Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
0333 - CCFL Seniors Funded Facilities Risk Assessments 20210801.mhtml
|
MIME entity, ASCII text, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3F393D3B-F4A0-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3F393D3D-F4A0-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wbk9C9B.tmp
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF34CD3393F0C35364.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF7AB7A8B365382B36.TMP
|
data
|
dropped
|
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' C:\Users\user\Desktop\0333 - CCFL Seniors Funded Facilities Risk Assessments
20210801.mhtml
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6944 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://ravens.healthspace.ca/ReportServer?%2FVIHA%2FCCFL%2F0333%20-%20CCFL%20Seniors%20Funded%20Fac
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://www.healthspace.com/Clients/Common/ReportDefinitions.nsf/RefNum/0333
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
http://www.google.com/
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{3F393D3B-F4A0-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingRandomizedBitmap
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
There are 8 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
2176FF88000
|
unkown
|
page read and write
|
|
|
|
7FF539FC8000
|
unkown
|
page readonly
|
|
|
|
7FF51E099000
|
unkown
|
page readonly
|
|
|
|
2176FCB0000
|
unkown
|
page read and write
|
|
|
|
2176FF50000
|
unkown
|
page read and write
|
|
|
|
162C1D40000
|
heap private
|
page read and write
|
|
|
|
7FF51DDDB000
|
unkown
|
page readonly
|
|
|
|
2176FF00000
|
unkown
|
page read and write
|
|
|
|
7FF53A891000
|
unkown
|
page readonly
|
|
|
|
2176FFCE000
|
unkown
|
page read and write
|
|
|
|
7FF536EEA000
|
unkown
|
page readonly
|
|
|
|
7FF536E8C000
|
unkown
|
page readonly
|
|
|
|
2176F580000
|
unkown
|
page readonly
|
|
|
|
2176FF8B000
|
unkown
|
page read and write
|
|
|
|
7FF578E91000
|
unkown
|
page readonly
|
|
|
|
198AFFF000
|
unkown
|
page read and write
|
|
|
|
29828C90000
|
unkown
|
page read and write
|
|
|
|
7FF54B3E4000
|
unkown
|
page readonly
|
|
|
|
7FF53A78C000
|
unkown
|
page readonly
|
|
|
|
29828D13000
|
unkown
|
page read and write
|
|
|
|
7FF536F92000
|
unkown
|
page readonly
|
|
|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
2176FF82000
|
unkown
|
page read and write
|
|
|
|
7FF51DF84000
|
unkown
|
page readonly
|
|
|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
17CD2400000
|
unkown
|
page readonly
|
|
|
|
7FF51DEC3000
|
unkown
|
page readonly
|
|
|
|
7FF51DAFE000
|
unkown
|
page readonly
|
|
|
|
B336A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5786A1000
|
unkown
|
page readonly
|
|
|
|
B3367FB000
|
unkown
|
page read and write
|
|
|
|
7FF536E9E000
|
unkown
|
page readonly
|
|
|
|
244F2B80000
|
heap default
|
page read and write
|
|
|
|
2176FF31000
|
unkown
|
page read and write
|
|
|
|
7FF536EA0000
|
unkown
|
page readonly
|
|
|
|
7FF51DE20000
|
unkown
|
page readonly
|
|
|
|
2176FF87000
|
unkown
|
page read and write
|
|
|
|
7FF51DFC2000
|
unkown
|
page readonly
|
|
|
|
B630F7A000
|
unkown
|
page read and write
|
|
|
|
198ACF7000
|
unkown
|
page read and write
|
|
|
|
7FF536F16000
|
unkown
|
page readonly
|
|
|
|
7FF536F08000
|
unkown
|
page readonly
|
|
|
|
7FF536D9B000
|
unkown
|
page readonly
|
|
|
|
7FF51E020000
|
unkown
|
page readonly
|
|
|
|
17CD1860000
|
heap private
|
page read and write
|
|
|
|
162C1DB0000
|
unkown
|
page readonly
|
|
|
|
7FF51DF23000
|
unkown
|
page readonly
|
|
|
|
7FF51DF1E000
|
unkown
|
page readonly
|
|
|
|
7FF53A517000
|
unkown
|
page readonly
|
|
|
|
2176FF50000
|
unkown
|
page read and write
|
|
|
|
7FF578E84000
|
unkown
|
page readonly
|
|
|
|
B3362AC000
|
unkown
|
page read and write
|
|
|
|
2176FFBD000
|
unkown
|
page read and write
|
|
|
|
2176FFCC000
|
unkown
|
page read and write
|
|
|
|
2176FC60000
|
unkown
|
page write copy
|
|
|
|
2176FF8B000
|
unkown
|
page read and write
|
|
|
|
7FF578E0E000
|
unkown
|
page readonly
|
|
|
|
162C1E4F000
|
unkown
|
page read and write
|
|
|
|
7FF578CF3000
|
unkown
|
page readonly
|
|
|
|
7FF536F0E000
|
unkown
|
page readonly
|
|
|
|
7FF536EFF000
|
unkown
|
page readonly
|
|
|
|
24DF4F5000
|
unkown
|
page read and write
|
|
|
|
2176F430000
|
heap private
|
page read and write
|
|
|
|
2176F64A000
|
unkown
|
page read and write
|
|
|
|
162C1E47000
|
unkown
|
page read and write
|
|
|
|
162C1F02000
|
unkown
|
page read and write
|
|
|
|
21770402000
|
unkown
|
page read and write
|
|
|
|
198B07F000
|
unkown
|
page read and write
|
|
|
|
7FF536F8A000
|
unkown
|
page readonly
|
|
|
|
24DF5FB000
|
unkown
|
page read and write
|
|
|
|
2176FF74000
|
unkown
|
page read and write
|
|
|
|
29829402000
|
unkown
|
page read and write
|
|
|
|
7FF53A79E000
|
unkown
|
page readonly
|
|
|
|
2176FCD0000
|
unkown
|
page readonly
|
|
|
|
7FF51DE71000
|
unkown
|
page readonly
|
|
|
|
17CD1A86000
|
unkown
|
page read and write
|
|
|
|
7FF578DEA000
|
unkown
|
page readonly
|
|
|
|
B336B7E000
|
unkown
|
page read and write
|
|
|
|
24DF7FF000
|
unkown
|
page read and write
|
|
|
|
17CD1B02000
|
unkown
|
page read and write
|
|
|
|
29828D08000
|
unkown
|
page read and write
|
|
|
|
244F2DF0000
|
heap private
|
page read and write
|
|
|
|
7FF54B482000
|
unkown
|
page readonly
|
|
|
|
7FF53A79A000
|
unkown
|
page readonly
|
|
|
|
7FF51DDA0000
|
unkown
|
page readonly
|
|
|
|
17CD1A55000
|
unkown
|
page read and write
|
|
|
|
7FF536E04000
|
unkown
|
page readonly
|
|
|
|
24DF0BB000
|
unkown
|
page read and write
|
|
|
|
7FF51DD97000
|
unkown
|
page readonly
|
|
|
|
7FF578DE4000
|
unkown
|
page readonly
|
|
|
|
7FF53A69B000
|
unkown
|
page readonly
|
|
|
|
162C1DA0000
|
heap default
|
page read and write
|
|
|
|
17CD1B08000
|
unkown
|
page read and write
|
|
|
|
7FF53A6F3000
|
unkown
|
page readonly
|
|
|
|
2176FF88000
|
unkown
|
page read and write
|
|
|
|
B63127F000
|
unkown
|
page read and write
|
|
|
|
29828C64000
|
unkown
|
page read and write
|
|
|
|
7FF53A7AB000
|
unkown
|
page readonly
|
|
|
|
2176FF50000
|
unkown
|
page read and write
|
|
|
|
2176FF56000
|
unkown
|
page read and write
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
244F2BBA000
|
unkown
|
page read and write
|
|
|
|
7FF536C17000
|
unkown
|
page readonly
|
|
|
|
7FF51E04C000
|
unkown
|
page readonly
|
|
|
|
7FF536DED000
|
unkown
|
page readonly
|
|
|
|
2176F6A7000
|
unkown
|
page read and write
|
|
|
|
7FF53A816000
|
unkown
|
page readonly
|
|
|
|
2176F490000
|
heap default
|
page read and write
|
|
|
|
2176FF77000
|
unkown
|
page read and write
|
|
|
|
29828C5D000
|
unkown
|
page read and write
|
|
|
|
7FF536ED7000
|
unkown
|
page readonly
|
|
|
|
7FF536EF4000
|
unkown
|
page readonly
|
|
|
|
7FF578D0C000
|
unkown
|
page readonly
|
|
|
|
7FF5366C8000
|
unkown
|
page readonly
|
|
|
|
7FF578DB7000
|
unkown
|
page readonly
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
7FF5784B3000
|
unkown
|
page readonly
|
|
|
|
7FF53A892000
|
unkown
|
page readonly
|
|
|
|
198B479000
|
unkown
|
page read and write
|
|
|
|
2176FF65000
|
unkown
|
page read and write
|
|
|
|
2176FF8D000
|
unkown
|
page read and write
|
|
|
|
29828C55000
|
unkown
|
page read and write
|
|
|
|
244F2B10000
|
unkown
|
page read and write
|
|
|
|
11A307F000
|
unkown
|
page read and write
|
|
|
|
2176FF73000
|
unkown
|
page read and write
|
|
|
|
2176F708000
|
unkown
|
page read and write
|
|
|
|
11A2A7E000
|
unkown
|
page read and write
|
|
|
|
2176FF56000
|
unkown
|
page read and write
|
|
|
|
7FF53A7D7000
|
unkown
|
page readonly
|
|
|
|
2176F64C000
|
unkown
|
page read and write
|
|
|
|
29828AB0000
|
unkown
|
page readonly
|
|
|
|
244F2BC2000
|
unkown
|
page read and write
|
|
|
|
7FF536EAB000
|
unkown
|
page readonly
|
|
|
|
2176F6E4000
|
unkown
|
page read and write
|
|
|
|
B33632F000
|
unkown
|
page read and write
|
|
|
|
244F2B92000
|
unkown
|
page read and write
|
|
|
|
2176FF52000
|
unkown
|
page read and write
|
|
|
|
17CD1A2A000
|
unkown
|
page read and write
|
|
|
|
21770402000
|
unkown
|
page read and write
|
|
|
|
2176FF87000
|
unkown
|
page read and write
|
|
|
|
7FF51E074000
|
unkown
|
page readonly
|
|
|
|
24DF6F7000
|
unkown
|
page read and write
|
|
|
|
29828B90000
|
unkown
|
page readonly
|
|
|
|
7FF51DBE0000
|
unkown
|
page readonly
|
|
|
|
198AEF7000
|
unkown
|
page read and write
|
|
|
|
7FF51E07F000
|
unkown
|
page readonly
|
|
|
|
2176FF61000
|
unkown
|
page read and write
|
|
|
|
7FF54B39B000
|
unkown
|
page readonly
|
|
|
|
17CD1A00000
|
unkown
|
page read and write
|
|
|
|
244F2BA7000
|
unkown
|
page read and write
|
|
|
|
7FF51DFC0000
|
unkown
|
page readonly
|
|
|
|
7FF51DDE6000
|
unkown
|
page readonly
|
|
|
|
7FF536F84000
|
unkown
|
page readonly
|
|
|
|
7FF51E06A000
|
unkown
|
page readonly
|
|
|
|
7FF53A360000
|
unkown
|
page readonly
|
|
|
|
7FF578DA5000
|
unkown
|
page readonly
|
|
|
|
7FF51DB8E000
|
unkown
|
page readonly
|
|
|
|
29828C3C000
|
unkown
|
page read and write
|
|
|
|
7FF578D8A000
|
unkown
|
page readonly
|
|
|
|
29828BA0000
|
unkown
|
page read and write
|
|
|
|
162C1E8A000
|
unkown
|
page read and write
|
|
|
|
2176FF50000
|
unkown
|
page read and write
|
|
|
|
7FF53A643000
|
unkown
|
page readonly
|
|
|
|
7FF51DBE6000
|
unkown
|
page readonly
|
|
|
|
B336977000
|
unkown
|
page read and write
|
|
|
|
17CD2202000
|
unkown
|
page read and write
|
|
|
|
7FF53A88A000
|
unkown
|
page readonly
|
|
|
|
2176FF61000
|
unkown
|
page read and write
|
|
|
|
7FF536D9E000
|
unkown
|
page readonly
|
|
|
|
2176FFA2000
|
unkown
|
page read and write
|
|
|
|
2176F64E000
|
unkown
|
page read and write
|
|
|
|
7FF53A681000
|
unkown
|
page readonly
|
|
|
|
162C20D0000
|
unkown
|
page readonly
|
|
|
|
2176F629000
|
unkown
|
page read and write
|
|
|
|
B6313FF000
|
unkown
|
page read and write
|
|
|
|
244F2B40000
|
unkown
|
page readonly
|
|
|
|
7FF53A81D000
|
unkown
|
page readonly
|
|
|
|
7FF578D8C000
|
unkown
|
page readonly
|
|
|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
29828C5F000
|
unkown
|
page read and write
|
|
|
|
2176F800000
|
unkown
|
page readonly
|
|
|
|
7FF54B3FE000
|
unkown
|
page readonly
|
|
|
|
7FF536D43000
|
unkown
|
page readonly
|
|
|
|
2176FF59000
|
unkown
|
page read and write
|
|
|
|
B3366F5000
|
unkown
|
page read and write
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
244F2BBA000
|
unkown
|
page read and write
|
|
|
|
7FF54B3D4000
|
unkown
|
page readonly
|
|
|
|
2176FF13000
|
unkown
|
page read and write
|
|
|
|
2176FF89000
|
unkown
|
page read and write
|
|
|
|
2176FF59000
|
unkown
|
page read and write
|
|
|
|
7FF54B47A000
|
unkown
|
page readonly
|
|
|
|
7FF51DF28000
|
unkown
|
page readonly
|
|
|
|
7FF51DFF4000
|
unkown
|
page readonly
|
|
|
|
2176FF74000
|
unkown
|
page read and write
|
|
|
|
21770400000
|
unkown
|
page read and write
|
|
|
|
7FF51E064000
|
unkown
|
page readonly
|
|
|
|
17CD2070000
|
unkown
|
page readonly
|
|
|
|
7FF54ACE3000
|
unkown
|
page readonly
|
|
|
|
2176FCB0000
|
unkown
|
page read and write
|
|
|
|
162C1F00000
|
unkown
|
page read and write
|
|
|
|
2176FF89000
|
unkown
|
page read and write
|
|
|
|
B3363AD000
|
unkown
|
page read and write
|
|
|
|
7FF51E096000
|
unkown
|
page readonly
|
|
|
|
2176FF31000
|
unkown
|
page read and write
|
|
|
|
21770402000
|
unkown
|
page read and write
|
|
|
|
7FF51E088000
|
unkown
|
page readonly
|
|
|
|
24DF8FF000
|
unkown
|
page read and write
|
|
|
|
244F2E00000
|
unkown
|
page readonly
|
|
|
|
7FF51DF1B000
|
unkown
|
page readonly
|
|
|
|
11A2D7E000
|
unkown
|
page read and write
|
|
|
|
11A2F7F000
|
unkown
|
page read and write
|
|
|
|
7FF536A66000
|
unkown
|
page readonly
|
|
|
|
29828C13000
|
unkown
|
page read and write
|
|
|
|
2176FFCA000
|
unkown
|
page read and write
|
|
|
|
2176FF9C000
|
unkown
|
page read and write
|
|
|
|
7FF578DCF000
|
unkown
|
page readonly
|
|
|
|
7FF54B06A000
|
unkown
|
page readonly
|
|
|
|
7FF536E8A000
|
unkown
|
page readonly
|
|
|
|
2176F6A2000
|
unkown
|
page read and write
|
|
|
|
7FF51DCFA000
|
unkown
|
page readonly
|
|
|
|
7FF536E9A000
|
unkown
|
page readonly
|
|
|
|
7FF53A7A0000
|
unkown
|
page readonly
|
|
|
|
7FF54B474000
|
unkown
|
page readonly
|
|
|
|
7FF51E104000
|
unkown
|
page readonly
|
|
|
|
7FF536DF3000
|
unkown
|
page readonly
|
|
|
|
7FF53A884000
|
unkown
|
page readonly
|
|
|
|
7FF578E16000
|
unkown
|
page readonly
|
|
|
|
7FF578966000
|
unkown
|
page readonly
|
|
|
|
162C1F08000
|
unkown
|
page read and write
|
|
|
|
21770402000
|
unkown
|
page read and write
|
|
|
|
7FF53A7CF000
|
unkown
|
page readonly
|
|
|
|
29828C8A000
|
unkown
|
page read and write
|
|
|
|
2176FF61000
|
unkown
|
page read and write
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
7FF51DE54000
|
unkown
|
page readonly
|
|
|
|
7FF536F1D000
|
unkown
|
page readonly
|
|
|
|
2176F6F7000
|
unkown
|
page read and write
|
|
|
|
162C1E00000
|
unkown
|
page read and write
|
|
|
|
7FF53A78A000
|
unkown
|
page readonly
|
|
|
|
17CD18D0000
|
unkown
|
page readonly
|
|
|
|
7FF536D81000
|
unkown
|
page readonly
|
|
|
|
198A7AC000
|
unkown
|
page read and write
|
|
|
|
11A2AFE000
|
unkown
|
page read and write
|
|
|
|
2176F6E2000
|
unkown
|
page read and write
|
|
|
|
7FF578E1D000
|
unkown
|
page readonly
|
|
|
|
2176F6A6000
|
unkown
|
page read and write
|
|
|
|
2176FCC0000
|
unkown
|
page read and write
|
|
|
|
29828B80000
|
unkown
|
page readonly
|
|
|
|
7FF53A70C000
|
unkown
|
page readonly
|
|
|
|
7FF578960000
|
unkown
|
page readonly
|
|
|
|
2176FF7C000
|
unkown
|
page read and write
|
|
|
|
21770461000
|
unkown
|
page read and write
|
|
|
|
2176FF72000
|
unkown
|
page read and write
|
|
|
|
2176F5C0000
|
unkown
|
page readonly
|
|
|
|
7FF578D9A000
|
unkown
|
page readonly
|
|
|
|
2176FF7E000
|
unkown
|
page read and write
|
|
|
|
17CD19C0000
|
unkown
|
page read and write
|
|
|
|
7FF53A7B7000
|
unkown
|
page readonly
|
|
|
|
7FF51D973000
|
unkown
|
page readonly
|
|
|
|
244F2AF0000
|
unkown
|
page read and write
|
|
|
|
2176FF7C000
|
unkown
|
page read and write
|
|
|
|
7FF578D9E000
|
unkown
|
page readonly
|
|
|
|
2176FF87000
|
unkown
|
page read and write
|
|
|
|
7FF578E92000
|
unkown
|
page readonly
|
|
|
|
2176F600000
|
unkown
|
page read and write
|
|
|
|
2176F63C000
|
unkown
|
page read and write
|
|
|
|
244F2BA9000
|
unkown
|
page read and write
|
|
|
|
29828A40000
|
heap private
|
page read and write
|
|
|
|
198AA7F000
|
unkown
|
page read and write
|
|
|
|
7FF578DA0000
|
unkown
|
page readonly
|
|
|
|
7FF51DB82000
|
unkown
|
page readonly
|
|
|
|
244F2B87000
|
heap default
|
page read and write
|
|
|
|
7FF54B3C8000
|
unkown
|
page readonly
|
|
|
|
7FF53A69E000
|
unkown
|
page readonly
|
|
|
|
7FF536EE4000
|
unkown
|
page readonly
|
|
|
|
2176F6E7000
|
unkown
|
page read and write
|
|
|
|
7FF54B3DA000
|
unkown
|
page readonly
|
|
|
|
7FF536A75000
|
unkown
|
page readonly
|
|
|
|
7FF51DC35000
|
unkown
|
page readonly
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
7FF578E8A000
|
unkown
|
page readonly
|
|
|
|
2176FF31000
|
unkown
|
page read and write
|
|
|
|
162C1DC0000
|
unkown
|
page readonly
|
|
|
|
17CD18C0000
|
heap default
|
page read and write
|
|
|
|
17CD1A70000
|
unkown
|
page read and write
|
|
|
|
2176FF83000
|
unkown
|
page read and write
|
|
|
|
7FF53A7FF000
|
unkown
|
page readonly
|
|
|
|
2176FF87000
|
unkown
|
page read and write
|
|
|
|
162C1F13000
|
unkown
|
page read and write
|
|
|
|
162C1E70000
|
unkown
|
page read and write
|
|
|
|
2176FF27000
|
unkown
|
page read and write
|
|
|
|
17CD1B00000
|
unkown
|
page read and write
|
|
|
|
7FF54B481000
|
unkown
|
page readonly
|
|
|
|
2176F4A0000
|
unkown
|
page readonly
|
|
|
|
7FF54B3BC000
|
unkown
|
page readonly
|
|
|
|
7FF54B3F8000
|
unkown
|
page readonly
|
|
|
|
B6312F9000
|
unkown
|
page read and write
|
|
|
|
7FF51DC37000
|
unkown
|
page readonly
|
|
|
|
7FF53A704000
|
unkown
|
page readonly
|
|
|
|
2176F6BB000
|
unkown
|
page read and write
|
|
|
|
29828E00000
|
unkown
|
page readonly
|
|
|
|
7FF54B3EE000
|
unkown
|
page readonly
|
|
|
|
2176FF59000
|
unkown
|
page read and write
|
|
|
|
7FF53A5F1000
|
unkown
|
page readonly
|
|
|
|
7FF578E08000
|
unkown
|
page readonly
|
|
|
|
2176FF87000
|
unkown
|
page read and write
|
|
|
|
B630FFE000
|
unkown
|
page read and write
|
|
|
|
198B37E000
|
unkown
|
page read and write
|
|
|
|
7FF51E10A000
|
unkown
|
page readonly
|
|
|
|
2176FF80000
|
unkown
|
page read and write
|
|
|
|
11A27AB000
|
unkown
|
page read and write
|
|
|
|
7FF536E0C000
|
unkown
|
page readonly
|
|
|
|
198AAFF000
|
unkown
|
page read and write
|
|
|
|
7FF51DF6D000
|
unkown
|
page readonly
|
|
|
|
11A2E77000
|
unkown
|
page read and write
|
|
|
|
2176FF8D000
|
unkown
|
page read and write
|
|
|
|
7FF51E112000
|
unkown
|
page readonly
|
|
|
|
7FF51DB92000
|
unkown
|
page readonly
|
|
|
|
24DF1BE000
|
unkown
|
page read and write
|
|
|
|
29828C27000
|
unkown
|
page read and write
|
|
|
|
7FF53A7A5000
|
unkown
|
page readonly
|
|
|
|
7FF53A808000
|
unkown
|
page readonly
|
|
|
|
17CD1A3C000
|
unkown
|
page read and write
|
|
|
|
29828C00000
|
unkown
|
page read and write
|
|
|
|
162C1E02000
|
unkown
|
page read and write
|
|
|
|
2176F570000
|
unkown
|
page readonly
|
|
|
|
7FF53A7CC000
|
unkown
|
page readonly
|
|
|
|
2176F5E0000
|
unkown
|
page readonly
|
|
|
|
7FF536ECC000
|
unkown
|
page readonly
|
|
|
|
2176FCB0000
|
unkown
|
page read and write
|
|
|
|
2176FF8B000
|
unkown
|
page read and write
|
|
|
|
7FF578C9B000
|
unkown
|
page readonly
|
|
|
|
B33687F000
|
unkown
|
page read and write
|
|
|
|
B63147A000
|
unkown
|
page read and write
|
|
|
|
21770000000
|
unkown
|
page readonly
|
|
|
|
162C2000000
|
unkown
|
page readonly
|
|
|
|
7FF53A7EA000
|
unkown
|
page readonly
|
|
|
|
162C1E29000
|
unkown
|
page read and write
|
|
|
|
7FF51DECA000
|
unkown
|
page readonly
|
|
|
|
7FF578DF4000
|
unkown
|
page readonly
|
|
|
|
17CD1A4F000
|
unkown
|
page read and write
|
|
|
|
162C1E55000
|
unkown
|
page read and write
|
|
|
|
7FF578DAB000
|
unkown
|
page readonly
|
|
|
|
29829260000
|
unkown
|
page readonly
|
|
|
|
7FF536EB7000
|
unkown
|
page readonly
|
|
|
|
2176F670000
|
unkown
|
page read and write
|
|
|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
2176F6D5000
|
unkown
|
page read and write
|
|
|
|
162C2602000
|
unkown
|
page read and write
|
|
|
|
2176F688000
|
unkown
|
page read and write
|
|
|
|
2176F590000
|
unkown
|
page read and write
|
|
|
|
7FF53A7F4000
|
unkown
|
page readonly
|
|
|
|
2176FF8B000
|
unkown
|
page read and write
|
|
|
|
7FF578C9E000
|
unkown
|
page readonly
|
|
|
|
7FF578D04000
|
unkown
|
page readonly
|
|
|
|
7FF578E19000
|
unkown
|
page readonly
|
|
|
|
7FF51E037000
|
unkown
|
page readonly
|
|
|
|
17CD1C00000
|
unkown
|
page readonly
|
|
|
|
2176F613000
|
unkown
|
page read and write
|
|
|
|
2176FF65000
|
unkown
|
page read and write
|
|
|
|
7FF578DCC000
|
unkown
|
page readonly
|
|
|
|
2176FF50000
|
unkown
|
page read and write
|
|
|
|
7FF578C81000
|
unkown
|
page readonly
|
|
|
|
7FF578975000
|
unkown
|
page readonly
|
|
|
|
244F2BBA000
|
unkown
|
page read and write
|
|
|
|
7FF51DF01000
|
unkown
|
page readonly
|
|
|
|
7FF51DFFF000
|
unkown
|
page readonly
|
|
|
|
21770600000
|
unkown
|
page readonly
|
|
|
|
162C2B40000
|
unkown
|
page readonly
|
|
|
|
17CD1A46000
|
unkown
|
page read and write
|
|
|
|
7FF51E01E000
|
unkown
|
page readonly
|
|
|
|
2176F702000
|
unkown
|
page read and write
|
|
|
|
2176FF83000
|
unkown
|
page read and write
|
|
|
|
7FF578C43000
|
unkown
|
page readonly
|
|
|
|
29829600000
|
unkown
|
page readonly
|
|
|
|
11A2BF5000
|
unkown
|
page read and write
|
|
|
|
11A2CFB000
|
unkown
|
page read and write
|
|
|
|
2176FF58000
|
unkown
|
page read and write
|
|
|
|
7FF51DF8C000
|
unkown
|
page readonly
|
|
|
|
7FF578BF1000
|
unkown
|
page readonly
|
|
|
|
7FF51E01A000
|
unkown
|
page readonly
|
|
|
|
7FF53A375000
|
unkown
|
page readonly
|
|
|
|
244F2C80000
|
unkown
|
page readonly
|
|
|
|
2176FF65000
|
unkown
|
page read and write
|
|
|
|
29828D02000
|
unkown
|
page read and write
|
|
|
|
2176FF89000
|
unkown
|
page read and write
|
|
|
|
2176FF8A000
|
unkown
|
page read and write
|
|
|
|
29828C29000
|
unkown
|
page read and write
|
|
|
|
2176FF8D000
|
unkown
|
page read and write
|
|
|
|
7FF53A366000
|
unkown
|
page readonly
|
|
|
|
244F2BC1000
|
unkown
|
page read and write
|
|
|
|
2176FF61000
|
unkown
|
page read and write
|
|
|
|
7FF578B17000
|
unkown
|
page readonly
|
|
|
|
2176FCB0000
|
unkown
|
page readonly
|
|
|
|
7FF51E00A000
|
unkown
|
page readonly
|
|
|
|
7FF536F91000
|
unkown
|
page readonly
|
|
|
|
162C1DD0000
|
unkown
|
page read and write
|
|
|
|
7FF536F19000
|
unkown
|
page readonly
|
|
|
|
17CD19A0000
|
unkown
|
page readonly
|
|
|
|
7FF53A520000
|
unkown
|
page readonly
|
|
|
|
2176F713000
|
unkown
|
page read and write
|
|
|
|
2176FF7D000
|
unkown
|
page read and write
|
|
|
|
2176F6C2000
|
unkown
|
page read and write
|
|
|
|
7FF51D848000
|
unkown
|
page readonly
|
|
|
|
7FF536EA5000
|
unkown
|
page readonly
|
|
|
|
2176F5F0000
|
unkown
|
page readonly
|
|
|
|
7FF51DE61000
|
unkown
|
page readonly
|
|
|
|
7FF51E111000
|
unkown
|
page readonly
|
|
|
|
2176FF31000
|
unkown
|
page read and write
|
|
|
|
7FF54B409000
|
unkown
|
page readonly
|
|
|
|
7FF536ECF000
|
unkown
|
page readonly
|
|
|
|
7FF54ACE7000
|
unkown
|
page readonly
|
|
|
|
7FF578CED000
|
unkown
|
page readonly
|
|
|
|
2176FF8B000
|
unkown
|
page read and write
|
|
|
|
7FF51DF73000
|
unkown
|
page readonly
|
|
|
|
2176F6E8000
|
unkown
|
page read and write
|
|
|
|
17CD19B0000
|
unkown
|
page readonly
|
|
|
|
7FF536C20000
|
unkown
|
page readonly
|
|
|
|
29828D00000
|
unkown
|
page read and write
|
|
|
|
198ADFA000
|
unkown
|
page read and write
|
|
|
|
7FF536CF1000
|
unkown
|
page readonly
|
|
|
|
162C2800000
|
unkown
|
page readonly
|
|
|
|
B63137F000
|
unkown
|
page read and write
|
|
|
|
7FF51E04F000
|
unkown
|
page readonly
|
|
|
|
7FF51D921000
|
unkown
|
page readonly
|
|
|
|
198B27E000
|
unkown
|
page read and write
|
|
|
|
2176F64B000
|
unkown
|
page read and write
|
|
|
|
244F2DF5000
|
heap private
|
page read and write
|
|
|
|
7FF51E02B000
|
unkown
|
page readonly
|
|
|
|
7FF51E08E000
|
unkown
|
page readonly
|
|
|
|
7FF536A60000
|
unkown
|
page readonly
|
|
|
|
7FF51D977000
|
unkown
|
page readonly
|
|
|
|
244F2B97000
|
heap default
|
page read and write
|
|
|
|
7FF578DFF000
|
unkown
|
page readonly
|
|
|
|
7FF54B395000
|
unkown
|
page readonly
|
|
|
|
2176FF52000
|
unkown
|
page read and write
|
|
|
|
2176F6B1000
|
unkown
|
page read and write
|
|
|
|
7FF54B390000
|
unkown
|
page readonly
|
|
|
|
29828AA0000
|
heap default
|
page read and write
|
|
|
|
7FF51DFEB000
|
unkown
|
page readonly
|
|
|
|
7FF51E025000
|
unkown
|
page readonly
|
|
|
|
7FF51E057000
|
unkown
|
page readonly
|
|
|
|
17CD1B13000
|
unkown
|
page read and write
|
|
|
|
7FF53A80E000
|
unkown
|
page readonly
|
|
|
|
2176FF71000
|
unkown
|
page read and write
|
|
|
|
7FF53A6ED000
|
unkown
|
page readonly
|
|
|
|
162C1E13000
|
unkown
|
page read and write
|
|
|
|
7FF51E00C000
|
unkown
|
page readonly
|
|
|
|
29828C62000
|
unkown
|
page read and write
|
|
|
|
162C1E3C000
|
unkown
|
page read and write
|
|
|
|
244F2B50000
|
unkown
|
page readonly
|
|
|
|
2176FE02000
|
unkown
|
page read and write
|
|
|
|
7FF53A7E4000
|
unkown
|
page readonly
|
|
|
|
17CD1A13000
|
unkown
|
page read and write
|
|
|
|
7FF54B3BF000
|
unkown
|
page readonly
|
|
|
|
7FF51DE56000
|
unkown
|
page readonly
|
|
|
|
7FF53A819000
|
unkown
|
page readonly
|
|
|
|
2176FF7C000
|
unkown
|
page read and write
|
|
|
|
7FF578DD7000
|
unkown
|
page readonly
|
|
|
|
21770454000
|
unkown
|
page read and write
|
|
|
|
2176FF7C000
|
unkown
|
page read and write
|
|
|
|
7FF51DBF5000
|
unkown
|
page readonly
|
|
|
|
2176FF8D000
|
unkown
|
page read and write
|
|
|
|
7FF51DFEF000
|
unkown
|
page readonly
|
|
|
|
198B179000
|
unkown
|
page read and write
|
|
|
|
7FF54B40D000
|
unkown
|
page readonly
|
|
|
|
24DF13E000
|
unkown
|
page read and write
|
|
There are 459 hidden memdumps, click here to show them.