Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
initial sample
|
 |
|||
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\13c13e68-05ad-4133-9597-ef33aee7fa12.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\29b9d9bc-0b12-4355-9a05-7b40ba09e5df.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\17d2b328-8e91-44c8-8159-a431afceb038.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\23e9e2c2-0e53-463e-8da1-e1dbe5e9acde.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4773dc6b-18f1-43de-ad4c-bc831db8fb8f.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\51209d81-c4ad-4e1e-9141-e73a84ce9a1e.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\913cac2f-5ea7-4c8e-9bd5-ddad864240b9.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\8fb9e46e-fe4d-45ac-a636-fe67a25f4c27.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\8cecc3d9-1a60-48f9-85d8-698739c04173.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a2d55469-2d1c-459f-b06b-13edf16e9e79.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d722801a-4763-469e-88b5-239ae2661558.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\dedba624-db8b-4d95-b5e9-c872e1d72d38.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\cb285216-0430-41cd-8dce-ee0117f02cb6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\da2b9183-a704-4d82-a891-81dd7820f5dc.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\2ef1aba1-5b32-43fb-bd8a-fe2f62484bc6.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\80e8c5b1-60e1-43ea-a5e1-5060469ff7bc.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\e14fe71f-92f9-4cec-950d-b601371af144.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\f4a456bb-8292-47ce-81fe-5d506a3b44f7.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\2ef1aba1-5b32-43fb-bd8a-fe2f62484bc6.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_1577057514\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4792_243401629\e14fe71f-92f9-4cec-950d-b601371af144.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
There are 147 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://tuoyieefdcxz.ru/skjdncjksdncjkewdcserfcds/14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV/?Key=14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV&rand=13InboxLightaspxn_14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV_U1hrVFhCTjlrU3J2MHhW-&3e2753cd9a0ab6203622ba5a4b7371780a5f934e89c28a415b3c9bf7c56e5487'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1676,6103540828752338741,13537251628659214977,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1736 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://tuoyieefdcxz.ru/skjdncjksdncjkewdcserfcds/14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV/?Key=14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV&rand=13InboxLightaspxn_14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV_U1hrVFhCTjlrU3J2MHhW-&3e2753cd9a0ab6203622ba5a4b7371780a5f934e89c28a415b3c9bf7c56e5487
|
|
||
|
https://dns.google
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://tuoyieefdcxz.ru/skjdncjksdncjkewdcserfcds/14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb9
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
tuoyieefdcxz.ru
|
103.153.182.184
|
|
|
|
googlehosted.l.googleusercontent.com
|
108.177.126.132
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
unknown
|
|
|
|
103.153.182.184
|
unknown
|
unknown
|
unknown
|
|
|
|
108.177.126.132
|
unknown
|
United States
|
unknown
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
There are 35 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5DFA58000
|
unkown
|
page readonly
|
|
|
|
28143A70000
|
unkown
|
page read and write
|
|
|
|
28142087000
|
unkown
|
page read and write
|
|
|
|
7FF5DF914000
|
unkown
|
page readonly
|
|
|
|
1F559A3B000
|
unkown
|
page read and write
|
|
|
|
7FF5CC861000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7E8000
|
unkown
|
page readonly
|
|
|
|
2CE6B780000
|
unkown
|
page write copy
|
|
|
|
7FF4F354C000
|
unkown
|
page readonly
|
|
|
|
2CE6B740000
|
unkown
|
page read and write
|
|
|
|
7FF5319B0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3477000
|
unkown
|
page readonly
|
|
|
|
7FF5319DF000
|
unkown
|
page readonly
|
|
|
|
7FF54E477000
|
unkown
|
page readonly
|
|
|
|
7FF5CC566000
|
unkown
|
page readonly
|
|
|
|
252D55F0000
|
unkown
|
page read and write
|
|
|
|
28143EB0000
|
unkown
|
page read and write
|
|
|
|
B8F517E000
|
unkown
|
page read and write
|
|
|
|
21C25C16000
|
unkown
|
page read and write
|
|
|
|
7FF5CCAC4000
|
unkown
|
page readonly
|
|
|
|
7FF5319AB000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC12000
|
unkown
|
page readonly
|
|
|
|
DFCF8FC000
|
unkown
|
page read and write
|
|
|
|
2814206C000
|
unkown
|
page read and write
|
|
|
|
7FF5CC895000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CD5000
|
unkown
|
page readonly
|
|
|
|
7FF4F3624000
|
unkown
|
page readonly
|
|
|
|
7FF5CCAFC000
|
unkown
|
page readonly
|
|
|
|
27633C57000
|
unkown
|
page read and write
|
|
|
|
1F559A2E000
|
unkown
|
page read and write
|
|
|
|
C525FFF000
|
unkown
|
page read and write
|
|
|
|
21C20673000
|
unkown
|
page read and write
|
|
|
|
252D5600000
|
unkown
|
page read and write
|
|
|
|
7FF5509F3000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD2B000
|
unkown
|
page readonly
|
|
|
|
7FF54E803000
|
unkown
|
page readonly
|
|
|
|
B8F567E000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA9F000
|
unkown
|
page readonly
|
|
|
|
7FF511F15000
|
unkown
|
page readonly
|
|
|
|
21C25AE0000
|
unkown
|
page read and write
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
C525E7E000
|
unkown
|
page read and write
|
|
|
|
7FF4F320F000
|
unkown
|
page readonly
|
|
|
|
7FF53199F000
|
unkown
|
page readonly
|
|
|
|
7FF54E7F9000
|
unkown
|
page readonly
|
|
|
|
7FF5DF8B6000
|
unkown
|
page readonly
|
|
|
|
21C2067C000
|
unkown
|
page read and write
|
|
|
|
96800FE000
|
unkown
|
page read and write
|
|
|
|
7FF5750CB000
|
unkown
|
page readonly
|
|
|
|
28144002000
|
unkown
|
page read and write
|
|
|
|
21C206A2000
|
unkown
|
page read and write
|
|
|
|
7FF5CC9BA000
|
unkown
|
page readonly
|
|
|
|
27633C6B000
|
unkown
|
page read and write
|
|
|
|
B8F4D5E000
|
unkown
|
page read and write
|
|
|
|
7FF4F3518000
|
unkown
|
page readonly
|
|
|
|
21C25CB3000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D66000
|
unkown
|
page readonly
|
|
|
|
7FF4F352C000
|
unkown
|
page readonly
|
|
|
|
1F559A47000
|
unkown
|
page read and write
|
|
|
|
7FF4F363B000
|
unkown
|
page readonly
|
|
|
|
7FF5CC8BF000
|
unkown
|
page readonly
|
|
|
|
1C79DE75000
|
unkown
|
page read and write
|
|
|
|
28142071000
|
unkown
|
page read and write
|
|
|
|
2814206E000
|
unkown
|
page read and write
|
|
|
|
252D5613000
|
unkown
|
page read and write
|
|
|
|
1C79DE00000
|
unkown
|
page read and write
|
|
|
|
21C25C62000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CCD000
|
unkown
|
page readonly
|
|
|
|
7FF54E878000
|
unkown
|
page readonly
|
|
|
|
28143F30000
|
unkown
|
page read and write
|
|
|
|
7FF4F34ED000
|
unkown
|
page readonly
|
|
|
|
7FF54E8AB000
|
unkown
|
page readonly
|
|
|
|
27633ED0000
|
unkown
|
page write copy
|
|
|
|
21C25CA5000
|
unkown
|
page read and write
|
|
|
|
7FF511EB8000
|
unkown
|
page readonly
|
|
|
|
DFCF77C000
|
unkown
|
page read and write
|
|
|
|
7FF5509FA000
|
unkown
|
page readonly
|
|
|
|
7FF4F34EA000
|
unkown
|
page readonly
|
|
|
|
7FF531597000
|
unkown
|
page readonly
|
|
|
|
21C25E00000
|
unkown
|
page read and write
|
|
|
|
7FF54E4A2000
|
unkown
|
page readonly
|
|
|
|
252D5C60000
|
unkown
|
page readonly
|
|
|
|
1F559A83000
|
unkown
|
page read and write
|
|
|
|
1F559A30000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC73000
|
unkown
|
page readonly
|
|
|
|
21C26060000
|
unkown
|
page readonly
|
|
|
|
7FF531757000
|
unkown
|
page readonly
|
|
|
|
7FF511FAF000
|
unkown
|
page readonly
|
|
|
|
DFCEEAB000
|
unkown
|
page read and write
|
|
|
|
C1E587E000
|
unkown
|
page read and write
|
|
|
|
19BFF06C000
|
unkown
|
page read and write
|
|
|
|
1C79DE29000
|
unkown
|
page read and write
|
|
|
|
7FF575035000
|
unkown
|
page readonly
|
|
|
|
7AFCAFE000
|
unkown
|
page read and write
|
|
|
|
7FF4F3365000
|
unkown
|
page readonly
|
|
|
|
1F559A40000
|
unkown
|
page read and write
|
|
|
|
7AFC4FD000
|
unkown
|
page read and write
|
|
|
|
21C25C2F000
|
unkown
|
page read and write
|
|
|
|
7FF54E777000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA8B000
|
unkown
|
page readonly
|
|
|
|
7FF550993000
|
unkown
|
page readonly
|
|
|
|
28143EC0000
|
unkown
|
page readonly
|
|
|
|
2814206F000
|
unkown
|
page read and write
|
|
|
|
7FF5750D0000
|
unkown
|
page readonly
|
|
|
|
7FF575065000
|
unkown
|
page readonly
|
|
|
|
1F559A2D000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA5F000
|
unkown
|
page readonly
|
|
|
|
7FF5CCAE3000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D05000
|
unkown
|
page readonly
|
|
|
|
21C25ED4000
|
unkown
|
page readonly
|
|
|
|
21C21700000
|
unkown
|
page readonly
|
|
|
|
1C79DBC0000
|
heap private
|
page read and write
|
|
|
|
19BFF049000
|
unkown
|
page read and write
|
|
|
|
7FF5507A8000
|
unkown
|
page readonly
|
|
|
|
27633C3F000
|
unkown
|
page read and write
|
|
|
|
21C25E24000
|
unkown
|
page read and write
|
|
|
|
21C25C00000
|
unkown
|
page read and write
|
|
|
|
27633C6F000
|
unkown
|
page read and write
|
|
|
|
7FF54E80A000
|
unkown
|
page readonly
|
|
|
|
968017F000
|
unkown
|
page read and write
|
|
|
|
216A5102000
|
unkown
|
page read and write
|
|
|
|
7FF57504A000
|
unkown
|
page readonly
|
|
|
|
7FF4F31E4000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBA4000
|
unkown
|
page readonly
|
|
|
|
7AFBE7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D58000
|
unkown
|
page readonly
|
|
|
|
21C25AF0000
|
unkown
|
page read and write
|
|
|
|
7FF4F31F7000
|
unkown
|
page readonly
|
|
|
|
7FF5318F8000
|
unkown
|
page readonly
|
|
|
|
7FF4F33DD000
|
unkown
|
page readonly
|
|
|
|
21C21A60000
|
unkown
|
page read and write
|
|
|
|
7FF5CC501000
|
unkown
|
page readonly
|
|
|
|
7FF511EA7000
|
unkown
|
page readonly
|
|
|
|
DFCFBFF000
|
unkown
|
page read and write
|
|
|
|
7FF5750EB000
|
unkown
|
page readonly
|
|
|
|
7FF5DF982000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D84000
|
unkown
|
page readonly
|
|
|
|
DFCF67C000
|
unkown
|
page read and write
|
|
|
|
21C25F10000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5FA000
|
unkown
|
page readonly
|
|
|
|
7FF5CCA23000
|
unkown
|
page readonly
|
|
|
|
7FF57502D000
|
unkown
|
page readonly
|
|
|
|
1F559A45000
|
unkown
|
page read and write
|
|
|
|
28142113000
|
unkown
|
page read and write
|
|
|
|
28143F30000
|
unkown
|
page read and write
|
|
|
|
7FF511D4D000
|
unkown
|
page readonly
|
|
|
|
7FF550A80000
|
unkown
|
page readonly
|
|
|
|
28142070000
|
unkown
|
page read and write
|
|
|
|
7FF4F3547000
|
unkown
|
page readonly
|
|
|
|
7FF5509DD000
|
unkown
|
page readonly
|
|
|
|
19BFF002000
|
unkown
|
page read and write
|
|
|
|
21C20DF0000
|
unkown
|
page read and write
|
|
|
|
27634120000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD2F000
|
unkown
|
page readonly
|
|
|
|
19BFEF10000
|
unkown
|
page readonly
|
|
|
|
7FF511E84000
|
unkown
|
page readonly
|
|
|
|
7FF5750DD000
|
unkown
|
page readonly
|
|
|
|
7FF4F3522000
|
unkown
|
page readonly
|
|
|
|
7FF511EBC000
|
unkown
|
page readonly
|
|
|
|
252D6000000
|
unkown
|
page read and write
|
|
|
|
252D5626000
|
unkown
|
page read and write
|
|
|
|
7FF5CCB67000
|
unkown
|
page readonly
|
|
|
|
7FF54E7F5000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CB8000
|
unkown
|
page readonly
|
|
|
|
7FF5509B7000
|
unkown
|
page readonly
|
|
|
|
1C79DC20000
|
heap default
|
page read and write
|
|
|
|
281422D0000
|
unkown
|
page readonly
|
|
|
|
8F17E7F000
|
unkown
|
page read and write
|
|
|
|
252D55E0000
|
unkown
|
page readonly
|
|
|
|
252D5659000
|
unkown
|
page read and write
|
|
|
|
7FF5316DD000
|
unkown
|
page readonly
|
|
|
|
21C20F59000
|
unkown
|
page read and write
|
|
|
|
7FF5DF5FE000
|
unkown
|
page readonly
|
|
|
|
7FF5DF91E000
|
unkown
|
page readonly
|
|
|
|
7FF511E92000
|
unkown
|
page readonly
|
|
|
|
7FF5CCA21000
|
unkown
|
page readonly
|
|
|
|
8F17C7F000
|
unkown
|
page read and write
|
|
|
|
21C25F20000
|
unkown
|
page read and write
|
|
|
|
7FF5CC8D3000
|
unkown
|
page readonly
|
|
|
|
7FF4F3390000
|
unkown
|
page readonly
|
|
|
|
27633BF0000
|
heap default
|
page read and write
|
|
|
|
7FF5750FF000
|
unkown
|
page readonly
|
|
|
|
7FF54E7C7000
|
unkown
|
page readonly
|
|
|
|
7FF511F94000
|
unkown
|
page readonly
|
|
|
|
7FF5319DF000
|
unkown
|
page readonly
|
|
|
|
2814203F000
|
unkown
|
page read and write
|
|
|
|
7FF54E637000
|
unkown
|
page readonly
|
|
|
|
276357E0000
|
unkown
|
page readonly
|
|
|
|
1F559A5C000
|
unkown
|
page read and write
|
|
|
|
1F559A5E000
|
unkown
|
page read and write
|
|
|
|
7FF511E9C000
|
unkown
|
page readonly
|
|
|
|
1F559A4B000
|
unkown
|
page read and write
|
|
|
|
7FF511F8D000
|
unkown
|
page readonly
|
|
|
|
7FF574E9D000
|
unkown
|
page readonly
|
|
|
|
C1E558E000
|
unkown
|
page read and write
|
|
|
|
21C25E30000
|
unkown
|
page read and write
|
|
|
|
21C25FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCEF000
|
unkown
|
page readonly
|
|
|
|
7AFC9FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F361D000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC08000
|
unkown
|
page readonly
|
|
|
|
7FF511D6C000
|
unkown
|
page readonly
|
|
|
|
27633C29000
|
unkown
|
page read and write
|
|
|
|
7FF53159B000
|
unkown
|
page readonly
|
|
|
|
C52627D000
|
unkown
|
page read and write
|
|
|
|
19BFF029000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D5F000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D8B000
|
unkown
|
page readonly
|
|
|
|
7FF575039000
|
unkown
|
page readonly
|
|
|
|
216A6AC0000
|
unkown
|
page read and write
|
|
|
|
7FF5E3514000
|
unkown
|
page readonly
|
|
|
|
7FF550A15000
|
unkown
|
page readonly
|
|
|
|
2CE6B0BA000
|
unkown
|
page read and write
|
|
|
|
28142000000
|
unkown
|
page read and write
|
|
|
|
7FF511CB7000
|
unkown
|
page readonly
|
|
|
|
7FF4F35A3000
|
unkown
|
page readonly
|
|
|
|
7AFC7FF000
|
unkown
|
page read and write
|
|
|
|
21C20F02000
|
unkown
|
page read and write
|
|
|
|
21C216C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3347000
|
unkown
|
page readonly
|
|
|
|
7FF5CC903000
|
unkown
|
page readonly
|
|
|
|
19BFF590000
|
unkown
|
page read and write
|
|
|
|
7FF54E88B000
|
unkown
|
page readonly
|
|
|
|
252D5D50000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9EA000
|
unkown
|
page readonly
|
|
|
|
7AFC6FF000
|
unkown
|
page read and write
|
|
|
|
7AFBFFB000
|
unkown
|
page read and write
|
|
|
|
C52607A000
|
unkown
|
page read and write
|
|
|
|
7FF54E48F000
|
unkown
|
page readonly
|
|
|
|
7FF574BC9000
|
unkown
|
page readonly
|
|
|
|
7FF511E2E000
|
unkown
|
page readonly
|
|
|
|
216A52D0000
|
unkown
|
page write copy
|
|
|
|
28142069000
|
unkown
|
page read and write
|
|
|
|
21C25F60000
|
unkown
|
page readonly
|
|
|
|
1F559A74000
|
unkown
|
page read and write
|
|
|
|
C5262FD000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D8E000
|
unkown
|
page readonly
|
|
|
|
7FF5CCA37000
|
unkown
|
page readonly
|
|
|
|
7FF531705000
|
unkown
|
page readonly
|
|
|
|
7FF4F3579000
|
unkown
|
page readonly
|
|
|
|
7FF5E3D9B000
|
unkown
|
page readonly
|
|
|
|
7FF550766000
|
unkown
|
page readonly
|
|
|
|
7FF550758000
|
unkown
|
page readonly
|
|
|
|
7FF54E47B000
|
unkown
|
page readonly
|
|
|
|
7FF574F4F000
|
unkown
|
page readonly
|
|
|
|
19BFF000000
|
unkown
|
page read and write
|
|
|
|
216A5029000
|
unkown
|
page read and write
|
|
|
|
28142013000
|
unkown
|
page read and write
|
|
|
|
21C215E0000
|
unkown
|
page read and write
|
|
|
|
7FF5CC8D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DF83D000
|
unkown
|
page readonly
|
|
|
|
21C25F60000
|
unkown
|
page read and write
|
|
|
|
3873EFB000
|
unkown
|
page read and write
|
|
|
|
7FF5CCA51000
|
unkown
|
page readonly
|
|
|
|
28143F20000
|
unkown
|
page readonly
|
|
|
|
C5261FA000
|
unkown
|
page read and write
|
|
|
|
7FF574BD8000
|
unkown
|
page readonly
|
|
|
|
C1E5C7E000
|
unkown
|
page read and write
|
|
|
|
27633E00000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCFB000
|
unkown
|
page readonly
|
|
|
|
C1E550C000
|
unkown
|
page read and write
|
|
|
|
2814206E000
|
unkown
|
page read and write
|
|
|
|
28143B70000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCFE000
|
unkown
|
page readonly
|
|
|
|
7FF550AAF000
|
unkown
|
page readonly
|
|
|
|
19BFEFF0000
|
unkown
|
page readonly
|
|
|
|
2814206B000
|
unkown
|
page read and write
|
|
|
|
1F559A2F000
|
unkown
|
page read and write
|
|
|
|
7FF54E4AA000
|
unkown
|
page readonly
|
|
|
|
7FF4F362B000
|
unkown
|
page readonly
|
|
|
|
7FF511D76000
|
unkown
|
page readonly
|
|
|
|
216A503C000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA8E000
|
unkown
|
page readonly
|
|
|
|
21C216F0000
|
unkown
|
page readonly
|
|
|
|
21C25ED0000
|
unkown
|
page read and write
|
|
|
|
21C20640000
|
unkown
|
page read and write
|
|
|
|
7FF511F76000
|
unkown
|
page readonly
|
|
|
|
21C25E44000
|
unkown
|
page read and write
|
|
|
|
21C25C49000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9D5000
|
unkown
|
page readonly
|
|
|
|
1F559A61000
|
unkown
|
page read and write
|
|
|
|
DFCEF2D000
|
unkown
|
page read and write
|
|
|
|
7FF5318B4000
|
unkown
|
page readonly
|
|
|
|
7FF5509E5000
|
unkown
|
page readonly
|
|
|
|
1F559A7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F3361000
|
unkown
|
page readonly
|
|
|
|
7FF511F6F000
|
unkown
|
page readonly
|
|
|
|
7FF54E6CD000
|
unkown
|
page readonly
|
|
|
|
28141FC0000
|
unkown
|
page readonly
|
|
|
|
216A5002000
|
unkown
|
page read and write
|
|
|
|
1F559C00000
|
unkown
|
page readonly
|
|
|
|
7FF550A7B000
|
unkown
|
page readonly
|
|
|
|
7FF531915000
|
unkown
|
page readonly
|
|
|
|
19BFF800000
|
unkown
|
page readonly
|
|
|
|
7FF4F344D000
|
unkown
|
page readonly
|
|
|
|
1F559A46000
|
unkown
|
page read and write
|
|
|
|
2CE6AFF0000
|
unkown
|
page readonly
|
|
|
|
7FF5CCA53000
|
unkown
|
page readonly
|
|
|
|
7FF511EE5000
|
unkown
|
page readonly
|
|
|
|
DFCF9FF000
|
unkown
|
page read and write
|
|
|
|
1C79DE6C000
|
unkown
|
page read and write
|
|
|
|
21C21500000
|
unkown
|
page read and write
|
|
|
|
7FF575018000
|
unkown
|
page readonly
|
|
|
|
28142118000
|
unkown
|
page read and write
|
|
|
|
27633F20000
|
unkown
|
page readonly
|
|
|
|
27633C6A000
|
unkown
|
page read and write
|
|
|
|
281420E4000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC65000
|
unkown
|
page readonly
|
|
|
|
252D55D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F356D000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD1E000
|
unkown
|
page readonly
|
|
|
|
21C26080000
|
unkown
|
page readonly
|
|
|
|
1F559A5F000
|
unkown
|
page read and write
|
|
|
|
C52617B000
|
unkown
|
page read and write
|
|
|
|
19BFF04D000
|
unkown
|
page read and write
|
|
|
|
21C25F60000
|
unkown
|
page read and write
|
|
|
|
21C205A0000
|
heap default
|
page read and write
|
|
|
|
27633C69000
|
unkown
|
page read and write
|
|
|
|
7FF5DF997000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC37000
|
unkown
|
page readonly
|
|
|
|
1F559A3D000
|
unkown
|
page read and write
|
|
|
|
7FF5CC836000
|
unkown
|
page readonly
|
|
|
|
7FF5CCB7F000
|
unkown
|
page readonly
|
|
|
|
21C206FE000
|
unkown
|
page read and write
|
|
|
|
C525B9B000
|
unkown
|
page read and write
|
|
|
|
7FF5317ED000
|
unkown
|
page readonly
|
|
|
|
2CE6AF80000
|
heap private
|
page read and write
|
|
|
|
28143ED0000
|
heap private
|
page read and write
|
|
|
|
7FF550A9B000
|
unkown
|
page readonly
|
|
|
|
DFCF7FB000
|
unkown
|
page read and write
|
|
|
|
96FFBFA000
|
unkown
|
page read and write
|
|
|
|
28144133000
|
unkown
|
page read and write
|
|
|
|
1C79DE02000
|
unkown
|
page read and write
|
|
|
|
7FF5750FB000
|
unkown
|
page readonly
|
|
|
|
7FF4F3558000
|
unkown
|
page readonly
|
|
|
|
28141F60000
|
heap default
|
page read and write
|
|
|
|
21C25CB9000
|
unkown
|
page read and write
|
|
|
|
7FF5319DB000
|
unkown
|
page readonly
|
|
|
|
2CE6B660000
|
unkown
|
page readonly
|
|
|
|
2CE6B0E4000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD2F000
|
unkown
|
page readonly
|
|
|
|
1C79DE13000
|
unkown
|
page read and write
|
|
|
|
7FF550980000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9D9000
|
unkown
|
page readonly
|
|
|
|
7FF5CCCF6000
|
unkown
|
page readonly
|
|
|
|
21C25CB6000
|
unkown
|
page read and write
|
|
|
|
7AFC2FF000
|
unkown
|
page read and write
|
|
|
|
27633D00000
|
unkown
|
page read and write
|
|
|
|
7FF5509BD000
|
unkown
|
page readonly
|
|
|
|
7FF53192A000
|
unkown
|
page readonly
|
|
|
|
7FF54E8AE000
|
unkown
|
page readonly
|
|
|
|
21C25E40000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA84000
|
unkown
|
page readonly
|
|
|
|
7FF55084D000
|
unkown
|
page readonly
|
|
|
|
38744F7000
|
unkown
|
page read and write
|
|
|
|
7FF511FAD000
|
unkown
|
page readonly
|
|
|
|
7FF5E3A53000
|
unkown
|
page readonly
|
|
|
|
B8F52FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CC8B0000
|
unkown
|
page readonly
|
|
|
|
1C79DF13000
|
unkown
|
page read and write
|
|
|
|
7FF5DF974000
|
unkown
|
page readonly
|
|
|
|
1C79DE77000
|
unkown
|
page read and write
|
|
|
|
96FFFFB000
|
unkown
|
page read and write
|
|
|
|
2CE6B087000
|
unkown
|
page read and write
|
|
|
|
8F17DFF000
|
unkown
|
page read and write
|
|
|
|
1C79E3A0000
|
unkown
|
page readonly
|
|
|
|
7FF4F30EF000
|
unkown
|
page readonly
|
|
|
|
7AFBEFD000
|
unkown
|
page read and write
|
|
|
|
7FF4F3606000
|
unkown
|
page readonly
|
|
|
|
21C25EF4000
|
unkown
|
page readonly
|
|
|
|
2CE6BA00000
|
unkown
|
page readonly
|
|
|
|
1C79DD10000
|
unkown
|
page readonly
|
|
|
|
21C20540000
|
heap private
|
page read and write
|
|
|
|
21C25FA0000
|
unkown
|
page readonly
|
|
|
|
252D5D50000
|
unkown
|
page read and write
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
21C2068E000
|
unkown
|
page read and write
|
|
|
|
21C25C3C000
|
unkown
|
page read and write
|
|
|
|
7FF5113ED000
|
unkown
|
page readonly
|
|
|
|
21C216E0000
|
unkown
|
page readonly
|
|
|
|
1F559A34000
|
unkown
|
page read and write
|
|
|
|
252D562A000
|
unkown
|
page read and write
|
|
|
|
7FF550A9E000
|
unkown
|
page readonly
|
|
|
|
28143F30000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA05000
|
unkown
|
page readonly
|
|
|
|
7FF54E6AE000
|
unkown
|
page readonly
|
|
|
|
7FF4F35F8000
|
unkown
|
page readonly
|
|
|
|
7FF511F7B000
|
unkown
|
page readonly
|
|
|
|
7FF531943000
|
unkown
|
page readonly
|
|
|
|
21C25B00000
|
unkown
|
page read and write
|
|
|
|
2814206D000
|
unkown
|
page read and write
|
|
|
|
7FF4F333D000
|
unkown
|
page readonly
|
|
|
|
7FF54E8A4000
|
unkown
|
page readonly
|
|
|
|
2CE6B102000
|
unkown
|
page read and write
|
|
|
|
7FF511EC8000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD14000
|
unkown
|
page readonly
|
|
|
|
7FF531897000
|
unkown
|
page readonly
|
|
|
|
19BFEDD0000
|
heap private
|
page read and write
|
|
|
|
21C25C22000
|
unkown
|
page read and write
|
|
|
|
252D5624000
|
unkown
|
page read and write
|
|
|
|
2CE6B000000
|
unkown
|
page read and write
|
|
|
|
7FF511D7F000
|
unkown
|
page readonly
|
|
|
|
1F559A63000
|
unkown
|
page read and write
|
|
|
|
7FF575007000
|
unkown
|
page readonly
|
|
|
|
7FF57500C000
|
unkown
|
page readonly
|
|
|
|
28144123000
|
unkown
|
page read and write
|
|
|
|
7FF5E3CD9000
|
unkown
|
page readonly
|
|
|
|
216A503F000
|
unkown
|
page read and write
|
|
|
|
1C79DF02000
|
unkown
|
page read and write
|
|
|
|
8F179DF000
|
unkown
|
page read and write
|
|
|
|
19BFF102000
|
unkown
|
page read and write
|
|
|
|
28143F30000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D9F000
|
unkown
|
page readonly
|
|
|
|
2CE6AFE0000
|
heap default
|
page read and write
|
|
|
|
1F559A49000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC7A000
|
unkown
|
page readonly
|
|
|
|
C5260FF000
|
unkown
|
page read and write
|
|
|
|
7FF5CCA1C000
|
unkown
|
page readonly
|
|
|
|
21C20658000
|
unkown
|
page read and write
|
|
|
|
1F559A41000
|
unkown
|
page read and write
|
|
|
|
28A4B5B000
|
unkown
|
page read and write
|
|
|
|
7FF5750C6000
|
unkown
|
page readonly
|
|
|
|
968027E000
|
unkown
|
page read and write
|
|
|
|
7FF5319CE000
|
unkown
|
page readonly
|
|
|
|
7FF5E31D5000
|
unkown
|
page readonly
|
|
|
|
252D5560000
|
heap private
|
page read and write
|
|
|
|
7FF5113E8000
|
unkown
|
page readonly
|
|
|
|
7FF54E5C7000
|
unkown
|
page readonly
|
|
|
|
7FF5CC183000
|
unkown
|
page readonly
|
|
|
|
B8F547F000
|
unkown
|
page read and write
|
|
|
|
1F559A42000
|
unkown
|
page read and write
|
|
|
|
7FF511F68000
|
unkown
|
page readonly
|
|
|
|
7AFC5FE000
|
unkown
|
page read and write
|
|
|
|
7FF54E890000
|
unkown
|
page readonly
|
|
|
|
2CE6B0C1000
|
unkown
|
page read and write
|
|
|
|
7FF5CC8AA000
|
unkown
|
page readonly
|
|
|
|
96FF6DB000
|
unkown
|
page read and write
|
|
|
|
28A4E7E000
|
unkown
|
page read and write
|
|
|
|
7FF511EE9000
|
unkown
|
page readonly
|
|
|
|
28142055000
|
unkown
|
page read and write
|
|
|
|
96803FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD2D000
|
unkown
|
page readonly
|
|
|
|
2CE6B730000
|
unkown
|
page readonly
|
|
|
|
7FF5315C2000
|
unkown
|
page readonly
|
|
|
|
21C20DD1000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D70000
|
unkown
|
page readonly
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
7FF5315CA000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC69000
|
unkown
|
page readonly
|
|
|
|
19BFF08E000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC3C000
|
unkown
|
page readonly
|
|
|
|
B8F4DDE000
|
unkown
|
page read and write
|
|
|
|
1F559A34000
|
unkown
|
page read and write
|
|
|
|
21C20E00000
|
unkown
|
page read and write
|
|
|
|
7FF5CCD1B000
|
unkown
|
page readonly
|
|
|
|
1F559A13000
|
unkown
|
page read and write
|
|
|
|
7FF511CAD000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CE3000
|
unkown
|
page readonly
|
|
|
|
252D5D50000
|
unkown
|
page read and write
|
|
|
|
19BFFB40000
|
unkown
|
page readonly
|
|
|
|
C525F7A000
|
unkown
|
page read and write
|
|
|
|
38746FE000
|
unkown
|
page read and write
|
|
|
|
7FF531919000
|
unkown
|
page readonly
|
|
|
|
2CE6B802000
|
unkown
|
page read and write
|
|
|
|
7FF54E770000
|
unkown
|
page readonly
|
|
|
|
19BFF108000
|
unkown
|
page read and write
|
|
|
|
21C25F40000
|
unkown
|
page read and write
|
|
|
|
7FF5CCACD000
|
unkown
|
page readonly
|
|
|
|
7FF5318F0000
|
unkown
|
page readonly
|
|
|
|
7FF511F9E000
|
unkown
|
page readonly
|
|
|
|
B8F4CDC000
|
unkown
|
page read and write
|
|
|
|
21C206A0000
|
unkown
|
page read and write
|
|
|
|
7FF550AAD000
|
unkown
|
page readonly
|
|
|
|
7FF5DF993000
|
unkown
|
page readonly
|
|
|
|
21C2068C000
|
unkown
|
page read and write
|
|
|
|
1F559A6E000
|
unkown
|
page read and write
|
|
|
|
7FF511EA3000
|
unkown
|
page readonly
|
|
|
|
7FF5CC9EF000
|
unkown
|
page readonly
|
|
|
|
7FF54E8BF000
|
unkown
|
page readonly
|
|
|
|
21C20F13000
|
unkown
|
page read and write
|
|
|
|
B8F56FF000
|
unkown
|
page read and write
|
|
|
|
28A4BDE000
|
unkown
|
page read and write
|
|
|
|
7FF511B15000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9E3000
|
unkown
|
page readonly
|
|
|
|
21C205B0000
|
unkown
|
page readonly
|
|
|
|
7FF574ECE000
|
unkown
|
page readonly
|
|
|
|
28A4EF9000
|
unkown
|
page read and write
|
|
|
|
19BFF055000
|
unkown
|
page read and write
|
|
|
|
7FF4F3125000
|
unkown
|
page readonly
|
|
|
|
7FF5DF995000
|
unkown
|
page readonly
|
|
|
|
252D5702000
|
unkown
|
page read and write
|
|
|
|
21C25E30000
|
unkown
|
page read and write
|
|
|
|
DFCFAFC000
|
unkown
|
page read and write
|
|
|
|
96FF75F000
|
unkown
|
page read and write
|
|
|
|
7FF5DF8AD000
|
unkown
|
page readonly
|
|
|
|
7FF5CC556000
|
unkown
|
page readonly
|
|
|
|
7AFBBFC000
|
unkown
|
page read and write
|
|
|
|
1C79DE64000
|
unkown
|
page read and write
|
|
|
|
27633D02000
|
unkown
|
page read and write
|
|
|
|
DFCEFAE000
|
unkown
|
page read and write
|
|
|
|
1C79DE5A000
|
unkown
|
page read and write
|
|
|
|
21C25CB9000
|
unkown
|
page read and write
|
|
|
|
7FF5CCBE7000
|
unkown
|
page readonly
|
|
|
|
7FF5DF778000
|
unkown
|
page readonly
|
|
|
|
7FF4F3514000
|
unkown
|
page readonly
|
|
|
|
27633C02000
|
unkown
|
page read and write
|
|
|
|
DFCF4FF000
|
unkown
|
page read and write
|
|
|
|
19BFEE30000
|
heap default
|
page read and write
|
|
|
|
7FF5DF98C000
|
unkown
|
page readonly
|
|
|
|
21C20629000
|
unkown
|
page read and write
|
|
|
|
28145010000
|
unkown
|
page read and write
|
|
|
|
21C20702000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9A7000
|
unkown
|
page readonly
|
|
|
|
1F559A60000
|
unkown
|
page read and write
|
|
|
|
1C79DE40000
|
unkown
|
page read and write
|
|
|
|
7FF4F363F000
|
unkown
|
page readonly
|
|
|
|
21C20713000
|
unkown
|
page read and write
|
|
|
|
1F5599A0000
|
heap default
|
page read and write
|
|
|
|
216A4FD0000
|
unkown
|
page readonly
|
|
|
|
21C20E02000
|
unkown
|
page read and write
|
|
|
|
21C25AB0000
|
unkown
|
page readonly
|
|
|
|
7FF4F34F0000
|
unkown
|
page readonly
|
|
|
|
38743FB000
|
unkown
|
page read and write
|
|
|
|
1C79DDF0000
|
unkown
|
page read and write
|
|
|
|
2CE6BD40000
|
unkown
|
page readonly
|
|
|
|
21C25F04000
|
unkown
|
page write copy
|
|
|
|
7FF5E3CEA000
|
unkown
|
page readonly
|
|
|
|
28143F60000
|
unkown
|
page readonly
|
|
|
|
7FF4F31FB000
|
unkown
|
page readonly
|
|
|
|
C1E5A7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA9F000
|
unkown
|
page readonly
|
|
|
|
7FF5E3CAC000
|
unkown
|
page readonly
|
|
|
|
1C79E600000
|
unkown
|
page readonly
|
|
|
|
7FF531998000
|
unkown
|
page readonly
|
|
|
|
21C25CAE000
|
unkown
|
page read and write
|
|
|
|
7FF53190D000
|
unkown
|
page readonly
|
|
|
|
7FF5319A6000
|
unkown
|
page readonly
|
|
|
|
21C206B1000
|
unkown
|
page read and write
|
|
|
|
1C79DD00000
|
unkown
|
page readonly
|
|
|
|
7FF574DB3000
|
unkown
|
page readonly
|
|
|
|
2814410A000
|
unkown
|
page read and write
|
|
|
|
21C20695000
|
unkown
|
page read and write
|
|
|
|
19BFEE40000
|
unkown
|
page readonly
|
|
|
|
21C25CB1000
|
unkown
|
page read and write
|
|
|
|
7FF5E3C97000
|
unkown
|
page readonly
|
|
|
|
7FF574FF3000
|
unkown
|
page readonly
|
|
|
|
1C79DE64000
|
unkown
|
page read and write
|
|
|
|
281420BF000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC1C000
|
unkown
|
page readonly
|
|
|
|
96801FF000
|
unkown
|
page read and write
|
|
|
|
252D5E02000
|
unkown
|
page read and write
|
|
|
|
7FF5CCA2D000
|
unkown
|
page readonly
|
|
|
|
7FF5750BF000
|
unkown
|
page readonly
|
|
|
|
2814206D000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC95000
|
unkown
|
page readonly
|
|
|
|
21C26040000
|
unkown
|
page readonly
|
|
|
|
7FF54E8BF000
|
unkown
|
page readonly
|
|
|
|
21C25F60000
|
unkown
|
page read and write
|
|
|
|
216A5200000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC23000
|
unkown
|
page readonly
|
|
|
|
21C21720000
|
unkown
|
page readonly
|
|
|
|
19BFF200000
|
unkown
|
page readonly
|
|
|
|
21C25ED0000
|
unkown
|
page write copy
|
|
|
|
7FF5DF9CD000
|
unkown
|
page readonly
|
|
|
|
1F559A39000
|
unkown
|
page read and write
|
|
|
|
8F17CFA000
|
unkown
|
page read and write
|
|
|
|
28142079000
|
unkown
|
page read and write
|
|
|
|
7FF5E3D9F000
|
unkown
|
page readonly
|
|
|
|
28142076000
|
unkown
|
page read and write
|
|
|
|
2CE6B029000
|
unkown
|
page read and write
|
|
|
|
7FF511D42000
|
unkown
|
page readonly
|
|
|
|
21C25A70000
|
unkown
|
page read and write
|
|
|
|
7FF4F33B7000
|
unkown
|
page readonly
|
|
|
|
7FF5750B8000
|
unkown
|
page readonly
|
|
|
|
7FF4F3222000
|
unkown
|
page readonly
|
|
|
|
21C205E0000
|
unkown
|
page read and write
|
|
|
|
21C25E08000
|
unkown
|
page read and write
|
|
|
|
252D5800000
|
unkown
|
page readonly
|
|
|
|
281420C9000
|
unkown
|
page read and write
|
|
|
|
C525EFF000
|
unkown
|
page read and write
|
|
|
|
7FF4F31E0000
|
unkown
|
page readonly
|
|
|
|
21C25F30000
|
unkown
|
page read and write
|
|
|
|
216A6BC0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA9B000
|
unkown
|
page readonly
|
|
|
|
216A4F60000
|
heap private
|
page read and write
|
|
|
|
7FF54FEDE000
|
unkown
|
page readonly
|
|
|
|
2814206D000
|
unkown
|
page read and write
|
|
|
|
1F559A7A000
|
unkown
|
page read and write
|
|
|
|
7FF5CCCE8000
|
unkown
|
page readonly
|
|
|
|
1F559A62000
|
unkown
|
page read and write
|
|
|
|
21C25FC0000
|
unkown
|
page readonly
|
|
|
|
7FF54E7ED000
|
unkown
|
page readonly
|
|
|
|
21C25F07000
|
unkown
|
page write copy
|
|
|
|
7AFC1FC000
|
unkown
|
page read and write
|
|
|
|
7FF54E7D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA6E000
|
unkown
|
page readonly
|
|
|
|
1F559A67000
|
unkown
|
page read and write
|
|
|
|
28A4FFF000
|
unkown
|
page read and write
|
|
|
|
96804FC000
|
unkown
|
page read and write
|
|
|
|
21C20E15000
|
unkown
|
page read and write
|
|
|
|
19BFF03C000
|
unkown
|
page read and write
|
|
|
|
1F559A29000
|
unkown
|
page read and write
|
|
|
|
7AFC8FF000
|
unkown
|
page read and write
|
|
|
|
216A5013000
|
unkown
|
page read and write
|
|
|
|
21C20613000
|
unkown
|
page read and write
|
|
|
|
27633C00000
|
unkown
|
page read and write
|
|
|
|
7FF5319BD000
|
unkown
|
page readonly
|
|
|
|
1F5599B0000
|
unkown
|
page readonly
|
|
|
|
7FF5CCAE8000
|
unkown
|
page readonly
|
|
|
|
7FF5DF766000
|
unkown
|
page readonly
|
|
|
|
1F559A7C000
|
unkown
|
page read and write
|
|
|
|
2CE6B013000
|
unkown
|
page read and write
|
|
|
|
1F559940000
|
heap private
|
page read and write
|
|
|
|
1F55A202000
|
unkown
|
page read and write
|
|
|
|
7FF5750EE000
|
unkown
|
page readonly
|
|
|
|
252D563D000
|
unkown
|
page read and write
|
|
|
|
96FFCFB000
|
unkown
|
page read and write
|
|
|
|
28141F70000
|
unkown
|
page write copy
|
|
|
|
7FF5E3D6B000
|
unkown
|
page readonly
|
|
|
|
252D58D0000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBF0000
|
unkown
|
page readonly
|
|
|
|
2CE6B900000
|
unkown
|
page read and write
|
|
|
|
28141F00000
|
heap private
|
page read and write
|
|
|
|
7FF531923000
|
unkown
|
page readonly
|
|
|
|
1C79E402000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC48000
|
unkown
|
page readonly
|
|
|
|
7FF574F13000
|
unkown
|
page readonly
|
|
|
|
7FF5CCA80000
|
unkown
|
page readonly
|
|
|
|
7FF574FF7000
|
unkown
|
page readonly
|
|
|
|
7FF4F363D000
|
unkown
|
page readonly
|
|
|
|
1F559A6C000
|
unkown
|
page read and write
|
|
|
|
21C25CB6000
|
unkown
|
page read and write
|
|
|
|
1F5599D0000
|
unkown
|
page read and write
|
|
|
|
28144164000
|
unkown
|
page read and write
|
|
|
|
7FF511EFA000
|
unkown
|
page readonly
|
|
|
|
7FF5DF8C2000
|
unkown
|
page readonly
|
|
|
|
2CE6B113000
|
unkown
|
page read and write
|
|
|
|
21C205C0000
|
unkown
|
page readonly
|
|
|
|
8F1795B000
|
unkown
|
page read and write
|
|
|
|
7FF4F358A000
|
unkown
|
page readonly
|
|
|
|
96802FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA66000
|
unkown
|
page readonly
|
|
|
|
7FF550970000
|
unkown
|
page readonly
|
|
|
|
7FF53188D000
|
unkown
|
page readonly
|
|
|
|
B8F557D000
|
unkown
|
page read and write
|
|
|
|
96FF7DE000
|
unkown
|
page read and write
|
|
|
|
28142200000
|
unkown
|
page readonly
|
|
|
|
7FF5319CB000
|
unkown
|
page readonly
|
|
|
|
7FF4F3610000
|
unkown
|
page readonly
|
|
|
|
27633C68000
|
unkown
|
page read and write
|
|
|
|
96FFEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5E3500000
|
unkown
|
page readonly
|
|
|
|
21C20C60000
|
unkown
|
page readonly
|
|
|
|
38745FF000
|
unkown
|
page read and write
|
|
|
|
1C79DDE0000
|
unkown
|
page readonly
|
|
|
|
21C208D0000
|
unkown
|
page readonly
|
|
|
|
7FF54E886000
|
unkown
|
page readonly
|
|
|
|
DFCF5FF000
|
unkown
|
page read and write
|
|
|
|
1F559A44000
|
unkown
|
page read and write
|
|
|
|
252D55C0000
|
heap default
|
page read and write
|
|
|
|
21C20690000
|
unkown
|
page read and write
|
|
|
|
7FF511F9B000
|
unkown
|
page readonly
|
|
|
|
2CE6B0CB000
|
unkown
|
page read and write
|
|
|
|
28142102000
|
unkown
|
page read and write
|
|
|
|
7FF5CCBDD000
|
unkown
|
page readonly
|
|
|
|
7FF5CCC27000
|
unkown
|
page readonly
|
|
|
|
7FF4F34F7000
|
unkown
|
page readonly
|
|
|
|
7FF54E7D8000
|
unkown
|
page readonly
|
|
|
|
DFCF2FC000
|
unkown
|
page read and write
|
|
|
|
7FF4F3533000
|
unkown
|
page readonly
|
|
|
|
3873FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5DF832000
|
unkown
|
page readonly
|
|
|
|
96FFDFE000
|
unkown
|
page read and write
|
|
|
|
7FF54E49D000
|
unkown
|
page readonly
|
|
|
|
7FF5CCD0D000
|
unkown
|
page readonly
|
|
|
|
7FF4F360B000
|
unkown
|
page readonly
|
|
|
|
7FF574F55000
|
unkown
|
page readonly
|
|
|
|
968007F000
|
unkown
|
page read and write
|
|
|
|
7FF4F3363000
|
unkown
|
page readonly
|
|
|
|
7FF54E76D000
|
unkown
|
page readonly
|
|
|
|
19BFF013000
|
unkown
|
page read and write
|
|
|
|
7FF54E87F000
|
unkown
|
page readonly
|
|
|
|
7FF5318E7000
|
unkown
|
page readonly
|
|
|
|
7FF5509A7000
|
unkown
|
page readonly
|
|
|
|
7FF5CC7DF000
|
unkown
|
page readonly
|
|
|
|
7FF511F80000
|
unkown
|
page readonly
|
|
|
|
2814411B000
|
unkown
|
page read and write
|
|
|
|
19BFF050000
|
unkown
|
page read and write
|
|
|
|
7FF574BC3000
|
unkown
|
page readonly
|
|
|
|
7FF4F321D000
|
unkown
|
page readonly
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
2CE6B03E000
|
unkown
|
page read and write
|
|
|
|
7FF5CCA1A000
|
unkown
|
page readonly
|
|
|
|
27633D13000
|
unkown
|
page read and write
|
|
|
|
27633B90000
|
heap private
|
page read and write
|
|
|
|
21C20800000
|
unkown
|
page readonly
|
|
|
|
21C20600000
|
unkown
|
page read and write
|
|
|
|
7FF4F34DF000
|
unkown
|
page readonly
|
|
|
|
7FF511EDD000
|
unkown
|
page readonly
|
|
|
|
252D5602000
|
unkown
|
page read and write
|
|
|
|
1C79DE54000
|
unkown
|
page read and write
|
|
|
|
96FFAF7000
|
unkown
|
page read and write
|
|
|
|
7FF4F322A000
|
unkown
|
page readonly
|
|
|
|
7FF511FAB000
|
unkown
|
page readonly
|
|
|
|
21C216D0000
|
unkown
|
page readonly
|
|
|
|
7FF5CC8A4000
|
unkown
|
page readonly
|
|
|
|
1C79DC30000
|
unkown
|
page readonly
|
|
|
|
21C20F58000
|
unkown
|
page read and write
|
|
|
|
21C25F60000
|
unkown
|
page read and write
|
|
|
|
1C79E000000
|
unkown
|
page readonly
|
|
|
|
7FF531890000
|
unkown
|
page readonly
|
|
|
|
C1E5B7E000
|
unkown
|
page read and write
|
|
|
|
3873F7E000
|
unkown
|
page read and write
|
|
|
|
27633C68000
|
unkown
|
page read and write
|
|
|
|
7FF5315AF000
|
unkown
|
page readonly
|
|
|
|
7FF5DF9B8000
|
unkown
|
page readonly
|
|
|
|
7FF5509E9000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA6B000
|
unkown
|
page readonly
|
|
|
|
7FF5317CE000
|
unkown
|
page readonly
|
|
|
|
7FF550A94000
|
unkown
|
page readonly
|
|
|
|
7FF5DFA9D000
|
unkown
|
page readonly
|
|
|
|
19BFF08A000
|
unkown
|
page read and write
|
|
|
|
1F559A02000
|
unkown
|
page read and write
|
|
|
|
21C25E21000
|
unkown
|
page read and write
|
|
|
|
28144100000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC00000
|
unkown
|
page readonly
|
|
|
|
7FF574EC3000
|
unkown
|
page readonly
|
|
|
|
2CE6B2D0000
|
unkown
|
page readonly
|
|
|
|
7AFC0FF000
|
unkown
|
page read and write
|
|
|
|
1F559CD0000
|
unkown
|
page readonly
|
|
|
|
19BFF113000
|
unkown
|
page read and write
|
|
|
|
7FF574EEE000
|
unkown
|
page readonly
|
|
|
|
1F559B02000
|
unkown
|
page read and write
|
|
|
|
2CE6B770000
|
unkown
|
page readonly
|
|
|
|
281420A5000
|
unkown
|
page read and write
|
|
|
|
21C25E0E000
|
unkown
|
page read and write
|
|
|
|
19BFF04B000
|
unkown
|
page read and write
|
|
|
|
216A5000000
|
unkown
|
page read and write
|
|
|
|
7FF4F362E000
|
unkown
|
page readonly
|
|
|
|
216A56B0000
|
unkown
|
page readonly
|
|
|
|
28142100000
|
unkown
|
page read and write
|
|
|
|
2CE6B06D000
|
unkown
|
page read and write
|
|
|
|
7FF5CCC5D000
|
unkown
|
page readonly
|
|
|
|
8F17D7A000
|
unkown
|
page read and write
|
|
|
|
96805FF000
|
unkown
|
page read and write
|
|
|
|
7FF5316E7000
|
unkown
|
page readonly
|
|
|
|
C52637F000
|
unkown
|
page read and write
|
|
|
|
1F559A64000
|
unkown
|
page read and write
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
216A5320000
|
unkown
|
page readonly
|
|
|
|
21C25A60000
|
unkown
|
page read and write
|
|
|
|
21C21710000
|
unkown
|
page readonly
|
|
|
|
B8F53FD000
|
unkown
|
page read and write
|
|
|
|
7FF575043000
|
unkown
|
page readonly
|
|
|
|
7FF4F342E000
|
unkown
|
page readonly
|
|
|
|
21C20678000
|
unkown
|
page read and write
|
|
|
|
7FF54E5BD000
|
unkown
|
page readonly
|
|
|
|
19BFF602000
|
unkown
|
page read and write
|
|
|
|
7FF5E3B3D000
|
unkown
|
page readonly
|
|
|
|
7FF511EF3000
|
unkown
|
page readonly
|
|
|
|
1F5599C0000
|
unkown
|
page readonly
|
|
|
|
7FF550AAF000
|
unkown
|
page readonly
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
2CE6B200000
|
unkown
|
page readonly
|
|
|
|
7FF54E8BB000
|
unkown
|
page readonly
|
|
|
|
7FF54E794000
|
unkown
|
page readonly
|
|
|
|
21C20F18000
|
unkown
|
page read and write
|
|
|
|
7FF4F363F000
|
unkown
|
page readonly
|
|
|
|
7FF550A68000
|
unkown
|
page readonly
|
|
|
|
B8F51FE000
|
unkown
|
page read and write
|
|
|
|
7FF54E823000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBE0000
|
unkown
|
page readonly
|
|
|
|
28A4F79000
|
unkown
|
page read and write
|
|
|
|
7FF54E7CC000
|
unkown
|
page readonly
|
|
|
|
7FF4F3583000
|
unkown
|
page readonly
|
|
|
|
7FF511C3A000
|
unkown
|
page readonly
|
|
|
|
216A4FC0000
|
heap default
|
page read and write
|
|
|
|
7FF5CCC04000
|
unkown
|
page readonly
|
|
|
|
21C25E00000
|
unkown
|
page read and write
|
|
|
|
7FF5DF2E4000
|
unkown
|
page readonly
|
|
|
|
7FF5750FF000
|
unkown
|
page readonly
|
|
|
|
28142029000
|
unkown
|
page read and write
|
|
|
|
7FF4F3537000
|
unkown
|
page readonly
|
|
|
|
7FF550A8D000
|
unkown
|
page readonly
|
|
|
|
1F559A00000
|
unkown
|
page read and write
|
|
|
|
7FF5DF9AC000
|
unkown
|
page readonly
|
|
|
|
1F559A73000
|
unkown
|
page read and write
|
|
|
|
28144200000
|
unkown
|
page readonly
|
|
|
|
7FF5315BD000
|
unkown
|
page readonly
|
|
|
|
7AFC3FE000
|
unkown
|
page read and write
|
|
|
|
21C205D0000
|
unkown
|
page read and write
|
|
|
|
7FF511FAF000
|
unkown
|
page readonly
|
|
|
|
7FF5318EC000
|
unkown
|
page readonly
|
|
|
|
7FF574F74000
|
unkown
|
page readonly
|
|
|
|
27633C6D000
|
unkown
|
page read and write
|
|
|
|
28143F40000
|
unkown
|
page readonly
|
|
|
|
28144102000
|
unkown
|
page read and write
|
|
|
|
216A5057000
|
unkown
|
page read and write
|
|
|
|
21C20F18000
|
unkown
|
page read and write
|
|
|
|
21C25EF7000
|
unkown
|
page readonly
|
|
|
|
21C25F50000
|
unkown
|
page read and write
|
|
|
|
21C25E20000
|
unkown
|
page read and write
|
|
|
|
7FF5DFA7D000
|
unkown
|
page readonly
|
|
|
|
276356E0000
|
unkown
|
page read and write
|
|
|
|
1F559A69000
|
unkown
|
page read and write
|
|
|
|
7FF4F3575000
|
unkown
|
page readonly
|
|
|
|
7FF550A6F000
|
unkown
|
page readonly
|
|
|
|
27633C13000
|
unkown
|
page read and write
|
|
|
|
7FF54E89D000
|
unkown
|
page readonly
|
|
|
|
21C20DF3000
|
unkown
|
page read and write
|
|
|
|
7FF54E5E5000
|
unkown
|
page readonly
|
|
|
|
7FF550A76000
|
unkown
|
page readonly
|
|
|
|
7FF5CC179000
|
unkown
|
page readonly
|
|
|
|
7FF5DF54F000
|
unkown
|
page readonly
|
|
|
|
1F559A6A000
|
unkown
|
page read and write
|
|
|
|
DFCF37E000
|
unkown
|
page read and write
|
|
|
|
7FF4F35FF000
|
unkown
|
page readonly
|
|
|
|
1F559A48000
|
unkown
|
page read and write
|
|
|
|
1F559A30000
|
unkown
|
page read and write
|
|
|
|
7FF5750E4000
|
unkown
|
page readonly
|
|
|
|
7FF5DF7EA000
|
unkown
|
page readonly
|
|
|
|
21C20F00000
|
unkown
|
page read and write
|
|
|
|
7FF5319C4000
|
unkown
|
page readonly
|
|
There are 813 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://tuoyieefdcxz.ru/skjdncjksdncjkewdcserfcds/14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV/?Key=14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV&rand=13InboxLightaspxn_14-01-202103-08-01pme3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855U1hrVFhCTjlrU3J2MHhWSXkTXBN9kSrv0xV_U1hrVFhCTjlrU3J2MHhW-&3e2753cd9a0ab6203622ba5a4b7371780a5f934e89c28a415b3c9bf7c56e5487
|
|