IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Decline-172917164-06242021.xlsm
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Decline-172917164-06242021.xlsm.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:43 2020, mtime=Fri Jun 25 14:32:53 2021, atime=Fri Jun 25 14:32:53 2021, length=328814, window=hide
dropped
malicious
C:\Users\user\Desktop\~$Decline-172917164-06242021.xlsm
data
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\AFFFA715-9DDB-47F5-B883-C762F5BE7936
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E0EC7632.tif
TIFF image data, little-endian, direntries=19, height=1600, bps=53710, compression=LZW, PhotometricIntepretation=RGB, width=1600
dropped
clean
C:\Users\user\AppData\Local\Temp\7E810000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu Jun 27 16:19:49 2019, mtime=Fri Jun 25 14:32:53 2021, atime=Fri Jun 25 14:32:53 2021, length=8192, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\Desktop\1F810000
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AD7B9C26.tif
TIFF image data, little-endian, direntries=19, height=1600, bps=53710, compression=LZW, PhotometricIntepretation=RGB, width=1600
dropped
clean
C:\Users\user\AppData\Local\Temp\95DE0000
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Decline-172917164-06242021.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15 2020, mtime=Fri Jun 25 14:24:40 2021, atime=Fri Jun 25 14:24:40 2021, length=328749, window=hide
dropped
clean
C:\Users\user\Desktop\66DE0000
data
dropped
clean
There are 3 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 ..\Kro.fis
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 ..\Kro.fis1
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32 ..\Kro.fis2
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 ..\Kro.fis
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 ..\Kro.fis1
malicious
C:\Windows\System32\regsvr32.exe
regsvr32 ..\Kro.fis2
malicious

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
http://5.253.62.174/44372.3561747685.dat
5.253.62.174
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://185.234.247.7/44372.3561747685.dat
185.234.247.7
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://substrate.office.com/search/api/v2/init
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
clean
https://directory.services.
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://185.234.247.7/44372.3504680556.dat
185.234.247.7
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://investor.msn.com/
unknown
clean
http://www.%s.comPA
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://5.253.62.174/44372.3504680556.dat
5.253.62.174
clean
http://servername/isapibackend.dll
unknown
clean
There are 103 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
185.234.247.7
unknown
Russian Federation
clean
5.253.62.174
unknown
Russian Federation
clean
185.117.73.74
unknown
Netherlands
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
{ 6
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
| 6
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
186DF
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18DB5
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18EAF
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
18F7A
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
(o6
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
2C3B4
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
2CA1D
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FileFormatBallotBoxAppIDBootedOnce
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
p`8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED0B7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED4CC
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED5F5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ED6EE
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
)k8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
103949
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
104309
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SavedLegacySettings
clean
There are 151 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF524A94000
unkown
page readonly
clean
1AD65084000
unkown
page read and write
clean
1D357960000
unkown
page read and write
clean
230F8010000
unkown
page read and write
clean
2C3A7DE0000
unkown
page read and write
clean
1C205AE0000
unkown
page write copy
clean
2A22000
unkown
page read and write
clean
2668863C000
unkown
page read and write
clean
98D07F000
unkown
page read and write
clean
21E6000
unkown
page readonly
clean
20B224D0000
unkown
page readonly
clean
7FF5B01E9000
unkown
page readonly
clean
230F7C49000
unkown
page read and write
clean
1D3522A1000
unkown
page read and write
clean
28DAB069000
unkown
page read and write
clean
7FF5D8C95000
unkown
page readonly
clean
7FF51F796000
unkown
page readonly
clean
2146EFF000
unkown
page read and write
clean
21120A45000
heap private
page read and write
clean
248C000
unkown
page readonly
clean
7FF506975000
unkown
page readonly
clean
230F9082000
unkown
page read and write
clean
2A25000
unkown
page read and write
clean
1BC1FFD0000
unkown
page read and write
clean
7FF52BFD8000
unkown
page readonly
clean
28DAB068000
unkown
page read and write
clean
2C3A7E5B000
unkown
page read and write
clean
7FF5247C0000
unkown
page readonly
clean
1D352950000
unkown
page read and write
clean
7FF599059000
unkown
page readonly
clean
230F7B60000
unkown
page read and write
clean
26688713000
unkown
page read and write
clean
230F8410000
unkown
page read and write
clean
2C3A8390000
unkown
page readonly
clean
26688E00000
unkown
page readonly
clean
7FF506926000
unkown
page readonly
clean
211209F0000
unkown
page readonly
clean
1C205C54000
unkown
page read and write
clean
1EFE2849000
unkown
page read and write
clean
7FF5D8C9F000
unkown
page readonly
clean
1D35223D000
unkown
page read and write
clean
2C00000
unkown
page readonly
clean
230F7E7B000
unkown
page read and write
clean
7FF531190000
unkown
page readonly
clean
B9AF3BB000
unkown
page read and write
clean
2C3A7BB0000
heap private
page read and write
clean
7FF5B0082000
unkown
page readonly
clean
7FF5D8C8E000
unkown
page readonly
clean
DA3FE7D000
unkown
page read and write
clean
230F9182000
unkown
page read and write
clean
7FF598D07000
unkown
page readonly
clean
7FF5E3A00000
unkown
page readonly
clean
1F11706D000
unkown
page read and write
clean
2FA6FA000
unkown
page read and write
clean
7FF5E3976000
unkown
page readonly
clean
3200000
heap private
page read and write
clean
7FF524A2E000
unkown
page readonly
clean
2E65000
unkown
page read and write
clean
7FF5D8CF0000
unkown
page readonly
clean
28DAB100000
unkown
page read and write
clean
7FF506C9C000
unkown
page readonly
clean
7FF50692C000
unkown
page readonly
clean
230F7CB9000
unkown
page read and write
clean
95A8C7F000
unkown
page read and write
clean
7FF5E39D1000
unkown
page readonly
clean
2C3A7DE0000
unkown
page read and write
clean
1BC20102000
unkown
page read and write
clean
D4E377F000
unkown
page read and write
clean
7FF51F732000
unkown
page readonly
clean
7FF54E4AA000
unkown
page readonly
clean
28DAB068000
unkown
page read and write
clean
1C205C7C000
unkown
page read and write
clean
2E4F000
unkown
page read and write
clean
7FF598D15000
unkown
page readonly
clean
7FF51F7C7000
unkown
page readonly
clean
7FF5247B5000
unkown
page readonly
clean
231D686C000
unkown
page read and write
clean
7FF52C0DE000
unkown
page readonly
clean
1B9A7864000
unkown
page read and write
clean
4964000
heap private
page read and write
clean
7FF506ABE000
unkown
page readonly
clean
1D352A15000
unkown
page read and write
clean
7FF531176000
unkown
page readonly
clean
60C0000
unkown
page readonly
clean
7FF5E38DC000
unkown
page readonly
clean
2086000
unkown
page readonly
clean
231D686C000
unkown
page read and write
clean
231D66D0000
heap private
page read and write
clean
7FF598DAA000
unkown
page readonly
clean
231D6730000
heap default
page read and write
clean
7FF5B0139000
unkown
page readonly
clean
1D3576F0000
unkown
page readonly
clean
28DAAE60000
heap private
page read and write
clean
F59D97E000
unkown
page read and write
clean
25E0000
unkown
page readonly
clean
231D686A000
unkown
page read and write
clean
26688600000
unkown
page read and write
clean
DA3FAFF000
unkown
page read and write
clean
7FF5D8B48000
unkown
page readonly
clean
B9AF779000
unkown
page read and write
clean
CF913BB000
unkown
page read and write
clean
7FF5C3865000
unkown
page readonly
clean
7FF5C386F000
unkown
page readonly
clean
2668000
unkown
page readonly
clean
7FF51F821000
unkown
page readonly
clean
1C205C02000
unkown
page read and write
clean
230F7E77000
unkown
page read and write
clean
7FF530E37000
unkown
page readonly
clean
26AE177000
unkown
page read and write
clean
1AD65660000
unkown
page readonly
clean
230F7E7F000
unkown
page read and write
clean
5F60000
unkown
page readonly
clean
1D357A1F000
unkown
page read and write
clean
1F117802000
unkown
page read and write
clean
20B22230000
unkown
page read and write
clean
7FF5310F2000
unkown
page readonly
clean
1D352276000
unkown
page read and write
clean
7FF5322EA000
unkown
page readonly
clean
1F117013000
unkown
page read and write
clean
7FF54267E000
unkown
page readonly
clean
7FF51F829000
unkown
page readonly
clean
1DEE9502000
unkown
page read and write
clean
1F116FA0000
unkown
page readonly
clean
1D352A00000
unkown
page read and write
clean
7FF542337000
unkown
page readonly
clean
4370000
unkown
page readonly
clean
7FF53100D000
unkown
page readonly
clean
2A03000
heap default
page read and write
clean
1D352B59000
unkown
page read and write
clean
1DEE9360000
unkown
page readonly
clean
2112071E000
heap default
page read and write
clean
21DB000
unkown
page readonly
clean
1EFE2AB0000
unkown
page read and write
clean
7FF506855000
unkown
page readonly
clean
230F7CA1000
unkown
page read and write
clean
7FF5D8D59000
unkown
page readonly
clean
2568000
unkown
page readonly
clean
7FF593210000
unkown
page readonly
clean
7FF54AEBE000
unkown
page readonly
clean
230F7B70000
unkown
page read and write
clean
D4E3B7E000
unkown
page read and write
clean
26688670000
unkown
page read and write
clean
230F7670000
unkown
page read and write
clean
7FF598EC5000
unkown
page readonly
clean
28DAB068000
unkown
page read and write
clean
2C3A7C20000
unkown
page readonly
clean
1C205C62000
unkown
page read and write
clean
1EFE2019000
heap private
page read and write
clean
7FF5B00FA000
unkown
page readonly
clean
7FF532346000
unkown
page readonly
clean
1DEE9E00000
unkown
page readonly
clean
1AD65A00000
unkown
page readonly
clean
230F7B40000
unkown
page read and write
clean
1BC20049000
unkown
page read and write
clean
7FF542624000
unkown
page readonly
clean
1B9A7E70000
unkown
page read and write
clean
7FF51F779000
unkown
page readonly
clean
2267000
unkown
page readonly
clean
7FF54AEF6000
unkown
page readonly
clean
1AD65000000
unkown
page read and write
clean
7FF598EFA000
unkown
page readonly
clean
7FF598E67000
unkown
page readonly
clean
7FF54A8D7000
unkown
page readonly
clean
7FF5B011E000
unkown
page readonly
clean
259B000
unkown
page readonly
clean
7FF542582000
unkown
page readonly
clean
7FF5E3978000
unkown
page readonly
clean
1C205C61000
unkown
page read and write
clean
258A000
unkown
page readonly
clean
7FF598F9F000
unkown
page readonly
clean
7FF506A58000
unkown
page readonly
clean
2D8E000
unkown
page read and write
clean
1D352B00000
unkown
page read and write
clean
1D353110000
unkown
page read and write
clean
1D352253000
unkown
page read and write
clean
7FF5C383A000
unkown
page readonly
clean
B9AFF7B000
unkown
page read and write
clean
230F9182000
unkown
page read and write
clean
230F7EC5000
unkown
page read and write
clean
7FF5E3A04000
unkown
page readonly
clean
20B22A02000
unkown
page read and write
clean
7FF598D0E000
unkown
page readonly
clean
7FF5248E8000
unkown
page readonly
clean
7FF506A3B000
unkown
page readonly
clean
7FF5E35CE000
unkown
page readonly
clean
7FF5D8CD6000
unkown
page readonly
clean
231D6913000
unkown
page read and write
clean
7FF54E4FC000
unkown
page readonly
clean
7FF524AF9000
unkown
page readonly
clean
26688440000
heap default
page read and write
clean
7FF51F7AC000
unkown
page readonly
clean
CCB497F000
unkown
page read and write
clean
1D357924000
unkown
page readonly
clean
138A8FF000
unkown
page read and write
clean
28DAAED0000
unkown
page readonly
clean
7FF5B0184000
unkown
page readonly
clean
7FF5E39CD000
unkown
page readonly
clean
7FF51F5AF000
unkown
page readonly
clean
7FF5E3880000
unkown
page readonly
clean
7FF5069CE000
unkown
page readonly
clean
7FF5360D7000
unkown
page readonly
clean
7FF506D0E000
unkown
page readonly
clean
7FF5C384A000
unkown
page readonly
clean
7FF5935D6000
unkown
page readonly
clean
7FF53234C000
unkown
page readonly
clean
7FF593224000
unkown
page readonly
clean
7FF5E388C000
unkown
page readonly
clean
230F9200000
unkown
page readonly
clean
230F8310000
unkown
page read and write
clean
F59D87E000
unkown
page read and write
clean
1F1170B9000
unkown
page read and write
clean
1AD65022000
unkown
page read and write
clean
76B57AF000
unkown
page read and write
clean
2FA57C000
unkown
page read and write
clean
7FF52BE6F000
unkown
page readonly
clean
2C3A7E2A000
unkown
page read and write
clean
230F7C5A000
unkown
page read and write
clean
230F5D39000
unkown
page read and write
clean
7FF5AFA1F000
unkown
page readonly
clean
7FF52BE50000
unkown
page readonly
clean
230F5C74000
unkown
page read and write
clean
2EB1000
unkown
page read and write
clean
1C205C29000
unkown
page read and write
clean
7FF598F8E000
unkown
page readonly
clean
2220000
unkown
page readonly
clean
95A8B7F000
unkown
page read and write
clean
27A0000
unkown
page readonly
clean
B9B017D000
unkown
page read and write
clean
7FF5068E8000
unkown
page readonly
clean
7FF54AF89000
unkown
page readonly
clean
230F5C78000
unkown
page read and write
clean
B9AF87F000
unkown
page read and write
clean
28D0000
unkown
page readonly
clean
2FA1AB000
unkown
page read and write
clean
1D352273000
unkown
page read and write
clean
1AD65102000
unkown
page read and write
clean
7FF532367000
unkown
page readonly
clean
230F7C2B000
unkown
page read and write
clean
1C205C7D000
unkown
page read and write
clean
7FF524A6C000
unkown
page readonly
clean
7FF598A01000
unkown
page readonly
clean
1EFE1DF0000
unkown
page read and write
clean
7FF51F618000
unkown
page readonly
clean
1D357AA0000
unkown
page read and write
clean
138A5FC000
unkown
page read and write
clean
231D686C000
unkown
page read and write
clean
7FF5C3879000
unkown
page readonly
clean
231D6867000
unkown
page read and write
clean
7FF54E496000
unkown
page readonly
clean
2A08000
unkown
page read and write
clean
7FF5C3836000
unkown
page readonly
clean
1EFE2842000
unkown
page read and write
clean
7FF54E492000
unkown
page readonly
clean
F59D7FF000
unkown
page read and write
clean
1C205C62000
unkown
page read and write
clean
230F5C72000
unkown
page read and write
clean
7FF54AD97000
unkown
page readonly
clean
7FF5B01DE000
unkown
page readonly
clean
29E0000
unkown
page read and write
clean
7FF598F07000
unkown
page readonly
clean
231D686C000
unkown
page read and write
clean
7FF598DBE000
unkown
page readonly
clean
2EC2000
unkown
page read and write
clean
2C41000
unkown
page read and write
clean
1BC1FE70000
heap private
page read and write
clean
21122650000
heap private
page read and write
clean
20B22254000
unkown
page read and write
clean
230F5C71000
unkown
page read and write
clean
7FF5322C0000
unkown
page readonly
clean
2768000
unkown
page readonly
clean
7FF532319000
unkown
page readonly
clean
7FF52BFF6000
unkown
page readonly
clean
7FF53117C000
unkown
page readonly
clean
1B9A785E000
unkown
page read and write
clean
7FF524A90000
unkown
page readonly
clean
1C2059A0000
heap private
page read and write
clean
20B226D0000
unkown
page readonly
clean
CF91C7F000
unkown
page read and write
clean
7FF542345000
unkown
page readonly
clean
1EFE1BE0000
unkown
page readonly
clean
1D3579A0000
unkown
page read and write
clean
1EA7000
unkown
page readonly
clean
7FF54E520000
unkown
page readonly
clean
7FF50699C000
unkown
page readonly
clean
7FF542627000
unkown
page readonly
clean
7FF54E498000
unkown
page readonly
clean
7FF506C12000
unkown
page readonly
clean
1D357720000
unkown
page read and write
clean
20B22247000
unkown
page read and write
clean
7FF598F33000
unkown
page readonly
clean
2C3A7E3D000
unkown
page read and write
clean
28DAB069000
unkown
page read and write
clean
2E00000
unkown
page readonly
clean
1B9A7D90000
unkown
page readonly
clean
230F9002000
unkown
page read and write
clean
1C205C61000
unkown
page read and write
clean
22D8000
unkown
page readonly
clean
230F5DBA000
unkown
page read and write
clean
7FF530CF0000
unkown
page readonly
clean
2668864D000
unkown
page read and write
clean
231D8370000
unkown
page readonly
clean
7FF5360EA000
unkown
page readonly
clean
7FF5E3962000
unkown
page readonly
clean
1EFE1CD0000
unkown
page read and write
clean
7FF51F78D000
unkown
page readonly
clean
7FF54AF15000
unkown
page readonly
clean
21053EA0000
unkown
page read and write
clean
1BC20050000
unkown
page read and write
clean
7FF506938000
unkown
page readonly
clean
138ACFE000
unkown
page read and write
clean
1DEE9413000
unkown
page read and write
clean
7FF506BFC000
unkown
page readonly
clean
1F1176C0000
unkown
page readonly
clean
1D352B02000
unkown
page read and write
clean
CF91B7F000
unkown
page read and write
clean
2640000
unkown
page readonly
clean
1D357A55000
unkown
page read and write
clean
2EC2000
unkown
page read and write
clean
230F7C1C000
unkown
page read and write
clean
29D0000
unkown
page readonly
clean
7FF5361A6000
unkown
page readonly
clean
1D357861000
unkown
page read and write
clean
7FF5C38AC000
unkown
page readonly
clean
3F30E7F000
unkown
page read and write
clean
2BC0000
heap private
page read and write
clean
7FF52BA2A000
unkown
page readonly
clean
27A6000
unkown
page readonly
clean
5C70000
unkown
page readonly
clean
264B000
unkown
page readonly
clean
7FF52C04D000
unkown
page readonly
clean
B9B04FC000
unkown
page read and write
clean
2646000
unkown
page readonly
clean
21122240000
heap private
page read and write
clean
7FF598D20000
unkown
page readonly
clean
230F5C71000
unkown
page read and write
clean
1BC2003C000
unkown
page read and write
clean
230F9002000
unkown
page read and write
clean
B9B00FB000
unkown
page read and write
clean
228B000
unkown
page readonly
clean
2112074C000
heap default
page read and write
clean
231D686C000
unkown
page read and write
clean
7FF51F81E000
unkown
page readonly
clean
1D357840000
unkown
page read and write
clean
7FF5C38C7000
unkown
page readonly
clean
21053E70000
unkown
page read and write
clean
7FF5425BE000
unkown
page readonly
clean
138A18B000
unkown
page read and write
clean
230F9100000
unkown
page read and write
clean
7FF5D8997000
unkown
page readonly
clean
25A4000
unkown
page readonly
clean
1AD65061000
unkown
page read and write
clean
7FF5C35E5000
unkown
page readonly
clean
1AD64FB0000
unkown
page read and write
clean
230F7CDA000
unkown
page read and write
clean
7FF5D8850000
unkown
page readonly
clean
21A8000
unkown
page readonly
clean
7FF5D8B1E000
unkown
page readonly
clean
9BD7EFA000
unkown
page read and write
clean
1AD65108000
unkown
page read and write
clean
7FF535E58000
unkown
page readonly
clean
B9AFAFB000
unkown
page read and write
clean
7FF5D8C52000
unkown
page readonly
clean
138ABFD000
unkown
page read and write
clean
7FF5D8860000
unkown
page readonly
clean
7FF54255A000
unkown
page readonly
clean
B9B077F000
unkown
page read and write
clean
7FF506C3A000
unkown
page readonly
clean
7FF5D8B63000
unkown
page readonly
clean
1EFE2010000
heap private
page read and write
clean
1EFE1D60000
unkown
page read and write
clean
2C3A97E0000
unkown
page readonly
clean
230F5C00000
unkown
page read and write
clean
B9AFA7B000
unkown
page read and write
clean
7FF52BC21000
unkown
page readonly
clean
7FF54E437000
unkown
page readonly
clean
28DAB000000
unkown
page read and write
clean
21E4000
unkown
page readonly
clean
7FF51F74A000
unkown
page readonly
clean
7FF5E396D000
unkown
page readonly
clean
7FF524A7C000
unkown
page readonly
clean
230F5C68000
unkown
page read and write
clean
21120DE0000
unkown
page readonly
clean
1D357C00000
unkown
page readonly
clean
2810000
unkown
page readonly
clean
1C205A10000
unkown
page readonly
clean
25B7000
unkown
page readonly
clean
1D357A8A000
unkown
page read and write
clean
1EFE2230000
unkown
page readonly
clean
1D357884000
unkown
page read and write
clean
230F7C3B000
unkown
page read and write
clean
7FF598F7A000
unkown
page readonly
clean
26688450000
unkown
page readonly
clean
CCB477F000
unkown
page read and write
clean
2EA5000
unkown
page read and write
clean
7FF506CA5000
unkown
page readonly
clean
7FF593275000
unkown
page readonly
clean
29EA000
heap default
page read and write
clean
211206E0000
unkown
page readonly
clean
79F0000
unkown
page read and write
clean
7FF52BC8D000
unkown
page readonly
clean
F59D6FE000
unkown
page read and write
clean
7FF598B8D000
unkown
page readonly
clean
7BCE000
unkown
page read and write
clean
1D3576B0000
unkown
page read and write
clean
2105385C000
unkown
page read and write
clean
7FF5249CA000
unkown
page readonly
clean
7FF506C26000
unkown
page readonly
clean
1D357948000
unkown
page write copy
clean
B9AF67E000
unkown
page read and write
clean
230F5C71000
unkown
page read and write
clean
284B000
unkown
page readonly
clean
7FF5D8D59000
unkown
page readonly
clean
25E5000
unkown
page readonly
clean
20B2226D000
unkown
page read and write
clean
7FF506C4E000
unkown
page readonly
clean
1AD64EB0000
heap default
page read and write
clean
7FF54AF06000
unkown
page readonly
clean
1D3522B7000
unkown
page read and write
clean
1EFE1DD3000
unkown
page read and write
clean
7FF524A97000
unkown
page readonly
clean
1D352180000
heap private
page read and write
clean
26AE07B000
unkown
page read and write
clean
1AD6505C000
unkown
page read and write
clean
7FF53600A000
unkown
page readonly
clean
98CFFB000
unkown
page read and write
clean
7FF598FF0000
unkown
page readonly
clean
7FF531185000
unkown
page readonly
clean
7FF54240F000
unkown
page readonly
clean
1EFE1E40000
unkown
page read and write
clean
1D352B18000
unkown
page read and write
clean
7FF598ECC000
unkown
page readonly
clean
230F5B00000
heap private
page read and write
clean
1C205C61000
unkown
page read and write
clean
7FF535E6E000
unkown
page readonly
clean
7FF5C3832000
unkown
page readonly
clean
2695000
unkown
page readonly
clean
26688613000
unkown
page read and write
clean
1D352B59000
unkown
page read and write
clean
230F5C2B000
unkown
page read and write
clean
7FF5D8CDC000
unkown
page readonly
clean
2FA47E000
unkown
page read and write
clean
230F9105000
unkown
page read and write
clean
7FF54E1F7000
unkown
page readonly
clean
230F5D2F000
unkown
page read and write
clean
1B9A76B0000
heap private
page read and write
clean
1AD6508C000
unkown
page read and write
clean
7FF5D8991000
unkown
page readonly
clean
4960000
heap private
page read and write
clean
1EFE1E1B000
unkown
page read and write
clean
231D6869000
unkown
page read and write
clean
7FF52C0E9000
unkown
page readonly
clean
7FF5B008A000
unkown
page readonly
clean
7FF5E3972000
unkown
page readonly
clean
7FF506C7D000
unkown
page readonly
clean
7FF52BA44000
unkown
page readonly
clean
3F305FB000
unkown
page read and write
clean
95A83DC000
unkown
page read and write
clean
7FF598FC1000
unkown
page readonly
clean
26ADB0B000
unkown
page read and write
clean
1DEE9C02000
unkown
page read and write
clean
2C3A7F00000
unkown
page read and write
clean
7FF54A816000
unkown
page readonly
clean
230F8310000
unkown
page read and write
clean
231D6790000
unkown
page readonly
clean
1B9A7902000
unkown
page read and write
clean
1C205C3F000
unkown
page read and write
clean
257B000
unkown
page read and write
clean
210536B0000
heap private
page read and write
clean
230F5C74000
unkown
page read and write
clean
7FF53611C000
unkown
page readonly
clean
1DEE9600000
unkown
page readonly
clean
1EFE2020000
unkown
page read and write
clean
7FF52BFE0000
unkown
page readonly
clean
7FF524A0A000
unkown
page readonly
clean
9BD7E7E000
unkown
page read and write
clean
1EFE1E50000
unkown
page read and write
clean
1C205D13000
unkown
page read and write
clean
5BB0000
unkown
page readonly
clean
CCB447B000
unkown
page read and write
clean
1F117A00000
unkown
page readonly
clean
1EFE1E05000
unkown
page read and write
clean
7FF5323BE000
unkown
page readonly
clean
2C3A7E61000
unkown
page read and write
clean
95A88FB000
unkown
page read and write
clean
B9B037B000
unkown
page read and write
clean
1C205C60000
unkown
page read and write
clean
21F7000
unkown
page readonly
clean
7FF53233C000
unkown
page readonly
clean
7FF52C084000
unkown
page readonly
clean
7FF5C389C000
unkown
page readonly
clean
26688702000
unkown
page read and write
clean
268C000
unkown
page readonly
clean
2668864A000
unkown
page read and write
clean
2FA77A000
unkown
page read and write
clean
7FF5249A7000
unkown
page readonly
clean
21E0000
unkown
page readonly
clean
7FF532305000
unkown
page readonly
clean
1D352271000
unkown
page read and write
clean
2854000
unkown
page readonly
clean
1F18000
unkown
page readonly
clean
98CF79000
unkown
page read and write
clean
7FF531CE3000
unkown
page readonly
clean
1EFE1E50000
heap default
page read and write
clean
231D686B000
unkown
page read and write
clean
7FF59904E000
unkown
page readonly
clean
7FF5E3A07000
unkown
page readonly
clean
7FF53113F000
unkown
page readonly
clean
2EA0000
unkown
page read and write
clean
7FF5E39DC000
unkown
page readonly
clean
1D357AAB000
unkown
page read and write
clean
7FF54AE96000
unkown
page readonly
clean
1D357A8A000
unkown
page read and write
clean
1EFE1E41000
unkown
page read and write
clean
230F9042000
unkown
page read and write
clean
7FF5E3A5E000
unkown
page readonly
clean
27F5000
unkown
page readonly
clean
4820000
unkown
page readonly
clean
7FF5361A1000
unkown
page readonly
clean
21468FE000
unkown
page read and write
clean
7FF506A37000
unkown
page readonly
clean
2146A75000
unkown
page read and write
clean
7FF52C025000
unkown
page readonly
clean
7FF54AE9A000
unkown
page readonly
clean
7FF54E250000
unkown
page readonly
clean
1B9A7859000
unkown
page read and write
clean
7FF5E39AF000
unkown
page readonly
clean
CF91E7F000
unkown
page read and write
clean
7FF5E3960000
unkown
page readonly
clean
7FF54ADFC000
unkown
page readonly
clean
138ADFC000
unkown
page read and write
clean
1DEE9429000
unkown
page read and write
clean
2AFA000
unkown
page read and write
clean
7FF506BC7000
unkown
page readonly
clean
230F8310000
unkown
page read and write
clean
25F5000
unkown
page readonly
clean
7FF5C37DA000
unkown
page readonly
clean
7FF52BA1F000
unkown
page readonly
clean
7FF524AEE000
unkown
page readonly
clean
2D10000
heap private
page read and write
clean
7FF5E3642000
unkown
page readonly
clean
7FF542350000
unkown
page readonly
clean
1D352860000
unkown
page readonly
clean
20B221F0000
heap default
page read and write
clean
7FF536132000
unkown
page readonly
clean
7FF506BF3000
unkown
page readonly
clean
20B2226B000
unkown
page read and write
clean
26688BA0000
unkown
page read and write
clean
230F8010000
unkown
page read and write
clean
1DEE9280000
unkown
page readonly
clean
2E20000
heap default
page read and write
clean
7FF536239000
unkown
page readonly
clean
7FF536130000
unkown
page readonly
clean
230F5CAE000
unkown
page read and write
clean
7FF51F829000
unkown
page readonly
clean
7FF5069C7000
unkown
page readonly
clean
1EFE2B30000
unkown
page read and write
clean
1DEE9513000
unkown
page read and write
clean
20B22213000
unkown
page read and write
clean
1AD64FA0000
unkown
page readonly
clean
1D357870000
unkown
page read and write
clean
231D6867000
unkown
page read and write
clean
138AA7D000
unkown
page read and write
clean
2146CF7000
unkown
page read and write
clean
7FF524907000
unkown
page readonly
clean
1D3579A0000
unkown
page read and write
clean
21053875000
unkown
page read and write
clean
230F5D7A000
unkown
page read and write
clean
7FF506C96000
unkown
page readonly
clean
2B2E000
unkown
page read and write
clean
7FF542428000
unkown
page readonly
clean
231D6813000
unkown
page read and write
clean
2E51000
unkown
page read and write
clean
7FF5E3651000
unkown
page readonly
clean
1D357730000
unkown
page read and write
clean
230F7CE3000
unkown
page read and write
clean
2C3A7E66000
unkown
page read and write
clean
7FF598F66000
unkown
page readonly
clean
CF9197F000
unkown
page read and write
clean
21053EA0000
unkown
page read and write
clean
7FF52C0E1000
unkown
page readonly
clean
CCB427A000
unkown
page read and write
clean
28DAB002000
unkown
page read and write
clean
20B22950000
unkown
page read and write
clean
7FF531CE5000
unkown
page readonly
clean
230F7AC0000
unkown
page readonly
clean
2C3A7C10000
heap default
page read and write
clean
1EFE2890000
unkown
page read and write
clean
7FF5068A7000
unkown
page readonly
clean
7FF593527000
unkown
page readonly
clean
7FF506C81000
unkown
page readonly
clean
230F5DCC000
unkown
page read and write
clean
29A0000
unkown
page readonly
clean
7FF52BFE2000
unkown
page readonly
clean
1DEE9400000
unkown
page read and write
clean
3F30D7E000
unkown
page read and write
clean
7FF52C087000
unkown
page readonly
clean
230F7B50000
unkown
page read and write
clean
2C3A9802000
unkown
page read and write
clean
7FF506AE9000
unkown
page readonly
clean
7FF5935F4000
unkown
page readonly
clean
7FF531166000
unkown
page readonly
clean
2BC7000
heap private
page read and write
clean
7FF536175000
unkown
page readonly
clean
7FF506968000
unkown
page readonly
clean
2D0E000
unkown
page read and write
clean
21053720000
unkown
page readonly
clean
20B2225E000
unkown
page read and write
clean
7FF5C3597000
unkown
page readonly
clean
2C3A7E00000
unkown
page read and write
clean
1DEE943F000
unkown
page read and write
clean
1D3524D0000
unkown
page readonly
clean
1D357970000
unkown
page read and write
clean
7FF598B63000
unkown
page readonly
clean
7FF598F95000
unkown
page readonly
clean
27E5000
unkown
page readonly
clean
7FF598D98000
unkown
page readonly
clean
7FF5068AE000
unkown
page readonly
clean
26688520000
unkown
page readonly
clean
7FF5E393A000
unkown
page readonly
clean
7FF5311EE000
unkown
page readonly
clean
26688629000
unkown
page read and write
clean
1AD64EC0000
unkown
page readonly
clean
B9AFCFB000
unkown
page read and write
clean
230F5CA4000
unkown
page read and write
clean
1AD6502A000
unkown
page read and write
clean
7FF5425C5000
unkown
page readonly
clean
2C3A7E5B000
unkown
page read and write
clean
7FF593562000
unkown
page readonly
clean
258D000
unkown
page readonly
clean
2146B7B000
unkown
page read and write
clean
B9AF6FE000
unkown
page read and write
clean
1D35784E000
unkown
page read and write
clean
230F5C72000
unkown
page read and write
clean
230F5BC0000
unkown
page readonly
clean
CCB45FE000
unkown
page read and write
clean
1AD65100000
unkown
page read and write
clean
1D3579A0000
unkown
page read and write
clean
230F7ED4000
unkown
page read and write
clean
231D6856000
unkown
page read and write
clean
7FF598F37000
unkown
page readonly
clean
22A8000
unkown
page readonly
clean
95A86FE000
unkown
page read and write
clean
21053710000
heap default
page read and write
clean
7FF54E506000
unkown
page readonly
clean
7FF530CEA000
unkown
page readonly
clean
1D357910000
unkown
page read and write
clean
2800000
unkown
page readonly
clean
7FF53116C000
unkown
page readonly
clean
7FF506C55000
unkown
page readonly
clean
1BC1FFC0000
unkown
page readonly
clean
7FF54E45A000
unkown
page readonly
clean
223A000
unkown
page readonly
clean
7FF51F633000
unkown
page readonly
clean
7FF5935A9000
unkown
page readonly
clean
7FF5C385E000
unkown
page readonly
clean
230F7B30000
unkown
page read and write
clean
F6C4DAC000
unkown
page read and write
clean
7FF5D8A7A000
unkown
page readonly
clean
7FF598F2C000
unkown
page readonly
clean
1EFE1DD5000
heap default
page read and write
clean
230F5E00000
unkown
page readonly
clean
7FF598FBD000
unkown
page readonly
clean
7FF54E50C000
unkown
page readonly
clean
230F5CF6000
unkown
page read and write
clean
25D3000
unkown
page readonly
clean
1DEE9350000
unkown
page readonly
clean
230F7CD6000
unkown
page read and write
clean
7FF5B00F8000
unkown
page readonly
clean
230F8410000
unkown
page read and write
clean
230F8213000
unkown
page read and write
clean
1DEE947A000
unkown
page read and write
clean
1C205C00000
unkown
page read and write
clean
7FF5E382B000
unkown
page readonly
clean
138A97C000
unkown
page read and write
clean
1EFE1E31000
unkown
page read and write
clean
7FF54E4F6000
unkown
page readonly
clean
20B2224D000
unkown
page read and write
clean
7FF531197000
unkown
page readonly
clean
1EFE2844000
unkown
page read and write
clean
7FF506A4C000
unkown
page readonly
clean
7FF5C388D000
unkown
page readonly
clean
21120640000
unkown
page readonly
clean
7FF535D71000
unkown
page readonly
clean
1EFE2AE0000
unkown
page read and write
clean
7FF59364E000
unkown
page readonly
clean
1D352B18000
unkown
page read and write
clean
F6C52FE000
unkown
page read and write
clean
7FF506C10000
unkown
page readonly
clean
20B2224B000
unkown
page read and write
clean
211206C0000
unkown
page read and write
clean
20B22240000
unkown
page read and write
clean
28DAB06C000
unkown
page read and write
clean
7FF54DD40000
unkown
page readonly
clean
2C3A7D30000
unkown
page read and write
clean
7FF5C3718000
unkown
page readonly
clean
1EFE2B30000
unkown
page read and write
clean
1DEE943D000
unkown
page read and write
clean
7FF5310F0000
unkown
page readonly
clean
1D357A62000
unkown
page read and write
clean
230F7B30000
unkown
page read and write
clean
29A0000
unkown
page read and write
clean
7FF5AFE63000
unkown
page readonly
clean
7FF5C3896000
unkown
page readonly
clean
2112245F000
heap private
page read and write
clean
20B22245000
unkown
page read and write
clean
1B9A7A00000
unkown
page readonly
clean
1D3522F9000
unkown
page read and write
clean
1EFE1E6A000
unkown
page read and write
clean
230F5C97000
unkown
page read and write
clean
28DAAFF0000
unkown
page readonly
clean
7FF5C391E000
unkown
page readonly
clean
7FF51F75E000
unkown
page readonly
clean
95A8A77000
unkown
page read and write
clean
21AF000
unkown
page readonly
clean
7FF54E517000
unkown
page readonly
clean
7FF524756000
unkown
page readonly
clean
27B2000
unkown
page readonly
clean
7FF5E36B6000
unkown
page readonly
clean
1AD64F90000
unkown
page readonly
clean
26689140000
unkown
page readonly
clean
2A22000
unkown
page read and write
clean
7FF593595000
unkown
page readonly
clean
2782000
unkown
page readonly
clean
7FF54A8DE000
unkown
page readonly
clean
1B9A7829000
unkown
page read and write
clean
7FF54AED9000
unkown
page readonly
clean
7FF53230F000
unkown
page readonly
clean
230F5C78000
unkown
page read and write
clean
DA3FCFD000
unkown
page read and write
clean
230F9042000
unkown
page read and write
clean
7FF5D8C7A000
unkown
page readonly
clean
7FF524A3F000
unkown
page readonly
clean
28DAB113000
unkown
page read and write
clean
21120A40000
heap private
page read and write
clean
7FF5E39E6000
unkown
page readonly
clean
2FA4FE000
unkown
page read and write
clean
7FF52BC25000
unkown
page readonly
clean
7FF51F738000
unkown
page readonly
clean
2E45000
unkown
page read and write
clean
7FF542689000
unkown
page readonly
clean
7FF5E3A60000
unkown
page readonly
clean
230F7D02000
unkown
page read and write
clean
2BE0000
unkown
page read and write
clean
1D353690000
unkown
page read and write
clean
7FF506A9F000
unkown
page readonly
clean
7FF52BF75000
unkown
page readonly
clean
1AD65802000
unkown
page read and write
clean
7FF598FF7000
unkown
page readonly
clean
230F7F82000
unkown
page read and write
clean
7FF531194000
unkown
page readonly
clean
1D35222A000
unkown
page read and write
clean
7FF5B0125000
unkown
page readonly
clean
230F8110000
unkown
page read and write
clean
7FF52484A000
unkown
page readonly
clean
7FF54E4CF000
unkown
page readonly
clean
7FF506CB4000
unkown
page readonly
clean
1AD65013000
unkown
page read and write
clean
7FF54E1E4000
unkown
page readonly
clean
2C3A9D40000
unkown
page write copy
clean
1D352302000
unkown
page read and write
clean
DA3FD7F000
unkown
page read and write
clean
7FF59359F000
unkown
page readonly
clean
3F30C7B000
unkown
page read and write
clean
1BC20053000
unkown
page read and write
clean
2093000
unkown
page readonly
clean
2FA879000
unkown
page read and write
clean
7FF52BDB0000
unkown
page readonly
clean
2EAC000
unkown
page read and write
clean
28DAB068000
unkown
page read and write
clean
F59DB7F000
unkown
page read and write
clean
1EFE1E50000
unkown
page read and write
clean
CF91A7C000
unkown
page read and write
clean
20B22265000
unkown
page read and write
clean
230F5DBD000
unkown
page read and write
clean
7FF5320EA000
unkown
page readonly
clean
1EFE1E52000
unkown
page read and write
clean
20B22225000
unkown
page read and write
clean
2668000
unkown
page readonly
clean
7FF5E37EF000
unkown
page readonly
clean
CCB467E000
unkown
page read and write
clean
7FF5D8B91000
unkown
page readonly
clean
7FF506ABA000
unkown
page readonly
clean
2A0C000
unkown
page read and write
clean
7FF506851000
unkown
page readonly
clean
230F7ED4000
unkown
page read and write
clean
7FF524A66000
unkown
page readonly
clean
7FF54E527000
unkown
page readonly
clean
2FA5FA000
unkown
page read and write
clean
7FF52C06C000
unkown
page readonly
clean
1EFE1E31000
unkown
page read and write
clean
76B5A7E000
unkown
page read and write
clean
1BC1FEE0000
unkown
page readonly
clean
7FF531031000
unkown
page readonly
clean
9BD7D7F000
unkown
page read and write
clean
7FF53214F000
unkown
page readonly
clean
1D3532D0000
unkown
page readonly
clean
7FF5D8BCC000
unkown
page readonly
clean
1D3579A0000
unkown
page readonly
clean
7FF53622E000
unkown
page readonly
clean
1EFE1DCB000
unkown
page read and write
clean
2E48000
unkown
page read and write
clean
1D357A2D000
unkown
page read and write
clean
1D357CC0000
unkown
page readonly
clean
1D352256000
unkown
page read and write
clean
1F1170E4000
unkown
page read and write
clean
7FF5361AC000
unkown
page readonly
clean
7FF5249AA000
unkown
page readonly
clean
7FF524A1A000
unkown
page readonly
clean
7FF5322D6000
unkown
page readonly
clean
2B6E000
unkown
page read and write
clean
21120810000
unkown
page readonly
clean
7FF54AEED000
unkown
page readonly
clean
7FF54260C000
unkown
page readonly
clean
28DAB068000
unkown
page read and write
clean
7FF51F720000
unkown
page readonly
clean
76B572B000
unkown
page read and write
clean
1D357880000
unkown
page read and write
clean
1F117088000
unkown
page read and write
clean
1D357AB2000
unkown
page read and write
clean
7FF54E2DA000
unkown
page readonly
clean
1DEE9390000
unkown
page readonly
clean
21120718000
heap default
page read and write
clean
230F5D5B000
unkown
page read and write
clean
2B80000
heap private
page read and write
clean
1D357840000
unkown
page read and write
clean
7FF530E47000
unkown
page readonly
clean
7FF54A8DC000
unkown
page readonly
clean
1EFE1D00000
unkown
page readonly
clean
20B22263000
unkown
page read and write
clean
7FF598FE7000
unkown
page readonly
clean
7FF5323C9000
unkown
page readonly
clean
1EFE1D50000
unkown
page read and write
clean
1B9A7868000
unkown
page read and write
clean
21053840000
unkown
page read and write
clean
2C3A7E02000
unkown
page read and write
clean
7FF51F661000
unkown
page readonly
clean
7FF506B8C000
unkown
page readonly
clean
1BC1FED0000
heap default
page read and write
clean
7FF5C3584000
unkown
page readonly
clean
1EFE2840000
unkown
page read and write
clean
7FF50696D000
unkown
page readonly
clean
7FF5311F9000
unkown
page readonly
clean
29C0000
unkown
page readonly
clean
7FF5935C1000
unkown
page readonly
clean
7FF5B0151000
unkown
page readonly
clean
26688C02000
unkown
page read and write
clean
7FF524903000
unkown
page readonly
clean
B9B01FB000
unkown
page read and write
clean
1EFE1CB0000
unkown
page read and write
clean
2B94000
unkown
page read and write
clean
7FF51F667000
unkown
page readonly
clean
28BE000
unkown
page read and write
clean
278A000
unkown
page readonly
clean
B9B02FB000
unkown
page read and write
clean
26688650000
unkown
page read and write
clean
1D357A15000
unkown
page read and write
clean
1D357920000
unkown
page readonly
clean
293B000
unkown
page read and write
clean
230F7CCA000
unkown
page read and write
clean
230F5C78000
unkown
page read and write
clean
2235000
unkown
page readonly
clean
7FF5B0187000
unkown
page readonly
clean
B9B03FB000
unkown
page read and write
clean
230F5C56000
unkown
page read and write
clean
231D6740000
unkown
page write copy
clean
2791000
unkown
page readonly
clean
7FF506BDB000
unkown
page readonly
clean
7FF5B0094000
unkown
page readonly
clean
7FF524A76000
unkown
page readonly
clean
7FF5B014D000
unkown
page readonly
clean
D4E3A7C000
unkown
page read and write
clean
1C205C61000
unkown
page read and write
clean
7FF598E48000
unkown
page readonly
clean
1D352288000
unkown
page read and write
clean
7FF536128000
unkown
page readonly
clean
2C3A7F18000
unkown
page read and write
clean
230F8110000
unkown
page read and write
clean
230F7C00000
unkown
page read and write
clean
7FF53617F000
unkown
page readonly
clean
1EFE1DD2000
unkown
page read and write
clean
1B9A77F0000
unkown
page readonly
clean
7FF531135000
unkown
page readonly
clean
7FF52BFF2000
unkown
page readonly
clean
2E4C000
unkown
page read and write
clean
7FF530FCA000
unkown
page readonly
clean
7FF524A87000
unkown
page readonly
clean
230F7E94000
unkown
page read and write
clean
B9AFEFA000
unkown
page read and write
clean
7FF51F54A000
unkown
page readonly
clean
230F7EC9000
unkown
page read and write
clean
D4E397E000
unkown
page read and write
clean
7FF54E57E000
unkown
page readonly
clean
1C205D02000
unkown
page read and write
clean
211206A0000
unkown
page read and write
clean
230F7E00000
unkown
page read and write
clean
7FF5D8CBD000
unkown
page readonly
clean
20B22239000
unkown
page read and write
clean
1D352930000
unkown
page readonly
clean
7FF5C38A6000
unkown
page readonly
clean
7FF53115D000
unkown
page readonly
clean
7FF506C5F000
unkown
page readonly
clean
20B22284000
unkown
page read and write
clean
B9B027B000
unkown
page read and write
clean
7FF506B97000
unkown
page readonly
clean
25E0000
unkown
page read and write
clean
1B9A7E60000
unkown
page readonly
clean
7FF598CC3000
unkown
page readonly
clean
7FF52BE13000
unkown
page readonly
clean
CCB4B7E000
unkown
page read and write
clean
230F5C13000
unkown
page read and write
clean
1D357980000
unkown
page read and write
clean
1DEE9270000
heap default
page read and write
clean
1D352286000
unkown
page read and write
clean
D4E387F000
unkown
page read and write
clean
230F8110000
unkown
page read and write
clean
7FF5425FC000
unkown
page readonly
clean
26688700000
unkown
page read and write
clean
2C3A7F13000
unkown
page read and write
clean
7FF5C3921000
unkown
page readonly
clean
2C3A7D10000
unkown
page read and write
clean
7FF506C28000
unkown
page readonly
clean
230F5DBC000
unkown
page read and write
clean
27C2000
unkown
page readonly
clean
7FF5935DC000
unkown
page readonly
clean
7FF52C01E000
unkown
page readonly
clean
2FA67F000
unkown
page read and write
clean
D4E31EB000
unkown
page read and write
clean
7FF530F7F000
unkown
page readonly
clean
1B9A7710000
heap default
page read and write
clean
231D6867000
unkown
page read and write
clean
7FF54ADB3000
unkown
page readonly
clean
2B70000
unkown
page read and write
clean
CCB417A000
unkown
page read and write
clean
28DAB03F000
unkown
page read and write
clean
230F7ED4000
unkown
page read and write
clean
7FF51F76F000
unkown
page readonly
clean
1D3536A0000
unkown
page read and write
clean
7FF59358E000
unkown
page readonly
clean
1EFE1E32000
unkown
page read and write
clean
230F8210000
unkown
page read and write
clean
7FF542578000
unkown
page readonly
clean
1BC20108000
unkown
page read and write
clean
7FF5B0175000
unkown
page readonly
clean
138AEFF000
unkown
page read and write
clean
7FF52C082000
unkown
page readonly
clean
3207000
heap private
page read and write
clean
230F8000000
unkown
page read and write
clean
1AD65200000
unkown
page readonly
clean
25B2000
unkown
page readonly
clean
7FF598FA9000
unkown
page readonly
clean
230F7F42000
unkown
page read and write
clean
2654000
unkown
page readonly
clean
255E000
unkown
page readonly
clean
1D357870000
unkown
page read and write
clean
27E0000
unkown
page readonly
clean
7FF598DC0000
unkown
page readonly
clean
7FF541FC2000
unkown
page readonly
clean
1EFE1E1B000
unkown
page read and write
clean
230F5C93000
unkown
page read and write
clean
7FF5D8CCC000
unkown
page readonly
clean
1BC20113000
unkown
page read and write
clean
230F9102000
unkown
page read and write
clean
7FF5E3794000
unkown
page readonly
clean
1F1170CA000
unkown
page read and write
clean
26688655000
unkown
page read and write
clean
1D353671000
unkown
page read and write
clean
2294000
unkown
page readonly
clean
20B2227A000
unkown
page read and write
clean
7FF5425F6000
unkown
page readonly
clean
231D6900000
unkown
page read and write
clean
7FF5C37D7000
unkown
page readonly
clean
1C205C7B000
unkown
page read and write
clean
230F7AB0000
unkown
page read and write
clean
7FF593651000
unkown
page readonly
clean
7FF54DD44000
unkown
page readonly
clean
230F7C7B000
unkown
page read and write
clean
7FF51F722000
unkown
page readonly
clean
1DEE9465000
unkown
page read and write
clean
214697D000
unkown
page read and write
clean
7FF52C05C000
unkown
page readonly
clean
7FF5D8ADF000
unkown
page readonly
clean
7FF54A8D0000
unkown
page readonly
clean
7FF542592000
unkown
page readonly
clean
1BC20013000
unkown
page read and write
clean
20D5000
unkown
page readonly
clean
2146BFE000
unkown
page read and write
clean
1C205C7F000
unkown
page read and write
clean
2C3A8000000
unkown
page readonly
clean
7FF506D10000
unkown
page readonly
clean
1D357A00000
unkown
page read and write
clean
F6C537C000
unkown
page read and write
clean
1D352940000
unkown
page read and write
clean
2286000
unkown
page readonly
clean
7FF54E4C5000
unkown
page readonly
clean
25C2000
unkown
page readonly
clean
230F5D38000
unkown
page read and write
clean
1EFE2015000
heap private
page read and write
clean
7FF54AF0C000
unkown
page readonly
clean
7FF536367000
unkown
page readonly
clean
1DEE9210000
heap private
page read and write
clean
7FF598F2A000
unkown
page readonly
clean
1B9A7913000
unkown
page read and write
clean
7FF5C3593000
unkown
page readonly
clean
28DAB068000
unkown
page read and write
clean
2846000
unkown
page readonly
clean
1EFE1D40000
unkown
page read and write
clean
7FF52BFD4000
unkown
page readonly
clean
7FF5C3737000
unkown
page readonly
clean
231D686A000
unkown
page read and write
clean
1EFE1E6F000
unkown
page read and write
clean
230F5D79000
unkown
page read and write
clean
1DEE9463000
unkown
page read and write
clean
230F5D48000
unkown
page read and write
clean
1D3579A0000
unkown
page read and write
clean
1DEE945A000
unkown
page read and write
clean
1F117590000
unkown
page readonly
clean
B9AFDFB000
unkown
page read and write
clean
B9AFB7B000
unkown
page read and write
clean
7FF593550000
unkown
page readonly
clean
1AD65113000
unkown
page read and write
clean
7FF51F736000
unkown
page readonly
clean
7FF54AF81000
unkown
page readonly
clean
7FF5E398A000
unkown
page readonly
clean
1D35794C000
unkown
page readonly
clean
21F2000
unkown
page readonly
clean
7FF5B0166000
unkown
page readonly
clean
7FF593552000
unkown
page readonly
clean
7FF54A811000
unkown
page readonly
clean
230F7E66000
unkown
page read and write
clean
2225000
unkown
page readonly
clean
7FF50692F000
unkown
page readonly
clean
7FF5B01E1000
unkown
page readonly
clean
28DAB069000
unkown
page read and write
clean
7FF54AEC5000
unkown
page readonly
clean
7FF5B01E9000
unkown
page readonly
clean
7FF506971000
unkown
page readonly
clean
1BC2002A000
unkown
page read and write
clean
7FF524A49000
unkown
page readonly
clean
7FF535D75000
unkown
page readonly
clean
1F117200000
unkown
page readonly
clean
7FF5E39F5000
unkown
page readonly
clean
2BA0000
unkown
page read and write
clean
7FF5C38C4000
unkown
page readonly
clean
7FF542580000
unkown
page readonly
clean
2C3A7E5A000
unkown
page read and write
clean
7FF54E393000
unkown
page readonly
clean
1EFE1B80000
unkown
page read and write
clean
20B2227B000
unkown
page read and write
clean
7FF52BD4D000
unkown
page readonly
clean
26ADF75000
unkown
page read and write
clean
7FF542596000
unkown
page readonly
clean
2C3A7CF0000
unkown
page readonly
clean
2B84000
heap private
page read and write
clean
279B000
unkown
page readonly
clean
7FF506BE7000
unkown
page readonly
clean
7FF5C30E4000
unkown
page readonly
clean
7FF5323C1000
unkown
page readonly
clean
7FF506C69000
unkown
page readonly
clean
1F116EC0000
heap default
page read and write
clean
DA3FFFE000
unkown
page read and write
clean
28DAB200000
unkown
page readonly
clean
20B22232000
unkown
page read and write
clean
7FF598F52000
unkown
page readonly
clean
7FF5E3958000
unkown
page readonly
clean
230F9182000
unkown
page read and write
clean
31ED000
unkown
page read and write
clean
1EFE1E52000
unkown
page read and write
clean
1D357864000
unkown
page read and write
clean
7FF5D8CC6000
unkown
page readonly
clean
7FF5E394C000
unkown
page readonly
clean
1D353693000
unkown
page read and write
clean
7FF52BDA5000
unkown
page readonly
clean
A59000
unkown
page readonly
clean
7FF5E3A69000
unkown
page readonly
clean
7FF530F1A000
unkown
page readonly
clean
1AD6508F000
unkown
page read and write
clean
1F117000000
unkown
page read and write
clean
B9B067C000
unkown
page read and write
clean
1D357950000
unkown
page read and write
clean
230F8210000
unkown
page read and write
clean
F6C51FD000
unkown
page read and write
clean
1EFE1E50000
unkown
page read and write
clean
1EFE1DDC000
unkown
page read and write
clean
2BD0000
unkown
page readonly
clean
231D6902000
unkown
page read and write
clean
7FF51F7C0000
unkown
page readonly
clean
25A6000
unkown
page readonly
clean
7FF54E4ED000
unkown
page readonly
clean
7FF5E35D2000
unkown
page readonly
clean
230F5C87000
unkown
page read and write
clean
7FF524A02000
unkown
page readonly
clean
7FF52BEF7000
unkown
page readonly
clean
7FF5AFE48000
unkown
page readonly
clean
DA3FA7E000
unkown
page read and write
clean
2EA3000
unkown
page read and write
clean
20B22302000
unkown
page read and write
clean
7FF506AE0000
unkown
page readonly
clean
7FF5323C9000
unkown
page readonly
clean
7FF524A5D000
unkown
page readonly
clean
B9AF97B000
unkown
page read and write
clean
2C3A7D00000
unkown
page readonly
clean
7FF51F5FA000
unkown
page readonly
clean
7FF530FBE000
unkown
page readonly
clean
1D3521E0000
heap default
page read and write
clean
230F5C92000
unkown
page read and write
clean
1F117900000
unkown
page read and write
clean
7FF54AD23000
unkown
page readonly
clean
1BC1FFB0000
unkown
page readonly
clean
7FF524A08000
unkown
page readonly
clean
DA3F57B000
unkown
page read and write
clean
278D000
unkown
page readonly
clean
1D3579E0000
unkown
page readonly
clean
27C0000
unkown
page readonly
clean
7FF5C3838000
unkown
page readonly
clean
7FF5E38E7000
unkown
page readonly
clean
2EC5000
unkown
page read and write
clean
230F7ED4000
unkown
page read and write
clean
230F7C7C000
unkown
page read and write
clean
1EFE1E6A000
unkown
page read and write
clean
1D357CA0000
unkown
page readonly
clean
CF9227F000
unkown
page read and write
clean
2776000
unkown
page read and write
clean
1EFE2430000
unkown
page readonly
clean
494F000
unkown
page read and write
clean
1EFE1E05000
unkown
page read and write
clean
2E0A000
heap private
page read and write
clean
1BC20802000
unkown
page read and write
clean
7FF5E39B9000
unkown
page readonly
clean
26688800000
unkown
page readonly
clean
7FF5B015C000
unkown
page readonly
clean
21053EA0000
unkown
page read and write
clean
7FF5E369E000
unkown
page readonly
clean
CCB487B000
unkown
page read and write
clean
7FF5B016C000
unkown
page readonly
clean
1AD65066000
unkown
page read and write
clean
B9B05FA000
unkown
page read and write
clean
7FF536146000
unkown
page readonly
clean
21053829000
unkown
page read and write
clean
28DAB068000
unkown
page read and write
clean
7FF542258000
unkown
page readonly
clean
CCB46FF000
unkown
page read and write
clean
2D14000
heap private
page read and write
clean
7FF506BF7000
unkown
page readonly
clean
4720000
unkown
page readonly
clean
7FF52BD37000
unkown
page readonly
clean
98CBCB000
unkown
page read and write
clean
2E10000
unkown
page read and write
clean
1F11702A000
unkown
page read and write
clean
29E0000
heap default
page read and write
clean
7FF598D7B000
unkown
page readonly
clean
7FF531106000
unkown
page readonly
clean
7FF5069E0000
unkown
page readonly
clean
2E80000
heap default
page read and write
clean
7FF542598000
unkown
page readonly
clean
7FF52BE88000
unkown
page readonly
clean
7FF535FA0000
unkown
page readonly
clean
7FF598F04000
unkown
page readonly
clean
1D35228D000
unkown
page read and write
clean
7FF5361BC000
unkown
page readonly
clean
275E000
unkown
page readonly
clean
7720000
unkown
page read and write
clean
2596000
unkown
page readonly
clean
7FF5361D4000
unkown
page readonly
clean
7FF530FE8000
unkown
page readonly
clean
7FF5AFDFC000
unkown
page readonly
clean
29B0000
unkown
page readonly
clean
7FF598E63000
unkown
page readonly
clean
7FF536142000
unkown
page readonly
clean
7FF54E397000
unkown
page readonly
clean
7FF5311F1000
unkown
page readonly
clean
7FF598FE5000
unkown
page readonly
clean
230F7E3F000
unkown
page read and write
clean
1EFE1D88000
heap default
page read and write
clean
7FF5D8B2A000
unkown
page readonly
clean
230F7C9D000
unkown
page read and write
clean
7FF535E08000
unkown
page readonly
clean
20B22246000
unkown
page read and write
clean
7FF59351B000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
7FF531102000
unkown
page readonly
clean
28DAB069000
unkown
page read and write
clean
1D353330000
unkown
page readonly
clean
1EFE1E50000
unkown
page read and write
clean
1EFE1E6A000
unkown
page read and write
clean
7FF5D8CA9000
unkown
page readonly
clean
230F7ED2000
unkown
page read and write
clean
9BD7CFB000
unkown
page read and write
clean
95A897F000
unkown
page read and write
clean
7FF5B010A000
unkown
page readonly
clean
230F7E73000
unkown
page read and write
clean
B9AFBFB000
unkown
page read and write
clean
1EFE1DF0000
unkown
page read and write
clean
1EFE1D90000
heap default
page read and write
clean
7FF5311F9000
unkown
page readonly
clean
28DAB102000
unkown
page read and write
clean
21053A00000
unkown
page readonly
clean
2A22000
unkown
page read and write
clean
9BD799F000
unkown
page read and write
clean
2C3A7E4A000
unkown
page read and write
clean
2200000
unkown
page readonly
clean
20B22940000
unkown
page readonly
clean
7FF598F0A000
unkown
page readonly
clean
20B22200000
unkown
page read and write
clean
20B22267000
unkown
page read and write
clean
F59D3EB000
unkown
page read and write
clean
2F50000
unkown
page readonly
clean
1BC20082000
unkown
page read and write
clean
230F8110000
unkown
page read and write
clean
B9AFC7B000
unkown
page read and write
clean
1D352213000
unkown
page read and write
clean
2B98000
unkown
page read and write
clean
230F9142000
unkown
page read and write
clean
7FF524A35000
unkown
page readonly
clean
21120A50000
unkown
page readonly
clean
7FF51F765000
unkown
page readonly
clean
230F7ECE000
unkown
page read and write
clean
2C3A7E4B000
unkown
page read and write
clean
1D3522A9000
unkown
page read and write
clean
1B9A7800000
unkown
page read and write
clean
7FF506BD1000
unkown
page readonly
clean
7FF5D8B6D000
unkown
page readonly
clean
1F117045000
unkown
page read and write
clean
1D3579F0000
unkown
page readonly
clean
1C2075A0000
unkown
page read and write
clean
1F117113000
unkown
page read and write
clean
31F0000
unkown
page read and write
clean
2591000
unkown
page readonly
clean
7FF5C3929000
unkown
page readonly
clean
1EFE2846000
unkown
page read and write
clean
26ADE7E000
unkown
page read and write
clean
1B9A8002000
unkown
page read and write
clean
2C3A9A00000
unkown
page readonly
clean
7FF506890000
unkown
page readonly
clean
7FF5989FD000
unkown
page readonly
clean
230F7C60000
unkown
page read and write
clean
21120910000
unkown
page readonly
clean
1D352400000
unkown
page readonly
clean
95A867D000
unkown
page read and write
clean
7FF5E3A69000
unkown
page readonly
clean
20B22260000
unkown
page read and write
clean
21053EB0000
unkown
page read and write
clean
7FF506C08000
unkown
page readonly
clean
7FF5C367A000
unkown
page readonly
clean
1F117102000
unkown
page read and write
clean
7FF542459000
unkown
page readonly
clean
1EFE1E1B000
unkown
page read and write
clean
21053802000
unkown
page read and write
clean
7FF5D8C68000
unkown
page readonly
clean
26AE37F000
unkown
page read and write
clean
231D6AD0000
unkown
page readonly
clean
2202000
unkown
page readonly
clean
138A7FF000
unkown
page read and write
clean
7FF598FD6000
unkown
page readonly
clean
266883E0000
heap private
page read and write
clean
20B22190000
heap private
page read and write
clean
7FF5249B1000
unkown
page readonly
clean
211206F0000
unkown
page readonly
clean
20B2223D000
unkown
page read and write
clean
7FF53616E000
unkown
page readonly
clean
7FF52C056000
unkown
page readonly
clean
B9AF7FA000
unkown
page read and write
clean
7FF54E2F0000
unkown
page readonly
clean
3210000
unkown
page readonly
clean
7FF531149000
unkown
page readonly
clean
7FF5E3808000
unkown
page readonly
clean
28FA000
unkown
page read and write
clean
7FF5935F7000
unkown
page readonly
clean
1F117660000
unkown
page write copy
clean
1BC20200000
unkown
page readonly
clean
7FF5935BD000
unkown
page readonly
clean
7FF598FC6000
unkown
page readonly
clean
1BC20075000
unkown
page read and write
clean
7FF5322FE000
unkown
page readonly
clean
1D357C80000
unkown
page readonly
clean
7FF506CB0000
unkown
page readonly
clean
26AE27E000
unkown
page read and write
clean
B9B057A000
unkown
page read and write
clean
7FF5B00F6000
unkown
page readonly
clean
7FF598FDC000
unkown
page readonly
clean
26ADB8E000
unkown
page read and write
clean
2DEE000
unkown
page read and write
clean
7FF54E245000
unkown
page readonly
clean
7FF5E399E000
unkown
page readonly
clean
2E40000
unkown
page read and write
clean
2668868E000
unkown
page read and write
clean
7FF53112E000
unkown
page readonly
clean
230F7C7E000
unkown
page read and write
clean
2A11000
unkown
page read and write
clean
7FF530D00000
unkown
page readonly
clean
2668868A000
unkown
page read and write
clean
230F8110000
unkown
page read and write
clean
2BD0000
unkown
page readonly
clean
1D353300000
unkown
page readonly
clean
20B22242000
unkown
page read and write
clean
230F5C6B000
unkown
page read and write
clean
1BC2004B000
unkown
page read and write
clean
F59DA7E000
unkown
page read and write
clean
1B9A7900000
unkown
page read and write
clean
1AD6503C000
unkown
page read and write
clean
1EFE1DDC000
unkown
page read and write
clean
230F7AF0000
heap private
page read and write
clean
211209E0000
unkown
page readonly
clean
1D352313000
unkown
page read and write
clean
7FF5935C6000
unkown
page readonly
clean
7FF5C35F0000
unkown
page readonly
clean
1BC20100000
unkown
page read and write
clean
1F116FC0000
unkown
page read and write
clean
1C205C7D000
unkown
page read and write
clean
1D353320000
unkown
page readonly
clean
230F7B30000
unkown
page readonly
clean
2C3A7DE0000
unkown
page read and write
clean
1C205C64000
unkown
page read and write
clean
138AAFC000
unkown
page read and write
clean
1D3521F0000
unkown
page readonly
clean
2C3A7E13000
unkown
page read and write
clean
7FF5422A8000
unkown
page readonly
clean
1BC2004A000
unkown
page read and write
clean
231D6868000
unkown
page read and write
clean
230F7EB4000
unkown
page read and write
clean
7FF54AF89000
unkown
page readonly
clean
7FF598CDC000
unkown
page readonly
clean
7FF5244A1000
unkown
page readonly
clean
2E8A000
heap default
page read and write
clean
7FF5361C5000
unkown
page readonly
clean
2E2A000
heap default
page read and write
clean
F6C527F000
unkown
page read and write
clean
25C0000
unkown
page readonly
clean
7FF54E49A000
unkown
page readonly
clean
28DAC9B0000
unkown
page read and write
clean
2C3A7E75000
unkown
page read and write
clean
28DAB069000
unkown
page read and write
clean
2660000
unkown
page readonly
clean
2E00000
heap private
page read and write
clean
B9AF9FB000
unkown
page read and write
clean
20B2226A000
unkown
page read and write
clean
230F8110000
unkown
page read and write
clean
2EC2000
unkown
page read and write
clean
7FF54E581000
unkown
page readonly
clean
1DEE9370000
unkown
page read and write
clean
20B22262000
unkown
page read and write
clean
21053813000
unkown
page read and write
clean
2F80000
unkown
page readonly
clean
B9AFFFB000
unkown
page read and write
clean
1D357740000
unkown
page read and write
clean
7FF506ACC000
unkown
page readonly
clean
230F7B80000
unkown
page readonly
clean
7FF51F69C000
unkown
page readonly
clean
7FF506D19000
unkown
page readonly
clean
2A05000
unkown
page read and write
clean
7FF5069D5000
unkown
page readonly
clean
7CB0000
unkown
page read and write
clean
7FF54E45C000
unkown
page readonly
clean
277A000
unkown
page read and write
clean
7FF524AF9000
unkown
page readonly
clean
230F5B70000
unkown
page write copy
clean
27A4000
unkown
page readonly
clean
28C0000
heap default
page read and write
clean
7FF54E589000
unkown
page readonly
clean
7FF51F63D000
unkown
page readonly
clean
9BD7C7E000
unkown
page read and write
clean
6180000
unkown
page readonly
clean
7FF598CB6000
unkown
page readonly
clean
7FF51F7B5000
unkown
page readonly
clean
7FF5C38B7000
unkown
page readonly
clean
7FF5B018D000
unkown
page readonly
clean
7FF5C3690000
unkown
page readonly
clean
7FF5249CC000
unkown
page readonly
clean
7FF51F79C000
unkown
page readonly
clean
7FF598F68000
unkown
page readonly
clean
6020000
unkown
page readonly
clean
7FF506AD1000
unkown
page readonly
clean
20B2227E000
unkown
page read and write
clean
7FF5D8CF7000
unkown
page readonly
clean
219E000
unkown
page readonly
clean
7FF536230000
unkown
page readonly
clean
2868000
unkown
page readonly
clean
27B7000
unkown
page readonly
clean
1B9A7879000
unkown
page read and write
clean
1D3532E0000
unkown
page readonly
clean
1D352200000
unkown
page read and write
clean
21053E60000
unkown
page readonly
clean
2C3A7DA0000
unkown
page read and write
clean
21D6000
unkown
page readonly
clean
B9AF8FB000
unkown
page read and write
clean
2D40000
heap default
page read and write
clean
7FF5B0180000
unkown
page readonly
clean
1D352298000
unkown
page read and write
clean
7FF51F5EE000
unkown
page readonly
clean
B9AFE7B000
unkown
page read and write
clean
2860000
unkown
page readonly
clean
1EFE2AD0000
unkown
page read and write
clean
1D3532F0000
unkown
page readonly
clean
1D35226C000
unkown
page read and write
clean
1D3531F0000
unkown
page read and write
clean
7FF598FF4000
unkown
page readonly
clean
1EFE2B30000
unkown
page read and write
clean
D4E35FF000
unkown
page read and write
clean
1AD6505A000
unkown
page read and write
clean
7FF52C02F000
unkown
page readonly
clean
B9B06FC000
unkown
page read and write
clean
7FF5E39EC000
unkown
page readonly
clean
1EFE1E05000
unkown
page read and write
clean
1EFE1E52000
unkown
page read and write
clean
2280000
unkown
page readonly
clean
7FF535F67000
unkown
page readonly
clean
214687B000
unkown
page read and write
clean
7FF51F7C4000
unkown
page readonly
clean
7FF598CC7000
unkown
page readonly
clean
1BC2008D000
unkown
page read and write
clean
7FF593213000
unkown
page readonly
clean
9BD791B000
unkown
page read and write
clean
1BC20A00000
unkown
page readonly
clean
28DAB069000
unkown
page read and write
clean
20B2223A000
unkown
page read and write
clean
7FF524AF1000
unkown
page readonly
clean
1EFE1E50000
unkown
page read and write
clean
1C205C13000
unkown
page read and write
clean
7FF52C039000
unkown
page readonly
clean
B9B047B000
unkown
page read and write
clean
1B9A7802000
unkown
page read and write
clean
7FF51F31A000
unkown
page readonly
clean
7FF54E4D9000
unkown
page readonly
clean
20B22400000
unkown
page readonly
clean
2820000
unkown
page read and write
clean
B9B007B000
unkown
page read and write
clean
7FF53619D000
unkown
page readonly
clean
1EFE1E40000
unkown
page read and write
clean
7FF524A06000
unkown
page readonly
clean
1C205C7C000
unkown
page read and write
clean
230F5C93000
unkown
page read and write
clean
1D357860000
unkown
page read and write
clean
2DF0000
unkown
page read and write
clean
1AD65056000
unkown
page read and write
clean
1B9A8200000
unkown
page readonly
clean
1D357AA8000
unkown
page read and write
clean
7FF5E38F5000
unkown
page readonly
clean
28DAB029000
unkown
page read and write
clean
1C205E00000
unkown
page readonly
clean
2213000
unkown
page readonly
clean
1F116E60000
heap private
page read and write
clean
231D6829000
unkown
page read and write
clean
76B5BFF000
unkown
page read and write
clean
7FF531003000
unkown
page readonly
clean
28DACAB0000
unkown
page readonly
clean
7FF5935CC000
unkown
page readonly
clean
7FF593568000
unkown
page readonly
clean
7FF51F330000
unkown
page readonly
clean
7FF5B00E2000
unkown
page readonly
clean
2C3D000
unkown
page read and write
clean
7FF53232D000
unkown
page readonly
clean
25A0000
unkown
page readonly
clean
7FF592F70000
unkown
page readonly
clean
1BC20000000
unkown
page read and write
clean
7FF524767000
unkown
page readonly
clean
1C205C71000
unkown
page read and write
clean
7FF5C37FA000
unkown
page readonly
clean
20B2224E000
unkown
page read and write
clean
2C3A7D60000
unkown
page read and write
clean
2FA7FD000
unkown
page read and write
clean
230F7E43000
unkown
page read and write
clean
1D353310000
unkown
page readonly
clean
7FF54AEFC000
unkown
page readonly
clean
230F5C72000
unkown
page read and write
clean
230F5D89000
unkown
page read and write
clean
2840000
unkown
page readonly
clean
CCB457E000
unkown
page read and write
clean
1EFE2AC0000
unkown
page readonly
clean
26688708000
unkown
page read and write
clean
7FF506C22000
unkown
page readonly
clean
230F8010000
unkown
page read and write
clean
7FF542448000
unkown
page readonly
clean
7FF54AF7E000
unkown
page readonly
clean
21120710000
heap default
page read and write
clean
2C3A7E4B000
unkown
page read and write
clean
7FF5B008E000
unkown
page readonly
clean
2868000
unkown
page readonly
clean
7FF532360000
unkown
page readonly
clean
230F7B20000
unkown
page readonly
clean
7FF54E43A000
unkown
page readonly
clean
C60000
unkown
page readonly
clean
76B5C7F000
unkown
page read and write
clean
210537F0000
unkown
page readonly
clean
7FF531D0A000
unkown
page readonly
clean
2582000
unkown
page readonly
clean
7FF506B85000
unkown
page readonly
clean
7FF593659000
unkown
page readonly
clean
7FF598F48000
unkown
page readonly
clean
276F000
unkown
page readonly
clean
22A8000
unkown
page readonly
clean
26688B90000
unkown
page readonly
clean
1F116FF0000
unkown
page readonly
clean
CCB3BFB000
unkown
page read and write
clean
1C205C60000
unkown
page read and write
clean
7FF5C37FC000
unkown
page readonly
clean
253B000
unkown
page read and write
clean
2653000
unkown
page readonly
clean
7FF506A7E000
unkown
page readonly
clean
7FF542681000
unkown
page readonly
clean
21053902000
unkown
page read and write
clean
21CA000
unkown
page readonly
clean
7FF532364000
unkown
page readonly
clean
7FF536239000
unkown
page readonly
clean
7FF542606000
unkown
page readonly
clean
7FF5AFE6C000
unkown
page readonly
clean
230F9142000
unkown
page read and write
clean
7FF5425CF000
unkown
page readonly
clean
2BCA000
heap private
page read and write
clean
98D0FA000
unkown
page read and write
clean
1C2076A0000
unkown
page readonly
clean
230F7C2E000
unkown
page read and write
clean
1B9A7813000
unkown
page read and write
clean
21D1000
unkown
page readonly
clean
20B22229000
unkown
page read and write
clean
230F9082000
unkown
page read and write
clean
7FF5B0156000
unkown
page readonly
clean
21122360000
heap private
page read and write
clean
7FF5425AA000
unkown
page readonly
clean
7FF5D8B97000
unkown
page readonly
clean
7FF542615000
unkown
page readonly
clean
231D686E000
unkown
page read and write
clean
7FF598F3C000
unkown
page readonly
clean
7FF54AE98000
unkown
page readonly
clean
7FF5E39D6000
unkown
page readonly
clean
231D6800000
unkown
page read and write
clean
230F5B60000
heap default
page read and write
clean
7FF506CB7000
unkown
page readonly
clean
2495000
unkown
page readonly
clean
7FF524763000
unkown
page readonly
clean
7AD0000
unkown
page read and write
clean
1DEEA140000
unkown
page readonly
clean
7FF532336000
unkown
page readonly
clean
21CD000
unkown
page readonly
clean
1D357A4C000
unkown
page read and write
clean
7FF506C86000
unkown
page readonly
clean
7FF5E363F000
unkown
page readonly
clean
2B3B000
unkown
page read and write
clean
230F5CD7000
unkown
page read and write
clean
1EFE1E52000
unkown
page read and write
clean
7FF54256C000
unkown
page readonly
clean
3F30B7B000
unkown
page read and write
clean
7FF598FCC000
unkown
page readonly
clean
F59D67E000
unkown
page read and write
clean
DA3FF7D000
unkown
page read and write
clean
20CC000
unkown
page readonly
clean
230F5D36000
unkown
page read and write
clean
7FF593217000
unkown
page readonly
clean
7FF5E37CE000
unkown
page readonly
clean
7FF5322D8000
unkown
page readonly
clean
2446000
unkown
page readonly
clean
7FF536367000
unkown
page readonly
clean
CF9217F000
unkown
page read and write
clean
7FF52C066000
unkown
page readonly
clean
24D8000
unkown
page readonly
clean
1EFE1D50000
unkown
page read and write
clean
2796000
unkown
page readonly
clean
2A00000
unkown
page read and write
clean
1F116FB0000
unkown
page readonly
clean
7FF5361B6000
unkown
page readonly
clean
2467000
unkown
page readonly
clean
7FF530E31000
unkown
page readonly
clean
7FF542515000
unkown
page readonly
clean
7FF598F50000
unkown
page readonly
clean
231D6802000
unkown
page read and write
clean
2C3A7F02000
unkown
page read and write
clean
9BD7DF9000
unkown
page read and write
clean
7FF5D8C66000
unkown
page readonly
clean
7FF506956000
unkown
page readonly
clean
7FF542689000
unkown
page readonly
clean
320A000
heap private
page read and write
clean
7B8E000
unkown
page read and write
clean
7FF54233E000
unkown
page readonly
clean
1C205D00000
unkown
page read and write
clean
1D357848000
unkown
page read and write
clean
1D357990000
unkown
page read and write
clean
7FF50691D000
unkown
page readonly
clean
7FF5933DF000
unkown
page readonly
clean
28DAB013000
unkown
page read and write
clean
230F5C89000
unkown
page read and write
clean
7FF5361D7000
unkown
page readonly
clean
7FF5C38C0000
unkown
page readonly
clean
27D3000
unkown
page readonly
clean
CF91D7D000
unkown
page read and write
clean
1BC20056000
unkown
page read and write
clean
7FF5D884A000
unkown
page readonly
clean
2E07000
heap private
page read and write
clean
7FF5D8D51000
unkown
page readonly
clean
1C205C61000
unkown
page read and write
clean
1C205A00000
heap default
page read and write
clean
1EFE1D50000
unkown
page read and write
clean
76B5B79000
unkown
page read and write
clean
1EFE1CF0000
unkown
page readonly
clean
7FF52BEB9000
unkown
page readonly
clean
7FF5425D9000
unkown
page readonly
clean
7FF54ADF5000
unkown
page readonly
clean
230F7E33000
unkown
page read and write
clean
7FF531108000
unkown
page readonly
clean
7FF598F11000
unkown
page readonly
clean
7FF5D8CF4000
unkown
page readonly
clean
7640000
unkown
page read and write
clean
230F5C3F000
unkown
page read and write
clean
7FF5C3929000
unkown
page readonly
clean
2146DFF000
unkown
page read and write
clean
28DAB054000
unkown
page read and write
clean
2E48000
unkown
page read and write
clean
1B9A783C000
unkown
page read and write
clean
231D683F000
unkown
page read and write
clean
7FF506AD8000
unkown
page readonly
clean
7FF599059000
unkown
page readonly
clean
287E000
unkown
page read and write
clean
1EFE284B000
unkown
page read and write
clean
230F7CF8000
unkown
page read and write
clean
230F7B30000
unkown
page read and write
clean
7FF5B00E0000
unkown
page readonly
clean
2453000
unkown
page readonly
clean
230F7F02000
unkown
page read and write
clean
230F8410000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
7FF506687000
unkown
page readonly
clean
230F8410000
unkown
page read and write
clean
7FF598DDF000
unkown
page readonly
clean
230F7770000
unkown
page readonly
clean
7FF5E3877000
unkown
page readonly
clean
7FF53111A000
unkown
page readonly
clean
7FF51F7A6000
unkown
page readonly
clean
7FF54E1F3000
unkown
page readonly
clean
7FF52BA3B000
unkown
page readonly
clean
1F116ED0000
unkown
page readonly
clean
D4E3D7C000
unkown
page read and write
clean
230F5ED0000
unkown
page readonly
clean
231D6A00000
unkown
page readonly
clean
1DEE9470000
unkown
page read and write
clean
7FF5423EE000
unkown
page readonly
clean
7FF52BFF8000
unkown
page readonly
clean
7FF5935E5000
unkown
page readonly
clean
1EFE1DF0000
unkown
page read and write
clean
7FF54E441000
unkown
page readonly
clean
20B22236000
unkown
page read and write
clean
2A08000
unkown
page read and write
clean
7FF52C075000
unkown
page readonly
clean
2F40000
heap default
page read and write
clean
7FF532355000
unkown
page readonly
clean
76B5AFA000
unkown
page read and write
clean
2C3A7DF0000
unkown
page readonly
clean
7FF593659000
unkown
page readonly
clean
7FF5C37E1000
unkown
page readonly
clean
7FF54E589000
unkown
page readonly
clean
7FF5D8C50000
unkown
page readonly
clean
CCB44FE000
unkown
page read and write
clean
1D357910000
unkown
page write copy
clean
256F000
unkown
page readonly
clean
1D357A87000
unkown
page read and write
clean
7FF54E4BE000
unkown
page readonly
clean
21054002000
unkown
page read and write
clean
230F9000000
unkown
page read and write
clean
1BC20680000
unkown
page readonly
clean
1AD64E50000
heap private
page read and write
clean
1D357A85000
unkown
page read and write
clean
7FF536148000
unkown
page readonly
clean
1F117932000
unkown
page read and write
clean
7FF599051000
unkown
page readonly
clean
CCB437E000
unkown
page read and write
clean
211209D0000
unkown
page readonly
clean
7FF5C30E0000
unkown
page readonly
clean
2646000
unkown
page readonly
clean
230F5D13000
unkown
page read and write
clean
1D3576A0000
unkown
page read and write
clean
28DAAEC0000
heap default
page read and write
clean
230F7F02000
unkown
page read and write
clean
7FF542620000
unkown
page readonly
clean
230F9102000
unkown
page read and write
clean
1AD6505E000
unkown
page read and write
clean
7FF531037000
unkown
page readonly
clean
7FF53106C000
unkown
page readonly
clean
1D352A02000
unkown
page read and write
clean
1C205C62000
unkown
page read and write
clean
1EFE1DDC000
unkown
page read and write
clean
25FA000
unkown
page readonly
clean
21053D90000
unkown
page readonly
clean
1B9A7720000
unkown
page readonly
clean
7FF54E524000
unkown
page readonly
clean
7FF5C3733000
unkown
page readonly
clean
7FF5360E7000
unkown
page readonly
clean
2D30000
unkown
page read and write
clean
1DEE9402000
unkown
page read and write
clean
DA3FBFF000
unkown
page read and write
clean
7FF536189000
unkown
page readonly
clean
1F1170C1000
unkown
page read and write
clean
28DAB068000
unkown
page read and write
clean
1DEE9990000
unkown
page readonly
clean
7FF5D8C62000
unkown
page readonly
clean
1C205B30000
unkown
page readonly
clean
1EFE1D80000
heap default
page read and write
clean
7BD0000
unkown
page read and write
clean
7FF52BA15000
unkown
page readonly
clean
231D8270000
unkown
page read and write
clean
230F7F02000
unkown
page read and write
clean
20B22249000
unkown
page read and write
clean
7FF598F62000
unkown
page readonly
clean
7FF52449D000
unkown
page readonly
clean
7FF52C0E9000
unkown
page readonly
clean
1DEE9465000
unkown
page read and write
clean
7FF52BEAA000
unkown
page readonly
clean
1D352B13000
unkown
page read and write
clean
7FF54E378000
unkown
page readonly
clean
230F7C89000
unkown
page read and write
clean
1D357A3F000
unkown
page read and write
clean
7FF5360F1000
unkown
page readonly
clean
7FF598D8C000
unkown
page readonly
clean
2EA8000
unkown
page read and write
clean
28DAAFA0000
unkown
page write copy
clean
7FF5D8D4E000
unkown
page readonly
clean
21120900000
heap private
page read and write
clean
20B22277000
unkown
page read and write
clean
1D357914000
unkown
page readonly
clean
231D6867000
unkown
page read and write
clean
230F5CB6000
unkown
page read and write
clean
230F7F00000
unkown
page read and write
clean
2EA8000
unkown
page read and write
clean
1BC20070000
unkown
page read and write
clean
7FF5425ED000
unkown
page readonly
clean
7FF524860000
unkown
page readonly
clean
230F7E63000
unkown
page read and write
clean
22A0000
unkown
page readonly
clean
B9AFD7B000
unkown
page read and write
clean
7FF51F320000
unkown
page readonly
clean
CF91F7F000
unkown
page read and write
clean
1EFE1DD2000
unkown
page read and write
clean
CF9207E000
unkown
page read and write
clean
1EFE2500000
unkown
page readonly
clean
2BC0000
unkown
page readonly
clean
7FF54A8E4000
unkown
page readonly
clean
D4E3C7E000
unkown
page read and write
clean
7FF5E39A5000
unkown
page readonly
clean
7FF5D8CE5000
unkown
page readonly
clean
CCB3FF7000
unkown
page read and write
clean
21C2000
unkown
page readonly
clean
7FF506C8C000
unkown
page readonly
clean
1C205C60000
unkown
page read and write
clean
7FF5B0192000
unkown
page readonly
clean
20B2224C000
unkown
page read and write
clean
2E43000
heap default
page read and write
clean
7FF506D19000
unkown
page readonly
clean
27FA000
unkown
page readonly
clean
21053800000
unkown
page read and write
clean
1C205B70000
unkown
page read and write
clean
CF917FB000
unkown
page read and write
clean
There are 1736 hidden memdumps, click here to show them.