Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
http://www.tfaforms.com/responses/processor
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\www.tfaforms[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FD194315-77F6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FD194317-77F6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FD194318-77F6-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Favicon[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\analytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\flat-ui-icons-regular[1].eot
|
Embedded OpenType (EOT), flat-ui-pro-icons family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fontawesome-webfont[1].eot
|
Embedded OpenType (EOT), FontAwesome family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\g=koCss[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\help[1].htm
|
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\rainbow-custom.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\wforms-jsonly[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Favicon[1].png
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\api[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\css[2].css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\g=publicJsFooter[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\pd[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\wforms-layout[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\wforms[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\c33294f5df[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\g=koFontawesome[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-black[1].eot
|
Embedded OpenType (EOT), Lato Black family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-bold[1].eot
|
Embedded OpenType (EOT), Lato family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-bolditalic[1].eot
|
Embedded OpenType (EOT), Lato family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-italic[1].eot
|
Embedded OpenType (EOT), Lato family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-light[1].eot
|
Embedded OpenType (EOT), Lato Light family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\lato-regular[1].eot
|
Embedded OpenType (EOT), Lato family
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\nr-1198.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\S6uyw4BMUTPHjx4wWA[1].woff
|
Web Open Font Format, TrueType, length 28660, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\analytics[1].htm
|
UTF-8 Unicode text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\c33294f5df[1].gif
|
GIF image data, version 89a, 1 x 1
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\c33294f5df[1].js
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\iframe_message_helper_internal[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\recaptcha__en[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\slideout.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF049D6DF724C2332B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF48068F2185627C41.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6DEBFC0F3597EB51.TMP
|
data
|
dropped
|
|
There are 32 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4616 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.tfaforms.com/responses/processorRoot
|
unknown
|
|
|
|
https://github.com/andris9/simpleStorage
|
unknown
|
|
|
|
https://help.formassembly.com/app/image/id/5eac6dd7ad121cde5ddf2202/n/avenir-heavy.woff2
|
unknown
|
|
|
|
http://fontawesome.io
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/processor
|
3.226.66.230
|
|
|
|
https://help.formassembly.com/help/form-tags-and-descriptions
|
unknown
|
|
|
|
http://stackoverflow.com/questions/20524815/ie-11-bug-image-inside-label-inside-form
|
unknown
|
|
|
|
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
|
unknown
|
|
|
|
http://www3.formassembly.com/blog/wp-content/uploads/2014/03/play.png);
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/processor2FormAssembly.com
|
unknown
|
|
|
|
https://help.formassemm/responses/processorbly.com/helpocessorRoot
|
unknown
|
|
|
|
https://help.formassembly.com/knowledgebase/articles/340359-publish-with-an-iframe
|
unknown
|
|
|
|
http://www3.formassembly.com/blog/wp-content/uploads/2014/03/play_orange.png);
|
unknown
|
|
|
|
http://designmodo.comAttribution-NonCommercial-NoDerivs
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/processor2Fbly.com/helpocessorRoot
|
unknown
|
|
|
|
http://www.tfaforms.com/wForms/3.11/js/wforms.js?v=6b1109ac309299ec751af6a3c690f678773e405f
|
3.226.66.230
|
|
|
|
http://www.tfaforms.com/js/iframe_message_helper_internal.js?v=2
|
3.226.66.230
|
|
|
|
http://designmodo.github.io/Flat-UI/)
|
unknown
|
|
|
|
https://help.formassem
|
unknown
|
|
|
|
http://www.tfaforms.com/support/
|
3.226.66.230
|
|
|
|
http://creativecommons.org/licenses/by-nc-nd/3.0/Version
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/processor2FRoot
|
unknown
|
|
|
|
https://formassembly.workable.com
|
unknown
|
|
|
|
https://help.formassembly.com/help
|
|
||
|
http://fontawesome.io/license
|
unknown
|
|
|
|
http://designmodo.com/flatSergey
|
unknown
|
|
|
|
http://fontawesome.io/license/
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/favicon.ico
|
3.226.66.230
|
|
|
|
http://www.tfaforms.com/dist/form-builder/5.0.0/wforms-jsonly.css?v=6b1109ac309299ec751af6a3c690f678773e405f
|
3.226.66.230
|
|
|
|
https://www.formassembly.com/content/uploads/2017/05/Favicon.png
|
unknown
|
|
|
|
https://www.google.%/ads/ga-audiences
|
unknown
|
|
|
|
https://help.formassembly.com/helpocessorx
|
unknown
|
|
|
|
http://www.tfaforms.com/pages/support
|
3.226.66.230
|
|
|
|
http://getbootstrap.com)
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
|
|
|
https://help.formassembly.com/helpocessor
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
|
|
|
https://help.formassembly.com/helpocessorf
|
unknown
|
|
|
|
http://www.tfaforms.com/dist/form-builder/5.0.0/wforms-layout.css?v=6b1109ac309299ec751af6a3c690f678773e405f
|
3.226.66.230
|
|
|
|
https://help.formassembly.com/help
|
unknown
|
|
|
|
https://www.formassembly.com/terms-of-service.php
|
unknown
|
|
|
|
http://www.tfaforms.com/responses/processor
|
|
||
|
https://help.formassembly.com/helpVFormAssembly
|
unknown
|
|
|
|
https://www.formassembly.com/privacy-policy.php
|
unknown
|
|
There are 35 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
formassembly.knowledgeowl.com
|
54.152.202.195
|
|
|
|
app-elbapp-a6b1wbowxm9e-391051627.us-east-1.elb.amazonaws.com
|
3.226.66.230
|
|
|
|
app.knowledgeowl.com
|
54.152.202.195
|
|
|
|
dyzz9obi78pm5.cloudfront.net
|
13.224.89.142
|
|
|
|
pi-ue1-lba3.pardot.com
|
35.174.150.168
|
|
|
|
formassembly.com
|
104.196.12.68
|
|
|
|
www.tfaforms.com
|
unknown
|
|
|
|
js-agent.newrelic.com
|
unknown
|
|
|
|
help.formassembly.com
|
unknown
|
|
|
|
bam-cell.nr-data.net
|
unknown
|
|
|
|
www.formassembly.com
|
unknown
|
|
|
|
pi.pardot.com
|
unknown
|
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
13.224.89.142
|
unknown
|
United States
|
unknown
|
|
|
|
35.174.150.168
|
unknown
|
United States
|
unknown
|
|
|
|
104.196.12.68
|
unknown
|
United States
|
unknown
|
|
|
|
3.226.66.230
|
unknown
|
United States
|
unknown
|
|
|
|
54.152.202.195
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{FD194315-77F6-11EB-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-903
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 21 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5715A0000
|
unkown
|
page readonly
|
|
|
|
7FF591605000
|
unkown
|
page readonly
|
|
|
|
EE7617F000
|
unkown
|
page read and write
|
|
|
|
24EE3D90000
|
unkown
|
page read and write
|
|
|
|
7FF57159B000
|
unkown
|
page readonly
|
|
|
|
2D07453A000
|
unkown
|
page read and write
|
|
|
|
24EDEDF0000
|
unkown
|
page read and write
|
|
|
|
EE7627E000
|
unkown
|
page read and write
|
|
|
|
7FF525E73000
|
unkown
|
page readonly
|
|
|
|
AEF60FC000
|
unkown
|
page read and write
|
|
|
|
7FF54FF62000
|
unkown
|
page readonly
|
|
|
|
7FF5CC302000
|
unkown
|
page readonly
|
|
|
|
7FF573D47000
|
unkown
|
page readonly
|
|
|
|
7FF571533000
|
unkown
|
page readonly
|
|
|
|
7FF54FF37000
|
unkown
|
page readonly
|
|
|
|
7FF5714E8000
|
unkown
|
page readonly
|
|
|
|
D75627F000
|
unkown
|
page read and write
|
|
|
|
2D074402000
|
unkown
|
page read and write
|
|
|
|
7FF5C49A8000
|
unkown
|
page readonly
|
|
|
|
24EE40D0000
|
unkown
|
page read and write
|
|
|
|
7FF5715BB000
|
unkown
|
page readonly
|
|
|
|
1EDB1A00000
|
unkown
|
page read and write
|
|
|
|
28FAE450000
|
unkown
|
page read and write
|
|
|
|
79EF8FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C4A8B000
|
unkown
|
page readonly
|
|
|
|
7FF54FF2D000
|
unkown
|
page readonly
|
|
|
|
9A4EAFF000
|
unkown
|
page read and write
|
|
|
|
7FF573D8A000
|
unkown
|
page readonly
|
|
|
|
24EE3E42000
|
unkown
|
page read and write
|
|
|
|
1EDB34F0000
|
unkown
|
page readonly
|
|
|
|
7FF5C49F5000
|
unkown
|
page readonly
|
|
|
|
28FAEE00000
|
unkown
|
page readonly
|
|
|
|
21BEC500000
|
heap private
|
page read and write
|
|
|
|
24EE3CC4000
|
unkown
|
page read and write
|
|
|
|
2D073CBB000
|
unkown
|
page read and write
|
|
|
|
7FF5CC41F000
|
unkown
|
page readonly
|
|
|
|
7FF5CC328000
|
unkown
|
page readonly
|
|
|
|
AEF607D000
|
unkown
|
page read and write
|
|
|
|
24EE3CA1000
|
unkown
|
page read and write
|
|
|
|
EE7597D000
|
unkown
|
page read and write
|
|
|
|
7FF591658000
|
unkown
|
page readonly
|
|
|
|
24EDE83D000
|
unkown
|
page read and write
|
|
|
|
7FF5CBB98000
|
unkown
|
page readonly
|
|
|
|
24EDF720000
|
unkown
|
page readonly
|
|
|
|
24EDEF18000
|
unkown
|
page read and write
|
|
|
|
7FF5CC313000
|
unkown
|
page readonly
|
|
|
|
28FAE380000
|
heap private
|
page read and write
|
|
|
|
24EE3C80000
|
unkown
|
page read and write
|
|
|
|
253370D0000
|
unkown
|
page readonly
|
|
|
|
D755DFF000
|
unkown
|
page read and write
|
|
|
|
25336E6F000
|
unkown
|
page read and write
|
|
|
|
2D073A40000
|
heap private
|
page read and write
|
|
|
|
7FF5C4A8F000
|
unkown
|
page readonly
|
|
|
|
24EE3E88000
|
unkown
|
page read and write
|
|
|
|
7FF5D937B000
|
unkown
|
page readonly
|
|
|
|
8261F7A000
|
unkown
|
page read and write
|
|
|
|
7FF54FDD0000
|
unkown
|
page readonly
|
|
|
|
7FF590EE6000
|
unkown
|
page readonly
|
|
|
|
7FF59169F000
|
unkown
|
page readonly
|
|
|
|
7FF54FF8C000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
7FF54FD73000
|
unkown
|
page readonly
|
|
|
|
AEF617E000
|
unkown
|
page read and write
|
|
|
|
7FF5715B4000
|
unkown
|
page readonly
|
|
|
|
24EDEE15000
|
unkown
|
page read and write
|
|
|
|
7FF573D75000
|
unkown
|
page readonly
|
|
|
|
24EE3C88000
|
unkown
|
page read and write
|
|
|
|
24EDEE00000
|
unkown
|
page read and write
|
|
|
|
1C29AEEB000
|
heap default
|
page read and write
|
|
|
|
2D073CE2000
|
unkown
|
page read and write
|
|
|
|
7FF5CC34D000
|
unkown
|
page readonly
|
|
|
|
7FF5CC3F0000
|
unkown
|
page readonly
|
|
|
|
24EE4100000
|
unkown
|
page readonly
|
|
|
|
7FF5712D7000
|
unkown
|
page readonly
|
|
|
|
7FF5CC11D000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1E6000
|
unkown
|
page readonly
|
|
|
|
7FF573DF8000
|
unkown
|
page readonly
|
|
|
|
7FF525A58000
|
unkown
|
page readonly
|
|
|
|
7FF54FE4C000
|
unkown
|
page readonly
|
|
|
|
24EE3EBA000
|
unkown
|
page read and write
|
|
|
|
1EDB1A02000
|
unkown
|
page read and write
|
|
|
|
7FF54FD6A000
|
unkown
|
page readonly
|
|
|
|
7FF5CC359000
|
unkown
|
page readonly
|
|
|
|
7FF573CF7000
|
unkown
|
page readonly
|
|
|
|
28FAE491000
|
unkown
|
page read and write
|
|
|
|
24EE3DE0000
|
unkown
|
page read and write
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
24EDF740000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A6D000
|
unkown
|
page readonly
|
|
|
|
1C29C9A0000
|
unkown
|
page readonly
|
|
|
|
7FF571487000
|
unkown
|
page readonly
|
|
|
|
7FF5D91A2000
|
unkown
|
page readonly
|
|
|
|
21BEC713000
|
unkown
|
page read and write
|
|
|
|
24EDE892000
|
unkown
|
page read and write
|
|
|
|
7FF573E06000
|
unkown
|
page readonly
|
|
|
|
7FF54FD7D000
|
unkown
|
page readonly
|
|
|
|
7FF5CC404000
|
unkown
|
page readonly
|
|
|
|
7FF5715CB000
|
unkown
|
page readonly
|
|
|
|
19213EE000
|
unkown
|
page read and write
|
|
|
|
1C29C980000
|
unkown
|
page readonly
|
|
|
|
7FF573DFF000
|
unkown
|
page readonly
|
|
|
|
25336E6D000
|
unkown
|
page read and write
|
|
|
|
24EE3B60000
|
unkown
|
page read and write
|
|
|
|
7FF5C467D000
|
unkown
|
page readonly
|
|
|
|
24EDF780000
|
unkown
|
page readonly
|
|
|
|
1C29AF01000
|
heap default
|
page read and write
|
|
|
|
7FF573E0B000
|
unkown
|
page readonly
|
|
|
|
24EE3C8E000
|
unkown
|
page read and write
|
|
|
|
D75568C000
|
unkown
|
page read and write
|
|
|
|
7FF55007F000
|
unkown
|
page readonly
|
|
|
|
28FAE429000
|
unkown
|
page read and write
|
|
|
|
7FF54FFB9000
|
unkown
|
page readonly
|
|
|
|
7FF525F46000
|
unkown
|
page readonly
|
|
|
|
7FF5CC0AA000
|
unkown
|
page readonly
|
|
|
|
1C29CB70000
|
heap private
|
page read and write
|
|
|
|
25336E00000
|
unkown
|
page read and write
|
|
|
|
28FAE44D000
|
unkown
|
page read and write
|
|
|
|
28FAEB40000
|
unkown
|
page read and write
|
|
|
|
7FF571505000
|
unkown
|
page readonly
|
|
|
|
25337000000
|
unkown
|
page readonly
|
|
|
|
25336E6D000
|
unkown
|
page read and write
|
|
|
|
2D073C6D000
|
unkown
|
page read and write
|
|
|
|
1EDB1B00000
|
unkown
|
page read and write
|
|
|
|
9A4E4FF000
|
unkown
|
page read and write
|
|
|
|
7FF525E87000
|
unkown
|
page readonly
|
|
|
|
E5D96FF000
|
unkown
|
page read and write
|
|
|
|
2D073C88000
|
unkown
|
page read and write
|
|
|
|
24EE3E74000
|
unkown
|
page read and write
|
|
|
|
21BEC66E000
|
unkown
|
page read and write
|
|
|
|
9A4E9FD000
|
unkown
|
page read and write
|
|
|
|
1EDB1B02000
|
unkown
|
page read and write
|
|
|
|
1C29B260000
|
unkown
|
page readonly
|
|
|
|
7FF5739F7000
|
unkown
|
page readonly
|
|
|
|
D7560FF000
|
unkown
|
page read and write
|
|
|
|
7FF573CED000
|
unkown
|
page readonly
|
|
|
|
7FF54FF87000
|
unkown
|
page readonly
|
|
|
|
28FAE43C000
|
unkown
|
page read and write
|
|
|
|
7FF5D937F000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1DC000
|
unkown
|
page readonly
|
|
|
|
1E35D790000
|
unkown
|
page readonly
|
|
|
|
7FF573DA3000
|
unkown
|
page readonly
|
|
|
|
7FF5C493A000
|
unkown
|
page readonly
|
|
|
|
28FAE6D0000
|
unkown
|
page readonly
|
|
|
|
7FF525EB9000
|
unkown
|
page readonly
|
|
|
|
21BEC702000
|
unkown
|
page read and write
|
|
|
|
7FF5D937D000
|
unkown
|
page readonly
|
|
|
|
8261E7F000
|
unkown
|
page read and write
|
|
|
|
24EDEF58000
|
unkown
|
page read and write
|
|
|
|
2D073C29000
|
unkown
|
page read and write
|
|
|
|
7FF59168E000
|
unkown
|
page readonly
|
|
|
|
EE75F7F000
|
unkown
|
page read and write
|
|
|
|
21BEC600000
|
unkown
|
page read and write
|
|
|
|
7FF59166B000
|
unkown
|
page readonly
|
|
|
|
7FF591353000
|
unkown
|
page readonly
|
|
|
|
25336E6C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9262000
|
unkown
|
page readonly
|
|
|
|
7FF54FB2F000
|
unkown
|
page readonly
|
|
|
|
1C29AE50000
|
unkown
|
page readonly
|
|
|
|
7FF55006E000
|
unkown
|
page readonly
|
|
|
|
2D073BD0000
|
unkown
|
page readonly
|
|
|
|
E5D9CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5C49D3000
|
unkown
|
page readonly
|
|
|
|
24EDE7E0000
|
unkown
|
page readonly
|
|
|
|
7FF54FF50000
|
unkown
|
page readonly
|
|
|
|
EE7647E000
|
unkown
|
page read and write
|
|
|
|
7FF5715CF000
|
unkown
|
page readonly
|
|
|
|
7FF5CC3D8000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
7FF59169F000
|
unkown
|
page readonly
|
|
|
|
2D073B90000
|
unkown
|
page readonly
|
|
|
|
EE75C7C000
|
unkown
|
page read and write
|
|
|
|
7FF550046000
|
unkown
|
page readonly
|
|
|
|
28FAE3E0000
|
heap default
|
page read and write
|
|
|
|
2D074500000
|
unkown
|
page read and write
|
|
|
|
79EF87F000
|
unkown
|
page read and write
|
|
|
|
7FF54FFCA000
|
unkown
|
page readonly
|
|
|
|
1C29B0B0000
|
unkown
|
page read and write
|
|
|
|
24EE3E86000
|
unkown
|
page read and write
|
|
|
|
7FF59124D000
|
unkown
|
page readonly
|
|
|
|
7FF5713DD000
|
unkown
|
page readonly
|
|
|
|
1E35D213000
|
unkown
|
page read and write
|
|
|
|
24EE3EB1000
|
unkown
|
page read and write
|
|
|
|
7FF5D936E000
|
unkown
|
page readonly
|
|
|
|
7FF525F7B000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
24EDE829000
|
unkown
|
page read and write
|
|
|
|
24EE3CA4000
|
unkown
|
page read and write
|
|
|
|
7FF54FC0F000
|
unkown
|
page readonly
|
|
|
|
7FF571347000
|
unkown
|
page readonly
|
|
|
|
1C29CA80000
|
heap private
|
page read and write
|
|
|
|
1EDB1B13000
|
unkown
|
page read and write
|
|
|
|
7FF5712F5000
|
unkown
|
page readonly
|
|
|
|
25338870000
|
unkown
|
page read and write
|
|
|
|
7FF5915E3000
|
unkown
|
page readonly
|
|
|
|
28FAE600000
|
unkown
|
page readonly
|
|
|
|
E5D91DD000
|
unkown
|
page read and write
|
|
|
|
24EDEF18000
|
unkown
|
page read and write
|
|
|
|
24EE4020000
|
unkown
|
page readonly
|
|
|
|
7FF54FBE5000
|
unkown
|
page readonly
|
|
|
|
24EE3E24000
|
unkown
|
page read and write
|
|
|
|
24EE3DC0000
|
unkown
|
page read and write
|
|
|
|
24EE3E15000
|
unkown
|
page read and write
|
|
|
|
7FF525ECA000
|
unkown
|
page readonly
|
|
|
|
24EDE902000
|
unkown
|
page read and write
|
|
|
|
24EDE7F0000
|
unkown
|
page read and write
|
|
|
|
7FF591670000
|
unkown
|
page readonly
|
|
|
|
1E35D283000
|
unkown
|
page read and write
|
|
|
|
7FF5C4773000
|
unkown
|
page readonly
|
|
|
|
24EE3E31000
|
unkown
|
page read and write
|
|
|
|
8261B4B000
|
unkown
|
page read and write
|
|
|
|
7FF591666000
|
unkown
|
page readonly
|
|
|
|
7FF5915D5000
|
unkown
|
page readonly
|
|
|
|
D755FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C4A74000
|
unkown
|
page readonly
|
|
|
|
7FF5D8BC4000
|
unkown
|
page readonly
|
|
|
|
7FF5D92B5000
|
unkown
|
page readonly
|
|
|
|
25336CE0000
|
heap private
|
page read and write
|
|
|
|
E5D9BFE000
|
unkown
|
page read and write
|
|
|
|
24EE3CA0000
|
unkown
|
page read and write
|
|
|
|
7FF5CC41B000
|
unkown
|
page readonly
|
|
|
|
7FF5CC3FD000
|
unkown
|
page readonly
|
|
|
|
24EDE8FD000
|
unkown
|
page read and write
|
|
|
|
7FF54FD87000
|
unkown
|
page readonly
|
|
|
|
7FF54FE1D000
|
unkown
|
page readonly
|
|
|
|
7FF5CC40E000
|
unkown
|
page readonly
|
|
|
|
24EE3EB8000
|
unkown
|
page read and write
|
|
|
|
24EE5000000
|
unkown
|
page read and write
|
|
|
|
24EE3D74000
|
unkown
|
page readonly
|
|
|
|
9A4E47F000
|
unkown
|
page read and write
|
|
|
|
7FF525F64000
|
unkown
|
page readonly
|
|
|
|
7FF5D9287000
|
unkown
|
page readonly
|
|
|
|
21BEC590000
|
unkown
|
page read and write
|
|
|
|
7FF5D92CA000
|
unkown
|
page readonly
|
|
|
|
EE7637F000
|
unkown
|
page read and write
|
|
|
|
2D073D13000
|
unkown
|
page read and write
|
|
|
|
D75570E000
|
unkown
|
page read and write
|
|
|
|
7FF571509000
|
unkown
|
page readonly
|
|
|
|
7FF5712CD000
|
unkown
|
page readonly
|
|
|
|
7FF54F8A6000
|
unkown
|
page readonly
|
|
|
|
7FF573D14000
|
unkown
|
page readonly
|
|
|
|
24EE3AF0000
|
unkown
|
page read and write
|
|
|
|
1EDB1A13000
|
unkown
|
page read and write
|
|
|
|
8261EF9000
|
unkown
|
page read and write
|
|
|
|
7FF525D4E000
|
unkown
|
page readonly
|
|
|
|
7FF5D935D000
|
unkown
|
page readonly
|
|
|
|
2D073E00000
|
unkown
|
page readonly
|
|
|
|
E5D99FB000
|
unkown
|
page read and write
|
|
|
|
7FF54FE14000
|
unkown
|
page readonly
|
|
|
|
7FF5714A4000
|
unkown
|
page readonly
|
|
|
|
D7561FE000
|
unkown
|
page read and write
|
|
|
|
2D073B80000
|
unkown
|
page readonly
|
|
|
|
7FF5C4987000
|
unkown
|
page readonly
|
|
|
|
7FF525C33000
|
unkown
|
page readonly
|
|
|
|
7FF525D1D000
|
unkown
|
page readonly
|
|
|
|
24EDE700000
|
unkown
|
page readonly
|
|
|
|
7FF54FF73000
|
unkown
|
page readonly
|
|
|
|
25336D40000
|
heap default
|
page read and write
|
|
|
|
7FF5D934B000
|
unkown
|
page readonly
|
|
|
|
21BEC5B0000
|
unkown
|
page readonly
|
|
|
|
24EDE857000
|
unkown
|
page read and write
|
|
|
|
2D073CCC000
|
unkown
|
page read and write
|
|
|
|
7FF54FBF4000
|
unkown
|
page readonly
|
|
|
|
7FF525EAD000
|
unkown
|
page readonly
|
|
|
|
24EE3DE0000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
24EE4030000
|
unkown
|
page readonly
|
|
|
|
7FF573B3D000
|
unkown
|
page readonly
|
|
|
|
24EDE710000
|
unkown
|
page readonly
|
|
|
|
21BEC602000
|
unkown
|
page read and write
|
|
|
|
7FF525F38000
|
unkown
|
page readonly
|
|
|
|
7FF525D6E000
|
unkown
|
page readonly
|
|
|
|
7FF573E2E000
|
unkown
|
page readonly
|
|
|
|
79EF979000
|
unkown
|
page read and write
|
|
|
|
24EE3D84000
|
unkown
|
page write copy
|
|
|
|
1E35DA02000
|
unkown
|
page read and write
|
|
|
|
8261FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5CC3DF000
|
unkown
|
page readonly
|
|
|
|
7FF5C492F000
|
unkown
|
page readonly
|
|
|
|
7FF54FF30000
|
unkown
|
page readonly
|
|
|
|
EE75A7B000
|
unkown
|
page read and write
|
|
|
|
7FF54FD0A000
|
unkown
|
page readonly
|
|
|
|
D75667A000
|
unkown
|
page read and write
|
|
|
|
7FF5D926C000
|
unkown
|
page readonly
|
|
|
|
24EE3E5E000
|
unkown
|
page read and write
|
|
|
|
D7563FF000
|
unkown
|
page read and write
|
|
|
|
24EDED90000
|
unkown
|
page read and write
|
|
|
|
24EDFAC1000
|
unkown
|
page read and write
|
|
|
|
D75647F000
|
unkown
|
page read and write
|
|
|
|
7FF5D9058000
|
unkown
|
page readonly
|
|
|
|
D755AF7000
|
unkown
|
page read and write
|
|
|
|
24EE3EB1000
|
unkown
|
page read and write
|
|
|
|
24EE3C80000
|
unkown
|
page read and write
|
|
|
|
2D073CCA000
|
unkown
|
page read and write
|
|
|
|
EE75B7F000
|
unkown
|
page read and write
|
|
|
|
2D074190000
|
unkown
|
page readonly
|
|
|
|
7FF573A2A000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
7FF573BB7000
|
unkown
|
page readonly
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
7FF525F6B000
|
unkown
|
page readonly
|
|
|
|
1EDB19D0000
|
unkown
|
page readonly
|
|
|
|
7FF57147D000
|
unkown
|
page readonly
|
|
|
|
24EDEA00000
|
unkown
|
page readonly
|
|
|
|
1EDB1A3F000
|
unkown
|
page read and write
|
|
|
|
7FF573E10000
|
unkown
|
page readonly
|
|
|
|
7FF525A43000
|
unkown
|
page readonly
|
|
|
|
79EFA7E000
|
unkown
|
page read and write
|
|
|
|
1C29AFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C49A0000
|
unkown
|
page readonly
|
|
|
|
21BEC629000
|
unkown
|
page read and write
|
|
|
|
1C29AEB0000
|
unkown
|
page read and write
|
|
|
|
21BED000000
|
unkown
|
page readonly
|
|
|
|
7FF54FD6C000
|
unkown
|
page readonly
|
|
|
|
24EE3DD0000
|
unkown
|
page read and write
|
|
|
|
7FF54FBB1000
|
unkown
|
page readonly
|
|
|
|
21BEC560000
|
heap default
|
page read and write
|
|
|
|
E5D94FB000
|
unkown
|
page read and write
|
|
|
|
E5D90DC000
|
unkown
|
page read and write
|
|
|
|
1EDB1A29000
|
unkown
|
page read and write
|
|
|
|
1E35D25F000
|
unkown
|
page read and write
|
|
|
|
7FF5C4A56000
|
unkown
|
page readonly
|
|
|
|
1EDB1C50000
|
unkown
|
page readonly
|
|
|
|
7FF54FDA3000
|
unkown
|
page readonly
|
|
|
|
7FF5D91FE000
|
unkown
|
page readonly
|
|
|
|
28FAE44C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9254000
|
unkown
|
page readonly
|
|
|
|
24EE40E0000
|
unkown
|
page readonly
|
|
|
|
7FF54F851000
|
unkown
|
page readonly
|
|
|
|
7FF54FEB7000
|
unkown
|
page readonly
|
|
|
|
24EE3DE0000
|
unkown
|
page read and write
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
1E35D190000
|
unkown
|
page readonly
|
|
|
|
7FF571480000
|
unkown
|
page readonly
|
|
|
|
7FF54FFB5000
|
unkown
|
page readonly
|
|
|
|
7FF550038000
|
unkown
|
page readonly
|
|
|
|
24EE3E61000
|
unkown
|
page read and write
|
|
|
|
7FF55006B000
|
unkown
|
page readonly
|
|
|
|
25336E67000
|
unkown
|
page read and write
|
|
|
|
D75677C000
|
unkown
|
page read and write
|
|
|
|
7FF5714D7000
|
unkown
|
page readonly
|
|
|
|
24EE3CB0000
|
unkown
|
page read and write
|
|
|
|
24EE3E76000
|
unkown
|
page read and write
|
|
|
|
7FF59165F000
|
unkown
|
page readonly
|
|
|
|
24EDEE02000
|
unkown
|
page read and write
|
|
|
|
7FF54FDA1000
|
unkown
|
page readonly
|
|
|
|
24EE3B70000
|
unkown
|
page read and write
|
|
|
|
7FF54FE33000
|
unkown
|
page readonly
|
|
|
|
7FF5CC385000
|
unkown
|
page readonly
|
|
|
|
24EDE813000
|
unkown
|
page read and write
|
|
|
|
7FF5C4933000
|
unkown
|
page readonly
|
|
|
|
7FF573E2B000
|
unkown
|
page readonly
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
28FAE502000
|
unkown
|
page read and write
|
|
|
|
7FF55005D000
|
unkown
|
page readonly
|
|
|
|
24EE3D77000
|
unkown
|
page readonly
|
|
|
|
24EE3AE0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9046000
|
unkown
|
page readonly
|
|
|
|
24EE4040000
|
unkown
|
page readonly
|
|
|
|
7FF571187000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
24EE3DE0000
|
unkown
|
page read and write
|
|
|
|
1C29CC6F000
|
heap private
|
page read and write
|
|
|
|
7FF591684000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A8F000
|
unkown
|
page readonly
|
|
|
|
7FF591597000
|
unkown
|
page readonly
|
|
|
|
7FF5714E0000
|
unkown
|
page readonly
|
|
|
|
24EDE88B000
|
unkown
|
page read and write
|
|
|
|
7FF525DF4000
|
unkown
|
page readonly
|
|
|
|
7FF525E98000
|
unkown
|
page readonly
|
|
|
|
7FF5CC30C000
|
unkown
|
page readonly
|
|
|
|
24EDE8A1000
|
unkown
|
page read and write
|
|
|
|
7FF5D9112000
|
unkown
|
page readonly
|
|
|
|
2D073BA0000
|
unkown
|
page read and write
|
|
|
|
7FF590EE8000
|
unkown
|
page readonly
|
|
|
|
7FF5CC40B000
|
unkown
|
page readonly
|
|
|
|
E5D9DFF000
|
unkown
|
page read and write
|
|
|
|
7FF5915D9000
|
unkown
|
page readonly
|
|
|
|
25336E56000
|
unkown
|
page read and write
|
|
|
|
7FF573D6D000
|
unkown
|
page readonly
|
|
|
|
7FF573B65000
|
unkown
|
page readonly
|
|
|
|
7FF525F7F000
|
unkown
|
page readonly
|
|
|
|
1C29B280000
|
unkown
|
page readonly
|
|
|
|
7FF5915CD000
|
unkown
|
page readonly
|
|
|
|
7FF5715AD000
|
unkown
|
page readonly
|
|
|
|
7FF54FF77000
|
unkown
|
page readonly
|
|
|
|
AEF5C8C000
|
unkown
|
page read and write
|
|
|
|
7FF5915EA000
|
unkown
|
page readonly
|
|
|
|
25336F02000
|
unkown
|
page read and write
|
|
|
|
7FF55007B000
|
unkown
|
page readonly
|
|
|
|
7FF573E1D000
|
unkown
|
page readonly
|
|
|
|
7FF5D92E5000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A48000
|
unkown
|
page readonly
|
|
|
|
7FF54FEF4000
|
unkown
|
page readonly
|
|
|
|
D75637E000
|
unkown
|
page read and write
|
|
|
|
24EE3EB6000
|
unkown
|
page read and write
|
|
|
|
1EDB1A6E000
|
unkown
|
page read and write
|
|
|
|
21BECC60000
|
unkown
|
page readonly
|
|
|
|
24EDE874000
|
unkown
|
page read and write
|
|
|
|
24EDEF02000
|
unkown
|
page read and write
|
|
|
|
21BEC641000
|
unkown
|
page read and write
|
|
|
|
24EDF101000
|
unkown
|
page read and write
|
|
|
|
7FF55007F000
|
unkown
|
page readonly
|
|
|
|
7FF5711B2000
|
unkown
|
page readonly
|
|
|
|
1C29C890000
|
unkown
|
page readonly
|
|
|
|
21BEC570000
|
unkown
|
page readonly
|
|
|
|
7FF54FD71000
|
unkown
|
page readonly
|
|
|
|
7FF5D9273000
|
unkown
|
page readonly
|
|
|
|
7FF5C49FD000
|
unkown
|
page readonly
|
|
|
|
AEF5D8E000
|
unkown
|
page read and write
|
|
|
|
E5D97FE000
|
unkown
|
page read and write
|
|
|
|
7FF5713BE000
|
unkown
|
page readonly
|
|
|
|
E5D9AFD000
|
unkown
|
page read and write
|
|
|
|
7FF5D9338000
|
unkown
|
page readonly
|
|
|
|
7FF5714FD000
|
unkown
|
page readonly
|
|
|
|
28FAE458000
|
unkown
|
page read and write
|
|
|
|
24EDF640000
|
unkown
|
page read and write
|
|
|
|
D75578E000
|
unkown
|
page read and write
|
|
|
|
7FF5C49C5000
|
unkown
|
page readonly
|
|
|
|
25336E6D000
|
unkown
|
page read and write
|
|
|
|
28FAE413000
|
unkown
|
page read and write
|
|
|
|
7FF571588000
|
unkown
|
page readonly
|
|
|
|
24EDE630000
|
unkown
|
page readonly
|
|
|
|
E5D957E000
|
unkown
|
page read and write
|
|
|
|
24EDF730000
|
unkown
|
page readonly
|
|
|
|
21BECE02000
|
unkown
|
page read and write
|
|
|
|
7FF525D43000
|
unkown
|
page readonly
|
|
|
|
7FF54FF98000
|
unkown
|
page readonly
|
|
|
|
19212EB000
|
unkown
|
page read and write
|
|
|
|
9A4E7F7000
|
unkown
|
page read and write
|
|
|
|
7FF59169B000
|
unkown
|
page readonly
|
|
|
|
24EE3EB6000
|
unkown
|
page read and write
|
|
|
|
24EE3B30000
|
unkown
|
page readonly
|
|
|
|
7FF525B55000
|
unkown
|
page readonly
|
|
|
|
7FF54FFC3000
|
unkown
|
page readonly
|
|
|
|
24EDE620000
|
heap default
|
page read and write
|
|
|
|
7FF573D58000
|
unkown
|
page readonly
|
|
|
|
2D074512000
|
unkown
|
page read and write
|
|
|
|
79EF5EB000
|
unkown
|
page read and write
|
|
|
|
7FF54FC55000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
2D073C3E000
|
unkown
|
page read and write
|
|
|
|
2D074600000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A4F000
|
unkown
|
page readonly
|
|
|
|
7FF59143D000
|
unkown
|
page readonly
|
|
|
|
24EDE913000
|
unkown
|
page read and write
|
|
|
|
D755CFB000
|
unkown
|
page read and write
|
|
|
|
7FF525F7F000
|
unkown
|
page readonly
|
|
|
|
7FF57119F000
|
unkown
|
page readonly
|
|
|
|
7FF5715BE000
|
unkown
|
page readonly
|
|
|
|
25336D50000
|
unkown
|
page write copy
|
|
|
|
28FAE513000
|
unkown
|
page read and write
|
|
|
|
7FF5D928C000
|
unkown
|
page readonly
|
|
|
|
7FF5CC32C000
|
unkown
|
page readonly
|
|
|
|
7FF5711AD000
|
unkown
|
page readonly
|
|
|
|
28FAE400000
|
unkown
|
page read and write
|
|
|
|
AEF627E000
|
unkown
|
page read and write
|
|
|
|
1EDB1A56000
|
unkown
|
page read and write
|
|
|
|
2D073C00000
|
unkown
|
page read and write
|
|
|
|
25336F00000
|
unkown
|
page read and write
|
|
|
|
7FF5D9346000
|
unkown
|
page readonly
|
|
|
|
7FF573B47000
|
unkown
|
page readonly
|
|
|
|
AEF5D0E000
|
unkown
|
page read and write
|
|
|
|
25336E6B000
|
unkown
|
page read and write
|
|
|
|
24EDE800000
|
unkown
|
page read and write
|
|
|
|
25336DA0000
|
unkown
|
page readonly
|
|
|
|
7FF573D83000
|
unkown
|
page readonly
|
|
|
|
D755BFC000
|
unkown
|
page read and write
|
|
|
|
1EDB1890000
|
heap private
|
page read and write
|
|
|
|
7FF5D9277000
|
unkown
|
page readonly
|
|
|
|
24EDEF13000
|
unkown
|
page read and write
|
|
|
|
1E35D202000
|
unkown
|
page read and write
|
|
|
|
2D073D02000
|
unkown
|
page read and write
|
|
|
|
24EDF760000
|
unkown
|
page readonly
|
|
|
|
1E35D0B0000
|
unkown
|
page readonly
|
|
|
|
7FF573CF0000
|
unkown
|
page readonly
|
|
|
|
1EDB18F0000
|
heap default
|
page read and write
|
|
|
|
7FF525F5D000
|
unkown
|
page readonly
|
|
|
|
7FF54FD3F000
|
unkown
|
page readonly
|
|
|
|
7FF5CC338000
|
unkown
|
page readonly
|
|
|
|
7FF5714DC000
|
unkown
|
page readonly
|
|
|
|
7FF54FF58000
|
unkown
|
page readonly
|
|
|
|
1EDB1900000
|
unkown
|
page readonly
|
|
|
|
7FF525EC3000
|
unkown
|
page readonly
|
|
|
|
7FF525EE5000
|
unkown
|
page readonly
|
|
|
|
7FF55003F000
|
unkown
|
page readonly
|
|
|
|
25336E6B000
|
unkown
|
page read and write
|
|
|
|
826207F000
|
unkown
|
page read and write
|
|
|
|
1E35D200000
|
unkown
|
page read and write
|
|
|
|
EE758FD000
|
unkown
|
page read and write
|
|
|
|
25336E6C000
|
unkown
|
page read and write
|
|
|
|
7FF55004B000
|
unkown
|
page readonly
|
|
|
|
7FF573E3F000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
79EFAFE000
|
unkown
|
page read and write
|
|
|
|
21BEC675000
|
unkown
|
page read and write
|
|
|
|
7FF54FC23000
|
unkown
|
page readonly
|
|
|
|
7FF5D9275000
|
unkown
|
page readonly
|
|
|
|
7FF5CC41F000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1BD000
|
unkown
|
page readonly
|
|
|
|
7FF5C49F3000
|
unkown
|
page readonly
|
|
|
|
1E35D223000
|
unkown
|
page read and write
|
|
|
|
24EDE825000
|
unkown
|
page read and write
|
|
|
|
28FAE48B000
|
unkown
|
page read and write
|
|
|
|
79EF9F9000
|
unkown
|
page read and write
|
|
|
|
7FF5CC2F4000
|
unkown
|
page readonly
|
|
|
|
7FF54FB86000
|
unkown
|
page readonly
|
|
|
|
24EE40C0000
|
unkown
|
page readonly
|
|
|
|
24EE3E00000
|
unkown
|
page read and write
|
|
|
|
7FF54FF6C000
|
unkown
|
page readonly
|
|
|
|
21BEC65B000
|
unkown
|
page read and write
|
|
|
|
7FF525E77000
|
unkown
|
page readonly
|
|
|
|
1E35D180000
|
unkown
|
page readonly
|
|
|
|
1C29B270000
|
heap private
|
page read and write
|
|
|
|
7FF525DD5000
|
unkown
|
page readonly
|
|
|
|
7FF54FF40000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
7FF5D937F000
|
unkown
|
page readonly
|
|
|
|
7FF5D8F35000
|
unkown
|
page readonly
|
|
|
|
7FF5C49C9000
|
unkown
|
page readonly
|
|
|
|
7FF525F4B000
|
unkown
|
page readonly
|
|
|
|
7FF5D92B9000
|
unkown
|
page readonly
|
|
|
|
E5D915E000
|
unkown
|
page read and write
|
|
|
|
7FF5CC355000
|
unkown
|
page readonly
|
|
|
|
7FF573E3F000
|
unkown
|
page readonly
|
|
|
|
7FF5C499C000
|
unkown
|
page readonly
|
|
|
|
E5D987C000
|
unkown
|
page read and write
|
|
|
|
7FF525E8C000
|
unkown
|
page readonly
|
|
|
|
7FF5D8EDE000
|
unkown
|
page readonly
|
|
|
|
7FF54FC20000
|
unkown
|
page readonly
|
|
|
|
7FF57158F000
|
unkown
|
page readonly
|
|
|
|
19216FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D911D000
|
unkown
|
page readonly
|
|
|
|
1C29C990000
|
unkown
|
page readonly
|
|
|
|
1C29CA10000
|
heap private
|
page read and write
|
|
|
|
28FAE455000
|
unkown
|
page read and write
|
|
|
|
7FF5C4A7B000
|
unkown
|
page readonly
|
|
|
|
1C29CD50000
|
heap private
|
page read and write
|
|
|
|
7FF54F725000
|
unkown
|
page readonly
|
|
|
|
24EDEF00000
|
unkown
|
page read and write
|
|
|
|
24EE3DB0000
|
unkown
|
page read and write
|
|
|
|
D755EFB000
|
unkown
|
page read and write
|
|
|
|
28FAEC02000
|
unkown
|
page read and write
|
|
|
|
25336E6D000
|
unkown
|
page read and write
|
|
|
|
28FAEB30000
|
unkown
|
page readonly
|
|
|
|
7FF5CC127000
|
unkown
|
page readonly
|
|
|
|
7FF573C2E000
|
unkown
|
page readonly
|
|
|
|
25336E02000
|
unkown
|
page read and write
|
|
|
|
7FF525F6E000
|
unkown
|
page readonly
|
|
|
|
1EDB1C00000
|
unkown
|
page write copy
|
|
|
|
7FF573D4C000
|
unkown
|
page readonly
|
|
|
|
1C29AF1D000
|
heap default
|
page read and write
|
|
|
|
7FF571596000
|
unkown
|
page readonly
|
|
|
|
7FF5C4686000
|
unkown
|
page readonly
|
|
|
|
1C29AEE0000
|
heap default
|
page read and write
|
|
|
|
7FF5CC1EF000
|
unkown
|
page readonly
|
|
|
|
7FF5D934E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9364000
|
unkown
|
page readonly
|
|
|
|
1C29B480000
|
unkown
|
page readonly
|
|
|
|
7FF54FFE5000
|
unkown
|
page readonly
|
|
|
|
21BEC8D0000
|
unkown
|
page readonly
|
|
|
|
D75617F000
|
unkown
|
page read and write
|
|
|
|
25338970000
|
unkown
|
page readonly
|
|
|
|
25336E67000
|
unkown
|
page read and write
|
|
|
|
7FF525DCF000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
7FF525F50000
|
unkown
|
page readonly
|
|
|
|
24EE3DA0000
|
unkown
|
page read and write
|
|
|
|
9A4E1AB000
|
unkown
|
page read and write
|
|
|
|
7FF5CC3E6000
|
unkown
|
page readonly
|
|
|
|
7FF5CC36A000
|
unkown
|
page readonly
|
|
|
|
24EE3E4F000
|
unkown
|
page read and write
|
|
|
|
7FF54FBFA000
|
unkown
|
page readonly
|
|
|
|
24EE3B80000
|
unkown
|
page read and write
|
|
|
|
7FF5D8EDA000
|
unkown
|
page readonly
|
|
|
|
1EDB1A68000
|
unkown
|
page read and write
|
|
|
|
24EDE5C0000
|
heap private
|
page read and write
|
|
|
|
21BEC580000
|
unkown
|
page readonly
|
|
|
|
7FF5CC3EB000
|
unkown
|
page readonly
|
|
|
|
7FF54FF54000
|
unkown
|
page readonly
|
|
|
|
2D074260000
|
unkown
|
page write copy
|
|
|
|
28FAE44E000
|
unkown
|
page read and write
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
7FF5D918D000
|
unkown
|
page readonly
|
|
|
|
21BEC800000
|
unkown
|
page readonly
|
|
|
|
7FF55004E000
|
unkown
|
page readonly
|
|
|
|
1E35D040000
|
heap private
|
page read and write
|
|
|
|
9A4E5F5000
|
unkown
|
page read and write
|
|
|
|
25336F13000
|
unkown
|
page read and write
|
|
|
|
7FF5739F3000
|
unkown
|
page readonly
|
|
|
|
EE75E7D000
|
unkown
|
page read and write
|
|
|
|
7FF5D9298000
|
unkown
|
page readonly
|
|
|
|
28FAF140000
|
unkown
|
page readonly
|
|
|
|
24EE3D54000
|
unkown
|
page readonly
|
|
|
|
192136E000
|
unkown
|
page read and write
|
|
|
|
2D073AA0000
|
heap default
|
page read and write
|
|
|
|
7FF525EB5000
|
unkown
|
page readonly
|
|
|
|
7FF54FE38000
|
unkown
|
page readonly
|
|
|
|
7FF5CC1B2000
|
unkown
|
page readonly
|
|
|
|
7FF5CC41D000
|
unkown
|
page readonly
|
|
|
|
7FF525A49000
|
unkown
|
page readonly
|
|
|
|
7FF5D936B000
|
unkown
|
page readonly
|
|
|
|
7FF5715CF000
|
unkown
|
page readonly
|
|
|
|
24EE3D87000
|
unkown
|
page write copy
|
|
|
|
24EDF770000
|
unkown
|
page readonly
|
|
|
|
24EDE896000
|
unkown
|
page read and write
|
|
|
|
7FF55007D000
|
unkown
|
page readonly
|
|
|
|
25336E40000
|
unkown
|
page read and write
|
|
|
|
28FAE500000
|
unkown
|
page read and write
|
|
|
|
7FF5C4642000
|
unkown
|
page readonly
|
|
|
|
24EDE88D000
|
unkown
|
page read and write
|
|
|
|
24EE3EA8000
|
unkown
|
page read and write
|
|
|
|
7FF5D92AD000
|
unkown
|
page readonly
|
|
|
|
E5D997D000
|
unkown
|
page read and write
|
|
|
|
1EDB1A6C000
|
unkown
|
page read and write
|
|
|
|
7FF571513000
|
unkown
|
page readonly
|
|
|
|
1E35D0A0000
|
heap default
|
page read and write
|
|
|
|
24EDEDF3000
|
unkown
|
page read and write
|
|
|
|
8261BCF000
|
unkown
|
page read and write
|
|
|
|
7FF5711BA000
|
unkown
|
page readonly
|
|
|
|
7FF573E3B000
|
unkown
|
page readonly
|
|
|
|
AEF61FF000
|
unkown
|
page read and write
|
|
|
|
EE7607F000
|
unkown
|
page read and write
|
|
|
|
7FF5CBF85000
|
unkown
|
page readonly
|
|
|
|
24EE3D50000
|
unkown
|
page write copy
|
|
|
|
24EE3D50000
|
unkown
|
page read and write
|
|
|
|
7FF5CC317000
|
unkown
|
page readonly
|
|
|
|
1C29AED0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A7E000
|
unkown
|
page readonly
|
|
|
|
24EE3CC0000
|
unkown
|
page read and write
|
|
|
|
7FF573A1D000
|
unkown
|
page readonly
|
|
|
|
EE7587B000
|
unkown
|
page read and write
|
|
|
|
7FF5C4A5B000
|
unkown
|
page readonly
|
|
|
|
25336E13000
|
unkown
|
page read and write
|
|
|
|
7FF54FFAD000
|
unkown
|
page readonly
|
|
|
|
D75607E000
|
unkown
|
page read and write
|
|
|
|
D75687E000
|
unkown
|
page read and write
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
1E35D400000
|
unkown
|
page readonly
|
|
|
|
2D0742B0000
|
unkown
|
page readonly
|
|
|
|
D75657D000
|
unkown
|
page read and write
|
|
|
|
21BEC613000
|
unkown
|
page read and write
|
|
|
|
25336E69000
|
unkown
|
page read and write
|
|
|
|
24EE3EB4000
|
unkown
|
page read and write
|
|
|
|
7FF5D91F4000
|
unkown
|
page readonly
|
|
|
|
7FF5C41FD000
|
unkown
|
page readonly
|
|
|
|
7FF5C49BD000
|
unkown
|
page readonly
|
|
|
|
2D073C13000
|
unkown
|
page read and write
|
|
|
|
1E35D238000
|
unkown
|
page read and write
|
|
|
|
7FF550064000
|
unkown
|
page readonly
|
|
|
|
7FF59168B000
|
unkown
|
page readonly
|
|
|
|
28FAE3F0000
|
unkown
|
page readonly
|
|
|
|
2D073AB0000
|
unkown
|
page readonly
|
|
|
|
1EDB33F0000
|
unkown
|
page read and write
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
28FAE508000
|
unkown
|
page read and write
|
|
|
|
7FF525D93000
|
unkown
|
page readonly
|
|
|
|
24EDE879000
|
unkown
|
page read and write
|
|
|
|
7FF5D8E2F000
|
unkown
|
page readonly
|
|
|
|
1E35D1A0000
|
unkown
|
page read and write
|
|
|
|
7FF54FC00000
|
unkown
|
page readonly
|
|
|
|
7FF54FECF000
|
unkown
|
page readonly
|
|
|
|
7FF5C4A60000
|
unkown
|
page readonly
|
|
|
|
1C29B275000
|
heap private
|
page read and write
|
|
|
|
1E35D229000
|
unkown
|
page read and write
|
|
|
|
EE75D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5915AD000
|
unkown
|
page readonly
|
|
|
|
7FF525F3F000
|
unkown
|
page readonly
|
|
|
|
28FAE471000
|
unkown
|
page read and write
|
|
|
|
24EDF750000
|
unkown
|
page readonly
|
|
|
|
9A4E8FE000
|
unkown
|
page read and write
|
|
|
|
7FF573A22000
|
unkown
|
page readonly
|
|
|
|
7FF54FC2F000
|
unkown
|
page readonly
|
|
|
|
7FF573D79000
|
unkown
|
page readonly
|
|
|
|
7FF57151A000
|
unkown
|
page readonly
|
|
|
|
1E35D302000
|
unkown
|
page read and write
|
|
|
|
24EDE87B000
|
unkown
|
page read and write
|
|
|
|
7FF5D92C3000
|
unkown
|
page readonly
|
|
|
|
25336E71000
|
unkown
|
page read and write
|
|
|
|
21BEC656000
|
unkown
|
page read and write
|
|
|
|
7FF5CC29E000
|
unkown
|
page readonly
|
|
|
|
7FF5D9196000
|
unkown
|
page readonly
|
|
|
|
7FF573C4D000
|
unkown
|
page readonly
|
|
|
|
24EDE88F000
|
unkown
|
page read and write
|
|
|
|
7FF573D50000
|
unkown
|
page readonly
|
|
|
|
24EE3CB0000
|
unkown
|
page read and write
|
|
|
|
1E35D23D000
|
unkown
|
page read and write
|
|
|
|
7FF5D933F000
|
unkown
|
page readonly
|
|
|
|
24EE3DE0000
|
unkown
|
page read and write
|
|
|
|
24EDFAE0000
|
unkown
|
page read and write
|
|
|
|
7FF5CC363000
|
unkown
|
page readonly
|
|
|
|
25336E29000
|
unkown
|
page read and write
|
|
|
|
7FF571183000
|
unkown
|
page readonly
|
|
|
|
24EDF560000
|
unkown
|
page read and write
|
|
|
|
7FF573A0F000
|
unkown
|
page readonly
|
|
|
|
9A4E6FB000
|
unkown
|
page read and write
|
|
|
|
7FF573E24000
|
unkown
|
page readonly
|
|
There are 686 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://help.formassembly.com/help
|
|
|
|
http://www.tfaforms.com/responses/processor
|
|