IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Total_order_details_1231333.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\~$Total_order_details_1231333.xlsb
data
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\1815CD0B-2738-4D28-B541-12A8E74F2E4F
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2835AD15.png
PNG image data, 288 x 77, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4D4F51F0.png
PNG image data, 178 x 76, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\54BD2812.png
PNG image data, 168 x 72, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\881CC931.png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\955434EB.png
PNG image data, 264 x 113, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\0CB40000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Little-endian UTF-16 Unicode text, with CR line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 -s ..\kdldyeff.dll
malicious

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
clean
https://directory.services.
unknown
clean
https://login.windows-ppe.net/common/oauth2/authorize
unknown
clean
https://staging.cortana.ai
unknown
clean
https://loki.delve.office.com/api/v1/configuration/officewin32/
unknown
clean
There are 90 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
185.180.199.121
unknown
Netherlands
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|+
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
}+
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4B3DC
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UpdateComplete
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4B9B8
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4BB4E
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
4BC48
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
#=
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FileFormatBallotBoxAppIDBootedOnce
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
There are 52 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF57D87E000
unkown
page readonly
clean
7FF5AB4C4000
unkown
page readonly
clean
1F75D9C0000
unkown
page read and write
clean
2576D700000
unkown
page read and write
clean
105617C000
unkown
page read and write
clean
7FF57D182000
unkown
page readonly
clean
7FF51BC65000
unkown
page readonly
clean
2576D15D000
unkown
page read and write
clean
1549FF15000
unkown
page read and write
clean
2855F502000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
7FF4F205A000
unkown
page readonly
clean
6975D7A000
unkown
page read and write
clean
1549DEE3000
unkown
page read and write
clean
2576D150000
unkown
page read and write
clean
7FF51C090000
unkown
page readonly
clean
7FF4F48E6000
unkown
page readonly
clean
7FF4FEF00000
unkown
page readonly
clean
2D1B000
unkown
page readonly
clean
7FF5513AE000
unkown
page readonly
clean
7FF57D820000
unkown
page readonly
clean
154A0032000
unkown
page read and write
clean
7FF4F3E20000
unkown
page readonly
clean
29BE3C88000
unkown
page read and write
clean
1549DE99000
unkown
page read and write
clean
1549DEE6000
unkown
page read and write
clean
7FF57D72A000
unkown
page readonly
clean
1549DFA1000
unkown
page read and write
clean
7FF4FEE41000
unkown
page readonly
clean
28560F70000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
1F75DA02000
unkown
page read and write
clean
2576CA49000
unkown
page read and write
clean
2576D161000
unkown
page read and write
clean
2576D174000
unkown
page read and write
clean
7FF57D88B000
unkown
page readonly
clean
7FF55123B000
unkown
page readonly
clean
7FF511FD8000
unkown
page readonly
clean
2CE5000
unkown
page readonly
clean
177F7C03000
unkown
page read and write
clean
7FF511F87000
unkown
page readonly
clean
2576D661000
unkown
page read and write
clean
2576CA5A000
unkown
page read and write
clean
7FF4F20E6000
unkown
page readonly
clean
2A53E790000
unkown
page read and write
clean
7FF5510FB000
unkown
page readonly
clean
1055DFB000
unkown
page read and write
clean
154A1110000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF4FEC1C000
unkown
page readonly
clean
15033A84000
unkown
page read and write
clean
1549DEE5000
unkown
page read and write
clean
2A53E700000
heap private
page read and write
clean
177F7BE8000
unkown
page read and write
clean
7FF5AB2E3000
unkown
page readonly
clean
2576D148000
unkown
page read and write
clean
992CBFF000
unkown
page read and write
clean
2576CA8A000
unkown
page read and write
clean
154A1210000
unkown
page read and write
clean
2576D654000
unkown
page read and write
clean
7FF57D8F9000
unkown
page readonly
clean
7FF55139E000
unkown
page readonly
clean
15033A4A000
unkown
page read and write
clean
2576D14C000
unkown
page read and write
clean
7FF5AB40C000
unkown
page readonly
clean
2576CABC000
unkown
page read and write
clean
A34977000
unkown
page read and write
clean
177F7BE1000
unkown
page read and write
clean
7FF511F6A000
unkown
page readonly
clean
7FF4FEFDD000
unkown
page readonly
clean
7FF512062000
unkown
page readonly
clean
2576CA3C000
unkown
page read and write
clean
BB4CC7B000
unkown
page read and write
clean
7FF570C5A000
unkown
page readonly
clean
325C000
unkown
page read and write
clean
7FF57D63B000
unkown
page readonly
clean
7FF551384000
unkown
page readonly
clean
1549FFDA000
unkown
page read and write
clean
2576D600000
unkown
page read and write
clean
7FF5512E0000
unkown
page readonly
clean
7FF57D8F6000
unkown
page readonly
clean
1549FFEA000
unkown
page read and write
clean
1CA02A02000
unkown
page read and write
clean
2576D14B000
unkown
page read and write
clean
1F9F7029000
unkown
page read and write
clean
1549DE8D000
unkown
page read and write
clean
992C8F8000
unkown
page read and write
clean
7FF51C08A000
unkown
page readonly
clean
7FF4FEFD9000
unkown
page readonly
clean
1CA02A13000
unkown
page read and write
clean
7FF570C0A000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
2576D560000
unkown
page read and write
clean
29BE3C4A000
unkown
page read and write
clean
2576D14F000
unkown
page read and write
clean
7FF5512D2000
unkown
page readonly
clean
15033840000
heap private
page read and write
clean
7FF5AB3DA000
unkown
page readonly
clean
1549FFDC000
unkown
page read and write
clean
1549FFEB000
unkown
page read and write
clean
1549FF71000
unkown
page read and write
clean
7FF57D55A000
unkown
page readonly
clean
7FF51C0BC000
unkown
page readonly
clean
2576CA4D000
unkown
page read and write
clean
2855F500000
unkown
page read and write
clean
7FF4F4AC0000
unkown
page readonly
clean
7FF4F4A01000
unkown
page readonly
clean
2576CA57000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
2855F46A000
unkown
page read and write
clean
1549DCC0000
heap private
page read and write
clean
29BE3C70000
unkown
page read and write
clean
2855F402000
unkown
page read and write
clean
7FF4FEE68000
unkown
page readonly
clean
992D07D000
unkown
page read and write
clean
1549DEE9000
unkown
page read and write
clean
7FF51BFFC000
unkown
page readonly
clean
1CA04410000
unkown
page read and write
clean
2D16000
unkown
page readonly
clean
7FF57D783000
unkown
page readonly
clean
154A1310000
unkown
page read and write
clean
1549FCF0000
unkown
page read and write
clean
1549DF3D000
unkown
page read and write
clean
177F7E10000
heap private
page read and write
clean
1549FD50000
unkown
page readonly
clean
7FF570C1B000
unkown
page readonly
clean
105607D000
unkown
page read and write
clean
7FF51BF8E000
unkown
page readonly
clean
7FF51205A000
unkown
page readonly
clean
1549FFD5000
unkown
page read and write
clean
7FF5AB201000
unkown
page readonly
clean
7FF5AB4D2000
unkown
page readonly
clean
150338A0000
heap default
page read and write
clean
29BE3C64000
unkown
page read and write
clean
992CAF7000
unkown
page read and write
clean
1549DEC7000
unkown
page read and write
clean
DBF6B7F000
unkown
page read and write
clean
2576D14C000
unkown
page read and write
clean
154A0200000
unkown
page read and write
clean
7FF57D3E2000
unkown
page readonly
clean
154A0202000
unkown
page read and write
clean
7FF4F4B7E000
unkown
page readonly
clean
3590000
heap default
page read and write
clean
2576D15C000
unkown
page read and write
clean
2855F46F000
unkown
page read and write
clean
2576D12F000
unkown
page read and write
clean
1055C7B000
unkown
page read and write
clean
2576D182000
unkown
page read and write
clean
7FF4F4A28000
unkown
page readonly
clean
1CA02B13000
unkown
page read and write
clean
7FF570A35000
unkown
page readonly
clean
1F75DB00000
unkown
page read and write
clean
2CB5000
unkown
page readonly
clean
1549DEE8000
unkown
page read and write
clean
1549FCF0000
unkown
page read and write
clean
7FF5708E7000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
1055879000
unkown
page read and write
clean
7FF551243000
unkown
page readonly
clean
29BE3E00000
unkown
page readonly
clean
2576D157000
unkown
page read and write
clean
1549DE6F000
unkown
page read and write
clean
7FF511DC1000
unkown
page readonly
clean
2576D164000
unkown
page read and write
clean
1F9F703F000
unkown
page read and write
clean
2855F46D000
unkown
page read and write
clean
7FF4F4B96000
unkown
page readonly
clean
105627F000
unkown
page read and write
clean
7FF4F3E25000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
7FF4F4945000
unkown
page readonly
clean
1549E050000
unkown
page readonly
clean
7FF57D822000
unkown
page readonly
clean
7FF511FB4000
unkown
page readonly
clean
29BE3B30000
unkown
page readonly
clean
2576D800000
unkown
page readonly
clean
7FF57D3EE000
unkown
page readonly
clean
7FF51C0A7000
unkown
page readonly
clean
7FF511F7B000
unkown
page readonly
clean
2576CABF000
unkown
page read and write
clean
7FF4FED81000
unkown
page readonly
clean
6975B7F000
unkown
page read and write
clean
7FF4FEF02000
unkown
page readonly
clean
7FF511E13000
unkown
page readonly
clean
7FF570C89000
unkown
page readonly
clean
7FF570C86000
unkown
page readonly
clean
1549DD30000
unkown
page readonly
clean
2855F360000
heap default
page read and write
clean
7FF551357000
unkown
page readonly
clean
7FF51C0EF000
unkown
page readonly
clean
177F7BC0000
heap default
page read and write
clean
2D61000
unkown
page readonly
clean
1CA028C0000
heap private
page read and write
clean
10555CE000
unkown
page read and write
clean
2576D14D000
unkown
page read and write
clean
2576D1C9000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
7FF57D1D7000
unkown
page readonly
clean
7FF4F1FBD000
unkown
page readonly
clean
2576D14D000
unkown
page read and write
clean
1CA02920000
heap default
page read and write
clean
3092000
unkown
page read and write
clean
7FF57D85F000
unkown
page readonly
clean
7FF4F4B20000
unkown
page readonly
clean
1549FFB9000
unkown
page read and write
clean
2576CA13000
unkown
page read and write
clean
7FF5AB239000
unkown
page readonly
clean
1CA02930000
unkown
page readonly
clean
F92910D000
unkown
page read and write
clean
2576CA4F000
unkown
page read and write
clean
7FF5AB380000
unkown
page readonly
clean
1F9F6FA0000
unkown
page write copy
clean
2576D160000
unkown
page read and write
clean
1549DEBE000
unkown
page read and write
clean
7FF4F3F11000
unkown
page readonly
clean
2576D147000
unkown
page read and write
clean
1549FF58000
unkown
page read and write
clean
7FF4F4B2B000
unkown
page readonly
clean
7FF5513B6000
unkown
page readonly
clean
7FF57D77E000
unkown
page readonly
clean
2576CA54000
unkown
page read and write
clean
7FF5AB3E0000
unkown
page readonly
clean
7FF4F2161000
unkown
page readonly
clean
2576D1C9000
unkown
page read and write
clean
1549FF10000
unkown
page read and write
clean
2576D145000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF4F4B1E000
unkown
page readonly
clean
177F7BFB000
unkown
page read and write
clean
1F75D850000
heap default
page read and write
clean
1549DE62000
unkown
page read and write
clean
2576D15D000
unkown
page read and write
clean
7FF57D84F000
unkown
page readonly
clean
7FF4FF051000
unkown
page readonly
clean
1549FCB0000
unkown
page read and write
clean
2576D191000
unkown
page read and write
clean
7FF4F4AC2000
unkown
page readonly
clean
1549FF6E000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF4F20C4000
unkown
page readonly
clean
1549F910000
unkown
page readonly
clean
3460000
heap private
page read and write
clean
2855F471000
unkown
page read and write
clean
1549DEE5000
unkown
page read and write
clean
7FF5AB40F000
unkown
page readonly
clean
2CFF000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
1549FF16000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF5AB2DB000
unkown
page readonly
clean
1549DE62000
unkown
page read and write
clean
2576D19F000
unkown
page read and write
clean
B5A0C7A000
unkown
page read and write
clean
2576D176000
unkown
page read and write
clean
2576D172000
unkown
page read and write
clean
1F75DB13000
unkown
page read and write
clean
7FF4FEFA4000
unkown
page readonly
clean
7FF55131F000
unkown
page readonly
clean
1549FF0F000
unkown
page read and write
clean
7FF4F4C04000
unkown
page readonly
clean
177F7C01000
unkown
page read and write
clean
2855F600000
unkown
page readonly
clean
7FF5AB3F7000
unkown
page readonly
clean
6975E7F000
unkown
page read and write
clean
1549E000000
unkown
page write copy
clean
2576D200000
unkown
page readonly
clean
1549DE74000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
7FF4F205C000
unkown
page readonly
clean
1549FD10000
unkown
page read and write
clean
7FF570C10000
unkown
page readonly
clean
1F9F7002000
unkown
page read and write
clean
7FF550BA1000
unkown
page readonly
clean
7FF4FEF98000
unkown
page readonly
clean
7FF551161000
unkown
page readonly
clean
29BE3B20000
heap default
page read and write
clean
7FF4FEF60000
unkown
page readonly
clean
1549DE65000
unkown
page read and write
clean
1F75DB02000
unkown
page read and write
clean
7FF51C0DA000
unkown
page readonly
clean
29BE3AC0000
heap private
page read and write
clean
2576CAFA000
unkown
page read and write
clean
7FF511FED000
unkown
page readonly
clean
2CE7000
unkown
page readonly
clean
2576D174000
unkown
page read and write
clean
1549DE91000
unkown
page read and write
clean
7FF51B899000
unkown
page readonly
clean
1549DE67000
unkown
page read and write
clean
2576D540000
unkown
page readonly
clean
7FF4F4B4C000
unkown
page readonly
clean
2576D15F000
unkown
page read and write
clean
177F7B10000
unkown
page read and write
clean
7FF57D5F7000
unkown
page readonly
clean
29BE4600000
unkown
page readonly
clean
15033A3C000
unkown
page read and write
clean
7FF511FCF000
unkown
page readonly
clean
7FF570C78000
unkown
page readonly
clean
BB4CF7B000
unkown
page read and write
clean
2576CB08000
unkown
page read and write
clean
7FF5AB3E5000
unkown
page readonly
clean
2576CAA6000
unkown
page read and write
clean
BB4D177000
unkown
page read and write
clean
2576CAC6000
unkown
page read and write
clean
7FF51C095000
unkown
page readonly
clean
7FF4FEF23000
unkown
page readonly
clean
1549DEE6000
unkown
page read and write
clean
2576D155000
unkown
page read and write
clean
2576D133000
unkown
page read and write
clean
7FF4F1EC1000
unkown
page readonly
clean
177F7B60000
unkown
page readonly
clean
177F7A40000
unkown
page readonly
clean
22926AA000
unkown
page read and write
clean
2576CA58000
unkown
page read and write
clean
2CCC000
unkown
page readonly
clean
1549FFDE000
unkown
page read and write
clean
1549DEE5000
unkown
page read and write
clean
7FF51C174000
unkown
page readonly
clean
7FF57D723000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
A3487E000
unkown
page read and write
clean
7FF55132A000
unkown
page readonly
clean
7FF57D86A000
unkown
page readonly
clean
7FF57D3F2000
unkown
page readonly
clean
7FF4F1FD4000
unkown
page readonly
clean
7FF4FEDB9000
unkown
page readonly
clean
1549FF15000
unkown
page read and write
clean
7FF570CF4000
unkown
page readonly
clean
2855F46E000
unkown
page read and write
clean
2576D1A5000
unkown
page read and write
clean
1549DEA6000
unkown
page read and write
clean
7FF551118000
unkown
page readonly
clean
7FF570C0E000
unkown
page readonly
clean
2A53E84A000
unkown
page read and write
clean
7FF4FF052000
unkown
page readonly
clean
7FF55138A000
unkown
page readonly
clean
2576D118000
unkown
page read and write
clean
7FF4F4B1A000
unkown
page readonly
clean
7FF4FEE5B000
unkown
page readonly
clean
1549DE68000
unkown
page read and write
clean
1549FFE3000
unkown
page read and write
clean
992C6FE000
unkown
page read and write
clean
7FF511FDE000
unkown
page readonly
clean
37D0000
unkown
page readonly
clean
7FF5AB2C1000
unkown
page readonly
clean
29BE3C3C000
unkown
page read and write
clean
7FF5AB459000
unkown
page readonly
clean
2855F46F000
unkown
page read and write
clean
1549FF5E000
unkown
page read and write
clean
7FF4FF044000
unkown
page readonly
clean
2C89000
unkown
page readonly
clean
7FF511ED4000
unkown
page readonly
clean
B5410F9000
unkown
page read and write
clean
2576D191000
unkown
page read and write
clean
7FF5513A8000
unkown
page readonly
clean
7FF5AB19B000
unkown
page readonly
clean
7FF5AAC3D000
unkown
page readonly
clean
1549FF4B000
unkown
page read and write
clean
7FF4F4A1B000
unkown
page readonly
clean
1055BFA000
unkown
page read and write
clean
7FF5AB42A000
unkown
page readonly
clean
7FF4FEF5E000
unkown
page readonly
clean
2CD0000
unkown
page readonly
clean
7FF5AB3A3000
unkown
page readonly
clean
7FF4F4C11000
unkown
page readonly
clean
1F9F7013000
unkown
page read and write
clean
2576D1A5000
unkown
page read and write
clean
7FF55133E000
unkown
page readonly
clean
7FF5AB0AA000
unkown
page readonly
clean
33D0000
unkown
page read and write
clean
2576D140000
unkown
page read and write
clean
7FF51C17A000
unkown
page readonly
clean
154A0077000
unkown
page read and write
clean
7FF5708DF000
unkown
page readonly
clean
1F75DA29000
unkown
page read and write
clean
2576CB13000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF570D02000
unkown
page readonly
clean
1055FFA000
unkown
page read and write
clean
7FF4FEFAA000
unkown
page readonly
clean
2C8C000
unkown
page readonly
clean
177F7BF0000
unkown
page read and write
clean
7FF4F4381000
unkown
page readonly
clean
7FF5709D6000
unkown
page readonly
clean
15033A6C000
unkown
page read and write
clean
2576D661000
unkown
page read and write
clean
2576D14D000
unkown
page read and write
clean
7FF5AB451000
unkown
page readonly
clean
7FF4F20A7000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
7FF551340000
unkown
page readonly
clean
3690000
unkown
page readonly
clean
2A53E84E000
unkown
page read and write
clean
154A0302000
unkown
page read and write
clean
177F7E15000
heap private
page read and write
clean
2D93000
unkown
page readonly
clean
7FF4F47EA000
unkown
page readonly
clean
29BE3C00000
unkown
page read and write
clean
7FF5513B9000
unkown
page readonly
clean
2855F400000
unkown
page read and write
clean
7FF4FE7BD000
unkown
page readonly
clean
29BE4402000
unkown
page read and write
clean
2576C9F0000
unkown
page readonly
clean
7FF4F1C36000
unkown
page readonly
clean
1F9F7000000
unkown
page read and write
clean
7FF550EA2000
unkown
page readonly
clean
7FF511F5A000
unkown
page readonly
clean
329B000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
DBF6AFE000
unkown
page read and write
clean
29BE3C55000
unkown
page read and write
clean
7FF51BFE3000
unkown
page readonly
clean
177F7BD6000
unkown
page read and write
clean
2855F46F000
unkown
page read and write
clean
7FF57D96A000
unkown
page readonly
clean
154A0043000
unkown
page read and write
clean
F929777000
unkown
page read and write
clean
2576D128000
unkown
page read and write
clean
1549FF1E000
unkown
page read and write
clean
1549FFE1000
unkown
page read and write
clean
2576CA29000
unkown
page read and write
clean
2576D147000
unkown
page read and write
clean
7FF4F1F51000
unkown
page readonly
clean
2576D167000
unkown
page read and write
clean
7FF4F20B4000
unkown
page readonly
clean
DBF6D7E000
unkown
page read and write
clean
7FF570B13000
unkown
page readonly
clean
1549FFA0000
unkown
page read and write
clean
15033A50000
unkown
page read and write
clean
2855F6D0000
unkown
page readonly
clean
1549F810000
unkown
page read and write
clean
1549FF66000
unkown
page read and write
clean
154A1610000
unkown
page read and write
clean
7FF511E6E000
unkown
page readonly
clean
2576D162000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
154A003A000
unkown
page read and write
clean
2576D175000
unkown
page read and write
clean
7FF5AB4D1000
unkown
page readonly
clean
1549DE6C000
unkown
page read and write
clean
2576CB16000
unkown
page read and write
clean
1549FF1E000
unkown
page read and write
clean
177F7BED000
unkown
page read and write
clean
2576D14C000
unkown
page read and write
clean
7FF55130B000
unkown
page readonly
clean
6975C79000
unkown
page read and write
clean
154A0182000
unkown
page read and write
clean
7FF4F20CF000
unkown
page readonly
clean
2576D1C9000
unkown
page read and write
clean
7FF4F3E64000
unkown
page readonly
clean
7FF4FEC37000
unkown
page readonly
clean
1549FCF0000
unkown
page read and write
clean
7FF511B30000
unkown
page readonly
clean
7FF511EC3000
unkown
page readonly
clean
34B0000
heap default
page read and write
clean
7FF4F4B99000
unkown
page readonly
clean
1549DF5F000
unkown
page read and write
clean
F92997D000
unkown
page read and write
clean
29BE4940000
unkown
page readonly
clean
1549FFAC000
unkown
page read and write
clean
2576D143000
unkown
page read and write
clean
7FF4F4AE3000
unkown
page readonly
clean
2576D15F000
unkown
page read and write
clean
7FF4F2070000
unkown
page readonly
clean
2BC0000
unkown
page readonly
clean
1549FFB0000
unkown
page read and write
clean
992C67E000
unkown
page read and write
clean
B540FFA000
unkown
page read and write
clean
154A1110000
unkown
page read and write
clean
2A53E902000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
7FF57D6B4000
unkown
page readonly
clean
1F75D860000
unkown
page readonly
clean
2CFA000
unkown
page readonly
clean
7FF551303000
unkown
page readonly
clean
15033B13000
unkown
page read and write
clean
7FF5AB0AF000
unkown
page readonly
clean
7FF4F4B74000
unkown
page readonly
clean
DBF6A7B000
unkown
page read and write
clean
7FF4F1F13000
unkown
page readonly
clean
7FF5AB3DE000
unkown
page readonly
clean
2855F46E000
unkown
page read and write
clean
7FF551248000
unkown
page readonly
clean
1F75D980000
unkown
page readonly
clean
2A53F540000
unkown
page readonly
clean
1549DEEE000
unkown
page read and write
clean
2576D560000
unkown
page read and write
clean
2A53E900000
unkown
page read and write
clean
7FF4F4B9D000
unkown
page readonly
clean
154A0282000
unkown
page read and write
clean
7FF51BF33000
unkown
page readonly
clean
7FF5AB45D000
unkown
page readonly
clean
7FF4F20DE000
unkown
page readonly
clean
7FF57D8B7000
unkown
page readonly
clean
10561F9000
unkown
page read and write
clean
B5411FF000
unkown
page read and write
clean
6975CFF000
unkown
page read and write
clean
2576D15C000
unkown
page read and write
clean
177F7BFB000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
2576CABF000
unkown
page read and write
clean
2576D155000
unkown
page read and write
clean
299C000
unkown
page readonly
clean
1549DEE6000
unkown
page read and write
clean
29BE3D02000
unkown
page read and write
clean
7FF4F3E2B000
unkown
page readonly
clean
2576C810000
unkown
page readonly
clean
6975DFC000
unkown
page read and write
clean
7FF4F4B4F000
unkown
page readonly
clean
7FF51C0F8000
unkown
page readonly
clean
7FF57D84B000
unkown
page readonly
clean
DBF6C79000
unkown
page read and write
clean
7FF4F215A000
unkown
page readonly
clean
29BE4280000
unkown
page read and write
clean
2D88000
unkown
page readonly
clean
15033B02000
unkown
page read and write
clean
1055D7B000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
7FF51C07C000
unkown
page readonly
clean
7FF57D788000
unkown
page readonly
clean
154A1510000
unkown
page read and write
clean
2D65000
unkown
page readonly
clean
2576D164000
unkown
page read and write
clean
154A0102000
unkown
page read and write
clean
1CA04510000
unkown
page readonly
clean
7FF51BEE1000
unkown
page readonly
clean
7FF4F206E000
unkown
page readonly
clean
2576CA52000
unkown
page read and write
clean
2855F46D000
unkown
page read and write
clean
2576D166000
unkown
page read and write
clean
7FF4F4979000
unkown
page readonly
clean
2576CA4A000
unkown
page read and write
clean
7FF57D7CD000
unkown
page readonly
clean
7FF55136C000
unkown
page readonly
clean
7FF511CE7000
unkown
page readonly
clean
1549DF1D000
unkown
page read and write
clean
7FF55111F000
unkown
page readonly
clean
1549DE13000
unkown
page read and write
clean
1F9F8AB0000
unkown
page readonly
clean
154A003E000
unkown
page read and write
clean
7FF570C3C000
unkown
page readonly
clean
7FF51C08E000
unkown
page readonly
clean
2A53E846000
unkown
page read and write
clean
2576D127000
unkown
page read and write
clean
154A0202000
unkown
page read and write
clean
7FF4F47DC000
unkown
page readonly
clean
2576D133000
unkown
page read and write
clean
7FF4FF04A000
unkown
page readonly
clean
7FF51C182000
unkown
page readonly
clean
1549DEC0000
unkown
page read and write
clean
2855F429000
unkown
page read and write
clean
7FF4FEC2F000
unkown
page readonly
clean
1549FF75000
unkown
page read and write
clean
DBF6BFA000
unkown
page read and write
clean
F9294F5000
unkown
page read and write
clean
7FF4FEF5A000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
1F75D7F0000
heap private
page read and write
clean
2A53E883000
unkown
page read and write
clean
7FF57D6C1000
unkown
page readonly
clean
7FF57046D000
unkown
page readonly
clean
1549FFE1000
unkown
page read and write
clean
7FF4F209C000
unkown
page readonly
clean
2576CA4B000
unkown
page read and write
clean
7FF57D7EC000
unkown
page readonly
clean
1549DE62000
unkown
page read and write
clean
7FF4F4A23000
unkown
page readonly
clean
7FF5AB448000
unkown
page readonly
clean
1F9F6FF0000
unkown
page readonly
clean
B5A0D7F000
unkown
page read and write
clean
2CBC000
unkown
page readonly
clean
7FF55142A000
unkown
page readonly
clean
7FF4F3E58000
unkown
page readonly
clean
7FF5AB456000
unkown
page readonly
clean
1549FF54000
unkown
page read and write
clean
2576C800000
heap default
page read and write
clean
2855F370000
unkown
page write copy
clean
2576CB02000
unkown
page read and write
clean
154A1610000
unkown
page read and write
clean
7FF4F437D000
unkown
page readonly
clean
15033B08000
unkown
page read and write
clean
15033A55000
unkown
page read and write
clean
2576CABF000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF55100A000
unkown
page readonly
clean
2576D602000
unkown
page read and write
clean
2855F444000
unkown
page read and write
clean
2576D14B000
unkown
page read and write
clean
1CA02C50000
unkown
page readonly
clean
BB4D07F000
unkown
page read and write
clean
7FF5AB44E000
unkown
page readonly
clean
7FF57D972000
unkown
page readonly
clean
7FF511FBA000
unkown
page readonly
clean
2576D152000
unkown
page read and write
clean
2CED000
unkown
page readonly
clean
1F9F6E60000
heap private
page read and write
clean
7FF570BB2000
unkown
page readonly
clean
7FF51C0C7000
unkown
page readonly
clean
2576D15F000
unkown
page read and write
clean
1CA02B00000
unkown
page read and write
clean
2576D194000
unkown
page read and write
clean
B540F7E000
unkown
page read and write
clean
1549FF2A000
unkown
page read and write
clean
15033A13000
unkown
page read and write
clean
2576D14E000
unkown
page read and write
clean
2A53E829000
unkown
page read and write
clean
1549DEE7000
unkown
page read and write
clean
2576D14E000
unkown
page read and write
clean
7FF570C15000
unkown
page readonly
clean
7FF4F1DE7000
unkown
page readonly
clean
7FF55130F000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
7FF51C10D000
unkown
page readonly
clean
2576D167000
unkown
page read and write
clean
2576CAB2000
unkown
page read and write
clean
2A53E849000
unkown
page read and write
clean
2855F45A000
unkown
page read and write
clean
7FF51C0D4000
unkown
page readonly
clean
1F75DA55000
unkown
page read and write
clean
7FF57D8EE000
unkown
page readonly
clean
2855F46A000
unkown
page read and write
clean
7FF551424000
unkown
page readonly
clean
6975A7B000
unkown
page read and write
clean
2855F413000
unkown
page read and write
clean
154A1000000
unkown
page read and write
clean
2576D184000
unkown
page read and write
clean
7FF4F3E9D000
unkown
page readonly
clean
B540E7B000
unkown
page read and write
clean
1549FD00000
unkown
page read and write
clean
7FF4F4C0A000
unkown
page readonly
clean
7FF570A69000
unkown
page readonly
clean
7FF511FA7000
unkown
page readonly
clean
2855F473000
unkown
page read and write
clean
1549DE8D000
unkown
page read and write
clean
992CD78000
unkown
page read and write
clean
1F75DA6F000
unkown
page read and write
clean
7FF5AB2E8000
unkown
page readonly
clean
154A1610000
unkown
page read and write
clean
2576D100000
unkown
page read and write
clean
7FF512054000
unkown
page readonly
clean
992C7F5000
unkown
page read and write
clean
1549DEE5000
unkown
page read and write
clean
154A1510000
unkown
page read and write
clean
2576D140000
unkown
page read and write
clean
177F7BFB000
unkown
page read and write
clean
7FF570AF1000
unkown
page readonly
clean
2CEF000
unkown
page readonly
clean
7FF570C6E000
unkown
page readonly
clean
2576D174000
unkown
page read and write
clean
177F7BF0000
unkown
page read and write
clean
7FF57D646000
unkown
page readonly
clean
2576D148000
unkown
page read and write
clean
2855F46D000
unkown
page read and write
clean
29BE3C4E000
unkown
page read and write
clean
1549FCE0000
unkown
page readonly
clean
2576D550000
unkown
page readonly
clean
1F75DA13000
unkown
page read and write
clean
15034202000
unkown
page read and write
clean
F9295FB000
unkown
page read and write
clean
7FF550C42000
unkown
page readonly
clean
1549FF21000
unkown
page read and write
clean
10559FA000
unkown
page read and write
clean
7FF57D8CA000
unkown
page readonly
clean
B5A0A7B000
unkown
page read and write
clean
7FF4FEE63000
unkown
page readonly
clean
7FF550B9D000
unkown
page readonly
clean
177F7E20000
unkown
page readonly
clean
7FF57D440000
unkown
page readonly
clean
7FF570C81000
unkown
page readonly
clean
7FF551314000
unkown
page readonly
clean
2576D164000
unkown
page read and write
clean
2576D174000
unkown
page read and write
clean
15033980000
unkown
page readonly
clean
1549DEE4000
unkown
page read and write
clean
1549DE5F000
unkown
page read and write
clean
1549DEE6000
unkown
page read and write
clean
1549DE29000
unkown
page read and write
clean
A3447B000
unkown
page read and write
clean
1CA02A3F000
unkown
page read and write
clean
7FF4F3F04000
unkown
page readonly
clean
7FF4F4B6A000
unkown
page readonly
clean
2576D602000
unkown
page read and write
clean
7FF57D600000
unkown
page readonly
clean
7FF57D8C4000
unkown
page readonly
clean
33F0000
unkown
page readonly
clean
2576D14C000
unkown
page read and write
clean
15033B00000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
2A53E908000
unkown
page read and write
clean
7FF4F3777000
unkown
page readonly
clean
1549FFEB000
unkown
page read and write
clean
2576D15A000
unkown
page read and write
clean
2576D1A5000
unkown
page read and write
clean
B54117F000
unkown
page read and write
clean
7FF57D495000
unkown
page readonly
clean
1549DF1C000
unkown
page read and write
clean
2576C9C0000
unkown
page readonly
clean
7FF4FED1B000
unkown
page readonly
clean
2576D602000
unkown
page read and write
clean
7FF4F4B37000
unkown
page readonly
clean
1549FF27000
unkown
page read and write
clean
2576D1C0000
unkown
page read and write
clean
7FF4F4B58000
unkown
page readonly
clean
1549FF5C000
unkown
page read and write
clean
A3477B000
unkown
page read and write
clean
1549DF6E000
unkown
page read and write
clean
154A1310000
unkown
page read and write
clean
7FF55133A000
unkown
page readonly
clean
BB4CCFE000
unkown
page read and write
clean
2576D183000
unkown
page read and write
clean
1549DE52000
unkown
page read and write
clean
2576D184000
unkown
page read and write
clean
B54107F000
unkown
page read and write
clean
2576D132000
unkown
page read and write
clean
1CA02E50000
unkown
page readonly
clean
1549FCF0000
unkown
page read and write
clean
7FF5AB0B7000
unkown
page readonly
clean
1549FF8F000
unkown
page read and write
clean
7FF4F207B000
unkown
page readonly
clean
7FF51C09B000
unkown
page readonly
clean
7FF511E6B000
unkown
page readonly
clean
7FF5708DA000
unkown
page readonly
clean
2576D198000
unkown
page read and write
clean
7FF570C48000
unkown
page readonly
clean
7FF511F9C000
unkown
page readonly
clean
7FF57D964000
unkown
page readonly
clean
2576CAE2000
unkown
page read and write
clean
7FF4F4B8E000
unkown
page readonly
clean
2576D138000
unkown
page read and write
clean
1CA02A29000
unkown
page read and write
clean
2D82000
unkown
page readonly
clean
2855F46A000
unkown
page read and write
clean
7FF4F3E99000
unkown
page readonly
clean
7FF511F5C000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
7FF57D8AC000
unkown
page readonly
clean
7FF570C27000
unkown
page readonly
clean
2576D560000
unkown
page read and write
clean
154A0100000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
154A0302000
unkown
page read and write
clean
1549FF69000
unkown
page read and write
clean
1549FFE9000
unkown
page read and write
clean
1549FC70000
unkown
page readonly
clean
F92987F000
unkown
page read and write
clean
10560FB000
unkown
page read and write
clean
1549DE73000
unkown
page read and write
clean
6975BFA000
unkown
page read and write
clean
7FF4FEC2A000
unkown
page readonly
clean
2A53E870000
unkown
page read and write
clean
7FF511FE9000
unkown
page readonly
clean
2576CA4C000
unkown
page read and write
clean
7FF51BFDD000
unkown
page readonly
clean
7FF551377000
unkown
page readonly
clean
2A53E813000
unkown
page read and write
clean
2576D175000
unkown
page read and write
clean
2576D196000
unkown
page read and write
clean
2576D602000
unkown
page read and write
clean
7FF5AAC41000
unkown
page readonly
clean
1549FD20000
unkown
page read and write
clean
2576D191000
unkown
page read and write
clean
2576D580000
unkown
page readonly
clean
1549DEE8000
unkown
page read and write
clean
7FF51C0FE000
unkown
page readonly
clean
2576C9D0000
unkown
page read and write
clean
7FF5AB4CA000
unkown
page readonly
clean
154A0400000
unkown
page readonly
clean
7FF570D01000
unkown
page readonly
clean
29BE3D08000
unkown
page read and write
clean
1549DF2D000
unkown
page read and write
clean
7FF4F3F0A000
unkown
page readonly
clean
7FF57D8DF000
unkown
page readonly
clean
7FF4FED26000
unkown
page readonly
clean
2A53E84C000
unkown
page read and write
clean
7FF570471000
unkown
page readonly
clean
2855F472000
unkown
page read and write
clean
177F7B70000
unkown
page readonly
clean
7FF4F3E8E000
unkown
page readonly
clean
15034060000
unkown
page readonly
clean
992CE79000
unkown
page read and write
clean
7FF55136F000
unkown
page readonly
clean
1549FF66000
unkown
page read and write
clean
F92918E000
unkown
page read and write
clean
BB4D27E000
unkown
page read and write
clean
2855F471000
unkown
page read and write
clean
2576D151000
unkown
page read and write
clean
2855F46D000
unkown
page read and write
clean
3300000
unkown
page readonly
clean
7FF4F1F6E000
unkown
page readonly
clean
7FF551431000
unkown
page readonly
clean
29BE3C50000
unkown
page read and write
clean
B5A0AFE000
unkown
page read and write
clean
2576D150000
unkown
page read and write
clean
7FF51C181000
unkown
page readonly
clean
2576D191000
unkown
page read and write
clean
B5A0B7E000
unkown
page read and write
clean
1549DF5E000
unkown
page read and write
clean
1549DE5F000
unkown
page read and write
clean
7FF511F6E000
unkown
page readonly
clean
2576D702000
unkown
page read and write
clean
7FF51BF71000
unkown
page readonly
clean
2576CABF000
unkown
page read and write
clean
150338B0000
unkown
page readonly
clean
7FF57D880000
unkown
page readonly
clean
2292AFA000
unkown
page read and write
clean
177F7B30000
unkown
page read and write
clean
B540EFE000
unkown
page read and write
clean
2D93000
unkown
page readonly
clean
1F9F6ED0000
unkown
page readonly
clean
15033990000
unkown
page readonly
clean
1055CFB000
unkown
page read and write
clean
150339A0000
unkown
page read and write
clean
2576CA00000
unkown
page read and write
clean
1549FFE3000
unkown
page read and write
clean
7FF4F20ED000
unkown
page readonly
clean
1549FF4C000
unkown
page read and write
clean
154A1610000
unkown
page read and write
clean
2576D14B000
unkown
page read and write
clean
A3457E000
unkown
page read and write
clean
308E000
unkown
page read and write
clean
7FF511B45000
unkown
page readonly
clean
7FF5AB43E000
unkown
page readonly
clean
154A1410000
unkown
page read and write
clean
2576D15E000
unkown
page read and write
clean
7FF4F20D8000
unkown
page readonly
clean
1549DEE8000
unkown
page read and write
clean
29BE4270000
unkown
page readonly
clean
7FF570C3F000
unkown
page readonly
clean
7FF4F47F7000
unkown
page readonly
clean
7FF570BB0000
unkown
page readonly
clean
154A1410000
unkown
page read and write
clean
2576D184000
unkown
page read and write
clean
15033A4D000
unkown
page read and write
clean
7FF51BE07000
unkown
page readonly
clean
7FF57D6B6000
unkown
page readonly
clean
7FF550FFC000
unkown
page readonly
clean
7FF57D897000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
7FF5AB205000
unkown
page readonly
clean
15033A2A000
unkown
page read and write
clean
7FF5512E2000
unkown
page readonly
clean
154A0242000
unkown
page read and write
clean
2576D15D000
unkown
page read and write
clean
2576D17E000
unkown
page read and write
clean
1549DE00000
unkown
page read and write
clean
7FF5AB418000
unkown
page readonly
clean
7FF4F3E74000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
2576D189000
unkown
page read and write
clean
7FF570C8D000
unkown
page readonly
clean
7FF4F3E4F000
unkown
page readonly
clean
2576C8E0000
unkown
page readonly
clean
1055EFB000
unkown
page read and write
clean
1F9F7200000
unkown
page readonly
clean
1549FF20000
unkown
page read and write
clean
7FF551345000
unkown
page readonly
clean
7FF5AB424000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
29BE3C2A000
unkown
page read and write
clean
7FF4FED85000
unkown
page readonly
clean
7FF4F206A000
unkown
page readonly
clean
7FF511EBD000
unkown
page readonly
clean
7FF57D77B000
unkown
page readonly
clean
2576D151000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
2576D1A5000
unkown
page read and write
clean
7FF55100F000
unkown
page readonly
clean
7FF4F4C12000
unkown
page readonly
clean
7FF5512DC000
unkown
page readonly
clean
2576D14B000
unkown
page read and write
clean
7FF57D761000
unkown
page readonly
clean
2CC3000
unkown
page readonly
clean
2576D124000
unkown
page read and write
clean
7FF570C64000
unkown
page readonly
clean
7FF51BF8B000
unkown
page readonly
clean
1549DF9F000
unkown
page read and write
clean
105554E000
unkown
page read and write
clean
7FF5AB434000
unkown
page readonly
clean
2576D177000
unkown
page read and write
clean
1F9F7102000
unkown
page read and write
clean
7FF551221000
unkown
page readonly
clean
2576D152000
unkown
page read and write
clean
DBF6CFE000
unkown
page read and write
clean
29BE3C64000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
28560E70000
unkown
page read and write
clean
2576D184000
unkown
page read and write
clean
7FF4F2162000
unkown
page readonly
clean
7FF551394000
unkown
page readonly
clean
154A0094000
unkown
page read and write
clean
2576D192000
unkown
page read and write
clean
177F7BED000
unkown
page read and write
clean
2CF3000
unkown
page readonly
clean
2576CAE0000
unkown
page read and write
clean
2576D185000
unkown
page read and write
clean
2C93000
unkown
page readonly
clean
1549FF11000
unkown
page read and write
clean
7FF4F1F6B000
unkown
page readonly
clean
7FF5708CC000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
2855F513000
unkown
page read and write
clean
1F75DA6D000
unkown
page read and write
clean
7FF570C54000
unkown
page readonly
clean
22927AF000
unkown
page read and write
clean
7FF551106000
unkown
page readonly
clean
2576CC00000
unkown
page readonly
clean
2A53EA00000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
7FF51C0BF000
unkown
page readonly
clean
29BE3D13000
unkown
page read and write
clean
7FF4F2075000
unkown
page readonly
clean
7FF51C07A000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
7FF4F4B91000
unkown
page readonly
clean
7FF4F4B25000
unkown
page readonly
clean
154A0063000
unkown
page read and write
clean
7FF4FEFD1000
unkown
page readonly
clean
7FF51BFF4000
unkown
page readonly
clean
7FF51BE10000
unkown
page readonly
clean
2855F46F000
unkown
page read and write
clean
7FF5513B1000
unkown
page readonly
clean
2855F46A000
unkown
page read and write
clean
1549FFEC000
unkown
page read and write
clean
2576D13D000
unkown
page read and write
clean
7FF57D87A000
unkown
page readonly
clean
15033A00000
unkown
page read and write
clean
1F9F7056000
unkown
page read and write
clean
29BE4000000
unkown
page readonly
clean
2A53F002000
unkown
page read and write
clean
7FF511CF0000
unkown
page readonly
clean
7FF57D446000
unkown
page readonly
clean
B5A0CFE000
unkown
page read and write
clean
1055F7B000
unkown
page read and write
clean
7FF511F75000
unkown
page readonly
clean
2576D151000
unkown
page read and write
clean
7FF57D455000
unkown
page readonly
clean
2576D183000
unkown
page read and write
clean
2A53E800000
unkown
page read and write
clean
7FF57D971000
unkown
page readonly
clean
2292B7E000
unkown
page read and write
clean
7FF4F2087000
unkown
page readonly
clean
2576D144000
unkown
page read and write
clean
7FF57D680000
unkown
page readonly
clean
7FF4F20E9000
unkown
page readonly
clean
1549DEBB000
unkown
page read and write
clean
2A53EAD0000
unkown
page readonly
clean
10554CB000
unkown
page read and write
clean
2576D184000
unkown
page read and write
clean
1549FF5A000
unkown
page read and write
clean
2576D151000
unkown
page read and write
clean
1549DD20000
heap default
page read and write
clean
154A1410000
unkown
page read and write
clean
1CA02A56000
unkown
page read and write
clean
7FF4FEFC8000
unkown
page readonly
clean
7FF4FEFB4000
unkown
page readonly
clean
2C9A000
unkown
page readonly
clean
7FF4FEFBE000
unkown
page readonly
clean
7FF4F1C30000
unkown
page readonly
clean
177F7BD6000
heap default
page read and write
clean
359A000
heap default
page read and write
clean
7FF4FEF6B000
unkown
page readonly
clean
7FF4F3E6A000
unkown
page readonly
clean
7FF5709CB000
unkown
page readonly
clean
7FF4FEF65000
unkown
page readonly
clean
2292A79000
unkown
page read and write
clean
1055A7A000
unkown
page read and write
clean
177F7BCB000
heap default
page read and write
clean
2576D14C000
unkown
page read and write
clean
2576D14F000
unkown
page read and write
clean
1549DE64000
unkown
page read and write
clean
7FF57D7D3000
unkown
page readonly
clean
7FF4F2154000
unkown
page readonly
clean
2576D174000
unkown
page read and write
clean
2576D1A5000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
7FF57D089000
unkown
page readonly
clean
7FF4FEFD6000
unkown
page readonly
clean
7FF57D8AF000
unkown
page readonly
clean
1F9F6EC0000
heap default
page read and write
clean
1549DEEA000
unkown
page read and write
clean
177F7BD1000
unkown
page read and write
clean
2576D140000
unkown
page read and write
clean
154A0000000
unkown
page read and write
clean
7FF57D86C000
unkown
page readonly
clean
1549FF15000
unkown
page read and write
clean
7FF551176000
unkown
page readonly
clean
7FF5AB09C000
unkown
page readonly
clean
1055AFA000
unkown
page read and write
clean
7FF511E51000
unkown
page readonly
clean
2576CA70000
unkown
page read and write
clean
A34A7F000
unkown
page read and write
clean
7FF570A31000
unkown
page readonly
clean
2855F3C0000
unkown
page readonly
clean
2A53E83C000
unkown
page read and write
clean
7FF511F9F000
unkown
page readonly
clean
2576D116000
unkown
page read and write
clean
1F9F7053000
unkown
page read and write
clean
7FF4F209F000
unkown
page readonly
clean
7FF570C7E000
unkown
page readonly
clean
7FF57D8D4000
unkown
page readonly
clean
2576D18E000
unkown
page read and write
clean
15033C00000
unkown
page readonly
clean
3400000
unkown
page readonly
clean
29BE3C13000
unkown
page read and write
clean
2576D15F000
unkown
page read and write
clean
177F7BE0000
unkown
page read and write
clean
1549DEE8000
unkown
page read and write
clean
992CF7C000
unkown
page read and write
clean
154A0300000
unkown
page read and write
clean
1549FFE3000
unkown
page read and write
clean
7FF551174000
unkown
page readonly
clean
2A53E84F000
unkown
page read and write
clean
1F9F89B0000
unkown
page read and write
clean
2576CAAA000
unkown
page read and write
clean
1F75DA40000
unkown
page read and write
clean
1549FFEC000
unkown
page read and write
clean
1CA02A67000
unkown
page read and write
clean
2576D14E000
unkown
page read and write
clean
154A0142000
unkown
page read and write
clean
992CC7F000
unkown
page read and write
clean
2D74000
unkown
page readonly
clean
7FF57D854000
unkown
page readonly
clean
2CD9000
unkown
page readonly
clean
6975AFE000
unkown
page read and write
clean
1549FC80000
heap private
page read and write
clean
7FF570B0B000
unkown
page readonly
clean
2576D15F000
unkown
page read and write
clean
7FF511F70000
unkown
page readonly
clean
7FF4F1C45000
unkown
page readonly
clean
2576D142000
unkown
page read and write
clean
1F75F4A0000
unkown
page readonly
clean
2576CA50000
unkown
page read and write
clean
7FF511779000
unkown
page readonly
clean
7FF551181000
unkown
page readonly
clean
7FF4F48DB000
unkown
page readonly
clean
7FF51C106000
unkown
page readonly
clean
2855F471000
unkown
page read and write
clean
2576CA56000
unkown
page read and write
clean
177F7BED000
unkown
page read and write
clean
7FF57D7E4000
unkown
page readonly
clean
2576D13F000
unkown
page read and write
clean
F92908B000
unkown
page read and write
clean
7FF57D497000
unkown
page readonly
clean
1549FFEC000
unkown
page read and write
clean
7FF4F1DF0000
unkown
page readonly
clean
1CA02A6B000
unkown
page read and write
clean
7FF51C0E4000
unkown
page readonly
clean
2576C7A0000
heap private
page read and write
clean
2576D151000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
1549FE02000
unkown
page read and write
clean
7FF4FEF8C000
unkown
page readonly
clean
BB4CD7E000
unkown
page read and write
clean
7FF51BC56000
unkown
page readonly
clean
10558F9000
unkown
page read and write
clean
7FF511FC4000
unkown
page readonly
clean
2576D18B000
unkown
page read and write
clean
7FF4FE7C1000
unkown
page readonly
clean
1549DF14000
unkown
page read and write
clean
35B1000
heap default
page read and write
clean
7FF570BD3000
unkown
page readonly
clean
7FF570B18000
unkown
page readonly
clean
7FF4F3E88000
unkown
page readonly
clean
1549E250000
unkown
page readonly
clean
7FF4F4941000
unkown
page readonly
clean
7FF4F3E7E000
unkown
page readonly
clean
7FF512061000
unkown
page readonly
clean
7FF57D8E8000
unkown
page readonly
clean
105597F000
unkown
page read and write
clean
177F7BE7000
unkown
page read and write
clean
7FF4F1FDC000
unkown
page readonly
clean
7FF5AB1A6000
unkown
page readonly
clean
2576D198000
unkown
page read and write
clean
2A53E780000
unkown
page readonly
clean
7FF57D885000
unkown
page readonly
clean
15033A46000
unkown
page read and write
clean
7FF4F4B64000
unkown
page readonly
clean
2576D122000
unkown
page read and write
clean
2576D164000
unkown
page read and write
clean
2A53E760000
heap default
page read and write
clean
7FF55132C000
unkown
page readonly
clean
2576D1A5000
unkown
page read and write
clean
1549DE80000
unkown
page read and write
clean
1CA02A6E000
unkown
page read and write
clean
15034400000
unkown
page readonly
clean
2576D1A6000
unkown
page read and write
clean
7FF4F3773000
unkown
page readonly
clean
1F75DC00000
unkown
page readonly
clean
992C3CB000
unkown
page read and write
clean
2576D15F000
unkown
page read and write
clean
1F75F3A0000
unkown
page read and write
clean
154A1010000
unkown
page read and write
clean
7FF551286000
unkown
page readonly
clean
2855F46D000
unkown
page read and write
clean
2A53E80B000
unkown
page read and write
clean
154A1210000
unkown
page read and write
clean
7FF511FE6000
unkown
page readonly
clean
1549FF26000
unkown
page read and write
clean
7FF51BC50000
unkown
page readonly
clean
2A53E913000
unkown
page read and write
clean
7FF551191000
unkown
page readonly
clean
2576D16C000
unkown
page read and write
clean
1549DEBB000
unkown
page read and write
clean
2292BFD000
unkown
page read and write
clean
7FF551432000
unkown
page readonly
clean
2576D12F000
unkown
page read and write
clean
2A53E770000
unkown
page readonly
clean
1CA02B02000
unkown
page read and write
clean
7FF4F4B88000
unkown
page readonly
clean
2576D150000
unkown
page read and write
clean
1549DEBD000
unkown
page read and write
clean
2A53F200000
unkown
page readonly
clean
7FF4F3AFA000
unkown
page readonly
clean
7FF55134B000
unkown
page readonly
clean
2855F472000
unkown
page read and write
clean
7FF4F3F12000
unkown
page readonly
clean
2855F300000
heap private
page read and write
clean
A34675000
unkown
page read and write
clean
2576CAA1000
unkown
page read and write
clean
2855F46E000
unkown
page read and write
clean
1549DEC8000
unkown
page read and write
clean
2576D602000
unkown
page read and write
clean
154A1510000
unkown
page read and write
clean
29BE3D00000
unkown
page read and write
clean
7FF551017000
unkown
page readonly
clean
7FF551165000
unkown
page readonly
clean
7FF57D1D3000
unkown
page readonly
clean
2576D174000
unkown
page read and write
clean
2576CFB0000
unkown
page write copy
clean
1CA02A6A000
unkown
page read and write
clean
1549DE8F000
unkown
page read and write
clean
2576D191000
unkown
page read and write
clean
2576D185000
unkown
page read and write
clean
7FF5AB382000
unkown
page readonly
clean
1CA02A00000
unkown
page read and write
clean
2576D1A7000
unkown
page read and write
clean
1549FF13000
unkown
page read and write
clean
7FF4F1FC3000
unkown
page readonly
clean
2576D175000
unkown
page read and write
clean
1CA02C00000
unkown
page write copy
clean
7FF550F19000
unkown
page readonly
clean
2576D161000
unkown
page read and write
clean
1F75D930000
unkown
page write copy
clean
229272F000
unkown
page read and write
clean
2576D174000
unkown
page read and write
clean
7FF4F3E4C000
unkown
page readonly
clean
F92967F000
unkown
page read and write
clean
1549DE3F000
unkown
page read and write
clean
2576D191000
unkown
page read and write
clean
7FF511B36000
unkown
page readonly
clean
37C0000
heap private
page read and write
clean
2576D177000
unkown
page read and write
clean
2576D176000
unkown
page read and write
clean
7FF57D6D1000
unkown
page readonly
clean
7FF4FEF8F000
unkown
page readonly
clean
2855F46B000
unkown
page read and write
clean
A344FE000
unkown
page read and write
clean
7FF511EDC000
unkown
page readonly
clean
7FF4F20BA000
unkown
page readonly
clean
1549FF4D000
unkown
page read and write
clean
B5A0BFA000
unkown
page read and write
clean
1F75DA00000
unkown
page read and write
clean
1055E7B000
unkown
page read and write
clean
2576D12C000
unkown
page read and write
clean
7FF51C109000
unkown
page readonly
clean
1549FF54000
unkown
page read and write
clean
1549DF1E000
unkown
page read and write
clean
154A1010000
unkown
page read and write
clean
2576D148000
unkown
page read and write
clean
7FF4FEFCE000
unkown
page readonly
clean
7FF55128D000
unkown
page readonly
clean
7FF4FEF77000
unkown
page readonly
clean
1549FD30000
unkown
page readonly
clean
7FF570CFA000
unkown
page readonly
clean
2D12000
unkown
page readonly
clean
2576CAA8000
unkown
page read and write
clean
2576D002000
unkown
page read and write
clean
992C9F7000
unkown
page read and write
clean
2576D560000
unkown
page readonly
clean
2A53E84B000
unkown
page read and write
clean
1055B7A000
unkown
page read and write
clean
1549FF00000
unkown
page read and write
clean
1CA02A67000
unkown
page read and write
clean
1549FF5D000
unkown
page read and write
clean
7FF4F47EF000
unkown
page readonly
clean
1549FFEA000
unkown
page read and write
clean
177F7BCD000
heap default
page read and write
clean
7FF57D35E000
unkown
page readonly
clean
7FF551199000
unkown
page readonly
clean
2D01000
unkown
page readonly
clean
1549DEBE000
unkown
page read and write
clean
2576D14B000
unkown
page read and write
clean
154A1110000
unkown
page read and write
clean
1CA02A6A000
unkown
page read and write
clean
7FF5AB3EB000
unkown
page readonly
clean
There are 1185 hidden memdumps, click here to show them.