Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2021_RFQ_PROSPECT_REVIEW[1].pdf
|
PDF document, version 1.7
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\Priv8[1].htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\app.box[1].xml
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C4F94026-60D9-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C4F94028-60D9-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{CB84366F-60D9-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2_bc3d32a696895f78c19df6c717586a5d[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\app.811ebf667b[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\app.9f896c9a9e[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon-32x32-VwW37b[1].png
|
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery-3.1.1.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\lang-en-AU~lang-en-CA~lang-en-GB~lang-en-US~lang-en-x-pseudo.57dba5f597[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\lang-en-US.b7100883b0[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\pdf.worker.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\pdf_viewer.min[1].css
|
assembler source, ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\shared-file.dc82142668[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\uploads-manager-enduser.bb5993fca7[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\xygsjhx8uarct1s5ilzuk9uozpewcgk2[1].htm
|
HTML document, ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\as-security~change-current-user-role-modal~collaborators~collection-detail-page~content-explorer-mod~244fdb54.62c4dbb45d[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\exif.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\font-awesome[1].css
|
troff or preprocessor input, ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\pdf_viewer.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\preview-components.13eb9e85d7[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\preview-components~shared-file.70593fc742[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\preview-components~shared-file.c463595108[1].css
|
ASCII text, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\preview[1].js
|
UTF-8 Unicode text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\promise[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\shared-file.05a9048993[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\53_8b36337037cff88c3df203bb73d58e41[1].png
|
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Lato-Bold[1].woff
|
Web Open Font Format, TrueType, length 118272, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Lato-Regular[1].woff
|
Web Open Font Format, TrueType, length 119132, version 1.0
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\content-sidebar.1a9d462f03[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\content-sidebar.1bd7ef9b84[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\core.min[1].js
|
UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ellipsis_635a63d500a92a0b8497cdc58d0f66b1[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\intersection-observer[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\loading[1].gif
|
GIF image data, version 89a, 30 x 30
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\messagecenter~preview-components~uploads-manager-enduser.00e4aedbbd[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\messagecenter~preview-components~uploads-manager-enduser.22b2a1dc4b[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\picker_account_aad_9de70d1c5191d1852a0d5aac28b44a6c[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\picker_account_add_56e73414003cdb676008ff7857343074[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\picker_more_7568a43cf440757c55d2e7f51557ae1f[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\Lato-woff[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\Priv8[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\content[1].jpg
|
[TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 791x1024,
frames 3
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\favicon_a_eupayfgghqiai7k9sol6lg2[1].ico
|
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\messagecenter~uploads-manager-enduser.e83b2dda31[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\pdf.min[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\preview-components.960fd72025[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\preview[1].css
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\runtime.3f7647bcda[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\uploads-manager-enduser.dd5d6cf4cc[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\vendors~app.ad1b5c324e[1].js
|
ASCII text, with very long lines
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\dat9AF4.tmp
|
Web Open Font Format, TrueType, length 119132, version 1.0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\dat9B24.tmp
|
Web Open Font Format (Version 2), TrueType, length 84396, version 2.983
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\datB813.tmp
|
OpenType font data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF230665274301A536.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF2C2A06D5A055137F.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFB9D3966484AB6D52.TMP
|
data
|
dropped
|
|
There are 54 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6836 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://retreatceiling.com/Project2021/Priv8/Priv8/$Sign
|
unknown
|
|
|
|
https://retreatceiling.com/Project2021/Priv8/Priv8/
|
unknown
|
|
|
|
https://retreatceiling.com/Project2021/Priv8/Priv8/#
|
unknown
|
|
|
|
https://retreatceiling.com/Project2021/Priv8/Priv8/
|
|
||
|
https://retreatceiling.com/Project2021/Priv8/Priv8/k2
|
unknown
|
|
|
|
https://www.pdfescape.com
|
unknown
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2
|
|
||
|
http://fontawesome.io
|
unknown
|
|
|
|
https://www.pdfescape.com)/CreationDate(D:20210119103539Z)/ModDate(D:20210127165518Z)
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/picker_more_7568a43cf440757c55d2e7f51557ae1f.svg
|
unknown
|
|
|
|
https://www.radpdf.com)/Author(Camisani
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-EHWWyP.ico
|
unknown
|
|
|
|
https://github.com/zloirock/core-js
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.s
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2)
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/picker_account_aad_9de70d1c5191d1852a0d5aac28b44
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/browserconfig-fdBReK.xml
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-57x57-fLlEpj.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2)
|
unknown
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2Root
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-144x144-va9pYs.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-76x76-ZVGnRV.png
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-16x16-Ou5N87.png
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_96f69d0cefd8a8ba623a182c351ccc64.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/enduser/app.9f896c9a9e.css
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/android-chrome-192x192-96i97M.png
|
unknown
|
|
|
|
https://app.box.c.com/Project2021/Priv8/Priv8/k2Root
|
unknown
|
|
|
|
http://jedwatson.github.io/classnames
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/safari-pinned-tab-jyt2W4.svg
|
unknown
|
|
|
|
https://app.box.c.com/Project2021/Priv8/Priv8/#Root
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/favicon-96x96-XU7UE1.png
|
unknown
|
|
|
|
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
|
unknown
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2xygsjhx8uarct1s5ilzuk9uozpewcgk2Root
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-152x152-r5tWgh.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-60x60-Uv0qzu.png
|
unknown
|
|
|
|
https://code.jquery.com/jquery-3.1.1.min.js
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-72x72-7aVqne.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/favicon-16x16-_kQSW4.png
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico~
|
unknown
|
|
|
|
https://app.box.cRoot
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico~(
|
unknown
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2Z2021_RFQ_PROSPECT_REVIEW.pdf
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff)
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.s
|
unknown
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2
|
unknown
|
|
|
|
http://fontawesome.io/license
|
unknown
|
|
|
|
http://www.dynaforms.com
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/picker_account_add_56e73414003cdb676008ff7857343
|
unknown
|
|
|
|
https://retreatceiling.com/Project2021/Priv8/Priv8)
|
unknown
|
|
|
|
http://blog.stevenlevithan.com/archives/parseuri
|
unknown
|
|
|
|
https://app.box.c
|
unknown
|
|
|
|
https://feross.org
|
unknown
|
|
|
|
https://github.com/derek-watson/jsUri
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-woff.css
|
unknown
|
|
|
|
https://support.box.com
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-114x114-busq-D.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/manifest-rw1AEP.json
|
unknown
|
|
|
|
http://rock.mit-license.org
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-96x96-TOQ9Kg.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-32x32-brwW_W.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-120x120-K-u4U5.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff)
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/mstile-144x144-pllCM8.png
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/favicon-32x32-VwW37b.png
|
unknown
|
|
|
|
http://www.box.com)
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-180x180-tV001c.png
|
unknown
|
|
|
|
https://www.radpdf.com
|
unknown
|
|
|
|
https://aadcdn.msftauth.net/ests/2.1/content/images/ellipsis_grey_5bc252567ef56db648207d9c36a9d004.p
|
unknown
|
|
|
|
https://cdn01.boxcdn.net/_assets/img/favicons/favicon-yz-tj-.ico
|
unknown
|
|
There are 64 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
cs1100.wpc.omegacdn.net
|
152.199.23.37
|
|
|
|
api.box.com
|
185.235.236.197
|
|
|
|
public.boxcloud.com
|
185.235.236.200
|
|
|
|
cdnjs.cloudflare.com
|
104.16.19.94
|
|
|
|
retreatceiling.com
|
69.49.228.205
|
|
|
|
app.box.com
|
185.235.236.201
|
|
|
|
code.jquery.com
|
unknown
|
|
|
|
aadcdn.msftauth.net
|
unknown
|
|
|
|
cdn01.boxcdn.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
185.235.236.200
|
unknown
|
Germany
|
unknown
|
|
|
|
185.235.236.197
|
unknown
|
Germany
|
unknown
|
|
|
|
69.49.228.205
|
unknown
|
United States
|
unknown
|
|
|
|
185.235.236.201
|
unknown
|
Germany
|
unknown
|
|
|
|
152.199.23.37
|
unknown
|
United States
|
unknown
|
|
|
|
104.16.19.94
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{C4F94026-60D9-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Type
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Flags
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NumberOfSubdomains
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
NULL
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
Total
|
|
There are 83 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1EDE828A000
|
unkown
|
page read and write
|
|
|
|
7FF515761000
|
unkown
|
page readonly
|
|
|
|
1F9FF51E000
|
unkown
|
page read and write
|
|
|
|
1EDE9002000
|
unkown
|
page read and write
|
|
|
|
2D593A29000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4E000
|
unkown
|
page read and write
|
|
|
|
7FF515818000
|
unkown
|
page readonly
|
|
|
|
7FF5158AC000
|
unkown
|
page readonly
|
|
|
|
1EDE8BD9000
|
unkown
|
page read and write
|
|
|
|
1EDE8BA7000
|
unkown
|
page read and write
|
|
|
|
4088F7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B146B000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
7FF4FA301000
|
unkown
|
page readonly
|
|
|
|
2D593A90000
|
unkown
|
page read and write
|
|
|
|
1355605F000
|
unkown
|
page read and write
|
|
|
|
1EDE8BB2000
|
unkown
|
page read and write
|
|
|
|
7FF4FA20A000
|
unkown
|
page readonly
|
|
|
|
1F9FF3D0000
|
heap private
|
page read and write
|
|
|
|
2A6F33D0000
|
unkown
|
page readonly
|
|
|
|
1EDE8B6A000
|
unkown
|
page read and write
|
|
|
|
7FF4F9DD6000
|
unkown
|
page readonly
|
|
|
|
7FF52FB14000
|
unkown
|
page readonly
|
|
|
|
7FF5B0C12000
|
unkown
|
page readonly
|
|
|
|
1EDE8B88000
|
unkown
|
page read and write
|
|
|
|
13556A00000
|
unkown
|
page readonly
|
|
|
|
1EDE8B63000
|
unkown
|
page read and write
|
|
|
|
7FF5158EF000
|
unkown
|
page readonly
|
|
|
|
7FF5158D3000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
7FF4F33E5000
|
unkown
|
page readonly
|
|
|
|
1EDE82D5000
|
unkown
|
page read and write
|
|
|
|
7FF52FAD0000
|
unkown
|
page readonly
|
|
|
|
1EDE8B60000
|
unkown
|
page read and write
|
|
|
|
7FF4F33D6000
|
unkown
|
page readonly
|
|
|
|
1EDE82A0000
|
unkown
|
page read and write
|
|
|
|
1EDE8213000
|
unkown
|
page read and write
|
|
|
|
1EDE8F40000
|
unkown
|
page read and write
|
|
|
|
7FF5B135B000
|
unkown
|
page readonly
|
|
|
|
7FF4F99C2000
|
unkown
|
page readonly
|
|
|
|
1F9FEAA9000
|
unkown
|
page read and write
|
|
|
|
7FF52FB38000
|
unkown
|
page readonly
|
|
|
|
1EDE8B49000
|
unkown
|
page read and write
|
|
|
|
1EDE8B36000
|
unkown
|
page read and write
|
|
|
|
1EDE8B38000
|
unkown
|
page read and write
|
|
|
|
7FF52FB4D000
|
unkown
|
page readonly
|
|
|
|
2D593A55000
|
unkown
|
page read and write
|
|
|
|
1EDE8B81000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
1EDE8B7B000
|
unkown
|
page read and write
|
|
|
|
E648EFF000
|
unkown
|
page read and write
|
|
|
|
2D593A4D000
|
unkown
|
page read and write
|
|
|
|
1EDE8B77000
|
unkown
|
page read and write
|
|
|
|
2D593A00000
|
unkown
|
page read and write
|
|
|
|
1EDE8B48000
|
unkown
|
page read and write
|
|
|
|
408897E000
|
unkown
|
page read and write
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
7FF5B13CC000
|
unkown
|
page readonly
|
|
|
|
1EDE8B67000
|
unkown
|
page read and write
|
|
|
|
E649075000
|
unkown
|
page read and write
|
|
|
|
7FF4F38F4000
|
unkown
|
page readonly
|
|
|
|
1F9FF564000
|
unkown
|
page read and write
|
|
|
|
1EDE8B63000
|
unkown
|
page read and write
|
|
|
|
B3D8DFB000
|
unkown
|
page read and write
|
|
|
|
4088FFC000
|
unkown
|
page read and write
|
|
|
|
1EDE8B51000
|
unkown
|
page read and write
|
|
|
|
7FF5156E8000
|
unkown
|
page readonly
|
|
|
|
7FF515A01000
|
unkown
|
page readonly
|
|
|
|
1EDE8B32000
|
unkown
|
page read and write
|
|
|
|
7FF4FA27E000
|
unkown
|
page readonly
|
|
|
|
B3D8977000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
1F9FF090000
|
unkown
|
page readonly
|
|
|
|
7FF4F370E000
|
unkown
|
page readonly
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
1EDE8B3F000
|
unkown
|
page read and write
|
|
|
|
E649277000
|
unkown
|
page read and write
|
|
|
|
13555F50000
|
heap private
|
page read and write
|
|
|
|
1F9FEC00000
|
unkown
|
page readonly
|
|
|
|
1EDE8B4D000
|
unkown
|
page read and write
|
|
|
|
7FF4F377C000
|
unkown
|
page readonly
|
|
|
|
13556069000
|
unkown
|
page read and write
|
|
|
|
B3D867E000
|
unkown
|
page read and write
|
|
|
|
1F9FF523000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
1EDE82D9000
|
unkown
|
page read and write
|
|
|
|
1EDE8F50000
|
unkown
|
page read and write
|
|
|
|
7FF515856000
|
unkown
|
page readonly
|
|
|
|
7FF5B148F000
|
unkown
|
page readonly
|
|
|
|
2A6F3750000
|
heap private
|
page read and write
|
|
|
|
7FF52FB2E000
|
unkown
|
page readonly
|
|
|
|
7FF4FA2F4000
|
unkown
|
page readonly
|
|
|
|
1F9FE870000
|
heap default
|
page read and write
|
|
|
|
7FF5B13C4000
|
unkown
|
page readonly
|
|
|
|
7FF52FAFC000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
2D593A59000
|
unkown
|
page read and write
|
|
|
|
7FF5B11E0000
|
unkown
|
page readonly
|
|
|
|
1EDE81E0000
|
heap default
|
page read and write
|
|
|
|
7FF5156CB000
|
unkown
|
page readonly
|
|
|
|
7FF52F423000
|
unkown
|
page readonly
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
7FF5B121B000
|
unkown
|
page readonly
|
|
|
|
7FF5B1434000
|
unkown
|
page readonly
|
|
|
|
1EDE8B60000
|
unkown
|
page read and write
|
|
|
|
1EDE8B00000
|
unkown
|
page read and write
|
|
|
|
2A6F3480000
|
unkown
|
page read and write
|
|
|
|
7FF51580B000
|
unkown
|
page readonly
|
|
|
|
7FF5B1460000
|
unkown
|
page readonly
|
|
|
|
343E17F000
|
unkown
|
page read and write
|
|
|
|
7FF5B14CE000
|
unkown
|
page readonly
|
|
|
|
7FF5B1260000
|
unkown
|
page readonly
|
|
|
|
7FF5B1020000
|
unkown
|
page readonly
|
|
|
|
2D593B02000
|
unkown
|
page read and write
|
|
|
|
7FF5158E4000
|
unkown
|
page readonly
|
|
|
|
7FF4FA254000
|
unkown
|
page readonly
|
|
|
|
1EDE8B63000
|
unkown
|
page read and write
|
|
|
|
7FF5B1402000
|
unkown
|
page readonly
|
|
|
|
7FF5B1341000
|
unkown
|
page readonly
|
|
|
|
7FF4FA26F000
|
unkown
|
page readonly
|
|
|
|
7FF5B1303000
|
unkown
|
page readonly
|
|
|
|
E648E7C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3864000
|
unkown
|
page readonly
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
7FF51516D000
|
unkown
|
page readonly
|
|
|
|
1EDE8313000
|
unkown
|
page read and write
|
|
|
|
1EDE8B5F000
|
unkown
|
page read and write
|
|
|
|
1EDE8B46000
|
unkown
|
page read and write
|
|
|
|
7FF4F9F87000
|
unkown
|
page readonly
|
|
|
|
B3D8A7F000
|
unkown
|
page read and write
|
|
|
|
E395F79000
|
unkown
|
page read and write
|
|
|
|
343D8BC000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
1EDE8B8F000
|
unkown
|
page read and write
|
|
|
|
2D593A58000
|
unkown
|
page read and write
|
|
|
|
2A6F346E000
|
unkown
|
page read and write
|
|
|
|
7FF4F33D0000
|
unkown
|
page readonly
|
|
|
|
7FF5B142F000
|
unkown
|
page readonly
|
|
|
|
7FF4FA289000
|
unkown
|
page readonly
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
7FF515735000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
7FF4FA163000
|
unkown
|
page readonly
|
|
|
|
7FF4FA0F1000
|
unkown
|
page readonly
|
|
|
|
7FF4F388D000
|
unkown
|
page readonly
|
|
|
|
2D593980000
|
unkown
|
page readonly
|
|
|
|
2A6F3467000
|
unkown
|
page read and write
|
|
|
|
7FF4FA1FC000
|
unkown
|
page readonly
|
|
|
|
1FA00010000
|
unkown
|
page read and write
|
|
|
|
1F9FEA00000
|
unkown
|
page read and write
|
|
|
|
1EDE8B44000
|
unkown
|
page read and write
|
|
|
|
1EDE8B9A000
|
unkown
|
page read and write
|
|
|
|
1EDE8B84000
|
unkown
|
page read and write
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
2A6F346E000
|
unkown
|
page read and write
|
|
|
|
1F9FEA99000
|
unkown
|
page read and write
|
|
|
|
B3D8C78000
|
unkown
|
page read and write
|
|
|
|
7FF5B113A000
|
unkown
|
page readonly
|
|
|
|
7FF5B1226000
|
unkown
|
page readonly
|
|
|
|
1EDE8B3B000
|
unkown
|
page read and write
|
|
|
|
2D593A4F000
|
unkown
|
page read and write
|
|
|
|
1F9FE9F0000
|
unkown
|
page readonly
|
|
|
|
1EDE8F60000
|
unkown
|
page readonly
|
|
|
|
7FF5B0DB3000
|
unkown
|
page readonly
|
|
|
|
7FF5B1368000
|
unkown
|
page readonly
|
|
|
|
13556064000
|
unkown
|
page read and write
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
7FF51593F000
|
unkown
|
page readonly
|
|
|
|
7FF515978000
|
unkown
|
page readonly
|
|
|
|
2D593A50000
|
unkown
|
page read and write
|
|
|
|
1F9FF630000
|
unkown
|
page read and write
|
|
|
|
343E07F000
|
unkown
|
page read and write
|
|
|
|
2D593A4B000
|
unkown
|
page read and write
|
|
|
|
7FF52FB49000
|
unkown
|
page readonly
|
|
|
|
7FF4F3590000
|
unkown
|
page readonly
|
|
|
|
7FF515813000
|
unkown
|
page readonly
|
|
|
|
7FF515731000
|
unkown
|
page readonly
|
|
|
|
1F9FF630000
|
unkown
|
page read and write
|
|
|
|
7FF51593C000
|
unkown
|
page readonly
|
|
|
|
7FF5B1075000
|
unkown
|
page readonly
|
|
|
|
1EDE8B36000
|
unkown
|
page read and write
|
|
|
|
7FF4FA247000
|
unkown
|
page readonly
|
|
|
|
2D593A52000
|
unkown
|
page read and write
|
|
|
|
1EDE8B78000
|
unkown
|
page read and write
|
|
|
|
7FF51591B000
|
unkown
|
page readonly
|
|
|
|
1EDE89E0000
|
unkown
|
page readonly
|
|
|
|
7FF4F370B000
|
unkown
|
page readonly
|
|
|
|
7FF5B13B3000
|
unkown
|
page readonly
|
|
|
|
7FF4F37FA000
|
unkown
|
page readonly
|
|
|
|
2D593830000
|
heap private
|
page read and write
|
|
|
|
2D593A88000
|
unkown
|
page read and write
|
|
|
|
7FF5B1400000
|
unkown
|
page readonly
|
|
|
|
1EDE8990000
|
unkown
|
page write copy
|
|
|
|
1EDE8B8A000
|
unkown
|
page read and write
|
|
|
|
7FF52FB1A000
|
unkown
|
page readonly
|
|
|
|
343D9BD000
|
unkown
|
page read and write
|
|
|
|
1EDE8B75000
|
unkown
|
page read and write
|
|
|
|
7FF4F380E000
|
unkown
|
page readonly
|
|
|
|
1F9FF500000
|
unkown
|
page read and write
|
|
|
|
1EDE8B5C000
|
unkown
|
page read and write
|
|
|
|
1EDE8B3F000
|
unkown
|
page read and write
|
|
|
|
1EDE8B57000
|
unkown
|
page read and write
|
|
|
|
7FF4F37FC000
|
unkown
|
page readonly
|
|
|
|
1EDE9002000
|
unkown
|
page read and write
|
|
|
|
1EDE8B63000
|
unkown
|
page read and write
|
|
|
|
1EDE8B9A000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
2D593A13000
|
unkown
|
page read and write
|
|
|
|
1EDE8B79000
|
unkown
|
page read and write
|
|
|
|
1EDE81F0000
|
unkown
|
page readonly
|
|
|
|
7FF5158A2000
|
unkown
|
page readonly
|
|
|
|
1EDE8BB2000
|
unkown
|
page read and write
|
|
|
|
7FF4FA264000
|
unkown
|
page readonly
|
|
|
|
343DD7E000
|
unkown
|
page read and write
|
|
|
|
2A6F3456000
|
heap default
|
page read and write
|
|
|
|
7FF515769000
|
unkown
|
page readonly
|
|
|
|
7FF5B14BF000
|
unkown
|
page readonly
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
7FF52F7AA000
|
unkown
|
page readonly
|
|
|
|
2D593A46000
|
unkown
|
page read and write
|
|
|
|
7FF4FA28D000
|
unkown
|
page readonly
|
|
|
|
1EDE8BBB000
|
unkown
|
page read and write
|
|
|
|
7FF5159FA000
|
unkown
|
page readonly
|
|
|
|
7FF5158FA000
|
unkown
|
page readonly
|
|
|
|
1355605A000
|
unkown
|
page read and write
|
|
|
|
2A6F33E0000
|
unkown
|
page readonly
|
|
|
|
1EDE8B51000
|
unkown
|
page read and write
|
|
|
|
1EDE82C6000
|
unkown
|
page read and write
|
|
|
|
1EDE8B81000
|
unkown
|
page read and write
|
|
|
|
13556D40000
|
unkown
|
page readonly
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
7FF515954000
|
unkown
|
page readonly
|
|
|
|
2D593C00000
|
unkown
|
page readonly
|
|
|
|
1EDE8B5C000
|
unkown
|
page read and write
|
|
|
|
7FF5158B0000
|
unkown
|
page readonly
|
|
|
|
7FF5B1294000
|
unkown
|
page readonly
|
|
|
|
2A6F347F000
|
unkown
|
page read and write
|
|
|
|
B3D8B77000
|
unkown
|
page read and write
|
|
|
|
1EDE8B46000
|
unkown
|
page read and write
|
|
|
|
1EDE8B5C000
|
unkown
|
page read and write
|
|
|
|
1EDE8B9C000
|
unkown
|
page read and write
|
|
|
|
7FF4FA0B3000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
13556061000
|
unkown
|
page read and write
|
|
|
|
4088D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5154E9000
|
unkown
|
page readonly
|
|
|
|
1EDE8B71000
|
unkown
|
page read and write
|
|
|
|
B3D877C000
|
unkown
|
page read and write
|
|
|
|
2D593A3C000
|
unkown
|
page read and write
|
|
|
|
2A6F33A0000
|
unkown
|
page read and write
|
|
|
|
7FF515910000
|
unkown
|
page readonly
|
|
|
|
7FF5B14C8000
|
unkown
|
page readonly
|
|
|
|
1EDE8B7A000
|
unkown
|
page read and write
|
|
|
|
1EDE8200000
|
unkown
|
page read and write
|
|
|
|
B3D887A000
|
unkown
|
page read and write
|
|
|
|
1EDE9002000
|
unkown
|
page read and write
|
|
|
|
7FF4FA21B000
|
unkown
|
page readonly
|
|
|
|
1355605E000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
1EDE8B15000
|
unkown
|
page read and write
|
|
|
|
7FF5B14AA000
|
unkown
|
page readonly
|
|
|
|
7FF4FA25A000
|
unkown
|
page readonly
|
|
|
|
1EDE8B75000
|
unkown
|
page read and write
|
|
|
|
4088CF9000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4C000
|
unkown
|
page read and write
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
13556013000
|
unkown
|
page read and write
|
|
|
|
13556066000
|
unkown
|
page read and write
|
|
|
|
7FF5B144C000
|
unkown
|
page readonly
|
|
|
|
1F9FF620000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
7FF5158FC000
|
unkown
|
page readonly
|
|
|
|
13556088000
|
unkown
|
page read and write
|
|
|
|
7FF51590A000
|
unkown
|
page readonly
|
|
|
|
1EDE8860000
|
unkown
|
page readonly
|
|
|
|
1F9FE950000
|
unkown
|
page write copy
|
|
|
|
1EDE8B4E000
|
unkown
|
page read and write
|
|
|
|
7FF5B13AD000
|
unkown
|
page readonly
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
13556100000
|
unkown
|
page read and write
|
|
|
|
7FF5B14A4000
|
unkown
|
page readonly
|
|
|
|
7FF5B1363000
|
unkown
|
page readonly
|
|
|
|
7FF4FA23C000
|
unkown
|
page readonly
|
|
|
|
7FF5155DF000
|
unkown
|
page readonly
|
|
|
|
1EDE8BA7000
|
unkown
|
page read and write
|
|
|
|
7FF515A02000
|
unkown
|
page readonly
|
|
|
|
1EDE8940000
|
unkown
|
page read and write
|
|
|
|
1EDE8BD7000
|
unkown
|
page read and write
|
|
|
|
1F9FEB19000
|
unkown
|
page read and write
|
|
|
|
7FF4FA2FA000
|
unkown
|
page readonly
|
|
|
|
1F9FEACA000
|
unkown
|
page read and write
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
E39607E000
|
unkown
|
page read and write
|
|
|
|
7FF515751000
|
unkown
|
page readonly
|
|
|
|
1EDE82E2000
|
unkown
|
page read and write
|
|
|
|
7FF5158DF000
|
unkown
|
page readonly
|
|
|
|
1EDE8930000
|
unkown
|
page readonly
|
|
|
|
13556802000
|
unkown
|
page read and write
|
|
|
|
1EDE8B98000
|
unkown
|
page read and write
|
|
|
|
2A6F3755000
|
heap private
|
page read and write
|
|
|
|
1EDE8B44000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4C000
|
unkown
|
page read and write
|
|
|
|
7FF4F3774000
|
unkown
|
page readonly
|
|
|
|
1EDE823C000
|
unkown
|
page read and write
|
|
|
|
7FF4FA286000
|
unkown
|
page readonly
|
|
|
|
7FF52FB24000
|
unkown
|
page readonly
|
|
|
|
7FF4F36F1000
|
unkown
|
page readonly
|
|
|
|
1F9FE810000
|
heap private
|
page read and write
|
|
|
|
7FF5B144A000
|
unkown
|
page readonly
|
|
|
|
7FF5B1077000
|
unkown
|
page readonly
|
|
|
|
1EDE8F40000
|
unkown
|
page read and write
|
|
|
|
1EDE8B3E000
|
unkown
|
page read and write
|
|
|
|
2D593B00000
|
unkown
|
page read and write
|
|
|
|
7FF5155DA000
|
unkown
|
page readonly
|
|
|
|
1F9FEB13000
|
unkown
|
page read and write
|
|
|
|
7FF5156EF000
|
unkown
|
page readonly
|
|
|
|
1EDE8B42000
|
unkown
|
page read and write
|
|
|
|
7FF4F387E000
|
unkown
|
page readonly
|
|
|
|
7FF4FA1FA000
|
unkown
|
page readonly
|
|
|
|
7FF4F99BC000
|
unkown
|
page readonly
|
|
|
|
1EDE9002000
|
unkown
|
page read and write
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
1EDE8BC2000
|
unkown
|
page read and write
|
|
|
|
1EDE8B17000
|
unkown
|
page read and write
|
|
|
|
7FF4FA15D000
|
unkown
|
page readonly
|
|
|
|
1EDE8B66000
|
unkown
|
page read and write
|
|
|
|
4088DFB000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FC2000
|
unkown
|
page readonly
|
|
|
|
1EDE8B84000
|
unkown
|
page read and write
|
|
|
|
13556102000
|
unkown
|
page read and write
|
|
|
|
1EDE8B36000
|
unkown
|
page read and write
|
|
|
|
7FF51590E000
|
unkown
|
page readonly
|
|
|
|
7FF4FA20E000
|
unkown
|
page readonly
|
|
|
|
343DE7B000
|
unkown
|
page read and write
|
|
|
|
7FF52FBB4000
|
unkown
|
page readonly
|
|
|
|
1EDE8B3E000
|
unkown
|
page read and write
|
|
|
|
7FF4F38FA000
|
unkown
|
page readonly
|
|
|
|
7FF4FA210000
|
unkown
|
page readonly
|
|
|
|
1EDE8B38000
|
unkown
|
page read and write
|
|
|
|
7FF51595A000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1F9FEAE8000
|
unkown
|
page read and write
|
|
|
|
1EDE8B51000
|
unkown
|
page read and write
|
|
|
|
1EDE82F5000
|
unkown
|
page read and write
|
|
|
|
1EDE8970000
|
unkown
|
page readonly
|
|
|
|
1EDE8B8E000
|
unkown
|
page read and write
|
|
|
|
7FF515744000
|
unkown
|
page readonly
|
|
|
|
1F9FEACD000
|
unkown
|
page read and write
|
|
|
|
E395FFA000
|
unkown
|
page read and write
|
|
|
|
1EDE8302000
|
unkown
|
page read and write
|
|
|
|
1EDE8B3B000
|
unkown
|
page read and write
|
|
|
|
7FF5B0FCE000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
7FF5B1296000
|
unkown
|
page readonly
|
|
|
|
E395BEA000
|
unkown
|
page read and write
|
|
|
|
1F9FF533000
|
unkown
|
page read and write
|
|
|
|
7FF5B145A000
|
unkown
|
page readonly
|
|
|
|
7FF5B0DB7000
|
unkown
|
page readonly
|
|
|
|
1EDE8B66000
|
unkown
|
page read and write
|
|
|
|
7FF4FA215000
|
unkown
|
page readonly
|
|
|
|
1EDE8B1D000
|
unkown
|
page read and write
|
|
|
|
7FF52FB3E000
|
unkown
|
page readonly
|
|
|
|
7FF4FA278000
|
unkown
|
page readonly
|
|
|
|
2D594400000
|
unkown
|
page readonly
|
|
|
|
E648F7F000
|
unkown
|
page read and write
|
|
|
|
13555FE0000
|
unkown
|
page read and write
|
|
|
|
7FF51597E000
|
unkown
|
page readonly
|
|
|
|
1F9FEA55000
|
unkown
|
page read and write
|
|
|
|
7FF5B1497000
|
unkown
|
page readonly
|
|
|
|
E64947F000
|
unkown
|
page read and write
|
|
|
|
1EDE82D9000
|
unkown
|
page read and write
|
|
|
|
1EDE8B62000
|
unkown
|
page read and write
|
|
|
|
2A6F3456000
|
unkown
|
page read and write
|
|
|
|
7FF5B142B000
|
unkown
|
page readonly
|
|
|
|
7FF5B12B1000
|
unkown
|
page readonly
|
|
|
|
7FF52FBC2000
|
unkown
|
page readonly
|
|
|
|
1EDE8B1F000
|
unkown
|
page read and write
|
|
|
|
1EDE8B82000
|
unkown
|
page read and write
|
|
|
|
7FF4F3815000
|
unkown
|
page readonly
|
|
|
|
1EDE8B8E000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1F9FF660000
|
unkown
|
page readonly
|
|
|
|
7FF4F2FBC000
|
unkown
|
page readonly
|
|
|
|
1EDE8BA0000
|
unkown
|
page read and write
|
|
|
|
1EDE8229000
|
unkown
|
page read and write
|
|
|
|
1EDE8400000
|
unkown
|
page readonly
|
|
|
|
1EDE8B79000
|
unkown
|
page read and write
|
|
|
|
1EDE8B81000
|
unkown
|
page read and write
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
13555FC0000
|
unkown
|
page readonly
|
|
|
|
7FF52FBBA000
|
unkown
|
page readonly
|
|
|
|
2D593B13000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4C000
|
unkown
|
page read and write
|
|
|
|
E395E7F000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4F000
|
unkown
|
page read and write
|
|
|
|
E395EFF000
|
unkown
|
page read and write
|
|
|
|
1EDE82D2000
|
unkown
|
page read and write
|
|
|
|
1F9FE9E0000
|
unkown
|
page read and write
|
|
|
|
1EDE8B54000
|
unkown
|
page read and write
|
|
|
|
1EDE84D0000
|
unkown
|
page readonly
|
|
|
|
7FF515964000
|
unkown
|
page readonly
|
|
|
|
B3D8CFF000
|
unkown
|
page read and write
|
|
|
|
E64937F000
|
unkown
|
page read and write
|
|
|
|
1F9FEA42000
|
unkown
|
page read and write
|
|
|
|
7FF4F385A000
|
unkown
|
page readonly
|
|
|
|
1F9FEA84000
|
unkown
|
page read and write
|
|
|
|
7FF4F3763000
|
unkown
|
page readonly
|
|
|
|
7FF52F427000
|
unkown
|
page readonly
|
|
|
|
1EDE9002000
|
unkown
|
page read and write
|
|
|
|
1F9FEA13000
|
unkown
|
page read and write
|
|
|
|
13555FB0000
|
heap default
|
page read and write
|
|
|
|
1EDE8B42000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B64000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
B3D83BE000
|
unkown
|
page read and write
|
|
|
|
1355602C000
|
unkown
|
page read and write
|
|
|
|
7FF4F9DE5000
|
unkown
|
page readonly
|
|
|
|
7FF5B1551000
|
unkown
|
page readonly
|
|
|
|
1EDE8180000
|
heap private
|
page read and write
|
|
|
|
1EDE8BA0000
|
unkown
|
page read and write
|
|
|
|
7FF4F3810000
|
unkown
|
page readonly
|
|
|
|
7FF5157F1000
|
unkown
|
page readonly
|
|
|
|
13556063000
|
unkown
|
page read and write
|
|
|
|
1EDE8B5A000
|
unkown
|
page read and write
|
|
|
|
1EDE8BAC000
|
unkown
|
page read and write
|
|
|
|
7FF5B0D61000
|
unkown
|
page readonly
|
|
|
|
7FF4FA10B000
|
unkown
|
page readonly
|
|
|
|
1EDE8B43000
|
unkown
|
page read and write
|
|
|
|
1EDE9054000
|
unkown
|
page read and write
|
|
|
|
40888FB000
|
unkown
|
page read and write
|
|
|
|
7FF5158B2000
|
unkown
|
page readonly
|
|
|
|
7FF515986000
|
unkown
|
page readonly
|
|
|
|
135562D0000
|
unkown
|
page readonly
|
|
|
|
7FF51585D000
|
unkown
|
page readonly
|
|
|
|
13556029000
|
unkown
|
page read and write
|
|
|
|
7FF52FBC1000
|
unkown
|
page readonly
|
|
|
|
2D593990000
|
unkown
|
page read and write
|
|
|
|
7FF515927000
|
unkown
|
page readonly
|
|
|
|
7FF5B12A1000
|
unkown
|
page readonly
|
|
|
|
1EDE82BF000
|
unkown
|
page read and write
|
|
|
|
7FF5B0C0C000
|
unkown
|
page readonly
|
|
|
|
1F9FE9A0000
|
unkown
|
page readonly
|
|
|
|
2A6F344B000
|
heap default
|
page read and write
|
|
|
|
1EDE8B75000
|
unkown
|
page read and write
|
|
|
|
1EDE8B8A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3902000
|
unkown
|
page readonly
|
|
|
|
7FF4F381B000
|
unkown
|
page readonly
|
|
|
|
7FF5B154A000
|
unkown
|
page readonly
|
|
|
|
1EDE8B60000
|
unkown
|
page read and write
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
1EDE82A6000
|
unkown
|
page read and write
|
|
|
|
7FF4F3827000
|
unkown
|
page readonly
|
|
|
|
7FF5B1544000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
2D593890000
|
heap default
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
1EDE8B92000
|
unkown
|
page read and write
|
|
|
|
1F9FF502000
|
unkown
|
page read and write
|
|
|
|
1F9FF630000
|
unkown
|
page read and write
|
|
|
|
4088C7E000
|
unkown
|
page read and write
|
|
|
|
1EDE8B92000
|
unkown
|
page read and write
|
|
|
|
1F9FEA6E000
|
unkown
|
page read and write
|
|
|
|
13556108000
|
unkown
|
page read and write
|
|
|
|
1EDE8B68000
|
unkown
|
page read and write
|
|
|
|
1EDE8B4D000
|
unkown
|
page read and write
|
|
|
|
7FF5159F4000
|
unkown
|
page readonly
|
|
|
|
7FF5158DB000
|
unkown
|
page readonly
|
|
|
|
1F9FF402000
|
unkown
|
page read and write
|
|
|
|
7FF4FA061000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
343D93E000
|
unkown
|
page read and write
|
|
|
|
7FF52FAD5000
|
unkown
|
page readonly
|
|
|
|
2A6F3760000
|
unkown
|
page readonly
|
|
|
|
7FF5B1026000
|
unkown
|
page readonly
|
|
|
|
7FF4F383F000
|
unkown
|
page readonly
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
2A6F3451000
|
unkown
|
page read and write
|
|
|
|
7FF5B14D9000
|
unkown
|
page readonly
|
|
|
|
1EDE8B81000
|
unkown
|
page read and write
|
|
|
|
1F9FE880000
|
unkown
|
page readonly
|
|
|
|
1EDE8B43000
|
unkown
|
page read and write
|
|
|
|
2D593B08000
|
unkown
|
page read and write
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
7FF5156D6000
|
unkown
|
page readonly
|
|
|
|
7FF515472000
|
unkown
|
page readonly
|
|
|
|
4088EFA000
|
unkown
|
page read and write
|
|
|
|
B3D8EFB000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
1F9FEA6C000
|
unkown
|
page read and write
|
|
|
|
2A6F3440000
|
heap default
|
page read and write
|
|
|
|
7FF5B145E000
|
unkown
|
page readonly
|
|
|
|
1EDE8B9B000
|
unkown
|
page read and write
|
|
|
|
7FF4F3889000
|
unkown
|
page readonly
|
|
|
|
13556000000
|
unkown
|
page read and write
|
|
|
|
7FF515915000
|
unkown
|
page readonly
|
|
|
|
2D593A47000
|
unkown
|
page read and write
|
|
|
|
7FF4F3587000
|
unkown
|
page readonly
|
|
|
|
343DF77000
|
unkown
|
page read and write
|
|
|
|
7FF4FA302000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
7FF515746000
|
unkown
|
page readonly
|
|
|
|
7FF52FAFF000
|
unkown
|
page readonly
|
|
|
|
7FF5B1552000
|
unkown
|
page readonly
|
|
|
|
1EDE8B57000
|
unkown
|
page read and write
|
|
|
|
7FF5B14B4000
|
unkown
|
page readonly
|
|
|
|
7FF4F3886000
|
unkown
|
page readonly
|
|
|
|
7FF5B14D6000
|
unkown
|
page readonly
|
|
|
|
1EDE8B4D000
|
unkown
|
page read and write
|
|
|
|
7FF515989000
|
unkown
|
page readonly
|
|
|
|
7FF5B148C000
|
unkown
|
page readonly
|
|
|
|
7FF52FB08000
|
unkown
|
page readonly
|
|
|
|
343DCF5000
|
unkown
|
page read and write
|
|
|
|
1EDE8B60000
|
unkown
|
page read and write
|
|
|
|
408907F000
|
unkown
|
page read and write
|
|
|
|
7FF5B1477000
|
unkown
|
page readonly
|
|
|
|
7FF4F9DD0000
|
unkown
|
page readonly
|
|
|
|
7FF5B143F000
|
unkown
|
page readonly
|
|
|
|
7FF4FA227000
|
unkown
|
page readonly
|
|
|
|
1F9FEA95000
|
unkown
|
page read and write
|
|
|
|
2A6F346E000
|
unkown
|
page read and write
|
|
|
|
13556090000
|
unkown
|
page read and write
|
|
|
|
7FF5B11D7000
|
unkown
|
page readonly
|
|
|
|
7FF5B0F3E000
|
unkown
|
page readonly
|
|
|
|
1EDE8B9A000
|
unkown
|
page read and write
|
|
|
|
1F9FEB00000
|
unkown
|
page read and write
|
|
|
|
2A6F347B000
|
unkown
|
page read and write
|
|
|
|
2D593A70000
|
unkown
|
page read and write
|
|
|
|
1EDE8A02000
|
unkown
|
page read and write
|
|
|
|
7FF515947000
|
unkown
|
page readonly
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
13555FD0000
|
unkown
|
page readonly
|
|
|
|
7FF4F386F000
|
unkown
|
page readonly
|
|
|
|
1F9FF670000
|
unkown
|
page readonly
|
|
|
|
7FF4F3901000
|
unkown
|
page readonly
|
|
|
|
7FF5155CC000
|
unkown
|
page readonly
|
|
|
|
1EDE8C00000
|
unkown
|
page readonly
|
|
|
|
1EDE8F40000
|
unkown
|
page readonly
|
|
|
|
7FF4FA17C000
|
unkown
|
page readonly
|
|
|
|
1F9FF50A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3661000
|
unkown
|
page readonly
|
|
|
|
1F9FF630000
|
unkown
|
page read and write
|
|
|
|
7FF515171000
|
unkown
|
page readonly
|
|
|
|
1EDE9061000
|
unkown
|
page read and write
|
|
|
|
1355603C000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
7FF515211000
|
unkown
|
page readonly
|
|
|
|
1EDE8B82000
|
unkown
|
page read and write
|
|
|
|
1EDE8B32000
|
unkown
|
page read and write
|
|
|
|
7FF4F3878000
|
unkown
|
page readonly
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
7FF4FA23F000
|
unkown
|
page readonly
|
|
|
|
13556113000
|
unkown
|
page read and write
|
|
|
|
4088E7A000
|
unkown
|
page read and write
|
|
|
|
40889F9000
|
unkown
|
page read and write
|
|
|
|
1EDE8B1F000
|
unkown
|
page read and write
|
|
|
|
7FF4F383C000
|
unkown
|
page readonly
|
|
|
|
1EDE8B18000
|
unkown
|
page read and write
|
|
|
|
1EDE82D2000
|
unkown
|
page read and write
|
|
|
|
1EDE8B96000
|
unkown
|
page read and write
|
|
|
|
2D594060000
|
unkown
|
page readonly
|
|
|
|
7FF4F36B3000
|
unkown
|
page readonly
|
|
|
|
7FF515981000
|
unkown
|
page readonly
|
|
|
|
2D594202000
|
unkown
|
page read and write
|
|
|
|
1EDE8B66000
|
unkown
|
page read and write
|
|
|
|
7FF5B130A000
|
unkown
|
page readonly
|
|
|
|
1EDE8B2C000
|
unkown
|
page read and write
|
|
|
|
1EDE8B93000
|
unkown
|
page read and write
|
|
|
|
7FF4F375D000
|
unkown
|
page readonly
|
|
|
|
7FF4F2FC2000
|
unkown
|
page readonly
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
7FF4F380A000
|
unkown
|
page readonly
|
|
|
|
7FF5B1035000
|
unkown
|
page readonly
|
|
|
|
1EDE9000000
|
unkown
|
page read and write
|
|
|
|
2A6F347B000
|
unkown
|
page read and write
|
|
|
|
1EDE82A7000
|
unkown
|
page read and write
|
|
|
|
1EDE8B65000
|
unkown
|
page read and write
|
|
|
|
1EDE8B41000
|
unkown
|
page read and write
|
|
|
|
E3960FC000
|
unkown
|
page read and write
|
|
|
|
1EDE8B3D000
|
unkown
|
page read and write
|
|
|
|
2D593A57000
|
unkown
|
page read and write
|
|
|
|
1F9FEF90000
|
unkown
|
page read and write
|
|
|
|
7FF4FA174000
|
unkown
|
page readonly
|
|
|
|
1EDE8B96000
|
unkown
|
page read and write
|
|
|
|
1F9FEA29000
|
unkown
|
page read and write
|
|
|
|
1EDE8270000
|
unkown
|
page read and write
|
|
|
|
1F9FF640000
|
unkown
|
page readonly
|
|
|
|
1EDE82AA000
|
unkown
|
page read and write
|
|
|
|
1EDE8B51000
|
unkown
|
page read and write
|
|
|
|
1F9FEB02000
|
unkown
|
page read and write
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
2A6F3540000
|
unkown
|
page readonly
|
|
|
|
2A6F3466000
|
unkown
|
page read and write
|
|
|
|
1EDE8B51000
|
unkown
|
page read and write
|
|
|
|
1EDE8F40000
|
unkown
|
page read and write
|
|
|
|
7FF52FADB000
|
unkown
|
page readonly
|
|
|
|
1EDE8B45000
|
unkown
|
page read and write
|
|
|
|
1EDE8B55000
|
unkown
|
page read and write
|
|
|
|
7FF5155E7000
|
unkown
|
page readonly
|
|
|
|
13556200000
|
unkown
|
page readonly
|
|
|
|
7FF4F3854000
|
unkown
|
page readonly
|
|
|
|
7FF5B1465000
|
unkown
|
page readonly
|
|
|
|
7FF4F9F90000
|
unkown
|
page readonly
|
|
|
|
1355605C000
|
unkown
|
page read and write
|
|
|
|
2A6F3380000
|
unkown
|
page read and write
|
|
|
|
2D593A4C000
|
unkown
|
page read and write
|
|
|
|
1F9FEA86000
|
unkown
|
page read and write
|
|
|
|
1EDE8B44000
|
unkown
|
page read and write
|
|
|
|
2A6F347B000
|
unkown
|
page read and write
|
|
|
|
7FF4FA10E000
|
unkown
|
page readonly
|
|
|
|
1EDE82B1000
|
unkown
|
page read and write
|
|
|
|
2D5938A0000
|
unkown
|
page readonly
|
|
|
|
2D593970000
|
unkown
|
page readonly
|
|
|
|
1EDE82D9000
|
unkown
|
page read and write
|
|
|
|
E64917B000
|
unkown
|
page read and write
|
|
|
|
1EDE89F0000
|
unkown
|
page readonly
|
|
|
|
7FF51596E000
|
unkown
|
page readonly
|
|
|
|
7FF5B0FD2000
|
unkown
|
page readonly
|
|
|
|
B3D833C000
|
unkown
|
page read and write
|
|
|
|
13556068000
|
unkown
|
page read and write
|
|
|
|
1EDE82EC000
|
unkown
|
page read and write
|
|
|
|
1EDE8B23000
|
unkown
|
page read and write
|
|
|
|
7FF4F3847000
|
unkown
|
page readonly
|
|
There are 620 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://retreatceiling.com/Project2021/Priv8/Priv8/
|
|
|
|
https://app.box.com/s/xygsjhx8uarct1s5ilzuk9uozpewcgk2
|
|