Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
smartandfinalTicket#51347303511505986.htm
|
HTML document, ASCII text, with no line terminators
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\authorize_client_id_5g1afb80-7jfq-ask4-t1bx-5zw0d17rfy48_qa32ux85vsrdgt9ncpmw7ebyo4kz10fjilh6hskufelop5ya3m1i0942tcrv8znqxbwj7gd692ez0tj4dmhkufaqbo7pnvyrxl3568cs1iwg[1].htm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{920BAF35-7557-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{920BAF37-7557-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{99B83FD3-7557-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\enterpass[1].png
|
PNG image data, 170 x 29, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\exrobotosv4[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\forgpass[1].png
|
PNG image data, 121 x 20, 8-bit/color RGB, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sigin[1].png
|
PNG image data, 108 x 32, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\OfficeV4[1].htm
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\favicon[1].ico
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\firstmsg1[1].png
|
PNG image data, 353 x 41, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\arrow_left[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\inv-big-background[1].png
|
PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\passwrd[1].png
|
PNG image data, 69 x 34, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\style[1].css
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ellipsis_grey[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ellipsis_white[1].svg
|
SVG Scalable Vector Graphics image
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\exrobotosv4[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF0C840B5320C13C8C.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF837C423F64999335.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC6F44CA59B7DB5F9.TMP
|
data
|
dropped
|
|
There are 22 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6832 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://sydneybuildingengineers.com.au/OfficeV4/authorize_client_id:5g1afb80-7jfq-ask4-t1bx-5zw0d17rfy48_qa32ux85vsrdgt9ncpmw7ebyo4kz10fjilh6hskufelop5ya3m1i0942tcrv8znqxbwj7gd692ez0tj4dmhkufaqbo7pnvyrxl3568cs1iwg?data=dmlzaGFsLmt1bWFyQHNtYXJ0YW5kZmluYWwuY29t
|
|
||
|
https://sydneybuildingengineers.com.au/OfficeV4/?/dmlzaGFsLmt1bWFyQHNtYXJ0YW5kZmluYWwuY29t
|
unknown
|
|
|
|
https://sydneybuildingexrobotosv4/?vishal.kumar
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
https://saisas.com.co//Desktop/smartandfinalTicket#51347303511505986.htmexrobotosv4/?vishal.kumar
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
|
|
https://saisas.com.co/exrobotosv4/?vishal.kumar
|
unknown
|
|
|
|
https://saisas.com.co/exrobotosv4?vishal.kumar
|
unknown
|
|
|
|
https://sydneybuildingengineers.com.au/OfficeV4?/dmlzaGFsLmt1bWFyQHNtYXJ0YW5kZmluYWwuY29t
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
https://sydneybuildingengineers.com.au/OfficeV4/authorize_client_id:5g1afb80-7jfq-ask4-t1bx-5zw0d17r
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://sydneybuildingengineers.com.au/OfficeV4/images/favicon.ico~
|
unknown
|
|
There are 6 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
saisas.com.co
|
208.91.198.178
|
|
|
|
sydneybuildingengineers.com.au
|
192.169.157.161
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
208.91.198.178
|
unknown
|
United States
|
unknown
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
192.169.157.161
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{920BAF35-7557-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
NextUpdateDate
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 17 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5816E4000
|
unkown
|
page readonly
|
|
|
|
7FF522004000
|
unkown
|
page readonly
|
|
|
|
7FF52996A000
|
unkown
|
page readonly
|
|
|
|
B933D0C000
|
unkown
|
page read and write
|
|
|
|
7FF575E67000
|
unkown
|
page readonly
|
|
|
|
125C894B000
|
unkown
|
page read and write
|
|
|
|
7FF5297A4000
|
unkown
|
page readonly
|
|
|
|
27F22D52000
|
unkown
|
page read and write
|
|
|
|
271F703C000
|
unkown
|
page read and write
|
|
|
|
125C8AD2000
|
unkown
|
page read and write
|
|
|
|
7FF59D778000
|
unkown
|
page readonly
|
|
|
|
271F6F20000
|
heap default
|
page read and write
|
|
|
|
186BB629000
|
unkown
|
page read and write
|
|
|
|
125C8A4E000
|
unkown
|
page read and write
|
|
|
|
137D67A000
|
unkown
|
page read and write
|
|
|
|
7FF5299D8000
|
unkown
|
page readonly
|
|
|
|
7FF521FAA000
|
unkown
|
page readonly
|
|
|
|
B934277000
|
unkown
|
page read and write
|
|
|
|
7FF529A62000
|
unkown
|
page readonly
|
|
|
|
137CFFB000
|
unkown
|
page read and write
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
7FF58C6EF000
|
unkown
|
page readonly
|
|
|
|
7FF58C739000
|
unkown
|
page readonly
|
|
|
|
B2CD97F000
|
unkown
|
page read and write
|
|
|
|
7FF59D801000
|
unkown
|
page readonly
|
|
|
|
7FF581753000
|
unkown
|
page readonly
|
|
|
|
27F22D82000
|
unkown
|
page read and write
|
|
|
|
27F22D6B000
|
unkown
|
page read and write
|
|
|
|
137D1FD000
|
unkown
|
page read and write
|
|
|
|
7FF59D561000
|
unkown
|
page readonly
|
|
|
|
B934478000
|
unkown
|
page read and write
|
|
|
|
7FF575D4E000
|
unkown
|
page readonly
|
|
|
|
137D9FB000
|
unkown
|
page read and write
|
|
|
|
125C8770000
|
unkown
|
page read and write
|
|
|
|
27F23400000
|
unkown
|
page readonly
|
|
|
|
7FF5818F4000
|
unkown
|
page readonly
|
|
|
|
7FF521FB0000
|
unkown
|
page readonly
|
|
|
|
125C9310000
|
unkown
|
page read and write
|
|
|
|
27F22D58000
|
unkown
|
page read and write
|
|
|
|
7FF58188F000
|
unkown
|
page readonly
|
|
|
|
7FF581203000
|
unkown
|
page readonly
|
|
|
|
2DC3F402000
|
unkown
|
page read and write
|
|
|
|
27F22D9B000
|
unkown
|
page read and write
|
|
|
|
7FF59D77E000
|
unkown
|
page readonly
|
|
|
|
7FF5818AA000
|
unkown
|
page readonly
|
|
|
|
2DC3ED00000
|
unkown
|
page read and write
|
|
|
|
7FF52986B000
|
unkown
|
page readonly
|
|
|
|
B93457F000
|
unkown
|
page read and write
|
|
|
|
1BB6BB08000
|
unkown
|
page read and write
|
|
|
|
7FF581904000
|
unkown
|
page readonly
|
|
|
|
125C8ADE000
|
unkown
|
page read and write
|
|
|
|
7FF575E5B000
|
unkown
|
page readonly
|
|
|
|
7FF5297C1000
|
unkown
|
page readonly
|
|
|
|
7FF58175A000
|
unkown
|
page readonly
|
|
|
|
125C8730000
|
unkown
|
page readonly
|
|
|
|
7FF50292E000
|
unkown
|
page readonly
|
|
|
|
7FF575EBE000
|
unkown
|
page readonly
|
|
|
|
186BD500000
|
unkown
|
page read and write
|
|
|
|
17E84635000
|
unkown
|
page read and write
|
|
|
|
125C8B00000
|
unkown
|
page read and write
|
|
|
|
27F22D52000
|
unkown
|
page read and write
|
|
|
|
125C8A00000
|
unkown
|
page read and write
|
|
|
|
7FF581485000
|
unkown
|
page readonly
|
|
|
|
27F22B20000
|
unkown
|
page read and write
|
|
|
|
7FF575DB4000
|
unkown
|
page readonly
|
|
|
|
7FF58189C000
|
unkown
|
page readonly
|
|
|
|
7FF59D73F000
|
unkown
|
page readonly
|
|
|
|
27F23202000
|
unkown
|
page read and write
|
|
|
|
7FF52180D000
|
unkown
|
page readonly
|
|
|
|
7FF521DD1000
|
unkown
|
page readonly
|
|
|
|
7FF529A61000
|
unkown
|
page readonly
|
|
|
|
125C68D5000
|
unkown
|
page read and write
|
|
|
|
27F22D85000
|
unkown
|
page read and write
|
|
|
|
7FF58C70A000
|
unkown
|
page readonly
|
|
|
|
7FF59D754000
|
unkown
|
page readonly
|
|
|
|
137D0FB000
|
unkown
|
page read and write
|
|
|
|
125C6926000
|
unkown
|
page read and write
|
|
|
|
27F22B20000
|
unkown
|
page read and write
|
|
|
|
7FF521E91000
|
unkown
|
page readonly
|
|
|
|
137DAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5818FA000
|
unkown
|
page readonly
|
|
|
|
7FF58C7B1000
|
unkown
|
page readonly
|
|
|
|
7FF581918000
|
unkown
|
page readonly
|
|
|
|
125C6710000
|
heap private
|
page read and write
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
125C8A44000
|
unkown
|
page read and write
|
|
|
|
7FF502936000
|
unkown
|
page readonly
|
|
|
|
B2CDA75000
|
unkown
|
page read and write
|
|
|
|
27F22D58000
|
unkown
|
page read and write
|
|
|
|
27F22D34000
|
unkown
|
page read and write
|
|
|
|
137D7FA000
|
unkown
|
page read and write
|
|
|
|
7FF575D4B000
|
unkown
|
page readonly
|
|
|
|
7FF52994F000
|
unkown
|
page readonly
|
|
|
|
125C6976000
|
unkown
|
page read and write
|
|
|
|
7FF5028EF000
|
unkown
|
page readonly
|
|
|
|
125C6913000
|
unkown
|
page read and write
|
|
|
|
572EB7F000
|
unkown
|
page read and write
|
|
|
|
27F22310000
|
unkown
|
page readonly
|
|
|
|
7FF521FBB000
|
unkown
|
page readonly
|
|
|
|
27F22D4E000
|
unkown
|
page read and write
|
|
|
|
7FF5028D7000
|
unkown
|
page readonly
|
|
|
|
27F22D61000
|
unkown
|
page read and write
|
|
|
|
271F7063000
|
unkown
|
page read and write
|
|
|
|
27F22D52000
|
unkown
|
page read and write
|
|
|
|
125C8B83000
|
unkown
|
page read and write
|
|
|
|
7FF5027A1000
|
unkown
|
page readonly
|
|
|
|
27F22D46000
|
unkown
|
page read and write
|
|
|
|
137D57A000
|
unkown
|
page read and write
|
|
|
|
125C8A0C000
|
unkown
|
page read and write
|
|
|
|
27F22D5E000
|
unkown
|
page read and write
|
|
|
|
27F22D85000
|
unkown
|
page read and write
|
|
|
|
7FF521FB5000
|
unkown
|
page readonly
|
|
|
|
7FF58C704000
|
unkown
|
page readonly
|
|
|
|
1BB6B880000
|
heap private
|
page read and write
|
|
|
|
B2CDD7E000
|
unkown
|
page read and write
|
|
|
|
125C9010000
|
unkown
|
page read and write
|
|
|
|
7FF522029000
|
unkown
|
page readonly
|
|
|
|
7FF575E50000
|
unkown
|
page readonly
|
|
|
|
7FF521DD5000
|
unkown
|
page readonly
|
|
|
|
7FF575D31000
|
unkown
|
page readonly
|
|
|
|
271F6F30000
|
unkown
|
page readonly
|
|
|
|
17E84621000
|
unkown
|
page read and write
|
|
|
|
27F22D3A000
|
unkown
|
page read and write
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
27F22D75000
|
unkown
|
page read and write
|
|
|
|
7FF575DA3000
|
unkown
|
page readonly
|
|
|
|
1BB6B9D0000
|
unkown
|
page readonly
|
|
|
|
186BB550000
|
heap private
|
page read and write
|
|
|
|
137D4FC000
|
unkown
|
page read and write
|
|
|
|
125C8802000
|
unkown
|
page read and write
|
|
|
|
2DC3EB60000
|
unkown
|
page readonly
|
|
|
|
7FF5299E1000
|
unkown
|
page readonly
|
|
|
|
186BB640000
|
unkown
|
page read and write
|
|
|
|
125C8900000
|
unkown
|
page read and write
|
|
|
|
27F23202000
|
unkown
|
page read and write
|
|
|
|
7FF59D6FC000
|
unkown
|
page readonly
|
|
|
|
271F7029000
|
unkown
|
page read and write
|
|
|
|
17E8464F000
|
unkown
|
page read and write
|
|
|
|
7FF58141E000
|
unkown
|
page readonly
|
|
|
|
FF8227E000
|
unkown
|
page read and write
|
|
|
|
7FF581476000
|
unkown
|
page readonly
|
|
|
|
7FF59D5F1000
|
unkown
|
page readonly
|
|
|
|
7FF58C7A4000
|
unkown
|
page readonly
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
186BD1C0000
|
unkown
|
page readonly
|
|
|
|
125C86D0000
|
heap private
|
page read and write
|
|
|
|
1BB6B8F0000
|
unkown
|
page readonly
|
|
|
|
7FF5811B1000
|
unkown
|
page readonly
|
|
|
|
FF82177000
|
unkown
|
page read and write
|
|
|
|
7FF529987000
|
unkown
|
page readonly
|
|
|
|
125C9000000
|
unkown
|
page read and write
|
|
|
|
7FF5220A2000
|
unkown
|
page readonly
|
|
|
|
AE0C2FC000
|
unkown
|
page read and write
|
|
|
|
7FF5029A4000
|
unkown
|
page readonly
|
|
|
|
271F7082000
|
unkown
|
page read and write
|
|
|
|
7FF575CF3000
|
unkown
|
page readonly
|
|
|
|
B93487B000
|
unkown
|
page read and write
|
|
|
|
7FF50280D000
|
unkown
|
page readonly
|
|
|
|
7FF5817B8000
|
unkown
|
page readonly
|
|
|
|
1BB6BA6F000
|
unkown
|
page read and write
|
|
|
|
7FF529A54000
|
unkown
|
page readonly
|
|
|
|
7FF5028BE000
|
unkown
|
page readonly
|
|
|
|
7FF5817B3000
|
unkown
|
page readonly
|
|
|
|
7FF575A10000
|
unkown
|
page readonly
|
|
|
|
7FF50290A000
|
unkown
|
page readonly
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
27F223F0000
|
unkown
|
page readonly
|
|
|
|
7FF59D802000
|
unkown
|
page readonly
|
|
|
|
27F22D5E000
|
unkown
|
page read and write
|
|
|
|
7FF59D7F4000
|
unkown
|
page readonly
|
|
|
|
7FF5220A1000
|
unkown
|
page readonly
|
|
|
|
7FF575D9D000
|
unkown
|
page readonly
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
7FF52995C000
|
unkown
|
page readonly
|
|
|
|
7FF502904000
|
unkown
|
page readonly
|
|
|
|
B933D8F000
|
unkown
|
page read and write
|
|
|
|
7FF521F52000
|
unkown
|
page readonly
|
|
|
|
7FF581850000
|
unkown
|
page readonly
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
271F7000000
|
unkown
|
page read and write
|
|
|
|
27F22D60000
|
unkown
|
page read and write
|
|
|
|
B93467F000
|
unkown
|
page read and write
|
|
|
|
7FF581791000
|
unkown
|
page readonly
|
|
|
|
186BB8D0000
|
unkown
|
page write copy
|
|
|
|
125C9010000
|
unkown
|
page read and write
|
|
|
|
186BB635000
|
unkown
|
page read and write
|
|
|
|
7FF575EC9000
|
unkown
|
page readonly
|
|
|
|
27F224C3000
|
unkown
|
page read and write
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
7FF52999F000
|
unkown
|
page readonly
|
|
|
|
125C8954000
|
unkown
|
page read and write
|
|
|
|
7FF58C71E000
|
unkown
|
page readonly
|
|
|
|
7FF575EA4000
|
unkown
|
page readonly
|
|
|
|
17E8463E000
|
unkown
|
page read and write
|
|
|
|
27F22D58000
|
unkown
|
page read and write
|
|
|
|
7FF58181C000
|
unkown
|
page readonly
|
|
|
|
27F22470000
|
unkown
|
page read and write
|
|
|
|
17E8463E000
|
unkown
|
page read and write
|
|
|
|
572EA79000
|
unkown
|
page read and write
|
|
|
|
7FF59D60E000
|
unkown
|
page readonly
|
|
|
|
FF8237D000
|
unkown
|
page read and write
|
|
|
|
7FF58C7AA000
|
unkown
|
page readonly
|
|
|
|
2DC3EAE0000
|
heap private
|
page read and write
|
|
|
|
17E84560000
|
unkown
|
page read and write
|
|
|
|
1BB6B8E0000
|
heap default
|
page read and write
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
27F22D5C000
|
unkown
|
page read and write
|
|
|
|
AE0C6F5000
|
unkown
|
page read and write
|
|
|
|
27F224BC000
|
unkown
|
page read and write
|
|
|
|
271F7802000
|
unkown
|
page read and write
|
|
|
|
7FF59D70A000
|
unkown
|
page readonly
|
|
|
|
27F22B20000
|
unkown
|
page read and write
|
|
|
|
7FF502486000
|
unkown
|
page readonly
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
137D6FB000
|
unkown
|
page read and write
|
|
|
|
27F22D8A000
|
unkown
|
page read and write
|
|
|
|
2DC3EC00000
|
unkown
|
page read and write
|
|
|
|
1BB6BC00000
|
unkown
|
page readonly
|
|
|
|
FF81EF5000
|
unkown
|
page read and write
|
|
|
|
125C6966000
|
unkown
|
page read and write
|
|
|
|
27F22D74000
|
unkown
|
page read and write
|
|
|
|
7FF52999C000
|
unkown
|
page readonly
|
|
|
|
125C8971000
|
unkown
|
page read and write
|
|
|
|
7FF521FDC000
|
unkown
|
page readonly
|
|
|
|
27F22D5C000
|
unkown
|
page read and write
|
|
|
|
27F22413000
|
unkown
|
page read and write
|
|
|
|
7FF58C6C0000
|
unkown
|
page readonly
|
|
|
|
7FF5028EC000
|
unkown
|
page readonly
|
|
|
|
186BD0C0000
|
unkown
|
page read and write
|
|
|
|
137CF7C000
|
unkown
|
page read and write
|
|
|
|
7FF5816B0000
|
unkown
|
page readonly
|
|
|
|
7FF5299BA000
|
unkown
|
page readonly
|
|
|
|
7FF5297B1000
|
unkown
|
page readonly
|
|
|
|
125C8ADF000
|
unkown
|
page read and write
|
|
|
|
27F22D34000
|
unkown
|
page read and write
|
|
|
|
27F224FC000
|
unkown
|
page read and write
|
|
|
|
7FF575E4A000
|
unkown
|
page readonly
|
|
|
|
271F7400000
|
unkown
|
page readonly
|
|
|
|
27F22DA0000
|
unkown
|
page read and write
|
|
|
|
27F23202000
|
unkown
|
page read and write
|
|
|
|
7FF58C728000
|
unkown
|
page readonly
|
|
|
|
125C8D02000
|
unkown
|
page read and write
|
|
|
|
7FF5299E9000
|
unkown
|
page readonly
|
|
|
|
27F22D9B000
|
unkown
|
page read and write
|
|
|
|
125C6967000
|
unkown
|
page read and write
|
|
|
|
125C892D000
|
unkown
|
page read and write
|
|
|
|
7FF5029AA000
|
unkown
|
page readonly
|
|
|
|
186BB702000
|
unkown
|
page read and write
|
|
|
|
2DC3EB70000
|
unkown
|
page read and write
|
|
|
|
7FF5020DD000
|
unkown
|
page readonly
|
|
|
|
125C8979000
|
unkown
|
page read and write
|
|
|
|
7FF5816F1000
|
unkown
|
page readonly
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
27F22D67000
|
unkown
|
page read and write
|
|
|
|
1BB6BB13000
|
unkown
|
page read and write
|
|
|
|
27F22D49000
|
unkown
|
page read and write
|
|
|
|
7FF5027BE000
|
unkown
|
page readonly
|
|
|
|
7FF5291CD000
|
unkown
|
page readonly
|
|
|
|
7FF52209A000
|
unkown
|
page readonly
|
|
|
|
7FF5028C5000
|
unkown
|
page readonly
|
|
|
|
7FF5818DC000
|
unkown
|
page readonly
|
|
|
|
1BB6BA00000
|
unkown
|
page read and write
|
|
|
|
125C6946000
|
unkown
|
page read and write
|
|
|
|
27F22D52000
|
unkown
|
page read and write
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
7FF58190F000
|
unkown
|
page readonly
|
|
|
|
7FF52996E000
|
unkown
|
page readonly
|
|
|
|
7FF58C714000
|
unkown
|
page readonly
|
|
|
|
7FF575EC6000
|
unkown
|
page readonly
|
|
|
|
B9345FF000
|
unkown
|
page read and write
|
|
|
|
27F22D58000
|
unkown
|
page read and write
|
|
|
|
7FF521E09000
|
unkown
|
page readonly
|
|
|
|
AE0C37E000
|
unkown
|
page read and write
|
|
|
|
125C89C5000
|
unkown
|
page read and write
|
|
|
|
7FF581676000
|
unkown
|
page readonly
|
|
|
|
27F22D44000
|
unkown
|
page read and write
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
125C68AC000
|
unkown
|
page read and write
|
|
|
|
27F22B30000
|
unkown
|
page read and write
|
|
|
|
27F22D82000
|
unkown
|
page read and write
|
|
|
|
7FF52200E000
|
unkown
|
page readonly
|
|
|
|
7FF529944000
|
unkown
|
page readonly
|
|
|
|
125C6935000
|
unkown
|
page read and write
|
|
|
|
7FF59D710000
|
unkown
|
page readonly
|
|
|
|
7FF58166B000
|
unkown
|
page readonly
|
|
|
|
125C8ADB000
|
unkown
|
page read and write
|
|
|
|
7FF59D73C000
|
unkown
|
page readonly
|
|
|
|
27F22D34000
|
unkown
|
page read and write
|
|
|
|
125C89EE000
|
unkown
|
page read and write
|
|
|
|
27F22D00000
|
unkown
|
page read and write
|
|
|
|
27F22D6A000
|
unkown
|
page read and write
|
|
|
|
B2CDC77000
|
unkown
|
page read and write
|
|
|
|
125C8760000
|
unkown
|
page read and write
|
|
|
|
186BB600000
|
unkown
|
page read and write
|
|
|
|
7FF5299C4000
|
unkown
|
page readonly
|
|
|
|
B2CDB7B000
|
unkown
|
page read and write
|
|
|
|
7FF5028AC000
|
unkown
|
page readonly
|
|
|
|
125C9210000
|
unkown
|
page read and write
|
|
|
|
7FF575EAF000
|
unkown
|
page readonly
|
|
|
|
17E8463E000
|
unkown
|
page read and write
|
|
|
|
27F22E00000
|
unkown
|
page readonly
|
|
|
|
17E845B0000
|
unkown
|
page readonly
|
|
|
|
137CC7B000
|
unkown
|
page read and write
|
|
|
|
27F22D85000
|
unkown
|
page read and write
|
|
|
|
27F22DD7000
|
unkown
|
page read and write
|
|
|
|
27F22D7D000
|
unkown
|
page read and write
|
|
|
|
17E84610000
|
heap default
|
page read and write
|
|
|
|
7FF58C39A000
|
unkown
|
page readonly
|
|
|
|
137DB7F000
|
unkown
|
page read and write
|
|
|
|
7FF529795000
|
unkown
|
page readonly
|
|
|
|
7FF58187B000
|
unkown
|
page readonly
|
|
|
|
125C6841000
|
unkown
|
page read and write
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
7FF59D715000
|
unkown
|
page readonly
|
|
|
|
27F223E0000
|
unkown
|
page readonly
|
|
|
|
125C9010000
|
unkown
|
page read and write
|
|
|
|
7FF59D67C000
|
unkown
|
page readonly
|
|
|
|
7FF58138E000
|
unkown
|
page readonly
|
|
|
|
2DC3ED02000
|
unkown
|
page read and write
|
|
|
|
7FF521F50000
|
unkown
|
page readonly
|
|
|
|
27F22D39000
|
unkown
|
page read and write
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
2DC3ED08000
|
unkown
|
page read and write
|
|
|
|
7FF521D76000
|
unkown
|
page readonly
|
|
|
|
7FF59D2E5000
|
unkown
|
page readonly
|
|
|
|
7FF575E3A000
|
unkown
|
page readonly
|
|
|
|
7FF529970000
|
unkown
|
page readonly
|
|
|
|
125C8750000
|
unkown
|
page read and write
|
|
|
|
7FF5814C7000
|
unkown
|
page readonly
|
|
|
|
7FF575EB8000
|
unkown
|
page readonly
|
|
|
|
7FF581852000
|
unkown
|
page readonly
|
|
|
|
125C86C0000
|
unkown
|
page read and write
|
|
|
|
186BB920000
|
unkown
|
page readonly
|
|
|
|
137D17B000
|
unkown
|
page read and write
|
|
|
|
7FF58191E000
|
unkown
|
page readonly
|
|
|
|
60D0AFE000
|
unkown
|
page read and write
|
|
|
|
186BB654000
|
unkown
|
page read and write
|
|
|
|
7FF5810C7000
|
unkown
|
page readonly
|
|
|
|
7FF522018000
|
unkown
|
page readonly
|
|
|
|
572E6EA000
|
unkown
|
page read and write
|
|
|
|
1BB6BB02000
|
unkown
|
page read and write
|
|
|
|
271F7065000
|
unkown
|
page read and write
|
|
|
|
7FF581630000
|
unkown
|
page readonly
|
|
|
|
572EAFA000
|
unkown
|
page read and write
|
|
|
|
27F224C1000
|
unkown
|
page read and write
|
|
|
|
7FF59D674000
|
unkown
|
page readonly
|
|
|
|
7FF59D786000
|
unkown
|
page readonly
|
|
|
|
7FF581929000
|
unkown
|
page readonly
|
|
|
|
7FF58189A000
|
unkown
|
page readonly
|
|
|
|
572E7EF000
|
unkown
|
page read and write
|
|
|
|
271F7680000
|
unkown
|
page read and write
|
|
|
|
B934377000
|
unkown
|
page read and write
|
|
|
|
125C69A8000
|
unkown
|
page read and write
|
|
|
|
7FF59D65D000
|
unkown
|
page readonly
|
|
|
|
27F22513000
|
unkown
|
page read and write
|
|
|
|
125C8740000
|
unkown
|
page readonly
|
|
|
|
7FF59D2D0000
|
unkown
|
page readonly
|
|
|
|
125C6A00000
|
unkown
|
page readonly
|
|
|
|
7FF52993B000
|
unkown
|
page readonly
|
|
|
|
7FF52990C000
|
unkown
|
page readonly
|
|
|
|
27F22D79000
|
unkown
|
page read and write
|
|
|
|
7FF575A16000
|
unkown
|
page readonly
|
|
|
|
7FF59CE13000
|
unkown
|
page readonly
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
125C8949000
|
unkown
|
page read and write
|
|
|
|
FF81ACC000
|
unkown
|
page read and write
|
|
|
|
27F224A6000
|
unkown
|
page read and write
|
|
|
|
7FF529933000
|
unkown
|
page readonly
|
|
|
|
7FF575E7F000
|
unkown
|
page readonly
|
|
|
|
2DC3EB40000
|
heap default
|
page read and write
|
|
|
|
137CEFF000
|
unkown
|
page read and write
|
|
|
|
17E84985000
|
heap private
|
page read and write
|
|
|
|
125C8E00000
|
unkown
|
page readonly
|
|
|
|
7FF5816E6000
|
unkown
|
page readonly
|
|
|
|
60D0B7A000
|
unkown
|
page read and write
|
|
|
|
B93407F000
|
unkown
|
page read and write
|
|
|
|
7FF59D70E000
|
unkown
|
page readonly
|
|
|
|
271F7062000
|
unkown
|
page read and write
|
|
|
|
137D77B000
|
unkown
|
page read and write
|
|
|
|
7FF522094000
|
unkown
|
page readonly
|
|
|
|
7FF59CF41000
|
unkown
|
page readonly
|
|
|
|
27F22600000
|
unkown
|
page readonly
|
|
|
|
7FF52963A000
|
unkown
|
page readonly
|
|
|
|
271F7060000
|
unkown
|
page read and write
|
|
|
|
60D0C7F000
|
unkown
|
page read and write
|
|
|
|
7FF575F42000
|
unkown
|
page readonly
|
|
|
|
125C68AE000
|
unkown
|
page read and write
|
|
|
|
137CE79000
|
unkown
|
page read and write
|
|
|
|
27F22D4F000
|
unkown
|
page read and write
|
|
|
|
27F22D44000
|
unkown
|
page read and write
|
|
|
|
125C9210000
|
unkown
|
page read and write
|
|
|
|
7FF502711000
|
unkown
|
page readonly
|
|
|
|
7FF529647000
|
unkown
|
page readonly
|
|
|
|
27F22C02000
|
unkown
|
page read and write
|
|
|
|
7FF5299CE000
|
unkown
|
page readonly
|
|
|
|
7FF59D71B000
|
unkown
|
page readonly
|
|
|
|
7FF529910000
|
unkown
|
page readonly
|
|
|
|
137D47A000
|
unkown
|
page read and write
|
|
|
|
1BB6B9E0000
|
unkown
|
page read and write
|
|
|
|
17E84636000
|
unkown
|
page read and write
|
|
|
|
7FF529873000
|
unkown
|
page readonly
|
|
|
|
27F2243C000
|
unkown
|
page read and write
|
|
|
|
1BB6BA81000
|
unkown
|
page read and write
|
|
|
|
137D3FB000
|
unkown
|
page read and write
|
|
|
|
7FF59D75A000
|
unkown
|
page readonly
|
|
|
|
7FF58C7B2000
|
unkown
|
page readonly
|
|
|
|
27F22300000
|
heap default
|
page read and write
|
|
|
|
271F7102000
|
unkown
|
page read and write
|
|
|
|
7FF52202D000
|
unkown
|
page readonly
|
|
|
|
1BB6B9C0000
|
unkown
|
page readonly
|
|
|
|
7FF50282C000
|
unkown
|
page readonly
|
|
|
|
27F22D34000
|
unkown
|
page read and write
|
|
|
|
125C6829000
|
unkown
|
page read and write
|
|
|
|
125C9310000
|
unkown
|
page read and write
|
|
|
|
7FF57566D000
|
unkown
|
page readonly
|
|
|
|
7FF575E4E000
|
unkown
|
page readonly
|
|
|
|
17E84990000
|
unkown
|
page readonly
|
|
|
|
7FF59D7FA000
|
unkown
|
page readonly
|
|
|
|
137D97B000
|
unkown
|
page read and write
|
|
|
|
7FF59D789000
|
unkown
|
page readonly
|
|
|
|
7FF59D663000
|
unkown
|
page readonly
|
|
|
|
B93497F000
|
unkown
|
page read and write
|
|
|
|
271F7113000
|
unkown
|
page read and write
|
|
|
|
137D27B000
|
unkown
|
page read and write
|
|
|
|
7FF5819A2000
|
unkown
|
page readonly
|
|
|
|
1BB6BA3C000
|
unkown
|
page read and write
|
|
|
|
7FF502637000
|
unkown
|
page readonly
|
|
|
|
7FF575E87000
|
unkown
|
page readonly
|
|
|
|
7FF59D487000
|
unkown
|
page readonly
|
|
|
|
7FF5029B2000
|
unkown
|
page readonly
|
|
|
|
7FF58C017000
|
unkown
|
page readonly
|
|
|
|
7FF5299B4000
|
unkown
|
page readonly
|
|
|
|
125C8780000
|
unkown
|
page read and write
|
|
|
|
7FF5298BD000
|
unkown
|
page readonly
|
|
|
|
7FF502939000
|
unkown
|
page readonly
|
|
|
|
186BB800000
|
unkown
|
page readonly
|
|
|
|
7FF502824000
|
unkown
|
page readonly
|
|
|
|
125C9210000
|
unkown
|
page read and write
|
|
|
|
7FF5297C9000
|
unkown
|
page readonly
|
|
|
|
271F7200000
|
unkown
|
page readonly
|
|
|
|
27F22D49000
|
unkown
|
page read and write
|
|
|
|
7FF521C6C000
|
unkown
|
page readonly
|
|
|
|
7FF502914000
|
unkown
|
page readonly
|
|
|
|
7FF575E3C000
|
unkown
|
page readonly
|
|
|
|
1BB6BA13000
|
unkown
|
page read and write
|
|
|
|
186BB5B0000
|
heap default
|
page read and write
|
|
|
|
27F22502000
|
unkown
|
page read and write
|
|
|
|
186BB66B000
|
unkown
|
page read and write
|
|
|
|
7FF521FFA000
|
unkown
|
page readonly
|
|
|
|
125C8995000
|
unkown
|
page read and write
|
|
|
|
27F23254000
|
unkown
|
page read and write
|
|
|
|
7FF521EB8000
|
unkown
|
page readonly
|
|
|
|
B2CD8FF000
|
unkown
|
page read and write
|
|
|
|
7FF52962C000
|
unkown
|
page readonly
|
|
|
|
2DC3EC13000
|
unkown
|
page read and write
|
|
|
|
27F22D5C000
|
unkown
|
page read and write
|
|
|
|
7FF52997B000
|
unkown
|
page readonly
|
|
|
|
7FF575DBC000
|
unkown
|
page readonly
|
|
|
|
27F22D49000
|
unkown
|
page read and write
|
|
|
|
27F22D2C000
|
unkown
|
page read and write
|
|
|
|
AE0CB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5028BA000
|
unkown
|
page readonly
|
|
|
|
7FF58C6CB000
|
unkown
|
page readonly
|
|
|
|
2DC3EC47000
|
unkown
|
page read and write
|
|
|
|
2DC3EC6C000
|
unkown
|
page read and write
|
|
|
|
271F7057000
|
unkown
|
page read and write
|
|
|
|
7FF581412000
|
unkown
|
page readonly
|
|
|
|
7FF59D76F000
|
unkown
|
page readonly
|
|
|
|
125C6780000
|
unkown
|
page write copy
|
|
|
|
125C8A4D000
|
unkown
|
page read and write
|
|
|
|
125C6865000
|
unkown
|
page read and write
|
|
|
|
125C8B43000
|
unkown
|
page read and write
|
|
|
|
27F22D7F000
|
unkown
|
page read and write
|
|
|
|
7FF581207000
|
unkown
|
page readonly
|
|
|
|
27F22D4D000
|
unkown
|
page read and write
|
|
|
|
7FF581884000
|
unkown
|
page readonly
|
|
|
|
7FF575F41000
|
unkown
|
page readonly
|
|
|
|
7FF502813000
|
unkown
|
page readonly
|
|
|
|
27F22D75000
|
unkown
|
page read and write
|
|
|
|
271F6EC0000
|
heap private
|
page read and write
|
|
|
|
27F22DBA000
|
unkown
|
page read and write
|
|
|
|
7FF5817AB000
|
unkown
|
page readonly
|
|
|
|
1BB6BA75000
|
unkown
|
page read and write
|
|
|
|
1BB6C090000
|
unkown
|
page readonly
|
|
|
|
7FF5298B6000
|
unkown
|
page readonly
|
|
|
|
125C6935000
|
unkown
|
page read and write
|
|
|
|
7FF575E94000
|
unkown
|
page readonly
|
|
|
|
17E84580000
|
unkown
|
page read and write
|
|
|
|
125C6770000
|
heap default
|
page read and write
|
|
|
|
125C8951000
|
unkown
|
page read and write
|
|
|
|
27F22DC3000
|
unkown
|
page read and write
|
|
|
|
7FF522021000
|
unkown
|
page readonly
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
137D8FB000
|
unkown
|
page read and write
|
|
|
|
125C69A7000
|
unkown
|
page read and write
|
|
|
|
FF81FFB000
|
unkown
|
page read and write
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
7FF521FE8000
|
unkown
|
page readonly
|
|
|
|
7FF5294D2000
|
unkown
|
page readonly
|
|
|
|
125C8370000
|
unkown
|
page readonly
|
|
|
|
137CCFE000
|
unkown
|
page read and write
|
|
|
|
FF8207E000
|
unkown
|
page read and write
|
|
|
|
27F222A0000
|
heap private
|
page read and write
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
27F22D92000
|
unkown
|
page read and write
|
|
|
|
186BB5C0000
|
unkown
|
page readonly
|
|
|
|
7FF5814C5000
|
unkown
|
page readonly
|
|
|
|
27F2244C000
|
unkown
|
page read and write
|
|
|
|
27F22D75000
|
unkown
|
page read and write
|
|
|
|
27F22B20000
|
unkown
|
page readonly
|
|
|
|
125C8962000
|
unkown
|
page read and write
|
|
|
|
27F22AB0000
|
unkown
|
page write copy
|
|
|
|
125C8710000
|
unkown
|
page readonly
|
|
|
|
125C6922000
|
unkown
|
page read and write
|
|
|
|
125C6AD0000
|
unkown
|
page readonly
|
|
|
|
125C8C42000
|
unkown
|
page read and write
|
|
|
|
7FF502480000
|
unkown
|
page readonly
|
|
|
|
7FF522026000
|
unkown
|
page readonly
|
|
|
|
7FF575667000
|
unkown
|
page readonly
|
|
|
|
125C8A40000
|
unkown
|
page read and write
|
|
|
|
7FF59D2D6000
|
unkown
|
page readonly
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
7FF59D78D000
|
unkown
|
page readonly
|
|
|
|
125C8AB1000
|
unkown
|
page read and write
|
|
|
|
7FF521C7F000
|
unkown
|
page readonly
|
|
|
|
AE0CA7E000
|
unkown
|
page read and write
|
|
|
|
2DC3EC4F000
|
unkown
|
page read and write
|
|
|
|
572E76F000
|
unkown
|
page read and write
|
|
|
|
125C8C82000
|
unkown
|
page read and write
|
|
|
|
7FF50291F000
|
unkown
|
page readonly
|
|
|
|
125C687C000
|
unkown
|
page read and write
|
|
|
|
125C8B43000
|
unkown
|
page read and write
|
|
|
|
572EBFD000
|
unkown
|
page read and write
|
|
|
|
125C8270000
|
unkown
|
page read and write
|
|
|
|
7FF59D747000
|
unkown
|
page readonly
|
|
|
|
7FF5818B5000
|
unkown
|
page readonly
|
|
|
|
7FF529736000
|
unkown
|
page readonly
|
|
|
|
137D5FB000
|
unkown
|
page read and write
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
7FF502763000
|
unkown
|
page readonly
|
|
|
|
27F22D82000
|
unkown
|
page read and write
|
|
|
|
27F224A6000
|
unkown
|
page read and write
|
|
|
|
27F22D64000
|
unkown
|
page read and write
|
|
|
|
125C8C02000
|
unkown
|
page read and write
|
|
|
|
7FF59D727000
|
unkown
|
page readonly
|
|
|
|
B2CDE7D000
|
unkown
|
page read and write
|
|
|
|
7FF5020D7000
|
unkown
|
page readonly
|
|
|
|
27F22D7F000
|
unkown
|
page read and write
|
|
|
|
27F22A80000
|
unkown
|
page readonly
|
|
|
|
27F22D39000
|
unkown
|
page read and write
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
27F22D4F000
|
unkown
|
page read and write
|
|
|
|
7FF5818DF000
|
unkown
|
page readonly
|
|
|
|
7FF5818C7000
|
unkown
|
page readonly
|
|
|
|
7FF5027BB000
|
unkown
|
page readonly
|
|
|
|
271F7013000
|
unkown
|
page read and write
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
17E84650000
|
unkown
|
page read and write
|
|
|
|
7FF5818BB000
|
unkown
|
page readonly
|
|
|
|
2DC3F600000
|
unkown
|
page readonly
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
27F22D54000
|
unkown
|
page read and write
|
|
|
|
7FF5817AE000
|
unkown
|
page readonly
|
|
|
|
17E845C0000
|
unkown
|
page readonly
|
|
|
|
27F22482000
|
unkown
|
page read and write
|
|
|
|
7FF59D5B3000
|
unkown
|
page readonly
|
|
|
|
B93477A000
|
unkown
|
page read and write
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
7FF529748000
|
unkown
|
page readonly
|
|
|
|
7FF58187F000
|
unkown
|
page readonly
|
|
|
|
125C898B000
|
unkown
|
page read and write
|
|
|
|
7FF575E7C000
|
unkown
|
page readonly
|
|
|
|
7FF575E9A000
|
unkown
|
page readonly
|
|
|
|
7FF59CE19000
|
unkown
|
page readonly
|
|
|
|
186BB602000
|
unkown
|
page read and write
|
|
|
|
27F23261000
|
unkown
|
page read and write
|
|
|
|
125C8740000
|
unkown
|
page read and write
|
|
|
|
7FF58C6EC000
|
unkown
|
page readonly
|
|
|
|
7FF529271000
|
unkown
|
page readonly
|
|
|
|
7FF5028C0000
|
unkown
|
page readonly
|
|
|
|
125C68BF000
|
unkown
|
page read and write
|
|
|
|
125C8A60000
|
unkown
|
page read and write
|
|
|
|
125C8C00000
|
unkown
|
page read and write
|
|
|
|
27F22D51000
|
unkown
|
page read and write
|
|
|
|
27F22D92000
|
unkown
|
page read and write
|
|
|
|
7FF5297A6000
|
unkown
|
page readonly
|
|
|
|
7FF58C73D000
|
unkown
|
page readonly
|
|
|
|
186BB613000
|
unkown
|
page read and write
|
|
|
|
7FF521C87000
|
unkown
|
page readonly
|
|
|
|
27F22D36000
|
unkown
|
page read and write
|
|
|
|
7FF581627000
|
unkown
|
page readonly
|
|
|
|
125C67D0000
|
unkown
|
page readonly
|
|
|
|
7FF581926000
|
unkown
|
page readonly
|
|
|
|
27F22D4E000
|
unkown
|
page read and write
|
|
|
|
137D07A000
|
unkown
|
page read and write
|
|
|
|
27F22D4E000
|
unkown
|
page read and write
|
|
|
|
1BB6BA4F000
|
unkown
|
page read and write
|
|
|
|
271F7100000
|
unkown
|
page read and write
|
|
|
|
FF81B4E000
|
unkown
|
page read and write
|
|
|
|
125C8B43000
|
unkown
|
page read and write
|
|
|
|
7FF521C7A000
|
unkown
|
page readonly
|
|
|
|
125C68EA000
|
unkown
|
page read and write
|
|
|
|
1BB6C400000
|
unkown
|
page readonly
|
|
|
|
271F705C000
|
unkown
|
page read and write
|
|
|
|
27F22D59000
|
unkown
|
page read and write
|
|
|
|
AE0C7FB000
|
unkown
|
page read and write
|
|
|
|
125C6928000
|
unkown
|
page read and write
|
|
|
|
271F7108000
|
unkown
|
page read and write
|
|
|
|
60D0BF9000
|
unkown
|
page read and write
|
|
|
|
2DC3F940000
|
unkown
|
page readonly
|
|
|
|
1BB6BA29000
|
unkown
|
page read and write
|
|
|
|
7FF575CA1000
|
unkown
|
page readonly
|
|
|
|
7FF58158A000
|
unkown
|
page readonly
|
|
|
|
27F22B10000
|
unkown
|
page readonly
|
|
|
|
7FF575BC7000
|
unkown
|
page readonly
|
|
|
|
7FF5028CB000
|
unkown
|
page readonly
|
|
|
|
27F22DC6000
|
unkown
|
page read and write
|
|
|
|
7FF581422000
|
unkown
|
page readonly
|
|
|
|
27F22D69000
|
unkown
|
page read and write
|
|
|
|
271F7670000
|
unkown
|
page readonly
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
7FF521FDF000
|
unkown
|
page readonly
|
|
|
|
7FF5291D1000
|
unkown
|
page readonly
|
|
|
|
7FF529912000
|
unkown
|
page readonly
|
|
|
|
7FF50293D000
|
unkown
|
page readonly
|
|
|
|
125C8ADE000
|
unkown
|
page read and write
|
|
|
|
27F22D35000
|
unkown
|
page read and write
|
|
|
|
2DC3EC2A000
|
unkown
|
page read and write
|
|
|
|
271F7D40000
|
unkown
|
page readonly
|
|
|
|
7FF521EAB000
|
unkown
|
page readonly
|
|
|
|
7FF529851000
|
unkown
|
page readonly
|
|
|
|
27F224D2000
|
unkown
|
page read and write
|
|
|
|
7FF5028AA000
|
unkown
|
page readonly
|
|
|
|
2DC3EB50000
|
unkown
|
page readonly
|
|
|
|
27F22D55000
|
unkown
|
page read and write
|
|
|
|
B2CD87C000
|
unkown
|
page read and write
|
|
|
|
125C68AE000
|
unkown
|
page read and write
|
|
|
|
7FF575F34000
|
unkown
|
page readonly
|
|
|
|
27F224B0000
|
unkown
|
page read and write
|
|
|
|
7FF58199A000
|
unkown
|
page readonly
|
|
|
|
7FF529878000
|
unkown
|
page readonly
|
|
|
|
7FF521FAE000
|
unkown
|
page readonly
|
|
|
|
2DC3EC55000
|
unkown
|
page read and write
|
|
|
|
27F22B40000
|
unkown
|
page readonly
|
|
|
|
2DC3EC87000
|
unkown
|
page read and write
|
|
|
|
AE0C3FE000
|
unkown
|
page read and write
|
|
|
|
2DC3ED13000
|
unkown
|
page read and write
|
|
|
|
7FF521D6B000
|
unkown
|
page readonly
|
|
|
|
125C8920000
|
unkown
|
page read and write
|
|
|
|
7FF529975000
|
unkown
|
page readonly
|
|
|
|
27F22400000
|
unkown
|
page read and write
|
|
|
|
125C8956000
|
unkown
|
page read and write
|
|
|
|
7FF5817FD000
|
unkown
|
page readonly
|
|
|
|
27F22A60000
|
unkown
|
page read and write
|
|
|
|
2DC3EED0000
|
unkown
|
page readonly
|
|
|
|
27F2244E000
|
unkown
|
page read and write
|
|
|
|
7FF58C6C5000
|
unkown
|
page readonly
|
|
|
|
125C8A91000
|
unkown
|
page read and write
|
|
|
|
7FF5810CD000
|
unkown
|
page readonly
|
|
|
|
137CDFE000
|
unkown
|
page read and write
|
|
|
|
7FF52201E000
|
unkown
|
page readonly
|
|
|
|
27F22D7F000
|
unkown
|
page read and write
|
|
|
|
125C8A60000
|
unkown
|
page read and write
|
|
|
|
27F22D61000
|
unkown
|
page read and write
|
|
|
|
7FF59D764000
|
unkown
|
page readonly
|
|
|
|
7FF581470000
|
unkown
|
page readonly
|
|
|
|
7FF529902000
|
unkown
|
page readonly
|
|
|
|
27F22D61000
|
unkown
|
page read and write
|
|
|
|
27F224DF000
|
unkown
|
page read and write
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
7FF575A25000
|
unkown
|
page readonly
|
|
|
|
1BB6C202000
|
unkown
|
page read and write
|
|
|
|
7FF502640000
|
unkown
|
page readonly
|
|
|
|
125C8D00000
|
unkown
|
page read and write
|
|
|
|
7FF5299E6000
|
unkown
|
page readonly
|
|
|
|
7FF521FC7000
|
unkown
|
page readonly
|
|
|
|
7FF58C6F8000
|
unkown
|
page readonly
|
|
|
|
7FF581814000
|
unkown
|
page readonly
|
|
|
|
125C8740000
|
unkown
|
page read and write
|
|
|
|
1BB6BA46000
|
unkown
|
page read and write
|
|
|
|
27F224E9000
|
unkown
|
page read and write
|
|
|
|
27F22D39000
|
unkown
|
page read and write
|
|
|
|
137CD7A000
|
unkown
|
page read and write
|
|
|
|
125C6925000
|
unkown
|
page read and write
|
|
|
|
27F22429000
|
unkown
|
page read and write
|
|
|
|
27F23202000
|
unkown
|
page read and write
|
|
|
|
AE0C977000
|
unkown
|
page read and write
|
|
|
|
125C89FF000
|
unkown
|
page read and write
|
|
|
|
7FF521FF4000
|
unkown
|
page readonly
|
|
|
|
7FF59D60B000
|
unkown
|
page readonly
|
|
|
|
7FF5299A7000
|
unkown
|
page readonly
|
|
|
|
60D0A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5819A1000
|
unkown
|
page readonly
|
|
|
|
17E84626000
|
heap default
|
page read and write
|
|
|
|
7FF521EB3000
|
unkown
|
page readonly
|
|
|
|
7FF575F3A000
|
unkown
|
page readonly
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
125C8740000
|
unkown
|
page read and write
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
7FF58C72E000
|
unkown
|
page readonly
|
|
|
|
271F705D000
|
unkown
|
page read and write
|
|
|
|
7FF5818B0000
|
unkown
|
page readonly
|
|
|
|
7FF521811000
|
unkown
|
page readonly
|
|
|
|
27F22B00000
|
unkown
|
page readonly
|
|
|
|
2DC3EC3C000
|
unkown
|
page read and write
|
|
|
|
125C8790000
|
unkown
|
page readonly
|
|
|
|
27F22D5E000
|
unkown
|
page read and write
|
|
|
|
7FF529791000
|
unkown
|
page readonly
|
|
|
|
125C6800000
|
unkown
|
page read and write
|
|
|
|
7FF581803000
|
unkown
|
page readonly
|
|
|
|
7FF502495000
|
unkown
|
page readonly
|
|
|
|
7FF529549000
|
unkown
|
page readonly
|
|
|
|
7FF5818E7000
|
unkown
|
page readonly
|
|
|
|
137DA7B000
|
unkown
|
page read and write
|
|
|
|
125C8B43000
|
unkown
|
page read and write
|
|
|
|
27F22D85000
|
unkown
|
page read and write
|
|
|
|
27F22D7D000
|
unkown
|
page read and write
|
|
|
|
125C68A5000
|
unkown
|
page read and write
|
|
|
|
AE0C87F000
|
unkown
|
page read and write
|
|
|
|
7FF59D6FA000
|
unkown
|
page readonly
|
|
|
|
7FF5299DE000
|
unkown
|
page readonly
|
|
|
|
7FF575BD0000
|
unkown
|
page readonly
|
|
|
|
125C6813000
|
unkown
|
page read and write
|
|
|
|
7FF5029B1000
|
unkown
|
page readonly
|
|
|
|
137D37B000
|
unkown
|
page read and write
|
|
|
|
7FF52972B000
|
unkown
|
page readonly
|
|
|
|
125C89BC000
|
unkown
|
page read and write
|
|
|
|
27F22D66000
|
unkown
|
page read and write
|
|
|
|
7FF52974F000
|
unkown
|
page readonly
|
|
|
|
7FF575ECD000
|
unkown
|
page readonly
|
|
|
|
27F23200000
|
unkown
|
page read and write
|
|
|
|
27F22D6B000
|
unkown
|
page read and write
|
|
|
|
125C9010000
|
unkown
|
page read and write
|
|
|
|
7FF5028F7000
|
unkown
|
page readonly
|
|
|
|
FF81BCE000
|
unkown
|
page read and write
|
|
|
|
27F2248A000
|
unkown
|
page read and write
|
|
|
|
137D2FB000
|
unkown
|
page read and write
|
|
|
|
27F22D47000
|
unkown
|
page read and write
|
|
|
|
125C6936000
|
unkown
|
page read and write
|
|
|
|
27F22508000
|
unkown
|
page read and write
|
|
|
|
27F2244A000
|
unkown
|
page read and write
|
|
|
|
27F22D58000
|
unkown
|
page read and write
|
|
|
|
27F22D62000
|
unkown
|
page read and write
|
|
|
|
125C8A1C000
|
unkown
|
page read and write
|
|
|
|
271F7A00000
|
unkown
|
page readonly
|
|
|
|
27F22D15000
|
unkown
|
page read and write
|
|
|
|
7FF502928000
|
unkown
|
page readonly
|
|
|
|
7FF529A5A000
|
unkown
|
page readonly
|
|
|
|
7FF52993F000
|
unkown
|
page readonly
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
7FF575E55000
|
unkown
|
page readonly
|
|
|
|
27F22D4B000
|
unkown
|
page read and write
|
|
|
|
7FF521F73000
|
unkown
|
page readonly
|
|
|
|
27F22D7C000
|
unkown
|
page read and write
|
|
|
|
125C8C82000
|
unkown
|
page read and write
|
|
|
|
27F224EC000
|
unkown
|
page read and write
|
|
|
|
27F22D63000
|
unkown
|
page read and write
|
|
|
|
17E84980000
|
heap private
|
page read and write
|
|
|
|
27F22D96000
|
unkown
|
page read and write
|
|
|
|
17E84710000
|
unkown
|
page readonly
|
|
|
|
125C8C42000
|
unkown
|
page read and write
|
|
|
|
27F224EC000
|
unkown
|
page read and write
|
|
|
|
7FF581701000
|
unkown
|
page readonly
|
|
|
|
125C9110000
|
unkown
|
page read and write
|
|
|
|
7FF5818AE000
|
unkown
|
page readonly
|
|
|
|
7FF52963F000
|
unkown
|
page readonly
|
|
|
|
1BB6BA55000
|
unkown
|
page read and write
|
|
|
|
27F22D6B000
|
unkown
|
page read and write
|
|
|
|
27F22D5F000
|
unkown
|
page read and write
|
|
|
|
7FF52995A000
|
unkown
|
page readonly
|
|
|
|
125C8B43000
|
unkown
|
page read and write
|
|
|
|
125C9013000
|
unkown
|
page read and write
|
|
|
|
137D879000
|
unkown
|
page read and write
|
|
|
|
7FF58C013000
|
unkown
|
page readonly
|
|
|
|
60D079B000
|
unkown
|
page read and write
|
|
|
|
7FF581994000
|
unkown
|
page readonly
|
|
|
|
2DC3EE00000
|
unkown
|
page readonly
|
|
|
|
1BB6BB00000
|
unkown
|
page read and write
|
|
|
|
27F22D7C000
|
unkown
|
page read and write
|
|
There are 770 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://sydneybuildingengineers.com.au/OfficeV4/authorize_client_id:5g1afb80-7jfq-ask4-t1bx-5zw0d17rfy48_qa32ux85vsrdgt9ncpmw7ebyo4kz10fjilh6hskufelop5ya3m1i0942tcrv8znqxbwj7gd692ez0tj4dmhkufaqbo7pnvyrxl3568cs1iwg?data=dmlzaGFsLmt1bWFyQHNtYXJ0YW5kZmluYWwuY29t
|
|