IOCReport

loading gif

Files

File Path
Type
Category
Malicious
https://mobile1austin.com/Title-docs/RD-FITT
URL
initial url
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RD-FITT[1].htm
HTML document, ASCII text, with CRLF line terminators
downloaded
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{78D3FB73-6122-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{78D3FB75-6122-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8025F276-6122-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\po60zt0\imagestore.dat
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\50-f1e180[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\65-478888[1].css
UTF-8 Unicode (with BOM) text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE1Mu3b[1].png
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE4D5uF[1].png
PNG image data, 1259 x 472, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE4DRie[1].png
PNG image data, 1259 x 472, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE4E4rT[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE4pndL[1].png
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RE4sQDc[1].png
PNG image data, 40 x 40, 2-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\de-ch[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\jquery-3.3.1.min[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\latest[1].woff
Web Open Font Format, TrueType, length 35900, version 0.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\meBoot.min[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\print-icon[1].png
PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\social[1].css
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\youtube[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\MeControl_cfDm2fEwfL1YuSiw8j6tzA2[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\RE3NYMe[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\RE4DfTp[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\RE4pkvE[1].png
PNG image data, 40 x 40, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\RE4pxBu[1].png
PNG image data, 40 x 40, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\clipart1110398[1].png
PNG image data, 460 x 390, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\e3-082b89[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\icons[1].eot
Embedded OpenType (EOT), icons family
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\instagram[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\jquery-1.11.2.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\jquery-3.2.1.slim.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\jsll-4[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\linkedin[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\me[1].htm
HTML document, ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\meversion[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\okta-sign-in.min[1].css
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\RD-FITT[1].htm
HTML document, ASCII text
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\RE4CFyx[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\RE4H9G0[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\RE4Lp94[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1600x600, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\RE4qZxW[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\app[1].css
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\bootstrap.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\cartcount[1].htm
HTML document, ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\facebook[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\jquery.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\latest[1].woff2
Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\meCore.min[1].js
ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\override[1].css
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\popper.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\script[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\shell.min[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\social[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\twitter[1].png
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\1x1clear[1].gif
GIF image data, version 89a, 1 x 1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\94-3cd1e0[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\RE4qP8j[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\RE4rriw[1].png
PNG image data, 40 x 40, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\RE4rzE2[1].wdp
JPEG-XR
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\a4-539297[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\bootstrap.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\favicon[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\fb-083993[1].css
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\iframe[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\latest[1].eot
Embedded OpenType (EOT), Segoe UI family
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\latest[2].eot
Embedded OpenType (EOT), Segoe UI Light family
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\latest[3].eot
Embedded OpenType (EOT), Segoe UI Semibold family
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\mwfmdl2-v3.54[1].woff
Web Open Font Format, TrueType, length 26288, version 0.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\privacystatement[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\style[1].css
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\wcp-consent[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Temp\~DF17965F7F81DA087C.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF6BD5A81276D497A5.TMP
data
modified
clean
C:\Users\user\AppData\Local\Temp\~DFF7B174168F5A2A9B.TMP
data
dropped
clean
There are 66 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2324 CREDAT:17410 /prefetch:2
clean

URLs

Name
IP
Malicious
https://mobile1austin.com/Title-docs/RD-FITT/
malicious
https://mobile1austin.com/Title-docs/RD-FITT/
unknown
malicious
https://mobile1austin.com/Title-docs/RD-FITT/Root
unknown
malicious
https://outlook.live.com/owa/
unknown
clean
https://signin.kissmetrics.com/privacy/#controls
unknown
clean
https://www.onenote.com/?omkt=de-CH
unknown
clean
https://login.skype.com/login
unknown
clean
https://www.acuityads.com/opt-out/
unknown
clean
https://code.jquery.com/jquery-3.2.1.slim.min.js
unknown
clean
https://www.optimizely.com/legal/opt-out/
unknown
clean
https://products.office.com/de-ch/academic/compare-office-365-education-plans
unknown
clean
https://assets.onestore.ms
unknown
clean
https://www.youradchoices.ca/fr
unknown
clean
https://www.skype.com/de/
unknown
clean
http://www.asp.net/ajaxlibrary/CDN.ashx.
unknown
clean
https://www.microsoftstore.com.cn/hardware/accessories/xbox
unknown
clean
https://publisher.liveperson.net/iframe-le-tag/iframe.html?lpsite=60270350&lpsection=store-sales
unknown
clean
https://mem.gfx.ms/meversion?partner=MSHomePage&market=de-ch&uhf=1
unknown
clean
https://va.idp.liveperson.net
unknown
clean
https://www.privacyshield.gov/welcome
unknown
clean
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
clean
https://ondemand.webtrends.com/support/optout.asp
unknown
clean
https://www.microsoftstore.com.cn/xbox
unknown
clean
https://www.appsflyer.com/optout
unknown
clean
https://privacy.micros
unknown
clean
https://www.appnexus.com/
unknown
clean
https://www.instagram.com/microsoftch/
unknown
clean
https://www.microsoftstore.com.cn/hardware/surface
unknown
clean
https://publisher.liveperson.net/iframe-le-tag/iframe.html?lpsite=60270350&lpsection=store-sales-de-
unknown
clean
https://publisher.liveperson.net
unknown
clean
http://opensource.org/licenses/MIT).
unknown
clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
unknown
clean
https://www.youradchoices.ca
unknown
clean
https://priv-policy.imrworldwide.com/priv/browser/us/en/optout.html
unknown
clean
http://github.com/requirejs/almond/LICENSE
unknown
clean
https://www.youronlinechoices.com/
unknown
clean
https://www.here.com/)
unknown
clean
https://www.microsoftstore.com.cn/checkout
unknown
clean
http://www.apache.org/licenses/LICENSE-2.0
unknown
clean
https://www.aboutads.info/
unknown
clean
https://www.adjust.com/opt-out/
unknown
clean
https://microsoftwindows.112.2o7.net
unknown
clean
https://onedrive.live.com/about/de-ch/
unknown
clean
https://www.xbox.com/managedatacollection
unknown
clean
https://www.xbox.com/legal/codeofconduct
unknown
clean
http://github.com/requirejs/requirejs/LICENSE
unknown
clean
https://lpcdn.lpsnmedia.net
unknown
clean
https://va.msg.liveperson.net
unknown
clean
https://www.microsoftstore.com.cn/cart
unknown
clean
https://www.microsoftstore.com.cn/hardware/xbox
unknown
clean
https://developer.yahoo.com/flurry/end-user-opt-out/
unknown
clean
http://fontello.com
unknown
clean
https://www.microsoftstore.com.cn/surface
unknown
clean
https://aka.ms/kinectprivacy/
unknown
clean
https://www.youtube.com/user/MicrosoftCH
unknown
clean
https://mobile1austin.com/Title-Root
unknown
clean
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
unknown
clean
https://www.xbox.com
unknown
clean
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protectio
unknown
clean
https://www.microsoftstore.com.cn/software/microsoft-365
unknown
clean
https://www.clicktale.net/disable.html
unknown
clean
https://getbootstrap.com/)
unknown
clean
https://mem.gfx.ms
unknown
clean
https://release.moscnuat.com
unknown
clean
http://github.com/requirejs/domReady
unknown
clean
https://schema.org/ItemList
unknown
clean
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7
unknown
clean
https://twitter.com/microsoft_ch
unknown
clean
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
unknown
clean
http://fontello.comiconsRegulariconsiconsVersion
unknown
clean
https://getbootstrap.com)
unknown
clean
https://support.xbox.com/help/family-online-safety/online-safety/manage-online-safety-and-privacy-se
unknown
clean
https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html
unknown
clean
https://www.microsoft.
unknown
clean
https://www.linkedin.com/company/1035
unknown
clean
https://www.microsoftstore.com.cn/hardware/accessories/surface
unknown
clean
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
clean
https://www.xbox.com/
unknown
clean
http://github.com/aFarkas/lazysizes
unknown
clean
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
unknown
clean
https://logo.clearbit.com/
unknown
clean
https://www.linkedin.com/legal/privacy-policy
unknown
clean
http://schema.org/Organization
unknown
clean
https://channel9.msdn.com/
unknown
clean
https://aka.ms/DPA
unknown
clean
https://support.xbox.com/help/friends-social-activity/community/use-safety-settings
unknown
clean
https://www.xbox.com/Legal/ThirdPartyDataSharing
unknown
clean
https://www.microsoftstore.com.cn/microsoft-365/microsoft-365
unknown
clean
There are 78 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
microsoftwindows.112.2o7.net
15.237.76.117
clean
cdnjs.cloudflare.com
104.16.18.94
clean
cs1227.wpc.alphacdn.net
192.229.221.185
clean
liveperson.map.fastly.net
151.101.1.192
clean
mobile1austin.com
162.241.70.248
clean
stackpath.bootstrapcdn.com
unknown
clean
logincdn.msauth.net
unknown
clean
code.jquery.com
unknown
clean
publisher.liveperson.net
unknown
clean
maxcdn.bootstrapcdn.com
unknown
clean
assets.onestore.ms
unknown
clean
ajax.aspnetcdn.com
unknown
clean
mem.gfx.ms
unknown
clean
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Active
Malicious
162.241.70.248
unknown
United States
unknown
clean
151.101.1.192
unknown
United States
unknown
clean
192.229.221.185
unknown
United States
unknown
clean
104.16.18.94
unknown
United States
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{78D3FB73-6122-11EB-90E6-ECF4BB82F7E0}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-912
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-904
clean
There are 16 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
DA7C27E000
unkown
page read and write
clean
2BBDC0BB000
unkown
page read and write
clean
7FF5B4F95000
unkown
page readonly
clean
7FF55E475000
unkown
page readonly
clean
1C099263000
unkown
page read and write
clean
1DDE70A2000
unkown
page read and write
clean
7FF5B4C82000
unkown
page readonly
clean
7FF5F23D8000
unkown
page readonly
clean
DA7C67C000
unkown
page read and write
clean
C35CCFA000
unkown
page read and write
clean
7FF5F265F000
unkown
page readonly
clean
18799089000
unkown
page read and write
clean
C35C97C000
unkown
page read and write
clean
7FF4FE77F000
unkown
page readonly
clean
40AE87E000
unkown
page read and write
clean
7FF59E045000
unkown
page readonly
clean
7854D7E000
unkown
page read and write
clean
1DDEC6D0000
unkown
page readonly
clean
20D4C829000
unkown
page read and write
clean
10A9F502000
unkown
page read and write
clean
1DDE6FB0000
unkown
page readonly
clean
7FF55E22B000
unkown
page readonly
clean
C35C17E000
unkown
page read and write
clean
18798FE0000
unkown
page readonly
clean
18799113000
unkown
page read and write
clean
1DDEC730000
unkown
page read and write
clean
1DDEC4A0000
unkown
page readonly
clean
7FF59E146000
unkown
page readonly
clean
7FF4FEB4C000
unkown
page readonly
clean
1DDEC5F8000
unkown
page read and write
clean
1C099240000
unkown
page read and write
clean
2BBDBE30000
unkown
page readonly
clean
DA7C77D000
unkown
page read and write
clean
C35C37C000
unkown
page read and write
clean
7FF55E3CE000
unkown
page readonly
clean
1DDE7102000
unkown
page read and write
clean
1C099247000
unkown
page read and write
clean
7FF59E163000
unkown
page readonly
clean
7FF59DE3A000
unkown
page readonly
clean
7FF5F2753000
unkown
page readonly
clean
7FF55E256000
unkown
page readonly
clean
BE06A7B000
unkown
page read and write
clean
7FF5F9E4C000
unkown
page readonly
clean
7FF5B4FC8000
unkown
page readonly
clean
7FF5F9E61000
unkown
page readonly
clean
20D4CE60000
unkown
page read and write
clean
DA7C7FB000
unkown
page read and write
clean
1DDEC610000
unkown
page read and write
clean
1DDE7913000
unkown
page read and write
clean
20D4CE60000
unkown
page read and write
clean
1C09925F000
unkown
page read and write
clean
1879905A000
unkown
page read and write
clean
7FF55E535000
unkown
page readonly
clean
40AE57F000
unkown
page read and write
clean
7FF5F9E20000
unkown
page readonly
clean
7FF55E470000
unkown
page readonly
clean
1C099284000
unkown
page read and write
clean
7FF5F9C6B000
unkown
page readonly
clean
10A9F445000
unkown
page read and write
clean
7FF55DF26000
unkown
page readonly
clean
C35C87F000
unkown
page read and write
clean
1C099277000
unkown
page read and write
clean
1DDEC6C0000
unkown
page write copy
clean
1DDE707B000
unkown
page read and write
clean
7FF4FEAE5000
unkown
page readonly
clean
7FF55E571000
unkown
page readonly
clean
7FF5F9EC2000
unkown
page readonly
clean
7FF55E45B000
unkown
page readonly
clean
7FF59E091000
unkown
page readonly
clean
7FF5F264C000
unkown
page readonly
clean
7FF55E590000
unkown
page readonly
clean
DA7BF9D000
unkown
page read and write
clean
40AE97F000
unkown
page read and write
clean
18799000000
unkown
page read and write
clean
7FF55E276000
unkown
page readonly
clean
1DDEC4F0000
unkown
page read and write
clean
1C09922A000
unkown
page read and write
clean
7FF5F9C05000
unkown
page readonly
clean
10A9F48C000
unkown
page read and write
clean
1DDE7918000
unkown
page read and write
clean
40AEA7E000
unkown
page read and write
clean
10A9F47D000
unkown
page read and write
clean
1DDECA00000
unkown
page readonly
clean
78549CE000
unkown
page read and write
clean
7FF55DEC3000
unkown
page readonly
clean
7FF5B5005000
unkown
page readonly
clean
7FF55E5A0000
unkown
page readonly
clean
7FF5F9ED1000
unkown
page readonly
clean
7FF4FEAE8000
unkown
page readonly
clean
7FF5F9E65000
unkown
page readonly
clean
7FF55E601000
unkown
page readonly
clean
1DDE7FE0000
unkown
page read and write
clean
7FF59E059000
unkown
page readonly
clean
2BBDC5B0000
unkown
page readonly
clean
7FF55E2B9000
unkown
page readonly
clean
18799590000
unkown
page readonly
clean
1DDEC5F0000
unkown
page read and write
clean
5FD8FD000
unkown
page read and write
clean
7FF5F2668000
unkown
page readonly
clean
7FF5B4FBF000
unkown
page readonly
clean
1DDEC750000
unkown
page read and write
clean
1DDEC8B7000
unkown
page read and write
clean
7FF5F26C2000
unkown
page readonly
clean
7FF5B4EA1000
unkown
page readonly
clean
C35C67B000
unkown
page read and write
clean
78548CC000
unkown
page read and write
clean
18798EA0000
heap private
page read and write
clean
1DDEC89B000
unkown
page read and write
clean
10A9F450000
unkown
page read and write
clean
10A9F43C000
unkown
page read and write
clean
2BBDC102000
unkown
page read and write
clean
1DDE70A6000
unkown
page read and write
clean
7FF5B5044000
unkown
page readonly
clean
1DDE6F90000
heap default
page read and write
clean
7FF5B4DA4000
unkown
page readonly
clean
1DDE6F30000
heap private
page read and write
clean
C35CA7E000
unkown
page read and write
clean
18799076000
unkown
page read and write
clean
1DDE708D000
unkown
page read and write
clean
BE070FD000
unkown
page read and write
clean
7FF4FEB49000
unkown
page readonly
clean
1C099249000
unkown
page read and write
clean
1DDE80D0000
unkown
page readonly
clean
5FDC77000
unkown
page read and write
clean
7FF59E099000
unkown
page readonly
clean
BE06B7E000
unkown
page read and write
clean
1DDECA60000
unkown
page readonly
clean
10A9F46F000
unkown
page read and write
clean
20D4C7C0000
unkown
page readonly
clean
7FF55E48D000
unkown
page readonly
clean
7FF4FE99E000
unkown
page readonly
clean
1DDEC620000
unkown
page read and write
clean
1C09922E000
unkown
page read and write
clean
7FF4FEBB6000
unkown
page readonly
clean
7FF5F2681000
unkown
page readonly
clean
2BBDC712000
unkown
page read and write
clean
1C099120000
heap private
page read and write
clean
7FF4FEB59000
unkown
page readonly
clean
DA7BF1B000
unkown
page read and write
clean
7FF4FEAF0000
unkown
page readonly
clean
1DDEC460000
unkown
page read and write
clean
20D4C800000
unkown
page read and write
clean
1DDEC8B2000
unkown
page read and write
clean
10A9F3D0000
unkown
page readonly
clean
2BBDC602000
unkown
page read and write
clean
7FF55E38F000
unkown
page readonly
clean
1C099231000
unkown
page read and write
clean
1C099200000
unkown
page read and write
clean
1DDEC82C000
unkown
page read and write
clean
10A9F3E0000
unkown
page readonly
clean
7FF5B4D79000
unkown
page readonly
clean
7FF5B5096000
unkown
page readonly
clean
7FF5F26E4000
unkown
page readonly
clean
2BBDCB90000
unkown
page readonly
clean
7FF5F96FD000
unkown
page readonly
clean
7FF5F25CC000
unkown
page readonly
clean
7FF5B501C000
unkown
page readonly
clean
7FF59E06C000
unkown
page readonly
clean
40ADE7D000
unkown
page read and write
clean
7FF59DCC5000
unkown
page readonly
clean
7FF55E6C3000
unkown
page readonly
clean
1C099400000
unkown
page readonly
clean
20D4C802000
unkown
page read and write
clean
1DDE8110000
unkown
page readonly
clean
10A9F360000
heap private
page read and write
clean
20D4C670000
heap private
page read and write
clean
1DDE7800000
unkown
page read and write
clean
7FF5F9C09000
unkown
page readonly
clean
7FF5F9E81000
unkown
page readonly
clean
5FDA75000
unkown
page read and write
clean
40ADB4B000
unkown
page read and write
clean
7FF4FE858000
unkown
page readonly
clean
1C09922D000
unkown
page read and write
clean
7FF55E6AC000
unkown
page readonly
clean
7FF5B4FE9000
unkown
page readonly
clean
7FF5F9E5F000
unkown
page readonly
clean
7FF5F251F000
unkown
page readonly
clean
7FF4FE932000
unkown
page readonly
clean
C35C47B000
unkown
page read and write
clean
7FF55E5CF000
unkown
page readonly
clean
C35C0FE000
unkown
page read and write
clean
7FF5F9F53000
unkown
page readonly
clean
10A9FE00000
unkown
page readonly
clean
1DDEC750000
unkown
page read and write
clean
7FF59D9E2000
unkown
page readonly
clean
1DDEC7E0000
unkown
page read and write
clean
1DDE708F000
unkown
page read and write
clean
C35C77F000
unkown
page read and write
clean
7FF55E5E0000
unkown
page readonly
clean
18798F00000
heap default
page read and write
clean
7FF55E5F1000
unkown
page readonly
clean
1DDE6FD0000
unkown
page read and write
clean
2BBDBE20000
heap default
page read and write
clean
7854F7E000
unkown
page read and write
clean
1C099302000
unkown
page read and write
clean
1DDE7071000
unkown
page read and write
clean
1C0991A0000
unkown
page readonly
clean
7FF55E5A5000
unkown
page readonly
clean
BE06D7E000
unkown
page read and write
clean
2BBDBF00000
unkown
page readonly
clean
2BBDBF10000
unkown
page readonly
clean
1DDEC6C4000
unkown
page readonly
clean
7FF55E292000
unkown
page readonly
clean
7FF5F9E70000
unkown
page readonly
clean
1DDE6FC0000
unkown
page read and write
clean
1C09923D000
unkown
page read and write
clean
7FF55E632000
unkown
page readonly
clean
10A9F600000
unkown
page readonly
clean
1DDEC5FE000
unkown
page read and write
clean
7FF5F2301000
unkown
page readonly
clean
1DDEC750000
unkown
page read and write
clean
DA7CBFE000
unkown
page read and write
clean
40AE07F000
unkown
page read and write
clean
7FF59DCC1000
unkown
page readonly
clean
7FF59DF75000
unkown
page readonly
clean
1DDE77C1000
unkown
page read and write
clean
10A9F402000
unkown
page read and write
clean
C35C9FE000
unkown
page read and write
clean
7FF55E5D8000
unkown
page readonly
clean
40AE27F000
unkown
page read and write
clean
7FF55E5CB000
unkown
page readonly
clean
1C099246000
unkown
page read and write
clean
7FF5F26D6000
unkown
page readonly
clean
2BBDC0E2000
unkown
page read and write
clean
7FF5F9F53000
unkown
page readonly
clean
1C09924B000
unkown
page read and write
clean
7FF5F9ECC000
unkown
page readonly
clean
7FF59E034000
unkown
page readonly
clean
10A9F48A000
unkown
page read and write
clean
BE0727F000
unkown
page read and write
clean
7FF55E5D5000
unkown
page readonly
clean
1DDE7041000
unkown
page read and write
clean
1DDEC634000
unkown
page read and write
clean
1DDE77E3000
unkown
page read and write
clean
785494E000
unkown
page read and write
clean
10A9F455000
unkown
page read and write
clean
2BBDC089000
unkown
page read and write
clean
7FF5B4FE1000
unkown
page readonly
clean
C35C57F000
unkown
page read and write
clean
C35CDFC000
unkown
page read and write
clean
1DDEC800000
unkown
page read and write
clean
1C099267000
unkown
page read and write
clean
7FF5B4F43000
unkown
page readonly
clean
7FF5F2256000
unkown
page readonly
clean
7FF5B50A5000
unkown
page readonly
clean
7FF59DD14000
unkown
page readonly
clean
1DDEC740000
unkown
page read and write
clean
1DDE7900000
unkown
page read and write
clean
7FF59E0DC000
unkown
page readonly
clean
1DDEC7F0000
unkown
page readonly
clean
BE06F7D000
unkown
page read and write
clean
1879903F000
unkown
page read and write
clean
1DDEC630000
unkown
page read and write
clean
7FF59E163000
unkown
page readonly
clean
7FF5F9E68000
unkown
page readonly
clean
7FF5B5036000
unkown
page readonly
clean
7FF55E584000
unkown
page readonly
clean
2BBDCB40000
unkown
page write copy
clean
7FF5B4FC5000
unkown
page readonly
clean
1DDE7113000
unkown
page read and write
clean
1879906F000
unkown
page read and write
clean
1C09927E000
unkown
page read and write
clean
1DDE7079000
unkown
page read and write
clean
7FF55E59C000
unkown
page readonly
clean
2BBDC000000
unkown
page read and write
clean
2BBDC200000
unkown
page readonly
clean
1DDEC81F000
unkown
page read and write
clean
DA7C9FF000
unkown
page read and write
clean
10A9F513000
unkown
page read and write
clean
7FF5F258A000
unkown
page readonly
clean
18799013000
unkown
page read and write
clean
7FF5B5029000
unkown
page readonly
clean
7FF5F9E5B000
unkown
page readonly
clean
1DDEC84A000
unkown
page read and write
clean
1C09923A000
unkown
page read and write
clean
18799102000
unkown
page read and write
clean
20D4CE60000
unkown
page read and write
clean
7FF5B4F84000
unkown
page readonly
clean
7FF59E050000
unkown
page readonly
clean
20D4C858000
unkown
page read and write
clean
1DDE80E0000
unkown
page readonly
clean
10A9F6D0000
unkown
page readonly
clean
18798F10000
unkown
page readonly
clean
1C09927A000
unkown
page read and write
clean
20D4CE70000
unkown
page read and write
clean
1DDEC611000
unkown
page read and write
clean
7FF5B5022000
unkown
page readonly
clean
7FF5B492C000
unkown
page readonly
clean
2BBDC700000
unkown
page read and write
clean
7FF59DE4C000
unkown
page readonly
clean
1C099190000
unkown
page readonly
clean
10A9F44F000
unkown
page read and write
clean
DA7C37C000
unkown
page read and write
clean
C35CBFF000
unkown
page read and write
clean
1DDE8460000
unkown
page read and write
clean
7FF55E422000
unkown
page readonly
clean
7FF5F2674000
unkown
page readonly
clean
7FF5F26BC000
unkown
page readonly
clean
7FF4FEB3C000
unkown
page readonly
clean
20D4D002000
unkown
page read and write
clean
7FF59E084000
unkown
page readonly
clean
7FF4FEB64000
unkown
page readonly
clean
1DDE7200000
unkown
page readonly
clean
7FF4FEBC6000
unkown
page readonly
clean
1C09927B000
unkown
page read and write
clean
1DDEC750000
unkown
page read and write
clean
1DDEC710000
unkown
page read and write
clean
1C0994D0000
unkown
page readonly
clean
7FF5B502C000
unkown
page readonly
clean
7FF4FEADF000
unkown
page readonly
clean
1C099265000
unkown
page read and write
clean
1DDE7013000
unkown
page read and write
clean
7FF5F9F3C000
unkown
page readonly
clean
20D4C83D000
unkown
page read and write
clean
7FF55E3D1000
unkown
page readonly
clean
BE06E7E000
unkown
page read and write
clean
7FF55DEB9000
unkown
page readonly
clean
7FF55E3F5000
unkown
page readonly
clean
7FF5F9F36000
unkown
page readonly
clean
1DDEC889000
unkown
page read and write
clean
1DDE70FD000
unkown
page read and write
clean
7FF5F265B000
unkown
page readonly
clean
1DDE6FA0000
unkown
page readonly
clean
7FF59DEF5000
unkown
page readonly
clean
7FF5B4E65000
unkown
page readonly
clean
7FF5B50B3000
unkown
page readonly
clean
BE06AFE000
unkown
page read and write
clean
7FF59E155000
unkown
page readonly
clean
7FF59E0E6000
unkown
page readonly
clean
40AE37E000
unkown
page read and write
clean
7FF55E63C000
unkown
page readonly
clean
7FF5B4E45000
unkown
page readonly
clean
1C0991B0000
unkown
page read and write
clean
1DDEC83D000
unkown
page read and write
clean
BE06FFF000
unkown
page read and write
clean
7FF55E3EF000
unkown
page readonly
clean
7FF59E0D2000
unkown
page readonly
clean
1DDEC5F0000
unkown
page read and write
clean
1DDEC860000
unkown
page read and write
clean
7FF59DFDC000
unkown
page readonly
clean
1DDEC4D0000
unkown
page read and write
clean
7FF55E646000
unkown
page readonly
clean
1DDE7000000
unkown
page read and write
clean
20D4C7D0000
unkown
page read and write
clean
C35CEFE000
unkown
page read and write
clean
DA7C8FE000
unkown
page read and write
clean
7FF5F2670000
unkown
page readonly
clean
7FF5B4D7F000
unkown
page readonly
clean
7FF55E62B000
unkown
page readonly
clean
1DDEC750000
unkown
page readonly
clean
40ADBCE000
unkown
page read and write
clean
18799680000
unkown
page readonly
clean
7FF55DF1C000
unkown
page readonly
clean
10A9F400000
unkown
page read and write
clean
1DDE7660000
unkown
page readonly
clean
7FF55E594000
unkown
page readonly
clean
1C09926A000
unkown
page read and write
clean
18799200000
unkown
page readonly
clean
5FD87B000
unkown
page read and write
clean
7FF5F9EBC000
unkown
page readonly
clean
5FDD7F000
unkown
page read and write
clean
7FF59E0CB000
unkown
page readonly
clean
7854E7E000
unkown
page read and write
clean
7FF5F26CC000
unkown
page readonly
clean
7FF4FEBD3000
unkown
page readonly
clean
2BBDBFF0000
unkown
page read and write
clean
7FF55E234000
unkown
page readonly
clean
40AE77F000
unkown
page read and write
clean
1DDEC614000
unkown
page read and write
clean
2BBDC0CC000
unkown
page read and write
clean
7FF55E654000
unkown
page readonly
clean
40AE47D000
unkown
page read and write
clean
DA7C5FE000
unkown
page read and write
clean
1DDE77F0000
unkown
page read and write
clean
7FF5F9F45000
unkown
page readonly
clean
7FF59E06F000
unkown
page readonly
clean
7FF55E4B1000
unkown
page readonly
clean
1C09926D000
unkown
page read and write
clean
C35C7FF000
unkown
page read and write
clean
7FF5F26A5000
unkown
page readonly
clean
7FF5F9E74000
unkown
page readonly
clean
7FF55E6C3000
unkown
page readonly
clean
1DDE7F00000
unkown
page read and write
clean
1DDEC8B4000
unkown
page read and write
clean
7FF55E5E4000
unkown
page readonly
clean
7FF4FEB09000
unkown
page readonly
clean
7FF55E6A6000
unkown
page readonly
clean
1C09926B000
unkown
page read and write
clean
7FF5F2753000
unkown
page readonly
clean
785507E000
unkown
page read and write
clean
2BBDC113000
unkown
page read and write
clean
40ADF7B000
unkown
page read and write
clean
7FF59E075000
unkown
page readonly
clean
7FF59E0D9000
unkown
page readonly
clean
1C099225000
unkown
page read and write
clean
7FF5F2665000
unkown
page readonly
clean
7FF5F225C000
unkown
page readonly
clean
18799802000
unkown
page read and write
clean
1DDEC6C0000
unkown
page read and write
clean
1C099242000
unkown
page read and write
clean
7FF55E6B5000
unkown
page readonly
clean
7FF55E3BF000
unkown
page readonly
clean
1DDE80C0000
unkown
page readonly
clean
7FF55E4D0000
unkown
page readonly
clean
5FDB7B000
unkown
page read and write
clean
7FF55E639000
unkown
page readonly
clean
7FF55E2B3000
unkown
page readonly
clean
20D4C6E0000
unkown
page readonly
clean
40AE17B000
unkown
page read and write
clean
1DDE7918000
unkown
page read and write
clean
1C099262000
unkown
page read and write
clean
1C09925C000
unkown
page read and write
clean
7FF4FE448000
unkown
page readonly
clean
7FF59E078000
unkown
page readonly
clean
7FF59E05B000
unkown
page readonly
clean
1DDEC790000
unkown
page readonly
clean
1DDE7029000
unkown
page read and write
clean
7FF59E0A1000
unkown
page readonly
clean
20D4CD90000
unkown
page readonly
clean
7FF4FEAF4000
unkown
page readonly
clean
1DDE7057000
unkown
page read and write
clean
18799002000
unkown
page read and write
clean
2BBDC800000
unkown
page readonly
clean
18799029000
unkown
page read and write
clean
7FF5B4D9D000
unkown
page readonly
clean
7FF55E3AD000
unkown
page readonly
clean
7FF5F2689000
unkown
page readonly
clean
7FF55E46B000
unkown
page readonly
clean
7FF5F24B2000
unkown
page readonly
clean
2BBDC042000
unkown
page read and write
clean
2BBDBFE0000
unkown
page readonly
clean
C35C277000
unkown
page read and write
clean
1DDEC6F8000
unkown
page write copy
clean
10A9F413000
unkown
page read and write
clean
1DDE7902000
unkown
page read and write
clean
1DDEC700000
unkown
page read and write
clean
20D4C7B0000
unkown
page readonly
clean
7FF5F9EC9000
unkown
page readonly
clean
1DDEC882000
unkown
page read and write
clean
7FF5F24F9000
unkown
page readonly
clean
7FF4FEB25000
unkown
page readonly
clean
20D4C813000
unkown
page read and write
clean
7FF55E5F9000
unkown
page readonly
clean
7FF5F2525000
unkown
page readonly
clean
18799660000
unkown
page read and write
clean
1DDE77E0000
unkown
page read and write
clean
1C099180000
heap default
page read and write
clean
7FF5B4FF1000
unkown
page readonly
clean
7FF55E5B0000
unkown
page readonly
clean
7FF5B4FD0000
unkown
page readonly
clean
7FF5B4FA0000
unkown
page readonly
clean
7FF55E615000
unkown
page readonly
clean
2BBDC0C5000
unkown
page read and write
clean
7FF5F9E14000
unkown
page readonly
clean
1DDEC6D4000
unkown
page readonly
clean
18799065000
unkown
page read and write
clean
7FF5F2691000
unkown
page readonly
clean
7FF55E53C000
unkown
page readonly
clean
7FF5F9E36000
unkown
page readonly
clean
BE071FF000
unkown
page read and write
clean
7FF55E229000
unkown
page readonly
clean
7FF5F2746000
unkown
page readonly
clean
1DDE72D0000
unkown
page readonly
clean
7FF55E389000
unkown
page readonly
clean
2BBDC013000
unkown
page read and write
clean
5FD97E000
unkown
page read and write
clean
10A9FC02000
unkown
page read and write
clean
1DDE7093000
unkown
page read and write
clean
7FF59E080000
unkown
page readonly
clean
1DDE7802000
unkown
page read and write
clean
7FF59E14C000
unkown
page readonly
clean
18799A00000
unkown
page readonly
clean
1C099A02000
unkown
page read and write
clean
20D4C6D0000
heap default
page read and write
clean
7FF4FEBD3000
unkown
page readonly
clean
40AE67E000
unkown
page read and write
clean
1C099213000
unkown
page read and write
clean
18798FF0000
unkown
page readonly
clean
7FF55E5BB000
unkown
page readonly
clean
10A9F3C0000
heap default
page read and write
clean
DA7CAFC000
unkown
page read and write
clean
7FF4FEB56000
unkown
page readonly
clean
7FF59DF7A000
unkown
page readonly
clean
1DDE80F0000
unkown
page readonly
clean
7FF5B4FBB000
unkown
page readonly
clean
7FF59DD2D000
unkown
page readonly
clean
1DDEC4E0000
unkown
page read and write
clean
7FF55E540000
unkown
page readonly
clean
7FF59E0B5000
unkown
page readonly
clean
2BBDC068000
unkown
page read and write
clean
1DDE7959000
unkown
page read and write
clean
1DDEC720000
unkown
page read and write
clean
BE06CFF000
unkown
page read and write
clean
1C099245000
unkown
page read and write
clean
7FF59DEC2000
unkown
page readonly
clean
7FF5F251D000
unkown
page readonly
clean
2BBDC029000
unkown
page read and write
clean
20D4C902000
unkown
page read and write
clean
1DDE8120000
unkown
page readonly
clean
7FF5F9EA5000
unkown
page readonly
clean
7FF5F2590000
unkown
page readonly
clean
1DDEC80C000
unkown
page read and write
clean
7FF4FEB42000
unkown
page readonly
clean
1DDEC6FC000
unkown
page readonly
clean
1C099260000
unkown
page read and write
clean
7FF4FEB01000
unkown
page readonly
clean
1DDE8100000
unkown
page readonly
clean
10A9F508000
unkown
page read and write
clean
7FF5F26C9000
unkown
page readonly
clean
7FF5F2736000
unkown
page readonly
clean
10A9F44B000
unkown
page read and write
clean
5FDE7F000
unkown
page read and write
clean
1DDE7815000
unkown
page read and write
clean
10A9F429000
unkown
page read and write
clean
7FF5F9ED6000
unkown
page readonly
clean
7FF5B50B3000
unkown
page readonly
clean
7FF55E270000
unkown
page readonly
clean
7FF4FEB11000
unkown
page readonly
clean
1DDEC620000
unkown
page read and write
clean
7FF5B4FD4000
unkown
page readonly
clean
10A9F3F0000
unkown
page read and write
clean
1DDEC7D0000
unkown
page readonly
clean
1DDE7076000
unkown
page read and write
clean
2BBDBDC0000
heap private
page read and write
clean
1C09923B000
unkown
page read and write
clean
2BBDC070000
unkown
page read and write
clean
1DDEC7A0000
unkown
page readonly
clean
7FF55E3B4000
unkown
page readonly
clean
C35CB7E000
unkown
page read and write
clean
C35C07B000
unkown
page read and write
clean
C35C6FE000
unkown
page read and write
clean
7FF55E218000
unkown
page readonly
clean
10AA0140000
unkown
page readonly
clean
7FF5B4FAC000
unkown
page readonly
clean
1DDE7959000
unkown
page read and write
clean
DA7C4FF000
unkown
page read and write
clean
20D4CA00000
unkown
page readonly
clean
7FF59DFF3000
unkown
page readonly
clean
7FF5B4E12000
unkown
page readonly
clean
7FF59E0F4000
unkown
page readonly
clean
7FF5F9CB2000
unkown
page readonly
clean
There are 531 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://mobile1austin.com/Title-docs/RD-FITT/
malicious
https://privacy.microsoft.com/en-us/privacystatement
clean
https://www.microsoft.com/de-ch/
clean