Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://wayfairapp.onelink.me/2420802157?pid=Email&c=Triggered&af_sub5=AppEmailCA&af_dp=wayfairapp%3A%2F%2Fhome&af_web_dp=h%20ttp%3A%2F%2Fedubuddie.com/vsot/aK6hhbi8933Qq%2FVerizon&txid=B20200331_1488798683&lid=18207&tid=121811&vno=5<id=0
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{F550CFCF-B3F1-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F550CFD1-B3F1-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F550CFD2-B3F1-11EB-90E4-ECF4BB862DED}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF4ADEF8CDE444C23C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF52B391DAC9B7D700.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF58651D31E836AEEB.TMP
|
data
|
dropped
|
|
There are 8 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5836 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://wayfairapp.onelink.me/h%20ttp://edubuddie.com/vsot/aK6hhbi8933Qq/Verizon?tid=121811&vno=5&tx
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://wayfairapp.onelink.me/favicon.ico
|
unknown
|
|
|
|
https://wayfairapp.onelink.me/h%20ttp://edubuddie.com/vsot/aK6hhbi8933Qq/Verizon?tid=121811&vno=5&txid=B20200331_1488798683&lid=18207&c=Triggered&pid=Email<id=0&af_sub5=AppEmailCA
|
|
||
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
wayfairapp.onelink.me
|
13.224.193.93
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
13.224.193.93
|
wayfairapp.onelink.me
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{F550CFCF-B3F1-11EB-90E4-ECF4BB862DED}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
AdminActive
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 17 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF54CBDC000
|
unkown
|
page readonly
|
|
|
|
293A304A000
|
unkown
|
page read and write
|
|
|
|
C61473E000
|
unkown
|
page read and write
|
|
|
|
756A9FF000
|
unkown
|
page read and write
|
|
|
|
7FF545C91000
|
unkown
|
page readonly
|
|
|
|
7FF5A834E000
|
unkown
|
page readonly
|
|
|
|
7FF54C9EF000
|
unkown
|
page readonly
|
|
|
|
B03F6FB000
|
unkown
|
page read and write
|
|
|
|
7FF545B8C000
|
unkown
|
page readonly
|
|
|
|
7FF5A86CC000
|
unkown
|
page readonly
|
|
|
|
1CA30F02000
|
unkown
|
page read and write
|
|
|
|
7FF503E2E000
|
unkown
|
page readonly
|
|
|
|
7FF518B9D000
|
unkown
|
page readonly
|
|
|
|
7FF518A09000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4CE000
|
unkown
|
page readonly
|
|
|
|
7FF516855000
|
unkown
|
page readonly
|
|
|
|
293A302A000
|
unkown
|
page read and write
|
|
|
|
BA16CFF000
|
unkown
|
page read and write
|
|
|
|
BA168FE000
|
unkown
|
page read and write
|
|
|
|
7FF56AE9C000
|
unkown
|
page readonly
|
|
|
|
1FD812C0000
|
heap private
|
page read and write
|
|
|
|
7FF5A86BA000
|
unkown
|
page readonly
|
|
|
|
7FF503DB6000
|
unkown
|
page readonly
|
|
|
|
6E4EBFB000
|
unkown
|
page read and write
|
|
|
|
7FF5459A8000
|
unkown
|
page readonly
|
|
|
|
1B01AE00000
|
unkown
|
page read and write
|
|
|
|
20C13330000
|
unkown
|
page read and write
|
|
|
|
20C12E30000
|
unkown
|
page read and write
|
|
|
|
6E8FFE000
|
unkown
|
page read and write
|
|
|
|
EA9975C000
|
unkown
|
page read and write
|
|
|
|
7FF5168C9000
|
unkown
|
page readonly
|
|
|
|
20C132A0000
|
unkown
|
page read and write
|
|
|
|
20C132C7000
|
unkown
|
page readonly
|
|
|
|
7FF5A8751000
|
unkown
|
page readonly
|
|
|
|
1B01A502000
|
unkown
|
page read and write
|
|
|
|
20C12EB0000
|
unkown
|
page read and write
|
|
|
|
7FF54CB76000
|
unkown
|
page readonly
|
|
|
|
7FF54C925000
|
unkown
|
page readonly
|
|
|
|
293A2F90000
|
unkown
|
page read and write
|
|
|
|
7FF518B7F000
|
unkown
|
page readonly
|
|
|
|
7FF56AECD000
|
unkown
|
page readonly
|
|
|
|
EA99A7F000
|
unkown
|
page read and write
|
|
|
|
756A4FD000
|
unkown
|
page read and write
|
|
|
|
7FF54C9D0000
|
unkown
|
page readonly
|
|
|
|
7FF54CA77000
|
unkown
|
page readonly
|
|
|
|
20C132E0000
|
unkown
|
page read and write
|
|
|
|
293A308B000
|
unkown
|
page read and write
|
|
|
|
7FF516494000
|
unkown
|
page readonly
|
|
|
|
2B3FDF40000
|
unkown
|
page write copy
|
|
|
|
7FF5459EF000
|
unkown
|
page readonly
|
|
|
|
7FF56AE5E000
|
unkown
|
page readonly
|
|
|
|
7FF5A871E000
|
unkown
|
page readonly
|
|
|
|
293A4B30000
|
unkown
|
page readonly
|
|
|
|
7FF518B42000
|
unkown
|
page readonly
|
|
|
|
BA169FE000
|
unkown
|
page read and write
|
|
|
|
7FF5188F5000
|
unkown
|
page readonly
|
|
|
|
293A3100000
|
unkown
|
page read and write
|
|
|
|
7FF54CBD6000
|
unkown
|
page readonly
|
|
|
|
7FF5ED45C000
|
unkown
|
page readonly
|
|
|
|
1FD81456000
|
unkown
|
page read and write
|
|
|
|
1FD81413000
|
unkown
|
page read and write
|
|
|
|
7FF5ED40E000
|
unkown
|
page readonly
|
|
|
|
1CA30E28000
|
unkown
|
page read and write
|
|
|
|
1B01A380000
|
heap default
|
page read and write
|
|
|
|
C614F7D000
|
unkown
|
page read and write
|
|
|
|
7FF518B46000
|
unkown
|
page readonly
|
|
|
|
7FF518BB6000
|
unkown
|
page readonly
|
|
|
|
1CA31602000
|
unkown
|
page read and write
|
|
|
|
7FF545CE6000
|
unkown
|
page readonly
|
|
|
|
BA16AFC000
|
unkown
|
page read and write
|
|
|
|
20C130B4000
|
unkown
|
page read and write
|
|
|
|
7FF56AE91000
|
unkown
|
page readonly
|
|
|
|
1FD81475000
|
unkown
|
page read and write
|
|
|
|
7FF5ED2AA000
|
unkown
|
page readonly
|
|
|
|
7FF5A85AA000
|
unkown
|
page readonly
|
|
|
|
18AE5658000
|
unkown
|
page read and write
|
|
|
|
2B3FD413000
|
unkown
|
page read and write
|
|
|
|
1FD81477000
|
unkown
|
page read and write
|
|
|
|
7FF518B30000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4D9000
|
unkown
|
page readonly
|
|
|
|
20C0E060000
|
unkown
|
page readonly
|
|
|
|
7FF5A87DE000
|
unkown
|
page readonly
|
|
|
|
2B3FD9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4D9000
|
unkown
|
page readonly
|
|
|
|
2B3FD47D000
|
unkown
|
page read and write
|
|
|
|
293A2FB0000
|
unkown
|
page read and write
|
|
|
|
293A3066000
|
unkown
|
page read and write
|
|
|
|
7FF5168C9000
|
unkown
|
page readonly
|
|
|
|
293A2FE0000
|
unkown
|
page read and write
|
|
|
|
A5795EE000
|
unkown
|
page read and write
|
|
|
|
BA1657D000
|
unkown
|
page read and write
|
|
|
|
20C12FD0000
|
unkown
|
page read and write
|
|
|
|
7FF516836000
|
unkown
|
page readonly
|
|
|
|
2B3FD4BF000
|
unkown
|
page read and write
|
|
|
|
EA99AFD000
|
unkown
|
page read and write
|
|
|
|
20C12FDE000
|
unkown
|
page read and write
|
|
|
|
20C13330000
|
unkown
|
page read and write
|
|
|
|
1CA30D10000
|
heap private
|
page read and write
|
|
|
|
7FF516797000
|
unkown
|
page readonly
|
|
|
|
7FF545C9B000
|
unkown
|
page readonly
|
|
|
|
2A72B770000
|
heap private
|
page read and write
|
|
|
|
20C13130000
|
unkown
|
page read and write
|
|
|
|
1FD81440000
|
unkown
|
page read and write
|
|
|
|
7FF518B0A000
|
unkown
|
page readonly
|
|
|
|
7FF503587000
|
unkown
|
page readonly
|
|
|
|
7FF56AF29000
|
unkown
|
page readonly
|
|
|
|
7FF5A875C000
|
unkown
|
page readonly
|
|
|
|
2B3FD240000
|
unkown
|
page readonly
|
|
|
|
7FF5ED10E000
|
unkown
|
page readonly
|
|
|
|
20C0DA77000
|
unkown
|
page read and write
|
|
|
|
C6153FE000
|
unkown
|
page read and write
|
|
|
|
7FF54C89A000
|
unkown
|
page readonly
|
|
|
|
7FF5ED0A8000
|
unkown
|
page readonly
|
|
|
|
1B01A413000
|
unkown
|
page read and write
|
|
|
|
1CA30E79000
|
unkown
|
page read and write
|
|
|
|
1CA31800000
|
unkown
|
page readonly
|
|
|
|
7FF56ABA3000
|
unkown
|
page readonly
|
|
|
|
C614E7F000
|
unkown
|
page read and write
|
|
|
|
18AE5570000
|
unkown
|
page readonly
|
|
|
|
7FF503D89000
|
unkown
|
page readonly
|
|
|
|
7FF518C39000
|
unkown
|
page readonly
|
|
|
|
7FF503DC5000
|
unkown
|
page readonly
|
|
|
|
7FF545C57000
|
unkown
|
page readonly
|
|
|
|
7FF56AE8D000
|
unkown
|
page readonly
|
|
|
|
2B3FDF90000
|
unkown
|
page readonly
|
|
|
|
18AE5E02000
|
unkown
|
page read and write
|
|
|
|
7FF518B48000
|
unkown
|
page readonly
|
|
|
|
1FD81513000
|
unkown
|
page read and write
|
|
|
|
7FF54CBCD000
|
unkown
|
page readonly
|
|
|
|
7FF54C3BC000
|
unkown
|
page readonly
|
|
|
|
6E4F4FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A8352000
|
unkown
|
page readonly
|
|
|
|
293A2F80000
|
unkown
|
page readonly
|
|
|
|
20C0E359000
|
unkown
|
page read and write
|
|
|
|
2A729CC0000
|
heap default
|
page read and write
|
|
|
|
20C13300000
|
unkown
|
page read and write
|
|
|
|
7569F1E000
|
unkown
|
page read and write
|
|
|
|
1FD81429000
|
unkown
|
page read and write
|
|
|
|
1FD81C02000
|
unkown
|
page read and write
|
|
|
|
20C0E215000
|
unkown
|
page read and write
|
|
|
|
BA16BFC000
|
unkown
|
page read and write
|
|
|
|
293A2FE0000
|
unkown
|
page read and write
|
|
|
|
7FF5A8600000
|
unkown
|
page readonly
|
|
|
|
18AE563D000
|
unkown
|
page read and write
|
|
|
|
7FF545BA0000
|
unkown
|
page readonly
|
|
|
|
7FF5A8775000
|
unkown
|
page readonly
|
|
|
|
7FF503D46000
|
unkown
|
page readonly
|
|
|
|
2B3FD320000
|
unkown
|
page readonly
|
|
|
|
7FF5ED3E6000
|
unkown
|
page readonly
|
|
|
|
293A3040000
|
unkown
|
page read and write
|
|
|
|
20C12FF1000
|
unkown
|
page read and write
|
|
|
|
20C0DA3F000
|
unkown
|
page read and write
|
|
|
|
20C0D980000
|
unkown
|
page readonly
|
|
|
|
1CA30E13000
|
unkown
|
page read and write
|
|
|
|
1FD81402000
|
unkown
|
page read and write
|
|
|
|
7FF545B3E000
|
unkown
|
page readonly
|
|
|
|
20C13015000
|
unkown
|
page read and write
|
|
|
|
7FF5A86E2000
|
unkown
|
page readonly
|
|
|
|
7FF5A86D8000
|
unkown
|
page readonly
|
|
|
|
7FF54CC61000
|
unkown
|
page readonly
|
|
|
|
7FF545CA7000
|
unkown
|
page readonly
|
|
|
|
2A729F05000
|
heap private
|
page read and write
|
|
|
|
A57997E000
|
unkown
|
page read and write
|
|
|
|
7FF54CBEC000
|
unkown
|
page readonly
|
|
|
|
7FF503D9D000
|
unkown
|
page readonly
|
|
|
|
6E4E87E000
|
unkown
|
page read and write
|
|
|
|
7FF545DD9000
|
unkown
|
page readonly
|
|
|
|
2A729CF9000
|
heap default
|
page read and write
|
|
|
|
7FF545D29000
|
unkown
|
page readonly
|
|
|
|
7FF503DD4000
|
unkown
|
page readonly
|
|
|
|
20C13420000
|
unkown
|
page read and write
|
|
|
|
7FF51839D000
|
unkown
|
page readonly
|
|
|
|
2B3FD310000
|
unkown
|
page readonly
|
|
|
|
7FF545CE8000
|
unkown
|
page readonly
|
|
|
|
293A32D0000
|
unkown
|
page readonly
|
|
|
|
6E4F5FC000
|
unkown
|
page read and write
|
|
|
|
2B3FD3F0000
|
unkown
|
page readonly
|
|
|
|
7FF545CC8000
|
unkown
|
page readonly
|
|
|
|
20C13200000
|
unkown
|
page read and write
|
|
|
|
7FF545DD9000
|
unkown
|
page readonly
|
|
|
|
20C13370000
|
unkown
|
page readonly
|
|
|
|
C6146BC000
|
unkown
|
page read and write
|
|
|
|
7FF56AED2000
|
unkown
|
page readonly
|
|
|
|
7FF54CA2A000
|
unkown
|
page readonly
|
|
|
|
7FF503DA6000
|
unkown
|
page readonly
|
|
|
|
7FF56AE65000
|
unkown
|
page readonly
|
|
|
|
20C130A2000
|
unkown
|
page read and write
|
|
|
|
7FF56ADCE000
|
unkown
|
page readonly
|
|
|
|
7FF5ED415000
|
unkown
|
page readonly
|
|
|
|
20C0DCD0000
|
unkown
|
page readonly
|
|
|
|
7FF545D41000
|
unkown
|
page readonly
|
|
|
|
7FF503BBF000
|
unkown
|
page readonly
|
|
|
|
7FF56ADD4000
|
unkown
|
page readonly
|
|
|
|
7FF54C47C000
|
unkown
|
page readonly
|
|
|
|
2B3FD4C6000
|
unkown
|
page read and write
|
|
|
|
A5794EC000
|
unkown
|
page read and write
|
|
|
|
2A72BB2F000
|
heap private
|
page read and write
|
|
|
|
C6150FD000
|
unkown
|
page read and write
|
|
|
|
2B3FD442000
|
unkown
|
page read and write
|
|
|
|
1B01A600000
|
unkown
|
page readonly
|
|
|
|
7FF54C9B5000
|
unkown
|
page readonly
|
|
|
|
7FF51683C000
|
unkown
|
page readonly
|
|
|
|
6E4ECFF000
|
unkown
|
page read and write
|
|
|
|
20C0DA7B000
|
unkown
|
page read and write
|
|
|
|
293A3113000
|
unkown
|
page read and write
|
|
|
|
7FF545CB7000
|
unkown
|
page readonly
|
|
|
|
7FF516483000
|
unkown
|
page readonly
|
|
|
|
7FF54CBA5000
|
unkown
|
page readonly
|
|
|
|
7FF5ED429000
|
unkown
|
page readonly
|
|
|
|
1FD819A0000
|
unkown
|
page readonly
|
|
|
|
7FF54C990000
|
unkown
|
page readonly
|
|
|
|
20C0D9A0000
|
unkown
|
page read and write
|
|
|
|
1CA30DA0000
|
unkown
|
page read and write
|
|
|
|
18AE563A000
|
unkown
|
page read and write
|
|
|
|
7FF5ED477000
|
unkown
|
page readonly
|
|
|
|
A5799FE000
|
unkown
|
page read and write
|
|
|
|
7FF518AC5000
|
unkown
|
page readonly
|
|
|
|
7FF503D7F000
|
unkown
|
page readonly
|
|
|
|
7FF545B5F000
|
unkown
|
page readonly
|
|
|
|
BA1647B000
|
unkown
|
page read and write
|
|
|
|
6E4EDFB000
|
unkown
|
page read and write
|
|
|
|
6E4F3FC000
|
unkown
|
page read and write
|
|
|
|
18AE58D0000
|
unkown
|
page readonly
|
|
|
|
7FF54C7A1000
|
unkown
|
page readonly
|
|
|
|
1FD81400000
|
unkown
|
page read and write
|
|
|
|
1FD81320000
|
heap default
|
page read and write
|
|
|
|
7FF5ED3D2000
|
unkown
|
page readonly
|
|
|
|
20C0E358000
|
unkown
|
page read and write
|
|
|
|
A579D7D000
|
unkown
|
page read and write
|
|
|
|
7FF516831000
|
unkown
|
page readonly
|
|
|
|
7FF545A5C000
|
unkown
|
page readonly
|
|
|
|
B03F9FE000
|
unkown
|
page read and write
|
|
|
|
2B3FD4D0000
|
unkown
|
page read and write
|
|
|
|
20C12FF0000
|
unkown
|
page read and write
|
|
|
|
7FF545CB3000
|
unkown
|
page readonly
|
|
|
|
7FF545B18000
|
unkown
|
page readonly
|
|
|
|
7FF54CBF5000
|
unkown
|
page readonly
|
|
|
|
2A729C50000
|
unkown
|
page readonly
|
|
|
|
7FF54CB54000
|
unkown
|
page readonly
|
|
|
|
7FF5A83BF000
|
unkown
|
page readonly
|
|
|
|
BA164FE000
|
unkown
|
page read and write
|
|
|
|
20C130AE000
|
unkown
|
page read and write
|
|
|
|
2A729C00000
|
unkown
|
page read and write
|
|
|
|
20C0DC00000
|
unkown
|
page readonly
|
|
|
|
293A3002000
|
unkown
|
page read and write
|
|
|
|
2B3FDB00000
|
unkown
|
page read and write
|
|
|
|
293A4C02000
|
unkown
|
page read and write
|
|
|
|
20C13330000
|
unkown
|
page readonly
|
|
|
|
7FF545A95000
|
unkown
|
page readonly
|
|
|
|
2A729B30000
|
unkown
|
page readonly
|
|
|
|
20C0EE20000
|
unkown
|
page read and write
|
|
|
|
20C0DB02000
|
unkown
|
page read and write
|
|
|
|
A579AFF000
|
unkown
|
page read and write
|
|
|
|
7FF51664F000
|
unkown
|
page readonly
|
|
|
|
293A4AB0000
|
unkown
|
page read and write
|
|
|
|
20C13390000
|
unkown
|
page readonly
|
|
|
|
7FF5A86F2000
|
unkown
|
page readonly
|
|
|
|
7FF518C31000
|
unkown
|
page readonly
|
|
|
|
7FF5A841E000
|
unkown
|
page readonly
|
|
|
|
7FF54CB62000
|
unkown
|
page readonly
|
|
|
|
1CA30D90000
|
unkown
|
page readonly
|
|
|
|
7FF545BA9000
|
unkown
|
page readonly
|
|
|
|
7FF5ED3E2000
|
unkown
|
page readonly
|
|
|
|
7FF518B32000
|
unkown
|
page readonly
|
|
|
|
6E4F2FF000
|
unkown
|
page read and write
|
|
|
|
1B01A400000
|
unkown
|
page read and write
|
|
|
|
7FF5188E7000
|
unkown
|
page readonly
|
|
|
|
2B3FD990000
|
unkown
|
page read and write
|
|
|
|
7FF56ADCA000
|
unkown
|
page readonly
|
|
|
|
1B01A3E0000
|
unkown
|
page read and write
|
|
|
|
20C12FF4000
|
unkown
|
page read and write
|
|
|
|
7FF503E31000
|
unkown
|
page readonly
|
|
|
|
7FF5A83C2000
|
unkown
|
page readonly
|
|
|
|
7FF516480000
|
unkown
|
page readonly
|
|
|
|
A579BFD000
|
unkown
|
page read and write
|
|
|
|
7FF518BA6000
|
unkown
|
page readonly
|
|
|
|
7FF545D65000
|
unkown
|
page readonly
|
|
|
|
20C13380000
|
unkown
|
page readonly
|
|
|
|
7FF545911000
|
unkown
|
page readonly
|
|
|
|
7FF518C2E000
|
unkown
|
page readonly
|
|
|
|
7FF56AEA6000
|
unkown
|
page readonly
|
|
|
|
7FF5A8675000
|
unkown
|
page readonly
|
|
|
|
18AE5800000
|
unkown
|
page readonly
|
|
|
|
7FF54C930000
|
unkown
|
page readonly
|
|
|
|
7FF503589000
|
unkown
|
page readonly
|
|
|
|
2B3FD502000
|
unkown
|
page read and write
|
|
|
|
6E4F27F000
|
unkown
|
page read and write
|
|
|
|
2A729CA0000
|
unkown
|
page readonly
|
|
|
|
7FF545CD2000
|
unkown
|
page readonly
|
|
|
|
20C0D990000
|
unkown
|
page readonly
|
|
|
|
7FF503D6E000
|
unkown
|
page readonly
|
|
|
|
20C0DA00000
|
unkown
|
page read and write
|
|
|
|
20C0DAA6000
|
unkown
|
page read and write
|
|
|
|
2A72A2A0000
|
unkown
|
page readonly
|
|
|
|
20C12EC0000
|
unkown
|
page read and write
|
|
|
|
18AE5631000
|
unkown
|
page read and write
|
|
|
|
7FF5ED3E8000
|
unkown
|
page readonly
|
|
|
|
7FF5189BF000
|
unkown
|
page readonly
|
|
|
|
7FF516487000
|
unkown
|
page readonly
|
|
|
|
1CA30D70000
|
heap default
|
page read and write
|
|
|
|
1FD81800000
|
unkown
|
page readonly
|
|
|
|
20C13330000
|
unkown
|
page read and write
|
|
|
|
1CA30E7F000
|
unkown
|
page read and write
|
|
|
|
756ADFE000
|
unkown
|
page read and write
|
|
|
|
7FF56AF1E000
|
unkown
|
page readonly
|
|
|
|
7FF5459EC000
|
unkown
|
page readonly
|
|
|
|
7FF545D46000
|
unkown
|
page readonly
|
|
|
|
2A729C90000
|
unkown
|
page readonly
|
|
|
|
7FF5A8436000
|
unkown
|
page readonly
|
|
|
|
7FF54CB9E000
|
unkown
|
page readonly
|
|
|
|
20C0E900000
|
unkown
|
page read and write
|
|
|
|
7FF503D30000
|
unkown
|
page readonly
|
|
|
|
7FF545A0A000
|
unkown
|
page readonly
|
|
|
|
2A729C40000
|
unkown
|
page readonly
|
|
|
|
7FF5ED44C000
|
unkown
|
page readonly
|
|
|
|
BA167FF000
|
unkown
|
page read and write
|
|
|
|
1CA30F00000
|
unkown
|
page read and write
|
|
|
|
7FF5168BE000
|
unkown
|
page readonly
|
|
|
|
7FF518B1C000
|
unkown
|
page readonly
|
|
|
|
7FF5A8667000
|
unkown
|
page readonly
|
|
|
|
7FF503E39000
|
unkown
|
page readonly
|
|
|
|
1CA30D80000
|
unkown
|
page readonly
|
|
|
|
7FF545550000
|
unkown
|
page readonly
|
|
|
|
20C0D970000
|
heap default
|
page read and write
|
|
|
|
1B01A3B0000
|
unkown
|
page read and write
|
|
|
|
7FF54CB72000
|
unkown
|
page readonly
|
|
|
|
20C0E501000
|
unkown
|
page read and write
|
|
|
|
7FF5A87E9000
|
unkown
|
page readonly
|
|
|
|
7FF518BD4000
|
unkown
|
page readonly
|
|
|
|
7FF5A865C000
|
unkown
|
page readonly
|
|
|
|
C6152FD000
|
unkown
|
page read and write
|
|
|
|
293A4A70000
|
unkown
|
page read and write
|
|
|
|
7FF54CC5E000
|
unkown
|
page readonly
|
|
|
|
20C0E1D0000
|
unkown
|
page readonly
|
|
|
|
756ACFE000
|
unkown
|
page read and write
|
|
|
|
7FF5A8756000
|
unkown
|
page readonly
|
|
|
|
7FF5A86F8000
|
unkown
|
page readonly
|
|
|
|
7FF51899E000
|
unkown
|
page readonly
|
|
|
|
7FF5A8739000
|
unkown
|
page readonly
|
|
|
|
2A729CB0000
|
unkown
|
page readonly
|
|
|
|
7FF518BD7000
|
unkown
|
page readonly
|
|
|
|
7FF56AE22000
|
unkown
|
page readonly
|
|
|
|
7FF54C457000
|
unkown
|
page readonly
|
|
|
|
2B3FD429000
|
unkown
|
page read and write
|
|
|
|
EA99BFE000
|
unkown
|
page read and write
|
|
|
|
6E4F6FF000
|
unkown
|
page read and write
|
|
|
|
7FF503D5A000
|
unkown
|
page readonly
|
|
|
|
293A3660000
|
unkown
|
page readonly
|
|
|
|
7FF5167FE000
|
unkown
|
page readonly
|
|
|
|
1B01A390000
|
unkown
|
page readonly
|
|
|
|
7FF56AEC4000
|
unkown
|
page readonly
|
|
|
|
7FF5A854E000
|
unkown
|
page readonly
|
|
|
|
7FF5A870A000
|
unkown
|
page readonly
|
|
|
|
7FF545C87000
|
unkown
|
page readonly
|
|
|
|
7FF5459E6000
|
unkown
|
page readonly
|
|
|
|
7FF545A8E000
|
unkown
|
page readonly
|
|
|
|
20C0E1F0000
|
unkown
|
page readonly
|
|
|
|
18AE5590000
|
unkown
|
page read and write
|
|
|
|
2B3FD467000
|
unkown
|
page read and write
|
|
|
|
20C13000000
|
unkown
|
page read and write
|
|
|
|
7FF5A87E9000
|
unkown
|
page readonly
|
|
|
|
1FD81330000
|
unkown
|
page readonly
|
|
|
|
7FF545C4C000
|
unkown
|
page readonly
|
|
|
|
7FF56AE20000
|
unkown
|
page readonly
|
|
|
|
7FF503B5A000
|
unkown
|
page readonly
|
|
|
|
7FF5A83D1000
|
unkown
|
page readonly
|
|
|
|
20C13430000
|
unkown
|
page readonly
|
|
|
|
1CA30E00000
|
unkown
|
page read and write
|
|
|
|
6E4F07F000
|
unkown
|
page read and write
|
|
|
|
7FF516819000
|
unkown
|
page readonly
|
|
|
|
20C0EE23000
|
unkown
|
page read and write
|
|
|
|
7FF5A860C000
|
unkown
|
page readonly
|
|
|
|
7FF5A8766000
|
unkown
|
page readonly
|
|
|
|
6E957E000
|
unkown
|
page read and write
|
|
|
|
20C13310000
|
unkown
|
page read and write
|
|
|
|
1FD81E00000
|
unkown
|
page readonly
|
|
|
|
7FF5ED387000
|
unkown
|
page readonly
|
|
|
|
7FF5A87E0000
|
unkown
|
page readonly
|
|
|
|
7FF545D56000
|
unkown
|
page readonly
|
|
|
|
7FF5ED3D0000
|
unkown
|
page readonly
|
|
|
|
18AE5702000
|
unkown
|
page read and write
|
|
|
|
20C0D9B0000
|
unkown
|
page read and write
|
|
|
|
B03F8FE000
|
unkown
|
page read and write
|
|
|
|
20C13210000
|
unkown
|
page read and write
|
|
|
|
20C132A0000
|
unkown
|
page write copy
|
|
|
|
2B3FDC00000
|
unkown
|
page readonly
|
|
|
|
7FF5A874D000
|
unkown
|
page readonly
|
|
|
|
293A3013000
|
unkown
|
page read and write
|
|
|
|
1CA30E68000
|
unkown
|
page read and write
|
|
|
|
20C0E318000
|
unkown
|
page read and write
|
|
|
|
20C13450000
|
unkown
|
page readonly
|
|
|
|
20C0DAFF000
|
unkown
|
page read and write
|
|
|
|
7FF54CBAF000
|
unkown
|
page readonly
|
|
|
|
7FF5167D8000
|
unkown
|
page readonly
|
|
|
|
7FF518B89000
|
unkown
|
page readonly
|
|
|
|
7FF56AE3A000
|
unkown
|
page readonly
|
|
|
|
7FF5188EE000
|
unkown
|
page readonly
|
|
|
|
20C130D8000
|
unkown
|
page read and write
|
|
|
|
A579C7F000
|
unkown
|
page read and write
|
|
|
|
293A2F60000
|
heap default
|
page read and write
|
|
|
|
7FF5167C0000
|
unkown
|
page readonly
|
|
|
|
7FF545D4C000
|
unkown
|
page readonly
|
|
|
|
A579EFF000
|
unkown
|
page read and write
|
|
|
|
1B01A402000
|
unkown
|
page read and write
|
|
|
|
1CA30E5F000
|
unkown
|
page read and write
|
|
|
|
7FF5A86F6000
|
unkown
|
page readonly
|
|
|
|
7FF518BC5000
|
unkown
|
page readonly
|
|
|
|
7FF545615000
|
unkown
|
page readonly
|
|
|
|
7FF503E39000
|
unkown
|
page readonly
|
|
|
|
1FD81502000
|
unkown
|
page read and write
|
|
|
|
7FF518B75000
|
unkown
|
page readonly
|
|
|
|
20C1304D000
|
unkown
|
page read and write
|
|
|
|
1CA30F13000
|
unkown
|
page read and write
|
|
|
|
7FF5ED43D000
|
unkown
|
page readonly
|
|
|
|
7FF51682D000
|
unkown
|
page readonly
|
|
|
|
20C0EE01000
|
unkown
|
page read and write
|
|
|
|
1FD81A70000
|
unkown
|
page readonly
|
|
|
|
20C0EAC0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED465000
|
unkown
|
page readonly
|
|
|
|
7FF54CB78000
|
unkown
|
page readonly
|
|
|
|
7FF516867000
|
unkown
|
page readonly
|
|
|
|
2A729C20000
|
unkown
|
page read and write
|
|
|
|
293A4B40000
|
unkown
|
page read and write
|
|
|
|
7FF5ED474000
|
unkown
|
page readonly
|
|
|
|
7FF5ED3C8000
|
unkown
|
page readonly
|
|
|
|
1CA30E40000
|
unkown
|
page read and write
|
|
|
|
A579E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5ED377000
|
unkown
|
page readonly
|
|
|
|
B03F47E000
|
unkown
|
page read and write
|
|
|
|
2A729DC0000
|
unkown
|
page readonly
|
|
|
|
7FF54CBB9000
|
unkown
|
page readonly
|
|
|
|
7FF56AEB5000
|
unkown
|
page readonly
|
|
|
|
20C0DA58000
|
unkown
|
page read and write
|
|
|
|
C6151FE000
|
unkown
|
page read and write
|
|
|
|
7FF5ED456000
|
unkown
|
page readonly
|
|
|
|
20C0E1B0000
|
unkown
|
page readonly
|
|
|
|
18AE5580000
|
unkown
|
page readonly
|
|
|
|
7FF5ED011000
|
unkown
|
page readonly
|
|
|
|
7FF54C8CD000
|
unkown
|
page readonly
|
|
|
|
20C0E200000
|
unkown
|
page read and write
|
|
|
|
2A72BA30000
|
heap private
|
page read and write
|
|
|
|
7FF54CAF5000
|
unkown
|
page readonly
|
|
|
|
EA99C7C000
|
unkown
|
page read and write
|
|
|
|
2A729CCB000
|
heap default
|
page read and write
|
|
|
|
7FF5A8787000
|
unkown
|
page readonly
|
|
|
|
7FF545CD0000
|
unkown
|
page readonly
|
|
|
|
7FF545D77000
|
unkown
|
page readonly
|
|
|
|
2B3FD600000
|
unkown
|
page readonly
|
|
|
|
2A72B830000
|
heap private
|
page read and write
|
|
|
|
293A3118000
|
unkown
|
page read and write
|
|
|
|
C614B7E000
|
unkown
|
page read and write
|
|
|
|
293A2F70000
|
unkown
|
page readonly
|
|
|
|
C614FFB000
|
unkown
|
page read and write
|
|
|
|
C614A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5ED441000
|
unkown
|
page readonly
|
|
|
|
7FF5167D2000
|
unkown
|
page readonly
|
|
|
|
7FF54CC69000
|
unkown
|
page readonly
|
|
|
|
7FF5ED207000
|
unkown
|
page readonly
|
|
|
|
7FF56AE96000
|
unkown
|
page readonly
|
|
|
|
7569F9D000
|
unkown
|
page read and write
|
|
|
|
2B3FD489000
|
unkown
|
page read and write
|
|
|
|
7FF516008000
|
unkown
|
page readonly
|
|
|
|
20C0D910000
|
heap private
|
page read and write
|
|
|
|
18AE5613000
|
unkown
|
page read and write
|
|
|
|
7FF54C4A5000
|
unkown
|
page readonly
|
|
|
|
7FF545D1F000
|
unkown
|
page readonly
|
|
|
|
1B01A3E0000
|
unkown
|
page read and write
|
|
|
|
7FF545CE2000
|
unkown
|
page readonly
|
|
|
|
20C0E202000
|
unkown
|
page read and write
|
|
|
|
7FF54C7A5000
|
unkown
|
page readonly
|
|
|
|
7FF516805000
|
unkown
|
page readonly
|
|
|
|
7FF545C71000
|
unkown
|
page readonly
|
|
|
|
1CA31460000
|
unkown
|
page readonly
|
|
|
|
7FF5A8780000
|
unkown
|
page readonly
|
|
|
|
6E967F000
|
unkown
|
page read and write
|
|
|
|
293A3047000
|
unkown
|
page read and write
|
|
|
|
7FF518900000
|
unkown
|
page readonly
|
|
|
|
7FF5A8784000
|
unkown
|
page readonly
|
|
|
|
20C13021000
|
unkown
|
page read and write
|
|
|
|
B03F7FB000
|
unkown
|
page read and write
|
|
|
|
20C13200000
|
unkown
|
page read and write
|
|
|
|
6E8F7E000
|
unkown
|
page read and write
|
|
|
|
7569E9B000
|
unkown
|
page read and write
|
|
|
|
2B3FD513000
|
unkown
|
page read and write
|
|
|
|
756A3FF000
|
unkown
|
page read and write
|
|
|
|
20C0DA29000
|
unkown
|
page read and write
|
|
|
|
7FF54596E000
|
unkown
|
page readonly
|
|
|
|
293A4B50000
|
unkown
|
page write copy
|
|
|
|
1B01AA60000
|
unkown
|
page readonly
|
|
|
|
6E4E5EC000
|
unkown
|
page read and write
|
|
|
|
7FF5A8588000
|
unkown
|
page readonly
|
|
|
|
7FF5ED446000
|
unkown
|
page readonly
|
|
|
|
6E4F1FF000
|
unkown
|
page read and write
|
|
|
|
1CA30E57000
|
unkown
|
page read and write
|
|
|
|
20C132D7000
|
unkown
|
page write copy
|
|
|
|
7FF56AE36000
|
unkown
|
page readonly
|
|
|
|
7FF5A872F000
|
unkown
|
page readonly
|
|
|
|
7FF545C45000
|
unkown
|
page readonly
|
|
|
|
7FF56AB3C000
|
unkown
|
page readonly
|
|
|
|
7FF56AEC7000
|
unkown
|
page readonly
|
|
|
|
6E4EAFD000
|
unkown
|
page read and write
|
|
|
|
7FF5ED41F000
|
unkown
|
page readonly
|
|
|
|
7FF5ED015000
|
unkown
|
page readonly
|
|
|
|
1FD8146F000
|
unkown
|
page read and write
|
|
|
|
7FF56AF29000
|
unkown
|
page readonly
|
|
|
|
7FF56AE79000
|
unkown
|
page readonly
|
|
|
|
7FF5A86ED000
|
unkown
|
page readonly
|
|
|
|
20C132A4000
|
unkown
|
page readonly
|
|
|
|
20C0E9E0000
|
unkown
|
page read and write
|
|
|
|
EA99CFE000
|
unkown
|
page read and write
|
|
|
|
7FF545D5C000
|
unkown
|
page readonly
|
|
|
|
7FF54CC07000
|
unkown
|
page readonly
|
|
|
|
1B01A451000
|
unkown
|
page read and write
|
|
|
|
7FF51680F000
|
unkown
|
page readonly
|
|
|
|
293A305A000
|
unkown
|
page read and write
|
|
|
|
293A2F00000
|
heap private
|
page read and write
|
|
|
|
293A2FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5A876C000
|
unkown
|
page readonly
|
|
|
|
20C132F0000
|
unkown
|
page read and write
|
|
|
|
1CA31000000
|
unkown
|
page readonly
|
|
|
|
2B3FDA02000
|
unkown
|
page read and write
|
|
|
|
756A6FE000
|
unkown
|
page read and write
|
|
|
|
20C12E40000
|
unkown
|
page read and write
|
|
|
|
7FF51684C000
|
unkown
|
page readonly
|
|
|
|
7FF545CBC000
|
unkown
|
page readonly
|
|
|
|
756A8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5455ED000
|
unkown
|
page readonly
|
|
|
|
1FD8143D000
|
unkown
|
page read and write
|
|
|
|
20C0E1E0000
|
unkown
|
page readonly
|
|
|
|
293A304A000
|
unkown
|
page read and write
|
|
|
|
7FF503DD7000
|
unkown
|
page readonly
|
|
|
|
BA166FE000
|
unkown
|
page read and write
|
|
|
|
7FF54CA08000
|
unkown
|
page readonly
|
|
|
|
7FF5189F8000
|
unkown
|
page readonly
|
|
|
|
18AE5685000
|
unkown
|
page read and write
|
|
|
|
293A4E00000
|
unkown
|
page readonly
|
|
|
|
B03F4FE000
|
unkown
|
page read and write
|
|
|
|
7FF518BAC000
|
unkown
|
page readonly
|
|
|
|
1CA30E02000
|
unkown
|
page read and write
|
|
|
|
20C0DAB4000
|
unkown
|
page read and write
|
|
|
|
7FF545D0E000
|
unkown
|
page readonly
|
|
|
|
A57956E000
|
unkown
|
page read and write
|
|
|
|
6E8EFB000
|
unkown
|
page read and write
|
|
|
|
20C0DA71000
|
unkown
|
page read and write
|
|
|
|
7FF54CC02000
|
unkown
|
page readonly
|
|
|
|
1B01A3A0000
|
unkown
|
page readonly
|
|
|
|
20C12FD0000
|
unkown
|
page read and write
|
|
|
|
756A5FF000
|
unkown
|
page read and write
|
|
|
|
20C0DA91000
|
unkown
|
page read and write
|
|
|
|
20C12ED0000
|
unkown
|
page read and write
|
|
|
|
7FF518808000
|
unkown
|
page readonly
|
|
|
|
20C0E318000
|
unkown
|
page read and write
|
|
|
|
20C0DA8D000
|
unkown
|
page read and write
|
|
|
|
7FF5167C2000
|
unkown
|
page readonly
|
|
|
|
7FF54CBE6000
|
unkown
|
page readonly
|
|
|
|
7FF545A87000
|
unkown
|
page readonly
|
|
|
|
20C1308A000
|
unkown
|
page read and write
|
|
|
|
6E4E9F7000
|
unkown
|
page read and write
|
|
|
|
7FF545AFB000
|
unkown
|
page readonly
|
|
|
|
7FF545CFA000
|
unkown
|
page readonly
|
|
|
|
20C13061000
|
unkown
|
page read and write
|
|
|
|
7FF5168C1000
|
unkown
|
page readonly
|
|
|
|
C614AFC000
|
unkown
|
page read and write
|
|
|
|
20C13214000
|
unkown
|
page read and write
|
|
|
|
7FF518BD0000
|
unkown
|
page readonly
|
|
|
|
7FF545D74000
|
unkown
|
page readonly
|
|
|
|
7FF56AE4A000
|
unkown
|
page readonly
|
|
|
|
7FF56AEAC000
|
unkown
|
page readonly
|
|
|
|
7FF503D48000
|
unkown
|
page readonly
|
|
|
|
2A729F00000
|
heap private
|
page read and write
|
|
|
|
1B01AC02000
|
unkown
|
page read and write
|
|
|
|
7FF5A8725000
|
unkown
|
page readonly
|
|
|
|
2A72B910000
|
heap private
|
page read and write
|
|
|
|
20C132D4000
|
unkown
|
page write copy
|
|
|
|
7FF54C3C5000
|
unkown
|
page readonly
|
|
|
|
756AAFF000
|
unkown
|
page read and write
|
|
|
|
20C0E300000
|
unkown
|
page read and write
|
|
|
|
18AE562A000
|
unkown
|
page read and write
|
|
|
|
293A305A000
|
unkown
|
page read and write
|
|
|
|
7FF56AE38000
|
unkown
|
page readonly
|
|
|
|
20C0DB13000
|
unkown
|
page read and write
|
|
|
|
1CA30E64000
|
unkown
|
page read and write
|
|
|
|
7FF5ED240000
|
unkown
|
page readonly
|
|
|
|
7FF545B98000
|
unkown
|
page readonly
|
|
|
|
293A3057000
|
unkown
|
page read and write
|
|
|
|
1B01A42A000
|
unkown
|
page read and write
|
|
|
|
7FF54C80D000
|
unkown
|
page readonly
|
|
|
|
6E4EEFB000
|
unkown
|
page read and write
|
|
|
|
2A729AD0000
|
unkown
|
page readonly
|
|
|
|
7FF516846000
|
unkown
|
page readonly
|
|
|
|
7FF518B5A000
|
unkown
|
page readonly
|
|
|
|
18AE5600000
|
unkown
|
page read and write
|
|
|
|
1B01A320000
|
heap private
|
page read and write
|
|
|
|
1FD81600000
|
unkown
|
page readonly
|
|
|
|
2A729F10000
|
unkown
|
page readonly
|
|
|
|
18AE5560000
|
heap default
|
page read and write
|
|
|
|
7FF545967000
|
unkown
|
page readonly
|
|
|
|
7FF545D3D000
|
unkown
|
page readonly
|
|
|
|
7FF54CC69000
|
unkown
|
page readonly
|
|
|
|
7FF503DAC000
|
unkown
|
page readonly
|
|
|
|
7FF5A85F7000
|
unkown
|
page readonly
|
|
|
|
7FF5164E5000
|
unkown
|
page readonly
|
|
|
|
7FF545D70000
|
unkown
|
page readonly
|
|
|
|
7FF545B7E000
|
unkown
|
page readonly
|
|
|
|
20C0EE30000
|
unkown
|
page read and write
|
|
|
|
7FF545DCE000
|
unkown
|
page readonly
|
|
|
|
20C13410000
|
unkown
|
page readonly
|
|
|
|
7FF54CB60000
|
unkown
|
page readonly
|
|
|
|
1B01A43D000
|
unkown
|
page read and write
|
|
|
|
7FF54CA39000
|
unkown
|
page readonly
|
|
|
|
7FF5ED4D0000
|
unkown
|
page readonly
|
|
|
|
756A7FD000
|
unkown
|
page read and write
|
|
|
|
7FF56AF21000
|
unkown
|
page readonly
|
|
|
|
6E937E000
|
unkown
|
page read and write
|
|
|
|
2B3FD230000
|
heap default
|
page read and write
|
|
|
|
20C13120000
|
unkown
|
page read and write
|
|
|
|
756A2FB000
|
unkown
|
page read and write
|
|
|
|
EA997DE000
|
unkown
|
page read and write
|
|
|
|
BA1667E000
|
unkown
|
page read and write
|
|
|
|
7FF518C39000
|
unkown
|
page readonly
|
|
|
|
7FF56AEC0000
|
unkown
|
page readonly
|
|
|
|
293A3200000
|
unkown
|
page readonly
|
|
|
|
B03F1CB000
|
unkown
|
page read and write
|
|
|
|
7FF545950000
|
unkown
|
page readonly
|
|
|
|
7FF54CC04000
|
unkown
|
page readonly
|
|
|
|
7FF545B91000
|
unkown
|
page readonly
|
|
|
|
18AE5C60000
|
unkown
|
page readonly
|
|
|
|
1B01A6D0000
|
unkown
|
page readonly
|
|
|
|
C614D7B000
|
unkown
|
page read and write
|
|
|
|
7FF516864000
|
unkown
|
page readonly
|
|
|
|
20C0DA13000
|
unkown
|
page read and write
|
|
|
|
7FF545DD0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED3BC000
|
unkown
|
page readonly
|
|
|
|
18AE5500000
|
heap private
|
page read and write
|
|
|
|
1FD81465000
|
unkown
|
page read and write
|
|
|
|
2B3FD1D0000
|
heap private
|
page read and write
|
|
|
|
293A2FE0000
|
unkown
|
page read and write
|
|
|
|
7FF54CB58000
|
unkown
|
page readonly
|
|
|
|
1FD8145B000
|
unkown
|
page read and write
|
|
|
|
20C0DAA2000
|
unkown
|
page read and write
|
|
|
|
20C0E1C0000
|
unkown
|
page readonly
|
|
|
|
7FF503DD0000
|
unkown
|
page readonly
|
|
|
|
1FD81A80000
|
unkown
|
page read and write
|
|
|
|
1CA310D0000
|
unkown
|
page readonly
|
|
|
|
6E4EF7F000
|
unkown
|
page read and write
|
|
|
|
7FF51678B000
|
unkown
|
page readonly
|
|
|
|
7FF56ABAC000
|
unkown
|
page readonly
|
|
|
|
293A3102000
|
unkown
|
page read and write
|
|
|
|
7FF545546000
|
unkown
|
page readonly
|
|
|
|
20C13040000
|
unkown
|
page read and write
|
|
|
|
7FF518B28000
|
unkown
|
page readonly
|
|
|
|
2B3FD470000
|
unkown
|
page read and write
|
|
|
|
7FF503D75000
|
unkown
|
page readonly
|
|
|
|
20C12E80000
|
unkown
|
page readonly
|
|
|
|
C6147BD000
|
unkown
|
page read and write
|
|
|
|
6E4E8FE000
|
unkown
|
page read and write
|
|
|
|
7FF545915000
|
unkown
|
page readonly
|
|
|
|
7FF5459DD000
|
unkown
|
page readonly
|
|
|
|
7FF518B6E000
|
unkown
|
page readonly
|
|
|
|
7FF518BBC000
|
unkown
|
page readonly
|
|
|
|
2B3FD400000
|
unkown
|
page read and write
|
|
|
|
20C1302E000
|
unkown
|
page read and write
|
|
|
|
7FF545D15000
|
unkown
|
page readonly
|
|
|
|
293A3000000
|
unkown
|
page read and write
|
|
|
|
20C132C4000
|
unkown
|
page readonly
|
|
|
|
7FF5189D8000
|
unkown
|
page readonly
|
|
|
|
7FF545B0C000
|
unkown
|
page readonly
|
|
|
|
1FD81AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5160F9000
|
unkown
|
page readonly
|
|
|
|
7FF5A856F000
|
unkown
|
page readonly
|
|
|
|
7FF5A86E0000
|
unkown
|
page readonly
|
|
|
|
6E4F0FF000
|
unkown
|
page read and write
|
|
|
|
6E947F000
|
unkown
|
page read and write
|
|
|
|
20C0E313000
|
unkown
|
page read and write
|
|
|
|
20C0DA96000
|
unkown
|
page read and write
|
|
|
|
7FF518397000
|
unkown
|
page readonly
|
|
|
|
7FF5A8514000
|
unkown
|
page readonly
|
|
|
|
20C12FD8000
|
unkown
|
page read and write
|
|
|
|
20C0E302000
|
unkown
|
page read and write
|
|
|
|
756ABFF000
|
unkown
|
page read and write
|
|
|
|
7FF503DBC000
|
unkown
|
page readonly
|
|
|
|
1B01A3E0000
|
unkown
|
page read and write
|
|
|
|
7FF545AA0000
|
unkown
|
page readonly
|
|
|
|
6E4EFFF000
|
unkown
|
page read and write
|
|
|
|
7FF5ED391000
|
unkown
|
page readonly
|
|
|
|
20C0E1A0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED38A000
|
unkown
|
page readonly
|
|
There are 677 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://wayfairapp.onelink.me/h%20ttp://edubuddie.com/vsot/aK6hhbi8933Qq/Verizon?tid=121811&vno=5&txid=B20200331_1488798683&lid=18207&c=Triggered&pid=Email<id=0&af_sub5=AppEmailCA
|
|