Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
http://track.coronavirusworldupdatesmail.com
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7A85CA44-B1B8-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7A85CA46-B1B8-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7A85CA47-B1B8-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\http_400[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\info_48[1]
|
PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\background_gradient[1]
|
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames
3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bullet[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF3D13E0183C10DE39.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF7F138E5C72101DFB.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFB97230778D1EAE58.TMP
|
data
|
dropped
|
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6496 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://track.coronavirusworldupdatesmail.com/Root
|
unknown
|
|
|
|
http://track.coronavirusworldupdatesmail.com/
|
104.21.73.52
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
track.coronavirusworldupdatesmail.com
|
104.21.73.52
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
104.21.73.52
|
track.coronavirusworldupdatesmail.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{7A85CA44-B1B8-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
There are 9 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5D60EC000
|
unkown
|
page readonly
|
|
|
|
7FF5D600D000
|
unkown
|
page readonly
|
|
|
|
2A95CB13000
|
unkown
|
page read and write
|
|
|
|
D2A647B000
|
unkown
|
page read and write
|
|
|
|
7FF5D607C000
|
unkown
|
page readonly
|
|
|
|
1F7F2BD9000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C95000
|
unkown
|
page readonly
|
|
|
|
2A95C9B0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5EF9000
|
unkown
|
page readonly
|
|
|
|
1F7F2EA4000
|
unkown
|
page read and write
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
7FF56083A000
|
unkown
|
page readonly
|
|
|
|
7FF5D5B9E000
|
unkown
|
page readonly
|
|
|
|
14D9B402000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F11000
|
unkown
|
page readonly
|
|
|
|
1F7F04F1000
|
unkown
|
page read and write
|
|
|
|
7FF52F1C0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5EE1000
|
unkown
|
page readonly
|
|
|
|
7FF5D6104000
|
unkown
|
page readonly
|
|
|
|
7FF5D5926000
|
unkown
|
page readonly
|
|
|
|
7FF5D61AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D5D7C000
|
unkown
|
page readonly
|
|
|
|
2A95E470000
|
unkown
|
page read and write
|
|
|
|
7FF56075C000
|
unkown
|
page readonly
|
|
|
|
7FF531B7F000
|
unkown
|
page readonly
|
|
|
|
1F7F2D70000
|
unkown
|
page read and write
|
|
|
|
1B0E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D60EF000
|
unkown
|
page readonly
|
|
|
|
1F7F2D77000
|
unkown
|
page read and write
|
|
|
|
7FF5608E1000
|
unkown
|
page readonly
|
|
|
|
1F7F2E6E000
|
unkown
|
page read and write
|
|
|
|
7FF52F183000
|
unkown
|
page readonly
|
|
|
|
7FF5607F0000
|
unkown
|
page readonly
|
|
|
|
1F7F2781000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F01000
|
unkown
|
page readonly
|
|
|
|
7FF531EB0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5E37000
|
unkown
|
page readonly
|
|
|
|
14D9AC4E000
|
unkown
|
page read and write
|
|
|
|
1F7F2C23000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F19000
|
unkown
|
page readonly
|
|
|
|
14D9AE00000
|
unkown
|
page readonly
|
|
|
|
EDB6FFA000
|
unkown
|
page read and write
|
|
|
|
1F7F2CC8000
|
unkown
|
page read and write
|
|
|
|
14D9AC9F000
|
unkown
|
page read and write
|
|
|
|
1F7F27FD000
|
unkown
|
page read and write
|
|
|
|
14D9AD00000
|
unkown
|
page read and write
|
|
|
|
14D9AC00000
|
unkown
|
page read and write
|
|
|
|
FEC707E000
|
unkown
|
page read and write
|
|
|
|
1F7F06D0000
|
unkown
|
page readonly
|
|
|
|
EDB72FA000
|
unkown
|
page read and write
|
|
|
|
7FF531D09000
|
unkown
|
page readonly
|
|
|
|
2A95CB00000
|
unkown
|
page read and write
|
|
|
|
7FF5D6013000
|
unkown
|
page readonly
|
|
|
|
7FF52F1CB000
|
unkown
|
page readonly
|
|
|
|
7FF5D6139000
|
unkown
|
page readonly
|
|
|
|
1F7F0A60000
|
unkown
|
page readonly
|
|
|
|
7FF52F1BE000
|
unkown
|
page readonly
|
|
|
|
7FF5D5C22000
|
unkown
|
page readonly
|
|
|
|
7FF5D6024000
|
unkown
|
page readonly
|
|
|
|
7FF52F2AA000
|
unkown
|
page readonly
|
|
|
|
7FF531D91000
|
unkown
|
page readonly
|
|
|
|
7FF5D5CD7000
|
unkown
|
page readonly
|
|
|
|
1F7F2CA7000
|
unkown
|
page read and write
|
|
|
|
FEC6DCE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5793000
|
unkown
|
page readonly
|
|
|
|
7FF5607EE000
|
unkown
|
page readonly
|
|
|
|
7FF5D61B1000
|
unkown
|
page readonly
|
|
|
|
1F7F2C55000
|
unkown
|
page read and write
|
|
|
|
7FF531C6B000
|
unkown
|
page readonly
|
|
|
|
2A95CA46000
|
unkown
|
page read and write
|
|
|
|
2DCFFCD0000
|
unkown
|
page readonly
|
|
|
|
7FF5606D1000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FC3000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F6A000
|
unkown
|
page readonly
|
|
|
|
1F7F2683000
|
unkown
|
page read and write
|
|
|
|
14D9AC4B000
|
unkown
|
page read and write
|
|
|
|
1B11FE000
|
unkown
|
page read and write
|
|
|
|
7FF52EE8F000
|
unkown
|
page readonly
|
|
|
|
1F7F2CFA000
|
unkown
|
page read and write
|
|
|
|
7FF531EDC000
|
unkown
|
page readonly
|
|
|
|
1F7F2C44000
|
unkown
|
page read and write
|
|
|
|
7FF5D5E7B000
|
unkown
|
page readonly
|
|
|
|
7FF5D5789000
|
unkown
|
page readonly
|
|
|
|
1F7F0400000
|
unkown
|
page read and write
|
|
|
|
1F7F2B60000
|
unkown
|
page read and write
|
|
|
|
EDB6BAD000
|
unkown
|
page read and write
|
|
|
|
1F7F2C14000
|
unkown
|
page read and write
|
|
|
|
7FF5D608B000
|
unkown
|
page readonly
|
|
|
|
1F7F0531000
|
unkown
|
page read and write
|
|
|
|
7FF5D6041000
|
unkown
|
page readonly
|
|
|
|
1F7F2B58000
|
unkown
|
page read and write
|
|
|
|
1F7F2E85000
|
unkown
|
page read and write
|
|
|
|
7FF560754000
|
unkown
|
page readonly
|
|
|
|
7FF531EAA000
|
unkown
|
page readonly
|
|
|
|
1F7F2659000
|
unkown
|
page read and write
|
|
|
|
7FF5D6094000
|
unkown
|
page readonly
|
|
|
|
2DCFFA3F000
|
unkown
|
page read and write
|
|
|
|
1F7F1F80000
|
unkown
|
page readonly
|
|
|
|
1F7F2F08000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C9C000
|
unkown
|
page readonly
|
|
|
|
7FF52F239000
|
unkown
|
page readonly
|
|
|
|
7FF52F1EC000
|
unkown
|
page readonly
|
|
|
|
7FF5D609F000
|
unkown
|
page readonly
|
|
|
|
1F7F047C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C32000
|
unkown
|
page readonly
|
|
|
|
7FF52EE7C000
|
unkown
|
page readonly
|
|
|
|
7FF531F04000
|
unkown
|
page readonly
|
|
|
|
7FF52F2A4000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
14D9AC48000
|
unkown
|
page read and write
|
|
|
|
7FF5D5E86000
|
unkown
|
page readonly
|
|
|
|
7FF5606EB000
|
unkown
|
page readonly
|
|
|
|
1F7F2ADA000
|
unkown
|
page read and write
|
|
|
|
2A95C8F0000
|
heap private
|
page read and write
|
|
|
|
14D9AED0000
|
unkown
|
page readonly
|
|
|
|
7FF52F21E000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
7FF52F2B2000
|
unkown
|
page readonly
|
|
|
|
7FF52F22E000
|
unkown
|
page readonly
|
|
|
|
1F7F2DDC000
|
unkown
|
page read and write
|
|
|
|
1F7F2D35000
|
unkown
|
page read and write
|
|
|
|
1F7F2D56000
|
unkown
|
page read and write
|
|
|
|
1F7F03F0000
|
unkown
|
page read and write
|
|
|
|
2DCFFA13000
|
unkown
|
page read and write
|
|
|
|
1F7F2E76000
|
unkown
|
page read and write
|
|
|
|
7FF531F29000
|
unkown
|
page readonly
|
|
|
|
7FF531E73000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
1F7F0600000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
1B0C7E000
|
unkown
|
page read and write
|
|
|
|
7FF52F1BA000
|
unkown
|
page readonly
|
|
|
|
1F7F0454000
|
unkown
|
page read and write
|
|
|
|
1F7F2CB9000
|
unkown
|
page read and write
|
|
|
|
1F7F27EA000
|
unkown
|
page read and write
|
|
|
|
7FF5D60AA000
|
unkown
|
page readonly
|
|
|
|
7FF560570000
|
unkown
|
page readonly
|
|
|
|
7FF5D5E9F000
|
unkown
|
page readonly
|
|
|
|
7FF531EB5000
|
unkown
|
page readonly
|
|
|
|
1F7F2E43000
|
unkown
|
page read and write
|
|
|
|
2DCFFB00000
|
unkown
|
page read and write
|
|
|
|
1F7F0473000
|
unkown
|
page read and write
|
|
|
|
1B0FF7000
|
unkown
|
page read and write
|
|
|
|
2A95CA29000
|
unkown
|
page read and write
|
|
|
|
7FF5D58EA000
|
unkown
|
page readonly
|
|
|
|
2DCFFB02000
|
unkown
|
page read and write
|
|
|
|
1F7F2B71000
|
unkown
|
page read and write
|
|
|
|
7FF52F162000
|
unkown
|
page readonly
|
|
|
|
7FF5D5B59000
|
unkown
|
page readonly
|
|
|
|
7FF56085E000
|
unkown
|
page readonly
|
|
|
|
1F7F2F82000
|
unkown
|
page read and write
|
|
|
|
7FF56086D000
|
unkown
|
page readonly
|
|
|
|
1F7F2F86000
|
unkown
|
page read and write
|
|
|
|
7FF5D5860000
|
unkown
|
page readonly
|
|
|
|
7FF5D60F7000
|
unkown
|
page readonly
|
|
|
|
1F7F3200000
|
unkown
|
page read and write
|
|
|
|
1F7F2B17000
|
unkown
|
page read and write
|
|
|
|
1B099E000
|
unkown
|
page read and write
|
|
|
|
1F7F0429000
|
unkown
|
page read and write
|
|
|
|
EDB707F000
|
unkown
|
page read and write
|
|
|
|
7FF52F0A1000
|
unkown
|
page readonly
|
|
|
|
7FF5D6052000
|
unkown
|
page readonly
|
|
|
|
7FF5D6006000
|
unkown
|
page readonly
|
|
|
|
2DCFFA56000
|
unkown
|
page read and write
|
|
|
|
1F7F3300000
|
unkown
|
page read and write
|
|
|
|
7FF5D5A70000
|
unkown
|
page readonly
|
|
|
|
1F7F27C7000
|
unkown
|
page read and write
|
|
|
|
7FF5607DA000
|
unkown
|
page readonly
|
|
|
|
2DCFFB13000
|
unkown
|
page read and write
|
|
|
|
1F7F2DD4000
|
unkown
|
page read and write
|
|
|
|
1B0EFE000
|
unkown
|
page read and write
|
|
|
|
7FF531EE8000
|
unkown
|
page readonly
|
|
|
|
2DCFFA02000
|
unkown
|
page read and write
|
|
|
|
7FF560869000
|
unkown
|
page readonly
|
|
|
|
2A95C950000
|
heap default
|
page read and write
|
|
|
|
7FF5D60BA000
|
unkown
|
page readonly
|
|
|
|
14D9AB30000
|
heap private
|
page read and write
|
|
|
|
7FF5D5EF4000
|
unkown
|
page readonly
|
|
|
|
7FF5D60AC000
|
unkown
|
page readonly
|
|
|
|
1F7F2CC6000
|
unkown
|
page read and write
|
|
|
|
1F7F276E000
|
unkown
|
page read and write
|
|
|
|
1F7F2D0D000
|
unkown
|
page read and write
|
|
|
|
1F7F2E00000
|
unkown
|
page read and write
|
|
|
|
1F7F2DA9000
|
unkown
|
page read and write
|
|
|
|
1F7F2D46000
|
unkown
|
page read and write
|
|
|
|
EDB747D000
|
unkown
|
page read and write
|
|
|
|
7FF53170D000
|
unkown
|
page readonly
|
|
|
|
7FF52F23D000
|
unkown
|
page readonly
|
|
|
|
D2A667A000
|
unkown
|
page read and write
|
|
|
|
2A95CB02000
|
unkown
|
page read and write
|
|
|
|
1F7F3000000
|
unkown
|
page readonly
|
|
|
|
1F7F03D0000
|
unkown
|
page read and write
|
|
|
|
7FF5D5E98000
|
unkown
|
page readonly
|
|
|
|
2A95CA02000
|
unkown
|
page read and write
|
|
|
|
7FF52F160000
|
unkown
|
page readonly
|
|
|
|
7FF5D5C6D000
|
unkown
|
page readonly
|
|
|
|
7FF52EF86000
|
unkown
|
page readonly
|
|
|
|
7FF531B87000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5607DC000
|
unkown
|
page readonly
|
|
|
|
7FF531E52000
|
unkown
|
page readonly
|
|
|
|
7FF5606EE000
|
unkown
|
page readonly
|
|
|
|
7FF560693000
|
unkown
|
page readonly
|
|
|
|
2A95CA35000
|
unkown
|
page read and write
|
|
|
|
1F7F2D75000
|
unkown
|
page read and write
|
|
|
|
7FF52EA1D000
|
unkown
|
page readonly
|
|
|
|
EDB73FD000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C7D000
|
unkown
|
page readonly
|
|
|
|
1F7F2BD4000
|
unkown
|
page read and write
|
|
|
|
1F7F2DCA000
|
unkown
|
page read and write
|
|
|
|
1F7F03C0000
|
unkown
|
page readonly
|
|
|
|
1F7F2C00000
|
unkown
|
page read and write
|
|
|
|
1F7F2648000
|
unkown
|
page read and write
|
|
|
|
1F7F2F23000
|
unkown
|
page read and write
|
|
|
|
FEC72FF000
|
unkown
|
page read and write
|
|
|
|
1F7F2EF8000
|
unkown
|
page read and write
|
|
|
|
7FF531F1E000
|
unkown
|
page readonly
|
|
|
|
1F7F0300000
|
heap private
|
page read and write
|
|
|
|
7FF560834000
|
unkown
|
page readonly
|
|
|
|
7FF52EFE5000
|
unkown
|
page readonly
|
|
|
|
7FF52F0C3000
|
unkown
|
page readonly
|
|
|
|
7FF52F0BB000
|
unkown
|
page readonly
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
1F7F2CE9000
|
unkown
|
page read and write
|
|
|
|
7FF52EE8A000
|
unkown
|
page readonly
|
|
|
|
FEC7179000
|
unkown
|
page read and write
|
|
|
|
7FF5D61A4000
|
unkown
|
page readonly
|
|
|
|
7FF52F1C5000
|
unkown
|
page readonly
|
|
|
|
14D9AC5D000
|
unkown
|
page read and write
|
|
|
|
1F7F27D4000
|
unkown
|
page read and write
|
|
|
|
2DC815A0000
|
unkown
|
page readonly
|
|
|
|
1F7F0370000
|
unkown
|
page write copy
|
|
|
|
1F7F2D98000
|
unkown
|
page read and write
|
|
|
|
1F7F2713000
|
unkown
|
page read and write
|
|
|
|
7FF5608E2000
|
unkown
|
page readonly
|
|
|
|
1F7F0513000
|
unkown
|
page read and write
|
|
|
|
7FF52F019000
|
unkown
|
page readonly
|
|
|
|
7FF5D5DB1000
|
unkown
|
page readonly
|
|
|
|
D2A677F000
|
unkown
|
page read and write
|
|
|
|
7FF5D612E000
|
unkown
|
page readonly
|
|
|
|
1F7F2C36000
|
unkown
|
page read and write
|
|
|
|
2A95CA00000
|
unkown
|
page read and write
|
|
|
|
EDB727D000
|
unkown
|
page read and write
|
|
|
|
7FF531F2D000
|
unkown
|
page readonly
|
|
|
|
7FF5D5E2B000
|
unkown
|
page readonly
|
|
|
|
1F7F26E9000
|
unkown
|
page read and write
|
|
|
|
1F7F2EA6000
|
unkown
|
page read and write
|
|
|
|
EDB6E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D61B2000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
1F7F2600000
|
unkown
|
page read and write
|
|
|
|
7FF531DB3000
|
unkown
|
page readonly
|
|
|
|
2DCFF9A0000
|
heap default
|
page read and write
|
|
|
|
7FF5603B0000
|
unkown
|
page readonly
|
|
|
|
14D9B940000
|
unkown
|
page readonly
|
|
|
|
7FF531EF4000
|
unkown
|
page readonly
|
|
|
|
7FF5D6131000
|
unkown
|
page readonly
|
|
|
|
2DCFF9B0000
|
unkown
|
page write copy
|
|
|
|
1F7F21FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D5D8A000
|
unkown
|
page readonly
|
|
|
|
7FF5D5BAF000
|
unkown
|
page readonly
|
|
|
|
2DCFFA29000
|
unkown
|
page read and write
|
|
|
|
7FF531EDF000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FC8000
|
unkown
|
page readonly
|
|
|
|
7FF5D5FA1000
|
unkown
|
page readonly
|
|
|
|
1F7F2E64000
|
unkown
|
page read and write
|
|
|
|
7FF5D5A77000
|
unkown
|
page readonly
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5D60BE000
|
unkown
|
page readonly
|
|
|
|
7FF52EFE1000
|
unkown
|
page readonly
|
|
|
|
7FF560807000
|
unkown
|
page readonly
|
|
|
|
7FF55FFF6000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F1B000
|
unkown
|
page readonly
|
|
|
|
FEC727E000
|
unkown
|
page read and write
|
|
|
|
7FF56084F000
|
unkown
|
page readonly
|
|
|
|
1F7F2100000
|
unkown
|
page read and write
|
|
|
|
7FF531FA2000
|
unkown
|
page readonly
|
|
|
|
7FF52F1F8000
|
unkown
|
page readonly
|
|
|
|
1F7F266A000
|
unkown
|
page read and write
|
|
|
|
FEC70FF000
|
unkown
|
page read and write
|
|
|
|
7FF5608D4000
|
unkown
|
page readonly
|
|
|
|
2A95E570000
|
unkown
|
page readonly
|
|
|
|
D2A66FE000
|
unkown
|
page read and write
|
|
|
|
7FF531CD1000
|
unkown
|
page readonly
|
|
|
|
7FF560858000
|
unkown
|
page readonly
|
|
|
|
1F7F0360000
|
heap default
|
page read and write
|
|
|
|
7FF5D5A3F000
|
unkown
|
page readonly
|
|
|
|
7FF5D6128000
|
unkown
|
page readonly
|
|
|
|
7FF531EAE000
|
unkown
|
page readonly
|
|
|
|
7FF52F1D7000
|
unkown
|
page readonly
|
|
|
|
7FF52EE97000
|
unkown
|
page readonly
|
|
|
|
7FF52EF7B000
|
unkown
|
page readonly
|
|
|
|
2A95CA13000
|
unkown
|
page read and write
|
|
|
|
2A95CC00000
|
unkown
|
page readonly
|
|
|
|
7FF560844000
|
unkown
|
page readonly
|
|
|
|
7FF5D585D000
|
unkown
|
page readonly
|
|
|
|
14D9ABA0000
|
unkown
|
page readonly
|
|
|
|
7FF5D611E000
|
unkown
|
page readonly
|
|
|
|
14D9B600000
|
unkown
|
page readonly
|
|
|
|
1F7F26A5000
|
unkown
|
page read and write
|
|
|
|
7FF5D5EE5000
|
unkown
|
page readonly
|
|
|
|
1F7F2A00000
|
unkown
|
page read and write
|
|
|
|
7FF531CD5000
|
unkown
|
page readonly
|
|
|
|
1F7F1FA0000
|
unkown
|
page readonly
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
7FF52F1EF000
|
unkown
|
page readonly
|
|
|
|
1F7F2EE7000
|
unkown
|
page read and write
|
|
|
|
7FF5D591D000
|
unkown
|
page readonly
|
|
|
|
7FF531B7A000
|
unkown
|
page readonly
|
|
|
|
7FF5D5C86000
|
unkown
|
page readonly
|
|
|
|
1F7F2AD6000
|
unkown
|
page read and write
|
|
|
|
7FF52F204000
|
unkown
|
page readonly
|
|
|
|
1F7F046B000
|
unkown
|
page read and write
|
|
|
|
2DCFF940000
|
heap private
|
page read and write
|
|
|
|
7FF5D6135000
|
unkown
|
page readonly
|
|
|
|
14D9AC6E000
|
unkown
|
page read and write
|
|
|
|
7FF5D6062000
|
unkown
|
page readonly
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
7FF5D5955000
|
unkown
|
page readonly
|
|
|
|
7FF56081C000
|
unkown
|
page readonly
|
|
|
|
7FF531DB8000
|
unkown
|
page readonly
|
|
|
|
EDB717A000
|
unkown
|
page read and write
|
|
|
|
7FF5607EA000
|
unkown
|
page readonly
|
|
|
|
7FF560866000
|
unkown
|
page readonly
|
|
|
|
2A95CA55000
|
unkown
|
page read and write
|
|
|
|
7FF5D610A000
|
unkown
|
page readonly
|
|
|
|
1F7F2E41000
|
unkown
|
page read and write
|
|
|
|
7FF560641000
|
unkown
|
page readonly
|
|
|
|
1F7F274D000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C99000
|
unkown
|
page readonly
|
|
|
|
7FF5D6114000
|
unkown
|
page readonly
|
|
|
|
7FF5D59C1000
|
unkown
|
page readonly
|
|
|
|
7FF5608DA000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F6F000
|
unkown
|
page readonly
|
|
|
|
1F7F0413000
|
unkown
|
page read and write
|
|
|
|
2DCFFA6C000
|
unkown
|
page read and write
|
|
|
|
7FF531F94000
|
unkown
|
page readonly
|
|
|
|
7FF531FA1000
|
unkown
|
page readonly
|
|
|
|
1F7F2A64000
|
unkown
|
page read and write
|
|
|
|
7FF5D602C000
|
unkown
|
page readonly
|
|
|
|
EDB74FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5D586C000
|
unkown
|
page readonly
|
|
|
|
7FF5D5D8F000
|
unkown
|
page readonly
|
|
|
|
7FF531F0E000
|
unkown
|
page readonly
|
|
|
|
2A95CA6A000
|
unkown
|
page read and write
|
|
|
|
7FF531EBB000
|
unkown
|
page readonly
|
|
|
|
1F7F26C7000
|
unkown
|
page read and write
|
|
|
|
1F7F2EB6000
|
unkown
|
page read and write
|
|
|
|
7FF531F21000
|
unkown
|
page readonly
|
|
|
|
7FF56081F000
|
unkown
|
page readonly
|
|
|
|
1F7F2EE0000
|
unkown
|
page read and write
|
|
|
|
EDB70FA000
|
unkown
|
page read and write
|
|
|
|
EDB6F7E000
|
unkown
|
page read and write
|
|
|
|
1F7F2200000
|
unkown
|
page readonly
|
|
|
|
7FF5D60C5000
|
unkown
|
page readonly
|
|
|
|
7FF52F20A000
|
unkown
|
page readonly
|
|
|
|
7FF5D58C0000
|
unkown
|
page readonly
|
|
|
|
14D9AC3C000
|
unkown
|
page read and write
|
|
|
|
1F7F2E32000
|
unkown
|
page read and write
|
|
|
|
7FF5D5D97000
|
unkown
|
page readonly
|
|
|
|
1F7F2F65000
|
unkown
|
page read and write
|
|
|
|
7FF5D5EFE000
|
unkown
|
page readonly
|
|
|
|
7FF5D5F50000
|
unkown
|
page readonly
|
|
|
|
1F7F2D5A000
|
unkown
|
page read and write
|
|
|
|
7FF531F26000
|
unkown
|
page readonly
|
|
|
|
2A95CCD0000
|
unkown
|
page readonly
|
|
|
|
7FF52F2B1000
|
unkown
|
page readonly
|
|
|
|
1F7F2BAE000
|
unkown
|
page read and write
|
|
|
|
7FF531EC7000
|
unkown
|
page readonly
|
|
|
|
1F7F2C32000
|
unkown
|
page read and write
|
|
|
|
14D9AD02000
|
unkown
|
page read and write
|
|
|
|
7FF52F228000
|
unkown
|
page readonly
|
|
|
|
7FF5D607F000
|
unkown
|
page readonly
|
|
|
|
7FF5D60D7000
|
unkown
|
page readonly
|
|
|
|
1F7F2002000
|
unkown
|
page read and write
|
|
|
|
1F7F2BE9000
|
unkown
|
page read and write
|
|
|
|
1F7F2C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D5FBB000
|
unkown
|
page readonly
|
|
|
|
7FF531C76000
|
unkown
|
page readonly
|
|
|
|
1F7F2138000
|
unkown
|
page read and write
|
|
|
|
1F7F2F73000
|
unkown
|
page read and write
|
|
|
|
7FF531F18000
|
unkown
|
page readonly
|
|
|
|
7FF5607F5000
|
unkown
|
page readonly
|
|
|
|
14D9ABC0000
|
unkown
|
page read and write
|
|
|
|
1F7F26D8000
|
unkown
|
page read and write
|
|
|
|
7FF52F231000
|
unkown
|
page readonly
|
|
|
|
1F7F2F04000
|
unkown
|
page read and write
|
|
|
|
1F7F2ACF000
|
unkown
|
page read and write
|
|
|
|
2A95CA3F000
|
unkown
|
page read and write
|
|
|
|
7FF52F214000
|
unkown
|
page readonly
|
|
|
|
14D9AD08000
|
unkown
|
page read and write
|
|
|
|
1B091B000
|
unkown
|
page read and write
|
|
|
|
7FF52F236000
|
unkown
|
page readonly
|
|
|
|
7FF531E50000
|
unkown
|
page readonly
|
|
|
|
7FF5D58DB000
|
unkown
|
page readonly
|
|
|
|
7FF5D60CB000
|
unkown
|
page readonly
|
|
|
|
14D9AC29000
|
unkown
|
page read and write
|
|
|
|
2DCFFA00000
|
unkown
|
page read and write
|
|
|
|
1F7F21E1000
|
unkown
|
page read and write
|
|
|
|
2A95C960000
|
unkown
|
page write copy
|
|
|
|
1F7F2D09000
|
unkown
|
page read and write
|
|
|
|
7FF531F9A000
|
unkown
|
page readonly
|
|
|
|
1F7F04F3000
|
unkown
|
page read and write
|
|
|
|
2DCFFEF0000
|
unkown
|
page read and write
|
|
|
|
14D9AC53000
|
unkown
|
page read and write
|
|
|
|
1F7F2D2C000
|
unkown
|
page read and write
|
|
|
|
7FF56073D000
|
unkown
|
page readonly
|
|
|
|
1F7F2176000
|
unkown
|
page read and write
|
|
|
|
1F7F2C7D000
|
unkown
|
page read and write
|
|
|
|
1F7F0492000
|
unkown
|
page read and write
|
|
|
|
14D9ABB0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5D41000
|
unkown
|
page readonly
|
|
|
|
7FF531DAB000
|
unkown
|
page readonly
|
|
|
|
7FF5D5CD5000
|
unkown
|
page readonly
|
|
|
|
7FF5D5EF6000
|
unkown
|
page readonly
|
|
|
|
1F7F219C000
|
unkown
|
page read and write
|
|
|
|
1F7F273C000
|
unkown
|
page read and write
|
|
|
|
1F7F3302000
|
unkown
|
page read and write
|
|
|
|
7FF5603B6000
|
unkown
|
page readonly
|
|
|
|
7FF5D608F000
|
unkown
|
page readonly
|
|
|
|
7FF5D5E35000
|
unkown
|
page readonly
|
|
|
|
1F7F2BDE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5A43000
|
unkown
|
page readonly
|
|
|
|
7FF5603C5000
|
unkown
|
page readonly
|
|
|
|
2DCFFED0000
|
unkown
|
page readonly
|
|
|
|
1F7F2C17000
|
unkown
|
page read and write
|
|
|
|
EDB71FC000
|
unkown
|
page read and write
|
|
|
|
7FF5D5D88000
|
unkown
|
page readonly
|
|
|
|
7FF5D6060000
|
unkown
|
page readonly
|
|
|
|
7FF52F0C8000
|
unkown
|
page readonly
|
|
|
|
7FF5D58C6000
|
unkown
|
page readonly
|
|
|
|
7FF5607FB000
|
unkown
|
page readonly
|
|
|
|
FEC6D4B000
|
unkown
|
page read and write
|
|
|
|
1F7F26B6000
|
unkown
|
page read and write
|
|
|
|
7FF5D5C37000
|
unkown
|
page readonly
|
|
|
|
EDB737C000
|
unkown
|
page read and write
|
|
|
|
14D9AD13000
|
unkown
|
page read and write
|
|
|
|
D2A64FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5F63000
|
unkown
|
page readonly
|
|
|
|
14D9AC9B000
|
unkown
|
page read and write
|
|
|
|
7FF5D6083000
|
unkown
|
page readonly
|
|
|
|
2DCFFC00000
|
unkown
|
page readonly
|
|
|
|
1F7F1E70000
|
unkown
|
page read and write
|
|
|
|
1F7F2BFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D60C0000
|
unkown
|
page readonly
|
|
|
|
FEC71FA000
|
unkown
|
page read and write
|
|
|
|
1F7F2EC5000
|
unkown
|
page read and write
|
|
|
|
1F7F03E0000
|
unkown
|
page read and write
|
|
|
|
1F7F2E13000
|
unkown
|
page read and write
|
|
|
|
2A95CA6C000
|
unkown
|
page read and write
|
|
|
|
D2A6579000
|
unkown
|
page read and write
|
|
|
|
1F7F2800000
|
unkown
|
page readonly
|
|
|
|
14D9AC13000
|
unkown
|
page read and write
|
|
|
|
D2A65FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5D17000
|
unkown
|
page readonly
|
|
|
|
7FF560743000
|
unkown
|
page readonly
|
|
|
|
7FF5D5C80000
|
unkown
|
page readonly
|
|
|
|
1F7F2ECB000
|
unkown
|
page read and write
|
|
|
|
1F7F2B00000
|
unkown
|
page read and write
|
|
|
|
EDB6B2B000
|
unkown
|
page read and write
|
|
|
|
7FF531EFA000
|
unkown
|
page readonly
|
|
|
|
7FF560567000
|
unkown
|
page readonly
|
|
|
|
7FF560827000
|
unkown
|
page readonly
|
|
|
|
1F7F26FB000
|
unkown
|
page read and write
|
|
|
|
1B10FF000
|
unkown
|
page read and write
|
|
|
|
14D9AB90000
|
heap default
|
page read and write
|
|
|
|
EDB6EFA000
|
unkown
|
page read and write
|
|
|
|
14D9AC5D000
|
unkown
|
page read and write
|
|
|
|
7FF531B6C000
|
unkown
|
page readonly
|
|
There are 462 hidden memdumps, click here to show them.