IOCReport

loading gif

Files

File Path
Type
Category
Malicious
pan0ramic0.jpg.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRREGTT0\contextual.media[1].xml
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\N1T746IE\www.msn[1].xml
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{150E5F01-5CEB-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{150E5F03-5CEB-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{363952B2-5CEB-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{4BD593AD-5CEB-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
modified
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\85-0f8009-68ddb2ab[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AAzb5EX[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB10MkbM[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB14EN7h[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB15AQNm[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1breIx[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cEP3G[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cG73h[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cYFXc[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cYN9h[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cYuNh[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cZb1L[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1kvzy[1].png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB6Ma4a[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBX2afX[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\a8a064[1].gif
GIF image data, version 89a, 28 x 28
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[2].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\e151e5[1].gif
GIF image data, version 89a, 1 x 1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fcmain[1].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_0eae2fe61e6ffcfcfe353bd536e5886d[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_dc61393ff2d92a14b78c0dbe133b5459[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otFlat[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otPcCenter[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\41-0bee62-68ddb2ab[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\58-acd805-185735b[1].css
UTF-8 Unicode text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB14hq0P[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cXYES[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cYLLX[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cYVyx[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cYWTM[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cYZkP[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cYjaY[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cZ1Ru[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cZcp6[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cZph1[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hjL[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBIbVOm[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBMW3y8[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBPfCZL[1].png
GIF image data, version 89a, 50 x 50
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBkwUr[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBnYSFZ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_IBK_606910635__VqZNjsRU[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iab2Data[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery-2.1.1.min[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\medianet[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\medianet[2].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otTCF-ie[1].js
UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4996b9[1].woff
Web Open Font Format, TrueType, length 45633, version 1.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\755f86[1].png
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAuTnto[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAyuliQ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cGyFI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cXQSk[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cYSRo[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cYXM1[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cZ04B[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 350x350, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cZ1Ru[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cZ6aY[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cZh66[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cZiQF[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBO5Geh[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBVuddh[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBY7ARN[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\aadcdc47-f267-4b70-bc4e-4fdd88f9ef0d[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\auction[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fcmain[1].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\http___cdn.taboola.com_libtrc_static_thumbnails_634028cc45358ad57db10dfb727c0507[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_IBK_542734683__zTLH6vUV[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\http___cdn.taboola.com_libtrc_static_thumbnails_c63444a7cded4449381870b6d61112c8[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\otBannerSdk[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\otSDKStub[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\qkR[1].avi
data
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\83cfba42-7d45-4670-a4a7-a3211ca07534[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAzjSw3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB17milU[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1ardZ3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cXwvz[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cY10a[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cY3NL[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cYZKx[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZ1e1[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZ69Y[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZsNR[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZtc4[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZwHK[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1cZyOI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB7gRE[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBZ3zrM[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\a5ea21[1].ico
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cfdbd9[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\http___cdn.taboola.com_libtrc_static_thumbnails_9de64e087342a200ccd3882b3b32d7d2[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\http___cdn.taboola.com_libtrc_static_thumbnails_b735c05319719836ca882359e4b7c3ba[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\https___console.brax-cdn.com_creatives_b9476698-227d-4478-b354-042472d9181c_TB1705-old_man_double_pinching_next_to_head_1200x800_1000x600_0f62e6c9d0c1417d85035314dafd1e27[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nrrV63415[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Temp\~DF25729AF1C419018D.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF29ECE3AD6317113C.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF52F3F9ED60A23A41.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF8682B98511D3EB4D.TMP
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\KMVPMCEGIQWYNY3S68AL.temp
data
dropped
clean
There are 117 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe /s C:\Users\user\Desktop\pan0ramic0.jpg.dll
malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\pan0ramic0.jpg.dll'
clean
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c 'C:\Program Files\Internet Explorer\iexplore.exe'
clean
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5560 CREDAT:17410 /prefetch:2
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5560 CREDAT:82960 /prefetch:2
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5560 CREDAT:17426 /prefetch:2
clean

URLs

Name
IP
Malicious
http://searchads.msn.net/.cfm?&&kp=1&
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172
unknown
clean
https://www.msn.com/de-ch/nachrichten/coronareisen
unknown
clean
https://www.remixd.com/privacy_policy.html
unknown
clean
https://onedrive.live.com;Fotos
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
unknown
clean
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
unknown
clean
http://ogp.me/ns/fb#
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
unknown
clean
https://outlook.live.com/mail/deeplink/compose;Kalender
unknown
clean
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
unknown
clean
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
unknown
clean
http://www.reddit.com/
unknown
clean
https://www.skype.com/
unknown
clean
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ce_sharpen%2Ch_311%2Cw_207%2Cc_fill%
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
unknown
clean
https://www.msn.com/de-ch/nachrichten/regional
unknown
clean
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
unknown
clean
https://www.msn.com/de-ch/news/other/nach-razzia-gegen-mutmassliche-neonazis-rechtsextreme-junge-tat
unknown
clean
https://www.msn.com/de-ch/news/other/auto-der-milit%c3%a4rpolizei-kollidiert-mit-tram/ar-BB1cZe9U?oc
unknown
clean
https://amzn.to/2TTxhNg
unknown
clean
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
unknown
clean
https://client-s.gateway.messenger.live.com
unknown
clean
https://www.brightcom.com/privacy-policy/
unknown
clean
https://www.msn.com/de-ch/
unknown
clean
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
unknown
clean
https://bealion.com/politica-de-cookies
unknown
clean
https://www.msn.com/de-ch
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
unknown
clean
https://twitter.com/i/notifications;Ich
unknown
clean
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
unknown
clean
https://www.gadsme.com/privacy-policy/
unknown
clean
https://portal.eu.numbereight.me/policies-license#software-privacy-notice
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
unknown
clean
https://www.msn.com/de-ch/news/other/die-stadt-z%c3%bcrich-schnappt-sich-einen-begehrten-kita-stando
unknown
clean
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
unknown
clean
http://www.youtube.com/
unknown
clean
http://ocsp.sca1b.amazontrust.com/images/kVEpvusUliP22lb4Rk/d17iizKsx/VYoeVRB64FpgrYeurIWv/f_2FrjqocbrZFkeJAAU/ZoluLt_2FQc9thneSLw55s/rwD_2B7CC3E4m/h1h_2BYD/_2BOIFG4qmOWI2_2BZz8VRe/v0IC7ic1ri/fa6P17gcmqONonsX_/2FtCrClp9vts/iYUQT4nflFM/pDsA_2BimLN1V1/YiWwAdx5I/qkR.avi
143.204.214.141
clean
http://ogp.me/ns#
unknown
clean
https://docs.prebid.org/privacy.html
unknown
clean
https://onedrive.live.com/?qt=mru;OneDrive-App
unknown
clean
https://www.skype.com/de
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
unknown
clean
https://www.skype.com/de/download-skype
unknown
clean
https://www.stroeer.de/fileadmin/de/Konvergenz_und_Konzepte/Daten_und_Technologien/Stroeer_SSP/Downl
unknown
clean
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
unknown
clean
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
unknown
clean
https://channelpilot.co.uk/privacy-policy
unknown
clean
https://onedrive.live.com;OneDrive-App
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
unknown
clean
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
unknown
clean
http://www.amazon.com/
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
unknown
clean
http://www.twitter.com/
unknown
clean
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
unknown
clean
https://www.admo.tv/en/privacy-policy
unknown
clean
https://www.msn.com/de-ch/news/other/bau-des-neuen-calatrava-geb%c3%a4udes-startet-im-fr%c3%bchling/
unknown
clean
https://www.msn.com/de-ch/news/other/wir-sind-froh-dass-filou-den-angriff-%c3%bcberlebt-hat/ar-BB1cZ
unknown
clean
https://www.bet365affiliates.com/UI/Pages/Affiliates/Affiliates.aspx?ContentPath
unknown
clean
https://cdn.cookielaw.org/vendorlist/googleData.json
unknown
clean
https://outlook.com/
unknown
clean
https://www.msn.com/de-ch/news/other/ich-habe-mehrere-kritische-man%c3%b6ver-mit-autofahrern-erlebt/
unknown
clean
https://rover.ebay.com/rover/1/5222-53480-19255-0/1?mpre=https%3A%2F%2Fwww.ebay.ch&campid=533862
unknown
clean
https://www.msn.com/de-ch/news/other/twitter-sperrt-accounts-von-svp-kantonsrat-claudio-schmid/ar-BB
unknown
clean
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
unknown
clean
https://cdn.cookielaw.org/vendorlist/iabData.json
unknown
clean
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
unknown
clean
https://cdn.cookielaw.org/vendorlist/iab2Data.json
unknown
clean
https://onedrive.live.com/?qt=mru;Aktuelle
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
unknown
clean
https://www.msn.com/de-ch/news/other/mehr-geld-f%c3%bcr-die-sicherheit-j%c3%bcdischer-organisationen
unknown
clean
https://www.msn.com/de-ch/homepage/api/modules/fetch"
unknown
clean
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
unknown
clean
http://www.nytimes.com/
unknown
clean
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
unknown
clean
https://www.bidstack.com/privacy-policy/
unknown
clean
https://onedrive.live.com/about/en/download/
unknown
clean
http://popup.taboola.com/german
unknown
clean
https://listonic.com/privacy/
unknown
clean
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
unknown
clean
https://twitter.com/
unknown
clean
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
unknown
clean
https://www.msn.com/de-ch/news/other/j%c3%bcdische-gemeinden-in-z%c3%bcrich-erhalten-700-000-franken
unknown
clean
https://quantyoo.de/datenschutz
unknown
clean
https://outlook.live.com/calendar
unknown
clean
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
unknown
clean
https://www.msn.com/de-ch/news/other/kommentar-es-braucht-keine-staatlichen-kitas-in-der-stadt-z%c3%
unknown
clean
https://onedrive.live.com/#qt=mru
unknown
clean
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
unknown
clean
https://www.msn.com?form=MY01O4&OCID=MY01O4
unknown
clean
https://www.vidstart.com/wp-content/uploads/2018/09/PrivacyPolicyPDF-Vidstart.pdf
unknown
clean
https://support.skype.com
unknown
clean
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
unknown
clean
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
contextual.media.net
104.76.200.23
clean
tls13.taboola.map.fastly.net
151.101.1.44
clean
ocsp.sca1b.amazontrust.com
143.204.214.141
clean
hblg.media.net
104.76.200.23
clean
lg3.media.net
104.76.200.23
clean
web.vortex.data.msn.com
unknown
clean
www.msn.com
unknown
clean
srtb.msn.com
unknown
clean
img.img-taboola.com
unknown
clean
cvision.media.net
unknown
clean

IPs

IP
Domain
Country
Active
Malicious
192.168.2.1
unknown
unknown
unknown
clean
143.204.214.141
unknown
United States
unknown
clean
151.101.1.44
unknown
United States
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{150E5F01-5CEB-11EB-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
AdminActive
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
Window_Placement
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
NextUpdateDate
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
There are 111 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
56E8000
heap private
page read and write
malicious
7FF5212F3000
unkown
page readonly
clean
1EDB7972000
unkown
page read and write
clean
7FF52C688000
unkown
page readonly
clean
28B8334E000
unkown
page read and write
clean
EC1E6FD000
unkown
page read and write
clean
27C2F68E000
unkown
page read and write
clean
25660458000
unkown
page read and write
clean
28B8332E000
unkown
page read and write
clean
28B83356000
unkown
page read and write
clean
28B82B13000
unkown
page read and write
clean
185097F000
unkown
page read and write
clean
7FF56CECE000
unkown
page readonly
clean
28B83344000
unkown
page read and write
clean
7FF52109C000
unkown
page readonly
clean
7FF5B364E000
unkown
page readonly
clean
6E280000
unkown image
page read and write
clean
27C32010000
unkown
page read and write
clean
22DC3888000
unkown
page read and write
clean
7FF52C6C9000
unkown
page readonly
clean
9CFC0FE000
unkown
page read and write
clean
7FF5580EC000
unkown
page readonly
clean
E7F49FA000
unkown
page read and write
clean
20D487D0000
unkown
page readonly
clean
7FF50B357000
unkown
page readonly
clean
28B8332F000
unkown
page read and write
clean
7FF56CEA8000
unkown
page readonly
clean
7FF55815E000
unkown
page readonly
clean
7FF50B353000
unkown
page readonly
clean
7FF52C714000
unkown
page readonly
clean
28B83347000
unkown
page read and write
clean
20D48390000
unkown
page read and write
clean
20008202000
unkown
page read and write
clean
14BDB7A000
unkown
page read and write
clean
12DAE580000
unkown
page readonly
clean
7FF51470C000
unkown
page readonly
clean
1F12F130000
unkown
page readonly
clean
7FF56CC9D000
unkown
page readonly
clean
27C31B00000
unkown
page read and write
clean
20008040000
heap private
page read and write
clean
12401FE000
unkown
page read and write
clean
2E70000
unkown
page execute and read and write
clean
7FF538DFB000
unkown
page readonly
clean
200080A0000
heap default
page read and write
clean
7FF50E6CE000
unkown
page readonly
clean
28B83335000
unkown
page read and write
clean
1EDB7B80000
unkown
page read and write
clean
20D42E71000
unkown
page read and write
clean
4B1F000
unkown
page read and write
clean
7FF570CF2000
unkown
page readonly
clean
7FF51E54C000
unkown
page readonly
clean
1D1D6002000
unkown
page read and write
clean
E7F4FFB000
unkown
page read and write
clean
7FF520F20000
unkown
page readonly
clean
7FF5397EC000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
7FF4F8572000
unkown
page readonly
clean
7FF570D51000
unkown
page readonly
clean
27C31943000
unkown
page read and write
clean
7FF50E6D1000
unkown
page readonly
clean
28B83330000
unkown
page read and write
clean
7FF52117E000
unkown
page readonly
clean
9CFBB7B000
unkown
page read and write
clean
7FF5005F5000
unkown
page readonly
clean
1C752F00000
unkown
page read and write
clean
179FE380000
unkown
page write copy
clean
1C750E20000
heap private
page read and write
clean
1C753050000
unkown
page read and write
clean
27C3171A000
unkown
page read and write
clean
28B83362000
unkown
page read and write
clean
F6F13F7000
unkown
page read and write
clean
28B83382000
unkown
page read and write
clean
7FF5580DC000
unkown
page readonly
clean
7FF5393D2000
unkown
page readonly
clean
12DAE662000
unkown
page read and write
clean
1C752DE0000
unkown
page readonly
clean
7FF51E330000
unkown
page readonly
clean
2EA5000
heap default
page read and write
clean
20B6FC3E000
unkown
page read and write
clean
E30000
unkown
page read and write
clean
7FF51E564000
unkown
page readonly
clean
12DAE64E000
unkown
page read and write
clean
7FF56D017000
unkown
page readonly
clean
7FF52C435000
unkown
page readonly
clean
7FF50E3A0000
unkown
page readonly
clean
12DAE64B000
unkown
page read and write
clean
7FF5395CE000
unkown
page readonly
clean
7FF4F85DD000
unkown
page readonly
clean
7FF56D058000
unkown
page readonly
clean
7FF50E587000
unkown
page readonly
clean
7FF539677000
unkown
page readonly
clean
27C31797000
unkown
page read and write
clean
25660485000
unkown
page read and write
clean
20D48454000
unkown
page read and write
clean
7FF5E672A000
unkown
page readonly
clean
7FF579B00000
unkown
page readonly
clean
7FF4F8588000
unkown
page readonly
clean
221FFFE000
unkown
page read and write
clean
28B82B16000
unkown
page read and write
clean
28B8335A000
unkown
page read and write
clean
7FF56D0DC000
unkown
page readonly
clean
28B83361000
unkown
page read and write
clean
7FF5ED7A9000
unkown
page readonly
clean
20D48680000
unkown
page read and write
clean
25660402000
unkown
page read and write
clean
7FF4F85C9000
unkown
page readonly
clean
28B8334E000
unkown
page read and write
clean
7FF56CDD7000
unkown
page readonly
clean
221B526C000
unkown
page read and write
clean
7FF5005D6000
unkown
page readonly
clean
27C310A0000
unkown
page readonly
clean
28B83100000
unkown
page read and write
clean
7FF539869000
unkown
page readonly
clean
7FF5B3511000
unkown
page readonly
clean
221FCFE000
unkown
page read and write
clean
1D1D6000000
unkown
page read and write
clean
20D48200000
unkown
page read and write
clean
E7F4B7A000
unkown
page read and write
clean
27C2F6E0000
unkown
page read and write
clean
2591000
unkown
page readonly
clean
7FF570593000
unkown
page readonly
clean
28B83353000
unkown
page read and write
clean
28B82ACF000
unkown
page read and write
clean
7FF5E6795000
unkown
page readonly
clean
7FF570A20000
unkown
page readonly
clean
1C753060000
unkown
page readonly
clean
7FF5005E6000
unkown
page readonly
clean
247B9490000
heap default
page read and write
clean
221B51C0000
unkown
page readonly
clean
22DC37E0000
unkown
page read and write
clean
C37DA7E000
unkown
page read and write
clean
7FF521133000
unkown
page readonly
clean
7FF50B3F6000
unkown
page readonly
clean
7FF521396000
unkown
page readonly
clean
12DAE63D000
unkown
page read and write
clean
28B8335F000
unkown
page read and write
clean
7FF50B3E6000
unkown
page readonly
clean
12DAE646000
unkown
page read and write
clean
A3D407E000
unkown
page read and write
clean
7FF50B327000
unkown
page readonly
clean
27A7000
unkown
page readonly
clean
B3FBFFC000
unkown
page read and write
clean
20D484F0000
unkown
page read and write
clean
20D484A5000
unkown
page read and write
clean
3EAAE7B000
unkown
page read and write
clean
7FF558161000
unkown
page readonly
clean
7FF50E63D000
unkown
page readonly
clean
9CFBE7E000
unkown
page read and write
clean
E7F497E000
unkown
page read and write
clean
7FF5E6700000
unkown
page readonly
clean
F6F1879000
unkown
page read and write
clean
7FF5396DC000
unkown
page readonly
clean
7FF53957E000
unkown
page readonly
clean
7FF56CEEF000
unkown
page readonly
clean
305A000
heap default
page read and write
clean
1D1D6200000
unkown
page write copy
clean
7FF514799000
unkown
page readonly
clean
7FF557C5A000
unkown
page readonly
clean
20D48660000
unkown
page read and write
clean
28B82AD6000
unkown
page read and write
clean
20008A02000
unkown
page read and write
clean
7FF51E47A000
unkown
page readonly
clean
22DC38C2000
unkown
page read and write
clean
4ADE000
unkown
page read and write
clean
1D1D6029000
unkown
page read and write
clean
221B51B0000
heap default
page read and write
clean
12DAE63A000
unkown
page read and write
clean
7FF50B386000
unkown
page readonly
clean
7FF5762FA000
unkown
page readonly
clean
1A2946C0000
unkown
page read and write
clean
7FF5580AF000
unkown
page readonly
clean
200081A0000
unkown
page read and write
clean
27D0000
unkown
page readonly
clean
20B6FE00000
unkown
page readonly
clean
20008400000
unkown
page readonly
clean
7FF50AF83000
unkown
page readonly
clean
7FF575C67000
unkown
page readonly
clean
7FF50E440000
unkown
page readonly
clean
27C2F6E0000
unkown
page read and write
clean
28B83344000
unkown
page read and write
clean
1D1D7B10000
unkown
page readonly
clean
7FF51464A000
unkown
page readonly
clean
1C750E80000
heap default
page read and write
clean
20B6FC02000
unkown
page read and write
clean
28B83367000
unkown
page read and write
clean
12400FA000
unkown
page read and write
clean
20D48447000
unkown
page read and write
clean
E7F52FB000
unkown
page read and write
clean
28B83362000
unkown
page read and write
clean
1C7510C8000
unkown
page read and write
clean
28B8336C000
unkown
page read and write
clean
1EEC748C000
unkown
page read and write
clean
28B83362000
unkown
page read and write
clean
7FF50B39A000
unkown
page readonly
clean
7FF53985E000
unkown
page readonly
clean
27C31983000
unkown
page read and write
clean
7FF557C70000
unkown
page readonly
clean
1A292C40000
unkown
page read and write
clean
7FF51E1FE000
unkown
page readonly
clean
27C31480000
unkown
page readonly
clean
14BD979000
unkown
page read and write
clean
28B83800000
unkown
page read and write
clean
27C2F746000
unkown
page read and write
clean
7FF557EEF000
unkown
page readonly
clean
E7F527B000
unkown
page read and write
clean
28B83355000
unkown
page read and write
clean
28B82B02000
unkown
page read and write
clean
2D2D000
unkown
page read and write
clean
28B82A7C000
unkown
page read and write
clean
28B8332F000
unkown
page read and write
clean
A3D3B7B000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
7FF500669000
unkown
page readonly
clean
512F2F5000
unkown
page read and write
clean
1C751200000
unkown
page readonly
clean
20B6FC77000
unkown
page read and write
clean
28D066D0000
unkown
page readonly
clean
2751000
unkown
page readonly
clean
E7F56FE000
unkown
page read and write
clean
28B8334E000
unkown
page read and write
clean
7FF5580B9000
unkown
page readonly
clean
7FF51E567000
unkown
page readonly
clean
1D1D6013000
unkown
page read and write
clean
7FF521312000
unkown
page readonly
clean
1EDB7B75000
heap private
page read and write
clean
7FF50065E000
unkown
page readonly
clean
7FF51E5C9000
unkown
page readonly
clean
E7F50FB000
unkown
page read and write
clean
1EEC748C000
unkown
page read and write
clean
28B83327000
unkown
page read and write
clean
1A292BC0000
unkown
page readonly
clean
25660459000
unkown
page read and write
clean
247B94A6000
heap default
page read and write
clean
20D487F0000
unkown
page readonly
clean
7FF5ED737000
unkown
page readonly
clean
1EEC7220000
heap private
page read and write
clean
B036D79000
unkown
page read and write
clean
1EEC7413000
unkown
page read and write
clean
7FF5211DE000
unkown
page readonly
clean
7FF5144EA000
unkown
page readonly
clean
7FF5212CA000
unkown
page readonly
clean
22DC383E000
unkown
page read and write
clean
7FF5E6647000
unkown
page readonly
clean
7FF5B337B000
unkown
page readonly
clean
28B83100000
unkown
page readonly
clean
D73E67A000
unkown
page read and write
clean
7FF51471C000
unkown
page readonly
clean
28B82AC5000
unkown
page read and write
clean
7FF579A78000
unkown
page readonly
clean
7FF4F8230000
unkown
page readonly
clean
28B83364000
unkown
page read and write
clean
7FF4F8679000
unkown
page readonly
clean
28B83361000
unkown
page read and write
clean
1F12EA02000
unkown
page read and write
clean
7FF50E4C8000
unkown
page readonly
clean
20D42E8F000
unkown
page read and write
clean
12DAE65C000
unkown
page read and write
clean
CED497F000
unkown
page read and write
clean
7FF50E670000
unkown
page readonly
clean
28B83355000
unkown
page read and write
clean
27C2F69F000
unkown
page read and write
clean
7FF5397CD000
unkown
page readonly
clean
20D487E0000
unkown
page read and write
clean
7FF50058A000
unkown
page readonly
clean
27C31B02000
unkown
page read and write
clean
20D48810000
unkown
page readonly
clean
200081D0000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
256603F0000
unkown
page read and write
clean
247B9590000
unkown
page readonly
clean
7FF557FDC000
unkown
page readonly
clean
20D486C0000
unkown
page read and write
clean
28B83396000
unkown
page read and write
clean
E7F4F7B000
unkown
page read and write
clean
7FF576183000
unkown
page readonly
clean
28B833A2000
unkown
page read and write
clean
2844000
unkown
page readonly
clean
20D42EA0000
unkown
page read and write
clean
7FF5B3533000
unkown
page readonly
clean
7FF51E103000
unkown
page readonly
clean
27C31721000
unkown
page read and write
clean
28B83330000
unkown
page read and write
clean
7FF575C71000
unkown
page readonly
clean
7FF5003EF000
unkown
page readonly
clean
179FE453000
unkown
page read and write
clean
7FF514716000
unkown
page readonly
clean
7FF50B268000
unkown
page readonly
clean
28D063D0000
unkown
page readonly
clean
1D1D5F30000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
7FF5B3552000
unkown
page readonly
clean
7FF500669000
unkown
page readonly
clean
7FF5B35CC000
unkown
page readonly
clean
7FF5211CC000
unkown
page readonly
clean
7FF50B388000
unkown
page readonly
clean
7FF4F8614000
unkown
page readonly
clean
27C317EE000
unkown
page read and write
clean
1C753050000
unkown
page read and write
clean
1EDB7890000
unkown
page read and write
clean
7FF5B3537000
unkown
page readonly
clean
2BB0000
unkown
page readonly
clean
7FF5B3562000
unkown
page readonly
clean
7FF4F8679000
unkown
page readonly
clean
25660518000
unkown
page read and write
clean
28B8336F000
unkown
page read and write
clean
28B82A4E000
unkown
page read and write
clean
7FF5580F5000
unkown
page readonly
clean
221B51E0000
unkown
page read and write
clean
7FF50B19B000
unkown
page readonly
clean
27C32010000
unkown
page read and write
clean
FB7000
heap default
page read and write
clean
7FF5146A6000
unkown
page readonly
clean
28B83331000
unkown
page read and write
clean
2E6E000
unkown
page read and write
clean
283B000
unkown
page readonly
clean
7FF579AAF000
unkown
page readonly
clean
1D1D7A10000
unkown
page read and write
clean
20D43DE0000
unkown
page read and write
clean
7FF514647000
unkown
page readonly
clean
7FF51E4D2000
unkown
page readonly
clean
28B83110000
unkown
page read and write
clean
7FF56D100000
unkown
page readonly
clean
B3FB8EC000
unkown
page read and write
clean
7FF5395C6000
unkown
page readonly
clean
2758000
unkown
page readonly
clean
27C2F68A000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
179FE400000
unkown
page read and write
clean
28B8336B000
unkown
page read and write
clean
E7F51FB000
unkown
page read and write
clean
B3FC37E000
unkown
page read and write
clean
7FF52C705000
unkown
page readonly
clean
7FF50B1AC000
unkown
page readonly
clean
28B828F0000
unkown
page readonly
clean
7FF5144C4000
unkown
page readonly
clean
7FF52102C000
unkown
page readonly
clean
28B83321000
unkown
page read and write
clean
20D484B9000
unkown
page read and write
clean
221B5280000
unkown
page read and write
clean
28B82A00000
unkown
page read and write
clean
1C751029000
unkown
page read and write
clean
7FF5B31D0000
unkown
page readonly
clean
1F12F400000
unkown
page readonly
clean
D73EA7B000
unkown
page read and write
clean
7FF50B3E1000
unkown
page readonly
clean
7FF5E6310000
unkown
page readonly
clean
28B8338C000
unkown
page read and write
clean
7FF56D072000
unkown
page readonly
clean
B036CFE000
unkown
page read and write
clean
20D43615000
unkown
page read and write
clean
7FF56D169000
unkown
page readonly
clean
7FF5005B9000
unkown
page readonly
clean
2BD0000
unkown
page readonly
clean
124007E000
unkown
page read and write
clean
7FF558169000
unkown
page readonly
clean
28B83317000
unkown
page read and write
clean
7FF5397F5000
unkown
page readonly
clean
7FF514403000
unkown
page readonly
clean
7FF50B414000
unkown
page readonly
clean
20B70600000
unkown
page readonly
clean
7FF514734000
unkown
page readonly
clean
7FF520BCB000
unkown
page readonly
clean
7FF514730000
unkown
page readonly
clean
7FF4F866E000
unkown
page readonly
clean
7FF5395EF000
unkown
page readonly
clean
6E220000
unkown image
page readonly
clean
20008180000
unkown
page readonly
clean
7FF50B31A000
unkown
page readonly
clean
179FE2B0000
unkown
page readonly
clean
7FF570D4E000
unkown
page readonly
clean
7FF579B07000
unkown
page readonly
clean
28B833A2000
unkown
page read and write
clean
7FF52138C000
unkown
page readonly
clean
E7F4D7C000
unkown
page read and write
clean
7FF558062000
unkown
page readonly
clean
7FF56CE17000
unkown
page readonly
clean
28B83356000
unkown
page read and write
clean
7FF570B29000
unkown
page readonly
clean
1A292D00000
unkown
page read and write
clean
28B83393000
unkown
page read and write
clean
20B6FD02000
unkown
page read and write
clean
22DC4100000
unkown
page read and write
clean
20008263000
unkown
page read and write
clean
25F4000
unkown
page readonly
clean
28B83380000
unkown
page read and write
clean
7FF51E531000
unkown
page readonly
clean
7FF500160000
unkown
page readonly
clean
7FF4F85AE000
unkown
page readonly
clean
7FF50DEA1000
unkown
page readonly
clean
7FF500604000
unkown
page readonly
clean
7FF50B34C000
unkown
page readonly
clean
25660464000
unkown
page read and write
clean
22DC3A00000
unkown
page readonly
clean
20D486F0000
unkown
page read and write
clean
22DC38BA000
unkown
page read and write
clean
247B94BF000
unkown
page read and write
clean
7FF52C779000
unkown
page readonly
clean
7FF5395D5000
unkown
page readonly
clean
7FF5E6702000
unkown
page readonly
clean
1EDB8466000
unkown
page read and write
clean
7FF52C686000
unkown
page readonly
clean
28B83368000
unkown
page read and write
clean
1EEC7A60000
unkown
page readonly
clean
20D484E0000
unkown
page read and write
clean
7FF50B3B5000
unkown
page readonly
clean
7FF51E101000
unkown
page readonly
clean
28B83356000
unkown
page read and write
clean
22DC3750000
heap private
page read and write
clean
1C751055000
unkown
page read and write
clean
20D48270000
unkown
page read and write
clean
20D43704000
unkown
page read and write
clean
7FF570891000
unkown
page readonly
clean
B036E7E000
unkown
page read and write
clean
28B8338C000
unkown
page read and write
clean
27C31A42000
unkown
page read and write
clean
7FF579AD6000
unkown
page readonly
clean
28B83372000
unkown
page read and write
clean
2BF0000
unkown
page read and write
clean
E7F557D000
unkown
page read and write
clean
7FF4F85EC000
unkown
page readonly
clean
28B8332F000
unkown
page read and write
clean
27C31700000
unkown
page read and write
clean
28B83A00000
unkown
page readonly
clean
7FF521419000
unkown
page readonly
clean
28B82AD6000
unkown
page read and write
clean
1EEC746D000
unkown
page read and write
clean
D73EEFD000
unkown
page read and write
clean
7FF539869000
unkown
page readonly
clean
7FF576366000
unkown
page readonly
clean
32C0000
unkown
page readonly
clean
7FF5B3650000
unkown
page readonly
clean
27C3171D000
unkown
page read and write
clean
7FF5ED6B2000
unkown
page readonly
clean
2670000
unkown
page readonly
clean
7FF5B35F4000
unkown
page readonly
clean
7FF557E8A000
unkown
page readonly
clean
28B83364000
unkown
page read and write
clean
7FF52C672000
unkown
page readonly
clean
32B0000
heap private
page read and write
clean
7FF56D021000
unkown
page readonly
clean
20D42CD0000
heap private
page read and write
clean
27C2F697000
unkown
page read and write
clean
20D42F07000
unkown
page read and write
clean
303F000
unkown
page read and write
clean
CED46FF000
unkown
page read and write
clean
2E0F000
unkown
page readonly
clean
27C314B0000
unkown
page readonly
clean
7FF5ED6F9000
unkown
page readonly
clean
E80000
heap default
page read and write
clean
20D48820000
unkown
page read and write
clean
20D42E8F000
unkown
page read and write
clean
7FF570C48000
unkown
page readonly
clean
56EA000
heap private
page read and write
clean
20D483C0000
unkown
page read and write
clean
7FF53958F000
unkown
page readonly
clean
7FF5761F7000
unkown
page readonly
clean
27D5000
unkown
page readonly
clean
12DAE669000
unkown
page read and write
clean
247B94B7000
unkown
page read and write
clean
20B6FC28000
unkown
page read and write
clean
7FF5ED7A9000
unkown
page readonly
clean
7FF50E58A000
unkown
page readonly
clean
7FF579B69000
unkown
page readonly
clean
7FF5B34F1000
unkown
page readonly
clean
184FCEC000
unkown
page read and write
clean
7FF5E67FE000
unkown
page readonly
clean
7FF539762000
unkown
page readonly
clean
2BF0000
unkown
page read and write
clean
25660270000
heap private
page read and write
clean
7FF52C518000
unkown
page readonly
clean
7FF52102F000
unkown
page readonly
clean
28B82AB0000
unkown
page read and write
clean
E7F55F9000
unkown
page read and write
clean
7FF521227000
unkown
page readonly
clean
20B6FA00000
heap private
page read and write
clean
247B9660000
unkown
page read and write
clean
B3FC27D000
unkown
page read and write
clean
28B83357000
unkown
page read and write
clean
7FF579235000
unkown
page readonly
clean
256623C0000
unkown
page read and write
clean
2D34000
unkown
page read and write
clean
1D1D6043000
unkown
page read and write
clean
27C2F69B000
unkown
page read and write
clean
7FF5ED70D000
unkown
page readonly
clean
CED47F9000
unkown
page read and write
clean
7FF5ED747000
unkown
page readonly
clean
7FF5E67A0000
unkown
page readonly
clean
20D42E13000
unkown
page read and write
clean
7FF56D09E000
unkown
page readonly
clean
28D06413000
unkown
page read and write
clean
221B524B000
unkown
page read and write
clean
27C31A00000
unkown
page read and write
clean
512EF1E000
unkown
page read and write
clean
28B83331000
unkown
page read and write
clean
D73E77A000
unkown
page read and write
clean
7FF50B3EC000
unkown
page readonly
clean
7FF50B3C9000
unkown
page readonly
clean
7FF56CED0000
unkown
page readonly
clean
7FF50E615000
unkown
page readonly
clean
28B82A82000
unkown
page read and write
clean
25660413000
unkown
page read and write
clean
27C32010000
unkown
page read and write
clean
20D483D4000
unkown
page read and write
clean
28B8335F000
unkown
page read and write
clean
7FF5B351B000
unkown
page readonly
clean
7FF5005AF000
unkown
page readonly
clean
25660449000
unkown
page read and write
clean
12DAE490000
heap default
page read and write
clean
247B9680000
unkown
page read and write
clean
28D06455000
unkown
page read and write
clean
7FF5E6300000
unkown
page readonly
clean
7FF4F7CD5000
unkown
page readonly
clean
1D1D5F20000
heap default
page read and write
clean
7FF50B1B8000
unkown
page readonly
clean
7FF4F85B5000
unkown
page readonly
clean
7FF56D014000
unkown
page readonly
clean
25661E02000
unkown
page read and write
clean
7FF50B0FC000
unkown
page readonly
clean
2566043D000
unkown
page read and write
clean
28B83802000
unkown
page read and write
clean
7FF576339000
unkown
page readonly
clean
CED467B000
unkown
page read and write
clean
7FF52C4DE000
unkown
page readonly
clean
7FF50B3BF000
unkown
page readonly
clean
7FF5B35DC000
unkown
page readonly
clean
7FF579AF5000
unkown
page readonly
clean
7FF50E4E3000
unkown
page readonly
clean
221B5200000
unkown
page read and write
clean
7FF50B368000
unkown
page readonly
clean
12DAE800000
unkown
page readonly
clean
7FF5E6718000
unkown
page readonly
clean
20D484AC000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
7FF4F8295000
unkown
page readonly
clean
1F12E980000
heap private
page read and write
clean
1A2947C0000
unkown
page readonly
clean
7FF4F8570000
unkown
page readonly
clean
7FF56CE8B000
unkown
page readonly
clean
5179000
heap private
page read and write
clean
20B6FA70000
unkown
page readonly
clean
14BDDFE000
unkown
page read and write
clean
221FC7E000
unkown
page read and write
clean
1F12F202000
unkown
page read and write
clean
27C2F702000
unkown
page read and write
clean
247B96C0000
unkown
page readonly
clean
27EA000
unkown
page readonly
clean
7FF5146DF000
unkown
page readonly
clean
7FF570CA9000
unkown
page readonly
clean
20B6FC79000
unkown
page read and write
clean
28B82A55000
unkown
page read and write
clean
7FF50B2E5000
unkown
page readonly
clean
27C317DD000
unkown
page read and write
clean
7FF521419000
unkown
page readonly
clean
7FF5B326F000
unkown
page readonly
clean
22DC37B0000
heap default
page read and write
clean
7FF56D0D6000
unkown
page readonly
clean
2EA0000
heap default
page read and write
clean
7FF579ADC000
unkown
page readonly
clean
7FF539585000
unkown
page readonly
clean
27C2F736000
unkown
page read and write
clean
7FF539860000
unkown
page readonly
clean
20008302000
unkown
page read and write
clean
7FF500578000
unkown
page readonly
clean
20D48417000
unkown
page read and write
clean
25660502000
unkown
page read and write
clean
28B82ABE000
unkown
page read and write
clean
28B8338B000
unkown
page read and write
clean
28D06513000
unkown
page read and write
clean
27C2F69D000
unkown
page read and write
clean
28B828E0000
heap default
page read and write
clean
7FF5580D6000
unkown
page readonly
clean
7FF579ACD000
unkown
page readonly
clean
1EDB7A20000
unkown
page readonly
clean
7FF5E6716000
unkown
page readonly
clean
28B83367000
unkown
page read and write
clean
7FF5ED417000
unkown
page readonly
clean
1EEC7472000
unkown
page read and write
clean
20D43718000
unkown
page read and write
clean
124017A000
unkown
page read and write
clean
1EDB7B79000
heap private
page read and write
clean
7FF50B479000
unkown
page readonly
clean
7FF575D85000
unkown
page readonly
clean
9FD000
unkown
page read and write
clean
7FF50E646000
unkown
page readonly
clean
7FF56D062000
unkown
page readonly
clean
7FF51E477000
unkown
page readonly
clean
7FF5396E7000
unkown
page readonly
clean
7FF539649000
unkown
page readonly
clean
7FF50B46E000
unkown
page readonly
clean
7FF539758000
unkown
page readonly
clean
7FF514706000
unkown
page readonly
clean
14BDA7E000
unkown
page read and write
clean
20008190000
unkown
page readonly
clean
7FF514455000
unkown
page readonly
clean
28B833AC000
unkown
page read and write
clean
27C31A02000
unkown
page read and write
clean
7FF5ED79E000
unkown
page readonly
clean
7FF5ED67A000
unkown
page readonly
clean
28B8333B000
unkown
page read and write
clean
7FF55790A000
unkown
page readonly
clean
7FF5B3228000
unkown
page readonly
clean
1A292C02000
unkown
page read and write
clean
28B82AE9000
unkown
page read and write
clean
1EDB78B0000
unkown
page read and write
clean
20D48740000
unkown
page readonly
clean
7FF5B3659000
unkown
page readonly
clean
7FF5B3315000
unkown
page readonly
clean
7FF5791CA000
unkown
page readonly
clean
7FF570D59000
unkown
page readonly
clean
7FF51E4C2000
unkown
page readonly
clean
7FF570D59000
unkown
page readonly
clean
28B83378000
unkown
page read and write
clean
221B5302000
unkown
page read and write
clean
28B8332E000
unkown
page read and write
clean
7FF50E334000
unkown
page readonly
clean
7FF50B331000
unkown
page readonly
clean
179FFDA0000
unkown
page read and write
clean
20D4844E000
unkown
page read and write
clean
7FF500600000
unkown
page readonly
clean
4B9F000
unkown
page read and write
clean
7FF50E667000
unkown
page readonly
clean
1EDB7972000
unkown
page read and write
clean
20D42EAB000
unkown
page read and write
clean
27C32310000
unkown
page read and write
clean
7FF570C9F000
unkown
page readonly
clean
28B83380000
unkown
page read and write
clean
28B83396000
unkown
page read and write
clean
7FF50E6D9000
unkown
page readonly
clean
28B8332F000
unkown
page read and write
clean
27A2000
unkown
page readonly
clean
28B82ACF000
unkown
page read and write
clean
27C3171E000
unkown
page read and write
clean
7FF5B33BE000
unkown
page readonly
clean
1F12E9E0000
heap default
page read and write
clean
28B83383000
unkown
page read and write
clean
E7F507B000
unkown
page read and write
clean
7FF50E347000
unkown
page readonly
clean
7FF50B479000
unkown
page readonly
clean
20D48441000
unkown
page read and write
clean
1EEC743C000
unkown
page read and write
clean
247B94CF000
unkown
page read and write
clean
3EAB0FE000
unkown
page read and write
clean
247B9720000
heap private
page read and write
clean
7FF50B382000
unkown
page readonly
clean
7FF56D0B9000
unkown
page readonly
clean
28B83202000
unkown
page read and write
clean
7FF4F83FF000
unkown
page readonly
clean
7FF52C6E6000
unkown
page readonly
clean
28B82AD6000
unkown
page read and write
clean
28D06502000
unkown
page read and write
clean
1C752F02000
unkown
page read and write
clean
28B82A82000
unkown
page read and write
clean
28B82A82000
unkown
page read and write
clean
28B83328000
unkown
page read and write
clean
221B5C00000
unkown
page readonly
clean
FAB000
heap default
page read and write
clean
28B83300000
unkown
page read and write
clean
1C752F33000
unkown
page read and write
clean
277A000
unkown
page readonly
clean
27C314A0000
unkown
page readonly
clean
7FF5763E1000
unkown
page readonly
clean
27C31853000
unkown
page read and write
clean
221B5400000
unkown
page readonly
clean
27C31480000
unkown
page read and write
clean
20B6FA60000
heap default
page read and write
clean
7FF52128C000
unkown
page readonly
clean
247B94BF000
unkown
page read and write
clean
7FF570CF7000
unkown
page readonly
clean
7FF514500000
unkown
page readonly
clean
2000822A000
unkown
page read and write
clean
7FF50B35C000
unkown
page readonly
clean
7FF579B61000
unkown
page readonly
clean
20B70190000
unkown
page readonly
clean
AD1207F000
unkown
page read and write
clean
28B830F0000
unkown
page readonly
clean
7FF50E60E000
unkown
page readonly
clean
B3FBCFC000
unkown
page read and write
clean
1EDB86D0000
unkown
page read and write
clean
1F12EA5A000
unkown
page read and write
clean
7FF5ED510000
unkown
page readonly
clean
28B8332C000
unkown
page read and write
clean
1C750FF0000
unkown
page read and write
clean
28B83355000
unkown
page read and write
clean
7FF5580A5000
unkown
page readonly
clean
D60000
unkown
page readonly
clean
28B83381000
unkown
page read and write
clean
7FF4F8605000
unkown
page readonly
clean
2741000
unkown
page readonly
clean
4B5E000
unkown
page read and write
clean
28B82AEC000
unkown
page read and write
clean
7FF570895000
unkown
page readonly
clean
20008213000
unkown
page read and write
clean
247B94A1000
unkown
page read and write
clean
247B949B000
heap default
page read and write
clean
7FF500562000
unkown
page readonly
clean
7FF521386000
unkown
page readonly
clean
E7F4CFB000
unkown
page read and write
clean
2E20000
heap private
page read and write
clean
7FF579AB9000
unkown
page readonly
clean
27C31410000
heap private
page read and write
clean
28B833AC000
unkown
page read and write
clean
221B5150000
heap private
page read and write
clean
7FF56D060000
unkown
page readonly
clean
7FF5E676D000
unkown
page readonly
clean
28B83364000
unkown
page read and write
clean
1C7529A0000
unkown
page read and write
clean
1EDB86A0000
unkown
page read and write
clean
28D06C02000
unkown
page read and write
clean
27C318A4000
unkown
page read and write
clean
27C31B42000
unkown
page read and write
clean
27C32110000
unkown
page read and write
clean
7FF50B410000
unkown
page readonly
clean
1A292C00000
unkown
page read and write
clean
7FF5B325D000
unkown
page readonly
clean
7FF5B3195000
unkown
page readonly
clean
7FF57634D000
unkown
page readonly
clean
28B8332E000
unkown
page read and write
clean
C37D75A000
unkown
page read and write
clean
20D48461000
unkown
page read and write
clean
7FF5ED67C000
unkown
page readonly
clean
20D42D60000
unkown
page read and write
clean
7FF52C6FC000
unkown
page readonly
clean
1A292C13000
unkown
page read and write
clean
221B5A02000
unkown
page read and write
clean
7FF5E6712000
unkown
page readonly
clean
E7F517B000
unkown
page read and write
clean
28B83327000
unkown
page read and write
clean
12DAEE02000
unkown
page read and write
clean
1EEC7280000
heap default
page read and write
clean
7FF5E674F000
unkown
page readonly
clean
7FF520F0A000
unkown
page readonly
clean
28B8332D000
unkown
page read and write
clean
28B83400000
unkown
page readonly
clean
7FF4F8582000
unkown
page readonly
clean
20D42F14000
unkown
page read and write
clean
256623D0000
unkown
page readonly
clean
27C2F800000
unkown
page readonly
clean
200081D0000
unkown
page read and write
clean
28B833A2000
unkown
page read and write
clean
7FF5146CE000
unkown
page readonly
clean
1EDB7B70000
heap private
page read and write
clean
7FF53963E000
unkown
page readonly
clean
7FF53973A000
unkown
page readonly
clean
1A292C56000
unkown
page read and write
clean
B036F7B000
unkown
page read and write
clean
28B82A7C000
unkown
page read and write
clean
28B8337A000
unkown
page read and write
clean
28B829D0000
unkown
page readonly
clean
3290000
unkown
page read and write
clean
7FF5B31E7000
unkown
page readonly
clean
7FF5ED6E5000
unkown
page readonly
clean
27C2F613000
unkown
page read and write
clean
28B833C0000
unkown
page read and write
clean
28B83367000
unkown
page read and write
clean
7FF57098A000
unkown
page readonly
clean
1EDB796B000
unkown
page read and write
clean
27C3171C000
unkown
page read and write
clean
7FF521308000
unkown
page readonly
clean
7FF521322000
unkown
page readonly
clean
20D42D30000
heap default
page read and write
clean
E7F4E7B000
unkown
page read and write
clean
1EEC746F000
unkown
page read and write
clean
7FF5703CF000
unkown
page readonly
clean
7FF5E6809000
unkown
page readonly
clean
6E27C000
unkown image
page execute and read and write
clean
7FF4F853B000
unkown
page readonly
clean
20D43718000
unkown
page read and write
clean
4E00000
heap private
page read and write
clean
FB9000
heap default
page read and write
clean
7FF50B283000
unkown
page readonly
clean
7FF4F85F6000
unkown
page readonly
clean
7FF56D15E000
unkown
page readonly
clean
7FF539778000
unkown
page readonly
clean
7FF56D0D1000
unkown
page readonly
clean
7FF5B2E93000
unkown
page readonly
clean
28B8332C000
unkown
page read and write
clean
28B83376000
unkown
page read and write
clean
7FF53979E000
unkown
page readonly
clean
7FF50B370000
unkown
page readonly
clean
28B83359000
unkown
page read and write
clean
7FF575C76000
unkown
page readonly
clean
25660600000
unkown
page readonly
clean
1EEC7380000
unkown
page read and write
clean
7FF52C717000
unkown
page readonly
clean
1F12F140000
unkown
page read and write
clean
7FF5ED5B7000
unkown
page readonly
clean
25661DC0000
unkown
page read and write
clean
28B82A50000
unkown
page read and write
clean
2794000
unkown
page readonly
clean
7FF5146FD000
unkown
page readonly
clean
1C752AA0000
unkown
page readonly
clean
28B82A89000
unkown
page read and write
clean
7FF570C44000
unkown
page readonly
clean
7FF56D0A5000
unkown
page readonly
clean
7FF570B1A000
unkown
page readonly
clean
7FF579A9E000
unkown
page readonly
clean
7FF52C605000
unkown
page readonly
clean
1C751013000
unkown
page read and write
clean
20D483B1000
unkown
page read and write
clean
27AC000
unkown
page readonly
clean
7FF51E505000
unkown
page readonly
clean
27C3174B000
unkown
page read and write
clean
F6F12FE000
unkown
page read and write
clean
27C2F755000
unkown
page read and write
clean
275F000
unkown
page readonly
clean
7FF570C50000
unkown
page readonly
clean
6E285000
unkown image
page readonly
clean
7FF521355000
unkown
page readonly
clean
7FF570CBD000
unkown
page readonly
clean
1A292C68000
unkown
page read and write
clean
7FF557F58000
unkown
page readonly
clean
27C2F656000
unkown
page read and write
clean
7FF5B35C6000
unkown
page readonly
clean
3EAAF7E000
unkown
page read and write
clean
22DC3AD0000
unkown
page readonly
clean
221B5251000
unkown
page read and write
clean
B3FC17B000
unkown
page read and write
clean
7FF52133A000
unkown
page readonly
clean
7FF570CC6000
unkown
page readonly
clean
1F12EA3F000
unkown
page read and write
clean
F6F1275000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
7FF5212FC000
unkown
page readonly
clean
7FF5397B9000
unkown
page readonly
clean
200080B0000
unkown
page readonly
clean
7FF5ED413000
unkown
page readonly
clean
1EDB86B0000
unkown
page readonly
clean
7FF5B35F0000
unkown
page readonly
clean
A3D427D000
unkown
page read and write
clean
12DAE649000
unkown
page read and write
clean
512F77F000
unkown
page read and write
clean
2AEC000
unkown
page read and write
clean
28B8335A000
unkown
page read and write
clean
7FF56CF77000
unkown
page readonly
clean
512EE9B000
unkown
page read and write
clean
28D06500000
unkown
page read and write
clean
221B5300000
unkown
page read and write
clean
7FF521158000
unkown
page readonly
clean
14BD58B000
unkown
page read and write
clean
28B83367000
unkown
page read and write
clean
7FF500661000
unkown
page readonly
clean
28B8332C000
unkown
page read and write
clean
D73E577000
unkown
page read and write
clean
1A292E00000
unkown
page readonly
clean
7FF50E343000
unkown
page readonly
clean
1A292D02000
unkown
page read and write
clean
28B82A3C000
unkown
page read and write
clean
1F12EB13000
unkown
page read and write
clean
28B83362000
unkown
page read and write
clean
7FF51E481000
unkown
page readonly
clean
12DAE67A000
unkown
page read and write
clean
28B83361000
unkown
page read and write
clean
1EEC7360000
unkown
page readonly
clean
7FF5E62FA000
unkown
page readonly
clean
7FF5397DC000
unkown
page readonly
clean
7FF55808A000
unkown
page readonly
clean
1EDB7928000
heap default
page read and write
clean
7FF52140E000
unkown
page readonly
clean
7FF4F8547000
unkown
page readonly
clean
28B83367000
unkown
page read and write
clean
52F0000
heap private
page read and write
clean
1EEC7500000
unkown
page read and write
clean
E7F48FA000
unkown
page read and write
clean
7FF5211D1000
unkown
page readonly
clean
123FDBE000
unkown
page read and write
clean
7FF5393CE000
unkown
page readonly
clean
7FF53976D000
unkown
page readonly
clean
F6F167F000
unkown
page read and write
clean
1A292C69000
unkown
page read and write
clean
28B83362000
unkown
page read and write
clean
7FF52C427000
unkown
page readonly
clean
2719000
unkown
page readonly
clean
A3D43FD000
unkown
page read and write
clean
7FF56D0EC000
unkown
page readonly
clean
28B83360000
unkown
page read and write
clean
2E01000
unkown
page execute read
clean
7FF5146AA000
unkown
page readonly
clean
7FF539772000
unkown
page readonly
clean
7FF53962B000
unkown
page readonly
clean
28B8332E000
unkown
page read and write
clean
28B83367000
unkown
page read and write
clean
7FF53927A000
unkown
page readonly
clean
20D430D0000
unkown
page readonly
clean
7FF51E4D6000
unkown
page readonly
clean
7FF52C65C000
unkown
page readonly
clean
7FF53974C000
unkown
page readonly
clean
7FF50B417000
unkown
page readonly
clean
7FF5E667C000
unkown
page readonly
clean
2D31000
unkown
page read and write
clean
7FF5E652A000
unkown
page readonly
clean
7FF5212B1000
unkown
page readonly
clean
20D483D0000
unkown
page read and write
clean
7FF5ED4FA000
unkown
page readonly
clean
7FF57631E000
unkown
page readonly
clean
20D42DF3000
unkown
page read and write
clean
7FF5213A5000
unkown
page readonly
clean
7FF5703C7000
unkown
page readonly
clean
7FF56D104000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
1850A7F000
unkown
page read and write
clean
27C318C5000
unkown
page read and write
clean
12DAE676000
unkown
page read and write
clean
C37D7DF000
unkown
page read and write
clean
28B833A7000
unkown
page read and write
clean
1F12EA76000
unkown
page read and write
clean
25660500000
unkown
page read and write
clean
E7F487E000
unkown
page read and write
clean
7FF50B1CA000
unkown
page readonly
clean
25660400000
unkown
page read and write
clean
7FF5B32DC000
unkown
page readonly
clean
28B83347000
unkown
page read and write
clean
7FF56C931000
unkown
page readonly
clean
221B5308000
unkown
page read and write
clean
B03699F000
unkown
page read and write
clean
7FF56D107000
unkown
page readonly
clean
1EDB78E0000
unkown
page readonly
clean
7FF520B5C000
unkown
page readonly
clean
7FF52C42E000
unkown
page readonly
clean
2836000
unkown
page readonly
clean
28B833BE000
unkown
page read and write
clean
1F12EB02000
unkown
page read and write
clean
A3D42FF000
unkown
page read and write
clean
221FEFE000
unkown
page read and write
clean
1D1D605B000
unkown
page read and write
clean
22DC4200000
unkown
page readonly
clean
27C2F6C4000
unkown
page read and write
clean
14BDBFD000
unkown
page read and write
clean
1EEC742A000
unkown
page read and write
clean
7FF5395AD000
unkown
page readonly
clean
F6F15F7000
unkown
page read and write
clean
B03691C000
unkown
page read and write
clean
7FF521251000
unkown
page readonly
clean
7FF50E6D9000
unkown
page readonly
clean
1EDB78D0000
unkown
page readonly
clean
7FF5ED404000
unkown
page readonly
clean
27C2F776000
unkown
page read and write
clean
7FF579AE6000
unkown
page readonly
clean
7FF52134E000
unkown
page readonly
clean
EC1DFFB000
unkown
page read and write
clean
28B8335B000
unkown
page read and write
clean
123FD3B000
unkown
page read and write
clean
30D3000
unkown
page read and write
clean
7FF5B34D7000
unkown
page readonly
clean
3EAB1FF000
unkown
page read and write
clean
7FF5E6538000
unkown
page readonly
clean
12DAE600000
unkown
page read and write
clean
7FF52C6B5000
unkown
page readonly
clean
7FF558076000
unkown
page readonly
clean
7FF539608000
unkown
page readonly
clean
1F12E9F0000
unkown
page readonly
clean
7FF51466A000
unkown
page readonly
clean
EC1E2FE000
unkown
page read and write
clean
7FF576325000
unkown
page readonly
clean
7FF50B32A000
unkown
page readonly
clean
1EDB7B60000
unkown
page read and write
clean
28B82AA9000
unkown
page read and write
clean
20D42EB6000
unkown
page read and write
clean
EC1E27E000
unkown
page read and write
clean
22DC37D0000
unkown
page readonly
clean
7FF5ED71C000
unkown
page readonly
clean
185037B000
unkown
page read and write
clean
7FF52C6F6000
unkown
page readonly
clean
179FE2A0000
heap default
page read and write
clean
27C32000000
unkown
page read and write
clean
28B83371000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
20D42EA7000
unkown
page read and write
clean
7FF5B359F000
unkown
page readonly
clean
28B8335C000
unkown
page read and write
clean
20D42E58000
unkown
page read and write
clean
27C2F714000
unkown
page read and write
clean
7FF5B3266000
unkown
page readonly
clean
CED477F000
unkown
page read and write
clean
27C2F787000
unkown
page read and write
clean
9CFC07B000
unkown
page read and write
clean
7FF55809E000
unkown
page readonly
clean
EC1E7FF000
unkown
page read and write
clean
7FF50B405000
unkown
page readonly
clean
20D42D40000
unkown
page readonly
clean
2BF0000
unkown
page read and write
clean
7FF570BE5000
unkown
page readonly
clean
7FF570C62000
unkown
page readonly
clean
E7F4EFB000
unkown
page read and write
clean
7FF570CF4000
unkown
page readonly
clean
1F12EA58000
unkown
page read and write
clean
7FF570A15000
unkown
page readonly
clean
7FF539760000
unkown
page readonly
clean
12DAE640000
unkown
page read and write
clean
221B528C000
unkown
page read and write
clean
7FF50B3DD000
unkown
page readonly
clean
7FF50B311000
unkown
page readonly
clean
28B833DB000
unkown
page read and write
clean
7FF52C76E000
unkown
page readonly
clean
FA0000
heap default
page read and write
clean
28B83360000
unkown
page read and write
clean
7FF52119F000
unkown
page readonly
clean
D73E11C000
unkown
page read and write
clean
7FF50B287000
unkown
page readonly
clean
7FF56CDEC000
unkown
page readonly
clean
28B82A13000
unkown
page read and write
clean
7FF56CFDC000
unkown
page readonly
clean
7FF539641000
unkown
page readonly
clean
28B83327000
unkown
page read and write
clean
28B82AD6000
unkown
page read and write
clean
28B830E0000
unkown
page readonly
clean
1D1D6102000
unkown
page read and write
clean
28B82AA7000
unkown
page read and write
clean
1EEC7508000
unkown
page read and write
clean
7FF51E5C9000
unkown
page readonly
clean
27C31758000
unkown
page read and write
clean
27C2F6E0000
unkown
page read and write
clean
28B83360000
unkown
page read and write
clean
28B82A4A000
unkown
page read and write
clean
27C2F6F1000
unkown
page read and write
clean
7FF570C8E000
unkown
page readonly
clean
1A294B00000
unkown
page read and write
clean
7FF5ED4D4000
unkown
page readonly
clean
27C2F6D0000
unkown
page read and write
clean
D73E979000
unkown
page read and write
clean
7FF5ED470000
unkown
page readonly
clean
28D063C0000
heap default
page read and write
clean
7FF57635C000
unkown
page readonly
clean
6E27A000
unkown image
page read and write
clean
7FF557F2E000
unkown
page readonly
clean
7FF5E658F000
unkown
page readonly
clean
27C31812000
unkown
page read and write
clean
27C2F748000
unkown
page read and write
clean
179FE43F000
unkown
page read and write
clean
7FF50DEA5000
unkown
page readonly
clean
512EF9E000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
7FF514651000
unkown
page readonly
clean
28B83383000
unkown
page read and write
clean
7FF500572000
unkown
page readonly
clean
12DAE645000
unkown
page read and write
clean
F6F107E000
unkown
page read and write
clean
20D42E94000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
28B82B08000
unkown
page read and write
clean
27C317C4000
unkown
page read and write
clean
7FF5E677C000
unkown
page readonly
clean
28B833AA000
unkown
page read and write
clean
1F12EC00000
unkown
page readonly
clean
22DC3813000
unkown
page read and write
clean
27C318C6000
unkown
page read and write
clean
7FF53968C000
unkown
page readonly
clean
7FF5210E0000
unkown
page readonly
clean
1EEC7C02000
unkown
page read and write
clean
7FF570CE5000
unkown
page readonly
clean
25662000000
unkown
page read and write
clean
E7F4DFB000
unkown
page read and write
clean
1C753090000
unkown
page readonly
clean
28B8335F000
unkown
page read and write
clean
28B8334F000
unkown
page read and write
clean
27C31983000
unkown
page read and write
clean
1F12EA6F000
unkown
page read and write
clean
247B9725000
heap private
page read and write
clean
7FF558169000
unkown
page readonly
clean
CED48FF000
unkown
page read and write
clean
27C317CD000
unkown
page read and write
clean
7FF5E5FA4000
unkown
page readonly
clean
7FF5ED726000
unkown
page readonly
clean
28B83331000
unkown
page read and write
clean
27C318A7000
unkown
page read and write
clean
7FF557F73000
unkown
page readonly
clean
56EB000
heap private
page read and write
clean
28B83303000
unkown
page read and write
clean
247B94D0000
unkown
page read and write
clean
20D42E76000
unkown
page read and write
clean
27C32010000
unkown
page read and write
clean
7FF5E6809000
unkown
page readonly
clean
E7F57FD000
unkown
page read and write
clean
7FF5E6801000
unkown
page readonly
clean
20D484B1000
unkown
page read and write
clean
7FF579AA5000
unkown
page readonly
clean
20D484B5000
unkown
page read and write
clean
512F37E000
unkown
page read and write
clean
12DAE631000
unkown
page read and write
clean
7FF52C440000
unkown
page readonly
clean
20D43600000
unkown
page read and write
clean
28B8334E000
unkown
page read and write
clean
28B82C00000
unkown
page readonly
clean
6E271000
unkown image
page readonly
clean
7FF576213000
unkown
page readonly
clean
27C317A8000
unkown
page read and write
clean
2BE0000
unkown
page execute and read and write
clean
22DC4540000
unkown
page readonly
clean
7FF51466C000
unkown
page readonly
clean
2830000
unkown
page readonly
clean
20D484B5000
unkown
page read and write
clean
247B9730000
unkown
page readonly
clean
6E230000
unkown image
page execute read
clean
2BF0000
unkown
page read and write
clean
F6F0DFB000
unkown
page read and write
clean
28B83060000
unkown
page readonly
clean
7FF5394B6000
unkown
page readonly
clean
28B83356000
unkown
page read and write
clean
7FF5B3429000
unkown
page readonly
clean
27B0000
unkown
page readonly
clean
7FF5ED465000
unkown
page readonly
clean
28B8335A000
unkown
page read and write
clean
7FF52113A000
unkown
page readonly
clean
28B83376000
unkown
page read and write
clean
6E226000
unkown image
page readonly
clean
2BF0000
unkown
page execute and read and write
clean
7FF5146A2000
unkown
page readonly
clean
28D063F0000
unkown
page read and write
clean
22DC3829000
unkown
page read and write
clean
20D43602000
unkown
page read and write
clean
7FF5146A8000
unkown
page readonly
clean
E7F45BB000
unkown
page read and write
clean
7FF5E6786000
unkown
page readonly
clean
7FF4F85E6000
unkown
page readonly
clean
131657E000
unkown
page read and write
clean
1F12EA66000
unkown
page read and write
clean
277D000
unkown
page readonly
clean
28B83370000
unkown
page read and write
clean
7FF56CE30000
unkown
page readonly
clean
28B83356000
unkown
page read and write
clean
7FF575D87000
unkown
page readonly
clean
7FF5146D5000
unkown
page readonly
clean
28B82AB2000
unkown
page read and write
clean
7FF5ED657000
unkown
page readonly
clean
28D0646F000
unkown
page read and write
clean
7FF50B1E0000
unkown
page readonly
clean
7FF52C64A000
unkown
page readonly
clean
27C2F72F000
unkown
page read and write
clean
7FF52C710000
unkown
page readonly
clean
131627B000
unkown
page read and write
clean
1C751100000
unkown
page read and write
clean
20D42EFF000
unkown
page read and write
clean
E7F4A7F000
unkown
page read and write
clean
13162FE000
unkown
page read and write
clean
27C31B42000
unkown
page read and write
clean
7FF514407000
unkown
page readonly
clean
309E000
unkown
page read and write
clean
256623C0000
unkown
page read and write
clean
28B83090000
unkown
page write copy
clean
7FF50B0E7000
unkown
page readonly
clean
1C7510BC000
unkown
page read and write
clean
2BC0000
unkown
page readonly
clean
F6F197F000
unkown
page read and write
clean
7FF4F85BF000
unkown
page readonly
clean
C37DC7A000
unkown
page read and write
clean
20D486B0000
unkown
page read and write
clean
7FF56D03C000
unkown
page readonly
clean
7FF52C6DD000
unkown
page readonly
clean
12DAE647000
unkown
page read and write
clean
1EEC7370000
unkown
page readonly
clean
7FF52122D000
unkown
page readonly
clean
1EEC7E00000
unkown
page readonly
clean
7FF51E5C0000
unkown
page readonly
clean
256623F0000
unkown
page write copy
clean
7FF50E5FA000
unkown
page readonly
clean
27C2F5E0000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
2BF0000
unkown
page read and write
clean
28B8335A000
unkown
page read and write
clean
7FF4F85E1000
unkown
page readonly
clean
7FF521411000
unkown
page readonly
clean
28B82AEC000
unkown
page read and write
clean
27C317FF000
unkown
page read and write
clean
7FF5B353C000
unkown
page readonly
clean
1EDB7972000
unkown
page read and write
clean
9CFC1F7000
unkown
page read and write
clean
20B6FB50000
unkown
page readonly
clean
7FF5704FC000
unkown
page readonly
clean
5700000
unkown
page readonly
clean
7FF5213B0000
unkown
page readonly
clean
14BD8FE000
unkown
page read and write
clean
7FF5703BE000
unkown
page readonly
clean
7FF50B1FF000
unkown
page readonly
clean
7FF5B3193000
unkown
page readonly
clean
7FF5ED744000
unkown
page readonly
clean
7FF5B35E5000
unkown
page readonly
clean
7FF5B35D6000
unkown
page readonly
clean
14BDC7E000
unkown
page read and write
clean
27C31480000
unkown
page read and write
clean
7FF570CDC000
unkown
page readonly
clean
27C31983000
unkown
page read and write
clean
7FF5B35F7000
unkown
page readonly
clean
20D484B3000
unkown
page read and write
clean
A3D417E000
unkown
page read and write
clean
2E00000
unkown
page read and write
clean
7FF50038A000
unkown
page readonly
clean
12DAE67D000
unkown
page read and write
clean
7FF4F8617000
unkown
page readonly
clean
2858000
unkown
page readonly
clean
7FF52C4FF000
unkown
page readonly
clean
7FF52C670000
unkown
page readonly
clean
27C2F629000
unkown
page read and write
clean
1C752E02000
unkown
page read and write
clean
3050000
heap default
page read and write
clean
28B833AD000
unkown
page read and write
clean
20D48445000
unkown
page read and write
clean
7FF5397D1000
unkown
page readonly
clean
7FF539442000
unkown
page readonly
clean
25660452000
unkown
page read and write
clean
20B6FB40000
unkown
page readonly
clean
7FF5B3659000
unkown
page readonly
clean
7FF5397E6000
unkown
page readonly
clean
14BDCFA000
unkown
page read and write
clean
1EDB7D90000
unkown
page readonly
clean
20D43758000
unkown
page read and write
clean
7FF539776000
unkown
page readonly
clean
7FF56CFD5000
unkown
page readonly
clean
7FF5B357A000
unkown
page readonly
clean
20B70402000
unkown
page read and write
clean
12DAE66C000
unkown
page read and write
clean
14BD9FA000
unkown
page read and write
clean
27C31877000
unkown
page read and write
clean
20B6FB60000
unkown
page read and write
clean
1A292ED0000
unkown
page write copy
clean
7FF5B2DFC000
unkown
page readonly
clean
28B83365000
unkown
page read and write
clean
7FF539804000
unkown
page readonly
clean
28D06464000
unkown
page read and write
clean
22DC3F40000
unkown
page readonly
clean
1A292F20000
unkown
page readonly
clean
27C2F735000
unkown
page read and write
clean
12DAE570000
unkown
page readonly
clean
7FF51E4B8000
unkown
page readonly
clean
7FF5397AF000
unkown
page readonly
clean
7FF570AA5000
unkown
page readonly
clean
28B833AC000
unkown
page read and write
clean
22200FF000
unkown
page read and write
clean
7FF579B5E000
unkown
page readonly
clean
7FF5E673E000
unkown
page readonly
clean
28B8331F000
unkown
page read and write
clean
27C31983000
unkown
page read and write
clean
7FF557F7D000
unkown
page readonly
clean
7FF52C668000
unkown
page readonly
clean
7FF5397A5000
unkown
page readonly
clean
7FF514460000
unkown
page readonly
clean
1C752F64000
unkown
page read and write
clean
7FF5B33DF000
unkown
page readonly
clean
2796000
unkown
page readonly
clean
7FF50E674000
unkown
page readonly
clean
7FF5704F3000
unkown
page readonly
clean
7FF514791000
unkown
page readonly
clean
7FF50042E000
unkown
page readonly
clean
CFD000
unkown
page read and write
clean
7FF520F10000
unkown
page readonly
clean
179FE240000
heap private
page read and write
clean
7FF5708FD000
unkown
page readonly
clean
28B8337E000
unkown
page read and write
clean
7FF5212F7000
unkown
page readonly
clean
7FF52C549000
unkown
page readonly
clean
7FF5210D5000
unkown
page readonly
clean
F6F177A000
unkown
page read and write
clean
7FF5B35C1000
unkown
page readonly
clean
20D48398000
unkown
page read and write
clean
7FF50B3AE000
unkown
page readonly
clean
28B82AAD000
unkown
page read and write
clean
7FF56D043000
unkown
page readonly
clean
7FF51478E000
unkown
page readonly
clean
7FF5ED6EF000
unkown
page readonly
clean
D73F0FE000
unkown
page read and write
clean
1C75103F000
unkown
page read and write
clean
7FF52137D000
unkown
page readonly
clean
7FF56D04C000
unkown
page readonly
clean
7FF5E6745000
unkown
page readonly
clean
20D483D0000
unkown
page read and write
clean
ACD000
unkown
page read and write
clean
28B83390000
unkown
page read and write
clean
7FF51E555000
unkown
page readonly
clean
1F12EA00000
unkown
page read and write
clean
7FF5B34CC000
unkown
page readonly
clean
7FF5E65CE000
unkown
page readonly
clean
7FF5ED6B6000
unkown
page readonly
clean
25660990000
unkown
page readonly
clean
256602D0000
heap default
page read and write
clean
6E223000
unkown image
page readonly
clean
221B5313000
unkown
page read and write
clean
7FF50B0E3000
unkown
page readonly
clean
20D486D0000
unkown
page read and write
clean
7FF570B67000
unkown
page readonly
clean
1F12EA2A000
unkown
page read and write
clean
20D42E94000
unkown
page read and write
clean
7FF50B135000
unkown
page readonly
clean
7FF4F8671000
unkown
page readonly
clean
1EEC7502000
unkown
page read and write
clean
7FF57625C000
unkown
page readonly
clean
7FF5B3307000
unkown
page readonly
clean
7FF56D0AF000
unkown
page readonly
clean
6E220000
unkown image
page readonly
clean
7FF51E105000
unkown
page readonly
clean
7FF5762F6000
unkown
page readonly
clean
28D06400000
unkown
page read and write
clean
20D42F02000
unkown
page read and write
clean
7FF52114C000
unkown
page readonly
clean
30C3000
unkown
page read and write
clean
1C750F60000
unkown
page write copy
clean
7FF570CD6000
unkown
page readonly
clean
7FF4F85FC000
unkown
page readonly
clean
512F67E000
unkown
page read and write
clean
EC1E4FB000
unkown
page read and write
clean
B3FBE7E000
unkown
page read and write
clean
7FF5212D1000
unkown
page readonly
clean
7FF576255000
unkown
page readonly
clean
512F47B000
unkown
page read and write
clean
7FF5143F4000
unkown
page readonly
clean
7FF5145A7000
unkown
page readonly
clean
7FF5395B6000
unkown
page readonly
clean
7FF5ED661000
unkown
page readonly
clean
7FF50043A000
unkown
page readonly
clean
1EEC7470000
unkown
page read and write
clean
B3FC0FD000
unkown
page read and write
clean
28B8334E000
unkown
page read and write
clean
51F8000
heap private
page read and write
clean
1EEC7454000
unkown
page read and write
clean
7FF5B3418000
unkown
page readonly
clean
7FF539800000
unkown
page readonly
clean
22DC38CB000
unkown
page read and write
clean
7FF557FA7000
unkown
page readonly
clean
20D42D50000
unkown
page readonly
clean
7FF5E6776000
unkown
page readonly
clean
2FFE000
unkown
page read and write
clean
28B83382000
unkown
page read and write
clean
1F12EA13000
unkown
page read and write
clean
7FF514737000
unkown
page readonly
clean
7FF52C348000
unkown
page readonly
clean
7FF521208000
unkown
page readonly
clean
D73E87E000
unkown
page read and write
clean
1D1D6250000
unkown
page readonly
clean
7FF579A60000
unkown
page readonly
clean
7FF5E67A7000
unkown
page readonly
clean
7FF50B34A000
unkown
page readonly
clean
7FF5B35A9000
unkown
page readonly
clean
20D48660000
unkown
page read and write
clean
28B8332D000
unkown
page read and write
clean
27C318CF000
unkown
page read and write
clean
7FF570C68000
unkown
page readonly
clean
1C750E90000
unkown
page readonly
clean
7FF570CCC000
unkown
page readonly
clean
7FF56D047000
unkown
page readonly
clean
7FF5ED5B3000
unkown
page readonly
clean
7FF51E4D8000
unkown
page readonly
clean
22DC37C0000
unkown
page readonly
clean
7FF56CE9C000
unkown
page readonly
clean
185057D000
unkown
page read and write
clean
7FF51E546000
unkown
page readonly
clean
7FF5B3527000
unkown
page readonly
clean
7FF56D00A000
unkown
page readonly
clean
7FF56D076000
unkown
page readonly
clean
7FF5B326C000
unkown
page readonly
clean
247B94B8000
unkown
page read and write
clean
7FF570AC0000
unkown
page readonly
clean
28B83389000
unkown
page read and write
clean
7FF5580E6000
unkown
page readonly
clean
7FF51E519000
unkown
page readonly
clean
22DC3913000
unkown
page read and write
clean
7FF56CDC4000
unkown
page readonly
clean
27C2F590000
unkown
page write copy
clean
28B8332D000
unkown
page read and write
clean
B3FC47D000
unkown
page read and write
clean
12DAE642000
unkown
page read and write
clean
4C50000
heap private
page read and write
clean
221F99B000
unkown
page read and write
clean
7FF5791CC000
unkown
page readonly
clean
7FF5580CD000
unkown
page readonly
clean
28B83359000
unkown
page read and write
clean
7FF5ED716000
unkown
page readonly
clean
7FF50059E000
unkown
page readonly
clean
256603C0000
unkown
page readonly
clean
7FF4F8244000
unkown
page readonly
clean
7FF558104000
unkown
page readonly
clean
7FF5004A1000
unkown
page readonly
clean
28B83861000
unkown
page read and write
clean
20D486F0000
unkown
page read and write
clean
12DAE66A000
unkown
page read and write
clean
27C31800000
unkown
page read and write
clean
28B8332D000
unkown
page read and write
clean
28B8332F000
unkown
page read and write
clean
7FF521328000
unkown
page readonly
clean
1EDB8720000
unkown
page read and write
clean
12DAE661000
unkown
page read and write
clean
7FF5E65DA000
unkown
page readonly
clean
28B83383000
unkown
page read and write
clean
27C317E8000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
7FF50B3FC000
unkown
page readonly
clean
7FF5146E9000
unkown
page readonly
clean
7FF539451000
unkown
page readonly
clean
7FF5ED598000
unkown
page readonly
clean
7FF500576000
unkown
page readonly
clean
7FF575B84000
unkown
page readonly
clean
20D42E7B000
unkown
page read and write
clean
7FF5E6759000
unkown
page readonly
clean
20D42E40000
unkown
page read and write
clean
28B83316000
unkown
page read and write
clean
1A292BB0000
heap default
page read and write
clean
318C000
unkown
page read and write
clean
7FF51E53C000
unkown
page readonly
clean
7FF514588000
unkown
page readonly
clean
27C31770000
unkown
page read and write
clean
C37DB7F000
unkown
page read and write
clean
1C754010000
unkown
page read and write
clean
7FF57636C000
unkown
page readonly
clean
7FF51E5BE000
unkown
page readonly
clean
27C3173C000
unkown
page read and write
clean
AD11F7F000
unkown
page read and write
clean
1EDB86C0000
unkown
page read and write
clean
28B833A4000
unkown
page read and write
clean
28B833B7000
unkown
page read and write
clean
12DAE666000
unkown
page read and write
clean
1C7510E8000
unkown
page read and write
clean
7FF52C69A000
unkown
page readonly
clean
27C31877000
unkown
page read and write
clean
7FF51E198000
unkown
page readonly
clean
28B83369000
unkown
page read and write
clean
28D06600000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
2BF0000
unkown
page read and write
clean
7FF570ADF000
unkown
page readonly
clean
12DAE683000
unkown
page read and write
clean
27B2000
unkown
page readonly
clean
7FF5395CC000
unkown
page readonly
clean
124027E000
unkown
page read and write
clean
7FF520E89000
unkown
page readonly
clean
7FF50E61F000
unkown
page readonly
clean
2B2B000
unkown
page read and write
clean
12DAE629000
unkown
page read and write
clean
131637E000
unkown
page read and write
clean
7FF570C52000
unkown
page readonly
clean
28B83344000
unkown
page read and write
clean
20D48290000
unkown
page read and write
clean
27C31792000
unkown
page read and write
clean
7FF5E5FAA000
unkown
page readonly
clean
28B8330C000
unkown
page read and write
clean
20D48400000
unkown
page read and write
clean
7FF579AEC000
unkown
page readonly
clean
7FF500560000
unkown
page readonly
clean
7FF5B3566000
unkown
page readonly
clean
1C750FB0000
unkown
page readonly
clean
7FF579A8A000
unkown
page readonly
clean
AD1217E000
unkown
page read and write
clean
7FF51DC99000
unkown
page readonly
clean
20D42F02000
unkown
page read and write
clean
1EDB7760000
unkown
page read and write
clean
F6F117A000
unkown
page read and write
clean
28B829E0000
unkown
page read and write
clean
7FF5B330E000
unkown
page readonly
clean
7FF5005CD000
unkown
page readonly
clean
7FF4F8233000
unkown
page readonly
clean
221B523C000
unkown
page read and write
clean
28B82A7C000
unkown
page read and write
clean
7FF557F3A000
unkown
page readonly
clean
CED4879000
unkown
page read and write
clean
1EEC7600000
unkown
page readonly
clean
7FF50E65C000
unkown
page readonly
clean
221B5229000
unkown
page read and write
clean
2786000
unkown
page readonly
clean
7FF570425000
unkown
page readonly
clean
E7F567B000
unkown
page read and write
clean
7FF56D03A000
unkown
page readonly
clean
14BD87E000
unkown
page read and write
clean
28B829C0000
unkown
page readonly
clean
7FF53955A000
unkown
page readonly
clean
7FF50E5AC000
unkown
page readonly
clean
200081D0000
unkown
page read and write
clean
7FF5145A3000
unkown
page readonly
clean
7FF521223000
unkown
page readonly
clean
221B5F40000
unkown
page readonly
clean
27C2F69A000
unkown
page read and write
clean
256623C0000
unkown
page read and write
clean
EC1E3F5000
unkown
page read and write
clean
7FF4F8237000
unkown
page readonly
clean
20D43759000
unkown
page read and write
clean
7FF52C6AE000
unkown
page readonly
clean
7FF50E591000
unkown
page readonly
clean
17980000000
unkown
page readonly
clean
28B82ACF000
unkown
page read and write
clean
7FF566AFC000
unkown
page readonly
clean
2566042A000
unkown
page read and write
clean
20D4839E000
unkown
page read and write
clean
28B8331F000
unkown
page read and write
clean
20D43EC0000
unkown
page readonly
clean
7FF52135F000
unkown
page readonly
clean
7FF538F36000
unkown
page readonly
clean
7FF570AF8000
unkown
page readonly
clean
C37DBFF000
unkown
page read and write
clean
20008790000
unkown
page readonly
clean
28B83120000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
7FF52C779000
unkown
page readonly
clean
20D42EA0000
unkown
page read and write
clean
179FE502000
unkown
page read and write
clean
1F12F060000
unkown
page readonly
clean
7FF56C935000
unkown
page readonly
clean
27C2F686000
unkown
page read and write
clean
27C31900000
unkown
page read and write
clean
E7F537D000
unkown
page read and write
clean
7FF557E98000
unkown
page readonly
clean
E7F4AF9000
unkown
page read and write
clean
1C753050000
unkown
page read and write
clean
28B83367000
unkown
page read and write
clean
7FF50B471000
unkown
page readonly
clean
7FF50E4E7000
unkown
page readonly
clean
7FF579B69000
unkown
page readonly
clean
28B83396000
unkown
page read and write
clean
1EEC7476000
unkown
page read and write
clean
256603B0000
unkown
page readonly
clean
185067E000
unkown
page read and write
clean
7FF558078000
unkown
page readonly
clean
20D486A0000
unkown
page read and write
clean
28B83359000
unkown
page read and write
clean
7FF50B1A4000
unkown
page readonly
clean
7FF5146BA000
unkown
page readonly
clean
28B833C0000
unkown
page read and write
clean
1EDB8460000
unkown
page read and write
clean
25661F02000
unkown
page read and write
clean
27C30FA0000
unkown
page read and write
clean
7FF51E536000
unkown
page readonly
clean
28B83361000
unkown
page read and write
clean
28B83100000
unkown
page read and write
clean
7FF5763E9000
unkown
page readonly
clean
27C2F600000
unkown
page read and write
clean
7FF500170000
unkown
page readonly
clean
20B6FC56000
unkown
page read and write
clean
7FF570C95000
unkown
page readonly
clean
7FF5B3548000
unkown
page readonly
clean
28B83854000
unkown
page read and write
clean
28B8331F000
unkown
page read and write
clean
1C751116000
unkown
page read and write
clean
7FF539807000
unkown
page readonly
clean
28B83357000
unkown
page read and write
clean
27C313F0000
unkown
page readonly
clean
28B83362000
unkown
page read and write
clean
3650000
unkown
page readonly
clean
7FF5ED7A1000
unkown
page readonly
clean
7FF5B3568000
unkown
page readonly
clean
27C32410000
unkown
page read and write
clean
7FF50E5EA000
unkown
page readonly
clean
27C2F687000
unkown
page read and write
clean
2850000
unkown
page readonly
clean
28B83329000
unkown
page read and write
clean
AD11DFD000
unkown
page read and write
clean
1C752F23000
unkown
page read and write
clean
20B6FC00000
unkown
page read and write
clean
27C318C5000
unkown
page read and write
clean
28B8337E000
unkown
page read and write
clean
28B83360000
unkown
page read and write
clean
20D48390000
unkown
page read and write
clean
7FF5798EF000
unkown
page readonly
clean
7FF5B33FE000
unkown
page readonly
clean
20D435F0000
unkown
page read and write
clean
7FF50E64C000
unkown
page readonly
clean
7FF5B340C000
unkown
page readonly
clean
7FF5B3550000
unkown
page readonly
clean
28D07140000
unkown
page readonly
clean
7FF500607000
unkown
page readonly
clean
20D43700000
unkown
page read and write
clean
7FF566AFC000
unkown
page readonly
clean
12DAE590000
unkown
page read and write
clean
AD119EC000
unkown
page read and write
clean
7FF52BDEF000
unkown
page readonly
clean
7FF5B3398000
unkown
page readonly
clean
7FF5B2D2A000
unkown
page readonly
clean
256603D0000
unkown
page read and write
clean
27C31836000
unkown
page read and write
clean
20008259000
unkown
page read and write
clean
221B5202000
unkown
page read and write
clean
1D1D5EC0000
heap private
page read and write
clean
28B82ADF000
unkown
page read and write
clean
273A000
unkown
page readonly
clean
7FF50AFAD000
unkown
page readonly
clean
28D06360000
heap private
page read and write
clean
F6F10FE000
unkown
page read and write
clean
28D06464000
unkown
page read and write
clean
131647A000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
AD1237C000
unkown
page read and write
clean
28B82AD2000
unkown
page read and write
clean
7FF50B0D4000
unkown
page readonly
clean
7FF558072000
unkown
page readonly
clean
7FF575D8C000
unkown
page readonly
clean
C37DAF9000
unkown
page read and write
clean
22DC4002000
unkown
page read and write
clean
28B83317000
unkown
page read and write
clean
E7F4BFB000
unkown
page read and write
clean
1A292B50000
heap private
page read and write
clean
1F12EA7B000
unkown
page read and write
clean
7FF5396F5000
unkown
page readonly
clean
28B83355000
unkown
page read and write
clean
179FE402000
unkown
page read and write
clean
27C3171E000
unkown
page read and write
clean
7FF52C2B3000
unkown
page readonly
clean
7FF50E5E2000
unkown
page readonly
clean
12DAE430000
heap private
page read and write
clean
1C7510A8000
unkown
page read and write
clean
1D1D6450000
unkown
page readonly
clean
20D483B4000
unkown
page read and write
clean
7FF5ED6BA000
unkown
page readonly
clean
7FF50B372000
unkown
page readonly
clean
20D42E00000
unkown
page read and write
clean
7FF5ED72C000
unkown
page readonly
clean
1EEC747A000
unkown
page read and write
clean
20B6FD00000
unkown
page read and write
clean
27C31B82000
unkown
page read and write
clean
7FF56D001000
unkown
page readonly
clean
7FF52112F000
unkown
page readonly
clean
28B82880000
heap private
page read and write
clean
7FF5395BC000
unkown
page readonly
clean
1EDB8120000
unkown
page readonly
clean
28B83371000
unkown
page read and write
clean
2E0D000
unkown
page read and write
clean
7FF56CE1E000
unkown
page readonly
clean
28B8331F000
unkown
page read and write
clean
28B833A6000
unkown
page read and write
clean
185077E000
unkown
page read and write
clean
27C2F4C0000
unkown
page readonly
clean
7FF5395E2000
unkown
page readonly
clean
27C2F6F4000
unkown
page read and write
clean
27C32110000
unkown
page read and write
clean
7FF5E67A4000
unkown
page readonly
clean
20D42EFF000
unkown
page read and write
clean
7FF500458000
unkown
page readonly
clean
7FF5B358E000
unkown
page readonly
clean
27C3000
unkown
page readonly
clean
7FF53949E000
unkown
page readonly
clean
1EEC7400000
unkown
page read and write
clean
28B82A82000
unkown
page read and write
clean
20D43713000
unkown
page read and write
clean
12DAE602000
unkown
page read and write
clean
7FF51E50F000
unkown
page readonly
clean
2B90000
unkown
page read and write
clean
28D06429000
unkown
page read and write
clean
20B6FD13000
unkown
page read and write
clean
7FF52C6EC000
unkown
page readonly
clean
E7F4C7B000
unkown
page read and write
clean
20D42EA7000
unkown
page read and write
clean
20D43702000
unkown
page read and write
clean
27C2F4B0000
heap default
page read and write
clean
7FF521326000
unkown
page readonly
clean
7FF520E8D000
unkown
page readonly
clean
7FF5ED6B8000
unkown
page readonly
clean
25EA000
unkown
page readonly
clean
27C32013000
unkown
page read and write
clean
28B82AA0000
unkown
page read and write
clean
7FF50E395000
unkown
page readonly
clean
7FF50047D000
unkown
page readonly
clean
7FF53943F000
unkown
page readonly
clean
14BDD7D000
unkown
page read and write
clean
7FF500473000
unkown
page readonly
clean
28B83100000
unkown
page read and write
clean
7FF50E5E6000
unkown
page readonly
clean
7FF5B338C000
unkown
page readonly
clean
20D42E29000
unkown
page read and write
clean
7DFEDC900000
unkown
page readonly
clean
27C31470000
unkown
page readonly
clean
7FF50015A000
unkown
page readonly
clean
28B83364000
unkown
page read and write
clean
28B82A70000
unkown
page read and write
clean
7FF514727000
unkown
page readonly
clean
20008224000
unkown
page read and write
clean
1EEC7465000
unkown
page read and write
clean
7FF575C27000
unkown
page readonly
clean
EC1E8FF000
unkown
page read and write
clean
28B82A29000
unkown
page read and write
clean
B3FC57F000
unkown
page read and write
clean
28B8332D000
unkown
page read and write
clean
27C31B82000
unkown
page read and write
clean
28B83369000
unkown
page read and write
clean
AD1000
unkown
page read and write
clean
A3D3FFC000
unkown
page read and write
clean
1EDB77C0000
unkown
page readonly
clean
F6F14FF000
unkown
page read and write
clean
7FF5B3507000
unkown
page readonly
clean
20008200000
unkown
page read and write
clean
7FF576375000
unkown
page readonly
clean
27C31983000
unkown
page read and write
clean
7FF5213B7000
unkown
page readonly
clean
A3D3EFE000
unkown
page read and write
clean
7FF5397D6000
unkown
page readonly
clean
22DC3800000
unkown
page read and write
clean
7FF51E4FE000
unkown
page readonly
clean
7FF579A76000
unkown
page readonly
clean
7FF56D0CD000
unkown
page readonly
clean
2E0C000
unkown
page readonly
clean
27C31943000
unkown
page read and write
clean
7FF521369000
unkown
page readonly
clean
179FE3D0000
unkown
page readonly
clean
28B83364000
unkown
page read and write
clean
25660449000
unkown
page read and write
clean
20008860000
unkown
page read and write
clean
7FF539649000
unkown
page readonly
clean
28B8338C000
unkown
page read and write
clean
7FF539680000
unkown
page readonly
clean
7FF557C60000
unkown
page readonly
clean
B3FBF7E000
unkown
page read and write
clean
18500FB000
unkown
page read and write
clean
7FF50E5E8000
unkown
page readonly
clean
1EEC7290000
unkown
page readonly
clean
7FF520F51000
unkown
page readonly
clean
7FF5E661D000
unkown
page readonly
clean
AD1227C000
unkown
page read and write
clean
7FF576356000
unkown
page readonly
clean
27C2F756000
unkown
page read and write
clean
7FF51E467000
unkown
page readonly
clean
12DAE702000
unkown
page read and write
clean
AD1247F000
unkown
page read and write
clean
7FF56D0E6000
unkown
page readonly
clean
E7F54FD000
unkown
page read and write
clean
7FF5ED6DE000
unkown
page readonly
clean
7FF51E39A000
unkown
page readonly
clean
2858000
unkown
page readonly
clean
7FF56D161000
unkown
page readonly
clean
22DC3902000
unkown
page read and write
clean
20D42DD1000
unkown
page read and write
clean
7FF52C538000
unkown
page readonly
clean
EC1E5F7000
unkown
page read and write
clean
27C31943000
unkown
page read and write
clean
22DC3E60000
unkown
page readonly
clean
1F12F160000
unkown
page readonly
clean
7FF56CC73000
unkown
page readonly
clean
28B82AF7000
unkown
page read and write
clean
256623E0000
unkown
page readonly
clean
256602E0000
unkown
page readonly
clean
28B8337A000
unkown
page read and write
clean
7FF5212C7000
unkown
page readonly
clean
12DAE613000
unkown
page read and write
clean
7FF50E42A000
unkown
page readonly
clean
1C75108D000
unkown
page read and write
clean
7FF5005EC000
unkown
page readonly
clean
28B8334E000
unkown
page read and write
clean
7FF5211EA000
unkown
page readonly
clean
7FF5B3191000
unkown
page readonly
clean
28D0644F000
unkown
page read and write
clean
22DC4132000
unkown
page read and write
clean
7FF558100000
unkown
page readonly
clean
7FF5B35BD000
unkown
page readonly
clean
7FF51E4AC000
unkown
page readonly
clean
27C2F640000
unkown
page read and write
clean
22DC3F50000
unkown
page write copy
clean
7FF521310000
unkown
page readonly
clean
1C752F1D000
unkown
page read and write
clean
28B83355000
unkown
page read and write
clean
1C753040000
unkown
page readonly
clean
185087F000
unkown
page read and write
clean
28B83345000
unkown
page read and write
clean
20D48660000
unkown
page read and write
clean
7FF5E678C000
unkown
page readonly
clean
7FF5B328A000
unkown
page readonly
clean
28B83360000
unkown
page read and write
clean
14BDAFA000
unkown
page read and write
clean
27C31602000
unkown
page read and write
clean
20D48730000
unkown
page readonly
clean
7FF56CDD3000
unkown
page readonly
clean
1EDB7B00000
unkown
page read and write
clean
27C31460000
unkown
page read and write
clean
12DAE652000
unkown
page read and write
clean
B036EF9000
unkown
page read and write
clean
20D42DF0000
unkown
page read and write
clean
6E225000
unkown image
page read and write
clean
28B83356000
unkown
page read and write
clean
7FF56CF58000
unkown
page readonly
clean
2790000
unkown
page readonly
clean
28D06E00000
unkown
page readonly
clean
28B83332000
unkown
page read and write
clean
179FE413000
unkown
page read and write
clean
12DAE4A0000
unkown
page readonly
clean
7FF539558000
unkown
page readonly
clean
20D44200000
unkown
page read and write
clean
25660513000
unkown
page read and write
clean
20D48422000
unkown
page read and write
clean
20D486F0000
unkown
page read and write
clean
13163FA000
unkown
page read and write
clean
7FF56D01A000
unkown
page readonly
clean
28B83360000
unkown
page read and write
clean
27E5000
unkown
page readonly
clean
7FF56D169000
unkown
page readonly
clean
7FF53978A000
unkown
page readonly
clean
7FF558060000
unkown
page readonly
clean
28B83365000
unkown
page read and write
clean
20D48280000
unkown
page read and write
clean
1F12ECD0000
unkown
page readonly
clean
2D3A000
unkown
page read and write
clean
7FF50E5AA000
unkown
page readonly
clean
7FF50B12E000
unkown
page readonly
clean
7FF52104A000
unkown
page readonly
clean
7FF56D0F7000
unkown
page readonly
clean
7FF521257000
unkown
page readonly
clean
7FF50E629000
unkown
page readonly
clean
27C2F734000
unkown
page read and write
clean
7FF52BDE9000
unkown
page readonly
clean
27C31884000
unkown
page read and write
clean
179FE600000
unkown
page readonly
clean
1C751113000
unkown
page read and write
clean
7FF5709BD000
unkown
page readonly
clean
13164FF000
unkown
page read and write
clean
20D486F0000
unkown
page readonly
clean
7FF5E6641000
unkown
page readonly
clean
28B83315000
unkown
page read and write
clean
7FF5B3320000
unkown
page readonly
clean
20D483C0000
unkown
page read and write
clean
7FF5763E9000
unkown
page readonly
clean
28B83359000
unkown
page read and write
clean
7FF5B34C5000
unkown
page readonly
clean
1C751102000
unkown
page read and write
clean
27C31480000
unkown
page read and write
clean
1EDB7974000
unkown
page read and write
clean
7FF50E656000
unkown
page readonly
clean
7FF50E677000
unkown
page readonly
clean
20D43000000
unkown
page readonly
clean
25662080000
unkown
page readonly
clean
7FF5ED740000
unkown
page readonly
clean
7FF5763DE000
unkown
page readonly
clean
27C2F6C8000
unkown
page read and write
clean
7FF5ED65A000
unkown
page readonly
clean
221B51D0000
unkown
page readonly
clean
247B94BF000
unkown
page read and write
clean
28B83333000
unkown
page read and write
clean
22DC386D000
unkown
page read and write
clean
1A292C29000
unkown
page read and write
clean
9CFC3FF000
unkown
page read and write
clean
7FF56CF73000
unkown
page readonly
clean
28B83361000
unkown
page read and write
clean
7FF5004DC000
unkown
page readonly
clean
E7F53FB000
unkown
page read and write
clean
7FF50B2EC000
unkown
page readonly
clean
7FF557FA1000
unkown
page readonly
clean
1A292D13000
unkown
page read and write
clean
7FF570C66000
unkown
page readonly
clean
7FF579B04000
unkown
page readonly
clean
7FF57988A000
unkown
page readonly
clean
12DAE65E000
unkown
page read and write
clean
1C753080000
unkown
page readonly
clean
1C752DF0000
heap private
page read and write
clean
28B8331F000
unkown
page read and write
clean
28B83802000
unkown
page read and write
clean
B036C7F000
unkown
page read and write
clean
7FF5004A7000
unkown
page readonly
clean
7FF5B31EE000
unkown
page readonly
clean
7FF50B140000
unkown
page readonly
clean
28D0643C000
unkown
page read and write
clean
12DAE65F000
unkown
page read and write
clean
7FF5ED6CA000
unkown
page readonly
clean
7FF56D078000
unkown
page readonly
clean
7FF56D08A000
unkown
page readonly
clean
7FF5B3420000
unkown
page readonly
clean
1EEC7513000
unkown
page read and write
clean
3EAA91B000
unkown
page read and write
clean
7FF50B1DE000
unkown
page readonly
clean
7FF5213B4000
unkown
page readonly
clean
7FF514799000
unkown
page readonly
clean
7FF52C682000
unkown
page readonly
clean
7FF539599000
unkown
page readonly
clean
30C4000
unkown
page read and write
clean
221B54D0000
unkown
page readonly
clean
27C3176D000
unkown
page read and write
clean
2000823D000
unkown
page read and write
clean
30D2000
unkown
page read and write
clean
7FF56CE25000
unkown
page readonly
clean
E7F577D000
unkown
page read and write
clean
7FF56CEBA000
unkown
page readonly
clean
221B5213000
unkown
page read and write
clean
28D063E0000
unkown
page readonly
clean
7FF5B3411000
unkown
page readonly
clean
9CFC2FE000
unkown
page read and write
clean
7FF52C6BF000
unkown
page readonly
clean
7FF5B3595000
unkown
page readonly
clean
185027F000
unkown
page read and write
clean
7FF50B407000
unkown
page readonly
clean
28B83331000
unkown
page read and write
clean
7FF51E52D000
unkown
page readonly
clean
7FF557904000
unkown
page readonly
clean
7FF52139C000
unkown
page readonly
clean
27C32210000
unkown
page read and write
clean
7FF558107000
unkown
page readonly
clean
179FFEB0000
unkown
page read and write
clean
27C2F776000
unkown
page read and write
clean
1EDB7920000
heap default
page read and write
clean
1C753050000
unkown
page read and write
clean
25660448000
unkown
page read and write
clean
27C31A82000
unkown
page read and write
clean
25660459000
unkown
page read and write
clean
1C751000000
unkown
page read and write
clean
7FF51E4C0000
unkown
page readonly
clean
28D06508000
unkown
page read and write
clean
9CFBBFE000
unkown
page read and write
clean
20D48430000
unkown
page read and write
clean
28B8338B000
unkown
page read and write
clean
7FF5E65F8000
unkown
page readonly
clean
2FBF000
unkown
page read and write
clean
1EDB7AF0000
unkown
page read and write
clean
12DAE679000
unkown
page read and write
clean
7FF56D0F5000
unkown
page readonly
clean
28D06480000
unkown
page read and write
clean
27C2F450000
heap private
page read and write
clean
1C752F0A000
unkown
page read and write
clean
28B833DB000
unkown
page read and write
clean
28B8335F000
unkown
page read and write
clean
27C3170F000
unkown
page read and write
clean
28B8338E000
unkown
page read and write
clean
7FF5005DC000
unkown
page readonly
clean
7FF50B127000
unkown
page readonly
clean
247B96B0000
unkown
page readonly
clean
7FF5762F8000
unkown
page readonly
clean
7FF5E6613000
unkown
page readonly
clean
7FF52C771000
unkown
page readonly
clean
6E221000
unkown image
page execute read
clean
E7F547B000
unkown
page read and write
clean
31CB000
unkown
page read and write
clean
7FF5005A5000
unkown
page readonly
clean
7FF50B324000
unkown
page readonly
clean
20B6FC13000
unkown
page read and write
clean
1EDB7993000
heap default
page read and write
clean
20D483B0000
unkown
page read and write
clean
27C2F6F1000
unkown
page read and write
clean
12DAE664000
unkown
page read and write
clean
25660483000
unkown
page read and write
clean
2EB0000
unkown
page readonly
clean
512F577000
unkown
page read and write
clean
179FE429000
unkown
page read and write
clean
28B8335E000
unkown
page read and write
clean
B036DFD000
unkown
page read and write
clean
There are 1915 hidden memdumps, click here to show them.