Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
MALWARE ACH WIRE PAYMENT ADVICE..xlsx
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\ZlFRrg5s[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\ZlFRrg5s[2].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ZlFRrg5s[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ZlFRrg5s[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\EQAWN5DV\24mbw17feyn.typeform[1].xml
|
ASCII text, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FC4D58EE-5634-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{06866D36-5635-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FC4D58F0-5634-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FC4D58F1-5634-11EB-90E5-ECF4BB2D2496}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\wlm7n14\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\E9D02DAF-639A-4CA7-B004-139D7F3D657E
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\79E5A9C2.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 816x1056,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\aa6e0ec721[1].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\large[1].jpg
|
JPEG image data, baseline, precision 8, 1920x1080, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\nr-1123.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\LnkQ4hGmxTTD[1].png
|
PNG image data, 131 x 109, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\aa6e0ec721[1].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\favicon-32x32[1].png
|
PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF51C6581021C56EF5.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFDFF887D055A021F6.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEEEF4F44F2D8283B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF6F9769A935F1716.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$MALWARE ACH WIRE PAYMENT ADVICE..xlsx
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\24mbw17feyn.typeform[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{06357C73-5634-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0B7414B4-5634-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{06357C75-5634-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0B7414B6-5634-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0B7414B7-5634-11EB-ADCF-ECF4BBB5915B}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\lr5drzg\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\favicon[1].ico
|
PNG image data, 16 x 16, 4-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\LnkQ4hGmxTTD[1].png
|
PNG image data, 131 x 109, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\favicon-32x32[1].png
|
PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\urlblockindex[1].bin
|
data
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\aa6e0ec721[1].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\aa6e0ec721[2].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\large[1].jpg
|
JPEG image data, baseline, precision 8, 1920x1080, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\nr-1123.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B24727B2.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 816x1056,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF0E06319D83AC7A0C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF37DFCB5A035E701F.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF603759FFBDDCD7CD.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFE817CF54CF726A92.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF6708434B88E8000.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\BPMGT7B2.txt
|
ASCII text
|
downloaded
|
|
There are 46 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6796 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6796 CREDAT:82946 /prefetch:2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2528 CREDAT:275457 /prefetch:2
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' https://24mbw17feyn.typeform.com/to/ZlFRrg5s
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1836 CREDAT:275457 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.typeform.com/?utm_campaign=undefined&utm_source=typeform.com-17520522-Free&utm_medium=typeform&utm_content=typeform-closescreen&utm_term=EN
|
|
||
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/favicon-16x16.png
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/browserconfig.xml
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/site.webmanifest
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/apple-touch-icon.png
|
unknown
|
|
|
|
https://www.typeform.c
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5sRoot
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://www.typeform.com/?utm_campaign=undefined&utm_source=typeform.com-17520522-Free&utm_medium=ty
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/oembed?url=https%3A%2F%2F24mbw17feyn.typeform.com%2Fto%2FZlFRrg5s
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://images.typeform.com/images/nXkRcNPp6wtg/background/large);background-position:top
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/favicon-32x32.png-
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://www.typeform.com/?utm_campaign=undefined&utm_source=typeform.com-17520522-Free&utm_m
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/favicon-32x32.png
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s6MlCR0S0FT
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s
|
|
||
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://images.typeform.com/images/CJr828dpN5yQ/image/default
|
unknown
|
|
|
|
https://images.typeform.com/images/nXkRcNPp6wtg/background/large
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/safari-pinned-tab.svg
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s6om/?utm_campaign=undefined&utm_sorm.com/to/ZlFRrg5s
|
unknown
|
|
|
|
https://24mbw17feyn.ty
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s6peform.com/to/ZlFRrg5sRoot
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s6Root
|
unknown
|
|
|
|
https://images.typeform.com/images/FYUps4mFKPYK/image/default
|
unknown
|
|
|
|
https://public-assets.typeform.com/public/favicon/favicon.ico
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5sz
|
unknown
|
|
|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s/favicon-32x32.png
|
unknown
|
|
There are 101 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
d2nvsmtq2poimt.cloudfront.net
|
65.9.58.100
|
|
|
|
bam.nr-data.net
|
162.247.242.19
|
|
|
|
d2p6vz8nayi9a3.cloudfront.net
|
65.9.58.120
|
|
|
|
public-assets.typeform.com
|
unknown
|
|
|
|
js-agent.newrelic.com
|
unknown
|
|
|
|
images.typeform.com
|
unknown
|
|
|
|
24mbw17feyn.typeform.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
65.9.58.100
|
unknown
|
United States
|
unknown
|
|
|
|
65.9.58.120
|
unknown
|
United States
|
unknown
|
|
|
|
162.247.242.19
|
unknown
|
United States
|
unknown
|
|
|
|
162.247.242.18
|
unknown
|
United States
|
unknown
|
|
|
|
162.247.242.20
|
unknown
|
United States
|
unknown
|
|
|
|
65.9.58.89
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
i6;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
j6;
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27258
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
?';
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
35074
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
35323
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseRWHlinkNavigation
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
{FC4D58EE-5634-11EB-90E5-ECF4BB2D2496}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
l!2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED04A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
=&2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F3312
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F34F5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseRWHlinkNavigation
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
{06357C73-5634-11EB-ADCF-ECF4BBB5915B}
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
ChangeNotice
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateLowDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateHighDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateLowDateTime
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
NextCheckForUpdateHighDateTime
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Blob
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
{0B7414B4-5634-11EB-ADCF-ECF4BBB5915B}
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Window_Placement
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\Internet Explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
SavedLegacySettings
|
|
There are 207 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2719DEB000
|
unkown
|
page read and write
|
|
|
|
7FF52AB9D000
|
unkown
|
page readonly
|
|
|
|
7FF554FFA000
|
unkown
|
page readonly
|
|
|
|
1FACCF2B000
|
unkown
|
page read and write
|
|
|
|
16E904BD000
|
unkown
|
page read and write
|
|
|
|
7FF552BBD000
|
unkown
|
page readonly
|
|
|
|
1C14A480000
|
unkown
|
page readonly
|
|
|
|
2A620802000
|
unkown
|
page read and write
|
|
|
|
7FF5B2595000
|
unkown
|
page readonly
|
|
|
|
7FF5529EF000
|
unkown
|
page readonly
|
|
|
|
7FF52AB34000
|
unkown
|
page readonly
|
|
|
|
2A620740000
|
unkown
|
page read and write
|
|
|
|
7FF5EFCDA000
|
unkown
|
page readonly
|
|
|
|
7FF5B24AA000
|
unkown
|
page readonly
|
|
|
|
2A62569E000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
1648465A000
|
unkown
|
page read and write
|
|
|
|
16596972000
|
unkown
|
page read and write
|
|
|
|
16596B75000
|
heap private
|
page read and write
|
|
|
|
1FACCF6D000
|
unkown
|
page read and write
|
|
|
|
7FF5C281A000
|
unkown
|
page readonly
|
|
|
|
7FF52ABA7000
|
unkown
|
page readonly
|
|
|
|
2A620913000
|
unkown
|
page read and write
|
|
|
|
7FF5EFC15000
|
unkown
|
page readonly
|
|
|
|
2A6256B8000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE24000
|
unkown
|
page readonly
|
|
|
|
7FF5EFF04000
|
unkown
|
page readonly
|
|
|
|
271A2FA000
|
unkown
|
page read and write
|
|
|
|
663FCFE000
|
unkown
|
page read and write
|
|
|
|
2A625940000
|
unkown
|
page read and write
|
|
|
|
7FF52AC57000
|
unkown
|
page readonly
|
|
|
|
16486983000
|
unkown
|
page read and write
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
16486A42000
|
unkown
|
page read and write
|
|
|
|
1E8C0B13000
|
unkown
|
page read and write
|
|
|
|
7FF5EFD58000
|
unkown
|
page readonly
|
|
|
|
7FF554BFA000
|
unkown
|
page readonly
|
|
|
|
16487310000
|
unkown
|
page read and write
|
|
|
|
1FACCF76000
|
unkown
|
page read and write
|
|
|
|
1C14A475000
|
heap private
|
page read and write
|
|
|
|
7FF52AA98000
|
unkown
|
page readonly
|
|
|
|
16E904D8000
|
unkown
|
page read and write
|
|
|
|
7FF5C004D000
|
unkown
|
page readonly
|
|
|
|
7FF52AB63000
|
unkown
|
page readonly
|
|
|
|
2A620918000
|
unkown
|
page read and write
|
|
|
|
2280A400000
|
unkown
|
page readonly
|
|
|
|
158EEA70000
|
unkown
|
page read and write
|
|
|
|
1FACCF2B000
|
unkown
|
page read and write
|
|
|
|
16486737000
|
unkown
|
page read and write
|
|
|
|
16596920000
|
unkown
|
page read and write
|
|
|
|
16596989000
|
unkown
|
page read and write
|
|
|
|
7FF5C29D7000
|
unkown
|
page readonly
|
|
|
|
7FF555027000
|
unkown
|
page readonly
|
|
|
|
576CD8F000
|
unkown
|
page read and write
|
|
|
|
165969A0000
|
unkown
|
page read and write
|
|
|
|
2A61FFE0000
|
unkown
|
page readonly
|
|
|
|
165969A0000
|
unkown
|
page read and write
|
|
|
|
7FF552467000
|
unkown
|
page readonly
|
|
|
|
7FF554F6D000
|
unkown
|
page readonly
|
|
|
|
1FACC4A0000
|
heap private
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
164844C0000
|
heap default
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
2A625937000
|
unkown
|
page write copy
|
|
|
|
7FF52AB96000
|
unkown
|
page readonly
|
|
|
|
FCF28FF000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
1FACCF40000
|
unkown
|
page read and write
|
|
|
|
4393DFF000
|
unkown
|
page read and write
|
|
|
|
16486A82000
|
unkown
|
page read and write
|
|
|
|
16484774000
|
unkown
|
page read and write
|
|
|
|
7FF5C0057000
|
unkown
|
page readonly
|
|
|
|
7FF5E87D2000
|
unkown
|
page readonly
|
|
|
|
1FACCF54000
|
unkown
|
page read and write
|
|
|
|
1C14A990000
|
unkown
|
page readonly
|
|
|
|
158EEA3C000
|
unkown
|
page read and write
|
|
|
|
7FF5E86E3000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A76000
|
unkown
|
page readonly
|
|
|
|
1FACCF33000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF554D4B000
|
unkown
|
page readonly
|
|
|
|
7FF5C2258000
|
unkown
|
page readonly
|
|
|
|
7FF56A1B6000
|
unkown
|
page readonly
|
|
|
|
7FF52AB07000
|
unkown
|
page readonly
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF52AB7A000
|
unkown
|
page readonly
|
|
|
|
7FF5C0054000
|
unkown
|
page readonly
|
|
|
|
43935FC000
|
unkown
|
page read and write
|
|
|
|
16E92370000
|
unkown
|
page read and write
|
|
|
|
7FF554CFF000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D9B000
|
unkown
|
page readonly
|
|
|
|
7FF4F644A000
|
unkown
|
page readonly
|
|
|
|
C43647F000
|
unkown
|
page read and write
|
|
|
|
16484683000
|
unkown
|
page read and write
|
|
|
|
1FACCD20000
|
unkown
|
page read and write
|
|
|
|
576CC8A000
|
unkown
|
page read and write
|
|
|
|
229BC560000
|
unkown
|
page read and write
|
|
|
|
2280A200000
|
unkown
|
page read and write
|
|
|
|
1FACCF22000
|
unkown
|
page read and write
|
|
|
|
7FF5E841A000
|
unkown
|
page readonly
|
|
|
|
229BC62A000
|
unkown
|
page read and write
|
|
|
|
7FF5EFAEF000
|
unkown
|
page readonly
|
|
|
|
1E8C0990000
|
unkown
|
page readonly
|
|
|
|
7FF5EFD36000
|
unkown
|
page readonly
|
|
|
|
7FF5C2833000
|
unkown
|
page readonly
|
|
|
|
1FACC649000
|
unkown
|
page read and write
|
|
|
|
158EE9D0000
|
unkown
|
page readonly
|
|
|
|
271A17A000
|
unkown
|
page read and write
|
|
|
|
16E903B0000
|
unkown
|
page write copy
|
|
|
|
7FF4F6446000
|
unkown
|
page readonly
|
|
|
|
16E923A0000
|
unkown
|
page readonly
|
|
|
|
499187E000
|
unkown
|
page read and write
|
|
|
|
16E92513000
|
unkown
|
page read and write
|
|
|
|
16596988000
|
unkown
|
page read and write
|
|
|
|
7FF52AB76000
|
unkown
|
page readonly
|
|
|
|
7FF552C37000
|
unkown
|
page readonly
|
|
|
|
158EEB08000
|
unkown
|
page read and write
|
|
|
|
16E90340000
|
heap private
|
page read and write
|
|
|
|
7FF5940E3000
|
unkown
|
page readonly
|
|
|
|
271AA7B000
|
unkown
|
page read and write
|
|
|
|
16E908D0000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A34000
|
unkown
|
page readonly
|
|
|
|
7FF5EFEF4000
|
unkown
|
page readonly
|
|
|
|
23CA5902000
|
unkown
|
page read and write
|
|
|
|
1FACCF87000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DC6000
|
unkown
|
page readonly
|
|
|
|
7FF5941D7000
|
unkown
|
page readonly
|
|
|
|
23CA5829000
|
unkown
|
page read and write
|
|
|
|
7FF5B26D4000
|
unkown
|
page readonly
|
|
|
|
229BD000000
|
unkown
|
page readonly
|
|
|
|
1FACCD30000
|
unkown
|
page read and write
|
|
|
|
7FF55299F000
|
unkown
|
page readonly
|
|
|
|
2A625661000
|
unkown
|
page read and write
|
|
|
|
7FF569A11000
|
unkown
|
page readonly
|
|
|
|
7FF5E8787000
|
unkown
|
page readonly
|
|
|
|
2A621490000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE72000
|
unkown
|
page readonly
|
|
|
|
2A625990000
|
unkown
|
page readonly
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
7FF554F4A000
|
unkown
|
page readonly
|
|
|
|
16E91F90000
|
unkown
|
page readonly
|
|
|
|
1FACCD20000
|
unkown
|
page read and write
|
|
|
|
1F79FC00000
|
unkown
|
page readonly
|
|
|
|
271A57B000
|
unkown
|
page read and write
|
|
|
|
1FACCF39000
|
unkown
|
page read and write
|
|
|
|
2A625900000
|
unkown
|
page read and write
|
|
|
|
16486983000
|
unkown
|
page read and write
|
|
|
|
1FACCF2D000
|
unkown
|
page read and write
|
|
|
|
7FF5E86FA000
|
unkown
|
page readonly
|
|
|
|
7FF4F6477000
|
unkown
|
page readonly
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
16487410000
|
unkown
|
page read and write
|
|
|
|
7FF5C264E000
|
unkown
|
page readonly
|
|
|
|
7FF52AB27000
|
unkown
|
page readonly
|
|
|
|
229BC460000
|
heap default
|
page read and write
|
|
|
|
7FF52A97F000
|
unkown
|
page readonly
|
|
|
|
271A97B000
|
unkown
|
page read and write
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D87000
|
unkown
|
page readonly
|
|
|
|
313277B000
|
unkown
|
page read and write
|
|
|
|
7FF5C0092000
|
unkown
|
page readonly
|
|
|
|
7FF552C2D000
|
unkown
|
page readonly
|
|
|
|
16486792000
|
unkown
|
page read and write
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
7FF5C28C8000
|
unkown
|
page readonly
|
|
|
|
7FF5C2948000
|
unkown
|
page readonly
|
|
|
|
1FACC613000
|
unkown
|
page read and write
|
|
|
|
229BC800000
|
unkown
|
page readonly
|
|
|
|
7FF5E86D1000
|
unkown
|
page readonly
|
|
|
|
576D17E000
|
unkown
|
page read and write
|
|
|
|
229BC702000
|
unkown
|
page read and write
|
|
|
|
7FF5B24D7000
|
unkown
|
page readonly
|
|
|
|
7FF593DAA000
|
unkown
|
page readonly
|
|
|
|
16E904EB000
|
unkown
|
page read and write
|
|
|
|
5CDE07E000
|
unkown
|
page read and write
|
|
|
|
7FF5C2755000
|
unkown
|
page readonly
|
|
|
|
7FF52A447000
|
unkown
|
page readonly
|
|
|
|
7FF5C230A000
|
unkown
|
page readonly
|
|
|
|
1E8C0A13000
|
unkown
|
page read and write
|
|
|
|
7FF5EF6E1000
|
unkown
|
page readonly
|
|
|
|
7FF52A9EA000
|
unkown
|
page readonly
|
|
|
|
164867AF000
|
unkown
|
page read and write
|
|
|
|
7FF5C006A000
|
unkown
|
page readonly
|
|
|
|
FCF297F000
|
unkown
|
page read and write
|
|
|
|
7FF5B26C7000
|
unkown
|
page readonly
|
|
|
|
16484613000
|
unkown
|
page read and write
|
|
|
|
16596A60000
|
unkown
|
page readonly
|
|
|
|
7FF4F63A5000
|
unkown
|
page readonly
|
|
|
|
158EEB02000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D02000
|
unkown
|
page readonly
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
16484730000
|
unkown
|
page read and write
|
|
|
|
7FF555022000
|
unkown
|
page readonly
|
|
|
|
7FF52AC46000
|
unkown
|
page readonly
|
|
|
|
16486900000
|
unkown
|
page read and write
|
|
|
|
7FF593EAF000
|
unkown
|
page readonly
|
|
|
|
BFF1F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A87000
|
unkown
|
page readonly
|
|
|
|
1FACC5E0000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE41000
|
unkown
|
page readonly
|
|
|
|
3132675000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFD6000
|
unkown
|
page readonly
|
|
|
|
2A625908000
|
unkown
|
page read and write
|
|
|
|
7FF4F64D4000
|
unkown
|
page readonly
|
|
|
|
16E90429000
|
unkown
|
page read and write
|
|
|
|
C4362FE000
|
unkown
|
page read and write
|
|
|
|
7FF5B2703000
|
unkown
|
page readonly
|
|
|
|
663FC77000
|
unkown
|
page read and write
|
|
|
|
663FA7E000
|
unkown
|
page read and write
|
|
|
|
229BC678000
|
unkown
|
page read and write
|
|
|
|
1F79FB02000
|
unkown
|
page read and write
|
|
|
|
16E90487000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DD2000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFC2000
|
unkown
|
page readonly
|
|
|
|
1FACCD20000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C55000
|
unkown
|
page readonly
|
|
|
|
2A625574000
|
unkown
|
page read and write
|
|
|
|
164846C6000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
16486430000
|
heap private
|
page read and write
|
|
|
|
7FF5E7FFE000
|
unkown
|
page readonly
|
|
|
|
1FACC6C3000
|
unkown
|
page read and write
|
|
|
|
7FF552B54000
|
unkown
|
page readonly
|
|
|
|
1FACC69F000
|
unkown
|
page read and write
|
|
|
|
7FF5BFE0F000
|
unkown
|
page readonly
|
|
|
|
7FF5B0CE3000
|
unkown
|
page readonly
|
|
|
|
7FF5EF9C3000
|
unkown
|
page readonly
|
|
|
|
7FF554FE4000
|
unkown
|
page readonly
|
|
|
|
7FF5E8681000
|
unkown
|
page readonly
|
|
|
|
7FF5EFDF5000
|
unkown
|
page readonly
|
|
|
|
7FF52AC07000
|
unkown
|
page readonly
|
|
|
|
7FF554E38000
|
unkown
|
page readonly
|
|
|
|
FCF267B000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF52AC17000
|
unkown
|
page readonly
|
|
|
|
2A620902000
|
unkown
|
page read and write
|
|
|
|
C435F7F000
|
unkown
|
page read and write
|
|
|
|
7FF554817000
|
unkown
|
page readonly
|
|
|
|
7FF5C2843000
|
unkown
|
page readonly
|
|
|
|
C43677A000
|
unkown
|
page read and write
|
|
|
|
271A37A000
|
unkown
|
page read and write
|
|
|
|
16E92300000
|
unkown
|
page readonly
|
|
|
|
229BC64B000
|
unkown
|
page read and write
|
|
|
|
7FF5529B0000
|
unkown
|
page readonly
|
|
|
|
1FACC688000
|
unkown
|
page read and write
|
|
|
|
158EEC00000
|
unkown
|
page readonly
|
|
|
|
7FF5C297F000
|
unkown
|
page readonly
|
|
|
|
1FACCF22000
|
unkown
|
page read and write
|
|
|
|
7FF5B2636000
|
unkown
|
page readonly
|
|
|
|
1FACCF36000
|
unkown
|
page read and write
|
|
|
|
1FACD000000
|
unkown
|
page readonly
|
|
|
|
940F9FA000
|
unkown
|
page read and write
|
|
|
|
16E90478000
|
unkown
|
page read and write
|
|
|
|
7FF52AB6D000
|
unkown
|
page readonly
|
|
|
|
7FF594187000
|
unkown
|
page readonly
|
|
|
|
7FF52A467000
|
unkown
|
page readonly
|
|
|
|
16486812000
|
unkown
|
page read and write
|
|
|
|
C43657F000
|
unkown
|
page read and write
|
|
|
|
2A625616000
|
unkown
|
page read and write
|
|
|
|
16486490000
|
unkown
|
page read and write
|
|
|
|
158EEA27000
|
unkown
|
page read and write
|
|
|
|
7FF4F6316000
|
unkown
|
page readonly
|
|
|
|
1C14A4D0000
|
unkown
|
page readonly
|
|
|
|
1F79FA3C000
|
unkown
|
page read and write
|
|
|
|
2A62592C000
|
unkown
|
page readonly
|
|
|
|
1FACC6EA000
|
unkown
|
page read and write
|
|
|
|
4991AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C272D000
|
unkown
|
page readonly
|
|
|
|
1F79FCD0000
|
unkown
|
page readonly
|
|
|
|
940FB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C29A6000
|
unkown
|
page readonly
|
|
|
|
7FF593D98000
|
unkown
|
page readonly
|
|
|
|
1F7A0740000
|
unkown
|
page readonly
|
|
|
|
1F79FB13000
|
unkown
|
page read and write
|
|
|
|
164844D0000
|
unkown
|
page readonly
|
|
|
|
7FF5940FA000
|
unkown
|
page readonly
|
|
|
|
16E904F1000
|
unkown
|
page read and write
|
|
|
|
7FF5E8702000
|
unkown
|
page readonly
|
|
|
|
7FF5EFB0F000
|
unkown
|
page readonly
|
|
|
|
7FF5B2381000
|
unkown
|
page readonly
|
|
|
|
7FF5941C6000
|
unkown
|
page readonly
|
|
|
|
7FF554F77000
|
unkown
|
page readonly
|
|
|
|
7FF5C29C6000
|
unkown
|
page readonly
|
|
|
|
16E90413000
|
unkown
|
page read and write
|
|
|
|
1FACCF2F000
|
unkown
|
page read and write
|
|
|
|
1FACC63A000
|
unkown
|
page read and write
|
|
|
|
1FACC702000
|
unkown
|
page read and write
|
|
|
|
2A625934000
|
unkown
|
page write copy
|
|
|
|
271AAFD000
|
unkown
|
page read and write
|
|
|
|
7FF5C2790000
|
unkown
|
page readonly
|
|
|
|
271A4FA000
|
unkown
|
page read and write
|
|
|
|
1648466A000
|
unkown
|
page read and write
|
|
|
|
7FF4F6330000
|
unkown
|
page readonly
|
|
|
|
7FF5EF7D9000
|
unkown
|
page readonly
|
|
|
|
7FF52AB01000
|
unkown
|
page readonly
|
|
|
|
16487210000
|
unkown
|
page read and write
|
|
|
|
7FF4F64D7000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D94000
|
unkown
|
page readonly
|
|
|
|
7FF56A22D000
|
unkown
|
page readonly
|
|
|
|
FCF27FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D84000
|
unkown
|
page readonly
|
|
|
|
164847B4000
|
unkown
|
page read and write
|
|
|
|
7FF5940F6000
|
unkown
|
page readonly
|
|
|
|
7FF5C2969000
|
unkown
|
page readonly
|
|
|
|
16484751000
|
unkown
|
page read and write
|
|
|
|
2280A26B000
|
unkown
|
page read and write
|
|
|
|
7FF5B0BE5000
|
unkown
|
page readonly
|
|
|
|
16E92360000
|
unkown
|
page readonly
|
|
|
|
7FF5E8729000
|
unkown
|
page readonly
|
|
|
|
2A625600000
|
unkown
|
page read and write
|
|
|
|
7FF554BF6000
|
unkown
|
page readonly
|
|
|
|
2A61FFF0000
|
unkown
|
page readonly
|
|
|
|
16487000000
|
unkown
|
page read and write
|
|
|
|
2A620959000
|
unkown
|
page read and write
|
|
|
|
7FF5B262D000
|
unkown
|
page readonly
|
|
|
|
16486C02000
|
unkown
|
page read and write
|
|
|
|
6640279000
|
unkown
|
page read and write
|
|
|
|
7FF552B83000
|
unkown
|
page readonly
|
|
|
|
271A5FA000
|
unkown
|
page read and write
|
|
|
|
7FF554FD4000
|
unkown
|
page readonly
|
|
|
|
16486836000
|
unkown
|
page read and write
|
|
|
|
7FF5EFC50000
|
unkown
|
page readonly
|
|
|
|
7FF5E8727000
|
unkown
|
page readonly
|
|
|
|
7FF5B26C4000
|
unkown
|
page readonly
|
|
|
|
1FACC500000
|
heap default
|
page read and write
|
|
|
|
2A620079000
|
unkown
|
page read and write
|
|
|
|
229BC602000
|
unkown
|
page read and write
|
|
|
|
2280A0E0000
|
unkown
|
page readonly
|
|
|
|
7FF5C27C0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0DD7000
|
unkown
|
page readonly
|
|
|
|
7FF552B21000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE20000
|
unkown
|
page readonly
|
|
|
|
2A625904000
|
unkown
|
page readonly
|
|
|
|
7FF5C0086000
|
unkown
|
page readonly
|
|
|
|
7FF5B0881000
|
unkown
|
page readonly
|
|
|
|
16596940000
|
unkown
|
page read and write
|
|
|
|
16486B82000
|
unkown
|
page read and write
|
|
|
|
16E922F0000
|
unkown
|
page read and write
|
|
|
|
31329FE000
|
unkown
|
page read and write
|
|
|
|
7FF552962000
|
unkown
|
page readonly
|
|
|
|
1FACCD00000
|
unkown
|
page readonly
|
|
|
|
7FF5C2297000
|
unkown
|
page readonly
|
|
|
|
4393AFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E8716000
|
unkown
|
page readonly
|
|
|
|
2A62008D000
|
unkown
|
page read and write
|
|
|
|
7FF56A277000
|
unkown
|
page readonly
|
|
|
|
7FF55299B000
|
unkown
|
page readonly
|
|
|
|
A4B297E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2623000
|
unkown
|
page readonly
|
|
|
|
7FF56A221000
|
unkown
|
page readonly
|
|
|
|
7FF4F64D1000
|
unkown
|
page readonly
|
|
|
|
7FF4F646D000
|
unkown
|
page readonly
|
|
|
|
16487310000
|
unkown
|
page read and write
|
|
|
|
229BCC60000
|
unkown
|
page readonly
|
|
|
|
2A61FFD0000
|
heap default
|
page read and write
|
|
|
|
2A620FE0000
|
unkown
|
page read and write
|
|
|
|
7FF52A736000
|
unkown
|
page readonly
|
|
|
|
1F79FA49000
|
unkown
|
page read and write
|
|
|
|
7FF5BFEA0000
|
unkown
|
page readonly
|
|
|
|
2280BBC0000
|
unkown
|
page read and write
|
|
|
|
7FF5C25FC000
|
unkown
|
page readonly
|
|
|
|
2280A244000
|
unkown
|
page read and write
|
|
|
|
7FF5BFDBB000
|
unkown
|
page readonly
|
|
|
|
229BC654000
|
unkown
|
page read and write
|
|
|
|
16E92545000
|
unkown
|
page read and write
|
|
|
|
7FF52AA91000
|
unkown
|
page readonly
|
|
|
|
16484742000
|
unkown
|
page read and write
|
|
|
|
7FF5C29DE000
|
unkown
|
page readonly
|
|
|
|
7FF5EFF07000
|
unkown
|
page readonly
|
|
|
|
2A620900000
|
unkown
|
page read and write
|
|
|
|
664037E000
|
unkown
|
page read and write
|
|
|
|
1FACCF2E000
|
unkown
|
page read and write
|
|
|
|
1F79FA00000
|
unkown
|
page read and write
|
|
|
|
1FACCFC7000
|
unkown
|
page read and write
|
|
|
|
7FF5EF9C6000
|
unkown
|
page readonly
|
|
|
|
2A620918000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF45000
|
unkown
|
page readonly
|
|
|
|
7FF5C29D9000
|
unkown
|
page readonly
|
|
|
|
7FF5B2525000
|
unkown
|
page readonly
|
|
|
|
7FF5941C3000
|
unkown
|
page readonly
|
|
|
|
940F8FF000
|
unkown
|
page read and write
|
|
|
|
7FF5940A7000
|
unkown
|
page readonly
|
|
|
|
16484732000
|
unkown
|
page read and write
|
|
|
|
7FF5C2786000
|
unkown
|
page readonly
|
|
|
|
7FF5C298F000
|
unkown
|
page readonly
|
|
|
|
7FF554F33000
|
unkown
|
page readonly
|
|
|
|
1FACC800000
|
unkown
|
page readonly
|
|
|
|
16486786000
|
unkown
|
page read and write
|
|
|
|
7FF5E8797000
|
unkown
|
page readonly
|
|
|
|
7FF4F60CF000
|
unkown
|
page readonly
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
C4364FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C005B000
|
unkown
|
page readonly
|
|
|
|
1F79FA29000
|
unkown
|
page read and write
|
|
|
|
7FF5EFDF7000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFE9000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFA3000
|
unkown
|
page readonly
|
|
|
|
7FF5B26EA000
|
unkown
|
page readonly
|
|
|
|
16486B82000
|
unkown
|
page read and write
|
|
|
|
7FF5B2656000
|
unkown
|
page readonly
|
|
|
|
1FACCFA7000
|
unkown
|
page read and write
|
|
|
|
1FACC713000
|
unkown
|
page read and write
|
|
|
|
7FF52AC43000
|
unkown
|
page readonly
|
|
|
|
7FF5B0CD1000
|
unkown
|
page readonly
|
|
|
|
16596B40000
|
unkown
|
page readonly
|
|
|
|
158EEB13000
|
unkown
|
page read and write
|
|
|
|
1F79FB08000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A5A000
|
unkown
|
page readonly
|
|
|
|
7FF5C2654000
|
unkown
|
page readonly
|
|
|
|
7FF554FE7000
|
unkown
|
page readonly
|
|
|
|
1FACC62C000
|
unkown
|
page read and write
|
|
|
|
271A27E000
|
unkown
|
page read and write
|
|
|
|
7FF4F642F000
|
unkown
|
page readonly
|
|
|
|
16E91E90000
|
unkown
|
page read and write
|
|
|
|
7FF5BFDBF000
|
unkown
|
page readonly
|
|
|
|
7FF5C22E9000
|
unkown
|
page readonly
|
|
|
|
7FF5C2905000
|
unkown
|
page readonly
|
|
|
|
1FACCD10000
|
unkown
|
page readonly
|
|
|
|
2A625520000
|
unkown
|
page read and write
|
|
|
|
7FF554E16000
|
unkown
|
page readonly
|
|
|
|
7FF5529AE000
|
unkown
|
page readonly
|
|
|
|
16486A82000
|
unkown
|
page read and write
|
|
|
|
16596993000
|
unkown
|
page read and write
|
|
|
|
7FF552C34000
|
unkown
|
page readonly
|
|
|
|
2A625A90000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C18000
|
unkown
|
page readonly
|
|
|
|
16486C00000
|
unkown
|
page read and write
|
|
|
|
663FFF8000
|
unkown
|
page read and write
|
|
|
|
7FF52AC2A000
|
unkown
|
page readonly
|
|
|
|
7FF5EFBB1000
|
unkown
|
page readonly
|
|
|
|
7FF5E879B000
|
unkown
|
page readonly
|
|
|
|
2A620074000
|
unkown
|
page read and write
|
|
|
|
1FACCF40000
|
unkown
|
page read and write
|
|
|
|
23CA5802000
|
unkown
|
page read and write
|
|
|
|
A4B239C000
|
unkown
|
page read and write
|
|
|
|
1FACC64F000
|
unkown
|
page read and write
|
|
|
|
7FF552C72000
|
unkown
|
page readonly
|
|
|
|
7FF5EFF42000
|
unkown
|
page readonly
|
|
|
|
49918FF000
|
unkown
|
page read and write
|
|
|
|
7FF552B96000
|
unkown
|
page readonly
|
|
|
|
7FF5EFCED000
|
unkown
|
page readonly
|
|
|
|
2A6256B2000
|
unkown
|
page read and write
|
|
|
|
16486490000
|
unkown
|
page read and write
|
|
|
|
7FF5B21C7000
|
unkown
|
page readonly
|
|
|
|
7FF5C0047000
|
unkown
|
page readonly
|
|
|
|
576D1FC000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D16000
|
unkown
|
page readonly
|
|
|
|
7FF593FE8000
|
unkown
|
page readonly
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
5CDD9FE000
|
unkown
|
page read and write
|
|
|
|
7FF594087000
|
unkown
|
page readonly
|
|
|
|
158EE8E0000
|
heap default
|
page read and write
|
|
|
|
7FF4F6191000
|
unkown
|
page readonly
|
|
|
|
2A625570000
|
unkown
|
page read and write
|
|
|
|
7FF4F64E4000
|
unkown
|
page readonly
|
|
|
|
7FF56A185000
|
unkown
|
page readonly
|
|
|
|
1FACCF29000
|
unkown
|
page read and write
|
|
|
|
2A6202D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D27000
|
unkown
|
page readonly
|
|
|
|
31327FF000
|
unkown
|
page read and write
|
|
|
|
2A625490000
|
unkown
|
page read and write
|
|
|
|
7FF552BB6000
|
unkown
|
page readonly
|
|
|
|
7FF5E8781000
|
unkown
|
page readonly
|
|
|
|
16487310000
|
unkown
|
page read and write
|
|
|
|
7FF5EF7D5000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D8D000
|
unkown
|
page readonly
|
|
|
|
2A625540000
|
unkown
|
page read and write
|
|
|
|
2A625960000
|
unkown
|
page read and write
|
|
|
|
2A6210D0000
|
unkown
|
page readonly
|
|
|
|
7FF5529BB000
|
unkown
|
page readonly
|
|
|
|
7FF5EFDC5000
|
unkown
|
page readonly
|
|
|
|
7FF5C26F5000
|
unkown
|
page readonly
|
|
|
|
1FACD41D000
|
unkown
|
page read and write
|
|
|
|
23CA5620000
|
unkown
|
page readonly
|
|
|
|
7FF52AB05000
|
unkown
|
page readonly
|
|
|
|
16484772000
|
unkown
|
page read and write
|
|
|
|
271A9FB000
|
unkown
|
page read and write
|
|
|
|
16596960000
|
heap default
|
page read and write
|
|
|
|
7FF5C2772000
|
unkown
|
page readonly
|
|
|
|
7FF5EFC80000
|
unkown
|
page readonly
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
16E92502000
|
unkown
|
page read and write
|
|
|
|
7FF5C0083000
|
unkown
|
page readonly
|
|
|
|
7FF52A92F000
|
unkown
|
page readonly
|
|
|
|
1FACC670000
|
unkown
|
page read and write
|
|
|
|
16487410000
|
unkown
|
page read and write
|
|
|
|
1F79FA70000
|
unkown
|
page read and write
|
|
|
|
2A620058000
|
unkown
|
page read and write
|
|
|
|
7FF5C2779000
|
unkown
|
page readonly
|
|
|
|
7FF52AB4F000
|
unkown
|
page readonly
|
|
|
|
7FF5B2506000
|
unkown
|
page readonly
|
|
|
|
158EEA29000
|
unkown
|
page read and write
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
7FF56A266000
|
unkown
|
page readonly
|
|
|
|
1E8C24A0000
|
unkown
|
page readonly
|
|
|
|
7FF5EFF33000
|
unkown
|
page readonly
|
|
|
|
7FF52A818000
|
unkown
|
page readonly
|
|
|
|
1648678B000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF555013000
|
unkown
|
page readonly
|
|
|
|
7FF52A9B4000
|
unkown
|
page readonly
|
|
|
|
7FF5C22F3000
|
unkown
|
page readonly
|
|
|
|
1648465D000
|
unkown
|
page read and write
|
|
|
|
2280A0D0000
|
heap default
|
page read and write
|
|
|
|
7FF552495000
|
unkown
|
page readonly
|
|
|
|
1FACC63C000
|
unkown
|
page read and write
|
|
|
|
7FF5C28C1000
|
unkown
|
page readonly
|
|
|
|
7FF52AC57000
|
unkown
|
page readonly
|
|
|
|
7FF552756000
|
unkown
|
page readonly
|
|
|
|
C4358EC000
|
unkown
|
page read and write
|
|
|
|
1C14C060000
|
heap private
|
page read and write
|
|
|
|
16484771000
|
unkown
|
page read and write
|
|
|
|
BFF1C7B000
|
unkown
|
page read and write
|
|
|
|
2A620102000
|
unkown
|
page read and write
|
|
|
|
7FF52A6CE000
|
unkown
|
page readonly
|
|
|
|
7FF5B2667000
|
unkown
|
page readonly
|
|
|
|
7FF552C4A000
|
unkown
|
page readonly
|
|
|
|
158EEA50000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D29000
|
unkown
|
page readonly
|
|
|
|
7FF5C2954000
|
unkown
|
page readonly
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
7FF55294F000
|
unkown
|
page readonly
|
|
|
|
16596995000
|
unkown
|
page read and write
|
|
|
|
2A625928000
|
unkown
|
page write copy
|
|
|
|
2A625900000
|
unkown
|
page write copy
|
|
|
|
7FF5BFE86000
|
unkown
|
page readonly
|
|
|
|
2280A600000
|
unkown
|
page readonly
|
|
|
|
1F79FA4A000
|
unkown
|
page read and write
|
|
|
|
16486410000
|
unkown
|
page readonly
|
|
|
|
7FF56A277000
|
unkown
|
page readonly
|
|
|
|
158EEA81000
|
unkown
|
page read and write
|
|
|
|
7FF56A1C7000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D1D000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE66000
|
unkown
|
page readonly
|
|
|
|
16E903A0000
|
heap default
|
page read and write
|
|
|
|
7FF5C2A37000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A82000
|
unkown
|
page readonly
|
|
|
|
7FF552C77000
|
unkown
|
page readonly
|
|
|
|
16486480000
|
unkown
|
page readonly
|
|
|
|
16E90400000
|
unkown
|
page read and write
|
|
|
|
158EEA4E000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE34000
|
unkown
|
page readonly
|
|
|
|
4393CFF000
|
unkown
|
page read and write
|
|
|
|
1FACC680000
|
unkown
|
page read and write
|
|
|
|
1FACC5F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC66000
|
unkown
|
page readonly
|
|
|
|
7FF5B0CED000
|
unkown
|
page readonly
|
|
|
|
7FF4F6433000
|
unkown
|
page readonly
|
|
|
|
1E8C0C00000
|
unkown
|
page readonly
|
|
|
|
C43667D000
|
unkown
|
page read and write
|
|
|
|
7FF56A237000
|
unkown
|
page readonly
|
|
|
|
7FF555027000
|
unkown
|
page readonly
|
|
|
|
7FF5C2647000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE8D000
|
unkown
|
page readonly
|
|
|
|
7FF5EF765000
|
unkown
|
page readonly
|
|
|
|
229BC678000
|
unkown
|
page read and write
|
|
|
|
16486800000
|
unkown
|
page read and write
|
|
|
|
5CDD8FB000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
2A6256B6000
|
unkown
|
page read and write
|
|
|
|
1FACCF25000
|
unkown
|
page read and write
|
|
|
|
1FACD454000
|
unkown
|
page read and write
|
|
|
|
7FF5E8734000
|
unkown
|
page readonly
|
|
|
|
5CDDCF9000
|
unkown
|
page read and write
|
|
|
|
7FF5C282F000
|
unkown
|
page readonly
|
|
|
|
7FF5C2650000
|
unkown
|
page readonly
|
|
|
|
16484730000
|
unkown
|
page read and write
|
|
|
|
7FF5941D2000
|
unkown
|
page readonly
|
|
|
|
A4B277C000
|
unkown
|
page read and write
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
1F79FB00000
|
unkown
|
page read and write
|
|
|
|
2A621483000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
7FF4F6527000
|
unkown
|
page readonly
|
|
|
|
7FF593EFF000
|
unkown
|
page readonly
|
|
|
|
164845A0000
|
unkown
|
page write copy
|
|
|
|
7FF52AA46000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
7FF5EFC8B000
|
unkown
|
page readonly
|
|
|
|
7FF4F6513000
|
unkown
|
page readonly
|
|
|
|
1C14BDA0000
|
unkown
|
page readonly
|
|
|
|
271ACFA000
|
unkown
|
page read and write
|
|
|
|
23CA583F000
|
unkown
|
page read and write
|
|
|
|
16487210000
|
unkown
|
page read and write
|
|
|
|
C4359EA000
|
unkown
|
page read and write
|
|
|
|
7FF5B2669000
|
unkown
|
page readonly
|
|
|
|
7FF5C2748000
|
unkown
|
page readonly
|
|
|
|
16484800000
|
unkown
|
page readonly
|
|
|
|
229BC700000
|
unkown
|
page read and write
|
|
|
|
158EEA84000
|
unkown
|
page read and write
|
|
|
|
499197A000
|
unkown
|
page read and write
|
|
|
|
229BCE02000
|
unkown
|
page read and write
|
|
|
|
1E8C0B02000
|
unkown
|
page read and write
|
|
|
|
7FF552BCE000
|
unkown
|
page readonly
|
|
|
|
271A6FB000
|
unkown
|
page read and write
|
|
|
|
16486737000
|
unkown
|
page read and write
|
|
|
|
23CA5A00000
|
unkown
|
page readonly
|
|
|
|
2A625510000
|
unkown
|
page read and write
|
|
|
|
7FF5E87D7000
|
unkown
|
page readonly
|
|
|
|
1FACCF35000
|
unkown
|
page read and write
|
|
|
|
16487510000
|
unkown
|
page read and write
|
|
|
|
7FF4F62BA000
|
unkown
|
page readonly
|
|
|
|
1F79F9F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E872E000
|
unkown
|
page readonly
|
|
|
|
23CA56F0000
|
unkown
|
page write copy
|
|
|
|
1E8C0A00000
|
unkown
|
page read and write
|
|
|
|
1FACCC60000
|
unkown
|
page read and write
|
|
|
|
158EEB00000
|
unkown
|
page read and write
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
7FF4F5FD1000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE53000
|
unkown
|
page readonly
|
|
|
|
1FACC6A6000
|
unkown
|
page read and write
|
|
|
|
4991A7F000
|
unkown
|
page read and write
|
|
|
|
1FACCF29000
|
unkown
|
page read and write
|
|
|
|
16E90513000
|
unkown
|
page read and write
|
|
|
|
1FACCF7C000
|
unkown
|
page read and write
|
|
|
|
7FF52A826000
|
unkown
|
page readonly
|
|
|
|
7FF5EFD55000
|
unkown
|
page readonly
|
|
|
|
7FF5939C7000
|
unkown
|
page readonly
|
|
|
|
7FF52A99B000
|
unkown
|
page readonly
|
|
|
|
7FF4F643D000
|
unkown
|
page readonly
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF4F5FD7000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC58000
|
unkown
|
page readonly
|
|
|
|
7FF5EF9F1000
|
unkown
|
page readonly
|
|
|
|
43938FE000
|
unkown
|
page read and write
|
|
|
|
2A62563D000
|
unkown
|
page read and write
|
|
|
|
7FF552B59000
|
unkown
|
page readonly
|
|
|
|
1FACCF2D000
|
unkown
|
page read and write
|
|
|
|
BFF22FE000
|
unkown
|
page read and write
|
|
|
|
16596B60000
|
unkown
|
page read and write
|
|
|
|
7FF52A990000
|
unkown
|
page readonly
|
|
|
|
7FF5C0044000
|
unkown
|
page readonly
|
|
|
|
2280A259000
|
unkown
|
page read and write
|
|
|
|
1C14A54A000
|
unkown
|
page read and write
|
|
|
|
7FF5EFD07000
|
unkown
|
page readonly
|
|
|
|
2280A302000
|
unkown
|
page read and write
|
|
|
|
1648472D000
|
unkown
|
page read and write
|
|
|
|
16484659000
|
unkown
|
page read and write
|
|
|
|
16E90502000
|
unkown
|
page read and write
|
|
|
|
7FF5EFEF7000
|
unkown
|
page readonly
|
|
|
|
1FACCF00000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A73000
|
unkown
|
page readonly
|
|
|
|
7FF56A183000
|
unkown
|
page readonly
|
|
|
|
7FF5B097F000
|
unkown
|
page readonly
|
|
|
|
7FF5C2993000
|
unkown
|
page readonly
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
2A62564A000
|
unkown
|
page read and write
|
|
|
|
164846AC000
|
unkown
|
page read and write
|
|
|
|
7FF5C27CB000
|
unkown
|
page readonly
|
|
|
|
BFF1FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE97000
|
unkown
|
page readonly
|
|
|
|
C43617B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2706000
|
unkown
|
page readonly
|
|
|
|
2A625654000
|
unkown
|
page read and write
|
|
|
|
7FF5C28F1000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A47000
|
unkown
|
page readonly
|
|
|
|
7FF56A234000
|
unkown
|
page readonly
|
|
|
|
7FF52AAF7000
|
unkown
|
page readonly
|
|
|
|
2A625530000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFAE000
|
unkown
|
page readonly
|
|
|
|
271AD7D000
|
unkown
|
page read and write
|
|
|
|
1648670A000
|
unkown
|
page read and write
|
|
|
|
158EEA4B000
|
unkown
|
page read and write
|
|
|
|
16E92500000
|
unkown
|
page read and write
|
|
|
|
2A620800000
|
unkown
|
page read and write
|
|
|
|
271A1FA000
|
unkown
|
page read and write
|
|
|
|
7FF554F79000
|
unkown
|
page readonly
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
BFF20F7000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE86000
|
unkown
|
page readonly
|
|
|
|
16486724000
|
unkown
|
page read and write
|
|
|
|
7FF5B09A0000
|
unkown
|
page readonly
|
|
|
|
2A6259D0000
|
unkown
|
page readonly
|
|
|
|
313257E000
|
unkown
|
page read and write
|
|
|
|
5CDDEF9000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
16596995000
|
unkown
|
page read and write
|
|
|
|
940FA7A000
|
unkown
|
page read and write
|
|
|
|
1E8C0A29000
|
unkown
|
page read and write
|
|
|
|
7FF5C27E4000
|
unkown
|
page readonly
|
|
|
|
16484667000
|
unkown
|
page read and write
|
|
|
|
1E8C0A3F000
|
unkown
|
page read and write
|
|
|
|
7FF569E3F000
|
unkown
|
page readonly
|
|
|
|
7FF554F66000
|
unkown
|
page readonly
|
|
|
|
5CDDE7D000
|
unkown
|
page read and write
|
|
|
|
1FACCFC7000
|
unkown
|
page read and write
|
|
|
|
7FF56A196000
|
unkown
|
page readonly
|
|
|
|
1FACCF36000
|
unkown
|
page read and write
|
|
|
|
2280A1B0000
|
unkown
|
page write copy
|
|
|
|
1FACCF97000
|
unkown
|
page read and write
|
|
|
|
940FAFF000
|
unkown
|
page read and write
|
|
|
|
23CA5610000
|
heap default
|
page read and write
|
|
|
|
2A625921000
|
unkown
|
page read and write
|
|
|
|
7FF52A9CF000
|
unkown
|
page readonly
|
|
|
|
7FF552B50000
|
unkown
|
page readonly
|
|
|
|
271A07E000
|
unkown
|
page read and write
|
|
|
|
16486490000
|
unkown
|
page readonly
|
|
|
|
1C14A440000
|
unkown
|
page read and write
|
|
|
|
229BC63C000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D81000
|
unkown
|
page readonly
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFDD000
|
unkown
|
page readonly
|
|
|
|
7FF4F64FA000
|
unkown
|
page readonly
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
7FF5B0CFA000
|
unkown
|
page readonly
|
|
|
|
7FF594085000
|
unkown
|
page readonly
|
|
|
|
16486602000
|
unkown
|
page read and write
|
|
|
|
7FF52AC52000
|
unkown
|
page readonly
|
|
|
|
7FF593EFB000
|
unkown
|
page readonly
|
|
|
|
1C14C130000
|
heap private
|
page read and write
|
|
|
|
7FF4F6527000
|
unkown
|
page readonly
|
|
|
|
1C14A4C0000
|
unkown
|
page readonly
|
|
|
|
16484713000
|
unkown
|
page read and write
|
|
|
|
16E92370000
|
unkown
|
page read and write
|
|
|
|
7FF5B0887000
|
unkown
|
page readonly
|
|
|
|
1648679F000
|
unkown
|
page read and write
|
|
|
|
1FACC708000
|
unkown
|
page read and write
|
|
|
|
16E906D0000
|
unkown
|
page readonly
|
|
|
|
16487210000
|
unkown
|
page read and write
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
16486A42000
|
unkown
|
page read and write
|
|
|
|
7FF52AC14000
|
unkown
|
page readonly
|
|
|
|
1FACD461000
|
unkown
|
page read and write
|
|
|
|
1FACC629000
|
unkown
|
page read and write
|
|
|
|
7FF5C275F000
|
unkown
|
page readonly
|
|
|
|
7FF56A18E000
|
unkown
|
page readonly
|
|
|
|
7FF5E83A4000
|
unkown
|
page readonly
|
|
|
|
7FF5E8677000
|
unkown
|
page readonly
|
|
|
|
C435E7B000
|
unkown
|
page read and write
|
|
|
|
164868A4000
|
unkown
|
page read and write
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
2A621120000
|
unkown
|
page readonly
|
|
|
|
7FF5C299D000
|
unkown
|
page readonly
|
|
|
|
7FF5B2520000
|
unkown
|
page readonly
|
|
|
|
49919FA000
|
unkown
|
page read and write
|
|
|
|
2A625560000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DAA000
|
unkown
|
page readonly
|
|
|
|
2A625990000
|
unkown
|
page read and write
|
|
|
|
7FF52A949000
|
unkown
|
page readonly
|
|
|
|
1C14C22F000
|
heap private
|
page read and write
|
|
|
|
7FF552BC7000
|
unkown
|
page readonly
|
|
|
|
158EE9C0000
|
unkown
|
page readonly
|
|
|
|
1FACCFAA000
|
unkown
|
page read and write
|
|
|
|
7FF552B64000
|
unkown
|
page readonly
|
|
|
|
16E90514000
|
unkown
|
page read and write
|
|
|
|
1E8C0860000
|
heap default
|
page read and write
|
|
|
|
7FF5BFF9F000
|
unkown
|
page readonly
|
|
|
|
16E92402000
|
unkown
|
page read and write
|
|
|
|
16E90454000
|
unkown
|
page read and write
|
|
|
|
1FACC6FA000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE29000
|
unkown
|
page readonly
|
|
|
|
7FF5C2857000
|
unkown
|
page readonly
|
|
|
|
164867DF000
|
unkown
|
page read and write
|
|
|
|
23CA5856000
|
unkown
|
page read and write
|
|
|
|
16484663000
|
unkown
|
page read and write
|
|
|
|
7FF55284A000
|
unkown
|
page readonly
|
|
|
|
7FF52A925000
|
unkown
|
page readonly
|
|
|
|
16486884000
|
unkown
|
page read and write
|
|
|
|
1FACCF2D000
|
unkown
|
page read and write
|
|
|
|
7FF5EFC7E000
|
unkown
|
page readonly
|
|
|
|
271A47B000
|
unkown
|
page read and write
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
7FF593FE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F6368000
|
unkown
|
page readonly
|
|
|
|
7FF552AB1000
|
unkown
|
page readonly
|
|
|
|
229BC708000
|
unkown
|
page read and write
|
|
|
|
158EE880000
|
heap private
|
page read and write
|
|
|
|
1FACCF22000
|
unkown
|
page read and write
|
|
|
|
1C14A350000
|
unkown
|
page readonly
|
|
|
|
7FF552B71000
|
unkown
|
page readonly
|
|
|
|
7FF5E86F6000
|
unkown
|
page readonly
|
|
|
|
1FACCD20000
|
unkown
|
page readonly
|
|
|
|
7FF5BFEA8000
|
unkown
|
page readonly
|
|
|
|
16484656000
|
unkown
|
page read and write
|
|
|
|
158EEA00000
|
unkown
|
page read and write
|
|
|
|
1FACCF42000
|
unkown
|
page read and write
|
|
|
|
7FF4F6522000
|
unkown
|
page readonly
|
|
|
|
7FF4F6479000
|
unkown
|
page readonly
|
|
|
|
A4B28FF000
|
unkown
|
page read and write
|
|
|
|
7FF552845000
|
unkown
|
page readonly
|
|
|
|
663FDF7000
|
unkown
|
page read and write
|
|
|
|
7FF552B8D000
|
unkown
|
page readonly
|
|
|
|
16484629000
|
unkown
|
page read and write
|
|
|
|
7FF5C0097000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
229BC68A000
|
unkown
|
page read and write
|
|
|
|
164867D9000
|
unkown
|
page read and write
|
|
|
|
439387E000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
5CDDFFE000
|
unkown
|
page read and write
|
|
|
|
1FACCE02000
|
unkown
|
page read and write
|
|
|
|
7FF52A942000
|
unkown
|
page readonly
|
|
|
|
16484694000
|
unkown
|
page read and write
|
|
|
|
7FF4F6338000
|
unkown
|
page readonly
|
|
|
|
7FF52AB51000
|
unkown
|
page readonly
|
|
|
|
7FF554F46000
|
unkown
|
page readonly
|
|
|
|
7FF5BF887000
|
unkown
|
page readonly
|
|
|
|
7FF554F2F000
|
unkown
|
page readonly
|
|
|
|
7FF5EFCA4000
|
unkown
|
page readonly
|
|
|
|
1C14A4E0000
|
unkown
|
page readonly
|
|
|
|
1F79FA4B000
|
unkown
|
page read and write
|
|
|
|
229BC661000
|
unkown
|
page read and write
|
|
|
|
7FF5BFD65000
|
unkown
|
page readonly
|
|
|
|
7FF5E87D7000
|
unkown
|
page readonly
|
|
|
|
1FACC6EA000
|
unkown
|
page read and write
|
|
|
|
16E92600000
|
unkown
|
page readonly
|
|
|
|
1FACCF97000
|
unkown
|
page read and write
|
|
|
|
1FACCF29000
|
unkown
|
page read and write
|
|
|
|
1FACCFC7000
|
unkown
|
page read and write
|
|
|
|
1648465F000
|
unkown
|
page read and write
|
|
|
|
1FACCF44000
|
unkown
|
page read and write
|
|
|
|
7FF4F64DD000
|
unkown
|
page readonly
|
|
|
|
7FF52AA60000
|
unkown
|
page readonly
|
|
|
|
229BC540000
|
unkown
|
page readonly
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
1FACCF4D000
|
unkown
|
page read and write
|
|
|
|
1FACCF6D000
|
unkown
|
page read and write
|
|
|
|
7FF5E83B5000
|
unkown
|
page readonly
|
|
|
|
2A62562D000
|
unkown
|
page read and write
|
|
|
|
2A625530000
|
unkown
|
page read and write
|
|
|
|
7FF5EFF1A000
|
unkown
|
page readonly
|
|
|
|
31328F7000
|
unkown
|
page read and write
|
|
|
|
7FF5C2960000
|
unkown
|
page readonly
|
|
|
|
23CA5800000
|
unkown
|
page read and write
|
|
|
|
7FF5E8784000
|
unkown
|
page readonly
|
|
|
|
2A620093000
|
unkown
|
page read and write
|
|
|
|
7FF4F64EB000
|
unkown
|
page readonly
|
|
|
|
2280A202000
|
unkown
|
page read and write
|
|
|
|
7FF5EFD88000
|
unkown
|
page readonly
|
|
|
|
16484742000
|
unkown
|
page read and write
|
|
|
|
7FF552C24000
|
unkown
|
page readonly
|
|
|
|
7FF5EFAA2000
|
unkown
|
page readonly
|
|
|
|
7FF5B26DB000
|
unkown
|
page readonly
|
|
|
|
16486734000
|
unkown
|
page read and write
|
|
|
|
16487610000
|
unkown
|
page read and write
|
|
|
|
7FF56A263000
|
unkown
|
page readonly
|
|
|
|
C43627E000
|
unkown
|
page read and write
|
|
|
|
7FF552969000
|
unkown
|
page readonly
|
|
|
|
7FF554F3E000
|
unkown
|
page readonly
|
|
|
|
2A6210F0000
|
unkown
|
page readonly
|
|
|
|
1FACD400000
|
unkown
|
page read and write
|
|
|
|
1FACC600000
|
unkown
|
page read and write
|
|
|
|
1FACCF35000
|
unkown
|
page read and write
|
|
|
|
7FF594116000
|
unkown
|
page readonly
|
|
|
|
1FACC648000
|
unkown
|
page read and write
|
|
|
|
16486A00000
|
unkown
|
page read and write
|
|
|
|
664007F000
|
unkown
|
page read and write
|
|
|
|
16E93010000
|
unkown
|
page read and write
|
|
|
|
7FF5C0097000
|
unkown
|
page readonly
|
|
|
|
5CDD97E000
|
unkown
|
page read and write
|
|
|
|
16484460000
|
heap private
|
page read and write
|
|
|
|
2A62006F000
|
unkown
|
page read and write
|
|
|
|
7FF552B27000
|
unkown
|
page readonly
|
|
|
|
1F7A0400000
|
unkown
|
page readonly
|
|
|
|
1FACCF2F000
|
unkown
|
page read and write
|
|
|
|
7FF5E83BE000
|
unkown
|
page readonly
|
|
|
|
16484640000
|
unkown
|
page read and write
|
|
|
|
7FF5C29CD000
|
unkown
|
page readonly
|
|
|
|
7FF5EFF47000
|
unkown
|
page readonly
|
|
|
|
2A620730000
|
unkown
|
page read and write
|
|
|
|
2A625990000
|
unkown
|
page read and write
|
|
|
|
7FF52AA68000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
2A625990000
|
unkown
|
page read and write
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
16486853000
|
unkown
|
page read and write
|
|
|
|
1FACCF44000
|
unkown
|
page read and write
|
|
|
|
1FACCF29000
|
unkown
|
page read and write
|
|
|
|
7FF4F6335000
|
unkown
|
page readonly
|
|
|
|
7FF552A80000
|
unkown
|
page readonly
|
|
|
|
7FF5C278A000
|
unkown
|
page readonly
|
|
|
|
49915AB000
|
unkown
|
page read and write
|
|
|
|
7FF5E8794000
|
unkown
|
page readonly
|
|
|
|
1E8C23A0000
|
unkown
|
page read and write
|
|
|
|
7FF52AB30000
|
unkown
|
page readonly
|
|
|
|
663F70C000
|
unkown
|
page read and write
|
|
|
|
2A625970000
|
unkown
|
page read and write
|
|
|
|
7FF554ED7000
|
unkown
|
page readonly
|
|
|
|
16486420000
|
unkown
|
page read and write
|
|
|
|
BFF1D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2642000
|
unkown
|
page readonly
|
|
|
|
7FF5B0CF6000
|
unkown
|
page readonly
|
|
|
|
1FACC650000
|
unkown
|
page read and write
|
|
|
|
1C14A2F0000
|
unkown
|
page readonly
|
|
|
|
2A621480000
|
unkown
|
page read and write
|
|
|
|
16484751000
|
unkown
|
page read and write
|
|
|
|
16484741000
|
unkown
|
page read and write
|
|
|
|
7FF5B265D000
|
unkown
|
page readonly
|
|
|
|
16486734000
|
unkown
|
page read and write
|
|
|
|
16486B00000
|
unkown
|
page read and write
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
2A625689000
|
unkown
|
page read and write
|
|
|
|
1C14A53D000
|
heap default
|
page read and write
|
|
|
|
16484772000
|
unkown
|
page read and write
|
|
|
|
271A7FB000
|
unkown
|
page read and write
|
|
|
|
2A621100000
|
unkown
|
page readonly
|
|
|
|
229BC613000
|
unkown
|
page read and write
|
|
|
|
2A62009E000
|
unkown
|
page read and write
|
|
|
|
7FF552B47000
|
unkown
|
page readonly
|
|
|
|
7FF5E87C6000
|
unkown
|
page readonly
|
|
|
|
940F97E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2558000
|
unkown
|
page readonly
|
|
|
|
7FF5B26CD000
|
unkown
|
page readonly
|
|
|
|
7FF5B0D97000
|
unkown
|
page readonly
|
|
|
|
271AC7A000
|
unkown
|
page read and write
|
|
|
|
7FF552C77000
|
unkown
|
page readonly
|
|
|
|
229BC600000
|
unkown
|
page read and write
|
|
|
|
2A6210C0000
|
unkown
|
page readonly
|
|
|
|
FCF277A000
|
unkown
|
page read and write
|
|
|
|
1E8C0A55000
|
unkown
|
page read and write
|
|
|
|
1648683A000
|
unkown
|
page read and write
|
|
|
|
4393BF7000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
7FF593EA5000
|
unkown
|
page readonly
|
|
|
|
7FF594129000
|
unkown
|
page readonly
|
|
|
|
2280C020000
|
unkown
|
page read and write
|
|
|
|
2A621110000
|
unkown
|
page readonly
|
|
|
|
1F79F9E0000
|
unkown
|
page readonly
|
|
|
|
7FF552945000
|
unkown
|
page readonly
|
|
|
|
7FF52AB39000
|
unkown
|
page readonly
|
|
|
|
2A625800000
|
unkown
|
page read and write
|
|
|
|
7FF5940DF000
|
unkown
|
page readonly
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
16E904BC000
|
unkown
|
page read and write
|
|
|
|
2A625560000
|
unkown
|
page read and write
|
|
|
|
7FF5E867B000
|
unkown
|
page readonly
|
|
|
|
1FACC6BC000
|
unkown
|
page read and write
|
|
|
|
7FF5B2528000
|
unkown
|
page readonly
|
|
|
|
7FF552B6F000
|
unkown
|
page readonly
|
|
|
|
1659696B000
|
heap default
|
page read and write
|
|
|
|
BFF1CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5EFCEF000
|
unkown
|
page readonly
|
|
|
|
FCF26FE000
|
unkown
|
page read and write
|
|
|
|
663F78E000
|
unkown
|
page read and write
|
|
|
|
1648677E000
|
unkown
|
page read and write
|
|
|
|
271A8FB000
|
unkown
|
page read and write
|
|
|
|
16487310000
|
unkown
|
page read and write
|
|
|
|
1FACCF79000
|
unkown
|
page read and write
|
|
|
|
7FF5EF9F7000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
7FF552C27000
|
unkown
|
page readonly
|
|
|
|
7FF5C25E2000
|
unkown
|
page readonly
|
|
|
|
7FF5BFD6F000
|
unkown
|
page readonly
|
|
|
|
7FF5B0CDF000
|
unkown
|
page readonly
|
|
|
|
16E92370000
|
unkown
|
page read and write
|
|
|
|
7FF5E87C3000
|
unkown
|
page readonly
|
|
|
|
7FF5C2974000
|
unkown
|
page readonly
|
|
|
|
16487410000
|
unkown
|
page read and write
|
|
|
|
1FACCF4A000
|
unkown
|
page read and write
|
|
|
|
1E8C09D0000
|
unkown
|
page read and write
|
|
|
|
7FF552AB8000
|
unkown
|
page readonly
|
|
|
|
16486795000
|
unkown
|
page read and write
|
|
|
|
7FF5B2717000
|
unkown
|
page readonly
|
|
|
|
7FF4F6466000
|
unkown
|
page readonly
|
|
|
|
BFF21FE000
|
unkown
|
page read and write
|
|
|
|
7FF554E30000
|
unkown
|
page readonly
|
|
|
|
7FF5C2935000
|
unkown
|
page readonly
|
|
|
|
1FACCF22000
|
unkown
|
page read and write
|
|
|
|
1FACCF47000
|
unkown
|
page read and write
|
|
|
|
5CDDC7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C2733000
|
unkown
|
page readonly
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
31324FE000
|
unkown
|
page read and write
|
|
|
|
1E8C0A02000
|
unkown
|
page read and write
|
|
|
|
2A620815000
|
unkown
|
page read and write
|
|
|
|
7FF5EFCF3000
|
unkown
|
page readonly
|
|
|
|
1F79FA81000
|
unkown
|
page read and write
|
|
|
|
1FACC510000
|
unkown
|
page readonly
|
|
|
|
7FF5BFFBA000
|
unkown
|
page readonly
|
|
|
|
7FF5EFD50000
|
unkown
|
page readonly
|
|
|
|
1FACCF2A000
|
unkown
|
page read and write
|
|
|
|
2A62561F000
|
unkown
|
page read and write
|
|
|
|
16484659000
|
unkown
|
page read and write
|
|
|
|
7FF56A1BD000
|
unkown
|
page readonly
|
|
|
|
271A87B000
|
unkown
|
page read and write
|
|
|
|
7FF56A23B000
|
unkown
|
page readonly
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
C43637F000
|
unkown
|
page read and write
|
|
|
|
1FACC716000
|
unkown
|
page read and write
|
|
|
|
1FACCF97000
|
unkown
|
page read and write
|
|
|
|
16E904A0000
|
unkown
|
page read and write
|
|
|
|
7FF5941AA000
|
unkown
|
page readonly
|
|
|
|
7FF5B26C1000
|
unkown
|
page readonly
|
|
|
|
2A62003D000
|
unkown
|
page read and write
|
|
|
|
7FF52ABA9000
|
unkown
|
page readonly
|
|
|
|
1C14A460000
|
unkown
|
page readonly
|
|
|
|
1FACCF33000
|
unkown
|
page read and write
|
|
|
|
2A625950000
|
unkown
|
page read and write
|
|
|
|
7FF5E84D7000
|
unkown
|
page readonly
|
|
|
|
16E92380000
|
unkown
|
page readonly
|
|
|
|
7FF5B260F000
|
unkown
|
page readonly
|
|
|
|
23CA72A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C2957000
|
unkown
|
page readonly
|
|
|
|
1F79FA13000
|
unkown
|
page read and write
|
|
|
|
1FACD403000
|
unkown
|
page read and write
|
|
|
|
2280A070000
|
heap private
|
page read and write
|
|
|
|
1FACC64C000
|
unkown
|
page read and write
|
|
|
|
164864B0000
|
unkown
|
page readonly
|
|
|
|
16E904C4000
|
unkown
|
page read and write
|
|
|
|
7FF552487000
|
unkown
|
page readonly
|
|
|
|
2A620000000
|
unkown
|
page read and write
|
|
|
|
940F87B000
|
unkown
|
page read and write
|
|
|
|
1C14BEC0000
|
heap private
|
page read and write
|
|
|
|
7FF5EFE99000
|
unkown
|
page readonly
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
7FF554FDD000
|
unkown
|
page readonly
|
|
|
|
7FF593FC6000
|
unkown
|
page readonly
|
|
|
|
158EF090000
|
unkown
|
page readonly
|
|
|
|
1F79F9D0000
|
heap default
|
page read and write
|
|
|
|
7FF5940EE000
|
unkown
|
page readonly
|
|
|
|
158EEA55000
|
unkown
|
page read and write
|
|
|
|
164847B3000
|
unkown
|
page read and write
|
|
|
|
23CA5813000
|
unkown
|
page read and write
|
|
|
|
1C14A500000
|
heap default
|
page read and write
|
|
|
|
7FF52ABAE000
|
unkown
|
page readonly
|
|
|
|
1FACCC80000
|
unkown
|
page readonly
|
|
|
|
7FF552B17000
|
unkown
|
page readonly
|
|
|
|
16486761000
|
unkown
|
page read and write
|
|
|
|
16484662000
|
unkown
|
page read and write
|
|
|
|
C435D77000
|
unkown
|
page read and write
|
|
|
|
5CDDF7D000
|
unkown
|
page read and write
|
|
|
|
1648465D000
|
unkown
|
page read and write
|
|
|
|
7FF4F62E7000
|
unkown
|
page readonly
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
229BC550000
|
unkown
|
page readonly
|
|
|
|
7FF5529D4000
|
unkown
|
page readonly
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
165969A0000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
16596993000
|
unkown
|
page read and write
|
|
|
|
5CDDD7F000
|
unkown
|
page read and write
|
|
|
|
664017C000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DD7000
|
unkown
|
page readonly
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
7FF5EFF47000
|
unkown
|
page readonly
|
|
|
|
7FF56A224000
|
unkown
|
page readonly
|
|
|
|
7FF52AB5F000
|
unkown
|
page readonly
|
|
|
|
7FF554F52000
|
unkown
|
page readonly
|
|
|
|
229BC65E000
|
unkown
|
page read and write
|
|
|
|
16486A02000
|
unkown
|
page read and write
|
|
|
|
7FF5E878D000
|
unkown
|
page readonly
|
|
|
|
7FF554BE8000
|
unkown
|
page readonly
|
|
|
|
7FF552A88000
|
unkown
|
page readonly
|
|
|
|
7FF5B26D7000
|
unkown
|
page readonly
|
|
|
|
16484772000
|
unkown
|
page read and write
|
|
|
|
FCF2879000
|
unkown
|
page read and write
|
|
|
|
164845F0000
|
unkown
|
page readonly
|
|
|
|
2280A213000
|
unkown
|
page read and write
|
|
|
|
16487310000
|
unkown
|
page read and write
|
|
|
|
1F79F970000
|
heap private
|
page read and write
|
|
|
|
1FACC6E7000
|
unkown
|
page read and write
|
|
|
|
23CA5849000
|
unkown
|
page read and write
|
|
|
|
2A6254A0000
|
unkown
|
page read and write
|
|
|
|
16E92310000
|
heap private
|
page read and write
|
|
|
|
2A620B01000
|
unkown
|
page read and write
|
|
|
|
1FACCF15000
|
unkown
|
page read and write
|
|
|
|
1F79FA8E000
|
unkown
|
page read and write
|
|
|
|
7FF5C25B2000
|
unkown
|
page readonly
|
|
|
|
23CA5740000
|
unkown
|
page readonly
|
|
|
|
2A625A70000
|
unkown
|
page readonly
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
2A625671000
|
unkown
|
page read and write
|
|
|
|
7FF5C2964000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
16E9043F000
|
unkown
|
page read and write
|
|
|
|
5CDDDFA000
|
unkown
|
page read and write
|
|
|
|
16484783000
|
unkown
|
page read and write
|
|
|
|
2A61FF70000
|
heap private
|
page read and write
|
|
|
|
7FF5BFFE7000
|
unkown
|
page readonly
|
|
|
|
158EE9E0000
|
unkown
|
page read and write
|
|
|
|
1C14A470000
|
heap private
|
page read and write
|
|
|
|
1FACCF6D000
|
unkown
|
page read and write
|
|
|
|
2A62590E000
|
unkown
|
page read and write
|
|
|
|
7FF5C282D000
|
unkown
|
page readonly
|
|
|
|
7FF4F6452000
|
unkown
|
page readonly
|
|
|
|
1FACC64D000
|
unkown
|
page read and write
|
|
|
|
7FF52A97B000
|
unkown
|
page readonly
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
7FF593DA6000
|
unkown
|
page readonly
|
|
|
|
C43607D000
|
unkown
|
page read and write
|
|
|
|
7FF52A98E000
|
unkown
|
page readonly
|
|
|
|
7FF594197000
|
unkown
|
page readonly
|
|
|
|
2A6210E0000
|
unkown
|
page readonly
|
|
|
|
7FF52AC04000
|
unkown
|
page readonly
|
|
|
|
1FACCF23000
|
unkown
|
page read and write
|
|
|
|
7FF5EFF36000
|
unkown
|
page readonly
|
|
|
|
2A620660000
|
unkown
|
page readonly
|
|
|
|
576D07F000
|
unkown
|
page read and write
|
|
|
|
7FF5B0CCF000
|
unkown
|
page readonly
|
|
|
|
229BC713000
|
unkown
|
page read and write
|
|
|
|
7FF5B0DC3000
|
unkown
|
page readonly
|
|
|
|
2A62005A000
|
unkown
|
page read and write
|
|
|
|
7FF5C29B2000
|
unkown
|
page readonly
|
|
|
|
16484600000
|
unkown
|
page read and write
|
|
|
|
7FF554CF5000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A44000
|
unkown
|
page readonly
|
|
|
|
1C14BF40000
|
heap private
|
page read and write
|
|
|
|
2A6200A0000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
158EE8F0000
|
unkown
|
page readonly
|
|
|
|
7FF594184000
|
unkown
|
page readonly
|
|
|
|
1FACC6E1000
|
unkown
|
page read and write
|
|
|
|
16486775000
|
unkown
|
page read and write
|
|
|
|
7FF5B2611000
|
unkown
|
page readonly
|
|
|
|
7FF4F60F0000
|
unkown
|
page readonly
|
|
|
|
2A620F00000
|
unkown
|
page read and write
|
|
|
|
7FF52AB82000
|
unkown
|
page readonly
|
|
|
|
7FF5B2712000
|
unkown
|
page readonly
|
|
|
|
1C14A420000
|
unkown
|
page read and write
|
|
|
|
7FF5526EE000
|
unkown
|
page readonly
|
|
|
|
16487610000
|
unkown
|
page read and write
|
|
|
|
16486700000
|
unkown
|
page read and write
|
|
|
|
7FF554FD7000
|
unkown
|
page readonly
|
|
|
|
23CA55B0000
|
heap private
|
page read and write
|
|
|
|
7FF555016000
|
unkown
|
page readonly
|
|
|
|
16484665000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
2A6259F0000
|
unkown
|
page readonly
|
|
|
|
16E92370000
|
unkown
|
page read and write
|
|
|
|
1FACD402000
|
unkown
|
page read and write
|
|
|
|
1C14A600000
|
unkown
|
page readonly
|
|
|
|
7FF552C66000
|
unkown
|
page readonly
|
|
|
|
1FACCF21000
|
unkown
|
page read and write
|
|
|
|
1F7A0130000
|
unkown
|
page read and write
|
|
|
|
7FF5BFFB6000
|
unkown
|
page readonly
|
|
|
|
7FF5B0B97000
|
unkown
|
page readonly
|
|
|
|
7FF5B0BC6000
|
unkown
|
page readonly
|
|
|
|
164860A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C2784000
|
unkown
|
page readonly
|
|
|
|
164864C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C2981000
|
unkown
|
page readonly
|
|
|
|
1FACCF4A000
|
unkown
|
page read and write
|
|
|
|
2A620029000
|
unkown
|
page read and write
|
|
|
|
7FF5E871D000
|
unkown
|
page readonly
|
|
|
|
576CD0F000
|
unkown
|
page read and write
|
|
|
|
1E8C0940000
|
unkown
|
page write copy
|
|
|
|
1FACCF87000
|
unkown
|
page read and write
|
|
|
|
7FF554FEB000
|
unkown
|
page readonly
|
|
|
|
C436A7B000
|
unkown
|
page read and write
|
|
|
|
158EEA13000
|
unkown
|
page read and write
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
7FF4F64E7000
|
unkown
|
page readonly
|
|
|
|
1FACCF22000
|
unkown
|
page read and write
|
|
|
|
313247C000
|
unkown
|
page read and write
|
|
|
|
7FF59411D000
|
unkown
|
page readonly
|
|
|
|
7FF552BC9000
|
unkown
|
page readonly
|
|
|
|
2A6200FD000
|
unkown
|
page read and write
|
|
|
|
7FF552A66000
|
unkown
|
page readonly
|
|
|
|
16E92544000
|
unkown
|
page read and write
|
|
|
|
7FF552C63000
|
unkown
|
page readonly
|
|
|
|
1F79FA4D000
|
unkown
|
page read and write
|
|
|
|
16596995000
|
unkown
|
page read and write
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
7FF5BFF67000
|
unkown
|
page readonly
|
|
|
|
1FACCF40000
|
unkown
|
page read and write
|
|
|
|
2A625AB0000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE4F000
|
unkown
|
page readonly
|
|
|
|
7FF554ED5000
|
unkown
|
page readonly
|
|
|
|
7FF52AB44000
|
unkown
|
page readonly
|
|
|
|
271A67B000
|
unkown
|
page read and write
|
|
|
|
7FF5B0BE8000
|
unkown
|
page readonly
|
|
|
|
271A77B000
|
unkown
|
page read and write
|
|
|
|
158EF202000
|
unkown
|
page read and write
|
|
|
|
7FF5B0BE0000
|
unkown
|
page readonly
|
|
|
|
2A620958000
|
unkown
|
page read and write
|
|
|
|
229BC400000
|
heap private
|
page read and write
|
|
|
|
1F7A0202000
|
unkown
|
page read and write
|
|
|
|
7FF4F6516000
|
unkown
|
page readonly
|
|
|
|
7FF5B0A41000
|
unkown
|
page readonly
|
|
|
|
1E8C0800000
|
heap private
|
page read and write
|
|
|
|
7FF554EF7000
|
unkown
|
page readonly
|
|
|
|
7FF5BFF47000
|
unkown
|
page readonly
|
|
|
|
16486D02000
|
unkown
|
page read and write
|
|
|
|
1FACCD40000
|
unkown
|
page readonly
|
|
|
|
7FF5EFC1F000
|
unkown
|
page readonly
|
|
|
|
2A620113000
|
unkown
|
page read and write
|
|
|
|
7FF5B0B6A000
|
unkown
|
page readonly
|
|
|
|
7FF4F6421000
|
unkown
|
page readonly
|
|
|
|
16596B50000
|
unkown
|
page readonly
|
|
|
|
7FF594127000
|
unkown
|
page readonly
|
|
|
|
23CA71A0000
|
unkown
|
page read and write
|
|
|
|
7FF5E86CF000
|
unkown
|
page readonly
|
|
|
|
16486713000
|
unkown
|
page read and write
|
|
|
|
7FF552B25000
|
unkown
|
page readonly
|
|
|
|
2A6256B8000
|
unkown
|
page read and write
|
|
|
|
1E8C0B00000
|
unkown
|
page read and write
|
|
|
|
7FF552B7F000
|
unkown
|
page readonly
|
|
|
|
1FACCF75000
|
unkown
|
page read and write
|
|
|
|
229BC470000
|
unkown
|
page readonly
|
|
|
|
1648676A000
|
unkown
|
page read and write
|
|
|
|
7FF5941D7000
|
unkown
|
page readonly
|
|
|
|
16E90600000
|
unkown
|
page readonly
|
|
|
|
16486873000
|
unkown
|
page read and write
|
|
|
|
7FF5B21C1000
|
unkown
|
page readonly
|
|
|
|
7FF594194000
|
unkown
|
page readonly
|
|
|
|
2A6259E0000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE3F000
|
unkown
|
page readonly
|
|
|
|
C4361FF000
|
unkown
|
page read and write
|
|
|
|
7FF554D4F000
|
unkown
|
page readonly
|
|
|
|
2A625540000
|
unkown
|
page read and write
|
|
|
|
158EF400000
|
unkown
|
page readonly
|
|
|
|
7FF56A227000
|
unkown
|
page readonly
|
|
|
|
7FF5EFE5D000
|
unkown
|
page readonly
|
|
|
|
7FF552838000
|
unkown
|
page readonly
|
|
|
|
16484732000
|
unkown
|
page read and write
|
|
|
|
16486943000
|
unkown
|
page read and write
|
|
|
|
1FACD600000
|
unkown
|
page readonly
|
|
|
|
229BC666000
|
unkown
|
page read and write
|
|
|
|
164867FE000
|
unkown
|
page read and write
|
|
|
|
271AB7F000
|
unkown
|
page read and write
|
|
|
|
2280A229000
|
unkown
|
page read and write
|
|
|
|
1FACCF86000
|
unkown
|
page read and write
|
|
|
|
16596977000
|
heap default
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
2A620200000
|
unkown
|
page readonly
|
|
|
|
1FACCF38000
|
unkown
|
page read and write
|
|
|
|
7FF5EFE6A000
|
unkown
|
page readonly
|
|
|
|
7FF5B2717000
|
unkown
|
page readonly
|
|
|
|
7FF56A1C9000
|
unkown
|
page readonly
|
|
|
|
7FF5C2A3D000
|
unkown
|
page readonly
|
|
|
|
3132AFF000
|
unkown
|
page read and write
|
|
|
|
7FF52A82A000
|
unkown
|
page readonly
|
|
|
|
2A625924000
|
unkown
|
page read and write
|
|
|
|
271A0FF000
|
unkown
|
page read and write
|
|
|
|
1FACC6AA000
|
unkown
|
page read and write
|
|
|
|
16596993000
|
unkown
|
page read and write
|
|
|
|
7FF552BA2000
|
unkown
|
page readonly
|
|
|
|
1FACCF40000
|
unkown
|
page read and write
|
|
|
|
2A621461000
|
unkown
|
page read and write
|
|
|
|
7FF552A0A000
|
unkown
|
page readonly
|
|
|
|
164846B2000
|
unkown
|
page read and write
|
|
|
|
271ABFA000
|
unkown
|
page read and write
|
|
|
|
7FF5C2A31000
|
unkown
|
page readonly
|
|
|
|
A4B287D000
|
unkown
|
page read and write
|
|
|
|
7FF554D9F000
|
unkown
|
page readonly
|
|
|
|
164867C0000
|
unkown
|
page read and write
|
|
|
|
1FACCCB0000
|
unkown
|
page write copy
|
|
|
|
16596B70000
|
heap private
|
page read and write
|
|
|
|
16596B80000
|
unkown
|
page readonly
|
|
|
|
7FF56A24A000
|
unkown
|
page readonly
|
|
|
|
7FF5B261F000
|
unkown
|
page readonly
|
|
|
|
2280BCC0000
|
unkown
|
page readonly
|
|
|
|
663FEFF000
|
unkown
|
page read and write
|
|
|
|
1C14A50B000
|
heap default
|
page read and write
|
|
|
|
1FACC6B0000
|
unkown
|
page read and write
|
|
|
|
7FF4F641F000
|
unkown
|
page readonly
|
|
|
|
16485FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C29AA000
|
unkown
|
page readonly
|
|
|
|
7FF593F4F000
|
unkown
|
page readonly
|
|
|
|
16486B02000
|
unkown
|
page read and write
|
|
|
|
7FF5EF757000
|
unkown
|
page readonly
|
|
|
|
16487110000
|
unkown
|
page read and write
|
|
|
|
576D0F9000
|
unkown
|
page read and write
|
|
|
|
7FF5EFEFD000
|
unkown
|
page readonly
|
|
|
|
7FF5B263A000
|
unkown
|
page readonly
|
|
|
|
7FF5C2609000
|
unkown
|
page readonly
|
|
|
|
1FACCF64000
|
unkown
|
page read and write
|
|
|
|
271A3F9000
|
unkown
|
page read and write
|
|
|
|
7FF5C27BE000
|
unkown
|
page readonly
|
|
|
|
7FF552B9A000
|
unkown
|
page readonly
|
|
|
|
7FF5BFC6A000
|
unkown
|
page readonly
|
|
|
|
1648467F000
|
unkown
|
page read and write
|
|
|
|
16486490000
|
unkown
|
page read and write
|
|
|
|
1FACCF65000
|
unkown
|
page read and write
|
|
|
|
16484663000
|
unkown
|
page read and write
|
|
|
|
7FF5B22D5000
|
unkown
|
page readonly
|
|
|
|
7FF594102000
|
unkown
|
page readonly
|
|
|
|
2A620013000
|
unkown
|
page read and write
|
|
|
|
7FF5EFEF1000
|
unkown
|
page readonly
|
|
|
|
7FF52A475000
|
unkown
|
page readonly
|
|
|
|
7FF5C22A5000
|
unkown
|
page readonly
|
|
|
|
1E8C0870000
|
unkown
|
page readonly
|
|
|
|
16486741000
|
unkown
|
page read and write
|
|
|
|
1E8C0A72000
|
unkown
|
page read and write
|
|
|
|
16487010000
|
unkown
|
page read and write
|
|
|
|
2A6254E0000
|
unkown
|
page readonly
|
|
|
|
C43697F000
|
unkown
|
page read and write
|
|
|
|
7FF59419B000
|
unkown
|
page readonly
|
|
|
|
2A625900000
|
unkown
|
page read and write
|
|
|
|
229BC65B000
|
unkown
|
page read and write
|
|
|
|
7FF52AC0D000
|
unkown
|
page readonly
|
|
|
|
7FF5C2827000
|
unkown
|
page readonly
|
|
|
|
7FF59418D000
|
unkown
|
page readonly
|
|
|
|
1FACC64B000
|
unkown
|
page read and write
|
|
|
|
7FF5E87AA000
|
unkown
|
page readonly
|
|
There are 1280 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://24mbw17feyn.typeform.com/to/ZlFRrg5s
|
|
|
|
https://www.typeform.com/?utm_campaign=undefined&utm_source=typeform.com-17520522-Free&utm_medium=typeform&utm_content=typeform-closescreen&utm_term=EN
|
|