IOC Report

loading gif

Files

File Path
Type
Category
Malicious
RU419 FEB17 BSRec_InvNet.xlsx
Microsoft Excel 2007+
initial sample
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\5FA6FEA0-CB2C-4F8E-9780-03CCC61C3B5C
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\37E97714.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\50D0390D.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5237299F.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\69015696.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\6A727948.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\7D410405.png
PNG image data, 736 x 684, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9658063C.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A39313AA.png
PNG image data, 539 x 117, 1-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D3E7BBA3.jpeg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 660x137, frames 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DC2AD8A9.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\Desktop\~$RU419 FEB17 BSRec_InvNet.xlsx
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2BCACAFF.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\42105703.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5CCA9D28.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7B2AE0BB.jpeg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 660x137, frames 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\923BA48A.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B158576.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C9CFEB09.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D914E8F4.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
There are 11 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
https://login.microsoftonline.com/
unknown
https://shell.suite.office.com:1443
unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
https://autodiscover-s.outlook.com/
unknown
https://roaming.edog.
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
https://cdn.entity.
unknown
https://api.addins.omex.office.net/appinfo/query
unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
https://powerlift.acompli.net
unknown
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
http://schemas.microsoft.c
unknown
https://lookup.onenote.com/lookup/geolocation/v1
unknown
https://cortana.ai
unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://cloudfiles.onenote.com/upload.aspx
unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
https://entitlement.diagnosticssdf.office.com
unknown
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
https://api.aadrm.com/
unknown
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
https://api.microsoftstream.com/api/
unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
https://cr.office.com
unknown
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
unknown
https://portal.office.com/account/?ref=ClientMeControl
unknown
https://graph.ppe.windows.net
unknown
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
https://powerlift-frontdesk.acompli.net
unknown
https://tasks.office.com
unknown
https://officeci.azurewebsites.net/api/
unknown
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
https://store.office.cn/addinstemplate
unknown
https://api.aadrm.com
unknown
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
https://globaldisco.crm.dynamics.com
unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://dev0-api.acompli.net/autodetect
unknown
https://www.odwebp.svc.ms
unknown
https://api.diagnosticssdf.office.com/v2/feedback
unknown
https://api.powerbi.com/v1.0/myorg/groups
unknown
https://web.microsoftstream.com/video/
unknown
https://api.addins.store.officeppe.com/addinstemplate
unknown
https://graph.windows.net
unknown
https://dataservice.o365filtering.com/
unknown
https://officesetup.getmicrosoftkey.com
unknown
https://analysis.windows.net/powerbi/api
unknown
https://prod-global-autodetect.acompli.net/autodetect
unknown
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
https://ncus.contentsync.
unknown
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
http://weather.service.msn.com/data.aspx
unknown
https://apis.live.net/v5.0/
unknown
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
https://management.azure.com
unknown
https://outlook.office365.com
unknown
https://wus2.contentsync.
unknown
https://incidents.diagnostics.office.com
unknown
https://clients.config.office.net/user/v1.0/ios
unknown
https://insertmedia.bing.office.net/odc/insertmedia
unknown
https://o365auditrealtimeingestion.manage.office.com
unknown
https://outlook.office365.com/api/v1.0/me/Activities
unknown
https://api.office.net
unknown
https://incidents.diagnosticssdf.office.com
unknown
https://asgsmsproxyapi.azurewebsites.net/
unknown
https://clients.config.office.net/user/v1.0/android/policies
unknown
http://schemas.mic-
unknown
https://entitlement.diagnostics.office.com
unknown
http://schemas.micro
unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
https://substrate.office.com/search/api/v2/init
unknown
https://outlook.office.com/
unknown
https://storage.live.com/clientlogs/uploadlocation
unknown
https://outlook.office365.com/
unknown
https://webshell.suite.office.com
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
https://substrate.office.com/search/api/v1/SearchHistory
unknown
https://management.azure.com/
unknown
http://www.w3.o
unknown
https://login.windows.net/common/oauth2/authorize
unknown
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
https://graph.windows.net/
unknown
https://api.powerbi.com/beta/myorg/imports
unknown
https://devnull.onenote.com
unknown
https://ncus.pagecontentsync.
unknown
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
https://messaging.office.com/
unknown
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
https://augloop.office.com/v2
unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
https://skyapi.live.net/Activity/
unknown
There are 90 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
!9)
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
"9)
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
RemoteClearDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
Last
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
FilePath
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
StartDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
EndDate
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Properties
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Url
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableWinHttpCertAuth
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableIsOwnerRegex
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableSessionAwareHttpClose
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALForExtendedApps
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALSetSilentAuth
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableGuestCredProvider
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableOstringReplace
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
ProductNonBootFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
FileFormatBallotBoxAppIDBootedOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
EXCELFiles
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTime
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
ProductNonBootFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
)
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
ProductNonBootFilesIntl_1033
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
ProductNonBootFilesIntl_1033
There are 31 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
3670000
trusted library allocation
page read and write
1E77C97C000
unkown
page read and write
2CEACA82000
unkown
page read and write
24B40F13000
unkown
page read and write
18023183000
unkown
page read and write
18023081000
unkown
page read and write
2CEAD202000
unkown
page read and write
24CFC498000
unkown
page read and write
35E4000
heap
page read and write
1587CCE7000
heap
page read and write
180230C2000
unkown
page read and write
3F70000
trusted library allocation
page read and write
1477000
heap
page read and write
18A24AEE000
unkown
page read and write
3EE5000
heap
page read and write
12F0000
remote allocation
page read and write
1802315F000
unkown
page read and write
3E70000
trusted library allocation
page read and write
3EFB000
heap
page read and write
4521A7F000
stack
page read and write
1FEDDB16000
unkown
page read and write
3E67000
heap
page read and write
3E3C000
heap
page read and write
160105C0000
heap
page read and write
18023069000
unkown
page read and write
3EAE000
heap
page read and write
18022DD0000
heap
page read and write
3E64000
heap
page read and write
26100002000
unkown
page read and write
3E67000
heap
page read and write
18023091000
unkown
page read and write
24CFBE8B000
unkown
page read and write
1409000
heap
page read and write
3E84000
heap
page read and write
2F82000
heap
page read and write
3793000
heap
page read and write
1FEDD9A0000
unkown
page read and write
180231FC000
unkown
page read and write
20672E4D000
unkown
page read and write
180231A1000
unkown
page read and write
147B000
heap
page read and write
2FA3000
heap
page read and write
1FEDE3A6000
unkown
page read and write
1FEDE3C8000
unkown
page read and write
3EFA000
heap
page read and write
2D8A000
heap
page read and write
302A000
heap
page read and write
24CF4757000
unkown
page read and write
17EBE77000
stack
page read and write
4090000
trusted library allocation
page read and write
3D70000
trusted library allocation
page read and write
1FEDE3B1000
unkown
page read and write
1475000
heap
page read and write
24CFBEBB000
unkown
page read and write
3793000
heap
page read and write
2F9E000
heap
page read and write
3021000
heap
page read and write
5C938FC000
stack
page read and write
145B000
heap
page read and write
24CFBF5D000
unkown
page read and write
180231DD000
unkown
page read and write
3EAB000
heap
page read and write
18023096000
unkown
page read and write
180231A9000
unkown
page read and write
378E000
heap
page read and write
24CFC879000
unkown
page read and write
3D70000
trusted library allocation
page read and write
3ECA000
heap
page read and write
2F9E000
heap
page read and write
1802306C000
unkown
page read and write
24CF8119000
unkown
page read and write
3D77000
heap
page read and write
7FF43C031000
trusted library allocation
page execute read
3EFC000
heap
page read and write
3E48000
heap
page read and write
3678000
heap
page read and write
20672D90000
heap
page read and write
5EB83FB000
stack
page read and write
3EF4000
heap
page read and write
3677000
heap
page read and write
20672F13000
unkown
page read and write
3E5A000
heap
page read and write
1802306B000
unkown
page read and write
180230D4000
unkown
page read and write
1420000
heap
page read and write
18023060000
unkown
page read and write
3630000
heap
page read and write
2FC2000
heap
page read and write
3DA0000
heap
page read and write
18A2532F000
unkown
page read and write
180231B2000
unkown
page read and write
16010618000
heap
page read and write
F4C000
stack
page read and write
A9D057B000
stack
page read and write
180230C1000
unkown
page read and write
2D70000
heap
page read and write
24CFBEF3000
unkown
page read and write
2DDA000
heap
page read and write
2F70000
trusted library allocation
page read and write
3E65000
heap
page read and write
4090000
trusted library allocation
page read and write
3D8E000
heap
page read and write
1FEDE398000
unkown
page read and write
1447000
heap
page read and write
1456000
heap
page read and write
17EBD7F000
stack
page read and write
1802319B000
unkown
page read and write
3867000
heap
page read and write
B1FCC7C000
stack
page read and write
3D8D000
heap
page read and write
3EF0000
heap
page read and write
2CEACB02000
unkown
page read and write
3777000
heap
page read and write
3E94000
heap
page read and write
1782A602000
unkown
page read and write
24CFC443000
unkown
page read and write
2DDA000
heap
page read and write
1E77C93B000
unkown
page read and write
B1FC87F000
stack
page read and write
3D9C000
heap
page read and write
3637000
heap
page read and write
3D77000
heap
page read and write
1FEDDB02000
unkown
page read and write
1FEDDA00000
unkown
page read and write
3E60000
heap
page read and write
367C000
heap
page read and write
18023066000
unkown
page read and write
1FEDE3B2000
unkown
page read and write
3E6A000
heap
page read and write
F7AEF8B000
stack
page read and write
180231FB000
unkown
page read and write
3D70000
trusted library allocation
page read and write
4213B7E000
stack
page read and write
2D83000
heap
page read and write
2CEACB00000
unkown
page read and write
24CFC71E000
unkown
page read and write
4010000
trusted library allocation
page read and write
1E77C974000
unkown
page read and write
3787000
heap
page read and write
3072000
heap
page read and write
1FEDE3A5000
unkown
page read and write
3D85000
heap
page read and write
1E77C92B000
unkown
page read and write
1479000
heap
page read and write
1FEDE3B3000
unkown
page read and write
3EA2000
heap
page read and write
180231D9000
unkown
page read and write
363B000
heap
page read and write
3617000
heap
page read and write
24CF4FF0000
trusted library allocation
page read and write
3E56000
heap
page read and write
18023133000
unkown
page read and write
24CFC663000
unkown
page read and write
3019000
heap
page read and write
3E85000
heap
page read and write
1E77C116000
unkown
page read and write
1FEDDA48000
unkown
page read and write
375A000
heap
page read and write
3EA2000
heap
page read and write
3E82000
heap
page read and write
B1FC2DC000
stack
page read and write
1475000
heap
page read and write
3E4E000
heap
page read and write
2F95000
heap
page read and write
3E87000
heap
page read and write
386A000
heap
page read and write
147B000
heap
page read and write
22971708000
unkown
page read and write
2FB9000
heap
page read and write
3EE7000
heap
page read and write
180230D2000
unkown
page read and write
1FEDDA13000
unkown
page read and write
302D000
heap
page read and write
376A000
heap
page read and write
13E2000
heap
page read and write
1802309E000
unkown
page read and write
1802317B000
unkown
page read and write
24CF46E6000
unkown
page read and write
1FEDE390000
unkown
page read and write
18A24B02000
unkown
page read and write
24CF8148000
unkown
page read and write
375A000
heap
page read and write
180231B6000
unkown
page read and write
3E6A000
heap
page read and write
3E62000
heap
page read and write
1802317C000
unkown
page read and write
3D82000
heap
page read and write
377B000
heap
page read and write
14A0000
heap
page read and write
180231AD000
unkown
page read and write
3787000
heap
page read and write
3E67000
heap
page read and write
13C56653000
unkown
page read and write
3E8B000
heap
page read and write
4213EFE000
stack
page read and write
1782A500000
heap
page read and write
3684000
heap
page read and write
3E63000
heap
page read and write
18A25337000
unkown
page read and write
148D000
heap
page read and write
3EB1000
heap
page read and write
2DDA000
heap
page read and write
1436000
heap
page read and write
3E6E000
heap
page read and write
24CFC58D000
unkown
page read and write
180231A5000
unkown
page read and write
1E77C94B000
unkown
page read and write
F7AF7FF000
stack
page read and write
24CF81D9000
unkown
page read and write
1FEDE3A4000
unkown
page read and write
3E6B000
heap
page read and write
3E48000
heap
page read and write
3760000
heap
page read and write
3E83000
heap
page read and write
2CEACA29000
unkown
page read and write
300C000
heap
page read and write
1475000
heap
page read and write
24CFC587000
unkown
page read and write
13C56460000
heap
page read and write
146B000
heap
page read and write
3787000
heap
page read and write
2F84000
heap
page read and write
18023108000
unkown
page read and write
1436000
heap
page read and write
3073000
heap
page read and write
1802318F000
unkown
page read and write
3F70000
trusted library allocation
page read and write
18023134000
unkown
page read and write
180231DC000
unkown
page read and write
1471000
heap
page read and write
16010614000
heap
page read and write
3E54000
heap
page read and write
1E77C951000
unkown
page read and write
1E77C06C000
unkown
page read and write
24CFC100000
trusted library allocation
page read and write
39F0000
trusted library allocation
page read and write
3E8D000
heap
page read and write
3E71000
heap
page read and write
3F30000
trusted library allocation
page read and write
1490000
heap
page read and write
3787000
heap
page read and write
4090000
trusted library allocation
page read and write
1802317E000
unkown
page read and write
25A6E2FF000
heap
page read and write
3E9C000
heap
page read and write
35E7000
heap
page read and write
361A000
heap
page read and write
3E46000
heap
page read and write
3E60000
heap
page read and write
1434000
heap
page read and write
1475000
heap
page read and write
18A24A82000
unkown
page read and write
1409000
heap
page read and write
3E2E000
heap
page read and write
18023734000
unkown
page read and write
2CEAC990000
heap
page read and write
3E35000
heap
page read and write
3E63000
heap
page read and write
180231AF000
unkown
page read and write
24CFBE23000
unkown
page read and write
1424000
heap
page read and write
3E6C000
heap
page read and write
180230E5000
unkown
page read and write
3E60000
heap
page read and write
18A24930000
heap
page read and write
24CFC58B000
unkown
page read and write
3755000
heap
page read and write
3E5E000
heap
page read and write
5C936FA000
stack
page read and write
3670000
trusted library allocation
page read and write
3670000
trusted library allocation
page read and write
3E4D000
heap
page read and write
1802374C000
unkown
page read and write
1FEDE802000
unkown
page read and write
5EB7BFF000
stack
page read and write
145B000
heap
page read and write
3E75000
heap
page read and write
3E58000
heap
page read and write
3E70000
trusted library allocation
page read and write
3E5A000
heap
page read and write
2CEACA3C000
unkown
page read and write
3757000
heap
page read and write
3E6A000
heap
page read and write
1FEDE371000
unkown
page read and write
180230DE000
unkown
page read and write
2FB5000
heap
page read and write
24CFC5FF000
unkown
page read and write
3E4D000
heap
page read and write
3D82000
heap
page read and write
3ECA000
heap
page read and write
3ECA000
heap
page read and write
3F70000
trusted library allocation
page read and write
A2234FE000
stack
page read and write
24CFC780000
unkown
page read and write
148D000
heap
page read and write
20672F00000
unkown
page read and write
2D70000
heap
page read and write
2FBF000
heap
page read and write
24CF46A0000
unkown
page read and write
B1FCE7F000
stack
page read and write
3E6A000
heap
page read and write
24CF4659000
unkown
page read and write
3F70000
trusted library allocation
page read and write
1479000
heap
page read and write
1E77C97C000
unkown
page read and write
3EA9000
heap
page read and write
1E77C92D000
unkown
page read and write
1420000
heap
page read and write
24CFC600000
unkown
page read and write
3E90000
heap
page read and write
24CFC900000
unkown
page read and write
3670000
trusted library allocation
page read and write
3E6F000
heap
page read and write
2FB9000
heap
page read and write
3EBA000
heap
page read and write
3F00000
heap
page read and write
1587CCE7000
heap
page read and write
25A6E2FF000
heap
page read and write
3D84000
heap
page read and write
3D70000
trusted library allocation
page read and write
147B000
heap
page read and write
24CFC794000
unkown
page read and write
2F77000
heap
page read and write
1451000
heap
page read and write
13C56600000
unkown
page read and write
180231DA000
unkown
page read and write
3E75000
heap
page read and write
24CFBFF0000
unkown
page read and write
3E8B000
heap
page read and write
361B000
heap
page read and write
2FAA000
heap
page read and write
3E85000
heap
page read and write
3E68000
heap
page read and write
1450000
heap
page read and write
3017000
heap
page read and write
1FEDE37F000
unkown
page read and write
3F50000
trusted library allocation
page read and write
2DD5000
heap
page read and write
3F30000
trusted library allocation
page read and write
3F70000
trusted library allocation
page read and write
18023179000
unkown
page read and write
2F70000
trusted library allocation
page read and write
3E8E000
heap
page read and write
260FFB13000
unkown
page read and write
3E62000
heap
page read and write
1E77CE61000
unkown
page read and write
1436000
heap
page read and write
3E5F000
heap
page read and write
1FEDE392000
unkown
page read and write
18023702000
unkown
page read and write
25A6E2E1000
heap
page read and write
180230A0000
unkown
page read and write
3E8D000
heap
page read and write
144B000
heap
page read and write
3F50000
trusted library allocation
page read and write
F0F53FB000
stack
page read and write
24CF4625000
unkown
page read and write
3E4B000
heap
page read and write
1E77C0D4000
unkown
page read and write
3670000
trusted library allocation
page read and write
3610000
heap
page read and write
3670000
trusted library allocation
page read and write
A2235FE000
stack
page read and write
3670000
heap
page read and write
1587CCB7000
heap
page read and write
24CFC5EF000
unkown
page read and write
1802312F000
unkown
page read and write
3677000
heap
page read and write
3970000
trusted library allocation
page read and write
37A0000
heap
page read and write
1423000
heap
page read and write
180230C7000
unkown
page read and write
3D70000
trusted library allocation
page read and write
5C93CF9000
stack
page read and write
1E77CE02000
unkown
page read and write
24CF4570000
heap
page read and write
25A6E510000
heap
page read and write
A9D0777000
stack
page read and write
3F30000
trusted library allocation
page read and write
2D95000
heap
page read and write
1782A4F0000
heap
page read and write
A9D0DFF000
stack
page read and write
3019000
heap
page read and write
2CEACA6D000
unkown
page read and write
3024000
heap
page read and write
1420000
heap
page read and write
37A3000
heap
page read and write
37A3000
heap
page read and write
35E0000
heap
page read and write
3006000
heap
page read and write
3670000
trusted library allocation
page read and write
180231FD000
unkown
page read and write
13C56E02000
unkown
page read and write
39F0000
trusted library allocation
page read and write
24CF81A4000
unkown
page read and write
180230B0000
unkown
page read and write
2D93000
heap
page read and write
1802314F000
unkown
page read and write
3E20000
heap
page read and write
36DA7FF000
stack
page read and write
3E27000
heap
page read and write
145B000
heap
page read and write
24B40E13000
unkown
page read and write
3682000
heap
page read and write
24CF810E000
unkown
page read and write
1FEDDAEC000
unkown
page read and write
180231C0000
unkown
page read and write
386A000
heap
page read and write
2CEACA00000
unkown
page read and write
3021000
heap
page read and write
3684000
heap
page read and write
3006000
heap
page read and write
3D85000
heap
page read and write
3E91000
heap
page read and write
2D70000
heap
page read and write
3E84000
heap
page read and write
25A6E2D0000
heap
page read and write
3F50000
trusted library allocation
page read and write
1FEDDA68000
unkown
page read and write
18A25327000
unkown
page read and write
3EF5000
heap
page read and write
1FEDE3A5000
unkown
page read and write
18023121000
unkown
page read and write
18023094000
unkown
page read and write
25A6E310000
heap
page read and write
18023114000
unkown
page read and write
3F06000
heap
page read and write
3D84000
heap
page read and write
1FEDE382000
unkown
page read and write
377E000
heap
page read and write
3670000
trusted library allocation
page read and write
24CFC6BB000
unkown
page read and write
3006000
heap
page read and write
363A000
heap
page read and write
3E79000
heap
page read and write
3D70000
trusted library allocation
page read and write
3EF7000
heap
page read and write
1424000
heap
page read and write
1E77C000000
unkown
page read and write
3EBA000
heap
page read and write
3D8B000
heap
page read and write
3E4F000
heap
page read and write
24CF46C3000
unkown
page read and write
180230A7000
unkown
page read and write
2FC2000
heap
page read and write
1420000
heap
page read and write
180231A3000
unkown
page read and write
1435000
heap
page read and write
3D70000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
375B000
heap
page read and write
3E2A000
heap
page read and write
3E58000
heap
page read and write
2FB9000
heap
page read and write
18023000000
unkown
page read and write
3D82000
heap
page read and write
180230C9000
unkown
page read and write
3D7C000
heap
page read and write
180231C3000
unkown
page read and write
2CEACA77000
unkown
page read and write
377B000
heap
page read and write
3F30000
trusted library allocation
page read and write
1450000
heap
page read and write
3634000
heap
page read and write
180230AE000
unkown
page read and write
37A0000
heap
page read and write
1E77C93B000
unkown
page read and write
18023138000
unkown
page read and write
3D8D000
heap
page read and write
3D70000
trusted library allocation
page read and write
3863000
heap
page read and write
3E5E000
heap
page read and write
1802313E000
unkown
page read and write
260FFA49000
unkown
page read and write
302D000
heap
page read and write
1E77C90E000
unkown
page read and write
17EBF7F000
stack
page read and write
A9D0977000
stack
page read and write
2F78000
heap
page read and write
3EBA000
heap
page read and write
148D000
heap
page read and write
3E84000
heap
page read and write
3632000
heap
page read and write
3E53000
heap
page read and write
3E6A000
heap
page read and write
3784000
heap
page read and write
18023141000
unkown
page read and write
3E58000
heap
page read and write
1475000
heap
page read and write
1802305D000
unkown
page read and write
1587CC55000
heap
page read and write
260FFB02000
unkown
page read and write
18023124000
unkown
page read and write
14A4000
heap
page read and write
180230B0000
unkown
page read and write
2D70000
heap
page read and write
24CFC64C000
unkown
page read and write
24CF4713000
unkown
page read and write
B1FCD7E000
stack
page read and write
1E77C94B000
unkown
page read and write
300A000
heap
page read and write
18023199000
unkown
page read and write
363E000
heap
page read and write
3637000
heap
page read and write
1477000
heap
page read and write
3004000
heap
page read and write
3EC0000
heap
page read and write
25A6E2F7000
heap
page read and write
3ECD000
heap
page read and write
1FEDE863000
unkown
page read and write
260FFA13000
unkown
page read and write
1424000
heap
page read and write
35E2000
heap
page read and write
1FEDE39A000
unkown
page read and write
A2233F7000
stack
page read and write
24CF81F2000
unkown
page read and write
18023126000
unkown
page read and write
3D86000
heap
page read and write
1471000
heap
page read and write
24CF811D000
unkown
page read and write
1409000
heap
page read and write
19271A7A000
heap
page read and write
3D77000
heap
page read and write
1782A590000
unkown
page read and write
C0082FF000
stack
page read and write
18023A02000
unkown
page read and write
3E8E000
heap
page read and write
180230A5000
unkown
page read and write
3004000
heap
page read and write
3783000
heap
page read and write
1416000
heap
page read and write
2CA0000
heap
page read and write
4D917F9000
stack
page read and write
1FEDE311000
unkown
page read and write
18023704000
unkown
page read and write
24CFC896000
unkown
page read and write
3970000
trusted library allocation
page read and write
1E77C976000
unkown
page read and write
3D70000
heap
page read and write
1782A654000
unkown
page read and write
24CFC4BD000
unkown
page read and write
180230D5000
unkown
page read and write
3E61000
heap
page read and write
3E75000
heap
page read and write
3E67000
heap
page read and write
18A2530C000
unkown
page read and write
C007B9B000
stack
page read and write
18023719000
unkown
page read and write
3634000
heap
page read and write
1E77C913000
unkown
page read and write
3678000
heap
page read and write
18023175000
unkown
page read and write
1802306D000
unkown
page read and write
386B000
heap
page read and write
3E65000
heap
page read and write
180231FB000
unkown
page read and write
69E5A8A000
stack
page read and write
24B40D80000
unkown
page read and write
24B40E3E000
unkown
page read and write
144A000
heap
page read and write
1FEDE802000
unkown
page read and write
3E57000
heap
page read and write
24CFC904000
unkown
page read and write
25A6E2F6000
heap
page read and write
2FB9000
heap
page read and write
1E77C03D000
unkown
page read and write
37A7000
heap
page read and write
1E77C957000
unkown
page read and write
24CFC7AE000
unkown
page read and write
3670000
trusted library allocation
page read and write
1473000
heap
page read and write
25A6E2E6000
heap
page read and write
18023184000
unkown
page read and write
24CF811B000
unkown
page read and write
2D94000
heap
page read and write
3685000
heap
page read and write
3EA6000
heap
page read and write
2DD2000
heap
page read and write
3E83000
heap
page read and write
3017000
heap
page read and write
1782A600000
unkown
page read and write
3E75000
heap
page read and write
147B000
heap
page read and write
180230BC000
unkown
page read and write
2FA3000
heap
page read and write
3682000
heap
page read and write
3F30000
trusted library allocation
page read and write
180230D1000
unkown
page read and write
3D82000
heap
page read and write
3E9C000
heap
page read and write
36DA77D000
stack
page read and write
3630000
heap
page read and write
3E5A000
heap
page read and write
2F9C000
heap
page read and write
1E77CE0B000
unkown
page read and write
1FEDE3A6000
unkown
page read and write
3F50000
trusted library allocation
page read and write
13D8000
heap
page read and write
3F30000
trusted library allocation
page read and write
3E78000
heap
page read and write
A9D0CFF000
stack
page read and write
1FEDDA8A000
unkown
page read and write
37A5000
heap
page read and write
25A6E2A0000
heap
page read and write
24C80157000
trusted library allocation
page read and write
1FEDDA49000
unkown
page read and write
19271A6B000
heap
page read and write
3ED7000
heap
page read and write
3637000
heap
page read and write
3ECD000
heap
page read and write
18023117000
unkown
page read and write
1E77C90E000
unkown
page read and write
14B8000
heap
page read and write
1458000
heap
page read and write
3F70000
trusted library allocation
page read and write
3E70000
trusted library allocation
page read and write
3686000
heap
page read and write
1587CCE7000
heap
page read and write
3E52000
heap
page read and write
3E8D000
heap
page read and write
22971E02000
unkown
page read and write
3D7C000
heap
page read and write
37AE000
heap
page read and write
F0F56FF000
stack
page read and write
24CF46E9000
unkown
page read and write
2297164A000
unkown
page read and write
1FEDE392000
unkown
page read and write
3EBA000
heap
page read and write
2FC2000
heap
page read and write
2F93000
heap
page read and write
B1FCB7B000
stack
page read and write
3E5F000
heap
page read and write
18023065000
unkown
page read and write
AE6B7C000
stack
page read and write
180231EA000
unkown
page read and write
3ED6000
heap
page read and write
24CFC87E000
unkown
page read and write
1E77C929000
unkown
page read and write
37AA000
heap
page read and write
1471000
heap
page read and write
B1FCAFA000
stack
page read and write
3ECE000
heap
page read and write
1E77C0EC000
unkown
page read and write
1FEDE3BB000
unkown
page read and write
1802312D000
unkown
page read and write
2CEAC920000
heap
page read and write
377F000
heap
page read and write
F7AF27E000
stack
page read and write
3D70000
trusted library allocation
page read and write
452177F000
stack
page read and write
3615000
heap
page read and write
1409000
heap
page read and write
24CFC5B5000
unkown
page read and write
24CF46DB000
unkown
page read and write
1479000
heap
page read and write
3D70000
trusted library allocation
page read and write
3D83000
heap
page read and write
1802307A000
unkown
page read and write
3614000
heap
page read and write
B1FC6FB000
stack
page read and write
18023051000
unkown
page read and write
2FB9000
heap
page read and write
18023710000
unkown
page read and write
3670000
heap
page read and write
3EE4000
heap
page read and write
1587CCC1000
heap
page read and write
2FB3000
heap
page read and write
3F50000
trusted library allocation
page read and write
24CFC700000
unkown
page read and write
180230EF000
unkown
page read and write
2FBF000
heap
page read and write
22971550000
unkown
page read and write
3E79000
heap
page read and write
20672E7F000
unkown
page read and write
3787000
heap
page read and write
1FEDDA4C000
unkown
page read and write
1FEDDAEA000
unkown
page read and write
3D8E000
heap
page read and write
1E77BEF0000
heap
page read and write
3F50000
trusted library allocation
page read and write
3EB5000
heap
page read and write
3E67000
heap
page read and write
1409000
heap
page read and write
3E78000
heap
page read and write
3D70000
trusted library allocation
page read and write
1802305E000
unkown
page read and write
1FEDDA68000
unkown
page read and write
452197B000
stack
page read and write
3670000
trusted library allocation
page read and write
18023095000
unkown
page read and write
3678000
heap
page read and write
2F9C000
heap
page read and write
180230EC000
unkown
page read and write
3F70000
trusted library allocation
page read and write
1E77C97C000
unkown
page read and write
C007FFC000
stack
page read and write
1FEDE802000
unkown
page read and write
24CFC800000
unkown
page read and write
24CFC522000
unkown
page read and write
24CF8106000
unkown
page read and write
5EB84FE000
stack
page read and write
20672F02000
unkown
page read and write
24CFC41A000
unkown
page read and write
146F000
heap
page read and write
1FEDE300000
unkown
page read and write
3784000
heap
page read and write
180230A1000
unkown
page read and write
24CFBFF9000
unkown
page read and write
2D9B000
heap
page read and write
260FFA86000
unkown
page read and write
2F70000
trusted library allocation
page read and write
A22307E000
stack
page read and write
2D90000
heap
page read and write
180230FF000
unkown
page read and write
1E77CE1A000
unkown
page read and write
18023743000
unkown
page read and write
180239B0000
remote allocation
page read and write
16010613000
heap
page read and write
3F30000
trusted library allocation
page read and write
1E77C930000
unkown
page read and write
4213AFC000
stack
page read and write
180231FF000
unkown
page read and write
367C000
heap
page read and write
24CF810A000
unkown
page read and write
3784000
heap
page read and write
5EB78FE000
stack
page read and write
3EC3000
heap
page read and write
F7AF2FE000
stack
page read and write
3E77000
heap
page read and write
22971655000
unkown
page read and write
1471000
heap
page read and write
3E56000
heap
page read and write
180230BF000
unkown
page read and write
A9D0BF8000
stack
page read and write
20672E00000
unkown
page read and write
39F0000
trusted library allocation
page read and write
1FEDE383000
unkown
page read and write
3EB5000
heap
page read and write
1E77C14A000
unkown
page read and write
302D000
heap
page read and write
4010000
trusted library allocation
page read and write
3EC7000
heap
page read and write
2CEACA02000
unkown
page read and write
2D84000
heap
page read and write
3014000
heap
page read and write
13C56688000
unkown
page read and write
3E40000
heap
page read and write
F0F507B000
stack
page read and write
1424000
heap
page read and write
1802311E000
unkown
page read and write
3632000
heap
page read and write
22971683000
unkown
page read and write
5C937FF000
stack
page read and write
17EB7DB000
stack
page read and write
3780000
heap
page read and write
2DDB000
heap
page read and write
2D9E000
heap
page read and write
14A4000
heap
page read and write
3765000
heap
page read and write
39F0000
trusted library allocation
page read and write
180230A2000
unkown
page read and write
3ECD000
heap
page read and write
18023163000
unkown
page read and write
148E000
heap
page read and write
180230E0000
unkown
page read and write
1E77CE1D000
unkown
page read and write
1587CCDB000
heap
page read and write
2FB9000
heap
page read and write
18023152000
unkown
page read and write
3D90000
heap
page read and write
302A000
heap
page read and write
18023700000
unkown
page read and write
24CFC843000
unkown
page read and write
18023145000
unkown
page read and write
144D000
heap
page read and write
C007E7F000
stack
page read and write
3E85000
heap
page read and write
18023089000
unkown
page read and write
1E77C976000
unkown
page read and write
18023129000
unkown
page read and write
3D70000
trusted library allocation
page read and write
307A000
heap
page read and write
20672E3C000
unkown
page read and write
1FEDE390000
unkown
page read and write
1E77C05B000
unkown
page read and write
1448000
heap
page read and write
3D78000
heap
page read and write
3757000
heap
page read and write
35E7000
heap
page read and write
3677000
heap
page read and write
1FEDDA7F000
unkown
page read and write
A2232FB000
stack
page read and write
3762000
heap
page read and write
307A000
heap
page read and write
377E000
heap
page read and write
260FFA7A000
unkown
page read and write
1FEDE190000
remote allocation
page read and write
1E77C968000
unkown
page read and write
20672D20000
heap
page read and write
3660000
heap
page read and write
2D97000
heap
page read and write
19271A9D000
heap
page read and write
3637000
heap
page read and write
160105F8000
heap
page read and write
1FEDE190000
remote allocation
page read and write
1E77C078000
unkown
page read and write
2CEACB13000
unkown
page read and write
24CF81C0000
unkown
page read and write
1802375C000
unkown
page read and write
3D78000
heap
page read and write
1E77C96E000
unkown
page read and write
1802305A000
unkown
page read and write
2DD3000
heap
page read and write
377F000
heap
page read and write
3E83000
heap
page read and write
3784000
heap
page read and write
1FEDE37F000
unkown
page read and write
24CFC59E000
unkown
page read and write
3075000
heap
page read and write
180230FB000
unkown
page read and write
3017000
heap
page read and write
180231E4000
unkown
page read and write
1FEDE802000
unkown
page read and write
3E50000
heap
page read and write
180231E9000
unkown
page read and write
1802309B000
unkown
page read and write
A9D015B000
stack
page read and write
3E83000
heap
page read and write
3E8B000
heap
page read and write
3EA8000
heap
page read and write
2FBF000
heap
page read and write
3787000
heap
page read and write
3F70000
trusted library allocation
page read and write
302C000
heap
page read and write
260FF980000
heap
page read and write
24CFC888000
unkown
page read and write
4213BFE000
stack
page read and write
3E5F000
heap
page read and write
13D0000
heap
page read and write
2F96000
heap
page read and write
3EF4000
heap
page read and write
3E23000
heap
page read and write
180230E8000
unkown
page read and write
3ED7000
heap
page read and write
18023092000
unkown
page read and write
1E77C95B000
unkown
page read and write
3023000
heap
page read and write
3EAB000
heap
page read and write
2F70000
trusted library allocation
page read and write
18A2533B000
unkown
page read and write
4091000
heap
page read and write
1802307F000
unkown
page read and write
363A000
heap
page read and write
160105F0000
heap
page read and write
3E65000
heap
page read and write
3E6A000
heap
page read and write
4190000
trusted library allocation
page read and write
180231BF000
unkown
page read and write
18023170000
unkown
page read and write
24CF45E0000
trusted library allocation
page read and write
3D89000
heap
page read and write
3E89000
heap
page read and write
3014000
heap
page read and write
1450000
heap
page read and write
1FEDE392000
unkown
page read and write
1FEDDA27000
unkown
page read and write
180231E2000
unkown
page read and write
3F70000
trusted library allocation
page read and write
4010000
trusted library allocation
page read and write
3D82000
heap
page read and write
1E77BE80000
heap
page read and write
1E77CE6D000
unkown
page read and write
24B41700000
unkown
page read and write
3023000
heap
page read and write
24CF45F0000
trusted library allocation
page read and write
3F50000
trusted library allocation
page read and write
1450000
heap
page read and write
24CFC6F9000
unkown
page read and write
180230B7000
unkown
page read and write
3D70000
trusted library allocation
page read and write
1FEDDAC3000
unkown
page read and write
3E54000
heap
page read and write
39F0000
trusted library allocation
page read and write
24CFC743000
unkown
page read and write
1E77CE44000
unkown
page read and write
2FBE000
heap
page read and write
3E78000
heap
page read and write
36DA57E000
stack
page read and write
B1FC3DD000
stack
page read and write
1FEDDA53000
unkown
page read and write
3E6F000
heap
page read and write
69E5EFF000
stack
page read and write
2CEACA13000
unkown
page read and write
24CFC77D000
unkown
page read and write
3E78000
heap
page read and write
2F93000
heap
page read and write
3678000
heap
page read and write
1456000
heap
page read and write
24CFC457000
unkown
page read and write
3D77000
heap
page read and write
2DD4000
heap
page read and write
2297162A000
unkown
page read and write
3686000
heap
page read and write
3670000
heap
page read and write
3D70000
trusted library allocation
page read and write
3D77000
heap
page read and write
14B2000
heap
page read and write
3635000
heap
page read and write
3D70000
heap
page read and write
1300000
heap
page read and write
20672DC0000
unkown
page read and write
18023029000
unkown
page read and write
24CFBF6B000
unkown
page read and write
2FBE000
heap
page read and write
1802311C000
unkown
page read and write
307B000
heap
page read and write
2D85000
heap
page read and write
16010460000
heap
page read and write
2F9C000
heap
page read and write
3E83000
heap
page read and write
3867000
heap
page read and write
1782A560000
heap
page read and write
1E77C96B000
unkown
page read and write
1FEDE361000
unkown
page read and write
24CF4660000
unkown
page read and write
3635000
heap
page read and write
1E77C93B000
unkown
page read and write
18A249B0000
unkown
page read and write
24CFC514000
unkown
page read and write
3D70000
trusted library allocation
page read and write
40A1000
heap
page read and write
4090000
heap
page read and write
18023085000
unkown
page read and write
260FFA6C000
unkown
page read and write
24CFC49C000
unkown
page read and write
144B000
heap
page read and write
C0084FF000
stack
page read and write
1FEDE36E000
unkown
page read and write
2FAF000
heap
page read and write
2D97000
heap
page read and write
180230C4000
unkown
page read and write
2F9E000
heap
page read and write
24CFC51E000
unkown
page read and write
180231C9000
unkown
page read and write
2D70000
heap
page read and write
1802305E000
unkown
page read and write
2FC2000
heap
page read and write
1E77CD50000
remote allocation
page read and write
24CF8190000
unkown
page read and write
1802375C000
unkown
page read and write
18023193000
unkown
page read and write
3077000
heap
page read and write
2FB5000
heap
page read and write
39F0000
trusted library allocation
page read and write
18023702000
unkown
page read and write
4D91AFC000
stack
page read and write
1305000
heap
page read and write
1FEDE319000
unkown
page read and write
147B000
heap
page read and write
1FEDDAA4000
unkown
page read and write
A222D9C000
stack
page read and write
3678000
heap
page read and write
367C000
heap
page read and write
3F50000
trusted library allocation
page read and write
39F0000
trusted library allocation
page read and write
18023076000
unkown
page read and write
3E80000
heap
page read and write
24CFC915000
unkown
page read and write
3790000
heap
page read and write
24CF474F000
unkown
page read and write
36DA47E000
stack
page read and write
24CFC647000
unkown
page read and write
18023738000
unkown
page read and write
3F70000
trusted library allocation
page read and write
3670000
heap
page read and write
2D80000
heap
page read and write
3004000
heap
page read and write
376A000
heap
page read and write
1490000
heap
page read and write
3F70000
trusted library allocation
page read and write
22971600000
unkown
page read and write
20672D30000
heap
page read and write
3E42000
heap
page read and write
3D78000
heap
page read and write
2F92000
heap
page read and write
5C93DFB000
stack
page read and write
3D82000
heap
page read and write
1FEDE377000
unkown
page read and write
3E9D000
heap
page read and write
69E5B8E000
stack
page read and write
18023088000
unkown
page read and write
1E77C974000
unkown
page read and write
1E77CE0D000
unkown
page read and write
3E7B000
heap
page read and write
3004000
heap
page read and write
1E77C076000
unkown
page read and write
1FEDE361000
unkown
page read and write
180231A7000
unkown
page read and write
1E77C0C7000
unkown
page read and write
3D8D000
heap
page read and write
3F30000
trusted library allocation
page read and write
3E8B000
heap
page read and write
1E77C95E000
unkown
page read and write
1440000
heap
page read and write
5EB76FF000
stack
page read and write
24CFC864000
unkown
page read and write
1E77C937000
unkown
page read and write
3E40000
heap
page read and write
3F70000
trusted library allocation
page read and write
180230B5000
unkown
page read and write
1587CC50000
heap
page read and write
375E000
heap
page read and write
3004000
heap
page read and write
1FEDDB08000
unkown
page read and write
2FB9000
heap
page read and write
5C933AE000
stack
page read and write
39F0000
trusted library allocation
page read and write
37A3000
heap
page read and write
24CF8116000
unkown
page read and write
3EBA000
heap
page read and write
3D83000
heap
page read and write
22971671000
unkown
page read and write
3EC5000
heap
page read and write
37AA000
heap
page read and write
24CFC62F000
unkown
page read and write
260FFA56000
unkown
page read and write
19271D95000
heap
page read and write
20672E81000
unkown
page read and write
1471000
heap
page read and write
2CEAC9C0000
unkown
page read and write
3781000
heap
page read and write
18A24A55000
unkown
page read and write
3E50000
heap
page read and write
3E78000
heap
page read and write
2FC2000
heap
page read and write
B1FC9FC000
stack
page read and write
180231C1000
unkown
page read and write
1802315A000
unkown
page read and write
18A24A00000
unkown
page read and write
3E4B000
heap
page read and write
3F50000
trusted library allocation
page read and write
180230EE000
unkown
page read and write
146E000
heap
page read and write
1450000
heap
page read and write
180231C5000
unkown
page read and write
1FEDE396000
unkown
page read and write
180231B1000
unkown
page read and write
3EB1000
heap
page read and write
180230CD000
unkown
page read and write
18A24A13000
unkown
page read and write
3E75000
heap
page read and write
24CFBF9D000
unkown
page read and write
146F000
heap
page read and write
4090000
trusted library allocation
page read and write
3E77000
heap
page read and write
1E77C029000
unkown
page read and write
1782AE02000
unkown
page read and write
24CFBE89000
unkown
page read and write
1479000
heap
page read and write
13C56629000
unkown
page read and write
3E22000
heap
page read and write
1409000
heap
page read and write
3D70000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
24CFC422000
unkown
page read and write
3D79000
heap
page read and write
1802308F000
unkown
page read and write
3D70000
trusted library allocation
page read and write
377F000
heap
page read and write
3D70000
trusted library allocation
page read and write
36DA1EC000
stack
page read and write
3D82000
heap
page read and write
3682000
heap
page read and write
1E77CD50000
remote allocation
page read and write
18022E40000
heap
page read and write
3E5D000
heap
page read and write
18023744000
unkown
page read and write
2F85000
heap
page read and write
24CFC899000
unkown
page read and write
4090000
trusted library allocation
page read and write
24CFC71A000
unkown
page read and write
1477000
heap
page read and write
18023158000
unkown
page read and write
24CFC710000
unkown
page read and write
3023000
heap
page read and write
1802316D000
unkown
page read and write
3004000
heap
page read and write
3ECD000
heap
page read and write
1E77C032000
unkown
page read and write
3EA7000
heap
page read and write
39F0000
trusted library allocation
page read and write
1FEDE802000
unkown
page read and write
3E8D000
heap
page read and write
3E94000
heap
page read and write
1FEDE863000
unkown
page read and write
3E42000
heap
page read and write
1587CCBC000
heap
page read and write
375A000
heap
page read and write
1FEDDA47000
unkown
page read and write
1423000
heap
page read and write
5C93AFE000
stack
page read and write
1802316B000
unkown
page read and write
1587CBF0000
heap
page read and write
5EB7AFE000
stack
page read and write
1FEDE398000
unkown
page read and write
18023086000
unkown
page read and write
24CFC8EB000
unkown
page read and write
2FB9000
heap
page read and write
3E77000
heap
page read and write
F0F527B000
stack
page read and write
3F30000
trusted library allocation
page read and write
18023119000
unkown
page read and write
24CFC693000
unkown
page read and write
24CF81F9000
unkown
page read and write
3F50000
trusted library allocation
page read and write
22971650000
unkown
page read and write
2FA1000
heap
page read and write
39F0000
trusted library allocation
page read and write
3E60000
heap
page read and write
24CFC584000
unkown
page read and write
24CFBFC6000
unkown
page read and write
2FB9000
heap
page read and write
3E53000
heap
page read and write
3D97000
heap
page read and write
18023143000
unkown
page read and write
144B000
heap
page read and write
3ECB000
heap
page read and write
1E77C90E000
unkown
page read and write
24CFC4AA000
unkown
page read and write
3EB5000
heap
page read and write
3778000
heap
page read and write
3F70000
trusted library allocation
page read and write
25A6E2DB000
heap
page read and write
1407000
heap
page read and write
1FEDE392000
unkown
page read and write
24C80166000
trusted library allocation
page read and write
1417000
heap
page read and write
363A000
heap
page read and write
2297163C000
unkown
page read and write
1802314B000
unkown
page read and write
20672E49000
unkown
page read and write
1E77C929000
unkown
page read and write
3E5D000
heap
page read and write
18023147000
unkown
page read and write
3E9F000
heap
page read and write
180230EB000
unkown
page read and write
180230ED000
unkown
page read and write
260FFA7B000
unkown
page read and write
3E71000
heap
page read and write
386A000
heap
page read and write
3670000
trusted library allocation
page read and write
24CF4799000
unkown
page read and write
1475000
heap
page read and write
367C000
heap
page read and write
1802308D000
unkown
page read and write
3EFA000
heap
page read and write
3D70000
trusted library allocation
page read and write
3E72000
heap
page read and write
35E5000
heap
page read and write
1E77C815000
unkown
page read and write
1E77CE45000
unkown
page read and write
1802318C000
unkown
page read and write
3F06000
heap
page read and write
1E77CE13000
unkown
page read and write
1E77C96E000
unkown
page read and write
363A000
heap
page read and write
18023092000
unkown
page read and write
1E77C800000
unkown
page read and write
24CF4600000
unkown
page read and write
40A1000
heap
page read and write
3004000
heap
page read and write
1484000
heap
page read and write
1E77C92C000
unkown
page read and write
1E77C94C000
unkown
page read and write
180230F5000
unkown
page read and write
39F0000
trusted library allocation
page read and write
25A6E170000
heap
page read and write
1435000
heap
page read and write
3E71000
heap
page read and write
24CF8143000
unkown
page read and write
1782A63D000
unkown
page read and write
2FB9000
heap
page read and write
302D000
heap
page read and write
3F70000
trusted library allocation
page read and write
3006000
heap
page read and write
25A6E2F0000
heap
page read and write
22971613000
unkown
page read and write
3D84000
heap
page read and write
3E37000
heap
page read and write
1E77C129000
unkown
page read and write
24B40E6A000
unkown
page read and write
24CFC645000
unkown
page read and write
229713F0000
heap
page read and write
1802318B000
unkown
page read and write
144B000
heap
page read and write
F60000
unkown
page readonly
2FB5000
heap
page read and write
3770000
heap
page read and write
3F00000
heap
page read and write
3D70000
trusted library allocation
page read and write
3EA0000
heap
page read and write
3670000
trusted library allocation
page read and write
3D70000
trusted library allocation
page read and write
1FEDDA3C000
unkown
page read and write
1E77C902000
unkown
page read and write
3F70000
trusted library allocation
page read and write
18023166000
unkown
page read and write
3E54000
heap
page read and write
3778000
heap
page read and write
3E6F000
heap
page read and write
A9D01DE000
stack
page read and write
2D9A000
heap
page read and write
2D90000
heap
page read and write
180231BD000
unkown
page read and write
1587CCA6000
heap
page read and write
1479000
heap
page read and write
18023073000
unkown
page read and write
1FEDE39C000
unkown
page read and write
3670000
trusted library allocation
page read and write
18A24A4E000
unkown
page read and write
1450000
heap
page read and write
180230AB000
unkown
page read and write
3EA4000
heap
page read and write
3E6A000
heap
page read and write
24CF814F000
unkown
page read and write
3F70000
trusted library allocation
page read and write
24CFBFBE000
unkown
page read and write
302D000
heap
page read and write
3670000
trusted library allocation
page read and write
3D7C000
heap
page read and write
3D77000
heap
page read and write
24CFC8D3000
unkown
page read and write
3F06000
heap
page read and write
3787000
heap
page read and write
35EE000
heap
page read and write
2FB9000
heap
page read and write
180230F7000
unkown
page read and write
3862000
heap
page read and write
3E71000
heap
page read and write
3004000
heap
page read and write
1E77C0A2000
unkown
page read and write
3E58000
heap
page read and write
3EFC000
heap
page read and write
1FEDDA29000
unkown
page read and write
1E77C094000
unkown
page read and write
1802313C000
unkown
page read and write
3D70000
trusted library allocation
page read and write
1409000
heap
page read and write
192719B0000
heap
page read and write
F0F50FE000
stack
page read and write
1FEDDABC000
unkown
page read and write
1FEDE202000
unkown
page read and write
24CFC49D000
unkown
page read and write
18023191000
unkown
page read and write
1802318A000
unkown
page read and write
1419000
heap
page read and write
3E88000
heap
page read and write
18023140000
unkown
page read and write
1E77C0C1000
unkown
page read and write
1E77C013000
unkown
page read and write
180230CA000
unkown
page read and write
4190000
trusted library allocation
page read and write
C0083FC000
stack
page read and write
363A000
heap
page read and write
3E3F000
heap
page read and write
3752000
heap
page read and write
1454000
heap
page read and write
1E77CE46000
unkown
page read and write
3D70000
heap
page read and write
2D70000
heap
page read and write
3E62000
heap
page read and write
18A24920000
heap
page read and write
3DB1000
heap
page read and write
377B000
heap
page read and write
3790000
heap
page read and write
24B40E2A000
unkown
page read and write
17EBAFE000
stack
page read and write
F0F54F7000
stack
page read and write
14A2000
heap
page read and write
3017000
heap
page read and write
1E77C974000
unkown
page read and write
24CFC595000
unkown
page read and write
19271A9B000
heap
page read and write
146F000
heap
page read and write
18023097000
unkown
page read and write
3E85000
heap
page read and write
24B40EC1000
unkown
page read and write
3760000
heap
page read and write
3753000
heap
page read and write
3D70000
trusted library allocation
page read and write
3E82000
heap
page read and write
3684000
heap
page read and write
24CF8123000
unkown
page read and write
A9D0678000
stack
page read and write
1424000
heap
page read and write
1E77C083000
unkown
page read and write
18023197000
unkown
page read and write
3EB1000
heap
page read and write
3E5F000
heap
page read and write
24CFC4AD000
unkown
page read and write
24CFC8AD000
unkown
page read and write
145B000
heap
page read and write
2E5C000
stack
page read and write
148E000
heap
page read and write
1E77C97A000
unkown
page read and write
18023136000
unkown
page read and write
F70000
unkown
page read and write
4090000
trusted library allocation
page read and write
377F000
heap
page read and write
24CF8136000
unkown
page read and write
3763000
heap
page read and write
3017000
heap
page read and write
180230D0000
unkown
page read and write
1587CCDC000
heap
page read and write
24CFC784000
unkown
page read and write
24CFC4EF000
unkown
page read and write
13C5663C000
unkown
page read and write
F7AF4FB000
stack
page read and write
A2230FE000
stack
page read and write
3E38000
heap
page read and write
3E78000
heap
page read and write
2CA0000
heap
page read and write
3E72000
heap
page read and write
1E77C0AD000
unkown
page read and write
1FEDDB13000
unkown
page read and write
3670000
trusted library allocation
page read and write
3E88000
heap
page read and write
24C80001000
trusted library allocation
page read and write
2F9C000
heap
page read and write
3EF2000
heap
page read and write
180230CB000
unkown
page read and write
1FEDE34F000
unkown
page read and write
3D7C000
heap
page read and write
1471000
heap
page read and write
25A6E2F1000
heap
page read and write
5EB77FA000
stack
page read and write
1459000
heap
page read and write
37AA000
heap
page read and write
16010632000
heap
page read and write
3017000
heap
page read and write
3E97000
heap
page read and write
378B000
heap
page read and write
3EA6000
heap
page read and write
3E38000
heap
page read and write
1420000
heap
page read and write
1E77C955000
unkown
page read and write
3E58000
heap
page read and write
1E77C088000
unkown
page read and write
3E70000
heap
page read and write
35EA000
heap
page read and write
180230BE000
unkown
page read and write
3784000
heap
page read and write
377C000
heap
page read and write
3E84000
heap
page read and write
24CFC643000
unkown
page read and write
3782000
heap
page read and write
1E77C92C000
unkown
page read and write
1FEDDA83000
unkown
page read and write
22971649000
unkown
page read and write
148D000
heap
page read and write
1E77CE49000
unkown
page read and write
3D7C000
heap
page read and write
3EAB000
heap
page read and write
3D8D000
heap
page read and write
4010000
trusted library allocation
page read and write
377E000
heap
page read and write
1FEDD970000
heap
page read and write
3EF3000
heap
page read and write
18023172000
unkown
page read and write
3D84000
heap
page read and write
18023195000
unkown
page read and write
24CF4735000
unkown
page read and write
2F95000
heap
page read and write
3EB5000
heap
page read and write
3E8B000
heap
page read and write
3F50000
trusted library allocation
page read and write
1435000
heap
page read and write
1FEDE392000
unkown
page read and write
4190000
trusted library allocation
page read and write
376B000
heap
page read and write
19271A40000
heap
page read and write
1802305F000
unkown
page read and write
18023180000
unkown
page read and write
F70000
unkown
page read and write
3DAF000
heap
page read and write
2D87000
heap
page read and write
3EFD000
heap
page read and write
F60000
unkown
page readonly
300C000
heap
page read and write
3E63000
heap
page read and write
180231D6000
unkown
page read and write
17EC07E000
stack
page read and write
3E7C000
heap
page read and write
3E90000
heap
page read and write
1802314D000
unkown
page read and write
18023123000
unkown
page read and write
3017000
heap
page read and write
37A4000
heap
page read and write
180230AC000
unkown
page read and write
180230D8000
unkown
page read and write
4090000
trusted library allocation
page read and write
3612000
heap
page read and write
3019000
heap
page read and write
1436000
heap
page read and write
3865000
heap
page read and write
18023120000
unkown
page read and write
3E41000
heap
page read and write
3D85000
heap
page read and write
E90000
heap
page read and write
1479000
heap
page read and write
1802309A000
unkown
page read and write
F0F52FE000
stack
page read and write
2F9C000
heap
page read and write
3F50000
trusted library allocation
page read and write
13C56400000
heap
page read and write
149E000
heap
page read and write
3682000
heap
page read and write
229713E0000
heap
page read and write
452133B000
stack
page read and write
18023177000
unkown
page read and write
3613000
heap
page read and write
1802370E000
unkown
page read and write
A9D0AFC000
stack
page read and write
3D94000
heap
page read and write
1FEDE37C000
unkown
page read and write
1587CC10000
heap
page read and write
35EA000
heap
page read and write
1E77C90E000
unkown
page read and write
18023072000
unkown
page read and write
13C5668D000
unkown
page read and write
2D87000
heap
page read and write
3782000
heap
page read and write
1802317A000
unkown
page read and write
24B40EBA000
unkown
page read and write
13C56613000
unkown
page read and write
180230CC000
unkown
page read and write
3D70000
trusted library allocation
page read and write
3D78000
heap
page read and write
19271A20000
heap
page read and write
3EB5000
heap
page read and write
3E70000
heap
page read and write
180230E2000
unkown
page read and write
17EBBFB000
stack
page read and write
24CF4F40000
trusted library allocation
page read and write
1E77CE38000
unkown
page read and write
13C56700000
unkown
page read and write
24CFBFAA000
unkown
page read and write
19271D90000
heap
page read and write
3E51000
heap
page read and write
180230B2000
unkown
page read and write
3006000
heap
page read and write
24CFBF79000
unkown
page read and write
1E77C931000
unkown
page read and write
1420000
heap
page read and write
25A6E515000
heap
page read and write
18023161000
unkown
page read and write
180230A9000
unkown
page read and write
3E93000
heap
page read and write
3860000
trusted library allocation
page read and write
3779000
heap
page read and write
1FEDE3B7000
unkown
page read and write
24CFBEE9000
unkown
page read and write
13C56560000
unkown
page read and write
3EA7000
heap
page read and write
18023715000
unkown
page read and write
2FBF000
heap
page read and write
24CFC8A6000
unkown
page read and write
3E6B000
heap
page read and write
3EB1000
heap
page read and write
3E9D000
heap
page read and write
1FEDE39B000
unkown
page read and write
24CF81A2000
unkown
page read and write
5EB7CFD000
stack
page read and write
24CFC747000
unkown
page read and write
3E67000
heap
page read and write
3787000
heap
page read and write
39F0000
trusted library allocation
page read and write
307E000
heap
page read and write
3860000
trusted library allocation
page read and write
1E77C0DE000
unkown
page read and write
13C563F0000
heap
page read and write
24CFBF47000
unkown
page read and write
24B40E64000
unkown
page read and write
18023077000
unkown
page read and write
14BA000
heap
page read and write
22971450000
heap
page read and write
2D8B000
heap
page read and write
3E6A000
heap
page read and write
24CF4627000
unkown
page read and write
2F82000
heap
page read and write
1802318E000
unkown
page read and write
180230C6000
unkown
page read and write
302D000
heap
page read and write
DDE37E000
stack
page read and write
4090000
trusted library allocation
page read and write
5C932AB000
stack
page read and write
1587CCE1000
heap
page read and write
3E4B000
heap
page read and write
3E79000
heap
page read and write
260FFA50000
unkown
page read and write
3004000
heap
page read and write
24CFC590000
unkown
page read and write
180231C7000
unkown
page read and write
1E77C900000
unkown
page read and write
3F70000
trusted library allocation
page read and write
3D70000
trusted library allocation
page read and write
1E77C113000
unkown
page read and write
3682000
heap
page read and write
1802307B000
unkown
page read and write
24CFC902000
unkown
page read and write
3617000
heap
page read and write
3970000
trusted library allocation
page read and write
1435000
heap
page read and write
1424000
heap
page read and write
3EB1000
heap
page read and write
2D8A000
heap
page read and write
3D78000
heap
page read and write
3E57000
heap
page read and write
2D9A000
heap
page read and write
25A6E30E000
heap
page read and write
24CF464F000
unkown
page read and write
20672E50000
unkown
page read and write
2FA2000
heap
page read and write
16010618000
heap
page read and write
377B000
heap
page read and write
1475000
heap
page read and write
3769000
heap
page read and write
C0080FB000
stack
page read and write
3E58000
heap
page read and write
3077000
heap
page read and write
24CF4400000
heap
page read and write
25A6E2FF000
heap
page read and write
24CFC51C000
unkown
page read and write
4090000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
1FEDE3B2000
unkown
page read and write
24CFC8AA000
unkown
page read and write
3EF7000
heap
page read and write
24B40ECB000
unkown
page read and write
180230BB000
unkown
page read and write
C007EFF000
stack
page read and write
180231B9000
unkown
page read and write
24B40C80000
heap
page read and write
1FEDDAD6000
unkown
page read and write
24CFC8F3000
unkown
page read and write
3ECE000
heap
page read and write
1E77C14A000
unkown
page read and write
3019000
heap
page read and write
3684000
heap
page read and write
180231B3000
unkown
page read and write
18A25302000
unkown
page read and write
3670000
trusted library allocation
page read and write
1310000
heap
page read and write
24CF4390000
heap
page read and write
24CFC4A3000
unkown
page read and write
180231BA000
unkown
page read and write
3023000
heap
page read and write
1E77C910000
unkown
page read and write
3E84000
heap
page read and write
3776000
heap
page read and write
148D000
heap
page read and write
1451000
heap
page read and write
2F90000
heap
page read and write
F50000
unkown
page readonly
2F94000
heap
page read and write
24CFC8AD000
unkown
page read and write
18023602000
unkown
page read and write
3E77000
heap
page read and write
2D80000
heap
page read and write
1424000
heap
page read and write
F0F517E000
stack
page read and write
260FF920000
heap
page read and write
3ED2000
heap
page read and write
5C93BFC000
stack
page read and write
1FEDE3D1000
unkown
page read and write
F7AF5FB000
stack
page read and write
1FEDE39A000
unkown
page read and write
3E75000
heap
page read and write
5EB7EFC000
stack
page read and write
16010700000
trusted library allocation
page read and write
18023099000
unkown
page read and write
3E82000
heap
page read and write
1FEDDAED000
unkown
page read and write
3764000
heap
page read and write
18023188000
unkown
page read and write
3678000
heap
page read and write
3017000
heap
page read and write
3E58000
heap
page read and write
4521878000
stack
page read and write
1448000
heap
page read and write
2DDE000
heap
page read and write
18023128000
unkown
page read and write
1FEDDA6A000
unkown
page read and write
24CFBE00000
unkown
page read and write
1FEDDADF000
unkown
page read and write
3EA2000
heap
page read and write
3E94000
heap
page read and write
39F0000
trusted library allocation
page read and write
2CEAC930000
heap
page read and write
300E000
heap
page read and write
3E79000
heap
page read and write
2E68000
stack
page read and write
24CFC50F000
unkown
page read and write
4090000
trusted library allocation
page read and write
1409000
heap
page read and write
379F000
heap
page read and write
3EF4000
heap
page read and write
2FC2000
heap
page read and write
3767000
heap
page read and write
1409000
heap
page read and write
3D94000
heap
page read and write
3767000
heap
page read and write
3E5C000
heap
page read and write
3074000
heap
page read and write
378A000
heap
page read and write
3EDB000
heap
page read and write
24CFC400000
unkown
page read and write
1454000
heap
page read and write
3E64000
heap
page read and write
3D85000
heap
page read and write
3D84000
heap
page read and write
22971702000
unkown
page read and write
1E77BE90000
heap
page read and write
145B000
heap
page read and write
3E57000
heap
page read and write
3E8B000
heap
page read and write
143A000
heap
page read and write
3E62000
heap
page read and write
379F000
heap
page read and write
363E000
heap
page read and write
2D90000
heap
page read and write
1FEDE902000
unkown
page read and write
363A000
heap
page read and write
2F70000
trusted library allocation
page read and write
3E2B000
heap
page read and write
3787000
heap
page read and write
3684000
heap
page read and write
18023190000
unkown
page read and write
3864000
heap
page read and write
149E000
heap
page read and write
3E74000
heap
page read and write
18023084000
unkown
page read and write
2F96000
heap
page read and write
2D70000
heap
page read and write
2FA3000
heap
page read and write
1802315C000
unkown
page read and write
1407000
heap
page read and write
3860000
heap
page read and write
3E81000
heap
page read and write
3E70000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
2FB9000
heap
page read and write
2EEE000
stack
page read and write
1FEDE379000
unkown
page read and write
C0081F7000
stack
page read and write
1802316A000
unkown
page read and write
3E2E000
heap
page read and write
3E2A000
heap
page read and write
361E000
heap
page read and write
19271A75000
heap
page read and write
3677000
heap
page read and write
3E9C000
heap
page read and write
1FEDE900000
unkown
page read and write
35EA000
heap
page read and write
18A25202000
unkown
page read and write
24CF46E2000
unkown
page read and write
260FFA00000
unkown
page read and write
3E7C000
heap
page read and write
4090000
trusted library allocation
page read and write
3EAF000
heap
page read and write
18022DE0000
heap
page read and write
180230BC000
unkown
page read and write
1E77C09C000
unkown
page read and write
3684000
heap
page read and write
260FFA29000
unkown
page read and write
A9D087F000
stack
page read and write
1424000
heap
page read and write
1424000
heap
page read and write
3E5F000
heap
page read and write
2CEACA52000
unkown
page read and write
3EAA000
heap
page read and write
3023000
heap
page read and write
3682000
heap
page read and write
3E31000
heap
page read and write
5EB81FE000
stack
page read and write
2D80000
heap
page read and write
2F9C000
heap
page read and write
1450000
heap
page read and write
1802317B000
unkown
page read and write
24CFC8D3000
unkown
page read and write
3D70000
trusted library allocation
page read and write
2DD7000
heap
page read and write
1587CCE1000
heap
page read and write
3ECD000
heap
page read and write
24CF4613000
unkown
page read and write
1E77C084000
unkown
page read and write
180231CD000
unkown
page read and write
3D70000
trusted library allocation
page read and write
37A2000
heap
page read and write
3EA7000
heap
page read and write
18023171000
unkown
page read and write
260FF9B0000
unkown
page read and write
180230F2000
unkown
page read and write
24B40C10000
heap
page read and write
24CFC55C000
unkown
page read and write
13C5664B000
unkown
page read and write
F7AF6FF000
stack
page read and write
36DA6FE000
stack
page read and write
37AB000
heap
page read and write
2CA0000
heap
page read and write
3670000
heap
page read and write
F0F55FF000
stack
page read and write
2D82000
heap
page read and write
377B000
heap
page read and write
39F0000
trusted library allocation
page read and write
3E58000
heap
page read and write
377B000
heap
page read and write
4090000
trusted library allocation
page read and write
3F30000
trusted library allocation
page read and write
3EB1000
heap
page read and write
37A7000
heap
page read and write
3F30000
trusted library allocation
page read and write
24B41602000
unkown
page read and write
3E32000
heap
page read and write
1E77C92D000
unkown
page read and write
1E77C0B4000
unkown
page read and write
3F06000
heap
page read and write
2FA3000
heap
page read and write
367C000
heap
page read and write
18023149000
unkown
page read and write
DDE27E000
stack
page read and write
1E77CD50000
remote allocation
page read and write
DDDF4B000
stack
page read and write
24B40F02000
unkown
page read and write
302D000
heap
page read and write
20672F08000
unkown
page read and write
3EFA000
heap
page read and write
1802308A000
unkown
page read and write
3E70000
heap
page read and write
3685000
heap
page read and write
1E77C94B000
unkown
page read and write
180231C6000
unkown
page read and write
20673602000
unkown
page read and write
AE6A7D000
stack
page read and write
B1FC35E000
stack
page read and write
3D7C000
heap
page read and write
1FEDE39B000
unkown
page read and write
18023154000
unkown
page read and write
1E77C96D000
unkown
page read and write
24CFC498000
unkown
page read and write
1479000
heap
page read and write
1587CCE1000
heap
page read and write
1E77C929000
unkown
page read and write
2F70000
trusted library allocation
page read and write
3670000
trusted library allocation
page read and write
3EAA000
heap
page read and write
13C5665D000
unkown
page read and write
3E5F000
heap
page read and write
13C56713000
unkown
page read and write
4190000
trusted library allocation
page read and write
13C56702000
unkown
page read and write
13C5665D000
unkown
page read and write
18023168000
unkown
page read and write
18A24A2A000
unkown
page read and write
3686000
heap
page read and write
1FEDE3D1000
unkown
page read and write
3E6E000
heap
page read and write
145B000
heap
page read and write
24CF811F000
unkown
page read and write
3E62000
heap
page read and write
180230BD000
unkown
page read and write
16010850000
heap
page read and write
1FEDE365000
unkown
page read and write
69E5B0F000
stack
page read and write
1802303E000
unkown
page read and write
18023113000
unkown
page read and write
3782000
heap
page read and write
3E94000
heap
page read and write
1479000
heap
page read and write
260FFA4E000
unkown
page read and write
180230E6000
unkown
page read and write
35E3000
heap
page read and write
260FFA3C000
unkown
page read and write
1FEDDA4B000
unkown
page read and write
1FEDE3D3000
unkown
page read and write
3E54000
heap
page read and write
378C000
heap
page read and write
1419000
heap
page read and write
24CF4530000
trusted library allocation
page read and write
2FB3000
heap
page read and write
140E000
heap
page read and write
3773000
heap
page read and write
24CF4726000
unkown
page read and write
3D70000
heap
page read and write
180231AB000
unkown
page read and write
A9D09FF000
stack
page read and write
24CFBE14000
unkown
page read and write
3E3B000
heap
page read and write
1E77C970000
unkown
page read and write
3670000
heap
page read and write
3F50000
trusted library allocation
page read and write
3D84000
heap
page read and write
24CFC5DE000
unkown
page read and write
3070000
heap
page read and write
2FB3000
heap
page read and write
3D70000
trusted library allocation
page read and write
3F30000
trusted library allocation
page read and write
145B000
heap
page read and write
1587CCA9000
heap
page read and write
3E52000
heap
page read and write
18023013000
unkown
page read and write
3F50000
trusted library allocation
page read and write
24CF4768000
unkown
page read and write
1FEDDA50000
unkown
page read and write
24CFC7E6000
unkown
page read and write
3E6A000
heap
page read and write
3F30000
trusted library allocation
page read and write
260FFA45000
unkown
page read and write
3E25000
heap
page read and write
18023732000
unkown
page read and write
2DD0000
heap
page read and write
148D000
heap
page read and write
35EB000
heap
page read and write
17EBCFB000
stack
page read and write
2DD7000
heap
page read and write
180230E4000
unkown
page read and write
1448000
heap
page read and write
1782A629000
unkown
page read and write
180230F0000
unkown
page read and write
24CFC70E000
unkown
page read and write
1477000
heap
page read and write
13C56648000
unkown
page read and write
3EC2000
heap
page read and write
3E6E000
heap
page read and write
3787000
heap
page read and write
1416000
heap
page read and write
24CFC684000
unkown
page read and write
1FEDE35F000
unkown
page read and write
180230E1000
unkown
page read and write
18A24A3D000
unkown
page read and write
5EB6F6A000
stack
page read and write
2F9E000
heap
page read and write
1438000
heap
page read and write
18A24980000
heap
page read and write
AE656B000
stack
page read and write
20672E53000
unkown
page read and write
3014000
heap
page read and write
1472000
heap
page read and write
180231E1000
unkown
page read and write
3E83000
heap
page read and write
3684000
heap
page read and write
1435000
heap
page read and write
12D0000
heap
page read and write
1587CCA0000
heap
page read and write
2D8E000
heap
page read and write
24CFBE8E000
unkown
page read and write
13C5664E000
unkown
page read and write
1E77C032000
unkown
page read and write
144A000
heap
page read and write
5EB7DFD000
stack
page read and write
3F06000
heap
page read and write
22971700000
unkown
page read and write
1FEDE3A6000
unkown
page read and write
3023000
heap
page read and write
18023773000
unkown
page read and write
3772000
heap
page read and write
5EB79F9000
stack
page read and write
16010855000
heap
page read and write
2F7C000
heap
page read and write
14A5000
heap
page read and write
1FEDD910000
heap
page read and write
2D90000
heap
page read and write
14A0000
heap
page read and write
376C000
heap
page read and write
3D84000
heap
page read and write
3E8D000
heap
page read and write
24CFC82F000
unkown
page read and write
13C5666F000
unkown
page read and write
302D000
heap
page read and write
3E6A000
heap
page read and write
146F000
heap
page read and write
2F6A000
stack
page read and write
18023110000
unkown
page read and write
2D90000
heap
page read and write
1FEDE3A5000
unkown
page read and write
2FBE000
heap
page read and write
180231CE000
unkown
page read and write
13C5667C000
unkown
page read and write
2D9A000
heap
page read and write
3E8D000
heap
page read and write
24CFBEF6000
unkown
page read and write
18023116000
unkown
page read and write
24B40C20000
heap
page read and write
24CFC405000
unkown
page read and write
25A6E2F0000
heap
page read and write
146F000
heap
page read and write
180239B0000
remote allocation
page read and write
1E77C929000
unkown
page read and write
361A000
heap
page read and write
363B000
heap
page read and write
141F000
heap
page read and write
180239B0000
remote allocation
page read and write
20672E29000
unkown
page read and write
12F0000
remote allocation
page read and write
3670000
trusted library allocation
page read and write
3670000
trusted library allocation
page read and write
1FEDE37C000
unkown
page read and write
3E67000
heap
page read and write
361A000
heap
page read and write
3633000
heap
page read and write
2DD0000
heap
page read and write
3EC4000
heap
page read and write
1FEDE3A7000
unkown
page read and write
1E77C95A000
unkown
page read and write
DDE47F000
stack
page read and write
22971678000
unkown
page read and write
1587CAB0000
heap
page read and write
1802312B000
unkown
page read and write
1437000
heap
page read and write
1475000
heap
page read and write
180230B3000
unkown
page read and write
1E77C102000
unkown
page read and write
3E84000
heap
page read and write
4D918FA000
stack
page read and write
3E6B000
heap
page read and write
1FEDD900000
heap
page read and write
376A000
heap
page read and write
300C000
heap
page read and write
1420000
heap
page read and write
3E64000
heap
page read and write
3F70000
trusted library allocation
page read and write
3E74000
heap
page read and write
3633000
heap
page read and write
1E77C802000
unkown
page read and write
3D8D000
heap
page read and write
1E77C093000
unkown
page read and write
3F00000
heap
page read and write
1448000
heap
page read and write
25A6E2F0000
heap
page read and write
1409000
heap
page read and write
300D000
heap
page read and write
1456000
heap
page read and write
24CFC91D000
unkown
page read and write
3E30000
heap
page read and write
1E77BFF0000
unkown
page read and write
1802316F000
unkown
page read and write
3E71000
heap
page read and write
3D70000
heap
page read and write
24B40E00000
unkown
page read and write
1802319E000
unkown
page read and write
1E77C08C000
unkown
page read and write
2D8A000
heap
page read and write
3970000
trusted library allocation
page read and write
3677000
heap
page read and write
3754000
heap
page read and write
3682000
heap
page read and write
1E77C957000
unkown
page read and write
24CF43A0000
heap
page read and write
69E5E79000
stack
page read and write
3E55000
heap
page read and write
1802319D000
unkown
page read and write
18023196000
unkown
page read and write
1802308B000
unkown
page read and write
5EB7FFF000
stack
page read and write
3E5B000
heap
page read and write
69E5F7E000
stack
page read and write
3E70000
trusted library allocation
page read and write
3E24000
heap
page read and write
24CFC553000
unkown
page read and write
3E58000
heap
page read and write
3D70000
heap
page read and write
180231B7000
unkown
page read and write
1FEDE190000
remote allocation
page read and write
3D86000
heap
page read and write
386E000
heap
page read and write
B1FC97E000
stack
page read and write
3F30000
trusted library allocation
page read and write
3D82000
heap
page read and write
2FB9000
heap
page read and write
24CF4540000
trusted library allocation
page read and write
1E77C92E000
unkown
page read and write
3D70000
trusted library allocation
page read and write
1E77C92A000
unkown
page read and write
16010604000
heap
page read and write
3785000
heap
page read and write
4080000
heap
page read and write
3D88000
heap
page read and write
3E93000
heap
page read and write
2FC0000
heap
page read and write
2F70000
heap
page read and write
F50000
unkown
page readonly
1802313A000
unkown
page read and write
180230A3000
unkown
page read and write
3E6A000
heap
page read and write
1782A613000
unkown
page read and write
180231BC000
unkown
page read and write
1435000
heap
page read and write
1E77C98B000
unkown
page read and write
18A25300000
unkown
page read and write
1FEDDAF8000
unkown
page read and write
307A000
heap
page read and write
39F0000
trusted library allocation
page read and write
4090000
trusted library allocation
page read and write
1802306F000
unkown
page read and write
1802309C000
unkown
page read and write
24CF470B000
unkown
page read and write
260FF910000
heap
page read and write
160105A0000
heap
page read and write
1802311B000
unkown
page read and write
20672E8A000
unkown
page read and write
3017000
heap
page read and write
17EBA7D000
stack
page read and write
22971713000
unkown
page read and write
69E5FFA000
stack
page read and write
147B000
heap
page read and write
20672E70000
unkown
page read and write
2F70000
heap
page read and write
3E71000
heap
page read and write
3E84000
heap
page read and write
2D6F000
stack
page read and write
3670000
trusted library allocation
page read and write
3E82000
heap
page read and write
260FFB00000
unkown
page read and write
39F0000
trusted library allocation
page read and write
3767000
heap
page read and write
3670000
trusted library allocation
page read and write
22971648000
unkown
page read and write
24CFC886000
unkown
page read and write
180235A0000
unkown
page read and write
25A6E3D0000
heap
page read and write
24CFC8AA000
unkown
page read and write
1473000
heap
page read and write
3004000
heap
page read and write
18A25314000
unkown
page read and write
180231AC000
unkown
page read and write
3EC7000
heap
page read and write
3D82000
heap
page read and write
18023156000
unkown
page read and write
1E77C0A3000
unkown
page read and write
3E5D000
heap
page read and write
2D90000
heap
page read and write
2FBF000
heap
page read and write
3686000
heap
page read and write
24CF46FD000
unkown
page read and write
5C939FB000
stack
page read and write
3F70000
trusted library allocation
page read and write
2D70000
heap
page read and write
1FEDE392000
unkown
page read and write
1802317F000
unkown
page read and write
3784000
heap
page read and write
3006000
heap
page read and write
376E000
heap
page read and write
24CF8002000
unkown
page read and write
4091000
heap
page read and write
1409000
heap
page read and write
302A000
heap
page read and write
1409000
heap
page read and write
1587E670000
heap
page read and write
143A000
heap
page read and write
367C000
heap
page read and write
19271A60000
heap
page read and write
143A000
heap
page read and write
3750000
heap
page read and write
1FEDE37D000
unkown
page read and write
12F0000
remote allocation
page read and write
39F0000
trusted library allocation
page read and write
18023084000
unkown
page read and write
1E77C90E000
unkown
page read and write
2FA3000
heap
page read and write
180231D8000
unkown
page read and write
3023000
heap
page read and write
18023131000
unkown
page read and write
3E71000
heap
page read and write
1782A702000
unkown
page read and write
3E6A000
heap
page read and write
260FFB08000
unkown
page read and write
1477000
heap
page read and write
3D82000
heap
page read and write
3E77000
heap
page read and write
3670000
trusted library allocation
page read and write
1FEDE37D000
unkown
page read and write
3682000
heap
page read and write
260FFA2C000
unkown
page read and write
180230DA000
unkown
page read and write
3E3E000
heap
page read and write
180230CE000
unkown
page read and write
3EEB000
heap
page read and write
3021000
heap
page read and write
1587CCC1000
heap
page read and write
24CF8100000
unkown
page read and write
39F0000
trusted library allocation
page read and write
1479000
heap
page read and write
4D9128B000
stack
page read and write
3D85000
heap
page read and write
3E9D000
heap
page read and write
3E75000
heap
page read and write
1FEDE800000
unkown
page read and write
18023151000
unkown
page read and write
3E5B000
heap
page read and write
24CF46F9000
unkown
page read and write
18023719000
unkown
page read and write
20672E13000
unkown
page read and write
3E4B000
heap
page read and write
3E5E000
heap
page read and write
DDE3FF000
stack
page read and write
18023186000
unkown
page read and write
14A7000
heap
page read and write
36DA4FE000
stack
page read and write
3D84000
heap
page read and write
18023095000
unkown
page read and write
3E54000
heap
page read and write
3F70000
trusted library allocation
page read and write
3006000
heap
page read and write
3E51000
heap
page read and write
3E4B000
heap
page read and write
18A2532B000
unkown
page read and write
DDDFCE000
stack
page read and write
25A6E2E6000
heap
page read and write
3D70000
trusted library allocation
page read and write
3E98000
heap
page read and write
1450000
heap
page read and write
24CF46C5000
unkown
page read and write
24CFBF28000
unkown
page read and write
24B40E87000
unkown
page read and write
3F00000
heap
page read and write
1FEDE377000
unkown
page read and write
2297168B000
unkown
page read and write
24CFC8F7000
unkown
page read and write
4213E7F000
stack
page read and write
3006000
heap
page read and write
3E5D000
heap
page read and write
2DD0000
heap
page read and write
3E57000
heap
page read and write
1FEDE3C8000
unkown
page read and write
3787000
heap
page read and write
4521B7B000
stack
page read and write
20672E4C000
unkown
page read and write
3EFE000
heap
page read and write
1E77CE00000
unkown
page read and write
1FEDDAAF000
unkown
page read and write
3D94000
heap
page read and write
3677000
heap
page read and write
180231A0000
unkown
page read and write
180231DE000
unkown
page read and write
2FA3000
heap
page read and write
13C56708000
unkown
page read and write
378A000
heap
page read and write
2D92000
heap
page read and write
24CFBEFD000
unkown
page read and write
4090000
trusted library allocation
page read and write
1802308E000
unkown
page read and write
A9D047E000
stack
page read and write
24CFC78F000
unkown
page read and write
3006000
heap
page read and write
1477000
heap
page read and write
3E7C000
heap
page read and write
378A000
heap
page read and write
3E70000
trusted library allocation
page read and write
302D000
heap
page read and write
3684000
heap
page read and write
3D84000
heap
page read and write
There are 2151 hidden memdumps, click here to show them.