Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/index.html
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3677D61C-7D2A-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3677D61E-7D2A-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3677D61F-7D2A-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\4[1].png
|
PNG image data, 512 x 77, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\icon[1].png
|
PNG image data, 640 x 595, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\index[1].htm
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\style[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\1[1].png
|
PNG image data, 1921 x 1086, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\5[1].png
|
PNG image data, 512 x 92, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\9[1].png
|
PNG image data, 512 x 72, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\7[1].png
|
PNG image data, 512 x 82, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\8[1].png
|
PNG image data, 512 x 67, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bootstrap.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\3[1].png
|
PNG image data, 630 x 167, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\6[1].png
|
PNG image data, 512 x 85, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\http_400[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF7122CBD5AB624E6A.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEAB4620B4967CC1D.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFFFE7CB61E25586DB.TMP
|
data
|
dropped
|
|
There are 28 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6792 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/index.html
|
|
||
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/index.htmlRoot
|
unknown
|
|
|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/index.html
|
unknown
|
|
|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/
|
|
||
|
https://f000.backblaze
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/6.png
|
unknown
|
|
|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/ndex.html
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/3.png
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://owy.mn/35MDuDz
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/7.png
|
unknown
|
|
|
|
https://i.ibb.co/TtTg9r7/icon.pngM
|
unknown
|
|
|
|
https://f000.backRoot
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/4.png
|
unknown
|
|
|
|
https://f000.backb2.com/file/cybernews-bot-3ae031b2/index.htmlRoot
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/8.png
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://getbootstrap.com)
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/css/style.css
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
|
|
|
https://f000.backb2.com/file/cybernews-bot-3ae031b2/ndex.htmlRoot
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/5.png
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/css/bootstrap.min.css
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
https://plutosmto.com/email-list/dropox18/images/9.png
|
unknown
|
|
|
|
https://i.ibb.co/TtTg9r7/icon.png
|
unknown
|
|
There are 20 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
f000.backblazeb2.com
|
104.153.233.177
|
|
|
|
plutosmto.com
|
172.67.206.183
|
|
|
|
i.ibb.co
|
146.59.152.166
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
172.67.206.183
|
plutosmto.com
|
United States
|
unknown
|
|
|
|
146.59.152.166
|
i.ibb.co
|
Norway
|
unknown
|
|
|
|
104.153.233.177
|
f000.backblazeb2.com
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3677D61C-7D2A-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
MFV
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 16 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1D6EB602000
|
unkown
|
page read and write
|
|
|
|
7FF5710E1000
|
unkown
|
page readonly
|
|
|
|
7FF57118E000
|
unkown
|
page readonly
|
|
|
|
7FF4F446C000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B91000
|
unkown
|
page readonly
|
|
|
|
1CEAA841000
|
unkown
|
page read and write
|
|
|
|
7FF580721000
|
unkown
|
page readonly
|
|
|
|
1CEAA8C2000
|
unkown
|
page read and write
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
7FF5BB364000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC73000
|
unkown
|
page readonly
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
1D6EAE3C000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2FF000
|
unkown
|
page readonly
|
|
|
|
27910C40000
|
unkown
|
page read and write
|
|
|
|
7FF58061A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB21E000
|
unkown
|
page readonly
|
|
|
|
18D45B7A000
|
unkown
|
page read and write
|
|
|
|
139300D0000
|
unkown
|
page readonly
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
7FF4F456A000
|
unkown
|
page readonly
|
|
|
|
1CEAA660000
|
heap default
|
page read and write
|
|
|
|
18D45302000
|
unkown
|
page read and write
|
|
|
|
7FF50CAF1000
|
unkown
|
page readonly
|
|
|
|
7FF5712D4000
|
unkown
|
page readonly
|
|
|
|
7FF50CA38000
|
unkown
|
page readonly
|
|
|
|
7FF4F446A000
|
unkown
|
page readonly
|
|
|
|
1392FE4F000
|
unkown
|
page read and write
|
|
|
|
1CEAC765000
|
unkown
|
page read and write
|
|
|
|
7FF50C357000
|
unkown
|
page readonly
|
|
|
|
7FF596E16000
|
unkown
|
page readonly
|
|
|
|
7FF570E65000
|
unkown
|
page readonly
|
|
|
|
E753CFB000
|
unkown
|
page read and write
|
|
|
|
18D45B91000
|
unkown
|
page read and write
|
|
|
|
7FF4F4571000
|
unkown
|
page readonly
|
|
|
|
7FF5805D2000
|
unkown
|
page readonly
|
|
|
|
1392FE54000
|
unkown
|
page read and write
|
|
|
|
1EA9188F000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2EF000
|
unkown
|
page readonly
|
|
|
|
1F12C600000
|
unkown
|
page read and write
|
|
|
|
7FF50CA05000
|
unkown
|
page readonly
|
|
|
|
18D45229000
|
unkown
|
page read and write
|
|
|
|
1CEAC790000
|
unkown
|
page read and write
|
|
|
|
7FF546CAC000
|
unkown
|
page readonly
|
|
|
|
18D45BCD000
|
unkown
|
page read and write
|
|
|
|
18D452A1000
|
unkown
|
page read and write
|
|
|
|
1395FE000
|
unkown
|
page read and write
|
|
|
|
138DFB000
|
unkown
|
page read and write
|
|
|
|
1CEAC782000
|
unkown
|
page read and write
|
|
|
|
18D45B40000
|
unkown
|
page read and write
|
|
|
|
1F12C560000
|
unkown
|
page readonly
|
|
|
|
1CEAC820000
|
unkown
|
page readonly
|
|
|
|
1CEAA8CF000
|
unkown
|
page read and write
|
|
|
|
7FF50CAEA000
|
unkown
|
page readonly
|
|
|
|
7FF5BB171000
|
unkown
|
page readonly
|
|
|
|
18D45B7E000
|
unkown
|
page read and write
|
|
|
|
B18C7FB000
|
unkown
|
page read and write
|
|
|
|
945BEE000
|
unkown
|
page read and write
|
|
|
|
1CEAA8A9000
|
unkown
|
page read and write
|
|
|
|
18D45B80000
|
unkown
|
page read and write
|
|
|
|
7FF50CA00000
|
unkown
|
page readonly
|
|
|
|
1CEAA887000
|
unkown
|
page read and write
|
|
|
|
7FF50CA79000
|
unkown
|
page readonly
|
|
|
|
1CEAD210000
|
unkown
|
page read and write
|
|
|
|
18D45B91000
|
unkown
|
page read and write
|
|
|
|
1EA9188F000
|
unkown
|
page read and write
|
|
|
|
7FF546D64000
|
unkown
|
page readonly
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
1D6EAF13000
|
unkown
|
page read and write
|
|
|
|
7FF5BB37F000
|
unkown
|
page readonly
|
|
|
|
1CEAC70D000
|
unkown
|
page read and write
|
|
|
|
7FF5BAEE0000
|
unkown
|
page readonly
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
7FF59773C000
|
unkown
|
page readonly
|
|
|
|
E753DF7000
|
unkown
|
page read and write
|
|
|
|
7FF57127C000
|
unkown
|
page readonly
|
|
|
|
7FF4F44F6000
|
unkown
|
page readonly
|
|
|
|
E7537FC000
|
unkown
|
page read and write
|
|
|
|
7FF5802EC000
|
unkown
|
page readonly
|
|
|
|
7FF5805F3000
|
unkown
|
page readonly
|
|
|
|
1CEACA3E000
|
unkown
|
page read and write
|
|
|
|
2DBC0F5000
|
unkown
|
page read and write
|
|
|
|
7FF5976BC000
|
unkown
|
page readonly
|
|
|
|
7FF546CCA000
|
unkown
|
page readonly
|
|
|
|
1F12C702000
|
unkown
|
page read and write
|
|
|
|
18D45B4B000
|
unkown
|
page read and write
|
|
|
|
1CEACA7B000
|
unkown
|
page read and write
|
|
|
|
138E7B000
|
unkown
|
page read and write
|
|
|
|
7FF57130D000
|
unkown
|
page readonly
|
|
|
|
7FF546CF6000
|
unkown
|
page readonly
|
|
|
|
18D45B6B000
|
unkown
|
page read and write
|
|
|
|
7FF50CA44000
|
unkown
|
page readonly
|
|
|
|
1CEAA8EF000
|
unkown
|
page read and write
|
|
|
|
1CEAA8F5000
|
unkown
|
page read and write
|
|
|
|
18D45B80000
|
unkown
|
page read and write
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
7FF5712F8000
|
unkown
|
page readonly
|
|
|
|
18D45B8D000
|
unkown
|
page read and write
|
|
|
|
1D6EAD50000
|
unkown
|
page readonly
|
|
|
|
1CEAD110000
|
unkown
|
page read and write
|
|
|
|
18D45254000
|
unkown
|
page read and write
|
|
|
|
18D46002000
|
unkown
|
page read and write
|
|
|
|
7FF5BAE82000
|
unkown
|
page readonly
|
|
|
|
18D45B78000
|
unkown
|
page read and write
|
|
|
|
1F12C64F000
|
unkown
|
page read and write
|
|
|
|
1D6EAC60000
|
heap default
|
page read and write
|
|
|
|
945F79000
|
unkown
|
page read and write
|
|
|
|
1CEACA32000
|
unkown
|
page read and write
|
|
|
|
1CEAC729000
|
unkown
|
page read and write
|
|
|
|
18D45160000
|
heap default
|
page read and write
|
|
|
|
7FF580684000
|
unkown
|
page readonly
|
|
|
|
1CEAD610000
|
unkown
|
page read and write
|
|
|
|
1CEAC830000
|
unkown
|
page read and write
|
|
|
|
1392FE47000
|
unkown
|
page read and write
|
|
|
|
1CEAA893000
|
unkown
|
page read and write
|
|
|
|
18D45257000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
18D452AC000
|
unkown
|
page read and write
|
|
|
|
1393FB000
|
unkown
|
page read and write
|
|
|
|
7FF546C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB396000
|
unkown
|
page readonly
|
|
|
|
7FF597316000
|
unkown
|
page readonly
|
|
|
|
1D6EB460000
|
unkown
|
page readonly
|
|
|
|
1EA91A30000
|
unkown
|
page readonly
|
|
|
|
7FF597787000
|
unkown
|
page readonly
|
|
|
|
7FF5BADFE000
|
unkown
|
page readonly
|
|
|
|
7FF54693C000
|
unkown
|
page readonly
|
|
|
|
7FF5712C7000
|
unkown
|
page readonly
|
|
|
|
18D45100000
|
heap private
|
page read and write
|
|
|
|
1CEAD710000
|
unkown
|
page read and write
|
|
|
|
18D45BB9000
|
unkown
|
page read and write
|
|
|
|
18D46000000
|
unkown
|
page read and write
|
|
|
|
1392FF02000
|
unkown
|
page read and write
|
|
|
|
7FF50C295000
|
unkown
|
page readonly
|
|
|
|
7FF58052B000
|
unkown
|
page readonly
|
|
|
|
1F12D000000
|
unkown
|
page readonly
|
|
|
|
7FF570E56000
|
unkown
|
page readonly
|
|
|
|
7FF570956000
|
unkown
|
page readonly
|
|
|
|
1F12C66D000
|
unkown
|
page read and write
|
|
|
|
1CEAC7BD000
|
unkown
|
page read and write
|
|
|
|
18D45BBC000
|
unkown
|
page read and write
|
|
|
|
7FF5BB337000
|
unkown
|
page readonly
|
|
|
|
1CEAD210000
|
unkown
|
page read and write
|
|
|
|
1392FF08000
|
unkown
|
page read and write
|
|
|
|
7FF4F437E000
|
unkown
|
page readonly
|
|
|
|
1CEAC602000
|
unkown
|
page read and write
|
|
|
|
1F12C66D000
|
unkown
|
page read and write
|
|
|
|
F0A38F9000
|
unkown
|
page read and write
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
18D45B60000
|
unkown
|
page read and write
|
|
|
|
F0A397F000
|
unkown
|
page read and write
|
|
|
|
1CEAA913000
|
unkown
|
page read and write
|
|
|
|
18D4524F000
|
unkown
|
page read and write
|
|
|
|
1392FDA0000
|
heap default
|
page read and write
|
|
|
|
1EA91810000
|
heap private
|
page read and write
|
|
|
|
18D45B00000
|
unkown
|
page read and write
|
|
|
|
1CEAA813000
|
unkown
|
page read and write
|
|
|
|
1CEAA855000
|
unkown
|
page read and write
|
|
|
|
1CEAC785000
|
unkown
|
page read and write
|
|
|
|
18D452E1000
|
unkown
|
page read and write
|
|
|
|
1CEAC7EA000
|
unkown
|
page read and write
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
7FF571306000
|
unkown
|
page readonly
|
|
|
|
1392FE88000
|
unkown
|
page read and write
|
|
|
|
138FFB000
|
unkown
|
page read and write
|
|
|
|
138C79000
|
unkown
|
page read and write
|
|
|
|
1CEAA7F0000
|
heap private
|
page read and write
|
|
|
|
1CEACD00000
|
unkown
|
page read and write
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
7FF596E1C000
|
unkown
|
page readonly
|
|
|
|
13947C000
|
unkown
|
page read and write
|
|
|
|
18D45B80000
|
unkown
|
page read and write
|
|
|
|
18D45B79000
|
unkown
|
page read and write
|
|
|
|
1D6EAF00000
|
unkown
|
page read and write
|
|
|
|
945E7F000
|
unkown
|
page read and write
|
|
|
|
7FF58061C000
|
unkown
|
page readonly
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
1F12C700000
|
unkown
|
page read and write
|
|
|
|
1CEAC723000
|
unkown
|
page read and write
|
|
|
|
7FF4F448B000
|
unkown
|
page readonly
|
|
|
|
1CEAC850000
|
unkown
|
page read and write
|
|
|
|
1CEAA8EF000
|
unkown
|
page read and write
|
|
|
|
27910C29000
|
unkown
|
page read and write
|
|
|
|
1CEAD410000
|
unkown
|
page read and write
|
|
|
|
7FF4F44AC000
|
unkown
|
page readonly
|
|
|
|
F0A350F000
|
unkown
|
page read and write
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
18D45B61000
|
unkown
|
page read and write
|
|
|
|
1F12C420000
|
heap private
|
page read and write
|
|
|
|
18D4524B000
|
unkown
|
page read and write
|
|
|
|
1392FE4D000
|
unkown
|
page read and write
|
|
|
|
1392FDC0000
|
unkown
|
page readonly
|
|
|
|
7FF5BB399000
|
unkown
|
page readonly
|
|
|
|
18D45A02000
|
unkown
|
page read and write
|
|
|
|
7FF5BB28C000
|
unkown
|
page readonly
|
|
|
|
13930B40000
|
unkown
|
page readonly
|
|
|
|
18D45B48000
|
unkown
|
page read and write
|
|
|
|
18D45B58000
|
unkown
|
page read and write
|
|
|
|
18D45B5F000
|
unkown
|
page read and write
|
|
|
|
1F12C570000
|
unkown
|
page readonly
|
|
|
|
7FF5976B4000
|
unkown
|
page readonly
|
|
|
|
1CEAC7E6000
|
unkown
|
page read and write
|
|
|
|
1CEAA902000
|
unkown
|
page read and write
|
|
|
|
1CEAA883000
|
unkown
|
page read and write
|
|
|
|
18D45B60000
|
unkown
|
page read and write
|
|
|
|
7FF580489000
|
unkown
|
page readonly
|
|
|
|
13957C000
|
unkown
|
page read and write
|
|
|
|
1F12C64C000
|
unkown
|
page read and write
|
|
|
|
7FF5712DA000
|
unkown
|
page readonly
|
|
|
|
7FF5805D0000
|
unkown
|
page readonly
|
|
|
|
7FF5977BE000
|
unkown
|
page readonly
|
|
|
|
2DBC5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5977A4000
|
unkown
|
page readonly
|
|
|
|
7FF580466000
|
unkown
|
page readonly
|
|
|
|
1CEAD510000
|
unkown
|
page read and write
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
7FF59769D000
|
unkown
|
page readonly
|
|
|
|
1EA91850000
|
unkown
|
page readonly
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
1D6EAC70000
|
unkown
|
page readonly
|
|
|
|
53775F7000
|
unkown
|
page read and write
|
|
|
|
1CEAC7EB000
|
unkown
|
page read and write
|
|
|
|
7FF4F44F9000
|
unkown
|
page readonly
|
|
|
|
1CEACC82000
|
unkown
|
page read and write
|
|
|
|
18D45B97000
|
unkown
|
page read and write
|
|
|
|
7FF546C80000
|
unkown
|
page readonly
|
|
|
|
7FF4F4485000
|
unkown
|
page readonly
|
|
|
|
1CEAA600000
|
heap private
|
page read and write
|
|
|
|
18D45980000
|
unkown
|
page read and write
|
|
|
|
7FF50CA2C000
|
unkown
|
page readonly
|
|
|
|
7FF4F4055000
|
unkown
|
page readonly
|
|
|
|
18D45B65000
|
unkown
|
page read and write
|
|
|
|
2DBC2F7000
|
unkown
|
page read and write
|
|
|
|
1EA9188F000
|
unkown
|
page read and write
|
|
|
|
7FF5712BF000
|
unkown
|
page readonly
|
|
|
|
1CEAC738000
|
unkown
|
page read and write
|
|
|
|
7FF4F43D3000
|
unkown
|
page readonly
|
|
|
|
7FF580604000
|
unkown
|
page readonly
|
|
|
|
1D6EAE4A000
|
unkown
|
page read and write
|
|
|
|
7FF580464000
|
unkown
|
page readonly
|
|
|
|
18D4524C000
|
unkown
|
page read and write
|
|
|
|
13930800000
|
unkown
|
page readonly
|
|
|
|
7FF546C22000
|
unkown
|
page readonly
|
|
|
|
18D452E7000
|
unkown
|
page read and write
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
18D45980000
|
unkown
|
page readonly
|
|
|
|
18D45B7C000
|
unkown
|
page read and write
|
|
|
|
1F12C688000
|
unkown
|
page read and write
|
|
|
|
7FF4F44E8000
|
unkown
|
page readonly
|
|
|
|
1CEACC42000
|
unkown
|
page read and write
|
|
|
|
7FF50CA7D000
|
unkown
|
page readonly
|
|
|
|
7FF5BB26D000
|
unkown
|
page readonly
|
|
|
|
7FF5BB0DB000
|
unkown
|
page readonly
|
|
|
|
7FF5711FC000
|
unkown
|
page readonly
|
|
|
|
13927D000
|
unkown
|
page read and write
|
|
|
|
7FF597794000
|
unkown
|
page readonly
|
|
|
|
7FF5BB36A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB325000
|
unkown
|
page readonly
|
|
|
|
7FF5BAC21000
|
unkown
|
page readonly
|
|
|
|
7FF4F437B000
|
unkown
|
page readonly
|
|
|
|
7FF4F44C4000
|
unkown
|
page readonly
|
|
|
|
7FF5BB411000
|
unkown
|
page readonly
|
|
|
|
1D6EAE2A000
|
unkown
|
page read and write
|
|
|
|
18D45B45000
|
unkown
|
page read and write
|
|
|
|
7FF5BB374000
|
unkown
|
page readonly
|
|
|
|
18D45990000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2C2000
|
unkown
|
page readonly
|
|
|
|
138D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5712A7000
|
unkown
|
page readonly
|
|
|
|
7FF580209000
|
unkown
|
page readonly
|
|
|
|
7FF5712FE000
|
unkown
|
page readonly
|
|
|
|
E753A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5805FB000
|
unkown
|
page readonly
|
|
|
|
7FF4F44FD000
|
unkown
|
page readonly
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
1CEAD410000
|
unkown
|
page read and write
|
|
|
|
18D45B6B000
|
unkown
|
page read and write
|
|
|
|
1CEAC830000
|
unkown
|
page read and write
|
|
|
|
B18C33E000
|
unkown
|
page read and write
|
|
|
|
18D4524D000
|
unkown
|
page read and write
|
|
|
|
1CEAC1A0000
|
unkown
|
page read and write
|
|
|
|
138B79000
|
unkown
|
page read and write
|
|
|
|
18D452BE000
|
unkown
|
page read and write
|
|
|
|
7FF4F44CA000
|
unkown
|
page readonly
|
|
|
|
7FF597631000
|
unkown
|
page readonly
|
|
|
|
7FF546D6A000
|
unkown
|
page readonly
|
|
|
|
1F12C654000
|
unkown
|
page read and write
|
|
|
|
7FF571374000
|
unkown
|
page readonly
|
|
|
|
1CEAA7D0000
|
unkown
|
page read and write
|
|
|
|
18D45B6B000
|
unkown
|
page read and write
|
|
|
|
1D6EAE00000
|
unkown
|
page read and write
|
|
|
|
7FF4F44DF000
|
unkown
|
page readonly
|
|
|
|
7FF546AA1000
|
unkown
|
page readonly
|
|
|
|
7FF580714000
|
unkown
|
page readonly
|
|
|
|
7FF571133000
|
unkown
|
page readonly
|
|
|
|
1CEAA95E000
|
unkown
|
page read and write
|
|
|
|
18D45213000
|
unkown
|
page read and write
|
|
|
|
18D45980000
|
unkown
|
page read and write
|
|
|
|
7FF571010000
|
unkown
|
page readonly
|
|
|
|
1CEACB82000
|
unkown
|
page read and write
|
|
|
|
1392FE29000
|
unkown
|
page read and write
|
|
|
|
1CEAA670000
|
unkown
|
page readonly
|
|
|
|
1F12C713000
|
unkown
|
page read and write
|
|
|
|
1CEAA92D000
|
unkown
|
page read and write
|
|
|
|
7FF546B7B000
|
unkown
|
page readonly
|
|
|
|
1CEAD010000
|
unkown
|
page read and write
|
|
|
|
18D45B58000
|
unkown
|
page read and write
|
|
|
|
7FF5975F3000
|
unkown
|
page readonly
|
|
|
|
7FF50C353000
|
unkown
|
page readonly
|
|
|
|
7FF5BB30C000
|
unkown
|
page readonly
|
|
|
|
7FF580647000
|
unkown
|
page readonly
|
|
|
|
7FF5805FF000
|
unkown
|
page readonly
|
|
|
|
1CEAA740000
|
unkown
|
page write copy
|
|
|
|
7FF580451000
|
unkown
|
page readonly
|
|
|
|
1CEAA96E000
|
unkown
|
page read and write
|
|
|
|
1CEAA790000
|
unkown
|
page readonly
|
|
|
|
7FF4F44EE000
|
unkown
|
page readonly
|
|
|
|
1CEAC761000
|
unkown
|
page read and write
|
|
|
|
1CEACB42000
|
unkown
|
page read and write
|
|
|
|
138CFA000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
13937B000
|
unkown
|
page read and write
|
|
|
|
1392FB000
|
unkown
|
page read and write
|
|
|
|
7FF5711DD000
|
unkown
|
page readonly
|
|
|
|
1EA91885000
|
unkown
|
page read and write
|
|
|
|
18D45170000
|
unkown
|
page readonly
|
|
|
|
7FF4F3B55000
|
unkown
|
page readonly
|
|
|
|
18D45B63000
|
unkown
|
page read and write
|
|
|
|
1CEACB82000
|
unkown
|
page read and write
|
|
|
|
18D452FA000
|
unkown
|
page read and write
|
|
|
|
E7540FE000
|
unkown
|
page read and write
|
|
|
|
7FF597750000
|
unkown
|
page readonly
|
|
|
|
1CEAA91E000
|
unkown
|
page read and write
|
|
|
|
7FF546D71000
|
unkown
|
page readonly
|
|
|
|
7FF50CA54000
|
unkown
|
page readonly
|
|
|
|
7FF546C43000
|
unkown
|
page readonly
|
|
|
|
7FF5BAE92000
|
unkown
|
page readonly
|
|
|
|
7FF546CFD000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1CA000
|
unkown
|
page readonly
|
|
|
|
E753EFF000
|
unkown
|
page read and write
|
|
|
|
7FF580538000
|
unkown
|
page readonly
|
|
|
|
18D45B73000
|
unkown
|
page read and write
|
|
|
|
E753AFF000
|
unkown
|
page read and write
|
|
|
|
7FF5974D0000
|
unkown
|
page readonly
|
|
|
|
1CEAD310000
|
unkown
|
page read and write
|
|
|
|
B18C6F5000
|
unkown
|
page read and write
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
1CEAA7E0000
|
unkown
|
page readonly
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
1F12C659000
|
unkown
|
page read and write
|
|
|
|
945EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9E6000
|
unkown
|
page readonly
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
1D6EAE13000
|
unkown
|
page read and write
|
|
|
|
1CEAC860000
|
unkown
|
page readonly
|
|
|
|
7FF571290000
|
unkown
|
page readonly
|
|
|
|
7FF5BB228000
|
unkown
|
page readonly
|
|
|
|
7FF4F4040000
|
unkown
|
page readonly
|
|
|
|
18D45BBD000
|
unkown
|
page read and write
|
|
|
|
1CEAC7B1000
|
unkown
|
page read and write
|
|
|
|
7FF5977B8000
|
unkown
|
page readonly
|
|
|
|
13907C000
|
unkown
|
page read and write
|
|
|
|
7FF4F4497000
|
unkown
|
page readonly
|
|
|
|
7FF57095C000
|
unkown
|
page readonly
|
|
|
|
1F12CC60000
|
unkown
|
page readonly
|
|
|
|
1D6EAE4D000
|
unkown
|
page read and write
|
|
|
|
7FF5BB30A000
|
unkown
|
page readonly
|
|
|
|
27910B60000
|
unkown
|
page readonly
|
|
|
|
7FF59777C000
|
unkown
|
page readonly
|
|
|
|
138EFA000
|
unkown
|
page read and write
|
|
|
|
7FF5BB40A000
|
unkown
|
page readonly
|
|
|
|
5377A78000
|
unkown
|
page read and write
|
|
|
|
18D454D0000
|
unkown
|
page readonly
|
|
|
|
B18C977000
|
unkown
|
page read and write
|
|
|
|
18D45B58000
|
unkown
|
page read and write
|
|
|
|
1392FE46000
|
unkown
|
page read and write
|
|
|
|
1F12C670000
|
unkown
|
page read and write
|
|
|
|
2DBBDCF000
|
unkown
|
page read and write
|
|
|
|
7FF4F4323000
|
unkown
|
page readonly
|
|
|
|
13930000000
|
unkown
|
page readonly
|
|
|
|
F0A39F9000
|
unkown
|
page read and write
|
|
|
|
18D45308000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
7FF57118B000
|
unkown
|
page readonly
|
|
|
|
7FF5BAE8E000
|
unkown
|
page readonly
|
|
|
|
7FF5BB2EB000
|
unkown
|
page readonly
|
|
|
|
1EA91815000
|
heap private
|
page read and write
|
|
|
|
7FF5BAF35000
|
unkown
|
page readonly
|
|
|
|
7FF571295000
|
unkown
|
page readonly
|
|
|
|
7FF571381000
|
unkown
|
page readonly
|
|
|
|
7FF5464E1000
|
unkown
|
page readonly
|
|
|
|
1F12CE02000
|
unkown
|
page read and write
|
|
|
|
27910A30000
|
heap default
|
page read and write
|
|
|
|
7FF597310000
|
unkown
|
page readonly
|
|
|
|
945B6A000
|
unkown
|
page read and write
|
|
|
|
1CEAA8C0000
|
unkown
|
page read and write
|
|
|
|
B18C3BE000
|
unkown
|
page read and write
|
|
|
|
7FF580630000
|
unkown
|
page readonly
|
|
|
|
1F12C629000
|
unkown
|
page read and write
|
|
|
|
7FF5BB0A0000
|
unkown
|
page readonly
|
|
|
|
1CEAA95F000
|
unkown
|
page read and write
|
|
|
|
1CEAD000000
|
unkown
|
page read and write
|
|
|
|
18D45BC1000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2F4000
|
unkown
|
page readonly
|
|
|
|
7FF59764B000
|
unkown
|
page readonly
|
|
|
|
18D45271000
|
unkown
|
page read and write
|
|
|
|
7FF5977C9000
|
unkown
|
page readonly
|
|
|
|
53777FF000
|
unkown
|
page read and write
|
|
|
|
7FF5BAEE6000
|
unkown
|
page readonly
|
|
|
|
18D452D4000
|
unkown
|
page read and write
|
|
|
|
18D45B49000
|
unkown
|
page read and write
|
|
|
|
1F12C800000
|
unkown
|
page readonly
|
|
|
|
7FF58069E000
|
unkown
|
page readonly
|
|
|
|
7FF546C85000
|
unkown
|
page readonly
|
|
|
|
1390FA000
|
unkown
|
page read and write
|
|
|
|
1F12C490000
|
unkown
|
page readonly
|
|
|
|
7FF58065C000
|
unkown
|
page readonly
|
|
|
|
7FF5BB0E6000
|
unkown
|
page readonly
|
|
|
|
7FF57FE8D000
|
unkown
|
page readonly
|
|
|
|
1CEAD310000
|
unkown
|
page read and write
|
|
|
|
1CEAD610000
|
unkown
|
page read and write
|
|
|
|
18D452C5000
|
unkown
|
page read and write
|
|
|
|
1CEAD510000
|
unkown
|
page read and write
|
|
|
|
1CEACB82000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
1CEAA91D000
|
unkown
|
page read and write
|
|
|
|
945FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5BB156000
|
unkown
|
page readonly
|
|
|
|
2DBBCCB000
|
unkown
|
page read and write
|
|
|
|
7FF5712BC000
|
unkown
|
page readonly
|
|
|
|
18D45C00000
|
unkown
|
page readonly
|
|
|
|
7FF5BB273000
|
unkown
|
page readonly
|
|
|
|
7FF5977C6000
|
unkown
|
page readonly
|
|
|
|
1392FE57000
|
unkown
|
page read and write
|
|
|
|
7FF546C8B000
|
unkown
|
page readonly
|
|
|
|
18D45B40000
|
unkown
|
page read and write
|
|
|
|
7FF546CF1000
|
unkown
|
page readonly
|
|
|
|
7FF5712EF000
|
unkown
|
page readonly
|
|
|
|
7FF50CA4A000
|
unkown
|
page readonly
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
7FF597841000
|
unkown
|
page readonly
|
|
|
|
1CEAC2A0000
|
unkown
|
page readonly
|
|
|
|
7FF5BAF37000
|
unkown
|
page readonly
|
|
|
|
18D45B61000
|
unkown
|
page read and write
|
|
|
|
7FF5BB223000
|
unkown
|
page readonly
|
|
|
|
7FF546CF9000
|
unkown
|
page readonly
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
1CEAA88B000
|
unkown
|
page read and write
|
|
|
|
1CEAA8B3000
|
unkown
|
page read and write
|
|
|
|
7FF5805CC000
|
unkown
|
page readonly
|
|
|
|
1CEACA77000
|
unkown
|
page read and write
|
|
|
|
1CEAD110000
|
unkown
|
page read and write
|
|
|
|
7FF58067A000
|
unkown
|
page readonly
|
|
|
|
7FF546CD4000
|
unkown
|
page readonly
|
|
|
|
1CEAC713000
|
unkown
|
page read and write
|
|
|
|
7FF4F447A000
|
unkown
|
page readonly
|
|
|
|
1F12C63C000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1C3000
|
unkown
|
page readonly
|
|
|
|
27910C00000
|
unkown
|
page read and write
|
|
|
|
7FF546957000
|
unkown
|
page readonly
|
|
|
|
5376F8C000
|
unkown
|
page read and write
|
|
|
|
7FF5BB32B000
|
unkown
|
page readonly
|
|
|
|
18D4523C000
|
unkown
|
page read and write
|
|
|
|
18D45B73000
|
unkown
|
page read and write
|
|
|
|
2DBC1FC000
|
unkown
|
page read and write
|
|
|
|
18D45B45000
|
unkown
|
page read and write
|
|
|
|
18D46200000
|
unkown
|
page readonly
|
|
|
|
7FF546A3B000
|
unkown
|
page readonly
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
7FF5802FA000
|
unkown
|
page readonly
|
|
|
|
5377979000
|
unkown
|
page read and write
|
|
|
|
1CEACA94000
|
unkown
|
page read and write
|
|
|
|
7FF546D72000
|
unkown
|
page readonly
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
7FF57FF31000
|
unkown
|
page readonly
|
|
|
|
1CEAD010000
|
unkown
|
page read and write
|
|
|
|
18D45B4F000
|
unkown
|
page read and write
|
|
|
|
1CEAC890000
|
unkown
|
page readonly
|
|
|
|
18D451B0000
|
unkown
|
page readonly
|
|
|
|
7FF570E50000
|
unkown
|
page readonly
|
|
|
|
18D45B5D000
|
unkown
|
page read and write
|
|
|
|
1392FF00000
|
unkown
|
page read and write
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
7FF580667000
|
unkown
|
page readonly
|
|
|
|
18D452EA000
|
unkown
|
page read and write
|
|
|
|
7FF546C97000
|
unkown
|
page readonly
|
|
|
|
1CEAA900000
|
unkown
|
page read and write
|
|
|
|
B18CA7E000
|
unkown
|
page read and write
|
|
|
|
2DBC4FD000
|
unkown
|
page read and write
|
|
|
|
7FF5711F4000
|
unkown
|
page readonly
|
|
|
|
1EA917E0000
|
unkown
|
page read and write
|
|
|
|
7FF580635000
|
unkown
|
page readonly
|
|
|
|
18D45B35000
|
unkown
|
page read and write
|
|
|
|
7FF597834000
|
unkown
|
page readonly
|
|
|
|
7FF546B83000
|
unkown
|
page readonly
|
|
|
|
1CEAC830000
|
unkown
|
page read and write
|
|
|
|
7FF5BB21B000
|
unkown
|
page readonly
|
|
|
|
1CEACD02000
|
unkown
|
page read and write
|
|
|
|
53776F9000
|
unkown
|
page read and write
|
|
|
|
7FF5BA9EC000
|
unkown
|
page readonly
|
|
|
|
7FF57128E000
|
unkown
|
page readonly
|
|
|
|
7FF546AA5000
|
unkown
|
page readonly
|
|
|
|
1D6EAE70000
|
unkown
|
page read and write
|
|
|
|
1CEAC7F2000
|
unkown
|
page read and write
|
|
|
|
7FF58063B000
|
unkown
|
page readonly
|
|
|
|
537787F000
|
unkown
|
page read and write
|
|
|
|
F0A3A7C000
|
unkown
|
page read and write
|
|
|
|
18D45289000
|
unkown
|
page read and write
|
|
|
|
27910C54000
|
unkown
|
page read and write
|
|
|
|
7FF58060F000
|
unkown
|
page readonly
|
|
|
|
18D45B7B000
|
unkown
|
page read and write
|
|
|
|
1CEACC00000
|
unkown
|
page read and write
|
|
|
|
1394FD000
|
unkown
|
page read and write
|
|
|
|
7FF50CA6E000
|
unkown
|
page readonly
|
|
|
|
1D6EB800000
|
unkown
|
page readonly
|
|
|
|
7FF4F44B7000
|
unkown
|
page readonly
|
|
|
|
7FF4F43CD000
|
unkown
|
page readonly
|
|
|
|
7FF5803EB000
|
unkown
|
page readonly
|
|
|
|
1CEAA87F000
|
unkown
|
page read and write
|
|
|
|
7FF5975A1000
|
unkown
|
page readonly
|
|
|
|
18D46002000
|
unkown
|
page read and write
|
|
|
|
7FF4F41F7000
|
unkown
|
page readonly
|
|
|
|
18D46061000
|
unkown
|
page read and write
|
|
|
|
18D45B42000
|
unkown
|
page read and write
|
|
|
|
7FF580455000
|
unkown
|
page readonly
|
|
|
|
279109D0000
|
heap private
|
page read and write
|
|
|
|
18D451E0000
|
unkown
|
page readonly
|
|
|
|
7FF546CB8000
|
unkown
|
page readonly
|
|
|
|
F0A348B000
|
unkown
|
page read and write
|
|
|
|
1392FE00000
|
unkown
|
page read and write
|
|
|
|
7FF597755000
|
unkown
|
page readonly
|
|
|
|
18D452B2000
|
unkown
|
page read and write
|
|
|
|
18D45313000
|
unkown
|
page read and write
|
|
|
|
18D45B7C000
|
unkown
|
page read and write
|
|
|
|
18D452A8000
|
unkown
|
page read and write
|
|
|
|
1CEACA00000
|
unkown
|
page read and write
|
|
|
|
1CEAD110000
|
unkown
|
page read and write
|
|
|
|
E753FFC000
|
unkown
|
page read and write
|
|
|
|
1392FDB0000
|
unkown
|
page readonly
|
|
|
|
18D45190000
|
unkown
|
page read and write
|
|
|
|
94607A000
|
unkown
|
page read and write
|
|
|
|
1392FE3C000
|
unkown
|
page read and write
|
|
|
|
7FF57128A000
|
unkown
|
page readonly
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
1CEAC774000
|
unkown
|
page read and write
|
|
|
|
1CEAAA00000
|
unkown
|
page readonly
|
|
|
|
7FF4F447E000
|
unkown
|
page readonly
|
|
|
|
7FF50CA68000
|
unkown
|
page readonly
|
|
|
|
53774FB000
|
unkown
|
page read and write
|
|
|
|
27910B10000
|
unkown
|
page write copy
|
|
|
|
7FF59775B000
|
unkown
|
page readonly
|
|
|
|
7FF57137A000
|
unkown
|
page readonly
|
|
|
|
1CEAC7FB000
|
unkown
|
page read and write
|
|
|
|
1387DE000
|
unkown
|
page read and write
|
|
|
|
1CEAD410000
|
unkown
|
page read and write
|
|
|
|
7FF5974C7000
|
unkown
|
page readonly
|
|
|
|
7FF4F4046000
|
unkown
|
page readonly
|
|
|
|
18D452A8000
|
unkown
|
page read and write
|
|
|
|
537727F000
|
unkown
|
page read and write
|
|
|
|
7FF5BB097000
|
unkown
|
page readonly
|
|
|
|
1CEAA898000
|
unkown
|
page read and write
|
|
|
|
7FF5BB34C000
|
unkown
|
page readonly
|
|
|
|
7FF5977AF000
|
unkown
|
page readonly
|
|
|
|
13930602000
|
unkown
|
page read and write
|
|
|
|
1CEACD02000
|
unkown
|
page read and write
|
|
|
|
7FF5BB412000
|
unkown
|
page readonly
|
|
|
|
1CEACD82000
|
unkown
|
page read and write
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
7FF5BAEF5000
|
unkown
|
page readonly
|
|
|
|
1CEAD310000
|
unkown
|
page read and write
|
|
|
|
1D6EAE50000
|
unkown
|
page read and write
|
|
|
|
7FF58065F000
|
unkown
|
page readonly
|
|
|
|
1CEAD110000
|
unkown
|
page read and write
|
|
|
|
F0A3AFE000
|
unkown
|
page read and write
|
|
|
|
1EA9186B000
|
heap default
|
page read and write
|
|
|
|
7FF58057D000
|
unkown
|
page readonly
|
|
|
|
1F12C613000
|
unkown
|
page read and write
|
|
|
|
7FF597325000
|
unkown
|
page readonly
|
|
|
|
18D459A0000
|
unkown
|
page readonly
|
|
|
|
1D6EAF08000
|
unkown
|
page read and write
|
|
|
|
1EA91820000
|
unkown
|
page read and write
|
|
|
|
7FF58062A000
|
unkown
|
page readonly
|
|
|
|
279125A0000
|
unkown
|
page read and write
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
7FF5976A3000
|
unkown
|
page readonly
|
|
|
|
1CEAC7C1000
|
unkown
|
page read and write
|
|
|
|
7FF59783A000
|
unkown
|
page readonly
|
|
|
|
1CEACD42000
|
unkown
|
page read and write
|
|
|
|
7FF54694F000
|
unkown
|
page readonly
|
|
|
|
1CEAA829000
|
unkown
|
page read and write
|
|
|
|
1CEAC840000
|
unkown
|
page read and write
|
|
|
|
F0A387E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB38E000
|
unkown
|
page readonly
|
|
|
|
7FF57129B000
|
unkown
|
page readonly
|
|
|
|
13875B000
|
unkown
|
page read and write
|
|
|
|
18D45B64000
|
unkown
|
page read and write
|
|
|
|
7FF59764E000
|
unkown
|
page readonly
|
|
|
|
1392FE13000
|
unkown
|
page read and write
|
|
|
|
18D45180000
|
unkown
|
page readonly
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
7FF546A46000
|
unkown
|
page readonly
|
|
|
|
1CEAA890000
|
unkown
|
page read and write
|
|
|
|
1CEACC02000
|
unkown
|
page read and write
|
|
|
|
1D6EAC00000
|
heap private
|
page read and write
|
|
|
|
53772FF000
|
unkown
|
page read and write
|
|
|
|
1CEACB00000
|
unkown
|
page read and write
|
|
|
|
1EA91840000
|
unkown
|
page readonly
|
|
|
|
1392FF13000
|
unkown
|
page read and write
|
|
|
|
13917A000
|
unkown
|
page read and write
|
|
|
|
1392FE4B000
|
unkown
|
page read and write
|
|
|
|
7FF50CAE4000
|
unkown
|
page readonly
|
|
|
|
1F12C480000
|
heap default
|
page read and write
|
|
|
|
7FF5BAC77000
|
unkown
|
page readonly
|
|
|
|
7FF546B61000
|
unkown
|
page readonly
|
|
|
|
2DBC3FF000
|
unkown
|
page read and write
|
|
|
|
138A7E000
|
unkown
|
page read and write
|
|
|
|
1CEAA8EF000
|
unkown
|
page read and write
|
|
|
|
1D6EB000000
|
unkown
|
page readonly
|
|
|
|
7FF4F44D4000
|
unkown
|
page readonly
|
|
|
|
7FF546B88000
|
unkown
|
page readonly
|
|
|
|
18D45200000
|
unkown
|
page read and write
|
|
|
|
7FF50CA5E000
|
unkown
|
page readonly
|
|
|
|
7FF580192000
|
unkown
|
page readonly
|
|
|
|
7FF5806A1000
|
unkown
|
page readonly
|
|
|
|
7FF571171000
|
unkown
|
page readonly
|
|
|
|
1CEACB02000
|
unkown
|
page read and write
|
|
|
|
7FF546CAF000
|
unkown
|
page readonly
|
|
|
|
7FF50CA0B000
|
unkown
|
page readonly
|
|
|
|
7FF580481000
|
unkown
|
page readonly
|
|
|
|
27910C02000
|
unkown
|
page read and write
|
|
|
|
18D45930000
|
unkown
|
page write copy
|
|
|
|
7FF4F4361000
|
unkown
|
page readonly
|
|
|
|
7FF5464DD000
|
unkown
|
page readonly
|
|
|
|
18D46002000
|
unkown
|
page read and write
|
|
|
|
7FF5802FF000
|
unkown
|
page readonly
|
|
|
|
7FF580576000
|
unkown
|
page readonly
|
|
|
|
1CEAC711000
|
unkown
|
page read and write
|
|
|
|
1EA918A0000
|
unkown
|
page read and write
|
|
|
|
7FF59774A000
|
unkown
|
page readonly
|
|
|
|
18D45B97000
|
unkown
|
page read and write
|
|
|
|
7FF546C7E000
|
unkown
|
page readonly
|
|
|
|
7FF57FE91000
|
unkown
|
page readonly
|
|
|
|
1CEAD210000
|
unkown
|
page read and write
|
|
|
|
7FF580307000
|
unkown
|
page readonly
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
7FF5BB120000
|
unkown
|
page readonly
|
|
|
|
1392FE7D000
|
unkown
|
page read and write
|
|
|
|
18D45B57000
|
unkown
|
page read and write
|
|
|
|
7FF580408000
|
unkown
|
page readonly
|
|
|
|
1391FA000
|
unkown
|
page read and write
|
|
|
|
18D45B15000
|
unkown
|
page read and write
|
|
|
|
18D45B48000
|
unkown
|
page read and write
|
|
|
|
1F12C580000
|
unkown
|
page read and write
|
|
|
|
7FF571007000
|
unkown
|
page readonly
|
|
|
|
5377B7A000
|
unkown
|
page read and write
|
|
|
|
1392FE70000
|
unkown
|
page read and write
|
|
|
|
1D6EAE55000
|
unkown
|
page read and write
|
|
|
|
18D45B7C000
|
unkown
|
page read and write
|
|
|
|
7FF5BB2C0000
|
unkown
|
page readonly
|
|
|
|
1EA91886000
|
unkown
|
page read and write
|
|
|
|
7FF546CE8000
|
unkown
|
page readonly
|
|
|
|
27910C13000
|
unkown
|
page read and write
|
|
|
|
1CEACA63000
|
unkown
|
page read and write
|
|
|
|
18D45B5A000
|
unkown
|
page read and write
|
|
|
|
7FF54694A000
|
unkown
|
page readonly
|
|
|
|
1CEAD410000
|
unkown
|
page read and write
|
|
|
|
7FF4F4572000
|
unkown
|
page readonly
|
|
|
|
1D6EAD40000
|
unkown
|
page readonly
|
|
|
|
7FF5BB31E000
|
unkown
|
page readonly
|
|
|
|
7FF546CC4000
|
unkown
|
page readonly
|
|
|
|
18D45B8C000
|
unkown
|
page read and write
|
|
|
|
7FF546AD9000
|
unkown
|
page readonly
|
|
|
|
1D6EAD60000
|
unkown
|
page read and write
|
|
|
|
7FF5BB201000
|
unkown
|
page readonly
|
|
|
|
1EA91860000
|
heap default
|
page read and write
|
|
|
|
7FF546CDE000
|
unkown
|
page readonly
|
|
|
|
138BFF000
|
unkown
|
page read and write
|
|
|
|
7FF580471000
|
unkown
|
page readonly
|
|
|
|
1CEAA91E000
|
unkown
|
page read and write
|
|
|
|
7FF4F42D1000
|
unkown
|
page readonly
|
|
|
|
7FF4F4480000
|
unkown
|
page readonly
|
|
|
|
1CEAA93D000
|
unkown
|
page read and write
|
|
|
|
7FF50CA2F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB284000
|
unkown
|
page readonly
|
|
|
|
7FF5BB404000
|
unkown
|
page readonly
|
|
|
|
7FF546C20000
|
unkown
|
page readonly
|
|
|
|
7FF59773A000
|
unkown
|
page readonly
|
|
|
|
1CEAA87E000
|
unkown
|
page read and write
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
B18C2BB000
|
unkown
|
page read and write
|
|
|
|
B18CB7F000
|
unkown
|
page read and write
|
|
|
|
27910E00000
|
unkown
|
page readonly
|
|
|
|
1F12C708000
|
unkown
|
page read and write
|
|
|
|
7FF5BB357000
|
unkown
|
page readonly
|
|
|
|
18D45B58000
|
unkown
|
page read and write
|
|
|
|
27910A40000
|
unkown
|
page readonly
|
|
|
|
7FF546CEE000
|
unkown
|
page readonly
|
|
|
|
7FF4F43E4000
|
unkown
|
page readonly
|
|
|
|
7FF597842000
|
unkown
|
page readonly
|
|
|
|
1CEAA800000
|
unkown
|
page read and write
|
|
|
|
7FF58071A000
|
unkown
|
page readonly
|
|
|
|
7FF59774E000
|
unkown
|
page readonly
|
|
|
|
1CEAC880000
|
unkown
|
page readonly
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
1CEAC830000
|
unkown
|
page read and write
|
|
|
|
7FF5BB31A000
|
unkown
|
page readonly
|
|
|
|
18D45B43000
|
unkown
|
page read and write
|
|
|
|
279126A0000
|
unkown
|
page readonly
|
|
|
|
B18C87E000
|
unkown
|
page read and write
|
|
|
|
7FF5977CD000
|
unkown
|
page readonly
|
|
|
|
7FF5BABB5000
|
unkown
|
page readonly
|
|
|
|
7FF58040F000
|
unkown
|
page readonly
|
|
|
|
7FF5803F6000
|
unkown
|
page readonly
|
|
|
|
138F7B000
|
unkown
|
page read and write
|
|
|
|
1CEACA43000
|
unkown
|
page read and write
|
|
|
|
7FF5BB320000
|
unkown
|
page readonly
|
|
|
|
27910D02000
|
unkown
|
page read and write
|
|
|
|
138AFB000
|
unkown
|
page read and write
|
|
|
|
7FF571382000
|
unkown
|
page readonly
|
|
|
|
1EA91871000
|
unkown
|
page read and write
|
|
|
|
2DBBD4F000
|
unkown
|
page read and write
|
|
|
|
1EA91960000
|
unkown
|
page readonly
|
|
|
|
7FF4F44AF000
|
unkown
|
page readonly
|
|
|
|
7FF5712E4000
|
unkown
|
page readonly
|
|
|
|
1D6EAF02000
|
unkown
|
page read and write
|
|
|
|
1392FD40000
|
heap private
|
page read and write
|
|
|
|
1EA91876000
|
unkown
|
page read and write
|
|
|
|
18D45B61000
|
unkown
|
page read and write
|
|
|
|
7FF5BB34F000
|
unkown
|
page readonly
|
|
|
|
18D45B80000
|
unkown
|
page read and write
|
|
|
|
1CEAD410000
|
unkown
|
page read and write
|
|
|
|
7FF580533000
|
unkown
|
page readonly
|
|
|
|
F0A358A000
|
unkown
|
page read and write
|
|
|
|
1CEAC7A4000
|
unkown
|
page read and write
|
|
|
|
7FF4F4564000
|
unkown
|
page readonly
|
|
|
|
7FF5BB388000
|
unkown
|
page readonly
|
|
|
|
18D45B44000
|
unkown
|
page read and write
|
|
|
|
7FF59777F000
|
unkown
|
page readonly
|
|
|
|
1D6EAE88000
|
unkown
|
page read and write
|
|
|
|
1EA9189F000
|
unkown
|
page read and write
|
|
|
|
18D45B62000
|
unkown
|
page read and write
|
|
|
|
1CEAD310000
|
unkown
|
page read and write
|
|
|
|
18D45B47000
|
unkown
|
page read and write
|
|
|
|
7FF59779A000
|
unkown
|
page readonly
|
|
|
|
18D46054000
|
unkown
|
page read and write
|
|
|
|
18D45B61000
|
unkown
|
page read and write
|
|
|
|
18D45B4E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB161000
|
unkown
|
page readonly
|
|
|
|
7FF57127A000
|
unkown
|
page readonly
|
|
|
|
7FF50CAF2000
|
unkown
|
page readonly
|
|
|
|
1EA91876000
|
heap default
|
page read and write
|
|
|
|
18D45400000
|
unkown
|
page readonly
|
|
|
|
7FF5711E3000
|
unkown
|
page readonly
|
|
|
|
1CEAC7CA000
|
unkown
|
page read and write
|
|
|
|
7FF5806A6000
|
unkown
|
page readonly
|
|
|
|
18D451F0000
|
unkown
|
page readonly
|
|
|
|
18D452EA000
|
unkown
|
page read and write
|
|
|
|
7FF5805C2000
|
unkown
|
page readonly
|
|
|
|
1CEAC700000
|
unkown
|
page read and write
|
|
|
|
1CEAA8EF000
|
unkown
|
page read and write
|
|
|
|
18D45B2E000
|
unkown
|
page read and write
|
|
|
|
7FF58068E000
|
unkown
|
page readonly
|
|
|
|
7FF597767000
|
unkown
|
page readonly
|
|
|
|
7FF580722000
|
unkown
|
page readonly
|
|
|
|
7FF58062E000
|
unkown
|
page readonly
|
|
|
|
18D45B61000
|
unkown
|
page read and write
|
|
|
|
7FF580674000
|
unkown
|
page readonly
|
|
|
|
7FF580698000
|
unkown
|
page readonly
|
|
|
|
7FF571309000
|
unkown
|
page readonly
|
|
|
|
1CEACA3A000
|
unkown
|
page read and write
|
|
|
|
7FF5806A9000
|
unkown
|
page readonly
|
|
|
|
7FF580511000
|
unkown
|
page readonly
|
|
|
|
7FF4F43EC000
|
unkown
|
page readonly
|
|
|
|
1392FDD0000
|
unkown
|
page read and write
|
|
|
|
1392FE4C000
|
unkown
|
page read and write
|
|
|
|
18D45980000
|
unkown
|
page read and write
|
|
|
|
1CEACC02000
|
unkown
|
page read and write
|
|
|
|
7FF5BB154000
|
unkown
|
page readonly
|
|
There are 772 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/index.html
|
|
|
|
https://f000.backblazeb2.com/file/cybernews-bot-3ae031b2/
|
|