Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
SecuriteInfo.com.FileRepMalware.10630.9616.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Program Files (x86)\PasswordCrackerTools\is-KF9QV.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\PasswordCracker\PasswordCracker.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-OQNEE.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Program Files (x86)\3DSexGames\3DSexGames.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\Best Game Deals On Amazon\Best Game Deals On Amazon.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Best Game Deals On Amazon\is-QFCDU.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Best Video Games\Best Video Games.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Best Video Games\is-T9V35.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Burger Shop 2 Full Version\Burger Shop Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Burger Shop 2 Full Version\is-MBE5V.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\DamnVid Full Version\DamnVid Video Downloader.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\DamnVid Full Version\DamnVid.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\DamnVid Full Version\is-E23IJ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Easy Way To Make Money On The Internet\Easy Way To Make Money On The Internet.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Easy Way To Make Money On The Internet\is-6NRG8.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\3D GayVilla Gay XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\3D GoGo 2 XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Chathouse 3D Roulette XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Erotic 3D Sex Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Fetish 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Hardcore3D Sex Simulation RPG XXX Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Hentai 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Hentai Park 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Lesbian 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\Sex Villa XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-30UUN.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-3UA87.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-4VGCO.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-58SFL.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-6OVJT.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-KK0RR.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-KV9PB.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-LRCBG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-OT4H3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Erotic 3D Sex Games Full Version\is-SKRRN.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Easy Way To Make Money On The Internet.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A Apple Watch.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A Beyonce Pulse Perfume.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A iPad Now.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get Super Free Bingo.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a $500 Pre-Paid Visa Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Cinco De Mayo Prepaid Visa Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Nintendo Wii & W.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Pizza Gift Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an NBA Jersey.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an XBOX ONE.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an iPhone 6 Plus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\MyPoints - Get Things For Free - Freebies - Sweepstakes
- Giveaways.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Win Millions Of Dollar - Free Lotto Ticket.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-6DD3A.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-70OBE.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-762GB.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-7GSK4.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-7Q9KJ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-AT6SN.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-BI5U5.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-DAMFG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-I3MJ6.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-IB1MM.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-J5EBV.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-LJLBJ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-N6DE4.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-QK6S0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Avira Antivirus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Fix Clean Repair PC.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Full Version Apps And Game Download Free.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\GTA V Hacks Free Alternative Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Game of Thrones Ascent - MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Get Super Free Bingo.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Ghostbusters Full Game.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Jet Bingo Game Special 20$ Free Bonus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\King Of Towers MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\McAfee Antivirus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Media Player Update Chrome.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Media Player Update.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\MineCraft Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\MyBackupPC - FREE - Dont Lose Your Digital Life.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\PDF Converter Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\SexGangsters - Adult MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Super Free Bingo - FREE BINGO MONEY - Kopie.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Super Free Slot Games.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Super Mario Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Tetris Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Video Converter Full Vesion.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\Warframe - Action MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-0ISDJ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-1HUMN.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-3GSMC.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-7AHV8.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-7G8O1.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-8J89I.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-9Q95B.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-9UH4R.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-AVL0V.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-C7ROQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-EK6LE.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-HF2QQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-J3I34.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-KA82B.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-M3DHL.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-MNNG1.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-NKAJ4.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-OIMNS.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-PQTS1.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-TAVD8.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-V0R57.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION APPS AND GAMES\is-VK7PK.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\3D GayVilla Gay XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\3D GoGo 2 XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Chathouse 3D Roulette XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Erotic 3D Sex Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Fetish 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Hardcore3D Sex Simulation RPG XXX Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Hentai 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Hentai Park 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Hot DateFinder Software.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Lesbian 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Live Adult Webcams.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Russian Lady Finder.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Sex Roulette.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\Sex Villa XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-1C95Q.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-2BOAG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-9FA17.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-CQHVG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-DO0E0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-EUA86.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-JPDM5.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-ML8E0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-QN0K1.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-RIEA0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-SIJ37.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-ST1OM.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-TK85B.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FULL VERSION XXX GAMES\is-VU9KT.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FacebookChat Full Version\Facebook Chat Tool Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\FacebookChat Full Version\FacebookChat.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\FacebookChat Full Version\is-LRLL3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Gino Player Full Version\GinoPlayer Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Gino Player Full Version\GinoPlayer.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\Gino Player Full Version\is-Q8VJF.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\GotClip Full Version\GotClip Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\GotClip Full Version\is-I7N62.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Hot Date Finder Software\Hot DateFinder Software.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Hot Date Finder Software\is-SFB81.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Luxor5 Full Version\Luxor 5 Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Luxor5 Full Version\is-L8OMR.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\PC Games Collection\PC Games Collection.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\PC Games Collection\is-VIIJC.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\PSNCardCodeGenerator\PSNCardCodeGenerator.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\PasswordCrackerTools\Password Cracker Tools.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Russian Lady Finder\Russian Lady Finder.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Russian Lady Finder\is-3CSV3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Slingo Quest Full Version\Slingo Quest Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Slingo Quest Full Version\is-NHBD3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\SoundCloud Downloader Full Version\SoundCloud Downloader.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\SoundCloud Downloader Full Version\SoundCloudDownloader.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\SoundCloud Downloader Full Version\is-T6AG0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\The Lost Cases of Sherlock Holmes 2 Full Version\The Lost Cases of Sherlock Holmes 2 Full Version.url
(copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\The Lost Cases of Sherlock Holmes 2 Full Version\is-H5P5V.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\The Treasures of Montezuma 3 Full Version\The Treasures of Montezuma 3 Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\The Treasures of Montezuma 3 Full Version\is-CHG77.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\TopGamesDownloads\Top Games Free Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\TopGamesDownloads\is-UA8FO.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Turbo Pizza Full Version\Turbo Pizza Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Turbo Pizza Full Version\is-3BGRA.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Turbo Sub Full Version\Turbo Sub Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Turbo Sub Full Version\is-3KR3C.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\TwitterHackerTool\TwitterHacker.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\Virtual Families Full Version\Virtual Families Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Virtual Families Full Version\is-TB4AV.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Virtual Villagers Full Version\Virtual Villagers Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Virtual Villagers Full Version\is-F308O.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\MuviWorld Online Video Streaming.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\WATCH TV SERIES ONLINE.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\Watch High Quality movies without any limits!.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\is-FIBQU.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\is-GR8TQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WATCH FULL HQ MOVIES AND SERIES\is-O1KRQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WallpaperManager Full Version\Wallpaper Manager Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WallpaperManager Full Version\WallpaperManager.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\Program Files (x86)\WallpaperManager Full Version\is-06HI2.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WatchTVSeriesOnline\WATCH TV SERIES ONLINE.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\WatchTVSeriesOnline\is-0H33U.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\XVID Codec\XVID-Codec.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\XVID Codec\is-H2OP5.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Youtube Downloader Full Version\Youtube Downloader Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Youtube Downloader Full Version\is-SBKPG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Program Files (x86)\Zombi_EUR_PS4\is-NG55G.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Program Files (x86)\Zombi_EUR_PS4\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Program Files (x86)\Zombi_EUR_PS4\unins000.dat
|
InnoSetup Log Zombi_EUR_PS4 {ae21af2b-d308-49cf-aede-bbbe5bc79c9b}, version 0x418, 94061 bytes, 141700\37\user\376, C:\Program
Files (x86)\Zombi_EUR_PS4\376\3
|
dropped
|
||
C:\Program Files (x86)\Zombi_EUR_PS4\unins000.exe (copy)
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Program Files (x86)\iCloudBypass\iCloudBypass.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\ProgramData\9B0D4271\7z.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\9B0D4271\7z.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\9B0D4271\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\9B0D4271\soft.dat
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\ProgramData\9B0D4271\softwareinstall.zip
|
HTML document, ASCII text, with very long lines (318)
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\BurgerShop2.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\DamnVid.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\Erotic 3D Sex Games.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive,
ctime=Wed May 22 22:31:39 2024, mtime=Wed May 22 22:31:39 2024, atime=Sat Apr 18 07:01:10 2015, length=233, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Directory,
ctime=Wed May 22 22:31:39 2024, mtime=Wed May 22 22:31:40 2024, atime=Wed May 22 22:31:39 2024, length=4096, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\FacebookChat.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\GinoPlayer .lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\GotClip.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\JewelQuest.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\LingoQuest.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\Luxor5.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\Mahjong.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\Montezuma3.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\Poppit.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\SherlockHolmes2.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\SoundCloudDownloader .lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\TurboPizza.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\TurboSub.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\VirtualFamilies.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\VirtualVillagers.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\WallpaperManager .lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zombi_EUR_PS4\YoutubeDownloader2015.lnk
|
MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun
Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
|
dropped
|
||
C:\ProgramData\msupd\Microsoft.Win32.TaskScheduler.dll (copy)
|
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
||
C:\ProgramData\msupd\is-0UVLM.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\msupd\is-347NU.tmp
|
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
||
C:\ProgramData\msupd\runtime.dll (copy)
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\7z.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\7z.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\_isetup\_setup64.tmp
|
PE32+ executable (console) x86-64, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\_isetup\_shfoldr.dll
|
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\idp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-BFKGD.tmp\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-OCU00.tmp\_isetup\_setup64.tmp
|
PE32+ executable (console) x86-64, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-OCU00.tmp\_isetup\_shfoldr.dll
|
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-OCU00.tmp\idp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\is-U7A8T.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Easy Way To Make Money On The Internet.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A Apple Watch.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A Beyonce Pulse Perfume.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get A iPad Now.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get Super Free Bingo.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a $500 Pre-Paid Visa Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Cinco De Mayo Prepaid Visa Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Nintendo Wii & W.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get a Pizza Gift Card.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an NBA Jersey.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an XBOX ONE.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Get an iPhone 6 Plus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\MyPoints - Get Things For Free - Freebies - Sweepstakes
- Giveaways.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\Win Millions Of Dollar - Free Lotto Ticket.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-1HF2H.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-40DDS.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-5FT25.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-BV251.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-C4E30.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-EKHPK.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-F4202.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-GOAFL.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-L2QIG.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-PDBAQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-Q6GK2.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-R72BE.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-T85ES.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FREE GiFT CARDS - FREE SAMPLES - FREE STUFF\is-VI3C3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Avira Antivirus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Fix Clean Repair PC.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Full Version Apps And Game Download Free.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\GTA V Hacks Free Alternative Download.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Game of Thrones Ascent - MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Get Super Free Bingo.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Ghostbusters Full Game.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Jet Bingo Game Special 20$ Free Bonus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\King Of Towers MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\McAfee Antivirus.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Media Player Update Chrome.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Media Player Update.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\MineCraft Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\MyBackupPC - FREE - Dont Lose Your Digital Life.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\PDF Converter Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\SexGangsters - Adult MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Super Free Bingo - FREE BINGO MONEY - Kopie.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Super Free Slot Games.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Super Mario Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Tetris Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Video Converter Full Vesion.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\Warframe - Action MMO.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-5LQFP.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-6ND99.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-880LE.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-9A53Q.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-CUNHB.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-DEV6J.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-DH3FK.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-DKR1N.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-FBC86.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-HUU76.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-I49BF.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-IUBQB.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-LVR3E.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-M86BM.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-NRTH6.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-OCO2D.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-PQORO.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-Q0ELS.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-Q1GED.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-RUHO3.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-SV2ET.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION APPS AND GAMES\is-UA01G.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\3D GayVilla Gay XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\3D GoGo 2 XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Chathouse 3D Roulette XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Erotic 3D Sex Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Fetish 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Hardcore3D Sex Simulation RPG XXX Games Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Hentai 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Hentai Park 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Hot DateFinder Software.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Lesbian 3D XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Live Adult Webcams.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Russian Lady Finder.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Sex Roulette.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\Sex Villa XXX Game Full Version.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-4CQB0.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-A1O90.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-BJO3R.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-D2IKA.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-E13BQ.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-EQE9C.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-FUR67.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-J1HB8.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-M705M.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-O5G4C.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-QJ9N4.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-S42R4.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-S93R8.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\FULL VERSION XXX GAMES\is-UFLO2.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\MuviWorld Online Video Streaming.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\WATCH TV SERIES ONLINE.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\Watch High Quality movies without any limits!.url (copy)
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\is-3RDTF.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\is-LD922.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
C:\Users\user\Desktop\WATCH FULL HQ MOVIES AND SERIES\is-UT4GK.tmp
|
Generic INItialization configuration [InternetShortcut]
|
dropped
|
||
Chrome Cache Entry: 275
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 276
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 277
|
ASCII text, with very long lines (2247)
|
downloaded
|
||
Chrome Cache Entry: 278
|
HTML document, ASCII text, with very long lines (13075)
|
downloaded
|
||
Chrome Cache Entry: 279
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 280
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 281
|
HTML document, ASCII text, with very long lines (13058)
|
downloaded
|
||
Chrome Cache Entry: 282
|
ASCII text, with very long lines (2343)
|
downloaded
|
||
Chrome Cache Entry: 283
|
HTML document, ASCII text, with very long lines (13056)
|
downloaded
|
||
Chrome Cache Entry: 284
|
HTML document, ASCII text, with very long lines (13036)
|
downloaded
|
||
Chrome Cache Entry: 285
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 286
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 287
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 288
|
ASCII text, with very long lines (368), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 289
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 290
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 291
|
ASCII text, with very long lines (5945)
|
downloaded
|
||
Chrome Cache Entry: 292
|
Unicode text, UTF-8 text, with very long lines (33788)
|
downloaded
|
||
Chrome Cache Entry: 293
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 294
|
ASCII text, with very long lines (2247)
|
downloaded
|
||
Chrome Cache Entry: 295
|
HTML document, ASCII text, with very long lines (13056)
|
downloaded
|
||
Chrome Cache Entry: 296
|
ASCII text, with very long lines (4179)
|
downloaded
|
||
\Device\ConDrv
|
ASCII text, with CRLF line terminators
|
dropped
|
There are 353 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe
|
"C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe"
|
||
C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe
|
"C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe" /SILENT /PASSWORD=upssddate3364
|
||
C:\Users\user\AppData\Local\Temp\is-OQNEE.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp
|
"C:\Users\user\AppData\Local\Temp\is-OQNEE.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp" /SL5="$20428,2019264,310784,C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe"
/SILENT /PASSWORD=upssddate3364
|
||
C:\Users\user\AppData\Local\Temp\is-U7A8T.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp
|
"C:\Users\user\AppData\Local\Temp\is-U7A8T.tmp\SecuriteInfo.com.FileRepMalware.10630.9616.tmp" /SL5="$20424,2019264,310784,C:\Users\user\Desktop\SecuriteInfo.com.FileRepMalware.10630.9616.exe"
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://jmp2.in/dlpmbfreefunchat
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://jmp2.in/dlpmbslutroulette
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1884,i,2780669637798503938,1079883583123472053,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1980,i,4022761692798513631,9308142881057432715,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://jmp2.in/mbdlpcleanpc
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=1196 --field-trial-handle=1956,i,12260569182003851715,10862511132152001641,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://jmp2.in/amazongames1
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1976,i,9218440910588591169,3266611171206643800,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://jmp2.in/amazongames2
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=1140 --field-trial-handle=1960,i,1070634852657662269,11181982297745480074,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\ProgramData\9B0D4271\7z.exe
|
"C:\ProgramData\9B0D4271\7z.exe" e "C:\ProgramData\9B0D4271\softwareinstall.zip" -o"C:\ProgramData\9B0D4271" -y
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\ProgramData\9B0D4271\7z.exe
|
"C:\ProgramData\9B0D4271\7z.exe" e "C:\ProgramData\9B0D4271\install.zip" -o"C:\ProgramData\9B0D4271" -y
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
There are 8 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://jmp2.in/dlpseriesonline
|
unknown
|
||
http://jmp2.in/mbdlpxboxone
|
unknown
|
||
http://jmp2.in/dlpmbfreefunchatT
|
unknown
|
||
http://jmp2.in/mbdatefinder
|
unknown
|
||
http://jmp2.in/mbdlpsupermario
|
unknown
|
||
http://jmp2.in/dlpmbfreefunchatJ
|
unknown
|
||
http://jmp2.in/bttGfgALE.js
|
199.59.243.225
|
||
http://jmp2.in/bBWMtexeS.js
|
199.59.243.225
|
||
http://jmp2.in/_fd
|
199.59.243.225
|
||
http://jmp2.in/icsoftwaredownload
|
199.59.243.225
|
||
http://jmp2.in/dlpmbfreefunchat
|
|||
https://cdn.v202.net/getDomain
|
65.21.73.35
|
||
http://jmp2.in/bPUzaMOgO.js
|
199.59.243.225
|
||
http://jmp2.in/_tr
|
199.59.243.225
|
||
http://jmp2.in/dlpmbslutroulette
|
|||
http://www.mp3gino.com/81400
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=8xo0f8x7kwu2&aqid=ZoBOZvjTN5aljuwPttSZ8Qs&psid=3113057640&pbt=bs&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=7%7C0%7C1170%7C2024%7C18&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
https://stats.g.doubleclick.net/g/collect
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=8&ts=228&lg=en&c=1
|
unknown
|
||
https://syndicatedsearch.goog
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=10&ts=202&lg=en&c=1
|
unknown
|
||
https://ampcid.google.com/v1/publisher:getClientId
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=43&ts=232&lg=en&c=1
|
unknown
|
||
http://jmp2.in/dlpmbfreefunchatE
|
unknown
|
||
http://jmp2.in/mbdlpsexgangsters
|
unknown
|
||
https://www.google.com
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=gqtkccdi4sm&aqid=ZoBOZuqINobNjuwPmJOFiAI&psid=3113057640&pbt=bs&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=4%7C0%7C1064%7C2110%7C86&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
http://jmp2.in/mbdlpvideoconverter
|
unknown
|
||
http://jmp2.in/amazongames1-D
|
unknown
|
||
http://jmp2.in/revslingoquestfullversion
|
unknown
|
||
http://mov2.net/sexgamesdownload
|
unknown
|
||
https://taskscheduler.codeplex.com/H
|
unknown
|
||
http://jmp2.in/mbdlpwarframe
|
unknown
|
||
http://www.my-points.info/
|
unknown
|
||
https://stats.g.doubleclick.net/j/collect
|
unknown
|
||
http://www.loadvids.net/81400
|
unknown
|
||
https://code.google.com/p/inno-download-plugin
|
unknown
|
||
http://jmp2.in/mbdlpcleanpc
|
|||
http://www.palkornel.hu/innosetup%1
|
unknown
|
||
http://jmp2.in/dlpgames4free
|
unknown
|
||
http://jmp2.in/mbdlpjetbingo
|
unknown
|
||
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
|
142.250.185.225
|
||
http://jmp2.in/mbxvidcodec
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=b5f3sas3ljw&aqid=ZoBOZq6AI4jcjuwPxLOOuAs&psid=3113057640&pbt=bv&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=38%7C0%7C1044%7C2448%7C66&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
http://mjaync0wns0ymiaxos4zms4ynw./MTAwfDE3MTY0MjA2ODd8ZGxwfHd8MHx1cGRhdGVpbnN0YWxsd3w5QjBENDJ8dHNrL
|
unknown
|
||
http://mov2.net/makeeasymoneyonline
|
unknown
|
||
http://www.fbmessenger.net/81400
|
unknown
|
||
http://www.innosetup.com/
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=45&ts=276&lg=en&c=1
|
unknown
|
||
http://www.downloadsoundcloud.net/81400
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=qgu69bqg1dbc&aqid=ZoBOZq6AI4jcjuwPxLOOuAs&psid=3113057640&pbt=bs&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=38%7C0%7C1044%7C2448%7C66&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
http://jmp2.in/mbdlpcleanpc%D
|
unknown
|
||
http://jmp2.in/revvirtualfamiliesfullversion
|
unknown
|
||
http://jmp2.in/amazongames1
|
|||
http://jmp2.in/revburgershop2full
|
unknown
|
||
https://www.adsensecustomsearchads.com/adsense/domains/caf.js?pac=2
|
172.217.16.142
|
||
http://jmp2.in/mbdlp9
|
unknown
|
||
http://jmp2.in/mbdlp8
|
unknown
|
||
https://adservice.google.com/pagead/regclk
|
unknown
|
||
http://mjaync0wns0ymiaxos4zms4ynw./MTAxfDE3MTY0MjA2ODd8ZGxwfHd8Nzh8dXBkYXRlaW5zdGFsbHd8OUIwRDQyfHdtc
|
unknown
|
||
http://jmp2.in/mbdlp5
|
unknown
|
||
http://jmp2.in/revturbopizzafull
|
unknown
|
||
http://jmp2.in/mbdlp4
|
unknown
|
||
http://jmp2.in/mbdlp7
|
unknown
|
||
http://jmp2.in/mbdlp6
|
unknown
|
||
http://jmp2.in/mbdlpsuperfreeslots
|
unknown
|
||
https://cct.google/taggy/agent.js
|
unknown
|
||
http://jmp2.in/amazongames2
|
|||
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
|
142.250.185.225
|
||
http://jmp2.in/mbdlp1
|
unknown
|
||
http://jmp2.in/mbdlp3
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=uhsyl7n9adw6&aqid=ZoBOZuqINobNjuwPmJOFiAI&psid=3113057640&pbt=bv&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=4%7C0%7C1064%7C2110%7C86&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
http://jmp2.in/mbdlp2
|
unknown
|
||
http://jmp2.in/pwtgtavhacks
|
unknown
|
||
http://jmp2.in/pwtrlslog
|
unknown
|
||
https://www.google.%/ads/ga-audiences
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=38z7zy68zhg6&aqid=Z4BOZvyyM72ijuwP7qqRqAE&psid=3113057640&pbt=bv&adbx=281.5&adby=167&adbh=1&adbw=700&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=152%7C0%7C1094%7C1108%7C91&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
||
http://jmp2.in/revvirtualvillagersfull
|
unknown
|
||
http://jmp2.in/mbdlpnintendowiifit
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=8&ts=3&lg=en&c=1
|
unknown
|
||
http://jmp2.in/mbdlpkingoftowers
|
unknown
|
||
http://mjaync0wns0ymiaxos4zms4ynw./MTAwfDE3MTY0MjA2ODd8cmV2fHd8MHx1cGRhdGVpbnN0YWxsd3w5QjBENDJ8c2V0d
|
unknown
|
||
http://mjaync0wns0ymiaxos4zms4ynw./MTAwfDE3MTY0MjA2ODd8ZGxwfHd8MHx1cGRhdGVpbnN0YWxsd3w5QjBENDJ8ZG1wL
|
unknown
|
||
https://cdn.v202.net/getDomainxNw
|
unknown
|
||
http://jmp2.in/mbdlpmediaplayerupdate
|
unknown
|
||
http://jmp2.in/amazongames2UE
|
unknown
|
||
http://jmp2.in/dlpmbslutroulettelS
|
unknown
|
||
http://jmp2.in/mbdlpgamesofthrones
|
unknown
|
||
http://jmp2.in/mbdlptetris
|
unknown
|
||
http://jmp2.in/amazongames1C:
|
unknown
|
||
http://jmp2.in/revsherlockholmes2full
|
unknown
|
||
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
|
unknown
|
||
http://jmp2.in/mbdlpcleanpceD
|
unknown
|
||
http://mjaync0wns0ymiaxos4zms4ynw./MTAxfDE3MTY0MjA2ODd8ZGxwfHd8Nzh8dXBkYXRlaW5zdGFsbHd8OUIwRDQyfHVwZ
|
unknown
|
||
http://jmp2.in/dlpmbslutrouletteC:
|
unknown
|
||
http://jmp2.in/mbdlppdfconverter
|
unknown
|
||
https://cdn.v202.net/
|
unknown
|
||
http://jmp2.in/mbdlpcleanpcmD
|
unknown
|
||
https://admin.thrixxx.com/affiliates/connect?aid=9681220&ad=6&pr=9&ts=4&lg=en&c=1
|
unknown
|
||
https://www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=47eitfjdkx8u&aqid=Z4BOZtejLcTTjuwPkrPr6AI&psid=3113057640&pbt=bs&adbx=281.5&adby=167&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=635538657&csala=4%7C0%7C1323%7C1261%7C78&lle=0&ifv=1&hpt=0&wbd=false
|
216.58.206.78
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
jmp2.in
|
199.59.243.225
|
||
cdn.v202.net
|
65.21.73.35
|
||
www3.l.google.com
|
216.58.206.78
|
||
www.google.com
|
142.250.185.100
|
||
googlehosted.l.googleusercontent.com
|
142.250.185.225
|
||
afs.googleusercontent.com
|
unknown
|
||
www.adsensecustomsearchads.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.4
|
unknown
|
unknown
|
||
199.59.243.225
|
jmp2.in
|
United States
|
||
65.21.73.35
|
cdn.v202.net
|
United States
|
||
216.58.206.78
|
www3.l.google.com
|
United States
|
||
142.250.185.100
|
www.google.com
|
United States
|
||
142.250.185.225
|
googlehosted.l.googleusercontent.com
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
142.250.185.196
|
unknown
|
United States
|
||
142.250.185.161
|
unknown
|
United States
|
||
172.217.16.142
|
unknown
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
|
SmartScreenEnabled
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
|
EnableSmartScreen
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
|
EnableLUA
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
|
GlobalAssocChangedCounter
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Defender
|
DisableBehaviorMonitoring
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Defender
|
DisableOnAccessProtection
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Defender
|
DisableScanOnRealtimeEnable
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: Setup Version
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: App Path
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
InstallLocation
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: Icon Group
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: User
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: Selected Tasks
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: Deselected Tasks
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Inno Setup: Language
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
DisplayName
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
UninstallString
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
QuietUninstallString
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
DisplayVersion
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
Publisher
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
NoModify
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
NoRepair
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
InstallDate
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
MajorVersion
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
MinorVersion
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ae21af2b-d308-49cf-aede-bbbe5bc79c9b}_is1
|
EstimatedSize
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{FBF23B40-E3F0-101B-8488-00AA003E56F8} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{FBF23B40-E3F0-101B-8488-00AA003E56F8} {000214E4-0000-0000-C000-000000000046} 0xFFFF
|
||
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\24\417C44EB
|
@%SystemRoot%\System32\ndfapi.dll,-40001
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
There are 29 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
19D000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
41C000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2533000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
AF8000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35F7000
|
direct allocation
|
page read and write
|
||
22CD000
|
direct allocation
|
page read and write
|
||
23B2000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
412000
|
unkown
|
page write copy
|
||
595000
|
heap
|
page read and write
|
||
8FF000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
21D0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
75C000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2530000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
648000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
428E000
|
stack
|
page read and write
|
||
3481000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
744000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
240D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
59E000
|
stack
|
page read and write
|
||
773000
|
heap
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
78A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23BD000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
18F000
|
stack
|
page read and write
|
||
76C000
|
heap
|
page read and write
|
||
A20000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69B2000
|
heap
|
page read and write
|
||
69F1000
|
heap
|
page read and write
|
||
3524000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69E000
|
heap
|
page read and write
|
||
69CA000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3510000
|
direct allocation
|
page read and write
|
||
3534000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B1F000
|
direct allocation
|
page read and write
|
||
2362000
|
direct allocation
|
page read and write
|
||
2558000
|
direct allocation
|
page read and write
|
||
364F000
|
direct allocation
|
page read and write
|
||
2431000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
620000
|
heap
|
page read and write
|
||
438F000
|
stack
|
page read and write
|
||
500000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
50B000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6E4000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
765000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35BD000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2574000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
70A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
410D000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
747000
|
heap
|
page read and write
|
||
419000
|
unkown
|
page write copy
|
||
594000
|
heap
|
page read and write
|
||
43D000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
342E000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
600000
|
heap
|
page read and write
|
||
18F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
77D000
|
heap
|
page read and write
|
||
7CE000
|
stack
|
page read and write
|
||
440000
|
unkown
|
page readonly
|
||
6A38000
|
heap
|
page read and write
|
||
34D0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
765000
|
heap
|
page read and write
|
||
6A0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2571000
|
direct allocation
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43A000
|
unkown
|
page read and write
|
||
23CC000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
255C000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
6EC000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69E000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
590000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
849C000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
258A000
|
direct allocation
|
page read and write
|
||
406E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
690000
|
heap
|
page read and write
|
||
69BC000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3690000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69C0000
|
heap
|
page read and write
|
||
739000
|
heap
|
page read and write
|
||
3460000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
402F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
42AD000
|
stack
|
page read and write
|
||
698A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
22F9000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69B5000
|
heap
|
page read and write
|
||
35E9000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3565000
|
direct allocation
|
page read and write
|
||
22C6000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
690000
|
heap
|
page read and write
|
||
B43000
|
direct allocation
|
page read and write
|
||
73B000
|
heap
|
page read and write
|
||
23D3000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69EC000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
723000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
453000
|
unkown
|
page readonly
|
||
424F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
233B000
|
direct allocation
|
page read and write
|
||
440000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
6F8000
|
heap
|
page read and write
|
||
257C000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2554000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6790000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69CA000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22BF000
|
direct allocation
|
page read and write
|
||
95F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
78A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2438000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2503000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
34C9000
|
direct allocation
|
page read and write
|
||
570000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43C0000
|
remote allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35FF000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2563000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
8010000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3538000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
440000
|
unkown
|
page readonly
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35B0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2354000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
660000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43B000
|
unkown
|
page write copy
|
||
720000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
34ED000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
695A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3557000
|
direct allocation
|
page read and write
|
||
3614000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
34A4000
|
direct allocation
|
page read and write
|
||
2522000
|
direct allocation
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
241C000
|
direct allocation
|
page read and write
|
||
23BD000
|
direct allocation
|
page read and write
|
||
35C4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
78D000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22F1000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69BB000
|
heap
|
page read and write
|
||
6989000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
55E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3948000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
500000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
343F000
|
direct allocation
|
page read and write
|
||
9F0000
|
heap
|
page read and write
|
||
361B000
|
direct allocation
|
page read and write
|
||
2550000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
394D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6998000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6EF000
|
stack
|
page read and write
|
||
359A000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
2591000
|
direct allocation
|
page read and write
|
||
721000
|
heap
|
page read and write
|
||
69F8000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69A0000
|
heap
|
page read and write
|
||
6F2000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
696E000
|
heap
|
page read and write
|
||
69A000
|
heap
|
page read and write
|
||
69A000
|
heap
|
page read and write
|
||
2406000
|
direct allocation
|
page read and write
|
||
24A0000
|
heap
|
page read and write
|
||
41AC000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
5E0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2500000
|
heap
|
page read and write
|
||
31F0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
700000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6989000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
440000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
789000
|
heap
|
page read and write
|
||
2578000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
504000
|
unkown
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
520000
|
heap
|
page read and write
|
||
69EC000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2598000
|
direct allocation
|
page read and write
|
||
B01000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2566000
|
direct allocation
|
page read and write
|
||
69C7000
|
heap
|
page read and write
|
||
69F8000
|
heap
|
page read and write
|
||
414E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6F7000
|
heap
|
page read and write
|
||
500000
|
unkown
|
page write copy
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
234D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
5BE000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43D000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43A000
|
unkown
|
page write copy
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2399000
|
direct allocation
|
page read and write
|
||
530000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
21DB000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
34AE000
|
stack
|
page read and write
|
||
6951000
|
heap
|
page read and write
|
||
3DEE000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23DA000
|
direct allocation
|
page read and write
|
||
3310000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
251B000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
352B000
|
direct allocation
|
page read and write
|
||
5A0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
699E000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
547000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
65EF000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23C5000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3503000
|
direct allocation
|
page read and write
|
||
93000
|
stack
|
page read and write
|
||
69BF000
|
heap
|
page read and write
|
||
70E000
|
heap
|
page read and write
|
||
21C0000
|
direct allocation
|
page read and write
|
||
3FCF000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69B5000
|
heap
|
page read and write
|
||
2540000
|
direct allocation
|
page read and write
|
||
804E000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
508000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
6A51000
|
heap
|
page read and write
|
||
54B000
|
unkown
|
page readonly
|
||
2563000
|
direct allocation
|
page read and write
|
||
6982000
|
heap
|
page read and write
|
||
236D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B70000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B26000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
A1F000
|
stack
|
page read and write
|
||
A1F000
|
stack
|
page read and write
|
||
B3C000
|
direct allocation
|
page read and write
|
||
3547000
|
direct allocation
|
page read and write
|
||
20B0000
|
heap
|
page read and write
|
||
776000
|
heap
|
page read and write
|
||
22A9000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22A0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
698A000
|
heap
|
page read and write
|
||
2303000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6A50000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6998000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
400E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
A2D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
560000
|
heap
|
page read and write
|
||
804C000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
345A000
|
direct allocation
|
page read and write
|
||
229E000
|
stack
|
page read and write
|
||
773000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
242A000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
A26000
|
direct allocation
|
page read and write
|
||
34C0000
|
direct allocation
|
page read and write
|
||
7FE40000
|
direct allocation
|
page read and write
|
||
3330000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2AC0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
8050000
|
heap
|
page read and write
|
||
69EC000
|
heap
|
page read and write
|
||
412000
|
unkown
|
page read and write
|
||
2549000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
470000
|
heap
|
page read and write
|
||
23E2000
|
direct allocation
|
page read and write
|
||
351C000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
560000
|
heap
|
page read and write
|
||
460000
|
heap
|
page read and write
|
||
43C0000
|
remote allocation
|
page read and write
|
||
69B2000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
A34000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B58000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
432000
|
unkown
|
page readonly
|
||
713000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
21C7000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
570000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
8DF000
|
stack
|
page read and write
|
||
839C000
|
stack
|
page read and write
|
||
2546000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
5C0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23F8000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
728000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
804C000
|
heap
|
page read and write
|
||
2070000
|
heap
|
page read and write
|
||
2392000
|
direct allocation
|
page read and write
|
||
50B000
|
unkown
|
page write copy
|
||
6794000
|
heap
|
page read and write
|
||
5E5000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
2560000
|
heap
|
page read and write
|
||
21E0000
|
direct allocation
|
page execute and read and write
|
||
253B000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
662E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69BE000
|
heap
|
page read and write
|
||
43A000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2538000
|
direct allocation
|
page read and write
|
||
6FE000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
76D000
|
heap
|
page read and write
|
||
69C3000
|
heap
|
page read and write
|
||
22E3000
|
direct allocation
|
page read and write
|
||
6950000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
31F0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
34E6000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
21D4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
34D7000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
416F000
|
stack
|
page read and write
|
||
22F5000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
511000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
43B000
|
unkown
|
page write copy
|
||
43C0000
|
remote allocation
|
page read and write
|
||
3EEE000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35E0000
|
direct allocation
|
page read and write
|
||
2530000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
510000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6951000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
69AD000
|
heap
|
page read and write
|
||
776000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69F6000
|
heap
|
page read and write
|
||
69C2000
|
heap
|
page read and write
|
||
670000
|
direct allocation
|
page execute and read and write
|
||
594000
|
heap
|
page read and write
|
||
69C5000
|
heap
|
page read and write
|
||
2A8F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2503000
|
direct allocation
|
page read and write
|
||
4BE000
|
stack
|
page read and write
|
||
8CF000
|
stack
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23E1000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
672F000
|
stack
|
page read and write
|
||
2286000
|
direct allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
595000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6FE000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
35B5000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
21C6000
|
direct allocation
|
page read and write
|
||
6AE000
|
heap
|
page read and write
|
||
418000
|
unkown
|
page read and write
|
||
7FE3B000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
26C4000
|
direct allocation
|
page read and write
|
||
3F2E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
A10000
|
heap
|
page read and write
|
||
34B2000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
256A000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
349D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23E8000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2300000
|
direct allocation
|
page read and write
|
||
69F7000
|
heap
|
page read and write
|
||
22B0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69AF000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
32E9000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
33B5000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3420000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
412000
|
unkown
|
page read and write
|
||
34DF000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3518000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2523000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
32B5000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22EA000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2B10000
|
trusted library allocation
|
page read and write
|
||
93F000
|
stack
|
page read and write
|
||
2580000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2440000
|
direct allocation
|
page read and write
|
||
69AF000
|
heap
|
page read and write
|
||
77D000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
5D0000
|
heap
|
page read and write
|
||
255F000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
6981000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B2D000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23DB000
|
direct allocation
|
page read and write
|
||
23D4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6F8000
|
heap
|
page read and write
|
||
745000
|
heap
|
page read and write
|
||
35D9000
|
direct allocation
|
page read and write
|
||
35F0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
460000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22F0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
238B000
|
direct allocation
|
page read and write
|
||
69C2000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
99000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
6954000
|
heap
|
page read and write
|
||
34B9000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23E9000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3495000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
237C000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2423000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
2529000
|
direct allocation
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
22A5000
|
heap
|
page read and write
|
||
3465000
|
heap
|
page read and write
|
||
78A000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
256D000
|
direct allocation
|
page read and write
|
||
747000
|
heap
|
page read and write
|
||
344C000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
AF1000
|
direct allocation
|
page read and write
|
||
A5E000
|
stack
|
page read and write
|
||
91E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23A4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
360D000
|
direct allocation
|
page read and write
|
||
22DC000
|
direct allocation
|
page read and write
|
||
3606000
|
direct allocation
|
page read and write
|
||
34F4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
29F0000
|
trusted library allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3623000
|
direct allocation
|
page read and write
|
||
4FE000
|
stack
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
23AB000
|
direct allocation
|
page read and write
|
||
69C0000
|
heap
|
page read and write
|
||
5FE000
|
stack
|
page read and write
|
||
5B0000
|
heap
|
page read and write
|
||
750000
|
heap
|
page read and write
|
||
22F8000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
7FD00000
|
direct allocation
|
page read and write
|
||
24E0000
|
heap
|
page read and write
|
||
64ED000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22A9000
|
direct allocation
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
342C000
|
stack
|
page read and write
|
||
750000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
7DE000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
20B5000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
32DC000
|
direct allocation
|
page read and write
|
||
6D5000
|
heap
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B51000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2375000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22B0000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
43A000
|
unkown
|
page write copy
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
341C000
|
direct allocation
|
page read and write
|
||
B09000
|
direct allocation
|
page read and write
|
||
23AF000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
253F000
|
direct allocation
|
page read and write
|
||
789000
|
heap
|
page read and write
|
||
6F5000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
67F000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
35D2000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
763000
|
heap
|
page read and write
|
||
21CD000
|
direct allocation
|
page read and write
|
||
23CC000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
3512000
|
direct allocation
|
page read and write
|
||
239D000
|
direct allocation
|
page read and write
|
||
34EE000
|
stack
|
page read and write
|
||
508000
|
unkown
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2583000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
235B000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
B4A000
|
direct allocation
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
640000
|
heap
|
page read and write
|
||
B10000
|
direct allocation
|
page read and write
|
||
2542000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
26BF000
|
direct allocation
|
page read and write
|
||
8324000
|
direct allocation
|
page read and write
|
||
31F0000
|
heap
|
page read and write
|
||
417000
|
unkown
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
254D000
|
direct allocation
|
page read and write
|
||
B34000
|
direct allocation
|
page read and write
|
||
8011000
|
heap
|
page read and write
|
||
3709000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
5BE000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
2530000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
504000
|
unkown
|
page read and write
|
||
595000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23A8000
|
direct allocation
|
page read and write
|
||
83F000
|
stack
|
page read and write
|
||
69C2000
|
heap
|
page read and write
|
||
57E000
|
stack
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
22D4000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
69F6000
|
heap
|
page read and write
|
||
AD6000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
33B0000
|
heap
|
page read and write
|
||
34FB000
|
direct allocation
|
page read and write
|
||
594000
|
heap
|
page read and write
|
||
23FF000
|
direct allocation
|
page read and write
|
There are 1075 hidden memdumps, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=9171716420708635&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708637&u_w=1280&u_h=1024&biw=1280&bih=905&psw=1280&psh=815&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Fdlpmbfreefunchat&referer=http%3A%2F%2Fjmp2.in%2Fdlpmbfreefunchat
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=91716420708964&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708965&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette&referer=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette
|
||
http://jmp2.in/dlpmbfreefunchat
|
||
http://jmp2.in/dlpmbfreefunchat
|
||
http://jmp2.in/amazongames1
|
||
http://jmp2.in/amazongames1
|
||
http://jmp2.in/mbdlpcleanpc
|
||
http://jmp2.in/mbdlpcleanpc
|
||
http://jmp2.in/dlpmbslutroulette
|
||
http://jmp2.in/dlpmbslutroulette
|
||
http://jmp2.in/amazongames2
|
||
http://jmp2.in/amazongames2
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=5531716420708881&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708882&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames1
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=5531716420708881&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708882&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames1
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=5531716420708881&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708882&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames1
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=5531716420708881&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708882&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames1
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=5531716420708881&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708882&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames1
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=1091716420709563&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420709564&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames2
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=1091716420709563&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420709564&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames2
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=1091716420709563&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420709564&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Famazongames2
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=91716420708964&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708965&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette&referer=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=91716420708964&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420708965&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette&referer=http%3A%2F%2Fjmp2.in%2Fdlpmbslutroulette
|
||
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol323%2Cpid-bodis-gcontrol494%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis31_3ph&r=m&sct=ID%3Dee4d8afebb3de655%3AT%3D1716420710%3ART%3D1716420710%3AS%3DALNI_MYzhrl1sLPiEYErFYmaEsJERRGj-g&sc_status=6&hl=en&rpbu=http%3A%2F%2Fjmp2.in%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2982711262351858&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=0&format=r3&nocache=3631716420709929&num=0&output=afd_ads&domain_name=jmp2.in&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1716420709931&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=635538657&rurl=http%3A%2F%2Fjmp2.in%2Fmbdlpcleanpc
|
There are 13 hidden doms, click here to show them.