IOCReport

loading gif

Files

File Path
Type
Category
Malicious
6c130000.da.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\T1DBPNW2\contextual.media[1].xml
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZY01RJK6\www.msn[1].xml
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2DEAA0CA-AD07-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2DEAA0CC-AD07-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AAyuliQ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1bjIri[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1cEP3G[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1fV7TT[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1giL6z[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gj6Xu[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkM5V[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkSmD[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkUDu[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkUFI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkZLA[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gl3Yj[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1glbdN[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBOLLMj[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBPfCZL[1].png
GIF image data, version 89a, 50 x 50
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBRUB0d[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBY7ARN[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBih5H[1].png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\a5ea21[1].ico
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[2].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[3].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\checksync[4].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_103a8843c2de79b0e3e5effff6b9a9b0[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_26b7c43e8735f7408c60e41fb7e91ecd[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nrrV27271[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\2d-0e97d4-185735b[1].css
UTF-8 Unicode text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\AA6wTdK[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB19K9zb[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1dCSOZ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1ftEY0[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkGOZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkSzr[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkVo6[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkXk3[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkZod[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl3CU[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl6Gj[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl8nk[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gldCZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB5kJAC[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB5kTiV[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hg4[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBVuddh[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBX2afX[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBnYSFZ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_SKP_1212754341__UAwpk84z[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iab2Data[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otFlat[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otPcCenter[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otSDKStub[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\otTCF-ie[1].js
UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AA7XCQ3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAuTnto[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB14hq0P[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cG73h[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gbJwB[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gjtRw[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkGJb[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkGPP[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkXm3[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl13k[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl258[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl3fv[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl3iX[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl8q9[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gldiI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB7gRE[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBUZVvV[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a8a064[1].gif
GIF image data, version 89a, 28 x 28
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\auction[1].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\e151e5[1].gif
GIF image data, version 89a, 1 x 1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fcmain[1].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\fcmain[2].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\https___images.cosmopolitan.de_covid19-coronavirus-vaccine-vials-in-a-row-macro-close-up-picture-id1253358164,id=ce04a4d1,b=cosmopolitan,w=1600,rm=sk[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-2.1.1.min[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\location[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\nrrV27271[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\1599143076228-3140[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 622x367, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\17-361657-68ddb2ab[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4996b9[1].woff
Web Open Font Format, TrueType, length 45633, version 1.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\52-478955-68ddb2ab[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AA8uJZv[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAzjSw3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB10MkbM[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB14EN7h[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB15AQNm[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gj4Xc[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gjf9R[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkUfy[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkVaQ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl8nk[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl8uZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB6Ma4a[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBK9Ri5[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\a087b85d-b587-4286-b0ee-078d1c9a0535[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\aadcdc47-f267-4b70-bc4e-4fdd88f9ef0d[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cfdbd9[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\http___cdn.taboola.com_libtrc_static_thumbnails_25d3a15e34bf9f4ad528fc533b81d965[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_SKP_1211840846__1v9WbJ7j[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\medianet[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\medianet[2].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otBannerSdk[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Temp\~DF5A00574734567E6B.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFF6A344C3262D0B35.TMP
data
dropped
clean
There are 113 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe /s C:\Users\user\Desktop\6c130000.da.dll
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\6c130000.da.dll',#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\6c130000.da.dll,DllRegisterServer
malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\6c130000.da.dll'
clean
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\6c130000.da.dll',#1
clean
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6024 CREDAT:17410 /prefetch:2
clean

URLs

Name
IP
Malicious
http://searchads.msn.net/.cfm?&&kp=1&
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172
unknown
clean
https://www.msn.com/de-ch/nachrichten/coronareisen
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/d%c3%bcrfen-k%c3%bcnftig-staaten-wie-china-aktion%
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
unknown
clean
https://onedrive.live.com;Fotos
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
unknown
clean
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
unknown
clean
http://ogp.me/ns/fb#
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
unknown
clean
https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
unknown
clean
https://outlook.live.com/mail/deeplink/compose;Kalender
unknown
clean
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
unknown
clean
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
unknown
clean
https://www.msn.com/de-ch/news/other/arbeiter-und-polizei-%c3%bcberw%c3%a4ltigen-mutmasslichen-t%c3%
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/das-bezirksgericht-meilen-spricht-it-manager-wegen
unknown
clean
http://www.reddit.com/
unknown
clean
https://www.skype.com/
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
unknown
clean
https://www.msn.com/de-ch/nachrichten/regional
unknown
clean
https://www.msn.com/de-ch/news/other/hotelsterben-f%c3%bchrt-zu-mehr-wohnungen/ar-BB1gkhzO?ocid=hplo
unknown
clean
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
unknown
clean
https://amzn.to/2TTxhNg
unknown
clean
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
unknown
clean
https://client-s.gateway.messenger.live.com
unknown
clean
https://www.msn.com/de-ch/
unknown
clean
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
unknown
clean
https://www.msn.com/de-ch
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
unknown
clean
https://twitter.com/i/notifications;Ich
unknown
clean
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
unknown
clean
https://www.msn.com/de-ch/news/other/journalistenverb%c3%a4nde-kritisieren-z%c3%bcrcher-stadtpolizei
unknown
clean
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
unknown
clean
http://www.youtube.com/
unknown
clean
http://ogp.me/ns#
unknown
clean
https://onedrive.live.com/?qt=mru;OneDrive-App
unknown
clean
https://www.skype.com/de
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
unknown
clean
https://www.skype.com/de/download-skype
unknown
clean
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
unknown
clean
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
unknown
clean
https://onedrive.live.com;OneDrive-App
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
unknown
clean
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
unknown
clean
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
unknown
clean
http://www.amazon.com/
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
unknown
clean
http://www.twitter.com/
unknown
clean
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
unknown
clean
https://policies.oath.com/us/en/oath/privacy/index.html
unknown
clean
https://srtb.msn.com:443/notify/viewedg?rid=51c06d00fd2048a8878c391d19f1445c&r=infopane&i=2&
unknown
clean
https://beap.gemini.yahoo.com/mbclk?bv=1.0.0&es=fdYjLk4GIS8f2e8W6J7ZqiMZCuxthlalMk3fwTzhMVUTU..i
unknown
clean
https://cdn.cookielaw.org/vendorlist/googleData.json
unknown
clean
https://outlook.com/
unknown
clean
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
unknown
clean
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
unknown
clean
https://cdn.cookielaw.org/vendorlist/iabData.json
unknown
clean
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
unknown
clean
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us?"
unknown
clean
https://cdn.cookielaw.org/vendorlist/iab2Data.json
unknown
clean
https://onedrive.live.com/?qt=mru;Aktuelle
unknown
clean
https://cdn.flurry.com/adTemplates/templates/htmls/clips.html"
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
unknown
clean
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
unknown
clean
https://www.msn.com/de-ch/news/other/gericht-sagt-es-war-mord-ehemann-im-meilemer-prozess-verurteilt
unknown
clean
https://www.msn.com/de-ch/homepage/api/modules/fetch"
unknown
clean
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
unknown
clean
https://ir2.beap.gemini.yahoo.com/mbcsc?bv=1.0.0&es=MtP.V9cGIS8iuFYswPfzpiUJHlPgk_JooB0VdyDzswfn
unknown
clean
http://www.nytimes.com/
unknown
clean
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
unknown
clean
https://www.stroeer.de/konvergenz-konzepte/daten-technologien/stroeer-ssp/datenschutz-ssp.html
unknown
clean
https://www.bidstack.com/privacy-policy/
unknown
clean
https://onedrive.live.com/about/en/download/
unknown
clean
http://popup.taboola.com/german
unknown
clean
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
unknown
clean
https://twitter.com/
unknown
clean
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
unknown
clean
https://www.msn.com/de-ch/news/other/eth-z%c3%bcrich-und-paul-scherrer-institut-entwickeln-quantenco
unknown
clean
https://outlook.live.com/calendar
unknown
clean
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
unknown
clean
https://www.msn.com/de-ch/news/other/polizei-verhaftet-12-personen-aus-der-z%c3%bcrcher-raser-szene/
unknown
clean
https://onedrive.live.com/#qt=mru
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/mit-benno-scherrer-erklimmt-erstmals-ein-gr%c3%bcn
unknown
clean
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
unknown
clean
https://www.msn.com?form=MY01O4&OCID=MY01O4
unknown
clean
https://support.skype.com
unknown
clean
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
unknown
clean
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/aus-theater-wird-ernst-weil-christian-jott-jenny-a
unknown
clean
http://www.wikipedia.com/
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&http
unknown
clean
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_shop_de&utm
unknown
clean
http://www.live.com/
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
contextual.media.net
184.30.24.22
clean
tls13.taboola.map.fastly.net
151.101.1.44
clean
hblg.media.net
184.30.24.22
clean
lg3.media.net
184.30.24.22
clean
geolocation.onetrust.com
104.20.184.68
clean
edge.gycpi.b.yahoodns.net
87.248.118.23
clean
s.yimg.com
unknown
clean
web.vortex.data.msn.com
unknown
clean
www.msn.com
unknown
clean
srtb.msn.com
unknown
clean
img.img-taboola.com
unknown
clean
cvision.media.net
unknown
clean
There are 2 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
104.20.184.68
geolocation.onetrust.com
United States
clean
87.248.118.23
edge.gycpi.b.yahoodns.net
United Kingdom
clean
151.101.1.44
tls13.taboola.map.fastly.net
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{2DEAA0CA-AD07-11EB-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
AdminActive
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
NextUpdateDate
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
There are 80 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF593E2C000
unkown
page readonly
clean
7FF5E989F000
unkown
page readonly
clean
12309E00000
unkown
page readonly
clean
22B331E0000
unkown
page readonly
clean
22B33202000
unkown
page read and write
clean
7FF544ABE000
unkown
page readonly
clean
7FF4F68A2000
unkown
page readonly
clean
7FF59F8B5000
unkown
page readonly
clean
7FF593BDA000
unkown
page readonly
clean
1C2D6A47000
unkown
page read and write
clean
9556FFE000
unkown
page read and write
clean
1B7DC2FE000
unkown
page read and write
clean
7FF5E972A000
unkown
page readonly
clean
7FF56DBEB000
unkown
page readonly
clean
7FF519360000
unkown
page readonly
clean
1A29CC00000
unkown
page read and write
clean
7FF5B117A000
unkown
page readonly
clean
1A2A21D0000
unkown
page read and write
clean
C70000
heap private
page read and write
clean
2E91000
unkown
page readonly
clean
7FF56DCA6000
unkown
page readonly
clean
2003C0FB000
heap default
page read and write
clean
23892C30000
heap private
page read and write
clean
2E9B000
unkown
page readonly
clean
DC000
unkown
page read and write
clean
7FF56DC96000
unkown
page readonly
clean
7FF4F698E000
unkown
page readonly
clean
1A29D500000
unkown
page read and write
clean
7FF544B89000
unkown
page readonly
clean
4EBF000
unkown
page read and write
clean
7FF4F68BA000
unkown
page readonly
clean
7FF576A62000
unkown
page readonly
clean
2EC0000
unkown
page readonly
clean
7FF55136D000
unkown
page readonly
clean
7FF595246000
unkown
page readonly
clean
7FF4F6916000
unkown
page readonly
clean
A15B1AE000
unkown
page read and write
clean
1A29CE00000
unkown
page readonly
clean
7FF59F8E6000
unkown
page readonly
clean
1C2D6A40000
unkown
page read and write
clean
1B2F964C000
unkown
page read and write
clean
7FF50801A000
unkown
page readonly
clean
1971A750000
unkown
page write copy
clean
82E497B000
unkown
page read and write
clean
DEF000
unkown
page read and write
clean
19BD0E6A000
unkown
page read and write
clean
7FF557EA4000
unkown
page readonly
clean
1A2A2495000
unkown
page read and write
clean
1A2A243F000
unkown
page read and write
clean
2B94000
unkown
page readonly
clean
1A2A22C7000
unkown
page readonly
clean
82E4B7B000
unkown
page read and write
clean
BC0000
unkown
page readonly
clean
4E0000
heap default
page read and write
clean
1B7DF410000
unkown
page read and write
clean
2BD80210000
unkown
page readonly
clean
2BD7F3B0000
heap private
page read and write
clean
7FF5E98DC000
unkown
page readonly
clean
98A6BFC000
unkown
page read and write
clean
7FF593E45000
unkown
page readonly
clean
7FF5939AA000
unkown
page readonly
clean
2003DBD0000
heap private
page read and write
clean
1C2D6980000
unkown
page readonly
clean
7FF59F827000
unkown
page readonly
clean
1B7DE700000
unkown
page read and write
clean
2E82000
unkown
page readonly
clean
1C2D6A7D000
unkown
page read and write
clean
22B33160000
heap private
page read and write
clean
25DDA03E000
unkown
page read and write
clean
7FF5581E7000
unkown
page readonly
clean
7FF5CAE4B000
unkown
page readonly
clean
12309BA0000
unkown
page readonly
clean
3690000
heap private
page read and write
clean
9BB867F000
unkown
page read and write
clean
7FF5041FD000
unkown
page readonly
clean
7FF595219000
unkown
page readonly
clean
7FF5B1A7C000
unkown
page readonly
clean
1A2A2300000
unkown
page read and write
clean
25DDA04E000
unkown
page read and write
clean
1C2D6A41000
unkown
page read and write
clean
2E8D000
unkown
page readonly
clean
1B7DC200000
unkown
page read and write
clean
1A2A2330000
unkown
page read and write
clean
50ECB79000
unkown
page read and write
clean
1C2D6A62000
unkown
page read and write
clean
7FF5581B6000
unkown
page readonly
clean
25DD9E60000
heap private
page read and write
clean
2EB7000
unkown
page readonly
clean
2B1F0402000
unkown
page read and write
clean
1C80A510000
unkown
page readonly
clean
7FF593E57000
unkown
page readonly
clean
7FF5CAD20000
unkown
page readonly
clean
2003DEE0000
heap private
page read and write
clean
EB7EE7A000
unkown
page read and write
clean
7FF59F96E000
unkown
page readonly
clean
2BD7FFE0000
unkown
page readonly
clean
7FF523D3D000
unkown
page readonly
clean
12309C00000
unkown
page read and write
clean
7FF507DFE000
unkown
page readonly
clean
7FF5193EC000
unkown
page readonly
clean
7FF55815A000
unkown
page readonly
clean
1B7DE374000
unkown
page read and write
clean
1A2A2650000
unkown
page readonly
clean
1B7DE453000
unkown
page read and write
clean
7FF594276000
unkown
page readonly
clean
23D86413000
unkown
page read and write
clean
98A74FE000
unkown
page read and write
clean
7FF507E10000
unkown
page readonly
clean
2003E180000
heap private
page read and write
clean
2E6F000
unkown
page readonly
clean
3B3ABFF000
unkown
page read and write
clean
7FF504216000
unkown
page readonly
clean
7FF508040000
unkown
page readonly
clean
2B86000
unkown
page readonly
clean
7FF59523C000
unkown
page readonly
clean
A15B47E000
unkown
page read and write
clean
7FF507C83000
unkown
page readonly
clean
19BD0D60000
unkown
page readonly
clean
7FF5CB211000
unkown
page readonly
clean
1A29D518000
unkown
page read and write
clean
1971A829000
unkown
page read and write
clean
7FF4F6700000
unkown
page readonly
clean
7FF5512F8000
unkown
page readonly
clean
7FF544850000
unkown
page readonly
clean
1A2A2330000
unkown
page read and write
clean
2B90000
unkown
page readonly
clean
7FF5B188F000
unkown
page readonly
clean
19BD0E68000
unkown
page read and write
clean
7FF5B1AFE000
unkown
page readonly
clean
22B33270000
unkown
page read and write
clean
82E44FF000
unkown
page read and write
clean
7FF503F4E000
unkown
page readonly
clean
7FF508141000
unkown
page readonly
clean
7FF59524C000
unkown
page readonly
clean
25DDA118000
unkown
page read and write
clean
2003C0B0000
unkown
page readonly
clean
1A29CC13000
unkown
page read and write
clean
7FF5CB1B7000
unkown
page readonly
clean
79A3EFB000
unkown
page read and write
clean
7FF557EB3000
unkown
page readonly
clean
25DD9FA0000
unkown
page readonly
clean
25DDBFD0000
unkown
page readonly
clean
1A2A2400000
unkown
page read and write
clean
50ECA7F000
unkown
page read and write
clean
2B1EFBB0000
unkown
page read and write
clean
7FF519461000
unkown
page readonly
clean
7FF56DC03000
unkown
page readonly
clean
2D8D000
unkown
page readonly
clean
7FF504177000
unkown
page readonly
clean
2E5E000
unkown
page readonly
clean
2EB2000
unkown
page readonly
clean
23D862B0000
unkown
page readonly
clean
144BDAA0000
heap private
page read and write
clean
7FF550FF1000
unkown
page readonly
clean
320A000
unkown
page read and write
clean
7FF577072000
unkown
page readonly
clean
7FF593DC8000
unkown
page readonly
clean
7FF4F684A000
unkown
page readonly
clean
7FF5CB1B4000
unkown
page readonly
clean
7FF50414A000
unkown
page readonly
clean
7FF5E988E000
unkown
page readonly
clean
7FF557EB7000
unkown
page readonly
clean
7FF5080E4000
unkown
page readonly
clean
6C130000
unkown image
page readonly
clean
7FF59F914000
unkown
page readonly
clean
7FF5080E0000
unkown
page readonly
clean
1C80A613000
unkown
page read and write
clean
1A2A242D000
unkown
page read and write
clean
6C130000
unkown image
page readonly
clean
2003DFDF000
heap private
page read and write
clean
1B2F9702000
unkown
page read and write
clean
7FF524599000
unkown
page readonly
clean
2B1EFBE0000
unkown
page readonly
clean
1AEA177000
unkown
page read and write
clean
2B1F0260000
unkown
page write copy
clean
1B7DC35C000
unkown
page read and write
clean
1AE9EFB000
unkown
page read and write
clean
1B2F964F000
unkown
page read and write
clean
7FF56D936000
unkown
page readonly
clean
7FF5B1A8C000
unkown
page readonly
clean
1C80A708000
unkown
page read and write
clean
7FF55130D000
unkown
page readonly
clean
1FB14200000
unkown
page readonly
clean
25DDB9F0000
unkown
page read and write
clean
7FF51939E000
unkown
page readonly
clean
1C80A63C000
unkown
page read and write
clean
7FF508058000
unkown
page readonly
clean
7FF5242EA000
unkown
page readonly
clean
7FF593CA8000
unkown
page readonly
clean
7FF5E9959000
unkown
page readonly
clean
7FF593DF5000
unkown
page readonly
clean
9BB8A7C000
unkown
page read and write
clean
1A2A21F0000
unkown
page read and write
clean
D18BD3C000
unkown
page read and write
clean
1C2D6A69000
unkown
page read and write
clean
2BD7F63F000
unkown
page read and write
clean
1230A260000
unkown
page read and write
clean
1FB1402A000
unkown
page read and write
clean
7FF56DACE000
unkown
page readonly
clean
1B7DE31B000
unkown
page read and write
clean
2BD7F580000
unkown
page read and write
clean
7FF56D93C000
unkown
page readonly
clean
22B33860000
unkown
page readonly
clean
82E4F7B000
unkown
page read and write
clean
1C2D6A64000
unkown
page read and write
clean
7FF577031000
unkown
page readonly
clean
144BDD00000
unkown
page read and write
clean
2E5E000
unkown
page readonly
clean
7FF55137C000
unkown
page readonly
clean
955717F000
unkown
page read and write
clean
98A6A7B000
unkown
page read and write
clean
7FF56DD29000
unkown
page readonly
clean
144BDC63000
unkown
page read and write
clean
1B7DC31B000
unkown
page read and write
clean
7FF55133E000
unkown
page readonly
clean
1B7DE0B0000
unkown
page readonly
clean
7FF59426D000
unkown
page readonly
clean
7FF551300000
unkown
page readonly
clean
7FF557F05000
unkown
page readonly
clean
1FB14013000
unkown
page read and write
clean
1FB1407C000
unkown
page read and write
clean
2EE5000
unkown
page readonly
clean
7FF5CAD10000
unkown
page readonly
clean
7FF593DFF000
unkown
page readonly
clean
25DD9EC0000
heap default
page read and write
clean
31E0000
unkown
page readonly
clean
7FF558101000
unkown
page readonly
clean
7FF504190000
unkown
page readonly
clean
7FF551318000
unkown
page readonly
clean
7FF551316000
unkown
page readonly
clean
7FF544AED000
unkown
page readonly
clean
7FF504105000
unkown
page readonly
clean
7FF56DD20000
unkown
page readonly
clean
7FF59F5D4000
unkown
page readonly
clean
A15B5FE000
unkown
page read and write
clean
1A29CC9A000
unkown
page read and write
clean
7FF5E976D000
unkown
page readonly
clean
7FF544397000
unkown
page readonly
clean
7FF59F882000
unkown
page readonly
clean
1B7DF510000
unkown
page read and write
clean
D60000
unkown
page readonly
clean
7FF544B7E000
unkown
page readonly
clean
7FF5B1A59000
unkown
page readonly
clean
1A29CBA0000
unkown
page read and write
clean
7FF5CB057000
unkown
page readonly
clean
1B7DF510000
unkown
page read and write
clean
7FF551386000
unkown
page readonly
clean
6C130000
unkown image
page readonly
clean
1B7DE020000
heap private
page read and write
clean
2C36000
unkown
page readonly
clean
D5D497C000
unkown
page read and write
clean
6C133000
unkown image
page readonly
clean
7FF59F886000
unkown
page readonly
clean
1A29CC9C000
unkown
page read and write
clean
7FF56DAAF000
unkown
page readonly
clean
31F0000
unkown
page read and write
clean
1C80A64F000
unkown
page read and write
clean
7FF56DADC000
unkown
page readonly
clean
1A2A22C4000
unkown
page readonly
clean
23D86502000
unkown
page read and write
clean
82E507C000
unkown
page read and write
clean
1B7DE642000
unkown
page read and write
clean
2E68000
unkown
page readonly
clean
7FF593EB9000
unkown
page readonly
clean
2F4B000
unkown
page readonly
clean
82E50FF000
unkown
page read and write
clean
12309C57000
unkown
page read and write
clean
7FF5942A7000
unkown
page readonly
clean
7E97FFF000
unkown
page read and write
clean
1B7DF010000
unkown
page read and write
clean
1B7DDBA0000
unkown
page read and write
clean
9BB877E000
unkown
page read and write
clean
7FF5581C6000
unkown
page readonly
clean
7FF5080E7000
unkown
page readonly
clean
7FF594070000
unkown
page readonly
clean
7FF524203000
unkown
page readonly
clean
7FF551312000
unkown
page readonly
clean
7FF5952BE000
unkown
page readonly
clean
7FF59F8C9000
unkown
page readonly
clean
7FF56DC79000
unkown
page readonly
clean
3180000
unkown
page readonly
clean
4E7E000
unkown
page read and write
clean
1FB14102000
unkown
page read and write
clean
19BD0E6A000
unkown
page read and write
clean
82E48FA000
unkown
page read and write
clean
7E97AAB000
unkown
page read and write
clean
23892F02000
unkown
page read and write
clean
2EFA000
unkown
page readonly
clean
7FF55818F000
unkown
page readonly
clean
22B33400000
unkown
page readonly
clean
1A29E020000
unkown
page read and write
clean
3A50AFF000
unkown
page read and write
clean
2C58000
unkown
page readonly
clean
1B2F9602000
unkown
page read and write
clean
7FF5080CC000
unkown
page readonly
clean
7FF5E9450000
unkown
page readonly
clean
3B3A875000
unkown
page read and write
clean
19BD0E34000
unkown
page read and write
clean
25DDA05D000
unkown
page read and write
clean
7FF5939C0000
unkown
page readonly
clean
1C80A600000
unkown
page read and write
clean
1C2D6A54000
unkown
page read and write
clean
1B7DE080000
unkown
page read and write
clean
7FF50416C000
unkown
page readonly
clean
7FF593E54000
unkown
page readonly
clean
7FF55122C000
unkown
page readonly
clean
380000
unkown
page read and write
clean
82E4D7B000
unkown
page read and write
clean
7FF5E98D6000
unkown
page readonly
clean
2003C2E0000
unkown
page readonly
clean
1B7DE388000
unkown
page read and write
clean
7FF544B81000
unkown
page readonly
clean
2003C070000
unkown
page readonly
clean
50ECC7E000
unkown
page read and write
clean
7FF558053000
unkown
page readonly
clean
412C7E000
unkown
page read and write
clean
9BB80EC000
unkown
page read and write
clean
7FF5E98F7000
unkown
page readonly
clean
7FF4F661C000
unkown
page readonly
clean
2B1F0500000
unkown
page read and write
clean
7FF56DC91000
unkown
page readonly
clean
22B3326C000
unkown
page read and write
clean
7FF503FEA000
unkown
page readonly
clean
7FF59F971000
unkown
page readonly
clean
22B33259000
unkown
page read and write
clean
25DDA069000
unkown
page read and write
clean
7FF5E9797000
unkown
page readonly
clean
1971C270000
unkown
page read and write
clean
6CB887A000
unkown
page read and write
clean
7FF59F6E0000
unkown
page readonly
clean
7FF593EB1000
unkown
page readonly
clean
23892E00000
unkown
page read and write
clean
3A5087F000
unkown
page read and write
clean
23892E55000
unkown
page read and write
clean
2BD7F713000
unkown
page read and write
clean
1A2A2630000
unkown
page readonly
clean
7FF52446A000
unkown
page readonly
clean
7FF4F67A3000
unkown
page readonly
clean
7FF5770C1000
unkown
page readonly
clean
7FF5951D8000
unkown
page readonly
clean
7FF594245000
unkown
page readonly
clean
C80000
heap default
page read and write
clean
2B7A000
unkown
page readonly
clean
7FF504147000
unkown
page readonly
clean
1A2A21DE000
unkown
page read and write
clean
1971A902000
unkown
page read and write
clean
2B1EFC88000
unkown
page read and write
clean
7FF5B1AA2000
unkown
page readonly
clean
1FB14089000
unkown
page read and write
clean
1971A800000
unkown
page read and write
clean
1C2D6A6A000
unkown
page read and write
clean
7FF50421C000
unkown
page readonly
clean
1A2A2380000
unkown
page readonly
clean
7FF5513A4000
unkown
page readonly
clean
2BD7F5F0000
unkown
page readonly
clean
1230A190000
unkown
page readonly
clean
7FF524506000
unkown
page readonly
clean
7FF550F72000
unkown
page readonly
clean
1C2D6A44000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
7FF519034000
unkown
page readonly
clean
7FF577046000
unkown
page readonly
clean
7FF551409000
unkown
page readonly
clean
2BD7FFD0000
unkown
page read and write
clean
7FF5E9895000
unkown
page readonly
clean
7FF503FFE000
unkown
page readonly
clean
7FF5244CE000
unkown
page readonly
clean
2BD7FB90000
unkown
page read and write
clean
7FF595264000
unkown
page readonly
clean
7FF55116E000
unkown
page readonly
clean
7FF59F89A000
unkown
page readonly
clean
7FF5CB110000
unkown
page readonly
clean
1B2FA340000
unkown
page readonly
clean
7FF5CB128000
unkown
page readonly
clean
412EFE000
unkown
page read and write
clean
1FB1406D000
unkown
page read and write
clean
7FF524537000
unkown
page readonly
clean
1B7DE400000
unkown
page read and write
clean
7FF5CB19C000
unkown
page readonly
clean
7FF507D18000
unkown
page readonly
clean
1A2A2498000
unkown
page read and write
clean
2003C670000
unkown
page readonly
clean
7FF55816A000
unkown
page readonly
clean
1FB13FF0000
unkown
page readonly
clean
97D000
unkown
page read and write
clean
50EC7CE000
unkown
page read and write
clean
1A2A2320000
unkown
page read and write
clean
7FF5B176D000
unkown
page readonly
clean
D5D4C7F000
unkown
page read and write
clean
1C80A671000
unkown
page read and write
clean
23D86468000
unkown
page read and write
clean
2D05000
unkown
page readonly
clean
7FF56D8A0000
unkown
page readonly
clean
7E97E7A000
unkown
page read and write
clean
1FB14602000
unkown
page read and write
clean
3A508FF000
unkown
page read and write
clean
7FF59F8F6000
unkown
page readonly
clean
7FF558185000
unkown
page readonly
clean
6C131000
unkown image
page execute read
clean
22B331F0000
unkown
page read and write
clean
19BD0C30000
heap default
page read and write
clean
1C2D6A83000
unkown
page read and write
clean
19BD0E29000
unkown
page read and write
clean
19BD0E6E000
unkown
page read and write
clean
3A507FB000
unkown
page read and write
clean
7A0000
heap private
page read and write
clean
2A7D000
unkown
page readonly
clean
1FB1402F000
unkown
page read and write
clean
7FF4F67A7000
unkown
page readonly
clean
7FF551395000
unkown
page readonly
clean
144BDC02000
unkown
page read and write
clean
7FF57703C000
unkown
page readonly
clean
7FF5951D6000
unkown
page readonly
clean
7FF503DCD000
unkown
page readonly
clean
1B7DF110000
unkown
page read and write
clean
23D86457000
unkown
page read and write
clean
2BD7F6A4000
unkown
page read and write
clean
7FF4F64CD000
unkown
page readonly
clean
7FF504230000
unkown
page readonly
clean
A15B7FE000
unkown
page read and write
clean
7FF577019000
unkown
page readonly
clean
1B2F9713000
unkown
page read and write
clean
2E8D000
unkown
page readonly
clean
7FF56DB9C000
unkown
page readonly
clean
7FF524516000
unkown
page readonly
clean
379EA7B000
unkown
page read and write
clean
7FF59522D000
unkown
page readonly
clean
1B7DE3E2000
unkown
page read and write
clean
7FF544B17000
unkown
page readonly
clean
7FF4F6937000
unkown
page readonly
clean
EB7EC79000
unkown
page read and write
clean
7FF59F831000
unkown
page readonly
clean
7FF519378000
unkown
page readonly
clean
19BD28A0000
unkown
page readonly
clean
48E0000
heap private
page read and write
clean
82E4FFC000
unkown
page read and write
clean
144BDC28000
unkown
page read and write
clean
1B7DE543000
unkown
page read and write
clean
1B7DE379000
unkown
page read and write
clean
1971AA00000
unkown
page readonly
clean
7FF56DC9C000
unkown
page readonly
clean
1B2F966D000
unkown
page read and write
clean
25DD9FB0000
unkown
page readonly
clean
7FF4F6925000
unkown
page readonly
clean
12309C3D000
unkown
page read and write
clean
19BD0E3F000
unkown
page read and write
clean
1B7DC32B000
unkown
page read and write
clean
2BB0000
unkown
page readonly
clean
7FF55817E000
unkown
page readonly
clean
B90000
unkown
page read and write
clean
7FF544B06000
unkown
page readonly
clean
7FF508085000
unkown
page readonly
clean
2003C290000
unkown
page readonly
clean
1A2A22A0000
unkown
page read and write
clean
25DDA102000
unkown
page read and write
clean
1C80A64C000
unkown
page read and write
clean
7FF5CAA29000
unkown
page readonly
clean
D9B000
heap default
page read and write
clean
7FF5447E4000
unkown
page readonly
clean
7FF59F907000
unkown
page readonly
clean
7FF56D863000
unkown
page readonly
clean
1B2F9C80000
unkown
page read and write
clean
23D86468000
unkown
page read and write
clean
1A29D415000
unkown
page read and write
clean
3550000
heap default
page read and write
clean
7FF5581CC000
unkown
page readonly
clean
2B1EFC6D000
unkown
page read and write
clean
7FF4F680C000
unkown
page readonly
clean
1A2A2330000
unkown
page read and write
clean
1A29CC56000
unkown
page read and write
clean
7FF593E09000
unkown
page readonly
clean
7FF5B1645000
unkown
page readonly
clean
C50000
unkown
page readonly
clean
7FF56DC32000
unkown
page readonly
clean
7FF558057000
unkown
page readonly
clean
22B33313000
unkown
page read and write
clean
6CB84FB000
unkown
page read and write
clean
1B7DC0B0000
heap default
page read and write
clean
7FF5041D5000
unkown
page readonly
clean
2BD7FFD0000
unkown
page read and write
clean
23D86402000
unkown
page read and write
clean
2B1EFC84000
unkown
page read and write
clean
1A2A241C000
unkown
page read and write
clean
7FF59F88A000
unkown
page readonly
clean
7FF504227000
unkown
page readonly
clean
6C130000
unkown image
page readonly
clean
7FF576F6E000
unkown
page readonly
clean
1B7DE702000
unkown
page read and write
clean
7FF519020000
unkown
page readonly
clean
98A72FE000
unkown
page read and write
clean
7FF524260000
unkown
page readonly
clean
1B7DC2C9000
unkown
page read and write
clean
7FF5942A4000
unkown
page readonly
clean
1FB14000000
unkown
page read and write
clean
7FF594271000
unkown
page readonly
clean
2B1EFCC2000
unkown
page read and write
clean
2B1EFBA0000
unkown
page readonly
clean
1C80ACB0000
unkown
page readonly
clean
7FF544B24000
unkown
page readonly
clean
7FF593E50000
unkown
page readonly
clean
7FF5B1AA7000
unkown
page readonly
clean
19BD0D10000
unkown
page write copy
clean
7FF5951FE000
unkown
page readonly
clean
2EE0000
unkown
page readonly
clean
29F5000
unkown
page readonly
clean
82E447B000
unkown
page read and write
clean
7FF5512EC000
unkown
page readonly
clean
1B7DE080000
unkown
page read and write
clean
2B1EFB90000
unkown
page readonly
clean
7FF5193CD000
unkown
page readonly
clean
7FF5041CE000
unkown
page readonly
clean
1971A7A0000
unkown
page readonly
clean
144BE190000
unkown
page readonly
clean
22B33A02000
unkown
page read and write
clean
7FF59492D000
unkown
page readonly
clean
1FB1404F000
unkown
page read and write
clean
7FF577064000
unkown
page readonly
clean
7FF5B17C5000
unkown
page readonly
clean
2BD7F800000
unkown
page readonly
clean
3A506FE000
unkown
page read and write
clean
D70000
heap default
page read and write
clean
7FF4F6805000
unkown
page readonly
clean
7FF5939B0000
unkown
page readonly
clean
7FF5B18CA000
unkown
page readonly
clean
7FF5513A0000
unkown
page readonly
clean
7FF59F768000
unkown
page readonly
clean
1C2D6A73000
unkown
page read and write
clean
2EC2000
unkown
page readonly
clean
3A30000
unkown
page readonly
clean
7FF577005000
unkown
page readonly
clean
7FF5580F7000
unkown
page readonly
clean
23D86513000
unkown
page read and write
clean
2BD80100000
unkown
page read and write
clean
D5D4F7D000
unkown
page read and write
clean
7FF52451C000
unkown
page readonly
clean
1FB13F10000
unkown
page readonly
clean
1A2A24B4000
unkown
page read and write
clean
7FF5041E9000
unkown
page readonly
clean
9BB8C7C000
unkown
page read and write
clean
1A2A24B0000
unkown
page read and write
clean
7FF5CB126000
unkown
page readonly
clean
2B96000
unkown
page readonly
clean
7FF55127C000
unkown
page readonly
clean
2E96000
unkown
page readonly
clean
7FF4F66D8000
unkown
page readonly
clean
2BD80189000
unkown
page read and write
clean
9BB8B7E000
unkown
page read and write
clean
7FF5936C9000
unkown
page readonly
clean
412D7E000
unkown
page read and write
clean
22B33200000
unkown
page read and write
clean
1C2D6A78000
unkown
page read and write
clean
D5D527E000
unkown
page read and write
clean
1C80A4A0000
heap private
page read and write
clean
144BDC13000
unkown
page read and write
clean
7FF5E98F4000
unkown
page readonly
clean
1FB1405C000
unkown
page read and write
clean
1B7DE484000
unkown
page read and write
clean
7FF593EAE000
unkown
page readonly
clean
82E4E7B000
unkown
page read and write
clean
82E4679000
unkown
page read and write
clean
98A6EFF000
unkown
page read and write
clean
1330000
heap private
page read and write
clean
1C80A500000
heap default
page read and write
clean
1B2F9530000
unkown
page readonly
clean
7FF4F68D5000
unkown
page readonly
clean
2B1EFD02000
unkown
page read and write
clean
1B7DC050000
heap private
page read and write
clean
7FF5244A2000
unkown
page readonly
clean
1A2A21D0000
unkown
page read and write
clean
7FF5B16AD000
unkown
page readonly
clean
379EB7B000
unkown
page read and write
clean
9BB897C000
unkown
page read and write
clean
7E97F7E000
unkown
page read and write
clean
7FF55138C000
unkown
page readonly
clean
25DDA04A000
unkown
page read and write
clean
7FF59F84A000
unkown
page readonly
clean
7FF558156000
unkown
page readonly
clean
7FF50413A000
unkown
page readonly
clean
1C2D6A7C000
unkown
page read and write
clean
7FF557FB0000
unkown
page readonly
clean
23D86500000
unkown
page read and write
clean
7FF56D3B7000
unkown
page readonly
clean
22B33266000
unkown
page read and write
clean
6C131000
unkown image
page execute read
clean
7FF544A9A000
unkown
page readonly
clean
7FF5040A3000
unkown
page readonly
clean
2003C0CB000
heap default
page read and write
clean
2BD80102000
unkown
page read and write
clean
1C2D6A4E000
unkown
page read and write
clean
7FF593DEE000
unkown
page readonly
clean
7FF5E994E000
unkown
page readonly
clean
82E477F000
unkown
page read and write
clean
1971A83F000
unkown
page read and write
clean
7FF5B1A18000
unkown
page readonly
clean
1B2F9C70000
unkown
page readonly
clean
7FF56DA5C000
unkown
page readonly
clean
22B334D0000
unkown
page readonly
clean
2BE5000
unkown
page readonly
clean
7FF5041A6000
unkown
page readonly
clean
1A29D3F0000
unkown
page readonly
clean
7FF56DC22000
unkown
page readonly
clean
1FB14100000
unkown
page read and write
clean
412BFE000
unkown
page read and write
clean
1B7DE080000
unkown
page read and write
clean
144BDB00000
heap default
page read and write
clean
2BD80002000
unkown
page read and write
clean
2B7D000
unkown
page readonly
clean
7FF56DCC4000
unkown
page readonly
clean
AC0000
unkown
page readonly
clean
7FF5241F4000
unkown
page readonly
clean
6CB897F000
unkown
page read and write
clean
2EA6000
unkown
page readonly
clean
6C131000
unkown image
page execute read
clean
7FF503F03000
unkown
page readonly
clean
1FB1408D000
unkown
page read and write
clean
7FF550A82000
unkown
page readonly
clean
144BDC00000
unkown
page read and write
clean
7FF544A92000
unkown
page readonly
clean
1A2A22A0000
unkown
page write copy
clean
7FF519085000
unkown
page readonly
clean
1A2A22A4000
unkown
page readonly
clean
1C2D7202000
unkown
page read and write
clean
7FF56D8BE000
unkown
page readonly
clean
1C2D6A48000
unkown
page read and write
clean
22B33C00000
unkown
page readonly
clean
2F46000
unkown
page readonly
clean
7FF577067000
unkown
page readonly
clean
2E8A000
unkown
page readonly
clean
9556E7B000
unkown
page read and write
clean
7FF4F687C000
unkown
page readonly
clean
379EC7F000
unkown
page read and write
clean
6C136000
unkown image
page readonly
clean
7FF5077BC000
unkown
page readonly
clean
A3C000
unkown
page read and write
clean
7FF524534000
unkown
page readonly
clean
7FF4F68CE000
unkown
page readonly
clean
7FF5B11A2000
unkown
page readonly
clean
7FF5CB008000
unkown
page readonly
clean
1A29D513000
unkown
page read and write
clean
12309B90000
unkown
page readonly
clean
1A2A20B0000
unkown
page read and write
clean
1A29CD13000
unkown
page read and write
clean
2BD80200000
unkown
page readonly
clean
37C000
unkown
page read and write
clean
2BD0000
unkown
page readonly
clean
3B3A9FE000
unkown
page read and write
clean
144BDC57000
unkown
page read and write
clean
1B7DF210000
unkown
page read and write
clean
1B7DE3C5000
unkown
page read and write
clean
1B7DE602000
unkown
page read and write
clean
144BDC67000
unkown
page read and write
clean
7FF5E98F0000
unkown
page readonly
clean
2D8D000
unkown
page readonly
clean
1A29D400000
unkown
page read and write
clean
1C80A649000
unkown
page read and write
clean
7FF59F783000
unkown
page readonly
clean
7FF5CAFEA000
unkown
page readonly
clean
7FF558038000
unkown
page readonly
clean
23D86468000
unkown
page read and write
clean
7FF4F6906000
unkown
page readonly
clean
1B7DF210000
unkown
page read and write
clean
1A2A2496000
unkown
page read and write
clean
1A29CC74000
unkown
page read and write
clean
144BDC79000
unkown
page read and write
clean
1971A6E0000
heap private
page read and write
clean
1B2F962E000
unkown
page read and write
clean
23892E13000
unkown
page read and write
clean
2BD7F600000
unkown
page read and write
clean
7FF503DA3000
unkown
page readonly
clean
2B5F000
unkown
page readonly
clean
12309AB0000
heap default
page read and write
clean
7FF5CB051000
unkown
page readonly
clean
1B2F9654000
unkown
page read and write
clean
1A29CBB0000
unkown
page read and write
clean
98A6CFF000
unkown
page read and write
clean
23D87EA0000
unkown
page readonly
clean
25DDA590000
unkown
page readonly
clean
7E97BAE000
unkown
page read and write
clean
1A29DBE0000
unkown
page read and write
clean
7FF551287000
unkown
page readonly
clean
1C2D6A39000
unkown
page read and write
clean
1A29CCB7000
unkown
page read and write
clean
7FF503FD8000
unkown
page readonly
clean
7FF5080C6000
unkown
page readonly
clean
144BDBE0000
unkown
page readonly
clean
7FF594259000
unkown
page readonly
clean
7FF5B1A95000
unkown
page readonly
clean
7FF50428E000
unkown
page readonly
clean
1A29CC29000
unkown
page read and write
clean
3A4FF2B000
unkown
page read and write
clean
7FF593E26000
unkown
page readonly
clean
19BD0E02000
unkown
page read and write
clean
7FF5511CA000
unkown
page readonly
clean
1A2A2330000
unkown
page read and write
clean
911000
unkown
page read and write
clean
7FF56DC0C000
unkown
page readonly
clean
7FF544ACF000
unkown
page readonly
clean
7FF544AAA000
unkown
page readonly
clean
2BEA000
unkown
page readonly
clean
7FF59F888000
unkown
page readonly
clean
7FF5B19F8000
unkown
page readonly
clean
7FF576FEA000
unkown
page readonly
clean
7FF59F8AE000
unkown
page readonly
clean
1A29CC76000
unkown
page read and write
clean
1FB14054000
unkown
page read and write
clean
98A6DFF000
unkown
page read and write
clean
7FF503F47000
unkown
page readonly
clean
1B2F9649000
unkown
page read and write
clean
238947A0000
unkown
page read and write
clean
7FF5041A8000
unkown
page readonly
clean
7FF59504F000
unkown
page readonly
clean
7FF4F6927000
unkown
page readonly
clean
1AEA37E000
unkown
page read and write
clean
1A29CD02000
unkown
page read and write
clean
7FF594FEA000
unkown
page readonly
clean
2B1F02B0000
unkown
page readonly
clean
2B1EFCCB000
unkown
page read and write
clean
1B7DE583000
unkown
page read and write
clean
7FF4F6851000
unkown
page readonly
clean
23892C90000
heap default
page read and write
clean
1B7DE782000
unkown
page read and write
clean
7FF5041DF000
unkown
page readonly
clean
4C0000
heap default
page read and write
clean
1C80A713000
unkown
page read and write
clean
7FF593E41000
unkown
page readonly
clean
7FF5B1B01000
unkown
page readonly
clean
1C2D6A4D000
unkown
page read and write
clean
25DDB9F0000
unkown
page read and write
clean
1C2D6C00000
unkown
page readonly
clean
79A3F7E000
unkown
page read and write
clean
7FF5CAF9F000
unkown
page readonly
clean
1C80AC60000
unkown
page read and write
clean
1A2A2040000
unkown
page read and write
clean
7FF4F683A000
unkown
page readonly
clean
1FB14108000
unkown
page read and write
clean
7FF4F691C000
unkown
page readonly
clean
25DDB9B0000
unkown
page read and write
clean
7FF576F6A000
unkown
page readonly
clean
7FF56D565000
unkown
page readonly
clean
7FF5941BA000
unkown
page readonly
clean
1A29CED0000
unkown
page readonly
clean
7FF5CB169000
unkown
page readonly
clean
2E68000
unkown
page readonly
clean
1C2D6A79000
unkown
page read and write
clean
7FF56DBA7000
unkown
page readonly
clean
1A2A22D7000
unkown
page write copy
clean
1B2F9708000
unkown
page read and write
clean
1A2A244C000
unkown
page read and write
clean
11F0000
unkown
page read and write
clean
7FF57704C000
unkown
page readonly
clean
7FF52444A000
unkown
page readonly
clean
1A29D559000
unkown
page read and write
clean
1A29E023000
unkown
page read and write
clean
7FF4F6189000
unkown
page readonly
clean
19BD0E13000
unkown
page read and write
clean
7FF507E05000
unkown
page readonly
clean
7FF576FC2000
unkown
page readonly
clean
2BD7F420000
unkown
page readonly
clean
7FF544AF6000
unkown
page readonly
clean
22B33213000
unkown
page read and write
clean
7FF5E98CC000
unkown
page readonly
clean
1971A856000
unkown
page read and write
clean
7FF593DB2000
unkown
page readonly
clean
1AE9B9E000
unkown
page read and write
clean
1FE000
unkown
page read and write
clean
D5D517D000
unkown
page read and write
clean
2BD7F654000
unkown
page read and write
clean
7FF5511A8000
unkown
page readonly
clean
1B7DE600000
unkown
page read and write
clean
7FF576757000
unkown
page readonly
clean
7FF518C4E000
unkown
page readonly
clean
41275B000
unkown
page read and write
clean
7FF544B0C000
unkown
page readonly
clean
7FF5940DA000
unkown
page readonly
clean
7FF4F6930000
unkown
page readonly
clean
1A29CC71000
unkown
page read and write
clean
7FF50417C000
unkown
page readonly
clean
9556EFE000
unkown
page read and write
clean
7FF56DD29000
unkown
page readonly
clean
23D86468000
unkown
page read and write
clean
2BD7F410000
heap default
page read and write
clean
412E7D000
unkown
page read and write
clean
7B0000
unkown
page readonly
clean
2BD7F4F0000
unkown
page write copy
clean
3A505FD000
unkown
page read and write
clean
23D86468000
unkown
page read and write
clean
1A29CB70000
heap default
page read and write
clean
7FF551056000
unkown
page readonly
clean
1B7DE32C000
unkown
page read and write
clean
7FF56DCB5000
unkown
page readonly
clean
7FF59427C000
unkown
page readonly
clean
7FF50416A000
unkown
page readonly
clean
1B7DE202000
unkown
page read and write
clean
7FF5041A2000
unkown
page readonly
clean
7FF56DB95000
unkown
page readonly
clean
7FF595236000
unkown
page readonly
clean
1B7DE439000
unkown
page read and write
clean
7FF504088000
unkown
page readonly
clean
3B3A6FE000
unkown
page read and write
clean
238948A0000
unkown
page readonly
clean
7FF5951C0000
unkown
page readonly
clean
7FF507ECF000
unkown
page readonly
clean
7FF5B1917000
unkown
page readonly
clean
7FF544AC5000
unkown
page readonly
clean
7FF519469000
unkown
page readonly
clean
25DDA200000
unkown
page readonly
clean
23892E02000
unkown
page read and write
clean
1A2A2461000
unkown
page read and write
clean
23893000000
unkown
page readonly
clean
342A000
heap default
page read and write
clean
7FF576CDC000
unkown
page readonly
clean
7FF594037000
unkown
page readonly
clean
7FF59F979000
unkown
page readonly
clean
7FF595267000
unkown
page readonly
clean
1A2A24B6000
unkown
page read and write
clean
7FF59F84C000
unkown
page readonly
clean
7FF5193DC000
unkown
page readonly
clean
7FF551217000
unkown
page readonly
clean
1FB14800000
unkown
page readonly
clean
43F000
unkown
page read and write
clean
79A44F7000
unkown
page read and write
clean
D90000
heap default
page read and write
clean
1A29CB10000
heap private
page read and write
clean
7FF5448F0000
unkown
page readonly
clean
7FF504151000
unkown
page readonly
clean
7FF52450C000
unkown
page readonly
clean
1B2F967D000
unkown
page read and write
clean
7FF5080BC000
unkown
page readonly
clean
25DDA100000
unkown
page read and write
clean
12309BE0000
unkown
page read and write
clean
1A2A249A000
unkown
page read and write
clean
1B7DE381000
unkown
page read and write
clean
1C2D6A74000
unkown
page read and write
clean
19BD0F00000
unkown
page read and write
clean
7FF55134F000
unkown
page readonly
clean
6C135000
unkown image
page write copy
clean
7FF504000000
unkown
page readonly
clean
1A29DB00000
unkown
page read and write
clean
7FF508149000
unkown
page readonly
clean
7FF5CB155000
unkown
page readonly
clean
7FF5770BE000
unkown
page readonly
clean
1A29CB80000
unkown
page readonly
clean
D3E000
unkown
page read and write
clean
2BD80118000
unkown
page read and write
clean
EB7E96E000
unkown
page read and write
clean
2EFA000
unkown
page readonly
clean
2F40000
unkown
page readonly
clean
1A2A2330000
unkown
page readonly
clean
1C2D6A45000
unkown
page read and write
clean
1A2A24B2000
unkown
page read and write
clean
7FF59F5E3000
unkown
page readonly
clean
7FF5770C9000
unkown
page readonly
clean
1A2A2310000
unkown
page read and write
clean
7FF551409000
unkown
page readonly
clean
7FF5CB219000
unkown
page readonly
clean
7FF5193AF000
unkown
page readonly
clean
2003BEF0000
unkown
page readonly
clean
25DDBFC0000
unkown
page readonly
clean
7FF5E98E5000
unkown
page readonly
clean
98A687B000
unkown
page read and write
clean
144BE260000
unkown
page read and write
clean
7FF5CAFDE000
unkown
page readonly
clean
2B4E000
unkown
page readonly
clean
7FF4F6890000
unkown
page readonly
clean
7FF593C3F000
unkown
page readonly
clean
7FF595260000
unkown
page readonly
clean
2EA6000
unkown
page readonly
clean
1A2A24B8000
unkown
page read and write
clean
2BD7F613000
unkown
page read and write
clean
7FF50420C000
unkown
page readonly
clean
7FF558199000
unkown
page readonly
clean
2CFB000
unkown
page readonly
clean
2F60000
unkown
page readonly
clean
3190000
unkown
page readonly
clean
1C2D6A61000
unkown
page read and write
clean
1B7DC213000
unkown
page read and write
clean
144BDD13000
unkown
page read and write
clean
82E46FE000
unkown
page read and write
clean
23D86400000
unkown
page read and write
clean
7FF5244BA000
unkown
page readonly
clean
1B2F964A000
unkown
page read and write
clean
82E47FB000
unkown
page read and write
clean
7FF593ED8000
unkown
page readonly
clean
1B7DE3E0000
unkown
page read and write
clean
7FF55103E000
unkown
page readonly
clean
9E0000
unkown
page read and write
clean
1B7DE500000
unkown
page read and write
clean
50ECCFD000
unkown
page read and write
clean
7FF551400000
unkown
page readonly
clean
1B7DE36E000
unkown
page read and write
clean
1AEA27F000
unkown
page read and write
clean
3300000
unkown
page readonly
clean
12309D02000
unkown
page read and write
clean
FCC000
unkown
page read and write
clean
3B3ACFE000
unkown
page read and write
clean
1B7DC35D000
unkown
page read and write
clean
22B3323F000
unkown
page read and write
clean
1B7DC288000
unkown
page read and write
clean
19BD0E6A000
unkown
page read and write
clean
7FF524447000
unkown
page readonly
clean
1B2F9689000
unkown
page read and write
clean
7FF503F07000
unkown
page readonly
clean
D18C1FE000
unkown
page read and write
clean
3B3AAF7000
unkown
page read and write
clean
7FF56DCAC000
unkown
page readonly
clean
EB7E8EB000
unkown
page read and write
clean
2ED3000
unkown
page readonly
clean
1B7DF110000
unkown
page read and write
clean
1A2A24AD000
unkown
page read and write
clean
7FF5080D5000
unkown
page readonly
clean
7FF4F68A8000
unkown
page readonly
clean
D5D4B7E000
unkown
page read and write
clean
19BD27A0000
unkown
page read and write
clean
7FF4F66FE000
unkown
page readonly
clean
7FF5CB20E000
unkown
page readonly
clean
7FF4F6901000
unkown
page readonly
clean
7FF5952C1000
unkown
page readonly
clean
7FF5B1870000
unkown
page readonly
clean
25DD9FC0000
unkown
page read and write
clean
2E9B000
unkown
page readonly
clean
7FF5CB08C000
unkown
page readonly
clean
7FF593DDA000
unkown
page readonly
clean
7FF5CB1A5000
unkown
page readonly
clean
7FF51932B000
unkown
page readonly
clean
7FF5B1A76000
unkown
page readonly
clean
2B1F0600000
unkown
page readonly
clean
1C2D6A63000
unkown
page read and write
clean
7FF5E944A000
unkown
page readonly
clean
1C2D6A60000
unkown
page read and write
clean
22B33257000
unkown
page read and write
clean
7FF4F6647000
unkown
page readonly
clean
1B2F968D000
unkown
page read and write
clean
1B7DC33C000
unkown
page read and write
clean
144BDBF0000
unkown
page readonly
clean
25DDA05E000
unkown
page read and write
clean
1C2D6A55000
unkown
page read and write
clean
12309C13000
unkown
page read and write
clean
7FF59F8FC000
unkown
page readonly
clean
7FF56DA68000
unkown
page readonly
clean
2BD7F68C000
unkown
page read and write
clean
E1A000
heap default
page read and write
clean
7FF544A5C000
unkown
page readonly
clean
82E4C7B000
unkown
page read and write
clean
22B33271000
unkown
page read and write
clean
7FF56DC4A000
unkown
page readonly
clean
7FF5B1A3E000
unkown
page readonly
clean
7FF56D9D7000
unkown
page readonly
clean
7FF59424F000
unkown
page readonly
clean
1C2D6A00000
unkown
page read and write
clean
7FF504299000
unkown
page readonly
clean
2B1EFC13000
unkown
page read and write
clean
EB7E9EE000
unkown
page read and write
clean
1B2F9520000
heap default
page read and write
clean
2D05000
unkown
page readonly
clean
23892D70000
unkown
page write copy
clean
7FF5B1345000
unkown
page readonly
clean
6C135000
unkown image
page write copy
clean
5E0000
unkown
page readonly
clean
412FFD000
unkown
page read and write
clean
12309C02000
unkown
page read and write
clean
7FF5193D6000
unkown
page readonly
clean
2C58000
unkown
page readonly
clean
7FF4F664E000
unkown
page readonly
clean
1A29CC6C000
unkown
page read and write
clean
4EA000
heap default
page read and write
clean
1A29D701000
unkown
page read and write
clean
7FF524255000
unkown
page readonly
clean
7FF576D4C000
unkown
page readonly
clean
1FB14049000
unkown
page read and write
clean
1B7DF310000
unkown
page read and write
clean
100B000
unkown
page read and write
clean
1C80A5E0000
unkown
page readonly
clean
7FF52458E000
unkown
page readonly
clean
1B7DF000000
unkown
page read and write
clean
7FF56D8B7000
unkown
page readonly
clean
1A2A21F4000
unkown
page read and write
clean
7FF4F618D000
unkown
page readonly
clean
7FF593DC6000
unkown
page readonly
clean
1B7DC400000
unkown
page readonly
clean
2003DD30000
heap private
page read and write
clean
6C130000
unkown image
page readonly
clean
12309BE0000
unkown
page read and write
clean
7FF593C7E000
unkown
page readonly
clean
4B0000
heap private
page read and write
clean
7FF5B1995000
unkown
page readonly
clean
7FF5193A5000
unkown
page readonly
clean
7FF593E36000
unkown
page readonly
clean
2003C060000
unkown
page readonly
clean
2E6F000
unkown
page readonly
clean
1C2D6A42000
unkown
page read and write
clean
144BE402000
unkown
page read and write
clean
D5D507E000
unkown
page read and write
clean
7FF5E971E000
unkown
page readonly
clean
2EC0000
unkown
page readonly
clean
3420000
heap default
page read and write
clean
23D8643F000
unkown
page read and write
clean
1B7DE682000
unkown
page read and write
clean
1B0000
unkown
page readonly
clean
1C80A60B000
unkown
page read and write
clean
D5D4E7B000
unkown
page read and write
clean
2BD7F702000
unkown
page read and write
clean
7FF5B1170000
unkown
page readonly
clean
E10000
heap default
page read and write
clean
7FF56DC38000
unkown
page readonly
clean
1B7DC2A5000
unkown
page read and write
clean
1B7DF110000
unkown
page read and write
clean
7FF5B19F4000
unkown
page readonly
clean
4130FD000
unkown
page read and write
clean
1A29D3A0000
unkown
page readonly
clean
7FF576FFE000
unkown
page readonly
clean
2EA4000
unkown
page readonly
clean
3B3A67B000
unkown
page read and write
clean
7FF594309000
unkown
page readonly
clean
2003BF50000
unkown
page readonly
clean
7FF4F66BB000
unkown
page readonly
clean
79A46FF000
unkown
page read and write
clean
7FF5CB17D000
unkown
page readonly
clean
1B7DF310000
unkown
page read and write
clean
7FF507EAE000
unkown
page readonly
clean
7FF56DAE8000
unkown
page readonly
clean
F10000
unkown
page readonly
clean
1B2F962A000
unkown
page read and write
clean
12309C29000
unkown
page read and write
clean
7FF5B1A86000
unkown
page readonly
clean
19BD0BD0000
heap private
page read and write
clean
7FF50806A000
unkown
page readonly
clean
2B58000
unkown
page readonly
clean
7FF56DAF9000
unkown
page readonly
clean
23892E1F000
unkown
page read and write
clean
7FF519407000
unkown
page readonly
clean
19BD0E68000
unkown
page read and write
clean
1B7DE742000
unkown
page read and write
clean
7FF5E98C6000
unkown
page readonly
clean
2BD81010000
unkown
page read and write
clean
7FF503FCC000
unkown
page readonly
clean
7FF55132A000
unkown
page readonly
clean
23D863D0000
unkown
page readonly
clean
7FF59F787000
unkown
page readonly
clean
1A29CCF9000
unkown
page read and write
clean
2B1F0190000
unkown
page readonly
clean
7FF5041BA000
unkown
page readonly
clean
19BD0C40000
unkown
page readonly
clean
7FF551295000
unkown
page readonly
clean
7FF59F5E7000
unkown
page readonly
clean
7FF544978000
unkown
page readonly
clean
12309AC0000
unkown
page readonly
clean
7FF5B1A4F000
unkown
page readonly
clean
7FF593AEA000
unkown
page readonly
clean
36A0000
unkown
page readonly
clean
7FF544A37000
unkown
page readonly
clean
7FF55811C000
unkown
page readonly
clean
1B7DC27F000
unkown
page read and write
clean
1B7DC1E0000
unkown
page readonly
clean
7FF56DBC1000
unkown
page readonly
clean
A7B000
unkown
page read and write
clean
7FF5193D1000
unkown
page readonly
clean
7FF59F917000
unkown
page readonly
clean
7FF519027000
unkown
page readonly
clean
25DDBC00000
unkown
page read and write
clean
7FF593CC3000
unkown
page readonly
clean
82E4DFB000
unkown
page read and write
clean
23D862A0000
heap default
page read and write
clean
7FF576D43000
unkown
page readonly
clean
7FF5244A6000
unkown
page readonly
clean
1C80A629000
unkown
page read and write
clean
EB7EF7D000
unkown
page read and write
clean
1B2F9613000
unkown
page read and write
clean
3A504FA000
unkown
page read and write
clean
2F68000
unkown
page readonly
clean
7FF5B1AA4000
unkown
page readonly
clean
7FF56D8F8000
unkown
page readonly
clean
1A2A2370000
unkown
page readonly
clean
1B7DE070000
unkown
page readonly
clean
7FF593DB0000
unkown
page readonly
clean
7FF519023000
unkown
page readonly
clean
1A29D3B0000
unkown
page readonly
clean
379ED7E000
unkown
page read and write
clean
7FF5581E0000
unkown
page readonly
clean
7FF5E9866000
unkown
page readonly
clean
7FF55811A000
unkown
page readonly
clean
2003C2D0000
heap private
page read and write
clean
7FF550FDF000
unkown
page readonly
clean
7FF55118F000
unkown
page readonly
clean
7FF56DC07000
unkown
page readonly
clean
7FF5581BC000
unkown
page readonly
clean
79A427B000
unkown
page read and write
clean
19BD0E00000
unkown
page read and write
clean
2BD7F5A0000
heap private
page read and write
clean
6C135000
unkown image
page write copy
clean
EB7ECFA000
unkown
page read and write
clean
7FF4F6788000
unkown
page readonly
clean
2C50000
unkown
page readonly
clean
7FF4F6877000
unkown
page readonly
clean
7FF544A96000
unkown
page readonly
clean
7FF5244DF000
unkown
page readonly
clean
1B7DF010000
unkown
page read and write
clean
7FF5040A7000
unkown
page readonly
clean
1B7DE440000
unkown
page read and write
clean
2BB2000
unkown
page readonly
clean
7FF507DF7000
unkown
page readonly
clean
98A73FE000
unkown
page read and write
clean
144BE600000
unkown
page readonly
clean
7FF504188000
unkown
page readonly
clean
7FF576FD8000
unkown
page readonly
clean
2BD5000
unkown
page readonly
clean
1C80A5F0000
unkown
page readonly
clean
7FF59428C000
unkown
page readonly
clean
2BD80149000
unkown
page read and write
clean
7FF544997000
unkown
page readonly
clean
7FF5447F7000
unkown
page readonly
clean
50ECAF9000
unkown
page read and write
clean
2BD7F6C3000
unkown
page read and write
clean
7FF4F6847000
unkown
page readonly
clean
6CB85FE000
unkown
page read and write
clean
7FF524207000
unkown
page readonly
clean
7FF557F9A000
unkown
page readonly
clean
1B7DE412000
unkown
page read and write
clean
1C2D6A7A000
unkown
page read and write
clean
7FF5941EC000
unkown
page readonly
clean
1FB13DD0000
heap private
page read and write
clean
1C2D6A6E000
unkown
page read and write
clean
7FF59F8EC000
unkown
page readonly
clean
7FF5B1B09000
unkown
page readonly
clean
82E4A7A000
unkown
page read and write
clean
7FF503F60000
unkown
page readonly
clean
7FF5CB18C000
unkown
page readonly
clean
1B7DF110000
unkown
page read and write
clean
95570FF000
unkown
page read and write
clean
7FF508038000
unkown
page readonly
clean
7FF5581D7000
unkown
page readonly
clean
7FF508149000
unkown
page readonly
clean
25DDB9F0000
unkown
page read and write
clean
7FF5512DA000
unkown
page readonly
clean
1A2A20C0000
unkown
page read and write
clean
1A2A24B4000
unkown
page read and write
clean
7FF5E9852000
unkown
page readonly
clean
7FF59F11D000
unkown
page readonly
clean
1B7DE3A4000
unkown
page read and write
clean
7FF5B1A6D000
unkown
page readonly
clean
7FF503FBB000
unkown
page readonly
clean
1C2D6A4F000
unkown
page read and write
clean
95571FE000
unkown
page read and write
clean
25DDBC80000
unkown
page readonly
clean
7FF593D2C000
unkown
page readonly
clean
7FF5CB219000
unkown
page readonly
clean
7FF4F6991000
unkown
page readonly
clean
D5D4CFC000
unkown
page read and write
clean
7FF5E9868000
unkown
page readonly
clean
22B33276000
unkown
page read and write
clean
7FF5B1A12000
unkown
page readonly
clean
7FF504237000
unkown
page readonly
clean
7FF524300000
unkown
page readonly
clean
7FF52446C000
unkown
page readonly
clean
25DDA04D000
unkown
page read and write
clean
7FF5E9850000
unkown
page readonly
clean
25DDA000000
unkown
page read and write
clean
2F68000
unkown
page readonly
clean
EB7ED7E000
unkown
page read and write
clean
7FF4F68FD000
unkown
page readonly
clean
19BD0E6C000
unkown
page read and write
clean
7FF551371000
unkown
page readonly
clean
1B7DE0A0000
unkown
page readonly
clean
7FF550F6E000
unkown
page readonly
clean
1B2F9800000
unkown
page readonly
clean
7FF4F6999000
unkown
page readonly
clean
2003C2D5000
heap private
page read and write
clean
7FF594216000
unkown
page readonly
clean
1B7DC302000
unkown
page read and write
clean
1C2D6CD0000
unkown
page readonly
clean
22B331C0000
heap default
page read and write
clean
1A29E001000
unkown
page read and write
clean
7FF4F6999000
unkown
page readonly
clean
7FF56DAF0000
unkown
page readonly
clean
7FF50410C000
unkown
page readonly
clean
10CE000
unkown
page read and write
clean
7FF593C8A000
unkown
page readonly
clean
7E97EF9000
unkown
page read and write
clean
6C130000
unkown image
page readonly
clean
7FF4F6660000
unkown
page readonly
clean
1A0000
unkown
page readonly
clean
7FF594309000
unkown
page readonly
clean
3410000
unkown
page readonly
clean
7FF5B17D0000
unkown
page readonly
clean
1C2D6A13000
unkown
page read and write
clean
7FF5936C3000
unkown
page readonly
clean
1A29D518000
unkown
page read and write
clean
7FF504131000
unkown
page readonly
clean
7FF593E43000
unkown
page readonly
clean
7FF5E9951000
unkown
page readonly
clean
7FF5B1641000
unkown
page readonly
clean
EB7EFFD000
unkown
page read and write
clean
1A2A2476000
unkown
page read and write
clean
EB7EEFF000
unkown
page read and write
clean
2EE5000
unkown
page readonly
clean
7FF56DC20000
unkown
page readonly
clean
1B7DE583000
unkown
page read and write
clean
7FF507EE8000
unkown
page readonly
clean
7FF550FE2000
unkown
page readonly
clean
1A29CC8A000
unkown
page read and write
clean
DAE000
unkown
page read and write
clean
7FF5CB023000
unkown
page readonly
clean
3206000
unkown
page read and write
clean
2BD80149000
unkown
page read and write
clean
7FF595255000
unkown
page readonly
clean
7FF56DAE1000
unkown
page readonly
clean
7FF519469000
unkown
page readonly
clean
CA0000
unkown
page readonly
clean
7FF595205000
unkown
page readonly
clean
7FF5B1A02000
unkown
page readonly
clean
1B7DF210000
unkown
page read and write
clean
7FF56D9E5000
unkown
page readonly
clean
7FF5513A7000
unkown
page readonly
clean
7FF56D93F000
unkown
page readonly
clean
7FF519337000
unkown
page readonly
clean
2CFB000
unkown
page readonly
clean
BB0000
unkown
page readonly
clean
7FF5193F5000
unkown
page readonly
clean
1B7DE300000
unkown
page read and write
clean
379E51B000
unkown
page read and write
clean
D18C0FD000
unkown
page read and write
clean
9BB84FE000
unkown
page read and write
clean
1B7DDCA0000
unkown
page readonly
clean
1A29D502000
unkown
page read and write
clean
1B7DE31D000
unkown
page read and write
clean
7FF594286000
unkown
page readonly
clean
7FF5191EF000
unkown
page readonly
clean
1AEA07E000
unkown
page read and write
clean
7FF576FC0000
unkown
page readonly
clean
7FF59F6CA000
unkown
page readonly
clean
915000
unkown
page read and write
clean
1A2A20D0000
unkown
page read and write
clean
3A509FF000
unkown
page read and write
clean
1C80A702000
unkown
page read and write
clean
7FF4F66EA000
unkown
page readonly
clean
2B1EFE00000
unkown
page readonly
clean
82E457E000
unkown
page read and write
clean
2BD7F6F0000
unkown
page read and write
clean
1C2D6910000
heap private
page read and write
clean
7FF5941F8000
unkown
page readonly
clean
144BDE00000
unkown
page readonly
clean
7FF50802C000
unkown
page readonly
clean
1C2D6970000
heap default
page read and write
clean
1A29CC8E000
unkown
page read and write
clean
2B1EFA50000
heap private
page read and write
clean
7FF544A98000
unkown
page readonly
clean
2BD7FFD0000
unkown
page read and write
clean
2EB2000
unkown
page readonly
clean
7FF504291000
unkown
page readonly
clean
7FF551220000
unkown
page readonly
clean
2003C280000
unkown
page readonly
clean
22B33940000
unkown
page readonly
clean
1B7DE4A4000
unkown
page read and write
clean
1A29E030000
unkown
page read and write
clean
2E60000
unkown
page readonly
clean
25DDA002000
unkown
page read and write
clean
2BD7F670000
unkown
page read and write
clean
1FB14B40000
unkown
page readonly
clean
7FF503F1C000
unkown
page readonly
clean
7FF544AFC000
unkown
page readonly
clean
7FF5E9460000
unkown
page readonly
clean
6C133000
unkown image
page readonly
clean
7FF593E45000
unkown
page readonly
clean
1B2F9A00000
unkown
page readonly
clean
7FF5E987A000
unkown
page readonly
clean
1FB14590000
unkown
page read and write
clean
1C80AE02000
unkown
page read and write
clean
7FF5579ED000
unkown
page readonly
clean
7FF508052000
unkown
page readonly
clean
7FF594212000
unkown
page readonly
clean
2F68000
unkown
page readonly
clean
7FF557F10000
unkown
page readonly
clean
2EB7000
unkown
page readonly
clean
29EB000
unkown
page readonly
clean
1B7DE000000
unkown
page read and write
clean
7E97B2E000
unkown
page read and write
clean
2BD7F6DD000
unkown
page read and write
clean
2EF5000
unkown
page readonly
clean
1B7DF010000
unkown
page read and write
clean
7FF507F08000
unkown
page readonly
clean
25DDBFE0000
unkown
page write copy
clean
7FF5E9748000
unkown
page readonly
clean
D18C27C000
unkown
page read and write
clean
1C2D6A5F000
unkown
page read and write
clean
7FF56DCC0000
unkown
page readonly
clean
2BD7F671000
unkown
page read and write
clean
7FF504173000
unkown
page readonly
clean
1B7DC229000
unkown
page read and write
clean
1A2A2080000
unkown
page readonly
clean
7FF59492A000
unkown
page readonly
clean
7FF5B1A16000
unkown
page readonly
clean
1A2A2420000
unkown
page read and write
clean
25DD9FE0000
unkown
page read and write
clean
7FF544A41000
unkown
page readonly
clean
7FF56DA8E000
unkown
page readonly
clean
7FF59F979000
unkown
page readonly
clean
B77000
unkown
page read and write
clean
2ED3000
unkown
page readonly
clean
7FF4F6607000
unkown
page readonly
clean
1971AAD0000
unkown
page readonly
clean
2BD7F67D000
unkown
page read and write
clean
1A29D260000
unkown
page readonly
clean
7FF544993000
unkown
page readonly
clean
7FF558249000
unkown
page readonly
clean
2E91000
unkown
page readonly
clean
12309C25000
unkown
page read and write
clean
7FF56DBF7000
unkown
page readonly
clean
108F000
unkown
page read and write
clean
7FF593E3C000
unkown
page readonly
clean
7FF4F6934000
unkown
page readonly
clean
98A6FFD000
unkown
page read and write
clean
1A2A2200000
unkown
page read and write
clean
7FF551345000
unkown
page readonly
clean
7FF59520F000
unkown
page readonly
clean
7FF5CB122000
unkown
page readonly
clean
22B33302000
unkown
page read and write
clean
7FF4F6888000
unkown
page readonly
clean
7FF504225000
unkown
page readonly
clean
1C80B000000
unkown
page readonly
clean
1B7DE543000
unkown
page read and write
clean
2BD7F694000
unkown
page read and write
clean
1B2FA000000
unkown
page readonly
clean
7FF576FD6000
unkown
page readonly
clean
7FF593E1D000
unkown
page readonly
clean
2EF5000
unkown
page readonly
clean
7FF59F635000
unkown
page readonly
clean
1A29CB90000
unkown
page readonly
clean
7FF5CB14E000
unkown
page readonly
clean
144BDD02000
unkown
page read and write
clean
1A2A22E0000
unkown
page read and write
clean
7FF544AD9000
unkown
page readonly
clean
7FF5E9791000
unkown
page readonly
clean
7FF4F6603000
unkown
page readonly
clean
7FF56D861000
unkown
page readonly
clean
7FF50813E000
unkown
page readonly
clean
1B2F9600000
unkown
page read and write
clean
1B7DC190000
unkown
page write copy
clean
98A71FF000
unkown
page read and write
clean
1FB13E30000
heap default
page read and write
clean
11CF000
unkown
page read and write
clean
7FF57702D000
unkown
page readonly
clean
7FF576763000
unkown
page readonly
clean
23D86380000
unkown
page write copy
clean
7FF593EB9000
unkown
page readonly
clean
A15B6FE000
unkown
page read and write
clean
7FF5077C2000
unkown
page readonly
clean
7FF5941A7000
unkown
page readonly
clean
2C30000
unkown
page readonly
clean
1FB1403C000
unkown
page read and write
clean
7FF5CAA23000
unkown
page readonly
clean
7FF551376000
unkown
page readonly
clean
7FF4F690C000
unkown
page readonly
clean
1A2A2455000
unkown
page read and write
clean
7FF594200000
unkown
page readonly
clean
1A29D559000
unkown
page read and write
clean
2BD7FFD0000
unkown
page read and write
clean
1C2D6A6C000
unkown
page read and write
clean
3A50BFA000
unkown
page read and write
clean
7FF56DC18000
unkown
page readonly
clean
1A2A249A000
unkown
page read and write
clean
7FF503A3D000
unkown
page readonly
clean
1A29CC25000
unkown
page read and write
clean
1C80A700000
unkown
page read and write
clean
2B1EFD13000
unkown
page read and write
clean
2003C1C0000
unkown
page readonly
clean
19BD0F13000
unkown
page read and write
clean
2B1EFCBA000
unkown
page read and write
clean
7FF544845000
unkown
page readonly
clean
23892E3F000
unkown
page read and write
clean
2EC2000
unkown
page readonly
clean
7FF57706D000
unkown
page readonly
clean
7FF54439B000
unkown
page readonly
clean
1C2D69A0000
unkown
page read and write
clean
12309A50000
heap private
page read and write
clean
2B1F0532000
unkown
page read and write
clean
7FF4F6655000
unkown
page readonly
clean
1B7DC36C000
unkown
page read and write
clean
25DDA02A000
unkown
page read and write
clean
7FF5CB13A000
unkown
page readonly
clean
1A2A21D8000
unkown
page read and write
clean
2BD7F718000
unkown
page read and write
clean
3A50CFE000
unkown
page read and write
clean
3A50A7E000
unkown
page read and write
clean
1AE9B1B000
unkown
page read and write
clean
1FB13E40000
unkown
page readonly
clean
98A70FE000
unkown
page read and write
clean
7FF504234000
unkown
page readonly
clean
1B7DE543000
unkown
page read and write
clean
1B2F963C000
unkown
page read and write
clean
1B7DC31B000
unkown
page read and write
clean
50ECBFF000
unkown
page read and write
clean
7FF56D9F0000
unkown
page readonly
clean
7FF5244D5000
unkown
page readonly
clean
1C80A64B000
unkown
page read and write
clean
7FF5CB186000
unkown
page readonly
clean
6C136000
unkown image
page readonly
clean
50EC74B000
unkown
page read and write
clean
7FF50401F000
unkown
page readonly
clean
1C80A650000
unkown
page read and write
clean
7FF544B20000
unkown
page readonly
clean
2E96000
unkown
page readonly
clean
7FF5193B9000
unkown
page readonly
clean
7FF4F64A3000
unkown
page readonly
clean
7FF5448DA000
unkown
page readonly
clean
2B1EFAC0000
unkown
page readonly
clean
1B7DE34C000
unkown
page read and write
clean
7FF5581AD000
unkown
page readonly
clean
6C130000
unkown image
page readonly
clean
82E4BFB000
unkown
page read and write
clean
1A2A2200000
unkown
page read and write
clean
7FF56DBD7000
unkown
page readonly
clean
1B7DF310000
unkown
page read and write
clean
7FF577036000
unkown
page readonly
clean
2003C0C0000
heap default
page read and write
clean
2F46000
unkown
page readonly
clean
25DDA013000
unkown
page read and write
clean
2F4B000
unkown
page readonly
clean
7FF5CAD0A000
unkown
page readonly
clean
D18C17F000
unkown
page read and write
clean
7FF558152000
unkown
page readonly
clean
7FF5952C9000
unkown
page readonly
clean
1A29D3D0000
unkown
page readonly
clean
1A2A22D4000
unkown
page write copy
clean
7FF59F640000
unkown
page readonly
clean
7FF5244AA000
unkown
page readonly
clean
7FF5B18A8000
unkown
page readonly
clean
3A50EFF000
unkown
page read and write
clean
7FF5580FA000
unkown
page readonly
clean
2BD7F540000
unkown
page readonly
clean
9BB887F000
unkown
page read and write
clean
1A2A24B6000
unkown
page read and write
clean
7FF5770C9000
unkown
page readonly
clean
25DDBA02000
unkown
page read and write
clean
1C2D6A3D000
unkown
page read and write
clean
7FF5244E9000
unkown
page readonly
clean
7FF524388000
unkown
page readonly
clean
7FF5447F3000
unkown
page readonly
clean
7FF544A5A000
unkown
page readonly
clean
23D86468000
unkown
page read and write
clean
1C80A682000
unkown
page read and write
clean
41317E000
unkown
page read and write
clean
2EA4000
unkown
page readonly
clean
1C80A64D000
unkown
page read and write
clean
1070000
unkown
page readonly
clean
22B331D0000
unkown
page readonly
clean
1B7DC299000
unkown
page read and write
clean
EB7F07F000
unkown
page read and write
clean
7FF5E96DF000
unkown
page readonly
clean
2BD7FC90000
unkown
page readonly
clean
7FF524451000
unkown
page readonly
clean
7FF5952C9000
unkown
page readonly
clean
1B2F94C0000
heap private
page read and write
clean
7FF504144000
unkown
page readonly
clean
1A2A2210000
unkown
page read and write
clean
1C2D6A29000
unkown
page read and write
clean
7FF507F19000
unkown
page readonly
clean
7FF59F8BF000
unkown
page readonly
clean
144BDC3E000
unkown
page read and write
clean
1B7DE543000
unkown
page read and write
clean
19BD0E68000
unkown
page read and write
clean
2F54000
unkown
page readonly
clean
180000
unkown
page read and write
clean
7FF5244FD000
unkown
page readonly
clean
82E4CFC000
unkown
page read and write
clean
19BD0F02000
unkown
page read and write
clean
7FF5193E6000
unkown
page readonly
clean
7FF59F82A000
unkown
page readonly
clean
7FF56DC8D000
unkown
page readonly
clean
2BD7F6F6000
unkown
page read and write
clean
7FF59F8DD000
unkown
page readonly
clean
7FF4F6831000
unkown
page readonly
clean
1B7DE010000
unkown
page readonly
clean
7FF594218000
unkown
page readonly
clean
1B7DC31C000
unkown
page read and write
clean
7FF558158000
unkown
page readonly
clean
19BD0E55000
unkown
page read and write
clean
7FF5CAF3A000
unkown
page readonly
clean
7FF5CB1B0000
unkown
page readonly
clean
7FF504201000
unkown
page readonly
clean
7FF5080B6000
unkown
page readonly
clean
7FF5E98A9000
unkown
page readonly
clean
2BC3000
unkown
page readonly
clean
7FF504206000
unkown
page readonly
clean
7FF56DC6F000
unkown
page readonly
clean
79A43FE000
unkown
page read and write
clean
7FF5E9862000
unkown
page readonly
clean
EB7EDFA000
unkown
page read and write
clean
2B1EFC00000
unkown
page read and write
clean
82E4AFA000
unkown
page read and write
clean
1C2D6B02000
unkown
page read and write
clean
1C2D6A02000
unkown
page read and write
clean
1B7DC2D3000
unkown
page read and write
clean
1A2A2610000
unkown
page readonly
clean
23D86429000
unkown
page read and write
clean
2BD7F590000
unkown
page readonly
clean
7FF50808F000
unkown
page readonly
clean
1B7DC2DC000
unkown
page read and write
clean
2BD7F629000
unkown
page read and write
clean
7FF4F68E9000
unkown
page readonly
clean
2BD80189000
unkown
page read and write
clean
7FF594295000
unkown
page readonly
clean
7FF56D9AC000
unkown
page readonly
clean
1B7DC313000
unkown
page read and write
clean
2B1EFC29000
unkown
page read and write
clean
82E4EFC000
unkown
page read and write
clean
7FF594300000
unkown
page readonly
clean
7FF5243A3000
unkown
page readonly
clean
7FF551359000
unkown
page readonly
clean
1AE9E7E000
unkown
page read and write
clean
144BDB10000
unkown
page readonly
clean
2F40000
unkown
page readonly
clean
7FF576F74000
unkown
page readonly
clean
7FF56D865000
unkown
page readonly
clean
7FF5B1B09000
unkown
page readonly
clean
1B7DF410000
unkown
page read and write
clean
7FF503EF4000
unkown
page readonly
clean
7FF5244A8000
unkown
page readonly
clean
7FF524527000
unkown
page readonly
clean
7FF519404000
unkown
page readonly
clean
3B3A77E000
unkown
page read and write
clean
7FF4F68DF000
unkown
page readonly
clean
7FF577060000
unkown
page readonly
clean
2F54000
unkown
page readonly
clean
2F60000
unkown
page readonly
clean
7FF5581E4000
unkown
page readonly
clean
7FF5E97CC000
unkown
page readonly
clean
23D8646E000
unkown
page read and write
clean
7FF55823E000
unkown
page readonly
clean
C60000
unkown
page read and write
clean
7FF5E9959000
unkown
page readonly
clean
1C2D6A46000
unkown
page read and write
clean
7FF593CF7000
unkown
page readonly
clean
7FF56D92D000
unkown
page readonly
clean
7FF544B89000
unkown
page readonly
clean
7FF5CB02D000
unkown
page readonly
clean
7FF5B1A45000
unkown
page readonly
clean
1A2A2390000
unkown
page readonly
clean
3B3A97B000
unkown
page read and write
clean
7FF5B18D9000
unkown
page readonly
clean
7FF56DC5E000
unkown
page readonly
clean
3A5097E000
unkown
page read and write
clean
82E487B000
unkown
page read and write
clean
25DD9ED0000
unkown
page readonly
clean
7FF593DC2000
unkown
page readonly
clean
7FF56DC36000
unkown
page readonly
clean
1B7DC23F000
unkown
page read and write
clean
7FF508099000
unkown
page readonly
clean
7FF593F3E000
unkown
page readonly
clean
7FF56DD1E000
unkown
page readonly
clean
1B7DF410000
unkown
page read and write
clean
2003C040000
unkown
page read and write
clean
1B7DC0C0000
unkown
page readonly
clean
1A29D3C0000
unkown
page readonly
clean
2EE0000
unkown
page readonly
clean
7FF5B1A00000
unkown
page readonly
clean
7FF503F55000
unkown
page readonly
clean
7FF56DCC7000
unkown
page readonly
clean
7FF593CF1000
unkown
page readonly
clean
7FF56DBE1000
unkown
page readonly
clean
6CB88F9000
unkown
page read and write
clean
7FF4F686C000
unkown
page readonly
clean
7FF5CB15F000
unkown
page readonly
clean
7FF4F68A6000
unkown
page readonly
clean
1971A802000
unkown
page read and write
clean
D5D450B000
unkown
page read and write
clean
2E82000
unkown
page readonly
clean
6C136000
unkown image
page readonly
clean
1971C370000
unkown
page readonly
clean
7FF577055000
unkown
page readonly
clean
7FF544A3A000
unkown
page readonly
clean
7FF51945E000
unkown
page readonly
clean
7FF4F686A000
unkown
page readonly
clean
7FF544B27000
unkown
page readonly
clean
2E8A000
unkown
page readonly
clean
1AE9FF5000
unkown
page read and write
clean
2C44000
unkown
page readonly
clean
7FF504192000
unkown
page readonly
clean
1B7DC2E8000
unkown
page read and write
clean
2F68000
unkown
page readonly
clean
6C133000
unkown image
page readonly
clean
1971A740000
heap default
page read and write
clean
1B7DF110000
unkown
page read and write
clean
2B8B000
unkown
page readonly
clean
7FF56DC65000
unkown
page readonly
clean
7FF5942FE000
unkown
page readonly
clean
1A2A21F1000
unkown
page read and write
clean
7FF5E9763000
unkown
page readonly
clean
12309BB0000
unkown
page read and write
clean
7FF524530000
unkown
page readonly
clean
1C2D6A66000
unkown
page read and write
clean
1B2F9700000
unkown
page read and write
clean
1C2D6A67000
unkown
page read and write
clean
7FF5E98BD000
unkown
page readonly
clean
35A0000
unkown
page readonly
clean
1C80A800000
unkown
page readonly
clean
23892E29000
unkown
page read and write
clean
23D86468000
unkown
page read and write
clean
7FF5B1834000
unkown
page readonly
clean
1C2D6A4B000
unkown
page read and write
clean
1A2A22F0000
unkown
page read and write
clean
7FF59F910000
unkown
page readonly
clean
A15B8FF000
unkown
page read and write
clean
7FF5513FE000
unkown
page readonly
clean
7FF5951EA000
unkown
page readonly
clean
19BD0E68000
unkown
page read and write
clean
7FF56D3C2000
unkown
page readonly
clean
7FF551302000
unkown
page readonly
clean
7FF524591000
unkown
page readonly
clean
11B000
unkown
page read and write
clean
D5D4DFC000
unkown
page read and write
clean
9556F79000
unkown
page read and write
clean
7FF56D9DE000
unkown
page readonly
clean
EC0000
unkown
page readonly
clean
82E45F9000
unkown
page read and write
clean
7FF4F6892000
unkown
page readonly
clean
1C2D6990000
unkown
page readonly
clean
1A29D402000
unkown
page read and write
clean
7FF593CCD000
unkown
page readonly
clean
1FB1405B000
unkown
page read and write
clean
7FF558241000
unkown
page readonly
clean
7FF5B1184000
unkown
page readonly
clean
1B7DE080000
unkown
page readonly
clean
7FF5CB112000
unkown
page readonly
clean
1A29CC3D000
unkown
page read and write
clean
A15B12B000
unkown
page read and write
clean
7FF504299000
unkown
page readonly
clean
23D86468000
unkown
page read and write
clean
1C2D6A49000
unkown
page read and write
clean
23D86600000
unkown
page readonly
clean
23892CA0000
unkown
page readonly
clean
7FF5941B7000
unkown
page readonly
clean
1A29DCC0000
unkown
page readonly
clean
1A29D3E0000
unkown
page readonly
clean
79A45FE000
unkown
page read and write
clean
7FF5941C1000
unkown
page readonly
clean
7FF5E967A000
unkown
page readonly
clean
2B1EFC43000
unkown
page read and write
clean
7FF519372000
unkown
page readonly
clean
7FF558249000
unkown
page readonly
clean
2B1EFAB0000
heap default
page read and write
clean
7FF4F65F4000
unkown
page readonly
clean
7FF4F66CC000
unkown
page readonly
clean
1A29CC88000
unkown
page read and write
clean
23D86240000
heap private
page read and write
clean
1C2D6A30000
unkown
page read and write
clean
1FB14113000
unkown
page read and write
clean
1B2F9E02000
unkown
page read and write
clean
7FF59423E000
unkown
page readonly
clean
82E49FA000
unkown
page read and write
clean
7FF5243A7000
unkown
page readonly
clean
79A3FFE000
unkown
page read and write
clean
7FF5080AD000
unkown
page readonly
clean
7FF524599000
unkown
page readonly
clean
1230A402000
unkown
page read and write
clean
1A2A2030000
unkown
page read and write
clean
3A50377000
unkown
page read and write
clean
23892DC0000
unkown
page readonly
clean
7FF4F6873000
unkown
page readonly
clean
2BA2000
unkown
page readonly
clean
2003C020000
unkown
page read and write
clean
1B7DC254000
unkown
page read and write
clean
2BA7000
unkown
page readonly
clean
22B3322A000
unkown
page read and write
clean
1A2A2214000
unkown
page read and write
clean
1B7DE3D6000
unkown
page read and write
clean
B7B000
unkown
page read and write
clean
7FF507FD5000
unkown
page readonly
clean
12309BE0000
unkown
page read and write
clean
CFC000
unkown
page read and write
clean
7FF519362000
unkown
page readonly
clean
23D87DA0000
unkown
page read and write
clean
7FF50807E000
unkown
page readonly
clean
6CB89FE000
unkown
page read and write
clean
2BD7F6CC000
unkown
page read and write
clean
7FF594202000
unkown
page readonly
clean
25DDA113000
unkown
page read and write
clean
1FB1404C000
unkown
page read and write
clean
7FF4F671F000
unkown
page readonly
clean
19BD1000000
unkown
page readonly
clean
7FF4F6844000
unkown
page readonly
clean
7FF508056000
unkown
page readonly
clean
7FF576FDA000
unkown
page readonly
clean
2C3B000
unkown
page readonly
clean
2BD7F759000
unkown
page read and write
clean
7FF508042000
unkown
page readonly
clean
7FF56DA4B000
unkown
page readonly
clean
7FF5CB196000
unkown
page readonly
clean
9557079000
unkown
page read and write
clean
1A29CCAB000
unkown
page read and write
clean
6CB857E000
unkown
page read and write
clean
4F40000
heap private
page read and write
clean
1971A813000
unkown
page read and write
clean
1A2A246D000
unkown
page read and write
clean
25DDA05A000
unkown
page read and write
clean
7FF5E8FE0000
unkown
page readonly
clean
There are 1684 hidden memdumps, click here to show them.