Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
http://www.covid19-siparadigm.com
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\N40R6UA2\www.covid19-siparadigm[1].xml
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9D8214F5-82F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9D8214F7-82F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A41EBAA7-82F5-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\3692194074184385[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Chart.bundle.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SIP-LOGO[1].png
|
PNG image data, 702 x 167, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SLXLc1nY6Hkvalqaa46L59A[1].woff
|
Web Open Font Format, TrueType, length 25340, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SLXLc1nY6Hkvalr-ao6L59A[1].woff
|
Web Open Font Format, TrueType, length 26576, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\analytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap-datepicker[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dore.script_min[1].js
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fbevents[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\forgot_password[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\iconsminds[1].css
|
UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\owl.carousel.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\progressbar.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\simple-line-icons[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\3692194074184385[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\3692194074184385[2].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\SLXGc1nY6HkvalIhTp0[1].woff
|
Web Open Font Format, TrueType, length 25868, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\SLXLc1nY6HkvalqKbI6L59A[1].woff
|
Web Open Font Format, TrueType, length 25652, version 1.1
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bg2[1].jpg
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 560x740, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap-datepicker3.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap-tagsinput.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap.bundle.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\custom[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dore.light.blue[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dropzone.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fullcalendar.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fullcalendar.min[1].js
|
data
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\login[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\owl.carousel.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\perfect-scrollbar[1].css
|
troff or preprocessor input, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\select2.full.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\select2.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Sortable[1].js
|
UTF-8 Unicode text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bg1[1].jpg
|
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap-float-label.min[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap-tagsinput[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap.rtl.only.min[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cropper.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\dataTables.bootstrap4.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico
|
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-3.3.1.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.barrating.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\scripts[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\select.from.library[1].js
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\typeahead.bundle[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\XSE5RR0Z.htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap-notify.min[1].js
|
HTML document, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap-stars[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\chartjs-plugin-datalabels[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\component-custom-switch.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom2[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom_temp[1].css
|
ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\datatables.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\datatables.responsive.bootstrap4.min[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fbevents[1].js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\googleAnalytics[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.validate.min[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\login[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\moment.min[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mousetrap.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nouislider.min[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nouislider.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\perfect-scrollbar.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF08F569E9D6AF613D.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF9417F44143076A8B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFD785E640233A2FFA.TMP
|
data
|
dropped
|
|
There are 66 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5640 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://jqueryvalidation.org/
|
unknown
|
|
|
|
https://datatables.net/tn/11
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/login
|
|
||
|
https://www.googletraveladservices.com/travel/clk/pagead/conversion/
|
unknown
|
|
|
|
https://github.com/chartjs/Chart.js/blob/master/LICENSE.md
|
unknown
|
|
|
|
http://chartjs.org/
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/login
|
unknown
|
|
|
|
https://getbootstrap.com/)
|
unknown
|
|
|
|
https://github.com/select2/select2/blob/master/LICENSE.md
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/loginx
|
unknown
|
|
|
|
https://github.com/mouse0270/bootstrap-growl
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/favicon.ico
|
unknown
|
|
|
|
https://bugzilla.mozilla.org/show_bug.cgi?id=505521
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/loginRoot
|
unknown
|
|
|
|
https://datatables.net/download/#bs4/dt-1.10.16/af-2.2.2/b-1.5.1/cr-1.4.1/fc-3.2.4/fh-3.1.3/kt-2.3.2
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/graphs/contributors)
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/forgot_password
|
|
||
|
http://www.covid19-siparadigm.com/
|
35.155.101.78
|
|
|
|
https://www.google.%/ads/ga-audiences
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0)
|
unknown
|
|
|
|
https://connect.facebook.net/en_US/fbevents.js
|
unknown
|
|
|
|
https://github.com/uxsolutions/bootstrap-datepicker)
|
unknown
|
|
|
|
http://datatables.net/tn/
|
unknown
|
|
|
|
https://github.com/chartjs/chartjs-plugin-datalabels/blob/master/LICENSE.md
|
unknown
|
|
|
|
https://github.com/krux/postscribe/blob/master/LICENSE.
|
unknown
|
|
|
|
https://github.com/twbs/bootstrap/blob/master/LICENSE)
|
unknown
|
|
|
|
https://cdn.jsdelivr.net/npm/select2
|
unknown
|
|
|
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
|
|
|
https://github.com/bassjobsen/Bootstrap-3-Typeahead
|
unknown
|
|
|
|
https://datatables.net/download
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/favicon.ico~
|
unknown
|
|
|
|
https://fullcalendar.io/
|
unknown
|
|
|
|
https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
|
unknown
|
|
|
|
https://fengyuanchen.github.io/cropperjs
|
unknown
|
|
|
|
https://www.covid19-siparadigm.com/en/forgot_password
|
unknown
|
|
There are 25 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
scontent.xx.fbcdn.net
|
185.60.216.19
|
|
|
|
neovare-alb-285209131.us-west-2.elb.amazonaws.com
|
35.155.101.78
|
|
|
|
www.covid19-siparadigm.com
|
unknown
|
|
|
|
cdn.jsdelivr.net
|
unknown
|
|
|
|
favicon.ico
|
unknown
|
|
|
|
connect.facebook.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
185.60.216.19
|
scontent.xx.fbcdn.net
|
Ireland
|
unknown
|
|
|
|
35.155.101.78
|
neovare-alb-285209131.us-west-2.elb.amazonaws.com
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{9D8214F5-82F5-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 27 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF561680000
|
unkown
|
page readonly
|
|
|
|
2828D674000
|
unkown
|
page read and write
|
|
|
|
7FF592CED000
|
unkown
|
page readonly
|
|
|
|
7FF5616CF000
|
unkown
|
page readonly
|
|
|
|
7FF58E448000
|
unkown
|
page readonly
|
|
|
|
2828D6FF000
|
unkown
|
page read and write
|
|
|
|
369A18C000
|
unkown
|
page read and write
|
|
|
|
159E6C4D000
|
unkown
|
page read and write
|
|
|
|
7FF58E49D000
|
unkown
|
page readonly
|
|
|
|
28292C30000
|
unkown
|
page read and write
|
|
|
|
7FF58E4BC000
|
unkown
|
page readonly
|
|
|
|
7FF592B50000
|
unkown
|
page readonly
|
|
|
|
159E6B20000
|
heap private
|
page read and write
|
|
|
|
7FF582E4D000
|
unkown
|
page readonly
|
|
|
|
159E6C00000
|
unkown
|
page read and write
|
|
|
|
7FF58E1BC000
|
unkown
|
page readonly
|
|
|
|
7FF592CFC000
|
unkown
|
page readonly
|
|
|
|
7FF5929BA000
|
unkown
|
page readonly
|
|
|
|
7FF52C44A000
|
unkown
|
page readonly
|
|
|
|
2828D6B1000
|
unkown
|
page read and write
|
|
|
|
7FF561727000
|
unkown
|
page readonly
|
|
|
|
159E6C6F000
|
unkown
|
page read and write
|
|
|
|
7FF52C763000
|
unkown
|
page readonly
|
|
|
|
18AA92B0000
|
heap private
|
page read and write
|
|
|
|
18AA960F000
|
heap private
|
page read and write
|
|
|
|
7FF592C92000
|
unkown
|
page readonly
|
|
|
|
7FF592A45000
|
unkown
|
page readonly
|
|
|
|
7FF52C036000
|
unkown
|
page readonly
|
|
|
|
2828DF02000
|
unkown
|
page read and write
|
|
|
|
28292E90000
|
unkown
|
page read and write
|
|
|
|
7FF52C850000
|
unkown
|
page readonly
|
|
|
|
18AA9760000
|
heap private
|
page read and write
|
|
|
|
7FF59291E000
|
unkown
|
page readonly
|
|
|
|
7FF52C8CC000
|
unkown
|
page readonly
|
|
|
|
2E8C7470000
|
unkown
|
page read and write
|
|
|
|
369A877000
|
unkown
|
page read and write
|
|
|
|
28292B60000
|
unkown
|
page read and write
|
|
|
|
7FF56159D000
|
unkown
|
page readonly
|
|
|
|
2E8C73F0000
|
unkown
|
page readonly
|
|
|
|
7FF582DE0000
|
unkown
|
page readonly
|
|
|
|
7FF52C8BD000
|
unkown
|
page readonly
|
|
|
|
369A5F5000
|
unkown
|
page read and write
|
|
|
|
2828D697000
|
unkown
|
page read and write
|
|
|
|
7FF582CD8000
|
unkown
|
page readonly
|
|
|
|
7FF592A50000
|
unkown
|
page readonly
|
|
|
|
7FF582DF8000
|
unkown
|
page readonly
|
|
|
|
2828D641000
|
unkown
|
page read and write
|
|
|
|
159E7940000
|
unkown
|
page readonly
|
|
|
|
7FF52C8E5000
|
unkown
|
page readonly
|
|
|
|
2E8C7600000
|
unkown
|
page readonly
|
|
|
|
2828D68C000
|
unkown
|
page read and write
|
|
|
|
7FF52C94E000
|
unkown
|
page readonly
|
|
|
|
2E8C7490000
|
unkown
|
page read and write
|
|
|
|
EBD59FB000
|
unkown
|
page read and write
|
|
|
|
7FF58E14C000
|
unkown
|
page readonly
|
|
|
|
7FF58E489000
|
unkown
|
page readonly
|
|
|
|
8F24B7F000
|
unkown
|
page read and write
|
|
|
|
2828E5C0000
|
unkown
|
page readonly
|
|
|
|
7FF58E4A1000
|
unkown
|
page readonly
|
|
|
|
8A422BC000
|
unkown
|
page read and write
|
|
|
|
7FF5616ED000
|
unkown
|
page readonly
|
|
|
|
28292B54000
|
unkown
|
page read and write
|
|
|
|
EBD5BFD000
|
unkown
|
page read and write
|
|
|
|
7FF582E39000
|
unkown
|
page readonly
|
|
|
|
7FF58E3E4000
|
unkown
|
page readonly
|
|
|
|
207BA63C000
|
unkown
|
page read and write
|
|
|
|
159E6C8A000
|
unkown
|
page read and write
|
|
|
|
28292B51000
|
unkown
|
page read and write
|
|
|
|
2828D5D0000
|
unkown
|
page read and write
|
|
|
|
28292C90000
|
unkown
|
page read and write
|
|
|
|
28292B74000
|
unkown
|
page read and write
|
|
|
|
7FF592CBE000
|
unkown
|
page readonly
|
|
|
|
7FF592D15000
|
unkown
|
page readonly
|
|
|
|
2828D470000
|
heap private
|
page read and write
|
|
|
|
7FF5616FC000
|
unkown
|
page readonly
|
|
|
|
7FF561682000
|
unkown
|
page readonly
|
|
|
|
7FF56170C000
|
unkown
|
page readonly
|
|
|
|
2828D629000
|
unkown
|
page read and write
|
|
|
|
7FF560F6E000
|
unkown
|
page readonly
|
|
|
|
7FF561290000
|
unkown
|
page readonly
|
|
|
|
207BA530000
|
unkown
|
page readonly
|
|
|
|
7FF592BFC000
|
unkown
|
page readonly
|
|
|
|
7FF592CD9000
|
unkown
|
page readonly
|
|
|
|
8A4267D000
|
unkown
|
page read and write
|
|
|
|
18AA78B0000
|
unkown
|
page read and write
|
|
|
|
7FF52C6DF000
|
unkown
|
page readonly
|
|
|
|
207BA702000
|
unkown
|
page read and write
|
|
|
|
7FF5825C6000
|
unkown
|
page readonly
|
|
|
|
7FF59298D000
|
unkown
|
page readonly
|
|
|
|
159E6ED0000
|
unkown
|
page readonly
|
|
|
|
2828E990000
|
unkown
|
page read and write
|
|
|
|
7FF58E4D0000
|
unkown
|
page readonly
|
|
|
|
2828D800000
|
unkown
|
page readonly
|
|
|
|
28292C00000
|
unkown
|
page read and write
|
|
|
|
7FF561706000
|
unkown
|
page readonly
|
|
|
|
2E8C7380000
|
heap private
|
page read and write
|
|
|
|
7FF59299F000
|
unkown
|
page readonly
|
|
|
|
2828E610000
|
unkown
|
page readonly
|
|
|
|
8F2457A000
|
unkown
|
page read and write
|
|
|
|
2E8C7413000
|
unkown
|
page read and write
|
|
|
|
7FF58E475000
|
unkown
|
page readonly
|
|
|
|
7FF52C951000
|
unkown
|
page readonly
|
|
|
|
7FF582DF6000
|
unkown
|
page readonly
|
|
|
|
28292A30000
|
unkown
|
page read and write
|
|
|
|
18AA9480000
|
heap private
|
page read and write
|
|
|
|
28292C9E000
|
unkown
|
page read and write
|
|
|
|
207BA670000
|
unkown
|
page read and write
|
|
|
|
7FF582EDE000
|
unkown
|
page readonly
|
|
|
|
7FF52C8D6000
|
unkown
|
page readonly
|
|
|
|
159E6BB0000
|
unkown
|
page read and write
|
|
|
|
7FF592B0F000
|
unkown
|
page readonly
|
|
|
|
7FF592917000
|
unkown
|
page readonly
|
|
|
|
7FF582CFD000
|
unkown
|
page readonly
|
|
|
|
7FF52C852000
|
unkown
|
page readonly
|
|
|
|
7FF592AEE000
|
unkown
|
page readonly
|
|
|
|
28292B30000
|
unkown
|
page read and write
|
|
|
|
7FF5614AA000
|
unkown
|
page readonly
|
|
|
|
7FF58E3DE000
|
unkown
|
page readonly
|
|
|
|
7FF52C72A000
|
unkown
|
page readonly
|
|
|
|
7FF52C7CC000
|
unkown
|
page readonly
|
|
|
|
7FF52C8F4000
|
unkown
|
page readonly
|
|
|
|
EBD5DFF000
|
unkown
|
page read and write
|
|
|
|
8F24A7E000
|
unkown
|
page read and write
|
|
|
|
28292E00000
|
unkown
|
page read and write
|
|
|
|
18AA9390000
|
unkown
|
page readonly
|
|
|
|
8F2467A000
|
unkown
|
page read and write
|
|
|
|
28292A10000
|
unkown
|
page read and write
|
|
|
|
2E8C73E0000
|
heap default
|
page read and write
|
|
|
|
2828E001000
|
unkown
|
page read and write
|
|
|
|
7FF592B2E000
|
unkown
|
page readonly
|
|
|
|
7FF592C78000
|
unkown
|
page readonly
|
|
|
|
159E6D02000
|
unkown
|
page read and write
|
|
|
|
8F249FF000
|
unkown
|
page read and write
|
|
|
|
7FF582CBA000
|
unkown
|
page readonly
|
|
|
|
28292B60000
|
unkown
|
page read and write
|
|
|
|
7FF58E446000
|
unkown
|
page readonly
|
|
|
|
7FF582C6F000
|
unkown
|
page readonly
|
|
|
|
18AA93A0000
|
unkown
|
page readonly
|
|
|
|
7FF52C71E000
|
unkown
|
page readonly
|
|
|
|
7FF582DF2000
|
unkown
|
page readonly
|
|
|
|
2E8C8140000
|
unkown
|
page readonly
|
|
|
|
2E8C76D0000
|
unkown
|
page readonly
|
|
|
|
2828DE02000
|
unkown
|
page read and write
|
|
|
|
7FF58E539000
|
unkown
|
page readonly
|
|
|
|
28292B70000
|
unkown
|
page read and write
|
|
|
|
159E6D00000
|
unkown
|
page read and write
|
|
|
|
7FF56150F000
|
unkown
|
page readonly
|
|
|
|
7FF592C57000
|
unkown
|
page readonly
|
|
|
|
7FF592C67000
|
unkown
|
page readonly
|
|
|
|
7FF58E44A000
|
unkown
|
page readonly
|
|
|
|
7FF58E4D4000
|
unkown
|
page readonly
|
|
|
|
18AA78EB000
|
heap default
|
page read and write
|
|
|
|
207BA550000
|
unkown
|
page read and write
|
|
|
|
7FF52C862000
|
unkown
|
page readonly
|
|
|
|
2828E5E0000
|
unkown
|
page readonly
|
|
|
|
7FF592D89000
|
unkown
|
page readonly
|
|
|
|
7FF5616BE000
|
unkown
|
page readonly
|
|
|
|
7FF52C895000
|
unkown
|
page readonly
|
|
|
|
207BA629000
|
unkown
|
page read and write
|
|
|
|
7FF592C41000
|
unkown
|
page readonly
|
|
|
|
3CE7E7F000
|
unkown
|
page read and write
|
|
|
|
7FF592D0C000
|
unkown
|
page readonly
|
|
|
|
2E8C7500000
|
unkown
|
page read and write
|
|
|
|
7FF52C959000
|
unkown
|
page readonly
|
|
|
|
28292E34000
|
unkown
|
page write copy
|
|
|
|
8F2497B000
|
unkown
|
page read and write
|
|
|
|
3CE827E000
|
unkown
|
page read and write
|
|
|
|
7FF592C4B000
|
unkown
|
page readonly
|
|
|
|
7FF592B41000
|
unkown
|
page readonly
|
|
|
|
2828E400000
|
unkown
|
page read and write
|
|
|
|
207BA450000
|
heap default
|
page read and write
|
|
|
|
2828DF13000
|
unkown
|
page read and write
|
|
|
|
7FF5615C7000
|
unkown
|
page readonly
|
|
|
|
2828E4E0000
|
unkown
|
page read and write
|
|
|
|
159E6BA0000
|
unkown
|
page readonly
|
|
|
|
207BA672000
|
unkown
|
page read and write
|
|
|
|
18AA79E0000
|
unkown
|
page readonly
|
|
|
|
8F2477F000
|
unkown
|
page read and write
|
|
|
|
159E6D13000
|
unkown
|
page read and write
|
|
|
|
7FF561696000
|
unkown
|
page readonly
|
|
|
|
28292CB4000
|
unkown
|
page read and write
|
|
|
|
7FF592CC5000
|
unkown
|
page readonly
|
|
|
|
7FF592C82000
|
unkown
|
page readonly
|
|
|
|
28292F80000
|
unkown
|
page read and write
|
|
|
|
7FF592ABC000
|
unkown
|
page readonly
|
|
|
|
3CE807F000
|
unkown
|
page read and write
|
|
|
|
369A97E000
|
unkown
|
page read and write
|
|
|
|
8A427FC000
|
unkown
|
page read and write
|
|
|
|
7FF592C37000
|
unkown
|
page readonly
|
|
|
|
207BA713000
|
unkown
|
page read and write
|
|
|
|
2828E5D0000
|
unkown
|
page readonly
|
|
|
|
7FF582E56000
|
unkown
|
page readonly
|
|
|
|
7FF52C868000
|
unkown
|
page readonly
|
|
|
|
7FF592D7E000
|
unkown
|
page readonly
|
|
|
|
2E8C7400000
|
unkown
|
page read and write
|
|
|
|
28292CB0000
|
unkown
|
page read and write
|
|
|
|
7FF58E4AC000
|
unkown
|
page readonly
|
|
|
|
7FF592530000
|
unkown
|
page readonly
|
|
|
|
159E6C6B000
|
unkown
|
page read and write
|
|
|
|
8F242FE000
|
unkown
|
page read and write
|
|
|
|
2828D5B0000
|
unkown
|
page readonly
|
|
|
|
28292E50000
|
unkown
|
page read and write
|
|
|
|
2828D658000
|
unkown
|
page read and write
|
|
|
|
7FF561789000
|
unkown
|
page readonly
|
|
|
|
7FF5928C1000
|
unkown
|
page readonly
|
|
|
|
207BA3F0000
|
heap private
|
page read and write
|
|
|
|
7FF582EE9000
|
unkown
|
page readonly
|
|
|
|
7FF592958000
|
unkown
|
page readonly
|
|
|
|
7FF58DD1E000
|
unkown
|
page readonly
|
|
|
|
207BA686000
|
unkown
|
page read and write
|
|
|
|
7FF58E46E000
|
unkown
|
page readonly
|
|
|
|
28292E90000
|
unkown
|
page read and write
|
|
|
|
7FF52C460000
|
unkown
|
page readonly
|
|
|
|
28292ED0000
|
unkown
|
page readonly
|
|
|
|
369A4FE000
|
unkown
|
page read and write
|
|
|
|
7FF561692000
|
unkown
|
page readonly
|
|
|
|
28292E70000
|
unkown
|
page read and write
|
|
|
|
7FF592409000
|
unkown
|
page readonly
|
|
|
|
207BA460000
|
unkown
|
page readonly
|
|
|
|
2828D4D0000
|
heap default
|
page read and write
|
|
|
|
8F24C7E000
|
unkown
|
page read and write
|
|
|
|
7FF58E4DD000
|
unkown
|
page readonly
|
|
|
|
7FF592C07000
|
unkown
|
page readonly
|
|
|
|
2828D5C0000
|
unkown
|
page readonly
|
|
|
|
7FF52C67A000
|
unkown
|
page readonly
|
|
|
|
282929A0000
|
unkown
|
page read and write
|
|
|
|
8F2427E000
|
unkown
|
page read and write
|
|
|
|
7FF56154E000
|
unkown
|
page readonly
|
|
|
|
207BAE02000
|
unkown
|
page read and write
|
|
|
|
7FF58E4B6000
|
unkown
|
page readonly
|
|
|
|
7FF5925C5000
|
unkown
|
page readonly
|
|
|
|
7FF582E2F000
|
unkown
|
page readonly
|
|
|
|
28292FB0000
|
unkown
|
page readonly
|
|
|
|
7FF58E4E2000
|
unkown
|
page readonly
|
|
|
|
2E8C744A000
|
unkown
|
page read and write
|
|
|
|
8F2447F000
|
unkown
|
page read and write
|
|
|
|
7FF582E0A000
|
unkown
|
page readonly
|
|
|
|
28292C15000
|
unkown
|
page read and write
|
|
|
|
3CE837F000
|
unkown
|
page read and write
|
|
|
|
7FF592A3E000
|
unkown
|
page readonly
|
|
|
|
28292A20000
|
unkown
|
page read and write
|
|
|
|
EBD55AE000
|
unkown
|
page read and write
|
|
|
|
7FF592D80000
|
unkown
|
page readonly
|
|
|
|
7FF582E75000
|
unkown
|
page readonly
|
|
|
|
18AA7C60000
|
heap private
|
page read and write
|
|
|
|
8F24E7C000
|
unkown
|
page read and write
|
|
|
|
28292C80000
|
unkown
|
page read and write
|
|
|
|
28292B50000
|
unkown
|
page read and write
|
|
|
|
7FF58E4D7000
|
unkown
|
page readonly
|
|
|
|
7FF592CF1000
|
unkown
|
page readonly
|
|
|
|
7FF561781000
|
unkown
|
page readonly
|
|
|
|
2E8C7488000
|
unkown
|
page read and write
|
|
|
|
2828D4E0000
|
unkown
|
page readonly
|
|
|
|
18AA7C65000
|
heap private
|
page read and write
|
|
|
|
18AA78E0000
|
heap default
|
page read and write
|
|
|
|
7FF592B48000
|
unkown
|
page readonly
|
|
|
|
7FF592CCF000
|
unkown
|
page readonly
|
|
|
|
7FF561578000
|
unkown
|
page readonly
|
|
|
|
7FF582CAE000
|
unkown
|
page readonly
|
|
|
|
2828D702000
|
unkown
|
page read and write
|
|
|
|
28292E90000
|
unkown
|
page read and write
|
|
|
|
18AA7E70000
|
unkown
|
page readonly
|
|
|
|
2828D6A2000
|
unkown
|
page read and write
|
|
|
|
18AA78D0000
|
unkown
|
page readonly
|
|
|
|
7FF592C6C000
|
unkown
|
page readonly
|
|
|
|
159E6C02000
|
unkown
|
page read and write
|
|
|
|
2E8C7B30000
|
unkown
|
page readonly
|
|
|
|
18AA7C70000
|
unkown
|
page readonly
|
|
|
|
159E6D08000
|
unkown
|
page read and write
|
|
|
|
3CE7C7B000
|
unkown
|
page read and write
|
|
|
|
2828E980000
|
unkown
|
page read and write
|
|
|
|
159E6B90000
|
unkown
|
page readonly
|
|
|
|
8F24AFE000
|
unkown
|
page read and write
|
|
|
|
7FF592CAA000
|
unkown
|
page readonly
|
|
|
|
7FF592BF5000
|
unkown
|
page readonly
|
|
|
|
7FF59299C000
|
unkown
|
page readonly
|
|
|
|
2828D692000
|
unkown
|
page read and write
|
|
|
|
7FF592CF6000
|
unkown
|
page readonly
|
|
|
|
7FF592C96000
|
unkown
|
page readonly
|
|
|
|
28292B3E000
|
unkown
|
page read and write
|
|
|
|
2E8C743C000
|
unkown
|
page read and write
|
|
|
|
18AA9510000
|
heap private
|
page read and write
|
|
|
|
8F24BFE000
|
unkown
|
page read and write
|
|
|
|
7FF582E66000
|
unkown
|
page readonly
|
|
|
|
8F23FFB000
|
unkown
|
page read and write
|
|
|
|
7FF582E80000
|
unkown
|
page readonly
|
|
|
|
8F2487B000
|
unkown
|
page read and write
|
|
|
|
28292C4B000
|
unkown
|
page read and write
|
|
|
|
7FF52C89F000
|
unkown
|
page readonly
|
|
|
|
8F24F7F000
|
unkown
|
page read and write
|
|
|
|
7FF58E52E000
|
unkown
|
page readonly
|
|
|
|
369AA7D000
|
unkown
|
page read and write
|
|
|
|
18AA93B0000
|
unkown
|
page readonly
|
|
|
|
7FF52C8F0000
|
unkown
|
page readonly
|
|
|
|
159E6B80000
|
heap default
|
page read and write
|
|
|
|
7FF561715000
|
unkown
|
page readonly
|
|
|
|
7FF582D5C000
|
unkown
|
page readonly
|
|
|
|
2828D6BD000
|
unkown
|
page read and write
|
|
|
|
28292E40000
|
unkown
|
page read and write
|
|
|
|
7FF582DE2000
|
unkown
|
page readonly
|
|
|
|
28292EE0000
|
unkown
|
page readonly
|
|
|
|
7FF592B3C000
|
unkown
|
page readonly
|
|
|
|
7FF52C450000
|
unkown
|
page readonly
|
|
|
|
2828E600000
|
unkown
|
page readonly
|
|
|
|
7FF582E87000
|
unkown
|
page readonly
|
|
|
|
2828D690000
|
unkown
|
page read and write
|
|
|
|
2E8C7508000
|
unkown
|
page read and write
|
|
|
|
7FF592C63000
|
unkown
|
page readonly
|
|
|
|
28292CC7000
|
unkown
|
page read and write
|
|
|
|
159E6C13000
|
unkown
|
page read and write
|
|
|
|
7FF52C8C6000
|
unkown
|
page readonly
|
|
|
|
2828DF18000
|
unkown
|
page read and write
|
|
|
|
207BA540000
|
unkown
|
page readonly
|
|
|
|
7FF561720000
|
unkown
|
page readonly
|
|
|
|
7FF592996000
|
unkown
|
page readonly
|
|
|
|
159E6E00000
|
unkown
|
page readonly
|
|
|
|
7FF592D06000
|
unkown
|
page readonly
|
|
|
|
207BA600000
|
unkown
|
page read and write
|
|
|
|
7FF582D21000
|
unkown
|
page readonly
|
|
|
|
7FF52C8A9000
|
unkown
|
page readonly
|
|
|
|
207BB000000
|
unkown
|
page readonly
|
|
|
|
28292C72000
|
unkown
|
page read and write
|
|
|
|
7FF5829F0000
|
unkown
|
page readonly
|
|
|
|
18AA7850000
|
unkown
|
page readonly
|
|
|
|
7FF592459000
|
unkown
|
page readonly
|
|
|
|
2E8C7513000
|
unkown
|
page read and write
|
|
|
|
7FF5616D9000
|
unkown
|
page readonly
|
|
|
|
28292E24000
|
unkown
|
page readonly
|
|
|
|
2828D6A4000
|
unkown
|
page read and write
|
|
|
|
7FF52C8F7000
|
unkown
|
page readonly
|
|
|
|
2E8C7429000
|
unkown
|
page read and write
|
|
|
|
28292E60000
|
unkown
|
page read and write
|
|
|
|
2828E5F0000
|
unkown
|
page readonly
|
|
|
|
7FF592D24000
|
unkown
|
page readonly
|
|
|
|
7FF52C8DC000
|
unkown
|
page readonly
|
|
|
|
369A6FB000
|
unkown
|
page read and write
|
|
|
|
18AA92C0000
|
unkown
|
page readonly
|
|
|
|
7FF592454000
|
unkown
|
page readonly
|
|
|
|
7FF592D27000
|
unkown
|
page readonly
|
|
|
|
7FF592D89000
|
unkown
|
page readonly
|
|
|
|
7FF582E5C000
|
unkown
|
page readonly
|
|
|
|
159E6C6B000
|
unkown
|
page read and write
|
|
|
|
7FF59252E000
|
unkown
|
page readonly
|
|
|
|
2E8C7453000
|
unkown
|
page read and write
|
|
|
|
7FF58E1B3000
|
unkown
|
page readonly
|
|
|
|
2828DB90000
|
unkown
|
page readonly
|
|
|
|
7FF561593000
|
unkown
|
page readonly
|
|
|
|
282929E0000
|
unkown
|
page readonly
|
|
|
|
28292E03000
|
unkown
|
page readonly
|
|
|
|
EBD54AB000
|
unkown
|
page read and write
|
|
|
|
7FF5616C5000
|
unkown
|
page readonly
|
|
|
|
2E8C7B40000
|
unkown
|
page read and write
|
|
|
|
7FF561789000
|
unkown
|
page readonly
|
|
|
|
159E6C4B000
|
unkown
|
page read and write
|
|
|
|
7FF582E1E000
|
unkown
|
page readonly
|
|
|
|
7FF582EE9000
|
unkown
|
page readonly
|
|
|
|
7FF592A37000
|
unkown
|
page readonly
|
|
|
|
2828D613000
|
unkown
|
page read and write
|
|
|
|
18AA7AB0000
|
unkown
|
page read and write
|
|
|
|
28292E20000
|
unkown
|
page write copy
|
|
|
|
7FF56177E000
|
unkown
|
page readonly
|
|
|
|
7FF5829E0000
|
unkown
|
page readonly
|
|
|
|
7FF592AC8000
|
unkown
|
page readonly
|
|
|
|
EBD552E000
|
unkown
|
page read and write
|
|
|
|
8F24D7D000
|
unkown
|
page read and write
|
|
|
|
7FF592A0C000
|
unkown
|
page readonly
|
|
|
|
7FF52C87A000
|
unkown
|
page readonly
|
|
|
|
8A423BE000
|
unkown
|
page read and write
|
|
|
|
2828E983000
|
unkown
|
page read and write
|
|
|
|
2828E620000
|
unkown
|
page readonly
|
|
|
|
7FF582E84000
|
unkown
|
page readonly
|
|
|
|
2E8C7450000
|
unkown
|
page read and write
|
|
|
|
7FF5616F6000
|
unkown
|
page readonly
|
|
|
|
8F243F7000
|
unkown
|
page read and write
|
|
|
|
7FF592D20000
|
unkown
|
page readonly
|
|
|
|
7FF58E45A000
|
unkown
|
page readonly
|
|
|
|
7FF582CF3000
|
unkown
|
page readonly
|
|
|
|
7FF56127A000
|
unkown
|
page readonly
|
|
|
|
2828DF18000
|
unkown
|
page read and write
|
|
|
|
28292C25000
|
unkown
|
page read and write
|
|
|
|
8A4277E000
|
unkown
|
page read and write
|
|
|
|
28292F70000
|
unkown
|
page readonly
|
|
|
|
369A47D000
|
unkown
|
page read and write
|
|
|
|
7FF561724000
|
unkown
|
page readonly
|
|
|
|
7FF52C748000
|
unkown
|
page readonly
|
|
|
|
7FF582C0A000
|
unkown
|
page readonly
|
|
|
|
7FF582EE1000
|
unkown
|
page readonly
|
|
|
|
7FF5615C1000
|
unkown
|
page readonly
|
|
|
|
7FF52C797000
|
unkown
|
page readonly
|
|
|
|
7FF58E531000
|
unkown
|
page readonly
|
|
|
|
159E7402000
|
unkown
|
page read and write
|
|
|
|
EBD5AF7000
|
unkown
|
page read and write
|
|
|
|
28292990000
|
unkown
|
page read and write
|
|
|
|
2828DE00000
|
unkown
|
page read and write
|
|
|
|
2828DF59000
|
unkown
|
page read and write
|
|
|
|
28292B38000
|
unkown
|
page read and write
|
|
|
|
7FF52C866000
|
unkown
|
page readonly
|
|
|
|
28292E00000
|
unkown
|
page readonly
|
|
|
|
2E8C7502000
|
unkown
|
page read and write
|
|
|
|
3CE817D000
|
unkown
|
page read and write
|
|
|
|
7FF58DCE3000
|
unkown
|
page readonly
|
|
|
|
28292E90000
|
unkown
|
page readonly
|
|
|
|
159E7600000
|
unkown
|
page readonly
|
|
|
|
7FF52C959000
|
unkown
|
page readonly
|
|
|
|
2828D5E0000
|
unkown
|
page read and write
|
|
|
|
207BAB90000
|
unkown
|
page readonly
|
|
|
|
8A4233E000
|
unkown
|
page read and write
|
|
|
|
7FF561280000
|
unkown
|
page readonly
|
|
|
|
7FF58E432000
|
unkown
|
page readonly
|
|
|
|
2828DE15000
|
unkown
|
page read and write
|
|
|
|
28292C3E000
|
unkown
|
page read and write
|
|
|
|
7FF560E59000
|
unkown
|
page readonly
|
|
|
|
7FF561698000
|
unkown
|
page readonly
|
|
|
|
7FF56155A000
|
unkown
|
page readonly
|
|
|
|
EBD5CFF000
|
unkown
|
page read and write
|
|
|
|
7FF58E430000
|
unkown
|
page readonly
|
|
|
|
28292EF0000
|
unkown
|
page readonly
|
|
|
|
2828D672000
|
unkown
|
page read and write
|
|
|
|
7FF5829DA000
|
unkown
|
page readonly
|
|
|
|
7FF592900000
|
unkown
|
page readonly
|
|
|
|
207BA800000
|
unkown
|
page readonly
|
|
|
|
7FF5615FC000
|
unkown
|
page readonly
|
|
|
|
3CE7DFC000
|
unkown
|
page read and write
|
|
|
|
7FF592C98000
|
unkown
|
page readonly
|
|
|
|
2828E961000
|
unkown
|
page read and write
|
|
|
|
2828D66C000
|
unkown
|
page read and write
|
|
|
|
369A77E000
|
unkown
|
page read and write
|
|
|
|
18AA791C000
|
heap default
|
page read and write
|
|
|
|
2E8C7456000
|
unkown
|
page read and write
|
|
|
|
2E8C744D000
|
unkown
|
page read and write
|
|
|
|
2E8C7E00000
|
unkown
|
page readonly
|
|
|
|
2828DF00000
|
unkown
|
page read and write
|
|
|
|
207BA613000
|
unkown
|
page read and write
|
|
|
|
159E6C55000
|
unkown
|
page read and write
|
|
|
|
7FF592AAB000
|
unkown
|
page readonly
|
|
|
|
28292E0C000
|
unkown
|
page write copy
|
|
|
|
7FF5616AA000
|
unkown
|
page readonly
|
|
|
|
28292E37000
|
unkown
|
page write copy
|
|
|
|
207BA602000
|
unkown
|
page read and write
|
|
|
|
7FF58E4C5000
|
unkown
|
page readonly
|
|
|
|
7FF58E4A6000
|
unkown
|
page readonly
|
|
|
|
3CE7F77000
|
unkown
|
page read and write
|
|
|
|
7FF582E25000
|
unkown
|
page readonly
|
|
|
|
2828D713000
|
unkown
|
page read and write
|
|
|
|
7FF52C13E000
|
unkown
|
page readonly
|
|
|
|
7FF52C88E000
|
unkown
|
page readonly
|
|
|
|
2828DF58000
|
unkown
|
page read and write
|
|
|
|
7FF52C791000
|
unkown
|
page readonly
|
|
|
|
159E6C50000
|
unkown
|
page read and write
|
|
|
|
7FF5826CE000
|
unkown
|
page readonly
|
|
|
|
7FF58E3DA000
|
unkown
|
page readonly
|
|
|
|
7FF582D27000
|
unkown
|
page readonly
|
|
|
|
7FF592C21000
|
unkown
|
page readonly
|
|
|
|
28292B30000
|
unkown
|
page read and write
|
|
|
|
7FF582E6C000
|
unkown
|
page readonly
|
|
|
|
18AA9280000
|
unkown
|
page readonly
|
|
|
|
7FF592413000
|
unkown
|
page readonly
|
|
|
|
7FF592C80000
|
unkown
|
page readonly
|
|
|
|
3CE7CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5928C5000
|
unkown
|
page readonly
|
|
|
|
159E6C3C000
|
unkown
|
page read and write
|
|
|
|
28292F90000
|
unkown
|
page readonly
|
|
|
|
159E6C29000
|
unkown
|
page read and write
|
|
|
|
7FF58E539000
|
unkown
|
page readonly
|
|
|
|
2E8C7C02000
|
unkown
|
page read and write
|
|
|
|
7FF592B59000
|
unkown
|
page readonly
|
|
|
|
2828D600000
|
unkown
|
page read and write
|
|
There are 457 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.covid19-siparadigm.com/en/login
|
|
|
|
https://www.covid19-siparadigm.com/en/forgot_password
|
|
|
|
https://www.covid19-siparadigm.com/en/login
|
|