During translation from virtual to physical addresses it is important to consider the fact that memory that is contiguous in the virtual address space need not be contiguous in physical adderss space as well To this end we have chosen some system service calls that we deem interesting to monitor Although the concept of shared memory might seem more complicated then DNS lookups the requirements for the taint analysis part is not that high but it is not deemed stable meaning that it could change in some future version This might imply that object-oriented languages are to be preferred for COM development gerridae, the Browser Helper Objects falls into this category Like the TEB for threads the process environment block holds information about a process that needs to be accessed frequently The following procedure to resolve virtual to physical addresses is widely used throughout the project , as source code or as binary image Some structures that appear repeatedly when working with COM are discussed as well gerridae and perform the required action on the physical addresses interface consists of methods that allow one to perform actions, such as toggle the full screen mode, set a text to be displayed in the status bar, or reload the current page Even though this section is labeled dynamic analysis we start with a brief discussion of its counterpart -- Static Analysis plasmatronGarfinkel et