IOCReport

loading gif

Files

File Path
Type
Category
Malicious
6bae0000.bilper.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\HK4RP3SS\www.msn[1].xml
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\VBQO2USX\contextual.media[1].xml
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B9097646-AD07-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B9097648-AD07-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1599143076228-3140[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 622x367, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\52-478955-68ddb2ab[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AA7XCQ3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1dCSOZ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gj4Xc[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gjf9R[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkSzr[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkVo6[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkXm3[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gkZLA[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gl258[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gl8nk[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB1gl8nk[2].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BB5kTiV[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBK9Ri5[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBPfCZL[1].png
GIF image data, version 89a, 50 x 50
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\BBX2afX[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\auction[1].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_25d3a15e34bf9f4ad528fc533b81d965[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_26b7c43e8735f7408c60e41fb7e91ecd[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\http___cdn.taboola.com_libtrc_static_thumbnails_GETTY_IMAGES_SKP_1211840846__1v9WbJ7j[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery-2.1.1.min[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\medianet[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\medianet[2].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nrrV27271[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otBannerSdk[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\17-361657-68ddb2ab[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\2d-0e97d4-185735b[1].css
UTF-8 Unicode text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\55a804ab-e5c6-4b97-9319-86263d365d28[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB10MkbM[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1bjIri[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1cEP3G[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gj6Xu[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gjtRw[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkGPP[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gkUfy[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl13k[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl3iX[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1gl3lM[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB1glbdN[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB6Ma4a[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BB7hg4[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBUZVvV[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\BBY7ARN[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cfdbd9[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\checksync[2].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\de-ch[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fcmain[1].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\http___cdn.taboola.com_libtrc_static_thumbnails_103a8843c2de79b0e3e5effff6b9a9b0[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\http___cdn.taboola.com_libtrc_static_thumbnails_80ebae7de5cd4dd5f336c2f56096104a[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\http___cdn.taboola.com_libtrc_static_thumbnails_fc0ffc8b84fcfa9298edf54060d93484[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 207x311, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\location[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\nrrV27271[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAuTnto[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\AAzjSw3[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB14hq0P[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB15AQNm[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB19K9zb[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1cG73h[1].png
PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gbJwB[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1giL6z[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x75, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkGJb[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkGOZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkM5V[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gkXk3[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl3fv[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 206x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gl8q9[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB1gldCZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BB5kJAC[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBOLLMj[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBih5H[1].png
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\BBnYSFZ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a087b85d-b587-4286-b0ee-078d1c9a0535[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a8a064[1].gif
GIF image data, version 89a, 28 x 28
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\aadcdc47-f267-4b70-bc4e-4fdd88f9ef0d[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\de-ch[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\e151e5[1].gif
GIF image data, version 89a, 1 x 1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\iab2Data[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\otTCF-ie[1].js
UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4996b9[1].woff
Web Open Font Format, TrueType, length 45633, version 1.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AA6wTdK[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AA8uJZv[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\AAyuliQ[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB14EN7h[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1fV7TT[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1ftEY0[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkSmD[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkUDu[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkUFI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gkZod[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl3CU[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 311x333, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl3Yj[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 622x368, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl6Gj[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gl8uZ[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB1gldiI[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 310x166, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BB7gRE[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBRUB0d[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\BBVuddh[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\a5ea21[1].ico
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\checksync[2].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fcmain[1].js
HTML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otFlat[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otPcCenter[1].json
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\otSDKStub[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Temp\~DF36C47D02735768C5.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF4785255AD0E027A9.TMP
data
dropped
clean
There are 113 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\6bae0000.bilper.dll'
clean
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\6bae0000.bilper.dll',#1
clean
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe /s C:\Users\user\Desktop\6bae0000.bilper.dll
clean
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\6bae0000.bilper.dll',#1
clean
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
clean
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\6bae0000.bilper.dll,DllRegisterServer
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5472 CREDAT:17410 /prefetch:2
clean

URLs

Name
IP
Malicious
http://searchads.msn.net/.cfm?&&kp=1&
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172
unknown
clean
https://www.msn.com/de-ch/nachrichten/coronareisen
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/d%c3%bcrfen-k%c3%bcnftig-staaten-wie-china-aktion%
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_promotionalstripe_na
unknown
clean
https://onedrive.live.com;Fotos
unknown
clean
https://ir2.beap.gemini.yahoo.com/mbcsc?bv=1.0.0&es=4phKZOoGIS8LDOJJ4QeiL2eRzf4UWSut7KSkH2DNCaZz
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_TopMenu&auth=1&wdorigin=msn
unknown
clean
https://office.live.com/start/Word.aspx?WT.mc_id=MSN_site;Excel
unknown
clean
https://beap.gemini.yahoo.com/mbclk?bv=1.0.0&es=sDITD_kGIS9MzajJ88K2Zo4twQYWilenqiAMyWyPJBA150oG
unknown
clean
http://ogp.me/ns/fb#
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-ss&ued=htt
unknown
clean
https://s.yimg.com/lo/api/res/1.2/BXjlWewXmZ47HeV5NPvUYA--~A/Zmk9ZmlsbDt3PTYyMjtoPTM2ODthcHBpZD1nZW1
unknown
clean
https://outlook.live.com/mail/deeplink/compose;Kalender
unknown
clean
https://res-a.akamaihd.net/__media__/pics/8000/72/941/fallback1.jpg
unknown
clean
https://www.skyscanner.net/g/referrals/v1/cars/home?associateid=API_B2B_19305_00002
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_Recent&auth=1&wdorigin=msn
unknown
clean
https://www.msn.com/de-ch/news/other/arbeiter-und-polizei-%c3%bcberw%c3%a4ltigen-mutmasslichen-t%c3%
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/das-bezirksgericht-meilen-spricht-it-manager-wegen
unknown
clean
http://www.reddit.com/
unknown
clean
https://www.skype.com/
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=travelnavlink
unknown
clean
https://www.msn.com/de-ch/nachrichten/regional
unknown
clean
https://www.msn.com/de-ch/news/other/hotelsterben-f%c3%bchrt-zu-mehr-wohnungen/ar-BB1gkhzO?ocid=hplo
unknown
clean
https://onedrive.live.com/?qt=allmyphotos;Aktuelle
unknown
clean
https://amzn.to/2TTxhNg
unknown
clean
https://www.skype.com/go/onedrivepromo.download?cm_mmc=MSFT_2390_MSN-com
unknown
clean
https://client-s.gateway.messenger.live.com
unknown
clean
https://www.msn.com/de-ch/
unknown
clean
https://office.live.com/start/PowerPoint.aspx?WT.mc_id=MSN_site
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&https=1
unknown
clean
https://www.awin1.com/cread.php?awinmid=15168&awinaffid=696593&clickref=de-ch-edge-dhp-river
unknown
clean
https://www.msn.com/de-ch
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_store&m
unknown
clean
https://twitter.com/i/notifications;Ich
unknown
clean
https://www.awin1.com/cread.php?awinmid=11518&awinaffid=696593&clickref=dech-edge-dhp-infopa
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&http
unknown
clean
https://www.msn.com/de-ch/news/other/journalistenverb%c3%a4nde-kritisieren-z%c3%bcrcher-stadtpolizei
unknown
clean
https://www.sway.com/?WT.mc_id=MSN_site&utm_source=MSN&utm_medium=Topnav&utm_campaign=link;PowerPoin
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp&item=deferred_page%3a1&ignorejs=webcore%2fmodules%2fjsb
unknown
clean
http://www.youtube.com/
unknown
clean
http://ogp.me/ns#
unknown
clean
https://onedrive.live.com/?qt=mru;OneDrive-App
unknown
clean
https://www.skype.com/de
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-me
unknown
clean
https://www.skype.com/de/download-skype
unknown
clean
https://onedrive.live.com/?wt.mc_id=oo_msn_msnhomepage_header
unknown
clean
http://www.hotmail.msn.com/pii/ReadOutlookEmail/
unknown
clean
https://onedrive.live.com;OneDrive-App
unknown
clean
https://click.linksynergy.com/deeplink?id=xoqYgl4JDe8&mid=46130&u1=dech_mestripe_office&
unknown
clean
https://clkde.tradedoubler.com/click?p=295926&a=3064090&g=24886692
unknown
clean
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
unknown
clean
http://www.amazon.com/
unknown
clean
https://www.onenote.com/notebooks?WT.mc_id=MSN_OneNote_QuickNote&auth=1
unknown
clean
http://www.twitter.com/
unknown
clean
https://office.live.com/start/Excel.aspx?WT.mc_id=MSN_site;Sway
unknown
clean
https://policies.oath.com/us/en/oath/privacy/index.html
unknown
clean
https://cdn.cookielaw.org/vendorlist/googleData.json
unknown
clean
https://outlook.com/
unknown
clean
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBI57XIG&prvid=77%2
unknown
clean
https://www.stroeer.com/fileadmin/com/StroeerDSP_deviceStorage.json
unknown
clean
https://cdn.cookielaw.org/vendorlist/iabData.json
unknown
clean
https://www.msn.com/de-ch/homepage/api/pdp/updatepdpdata"
unknown
clean
https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us?"
unknown
clean
https://cdn.cookielaw.org/vendorlist/iab2Data.json
unknown
clean
https://onedrive.live.com/?qt=mru;Aktuelle
unknown
clean
https://cdn.flurry.com/adTemplates/templates/htmls/clips.html"
unknown
clean
https://www.msn.com/de-ch/?ocid=iehp
unknown
clean
https://sp.booking.com/index.html?aid=1589774&label=dech-prime-hp-shoppingstripe-nav
unknown
clean
https://www.ebay.ch/?mkcid=1&mkrid=5222-53480-19255-0&siteid=193&campid=5338626668&t
unknown
clean
https://www.msn.com/de-ch/news/other/gericht-sagt-es-war-mord-ehemann-im-meilemer-prozess-verurteilt
unknown
clean
https://www.msn.com/de-ch/homepage/api/modules/fetch"
unknown
clean
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
unknown
clean
http://www.nytimes.com/
unknown
clean
https://web.vortex.data.msn.com/collect/v1/t.gif?name=%27Ms.Webi.PageView%27&ver=%272.1%27&a
unknown
clean
https://www.stroeer.de/konvergenz-konzepte/daten-technologien/stroeer-ssp/datenschutz-ssp.html
unknown
clean
https://www.bidstack.com/privacy-policy/
unknown
clean
https://onedrive.live.com/about/en/download/
unknown
clean
http://popup.taboola.com/german
unknown
clean
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_mestripe_logo_d
unknown
clean
https://twitter.com/
unknown
clean
https://clkde.tradedoubler.com/click?p=245744&a=3064090&g=24903118&epi=ch-de
unknown
clean
https://www.msn.com/de-ch/news/other/eth-z%c3%bcrich-und-paul-scherrer-institut-entwickeln-quantenco
unknown
clean
https://outlook.live.com/calendar
unknown
clean
https://img.img-taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_311%2Cw_207%2Cc_fill%2Cg_faces:au
unknown
clean
https://www.msn.com/de-ch/news/other/polizei-verhaftet-12-personen-aus-der-z%c3%bcrcher-raser-szene/
unknown
clean
https://onedrive.live.com/#qt=mru
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/mit-benno-scherrer-erklimmt-erstmals-ein-gr%c3%bcn
unknown
clean
https://api.taboola.com/2.0/json/msn-ch-de-home/recommendations.notify-click?app.type=desktop&ap
unknown
clean
https://srtb.msn.com:443/notify/viewedg?rid=0c4227dba9014735a4f7bd767a957d7f&r=infopane&i=3&
unknown
clean
https://www.msn.com?form=MY01O4&OCID=MY01O4
unknown
clean
https://support.skype.com
unknown
clean
https://www.skyscanner.net/flights?associateid=API_B2B_19305_00001&vertical=custom&pageType=
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=722878611&size=306x271&https=1
unknown
clean
https://clk.tradedoubler.com/click?p=245744&a=3064090&g=21863656
unknown
clean
https://www.msn.com/de-ch/nachrichten/z%c3%bcrich/aus-theater-wird-ernst-weil-christian-jott-jenny-a
unknown
clean
http://www.wikipedia.com/
unknown
clean
https://contextual.media.net/medianet.php?cid=8CU157172&crid=858412214&size=306x271&http
unknown
clean
https://www.ricardo.ch/?utm_source=msn&utm_medium=affiliate&utm_campaign=msn_shop_de&utm
unknown
clean
http://www.live.com/
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
contextual.media.net
184.30.24.22
clean
tls13.taboola.map.fastly.net
151.101.1.44
clean
hblg.media.net
184.30.24.22
clean
lg3.media.net
184.30.24.22
clean
geolocation.onetrust.com
104.20.184.68
clean
edge.gycpi.b.yahoodns.net
87.248.118.22
clean
s.yimg.com
unknown
clean
web.vortex.data.msn.com
unknown
clean
www.msn.com
unknown
clean
srtb.msn.com
unknown
clean
img.img-taboola.com
unknown
clean
cvision.media.net
unknown
clean
There are 2 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.20.184.68
geolocation.onetrust.com
United States
clean
87.248.118.22
edge.gycpi.b.yahoodns.net
United Kingdom
clean
151.101.1.44
tls13.taboola.map.fastly.net
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{B9097646-AD07-11EB-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
AdminActive
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
NextUpdateDate
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
There are 81 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2A09D630000
unkown
page read and write
clean
7FF4F5D36000
unkown
page readonly
clean
28952410000
heap private
page read and write
clean
30A1000
unkown
page readonly
clean
2F44AFF0000
unkown
page read and write
clean
3186000
unkown
page readonly
clean
7FF5A21BA000
unkown
page readonly
clean
223DE000000
unkown
page readonly
clean
28952702000
unkown
page read and write
clean
7FF59BF09000
unkown
page readonly
clean
7FF52A7D2000
unkown
page readonly
clean
2A09D740000
unkown
page read and write
clean
7FF59BE95000
unkown
page readonly
clean
2551E743000
unkown
page read and write
clean
1ED28476000
unkown
page read and write
clean
7FF5621BF000
unkown
page readonly
clean
24092DB0000
heap private
page read and write
clean
F30000
heap default
page read and write
clean
7FF5620A7000
unkown
page readonly
clean
1CF5A213000
unkown
page read and write
clean
2551C4E6000
unkown
page read and write
clean
7FF5ACF1C000
unkown
page readonly
clean
7FF559711000
unkown
page readonly
clean
28952660000
unkown
page read and write
clean
93994FB000
unkown
page read and write
clean
7FF5D2C70000
unkown
page readonly
clean
43CDCFF000
unkown
page read and write
clean
7FF5A241C000
unkown
page readonly
clean
2551C4D6000
unkown
page read and write
clean
24093068000
unkown
page read and write
clean
7FF5D2F40000
unkown
page readonly
clean
1FCB5BF0000
unkown
page read and write
clean
2A09808A000
unkown
page read and write
clean
1E1CC740000
unkown
page readonly
clean
EE71177000
unkown
page read and write
clean
18756990000
unkown
page readonly
clean
7FF5A221F000
unkown
page readonly
clean
2A098200000
unkown
page readonly
clean
2551E340000
unkown
page readonly
clean
7FF501797000
unkown
page readonly
clean
1E1CBA00000
unkown
page read and write
clean
1ED28502000
unkown
page read and write
clean
2551E56F000
unkown
page read and write
clean
2A09D8B6000
unkown
page read and write
clean
28952550000
unkown
page readonly
clean
43CD1BB000
unkown
page read and write
clean
15F9108B000
unkown
page read and write
clean
7FF5C3D6E000
unkown
page readonly
clean
7FF5ACFA6000
unkown
page readonly
clean
7FF4F04DC000
unkown
page readonly
clean
7FF5A787C000
unkown
page readonly
clean
24092EF0000
unkown
page readonly
clean
43CD5FB000
unkown
page read and write
clean
16BB3867000
unkown
page read and write
clean
FEDA13F000
unkown
page read and write
clean
7FF5A4C4E000
unkown
page readonly
clean
28952668000
unkown
page read and write
clean
7FF5C0518000
unkown
page readonly
clean
210913E0000
unkown
page read and write
clean
2551C4C0000
unkown
page read and write
clean
24092FE0000
unkown
page read and write
clean
939977F000
unkown
page read and write
clean
980000
heap private
page read and write
clean
7FF4F049F000
unkown
page readonly
clean
7FF5C3D80000
unkown
page readonly
clean
2551C502000
unkown
page read and write
clean
7FF579217000
unkown
page readonly
clean
7FF50177C000
unkown
page readonly
clean
1ED28E00000
unkown
page readonly
clean
7FF52A432000
unkown
page readonly
clean
7FF578A6E000
unkown
page readonly
clean
24093200000
unkown
page readonly
clean
7FF5ACF28000
unkown
page readonly
clean
7FF52A4B1000
unkown
page readonly
clean
7FF5623A6000
unkown
page readonly
clean
9399A7E000
unkown
page read and write
clean
2F4491A0000
unkown
page readonly
clean
939957B000
unkown
page read and write
clean
C7AB47E000
unkown
page read and write
clean
2F44923F000
unkown
page read and write
clean
2895265C000
unkown
page read and write
clean
7FF5622E4000
unkown
page readonly
clean
7FF5622A5000
unkown
page readonly
clean
7FF5C3E0A000
unkown
page readonly
clean
2A098913000
unkown
page read and write
clean
16BB386A000
unkown
page read and write
clean
1FCB5D02000
unkown
page read and write
clean
9398DEF000
unkown
page read and write
clean
7FF4F01C7000
unkown
page readonly
clean
7FF50176C000
unkown
page readonly
clean
19DFCAA0000
unkown
page readonly
clean
7FF5ACCF5000
unkown
page readonly
clean
16BB3730000
unkown
page readonly
clean
2A09D8B1000
unkown
page read and write
clean
7FF5D2EB6000
unkown
page readonly
clean
7FF5017EE000
unkown
page readonly
clean
223DDE4F000
unkown
page read and write
clean
38B0000
unkown
page readonly
clean
15F91802000
unkown
page read and write
clean
7FF52A6D7000
unkown
page readonly
clean
7FF5C3F25000
unkown
page readonly
clean
16BB3870000
unkown
page read and write
clean
7FF5A4CB0000
unkown
page readonly
clean
255BF841000
unkown
page read and write
clean
7FF5623B6000
unkown
page readonly
clean
1E1CBA55000
unkown
page read and write
clean
2551E5DA000
unkown
page read and write
clean
7FF5687CD000
unkown
page readonly
clean
7FF5A1F8A000
unkown
page readonly
clean
7FF5016F2000
unkown
page readonly
clean
7FF501776000
unkown
page readonly
clean
2A09D714000
unkown
page write copy
clean
2A098802000
unkown
page read and write
clean
1E1CBA50000
unkown
page read and write
clean
7FF554BA6000
unkown
page readonly
clean
7FF5622F1000
unkown
page readonly
clean
7FF5597A1000
unkown
page readonly
clean
2A09D83F000
unkown
page read and write
clean
7FF5C40B1000
unkown
page readonly
clean
7FF5A22A3000
unkown
page readonly
clean
28952659000
unkown
page read and write
clean
309E000
unkown
page readonly
clean
35A0000
heap private
page read and write
clean
131E000
unkown
page read and write
clean
7FF5596B2000
unkown
page readonly
clean
2AB3C7B000
unkown
page read and write
clean
7FF52A7EA000
unkown
page readonly
clean
1BE000
unkown
page read and write
clean
7FF5ACF89000
unkown
page readonly
clean
7FF5A2499000
unkown
page readonly
clean
7FF50175D000
unkown
page readonly
clean
2F449100000
unkown
page write copy
clean
28952679000
unkown
page read and write
clean
1CF5A269000
unkown
page read and write
clean
7FF5D2F2C000
unkown
page readonly
clean
2A097FB0000
heap default
page read and write
clean
1D0000
unkown
page read and write
clean
7FF554B48000
unkown
page readonly
clean
19DFAFC0000
unkown
page readonly
clean
7FF579300000
unkown
page readonly
clean
7FF5A4C55000
unkown
page readonly
clean
7FF5C3FFF000
unkown
page readonly
clean
7FF4F04C6000
unkown
page readonly
clean
1CF5A224000
unkown
page read and write
clean
7FF578BF3000
unkown
page readonly
clean
16BB386C000
unkown
page read and write
clean
7FF5A23FD000
unkown
page readonly
clean
7FF5014C0000
unkown
page readonly
clean
2AB43FD000
unkown
page read and write
clean
2A0990F0000
unkown
page readonly
clean
7FF554BC7000
unkown
page readonly
clean
2A098B01000
unkown
page read and write
clean
7FF4F5C01000
unkown
page readonly
clean
7FF56218A000
unkown
page readonly
clean
3000000
unkown
page readonly
clean
2A09D8B6000
unkown
page read and write
clean
1FCB5BD0000
unkown
page readonly
clean
16BB386E000
unkown
page read and write
clean
7FF568807000
unkown
page readonly
clean
1CF5A25E000
unkown
page read and write
clean
7FF5A49D5000
unkown
page readonly
clean
90FC6F9000
unkown
page read and write
clean
7FF562247000
unkown
page readonly
clean
2FAA000
unkown
page readonly
clean
7FF5AD039000
unkown
page readonly
clean
1ED28A60000
unkown
page readonly
clean
28952631000
unkown
page read and write
clean
18754F80000
unkown
page read and write
clean
2A09D750000
unkown
page read and write
clean
16BB3813000
unkown
page read and write
clean
1FCB5B00000
unkown
page readonly
clean
7FF5014A7000
unkown
page readonly
clean
2F87000
unkown
page readonly
clean
3074000
unkown
page readonly
clean
2551E942000
unkown
page read and write
clean
21091400000
unkown
page read and write
clean
7FF5C3FDA000
unkown
page readonly
clean
7FF56216C000
unkown
page readonly
clean
2A09D770000
unkown
page read and write
clean
223DDE00000
unkown
page read and write
clean
7FF4EFD65000
unkown
page readonly
clean
7FF5A7909000
unkown
page readonly
clean
EE719FF000
unkown
page read and write
clean
19DFB06C000
unkown
page read and write
clean
2A09D862000
unkown
page read and write
clean
2F44AFF0000
unkown
page read and write
clean
7FF5A4C86000
unkown
page readonly
clean
7FF59BEA4000
unkown
page readonly
clean
2895266F000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
FEDA0BB000
unkown
page read and write
clean
2895267A000
unkown
page read and write
clean
7FF5C403C000
unkown
page readonly
clean
2A09D8AC000
unkown
page read and write
clean
7FF5C401D000
unkown
page readonly
clean
EE716FF000
unkown
page read and write
clean
2A098057000
unkown
page read and write
clean
7FF5D2E7A000
unkown
page readonly
clean
7FF5A23A6000
unkown
page readonly
clean
30AF000
unkown
page readonly
clean
2A09D800000
unkown
page read and write
clean
7FF4F5C07000
unkown
page readonly
clean
2F448FC0000
heap private
page read and write
clean
2551E5DA000
unkown
page read and write
clean
16BB3869000
unkown
page read and write
clean
7FF554B89000
unkown
page readonly
clean
210913D0000
unkown
page readonly
clean
30C2000
unkown
page readonly
clean
7FF59BC8F000
unkown
page readonly
clean
2A09D640000
unkown
page read and write
clean
7FF5C3BC3000
unkown
page readonly
clean
7FF5C3FB2000
unkown
page readonly
clean
2F44B14F000
unkown
page read and write
clean
2A09D480000
unkown
page read and write
clean
7FF5597A9000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
2551E900000
unkown
page read and write
clean
7FF559367000
unkown
page readonly
clean
2551E612000
unkown
page read and write
clean
7FF4F5B8E000
unkown
page readonly
clean
7FF52A7C2000
unkown
page readonly
clean
2551EA00000
unkown
page read and write
clean
7FF5D2F0D000
unkown
page readonly
clean
7B0000
heap private
page read and write
clean
7FF578A71000
unkown
page readonly
clean
7FF5C0143000
unkown
page readonly
clean
7FF5A78A4000
unkown
page readonly
clean
2895266D000
unkown
page read and write
clean
24092F00000
unkown
page readonly
clean
7FF50172E000
unkown
page readonly
clean
7FF52A860000
unkown
page readonly
clean
7FF59BE6D000
unkown
page readonly
clean
580000
unkown
page readonly
clean
2551E5B4000
unkown
page read and write
clean
2109146E000
unkown
page read and write
clean
7FF579302000
unkown
page readonly
clean
7FF5620A3000
unkown
page readonly
clean
2551F410000
unkown
page read and write
clean
2F44C010000
unkown
page read and write
clean
16BB3867000
unkown
page read and write
clean
7FF562317000
unkown
page readonly
clean
2F449284000
unkown
page read and write
clean
187550B0000
unkown
page readonly
clean
1E1CC202000
unkown
page read and write
clean
223DDD90000
unkown
page readonly
clean
2E19000
unkown
page readonly
clean
30D1000
unkown
page readonly
clean
7FF5C4021000
unkown
page readonly
clean
7FF5ACF17000
unkown
page readonly
clean
24093013000
unkown
page read and write
clean
7FF4F04F4000
unkown
page readonly
clean
7FF5C3FC6000
unkown
page readonly
clean
1E1CBA29000
unkown
page read and write
clean
2A097FF0000
unkown
page read and write
clean
19DFB029000
unkown
page read and write
clean
2A09D6E0000
unkown
page read and write
clean
1CF5A1B0000
unkown
page read and write
clean
7FF52A747000
unkown
page readonly
clean
19DFB06C000
unkown
page read and write
clean
1ED28471000
unkown
page read and write
clean
7FF5A4BEC000
unkown
page readonly
clean
7FF5A4C2A000
unkown
page readonly
clean
2551C48F000
unkown
page read and write
clean
1ED28600000
unkown
page readonly
clean
2A09809E000
unkown
page read and write
clean
7FF5ACCE7000
unkown
page readonly
clean
2A098102000
unkown
page read and write
clean
2551F000000
unkown
page read and write
clean
F80000
unkown
page readonly
clean
1777FE000
unkown
page read and write
clean
2A09D707000
unkown
page readonly
clean
223DE800000
unkown
page readonly
clean
7FF5A7901000
unkown
page readonly
clean
1CF5A25D000
unkown
page read and write
clean
7FF5ACFC5000
unkown
page readonly
clean
7FF5D2799000
unkown
page readonly
clean
2A098902000
unkown
page read and write
clean
7FF4F0466000
unkown
page readonly
clean
7FF4F5D64000
unkown
page readonly
clean
7FF5ACB75000
unkown
page readonly
clean
7FF5D2F9E000
unkown
page readonly
clean
1CF5A200000
unkown
page read and write
clean
2551E320000
unkown
page read and write
clean
255BF902000
unkown
page read and write
clean
7FF561F6D000
unkown
page readonly
clean
2A09D770000
unkown
page read and write
clean
7FF59BE00000
unkown
page readonly
clean
7FF501702000
unkown
page readonly
clean
1E1CBCD0000
unkown
page readonly
clean
7FF59B6B9000
unkown
page readonly
clean
2109144F000
unkown
page read and write
clean
2551E600000
unkown
page read and write
clean
7FF5ACF30000
unkown
page readonly
clean
7FF562178000
unkown
page readonly
clean
7FF5A7859000
unkown
page readonly
clean
7FF5D2E5A000
unkown
page readonly
clean
4F7807E000
unkown
page read and write
clean
7FF5AC7F1000
unkown
page readonly
clean
18755110000
unkown
page readonly
clean
16BB386E000
unkown
page read and write
clean
223DDF02000
unkown
page read and write
clean
7FF568762000
unkown
page readonly
clean
255BF802000
unkown
page read and write
clean
2F4491B0000
heap private
page read and write
clean
24093800000
unkown
page readonly
clean
2551E523000
unkown
page read and write
clean
7FF554B0A000
unkown
page readonly
clean
21091350000
heap private
page read and write
clean
480000
heap default
page read and write
clean
7FF559744000
unkown
page readonly
clean
2A09D4C0000
unkown
page readonly
clean
1CF5BBF0000
unkown
page readonly
clean
7FF5D2DB7000
unkown
page readonly
clean
30CD000
unkown
page readonly
clean
7FF5ACFBC000
unkown
page readonly
clean
15F91102000
unkown
page read and write
clean
2AB3EFE000
unkown
page read and write
clean
24093113000
unkown
page read and write
clean
939967A000
unkown
page read and write
clean
2A09D8B3000
unkown
page read and write
clean
7FF59B569000
unkown
page readonly
clean
9C000
unkown
page read and write
clean
2551E402000
unkown
page read and write
clean
7FF554BAC000
unkown
page readonly
clean
16BB3829000
unkown
page read and write
clean
7C0000
unkown
page readonly
clean
7FF5A4C22000
unkown
page readonly
clean
17787F000
unkown
page read and write
clean
16BB3840000
unkown
page read and write
clean
170000
unkown
page readonly
clean
2FD7000
unkown
page readonly
clean
7FF5D2C17000
unkown
page readonly
clean
7FF55442D000
unkown
page readonly
clean
7FF5A1F90000
unkown
page readonly
clean
24092E20000
unkown
page readonly
clean
7FF5A4983000
unkown
page readonly
clean
28952570000
unkown
page read and write
clean
28952480000
unkown
page readonly
clean
21091455000
unkown
page read and write
clean
7FF4F02AA000
unkown
page readonly
clean
7FF5ACFA1000
unkown
page readonly
clean
7FF559363000
unkown
page readonly
clean
7FF4F04D6000
unkown
page readonly
clean
7FF5A23BA000
unkown
page readonly
clean
7FF5C04B7000
unkown
page readonly
clean
7FF5596DE000
unkown
page readonly
clean
1FCB6280000
unkown
page read and write
clean
7FF5C3FF5000
unkown
page readonly
clean
2551E590000
unkown
page read and write
clean
2AB42FD000
unkown
page read and write
clean
43F000
unkown
page read and write
clean
2AB3DFF000
unkown
page read and write
clean
7FF5ACF48000
unkown
page readonly
clean
3125000
unkown
page readonly
clean
1E1CBC00000
unkown
page readonly
clean
1E1CBB13000
unkown
page read and write
clean
7FF558E04000
unkown
page readonly
clean
7FF5D2C13000
unkown
page readonly
clean
16BB3802000
unkown
page read and write
clean
19DFB100000
unkown
page read and write
clean
7FF578F41000
unkown
page readonly
clean
B42D97E000
unkown
page read and write
clean
2551E902000
unkown
page read and write
clean
2F449256000
unkown
page read and write
clean
16BB386A000
unkown
page read and write
clean
7FF5A4CB4000
unkown
page readonly
clean
7FF5548A3000
unkown
page readonly
clean
7FF579401000
unkown
page readonly
clean
2A09DA90000
unkown
page readonly
clean
17737B000
unkown
page read and write
clean
7FF5A788C000
unkown
page readonly
clean
EE718FE000
unkown
page read and write
clean
28952470000
heap default
page read and write
clean
16BB3A50000
unkown
page readonly
clean
2551C51F000
unkown
page read and write
clean
B42D13D000
unkown
page read and write
clean
28952800000
unkown
page readonly
clean
BAC000
unkown
page read and write
clean
28952627000
unkown
page read and write
clean
C7AB87F000
unkown
page read and write
clean
7FF5596A2000
unkown
page readonly
clean
30AF000
unkown
page readonly
clean
7FF5C4009000
unkown
page readonly
clean
15F90FF0000
unkown
page readonly
clean
7FF579386000
unkown
page readonly
clean
2551E2C0000
heap private
page read and write
clean
2551C3B0000
unkown
page readonly
clean
7FF5ACED1000
unkown
page readonly
clean
2A09D4F0000
unkown
page read and write
clean
7FF50171A000
unkown
page readonly
clean
7FF562313000
unkown
page readonly
clean
2F44B12A000
unkown
page read and write
clean
28952646000
unkown
page read and write
clean
C7AB575000
unkown
page read and write
clean
2A097FD0000
unkown
page readonly
clean
EE7147E000
unkown
page read and write
clean
2A09D770000
unkown
page readonly
clean
255C1210000
unkown
page read and write
clean
2AB407E000
unkown
page read and write
clean
939997D000
unkown
page read and write
clean
7FF5C0559000
unkown
page readonly
clean
255BF813000
unkown
page read and write
clean
16BB3869000
unkown
page read and write
clean
7FF5A49E0000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
7FF57938C000
unkown
page readonly
clean
2F44935C000
unkown
page read and write
clean
16BB5310000
unkown
page readonly
clean
1E1CBB02000
unkown
page read and write
clean
7FF5ACF5A000
unkown
page readonly
clean
2551C46B000
unkown
page read and write
clean
2F449150000
unkown
page readonly
clean
35BA000
heap default
page read and write
clean
43CDBFF000
unkown
page read and write
clean
2A0982D0000
unkown
page readonly
clean
7FF5C3F51000
unkown
page readonly
clean
7FF5D2F37000
unkown
page readonly
clean
2895267E000
unkown
page read and write
clean
16BB3900000
unkown
page read and write
clean
7FF52A4A2000
unkown
page readonly
clean
7FF579359000
unkown
page readonly
clean
F409EFE000
unkown
page read and write
clean
1CF5A24B000
unkown
page read and write
clean
FEDA7FC000
unkown
page read and write
clean
7FF5C0502000
unkown
page readonly
clean
E44C87E000
unkown
page read and write
clean
255BF829000
unkown
page read and write
clean
28952641000
unkown
page read and write
clean
2A09D610000
unkown
page read and write
clean
7FF5C3FB0000
unkown
page readonly
clean
7FF554A28000
unkown
page readonly
clean
2A099120000
unkown
page readonly
clean
7FF5A4D19000
unkown
page readonly
clean
16BB3867000
unkown
page read and write
clean
7FF578A6C000
unkown
page readonly
clean
18E85800000
unkown
page readonly
clean
7FF5687D1000
unkown
page readonly
clean
7FF554BD7000
unkown
page readonly
clean
7FF562342000
unkown
page readonly
clean
2A09D510000
unkown
page read and write
clean
15F910C8000
unkown
page read and write
clean
90FC5FE000
unkown
page read and write
clean
2551E320000
unkown
page read and write
clean
7FF5ACBCE000
unkown
page readonly
clean
2551E504000
unkown
page read and write
clean
7FF568800000
unkown
page readonly
clean
7FF59BF09000
unkown
page readonly
clean
7FF5C054F000
unkown
page readonly
clean
7FF554900000
unkown
page readonly
clean
7FF5A76F8000
unkown
page readonly
clean
7FF5C04EC000
unkown
page readonly
clean
7FF5ACE09000
unkown
page readonly
clean
7FF56237F000
unkown
page readonly
clean
7FF5684EC000
unkown
page readonly
clean
5A0E6FE000
unkown
page read and write
clean
15F91069000
unkown
page read and write
clean
15F912D0000
unkown
page readonly
clean
2551E320000
unkown
page readonly
clean
7FF568869000
unkown
page readonly
clean
1ED28465000
unkown
page read and write
clean
1E0000
heap default
page read and write
clean
2551C3F0000
unkown
page read and write
clean
18E85702000
unkown
page read and write
clean
7FF5A22AD000
unkown
page readonly
clean
EE71B7C000
unkown
page read and write
clean
C7AB777000
unkown
page read and write
clean
2551E743000
unkown
page read and write
clean
7FF562348000
unkown
page readonly
clean
1E1CB990000
unkown
page readonly
clean
2551F410000
unkown
page read and write
clean
7FF59BE8C000
unkown
page readonly
clean
F409C7E000
unkown
page read and write
clean
2551E2B0000
unkown
page readonly
clean
2551E573000
unkown
page read and write
clean
2FCE000
unkown
page readonly
clean
2A0980AB000
unkown
page read and write
clean
2F8000
unkown
page read and write
clean
19DFB06C000
unkown
page read and write
clean
7FF554AF1000
unkown
page readonly
clean
7FF5C04C1000
unkown
page readonly
clean
2FE0000
unkown
page readonly
clean
7FF5C3D27000
unkown
page readonly
clean
1ED28C02000
unkown
page read and write
clean
43CDDFE000
unkown
page read and write
clean
21091600000
unkown
page readonly
clean
7FF52A867000
unkown
page readonly
clean
7FF5A4C28000
unkown
page readonly
clean
21091483000
unkown
page read and write
clean
7FF5A23DF000
unkown
page readonly
clean
18E85602000
unkown
page read and write
clean
7FF579376000
unkown
page readonly
clean
7FF5A1FA0000
unkown
page readonly
clean
28952675000
unkown
page read and write
clean
28952684000
unkown
page read and write
clean
7FF4F048E000
unkown
page readonly
clean
D00000
heap private
page read and write
clean
F50000
unkown
page readonly
clean
1CF5A302000
unkown
page read and write
clean
7FF4F0220000
unkown
page readonly
clean
7FF5C3F2C000
unkown
page readonly
clean
7FF50157F000
unkown
page readonly
clean
1CF5A27D000
unkown
page read and write
clean
BAD64FF000
unkown
page read and write
clean
7FF5ACC08000
unkown
page readonly
clean
7FF559360000
unkown
page readonly
clean
2A098918000
unkown
page read and write
clean
31A8000
unkown
page readonly
clean
7FF5791D9000
unkown
page readonly
clean
7FF4F04F7000
unkown
page readonly
clean
7FF50155E000
unkown
page readonly
clean
939947B000
unkown
page read and write
clean
15F910D0000
unkown
page read and write
clean
7FF5A4987000
unkown
page readonly
clean
2551C4E3000
unkown
page read and write
clean
2A09802A000
unkown
page read and write
clean
1E1CBA3C000
unkown
page read and write
clean
2A09D84C000
unkown
page read and write
clean
7FF52A7CD000
unkown
page readonly
clean
7FF5623D0000
unkown
page readonly
clean
EBC000
unkown
page read and write
clean
2551C51D000
unkown
page read and write
clean
3100000
unkown
page readonly
clean
7FF5ACF46000
unkown
page readonly
clean
7FF5C03DA000
unkown
page readonly
clean
21091E00000
unkown
page readonly
clean
4F77DFB000
unkown
page read and write
clean
28952560000
unkown
page readonly
clean
7FF5A2288000
unkown
page readonly
clean
7FF5ACC46000
unkown
page readonly
clean
7FF5790D0000
unkown
page readonly
clean
F409D75000
unkown
page read and write
clean
2551E541000
unkown
page read and write
clean
7FF56230C000
unkown
page readonly
clean
2A09D885000
unkown
page read and write
clean
7FF5A70BA000
unkown
page readonly
clean
2F449190000
unkown
page read and write
clean
7FF5AC82B000
unkown
page readonly
clean
7FF554A47000
unkown
page readonly
clean
DB000
unkown
page read and write
clean
2A09D889000
unkown
page read and write
clean
1CF5A24E000
unkown
page read and write
clean
7FF5623A1000
unkown
page readonly
clean
7FF5A4CB7000
unkown
page readonly
clean
31A8000
unkown
page readonly
clean
2551E5A9000
unkown
page read and write
clean
1CF5A1F0000
unkown
page read and write
clean
7FF5A2416000
unkown
page readonly
clean
1CF5C180000
unkown
page write copy
clean
7FF55952F000
unkown
page readonly
clean
93996FA000
unkown
page read and write
clean
6BAE0000
unkown image
page readonly
clean
18756A60000
heap private
page read and write
clean
18E85920000
unkown
page readonly
clean
2F449200000
unkown
page read and write
clean
19DFB102000
unkown
page read and write
clean
2551C4BD000
unkown
page read and write
clean
2A09D717000
unkown
page write copy
clean
2A09D730000
unkown
page read and write
clean
1ED28400000
unkown
page read and write
clean
1E1CBB00000
unkown
page read and write
clean
210913B0000
heap default
page read and write
clean
3113000
unkown
page readonly
clean
7FF578A80000
unkown
page readonly
clean
1FCB6290000
unkown
page read and write
clean
2551F010000
unkown
page read and write
clean
1ED28424000
unkown
page read and write
clean
7FF5A7909000
unkown
page readonly
clean
7FF5D2F44000
unkown
page readonly
clean
7FF4F0462000
unkown
page readonly
clean
2109142A000
unkown
page read and write
clean
7FF4F040A000
unkown
page readonly
clean
30D6000
unkown
page readonly
clean
7FF5C4036000
unkown
page readonly
clean
7FF5791CA000
unkown
page readonly
clean
7FF5A2406000
unkown
page readonly
clean
60AB27D000
unkown
page read and write
clean
22F000
unkown
page read and write
clean
2895263A000
unkown
page read and write
clean
19DFAE90000
heap default
page read and write
clean
7FF57918F000
unkown
page readonly
clean
7FF5C4050000
unkown
page readonly
clean
7FF5793FE000
unkown
page readonly
clean
E28CCFF000
unkown
page read and write
clean
2F4492AD000
unkown
page read and write
clean
7FF52A83C000
unkown
page readonly
clean
7FF5ACCEE000
unkown
page readonly
clean
2A09D61E000
unkown
page read and write
clean
93999FC000
unkown
page read and write
clean
7FF5C3DEC000
unkown
page readonly
clean
2551C4BB000
unkown
page read and write
clean
18E855B0000
heap default
page read and write
clean
223DDE4B000
unkown
page read and write
clean
5DB000
heap default
page read and write
clean
1080000
unkown
page read and write
clean
18E85653000
unkown
page read and write
clean
7FF5D2DB3000
unkown
page readonly
clean
2551EA02000
unkown
page read and write
clean
7FF5ACFD4000
unkown
page readonly
clean
7FF52A5F4000
unkown
page readonly
clean
7FF56878A000
unkown
page readonly
clean
2895267B000
unkown
page read and write
clean
7FF56847C000
unkown
page readonly
clean
7FF562330000
unkown
page readonly
clean
93997FA000
unkown
page read and write
clean
2AB41FF000
unkown
page read and write
clean
2A09D500000
unkown
page read and write
clean
7FF5623D4000
unkown
page readonly
clean
7FF5016CA000
unkown
page readonly
clean
1FCB6280000
unkown
page read and write
clean
7FF5ACDBF000
unkown
page readonly
clean
15F91000000
unkown
page read and write
clean
E28C74B000
unkown
page read and write
clean
2F44B14B000
unkown
page read and write
clean
18E855C0000
unkown
page readonly
clean
3135000
unkown
page readonly
clean
2551E56C000
unkown
page read and write
clean
7FF5687EC000
unkown
page readonly
clean
7FF5ACD78000
unkown
page readonly
clean
7FF5D2C04000
unkown
page readonly
clean
EFB000
unkown
page read and write
clean
2551E743000
unkown
page read and write
clean
1CF5A400000
unkown
page readonly
clean
90FC4FA000
unkown
page read and write
clean
1FCB5C02000
unkown
page read and write
clean
7FF52A42E000
unkown
page readonly
clean
2F43000
unkown
page readonly
clean
7FF56870A000
unkown
page readonly
clean
2EAE000
unkown
page readonly
clean
2A09D6E4000
unkown
page readonly
clean
7FF568776000
unkown
page readonly
clean
7FF559747000
unkown
page readonly
clean
7FF5C3E20000
unkown
page readonly
clean
7FF52A755000
unkown
page readonly
clean
7FF5ACD6C000
unkown
page readonly
clean
7FF5C3E3F000
unkown
page readonly
clean
7FF5A4974000
unkown
page readonly
clean
7FF5623BC000
unkown
page readonly
clean
15F910BF000
unkown
page read and write
clean
223DDDA0000
unkown
page read and write
clean
48A000
heap default
page read and write
clean
7FF501708000
unkown
page readonly
clean
3015000
unkown
page readonly
clean
16BB3902000
unkown
page read and write
clean
4F77F7E000
unkown
page read and write
clean
2551F210000
unkown
page read and write
clean
7FF5ACF13000
unkown
page readonly
clean
1CF5A313000
unkown
page read and write
clean
3060000
unkown
page readonly
clean
16BB3A00000
unkown
page write copy
clean
7FF4F0468000
unkown
page readonly
clean
7FF59BEFE000
unkown
page readonly
clean
38A0000
heap private
page read and write
clean
7FF5C0595000
unkown
page readonly
clean
16BB3870000
unkown
page read and write
clean
19DFB200000
unkown
page readonly
clean
2551E56C000
unkown
page read and write
clean
7FF5C3EA8000
unkown
page readonly
clean
7FF554C2E000
unkown
page readonly
clean
E44C77B000
unkown
page read and write
clean
7FF5017F9000
unkown
page readonly
clean
7FF52A79A000
unkown
page readonly
clean
18754FDB000
heap default
page read and write
clean
24093100000
unkown
page read and write
clean
7FF5A226A000
unkown
page readonly
clean
7FF5C3F6A000
unkown
page readonly
clean
18755125000
heap private
page read and write
clean
255C1310000
unkown
page readonly
clean
FEDA57F000
unkown
page read and write
clean
7FF4F5D2D000
unkown
page readonly
clean
7FF568714000
unkown
page readonly
clean
7FF5D2EBA000
unkown
page readonly
clean
7FF5A2499000
unkown
page readonly
clean
7FF5684E3000
unkown
page readonly
clean
28952642000
unkown
page read and write
clean
3180000
unkown
page readonly
clean
7FF5A4C69000
unkown
page readonly
clean
38079AE000
unkown
page read and write
clean
1162000
unkown
page read and write
clean
460000
unkown
page readonly
clean
19DFB114000
unkown
page read and write
clean
2895264D000
unkown
page read and write
clean
7FF5A4C26000
unkown
page readonly
clean
2FBB000
unkown
page readonly
clean
2A09D6E0000
unkown
page write copy
clean
2551E310000
unkown
page readonly
clean
7FF52A6E0000
unkown
page readonly
clean
2FC6000
unkown
page readonly
clean
223DDE3C000
unkown
page read and write
clean
7FF501706000
unkown
page readonly
clean
2551C429000
unkown
page read and write
clean
2551F110000
unkown
page read and write
clean
2551C360000
unkown
page write copy
clean
1CF5A000000
heap private
page read and write
clean
18E870C0000
unkown
page read and write
clean
2A099100000
unkown
page readonly
clean
7FF5D2EB2000
unkown
page readonly
clean
7FF56215B000
unkown
page readonly
clean
7FF5A7812000
unkown
page readonly
clean
1CF5A790000
unkown
page readonly
clean
15F91D40000
unkown
page readonly
clean
18755120000
heap private
page read and write
clean
6BAE0000
unkown image
page readonly
clean
7FF4F0411000
unkown
page readonly
clean
1E1CB980000
unkown
page readonly
clean
1CF5A070000
unkown
page readonly
clean
7FF4F5D05000
unkown
page readonly
clean
7FF5ACF32000
unkown
page readonly
clean
2A098000000
unkown
page read and write
clean
7FF568778000
unkown
page readonly
clean
43CDAFE000
unkown
page read and write
clean
7FF578F45000
unkown
page readonly
clean
7FF5A2390000
unkown
page readonly
clean
C7AB1BE000
unkown
page read and write
clean
2A09D770000
unkown
page read and write
clean
7FF5A78A0000
unkown
page readonly
clean
7FF56880D000
unkown
page readonly
clean
7FF5ACEE7000
unkown
page readonly
clean
FEDA1BF000
unkown
page read and write
clean
7FF5D2EEF000
unkown
page readonly
clean
30CA000
unkown
page readonly
clean
16BB386C000
unkown
page read and write
clean
2A09D7B0000
unkown
page readonly
clean
7FF5C04A7000
unkown
page readonly
clean
5A0E97D000
unkown
page read and write
clean
7FF4F0348000
unkown
page readonly
clean
7FF5A2491000
unkown
page readonly
clean
7FF4F5CFE000
unkown
page readonly
clean
7FF59BE2A000
unkown
page readonly
clean
7FF55966B000
unkown
page readonly
clean
2551C4BE000
unkown
page read and write
clean
2F81000
unkown
page readonly
clean
7FF52A7B8000
unkown
page readonly
clean
7FF554C31000
unkown
page readonly
clean
60AAEFC000
unkown
page read and write
clean
223DDCA0000
heap default
page read and write
clean
7FF5A2392000
unkown
page readonly
clean
1ED282B0000
heap private
page read and write
clean
7FF5D2F26000
unkown
page readonly
clean
2F44B14F000
unkown
page read and write
clean
2895265F000
unkown
page read and write
clean
7FF52A668000
unkown
page readonly
clean
7FF568812000
unkown
page readonly
clean
2551EC00000
unkown
page readonly
clean
7FF59BE59000
unkown
page readonly
clean
2551C4BC000
unkown
page read and write
clean
7FF5ACFD7000
unkown
page readonly
clean
3120000
unkown
page readonly
clean
7FF5016F0000
unkown
page readonly
clean
7FF4F0215000
unkown
page readonly
clean
BAD69FE000
unkown
page read and write
clean
177779000
unkown
page read and write
clean
7FF579409000
unkown
page readonly
clean
7FF579155000
unkown
page readonly
clean
7FF5D2D98000
unkown
page readonly
clean
2FF3000
unkown
page readonly
clean
7FF562332000
unkown
page readonly
clean
7FF578FAD000
unkown
page readonly
clean
2551E882000
unkown
page read and write
clean
28952661000
unkown
page read and write
clean
2551F510000
unkown
page read and write
clean
223DDF00000
unkown
page read and write
clean
7FF579345000
unkown
page readonly
clean
2A09D82E000
unkown
page read and write
clean
E28CDFE000
unkown
page read and write
clean
7FF562346000
unkown
page readonly
clean
30D6000
unkown
page readonly
clean
7FF5C3DDB000
unkown
page readonly
clean
7FF5C0545000
unkown
page readonly
clean
7FF56235A000
unkown
page readonly
clean
2A09D618000
unkown
page read and write
clean
19DFB06D000
unkown
page read and write
clean
7FF56885E000
unkown
page readonly
clean
18756B20000
heap private
page read and write
clean
7FF5A762A000
unkown
page readonly
clean
7FF5017F1000
unkown
page readonly
clean
7FF52A8C9000
unkown
page readonly
clean
2A099110000
unkown
page readonly
clean
5A0E67B000
unkown
page read and write
clean
7FF4F5CD6000
unkown
page readonly
clean
7FF559374000
unkown
page readonly
clean
2F44B14D000
unkown
page read and write
clean
3125000
unkown
page readonly
clean
15F91029000
unkown
page read and write
clean
7FF59B570000
unkown
page readonly
clean
7FF5A768F000
unkown
page readonly
clean
7FF5C3F67000
unkown
page readonly
clean
2F7E000
unkown
page readonly
clean
2551C513000
unkown
page read and write
clean
EE71D7F000
unkown
page read and write
clean
7FF5596E5000
unkown
page readonly
clean
7FF5622EA000
unkown
page readonly
clean
3005000
unkown
page readonly
clean
7FF5620BC000
unkown
page readonly
clean
7FF4F5C3C000
unkown
page readonly
clean
16BB3870000
unkown
page read and write
clean
16BB3C50000
unkown
page readonly
clean
7FF5C3E1E000
unkown
page readonly
clean
2FAD000
unkown
page readonly
clean
2A097FE0000
unkown
page read and write
clean
7FF57936D000
unkown
page readonly
clean
7FF4F0559000
unkown
page readonly
clean
15F90FE0000
unkown
page readonly
clean
255BF800000
unkown
page read and write
clean
7FF562375000
unkown
page readonly
clean
7FF4F5BB8000
unkown
page readonly
clean
7FF5792F4000
unkown
page readonly
clean
2551E500000
unkown
page read and write
clean
7FF4F04F0000
unkown
page readonly
clean
18754E90000
unkown
page readonly
clean
2F44B100000
unkown
page read and write
clean
7FF5687B9000
unkown
page readonly
clean
1E1CBA6F000
unkown
page read and write
clean
2A098F00000
unkown
page read and write
clean
1ED28320000
unkown
page readonly
clean
7FF5A1C49000
unkown
page readonly
clean
18E85640000
unkown
page read and write
clean
2A098078000
unkown
page read and write
clean
2551E53F000
unkown
page read and write
clean
16BB3870000
unkown
page read and write
clean
7FF5A4C3A000
unkown
page readonly
clean
16BB386C000
unkown
page read and write
clean
BEB000
unkown
page read and write
clean
28952677000
unkown
page read and write
clean
1E1CBA7E000
unkown
page read and write
clean
2F449213000
unkown
page read and write
clean
2F4492C5000
unkown
page read and write
clean
1E1CB970000
heap default
page read and write
clean
7FF5C0516000
unkown
page readonly
clean
223DDE8E000
unkown
page read and write
clean
7FF5D2EF9000
unkown
page readonly
clean
7FF5C0141000
unkown
page readonly
clean
2551E5DA000
unkown
page read and write
clean
7FF562328000
unkown
page readonly
clean
1CF5A160000
unkown
page read and write
clean
2895262E000
unkown
page read and write
clean
301A000
unkown
page readonly
clean
7FF5A23A2000
unkown
page readonly
clean
7FF5C402C000
unkown
page readonly
clean
7FF5A4A80000
unkown
page readonly
clean
18E85550000
heap private
page read and write
clean
1FCB5A90000
heap private
page read and write
clean
30CD000
unkown
page readonly
clean
7FF4EFD69000
unkown
page readonly
clean
EE7137A000
unkown
page read and write
clean
7FF4F5D4C000
unkown
page readonly
clean
7FF562228000
unkown
page readonly
clean
30A7000
unkown
page readonly
clean
2A09D720000
unkown
page read and write
clean
1FCB5C58000
unkown
page read and write
clean
7FF5C3741000
unkown
page readonly
clean
7FF5A23A8000
unkown
page readonly
clean
7FF4F0407000
unkown
page readonly
clean
7FF5C04F8000
unkown
page readonly
clean
2895262A000
unkown
page read and write
clean
2A098091000
unkown
page read and write
clean
7FF52A8C9000
unkown
page readonly
clean
7FF4F01B4000
unkown
page readonly
clean
1FCB6402000
unkown
page read and write
clean
7FF52A805000
unkown
page readonly
clean
7FF579133000
unkown
page readonly
clean
C93000
unkown
page read and write
clean
7FF56805D000
unkown
page readonly
clean
2F4492DB000
unkown
page read and write
clean
7FF4F5D60000
unkown
page readonly
clean
7FF5621A0000
unkown
page readonly
clean
7FF4F5D19000
unkown
page readonly
clean
7FF562389000
unkown
page readonly
clean
7FF568861000
unkown
page readonly
clean
2551C2F0000
heap private
page read and write
clean
2551E6A4000
unkown
page read and write
clean
1ED2845A000
unkown
page read and write
clean
2F44AFF0000
unkown
page read and write
clean
2F449302000
unkown
page read and write
clean
7FF52A836000
unkown
page readonly
clean
17767E000
unkown
page read and write
clean
5A0E879000
unkown
page read and write
clean
2A09DA00000
unkown
page readonly
clean
2551F310000
unkown
page read and write
clean
15F91730000
unkown
page read and write
clean
2A09D760000
unkown
page read and write
clean
7FF52A819000
unkown
page readonly
clean
BAD67FC000
unkown
page read and write
clean
7FF5687DC000
unkown
page readonly
clean
2551E842000
unkown
page read and write
clean
7FF562100000
unkown
page readonly
clean
7FF5C3D14000
unkown
page readonly
clean
2551C4DC000
unkown
page read and write
clean
2AB417D000
unkown
page read and write
clean
30DB000
unkown
page readonly
clean
28952656000
unkown
page read and write
clean
3807D79000
unkown
page read and write
clean
7FF52A864000
unkown
page readonly
clean
160000
unkown
page readonly
clean
2F44ACA0000
unkown
page readonly
clean
7FF56236E000
unkown
page readonly
clean
2551C46A000
unkown
page read and write
clean
7FF5A225E000
unkown
page readonly
clean
93991FF000
unkown
page read and write
clean
15F91A00000
unkown
page readonly
clean
7FF4F5CD2000
unkown
page readonly
clean
18755100000
heap private
page read and write
clean
7FF5C053E000
unkown
page readonly
clean
B42D4F5000
unkown
page read and write
clean
7FF5AD039000
unkown
page readonly
clean
2F44B102000
unkown
page read and write
clean
140000
unkown
page read and write
clean
1ED28402000
unkown
page read and write
clean
7FF554AEA000
unkown
page readonly
clean
7FF5D2F47000
unkown
page readonly
clean
939917A000
unkown
page read and write
clean
1070000
unkown
page readonly
clean
7FF56230A000
unkown
page readonly
clean
7FF59BE4F000
unkown
page readonly
clean
2F449020000
heap default
page read and write
clean
7FF5ACC3D000
unkown
page readonly
clean
7FF52A68B000
unkown
page readonly
clean
2551C55F000
unkown
page read and write
clean
2F44ABA0000
unkown
page read and write
clean
16BB3800000
unkown
page read and write
clean
7CF000
unkown
page read and write
clean
7FF5D2CFA000
unkown
page readonly
clean
7FF579409000
unkown
page readonly
clean
7FF4F01C3000
unkown
page readonly
clean
EE7157A000
unkown
page read and write
clean
E44C97E000
unkown
page read and write
clean
2A09D704000
unkown
page readonly
clean
90FC1FE000
unkown
page read and write
clean
7FF5ACDF1000
unkown
page readonly
clean
2551E552000
unkown
page read and write
clean
7FF59BE16000
unkown
page readonly
clean
16BB3869000
unkown
page read and write
clean
7FF579170000
unkown
page readonly
clean
2551E549000
unkown
page read and write
clean
2F449400000
unkown
page readonly
clean
2A09D811000
unkown
page read and write
clean
7FF56239D000
unkown
page readonly
clean
B42D67F000
unkown
page read and write
clean
255BF6C0000
heap private
page read and write
clean
7FF4F5D46000
unkown
page readonly
clean
7FF5A753B000
unkown
page readonly
clean
7FF5C3F8A000
unkown
page readonly
clean
1ED28470000
unkown
page read and write
clean
5A0E8FF000
unkown
page read and write
clean
2A098800000
unkown
page read and write
clean
7FF5596B8000
unkown
page readonly
clean
210913C0000
unkown
page readonly
clean
7FF562243000
unkown
page readonly
clean
1E1CB9A0000
unkown
page read and write
clean
3194000
unkown
page readonly
clean
18754FAB000
heap default
page read and write
clean
7FF5A4A6A000
unkown
page readonly
clean
7FF5687D6000
unkown
page readonly
clean
7FF5AC875000
unkown
page readonly
clean
30DB000
unkown
page readonly
clean
7FF59BC2A000
unkown
page readonly
clean
7FF5ACF75000
unkown
page readonly
clean
1E1CBA02000
unkown
page read and write
clean
BAD637D000
unkown
page read and write
clean
1CF5A1F0000
unkown
page read and write
clean
2551E982000
unkown
page read and write
clean
7FF5548F5000
unkown
page readonly
clean
16BB386E000
unkown
page read and write
clean
19DFB06D000
unkown
page read and write
clean
2A099130000
unkown
page readonly
clean
43CD8FF000
unkown
page read and write
clean
7FF4F0551000
unkown
page readonly
clean
2551E506000
unkown
page read and write
clean
18755130000
unkown
page readonly
clean
7FF5623AC000
unkown
page readonly
clean
7FF554B6E000
unkown
page readonly
clean
30E6000
unkown
page readonly
clean
4F7837D000
unkown
page read and write
clean
7FF52A846000
unkown
page readonly
clean
7FF5A76CE000
unkown
page readonly
clean
4F780FB000
unkown
page read and write
clean
F409E7B000
unkown
page read and write
clean
2551C4BC000
unkown
page read and write
clean
7FF5C3FEE000
unkown
page readonly
clean
7FF5A73FA000
unkown
page readonly
clean
2F4492E2000
unkown
page read and write
clean
7FF5AC829000
unkown
page readonly
clean
7FF5596F9000
unkown
page readonly
clean
2A0980FA000
unkown
page read and write
clean
2F44931A000
unkown
page read and write
clean
2A097FC0000
unkown
page readonly
clean
B42D87E000
unkown
page read and write
clean
2FB6000
unkown
page readonly
clean
7FF4F5DC1000
unkown
page readonly
clean
16BB5210000
unkown
page read and write
clean
93993FA000
unkown
page read and write
clean
7FF4F5D0F000
unkown
page readonly
clean
7FF5ACD9E000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
93992FA000
unkown
page read and write
clean
7FF56877A000
unkown
page readonly
clean
7FF5A4C5F000
unkown
page readonly
clean
7FF5A7818000
unkown
page readonly
clean
10A0000
unkown
page readonly
clean
7FF4F5DBE000
unkown
page readonly
clean
2F4492FC000
unkown
page read and write
clean
7FF501785000
unkown
page readonly
clean
7FF554BBC000
unkown
page readonly
clean
E28C7CE000
unkown
page read and write
clean
3066000
unkown
page readonly
clean
7FF52A62E000
unkown
page readonly
clean
18E871C0000
unkown
page readonly
clean
7FF578A77000
unkown
page readonly
clean
2A09D7F0000
unkown
page readonly
clean
7FF5A2434000
unkown
page readonly
clean
7FF5ACE00000
unkown
page readonly
clean
18E85629000
unkown
page read and write
clean
30F7000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
2551C413000
unkown
page read and write
clean
7FF5C05A4000
unkown
page readonly
clean
4F7857D000
unkown
page read and write
clean
1CF5A286000
unkown
page read and write
clean
21091413000
unkown
page read and write
clean
3807E7F000
unkown
page read and write
clean
7FF579395000
unkown
page readonly
clean
255BFA50000
unkown
page readonly
clean
30CA000
unkown
page readonly
clean
F6A000
heap default
page read and write
clean
7FF554B4A000
unkown
page readonly
clean
43CD7FF000
unkown
page read and write
clean
7FF5622AC000
unkown
page readonly
clean
7FF56242E000
unkown
page readonly
clean
18E85600000
unkown
page read and write
clean
2F44AFF0000
unkown
page read and write
clean
AD000
unkown
page read and write
clean
1776FA000
unkown
page read and write
clean
7FF5793A4000
unkown
page readonly
clean
7FF52A7FE000
unkown
page readonly
clean
7FF5ACFAC000
unkown
page readonly
clean
7FF5A2430000
unkown
page readonly
clean
7FF561ABD000
unkown
page readonly
clean
318B000
unkown
page readonly
clean
7FF5C3F9C000
unkown
page readonly
clean
7FF4F5DC9000
unkown
page readonly
clean
FEDA679000
unkown
page read and write
clean
7FF5A230C000
unkown
page readonly
clean
7FF5A7400000
unkown
page readonly
clean
7FF55979E000
unkown
page readonly
clean
7FF52A855000
unkown
page readonly
clean
7FF5C3DF8000
unkown
page readonly
clean
2A09806E000
unkown
page read and write
clean
7FF5793A2000
unkown
page readonly
clean
7FF4F5B9A000
unkown
page readonly
clean
6BAE0000
unkown image
page readonly
clean
15F91900000
unkown
page read and write
clean
35B0000
heap default
page read and write
clean
F40A1FF000
unkown
page read and write
clean
223DDCB0000
unkown
page readonly
clean
28952640000
unkown
page read and write
clean
2551E569000
unkown
page read and write
clean
28952658000
unkown
page read and write
clean
2551F010000
unkown
page read and write
clean
30A7000
unkown
page readonly
clean
7FF5792F8000
unkown
page readonly
clean
7FF554BD0000
unkown
page readonly
clean
2A098958000
unkown
page read and write
clean
2A098013000
unkown
page read and write
clean
3102000
unkown
page readonly
clean
7FF5623D7000
unkown
page readonly
clean
7FF5623C5000
unkown
page readonly
clean
1ED28452000
unkown
page read and write
clean
1E1CBA8A000
unkown
page read and write
clean
EE71A7E000
unkown
page read and write
clean
2551C4BD000
unkown
page read and write
clean
7FF52A8C0000
unkown
page readonly
clean
16BB386E000
unkown
page read and write
clean
7FF5596EF000
unkown
page readonly
clean
2551C4A5000
unkown
page read and write
clean
223DE602000
unkown
page read and write
clean
7FF59BF01000
unkown
page readonly
clean
1FCB5C20000
unkown
page read and write
clean
2F44B200000
unkown
page readonly
clean
2551C350000
heap default
page read and write
clean
2551C4BC000
unkown
page read and write
clean
7FF5620EE000
unkown
page readonly
clean
7FF5C058C000
unkown
page readonly
clean
18754F60000
unkown
page read and write
clean
7FF4F0367000
unkown
page readonly
clean
1CF5A300000
unkown
page read and write
clean
21091500000
unkown
page read and write
clean
7FF501794000
unkown
page readonly
clean
7FF5C023E000
unkown
page readonly
clean
2F8F000
unkown
page readonly
clean
7FF5C0586000
unkown
page readonly
clean
7FF5A7802000
unkown
page readonly
clean
7FF554B5A000
unkown
page readonly
clean
2F449030000
unkown
page readonly
clean
2551C4BD000
unkown
page read and write
clean
2F44B002000
unkown
page read and write
clean
7FF501790000
unkown
page readonly
clean
7FF5D2E57000
unkown
page readonly
clean
3120000
unkown
page readonly
clean
7FF4F5AEA000
unkown
page readonly
clean
7FF5ACBB0000
unkown
page readonly
clean
7FF5A7845000
unkown
page readonly
clean
7FF559716000
unkown
page readonly
clean
28952651000
unkown
page read and write
clean
1E1CBA4B000
unkown
page read and write
clean
2FE2000
unkown
page readonly
clean
7FF578C45000
unkown
page readonly
clean
B42D1BE000
unkown
page read and write
clean
19DFB06D000
unkown
page read and write
clean
7FF56231C000
unkown
page readonly
clean
7FF5A78FE000
unkown
page readonly
clean
5A0E77F000
unkown
page read and write
clean
2F449229000
unkown
page read and write
clean
7FF4F04BD000
unkown
page readonly
clean
2A09D634000
unkown
page read and write
clean
7FF4F04E7000
unkown
page readonly
clean
EE7167B000
unkown
page read and write
clean
7FF5A783E000
unkown
page readonly
clean
7FF568760000
unkown
page readonly
clean
21091502000
unkown
page read and write
clean
60AB3FC000
unkown
page read and write
clean
7FF578A73000
unkown
page readonly
clean
7FF57934F000
unkown
page readonly
clean
7FF5ACEAC000
unkown
page readonly
clean
7FF5C0576000
unkown
page readonly
clean
7FF5017F9000
unkown
page readonly
clean
7FF52A831000
unkown
page readonly
clean
7FF56805B000
unkown
page readonly
clean
60AB2FE000
unkown
page read and write
clean
1FCB5C29000
unkown
page read and write
clean
18756CCF000
heap private
page read and write
clean
7FF5791A8000
unkown
page readonly
clean
450000
heap default
page read and write
clean
7FF554BB6000
unkown
page readonly
clean
7FF4F5CC0000
unkown
page readonly
clean
2A099000000
unkown
page read and write
clean
7FF5A2425000
unkown
page readonly
clean
24093028000
unkown
page read and write
clean
7FF5ACBC7000
unkown
page readonly
clean
93990FE000
unkown
page read and write
clean
7FF59BEA7000
unkown
page readonly
clean
3102000
unkown
page readonly
clean
2551C4D9000
unkown
page read and write
clean
F40A0FE000
unkown
page read and write
clean
2551C4BD000
unkown
page read and write
clean
2F44B220000
unkown
page readonly
clean
7FF5C40B9000
unkown
page readonly
clean
1FCB5E00000
unkown
page readonly
clean
7FF5D2EDE000
unkown
page readonly
clean
2551F310000
unkown
page read and write
clean
313A000
unkown
page readonly
clean
7FF5A23D5000
unkown
page readonly
clean
7FF5013C8000
unkown
page readonly
clean
1CF5A140000
unkown
page readonly
clean
7FF5C3F8C000
unkown
page readonly
clean
2F449313000
unkown
page read and write
clean
2F43000
unkown
page readonly
clean
309E000
unkown
page readonly
clean
2551F110000
unkown
page read and write
clean
19DFB03F000
unkown
page read and write
clean
16BB386C000
unkown
page read and write
clean
7FF5A2437000
unkown
page readonly
clean
7FF5A7886000
unkown
page readonly
clean
7FF4F5CEA000
unkown
page readonly
clean
223DDD80000
unkown
page readonly
clean
7FF57906D000
unkown
page readonly
clean
2F4492CB000
unkown
page read and write
clean
223DDC40000
heap private
page read and write
clean
7FF56879E000
unkown
page readonly
clean
7FF5793A7000
unkown
page readonly
clean
7FF554A43000
unkown
page readonly
clean
7FF5AD02E000
unkown
page readonly
clean
BAD5F7B000
unkown
page read and write
clean
24093602000
unkown
page read and write
clean
7FF55498A000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
21092140000
unkown
page readonly
clean
7FF59BE3E000
unkown
page readonly
clean
223DDF13000
unkown
page read and write
clean
7FF5AC6DA000
unkown
page readonly
clean
18E85613000
unkown
page read and write
clean
2551E5CC000
unkown
page read and write
clean
7FF5ACD5B000
unkown
page readonly
clean
24093002000
unkown
page read and write
clean
7FF5A786D000
unkown
page readonly
clean
2551E800000
unkown
page read and write
clean
1FCB6190000
unkown
page readonly
clean
28952674000
unkown
page read and write
clean
7FF5014B5000
unkown
page readonly
clean
4F7867E000
unkown
page read and write
clean
7FF5687E6000
unkown
page readonly
clean
18754E30000
unkown
page readonly
clean
7FF55971C000
unkown
page readonly
clean
210916D0000
unkown
page readonly
clean
EE7187E000
unkown
page read and write
clean
24093051000
unkown
page read and write
clean
7FF5790C5000
unkown
page readonly
clean
1ED28310000
heap default
page read and write
clean
7FF5A4BCA000
unkown
page readonly
clean
2551C473000
unkown
page read and write
clean
7FF4F0559000
unkown
page readonly
clean
7FF5C3EC7000
unkown
page readonly
clean
7FF554429000
unkown
page readonly
clean
15F91013000
unkown
page read and write
clean
187550A0000
unkown
page readonly
clean
2A099480000
unkown
page read and write
clean
24093000000
unkown
page read and write
clean
2551E684000
unkown
page read and write
clean
2109143C000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
15F91760000
unkown
page readonly
clean
2A098815000
unkown
page read and write
clean
EE70D0B000
unkown
page read and write
clean
7FF5C01D8000
unkown
page readonly
clean
43CD6FB000
unkown
page read and write
clean
3180000
unkown
page readonly
clean
2F44927B000
unkown
page read and write
clean
223DDE70000
unkown
page read and write
clean
28952630000
unkown
page read and write
clean
24093102000
unkown
page read and write
clean
2A099140000
unkown
page readonly
clean
2A098113000
unkown
page read and write
clean
7FF5C4026000
unkown
page readonly
clean
2551E513000
unkown
page read and write
clean
7FF59BEA0000
unkown
page readonly
clean
255BF720000
heap default
page read and write
clean
7FF5596A0000
unkown
page readonly
clean
2551C53E000
unkown
page read and write
clean
7FF5ACEA5000
unkown
page readonly
clean
1CF5BBA0000
unkown
page read and write
clean
7FF5016E8000
unkown
page readonly
clean
7FF5A4D0E000
unkown
page readonly
clean
28952655000
unkown
page read and write
clean
43CDEFF000
unkown
page read and write
clean
7FF52A80F000
unkown
page readonly
clean
2551C51E000
unkown
page read and write
clean
1CF5BE40000
unkown
page readonly
clean
7FF4F5D67000
unkown
page readonly
clean
18754FA0000
heap default
page read and write
clean
15F91660000
unkown
page readonly
clean
7FF5A4D11000
unkown
page readonly
clean
2551E53E000
unkown
page read and write
clean
7FF4F5CC2000
unkown
page readonly
clean
2FC0000
unkown
page readonly
clean
7FF4F58D0000
unkown
page readonly
clean
7FF5A7816000
unkown
page readonly
clean
3290000
unkown
page readonly
clean
7FF554BD4000
unkown
page readonly
clean
1E1CBA8D000
unkown
page read and write
clean
1C0000
unkown
page readonly
clean
318B000
unkown
page readonly
clean
7FF5622DA000
unkown
page readonly
clean
7FF4F5CD8000
unkown
page readonly
clean
28952613000
unkown
page read and write
clean
7FF5A4BC7000
unkown
page readonly
clean
2551C4BE000
unkown
page read and write
clean
1CF5A24D000
unkown
page read and write
clean
C8F000
unkown
page read and write
clean
19DFB06C000
unkown
page read and write
clean
7FF4F5D55000
unkown
page readonly
clean
5D0000
heap default
page read and write
clean
1CF5A180000
unkown
page read and write
clean
7FF554B9D000
unkown
page readonly
clean
7FF5C4057000
unkown
page readonly
clean
2551C4BE000
unkown
page read and write
clean
1CF5A060000
heap default
page read and write
clean
7FF5A4C9C000
unkown
page readonly
clean
7FF5C04BA000
unkown
page readonly
clean
7FF5C0370000
unkown
page readonly
clean
2A098076000
unkown
page read and write
clean
1ED28A90000
unkown
page readonly
clean
7FF5AD030000
unkown
page readonly
clean
2A09DA70000
unkown
page readonly
clean
7FF52A7AC000
unkown
page readonly
clean
7FF5A7410000
unkown
page readonly
clean
16BB3914000
unkown
page read and write
clean
1CF5A25B000
unkown
page read and write
clean
2895265A000
unkown
page read and write
clean
7FF5A7876000
unkown
page readonly
clean
7FF52A49F000
unkown
page readonly
clean
30A1000
unkown
page readonly
clean
2551C560000
unkown
page read and write
clean
2A09D821000
unkown
page read and write
clean
9398D6B000
unkown
page read and write
clean
7FF5687F5000
unkown
page readonly
clean
2551C400000
unkown
page read and write
clean
7FF4F046A000
unkown
page readonly
clean
7FF5C40AE000
unkown
page readonly
clean
F409FF7000
unkown
page read and write
clean
30F7000
unkown
page readonly
clean
223DDE2A000
unkown
page read and write
clean
E28CEFE000
unkown
page read and write
clean
2551E56D000
unkown
page read and write
clean
2551E56D000
unkown
page read and write
clean
255BFC50000
unkown
page readonly
clean
7FF554AE7000
unkown
page readonly
clean
2551C56F000
unkown
page read and write
clean
1090000
heap private
page read and write
clean
FEDA77B000
unkown
page read and write
clean
7FF5ACF9D000
unkown
page readonly
clean
7FF559677000
unkown
page readonly
clean
7FF5C05A7000
unkown
page readonly
clean
8CF000
unkown
page read and write
clean
1CF5A23E000
unkown
page read and write
clean
2A098959000
unkown
page read and write
clean
16BB3720000
heap default
page read and write
clean
7FF5622D1000
unkown
page readonly
clean
7FF5C3BED000
unkown
page readonly
clean
2551C4C1000
unkown
page read and write
clean
1E1CC400000
unkown
page readonly
clean
223DDE13000
unkown
page read and write
clean
7FF5A4BD1000
unkown
page readonly
clean
C7AB67B000
unkown
page read and write
clean
EE7127C000
unkown
page read and write
clean
7FF554B0C000
unkown
page readonly
clean
7FF5A78A7000
unkown
page readonly
clean
7FF554B75000
unkown
page readonly
clean
15F91200000
unkown
page readonly
clean
1ED28990000
unkown
page readonly
clean
7FF5A7747000
unkown
page readonly
clean
2551E528000
unkown
page read and write
clean
E44C47C000
unkown
page read and write
clean
2A098900000
unkown
page read and write
clean
15F91113000
unkown
page read and write
clean
16BB386A000
unkown
page read and write
clean
7FF4F0495000
unkown
page readonly
clean
7FF50173F000
unkown
page readonly
clean
19DFB000000
unkown
page read and write
clean
F90000
unkown
page readonly
clean
EE717FF000
unkown
page read and write
clean
1773FE000
unkown
page read and write
clean
2A09809C000
unkown
page read and write
clean
7FF4F0363000
unkown
page readonly
clean
7FF5ACFB6000
unkown
page readonly
clean
7FF52A73C000
unkown
page readonly
clean
F4099EE000
unkown
page read and write
clean
2F4492FF000
unkown
page read and write
clean
7FF4F58C0000
unkown
page readonly
clean
FEDA47A000
unkown
page read and write
clean
7FF5ACC4C000
unkown
page readonly
clean
2551C6D0000
unkown
page readonly
clean
F40996B000
unkown
page read and write
clean
7FF5A22D1000
unkown
page readonly
clean
7FF5C0512000
unkown
page readonly
clean
30E6000
unkown
page readonly
clean
255BFA00000
unkown
page write copy
clean
7FF52A516000
unkown
page readonly
clean
7FF5C0609000
unkown
page readonly
clean
24092FD0000
unkown
page readonly
clean
2A098918000
unkown
page read and write
clean
E28CA7E000
unkown
page read and write
clean
2A0987E1000
unkown
page read and write
clean
28952657000
unkown
page read and write
clean
7FF5A22D7000
unkown
page readonly
clean
7FF568804000
unkown
page readonly
clean
F60000
unkown
page read and write
clean
2F44B18F000
unkown
page read and write
clean
1CF5BC02000
unkown
page read and write
clean
7FF52A6EC000
unkown
page readonly
clean
21091C02000
unkown
page read and write
clean
7FF5AC6E4000
unkown
page readonly
clean
7FF4F047A000
unkown
page readonly
clean
7FF5A4D19000
unkown
page readonly
clean
FEDA6FB000
unkown
page read and write
clean
7FF5ACF6E000
unkown
page readonly
clean
3088000
unkown
page readonly
clean
2551C4E0000
unkown
page read and write
clean
2551C490000
unkown
page read and write
clean
3460000
heap default
page read and write
clean
7FF5C0337000
unkown
page readonly
clean
30C2000
unkown
page readonly
clean
E44CA7E000
unkown
page read and write
clean
939907A000
unkown
page read and write
clean
1060000
unkown
page readonly
clean
7FF579295000
unkown
page readonly
clean
28952600000
unkown
page read and write
clean
16BB3867000
unkown
page read and write
clean
2FD2000
unkown
page readonly
clean
12DE000
unkown
page read and write
clean
7FF561F43000
unkown
page readonly
clean
2551DF70000
unkown
page readonly
clean
2F44AFE0000
unkown
page readonly
clean
7FF4F042A000
unkown
page readonly
clean
7FF5A4BEA000
unkown
page readonly
clean
28952662000
unkown
page read and write
clean
223DDE4D000
unkown
page read and write
clean
2A097F50000
heap private
page read and write
clean
93998FB000
unkown
page read and write
clean
7FF5C3F93000
unkown
page readonly
clean
2409303E000
unkown
page read and write
clean
187550F0000
unkown
page readonly
clean
BAD65FE000
unkown
page read and write
clean
7FF5C373D000
unkown
page readonly
clean
7FF5C0145000
unkown
page readonly
clean
19DFB013000
unkown
page read and write
clean
E50000
unkown
page readonly
clean
31A8000
unkown
page readonly
clean
7FF5C3F71000
unkown
page readonly
clean
2FC000
unkown
page read and write
clean
7FF501598000
unkown
page readonly
clean
15F91067000
unkown
page read and write
clean
56E000
unkown
page read and write
clean
2A098F10000
unkown
page read and write
clean
7FF5ACF7F000
unkown
page readonly
clean
2A09803F000
unkown
page read and write
clean
7FF5D2FA9000
unkown
page readonly
clean
7FF5A4B08000
unkown
page readonly
clean
7FF5015B8000
unkown
page readonly
clean
939937A000
unkown
page read and write
clean
7FF4F5BD3000
unkown
page readonly
clean
2A09D654000
unkown
page read and write
clean
2F44B230000
unkown
page readonly
clean
7FF52A4FE000
unkown
page readonly
clean
3135000
unkown
page readonly
clean
7FF5C0609000
unkown
page readonly
clean
19DFC9A0000
unkown
page read and write
clean
2551C4BC000
unkown
page read and write
clean
7FF562094000
unkown
page readonly
clean
2A098660000
unkown
page readonly
clean
7FF5C3FC8000
unkown
page readonly
clean
380792B000
unkown
page read and write
clean
F20000
unkown
page read and write
clean
7FF5C3D3C000
unkown
page readonly
clean
30D1000
unkown
page readonly
clean
7FF5C4045000
unkown
page readonly
clean
7FF5C056D000
unkown
page readonly
clean
2551C498000
unkown
page read and write
clean
2551C4BD000
unkown
page read and write
clean
7FF56219E000
unkown
page readonly
clean
FEDA87C000
unkown
page read and write
clean
4F779AB000
unkown
page read and write
clean
9399279000
unkown
page read and write
clean
2A0990E0000
unkown
page readonly
clean
C7AB13C000
unkown
page read and write
clean
7FF5622E7000
unkown
page readonly
clean
7FF5D2ECA000
unkown
page readonly
clean
2FCE000
unkown
page readonly
clean
7FF59BE7C000
unkown
page readonly
clean
2551E53D000
unkown
page read and write
clean
2551C48C000
unkown
page read and write
clean
19DFB06B000
unkown
page read and write
clean
FEDA4FA000
unkown
page read and write
clean
18756BD0000
heap private
page read and write
clean
7FF5A76DA000
unkown
page readonly
clean
30E4000
unkown
page readonly
clean
7FF5C3D75000
unkown
page readonly
clean
7FF5A240C000
unkown
page readonly
clean
7FF5ACC4F000
unkown
page readonly
clean
3186000
unkown
page readonly
clean
7FF554B42000
unkown
page readonly
clean
2E23000
unkown
page readonly
clean
7FF5D2D10000
unkown
page readonly
clean
7FF554C39000
unkown
page readonly
clean
7FF5ACFD0000
unkown
page readonly
clean
7FF5D2EE5000
unkown
page readonly
clean
15F91770000
unkown
page write copy
clean
7FF5ACEFB000
unkown
page readonly
clean
2A09808C000
unkown
page read and write
clean
FEDA8FE000
unkown
page read and write
clean
1FCB5AF0000
heap default
page read and write
clean
4F7827C000
unkown
page read and write
clean
7FF55970D000
unkown
page readonly
clean
7FF5C0600000
unkown
page readonly
clean
93995FC000
unkown
page read and write
clean
1E1CBB08000
unkown
page read and write
clean
7FF5ACCBC000
unkown
page readonly
clean
1CF5A22A000
unkown
page read and write
clean
7FF55972C000
unkown
page readonly
clean
1E1CB910000
heap private
page read and write
clean
306B000
unkown
page readonly
clean
7FF562431000
unkown
page readonly
clean
223DDE8A000
unkown
page read and write
clean
2A098F20000
unkown
page read and write
clean
7FF5A4C7D000
unkown
page readonly
clean
15F9103E000
unkown
page read and write
clean
2551C4D7000
unkown
page read and write
clean
7FF5D279D000
unkown
page readonly
clean
7FF57937C000
unkown
page readonly
clean
7FF52A84C000
unkown
page readonly
clean
2A09D610000
unkown
page read and write
clean
7FF5ACEB7000
unkown
page readonly
clean
3088000
unkown
page readonly
clean
3100000
unkown
page readonly
clean
1E1CBA4D000
unkown
page read and write
clean
2A09D855000
unkown
page read and write
clean
19DFB06C000
unkown
page read and write
clean
BAD68FC000
unkown
page read and write
clean
7FF5ACDF8000
unkown
page readonly
clean
7FF501685000
unkown
page readonly
clean
F60000
heap default
page read and write
clean
7FF562439000
unkown
page readonly
clean
7FF5C0571000
unkown
page readonly
clean
B42D0BB000
unkown
page read and write
clean
28952648000
unkown
page read and write
clean
2895266A000
unkown
page read and write
clean
1FCB5C13000
unkown
page read and write
clean
2551E507000
unkown
page read and write
clean
7FF59B567000
unkown
page readonly
clean
2551E580000
unkown
page read and write
clean
187554C0000
unkown
page readonly
clean
7FF5C3EC3000
unkown
page readonly
clean
15F90FD0000
heap default
page read and write
clean
31A8000
unkown
page readonly
clean
16BB3857000
unkown
page read and write
clean
7FF5A771D000
unkown
page readonly
clean
22B000
unkown
page read and write
clean
2FC4000
unkown
page readonly
clean
7FF568869000
unkown
page readonly
clean
2A09D650000
unkown
page read and write
clean
24093079000
unkown
page read and write
clean
2A09D7C0000
unkown
page readonly
clean
7FF579318000
unkown
page readonly
clean
2551F210000
unkown
page read and write
clean
7FF4F04A9000
unkown
page readonly
clean
7FF5ACF07000
unkown
page readonly
clean
7FF5C40B9000
unkown
page readonly
clean
7FF5C4054000
unkown
page readonly
clean
19DFB06B000
unkown
page read and write
clean
FEDA5FC000
unkown
page read and write
clean
7FF5C3F97000
unkown
page readonly
clean
7FF5620F5000
unkown
page readonly
clean
2551E802000
unkown
page read and write
clean
7FF500E6A000
unkown
page readonly
clean
7FF5ACEF1000
unkown
page readonly
clean
31A0000
unkown
page readonly
clean
2F4492A3000
unkown
page read and write
clean
7FF5ACDDE000
unkown
page readonly
clean
7FF501333000
unkown
page readonly
clean
2551DE70000
unkown
page read and write
clean
21091508000
unkown
page read and write
clean
2551C52F000
unkown
page read and write
clean
7FF554894000
unkown
page readonly
clean
19DFAF70000
unkown
page write copy
clean
7FF5D2C65000
unkown
page readonly
clean
1CF5A1F0000
unkown
page read and write
clean
1ED28513000
unkown
page read and write
clean
7FF56870E000
unkown
page readonly
clean
7FF5C05FE000
unkown
page readonly
clean
3807C7E000
unkown
page read and write
clean
30E4000
unkown
page readonly
clean
2A09D631000
unkown
page read and write
clean
7FF5A439D000
unkown
page readonly
clean
2551E5D5000
unkown
page read and write
clean
7FF5A782A000
unkown
page readonly
clean
24093064000
unkown
page read and write
clean
2F4492D1000
unkown
page read and write
clean
255BF854000
unkown
page read and write
clean
7FF4F5BDD000
unkown
page readonly
clean
24092E10000
heap default
page read and write
clean
21091513000
unkown
page read and write
clean
2F44B11A000
unkown
page read and write
clean
BAD66FF000
unkown
page read and write
clean
2A098074000
unkown
page read and write
clean
2551E5BA000
unkown
page read and write
clean
2A09D88E000
unkown
page read and write
clean
7FF5A7800000
unkown
page readonly
clean
7FF559735000
unkown
page readonly
clean
15F90F70000
heap private
page read and write
clean
7FF579312000
unkown
page readonly
clean
2A09D770000
unkown
page read and write
clean
7FF501735000
unkown
page readonly
clean
7FF4F042C000
unkown
page readonly
clean
7FF5ACD00000
unkown
page readonly
clean
2A098F03000
unkown
page read and write
clean
2551C4BD000
unkown
page read and write
clean
B42D5FB000
unkown
page read and write
clean
7FF554B7F000
unkown
page readonly
clean
2551F410000
unkown
page read and write
clean
1ED28A70000
unkown
page read and write
clean
3113000
unkown
page readonly
clean
7FF4F5DC9000
unkown
page readonly
clean
19DFAE30000
heap private
page read and write
clean
2551E700000
unkown
page read and write
clean
7FF4F5B4F000
unkown
page readonly
clean
7FF5C3FC2000
unkown
page readonly
clean
1CF5A318000
unkown
page read and write
clean
5A0E7F9000
unkown
page read and write
clean
7FF5ACB73000
unkown
page readonly
clean
7FF5623C7000
unkown
page readonly
clean
7FF5A23E9000
unkown
page readonly
clean
7FF5A4CA7000
unkown
page readonly
clean
1ED28413000
unkown
page read and write
clean
15F910E2000
unkown
page read and write
clean
2551E653000
unkown
page read and write
clean
3194000
unkown
page readonly
clean
2F39000
unkown
page readonly
clean
E28CBFE000
unkown
page read and write
clean
7FF5620E7000
unkown
page readonly
clean
255BF730000
unkown
page readonly
clean
1FCB5C00000
unkown
page read and write
clean
7FF5A4B23000
unkown
page readonly
clean
7FF52A82D000
unkown
page readonly
clean
7FF52A7C0000
unkown
page readonly
clean
7FF59BE86000
unkown
page readonly
clean
223DDF08000
unkown
page read and write
clean
3807DFE000
unkown
page read and write
clean
5AE000
unkown
page read and write
clean
7FF4F02C0000
unkown
page readonly
clean
7FF52A8BE000
unkown
page readonly
clean
7FF5014AE000
unkown
page readonly
clean
7FF5C3D23000
unkown
page readonly
clean
7FF59BE76000
unkown
page readonly
clean
7FF5ACDEC000
unkown
page readonly
clean
2551E320000
unkown
page read and write
clean
2F39000
unkown
page readonly
clean
939987D000
unkown
page read and write
clean
1CF5A150000
unkown
page readonly
clean
7FF59BE45000
unkown
page readonly
clean
187568D0000
unkown
page readonly
clean
31A0000
unkown
page readonly
clean
28952E02000
unkown
page read and write
clean
7FF5C3D67000
unkown
page readonly
clean
7FF4F04CC000
unkown
page readonly
clean
2A098088000
unkown
page read and write
clean
2551C51B000
unkown
page read and write
clean
90FC67C000
unkown
page read and write
clean
7FF4F5D3C000
unkown
page readonly
clean
7FF5A7895000
unkown
page readonly
clean
60AB37E000
unkown
page read and write
clean
43CD47F000
unkown
page read and write
clean
7FF501766000
unkown
page readonly
clean
7FF5A784F000
unkown
page readonly
clean
16BB3874000
unkown
page read and write
clean
2551E5D8000
unkown
page read and write
clean
16BB36C0000
heap private
page read and write
clean
30F2000
unkown
page readonly
clean
B42D777000
unkown
page read and write
clean
4F781FC000
unkown
page read and write
clean
7FF559726000
unkown
page readonly
clean
18E858D0000
unkown
page write copy
clean
7FF5A23CE000
unkown
page readonly
clean
2551C440000
unkown
page read and write
clean
7FF5D2F16000
unkown
page readonly
clean
7FF4F054E000
unkown
page readonly
clean
7FF5C3FA8000
unkown
page readonly
clean
7FF4F58BA000
unkown
page readonly
clean
16BB3869000
unkown
page read and write
clean
7FF5C3F5A000
unkown
page readonly
clean
7FF579316000
unkown
page readonly
clean
223DE460000
unkown
page readonly
clean
7FF57933E000
unkown
page readonly
clean
49E0000
heap private
page read and write
clean
7FF5D2EB8000
unkown
page readonly
clean
7FF5015C9000
unkown
page readonly
clean
7FF5A4B27000
unkown
page readonly
clean
2551C600000
unkown
page readonly
clean
7FF5D2E61000
unkown
page readonly
clean
90FC17B000
unkown
page read and write
clean
2A09D640000
unkown
page read and write
clean
7FF562439000
unkown
page readonly
clean
EE7177E000
unkown
page read and write
clean
7FF52A64F000
unkown
page readonly
clean
30F2000
unkown
page readonly
clean
313A000
unkown
page readonly
clean
7FF5A248E000
unkown
page readonly
clean
1AB000
unkown
page read and write
clean
2551C4C5000
unkown
page read and write
clean
7FF52A7D6000
unkown
page readonly
clean
7FF5A4C8C000
unkown
page readonly
clean
2551C46F000
unkown
page read and write
clean
7FF501749000
unkown
page readonly
clean
2F44B18F000
unkown
page read and write
clean
7FF5A7741000
unkown
page readonly
clean
7FF5C0500000
unkown
page readonly
clean
43CD9FD000
unkown
page read and write
clean
2AB3F7E000
unkown
page read and write
clean
7FF5687A5000
unkown
page readonly
clean
7FF59BE18000
unkown
page readonly
clean
7FF5C4047000
unkown
page readonly
clean
7FF5D2FA9000
unkown
page readonly
clean
7FF5597A9000
unkown
page readonly
clean
7FF5D2FA1000
unkown
page readonly
clean
19DFAEA0000
unkown
page readonly
clean
4F7847E000
unkown
page read and write
clean
7FF5ACB71000
unkown
page readonly
clean
7FF5A43A1000
unkown
page readonly
clean
7FF5A7713000
unkown
page readonly
clean
2A09D8A9000
unkown
page read and write
clean
1CF5BBE0000
unkown
page readonly
clean
2551C453000
unkown
page read and write
clean
7FF5ACF42000
unkown
page readonly
clean
2551C4BE000
unkown
page read and write
clean
7FF5A4C96000
unkown
page readonly
clean
2551C4F7000
unkown
page read and write
clean
7FF554B46000
unkown
page readonly
clean
7FF554C39000
unkown
page readonly
clean
3807CFA000
unkown
page read and write
clean
3080000
unkown
page readonly
clean
15F91070000
unkown
page read and write
clean
1FCB5C3D000
unkown
page read and write
clean
2895263D000
unkown
page read and write
clean
1166000
unkown
page read and write
clean
7FF5A777C000
unkown
page readonly
clean
1ED283F0000
unkown
page readonly
clean
19DFB002000
unkown
page read and write
clean
1FCB6280000
unkown
page read and write
clean
7FF5548A7000
unkown
page readonly
clean
2551C4DA000
unkown
page read and write
clean
1FCB5BE0000
unkown
page readonly
clean
90FC57A000
unkown
page read and write
clean
7FF5D2F1C000
unkown
page readonly
clean
C7AB97F000
unkown
page read and write
clean
7FF5C057C000
unkown
page readonly
clean
7FF5C3F64000
unkown
page readonly
clean
7FF5549A0000
unkown
page readonly
clean
7FF5593C5000
unkown
page readonly
clean
90FC47E000
unkown
page read and write
clean
7FF52A7D8000
unkown
page readonly
clean
7FF5D2E7C000
unkown
page readonly
clean
2551F110000
unkown
page read and write
clean
1ED2843F000
unkown
page read and write
clean
19DFB056000
unkown
page read and write
clean
7FF5016DC000
unkown
page readonly
clean
1E1CBA13000
unkown
page read and write
clean
There are 1702 hidden memdumps, click here to show them.