IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Total_order_data-V2434883.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\sat1_0609_2[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
downloaded
malicious
C:\Users\user\Desktop\~$Total_order_data-V2434883.xlsb
data
dropped
malicious
C:\Users\user\kdldyeff.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\E1CDFF1D-0935-429C-935F-99A7DA32E11F
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\11B5F99.png
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\39FE7E0F.png
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4C6BD0C6.png
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A79D60C4.png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B7ECCFF8.png
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\9A810000
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 -s ..\kdldyeff.dll
malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe
clean

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
http://185.180.199.121/sat1_0609_2.dll
185.180.199.121
clean
https://store.office.cn/addinstemplate
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
http://ocsp.sectigo.com0
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://sectigo.com/CPS0
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
There are 90 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
185.180.199.121
unknown
Netherlands
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
$>$
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
%>$
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18393
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
188E3
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18A3A
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18B06
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
b+$
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FileFormatBallotBoxAppIDBootedOnce
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
There are 46 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF4F289A000
unkown
page readonly
clean
2304F83B000
unkown
page read and write
clean
1EF538C1000
unkown
page read and write
clean
154663DF000
unkown
page read and write
clean
1F9AAFF0000
unkown
page read and write
clean
17C15468000
unkown
page read and write
clean
7FF532558000
unkown
page readonly
clean
25FFCB50000
unkown
page read and write
clean
15466600000
unkown
page read and write
clean
300E000
unkown
page readonly
clean
154642B5000
unkown
page read and write
clean
1EF4EA02000
unkown
page read and write
clean
7FF4F297E000
unkown
page readonly
clean
7FF5327A5000
unkown
page readonly
clean
7FF5DA01E000
unkown
page readonly
clean
7FF5326F3000
unkown
page readonly
clean
10542EB000
unkown
page read and write
clean
7FF58B1A9000
unkown
page readonly
clean
E28B07A000
unkown
page read and write
clean
7FF53906F000
unkown
page readonly
clean
1546433D000
unkown
page read and write
clean
1F94E5F0000
unkown
page read and write
clean
25FFC4C7000
unkown
page read and write
clean
25FFD002000
unkown
page read and write
clean
7FF5D9FE2000
unkown
page readonly
clean
7FF595E95000
unkown
page readonly
clean
7FF51833A000
unkown
page readonly
clean
7FF4FE21B000
unkown
page readonly
clean
7FF4F28CF000
unkown
page readonly
clean
2304F800000
unkown
page read and write
clean
7FF4F3999000
unkown
page readonly
clean
154642DC000
unkown
page read and write
clean
15467110000
unkown
page read and write
clean
208140D0000
unkown
page write copy
clean
A20000
unkown
page execute and read and write
clean
154663B1000
unkown
page read and write
clean
7FF57D0E9000
unkown
page readonly
clean
7FF5CD317000
unkown
page readonly
clean
7FF532608000
unkown
page readonly
clean
1EF4E28D000
unkown
page read and write
clean
7FF53922F000
unkown
page readonly
clean
1EF4E1E0000
unkown
page readonly
clean
25EAE7D000
unkown
page read and write
clean
25FFCB85000
unkown
page read and write
clean
1DD5263E000
unkown
page read and write
clean
1F94E8A0000
heap private
page read and write
clean
25FFCB7C000
unkown
page read and write
clean
2563E060000
heap private
page read and write
clean
3118000
unkown
page readonly
clean
1ABA3B90000
unkown
page read and write
clean
21B36240000
heap default
page read and write
clean
364D1FE000
unkown
page read and write
clean
1ABA3C29000
unkown
page read and write
clean
154642EA000
unkown
page read and write
clean
7FF5A3948000
unkown
page readonly
clean
1EF53730000
unkown
page read and write
clean
21B363E0000
unkown
page readonly
clean
2255DE00000
unkown
page read and write
clean
7FF5184EC000
unkown
page readonly
clean
2AF1E481000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
1546638F000
unkown
page read and write
clean
21B3644A000
unkown
page read and write
clean
7FF5DC9D1000
unkown
page readonly
clean
F63000
heap private
page read and write
clean
21B38380000
unkown
page write copy
clean
27D686B6000
unkown
page read and write
clean
21B36340000
unkown
page read and write
clean
10549F9000
unkown
page read and write
clean
1546431D000
unkown
page read and write
clean
7FF532623000
unkown
page readonly
clean
7FF532811000
unkown
page readonly
clean
1EF53B80000
unkown
page read and write
clean
7FF5DCF6E000
unkown
page readonly
clean
1F9AB670000
unkown
page readonly
clean
7FF595D1E000
unkown
page readonly
clean
1EF4F2F0000
unkown
page readonly
clean
1C2332C0000
unkown
page readonly
clean
15467000000
unkown
page read and write
clean
7FF532786000
unkown
page readonly
clean
2AF1E44F000
unkown
page read and write
clean
7FF5DCEB5000
unkown
page readonly
clean
7FF5C7908000
unkown
page readonly
clean
7FF532796000
unkown
page readonly
clean
20813E6E000
unkown
page read and write
clean
55BBD4B000
unkown
page read and write
clean
25FFCFA0000
unkown
page readonly
clean
ECE60FE000
unkown
page read and write
clean
12A9000
unkown
page read and write
clean
2563EA02000
unkown
page read and write
clean
1EF53750000
unkown
page read and write
clean
1C231810000
heap default
page read and write
clean
7FF59F658000
unkown
page readonly
clean
9F555FC000
unkown
page read and write
clean
1054CFA000
unkown
page read and write
clean
1EF53B50000
unkown
page read and write
clean
7FF53256A000
unkown
page readonly
clean
7FF57CA5B000
unkown
page readonly
clean
7FF5A3A9F000
unkown
page readonly
clean
7FF4F37CF000
unkown
page readonly
clean
122F000
unkown
page read and write
clean
E28B0FE000
unkown
page read and write
clean
7FF4F232D000
unkown
page readonly
clean
3083000
unkown
page readonly
clean
7FF57CCB8000
unkown
page readonly
clean
25EA87C000
unkown
page read and write
clean
25FFCB83000
unkown
page read and write
clean
7FF5180B1000
unkown
page readonly
clean
1F94E5D0000
unkown
page read and write
clean
7FF57CEA8000
unkown
page readonly
clean
E251F6E000
unkown
page read and write
clean
7FF59F6D5000
unkown
page readonly
clean
7FF59F749000
unkown
page readonly
clean
7FF5CD390000
unkown
page readonly
clean
7FF532323000
unkown
page readonly
clean
25FFCB83000
unkown
page read and write
clean
1EF53B80000
unkown
page read and write
clean
3050000
unkown
page readonly
clean
7FF5D9D63000
unkown
page readonly
clean
66C000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
1546630F000
unkown
page read and write
clean
1F9AB040000
unkown
page read and write
clean
25FFC9F0000
unkown
page readonly
clean
9C0000
unkown
page read and write
clean
154661B0000
unkown
page read and write
clean
7FF5A3AF0000
unkown
page readonly
clean
ECE65FF000
unkown
page read and write
clean
7476E7B000
unkown
page read and write
clean
7FF5A3A68000
unkown
page readonly
clean
974000
unkown
page read and write
clean
55BC17A000
unkown
page read and write
clean
7FF539239000
unkown
page readonly
clean
1546431C000
unkown
page read and write
clean
1EF53720000
unkown
page read and write
clean
7FF595EF0000
unkown
page readonly
clean
55BC1FF000
unkown
page read and write
clean
7FF5181C8000
unkown
page readonly
clean
2AF1E600000
unkown
page readonly
clean
25FFC9D0000
unkown
page readonly
clean
154661C0000
unkown
page read and write
clean
1546631E000
unkown
page read and write
clean
17C152B0000
heap default
page read and write
clean
1F9AB002000
unkown
page read and write
clean
1DD52602000
unkown
page read and write
clean
20813D70000
heap private
page read and write
clean
15466800000
unkown
page read and write
clean
21B36400000
unkown
page read and write
clean
15466190000
unkown
page readonly
clean
7FF5A3ACC000
unkown
page readonly
clean
9F06A7F000
unkown
page read and write
clean
7FF58AF61000
unkown
page readonly
clean
7FF5DCD87000
unkown
page readonly
clean
25EB07F000
unkown
page read and write
clean
15465DC0000
unkown
page readonly
clean
1054AFA000
unkown
page read and write
clean
1C231805000
heap private
page read and write
clean
7FF5181B1000
unkown
page readonly
clean
7FF5C7CA1000
unkown
page readonly
clean
7FF5C7D39000
unkown
page readonly
clean
25FFC4A5000
unkown
page read and write
clean
7FF538DDA000
unkown
page readonly
clean
154642B0000
unkown
page read and write
clean
7FF5DA051000
unkown
page readonly
clean
154663F3000
unkown
page read and write
clean
25FFD102000
unkown
page read and write
clean
710000
unkown
page readonly
clean
1DD52800000
unkown
page readonly
clean
7FF5A3B59000
unkown
page readonly
clean
21B3648B000
unkown
page read and write
clean
25FFC49E000
unkown
page read and write
clean
7FF4F396A000
unkown
page readonly
clean
15467010000
unkown
page read and write
clean
ECC357B000
unkown
page read and write
clean
21B3645A000
unkown
page read and write
clean
2563E22A000
unkown
page read and write
clean
25FFCB4D000
unkown
page read and write
clean
7476D7B000
unkown
page read and write
clean
7FF5390F3000
unkown
page readonly
clean
2304F802000
unkown
page read and write
clean
1ABA3C3C000
unkown
page read and write
clean
2AF1EC02000
unkown
page read and write
clean
15466742000
unkown
page read and write
clean
2AF1E429000
unkown
page read and write
clean
7FF4F3958000
unkown
page readonly
clean
7FF5181D4000
unkown
page readonly
clean
364CE7C000
unkown
page read and write
clean
1054A7B000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
1054E7B000
unkown
page read and write
clean
7FF4FE2C6000
unkown
page readonly
clean
7FF57CFF8000
unkown
page readonly
clean
2418AFE000
unkown
page read and write
clean
7FF5A3A66000
unkown
page readonly
clean
ECE6A7D000
unkown
page read and write
clean
591D37E000
unkown
page read and write
clean
7FF4F2898000
unkown
page readonly
clean
20813DE0000
unkown
page readonly
clean
7FF5DCCCA000
unkown
page readonly
clean
3067000
unkown
page readonly
clean
2AF1E500000
unkown
page read and write
clean
1EF4F300000
unkown
page readonly
clean
7FF59F73E000
unkown
page readonly
clean
7FF57D01E000
unkown
page readonly
clean
25FFCB83000
unkown
page read and write
clean
7FF595EE5000
unkown
page readonly
clean
1EF53C60000
unkown
page readonly
clean
1C23181B000
heap default
page read and write
clean
7FF58ADFD000
unkown
page readonly
clean
1DD525B0000
unkown
page read and write
clean
7FF5CD490000
unkown
page readonly
clean
7FF5A4229000
unkown
page readonly
clean
7FF5A3D30000
unkown
page readonly
clean
7FF5326BA000
unkown
page readonly
clean
25FFCB65000
unkown
page read and write
clean
7FF59F6C6000
unkown
page readonly
clean
F70000
unkown
page read and write
clean
1EF4F680000
unkown
page read and write
clean
1EF4F310000
unkown
page readonly
clean
7FF4F3901000
unkown
page readonly
clean
7FF518468000
unkown
page readonly
clean
7FF4FE268000
unkown
page readonly
clean
15466300000
unkown
page read and write
clean
7FF517EEB000
unkown
page readonly
clean
25FFCB63000
unkown
page read and write
clean
7FF5DCEE6000
unkown
page readonly
clean
7FF57CDA5000
unkown
page readonly
clean
7FF58ACE1000
unkown
page readonly
clean
3110000
unkown
page readonly
clean
2563E299000
unkown
page read and write
clean
7FF595D2A000
unkown
page readonly
clean
2D327FE000
unkown
page read and write
clean
7FF5392E1000
unkown
page readonly
clean
2255DE36000
unkown
page read and write
clean
2255E3A0000
unkown
page read and write
clean
B3E0DF7000
unkown
page read and write
clean
3054000
unkown
page readonly
clean
9C1000
unkown
page execute read
clean
7FF53254C000
unkown
page readonly
clean
E28B2FF000
unkown
page read and write
clean
7FF53253B000
unkown
page readonly
clean
2563E400000
unkown
page readonly
clean
7FF5DA05C000
unkown
page readonly
clean
7FF5DA092000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
1ABA3C6E000
unkown
page read and write
clean
7FF58B077000
unkown
page readonly
clean
7FF5CD40C000
unkown
page readonly
clean
7FF5182FF000
unkown
page readonly
clean
1EF4E213000
unkown
page read and write
clean
2304F87A000
unkown
page read and write
clean
25FFCB40000
unkown
page read and write
clean
7FF5324E0000
unkown
page readonly
clean
154642B3000
unkown
page read and write
clean
1ABA4402000
unkown
page read and write
clean
7FF5184DD000
unkown
page readonly
clean
20813F02000
unkown
page read and write
clean
25FFC220000
heap default
page read and write
clean
25FFCF40000
unkown
page write copy
clean
1F94ECC0000
unkown
page readonly
clean
7FF5A3B59000
unkown
page readonly
clean
1EF53B21000
unkown
page read and write
clean
154661A0000
unkown
page read and write
clean
154661A0000
unkown
page read and write
clean
7FF4FE2DC000
unkown
page readonly
clean
2AF1E455000
unkown
page read and write
clean
7FF5C7CAC000
unkown
page readonly
clean
25EAB7F000
unkown
page read and write
clean
7FF58B057000
unkown
page readonly
clean
ECE6275000
unkown
page read and write
clean
7FF4F3540000
unkown
page readonly
clean
154663FB000
unkown
page read and write
clean
25EB37E000
unkown
page read and write
clean
7FF58B015000
unkown
page readonly
clean
7FF57CFF6000
unkown
page readonly
clean
20813DD0000
heap default
page read and write
clean
E8A317F000
unkown
page read and write
clean
7FF5D9FFA000
unkown
page readonly
clean
7FF5D9CFC000
unkown
page readonly
clean
2D326FE000
unkown
page read and write
clean
7FF5A035B000
unkown
page readonly
clean
25FFCB90000
unkown
page read and write
clean
2563E270000
unkown
page read and write
clean
7FF5CD434000
unkown
page readonly
clean
1F9AB102000
unkown
page read and write
clean
E8A2C7B000
unkown
page read and write
clean
1F94E662000
heap default
page read and write
clean
25FFCBC8000
unkown
page read and write
clean
15466802000
unkown
page read and write
clean
820000
heap default
page read and write
clean
25FFCBA6000
unkown
page read and write
clean
7FF5CD401000
unkown
page readonly
clean
7FF5CD425000
unkown
page readonly
clean
7FF5DCE4A000
unkown
page readonly
clean
ECC3B7F000
unkown
page read and write
clean
7FF5DCEBF000
unkown
page readonly
clean
25FFCB15000
unkown
page read and write
clean
7FF5A3F4A000
unkown
page readonly
clean
7FF4F380E000
unkown
page readonly
clean
2304F6D0000
heap private
page read and write
clean
7FF5C7CA6000
unkown
page readonly
clean
7FF57CFE2000
unkown
page readonly
clean
7FF4FDF10000
unkown
page readonly
clean
7FF4F28C5000
unkown
page readonly
clean
7FF5A3A2A000
unkown
page readonly
clean
1F941E13000
unkown
page read and write
clean
7FF595D91000
unkown
page readonly
clean
7FF5DA0E9000
unkown
page readonly
clean
303D000
unkown
page readonly
clean
2563E23C000
unkown
page read and write
clean
154642C4000
unkown
page read and write
clean
7FF5A03A0000
unkown
page readonly
clean
241867D000
unkown
page read and write
clean
7FF57D080000
unkown
page readonly
clean
1ABA3C84000
unkown
page read and write
clean
364D2F7000
unkown
page read and write
clean
9ACDFFF000
unkown
page read and write
clean
2304F869000
unkown
page read and write
clean
25FFCB8B000
unkown
page read and write
clean
2304F832000
unkown
page read and write
clean
7FF5DCCE0000
unkown
page readonly
clean
154642C9000
unkown
page read and write
clean
7FF5A3FAF000
unkown
page readonly
clean
1F94E608000
heap default
page read and write
clean
2304FA00000
unkown
page readonly
clean
7FF57D04D000
unkown
page readonly
clean
25EAD7F000
unkown
page read and write
clean
7FF595ECC000
unkown
page readonly
clean
1F94E470000
unkown
page readonly
clean
17C15E00000
unkown
page readonly
clean
154642B5000
unkown
page read and write
clean
7FF595E9F000
unkown
page readonly
clean
17C15390000
unkown
page readonly
clean
15466684000
unkown
page read and write
clean
7FF5A0A51000
unkown
page readonly
clean
7FF595E52000
unkown
page readonly
clean
7FF5DCE86000
unkown
page readonly
clean
E252479000
unkown
page read and write
clean
25FFC48B000
unkown
page read and write
clean
7FF5A403D000
unkown
page readonly
clean
7FF4F3940000
unkown
page readonly
clean
27D68600000
unkown
page read and write
clean
1F941DF0000
heap default
page read and write
clean
7FF57D039000
unkown
page readonly
clean
2AF1E360000
unkown
page read and write
clean
15466612000
unkown
page read and write
clean
21B36477000
unkown
page read and write
clean
7FF5CD3A2000
unkown
page readonly
clean
1F9AAFD0000
unkown
page readonly
clean
7FF4F353A000
unkown
page readonly
clean
21B3642A000
unkown
page read and write
clean
1EF538B6000
unkown
page read and write
clean
20813E00000
unkown
page read and write
clean
30FB000
unkown
page readonly
clean
B3E147F000
unkown
page read and write
clean
834000
unkown
page read and write
clean
15467310000
unkown
page read and write
clean
3018000
unkown
page readonly
clean
154642C3000
unkown
page read and write
clean
7FF5326FC000
unkown
page readonly
clean
1EF537F0000
unkown
page write copy
clean
7FF5A3B0C000
unkown
page readonly
clean
2304FAD0000
unkown
page readonly
clean
7FF5DCBE7000
unkown
page readonly
clean
1EF4EB00000
unkown
page read and write
clean
30AA000
unkown
page readonly
clean
7FF595D63000
unkown
page readonly
clean
7FF5CD39D000
unkown
page readonly
clean
7FF539256000
unkown
page readonly
clean
7FF5A3815000
unkown
page readonly
clean
20814120000
unkown
page readonly
clean
1F94EAC0000
unkown
page readonly
clean
2563E1A0000
unkown
page readonly
clean
7FF5CD48E000
unkown
page readonly
clean
1ABA3B80000
unkown
page readonly
clean
1DD53000000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
27D68620000
unkown
page read and write
clean
7FF5A3FFA000
unkown
page readonly
clean
15464170000
heap private
page read and write
clean
1F9AB802000
unkown
page read and write
clean
7FF4F385D000
unkown
page readonly
clean
15467210000
unkown
page read and write
clean
7FF595EF4000
unkown
page readonly
clean
17C154C8000
unkown
page read and write
clean
7FF5CD1FE000
unkown
page readonly
clean
7FF532769000
unkown
page readonly
clean
15467310000
unkown
page read and write
clean
2255E402000
unkown
page read and write
clean
7FF58B061000
unkown
page readonly
clean
1546429A000
unkown
page read and write
clean
2304F730000
heap default
page read and write
clean
7FF5CD392000
unkown
page readonly
clean
17C154BF000
unkown
page read and write
clean
7FF5C7C6E000
unkown
page readonly
clean
2AF1E508000
unkown
page read and write
clean
27D68675000
heap private
page read and write
clean
21B36320000
unkown
page readonly
clean
1EF537F4000
unkown
page readonly
clean
7FF59F68F000
unkown
page readonly
clean
1ABA3C50000
unkown
page read and write
clean
7FF517F55000
unkown
page readonly
clean
1F94E8B0000
unkown
page read and write
clean
17C15A60000
unkown
page write copy
clean
21B36518000
unkown
page read and write
clean
7FF532728000
unkown
page readonly
clean
2255E3D0000
unkown
page read and write
clean
7FF58ADF8000
unkown
page readonly
clean
2255E000000
unkown
page readonly
clean
3072000
unkown
page readonly
clean
830000
unkown
page read and write
clean
7FF59F46A000
unkown
page readonly
clean
7FF59F6B6000
unkown
page readonly
clean
7FF5391F8000
unkown
page readonly
clean
23050002000
unkown
page read and write
clean
25FFC4A4000
unkown
page read and write
clean
7FF4F38FA000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
364CEFE000
unkown
page read and write
clean
7FF4FE0DF000
unkown
page readonly
clean
7FF53275F000
unkown
page readonly
clean
7FF595A4A000
unkown
page readonly
clean
591D57D000
unkown
page read and write
clean
7FF4F3956000
unkown
page readonly
clean
25FFC516000
unkown
page read and write
clean
7FF5326C7000
unkown
page readonly
clean
7FF4F3332000
unkown
page readonly
clean
7FF5CD37C000
unkown
page readonly
clean
21B36390000
unkown
page read and write
clean
7FF5CD2B0000
unkown
page readonly
clean
25FFCC00000
unkown
page readonly
clean
1F942320000
unkown
page readonly
clean
7FF5DCE9A000
unkown
page readonly
clean
15464302000
unkown
page read and write
clean
1030000
unkown
page read and write
clean
1ABA3E00000
unkown
page readonly
clean
1C23184C000
heap default
page read and write
clean
ECE607B000
unkown
page read and write
clean
1F9AAF00000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
7FF5326F7000
unkown
page readonly
clean
E251FEE000
unkown
page read and write
clean
7FF5C7C1C000
unkown
page readonly
clean
27D68660000
unkown
page readonly
clean
7FF5A3AE7000
unkown
page readonly
clean
1EF53B60000
unkown
page read and write
clean
1ABA3D02000
unkown
page read and write
clean
7FF57CFCC000
unkown
page readonly
clean
7FF5DA056000
unkown
page readonly
clean
1DD52E02000
unkown
page read and write
clean
126D000
unkown
page read and write
clean
25FFCBA4000
unkown
page read and write
clean
7FF53278C000
unkown
page readonly
clean
1F941E29000
unkown
page read and write
clean
1EF4EB02000
unkown
page read and write
clean
15467310000
unkown
page read and write
clean
25FFCBA4000
unkown
page read and write
clean
7FF5184F6000
unkown
page readonly
clean
20813F00000
unkown
page read and write
clean
1546423C000
unkown
page read and write
clean
3011000
unkown
page readonly
clean
971000
unkown
page execute read
clean
25EB17E000
unkown
page read and write
clean
105436E000
unkown
page read and write
clean
ECC35FE000
unkown
page read and write
clean
7FF518514000
unkown
page readonly
clean
7FF5DCF17000
unkown
page readonly
clean
7FF57D066000
unkown
page readonly
clean
2AF1E470000
unkown
page read and write
clean
25FFCBC8000
unkown
page read and write
clean
7FF532755000
unkown
page readonly
clean
27D686B5000
unkown
page read and write
clean
7FF4FE295000
unkown
page readonly
clean
1EF536D0000
unkown
page readonly
clean
7FF595F59000
unkown
page readonly
clean
2563E313000
unkown
page read and write
clean
7FF518579000
unkown
page readonly
clean
7FF4F38BC000
unkown
page readonly
clean
7FF5C7B0A000
unkown
page readonly
clean
17C153A0000
unkown
page readonly
clean
24189FD000
unkown
page read and write
clean
7FF5DCF14000
unkown
page readonly
clean
7FF5D9FF6000
unkown
page readonly
clean
7FF53915C000
unkown
page readonly
clean
7FF4FE359000
unkown
page readonly
clean
20813F13000
unkown
page read and write
clean
7FF5DA0DE000
unkown
page readonly
clean
7FF5326CA000
unkown
page readonly
clean
7FF5CD25B000
unkown
page readonly
clean
7FF5391E0000
unkown
page readonly
clean
25FFCB73000
unkown
page read and write
clean
17C152C0000
unkown
page readonly
clean
7FF5CD406000
unkown
page readonly
clean
154663EF000
unkown
page read and write
clean
2304F832000
unkown
page read and write
clean
1EF538D2000
unkown
page read and write
clean
17C153B0000
unkown
page read and write
clean
21B36360000
unkown
page read and write
clean
7FF5A41C0000
unkown
page readonly
clean
27D686C9000
unkown
page read and write
clean
2304F842000
unkown
page read and write
clean
7FF4F3705000
unkown
page readonly
clean
7FF58B027000
unkown
page readonly
clean
7FF57CFE0000
unkown
page readonly
clean
7FF4F28BE000
unkown
page readonly
clean
B3E0EFA000
unkown
page read and write
clean
15467210000
unkown
page read and write
clean
154642B2000
unkown
page read and write
clean
2AF1E502000
unkown
page read and write
clean
7FF4F2989000
unkown
page readonly
clean
7FF5182A3000
unkown
page readonly
clean
1F9AAEF0000
heap default
page read and write
clean
25FFCB74000
unkown
page read and write
clean
7FF5DA080000
unkown
page readonly
clean
1EF4F2D0000
unkown
page readonly
clean
1C231910000
unkown
page readonly
clean
591D2FD000
unkown
page read and write
clean
7FF5CD36A000
unkown
page readonly
clean
2255DE29000
unkown
page read and write
clean
7FF595DCC000
unkown
page readonly
clean
2304F84B000
unkown
page read and write
clean
7FF58B0A0000
unkown
page readonly
clean
1DD52679000
unkown
page read and write
clean
7FF595EA9000
unkown
page readonly
clean
2304F840000
unkown
page read and write
clean
7FF5A3A07000
unkown
page readonly
clean
15466384000
unkown
page read and write
clean
25FFCBA4000
unkown
page read and write
clean
A30000
heap private
page read and write
clean
7FF57D025000
unkown
page readonly
clean
2563E308000
unkown
page read and write
clean
7FF5A0352000
unkown
page readonly
clean
1EF53710000
unkown
page read and write
clean
17C15470000
unkown
page read and write
clean
7FF53268C000
unkown
page readonly
clean
7FF4F3942000
unkown
page readonly
clean
7FF58AB3A000
unkown
page readonly
clean
E8A2F7B000
unkown
page read and write
clean
25FFD061000
unkown
page read and write
clean
25FFCBA4000
unkown
page read and write
clean
154661A0000
unkown
page read and write
clean
17C153E0000
unkown
page readonly
clean
15464520000
unkown
page readonly
clean
1054F7D000
unkown
page read and write
clean
21B3644A000
unkown
page read and write
clean
7FF57CC23000
unkown
page readonly
clean
7FF58ADBF000
unkown
page readonly
clean
7FF58AF5C000
unkown
page readonly
clean
7FF4FE2BD000
unkown
page readonly
clean
B3E12FB000
unkown
page read and write
clean
20813E54000
unkown
page read and write
clean
7FF5C7D30000
unkown
page readonly
clean
1F94E667000
heap default
page read and write
clean
591D5FF000
unkown
page read and write
clean
7FF5A4221000
unkown
page readonly
clean
7FF5327B0000
unkown
page readonly
clean
1054BFD000
unkown
page read and write
clean
1ABA3A30000
heap private
page read and write
clean
7FF538BD2000
unkown
page readonly
clean
15466120000
unkown
page read and write
clean
7FF4F36CC000
unkown
page readonly
clean
7FF58AEC7000
unkown
page readonly
clean
7FF5CD2BC000
unkown
page readonly
clean
1F941D90000
heap private
page read and write
clean
7FF5327B4000
unkown
page readonly
clean
1EF53680000
unkown
page read and write
clean
3046000
unkown
page readonly
clean
7FF5327B7000
unkown
page readonly
clean
7FF5A4033000
unkown
page readonly
clean
7FF58AF0E000
unkown
page readonly
clean
7FF532487000
unkown
page readonly
clean
7FF5DA075000
unkown
page readonly
clean
7FF58AE5E000
unkown
page readonly
clean
25FFCB47000
unkown
page read and write
clean
7FF4FE28E000
unkown
page readonly
clean
25FFCB73000
unkown
page read and write
clean
1ABA3C4D000
unkown
page read and write
clean
9ACDC7E000
unkown
page read and write
clean
1EF4E2A7000
unkown
page read and write
clean
7FF5C7CD4000
unkown
page readonly
clean
7FF5A37B0000
unkown
page readonly
clean
7FF51811D000
unkown
page readonly
clean
1EF53720000
unkown
page read and write
clean
1EF4E302000
unkown
page read and write
clean
7FF5DCEAE000
unkown
page readonly
clean
7FF5324C7000
unkown
page readonly
clean
2D325F9000
unkown
page read and write
clean
7FF53920A000
unkown
page readonly
clean
241857C000
unkown
page read and write
clean
7FF5A08C5000
unkown
page readonly
clean
1ABA3AA0000
unkown
page readonly
clean
7FF58AD20000
unkown
page readonly
clean
1F9AAFE0000
unkown
page readonly
clean
17C15513000
unkown
page read and write
clean
2304F845000
unkown
page read and write
clean
2563E24F000
unkown
page read and write
clean
15464264000
unkown
page read and write
clean
7FF58B147000
unkown
page readonly
clean
7FF53924D000
unkown
page readonly
clean
7FF5A039B000
unkown
page readonly
clean
7FF5A3D20000
unkown
page readonly
clean
7FF518472000
unkown
page readonly
clean
1ABA3D00000
unkown
page read and write
clean
7FF5A3A8E000
unkown
page readonly
clean
7FF5A09CC000
unkown
page readonly
clean
20813E68000
unkown
page read and write
clean
20813E13000
unkown
page read and write
clean
2255DE58000
unkown
page read and write
clean
1054DFA000
unkown
page read and write
clean
154666D2000
unkown
page read and write
clean
25FFD002000
unkown
page read and write
clean
7FF58AE57000
unkown
page readonly
clean
25FFC471000
unkown
page read and write
clean
2304F83A000
unkown
page read and write
clean
1F941E00000
unkown
page read and write
clean
1DD52590000
unkown
page readonly
clean
E70000
unkown
page readonly
clean
2D321AB000
unkown
page read and write
clean
7FF5391F2000
unkown
page readonly
clean
2AF1E400000
unkown
page read and write
clean
11EE000
unkown
page read and write
clean
7FF518235000
unkown
page readonly
clean
7FF53234D000
unkown
page readonly
clean
25FFCB75000
unkown
page read and write
clean
7FF539284000
unkown
page readonly
clean
7FF5DCEC9000
unkown
page readonly
clean
7FF4F3A49000
unkown
page readonly
clean
2255DD20000
unkown
page readonly
clean
7FF595ED6000
unkown
page readonly
clean
1C231831000
heap default
page read and write
clean
27D686A6000
heap default
page read and write
clean
25FFCB6B000
unkown
page read and write
clean
20813E02000
unkown
page read and write
clean
21B363D0000
unkown
page read and write
clean
7FF51856E000
unkown
page readonly
clean
7FF5A02E1000
unkown
page readonly
clean
ECC3C7F000
unkown
page read and write
clean
7FF5C796E000
unkown
page readonly
clean
7FF58ADBC000
unkown
page readonly
clean
7FF518505000
unkown
page readonly
clean
15466400000
unkown
page readonly
clean
55BBDCF000
unkown
page read and write
clean
7FF532712000
unkown
page readonly
clean
7FF4FE351000
unkown
page readonly
clean
25FFC4A8000
unkown
page read and write
clean
2304F740000
unkown
page readonly
clean
15466130000
unkown
page readonly
clean
25FFCB73000
unkown
page read and write
clean
17C15502000
unkown
page read and write
clean
7FF518240000
unkown
page readonly
clean
154642B5000
unkown
page read and write
clean
2304F864000
unkown
page read and write
clean
7FF5A3AA9000
unkown
page readonly
clean
1C2332E0000
unkown
page readonly
clean
7FF5A0A4E000
unkown
page readonly
clean
1EF4E930000
unkown
page read and write
clean
7FF59F6E0000
unkown
page readonly
clean
25FFC4E2000
unkown
page read and write
clean
1DD525A0000
unkown
page readonly
clean
7FF5D9F8A000
unkown
page readonly
clean
7FF5D9FE0000
unkown
page readonly
clean
7FF5CD499000
unkown
page readonly
clean
7476F7E000
unkown
page read and write
clean
7FF58B0B8000
unkown
page readonly
clean
9F06B7C000
unkown
page read and write
clean
2AF1E270000
unkown
page readonly
clean
2563E200000
unkown
page read and write
clean
7FF5391E2000
unkown
page readonly
clean
7FF5DCF10000
unkown
page readonly
clean
7FF5D9D47000
unkown
page readonly
clean
1EF4E1D0000
unkown
page readonly
clean
7FF4F28FC000
unkown
page readonly
clean
1F9ABA00000
unkown
page readonly
clean
1DD52702000
unkown
page read and write
clean
7FF4F28D9000
unkown
page readonly
clean
9A8000
unkown
page read and write
clean
1F94ED90000
unkown
page readonly
clean
7FF4F398F000
unkown
page readonly
clean
7FF5A415E000
unkown
page readonly
clean
21B36402000
unkown
page read and write
clean
1ABA3C55000
unkown
page read and write
clean
1EF4E23F000
unkown
page read and write
clean
7FF532726000
unkown
page readonly
clean
15466742000
unkown
page read and write
clean
7FF5CD21F000
unkown
page readonly
clean
7FF53259F000
unkown
page readonly
clean
2563E0C0000
heap default
page read and write
clean
1EF4E2A2000
unkown
page read and write
clean
7FF4F376A000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
25FFC413000
unkown
page read and write
clean
ECE64F7000
unkown
page read and write
clean
1C231A00000
unkown
page read and write
clean
2304F83D000
unkown
page read and write
clean
7FF5CD2A7000
unkown
page readonly
clean
1ABA3C49000
unkown
page read and write
clean
7FF5182E0000
unkown
page readonly
clean
9F5000
unkown
page readonly
clean
7FF5DCC35000
unkown
page readonly
clean
7FF532685000
unkown
page readonly
clean
9F06AFE000
unkown
page read and write
clean
1EF4F2E0000
unkown
page readonly
clean
1054879000
unkown
page read and write
clean
25FFC429000
unkown
page read and write
clean
7FF5326D1000
unkown
page readonly
clean
7FF5C7C89000
unkown
page readonly
clean
86A000
unkown
page readonly
clean
25FFCB51000
unkown
page read and write
clean
1F9AB000000
unkown
page read and write
clean
25FFCB47000
unkown
page read and write
clean
7FF5C7C9D000
unkown
page readonly
clean
1EF53CA0000
unkown
page readonly
clean
2255DE02000
unkown
page read and write
clean
7FF5DCF07000
unkown
page readonly
clean
1DD52700000
unkown
page read and write
clean
25FFD002000
unkown
page read and write
clean
1EF4EB18000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
E2523FA000
unkown
page read and write
clean
74766CB000
unkown
page read and write
clean
25FFCB60000
unkown
page read and write
clean
2304F846000
unkown
page read and write
clean
7FF5CD499000
unkown
page readonly
clean
3056000
unkown
page readonly
clean
154642B5000
unkown
page read and write
clean
25FFC9F0000
unkown
page read and write
clean
7FF53279C000
unkown
page readonly
clean
7FF5DCBD0000
unkown
page readonly
clean
105477F000
unkown
page read and write
clean
1EF53873000
unkown
page read and write
clean
7FF4F3788000
unkown
page readonly
clean
7FF5A098E000
unkown
page readonly
clean
1EF4F320000
unkown
page readonly
clean
7FF4FE359000
unkown
page readonly
clean
7FF5D9D6C000
unkown
page readonly
clean
7FF57D056000
unkown
page readonly
clean
1EF53760000
unkown
page read and write
clean
7FF53926C000
unkown
page readonly
clean
25FFCB29000
unkown
page read and write
clean
7FF5A0995000
unkown
page readonly
clean
1C233960000
heap private
page read and write
clean
7FF5C7CC5000
unkown
page readonly
clean
7FF4F2906000
unkown
page readonly
clean
1F94E660000
heap default
page read and write
clean
7FF5C7BE7000
unkown
page readonly
clean
7FF5DCEF6000
unkown
page readonly
clean
7FF5391F6000
unkown
page readonly
clean
7FF5DCEFC000
unkown
page readonly
clean
A40000
unkown
page readonly
clean
154642B6000
unkown
page read and write
clean
25FFCBA4000
unkown
page read and write
clean
7FF58B11C000
unkown
page readonly
clean
25FFD061000
unkown
page read and write
clean
7FF5181DD000
unkown
page readonly
clean
7FF5DA084000
unkown
page readonly
clean
B3E13FE000
unkown
page read and write
clean
7FF532722000
unkown
page readonly
clean
17C15250000
heap private
page read and write
clean
591D07C000
unkown
page read and write
clean
7FF4F3853000
unkown
page readonly
clean
7FF59F741000
unkown
page readonly
clean
7FF4FE2F4000
unkown
page readonly
clean
2304F86C000
unkown
page read and write
clean
2255E3D0000
unkown
page read and write
clean
7FF5CD430000
unkown
page readonly
clean
7FF58B01C000
unkown
page readonly
clean
30F0000
unkown
page readonly
clean
7FF5CD3CE000
unkown
page readonly
clean
7FF5A3967000
unkown
page readonly
clean
21B363D0000
unkown
page read and write
clean
B3E167F000
unkown
page read and write
clean
7FF5A3B51000
unkown
page readonly
clean
1EF538AD000
unkown
page read and write
clean
7FF5A3A6A000
unkown
page readonly
clean
7FF5CD3FD000
unkown
page readonly
clean
25FFCB63000
unkown
page read and write
clean
7FF5CD325000
unkown
page readonly
clean
E251EEB000
unkown
page read and write
clean
1EF4E290000
unkown
page read and write
clean
15466396000
unkown
page read and write
clean
1F94F120000
unkown
page read and write
clean
7FF518517000
unkown
page readonly
clean
7FF5327A7000
unkown
page readonly
clean
9F069FD000
unkown
page read and write
clean
1EF4E860000
unkown
page readonly
clean
25FFC482000
unkown
page read and write
clean
9ACD91B000
unkown
page read and write
clean
7FF4FDF13000
unkown
page readonly
clean
25FFC600000
unkown
page readonly
clean
25FFC4E4000
unkown
page read and write
clean
2AF1EE00000
unkown
page readonly
clean
17C15AB0000
unkown
page readonly
clean
1F94E644000
unkown
page read and write
clean
454000
unkown
page read and write
clean
1EF53844000
unkown
page read and write
clean
3104000
unkown
page readonly
clean
7FF58B140000
unkown
page readonly
clean
21B36424000
unkown
page read and write
clean
1DD52664000
unkown
page read and write
clean
7FF58B111000
unkown
page readonly
clean
154666D8000
unkown
page read and write
clean
7FF4F37FC000
unkown
page readonly
clean
1054FFF000
unkown
page read and write
clean
21B36990000
unkown
page readonly
clean
7FF4F3A41000
unkown
page readonly
clean
7FF5A4067000
unkown
page readonly
clean
25FFCB60000
unkown
page read and write
clean
1054D7C000
unkown
page read and write
clean
6AB000
unkown
page read and write
clean
1EF4E2A9000
unkown
page read and write
clean
ECE62FE000
unkown
page read and write
clean
7FF5A37C3000
unkown
page readonly
clean
1F94E560000
unkown
page read and write
clean
25FFCB73000
unkown
page read and write
clean
1EF53B24000
unkown
page write copy
clean
7FF539275000
unkown
page readonly
clean
7FF518482000
unkown
page readonly
clean
B3E177A000
unkown
page read and write
clean
7FF58ACE5000
unkown
page readonly
clean
7FF58B1A9000
unkown
page readonly
clean
7FF5390AE000
unkown
page readonly
clean
7FF57D084000
unkown
page readonly
clean
8B7000
heap default
page read and write
clean
25FFC9F0000
unkown
page read and write
clean
1ABA3C00000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
2304F829000
unkown
page read and write
clean
15466140000
heap private
page read and write
clean
1546432C000
unkown
page read and write
clean
7FF58AF79000
unkown
page readonly
clean
7FF59F66A000
unkown
page readonly
clean
1EF4F1E0000
unkown
page read and write
clean
1EF4EB59000
unkown
page read and write
clean
2255DE13000
unkown
page read and write
clean
7FF5DCF79000
unkown
page readonly
clean
7FF5392E9000
unkown
page readonly
clean
E28B17E000
unkown
page read and write
clean
7FF5A41C4000
unkown
page readonly
clean
2563E29E000
unkown
page read and write
clean
7FF595EC6000
unkown
page readonly
clean
15467210000
unkown
page read and write
clean
1EF4E26A000
unkown
page read and write
clean
2563EC00000
unkown
page readonly
clean
7FF59F6E4000
unkown
page readonly
clean
7FF4FE29F000
unkown
page readonly
clean
15466643000
unkown
page read and write
clean
7FF4F2915000
unkown
page readonly
clean
7FF58B0DE000
unkown
page readonly
clean
3095000
unkown
page readonly
clean
7FF595F4E000
unkown
page readonly
clean
1EF53730000
unkown
page read and write
clean
15466349000
unkown
page read and write
clean
7FF4F33ED000
unkown
page readonly
clean
2255DBE0000
heap private
page read and write
clean
B3E11FA000
unkown
page read and write
clean
1DD52520000
heap private
page read and write
clean
1EF4E400000
unkown
page readonly
clean
F30000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
7FF58B1A0000
unkown
page readonly
clean
7FF57D05C000
unkown
page readonly
clean
7FF58B083000
unkown
page readonly
clean
25EAA7B000
unkown
page read and write
clean
7FF5184E6000
unkown
page readonly
clean
E8A2D7E000
unkown
page read and write
clean
1EF4E258000
unkown
page read and write
clean
15466313000
unkown
page read and write
clean
241807B000
unkown
page read and write
clean
25FFC1C0000
heap private
page read and write
clean
17C15429000
unkown
page read and write
clean
25FFCB00000
unkown
page read and write
clean
25FFD100000
unkown
page read and write
clean
7FF532819000
unkown
page readonly
clean
7FF5A4122000
unkown
page readonly
clean
2304F82D000
unkown
page read and write
clean
21B36600000
unkown
page readonly
clean
7FF5A07F3000
unkown
page readonly
clean
154641E0000
unkown
page readonly
clean
27D68690000
heap default
page read and write
clean
450000
unkown
page read and write
clean
7FF5DCC40000
unkown
page readonly
clean
25FFCB73000
unkown
page read and write
clean
7FF58B10D000
unkown
page readonly
clean
1F94E580000
unkown
page readonly
clean
25FFCB5B000
unkown
page read and write
clean
7FF5A4179000
unkown
page readonly
clean
B3E0C7F000
unkown
page read and write
clean
7FF4FE250000
unkown
page readonly
clean
1EF53849000
unkown
page read and write
clean
24188FE000
unkown
page read and write
clean
27D686BE000
unkown
page read and write
clean
7FF539266000
unkown
page readonly
clean
154642DD000
unkown
page read and write
clean
9F551FF000
unkown
page read and write
clean
7FF4F365C000
unkown
page readonly
clean
2563E1B0000
unkown
page readonly
clean
7FF57D0DE000
unkown
page readonly
clean
15467110000
unkown
page read and write
clean
970000
unkown
page read and write
clean
7FF5324D5000
unkown
page readonly
clean
25FFCB52000
unkown
page read and write
clean
1F9AAE90000
heap private
page read and write
clean
7FF4F365F000
unkown
page readonly
clean
25FFCBA5000
unkown
page read and write
clean
591CBBB000
unkown
page read and write
clean
7FF5A418D000
unkown
page readonly
clean
17C15990000
unkown
page readonly
clean
F40000
unkown
page read and write
clean
2255DC50000
unkown
page readonly
clean
7FF4F3881000
unkown
page readonly
clean
7FF53900A000
unkown
page readonly
clean
7FF5DCEEC000
unkown
page readonly
clean
17C15423000
unkown
page read and write
clean
25FFCB75000
unkown
page read and write
clean
21B3645A000
unkown
page read and write
clean
154642B5000
unkown
page read and write
clean
364CF7E000
unkown
page read and write
clean
1EF538B0000
unkown
page read and write
clean
E2524FF000
unkown
page read and write
clean
20815D20000
unkown
page read and write
clean
1DD52713000
unkown
page read and write
clean
7FF53280E000
unkown
page readonly
clean
25FFCB73000
unkown
page read and write
clean
2F45000
unkown
page readonly
clean
7FF4FE2C1000
unkown
page readonly
clean
7FF4F2989000
unkown
page readonly
clean
7FF4F3677000
unkown
page readonly
clean
1F94E8A9000
heap private
page read and write
clean
7FF4FE2D6000
unkown
page readonly
clean
25FFC230000
unkown
page readonly
clean
7FF5CD388000
unkown
page readonly
clean
E8A3077000
unkown
page read and write
clean
20813E6C000
unkown
page read and write
clean
25FFD054000
unkown
page read and write
clean
7FF4FE2CC000
unkown
page readonly
clean
1F94F370000
unkown
page read and write
clean
1EF53BD0000
unkown
page readonly
clean
2304F82E000
unkown
page read and write
clean
E2522FA000
unkown
page read and write
clean
1EF4E296000
unkown
page read and write
clean
7FF5DCF71000
unkown
page readonly
clean
7FF5DCD83000
unkown
page readonly
clean
7FF5DC9CD000
unkown
page readonly
clean
7FF4FDF24000
unkown
page readonly
clean
1F941E40000
unkown
page read and write
clean
25FFCB59000
unkown
page read and write
clean
1EF53800000
unkown
page read and write
clean
7FF5390BA000
unkown
page readonly
clean
154666C8000
unkown
page read and write
clean
21B36330000
unkown
page readonly
clean
7FF5C7871000
unkown
page readonly
clean
1F9AB590000
unkown
page readonly
clean
1C2331C0000
unkown
page readonly
clean
55BC07E000
unkown
page read and write
clean
7FF59F4CF000
unkown
page readonly
clean
1EF4E229000
unkown
page read and write
clean
7FF57D075000
unkown
page readonly
clean
7FF595CDF000
unkown
page readonly
clean
7FF4F3A49000
unkown
page readonly
clean
15464229000
unkown
page read and write
clean
24186FC000
unkown
page read and write
clean
7FF4F34BD000
unkown
page readonly
clean
27D686C9000
unkown
page read and write
clean
2304F85F000
unkown
page read and write
clean
7FF58AF70000
unkown
page readonly
clean
25FFCB57000
unkown
page read and write
clean
27D68650000
unkown
page readonly
clean
7FF5DCE4C000
unkown
page readonly
clean
1546630D000
unkown
page read and write
clean
7FF595A60000
unkown
page readonly
clean
2304F87D000
unkown
page read and write
clean
7FF58B0B6000
unkown
page readonly
clean
15464200000
unkown
page read and write
clean
364D17B000
unkown
page read and write
clean
7FF5392DE000
unkown
page readonly
clean
25FFD002000
unkown
page read and write
clean
7FF4F3801000
unkown
page readonly
clean
15464266000
unkown
page read and write
clean
7FF532470000
unkown
page readonly
clean
7FF5A4229000
unkown
page readonly
clean
7FF5A3A95000
unkown
page readonly
clean
30F6000
unkown
page readonly
clean
27D6869B000
heap default
page read and write
clean
15467110000
unkown
page read and write
clean
154642DB000
unkown
page read and write
clean
7FF5A3A62000
unkown
page readonly
clean
B3E0FFB000
unkown
page read and write
clean
2304F902000
unkown
page read and write
clean
7FF5320EC000
unkown
page readonly
clean
7FF539225000
unkown
page readonly
clean
25FFCB65000
unkown
page read and write
clean
DD0000
unkown
page execute and read and write
clean
55BC27E000
unkown
page read and write
clean
7FF5184BF000
unkown
page readonly
clean
7FF58B144000
unkown
page readonly
clean
ECC3A7E000
unkown
page read and write
clean
7FF5A4061000
unkown
page readonly
clean
364D3FF000
unkown
page read and write
clean
7FF595E50000
unkown
page readonly
clean
7FF5A09A9000
unkown
page readonly
clean
7FF57CE6F000
unkown
page readonly
clean
7FF595F51000
unkown
page readonly
clean
1EF53B17000
unkown
page readonly
clean
1546435D000
unkown
page read and write
clean
25FFC9A0000
unkown
page readonly
clean
1EF4E1F0000
unkown
page read and write
clean
15467310000
unkown
page read and write
clean
25FFC4AF000
unkown
page read and write
clean
2F3C000
unkown
page readonly
clean
27D68530000
unkown
page readonly
clean
25FFC4C0000
unkown
page read and write
clean
2304F831000
unkown
page read and write
clean
154642B2000
unkown
page read and write
clean
1F94E590000
unkown
page readonly
clean
24187FD000
unkown
page read and write
clean
7FF518486000
unkown
page readonly
clean
ECE677F000
unkown
page read and write
clean
15464213000
unkown
page read and write
clean
2304F866000
unkown
page read and write
clean
7FF59F640000
unkown
page readonly
clean
25EAF7F000
unkown
page read and write
clean
7FF4F31F3000
unkown
page readonly
clean
1F9438E0000
unkown
page read and write
clean
2304F86A000
unkown
page read and write
clean
1F9AB200000
unkown
page readonly
clean
15465CC0000
unkown
page read and write
clean
7FF5DA08D000
unkown
page readonly
clean
25FFD200000
unkown
page readonly
clean
7FF5CD41C000
unkown
page readonly
clean
1054B7B000
unkown
page read and write
clean
1C231A20000
unkown
page readonly
clean
7FF5C7C75000
unkown
page readonly
clean
7FF5CD1C4000
unkown
page readonly
clean
B3E197F000
unkown
page read and write
clean
1EF4E4D0000
unkown
page readonly
clean
7FF5A0966000
unkown
page readonly
clean
9ACDE7B000
unkown
page read and write
clean
1EF53B40000
unkown
page read and write
clean
7FF5C7875000
unkown
page readonly
clean
241827B000
unkown
page read and write
clean
7FF5CD06F000
unkown
page readonly
clean
7FF5CD3A6000
unkown
page readonly
clean
7FF4F39B6000
unkown
page readonly
clean
E8A2E75000
unkown
page read and write
clean
1F94E64C000
unkown
page read and write
clean
2563E1C0000
unkown
page read and write
clean
7FF4F3838000
unkown
page readonly
clean
7FF59F0B2000
unkown
page readonly
clean
ECE63F7000
unkown
page read and write
clean
27D686A1000
unkown
page read and write
clean
7FF5CD3A8000
unkown
page readonly
clean
1ABA4260000
unkown
page readonly
clean
7FF53249C000
unkown
page readonly
clean
1ABA3B70000
unkown
page readonly
clean
7FF5C7CBC000
unkown
page readonly
clean
304B000
unkown
page readonly
clean
810000
unkown
page readonly
clean
7FF5CD3DF000
unkown
page readonly
clean
7FF4F2981000
unkown
page readonly
clean
7FF4FE34E000
unkown
page readonly
clean
2D12000
unkown
page readonly
clean
E28B37A000
unkown
page read and write
clean
154644D0000
unkown
page write copy
clean
3070000
unkown
page readonly
clean
55BC0F9000
unkown
page read and write
clean
7FF4F3550000
unkown
page readonly
clean
25FFCB65000
unkown
page read and write
clean
1DD52628000
unkown
page read and write
clean
7FF5A41A6000
unkown
page readonly
clean
7FF5A421E000
unkown
page readonly
clean
3090000
unkown
page readonly
clean
7FF5DCE82000
unkown
page readonly
clean
25FFD000000
unkown
page read and write
clean
25FFCB21000
unkown
page read and write
clean
1F9AB113000
unkown
page read and write
clean
17C15D00000
unkown
page read and write
clean
7FF4F28ED000
unkown
page readonly
clean
7FF4FDCAC000
unkown
page readonly
clean
7FF5CD002000
unkown
page readonly
clean
15464400000
unkown
page readonly
clean
1EF53B30000
unkown
page read and write
clean
7FF5D9F94000
unkown
page readonly
clean
7FF5DCE88000
unkown
page readonly
clean
25FFC9F0000
unkown
page read and write
clean
7FF58B0B2000
unkown
page readonly
clean
B3E14FF000
unkown
page read and write
clean
2563E213000
unkown
page read and write
clean
1546630E000
unkown
page read and write
clean
ECE66F9000
unkown
page read and write
clean
20814000000
unkown
page readonly
clean
7FF58AD3E000
unkown
page readonly
clean
7FF5A3A11000
unkown
page readonly
clean
25FFC4F8000
unkown
page read and write
clean
17C15440000
unkown
page read and write
clean
2563E257000
unkown
page read and write
clean
E28B27F000
unkown
page read and write
clean
2304F862000
unkown
page read and write
clean
7FF58B0F9000
unkown
page readonly
clean
27D68670000
heap private
page read and write
clean
1EF53861000
unkown
page read and write
clean
7FF595E8E000
unkown
page readonly
clean
7FF4F39CC000
unkown
page readonly
clean
1EF53B80000
unkown
page readonly
clean
1EF53816000
unkown
page read and write
clean
7FF5CD238000
unkown
page readonly
clean
7476C7B000
unkown
page read and write
clean
7FF58B19E000
unkown
page readonly
clean
7FF5DCE2A000
unkown
page readonly
clean
20813E6C000
unkown
page read and write
clean
9ACE1FF000
unkown
page read and write
clean
ECE6978000
unkown
page read and write
clean
1EF4F100000
unkown
page read and write
clean
7FF58B0CA000
unkown
page readonly
clean
7FF5C7C46000
unkown
page readonly
clean
7FF595D97000
unkown
page readonly
clean
1C233490000
heap private
page read and write
clean
7FF4FE227000
unkown
page readonly
clean
1F94E410000
unkown
page read and write
clean
7FF4F3581000
unkown
page readonly
clean
870000
heap default
page read and write
clean
7FF5A08CC000
unkown
page readonly
clean
7FF5C7BF1000
unkown
page readonly
clean
7FF5CD416000
unkown
page readonly
clean
7FF58AF68000
unkown
page readonly
clean
2563E24B000
unkown
page read and write
clean
7FF5A0A59000
unkown
page readonly
clean
7FF4F290C000
unkown
page readonly
clean
7FF53257E000
unkown
page readonly
clean
7FF5DA04D000
unkown
page readonly
clean
7FF595D48000
unkown
page readonly
clean
9F54C7B000
unkown
page read and write
clean
21B36250000
unkown
page readonly
clean
15464258000
unkown
page read and write
clean
7FF58B087000
unkown
page readonly
clean
1DD52600000
unkown
page read and write
clean
7FF4F332C000
unkown
page readonly
clean
1EF4E313000
unkown
page read and write
clean
7FF5A02E6000
unkown
page readonly
clean
15466202000
unkown
page read and write
clean
2AF1E513000
unkown
page read and write
clean
25EAC7C000
unkown
page read and write
clean
7FF4F39E7000
unkown
page readonly
clean
7FF5D9F82000
unkown
page readonly
clean
7FF538F17000
unkown
page readonly
clean
7FF5A414A000
unkown
page readonly
clean
7FF5DCE27000
unkown
page readonly
clean
F60000
heap private
page read and write
clean
10547FA000
unkown
page read and write
clean
7FF4F377C000
unkown
page readonly
clean
9F552FC000
unkown
page read and write
clean
1EF53750000
unkown
page read and write
clean
7FF595E68000
unkown
page readonly
clean
7FF532708000
unkown
page readonly
clean
7FF4F38F7000
unkown
page readonly
clean
1ABA3C13000
unkown
page read and write
clean
15467310000
unkown
page read and write
clean
7FF595EBD000
unkown
page readonly
clean
7FF5CD0CE000
unkown
page readonly
clean
21B36500000
unkown
page read and write
clean
1F941E02000
unkown
page read and write
clean
1EF53830000
unkown
page read and write
clean
1EF4EB13000
unkown
page read and write
clean
2304F85E000
unkown
page read and write
clean
7FF5A3D1A000
unkown
page readonly
clean
7FF4F39C6000
unkown
page readonly
clean
1F941E56000
unkown
page read and write
clean
7FF538BCC000
unkown
page readonly
clean
7FF59116C000
unkown
page readonly
clean
25FFCB74000
unkown
page read and write
clean
1546426D000
unkown
page read and write
clean
7FF595E66000
unkown
page readonly
clean
303A000
unkown
page readonly
clean
1F94F360000
unkown
page readonly
clean
17C15C02000
unkown
page read and write
clean
2255E600000
unkown
page read and write
clean
7FF58AE65000
unkown
page readonly
clean
25FFCB4D000
unkown
page read and write
clean
7FF57D0E9000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
21B363D0000
unkown
page read and write
clean
1024000
heap private
page read and write
clean
1EF53B00000
unkown
page read and write
clean
25FFC44D000
unkown
page read and write
clean
7FF5D9F8E000
unkown
page readonly
clean
1546637B000
unkown
page read and write
clean
2304F750000
unkown
page readonly
clean
1ABA3D13000
unkown
page read and write
clean
7FF5CD3E9000
unkown
page readonly
clean
154642DB000
unkown
page read and write
clean
7FF4F3985000
unkown
page readonly
clean
7FF5A096A000
unkown
page readonly
clean
2AF1E350000
unkown
page readonly
clean
7FF5A3B12000
unkown
page readonly
clean
1054C7B000
unkown
page read and write
clean
105497A000
unkown
page read and write
clean
1F9AB05A000
unkown
page read and write
clean
25FFC3E0000
unkown
page readonly
clean
1DD52C60000
unkown
page readonly
clean
7FF57D00A000
unkown
page readonly
clean
7FF58AE05000
unkown
page readonly
clean
7FF58AB30000
unkown
page readonly
clean
7FF57CFF2000
unkown
page readonly
clean
7FF57D0E1000
unkown
page readonly
clean
10543EE000
unkown
page read and write
clean
154642B5000
unkown
page read and write
clean
1DD52651000
unkown
page read and write
clean
7FF5CD0E6000
unkown
page readonly
clean
1ABA3C4B000
unkown
page read and write
clean
7FF57CF75000
unkown
page readonly
clean
1EF4E2FF000
unkown
page read and write
clean
7FF57D02F000
unkown
page readonly
clean
17C154E2000
unkown
page read and write
clean
7FF5A0A59000
unkown
page readonly
clean
15467210000
unkown
page read and write
clean
25EB27F000
unkown
page read and write
clean
1F9AB029000
unkown
page read and write
clean
7FF58AF2F000
unkown
page readonly
clean
7FF58B06B000
unkown
page readonly
clean
154661A0000
unkown
page read and write
clean
7FF5A0883000
unkown
page readonly
clean
7FF5DA0E9000
unkown
page readonly
clean
7FF532627000
unkown
page readonly
clean
25FFCB4E000
unkown
page read and write
clean
7FF5A0968000
unkown
page readonly
clean
7FF5DA039000
unkown
page readonly
clean
7FF57CFD8000
unkown
page readonly
clean
1EF4EB59000
unkown
page read and write
clean
973000
unkown
page readonly
clean
7FF5C7C28000
unkown
page readonly
clean
7FF532819000
unkown
page readonly
clean
154666D8000
unkown
page read and write
clean
7FF53274E000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
1ABA3D08000
unkown
page read and write
clean
2304F876000
unkown
page read and write
clean
7FF5326EC000
unkown
page readonly
clean
21B36502000
unkown
page read and write
clean
25FFCB62000
unkown
page read and write
clean
7FF59F6CC000
unkown
page readonly
clean
7FF58A9E5000
unkown
page readonly
clean
7FF5184C9000
unkown
page readonly
clean
7FF59F6AD000
unkown
page readonly
clean
1EF4E160000
heap private
page read and write
clean
7FF57CD97000
unkown
page readonly
clean
1EF53B14000
unkown
page readonly
clean
7FF5D9FF8000
unkown
page readonly
clean
7FF539127000
unkown
page readonly
clean
7FF58B0EF000
unkown
page readonly
clean
9F550FE000
unkown
page read and write
clean
7FF58B116000
unkown
page readonly
clean
27D686C9000
unkown
page read and write
clean
7FF532580000
unkown
page readonly
clean
1EF537F0000
unkown
page read and write
clean
7FF5A0867000
unkown
page readonly
clean
25FFC400000
unkown
page read and write
clean
2AF1E260000
heap default
page read and write
clean
1EF53B08000
unkown
page read and write
clean
7FF595C7A000
unkown
page readonly
clean
7FF4F39D5000
unkown
page readonly
clean
7FF517EE4000
unkown
page readonly
clean
2AF1EA60000
unkown
page readonly
clean
25FFCB7B000
unkown
page read and write
clean
E21000
unkown
page execute and read and write
clean
2304F824000
unkown
page read and write
clean
1F94E64E000
unkown
page read and write
clean
154642B2000
unkown
page read and write
clean
7FF58B0E5000
unkown
page readonly
clean
7FF595E62000
unkown
page readonly
clean
7FF57CFBA000
unkown
page readonly
clean
E8A2CFD000
unkown
page read and write
clean
1C2332F0000
heap private
page read and write
clean
7FF518387000
unkown
page readonly
clean
2AF1E200000
heap private
page read and write
clean
7FF53925C000
unkown
page readonly
clean
7FF5A09D6000
unkown
page readonly
clean
2304F760000
unkown
page read and write
clean
7FF57CD9E000
unkown
page readonly
clean
7FF5C7CB6000
unkown
page readonly
clean
1DD52668000
unkown
page read and write
clean
1DD52580000
heap default
page read and write
clean
7FF5C7D39000
unkown
page readonly
clean
2304F85C000
unkown
page read and write
clean
1EF4E200000
unkown
page read and write
clean
25FFCB8F000
unkown
page read and write
clean
1C2332D0000
unkown
page readonly
clean
2255E3D0000
unkown
page read and write
clean
7FF5A3B4E000
unkown
page readonly
clean
21B36449000
unkown
page read and write
clean
25FFC502000
unkown
page read and write
clean
800000
unkown
page readonly
clean
7FF4F39E0000
unkown
page readonly
clean
7FF4F28F6000
unkown
page readonly
clean
7FF4F39AD000
unkown
page readonly
clean
1EF53700000
unkown
page read and write
clean
10548FA000
unkown
page read and write
clean
2304F813000
unkown
page read and write
clean
7FF59116C000
unkown
page readonly
clean
7FF5DCEDD000
unkown
page readonly
clean
10546F9000
unkown
page read and write
clean
1EF4E1C0000
heap default
page read and write
clean
1ABA4600000
unkown
page readonly
clean
7FF4F3857000
unkown
page readonly
clean
7FF4F3A3E000
unkown
page readonly
clean
9ACD99E000
unkown
page read and write
clean
833000
unkown
page readonly
clean
7FF5A3ABD000
unkown
page readonly
clean
1EF53BC0000
unkown
page readonly
clean
7FF518349000
unkown
page readonly
clean
25FFC457000
unkown
page read and write
clean
7FF4F34B9000
unkown
page readonly
clean
7FF539121000
unkown
page readonly
clean
1DD52613000
unkown
page read and write
clean
2304F861000
unkown
page read and write
clean
B3E157F000
unkown
page read and write
clean
7FF5C7C30000
unkown
page readonly
clean
7FF5CD30C000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
7FF58AD37000
unkown
page readonly
clean
7FF5A37C7000
unkown
page readonly
clean
7FF58B098000
unkown
page readonly
clean
7FF5A09DC000
unkown
page readonly
clean
7FF57CDB0000
unkown
page readonly
clean
9F54FFF000
unkown
page read and write
clean
1F9AB013000
unkown
page read and write
clean
1EF4EA15000
unkown
page read and write
clean
2D32679000
unkown
page read and write
clean
21B37E02000
unkown
page read and write
clean
7FF5CD437000
unkown
page readonly
clean
27D68790000
unkown
page readonly
clean
7FF57CE4E000
unkown
page readonly
clean
1546638D000
unkown
page read and write
clean
1C233280000
unkown
page readonly
clean
7FF58B08C000
unkown
page readonly
clean
2255DD30000
unkown
page readonly
clean
7FF4F392C000
unkown
page readonly
clean
2D32779000
unkown
page read and write
clean
1170000
unkown
page execute and read and write
clean
7FF4FE262000
unkown
page readonly
clean
7FF58AEE8000
unkown
page readonly
clean
15464314000
unkown
page read and write
clean
1F94F350000
unkown
page read and write
clean
3062000
unkown
page readonly
clean
7FF5A3A7A000
unkown
page readonly
clean
15466359000
unkown
page read and write
clean
105467A000
unkown
page read and write
clean
25FFC513000
unkown
page read and write
clean
2304F847000
unkown
page read and write
clean
7FF595EF7000
unkown
page readonly
clean
7FF5A409C000
unkown
page readonly
clean
1EF53C80000
unkown
page readonly
clean
7FF5A3AF4000
unkown
page readonly
clean
7FF4F397E000
unkown
page readonly
clean
7FF4F3938000
unkown
page readonly
clean
7FF5A03A2000
unkown
page readonly
clean
7FF4F3952000
unkown
page readonly
clean
2563E302000
unkown
page read and write
clean
1C2319E0000
unkown
page read and write
clean
7FF5DCF79000
unkown
page readonly
clean
7FF57D087000
unkown
page readonly
clean
7FF5DCBE3000
unkown
page readonly
clean
7FF4F3927000
unkown
page readonly
clean
1DD528D0000
unkown
page readonly
clean
7FF5CD3D5000
unkown
page readonly
clean
2255DC40000
heap default
page read and write
clean
154642B5000
unkown
page read and write
clean
7FF517DB5000
unkown
page readonly
clean
1EF4E292000
unkown
page read and write
clean
21B3643F000
unkown
page read and write
clean
21B363F0000
unkown
page readonly
clean
7FF5180F6000
unkown
page readonly
clean
301F000
unkown
page readonly
clean
1ABA3C8E000
unkown
page read and write
clean
25FFC3F0000
unkown
page read and write
clean
1F94F126000
unkown
page read and write
clean
1EF4E26F000
unkown
page read and write
clean
2304F849000
unkown
page read and write
clean
7FF4F39BC000
unkown
page readonly
clean
7FF539280000
unkown
page readonly
clean
2AF1E43C000
unkown
page read and write
clean
2304F883000
unkown
page read and write
clean
7FF518464000
unkown
page readonly
clean
25FFCF90000
unkown
page read and write
clean
17C15413000
unkown
page read and write
clean
1F94E540000
unkown
page read and write
clean
8B5000
heap default
page read and write
clean
591D0FD000
unkown
page read and write
clean
7FF5A41B5000
unkown
page readonly
clean
7FF539287000
unkown
page readonly
clean
7FF5A3820000
unkown
page readonly
clean
21B36459000
unkown
page read and write
clean
7FF518470000
unkown
page readonly
clean
2AF1E340000
unkown
page readonly
clean
7FF4F3763000
unkown
page readonly
clean
25FFD002000
unkown
page read and write
clean
154642B5000
unkown
page read and write
clean
2563E870000
unkown
page readonly
clean
20813E3F000
unkown
page read and write
clean
7FF5C7A67000
unkown
page readonly
clean
1C231824000
heap default
page read and write
clean
7FF5A419C000
unkown
page readonly
clean
17C154D0000
unkown
page read and write
clean
7FF532710000
unkown
page readonly
clean
ECC387E000
unkown
page read and write
clean
1020000
heap private
page read and write
clean
7FF518318000
unkown
page readonly
clean
1F942000000
unkown
page readonly
clean
2304F879000
unkown
page read and write
clean
E28B1F9000
unkown
page read and write
clean
7FF59F67E000
unkown
page readonly
clean
24183FF000
unkown
page read and write
clean
1F94F380000
unkown
page read and write
clean
1F94E600000
heap default
page read and write
clean
7FF595F59000
unkown
page readonly
clean
25FFC455000
unkown
page read and write
clean
7FF53921E000
unkown
page readonly
clean
1EF53B0E000
unkown
page read and write
clean
2563E222000
unkown
page read and write
clean
7FF58ADAD000
unkown
page readonly
clean
1546633C000
unkown
page read and write
clean
7FF53273A000
unkown
page readonly
clean
7FF5A03A7000
unkown
page readonly
clean
7FF4F2133000
unkown
page readonly
clean
7FF5A4136000
unkown
page readonly
clean
1EF4EA00000
unkown
page read and write
clean
7FF5DCE8A000
unkown
page readonly
clean
7FF595E7A000
unkown
page readonly
clean
17C1548B000
unkown
page read and write
clean
7FF59F6E7000
unkown
page readonly
clean
7FF5DA00A000
unkown
page readonly
clean
B3E09BB000
unkown
page read and write
clean
154661D0000
unkown
page read and write
clean
2563E0D0000
unkown
page readonly
clean
17C15600000
unkown
page readonly
clean
831000
unkown
page execute read
clean
7FF5A41AC000
unkown
page readonly
clean
7FF58ADB6000
unkown
page readonly
clean
25FFCA02000
unkown
page read and write
clean
1F94E64C000
unkown
page read and write
clean
25FFCB63000
unkown
page read and write
clean
9ACDF77000
unkown
page read and write
clean
7FF57CE88000
unkown
page readonly
clean
3118000
unkown
page readonly
clean
1F94E5E0000
unkown
page read and write
clean
7FF4F2922000
unkown
page readonly
clean
7FF5C7BEA000
unkown
page readonly
clean
25FFCB5A000
unkown
page read and write
clean
7FF58AECB000
unkown
page readonly
clean
7FF518571000
unkown
page readonly
clean
1EF4F2C0000
unkown
page readonly
clean
7FF5C7C7F000
unkown
page readonly
clean
7FF5324CE000
unkown
page readonly
clean
25FFC9E0000
unkown
page readonly
clean
B3E10FF000
unkown
page read and write
clean
27D686BE000
unkown
page read and write
clean
2AF1E413000
unkown
page read and write
clean
25FFC451000
unkown
page read and write
clean
25FFCBA6000
unkown
page read and write
clean
21B36469000
unkown
page read and write
clean
7FF532483000
unkown
page readonly
clean
E8A327F000
unkown
page read and write
clean
7FF518405000
unkown
page readonly
clean
7FF595EDC000
unkown
page readonly
clean
1EF5383C000
unkown
page read and write
clean
7FF58ACE3000
unkown
page readonly
clean
7FF5DA025000
unkown
page readonly
clean
7FF58B135000
unkown
page readonly
clean
7FF5A3E57000
unkown
page readonly
clean
591D1FF000
unkown
page read and write
clean
364D4FE000
unkown
page read and write
clean
7FF5A41C7000
unkown
page readonly
clean
7FF4F375F000
unkown
page readonly
clean
7FF5A3FEE000
unkown
page readonly
clean
7FF4F3923000
unkown
page readonly
clean
7FF5A416F000
unkown
page readonly
clean
7FF5DA0E1000
unkown
page readonly
clean
7FF59F685000
unkown
page readonly
clean
2563E251000
unkown
page read and write
clean
7FF5C7AA0000
unkown
page readonly
clean
7FF5C7C48000
unkown
page readonly
clean
2255DE40000
unkown
page read and write
clean
1EF53824000
unkown
page read and write
clean
1C231800000
heap private
page read and write
clean
1F9AB075000
unkown
page read and write
clean
7FF5C7C32000
unkown
page readonly
clean
7FF518488000
unkown
page readonly
clean
7FF58AE2C000
unkown
page readonly
clean
7FF5DA066000
unkown
page readonly
clean
25FFD002000
unkown
page read and write
clean
7FF5A4196000
unkown
page readonly
clean
27D686BE000
unkown
page read and write
clean
7FF5390D8000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
25FFC508000
unkown
page read and write
clean
154661E0000
unkown
page readonly
clean
1EF4E9F3000
unkown
page read and write
clean
7FF5CD081000
unkown
page readonly
clean
1F94E8A5000
heap private
page read and write
clean
21B361E0000
heap private
page read and write
clean
7FF5A3ADC000
unkown
page readonly
clean
7FF4FE252000
unkown
page readonly
clean
7FF59F380000
unkown
page readonly
clean
7FF5A4165000
unkown
page readonly
clean
7FF5DCE31000
unkown
page readonly
clean
1C231790000
unkown
page readonly
clean
7FF4FDF75000
unkown
page readonly
clean
1F9420D0000
unkown
page write copy
clean
7FF5C7BD7000
unkown
page readonly
clean
2563E300000
unkown
page read and write
clean
7FF5CD072000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
1F942120000
unkown
page readonly
clean
7FF5CCFFE000
unkown
page readonly
clean
15466340000
unkown
page read and write
clean
7FF5DCD68000
unkown
page readonly
clean
7FF5A342C000
unkown
page readonly
clean
154663CF000
unkown
page read and write
clean
7E0000
unkown
page read and write
clean
154666D0000
unkown
page read and write
clean
7FF5DA06C000
unkown
page readonly
clean
7FF5A3A0A000
unkown
page readonly
clean
2D4F000
unkown
page readonly
clean
7FF518579000
unkown
page readonly
clean
21B36513000
unkown
page read and write
clean
7FF518512000
unkown
page readonly
clean
25FFCB7C000
unkown
page read and write
clean
25FFCB50000
unkown
page read and write
clean
7FF5A38AA000
unkown
page readonly
clean
25FFCBA4000
unkown
page read and write
clean
1F941F02000
unkown
page read and write
clean
7FF5C7D2E000
unkown
page readonly
clean
1EF4E273000
unkown
page read and write
clean
1EF538AE000
unkown
page read and write
clean
1EF4E9F0000
unkown
page read and write
clean
9F554FE000
unkown
page read and write
clean
1EF53B80000
unkown
page read and write
clean
208158C0000
unkown
page read and write
clean
7FF5184FC000
unkown
page readonly
clean
7FF58AF4E000
unkown
page readonly
clean
25FFCB31000
unkown
page read and write
clean
7FF5A4138000
unkown
page readonly
clean
1C231DB0000
unkown
page readonly
clean
B3E15FF000
unkown
page read and write
clean
1EF53BE0000
unkown
page readonly
clean
7FF4F381A000
unkown
page readonly
clean
20813E29000
unkown
page read and write
clean
7FF5184AE000
unkown
page readonly
clean
25FFC43C000
unkown
page read and write
clean
7FF5326EA000
unkown
page readonly
clean
7FF58B0A2000
unkown
page readonly
clean
15466320000
unkown
page read and write
clean
7FF58B126000
unkown
page readonly
clean
7FF5326C4000
unkown
page readonly
clean
7FF59F749000
unkown
page readonly
clean
7FF5C7C42000
unkown
page readonly
clean
25FFC300000
unkown
page readonly
clean
7FF58AD78000
unkown
page readonly
clean
7FF5390FD000
unkown
page readonly
clean
1C23378F000
heap private
page read and write
clean
7FF58B12C000
unkown
page readonly
clean
1EF53764000
unkown
page read and write
clean
15466702000
unkown
page read and write
clean
7FF4FE2F7000
unkown
page readonly
clean
7FF5CD3BA000
unkown
page readonly
clean
7FF538DF0000
unkown
page readonly
clean
ECE617E000
unkown
page read and write
clean
9F0687C000
unkown
page read and write
clean
154642B5000
unkown
page read and write
clean
1EF53A00000
unkown
page read and write
clean
E25227A000
unkown
page read and write
clean
7FF5180B5000
unkown
page readonly
clean
2255DF02000
unkown
page read and write
clean
7FF4F3710000
unkown
page readonly
clean
9F553FD000
unkown
page read and write
clean
7FF517EE7000
unkown
page readonly
clean
7FF59F6BC000
unkown
page readonly
clean
7FF4F37AE000
unkown
page readonly
clean
7FF5C7873000
unkown
page readonly
clean
7FF5A09C6000
unkown
page readonly
clean
1054EFC000
unkown
page read and write
clean
7FF58AE02000
unkown
page readonly
clean
87A000
heap default
page read and write
clean
7FF5A3A2C000
unkown
page readonly
clean
2AF1E475000
unkown
page read and write
clean
7FF5A4132000
unkown
page readonly
clean
7FF59F699000
unkown
page readonly
clean
1F9AB06B000
unkown
page read and write
clean
7FF595D6D000
unkown
page readonly
clean
1EF53B27000
unkown
page write copy
clean
1EF53B24000
unkown
page read and write
clean
21B38040000
unkown
page readonly
clean
154642B2000
unkown
page read and write
clean
1ABA3A90000
heap default
page read and write
clean
154642B5000
unkown
page read and write
clean
9ACE0FF000
unkown
page read and write
clean
7FF5184B5000
unkown
page readonly
clean
17C15400000
unkown
page read and write
clean
2255E390000
unkown
page readonly
clean
7FF5DA087000
unkown
page readonly
clean
7FF4F3887000
unkown
page readonly
clean
7FF5C7CD7000
unkown
page readonly
clean
7FF4FE2E5000
unkown
page readonly
clean
7FF4F39E4000
unkown
page readonly
clean
591D47D000
unkown
page read and write
clean
30A5000
unkown
page readonly
clean
154642B3000
unkown
page read and write
clean
7FF5A38C0000
unkown
page readonly
clean
1C2317F0000
unkown
page readonly
clean
25FFCBBF000
unkown
page read and write
clean
1F94E64C000
unkown
page read and write
clean
25FFCB5B000
unkown
page read and write
clean
154663F7000
unkown
page read and write
clean
15466410000
unkown
page readonly
clean
25FFCB7C000
unkown
page read and write
clean
25FFCBA6000
unkown
page read and write
clean
154642DE000
unkown
page read and write
clean
7FF5A09E5000
unkown
page readonly
clean
7FF57D06C000
unkown
page readonly
clean
1C233690000
heap private
page read and write
clean
154641D0000
heap default
page read and write
clean
1EF4F661000
unkown
page read and write
clean
7FF59F656000
unkown
page readonly
clean
1F9439E0000
unkown
page readonly
clean
25FFCB63000
unkown
page read and write
clean
1EF53690000
unkown
page read and write
clean
7FF4FDF17000
unkown
page readonly
clean
24184FE000
unkown
page read and write
clean
21B36413000
unkown
page read and write
clean
7FF5A3AF7000
unkown
page readonly
clean
208159C0000
unkown
page readonly
clean
7FF57CEB9000
unkown
page readonly
clean
ECE687D000
unkown
page read and write
clean
7FF595A50000
unkown
page readonly
clean
21B37DA0000
unkown
page read and write
clean
7FF5A09BD000
unkown
page readonly
clean
7FF5A4018000
unkown
page readonly
clean
7FF5A3AC6000
unkown
page readonly
clean
7FF53277D000
unkown
page readonly
clean
1F94F3D0000
unkown
page read and write
clean
15466309000
unkown
page read and write
clean
7FF532781000
unkown
page readonly
clean
E25237F000
unkown
page read and write
clean
7FF58AEDC000
unkown
page readonly
clean
15466700000
unkown
page read and write
clean
7FF5A3963000
unkown
page readonly
clean
7FF4FE2A9000
unkown
page readonly
clean
7FF5A4120000
unkown
page readonly
clean
1EF4EB18000
unkown
page read and write
clean
7FF5A3AD6000
unkown
page readonly
clean
7FF538DE0000
unkown
page readonly
clean
7FF58AE70000
unkown
page readonly
clean
2AF1E446000
unkown
page read and write
clean
7FF5392E9000
unkown
page readonly
clean
15467010000
unkown
page read and write
clean
There are 1643 hidden memdumps, click here to show them.