Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SecuriteInfo.com.Win32.Beetle.4.19720.20983.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Program Files (x86)\AutoIt3\Aut2Exe\Aut2exe.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\AutoIt3\AutoIt3Help.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\AutoIt3\SciTE\SciTE.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\AutoIt3\Uninstall.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\Office Setup Controller\pidgenx.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_749031\java.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_749031\javaw.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Google\Update\1.3.36.312\GoogleCrashHandler.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Google\Update\1.3.36.312\GoogleUpdateCore.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Google\Update\1.3.36.312\goopdate.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\client\jvm.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\deploy.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\deployJava1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npdeployJava1.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\eula.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\fxplugins.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\glib-lite.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\gstreamer-lite.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\hprof.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\j2gss.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\j2pkcs11.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\java.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\java.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\javacpl.cpl
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\javafx_font.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\javaw.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jdwp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jfxwebkit.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jli.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jp2iexp.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jp2launcher.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jp2ssv.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\jsdt.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\management.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\splashscreen.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\ssv.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Java\jre-1.8\bin\wsdetect.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Client\concrt140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Client\mfc140u.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Client\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Integration\Addons\OneDriveSetup.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office15\pidgenx.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\ACEDAO.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\AppSharingHookController.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\Appshapi.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\AutoHelper.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\CHART.DLL
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\CLVIEW.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\CNFNOT32.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\CONTAB32.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\Cpprest141_2_10.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\DLGSETP.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\EMSMDB32.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\EXSEC32.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\EntityPicker.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\GRAPH.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\IEAWSDC.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MAPIPH.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MIMEDIR.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MLCFG32.CPL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSAEXP30.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOARIA.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOARIANEXT.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSPECTRE.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSPST32.DLL
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\MeetingJoinAxOC.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\appsharingmediaprovider.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\appshcom.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\appshvw.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\atl110.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\concrt140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\cpprestsdk.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\excelcnv.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\lync99.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\lyncDesktopViewModel.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\mce.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\mce_office.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\mfc140u.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\mip_pdf_sdk.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft Office\root\Office16\msoadfsb.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_bho.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\EBWebView\x86\EmbeddedBrowserWebView.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft\Temp\EUC7A5.tmp\MicrosoftEdgeUpdateCore.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files (x86)\Microsoft\Temp\EUC7A5.tmp\msedgeupdate.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\7-Zip\7z.sfx
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\7-Zip\7zCon.sfx
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\7-Zip\Uninstall.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\plug_ins\pi_brokers\32BitMAPIBroker.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\ACE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\AGM.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\AIDE.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\Acrobat\Acrobat.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\Acrobat\Acrobat32OL.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\BIB.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Adobe\Acrobat DC\Acrobat\x86\BIBUtils.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDFImpl.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Common Files\Adobe\Acrobat\Setup\{AC76BA86-1033-1033-7760-BC15014EA700}\WindowsInstaller-KB893803-v2-x86.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Program Files\Mozilla Firefox\uninstall\helper.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\X86\MpDetours.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\X86\MpDetoursCopyAccelerator.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\ProgramData\Package Cache\{8bdfe669-9705-4184-9368-db9ce581e0e7}\VC_redist.x64.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\393A.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\wctFE34.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
There are 112 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\SecuriteInfo.com.Win32.Beetle.4.19720.20983.exe
|
"C:\Users\user\Desktop\SecuriteInfo.com.Win32.Beetle.4.19720.20983.exe"
|
|
|
|
C:\Users\user\AppData\Local\Temp\393A.tmp
|
C:\Users\user\AppData\Local\Temp\393A.tmp
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://autodiscover.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://autodiscover.com/Autodiscover/Autodiscover.xml
|
unknown
|
|
|
|
https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=P
|
unknown
|
||
|
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/ui.win32.js.map/d6bb35bc608af2672a5b746ba
|
unknown
|
||
|
https://aka.ms/AAbbac2PA$Estamos
|
unknown
|
||
|
https://autodiscover.com.br/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
|
https://autodiscover.uk/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://duckduckgo.com/ac/?q=
|
unknown
|
||
|
https://github.com/react-native-community/react-native-netinfo
|
unknown
|
||
|
https://aka.ms/AAbbac2PA(Pripremamo
|
unknown
|
||
|
https://javadl.oracle.com/webapps/download/AutoDL%s?BundleId=%surl%s%stmp1.8%s.0https://javadl.oracl
|
unknown
|
||
|
https://autodiscover.xyz/autodiscover/autodiscover.xml
|
unknown
|
||
|
http://127.0.0.1:8043
|
unknown
|
||
|
https://aka.ms/AAbbac2PA1E
|
unknown
|
||
|
https://globaldisco.crm.microsoftdynamics.us/https://make.gov.powerapps.us/environments/https://glob
|
unknown
|
||
|
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
||
|
https://aefd.nelreports.net/api/report?cat=bingaotak
|
unknown
|
||
|
https://deff.nelreports.net/api/report?cat=msn
|
unknown
|
||
|
https://crbug.com/820996
|
unknown
|
||
|
https://dc.services.visualstudio.com/v2/track
|
unknown
|
||
|
https://HTTP/1.1GETSRange:
|
unknown
|
||
|
https://crbug.com/820996LaunchElevatedProcessXML
|
unknown
|
||
|
http://CurrentVersion.htmLync16LyncClassesSoftwareMicrosoftIM
|
unknown
|
||
|
https://aka.ms/AAbbac2PA
|
unknown
|
||
|
https://fp-afd.azurefd.us/apc/trans.gif?94fb5ac9609bcb4cda0bf8acf1827073
|
unknown
|
||
|
https://ecs.nel.measure.office.net?TenantId=Skype&DestinationEndpoint=Edge-Prod-LAX31r5a&FrontEnd=AF
|
unknown
|
||
|
https://aka.ms/AAbbac2PA&C
|
unknown
|
||
|
https://aka.ms/convergencefaq
|
unknown
|
||
|
https://autodiscover.in/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://maps.windows.com/windows-app-web-link
|
unknown
|
||
|
https://autodiscover.it/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
http:///api/v1/query127.0.0.1:8043ModuleUnknown
|
unknown
|
||
|
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
|
unknown
|
||
|
https://aefd.nel
|
unknown
|
||
|
https://aka.ms/AAbbac2;Nous
|
unknown
|
||
|
https://autodiscover.fr/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2%Ons
|
unknown
|
||
|
https://aka.ms/AAbbac2(PY
|
unknown
|
||
|
https://autodiscover.online/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://autodiscover.com.cn/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://www.autoitscript.com/site/autoit/8
|
unknown
|
||
|
https://autodiscover.uk/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2)Vi
|
unknown
|
||
|
https://aka.ms/AAbbac2.Rydyn
|
unknown
|
||
|
http://UserName.htm.htmlInterfaceExcelOutlookPowerPointWordInternet
|
unknown
|
||
|
https://aka.ms/AAbbac2PA1
|
unknown
|
||
|
https://autodiscover.xyz/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://autodiscover.sg/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
||
|
https://aka.ms/AAbbac25
|
unknown
|
||
|
https://javadl-esd-secure.oracle.com/update/baseline.version%sURLOverrideSoftware
|
unknown
|
||
|
https://autodiscover.com.br/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2(Na-akwadobe
|
unknown
|
||
|
https://aka.ms/AAbbac2PA%We
|
unknown
|
||
|
https://make.powerapps.com/environments/ImexWiz
|
unknown
|
||
|
http://ocsp.di
|
unknown
|
||
|
https://fp-afd.azurefd.us/apc/trans.gif?0cf92be82316943650f2ee723bc6949e
|
unknown
|
||
|
http://127.0.0.1;LIST=;VIEW=dBASE
|
unknown
|
||
|
https://aka.ms/AAbbac2.
|
unknown
|
||
|
https://aefd.nelreports.net/api/report?cat=wsb
|
unknown
|
||
|
https://aka.ms/AAbbac2-
|
unknown
|
||
|
https://g.live.com/odclientsettings/Enterprisehttps://g.live.com/odclientsettings/MsitFasthttps://g.
|
unknown
|
||
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
|
https://aka.ms/AAbbac2%We
|
unknown
|
||
|
https://aka.ms/AAbbac2PA%
|
unknown
|
||
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
||
|
https://www.ecosia.org/newtab/
|
unknown
|
||
|
https://autodiscover.es/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2PA3Ch
|
unknown
|
||
|
https://clients3.google.com/generate_204
|
unknown
|
||
|
http://https://_bad_pdb_file.pdb
|
unknown
|
||
|
https://g.live.com/1rewlive5skydrive/win81https://g.live.com/1rewlive5skydrive/win8https://g.live.co
|
unknown
|
||
|
https://aka.ms/AAbbac2#Rengiame
|
unknown
|
||
|
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
||
|
https://autodiscover.in/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://autodiscover.es/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2-9
|
unknown
|
||
|
https://aka.ms/AAbbac2PA3OneDrive
|
unknown
|
||
|
https://autodiscover.online/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2PA1OneDrive
|
unknown
|
||
|
https://aefd.nelreports.net/api/report?cat=bingrms
|
unknown
|
||
|
https://autodiscover.com.cn/Autodiscover/Autodiscover.xml
|
unknown
|
||
|
https://autodiscover.it/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2)
|
unknown
|
||
|
https://aka.ms/AAbbac2(
|
unknown
|
||
|
https://aka.ms/AAbbac2#HY
|
unknown
|
||
|
https://aka.ms/AAbbac2
|
unknown
|
||
|
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
||
|
https://autodiscover.fr/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://autodiscover.sg/autodiscover/autodiscover.xml
|
unknown
|
||
|
https://aka.ms/AAbbac2PA$Imakunatapas
|
unknown
|
There are 82 hidden URLs, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1433000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
251B000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
14AD000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1419000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1A23000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
A49000
|
heap
|
page read and write
|
||
|
1431000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1C8A000
|
heap
|
page read and write
|
||
|
600000
|
heap
|
page read and write
|
||
|
1C6B000
|
heap
|
page read and write
|
||
|
14A5000
|
heap
|
page read and write
|
||
|
83E000
|
stack
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1D8E000
|
heap
|
page read and write
|
||
|
1481000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
14B2000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1377000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
1455000
|
heap
|
page read and write
|
||
|
570000
|
direct allocation
|
page execute and read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
1CCD000
|
heap
|
page read and write
|
||
|
1488000
|
heap
|
page read and write
|
||
|
1AF0000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
136C000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1455000
|
heap
|
page read and write
|
||
|
1B7C000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
9AE000
|
stack
|
page read and write
|
||
|
1499000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
148F000
|
heap
|
page read and write
|
||
|
5DF000
|
heap
|
page read and write
|
||
|
1439000
|
heap
|
page read and write
|
||
|
1FFF000
|
heap
|
page read and write
|
||
|
1468000
|
heap
|
page read and write
|
||
|
1323000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1360000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1A82000
|
heap
|
page read and write
|
||
|
136B000
|
heap
|
page read and write
|
||
|
1423000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1374000
|
heap
|
page read and write
|
||
|
414000
|
unkown
|
page readonly
|
||
|
1463000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
5C0000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1B1A000
|
heap
|
page read and write
|
||
|
5F1000
|
heap
|
page read and write
|
||
|
1A8A000
|
heap
|
page read and write
|
||
|
518000
|
unkown
|
page readonly
|
||
|
135E000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1375000
|
heap
|
page read and write
|
||
|
1433000
|
heap
|
page read and write
|
||
|
6B7E000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1376000
|
heap
|
page read and write
|
||
|
1B13000
|
heap
|
page read and write
|
||
|
70E000
|
stack
|
page read and write
|
||
|
4287000
|
heap
|
page read and write
|
||
|
5DA000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1367000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1B11000
|
heap
|
page read and write
|
||
|
1468000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
148A000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
391B000
|
heap
|
page read and write
|
||
|
1323000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1372000
|
heap
|
page read and write
|
||
|
6BD0000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
5819000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1BF6000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1BE9000
|
heap
|
page read and write
|
||
|
136E000
|
heap
|
page read and write
|
||
|
1D0A000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute and read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1369000
|
heap
|
page read and write
|
||
|
1B68000
|
heap
|
page read and write
|
||
|
1458000
|
heap
|
page read and write
|
||
|
14A2000
|
heap
|
page read and write
|
||
|
43B000
|
unkown
|
page readonly
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1A25000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1B1B000
|
heap
|
page read and write
|
||
|
5FF000
|
heap
|
page read and write
|
||
|
14A7000
|
heap
|
page read and write
|
||
|
4280000
|
heap
|
page read and write
|
||
|
1394000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1416000
|
heap
|
page read and write
|
||
|
511000
|
unkown
|
page execute read
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1329000
|
heap
|
page read and write
|
||
|
536000
|
unkown
|
page readonly
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1390000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1392000
|
heap
|
page read and write
|
||
|
A45000
|
heap
|
page read and write
|
||
|
1C65000
|
heap
|
page read and write
|
||
|
1B2E000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
4364000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
139C000
|
heap
|
page read and write
|
||
|
1459000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1439000
|
heap
|
page read and write
|
||
|
1443000
|
heap
|
page read and write
|
||
|
14B2000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
4282000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
19C000
|
stack
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1433000
|
heap
|
page read and write
|
||
|
1464000
|
heap
|
page read and write
|
||
|
1A21000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
1435000
|
heap
|
page read and write
|
||
|
1455000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
145D000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
5E3000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
510000
|
unkown
|
page readonly
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1489000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
4419000
|
heap
|
page read and write
|
||
|
1E0000
|
heap
|
page read and write
|
||
|
6B80000
|
heap
|
page read and write
|
||
|
40A000
|
unkown
|
page readonly
|
||
|
1F8E000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1A21000
|
heap
|
page read and write
|
||
|
1A8A000
|
heap
|
page read and write
|
||
|
1484000
|
heap
|
page read and write
|
||
|
1C08000
|
heap
|
page read and write
|
||
|
1496000
|
heap
|
page read and write
|
||
|
40A000
|
unkown
|
page readonly
|
||
|
4E19000
|
heap
|
page read and write
|
||
|
43B000
|
unkown
|
page readonly
|
||
|
1436000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1481000
|
heap
|
page read and write
|
||
|
2510000
|
heap
|
page read and write
|
||
|
2F10000
|
heap
|
page read and write
|
||
|
1B10000
|
heap
|
page read and write
|
||
|
5C7000
|
heap
|
page read and write
|
||
|
149A000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1468000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
5E7000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
138B000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1B17000
|
heap
|
page read and write
|
||
|
519000
|
unkown
|
page write copy
|
||
|
1473000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
6B77000
|
heap
|
page read and write
|
||
|
490000
|
heap
|
page read and write
|
||
|
1431000
|
heap
|
page read and write
|
||
|
14B2000
|
heap
|
page read and write
|
||
|
1365000
|
heap
|
page read and write
|
||
|
14B2000
|
heap
|
page read and write
|
||
|
6C0000
|
heap
|
page read and write
|
||
|
136D000
|
heap
|
page read and write
|
||
|
1324000
|
heap
|
page read and write
|
||
|
148D000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
3C54000
|
heap
|
page read and write
|
||
|
1433000
|
heap
|
page read and write
|
||
|
93F000
|
stack
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
6219000
|
heap
|
page read and write
|
||
|
9E0000
|
heap
|
page read and write
|
||
|
1E4E000
|
heap
|
page read and write
|
||
|
137B000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1AED000
|
heap
|
page read and write
|
||
|
5DE000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1B70000
|
heap
|
page read and write
|
||
|
1BE6000
|
heap
|
page read and write
|
||
|
1B20000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
1BA5000
|
heap
|
page read and write
|
||
|
1393000
|
heap
|
page read and write
|
||
|
4296000
|
heap
|
page read and write
|
||
|
414000
|
unkown
|
page readonly
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
1C30000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1484000
|
heap
|
page read and write
|
||
|
42D2000
|
heap
|
page read and write
|
||
|
5E2000
|
heap
|
page read and write
|
||
|
1CA5000
|
heap
|
page read and write
|
||
|
1373000
|
heap
|
page read and write
|
||
|
1435000
|
heap
|
page read and write
|
||
|
1494000
|
heap
|
page read and write
|
||
|
1480000
|
heap
|
page read and write
|
||
|
1CCF000
|
heap
|
page read and write
|
||
|
5E6000
|
heap
|
page read and write
|
||
|
1431000
|
heap
|
page read and write
|
||
|
1B48000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1367000
|
heap
|
page read and write
|
||
|
1499000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1B1D000
|
heap
|
page read and write
|
||
|
1458000
|
heap
|
page read and write
|
||
|
1481000
|
heap
|
page read and write
|
||
|
40F000
|
unkown
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
418F000
|
stack
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
6B94000
|
heap
|
page read and write
|
||
|
2F1B000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
5E2000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1367000
|
heap
|
page read and write
|
||
|
14B2000
|
heap
|
page read and write
|
||
|
6B85000
|
heap
|
page read and write
|
||
|
1375000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1A47000
|
heap
|
page read and write
|
||
|
1491000
|
heap
|
page read and write
|
||
|
1B34000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1B6C000
|
heap
|
page read and write
|
||
|
1481000
|
heap
|
page read and write
|
||
|
149A000
|
heap
|
page read and write
|
||
|
1C95000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1344000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1365000
|
heap
|
page read and write
|
||
|
1477000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
3C50000
|
heap
|
page read and write
|
||
|
1456000
|
heap
|
page read and write
|
||
|
1B1D000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
4190000
|
trusted library allocation
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
5E2000
|
heap
|
page read and write
|
||
|
1417000
|
heap
|
page read and write
|
||
|
14B4000
|
heap
|
page read and write
|
||
|
1372000
|
heap
|
page read and write
|
||
|
5DA000
|
heap
|
page read and write
|
||
|
1C0D000
|
heap
|
page read and write
|
||
|
A40000
|
heap
|
page read and write
|
||
|
1483000
|
heap
|
page read and write
|
||
|
1415000
|
heap
|
page read and write
|
||
|
1436000
|
heap
|
page read and write
|
||
|
1A25000
|
heap
|
page read and write
|
||
|
1425000
|
heap
|
page read and write
|
||
|
1A16000
|
heap
|
page read and write
|
||
|
1E85000
|
heap
|
page read and write
|
||
|
1B12000
|
heap
|
page read and write
|
||
|
1A11000
|
heap
|
page read and write
|
||
|
14BE000
|
heap
|
page read and write
|
||
|
5F5000
|
heap
|
page read and write
|
||
|
1C67000
|
heap
|
page read and write
|
||
|
1419000
|
heap
|
page read and write
|
||
|
4279000
|
heap
|
page read and write
|
||
|
40F000
|
unkown
|
page write copy
|
||
|
145F000
|
heap
|
page read and write
|
||
|
1A1A000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
145F000
|
heap
|
page read and write
|
||
|
242E000
|
stack
|
page read and write
|
||
|
5E2000
|
heap
|
page read and write
|
||
|
1BDE000
|
heap
|
page read and write
|
||
|
1458000
|
heap
|
page read and write
|
||
|
1455000
|
heap
|
page read and write
|
||
|
5B0000
|
heap
|
page read and write
|
||
|
14A0000
|
heap
|
page read and write
|
||
|
1422000
|
heap
|
page read and write
|
||
|
1392000
|
heap
|
page read and write
|
||
|
149F000
|
heap
|
page read and write
|
There are 351 hidden memdumps, click here to show them.