Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://894f2824690f4f688cb014399e893234.svc.dynamics.com/t/r/vb3XY_VLx7l-xHga3YHy8JRbFYUbDDzXt6qsDcUtzO0#covid19@rztienen.be
|
URL
|
initial url
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\1440d5b4-4c78-4e80-b45c-c838631a38b6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\84c90b8e-30aa-40d2-ada7-5b5d8107d0e5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0d35db51-bea6-4f7e-9913-e08fdc4f0cab.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\46d57de0-36c3-42a5-b88e-0b208529028e.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\730aebb4-3175-47eb-8228-184b1de90565.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\99577afc-55ca-45cc-8f67-c1becc9333fb.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0eab880a7eb32e9b_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3de03e4ace9be524_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a21476c205fe2897_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
PGP\011Secret Key -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
|
SQLite 3.x database, last written using SQLite version 3032001
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\806b53b5-432d-474e-8896-c81c2150adad.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\54c0d32b-b64d-4ac6-8909-bd7dffab1345.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b09a5045-8a95-40de-8ceb-32b319b4289c.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b835b65e-20f3-4464-8424-2379eda66ff8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c96f8aed-5a5f-4066-8092-f14b18ceded0.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\c0c6180b-b34b-4560-a1a9-42bd758beb95.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\8c825e67-be3d-4c50-b6e6-e9fd5310c7c4.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\9504e688-7584-419a-b709-0f96d2a78997.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\a48800a1-00ef-4cc9-8dda-04a634949a3f.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\c8db6bd9-836d-4cb1-86a7-19eadf8d4161.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\8c825e67-be3d-4c50-b6e6-e9fd5310c7c4.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_1022280208\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5152_281725821\c8db6bd9-836d-4cb1-86a7-19eadf8d4161.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
There are 156 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://894f2824690f4f688cb014399e893234.svc.dynamics.com/t/r/vb3XY_VLx7l-xHga3YHy8JRbFYUbDDzXt6qsDcUtzO0#covid19@rztienen.be'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,17904341760629683302,5698386004384518543,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1684 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/storage.html
|
|
||
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/?92a6281f-d6ba-4907-aeb5-a668ae5df160vU053dh2qESwbhSnief4OL_VfRFmzw6HgUoESwb_hSnief4OLVfRFm#://32273976467384105930.eu-gb.cf.appdomain.cloud/:903092a6281f-d6ba-4907-aeb5-a668ae5df160vU053dh2qESwbhSnief4OL_VfRFmzw6HgUoESwb_hSnief4OLVfRFm37784=w020--2u
|
|
||
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud/#covid19@rztienen.be
|
|
||
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/dest5.html
|
|
||
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/
|
unknown
|
|
|
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud
|
unknown
|
|
|
|
https://dns.google
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/?92a6281f-d6ba-4907-aeb5-a668ae5df160vU053dh2q
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloudh
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/storage.html
|
unknown
|
|
|
|
https://894f2824690f4f688cb014399e893234.svc.dynamics.com/t/r/vb3XY_VLx7l-xHga3YHy8JRbFYUbDDzXt6qsDc
|
unknown
|
|
|
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud/
|
unknown
|
|
|
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud/#covid19
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud
|
unknown
|
|
|
|
https://appdomain.cloud/
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud=5https://32273976467384105930.eu-gb.cf.appdoma
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/dest5.html
|
unknown
|
|
|
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud/perl/token/reactjs/?92a6281f-d6ba-4907-aeb5-a6
|
unknown
|
|
|
|
https://appdomain.cloud/(
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
There are 11 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
47410795723635106367.eu-gb.cf.appdomain.cloud
|
158.176.79.200
|
|
|
|
32273976467384105930.eu-gb.cf.appdomain.cloud
|
141.125.73.152
|
|
|
|
googlehosted.l.googleusercontent.com
|
172.217.23.33
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
894f2824690f4f688cb014399e893234.svc.dynamics.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
158.176.79.200
|
unknown
|
United States
|
unknown
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
unknown
|
|
|
|
141.125.73.152
|
unknown
|
United States
|
unknown
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
unknown
|
|
|
|
172.217.23.33
|
unknown
|
United States
|
unknown
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
There are 33 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5BB186000
|
unkown
|
page readonly
|
|
|
|
7FF591575000
|
unkown
|
page readonly
|
|
|
|
2177C602000
|
unkown
|
page read and write
|
|
|
|
234DDF32000
|
unkown
|
page read and write
|
|
|
|
BF6135B000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B17000
|
unkown
|
page readonly
|
|
|
|
2C3CD060000
|
unkown
|
page readonly
|
|
|
|
7FF529A38000
|
unkown
|
page readonly
|
|
|
|
7FF5D08B8000
|
unkown
|
page readonly
|
|
|
|
20C61330000
|
unkown
|
page read and write
|
|
|
|
270ED1C0000
|
unkown
|
page read and write
|
|
|
|
B0574FD000
|
unkown
|
page read and write
|
|
|
|
2C3CC990000
|
heap default
|
page read and write
|
|
|
|
7FF56745A000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D50000
|
unkown
|
page readonly
|
|
|
|
270ED1E0000
|
unkown
|
page readonly
|
|
|
|
CB7037E000
|
unkown
|
page read and write
|
|
|
|
270E7A73000
|
unkown
|
page read and write
|
|
|
|
7FF53AF86000
|
unkown
|
page readonly
|
|
|
|
8C9E5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B5C1B000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B7E000
|
unkown
|
page readonly
|
|
|
|
7FF567739000
|
unkown
|
page readonly
|
|
|
|
7FF528EEB000
|
unkown
|
page readonly
|
|
|
|
BF6177B000
|
unkown
|
page read and write
|
|
|
|
26665590000
|
unkown
|
page read and write
|
|
|
|
7FF5B5BDF000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A5C000
|
unkown
|
page readonly
|
|
|
|
7FF51122C000
|
unkown
|
page readonly
|
|
|
|
270ED054000
|
unkown
|
page read and write
|
|
|
|
2177BE3D000
|
unkown
|
page read and write
|
|
|
|
7FF5D0A5A000
|
unkown
|
page readonly
|
|
|
|
201BB380000
|
unkown
|
page readonly
|
|
|
|
270E8140000
|
unkown
|
page read and write
|
|
|
|
7FF54DBF6000
|
unkown
|
page readonly
|
|
|
|
1A282320000
|
unkown
|
page readonly
|
|
|
|
AE23BCB000
|
unkown
|
page read and write
|
|
|
|
BF61B7C000
|
unkown
|
page read and write
|
|
|
|
7FF591539000
|
unkown
|
page readonly
|
|
|
|
7FF567731000
|
unkown
|
page readonly
|
|
|
|
7FF544164000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DCC000
|
unkown
|
page readonly
|
|
|
|
A74A2FE000
|
unkown
|
page read and write
|
|
|
|
A74A3FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C34F2000
|
unkown
|
page readonly
|
|
|
|
1A282AA0000
|
unkown
|
page read and write
|
|
|
|
270E8E90000
|
unkown
|
page read and write
|
|
|
|
1F172320000
|
unkown
|
page readonly
|
|
|
|
7FF52999C000
|
unkown
|
page readonly
|
|
|
|
7FF59156C000
|
unkown
|
page readonly
|
|
|
|
1FB98C4B000
|
unkown
|
page read and write
|
|
|
|
7FF567630000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B89000
|
unkown
|
page readonly
|
|
|
|
1F1720C8000
|
unkown
|
page read and write
|
|
|
|
7FF5110B3000
|
unkown
|
page readonly
|
|
|
|
234DD63E000
|
unkown
|
page read and write
|
|
|
|
1F65F508000
|
unkown
|
page read and write
|
|
|
|
AE240FF000
|
unkown
|
page read and write
|
|
|
|
7FF53ABC7000
|
unkown
|
page readonly
|
|
|
|
1F173AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5112A9000
|
unkown
|
page readonly
|
|
|
|
2177BE13000
|
unkown
|
page read and write
|
|
|
|
7FF543F99000
|
unkown
|
page readonly
|
|
|
|
270ED190000
|
unkown
|
page read and write
|
|
|
|
270E7AA1000
|
unkown
|
page read and write
|
|
|
|
20C60C02000
|
unkown
|
page read and write
|
|
|
|
7FF52CC29000
|
unkown
|
page readonly
|
|
|
|
20C61402000
|
unkown
|
page read and write
|
|
|
|
8D2577B000
|
unkown
|
page read and write
|
|
|
|
7FF54414C000
|
unkown
|
page readonly
|
|
|
|
270E8358000
|
unkown
|
page read and write
|
|
|
|
7FF53AF71000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D7A000
|
unkown
|
page readonly
|
|
|
|
270E79E0000
|
unkown
|
page readonly
|
|
|
|
7FF54DBED000
|
unkown
|
page readonly
|
|
|
|
1F65F370000
|
heap default
|
page read and write
|
|
|
|
1F172000000
|
unkown
|
page read and write
|
|
|
|
AE245FE000
|
unkown
|
page read and write
|
|
|
|
87ED0FE000
|
unkown
|
page read and write
|
|
|
|
2177CB40000
|
unkown
|
page readonly
|
|
|
|
7FF543D98000
|
unkown
|
page readonly
|
|
|
|
7FF52CC5C000
|
unkown
|
page readonly
|
|
|
|
1F17207B000
|
heap default
|
page read and write
|
|
|
|
270E8318000
|
unkown
|
page read and write
|
|
|
|
7FF5C34ED000
|
unkown
|
page readonly
|
|
|
|
AE241FD000
|
unkown
|
page read and write
|
|
|
|
7FF544167000
|
unkown
|
page readonly
|
|
|
|
270ECEA0000
|
unkown
|
page read and write
|
|
|
|
2177BD90000
|
unkown
|
page read and write
|
|
|
|
7FF5D0978000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1EC000
|
unkown
|
page readonly
|
|
|
|
7FF54DC27000
|
unkown
|
page readonly
|
|
|
|
1F65F310000
|
heap private
|
page read and write
|
|
|
|
BF6167E000
|
unkown
|
page read and write
|
|
|
|
7FF543F88000
|
unkown
|
page readonly
|
|
|
|
7FF52CCD1000
|
unkown
|
page readonly
|
|
|
|
9E97BFD000
|
unkown
|
page read and write
|
|
|
|
1FB98B30000
|
heap default
|
page read and write
|
|
|
|
7FF5D0AD9000
|
unkown
|
page readonly
|
|
|
|
7FF53AF95000
|
unkown
|
page readonly
|
|
|
|
7FF53AF12000
|
unkown
|
page readonly
|
|
|
|
7048A7E000
|
unkown
|
page read and write
|
|
|
|
7FF5110E1000
|
unkown
|
page readonly
|
|
|
|
1A282310000
|
heap default
|
page read and write
|
|
|
|
7FF5C353E000
|
unkown
|
page readonly
|
|
|
|
2666503C000
|
unkown
|
page read and write
|
|
|
|
270E7A7B000
|
unkown
|
page read and write
|
|
|
|
2BBAC63A000
|
unkown
|
page read and write
|
|
|
|
7FF5C34E4000
|
unkown
|
page readonly
|
|
|
|
1F65F400000
|
unkown
|
page read and write
|
|
|
|
7FF5D0A98000
|
unkown
|
page readonly
|
|
|
|
7FF59152F000
|
unkown
|
page readonly
|
|
|
|
7FF5C2CDF000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D3C000
|
unkown
|
page readonly
|
|
|
|
7FF529A65000
|
unkown
|
page readonly
|
|
|
|
7FF5BB12A000
|
unkown
|
page readonly
|
|
|
|
7FF52CC3D000
|
unkown
|
page readonly
|
|
|
|
7FF54DA0F000
|
unkown
|
page readonly
|
|
|
|
270E7A90000
|
unkown
|
page read and write
|
|
|
|
7FF544131000
|
unkown
|
page readonly
|
|
|
|
201BB850000
|
unkown
|
page readonly
|
|
|
|
26664DD0000
|
heap private
|
page read and write
|
|
|
|
26665002000
|
unkown
|
page read and write
|
|
|
|
270E7A8C000
|
unkown
|
page read and write
|
|
|
|
270ED124000
|
unkown
|
page readonly
|
|
|
|
7FF5D0997000
|
unkown
|
page readonly
|
|
|
|
2BBAC410000
|
heap private
|
page read and write
|
|
|
|
270ED03E000
|
unkown
|
page read and write
|
|
|
|
7FF52C513000
|
unkown
|
page readonly
|
|
|
|
2BBAC570000
|
unkown
|
page read and write
|
|
|
|
BF61FFE000
|
unkown
|
page read and write
|
|
|
|
7FF59155C000
|
unkown
|
page readonly
|
|
|
|
1FB98C77000
|
unkown
|
page read and write
|
|
|
|
7FF54DBAA000
|
unkown
|
page readonly
|
|
|
|
AE242FF000
|
unkown
|
page read and write
|
|
|
|
7FF543EFC000
|
unkown
|
page readonly
|
|
|
|
7FF5910E0000
|
unkown
|
page readonly
|
|
|
|
26664E30000
|
heap default
|
page read and write
|
|
|
|
270ED2A7000
|
unkown
|
page read and write
|
|
|
|
270E8AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D95000
|
unkown
|
page readonly
|
|
|
|
7FF51107A000
|
unkown
|
page readonly
|
|
|
|
270E7A78000
|
unkown
|
page read and write
|
|
|
|
7FF543D05000
|
unkown
|
page readonly
|
|
|
|
8D2587F000
|
unkown
|
page read and write
|
|
|
|
7FF5440C2000
|
unkown
|
page readonly
|
|
|
|
7FF529B21000
|
unkown
|
page readonly
|
|
|
|
7FF5111E5000
|
unkown
|
page readonly
|
|
|
|
87ED07E000
|
unkown
|
page read and write
|
|
|
|
7FF59151E000
|
unkown
|
page readonly
|
|
|
|
BF61DFF000
|
unkown
|
page read and write
|
|
|
|
8D25D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5293B1000
|
unkown
|
page readonly
|
|
|
|
7FF5106CB000
|
unkown
|
page readonly
|
|
|
|
2BBAC600000
|
unkown
|
page read and write
|
|
|
|
2C3CCA29000
|
unkown
|
page read and write
|
|
|
|
7FF543966000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ABE000
|
unkown
|
page readonly
|
|
|
|
7FF5D0845000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DF7000
|
unkown
|
page readonly
|
|
|
|
2177BF02000
|
unkown
|
page read and write
|
|
|
|
201BB3DD000
|
unkown
|
page read and write
|
|
|
|
270E7A13000
|
unkown
|
page read and write
|
|
|
|
87ECFFD000
|
unkown
|
page read and write
|
|
|
|
7FF53B001000
|
unkown
|
page readonly
|
|
|
|
7FF5BB182000
|
unkown
|
page readonly
|
|
|
|
7FF5910F0000
|
unkown
|
page readonly
|
|
|
|
7FF543E85000
|
unkown
|
page readonly
|
|
|
|
7FF54DC81000
|
unkown
|
page readonly
|
|
|
|
234DD613000
|
unkown
|
page read and write
|
|
|
|
8C9E4FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D0AC5000
|
unkown
|
page readonly
|
|
|
|
8D2507C000
|
unkown
|
page read and write
|
|
|
|
201BB3FC000
|
heap default
|
page read and write
|
|
|
|
234DD600000
|
unkown
|
page read and write
|
|
|
|
7FF5676D7000
|
unkown
|
page readonly
|
|
|
|
270E7AFE000
|
unkown
|
page read and write
|
|
|
|
270ED200000
|
unkown
|
page read and write
|
|
|
|
7FF529A79000
|
unkown
|
page readonly
|
|
|
|
2177C000000
|
unkown
|
page readonly
|
|
|
|
7FF510D9A000
|
unkown
|
page readonly
|
|
|
|
7FF543E90000
|
unkown
|
page readonly
|
|
|
|
7FF54DB80000
|
unkown
|
page readonly
|
|
|
|
1FB9A710000
|
unkown
|
page write copy
|
|
|
|
7FF53B009000
|
unkown
|
page readonly
|
|
|
|
7FF529A9C000
|
unkown
|
page readonly
|
|
|
|
7FF52CCCE000
|
unkown
|
page readonly
|
|
|
|
7FF566B3C000
|
unkown
|
page readonly
|
|
|
|
26665800000
|
unkown
|
page readonly
|
|
|
|
7FF53AF6D000
|
unkown
|
page readonly
|
|
|
|
7FF543EEB000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A92000
|
unkown
|
page readonly
|
|
|
|
704867E000
|
unkown
|
page read and write
|
|
|
|
B057779000
|
unkown
|
page read and write
|
|
|
|
201BB390000
|
heap default
|
page read and write
|
|
|
|
1FB98BB0000
|
unkown
|
page read and write
|
|
|
|
BF61EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5915E9000
|
unkown
|
page readonly
|
|
|
|
1FB9A802000
|
unkown
|
page read and write
|
|
|
|
A749E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1C9000
|
unkown
|
page readonly
|
|
|
|
1F172070000
|
heap default
|
page read and write
|
|
|
|
7FF511226000
|
unkown
|
page readonly
|
|
|
|
8D257FF000
|
unkown
|
page read and write
|
|
|
|
7FF5BA6A2000
|
unkown
|
page readonly
|
|
|
|
7FF5BB188000
|
unkown
|
page readonly
|
|
|
|
26665113000
|
unkown
|
page read and write
|
|
|
|
7FF54DBFC000
|
unkown
|
page readonly
|
|
|
|
1FB98C49000
|
unkown
|
page read and write
|
|
|
|
7FF511247000
|
unkown
|
page readonly
|
|
|
|
2BBACB90000
|
unkown
|
page readonly
|
|
|
|
234DD470000
|
heap default
|
page read and write
|
|
|
|
7FF543E7E000
|
unkown
|
page readonly
|
|
|
|
26665102000
|
unkown
|
page read and write
|
|
|
|
7FF5B5C70000
|
unkown
|
page readonly
|
|
|
|
7FF54403C000
|
unkown
|
page readonly
|
|
|
|
7FF5BB168000
|
unkown
|
page readonly
|
|
|
|
A749B5B000
|
unkown
|
page read and write
|
|
|
|
7FF54DB82000
|
unkown
|
page readonly
|
|
|
|
20C60C51000
|
unkown
|
page read and write
|
|
|
|
7FF5BAFE0000
|
unkown
|
page readonly
|
|
|
|
7FF52C0E2000
|
unkown
|
page readonly
|
|
|
|
7FF543D5E000
|
unkown
|
page readonly
|
|
|
|
234DD6CD000
|
unkown
|
page read and write
|
|
|
|
7FF5C2952000
|
unkown
|
page readonly
|
|
|
|
7FF543A03000
|
unkown
|
page readonly
|
|
|
|
26665027000
|
unkown
|
page read and write
|
|
|
|
270ED24B000
|
unkown
|
page read and write
|
|
|
|
7FF54413C000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AF6000
|
unkown
|
page readonly
|
|
|
|
7FF51A23C000
|
unkown
|
page readonly
|
|
|
|
1A282502000
|
unkown
|
page read and write
|
|
|
|
7FF5BB131000
|
unkown
|
page readonly
|
|
|
|
704897F000
|
unkown
|
page read and write
|
|
|
|
7FF544136000
|
unkown
|
page readonly
|
|
|
|
7FF54DC89000
|
unkown
|
page readonly
|
|
|
|
7FF5C34C6000
|
unkown
|
page readonly
|
|
|
|
7FF54DBCF000
|
unkown
|
page readonly
|
|
|
|
BF618FF000
|
unkown
|
page read and write
|
|
|
|
270ED25D000
|
unkown
|
page read and write
|
|
|
|
201BB5E0000
|
unkown
|
page read and write
|
|
|
|
7FF5BB04A000
|
unkown
|
page readonly
|
|
|
|
7FF5441C0000
|
unkown
|
page readonly
|
|
|
|
1FB98C4A000
|
unkown
|
page read and write
|
|
|
|
270ED060000
|
unkown
|
page read and write
|
|
|
|
7FF5435FE000
|
unkown
|
page readonly
|
|
|
|
234DD688000
|
unkown
|
page read and write
|
|
|
|
270E8B10000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DD6000
|
unkown
|
page readonly
|
|
|
|
AE249FE000
|
unkown
|
page read and write
|
|
|
|
270E8130000
|
unkown
|
page read and write
|
|
|
|
1A282A60000
|
unkown
|
page readonly
|
|
|
|
7FF52CC15000
|
unkown
|
page readonly
|
|
|
|
7FF54D937000
|
unkown
|
page readonly
|
|
|
|
BF61BFB000
|
unkown
|
page read and write
|
|
|
|
7FF52C811000
|
unkown
|
page readonly
|
|
|
|
2C3CC9F0000
|
unkown
|
page readonly
|
|
|
|
7FF53AFA4000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A9A000
|
unkown
|
page readonly
|
|
|
|
270ED2B3000
|
unkown
|
page read and write
|
|
|
|
270E8E83000
|
unkown
|
page read and write
|
|
|
|
7FF5BB279000
|
unkown
|
page readonly
|
|
|
|
1F173AC0000
|
heap private
|
page read and write
|
|
|
|
7FF53AFA7000
|
unkown
|
page readonly
|
|
|
|
2BBAC550000
|
unkown
|
page readonly
|
|
|
|
7FF5112A9000
|
unkown
|
page readonly
|
|
|
|
CB70477000
|
unkown
|
page read and write
|
|
|
|
20C60BF0000
|
unkown
|
page readonly
|
|
|
|
7FF529A8D000
|
unkown
|
page readonly
|
|
|
|
7FF529937000
|
unkown
|
page readonly
|
|
|
|
1FB98BF0000
|
unkown
|
page read and write
|
|
|
|
8C9E19C000
|
unkown
|
page read and write
|
|
|
|
2C3CCA00000
|
unkown
|
page read and write
|
|
|
|
1FB9A670000
|
unkown
|
page read and write
|
|
|
|
7FF543F6E000
|
unkown
|
page readonly
|
|
|
|
234DD6C5000
|
unkown
|
page read and write
|
|
|
|
9E9797F000
|
unkown
|
page read and write
|
|
|
|
7FF591525000
|
unkown
|
page readonly
|
|
|
|
7FF54D09E000
|
unkown
|
page readonly
|
|
|
|
7FF51A23C000
|
unkown
|
page readonly
|
|
|
|
7FF5915DE000
|
unkown
|
page readonly
|
|
|
|
7FF53AF76000
|
unkown
|
page readonly
|
|
|
|
7FF5B5A2F000
|
unkown
|
page readonly
|
|
|
|
270E79D0000
|
heap default
|
page read and write
|
|
|
|
26665081000
|
unkown
|
page read and write
|
|
|
|
2177C800000
|
unkown
|
page readonly
|
|
|
|
7FF54DBBE000
|
unkown
|
page readonly
|
|
|
|
7FF511240000
|
unkown
|
page readonly
|
|
|
|
1FB98D18000
|
unkown
|
page read and write
|
|
|
|
1F65FE00000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DA9000
|
unkown
|
page readonly
|
|
|
|
1F172170000
|
unkown
|
page readonly
|
|
|
|
270E7A29000
|
unkown
|
page read and write
|
|
|
|
270E7A41000
|
unkown
|
page read and write
|
|
|
|
7FF543F90000
|
unkown
|
page readonly
|
|
|
|
7FF5BAEAE000
|
unkown
|
page readonly
|
|
|
|
7FF54DC24000
|
unkown
|
page readonly
|
|
|
|
7FF52CA25000
|
unkown
|
page readonly
|
|
|
|
2C3CCCD0000
|
unkown
|
page readonly
|
|
|
|
7FF5D07F3000
|
unkown
|
page readonly
|
|
|
|
201BBBE0000
|
unkown
|
page readonly
|
|
|
|
7FF5676C5000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1AE000
|
unkown
|
page readonly
|
|
|
|
7FF54DC20000
|
unkown
|
page readonly
|
|
|
|
704887F000
|
unkown
|
page read and write
|
|
|
|
201BB5A0000
|
unkown
|
page readonly
|
|
|
|
234DD480000
|
unkown
|
page readonly
|
|
|
|
B0575FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D0850000
|
unkown
|
page readonly
|
|
|
|
1FB9A6F0000
|
unkown
|
page readonly
|
|
|
|
26665000000
|
unkown
|
page read and write
|
|
|
|
20C60E00000
|
unkown
|
page readonly
|
|
|
|
270ED050000
|
unkown
|
page read and write
|
|
|
|
8C9E8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B0C000
|
unkown
|
page readonly
|
|
|
|
2177C390000
|
unkown
|
page readonly
|
|
|
|
2177BE5A000
|
unkown
|
page read and write
|
|
|
|
7FF544119000
|
unkown
|
page readonly
|
|
|
|
7FF5440A7000
|
unkown
|
page readonly
|
|
|
|
8D2547A000
|
unkown
|
page read and write
|
|
|
|
1FB98C13000
|
unkown
|
page read and write
|
|
|
|
8C9E6FB000
|
unkown
|
page read and write
|
|
|
|
8C9E47E000
|
unkown
|
page read and write
|
|
|
|
2177BE00000
|
unkown
|
page read and write
|
|
|
|
1F65F429000
|
unkown
|
page read and write
|
|
|
|
270ED137000
|
unkown
|
page write copy
|
|
|
|
1F1720C8000
|
unkown
|
page read and write
|
|
|
|
7FF54DC7E000
|
unkown
|
page readonly
|
|
|
|
1F65F48F000
|
unkown
|
page read and write
|
|
|
|
270ED1C0000
|
unkown
|
page read and write
|
|
|
|
1A282413000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1BF000
|
unkown
|
page readonly
|
|
|
|
270E8900000
|
unkown
|
page read and write
|
|
|
|
1F65F600000
|
unkown
|
page readonly
|
|
|
|
7FF53AF45000
|
unkown
|
page readonly
|
|
|
|
7FF52CCD9000
|
unkown
|
page readonly
|
|
|
|
1F65F450000
|
unkown
|
page read and write
|
|
|
|
26665013000
|
unkown
|
page read and write
|
|
|
|
7FF5D08F0000
|
unkown
|
page readonly
|
|
|
|
FE2E07E000
|
unkown
|
page read and write
|
|
|
|
7FF5298C3000
|
unkown
|
page readonly
|
|
|
|
7FF5B5BBE000
|
unkown
|
page readonly
|
|
|
|
7FF56766E000
|
unkown
|
page readonly
|
|
|
|
1F171F80000
|
unkown
|
page readonly
|
|
|
|
201BB3D5000
|
unkown
|
page read and write
|
|
|
|
270E8200000
|
unkown
|
page read and write
|
|
|
|
7FF53AF8C000
|
unkown
|
page readonly
|
|
|
|
270ED127000
|
unkown
|
page readonly
|
|
|
|
7FF52CCD9000
|
unkown
|
page readonly
|
|
|
|
7FF510FCA000
|
unkown
|
page readonly
|
|
|
|
270ED1C0000
|
unkown
|
page read and write
|
|
|
|
20C60C64000
|
unkown
|
page read and write
|
|
|
|
1FB98D13000
|
unkown
|
page read and write
|
|
|
|
7FF5C3485000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DC6000
|
unkown
|
page readonly
|
|
|
|
BF619FF000
|
unkown
|
page read and write
|
|
|
|
1F65FC02000
|
unkown
|
page read and write
|
|
|
|
1F1726B0000
|
unkown
|
page readonly
|
|
|
|
2BBAC629000
|
unkown
|
page read and write
|
|
|
|
7FF54410F000
|
unkown
|
page readonly
|
|
|
|
7FF544146000
|
unkown
|
page readonly
|
|
|
|
1FB98C5B000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DBD000
|
unkown
|
page readonly
|
|
|
|
7FF567648000
|
unkown
|
page readonly
|
|
|
|
7FF5111A0000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D52000
|
unkown
|
page readonly
|
|
|
|
7FF5B5C67000
|
unkown
|
page readonly
|
|
|
|
7FF591587000
|
unkown
|
page readonly
|
|
|
|
2C3CCA60000
|
unkown
|
page read and write
|
|
|
|
270ED150000
|
unkown
|
page read and write
|
|
|
|
7FF5C34BC000
|
unkown
|
page readonly
|
|
|
|
270ED140000
|
unkown
|
page read and write
|
|
|
|
2177BE66000
|
unkown
|
page read and write
|
|
|
|
7FF5913BA000
|
unkown
|
page readonly
|
|
|
|
7FF5914E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BADB5000
|
unkown
|
page readonly
|
|
|
|
7FF52C0E4000
|
unkown
|
page readonly
|
|
|
|
1FB98B50000
|
unkown
|
page readonly
|
|
|
|
7FF51106E000
|
unkown
|
page readonly
|
|
|
|
87ECEFE000
|
unkown
|
page read and write
|
|
|
|
270ED180000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B06000
|
unkown
|
page readonly
|
|
|
|
7FF5440C0000
|
unkown
|
page readonly
|
|
|
|
9E97AFF000
|
unkown
|
page read and write
|
|
|
|
270E7B02000
|
unkown
|
page read and write
|
|
|
|
BF61CFD000
|
unkown
|
page read and write
|
|
|
|
7FF5D0A96000
|
unkown
|
page readonly
|
|
|
|
270E7A96000
|
unkown
|
page read and write
|
|
|
|
CB702FB000
|
unkown
|
page read and write
|
|
|
|
2177BC90000
|
heap default
|
page read and write
|
|
|
|
234DD702000
|
unkown
|
page read and write
|
|
|
|
7FF543F2E000
|
unkown
|
page readonly
|
|
|
|
7FF54DBC5000
|
unkown
|
page readonly
|
|
|
|
1F173C10000
|
heap private
|
page read and write
|
|
|
|
270ED470000
|
unkown
|
page readonly
|
|
|
|
7FF510DA0000
|
unkown
|
page readonly
|
|
|
|
7FF53AF02000
|
unkown
|
page readonly
|
|
|
|
8D258FF000
|
unkown
|
page read and write
|
|
|
|
7FF5441C9000
|
unkown
|
page readonly
|
|
|
|
7FF5C33EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D07E4000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AAA000
|
unkown
|
page readonly
|
|
|
|
AE243FD000
|
unkown
|
page read and write
|
|
|
|
7FF5440AC000
|
unkown
|
page readonly
|
|
|
|
270ED28A000
|
unkown
|
page read and write
|
|
|
|
270E8302000
|
unkown
|
page read and write
|
|
|
|
270E7A58000
|
unkown
|
page read and write
|
|
|
|
2177BE88000
|
unkown
|
page read and write
|
|
|
|
1A282C02000
|
unkown
|
page read and write
|
|
|
|
2C3CCC00000
|
unkown
|
page readonly
|
|
|
|
1A282990000
|
unkown
|
page readonly
|
|
|
|
2C3CCA13000
|
unkown
|
page read and write
|
|
|
|
7FF5C3456000
|
unkown
|
page readonly
|
|
|
|
7FF5C34E7000
|
unkown
|
page readonly
|
|
|
|
7FF544077000
|
unkown
|
page readonly
|
|
|
|
7FF54DA28000
|
unkown
|
page readonly
|
|
|
|
D6D737F000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DF0000
|
unkown
|
page readonly
|
|
|
|
1F65F380000
|
unkown
|
page readonly
|
|
|
|
7FF54DA59000
|
unkown
|
page readonly
|
|
|
|
FE2DC7E000
|
unkown
|
page read and write
|
|
|
|
270ED20F000
|
unkown
|
page read and write
|
|
|
|
7048E7C000
|
unkown
|
page read and write
|
|
|
|
7FF54DC0C000
|
unkown
|
page readonly
|
|
|
|
7FF5676A6000
|
unkown
|
page readonly
|
|
|
|
7FF5C34B6000
|
unkown
|
page readonly
|
|
|
|
AE247FE000
|
unkown
|
page read and write
|
|
|
|
CB700FE000
|
unkown
|
page read and write
|
|
|
|
201BC2E0000
|
unkown
|
page read and write
|
|
|
|
1F65F48B000
|
unkown
|
page read and write
|
|
|
|
D6D6F5F000
|
unkown
|
page read and write
|
|
|
|
7FF5C345A000
|
unkown
|
page readonly
|
|
|
|
7FF54DB78000
|
unkown
|
page readonly
|
|
|
|
7FF5B5A32000
|
unkown
|
page readonly
|
|
|
|
7FF511098000
|
unkown
|
page readonly
|
|
|
|
2177BD80000
|
unkown
|
page readonly
|
|
|
|
7FF5914E2000
|
unkown
|
page readonly
|
|
|
|
270ED2AF000
|
unkown
|
page read and write
|
|
|
|
2C3CE8E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B5A41000
|
unkown
|
page readonly
|
|
|
|
7FF54DC89000
|
unkown
|
page readonly
|
|
|
|
7FF5441BE000
|
unkown
|
page readonly
|
|
|
|
270E7C00000
|
unkown
|
page readonly
|
|
|
|
7FF52CC56000
|
unkown
|
page readonly
|
|
|
|
2BBAC702000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DDC000
|
unkown
|
page readonly
|
|
|
|
7048C7C000
|
unkown
|
page read and write
|
|
|
|
270ED4B0000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1E1000
|
unkown
|
page readonly
|
|
|
|
26665200000
|
unkown
|
page readonly
|
|
|
|
2177BDB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C346A000
|
unkown
|
page readonly
|
|
|
|
7FF5440B8000
|
unkown
|
page readonly
|
|
|
|
1A282436000
|
unkown
|
page read and write
|
|
|
|
7FF53AF4F000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1B5000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AED000
|
unkown
|
page readonly
|
|
|
|
AE248FF000
|
unkown
|
page read and write
|
|
|
|
1F65F6D0000
|
unkown
|
page readonly
|
|
|
|
2BBAC800000
|
unkown
|
page readonly
|
|
|
|
8D250FE000
|
unkown
|
page read and write
|
|
|
|
26664F10000
|
unkown
|
page readonly
|
|
|
|
7FF5676BC000
|
unkown
|
page readonly
|
|
|
|
7FF5B5E50000
|
unkown
|
page readonly
|
|
|
|
270ED030000
|
unkown
|
page read and write
|
|
|
|
9E975AE000
|
unkown
|
page read and write
|
|
|
|
7FF5BB170000
|
unkown
|
page readonly
|
|
|
|
7FF5440D6000
|
unkown
|
page readonly
|
|
|
|
2C3CE570000
|
unkown
|
page readonly
|
|
|
|
7FF5C315C000
|
unkown
|
page readonly
|
|
|
|
7FF5B59C2000
|
unkown
|
page readonly
|
|
|
|
1FB98E00000
|
unkown
|
page readonly
|
|
|
|
20C60BD0000
|
heap default
|
page read and write
|
|
|
|
7FF567689000
|
unkown
|
page readonly
|
|
|
|
7FF5B5CD7000
|
unkown
|
page readonly
|
|
|
|
270E8300000
|
unkown
|
page read and write
|
|
|
|
7FF51129E000
|
unkown
|
page readonly
|
|
|
|
7FF54DB96000
|
unkown
|
page readonly
|
|
|
|
7FF52CAA9000
|
unkown
|
page readonly
|
|
|
|
7FF529A5E000
|
unkown
|
page readonly
|
|
|
|
7FF5D0ACF000
|
unkown
|
page readonly
|
|
|
|
7FF5676B6000
|
unkown
|
page readonly
|
|
|
|
7FF543DDC000
|
unkown
|
page readonly
|
|
|
|
7FF54DB5A000
|
unkown
|
page readonly
|
|
|
|
FE2DE7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B5E4E000
|
unkown
|
page readonly
|
|
|
|
201BB3DD000
|
unkown
|
page read and write
|
|
|
|
7FF5D0B20000
|
unkown
|
page readonly
|
|
|
|
20C60C3C000
|
unkown
|
page read and write
|
|
|
|
7FF566E1B000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B81000
|
unkown
|
page readonly
|
|
|
|
201BBCB0000
|
unkown
|
page readonly
|
|
|
|
1FB98C02000
|
unkown
|
page read and write
|
|
|
|
7FF5B5BF8000
|
unkown
|
page readonly
|
|
|
|
7FF511235000
|
unkown
|
page readonly
|
|
|
|
7FF529A36000
|
unkown
|
page readonly
|
|
|
|
7FF52CA78000
|
unkown
|
page readonly
|
|
|
|
7FF52CA03000
|
unkown
|
page readonly
|
|
|
|
7FF59145C000
|
unkown
|
page readonly
|
|
|
|
2BBAC470000
|
heap default
|
page read and write
|
|
|
|
201BC280000
|
unkown
|
page read and write
|
|
|
|
20C60D13000
|
unkown
|
page read and write
|
|
|
|
1F660140000
|
unkown
|
page readonly
|
|
|
|
AE23EFE000
|
unkown
|
page read and write
|
|
|
|
7FF5B5CE5000
|
unkown
|
page readonly
|
|
|
|
7FF54DB15000
|
unkown
|
page readonly
|
|
|
|
270E8AC0000
|
unkown
|
page readonly
|
|
|
|
7FF5C3549000
|
unkown
|
page readonly
|
|
|
|
270E7B13000
|
unkown
|
page read and write
|
|
|
|
7FF529A3A000
|
unkown
|
page readonly
|
|
|
|
7FF52CBC4000
|
unkown
|
page readonly
|
|
|
|
8D2517E000
|
unkown
|
page read and write
|
|
|
|
270ECF30000
|
unkown
|
page read and write
|
|
|
|
270ED29D000
|
unkown
|
page read and write
|
|
|
|
1FB98C5A000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1FC000
|
unkown
|
page readonly
|
|
|
|
270E8B00000
|
unkown
|
page readonly
|
|
|
|
9E979FE000
|
unkown
|
page read and write
|
|
|
|
87ECBBC000
|
unkown
|
page read and write
|
|
|
|
270ECF10000
|
unkown
|
page read and write
|
|
|
|
270ED285000
|
unkown
|
page read and write
|
|
|
|
7FF52CC46000
|
unkown
|
page readonly
|
|
|
|
2BBAC63D000
|
unkown
|
page read and write
|
|
|
|
7FF53AECB000
|
unkown
|
page readonly
|
|
|
|
7FF5111DE000
|
unkown
|
page readonly
|
|
|
|
7FF543D40000
|
unkown
|
page readonly
|
|
|
|
1A282429000
|
unkown
|
page read and write
|
|
|
|
7FF54D9EE000
|
unkown
|
page readonly
|
|
|
|
7FF52CA5F000
|
unkown
|
page readonly
|
|
|
|
234DD410000
|
heap private
|
page read and write
|
|
|
|
7FF52C815000
|
unkown
|
page readonly
|
|
|
|
7FF5B59BE000
|
unkown
|
page readonly
|
|
|
|
1A2822B0000
|
heap private
|
page read and write
|
|
|
|
1F65F502000
|
unkown
|
page read and write
|
|
|
|
1A282AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5D0993000
|
unkown
|
page readonly
|
|
|
|
D6D72F9000
|
unkown
|
page read and write
|
|
|
|
7FF5293B6000
|
unkown
|
page readonly
|
|
|
|
7FF543F4F000
|
unkown
|
page readonly
|
|
|
|
7FF5915E1000
|
unkown
|
page readonly
|
|
|
|
7FF52CBC8000
|
unkown
|
page readonly
|
|
|
|
7FF543E77000
|
unkown
|
page readonly
|
|
|
|
7FF5111CA000
|
unkown
|
page readonly
|
|
|
|
7FF591421000
|
unkown
|
page readonly
|
|
|
|
7FF543D57000
|
unkown
|
page readonly
|
|
|
|
8D2537C000
|
unkown
|
page read and write
|
|
|
|
7FF5913AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A37000
|
unkown
|
page readonly
|
|
|
|
1A282402000
|
unkown
|
page read and write
|
|
|
|
7FF5BB26E000
|
unkown
|
page readonly
|
|
|
|
7FF54D858000
|
unkown
|
page readonly
|
|
|
|
7FF567739000
|
unkown
|
page readonly
|
|
|
|
270ED400000
|
unkown
|
page readonly
|
|
|
|
1F65F3A0000
|
unkown
|
page read and write
|
|
|
|
7FF5111B6000
|
unkown
|
page readonly
|
|
|
|
B05757E000
|
unkown
|
page read and write
|
|
|
|
7FF5B5AA6000
|
unkown
|
page readonly
|
|
|
|
87ECF7E000
|
unkown
|
page read and write
|
|
|
|
7FF544035000
|
unkown
|
page readonly
|
|
|
|
1A282AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5BB205000
|
unkown
|
page readonly
|
|
|
|
270E8B20000
|
unkown
|
page readonly
|
|
|
|
1A282440000
|
unkown
|
page read and write
|
|
|
|
1FB98B60000
|
unkown
|
page read and write
|
|
|
|
9E97D7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B5E59000
|
unkown
|
page readonly
|
|
|
|
7FF5111EF000
|
unkown
|
page readonly
|
|
|
|
270ED060000
|
unkown
|
page read and write
|
|
|
|
7FF52CC77000
|
unkown
|
page readonly
|
|
|
|
7FF5C34B1000
|
unkown
|
page readonly
|
|
|
|
270ED490000
|
unkown
|
page readonly
|
|
|
|
7FF567675000
|
unkown
|
page readonly
|
|
|
|
87ED17C000
|
unkown
|
page read and write
|
|
|
|
2C3CCB02000
|
unkown
|
page read and write
|
|
|
|
2BBAC613000
|
unkown
|
page read and write
|
|
|
|
7FF52C87D000
|
unkown
|
page readonly
|
|
|
|
7FF56769D000
|
unkown
|
page readonly
|
|
|
|
20C60ED0000
|
unkown
|
page readonly
|
|
|
|
270E8060000
|
unkown
|
page readonly
|
|
|
|
234DD5A0000
|
unkown
|
page readonly
|
|
|
|
B057679000
|
unkown
|
page read and write
|
|
|
|
2C3CC930000
|
heap private
|
page read and write
|
|
|
|
7FF54D93E000
|
unkown
|
page readonly
|
|
|
|
7FF5440EA000
|
unkown
|
page readonly
|
|
|
|
2177BE2A000
|
unkown
|
page read and write
|
|
|
|
7FF54412D000
|
unkown
|
page readonly
|
|
|
|
7FF5910DA000
|
unkown
|
page readonly
|
|
|
|
201BB580000
|
unkown
|
page read and write
|
|
|
|
7FF5B5C7C000
|
unkown
|
page readonly
|
|
|
|
7FF54395A000
|
unkown
|
page readonly
|
|
|
|
2BBAC657000
|
unkown
|
page read and write
|
|
|
|
7FF529995000
|
unkown
|
page readonly
|
|
|
|
1FB98BF0000
|
unkown
|
page read and write
|
|
|
|
234DD624000
|
unkown
|
page read and write
|
|
|
|
26665029000
|
unkown
|
page read and write
|
|
|
|
7FF510DB0000
|
unkown
|
page readonly
|
|
|
|
7FF529AAC000
|
unkown
|
page readonly
|
|
|
|
7FF5BAE48000
|
unkown
|
page readonly
|
|
|
|
270ECEE0000
|
unkown
|
page readonly
|
|
|
|
270ECF20000
|
unkown
|
page read and write
|
|
|
|
7FF5B5D68000
|
unkown
|
page readonly
|
|
|
|
201BB398000
|
heap default
|
page read and write
|
|
|
|
7FF5C33F4000
|
unkown
|
page readonly
|
|
|
|
AE246FF000
|
unkown
|
page read and write
|
|
|
|
270E8AF0000
|
unkown
|
page readonly
|
|
|
|
20C60C00000
|
unkown
|
page read and write
|
|
|
|
2C3CCA02000
|
unkown
|
page read and write
|
|
|
|
7FF529AA6000
|
unkown
|
page readonly
|
|
|
|
7FF5914F2000
|
unkown
|
page readonly
|
|
|
|
1FB98C3D000
|
unkown
|
page read and write
|
|
|
|
7FF5B5D62000
|
unkown
|
page readonly
|
|
|
|
7FF543F7C000
|
unkown
|
page readonly
|
|
|
|
201BB639000
|
heap private
|
page read and write
|
|
|
|
7FF543605000
|
unkown
|
page readonly
|
|
|
|
201BC046000
|
unkown
|
page read and write
|
|
|
|
270ED1C0000
|
unkown
|
page readonly
|
|
|
|
7FF5914F6000
|
unkown
|
page readonly
|
|
|
|
7FF5C31C3000
|
unkown
|
page readonly
|
|
|
|
7FF591584000
|
unkown
|
page readonly
|
|
|
|
2177BE02000
|
unkown
|
page read and write
|
|
|
|
7FF5B5D9F000
|
unkown
|
page readonly
|
|
|
|
7FF56767F000
|
unkown
|
page readonly
|
|
|
|
270ED030000
|
unkown
|
page read and write
|
|
|
|
2BBACE02000
|
unkown
|
page read and write
|
|
|
|
1F173C80000
|
heap private
|
page read and write
|
|
|
|
201BB640000
|
unkown
|
page read and write
|
|
|
|
7FF5676D4000
|
unkown
|
page readonly
|
|
|
|
7FF5C34AD000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A3A000
|
unkown
|
page readonly
|
|
|
|
20C60C13000
|
unkown
|
page read and write
|
|
|
|
270ED220000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DE5000
|
unkown
|
page readonly
|
|
|
|
1F172030000
|
unkown
|
page readonly
|
|
|
|
7FF52CBD0000
|
unkown
|
page readonly
|
|
|
|
7FF5913F3000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B24000
|
unkown
|
page readonly
|
|
|
|
1FB98AD0000
|
heap private
|
page read and write
|
|
|
|
7FF5BB214000
|
unkown
|
page readonly
|
|
|
|
7FF5676D0000
|
unkown
|
page readonly
|
|
|
|
7FF544105000
|
unkown
|
page readonly
|
|
|
|
7FF543F08000
|
unkown
|
page readonly
|
|
|
|
7FF52CBD2000
|
unkown
|
page readonly
|
|
|
|
26665602000
|
unkown
|
page read and write
|
|
|
|
234DD6BC000
|
unkown
|
page read and write
|
|
|
|
9E974AB000
|
unkown
|
page read and write
|
|
|
|
7FF52CC0E000
|
unkown
|
page readonly
|
|
|
|
26664F20000
|
unkown
|
page readonly
|
|
|
|
7FF5BB1F6000
|
unkown
|
page readonly
|
|
|
|
7FF529953000
|
unkown
|
page readonly
|
|
|
|
7FF5112A1000
|
unkown
|
page readonly
|
|
|
|
1F172300000
|
unkown
|
page readonly
|
|
|
|
7FF591556000
|
unkown
|
page readonly
|
|
|
|
20C60C28000
|
unkown
|
page read and write
|
|
|
|
270ED070000
|
unkown
|
page read and write
|
|
|
|
1FB9A700000
|
unkown
|
page readonly
|
|
|
|
7FF51121C000
|
unkown
|
page readonly
|
|
|
|
7FF5C2950000
|
unkown
|
page readonly
|
|
|
|
7FF53AF00000
|
unkown
|
page readonly
|
|
|
|
7FF543E4C000
|
unkown
|
page readonly
|
|
|
|
1F65F390000
|
unkown
|
page readonly
|
|
|
|
7FF5913D8000
|
unkown
|
page readonly
|
|
|
|
7FF591427000
|
unkown
|
page readonly
|
|
|
|
1F65F413000
|
unkown
|
page read and write
|
|
|
|
7FF59154D000
|
unkown
|
page readonly
|
|
|
|
20C60D00000
|
unkown
|
page read and write
|
|
|
|
7FF529B29000
|
unkown
|
page readonly
|
|
|
|
1F173B80000
|
heap private
|
page read and write
|
|
|
|
234DD62A000
|
unkown
|
page read and write
|
|
|
|
8D25C7D000
|
unkown
|
page read and write
|
|
|
|
7FF5B5D66000
|
unkown
|
page readonly
|
|
|
|
7FF52C9A0000
|
unkown
|
page readonly
|
|
|
|
7FF52CBE2000
|
unkown
|
page readonly
|
|
|
|
270E8318000
|
unkown
|
page read and write
|
|
|
|
D6D6FDE000
|
unkown
|
page read and write
|
|
|
|
8D2597E000
|
unkown
|
page read and write
|
|
|
|
7FF5913AE000
|
unkown
|
page readonly
|
|
|
|
7FF5BB117000
|
unkown
|
page readonly
|
|
|
|
7FF5914F8000
|
unkown
|
page readonly
|
|
|
|
7FF511216000
|
unkown
|
page readonly
|
|
|
|
234DD6E5000
|
unkown
|
page read and write
|
|
|
|
7FF53AF3E000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B27000
|
unkown
|
page readonly
|
|
|
|
AE23FFA000
|
unkown
|
page read and write
|
|
|
|
1FB98D00000
|
unkown
|
page read and write
|
|
|
|
7FF5B5D2A000
|
unkown
|
page readonly
|
|
|
|
7FF544047000
|
unkown
|
page readonly
|
|
|
|
7FF528EF0000
|
unkown
|
page readonly
|
|
|
|
1F1720AC000
|
heap default
|
page read and write
|
|
|
|
1F171FE0000
|
unkown
|
page read and write
|
|
|
|
201BB620000
|
unkown
|
page read and write
|
|
|
|
1F172310000
|
heap private
|
page read and write
|
|
|
|
1FB98D02000
|
unkown
|
page read and write
|
|
|
|
1A2823F0000
|
unkown
|
page readonly
|
|
|
|
2C3CCA58000
|
unkown
|
page read and write
|
|
|
|
704877E000
|
unkown
|
page read and write
|
|
|
|
270E8501000
|
unkown
|
page read and write
|
|
|
|
8D259FF000
|
unkown
|
page read and write
|
|
|
|
20C60C68000
|
unkown
|
page read and write
|
|
|
|
1A282600000
|
unkown
|
page readonly
|
|
|
|
234DD66E000
|
unkown
|
page read and write
|
|
|
|
7FF5441C9000
|
unkown
|
page readonly
|
|
|
|
7FF51111C000
|
unkown
|
page readonly
|
|
|
|
9E9752E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB270000
|
unkown
|
page readonly
|
|
|
|
270E7A00000
|
unkown
|
page read and write
|
|
|
|
7FF54DB6C000
|
unkown
|
page readonly
|
|
|
|
AE244FF000
|
unkown
|
page read and write
|
|
|
|
A74A07B000
|
unkown
|
page read and write
|
|
|
|
7FF529A96000
|
unkown
|
page readonly
|
|
|
|
A74A1F7000
|
unkown
|
page read and write
|
|
|
|
2BBAC480000
|
unkown
|
page readonly
|
|
|
|
270E8313000
|
unkown
|
page read and write
|
|
|
|
7FF529B29000
|
unkown
|
page readonly
|
|
|
|
270E8215000
|
unkown
|
page read and write
|
|
|
|
7FF56772E000
|
unkown
|
page readonly
|
|
|
|
1F65F44D000
|
unkown
|
page read and write
|
|
|
|
7FF53B009000
|
unkown
|
page readonly
|
|
|
|
234DD570000
|
unkown
|
page read and write
|
|
|
|
1FB98C00000
|
unkown
|
page read and write
|
|
|
|
7FF5C33EE000
|
unkown
|
page readonly
|
|
|
|
AE23E7D000
|
unkown
|
page read and write
|
|
|
|
1A28245C000
|
unkown
|
page read and write
|
|
|
|
2666506F000
|
unkown
|
page read and write
|
|
|
|
1FB99260000
|
unkown
|
page readonly
|
|
|
|
201BC270000
|
unkown
|
page readonly
|
|
|
|
270ED104000
|
unkown
|
page readonly
|
|
|
|
7FF544160000
|
unkown
|
page readonly
|
|
|
|
270E7970000
|
heap private
|
page read and write
|
|
|
|
704833B000
|
unkown
|
page read and write
|
|
|
|
2177BF13000
|
unkown
|
page read and write
|
|
|
|
270E8359000
|
unkown
|
page read and write
|
|
|
|
270ED051000
|
unkown
|
page read and write
|
|
|
|
1F172020000
|
unkown
|
page readonly
|
|
|
|
270ED23E000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1DD000
|
unkown
|
page readonly
|
|
|
|
201BB3F0000
|
heap default
|
page read and write
|
|
|
|
201BC040000
|
unkown
|
page read and write
|
|
|
|
270E89E0000
|
unkown
|
page read and write
|
|
|
|
8D25B7C000
|
unkown
|
page read and write
|
|
|
|
87ECE7E000
|
unkown
|
page read and write
|
|
|
|
201BB5F0000
|
unkown
|
page read and write
|
|
|
|
7FF52CC4C000
|
unkown
|
page readonly
|
|
|
|
1FB98B80000
|
unkown
|
page read and write
|
|
|
|
2177BC30000
|
heap private
|
page read and write
|
|
|
|
2177BD70000
|
unkown
|
page readonly
|
|
|
|
20C61600000
|
unkown
|
page readonly
|
|
|
|
7FF51120D000
|
unkown
|
page readonly
|
|
|
|
7FF5C347E000
|
unkown
|
page readonly
|
|
|
|
7FF54DBD9000
|
unkown
|
page readonly
|
|
|
|
7FF5674BF000
|
unkown
|
page readonly
|
|
|
|
270ED100000
|
unkown
|
page write copy
|
|
|
|
7FF52C0F4000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D48000
|
unkown
|
page readonly
|
|
|
|
CB7007E000
|
unkown
|
page read and write
|
|
|
|
7FF529B1E000
|
unkown
|
page readonly
|
|
|
|
7FF5D07F7000
|
unkown
|
page readonly
|
|
|
|
7FF53AFFE000
|
unkown
|
page readonly
|
|
|
|
1FB98C66000
|
unkown
|
page read and write
|
|
|
|
7FF54DA48000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D8E000
|
unkown
|
page readonly
|
|
|
|
7FF53AC25000
|
unkown
|
page readonly
|
|
|
|
7FF51106A000
|
unkown
|
page readonly
|
|
|
|
7FF5BB127000
|
unkown
|
page readonly
|
|
|
|
7FF52CB65000
|
unkown
|
page readonly
|
|
|
|
1F65F513000
|
unkown
|
page read and write
|
|
|
|
270E79F0000
|
unkown
|
page readonly
|
|
|
|
7FF54DB98000
|
unkown
|
page readonly
|
|
|
|
1F65F471000
|
unkown
|
page read and write
|
|
|
|
270ED1D0000
|
unkown
|
page readonly
|
|
|
|
7FF5BADB1000
|
unkown
|
page readonly
|
|
|
|
FE2DCFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C31CC000
|
unkown
|
page readonly
|
|
|
|
1F172315000
|
heap private
|
page read and write
|
|
|
|
7FF54DB92000
|
unkown
|
page readonly
|
|
|
|
7FF5C34D5000
|
unkown
|
page readonly
|
|
|
|
7FF52CC1F000
|
unkown
|
page readonly
|
|
|
|
7FF5B5A8E000
|
unkown
|
page readonly
|
|
|
|
201BB320000
|
unkown
|
page read and write
|
|
|
|
7FF5915E9000
|
unkown
|
page readonly
|
|
|
|
1F173AD0000
|
unkown
|
page readonly
|
|
|
|
7FF51102F000
|
unkown
|
page readonly
|
|
|
|
1FB98C26000
|
unkown
|
page read and write
|
|
|
|
7FF5440FE000
|
unkown
|
page readonly
|
|
|
|
2BBAC631000
|
unkown
|
page read and write
|
|
|
|
7FF591580000
|
unkown
|
page readonly
|
|
|
|
2C3CCA40000
|
unkown
|
page read and write
|
|
|
|
7FF590A0B000
|
unkown
|
page readonly
|
|
|
|
270E8E80000
|
unkown
|
page read and write
|
|
|
|
7FF53ABC0000
|
unkown
|
page readonly
|
|
|
|
270ED074000
|
unkown
|
page read and write
|
|
|
|
8D2557E000
|
unkown
|
page read and write
|
|
|
|
8D25277000
|
unkown
|
page read and write
|
|
|
|
234DD550000
|
unkown
|
page readonly
|
|
|
|
1A282400000
|
unkown
|
page read and write
|
|
|
|
7FF53AED7000
|
unkown
|
page readonly
|
|
|
|
234DDB90000
|
unkown
|
page readonly
|
|
|
|
1FB98B40000
|
unkown
|
page readonly
|
|
|
|
7FF52CC74000
|
unkown
|
page readonly
|
|
|
|
7FF543F81000
|
unkown
|
page readonly
|
|
|
|
234DDF00000
|
unkown
|
page read and write
|
|
|
|
270E7CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5111B8000
|
unkown
|
page readonly
|
|
|
|
7FF59130A000
|
unkown
|
page readonly
|
|
|
|
270ED134000
|
unkown
|
page write copy
|
|
|
|
7FF5676AC000
|
unkown
|
page readonly
|
|
|
|
270ECE90000
|
unkown
|
page read and write
|
|
|
|
CB6FDCB000
|
unkown
|
page read and write
|
|
|
|
201BC290000
|
unkown
|
page read and write
|
|
|
|
7FF5C3440000
|
unkown
|
page readonly
|
|
|
|
7FF53ABD4000
|
unkown
|
page readonly
|
|
|
|
7FF53A3FC000
|
unkown
|
page readonly
|
|
|
|
7FF53A3D7000
|
unkown
|
page readonly
|
|
|
|
7FF5C3442000
|
unkown
|
page readonly
|
|
|
|
1FB9AA00000
|
unkown
|
page readonly
|
|
|
|
7FF5110E7000
|
unkown
|
page readonly
|
|
|
|
7FF5BB217000
|
unkown
|
page readonly
|
|
|
|
270E8AD0000
|
unkown
|
page readonly
|
|
|
|
7FF52CBE6000
|
unkown
|
page readonly
|
|
|
|
7048B7C000
|
unkown
|
page read and write
|
|
|
|
7FF5C3541000
|
unkown
|
page readonly
|
|
|
|
7FF5B5D5D000
|
unkown
|
page readonly
|
|
|
|
234DDC70000
|
unkown
|
page readonly
|
|
|
|
270ED160000
|
unkown
|
page read and write
|
|
|
|
2BBAC560000
|
unkown
|
page readonly
|
|
|
|
7FF591566000
|
unkown
|
page readonly
|
|
|
|
1A282A70000
|
unkown
|
page read and write
|
|
|
|
201BB630000
|
heap private
|
page read and write
|
|
|
|
2177BCA0000
|
unkown
|
page readonly
|
|
|
|
7FF5438AB000
|
unkown
|
page readonly
|
|
|
|
8C9E7FE000
|
unkown
|
page read and write
|
|
|
|
7FF5C3458000
|
unkown
|
page readonly
|
|
|
|
7FF543DCD000
|
unkown
|
page readonly
|
|
|
|
1F65F453000
|
unkown
|
page read and write
|
|
|
|
234DD5B0000
|
unkown
|
page write copy
|
|
|
|
B0576FE000
|
unkown
|
page read and write
|
|
|
|
BF613DD000
|
unkown
|
page read and write
|
|
|
|
270E8E61000
|
unkown
|
page read and write
|
|
|
|
7FF52CC72000
|
unkown
|
page readonly
|
|
|
|
7FF5110BD000
|
unkown
|
page readonly
|
|
|
|
FE2D98B000
|
unkown
|
page read and write
|
|
|
|
1FB98C2A000
|
unkown
|
page read and write
|
|
|
|
7FF5440D8000
|
unkown
|
page readonly
|
|
|
|
2BBAC602000
|
unkown
|
page read and write
|
|
|
|
270ED170000
|
unkown
|
page read and write
|
|
|
|
234DDE02000
|
unkown
|
page read and write
|
|
|
|
7FF53AF18000
|
unkown
|
page readonly
|
|
|
|
270ED480000
|
unkown
|
page read and write
|
|
|
|
7FF511244000
|
unkown
|
page readonly
|
|
|
|
7FF52CC65000
|
unkown
|
page readonly
|
|
|
|
234DD713000
|
unkown
|
page read and write
|
|
|
|
7FF53AF59000
|
unkown
|
page readonly
|
|
|
|
7FF52CA9A000
|
unkown
|
page readonly
|
|
|
|
20C61260000
|
unkown
|
page readonly
|
|
|
|
7FF53ABC3000
|
unkown
|
page readonly
|
|
|
|
7FF544081000
|
unkown
|
page readonly
|
|
|
|
7FF53AD8F000
|
unkown
|
page readonly
|
|
|
|
8D2567D000
|
unkown
|
page read and write
|
|
|
|
7FF5C34E0000
|
unkown
|
page readonly
|
|
|
|
7FF5111F9000
|
unkown
|
page readonly
|
|
|
|
7FF543D01000
|
unkown
|
page readonly
|
|
|
|
20C60D02000
|
unkown
|
page read and write
|
|
|
|
7FF5BB172000
|
unkown
|
page readonly
|
|
|
|
7FF5BB15C000
|
unkown
|
page readonly
|
|
|
|
201BB560000
|
unkown
|
page read and write
|
|
|
|
7FF5B5DC1000
|
unkown
|
page readonly
|
|
|
|
1F173D7F000
|
heap private
|
page read and write
|
|
|
|
1FB98BF0000
|
unkown
|
page read and write
|
|
|
|
7FF5B5279000
|
unkown
|
page readonly
|
|
|
|
7FF529AB5000
|
unkown
|
page readonly
|
|
|
|
B05747C000
|
unkown
|
page read and write
|
|
|
|
1F172097000
|
heap default
|
page read and write
|
|
|
|
270ED100000
|
unkown
|
page read and write
|
|
|
|
7048D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5BB1E6000
|
unkown
|
page readonly
|
|
|
|
7FF528EE0000
|
unkown
|
page readonly
|
|
|
|
2177BE6C000
|
unkown
|
page read and write
|
|
|
|
7FF52C46A000
|
unkown
|
page readonly
|
|
|
|
234DD560000
|
unkown
|
page readonly
|
|
|
|
9E97E7E000
|
unkown
|
page read and write
|
|
|
|
1FB98BF0000
|
unkown
|
page read and write
|
|
|
|
CB7057F000
|
unkown
|
page read and write
|
|
|
|
7FF54408B000
|
unkown
|
page readonly
|
|
|
|
9E97EFE000
|
unkown
|
page read and write
|
|
|
|
7FF59150A000
|
unkown
|
page readonly
|
|
|
|
1A282AA0000
|
unkown
|
page read and write
|
|
|
|
7FF567646000
|
unkown
|
page readonly
|
|
|
|
7FF5D08DA000
|
unkown
|
page readonly
|
|
|
|
7FF543DD6000
|
unkown
|
page readonly
|
|
|
|
7FF5D0AFC000
|
unkown
|
page readonly
|
|
|
|
1FB98ED0000
|
unkown
|
page readonly
|
|
|
|
7FF54D950000
|
unkown
|
page readonly
|
|
|
|
7FF5B5E59000
|
unkown
|
page readonly
|
|
|
|
7FF543DDF000
|
unkown
|
page readonly
|
|
|
|
7FF53AF7C000
|
unkown
|
page readonly
|
|
|
|
1F65F43C000
|
unkown
|
page read and write
|
|
|
|
7FF56765A000
|
unkown
|
page readonly
|
|
|
|
7FF5111B2000
|
unkown
|
page readonly
|
|
|
|
CB701FD000
|
unkown
|
page read and write
|
|
|
|
201BB3DD000
|
unkown
|
page read and write
|
|
|
|
1F172240000
|
unkown
|
page readonly
|
|
|
|
270E8202000
|
unkown
|
page read and write
|
|
|
|
20C60BE0000
|
unkown
|
page readonly
|
|
|
|
A74A0FF000
|
unkown
|
page read and write
|
|
|
|
26664FF0000
|
unkown
|
page readonly
|
|
|
|
1FB98C59000
|
unkown
|
page read and write
|
|
|
|
7FF5C3549000
|
unkown
|
page readonly
|
|
|
|
7FF54D945000
|
unkown
|
page readonly
|
|
|
|
20C60B70000
|
heap private
|
page read and write
|
|
|
|
7FF59136F000
|
unkown
|
page readonly
|
|
|
|
7FF5D0A41000
|
unkown
|
page readonly
|
|
|
|
7FF52C995000
|
unkown
|
page readonly
|
|
|
|
2C3CC9A0000
|
unkown
|
page write copy
|
|
|
|
234DE000000
|
unkown
|
page readonly
|
|
|
|
7FF5BB279000
|
unkown
|
page readonly
|
|
|
|
7FF5C3499000
|
unkown
|
page readonly
|
|
|
|
BF61A7C000
|
unkown
|
page read and write
|
|
|
|
20C60C79000
|
unkown
|
page read and write
|
|
|
|
2BBAC683000
|
unkown
|
page read and write
|
|
|
|
7FF5111A2000
|
unkown
|
page readonly
|
|
|
|
CB7067E000
|
unkown
|
page read and write
|
|
|
|
7FF544097000
|
unkown
|
page readonly
|
|
|
|
7FF5B5DF4000
|
unkown
|
page readonly
|
|
|
|
270ED038000
|
unkown
|
page read and write
|
|
|
|
FE2E17E000
|
unkown
|
page read and write
|
|
|
|
7FF5D08B4000
|
unkown
|
page readonly
|
|
|
|
8D25A7E000
|
unkown
|
page read and write
|
|
|
|
201BB600000
|
unkown
|
page read and write
|
|
|
|
270ED22E000
|
unkown
|
page read and write
|
|
|
|
26664E40000
|
unkown
|
page readonly
|
|
|
|
1F65F500000
|
unkown
|
page read and write
|
|
|
|
D6D727A000
|
unkown
|
page read and write
|
|
|
|
FE2DF7F000
|
unkown
|
page read and write
|
|
|
|
270ED29B000
|
unkown
|
page read and write
|
|
|
|
7FF52CA40000
|
unkown
|
page readonly
|
|
|
|
7FF52C93D000
|
unkown
|
page readonly
|
|
|
|
7FF52CAE7000
|
unkown
|
page readonly
|
|
|
|
234DD800000
|
unkown
|
page readonly
|
|
|
|
2C3CE470000
|
unkown
|
page read and write
|
|
|
|
7FF544061000
|
unkown
|
page readonly
|
|
|
|
A749BDE000
|
unkown
|
page read and write
|
|
|
|
7FF5440A3000
|
unkown
|
page readonly
|
|
|
|
7FF5D0B89000
|
unkown
|
page readonly
|
|
|
|
270ED262000
|
unkown
|
page read and write
|
|
|
|
201BB490000
|
unkown
|
page readonly
|
|
|
|
A749F75000
|
unkown
|
page read and write
|
|
|
|
D6D6EDB000
|
unkown
|
page read and write
|
|
|
|
201BB635000
|
heap private
|
page read and write
|
|
|
|
7FF5B5CCC000
|
unkown
|
page readonly
|
|
|
|
7FF5C34CC000
|
unkown
|
page readonly
|
|
|
|
7FF544155000
|
unkown
|
page readonly
|
|
|
|
26665078000
|
unkown
|
page read and write
|
|
|
|
7FF5440D2000
|
unkown
|
page readonly
|
|
|
|
7FF54DC06000
|
unkown
|
page readonly
|
|
|
|
7FF52CBE8000
|
unkown
|
page readonly
|
|
|
|
7FF5435F4000
|
unkown
|
page readonly
|
|
|
|
70483BD000
|
unkown
|
page read and write
|
|
|
|
7FF54DC15000
|
unkown
|
page readonly
|
|
|
|
9E97C7E000
|
unkown
|
page read and write
|
|
There are 948 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/?92a6281f-d6ba-4907-aeb5-a668ae5df160vU053dh2qESwbhSnief4OL_VfRFmzw6HgUoESwb_hSnief4OLVfRFm#://32273976467384105930.eu-gb.cf.appdomain.cloud/:903092a6281f-d6ba-4907-aeb5-a668ae5df160vU053dh2qESwbhSnief4OL_VfRFmzw6HgUoESwb_hSnief4OLVfRFm37784=w020--2u
|
|
|
|
https://32273976467384105930.eu-gb.cf.appdomain.cloud/#covid19@rztienen.be
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/dest5.html
|
|
|
|
https://47410795723635106367.eu-gb.cf.appdomain.cloud/css/storage.html
|
|