000
unkown
page readonly
clean
7FF58D074000
unkown
page readonly
clean
7FF5CE0A8000
unkown
page readonly
clean
1AF9E820000
heap default
page read and write
clean
1D28A76C000
unkown
page read and write
clean
28BC000
unkown
page readonly
clean
1A2F56B000
unkown
page read and write
clean
11CFB060000
unkown
page readonly
clean
1A2A418E000
unkown
page read and write
clean
7FF4F77AF000
unkown
page readonly
clean
1AF9E700000
unkown
page read and write
clean
1D28A520000
unkown
page read and write
clean
252F203C000
unkown
page read and write
clean
1D289D00000
heap default
page read and write
clean
1D289EA2000
unkown
page read and write
clean
1D28A756000
unkown
page read and write
clean
1D28A76E000
unkown
page read and write
clean
7FF4F77B4000
unkown
page readonly
clean
7FF4ECDD4000
unkown
page readonly
clean
1D28A769000
unkown
page read and write
clean
1D28A745000
unkown
page read and write
clean
31CEEFB000
unkown
page read and write
clean
7FF5B9A77000
unkown
page readonly
clean
7FF58CC12000
unkown
page readonly
clean
252F208B000
unkown
page read and write
clean
7FF50AB84000
unkown
page readonly
clean
3108000
unkown
page read and write
clean
252F22D0000
unkown
page readonly
clean
7FF4ECDF9000
unkown
page readonly
clean
1D28A742000
unkown
page read and write
clean
7FF5B7D86000
unkown
page readonly
clean
7FF5CDE36000
unkown
page readonly
clean
1A2A4100000
unkown
page read and write
clean
7FF58D116000
unkown
page readonly
clean
1F48AD15000
unkown
page read and write
clean
7FF4ECE64000
unkown
page readonly
clean
7FF4F7631000
unkown
page readonly
clean
7FF5B79EA000
unkown
page readonly
clean
7FF4ECD6A000
unkown
page readonly
clean
1D28A713000
unkown
page read and write
clean
7FF4F77DE000
unkown
page readonly
clean
7FF5CE162000
unkown
page readonly
clean
1D28A744000
unkown
page read and write
clean
9F161F7000
unkown
page read and write
clean
1F48AB30000
unkown
page readonly
clean
1A2A2179000
unkown
page read and write
clean
7FF4F7772000
unkown
page readonly
clean
1A2A428C000
unkown
page read and write
clean
1D28A77E000
unkown
page read and write
clean
31CE4BB000
unkown
page read and write
clean
2964000
unkown
page readonly
clean
2B32DC02000
unkown
page read and write
clean
31CEDFB000
unkown
page read and write
clean
7FF5DC0E2000
unkown
page readonly
clean
7FF4ECD7E000
unkown
page readonly
clean
7FF4F749C000
unkown
page readonly
clean
1D289E56000
unkown
page read and write
clean
7FF5BA18E000
unkown
page readonly
clean
7FF5B78D6000
unkown
page readonly
clean
7FF5DBFDC000
unkown
page readonly
clean
31CE87A000
unkown
page read and write
clean
7FF58CEF1000
unkown
page readonly
clean
1F48AD02000
unkown
page read and write
clean
7FF5B7407000
unkown
page readonly
clean
124E8E02000
unkown
page read and write
clean
7FF4F77BF000
unkown
page readonly
clean
D84207B000
unkown
page read and write
clean
1A2A20FF000
unkown
page read and write
clean
1A2A3EE0000
unkown
page read and write
clean
7FF50AC4F000
unkown
page readonly
clean
1D28A725000
unkown
page read and write
clean
7FF5B99B5000
unkown
page readonly
clean
1F48AC02000
unkown
page read and write
clean
28D7000
unkown
page readonly
clean
7FF58CFA8000
unkown
page readonly
clean
7FF5B7D6F000
unkown
page readonly
clean
2B32DC72000
unkown
page read and write
clean
7FF50AC8E000
unkown
page readonly
clean
7FF58CFED000
unkown
page readonly
clean
7FF5DBFB3000
unkown
page readonly
clean
7FF50AC37000
unkown
page readonly
clean
7FF5B7D27000
unkown
page readonly
clean
7FF50A7E0000
unkown
page readonly
clean
252F2100000
unkown
page read and write
clean
7FF50AD04000
unkown
page readonly
clean
1D28A744000
unkown
page read and write
clean
7FF50A430000
unkown
page readonly
clean
7FF50AC25000
unkown
page readonly
clean
1D28A7A2000
unkown
page read and write
clean
1D28A7AF000
unkown
page read and write
clean
1D289EDE000
unkown
page read and write
clean
31CF0FB000
unkown
page read and write
clean
1A2A418D000
unkown
page read and write
clean
90BAD7B000
unkown
page read and write
clean
1D289E51000
unkown
page read and write
clean
7FF58CED4000
unkown
page readonly
clean
90BAB7E000
unkown
page read and write
clean
2B32DB60000
heap private
page read and write
clean
252F1FC0000
unkown
page read and write
clean
1A2FA7A000
unkown
page read and write
clean
1D28A750000
unkown
page read and write
clean
1A2A4382000
unkown
page read and write
clean
1A2A4113000
unkown
page read and write
clean
7FF5B7C5D000
unkown
page readonly
clean
1D28A77C000
unkown
page read and write
clean
7FF5B78D0000
unkown
page readonly
clean
2983000
unkown
page readonly
clean
1AF9E846000
unkown
page read and write
clean
1A2A5310000
unkown
page read and write
clean
9F164F7000
unkown
page read and write
clean
31CE97E000
unkown
page read and write
clean
7FF58D108000
unkown
page readonly
clean
1D28A771000
unkown
page read and write
clean
7FF58CCB7000
unkown
page readonly
clean
1AF9E920000
unkown
page readonly
clean
7FF5CDD47000
unkown
page readonly
clean
7FF5B7C0E000
unkown
page readonly
clean
1F48AD23000
unkown
page read and write
clean
31CE5BE000
unkown
page read and write
clean
7FF5CDE2B000
unkown
page readonly
clean
1D28A78E000
unkown
page read and write
clean
2B32DC00000
unkown
page read and write
clean
7FF4F78D1000
unkown
page readonly
clean
7FF5B7D15000
unkown
page readonly
clean
1D28A74D000
unkown
page read and write
clean
28EA000
unkown
page readonly
clean
1D28A767000
unkown
page read and write
clean
7FF5B7DFA000
unkown
page readonly
clean
1D28A79B000
unkown
page read and write
clean
2906000
unkown
page readonly
clean
1A2A4243000
unkown
page read and write
clean
1D28A76E000
unkown
page read and write
clean
7FF58CFA3000
unkown
page readonly
clean
258C000
unkown
page readonly
clean
7FF5DC04F000
unkown
page readonly
clean
7FF58D004000
unkown
page readonly
clean
90BAFFF000
unkown
page read and write
clean
7FF5B7C0B000
unkown
page readonly
clean
7FF4EC940000
unkown
page readonly
clean
7FF5B7D3F000
unkown
page readonly
clean
7FF5CE0E9000
unkown
page readonly
clean
7FF5CDE91000
unkown
page readonly
clean
1A2A20BF000
unkown
page read and write
clean
1A2A2029000
unkown
page read and write
clean
1A2A3F40000
unkown
page readonly
clean
1D28A800000
unkown
page readonly
clean
7FF5B7D64000
unkown
page readonly
clean
7FF4ECD85000
unkown
page readonly
clean
7FF4EC615000
unkown
page readonly
clean
7FF4F7780000
unkown
page readonly
clean
7FF4F780F000
unkown
page readonly
clean
4F7D93F000
unkown
page read and write
clean
1AB0B7E000
unkown
page read and write
clean
1A2A1FF0000
unkown
page readonly
clean
2EF0000
unkown
page readonly
clean
252F2002000
unkown
page read and write
clean
2983000
unkown
page readonly
clean
7FF58CEE1000
unkown
page readonly
clean
124E8C20000
unkown
page readonly
clean
1D28AC02000
unkown
page read and write
clean
252F2113000
unkown
page read and write
clean
252F2102000
unkown
page read and write
clean
124EA8A0000
unkown
page readonly
clean
11CFB202000
unkown
page read and write
clean
7FF58D184000
unkown
page readonly
clean
7FF4ECC7E000
unkown
page readonly
clean
31CEF7C000
unkown
page read and write
clean
1D28A602000
unkown
page read and write
clean
7FF58C9F7000
unkown
page readonly
clean
7FF58D192000
unkown
page readonly
clean
11CFAA3C000
unkown
page read and write
clean
1D289E70000
unkown
page read and write
clean
D841B1C000
unkown
page read and write
clean
1D28A78C000
unkown
page read and write
clean
7FF5BA212000
unkown
page readonly
clean
7FF58D00C000
unkown
page readonly
clean
31CF5FB000
unkown
page read and write
clean
7FF5CE033000
unkown
page readonly
clean
7FF5B7C7C000
unkown
page readonly
clean
2B32DC49000
unkown
page read and write
clean
7FF5B7D3C000
unkown
page readonly
clean
1A2A3F10000
unkown
page read and write
clean
7FF50AC64000
unkown
page readonly
clean
11CFAB08000
unkown
page read and write
clean
7FF50AC7F000
unkown
page readonly
clean
252F1F30000
heap private
page read and write
clean
25BB000
unkown
page readonly
clean
1A2A2000000
unkown
page read and write
clean
4F7DDFD000
unkown
page read and write
clean
28EF000
unkown
page readonly
clean
7FF5BA17E000
unkown
page readonly
clean
1D28AC02000
unkown
page read and write
clean
7FF5DC03A000
unkown
page readonly
clean
31CF2FD000
unkown
page read and write
clean
2955000
unkown
page readonly
clean
1AF9E847000
unkown
page read and write
clean
7FF4ECD6C000
unkown
page readonly
clean
7FF58D0CC000
unkown
page readonly
clean
7FF5CDD3A000
unkown
page readonly
clean
1A2A4200000
unkown
page read and write
clean
7FF50AC0C000
unkown
page readonly
clean
7FF5BA20A000
unkown
page readonly
clean
1D28A000000
unkown
page readonly
clean
1D289E4F000
unkown
page read and write
clean
7FF50AC2B000
unkown
page readonly
clean
7FF58D09A000
unkown
page readonly
clean
1A2A216A000
unkown
page read and write
clean
1D28A72C000
unkown
page read and write
clean
1A2A4400000
unkown
page read and write
clean
90BAAFE000
unkown
page read and write
clean
7FF4F78C4000
unkown
page readonly
clean
7FF50AAC3000
unkown
page readonly
clean
1D28A75F000
unkown
page read and write
clean
1A2A418C000
unkown
page read and write
clean
1F48AAC0000
unkown
page read and write
clean
7FF50AC57000
unkown
page readonly
clean
1A2A4254000
unkown
page read and write
clean
28C0000
unkown
page readonly
clean
124E8E1F000
unkown
page read and write
clean
7FF5CE0ED000
unkown
page readonly
clean
1A2A2055000
unkown
page read and write
clean
7FF5B9A73000
unkown
page readonly
clean
1A2A3ED0000
unkown
page readonly
clean
7FF4ECD97000
unkown
page readonly
clean
7FF5CE09F000
unkown
page readonly
clean
1D28A789000
unkown
page read and write
clean
7FF4F780C000
unkown
page readonly
clean
1A2A2114000
unkown
page read and write
clean
1A2F9FE000
unkown
page read and write
clean
7FF4ECC61000
unkown
page readonly
clean
9F15B0B000
unkown
page read and write
clean
7FF4F76E8000
unkown
page readonly
clean
31CEB7B000
unkown
page read and write
clean
1A2A4342000
unkown
page read and write
clean
11CFA960000
unkown
page readonly
clean
7FF4ECD7A000
unkown
page readonly
clean
1D28A784000
unkown
page read and write
clean
B0D32AD000
unkown
page read and write
clean
7FF4F784E000
unkown
page readonly
clean
7FF5B7E02000
unkown
page readonly
clean
7FF4F7848000
unkown
page readonly
clean
1D28A7AD000
unkown
page read and write
clean
7FF4F77E0000
unkown
page readonly
clean
1D28A722000
unkown
page read and write
clean
252F2055000
unkown
page read and write
clean
1A2A41BA000
unkown
page read and write
clean
1D28A761000
unkown
page read and write
clean
9F1607A000
unkown
page read and write
clean
2B32E600000
unkown
page readonly
clean
2FC0000
unkown
page read and write
clean
1D28A77C000
unkown
page read and write
clean
31CE9FA000
unkown
page read and write
clean
252F208F000
unkown
page read and write
clean
1AB087E000
unkown
page read and write
clean
1D28AC61000
unkown
page read and write
clean
1D28A7AD000
unkown
page read and write
clean
1A2A4162000
unkown
page read and write
clean
11CFAA55000
unkown
page read and write
clean
7FF50AB1E000
unkown
page readonly
clean
1D28A7D9000
unkown
page read and write
clean
7FF5B7C74000
unkown
page readonly
clean
1D28A74D000
unkown
page read and write
clean
7FF58CE17000
unkown
page readonly
clean
1A2A3E70000
heap private
page read and write
clean
1A2A4542000
unkown
page read and write
clean
7FF5CDF73000
unkown
page readonly
clean
1A2A3E80000
unkown
page readonly
clean
1D28A78D000
unkown
page read and write
clean
1A2F97C000
unkown
page read and write
clean
1D28A540000
unkown
page readonly
clean
7FF5CE075000
unkown
page readonly
clean
7FF4EC47D000
unkown
page readonly
clean
7FF58CF4A000
unkown
page readonly
clean
4F7DD7E000
unkown
page read and write
clean
1A2A2129000
unkown
page read and write
clean
7FF58D08C000
unkown
page readonly
clean
2CD9000
unkown
page read and write
clean
7FF5DB7F6000
unkown
page readonly
clean
28B3000
unkown
page readonly
clean
310F000
unkown
page read and write
clean
1D28A778000
unkown
page read and write
clean
7FF4ECDAF000
unkown
page readonly
clean
2B32DC3C000
unkown
page read and write
clean
7FF58D07F000
unkown
page readonly
clean
1D289CA0000
heap private
page read and write
clean
1D289E00000
unkown
page read and write
clean
11CFA870000
heap default
page read and write
clean
7FF5DBF86000
unkown
page readonly
clean
7FF5CDEC9000
unkown
page readonly
clean
2B32E940000
unkown
page readonly
clean
1A2A4342000
unkown
page read and write
clean
7FF4ECCCD000
unkown
page readonly
clean
7FF58CFF3000
unkown
page readonly
clean
7FF58C9A1000
unkown
page readonly
clean
31CED7B000
unkown
page read and write
clean
7FF4F7851000
unkown
page readonly
clean
28DF000
unkown
page readonly
clean
31CF57B000
unkown
page read and write
clean
D84227F000
unkown
page read and write
clean
9F15B8E000
unkown
page read and write
clean
7FF4F76DB000
unkown
page readonly
clean
1D28A777000
unkown
page read and write
clean
7FF5CE0E6000
unkown
page readonly
clean
1A2A5010000
unkown
page read and write
clean
11CFAA2A000
unkown
page read and write
clean
1D28A76C000
unkown
page read and write
clean
D841B9F000
unkown
page read and write
clean
7FF58D0EA000
unkown
page readonly
clean
1A2A5410000
unkown
page read and write
clean
31CF17A000
unkown
page read and write
clean
7FF5B78E5000
unkown
page readonly
clean
309C000
unkown
page read and write
clean
1A2A4196000
unkown
page read and write
clean
1D28A753000
unkown
page read and write
clean
124E8BB0000
heap private
page read and write
clean
1D28A74C000
unkown
page read and write
clean
2B32DBF0000
unkown
page read and write
clean
7FF4F7616000
unkown
page readonly
clean
7FF5B7D47000
unkown
page readonly
clean
7FF50AB73000
unkown
page readonly
clean
1A2A418B000
unkown
page read and write
clean
7FF5B7D78000
unkown
page readonly
clean
1A2A41E4000
unkown
page read and write
clean
7FF5DC0E1000
unkown
page readonly
clean
1D28A77E000
unkown
page read and write
clean
7FF58D040000
unkown
page readonly
clean
1A2A419B000
unkown
page read and write
clean
1A2A5000000
unkown
page read and write
clean
1D28A753000
unkown
page read and write
clean
1AF9E7C0000
heap private
page read and write
clean
11CFAB00000
unkown
page read and write
clean
1A2A4257000
unkown
page read and write
clean
1F48AE02000
unkown
page read and write
clean
7FF5DC0DA000
unkown
page readonly
clean
7FF58CF43000
unkown
page readonly
clean
1A2A5210000
unkown
page read and write
clean
1D28A768000
unkown
page read and write
clean
D84237F000
unkown
page read and write
clean
1D28A75A000
unkown
page read and write
clean
252F1FB0000
unkown
page readonly
clean
7FF4F76E3000
unkown
page readonly
clean
7FF5BA14F000
unkown
page readonly
clean
1D28A756000
unkown
page read and write
clean
3050000
heap default
page read and write
clean
7FF5B7BB3000
unkown
page readonly
clean
1A2A42A5000
unkown
page read and write
clean
7FF4EC955000
unkown
page readonly
clean
D842177000
unkown
page read and write
clean
1A2A2123000
unkown
page read and write
clean
7FF5B7C63000
unkown
page readonly
clean
2FE0000
unkown
page readonly
clean
1A2A4482000
unkown
page read and write
clean
2B32DD08000
unkown
page read and write
clean
31CF07B000
unkown
page read and write
clean
7FF5BA164000
unkown
page readonly
clean
1A2A3EF0000
unkown
page read and write
clean
7FF5B7CFC000
unkown
page readonly
clean
1D28A74E000
unkown
page read and write
clean
124E8E13000
unkown
page read and write
clean
31CF67C000
unkown
page read and write
clean
1D28A767000
unkown
page read and write
clean
30C0000
heap private
page read and write
clean
7FF50AD12000
unkown
page readonly
clean
1A2A5210000
unkown
page read and write
clean
1D289E29000
unkown
page read and write
clean
31CEE7B000
unkown
page read and write
clean
1A2A4002000
unkown
page read and write
clean
31CF47B000
unkown
page read and write
clean
1A2FBFC000
unkown
page read and write
clean
31CF37B000
unkown
page read and write
clean
7FF58C9F3000
unkown
page readonly
clean
7FF58D0A5000
unkown
page readonly
clean
1AF9E850000
unkown
page read and write
clean
1D28AD00000
unkown
page read and write
clean
1D28A783000
unkown
page read and write
clean
7FF5BA120000
unkown
page readonly
clean
7FF5BA188000
unkown
page readonly
clean
7FF58CE66000
unkown
page readonly
clean
1A2A20B3000
unkown
page read and write
clean
1D28A74E000
unkown
page read and write
clean
7FF5CE070000
unkown
page readonly
clean
7FF50AB8C000
unkown
page readonly
clean
124E8F02000
unkown
page read and write
clean
3470000
heap private
page read and write
clean
124E8E00000
unkown
page read and write
clean
7FF4F74AF000
unkown
page readonly
clean
2B32E402000
unkown
page read and write
clean
7FF5CE07B000
unkown
page readonly
clean
1D28A745000
unkown
page read and write
clean
2E9B000
unkown
page read and write
clean
7FF5CDF6B000
unkown
page readonly
clean
1AB0AFB000
unkown
page read and write
clean
1D28A71F000
unkown
page read and write
clean
7FF4F7782000
unkown
page readonly
clean
1A2FAFA000
unkown
page read and write
clean
7FF58CD79000
unkown
page readonly
clean
124E8CF0000
unkown
page write copy
clean
7FF58D0FF000
unkown
page readonly
clean
1A2F8F9000
unkown
page read and write
clean
1D28A752000
unkown
page read and write
clean
1D28A783000
unkown
page read and write
clean
1F48AD00000
unkown
page read and write
clean
7FF50AC96000
unkown
page readonly
clean
7FF58D0D7000
unkown
page readonly
clean
1D289EB0000
unkown
page read and write
clean
7FF58D0F4000
unkown
page readonly
clean
7FF58D06B000
unkown
page readonly
clean
124E8E69000
unkown
page read and write
clean
7FF58D08A000
unkown
page readonly
clean
7FF50AC88000
unkown
page readonly
clean
7FF4F76C1000
unkown
page readonly
clean
7FF4F7639000
unkown
page readonly
clean
4F7DCF9000
unkown
page read and write
clean
1D28A7AF000
unkown
page read and write
clean
7FF4F77CC000
unkown
page readonly
clean
7FF58D191000
unkown
page readonly
clean
7FF4F75B8000
unkown
page readonly
clean
7FF50AC1A000
unkown
page readonly
clean
7FF5CD8D1000
unkown
page readonly
clean
1D28A77F000
unkown
page read and write
clean
7FF4F77AB000
unkown
page readonly
clean
7FF5DC01F000
unkown
page readonly
clean
31CF1FB000
unkown
page read and write
clean
1D28A743000
unkown
page read and write
clean
7FF4F703D000
unkown
page readonly
clean
7FF4ECAF7000
unkown
page readonly
clean
124E8E54000
unkown
page read and write
clean
1D28AC02000
unkown
page read and write
clean
7FF5CE0C4000
unkown
page readonly
clean
1A2A4500000
unkown
page read and write
clean
3480000
unkown
page readonly
clean
7FF5CE161000
unkown
page readonly
clean
1D28A77D000
unkown
page read and write
clean
1A2A4274000
unkown
page read and write
clean
1D289F16000
unkown
page read and write
clean
1A2A2250000
unkown
page readonly
clean
31CF77C000
unkown
page read and write
clean
1D289E13000
unkown
page read and write
clean
7FF5DC027000
unkown
page readonly
clean
1D28A759000
unkown
page read and write
clean
7FF58CCB5000
unkown
page readonly
clean
7FF4F7601000
unkown
page readonly
clean
7FF50A997000
unkown
page readonly
clean
1D28A74E000
unkown
page read and write
clean
1D289F08000
unkown
page read and write
clean
1D28A700000
unkown
page read and write
clean
124E8D40000
unkown
page readonly
clean
7FF4F77EB000
unkown
page readonly
clean
1D28A7AF000
unkown
page read and write
clean
7FF58D18A000
unkown
page readonly
clean
1F48AB20000
heap default
page read and write
clean
1D28A77C000
unkown
page read and write
clean
1D28A7AF000
unkown
page read and write
clean
1D28A769000
unkown
page read and write
clean
1D289E7B000
unkown
page read and write
clean
1D289F13000
unkown
page read and write
clean
28AC000
unkown
page readonly
clean
2883000
unkown
page readonly
clean
7FF5B7D8D000
unkown
page readonly
clean
11CFB400000
unkown
page readonly
clean
1AB0C77000
unkown
page read and write
clean
7FF58D10E000
unkown
page readonly
clean
1D289EA6000
unkown
page read and write
clean
9F1677F000
unkown
page read and write
clean
1D289EBF000
unkown
page read and write
clean
1D28AC54000
unkown
page read and write
clean
1A2A2200000
unkown
page write copy
clean
1D28A757000
unkown
page read and write
clean
1A2A20AA000
unkown
page read and write
clean
1A2A4600000
unkown
page readonly
clean
7FF50A7F5000
unkown
page readonly
clean
90BAA7C000
unkown
page read and write
clean
9F1657E000
unkown
page read and write
clean
1D28A761000
unkown
page read and write
clean
1D28A76B000
unkown
page read and write
clean
7FF50AC4C000
unkown
page readonly
clean
11CFAB13000
unkown
page read and write
clean
7FF5BA211000
unkown
page readonly
clean
1A2A5110000
unkown
page read and write
clean
1A2A42D6000
unkown
page read and write
clean
7FF4ECDCA000
unkown
page readonly
clean
1A2F5EE000
unkown
page read and write
clean
1D28A480000
unkown
page readonly
clean
7FF58CF9B000
unkown
page readonly
clean
7FF4ECDC4000
unkown
page readonly
clean
1D28A769000
unkown
page read and write
clean
1A2A3AF0000
unkown
page readonly
clean
7FF4ECDF6000
unkown
page readonly
clean
1D28A78C000
unkown
page read and write
clean
1D289EA6000
unkown
page read and write
clean
7FF4ECCD3000
unkown
page readonly
clean
7FF58CC0E000
unkown
page readonly
clean
1D28A746000
unkown
page read and write
clean
1D28A76F000
unkown
page read and write
clean
1D289EE8000
unkown
page read and write
clean
7FF50AC99000
unkown
page readonly
clean
1A2A20EB000
unkown
page read and write
clean
1D28A7BE000
unkown
page read and write
clean
1D28A753000
unkown
page read and write
clean
1D28A500000
unkown
page readonly
clean
7FF50A324000
unkown
page readonly
clean
7FF4F77E5000
unkown
page readonly
clean
7FF5B7D0E000
unkown
page readonly
clean
7FF50A31E000
unkown
page readonly
clean
1D28A769000
unkown
page read and write
clean
7FF58D0AB000
unkown
page readonly
clean
7FF5BA125000
unkown
page readonly
clean
2CDD000
unkown
page read and write
clean
124E8E29000
unkown
page read and write
clean
1D28A790000
unkown
page read and write
clean
252F2000000
unkown
page read and write
clean
11CFAA4F000
unkown
page read and write
clean
3010000
unkown
page execute and read and write
clean
1D28A756000
unkown
page read and write
clean
7FF50AB1B000
unkown
page readonly
clean
1D28A7D3000
unkown
page read and write
clean
31CEBF9000
unkown
page read and write
clean
7FF4F772D000
unkown
page readonly
clean
1D289D10000
unkown
page readonly
clean
7FF5DC066000
unkown
page readonly
clean
2E5C000
unkown
page read and write
clean
7FF5CE0E1000
unkown
page readonly
clean
1A2A2083000
unkown
page read and write
clean
1A2A20A4000
unkown
page read and write
clean
7FF4ECDEE000
unkown
page readonly
clean
2B32DC27000
unkown
page read and write
clean
1D28AD02000
unkown
page read and write
clean
1D28AE00000
unkown
page readonly
clean
7FF4F7859000
unkown
page readonly
clean
1AB0D7E000
unkown
page read and write
clean
7FF50AB6D000
unkown
page readonly
clean
7FF5CD8CD000
unkown
page readonly
clean
7FF5CDF78000
unkown
page readonly
clean
2978000
unkown
page readonly
clean
252F2013000
unkown
page read and write
clean
7FF5DBFDA000
unkown
page readonly
clean
7FF4F74B7000
unkown
page readonly
clean
7FF5CE06E000
unkown
page readonly
clean
31CF3FB000
unkown
page read and write
clean
1D28A73D000
unkown
page read and write
clean
252F1FA0000
unkown
page readonly
clean
7FF5B7D5A000
unkown
page readonly
clean
2B32DBC0000
heap default
page read and write
clean
1D28A74E000
unkown
page read and write
clean
7FF5BA14C000
unkown
page readonly
clean
7FF5B7E01000
unkown
page readonly
clean
7FF50AD0A000
unkown
page readonly
clean
7FF5B7D0A000
unkown
page readonly
clean
7FF5CDD3F000
unkown
page readonly
clean
7FF58C79D000
unkown
page readonly
clean
252F2108000
unkown
page read and write
clean
7FF58CED6000
unkown
page readonly
clean
1D28A744000
unkown
page read and write
clean
7FF50A7E6000
unkown
page readonly
clean
7FF58CB7E000
unkown
page readonly
clean
7FF58C797000
unkown
page readonly
clean
9F162FF000
unkown
page read and write
clean
11CFAA80000
unkown
page read and write
clean
7FF4ECDB7000
unkown
page readonly
clean
7FF5CE012000
unkown
page readonly
clean
B0D3A7E000
unkown
page read and write
clean
31CF4FB000
unkown
page read and write
clean
7FF4ECD80000
unkown
page readonly
clean
1D28A798000
unkown
page read and write
clean
7FF4ECDAC000
unkown
page readonly
clean
1AF9E630000
unkown
page readonly
clean
2B32DC4C000
unkown
page read and write
clean
11CFAA00000
unkown
page read and write
clean
2B32DBE0000
unkown
page readonly
clean
1D28A76E000
unkown
page read and write
clean
1AF9E836000
heap default
page read and write
clean
11CFA970000
unkown
page read and write
clean
7FF4F77A3000
unkown
page readonly
clean
31CE8FA000
unkown
page read and write
clean
7FF4F75A6000
unkown
page readonly
clean
2B32DC70000
unkown
page read and write
clean
1D28A7BE000
unkown
page read and write
clean
1A2A3EE0000
unkown
page read and write
clean
1D28A745000
unkown
page read and write
clean
1A2A4141000
unkown
page read and write
clean
1AF9E7C5000
heap private
page read and write
clean
1D28A757000
unkown
page read and write
clean
7FF4F777C000
unkown
page readonly
clean
1D28A730000
unkown
page read and write
clean
1A2A20CC000
unkown
page read and write
clean
7FF58D09E000
unkown
page readonly
clean
2B32DD02000
unkown
page read and write
clean
7FF5B7BF1000
unkown
page readonly
clean
1A2A416C000
unkown
page read and write
clean
2B32DD00000
unkown
page read and write
clean
7FF58D0B7000
unkown
page readonly
clean
7FF4F74AA000
unkown
page readonly
clean
31CEFFB000
unkown
page read and write
clean
1D28A759000
unkown
page read and write
clean
7FF4F7621000
unkown
page readonly
clean
90BAEF7000
unkown
page read and write
clean
1D28A761000
unkown
page read and write
clean
1A2A3E60000
unkown
page read and write
clean
252F2D40000
unkown
page readonly
clean
290B000
unkown
page readonly
clean
1A2A3EE0000
unkown
page read and write
clean
7FF4F77DA000
unkown
page readonly
clean
252F2060000
unkown
page read and write
clean
1D28A7AD000
unkown
page read and write
clean
1AB059C000
unkown
page read and write
clean
7FF58D0CF000
unkown
page readonly
clean
1A2A5410000
unkown
page read and write
clean
1A2A209B000
unkown
page read and write
clean
1D28A725000
unkown
page read and write
clean
1D28A753000
unkown
page read and write
clean
7FF5DC044000
unkown
page readonly
clean
252F2A00000
unkown
page readonly
clean
4F7D9BF000
unkown
page read and write
clean
7FF5CE087000
unkown
page readonly
clean
7FF58D0A0000
unkown
page readonly
clean
28DD000
unkown
page readonly
clean
1D28A75E000
unkown
page read and write
clean
7FF58D119000
unkown
page readonly
clean
1D289F02000
unkown
page read and write
clean
1D28A754000
unkown
page read and write
clean
7FF58CEA0000
unkown
page readonly
clean
1D28AC02000
unkown
page read and write
clean
7FF5CE0B4000
unkown
page readonly
clean
7FF5DC034000
unkown
page readonly
clean
7FF4F7726000
unkown
page readonly
clean
28E3000
unkown
page readonly
clean
1D289E81000
unkown
page read and write
clean
7FF58CC02000
unkown
page readonly
clean
D841E7E000
unkown
page read and write
clean
2951000
unkown
page readonly
clean
1AB08FD000
unkown
page read and write
clean
7FF58D0E4000
unkown
page readonly
clean
124E8E3F000
unkown
page read and write
clean
2B32DC4E000
unkown
page read and write
clean
7FF4EC946000
unkown
page readonly
clean
1A2A41D7000
unkown
page read and write
clean
7FF5BA158000
unkown
page readonly
clean
7FF4F78D2000
unkown
page readonly
clean
1A2A4502000
unkown
page read and write
clean
31CF27C000
unkown
page read and write
clean
2879000
unkown
page readonly
clean
1D28A7AD000
unkown
page read and write
clean
124E8C10000
heap default
page read and write
clean
1A2A2127000
unkown
page read and write
clean
1AB0E7E000
unkown
page read and write
clean
1A2A5313000
unkown
page read and write
clean
1D289E4B000
unkown
page read and write
clean
7FF4F783E000
unkown
page readonly
clean
1A2A39F0000
unkown
page read and write
clean
7FF5CE154000
unkown
page readonly
clean
7FF5CE010000
unkown
page readonly
clean
1D28A75E000
unkown
page read and write
clean
7FF4F75BF000
unkown
page readonly
clean
90BADFE000
unkown
page read and write
clean
1D28A71F000
unkown
page read and write
clean
1D28A530000
unkown
page read and write
clean
7FF4F7856000
unkown
page readonly
clean
7FF58D042000
unkown
page readonly
clean
1D28AC02000
unkown
page read and write
clean
2B32DED0000
unkown
page readonly
clean
1D28A77B000
unkown
page read and write
clean
1AF9E720000
unkown
page read and write
clean
1A2A2102000
unkown
page read and write
clean
7FF4F78CA000
unkown
page readonly
clean
7FF50AB01000
unkown
page readonly
clean
31CEC7B000
unkown
page read and write
clean
7FF4F77CA000
unkown
page readonly
clean
1D28A754000
unkown
page read and write
clean
There are 872 hidden memdumps, click here to show them.