Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://ciscomessagingportal.gq/authen?error=1#owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fautodiscover.com%2fowa%2f
|
URL
|
initial url
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{1E0C7D3F-B3C4-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1E0C7D41-B3C4-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1E0C7D42-B3C4-11EB-90E5-ECF4BB570DC9}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\2134651[1].png
|
PNG image data, 355 x 142, 8-bit/color RGBA, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\HXBTAIX6.htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\captcha[1].js
|
ASCII text, with very long lines, with no line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\favicon[1].ico
|
MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF0DA9C130E8F06E70.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFAC0AF7A12B20718B.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFF7FAC163A929FC02.TMP
|
data
|
dropped
|
|
There are 11 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6088 CREDAT:17410 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://ciscomessagingportal.gq/#owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fautodiscover.com%2fowa%2f
|
|
||
|
https://ciscomessagingportal.gq/images/favicon.ico
|
unknown
|
|
|
|
http://www.wikipedia.com/
|
unknown
|
|
|
|
http://www.amazon.com/
|
unknown
|
|
|
|
https://ciscomessagingportal.gq/images/favicon.ico~
|
unknown
|
|
|
|
http://www.nytimes.com/
|
unknown
|
|
|
|
http://www.live.com/
|
unknown
|
|
|
|
http://www.reddit.com/
|
unknown
|
|
|
|
http://www.twitter.com/
|
unknown
|
|
|
|
https://ciscomessagingportal.gq/#owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fautodiscover
|
unknown
|
|
|
|
http://www.youtube.com/
|
unknown
|
|
There are 1 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
ciscomessagingportal.gq
|
162.0.237.234
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.0.237.234
|
ciscomessagingportal.gq
|
Canada
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{1E0C7D3F-B3C4-11EB-90E5-ECF4BB570DC9}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-904
|
|
There are 16 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
AA73B7D000
|
unkown
|
page read and write
|
|
|
|
AA746FE000
|
unkown
|
page read and write
|
|
|
|
22EB22E8000
|
unkown
|
page read and write
|
|
|
|
1D8DD000000
|
unkown
|
page read and write
|
|
|
|
7FF56B7E6000
|
unkown
|
page readonly
|
|
|
|
7FF571CBF000
|
unkown
|
page readonly
|
|
|
|
D52D67C000
|
unkown
|
page read and write
|
|
|
|
1642A663000
|
unkown
|
page read and write
|
|
|
|
1B582530000
|
heap default
|
page read and write
|
|
|
|
7FF527231000
|
unkown
|
page readonly
|
|
|
|
1F721920000
|
unkown
|
page readonly
|
|
|
|
1B583000000
|
unkown
|
page readonly
|
|
|
|
7FF5C1EEF000
|
unkown
|
page readonly
|
|
|
|
22EB2313000
|
unkown
|
page read and write
|
|
|
|
D52D2FD000
|
unkown
|
page read and write
|
|
|
|
1B582663000
|
unkown
|
page read and write
|
|
|
|
1642A5F0000
|
unkown
|
page readonly
|
|
|
|
1D8D768A000
|
unkown
|
page read and write
|
|
|
|
1D8D75A0000
|
unkown
|
page read and write
|
|
|
|
4B7D48B000
|
unkown
|
page read and write
|
|
|
|
7FF5C19F6000
|
unkown
|
page readonly
|
|
|
|
7FF56BB97000
|
unkown
|
page readonly
|
|
|
|
1D8DCE5F000
|
unkown
|
page read and write
|
|
|
|
7FF5906CF000
|
unkown
|
page readonly
|
|
|
|
7FF527A25000
|
unkown
|
page readonly
|
|
|
|
7FF571CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DE7000
|
unkown
|
page readonly
|
|
|
|
7FF5C16E2000
|
unkown
|
page readonly
|
|
|
|
1D8DCBD0000
|
unkown
|
page write copy
|
|
|
|
1B582668000
|
unkown
|
page read and write
|
|
|
|
1D8DCBD0000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DE3000
|
unkown
|
page readonly
|
|
|
|
7FF52ACD5000
|
unkown
|
page readonly
|
|
|
|
3CB6F4E000
|
unkown
|
page read and write
|
|
|
|
268063A0000
|
heap private
|
page read and write
|
|
|
|
7FF5905FD000
|
unkown
|
page readonly
|
|
|
|
7FF571CEE000
|
unkown
|
page readonly
|
|
|
|
7FF5C1C8D000
|
unkown
|
page readonly
|
|
|
|
1F7219F0000
|
unkown
|
page readonly
|
|
|
|
1B582560000
|
unkown
|
page read and write
|
|
|
|
7FF56B811000
|
unkown
|
page readonly
|
|
|
|
1642A629000
|
unkown
|
page read and write
|
|
|
|
1F721760000
|
heap default
|
page read and write
|
|
|
|
7FF52D9B8000
|
unkown
|
page readonly
|
|
|
|
7FF5C1728000
|
unkown
|
page readonly
|
|
|
|
1D8DC9B0000
|
unkown
|
page readonly
|
|
|
|
1D8DCC20000
|
unkown
|
page read and write
|
|
|
|
1642A674000
|
unkown
|
page read and write
|
|
|
|
1D8D7657000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DFC000
|
unkown
|
page readonly
|
|
|
|
7FF52D94A000
|
unkown
|
page readonly
|
|
|
|
7FF52AB2C000
|
unkown
|
page readonly
|
|
|
|
1642A667000
|
unkown
|
page read and write
|
|
|
|
4B7D50E000
|
unkown
|
page read and write
|
|
|
|
7FF5279D2000
|
unkown
|
page readonly
|
|
|
|
7FF571CC6000
|
unkown
|
page readonly
|
|
|
|
7FF52DA9F000
|
unkown
|
page readonly
|
|
|
|
7FF527AED000
|
unkown
|
page readonly
|
|
|
|
7FF5C16C0000
|
unkown
|
page readonly
|
|
|
|
22EB22E2000
|
unkown
|
page read and write
|
|
|
|
1642A63D000
|
unkown
|
page read and write
|
|
|
|
1D8DCD60000
|
unkown
|
page readonly
|
|
|
|
7FF56BA25000
|
unkown
|
page readonly
|
|
|
|
1D8D7E02000
|
unkown
|
page read and write
|
|
|
|
D52D1FC000
|
unkown
|
page read and write
|
|
|
|
7FF52AC67000
|
unkown
|
page readonly
|
|
|
|
7FF527328000
|
unkown
|
page readonly
|
|
|
|
1F72179C000
|
heap default
|
page read and write
|
|
|
|
1AC6A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5906CF000
|
unkown
|
page readonly
|
|
|
|
1D8D7F13000
|
unkown
|
page read and write
|
|
|
|
7FF5905DD000
|
unkown
|
page readonly
|
|
|
|
1D8DC9F0000
|
unkown
|
page read and write
|
|
|
|
7FF52AD3B000
|
unkown
|
page readonly
|
|
|
|
1F723310000
|
heap private
|
page read and write
|
|
|
|
1B58267F000
|
unkown
|
page read and write
|
|
|
|
D52CEFB000
|
unkown
|
page read and write
|
|
|
|
26806400000
|
heap default
|
page read and write
|
|
|
|
1B582700000
|
unkown
|
page read and write
|
|
|
|
1AC6377000
|
unkown
|
page read and write
|
|
|
|
7FF571CFF000
|
unkown
|
page readonly
|
|
|
|
16816402000
|
unkown
|
page read and write
|
|
|
|
1642A64D000
|
unkown
|
page read and write
|
|
|
|
1B582600000
|
unkown
|
page read and write
|
|
|
|
22EB22BB000
|
unkown
|
page read and write
|
|
|
|
7FF5279C4000
|
unkown
|
page readonly
|
|
|
|
1AC6CFF000
|
unkown
|
page read and write
|
|
|
|
7FF571C4A000
|
unkown
|
page readonly
|
|
|
|
1D8DCE17000
|
unkown
|
page read and write
|
|
|
|
7FF52AD40000
|
unkown
|
page readonly
|
|
|
|
268065C0000
|
unkown
|
page readonly
|
|
|
|
3CB6ECC000
|
unkown
|
page read and write
|
|
|
|
1AC69FF000
|
unkown
|
page read and write
|
|
|
|
7FF52DA8E000
|
unkown
|
page readonly
|
|
|
|
4B51F7E000
|
unkown
|
page read and write
|
|
|
|
AA740FD000
|
unkown
|
page read and write
|
|
|
|
16816220000
|
heap default
|
page read and write
|
|
|
|
1D8DCBF8000
|
unkown
|
page write copy
|
|
|
|
1D8DCEAA000
|
unkown
|
page read and write
|
|
|
|
22EB2244000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DD2000
|
unkown
|
page readonly
|
|
|
|
1D8D76F9000
|
unkown
|
page read and write
|
|
|
|
16816459000
|
unkown
|
page read and write
|
|
|
|
1D8D8600000
|
unkown
|
page readonly
|
|
|
|
1642A631000
|
unkown
|
page read and write
|
|
|
|
7FF571A9D000
|
unkown
|
page readonly
|
|
|
|
7FF5279E3000
|
unkown
|
page readonly
|
|
|
|
1642A65E000
|
unkown
|
page read and write
|
|
|
|
1642A613000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EDE000
|
unkown
|
page readonly
|
|
|
|
7FF527AD4000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DC4000
|
unkown
|
page readonly
|
|
|
|
7FF52D9E3000
|
unkown
|
page readonly
|
|
|
|
7FF52AC78000
|
unkown
|
page readonly
|
|
|
|
D52D37C000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EDB000
|
unkown
|
page readonly
|
|
|
|
7FF5C199F000
|
unkown
|
page readonly
|
|
|
|
1D8DCB44000
|
unkown
|
page read and write
|
|
|
|
2329EFF000
|
unkown
|
page read and write
|
|
|
|
1D8D7DF3000
|
unkown
|
page read and write
|
|
|
|
1642A510000
|
unkown
|
page readonly
|
|
|
|
16816A02000
|
unkown
|
page read and write
|
|
|
|
7FF5906A0000
|
unkown
|
page readonly
|
|
|
|
1D8D763F000
|
unkown
|
page read and write
|
|
|
|
7FF5905C7000
|
unkown
|
page readonly
|
|
|
|
7FF527A1D000
|
unkown
|
page readonly
|
|
|
|
7FF5906B4000
|
unkown
|
page readonly
|
|
|
|
22EB2150000
|
unkown
|
page readonly
|
|
|
|
7FF52AA6D000
|
unkown
|
page readonly
|
|
|
|
7FF52AC52000
|
unkown
|
page readonly
|
|
|
|
1F7219E5000
|
heap private
|
page read and write
|
|
|
|
1B5828D0000
|
unkown
|
page readonly
|
|
|
|
2680662A000
|
unkown
|
page read and write
|
|
|
|
7FF527AAF000
|
unkown
|
page readonly
|
|
|
|
7FF590613000
|
unkown
|
page readonly
|
|
|
|
7FF590609000
|
unkown
|
page readonly
|
|
|
|
7FF59068F000
|
unkown
|
page readonly
|
|
|
|
7FF52AD6D000
|
unkown
|
page readonly
|
|
|
|
7FF56BC15000
|
unkown
|
page readonly
|
|
|
|
1D8DCCB0000
|
unkown
|
page readonly
|
|
|
|
1F7232C0000
|
heap private
|
page read and write
|
|
|
|
7FF56BC45000
|
unkown
|
page readonly
|
|
|
|
1D8DCE8B000
|
unkown
|
page read and write
|
|
|
|
1AC6BFF000
|
unkown
|
page read and write
|
|
|
|
1B582628000
|
unkown
|
page read and write
|
|
|
|
7FF52AC5C000
|
unkown
|
page readonly
|
|
|
|
1D8D7B90000
|
unkown
|
page readonly
|
|
|
|
168163F0000
|
unkown
|
page read and write
|
|
|
|
1D8D7F18000
|
unkown
|
page read and write
|
|
|
|
1D8DCB00000
|
unkown
|
page read and write
|
|
|
|
1AC6FFC000
|
unkown
|
page read and write
|
|
|
|
7FF571BF7000
|
unkown
|
page readonly
|
|
|
|
3CB73FC000
|
unkown
|
page read and write
|
|
|
|
7FF52AD5B000
|
unkown
|
page readonly
|
|
|
|
268064E0000
|
unkown
|
page readonly
|
|
|
|
7FF52AB02000
|
unkown
|
page readonly
|
|
|
|
1642A642000
|
unkown
|
page read and write
|
|
|
|
22EB2400000
|
unkown
|
page readonly
|
|
|
|
26806602000
|
unkown
|
page read and write
|
|
|
|
7FF52ACB3000
|
unkown
|
page readonly
|
|
|
|
1AC5F8D000
|
unkown
|
page read and write
|
|
|
|
1F723590000
|
heap private
|
page read and write
|
|
|
|
2329CFE000
|
unkown
|
page read and write
|
|
|
|
7FF52AD36000
|
unkown
|
page readonly
|
|
|
|
7FF56BCAB000
|
unkown
|
page readonly
|
|
|
|
1B582C60000
|
unkown
|
page readonly
|
|
|
|
1D8D768F000
|
unkown
|
page read and write
|
|
|
|
7FF571C39000
|
unkown
|
page readonly
|
|
|
|
22EB2C00000
|
unkown
|
page readonly
|
|
|
|
22EB2190000
|
unkown
|
page readonly
|
|
|
|
7FF527882000
|
unkown
|
page readonly
|
|
|
|
7FF5C1CBC000
|
unkown
|
page readonly
|
|
|
|
1D8D7DF0000
|
unkown
|
page read and write
|
|
|
|
1D8DCCA0000
|
unkown
|
page readonly
|
|
|
|
1D8D84E0000
|
unkown
|
page read and write
|
|
|
|
1D8DCC30000
|
unkown
|
page read and write
|
|
|
|
1F72344F000
|
heap private
|
page read and write
|
|
|
|
7FF5C1E29000
|
unkown
|
page readonly
|
|
|
|
7FF52D9AC000
|
unkown
|
page readonly
|
|
|
|
1AC627E000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DB0000
|
unkown
|
page readonly
|
|
|
|
1642A67B000
|
unkown
|
page read and write
|
|
|
|
1B582679000
|
unkown
|
page read and write
|
|
|
|
4B51EFC000
|
unkown
|
page read and write
|
|
|
|
1D8D769D000
|
unkown
|
page read and write
|
|
|
|
7FF52DA05000
|
unkown
|
page readonly
|
|
|
|
1AC657B000
|
unkown
|
page read and write
|
|
|
|
7FF56BBC2000
|
unkown
|
page readonly
|
|
|
|
2329B7F000
|
unkown
|
page read and write
|
|
|
|
7FF57142A000
|
unkown
|
page readonly
|
|
|
|
7FF52764E000
|
unkown
|
page readonly
|
|
|
|
1D8D7600000
|
unkown
|
page read and write
|
|
|
|
22EB2200000
|
unkown
|
page read and write
|
|
|
|
1D8DCE2D000
|
unkown
|
page read and write
|
|
|
|
1B582660000
|
unkown
|
page read and write
|
|
|
|
7FF52AD6F000
|
unkown
|
page readonly
|
|
|
|
7FF52DA58000
|
unkown
|
page readonly
|
|
|
|
16816310000
|
unkown
|
page readonly
|
|
|
|
26806E00000
|
unkown
|
page readonly
|
|
|
|
4B523FE000
|
unkown
|
page read and write
|
|
|
|
7FF527A55000
|
unkown
|
page readonly
|
|
|
|
7FF5C1A93000
|
unkown
|
page readonly
|
|
|
|
1642A800000
|
unkown
|
page readonly
|
|
|
|
1D8D85E0000
|
unkown
|
page readonly
|
|
|
|
1D8D75B0000
|
unkown
|
page read and write
|
|
|
|
7FF52764A000
|
unkown
|
page readonly
|
|
|
|
1B5824D0000
|
heap private
|
page read and write
|
|
|
|
7FF5C16E4000
|
unkown
|
page readonly
|
|
|
|
7FF571C43000
|
unkown
|
page readonly
|
|
|
|
7FF5C1636000
|
unkown
|
page readonly
|
|
|
|
7FF56BC0D000
|
unkown
|
page readonly
|
|
|
|
4B51FFE000
|
unkown
|
page read and write
|
|
|
|
1B582550000
|
unkown
|
page readonly
|
|
|
|
7FF59061A000
|
unkown
|
page readonly
|
|
|
|
7FF56BCDD000
|
unkown
|
page readonly
|
|
|
|
D52CB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5277C8000
|
unkown
|
page readonly
|
|
|
|
AA745FF000
|
unkown
|
page read and write
|
|
|
|
7FF58FDF8000
|
unkown
|
page readonly
|
|
|
|
1D8DCC50000
|
unkown
|
page read and write
|
|
|
|
7FF571C18000
|
unkown
|
page readonly
|
|
|
|
1D8D766D000
|
unkown
|
page read and write
|
|
|
|
1F721590000
|
unkown
|
page readonly
|
|
|
|
1D8DCB21000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A6A000
|
unkown
|
page readonly
|
|
|
|
16816600000
|
unkown
|
page readonly
|
|
|
|
7FF56BCAE000
|
unkown
|
page readonly
|
|
|
|
7FF527906000
|
unkown
|
page readonly
|
|
|
|
7FF5903C8000
|
unkown
|
page readonly
|
|
|
|
7FF571C65000
|
unkown
|
page readonly
|
|
|
|
1642A641000
|
unkown
|
page read and write
|
|
|
|
7FF56BCBD000
|
unkown
|
page readonly
|
|
|
|
7FF56BCDF000
|
unkown
|
page readonly
|
|
|
|
7FF5C1C84000
|
unkown
|
page readonly
|
|
|
|
7FF5906BE000
|
unkown
|
page readonly
|
|
|
|
7FF527ADE000
|
unkown
|
page readonly
|
|
|
|
7FF52A4AB000
|
unkown
|
page readonly
|
|
|
|
7FF52AB3F000
|
unkown
|
page readonly
|
|
|
|
26806702000
|
unkown
|
page read and write
|
|
|
|
1D8DCC40000
|
unkown
|
page read and write
|
|
|
|
1D8D7440000
|
heap private
|
page read and write
|
|
|
|
7FF571C35000
|
unkown
|
page readonly
|
|
|
|
1D8D7629000
|
unkown
|
page read and write
|
|
|
|
1642A602000
|
unkown
|
page read and write
|
|
|
|
7FF527AEF000
|
unkown
|
page readonly
|
|
|
|
7FF52AD5E000
|
unkown
|
page readonly
|
|
|
|
7FF5C1BE1000
|
unkown
|
page readonly
|
|
|
|
1F721784000
|
heap default
|
page read and write
|
|
|
|
1AC6EFF000
|
unkown
|
page read and write
|
|
|
|
7FF56BBD7000
|
unkown
|
page readonly
|
|
|
|
7FF5C1EEB000
|
unkown
|
page readonly
|
|
|
|
1AC647A000
|
unkown
|
page read and write
|
|
|
|
7FF52AD54000
|
unkown
|
page readonly
|
|
|
|
7FF56BA2D000
|
unkown
|
page readonly
|
|
|
|
1AC677B000
|
unkown
|
page read and write
|
|
|
|
26806624000
|
unkown
|
page read and write
|
|
|
|
1AC667F000
|
unkown
|
page read and write
|
|
|
|
268065D0000
|
unkown
|
page read and write
|
|
|
|
22EB2000000
|
heap private
|
page read and write
|
|
|
|
7FF56BB7D000
|
unkown
|
page readonly
|
|
|
|
7FF5906CD000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DA7000
|
unkown
|
page readonly
|
|
|
|
1D8DCC60000
|
unkown
|
page read and write
|
|
|
|
1642A4A0000
|
heap private
|
page read and write
|
|
|
|
7FF56BCCE000
|
unkown
|
page readonly
|
|
|
|
7FF52ACBA000
|
unkown
|
page readonly
|
|
|
|
1D8D8960000
|
unkown
|
page read and write
|
|
|
|
7FF590696000
|
unkown
|
page readonly
|
|
|
|
26806668000
|
unkown
|
page read and write
|
|
|
|
7FF59046D000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DC8000
|
unkown
|
page readonly
|
|
|
|
1D8D74B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C1EB6000
|
unkown
|
page readonly
|
|
|
|
22EB2060000
|
heap default
|
page read and write
|
|
|
|
16816C00000
|
unkown
|
page read and write
|
|
|
|
7FF5C1BED000
|
unkown
|
page readonly
|
|
|
|
7FF52AD6F000
|
unkown
|
page readonly
|
|
|
|
1D8DCC04000
|
unkown
|
page write copy
|
|
|
|
AA742FE000
|
unkown
|
page read and write
|
|
|
|
1681642A000
|
unkown
|
page read and write
|
|
|
|
168161C0000
|
heap private
|
page read and write
|
|
|
|
2680663F000
|
unkown
|
page read and write
|
|
|
|
1D8D7F18000
|
unkown
|
page read and write
|
|
|
|
7FF52D9B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C1BDA000
|
unkown
|
page readonly
|
|
|
|
1D8DCEB0000
|
unkown
|
page read and write
|
|
|
|
7FF5C1C11000
|
unkown
|
page readonly
|
|
|
|
1B582640000
|
unkown
|
page read and write
|
|
|
|
1AC6AFE000
|
unkown
|
page read and write
|
|
|
|
7FF56BCCB000
|
unkown
|
page readonly
|
|
|
|
7FF590605000
|
unkown
|
page readonly
|
|
|
|
1B582702000
|
unkown
|
page read and write
|
|
|
|
1AC6DFA000
|
unkown
|
page read and write
|
|
|
|
26806676000
|
unkown
|
page read and write
|
|
|
|
7FF5C1E55000
|
unkown
|
page readonly
|
|
|
|
7FF590635000
|
unkown
|
page readonly
|
|
|
|
1642A652000
|
unkown
|
page read and write
|
|
|
|
7FF527AA8000
|
unkown
|
page readonly
|
|
|
|
1642A67D000
|
unkown
|
page read and write
|
|
|
|
7FF52AB0D000
|
unkown
|
page readonly
|
|
|
|
7FF5905D7000
|
unkown
|
page readonly
|
|
|
|
22EB2267000
|
unkown
|
page read and write
|
|
|
|
1642A600000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EAF000
|
unkown
|
page readonly
|
|
|
|
7FF52D29D000
|
unkown
|
page readonly
|
|
|
|
7FF56BBEC000
|
unkown
|
page readonly
|
|
|
|
7FF56B845000
|
unkown
|
page readonly
|
|
|
|
1D8DCEB5000
|
unkown
|
page read and write
|
|
|
|
168169B0000
|
unkown
|
page read and write
|
|
|
|
7FF5C1E3A000
|
unkown
|
page readonly
|
|
|
|
1D8DCB00000
|
unkown
|
page read and write
|
|
|
|
1D8DCEB5000
|
unkown
|
page read and write
|
|
|
|
1B582540000
|
unkown
|
page readonly
|
|
|
|
7FF5C1E25000
|
unkown
|
page readonly
|
|
|
|
1642A66F000
|
unkown
|
page read and write
|
|
|
|
1D8DC970000
|
unkown
|
page read and write
|
|
|
|
7FF52DA03000
|
unkown
|
page readonly
|
|
|
|
1D8DCC60000
|
unkown
|
page read and write
|
|
|
|
1F7216C0000
|
unkown
|
page read and write
|
|
|
|
7FF52A8D5000
|
unkown
|
page readonly
|
|
|
|
7FF590378000
|
unkown
|
page readonly
|
|
|
|
7FF52D943000
|
unkown
|
page readonly
|
|
|
|
7FF57142D000
|
unkown
|
page readonly
|
|
|
|
7FF5279F7000
|
unkown
|
page readonly
|
|
|
|
22EB21A0000
|
unkown
|
page write copy
|
|
|
|
1D8D7F00000
|
unkown
|
page read and write
|
|
|
|
7FF56BAAE000
|
unkown
|
page readonly
|
|
|
|
22EB2070000
|
unkown
|
page readonly
|
|
|
|
7FF571CFF000
|
unkown
|
page readonly
|
|
|
|
1642A65F000
|
unkown
|
page read and write
|
|
|
|
1F7219E0000
|
heap private
|
page read and write
|
|
|
|
7FF52AD28000
|
unkown
|
page readonly
|
|
|
|
7FF527ADB000
|
unkown
|
page readonly
|
|
|
|
1AC5F0B000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A7F000
|
unkown
|
page readonly
|
|
|
|
1D8DCC07000
|
unkown
|
page write copy
|
|
|
|
7FF5C1BE3000
|
unkown
|
page readonly
|
|
|
|
7FF52AC7C000
|
unkown
|
page readonly
|
|
|
|
4B7DAFF000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A21000
|
unkown
|
page readonly
|
|
|
|
7FF56BCC4000
|
unkown
|
page readonly
|
|
|
|
7FF5C1A70000
|
unkown
|
page readonly
|
|
|
|
7FF56BC9F000
|
unkown
|
page readonly
|
|
|
|
22EB2213000
|
unkown
|
page read and write
|
|
|
|
7FF527912000
|
unkown
|
page readonly
|
|
|
|
22EB2B00000
|
unkown
|
page read and write
|
|
|
|
7FF59069B000
|
unkown
|
page readonly
|
|
|
|
22EB2302000
|
unkown
|
page read and write
|
|
|
|
7FF52D696000
|
unkown
|
page readonly
|
|
|
|
D52D07E000
|
unkown
|
page read and write
|
|
|
|
16816400000
|
unkown
|
page read and write
|
|
|
|
7FF56BBCC000
|
unkown
|
page readonly
|
|
|
|
1642A67E000
|
unkown
|
page read and write
|
|
|
|
7FF56BC98000
|
unkown
|
page readonly
|
|
|
|
1B582613000
|
unkown
|
page read and write
|
|
|
|
7FF5278FD000
|
unkown
|
page readonly
|
|
|
|
7FF52DA66000
|
unkown
|
page readonly
|
|
|
|
7FF56B524000
|
unkown
|
page readonly
|
|
|
|
1D8D7800000
|
unkown
|
page readonly
|
|
|
|
2329A7E000
|
unkown
|
page read and write
|
|
|
|
D52CAFC000
|
unkown
|
page read and write
|
|
|
|
7FF52D68D000
|
unkown
|
page readonly
|
|
|
|
1AC6C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C1BDC000
|
unkown
|
page readonly
|
|
|
|
7FF52A9FA000
|
unkown
|
page readonly
|
|
|
|
1642A500000
|
heap default
|
page read and write
|
|
|
|
1642A664000
|
unkown
|
page read and write
|
|
|
|
1D8DCE4D000
|
unkown
|
page read and write
|
|
|
|
1D8DCB30000
|
unkown
|
page read and write
|
|
|
|
1B582713000
|
unkown
|
page read and write
|
|
|
|
2680665A000
|
unkown
|
page read and write
|
|
|
|
1681643D000
|
unkown
|
page read and write
|
|
|
|
1D8DCD80000
|
unkown
|
page readonly
|
|
|
|
D52D77E000
|
unkown
|
page read and write
|
|
|
|
7FF52AC88000
|
unkown
|
page readonly
|
|
|
|
7FF5C1EBE000
|
unkown
|
page readonly
|
|
|
|
26806C02000
|
unkown
|
page read and write
|
|
|
|
1642A684000
|
unkown
|
page read and write
|
|
|
|
1D8D8400000
|
unkown
|
page read and write
|
|
|
|
1D8D7659000
|
unkown
|
page read and write
|
|
|
|
7FF5C1D27000
|
unkown
|
page readonly
|
|
|
|
7FF5C1CA3000
|
unkown
|
page readonly
|
|
|
|
7FF571CB8000
|
unkown
|
page readonly
|
|
|
|
AA741FE000
|
unkown
|
page read and write
|
|
|
|
7FF571CFB000
|
unkown
|
page readonly
|
|
|
|
1D8DCE10000
|
unkown
|
page read and write
|
|
|
|
1D8DC960000
|
unkown
|
page read and write
|
|
|
|
1AC68FE000
|
unkown
|
page read and write
|
|
|
|
16816300000
|
unkown
|
page readonly
|
|
|
|
2329DFD000
|
unkown
|
page read and write
|
|
|
|
1D8DCBD4000
|
unkown
|
page readonly
|
|
|
|
168169B0000
|
unkown
|
page read and write
|
|
|
|
1D8DCB30000
|
unkown
|
page read and write
|
|
|
|
7FF5C1ED4000
|
unkown
|
page readonly
|
|
|
|
7FF5C1A64000
|
unkown
|
page readonly
|
|
|
|
7FF571CE4000
|
unkown
|
page readonly
|
|
|
|
7FF52DA5F000
|
unkown
|
page readonly
|
|
|
|
1AC70FF000
|
unkown
|
page read and write
|
|
|
|
1D8DCC10000
|
unkown
|
page read and write
|
|
|
|
7FF52DA7D000
|
unkown
|
page readonly
|
|
|
|
1642A645000
|
unkown
|
page read and write
|
|
|
|
1D8DCE00000
|
unkown
|
page read and write
|
|
|
|
1D8D7590000
|
unkown
|
page readonly
|
|
|
|
1D8D8610000
|
unkown
|
page readonly
|
|
|
|
16816413000
|
unkown
|
page read and write
|
|
|
|
1B582602000
|
unkown
|
page read and write
|
|
|
|
7FF56BB8D000
|
unkown
|
page readonly
|
|
|
|
7FF5905B3000
|
unkown
|
page readonly
|
|
|
|
2329C7D000
|
unkown
|
page read and write
|
|
|
|
7FF52D93F000
|
unkown
|
page readonly
|
|
|
|
7FF527A29000
|
unkown
|
page readonly
|
|
|
|
1D8DCB0E000
|
unkown
|
page read and write
|
|
|
|
1D8DCC60000
|
unkown
|
page readonly
|
|
|
|
7FF52AC44000
|
unkown
|
page readonly
|
|
|
|
7FF56BCDF000
|
unkown
|
page readonly
|
|
|
|
1D8DCC60000
|
unkown
|
page read and write
|
|
|
|
7FF527ABB000
|
unkown
|
page readonly
|
|
|
|
AA73DFF000
|
unkown
|
page read and write
|
|
|
|
16816230000
|
unkown
|
page readonly
|
|
|
|
1D8D74A0000
|
heap default
|
page read and write
|
|
|
|
1F721710000
|
unkown
|
page readonly
|
|
|
|
7FF5C1EBB000
|
unkown
|
page readonly
|
|
|
|
1D8D7F02000
|
unkown
|
page read and write
|
|
|
|
7FF5714BF000
|
unkown
|
page readonly
|
|
|
|
1F721700000
|
unkown
|
page readonly
|
|
|
|
7FF5C1D9D000
|
unkown
|
page readonly
|
|
|
|
22EB2160000
|
unkown
|
page read and write
|
|
|
|
7FF52D67B000
|
unkown
|
page readonly
|
|
|
|
7FF5C1B7A000
|
unkown
|
page readonly
|
|
|
|
1D8DCE40000
|
unkown
|
page read and write
|
|
|
|
1D8D7688000
|
unkown
|
page read and write
|
|
|
|
1642A660000
|
unkown
|
page read and write
|
|
|
|
7FF56BA57000
|
unkown
|
page readonly
|
|
|
|
7FF52D9D9000
|
unkown
|
page readonly
|
|
|
|
22EB2A02000
|
unkown
|
page read and write
|
|
|
|
7FF52759F000
|
unkown
|
page readonly
|
|
|
|
7FF5905A0000
|
unkown
|
page readonly
|
|
|
|
1D8D7713000
|
unkown
|
page read and write
|
|
|
|
7FF52AB36000
|
unkown
|
page readonly
|
|
|
|
1D8D7702000
|
unkown
|
page read and write
|
|
|
|
26806613000
|
unkown
|
page read and write
|
|
|
|
7FF590386000
|
unkown
|
page readonly
|
|
|
|
7FF590590000
|
unkown
|
page readonly
|
|
|
|
1F721750000
|
unkown
|
page readonly
|
|
|
|
2329F7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C1A55000
|
unkown
|
page readonly
|
|
|
|
7FF5279E7000
|
unkown
|
page readonly
|
|
|
|
1642A5E0000
|
unkown
|
page readonly
|
|
|
|
1D8D7613000
|
unkown
|
page read and write
|
|
|
|
7FF56BC19000
|
unkown
|
page readonly
|
|
|
|
7FF52AD6B000
|
unkown
|
page readonly
|
|
|
|
4B524FE000
|
unkown
|
page read and write
|
|
|
|
AA73CFE000
|
unkown
|
page read and write
|
|
|
|
1642A649000
|
unkown
|
page read and write
|
|
|
|
1F72176B000
|
heap default
|
page read and write
|
|
|
|
AA73C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C1C13000
|
unkown
|
page readonly
|
|
|
|
1D8DCB40000
|
unkown
|
page read and write
|
|
|
|
4B525FF000
|
unkown
|
page read and write
|
|
|
|
D52D57F000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DDC000
|
unkown
|
page readonly
|
|
|
|
7FF571C2D000
|
unkown
|
page readonly
|
|
|
|
168169B0000
|
unkown
|
page read and write
|
|
|
|
7FF56BC23000
|
unkown
|
page readonly
|
|
|
|
7FF5279FC000
|
unkown
|
page readonly
|
|
|
|
7FF571CCB000
|
unkown
|
page readonly
|
|
|
|
22EB2140000
|
unkown
|
page readonly
|
|
|
|
7FF5C1BAF000
|
unkown
|
page readonly
|
|
|
|
7FF527A08000
|
unkown
|
page readonly
|
|
|
|
1D8DCEB7000
|
unkown
|
page read and write
|
|
|
|
AA744FE000
|
unkown
|
page read and write
|
|
|
|
1D8DCEA2000
|
unkown
|
page read and write
|
|
|
|
268064F0000
|
unkown
|
page readonly
|
|
|
|
7FF5906BB000
|
unkown
|
page readonly
|
|
|
|
1D8D7E00000
|
unkown
|
page read and write
|
|
|
|
7FF56BCA6000
|
unkown
|
page readonly
|
|
|
|
1B582658000
|
unkown
|
page read and write
|
|
|
|
7FF527ACD000
|
unkown
|
page readonly
|
|
|
|
22EB2265000
|
unkown
|
page read and write
|
|
|
|
1D8DCB08000
|
unkown
|
page read and write
|
|
|
|
7FF52ACA5000
|
unkown
|
page readonly
|
|
|
|
3CB6FCE000
|
unkown
|
page read and write
|
|
|
|
1642A66D000
|
unkown
|
page read and write
|
|
|
|
7FF590688000
|
unkown
|
page readonly
|
|
|
|
168163E0000
|
unkown
|
page readonly
|
|
|
|
268065F0000
|
unkown
|
page readonly
|
|
|
|
AA73A7C000
|
unkown
|
page read and write
|
|
|
|
7FF56BBE7000
|
unkown
|
page readonly
|
|
|
|
4B7DCFF000
|
unkown
|
page read and write
|
|
|
|
7FF52AC9D000
|
unkown
|
page readonly
|
|
|
|
7FF5C1E1D000
|
unkown
|
page readonly
|
|
|
|
4B7D58E000
|
unkown
|
page read and write
|
|
|
|
23299FF000
|
unkown
|
page read and write
|
|
|
|
D52D47C000
|
unkown
|
page read and write
|
|
|
|
1B582800000
|
unkown
|
page readonly
|
|
|
|
1642A632000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EA8000
|
unkown
|
page readonly
|
|
|
|
7FF5C1D3F000
|
unkown
|
page readonly
|
|
|
|
1F721930000
|
unkown
|
page readonly
|
|
|
|
7FF527AEB000
|
unkown
|
page readonly
|
|
|
|
1D8DCB20000
|
unkown
|
page read and write
|
|
|
|
D52D17E000
|
unkown
|
page read and write
|
|
|
|
7FF52D9D5000
|
unkown
|
page readonly
|
|
|
|
7FF56BC2A000
|
unkown
|
page readonly
|
|
|
|
7FF527AEF000
|
unkown
|
page readonly
|
|
|
|
7FF52DA0D000
|
unkown
|
page readonly
|
|
|
|
1D8DCC60000
|
unkown
|
page read and write
|
|
|
|
7FF52AC63000
|
unkown
|
page readonly
|
|
|
|
1642A644000
|
unkown
|
page read and write
|
|
|
|
7FF571CEB000
|
unkown
|
page readonly
|
|
|
|
7FF52AA77000
|
unkown
|
page readonly
|
|
|
|
7FF52D783000
|
unkown
|
page readonly
|
|
|
|
1D8DCD40000
|
unkown
|
page readonly
|
|
|
|
4B7DBFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EED000
|
unkown
|
page readonly
|
|
|
|
1D8DCEB7000
|
unkown
|
page read and write
|
|
|
|
7FF52788D000
|
unkown
|
page readonly
|
|
|
|
232953B000
|
unkown
|
page read and write
|
|
|
|
1D8D85D0000
|
unkown
|
page readonly
|
|
|
|
7FF52796E000
|
unkown
|
page readonly
|
|
|
|
7FF52DA6B000
|
unkown
|
page readonly
|
|
|
|
1642A63A000
|
unkown
|
page read and write
|
|
|
|
1642A661000
|
unkown
|
page read and write
|
|
|
|
7FF52ABEE000
|
unkown
|
page readonly
|
|
|
|
1D8D8620000
|
unkown
|
page readonly
|
|
|
|
D52CBFD000
|
unkown
|
page read and write
|
|
|
|
1F7215F0000
|
unkown
|
page readonly
|
|
|
|
7FF527A3A000
|
unkown
|
page readonly
|
|
|
|
AA73EFC000
|
unkown
|
page read and write
|
|
|
|
7FF5C1D64000
|
unkown
|
page readonly
|
|
|
|
16816502000
|
unkown
|
page read and write
|
|
|
|
1642AC60000
|
unkown
|
page read and write
|
|
|
|
7FF5C1EEF000
|
unkown
|
page readonly
|
|
|
|
1F721860000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DC0000
|
unkown
|
page readonly
|
|
|
|
7FF52D9CD000
|
unkown
|
page readonly
|
|
|
|
1D8D7580000
|
unkown
|
page readonly
|
|
|
|
7FF5277B6000
|
unkown
|
page readonly
|
|
|
|
3CB72FE000
|
unkown
|
page read and write
|
|
|
|
1D8D7677000
|
unkown
|
page read and write
|
|
|
|
7FF5279DC000
|
unkown
|
page readonly
|
|
|
|
1642A702000
|
unkown
|
page read and write
|
|
|
|
1D8D7E15000
|
unkown
|
page read and write
|
|
|
|
1D8D8001000
|
unkown
|
page read and write
|
|
|
|
1D8D7DD1000
|
unkown
|
page read and write
|
|
|
|
3CB727D000
|
unkown
|
page read and write
|
|
|
|
7FF5C1DA0000
|
unkown
|
page readonly
|
|
|
|
AA73AFE000
|
unkown
|
page read and write
|
|
|
|
7FF52DA8B000
|
unkown
|
page readonly
|
|
|
|
AA743FE000
|
unkown
|
page read and write
|
|
|
|
22EB22CC000
|
unkown
|
page read and write
|
|
|
|
7FF5C1E33000
|
unkown
|
page readonly
|
|
|
|
26806600000
|
unkown
|
page read and write
|
|
|
|
7FF5C1640000
|
unkown
|
page readonly
|
|
|
|
7FF5C1DF7000
|
unkown
|
page readonly
|
|
|
|
7FF571C0C000
|
unkown
|
page readonly
|
|
|
|
3CB737E000
|
unkown
|
page read and write
|
|
|
|
1642A64B000
|
unkown
|
page read and write
|
|
|
|
7FF527A33000
|
unkown
|
page readonly
|
|
|
|
7FF5C1ECD000
|
unkown
|
page readonly
|
|
|
|
1D8DCA00000
|
unkown
|
page read and write
|
|
|
|
22EB2270000
|
unkown
|
page read and write
|
|
|
|
1F721D80000
|
unkown
|
page readonly
|
|
|
|
1D8D7672000
|
unkown
|
page read and write
|
|
|
|
7FF5C1CA8000
|
unkown
|
page readonly
|
|
|
|
1F723350000
|
heap private
|
page read and write
|
|
|
|
7FF527AB6000
|
unkown
|
page readonly
|
|
|
|
1B582E02000
|
unkown
|
page read and write
|
|
|
|
1D8DCB24000
|
unkown
|
page read and write
|
|
|
|
7FF52AD2F000
|
unkown
|
page readonly
|
|
|
|
1642A648000
|
unkown
|
page read and write
|
|
|
|
7FF52DA9B000
|
unkown
|
page readonly
|
|
|
|
1642A662000
|
unkown
|
page read and write
|
|
|
|
1642A647000
|
unkown
|
page read and write
|
|
|
|
4B7D9FB000
|
unkown
|
page read and write
|
|
|
|
7FF52ACA9000
|
unkown
|
page readonly
|
|
|
|
1642A66B000
|
unkown
|
page read and write
|
|
|
|
1642AE02000
|
unkown
|
page read and write
|
|
|
|
1D8D85C0000
|
unkown
|
page readonly
|
|
|
|
1AC687B000
|
unkown
|
page read and write
|
|
|
|
7FF5719B3000
|
unkown
|
page readonly
|
|
|
|
7FF527ABE000
|
unkown
|
page readonly
|
|
|
|
7FF5279E5000
|
unkown
|
page readonly
|
|
|
|
7FF5906AD000
|
unkown
|
page readonly
|
|
|
|
7FF56B9F6000
|
unkown
|
page readonly
|
|
|
|
1642A65C000
|
unkown
|
page read and write
|
|
|
|
26806713000
|
unkown
|
page read and write
|
|
|
|
7FF5C1C40000
|
unkown
|
page readonly
|
|
|
|
22EB2790000
|
unkown
|
page readonly
|
|
|
|
232987E000
|
unkown
|
page read and write
|
|
|
|
23295BE000
|
unkown
|
page read and write
|
|
|
|
7FF56B96A000
|
unkown
|
page readonly
|
|
|
|
1642A640000
|
unkown
|
page read and write
|
|
|
|
26806410000
|
unkown
|
page readonly
|
|
|
|
7FF527964000
|
unkown
|
page readonly
|
|
|
|
1D8DC9E0000
|
unkown
|
page read and write
|
|
|
|
7FF52AD4D000
|
unkown
|
page readonly
|
|
|
|
1D8DCBFC000
|
unkown
|
page readonly
|
|
|
|
22EB2860000
|
unkown
|
page readonly
|
|
|
|
1642A669000
|
unkown
|
page read and write
|
|
|
|
1642A675000
|
unkown
|
page read and write
|
|
|
|
7FF52DA84000
|
unkown
|
page readonly
|
|
|
|
22EB2229000
|
unkown
|
page read and write
|
|
|
|
1642A646000
|
unkown
|
page read and write
|
|
|
|
7FF52D997000
|
unkown
|
page readonly
|
|
|
|
1D8DCE20000
|
unkown
|
page read and write
|
|
|
|
AA73FFF000
|
unkown
|
page read and write
|
|
|
|
1AC697F000
|
unkown
|
page read and write
|
|
|
|
1D8DCD50000
|
unkown
|
page read and write
|
|
|
|
26806800000
|
unkown
|
page readonly
|
|
|
|
1F7216E0000
|
unkown
|
page read and write
|
|
|
|
7FF52DA9F000
|
unkown
|
page readonly
|
|
|
|
7FF56BB90000
|
unkown
|
page readonly
|
|
|
|
1D8DCEB2000
|
unkown
|
page read and write
|
|
|
|
1D8D7675000
|
unkown
|
page read and write
|
|
|
|
7FF5C1BF7000
|
unkown
|
page readonly
|
|
|
|
1D8D85F0000
|
unkown
|
page readonly
|
|
|
|
7FF52DA70000
|
unkown
|
page readonly
|
|
|
|
7FF5C1E08000
|
unkown
|
page readonly
|
|
|
|
7FF527334000
|
unkown
|
page readonly
|
|
|
|
1D8DCCC0000
|
unkown
|
page readonly
|
|
There are 611 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://ciscomessagingportal.gq/#owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fautodiscover.com%2fowa%2f
|
|