Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%2fd%2fe%2f2PACX%2d1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ%5fUPOxYmoLJIZ9VMR7vP%5fJ8ndmrPjRlbE1II4lR%5fGR0kBskRfp%2fpub&umid=91df453f-7d8a-446f-ab1f-9a0d407c6e2a&auth=856bdeb49c24cf1ed4617ec0d03b4215d922f93f-c278dd7c29525280d7eaed20a631067b0f3958c1
|
URL
|
initial url
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\094a62ab-1f42-4b6e-8612-a63a31f5d0b5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\590ad95b-0437-4a87-bde0-a11663b5dbc6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\69a92cea-48da-4fe6-9ea0-2636056c2f76.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\9da7fd04-607e-45cd-a625-806dd3cba80c.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\9ff0bcfe-d683-463c-9241-9b34a620087e.tmp
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\003e378c-b852-4ee2-8b5e-a531710d5e77.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\241a28d0-afa4-430b-94e4-7f84155b1518.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\367af831-100c-4201-9c58-27c996d56f83.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\37c60904-104f-4c74-b7ce-bd79aaa8f6b5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\52da9c47-7700-40af-a782-c202c922ede5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6822495d-5cd5-41cd-bb9d-8658f96e4929.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\96d62dc5-0083-4d8a-babc-0a5ffd2844e5.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9c5f8060-b559-4e69-9cd0-7254adc19085.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\324194875fe803e7_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\409ffab2e5f6fb9d_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\582e01ede6ef92b8_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\764803163018ae44_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5fd096bb5d96f3a_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ffc08c007b335770_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\90565704-ed9f-4196-aeb1-4a89eb7c05df.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\952125e6-7166-4586-81f7-a71e1eb3ed71.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ae695731-5a5d-476c-b953-416d4f19a2c9.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d4cea2ea-c79f-4a30-ac3a-343b2f26b85a.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ebab8e34-abae-45b4-b99b-d27a81f42e7f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f4964043-f852-48bf-a178-ffbc8ab3e6ac.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\a2cfdc6c-ea91-44b4-a082-ebfe84ac6684.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\bacdb599-5df3-4dc4-b5ea-e04efd1b7272.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\df8a86be-537a-4059-a5a4-4161848828c8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\973ed0a7-7dd9-433d-b058-321b32d0d1ef.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\aa61f7c8-2268-4e70-88e9-335e74202e59.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ace7ba60-63a1-4b37-8fa1-178d8b76dc3e.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\f3a56190-eabb-4817-9e10-296ac20ea460.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_179185434\aa61f7c8-2268-4e70-88e9-335e74202e59.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir4652_1807218361\f3a56190-eabb-4817-9e10-296ac20ea460.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
There are 172 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized 'https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.google.com%2fdocument%2fd%2fe%2f2PACX%2d1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ%5fUPOxYmoLJIZ9VMR7vP%5fJ8ndmrPjRlbE1II4lR%5fGR0kBskRfp%2fpub&umid=91df453f-7d8a-446f-ab1f-9a0d407c6e2a&auth=856bdeb49c24cf1ed4617ec0d03b4215d922f93f-c278dd7c29525280d7eaed20a631067b0f3958c1'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1720 /prefetch:8
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1556,9736340777240011786,4923958291497694449,131072
--lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=5492 /prefetch:8
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService
--field-trial-handle=1556,9736340777240011786,4923958291497694449,131072 --lang=en-US --service-sandbox-type=video_capture
--enable-audio-service-sandbox --mojo-platform-channel-handle=5412 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://dns.google
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://risemove.com/.manage/tracking_34598451605Z
|
unknown
|
|
|
|
https://risemove.com/.manage/tracking_34598451605k
|
unknown
|
|
|
|
https://risemove.com/.manage/tracking_34598451605
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
risemove.com
|
162.241.65.242
|
|
|
|
ctp.wtp.trendmicro.com
|
34.218.143.206
|
|
|
|
googlehosted.l.googleusercontent.com
|
172.217.168.65
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
smex-ctp.trendmicro.com
|
unknown
|
|
|
|
accounts.youtube.com
|
unknown
|
|
|
|
lh4.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
34.218.143.206
|
ctp.wtp.trendmicro.com
|
United States
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
172.217.168.33
|
unknown
|
United States
|
|
|
|
172.217.168.65
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
|
|
162.241.65.242
|
risemove.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Version
|
|
There are 38 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1D316E7D000
|
unkown
|
page read and write
|
|
|
|
18B856C0000
|
unkown
|
page readonly
|
|
|
|
2607FA00000
|
heap default
|
page read and write
|
|
|
|
22354802000
|
unkown
|
page read and write
|
|
|
|
18B89C40000
|
unkown
|
page read and write
|
|
|
|
7FF547D5C000
|
unkown
|
page readonly
|
|
|
|
2607FC29000
|
unkown
|
page read and write
|
|
|
|
7FF547EA8000
|
unkown
|
page readonly
|
|
|
|
7FF58E6DD000
|
unkown
|
page readonly
|
|
|
|
7FF58487C000
|
unkown
|
page readonly
|
|
|
|
1709E1E0000
|
unkown
|
page readonly
|
|
|
|
26BD9A50000
|
unkown
|
page read and write
|
|
|
|
18B89D70000
|
unkown
|
page readonly
|
|
|
|
26BDA002000
|
unkown
|
page read and write
|
|
|
|
2607FBC0000
|
unkown
|
page readonly
|
|
|
|
7FF58BE0B000
|
unkown
|
page readonly
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
18B8467B000
|
unkown
|
page read and write
|
|
|
|
7FF525A72000
|
unkown
|
page readonly
|
|
|
|
7FF5813DF000
|
unkown
|
page readonly
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
225F9FE0000
|
unkown
|
page readonly
|
|
|
|
A96857E000
|
unkown
|
page read and write
|
|
|
|
18B89C10000
|
unkown
|
page read and write
|
|
|
|
225FA029000
|
unkown
|
page read and write
|
|
|
|
18B85720000
|
unkown
|
page readonly
|
|
|
|
18B85710000
|
unkown
|
page readonly
|
|
|
|
7FF584888000
|
unkown
|
page readonly
|
|
|
|
7FF51E584000
|
unkown
|
page readonly
|
|
|
|
255ED7E000
|
unkown
|
page read and write
|
|
|
|
7FF547EB8000
|
unkown
|
page readonly
|
|
|
|
7FF58044A000
|
unkown
|
page readonly
|
|
|
|
18B845F0000
|
unkown
|
page read and write
|
|
|
|
7FF525E8F000
|
unkown
|
page readonly
|
|
|
|
18B84629000
|
unkown
|
page read and write
|
|
|
|
F9EC27E000
|
unkown
|
page read and write
|
|
|
|
7FF51F265000
|
unkown
|
page readonly
|
|
|
|
22144800000
|
unkown
|
page read and write
|
|
|
|
7FF5804B8000
|
unkown
|
page readonly
|
|
|
|
26BD9A8E000
|
unkown
|
page read and write
|
|
|
|
2607FD02000
|
unkown
|
page read and write
|
|
|
|
806B17A000
|
unkown
|
page read and write
|
|
|
|
7FF575AA1000
|
unkown
|
page readonly
|
|
|
|
7FF58B946000
|
unkown
|
page readonly
|
|
|
|
7FF547366000
|
unkown
|
page readonly
|
|
|
|
18B85700000
|
unkown
|
page readonly
|
|
|
|
7FF51EFB6000
|
unkown
|
page readonly
|
|
|
|
7FF5802C5000
|
unkown
|
page readonly
|
|
|
|
7FF51E65A000
|
unkown
|
page readonly
|
|
|
|
18B89A90000
|
unkown
|
page read and write
|
|
|
|
1B4B4F90000
|
unkown
|
page readonly
|
|
|
|
7FF51F048000
|
unkown
|
page readonly
|
|
|
|
7FF547E8C000
|
unkown
|
page readonly
|
|
|
|
18B8A070000
|
unkown
|
page readonly
|
|
|
|
1CC98C40000
|
unkown
|
page readonly
|
|
|
|
7FF58BC0E000
|
unkown
|
page readonly
|
|
|
|
D744F7E000
|
unkown
|
page read and write
|
|
|
|
18B89C34000
|
unkown
|
page read and write
|
|
|
|
7FF58E9DF000
|
unkown
|
page readonly
|
|
|
|
22354A50000
|
unkown
|
page read and write
|
|
|
|
18B89E48000
|
unkown
|
page read and write
|
|
|
|
F9EC07E000
|
unkown
|
page read and write
|
|
|
|
7FF58BE2E000
|
unkown
|
page readonly
|
|
|
|
1B4B49A0000
|
unkown
|
page readonly
|
|
|
|
F9EBF7F000
|
unkown
|
page read and write
|
|
|
|
7FF512FDD000
|
unkown
|
page readonly
|
|
|
|
1D316CE0000
|
heap private
|
page read and write
|
|
|
|
D74547F000
|
unkown
|
page read and write
|
|
|
|
1B4B4A28000
|
unkown
|
page read and write
|
|
|
|
2235491B000
|
unkown
|
page read and write
|
|
|
|
1709E400000
|
unkown
|
page readonly
|
|
|
|
18B89EC8000
|
unkown
|
page read and write
|
|
|
|
7FF51F2BF000
|
unkown
|
page readonly
|
|
|
|
7FF547F9B000
|
unkown
|
page readonly
|
|
|
|
7FF525E7B000
|
unkown
|
page readonly
|
|
|
|
1995C6A0000
|
unkown
|
page readonly
|
|
|
|
AE5207E000
|
unkown
|
page read and write
|
|
|
|
7FF584510000
|
unkown
|
page readonly
|
|
|
|
7FF525E6D000
|
unkown
|
page readonly
|
|
|
|
7FF547F84000
|
unkown
|
page readonly
|
|
|
|
7FF51F2FF000
|
unkown
|
page readonly
|
|
|
|
1D316E3D000
|
unkown
|
page read and write
|
|
|
|
286A3CC5000
|
unkown
|
page read and write
|
|
|
|
7FF575A7D000
|
unkown
|
page readonly
|
|
|
|
18B89E30000
|
unkown
|
page read and write
|
|
|
|
7FF4FABEF000
|
unkown
|
page readonly
|
|
|
|
255E37A000
|
unkown
|
page read and write
|
|
|
|
7FF547D32000
|
unkown
|
page readonly
|
|
|
|
18B89CF4000
|
unkown
|
page readonly
|
|
|
|
286A3B10000
|
unkown
|
page readonly
|
|
|
|
7FF547B05000
|
unkown
|
page readonly
|
|
|
|
26BD9A28000
|
unkown
|
page read and write
|
|
|
|
22352A29000
|
unkown
|
page read and write
|
|
|
|
7FF51E628000
|
unkown
|
page readonly
|
|
|
|
948BBF9000
|
unkown
|
page read and write
|
|
|
|
1CC97370000
|
heap private
|
page read and write
|
|
|
|
286A3BF0000
|
unkown
|
page read and write
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
18B84F59000
|
unkown
|
page read and write
|
|
|
|
18B89AF0000
|
unkown
|
page read and write
|
|
|
|
1CC98F70000
|
heap private
|
page read and write
|
|
|
|
225FA2D0000
|
unkown
|
page readonly
|
|
|
|
7FF580570000
|
unkown
|
page readonly
|
|
|
|
7FF58120E000
|
unkown
|
page readonly
|
|
|
|
18B89DB0000
|
unkown
|
page readonly
|
|
|
|
7FF547F58000
|
unkown
|
page readonly
|
|
|
|
D74567F000
|
unkown
|
page read and write
|
|
|
|
7FF58485C000
|
unkown
|
page readonly
|
|
|
|
7FF58134D000
|
unkown
|
page readonly
|
|
|
|
54981FE000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB95000
|
unkown
|
page readonly
|
|
|
|
1995AE00000
|
unkown
|
page readonly
|
|
|
|
1D316E29000
|
unkown
|
page read and write
|
|
|
|
7FF547ED9000
|
unkown
|
page readonly
|
|
|
|
D74507F000
|
unkown
|
page read and write
|
|
|
|
22352A43000
|
unkown
|
page read and write
|
|
|
|
286A3A20000
|
heap default
|
page read and write
|
|
|
|
1B4B4850000
|
heap private
|
page read and write
|
|
|
|
18B84672000
|
unkown
|
page read and write
|
|
|
|
7FF51E4A2000
|
unkown
|
page readonly
|
|
|
|
22144869000
|
unkown
|
page read and write
|
|
|
|
7FF58BD2C000
|
unkown
|
page readonly
|
|
|
|
7FF51E70F000
|
unkown
|
page readonly
|
|
|
|
7FF51E6FE000
|
unkown
|
page readonly
|
|
|
|
7FF525E48000
|
unkown
|
page readonly
|
|
|
|
7FF512B79000
|
unkown
|
page readonly
|
|
|
|
7FF51E6CF000
|
unkown
|
page readonly
|
|
|
|
7FF51307B000
|
unkown
|
page readonly
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
22144C00000
|
unkown
|
page readonly
|
|
|
|
D744CFD000
|
unkown
|
page read and write
|
|
|
|
7FF58BDA5000
|
unkown
|
page readonly
|
|
|
|
1D316E32000
|
unkown
|
page read and write
|
|
|
|
7FF547F7D000
|
unkown
|
page readonly
|
|
|
|
7FF5803AD000
|
unkown
|
page readonly
|
|
|
|
18B84F59000
|
unkown
|
page read and write
|
|
|
|
7FF575C23000
|
unkown
|
page readonly
|
|
|
|
7FF512FFA000
|
unkown
|
page readonly
|
|
|
|
7FF58018A000
|
unkown
|
page readonly
|
|
|
|
18B84F13000
|
unkown
|
page read and write
|
|
|
|
7FF58BB8D000
|
unkown
|
page readonly
|
|
|
|
18B84F02000
|
unkown
|
page read and write
|
|
|
|
7FF58E8B4000
|
unkown
|
page readonly
|
|
|
|
7FF58B9A5000
|
unkown
|
page readonly
|
|
|
|
7FF58493B000
|
unkown
|
page readonly
|
|
|
|
7FF547F66000
|
unkown
|
page readonly
|
|
|
|
1D316E58000
|
unkown
|
page read and write
|
|
|
|
26080210000
|
unkown
|
page readonly
|
|
|
|
1B4B48C0000
|
unkown
|
page readonly
|
|
|
|
7FF512FBC000
|
unkown
|
page readonly
|
|
|
|
18B89C18000
|
unkown
|
page read and write
|
|
|
|
223529B0000
|
unkown
|
page readonly
|
|
|
|
7FF51E5FC000
|
unkown
|
page readonly
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
7FF5845FA000
|
unkown
|
page readonly
|
|
|
|
153DC7E000
|
unkown
|
page read and write
|
|
|
|
286A3A30000
|
unkown
|
page readonly
|
|
|
|
286A39C0000
|
heap private
|
page read and write
|
|
|
|
7FF525D3D000
|
unkown
|
page readonly
|
|
|
|
26BD9A22000
|
unkown
|
page read and write
|
|
|
|
286A3D13000
|
unkown
|
page read and write
|
|
|
|
1CC9906F000
|
heap private
|
page read and write
|
|
|
|
A967FEE000
|
unkown
|
page read and write
|
|
|
|
7FF58493E000
|
unkown
|
page readonly
|
|
|
|
18B84800000
|
unkown
|
page readonly
|
|
|
|
286A3D02000
|
unkown
|
page read and write
|
|
|
|
221462C0000
|
unkown
|
page readonly
|
|
|
|
1995C5A0000
|
unkown
|
page read and write
|
|
|
|
18B846A2000
|
unkown
|
page read and write
|
|
|
|
7FF58BBB7000
|
unkown
|
page readonly
|
|
|
|
7FF58E90D000
|
unkown
|
page readonly
|
|
|
|
7FF575993000
|
unkown
|
page readonly
|
|
|
|
22352AE7000
|
unkown
|
page read and write
|
|
|
|
7FF58BD83000
|
unkown
|
page readonly
|
|
|
|
1CC97330000
|
unkown
|
page read and write
|
|
|
|
22354933000
|
unkown
|
page read and write
|
|
|
|
1D316E5F000
|
unkown
|
page read and write
|
|
|
|
5CA17A000
|
unkown
|
page read and write
|
|
|
|
7FF58029D000
|
unkown
|
page readonly
|
|
|
|
26BD9A2A000
|
unkown
|
page read and write
|
|
|
|
F9EB87B000
|
unkown
|
page read and write
|
|
|
|
7FF51F207000
|
unkown
|
page readonly
|
|
|
|
18B89E5F000
|
unkown
|
page read and write
|
|
|
|
18B89C50000
|
unkown
|
page read and write
|
|
|
|
22352A00000
|
unkown
|
page read and write
|
|
|
|
26BD97B0000
|
heap private
|
page read and write
|
|
|
|
22144869000
|
unkown
|
page read and write
|
|
|
|
7FF5812D7000
|
unkown
|
page readonly
|
|
|
|
18B84550000
|
heap private
|
page read and write
|
|
|
|
7FF58BE24000
|
unkown
|
page readonly
|
|
|
|
7FF58E7ED000
|
unkown
|
page readonly
|
|
|
|
22144869000
|
unkown
|
page read and write
|
|
|
|
18B8468D000
|
unkown
|
page read and write
|
|
|
|
1CC97360000
|
unkown
|
page readonly
|
|
|
|
54980FD000
|
unkown
|
page read and write
|
|
|
|
7FF547F70000
|
unkown
|
page readonly
|
|
|
|
2214486C000
|
unkown
|
page read and write
|
|
|
|
22354A50000
|
unkown
|
page read and write
|
|
|
|
1B4B4A79000
|
unkown
|
page read and write
|
|
|
|
26BD9A55000
|
unkown
|
page read and write
|
|
|
|
7FF575C19000
|
unkown
|
page readonly
|
|
|
|
22144A00000
|
unkown
|
page readonly
|
|
|
|
A96867F000
|
unkown
|
page read and write
|
|
|
|
2607FC69000
|
unkown
|
page read and write
|
|
|
|
7FF58E9A6000
|
unkown
|
page readonly
|
|
|
|
2607FBF0000
|
unkown
|
page readonly
|
|
|
|
22352AD0000
|
unkown
|
page read and write
|
|
|
|
7FF58466D000
|
unkown
|
page readonly
|
|
|
|
7FF4FAADA000
|
unkown
|
page readonly
|
|
|
|
7FF58E08B000
|
unkown
|
page readonly
|
|
|
|
7FF525D47000
|
unkown
|
page readonly
|
|
|
|
1B4B4A77000
|
unkown
|
page read and write
|
|
|
|
7FF5812D0000
|
unkown
|
page readonly
|
|
|
|
1D316D40000
|
heap default
|
page read and write
|
|
|
|
18B89CE4000
|
unkown
|
page read and write
|
|
|
|
7FF547F9F000
|
unkown
|
page readonly
|
|
|
|
7FF580497000
|
unkown
|
page readonly
|
|
|
|
26BDA540000
|
unkown
|
page readonly
|
|
|
|
18B84F00000
|
unkown
|
page read and write
|
|
|
|
22354964000
|
unkown
|
page read and write
|
|
|
|
7FF5804EA000
|
unkown
|
page readonly
|
|
|
|
18B89EB7000
|
unkown
|
page read and write
|
|
|
|
806B0FE000
|
unkown
|
page read and write
|
|
|
|
7FF51DAE2000
|
unkown
|
page readonly
|
|
|
|
7FF580144000
|
unkown
|
page readonly
|
|
|
|
7FF58058E000
|
unkown
|
page readonly
|
|
|
|
7FF584936000
|
unkown
|
page readonly
|
|
|
|
806B07A000
|
unkown
|
page read and write
|
|
|
|
1D316E61000
|
unkown
|
page read and write
|
|
|
|
1CC97375000
|
heap private
|
page read and write
|
|
|
|
7FF584663000
|
unkown
|
page readonly
|
|
|
|
7FF547E93000
|
unkown
|
page readonly
|
|
|
|
18B89E61000
|
unkown
|
page read and write
|
|
|
|
255ECFD000
|
unkown
|
page read and write
|
|
|
|
7FF584476000
|
unkown
|
page readonly
|
|
|
|
225FA000000
|
unkown
|
page read and write
|
|
|
|
18B845B0000
|
heap default
|
page read and write
|
|
|
|
225FA802000
|
unkown
|
page read and write
|
|
|
|
7FF575C98000
|
unkown
|
page readonly
|
|
|
|
5CA2FD000
|
unkown
|
page read and write
|
|
|
|
F9EB67B000
|
unkown
|
page read and write
|
|
|
|
7FF547E97000
|
unkown
|
page readonly
|
|
|
|
1D316D50000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
18B8A000000
|
unkown
|
page readonly
|
|
|
|
7FF512FE5000
|
unkown
|
page readonly
|
|
|
|
7FF58BB56000
|
unkown
|
page readonly
|
|
|
|
7FF54736C000
|
unkown
|
page readonly
|
|
|
|
5CA07E000
|
unkown
|
page read and write
|
|
|
|
7FF51F239000
|
unkown
|
page readonly
|
|
|
|
5E0FF7F000
|
unkown
|
page read and write
|
|
|
|
5E0FD7B000
|
unkown
|
page read and write
|
|
|
|
22352A56000
|
unkown
|
page read and write
|
|
|
|
18B89D70000
|
unkown
|
page read and write
|
|
|
|
948BD7F000
|
unkown
|
page read and write
|
|
|
|
7FF547D6F000
|
unkown
|
page readonly
|
|
|
|
7FF547E74000
|
unkown
|
page readonly
|
|
|
|
7FF525DBD000
|
unkown
|
page readonly
|
|
|
|
18B84F18000
|
unkown
|
page read and write
|
|
|
|
7FF58BD37000
|
unkown
|
page readonly
|
|
|
|
7FF58059F000
|
unkown
|
page readonly
|
|
|
|
7FF5844F0000
|
unkown
|
page readonly
|
|
|
|
7FF525E60000
|
unkown
|
page readonly
|
|
|
|
7FF5130AF000
|
unkown
|
page readonly
|
|
|
|
7FF51306F000
|
unkown
|
page readonly
|
|
|
|
7FF51F2CB000
|
unkown
|
page readonly
|
|
|
|
7FF525D97000
|
unkown
|
page readonly
|
|
|
|
7FF575CDB000
|
unkown
|
page readonly
|
|
|
|
22352AC8000
|
unkown
|
page read and write
|
|
|
|
7FF5804CD000
|
unkown
|
page readonly
|
|
|
|
7FF51F2FF000
|
unkown
|
page readonly
|
|
|
|
7FF512D63000
|
unkown
|
page readonly
|
|
|
|
5497F7D000
|
unkown
|
page read and write
|
|
|
|
7FF525E8F000
|
unkown
|
page readonly
|
|
|
|
22144900000
|
unkown
|
page read and write
|
|
|
|
7FF4FA81D000
|
unkown
|
page readonly
|
|
|
|
7FF584848000
|
unkown
|
page readonly
|
|
|
|
1709E23F000
|
unkown
|
page read and write
|
|
|
|
D744C7E000
|
unkown
|
page read and write
|
|
|
|
255EC7D000
|
unkown
|
page read and write
|
|
|
|
7FF58BD22000
|
unkown
|
page readonly
|
|
|
|
26BD98F0000
|
unkown
|
page readonly
|
|
|
|
7FF584693000
|
unkown
|
page readonly
|
|
|
|
7FF58BD75000
|
unkown
|
page readonly
|
|
|
|
225FA200000
|
unkown
|
page readonly
|
|
|
|
7FF581383000
|
unkown
|
page readonly
|
|
|
|
18B85A70000
|
unkown
|
page read and write
|
|
|
|
7FF525A5F000
|
unkown
|
page readonly
|
|
|
|
18B89D19000
|
unkown
|
page write copy
|
|
|
|
7FF58481D000
|
unkown
|
page readonly
|
|
|
|
18B89EB0000
|
unkown
|
page read and write
|
|
|
|
18B89D50000
|
unkown
|
page read and write
|
|
|
|
7FF5847BF000
|
unkown
|
page readonly
|
|
|
|
26BD99D0000
|
unkown
|
page readonly
|
|
|
|
7FF581359000
|
unkown
|
page readonly
|
|
|
|
7FF513068000
|
unkown
|
page readonly
|
|
|
|
F9EB6FD000
|
unkown
|
page read and write
|
|
|
|
22144913000
|
unkown
|
page read and write
|
|
|
|
5497FFE000
|
unkown
|
page read and write
|
|
|
|
7FF584830000
|
unkown
|
page readonly
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
7FF584677000
|
unkown
|
page readonly
|
|
|
|
7FF51E26A000
|
unkown
|
page readonly
|
|
|
|
7FF4FABFB000
|
unkown
|
page readonly
|
|
|
|
1D316E73000
|
unkown
|
page read and write
|
|
|
|
1995AC2B000
|
unkown
|
page read and write
|
|
|
|
7FF583D69000
|
unkown
|
page readonly
|
|
|
|
7FF58048C000
|
unkown
|
page readonly
|
|
|
|
7FF525E5B000
|
unkown
|
page readonly
|
|
|
|
1709E190000
|
unkown
|
page write copy
|
|
|
|
1D316E40000
|
unkown
|
page read and write
|
|
|
|
7FF512FA7000
|
unkown
|
page readonly
|
|
|
|
7FF581145000
|
unkown
|
page readonly
|
|
|
|
3CF1A7A000
|
unkown
|
page read and write
|
|
|
|
1CC97390000
|
heap private
|
page read and write
|
|
|
|
7FF4FAC1B000
|
unkown
|
page readonly
|
|
|
|
1CC974A0000
|
unkown
|
page readonly
|
|
|
|
7FF58140B000
|
unkown
|
page readonly
|
|
|
|
7FF580182000
|
unkown
|
page readonly
|
|
|
|
223547E0000
|
unkown
|
page readonly
|
|
|
|
7FF512B88000
|
unkown
|
page readonly
|
|
|
|
225FA750000
|
unkown
|
page read and write
|
|
|
|
2607FA10000
|
unkown
|
page readonly
|
|
|
|
7FF58E9CB000
|
unkown
|
page readonly
|
|
|
|
5497CFF000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB93000
|
unkown
|
page readonly
|
|
|
|
1B4B5400000
|
unkown
|
page readonly
|
|
|
|
F9EBA7E000
|
unkown
|
page read and write
|
|
|
|
7FF5848A9000
|
unkown
|
page readonly
|
|
|
|
7FF4FA39D000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
18B84C60000
|
unkown
|
page readonly
|
|
|
|
948BAFF000
|
unkown
|
page read and write
|
|
|
|
2607FC75000
|
unkown
|
page read and write
|
|
|
|
22352820000
|
heap private
|
page read and write
|
|
|
|
806B2FD000
|
unkown
|
page read and write
|
|
|
|
7FF525A7A000
|
unkown
|
page readonly
|
|
|
|
18B89D80000
|
unkown
|
page read and write
|
|
|
|
221447B0000
|
unkown
|
page write copy
|
|
|
|
286A41B0000
|
unkown
|
page readonly
|
|
|
|
806B1F9000
|
unkown
|
page read and write
|
|
|
|
5E0FAFE000
|
unkown
|
page read and write
|
|
|
|
5C9DAF000
|
unkown
|
page read and write
|
|
|
|
255E9FF000
|
unkown
|
page read and write
|
|
|
|
1D316E5C000
|
unkown
|
page read and write
|
|
|
|
3CF197E000
|
unkown
|
page read and write
|
|
|
|
286A3C64000
|
unkown
|
page read and write
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
18B89C10000
|
unkown
|
page read and write
|
|
|
|
223547F0000
|
heap private
|
page read and write
|
|
|
|
26080002000
|
unkown
|
page read and write
|
|
|
|
7FF5802A7000
|
unkown
|
page readonly
|
|
|
|
7FF51F2EE000
|
unkown
|
page readonly
|
|
|
|
255E0FE000
|
unkown
|
page read and write
|
|
|
|
7FF525BB5000
|
unkown
|
page readonly
|
|
|
|
7FF58E915000
|
unkown
|
page readonly
|
|
|
|
7FF51E6F7000
|
unkown
|
page readonly
|
|
|
|
7FF525D9C000
|
unkown
|
page readonly
|
|
|
|
1709E180000
|
heap default
|
page read and write
|
|
|
|
7FF58E919000
|
unkown
|
page readonly
|
|
|
|
7FF51E26E000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC00000
|
unkown
|
page readonly
|
|
|
|
7FF58BCF7000
|
unkown
|
page readonly
|
|
|
|
7FF58136A000
|
unkown
|
page readonly
|
|
|
|
7FF581197000
|
unkown
|
page readonly
|
|
|
|
7FF51E526000
|
unkown
|
page readonly
|
|
|
|
7FF51308D000
|
unkown
|
page readonly
|
|
|
|
18B85181000
|
unkown
|
page read and write
|
|
|
|
1995AD00000
|
unkown
|
page read and write
|
|
|
|
D744DFC000
|
unkown
|
page read and write
|
|
|
|
7FF580482000
|
unkown
|
page readonly
|
|
|
|
18B84702000
|
unkown
|
page read and write
|
|
|
|
7FF58E897000
|
unkown
|
page readonly
|
|
|
|
7FF58E943000
|
unkown
|
page readonly
|
|
|
|
18B89C54000
|
unkown
|
page read and write
|
|
|
|
7FF51F1F7000
|
unkown
|
page readonly
|
|
|
|
7FF58496F000
|
unkown
|
page readonly
|
|
|
|
2214486C000
|
unkown
|
page read and write
|
|
|
|
286A3C29000
|
unkown
|
page read and write
|
|
|
|
18B845E0000
|
unkown
|
page read and write
|
|
|
|
7FF5844EA000
|
unkown
|
page readonly
|
|
|
|
7FF575BF8000
|
unkown
|
page readonly
|
|
|
|
7FF51E649000
|
unkown
|
page readonly
|
|
|
|
7FF51F2B8000
|
unkown
|
page readonly
|
|
|
|
22352AC5000
|
unkown
|
page read and write
|
|
|
|
7FF58033D000
|
unkown
|
page readonly
|
|
|
|
286A3C62000
|
unkown
|
page read and write
|
|
|
|
7FF547D66000
|
unkown
|
page readonly
|
|
|
|
7FF580317000
|
unkown
|
page readonly
|
|
|
|
3CF187B000
|
unkown
|
page read and write
|
|
|
|
7FF58E5CA000
|
unkown
|
page readonly
|
|
|
|
18B89D70000
|
unkown
|
page read and write
|
|
|
|
286A3C6B000
|
unkown
|
page read and write
|
|
|
|
7FF58E99F000
|
unkown
|
page readonly
|
|
|
|
7FF4FAACF000
|
unkown
|
page readonly
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB65000
|
unkown
|
page readonly
|
|
|
|
7FF58059F000
|
unkown
|
page readonly
|
|
|
|
5E1007E000
|
unkown
|
page read and write
|
|
|
|
22355010000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB5D000
|
unkown
|
page readonly
|
|
|
|
18B84E00000
|
unkown
|
page read and write
|
|
|
|
7FF580558000
|
unkown
|
page readonly
|
|
|
|
7FF58141F000
|
unkown
|
page readonly
|
|
|
|
7FF58495B000
|
unkown
|
page readonly
|
|
|
|
7FF58141B000
|
unkown
|
page readonly
|
|
|
|
221446E0000
|
unkown
|
page readonly
|
|
|
|
18B85A63000
|
unkown
|
page read and write
|
|
|
|
1CC971E0000
|
unkown
|
page readonly
|
|
|
|
225FA040000
|
unkown
|
page read and write
|
|
|
|
7FF581002000
|
unkown
|
page readonly
|
|
|
|
7FF4FABE8000
|
unkown
|
page readonly
|
|
|
|
255E17E000
|
unkown
|
page read and write
|
|
|
|
255EA7E000
|
unkown
|
page read and write
|
|
|
|
7FF58E5AF000
|
unkown
|
page readonly
|
|
|
|
1B4B4B00000
|
unkown
|
page read and write
|
|
|
|
22354A80000
|
unkown
|
page readonly
|
|
|
|
7FF525DC9000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC14000
|
unkown
|
page readonly
|
|
|
|
5CA1FF000
|
unkown
|
page read and write
|
|
|
|
7FF584867000
|
unkown
|
page readonly
|
|
|
|
22354923000
|
unkown
|
page read and write
|
|
|
|
18B84F58000
|
unkown
|
page read and write
|
|
|
|
18B84DE1000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC2B000
|
unkown
|
page readonly
|
|
|
|
7FF51E58E000
|
unkown
|
page readonly
|
|
|
|
7FF5813F0000
|
unkown
|
page readonly
|
|
|
|
18B89CE0000
|
unkown
|
page readonly
|
|
|
|
225FA750000
|
unkown
|
page read and write
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
7FF58473C000
|
unkown
|
page readonly
|
|
|
|
7FF525E74000
|
unkown
|
page readonly
|
|
|
|
286A4202000
|
unkown
|
page read and write
|
|
|
|
549827E000
|
unkown
|
page read and write
|
|
|
|
286A4740000
|
unkown
|
page write copy
|
|
|
|
A967F6B000
|
unkown
|
page read and write
|
|
|
|
1995AC3F000
|
unkown
|
page read and write
|
|
|
|
7FF58017D000
|
unkown
|
page readonly
|
|
|
|
7FF51E605000
|
unkown
|
page readonly
|
|
|
|
7FF58BE06000
|
unkown
|
page readonly
|
|
|
|
1D316E83000
|
unkown
|
page read and write
|
|
|
|
1B4B4A63000
|
unkown
|
page read and write
|
|
|
|
7FF547F9F000
|
unkown
|
page readonly
|
|
|
|
5497B7E000
|
unkown
|
page read and write
|
|
|
|
2607FBD0000
|
unkown
|
page read and write
|
|
|
|
26BD9B02000
|
unkown
|
page read and write
|
|
|
|
7FF575CDF000
|
unkown
|
page readonly
|
|
|
|
7FF58BCDD000
|
unkown
|
page readonly
|
|
|
|
7FF5130AF000
|
unkown
|
page readonly
|
|
|
|
7FF51E3D6000
|
unkown
|
page readonly
|
|
|
|
18B89A80000
|
unkown
|
page read and write
|
|
|
|
7FF584840000
|
unkown
|
page readonly
|
|
|
|
7FF581127000
|
unkown
|
page readonly
|
|
|
|
7FF58111D000
|
unkown
|
page readonly
|
|
|
|
7FF51E63D000
|
unkown
|
page readonly
|
|
|
|
7FF51E5E4000
|
unkown
|
page readonly
|
|
|
|
22352B13000
|
unkown
|
page read and write
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
1B4B4A3C000
|
unkown
|
page read and write
|
|
|
|
18B89D60000
|
unkown
|
page read and write
|
|
|
|
7FF58BDFF000
|
unkown
|
page readonly
|
|
|
|
225F9FD0000
|
unkown
|
page readonly
|
|
|
|
7FF58E8F8000
|
unkown
|
page readonly
|
|
|
|
7FF58E5BD000
|
unkown
|
page readonly
|
|
|
|
1995AA20000
|
heap default
|
page read and write
|
|
|
|
806B37C000
|
unkown
|
page read and write
|
|
|
|
5497A7C000
|
unkown
|
page read and write
|
|
|
|
D7450FC000
|
unkown
|
page read and write
|
|
|
|
22354A40000
|
unkown
|
page readonly
|
|
|
|
7FF58E7CE000
|
unkown
|
page readonly
|
|
|
|
7FF51F1E3000
|
unkown
|
page readonly
|
|
|
|
7FF5847A7000
|
unkown
|
page readonly
|
|
|
|
1D316E5E000
|
unkown
|
page read and write
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
7FF58059D000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
7FF513080000
|
unkown
|
page readonly
|
|
|
|
286A4400000
|
unkown
|
page readonly
|
|
|
|
7FF58496D000
|
unkown
|
page readonly
|
|
|
|
7FF51EFA8000
|
unkown
|
page readonly
|
|
|
|
7FF58004F000
|
unkown
|
page readonly
|
|
|
|
7FF51E607000
|
unkown
|
page readonly
|
|
|
|
1B4B4A00000
|
unkown
|
page read and write
|
|
|
|
7FF58B971000
|
unkown
|
page readonly
|
|
|
|
7FF547F5F000
|
unkown
|
page readonly
|
|
|
|
7FF5848A5000
|
unkown
|
page readonly
|
|
|
|
7FF512FB7000
|
unkown
|
page readonly
|
|
|
|
7FF51E6C8000
|
unkown
|
page readonly
|
|
|
|
255E8FF000
|
unkown
|
page read and write
|
|
|
|
1CC98ED0000
|
heap private
|
page read and write
|
|
|
|
7FF4FA3AE000
|
unkown
|
page readonly
|
|
|
|
7FF584723000
|
unkown
|
page readonly
|
|
|
|
7FF58E8EC000
|
unkown
|
page readonly
|
|
|
|
5CA27D000
|
unkown
|
page read and write
|
|
|
|
1709E120000
|
heap private
|
page read and write
|
|
|
|
7FF525DA0000
|
unkown
|
page readonly
|
|
|
|
7FF51E70F000
|
unkown
|
page readonly
|
|
|
|
7FF58BE0E000
|
unkown
|
page readonly
|
|
|
|
255E277000
|
unkown
|
page read and write
|
|
|
|
7FF547C2A000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
7FF580457000
|
unkown
|
page readonly
|
|
|
|
18B848D0000
|
unkown
|
page readonly
|
|
|
|
1995A9C0000
|
heap private
|
page read and write
|
|
|
|
7FF51E1BF000
|
unkown
|
page readonly
|
|
|
|
D7451FC000
|
unkown
|
page read and write
|
|
|
|
2607FD13000
|
unkown
|
page read and write
|
|
|
|
1709E302000
|
unkown
|
page read and write
|
|
|
|
18B89EB3000
|
unkown
|
page read and write
|
|
|
|
1B4B4B13000
|
unkown
|
page read and write
|
|
|
|
7FF525D40000
|
unkown
|
page readonly
|
|
|
|
7FF58E8E7000
|
unkown
|
page readonly
|
|
|
|
26BDA200000
|
unkown
|
page readonly
|
|
|
|
7FF581363000
|
unkown
|
page readonly
|
|
|
|
225F9FF0000
|
unkown
|
page read and write
|
|
|
|
7FF525DA8000
|
unkown
|
page readonly
|
|
|
|
1CC98D20000
|
unkown
|
page readonly
|
|
|
|
7FF58E6E7000
|
unkown
|
page readonly
|
|
|
|
1995AB00000
|
unkown
|
page write copy
|
|
|
|
22352B00000
|
unkown
|
page read and write
|
|
|
|
7FF581355000
|
unkown
|
page readonly
|
|
|
|
7FF513076000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC0D000
|
unkown
|
page readonly
|
|
|
|
7FF525DD3000
|
unkown
|
page readonly
|
|
|
|
7FF5813E6000
|
unkown
|
page readonly
|
|
|
|
7FF512FA3000
|
unkown
|
page readonly
|
|
|
|
18B89EBE000
|
unkown
|
page read and write
|
|
|
|
2214486D000
|
unkown
|
page read and write
|
|
|
|
286A3C43000
|
unkown
|
page read and write
|
|
|
|
7FF584863000
|
unkown
|
page readonly
|
|
|
|
7FF547F9D000
|
unkown
|
page readonly
|
|
|
|
948BB7E000
|
unkown
|
page read and write
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
7FF51309E000
|
unkown
|
page readonly
|
|
|
|
7FF575CB0000
|
unkown
|
page readonly
|
|
|
|
806B3FF000
|
unkown
|
page read and write
|
|
|
|
7FF4FA2DA000
|
unkown
|
page readonly
|
|
|
|
1995AC02000
|
unkown
|
page read and write
|
|
|
|
1D317000000
|
unkown
|
page readonly
|
|
|
|
7FF5844D5000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
225FA013000
|
unkown
|
page read and write
|
|
|
|
7FF547C9D000
|
unkown
|
page readonly
|
|
|
|
7FF5804D5000
|
unkown
|
page readonly
|
|
|
|
1CC973AB000
|
heap default
|
page read and write
|
|
|
|
255E7FF000
|
unkown
|
page read and write
|
|
|
|
7FF51F09D000
|
unkown
|
page readonly
|
|
|
|
7FF547EEA000
|
unkown
|
page readonly
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
7FF51E3E8000
|
unkown
|
page readonly
|
|
|
|
1D316E7A000
|
unkown
|
page read and write
|
|
|
|
22354902000
|
unkown
|
page read and write
|
|
|
|
7FF58494D000
|
unkown
|
page readonly
|
|
|
|
D74557D000
|
unkown
|
page read and write
|
|
|
|
1D316E42000
|
unkown
|
page read and write
|
|
|
|
7FF58470D000
|
unkown
|
page readonly
|
|
|
|
286A433A000
|
unkown
|
page read and write
|
|
|
|
18B89D20000
|
unkown
|
page read and write
|
|
|
|
18B89EDF000
|
unkown
|
page read and write
|
|
|
|
286A3CCC000
|
unkown
|
page read and write
|
|
|
|
1995AC58000
|
unkown
|
page read and write
|
|
|
|
1CC98D30000
|
unkown
|
page readonly
|
|
|
|
1D316E13000
|
unkown
|
page read and write
|
|
|
|
7FF580493000
|
unkown
|
page readonly
|
|
|
|
A96847E000
|
unkown
|
page read and write
|
|
|
|
225FA750000
|
unkown
|
page read and write
|
|
|
|
7FF58E757000
|
unkown
|
page readonly
|
|
|
|
286A3B00000
|
unkown
|
page readonly
|
|
|
|
1CC99190000
|
heap private
|
page read and write
|
|
|
|
7FF51E645000
|
unkown
|
page readonly
|
|
|
|
153DBFC000
|
unkown
|
page read and write
|
|
|
|
7FF5802C3000
|
unkown
|
page readonly
|
|
|
|
1D316D60000
|
unkown
|
page readonly
|
|
|
|
18B89EA1000
|
unkown
|
page read and write
|
|
|
|
22144869000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB27000
|
unkown
|
page readonly
|
|
|
|
7FF575C2A000
|
unkown
|
page readonly
|
|
|
|
22144802000
|
unkown
|
page read and write
|
|
|
|
286A3CBB000
|
unkown
|
page read and write
|
|
|
|
7FF525E7E000
|
unkown
|
page readonly
|
|
|
|
1D316E46000
|
unkown
|
page read and write
|
|
|
|
286A3C13000
|
unkown
|
page read and write
|
|
|
|
1995AD02000
|
unkown
|
page read and write
|
|
|
|
1D316E48000
|
unkown
|
page read and write
|
|
|
|
286A4300000
|
unkown
|
page read and write
|
|
|
|
7FF575CCB000
|
unkown
|
page readonly
|
|
|
|
7FF58BE3F000
|
unkown
|
page readonly
|
|
|
|
7FF51F20D000
|
unkown
|
page readonly
|
|
|
|
18B89E00000
|
unkown
|
page read and write
|
|
|
|
18B89E15000
|
unkown
|
page read and write
|
|
|
|
1B4B5202000
|
unkown
|
page read and write
|
|
|
|
1CC97240000
|
unkown
|
page readonly
|
|
|
|
7FF51E617000
|
unkown
|
page readonly
|
|
|
|
223543A0000
|
unkown
|
page read and write
|
|
|
|
286A4790000
|
unkown
|
page readonly
|
|
|
|
7FF575CC4000
|
unkown
|
page readonly
|
|
|
|
7FF58044D000
|
unkown
|
page readonly
|
|
|
|
7FF584691000
|
unkown
|
page readonly
|
|
|
|
7FF51E51D000
|
unkown
|
page readonly
|
|
|
|
7FF51E6FB000
|
unkown
|
page readonly
|
|
|
|
7FF5804D9000
|
unkown
|
page readonly
|
|
|
|
7FF58E9B0000
|
unkown
|
page readonly
|
|
|
|
1D316E76000
|
unkown
|
page read and write
|
|
|
|
7FF58BE2B000
|
unkown
|
page readonly
|
|
|
|
1D316E4E000
|
unkown
|
page read and write
|
|
|
|
7FF5813D8000
|
unkown
|
page readonly
|
|
|
|
3CF1B7E000
|
unkown
|
page read and write
|
|
|
|
2607FAF0000
|
unkown
|
page readonly
|
|
|
|
18B84F18000
|
unkown
|
page read and write
|
|
|
|
7FF58E92A000
|
unkown
|
page readonly
|
|
|
|
7FF58E9AB000
|
unkown
|
page readonly
|
|
|
|
5C9D2B000
|
unkown
|
page read and write
|
|
|
|
7FF513015000
|
unkown
|
page readonly
|
|
|
|
18B89C40000
|
unkown
|
page read and write
|
|
|
|
22352960000
|
unkown
|
page write copy
|
|
|
|
7FF512FE9000
|
unkown
|
page readonly
|
|
|
|
1D316E3B000
|
unkown
|
page read and write
|
|
|
|
7FF51E532000
|
unkown
|
page readonly
|
|
|
|
18B89E3B000
|
unkown
|
page read and write
|
|
|
|
18B84613000
|
unkown
|
page read and write
|
|
|
|
7FF512E9E000
|
unkown
|
page readonly
|
|
|
|
7FF512F05000
|
unkown
|
page readonly
|
|
|
|
2607FC41000
|
unkown
|
page read and write
|
|
|
|
1D316E79000
|
unkown
|
page read and write
|
|
|
|
F9EBC7F000
|
unkown
|
page read and write
|
|
|
|
1D316E57000
|
unkown
|
page read and write
|
|
|
|
18B89C11000
|
unkown
|
page read and write
|
|
|
|
5CA0FA000
|
unkown
|
page read and write
|
|
|
|
7FF580450000
|
unkown
|
page readonly
|
|
|
|
7FF58E8F0000
|
unkown
|
page readonly
|
|
|
|
7FF58BE3D000
|
unkown
|
page readonly
|
|
|
|
7FF58462F000
|
unkown
|
page readonly
|
|
|
|
7FF51F2E4000
|
unkown
|
page readonly
|
|
|
|
18B89A70000
|
unkown
|
page read and write
|
|
|
|
806B27F000
|
unkown
|
page read and write
|
|
|
|
7FF512B73000
|
unkown
|
page readonly
|
|
|
|
18B84E15000
|
unkown
|
page read and write
|
|
|
|
153DB7E000
|
unkown
|
page read and write
|
|
|
|
22352A13000
|
unkown
|
page read and write
|
|
|
|
26BD9810000
|
heap default
|
page read and write
|
|
|
|
18B84E02000
|
unkown
|
page read and write
|
|
|
|
18B89EB3000
|
unkown
|
page read and write
|
|
|
|
7FF58495E000
|
unkown
|
page readonly
|
|
|
|
7FF51F1C0000
|
unkown
|
page readonly
|
|
|
|
22144829000
|
unkown
|
page read and write
|
|
|
|
1D316E74000
|
unkown
|
page read and write
|
|
|
|
7FF58E705000
|
unkown
|
page readonly
|
|
|
|
7FF51F2FD000
|
unkown
|
page readonly
|
|
|
|
7FF51F24A000
|
unkown
|
page readonly
|
|
|
|
7FF5844A1000
|
unkown
|
page readonly
|
|
|
|
2214486D000
|
unkown
|
page read and write
|
|
|
|
7FF525D64000
|
unkown
|
page readonly
|
|
|
|
18B89DF0000
|
unkown
|
page readonly
|
|
|
|
1CC97830000
|
unkown
|
page readonly
|
|
|
|
7FF581338000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB40000
|
unkown
|
page readonly
|
|
|
|
1709FC70000
|
unkown
|
page read and write
|
|
|
|
26BD9B08000
|
unkown
|
page read and write
|
|
|
|
18B89B00000
|
unkown
|
page read and write
|
|
|
|
1CC973DC000
|
heap default
|
page read and write
|
|
|
|
7FF5812F4000
|
unkown
|
page readonly
|
|
|
|
7FF58BD4C000
|
unkown
|
page readonly
|
|
|
|
7FF58BDF8000
|
unkown
|
page readonly
|
|
|
|
7FF58465A000
|
unkown
|
page readonly
|
|
|
|
F9EB97B000
|
unkown
|
page read and write
|
|
|
|
AE5199E000
|
unkown
|
page read and write
|
|
|
|
F9EC17E000
|
unkown
|
page read and write
|
|
|
|
AE51C7E000
|
unkown
|
page read and write
|
|
|
|
1CC973A0000
|
heap default
|
page read and write
|
|
|
|
7FF51E4AD000
|
unkown
|
page readonly
|
|
|
|
22144902000
|
unkown
|
page read and write
|
|
|
|
255E07B000
|
unkown
|
page read and write
|
|
|
|
18B89D40000
|
unkown
|
page read and write
|
|
|
|
7FF51EFF8000
|
unkown
|
page readonly
|
|
|
|
7FF575C15000
|
unkown
|
page readonly
|
|
|
|
2214486B000
|
unkown
|
page read and write
|
|
|
|
5497D7E000
|
unkown
|
page read and write
|
|
|
|
7FF58038E000
|
unkown
|
page readonly
|
|
|
|
7FF58059B000
|
unkown
|
page readonly
|
|
|
|
7FF58BCF0000
|
unkown
|
page readonly
|
|
|
|
7FF580478000
|
unkown
|
page readonly
|
|
|
|
AE51E7B000
|
unkown
|
page read and write
|
|
|
|
7FF584877000
|
unkown
|
page readonly
|
|
|
|
18B89DC0000
|
unkown
|
page readonly
|
|
|
|
2607FC02000
|
unkown
|
page read and write
|
|
|
|
7FF51F243000
|
unkown
|
page readonly
|
|
|
|
D74527B000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC2F000
|
unkown
|
page readonly
|
|
|
|
7FF51DF54000
|
unkown
|
page readonly
|
|
|
|
255E97F000
|
unkown
|
page read and write
|
|
|
|
7FF5802F0000
|
unkown
|
page readonly
|
|
|
|
7FF512F24000
|
unkown
|
page readonly
|
|
|
|
7FF58BD47000
|
unkown
|
page readonly
|
|
|
|
7FF512FC8000
|
unkown
|
page readonly
|
|
|
|
1709E256000
|
unkown
|
page read and write
|
|
|
|
22144855000
|
unkown
|
page read and write
|
|
|
|
18B89D70000
|
unkown
|
page read and write
|
|
|
|
1D316E62000
|
unkown
|
page read and write
|
|
|
|
7FF525DDA000
|
unkown
|
page readonly
|
|
|
|
7FF51E6D6000
|
unkown
|
page readonly
|
|
|
|
22354A60000
|
unkown
|
page readonly
|
|
|
|
1B4B4C00000
|
unkown
|
page readonly
|
|
|
|
7FF5848B3000
|
unkown
|
page readonly
|
|
|
|
22144869000
|
unkown
|
page read and write
|
|
|
|
948BC7A000
|
unkown
|
page read and write
|
|
|
|
7FF583D74000
|
unkown
|
page readonly
|
|
|
|
7FF58496B000
|
unkown
|
page readonly
|
|
|
|
7FF4FA913000
|
unkown
|
page readonly
|
|
|
|
7FF575A28000
|
unkown
|
page readonly
|
|
|
|
1D3170D0000
|
unkown
|
page readonly
|
|
|
|
7FF581404000
|
unkown
|
page readonly
|
|
|
|
7FF525E56000
|
unkown
|
page readonly
|
|
|
|
18B85500000
|
unkown
|
page read and write
|
|
|
|
18B84641000
|
unkown
|
page read and write
|
|
|
|
7FF51309B000
|
unkown
|
page readonly
|
|
|
|
7FF5813FD000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB73000
|
unkown
|
page readonly
|
|
|
|
1B4B4990000
|
unkown
|
page readonly
|
|
|
|
18B89C30000
|
unkown
|
page read and write
|
|
|
|
3CF19FA000
|
unkown
|
page read and write
|
|
|
|
18B84F18000
|
unkown
|
page read and write
|
|
|
|
7FF525C7E000
|
unkown
|
page readonly
|
|
|
|
2235490A000
|
unkown
|
page read and write
|
|
|
|
26BD9A4B000
|
unkown
|
page read and write
|
|
|
|
7FF512E7E000
|
unkown
|
page readonly
|
|
|
|
7FF4FAAD3000
|
unkown
|
page readonly
|
|
|
|
7FF584844000
|
unkown
|
page readonly
|
|
|
|
22354A50000
|
unkown
|
page read and write
|
|
|
|
18B89CF0000
|
unkown
|
page read and write
|
|
|
|
7FF581330000
|
unkown
|
page readonly
|
|
|
|
26BD9C00000
|
unkown
|
page readonly
|
|
|
|
18B84713000
|
unkown
|
page read and write
|
|
|
|
22354A50000
|
unkown
|
page read and write
|
|
|
|
7FF58043F000
|
unkown
|
page readonly
|
|
|
|
18B89ECA000
|
unkown
|
page read and write
|
|
|
|
1D316E45000
|
unkown
|
page read and write
|
|
|
|
18B84691000
|
unkown
|
page read and write
|
|
|
|
7FF57FC4B000
|
unkown
|
page readonly
|
|
|
|
255E67B000
|
unkown
|
page read and write
|
|
|
|
22352C00000
|
unkown
|
page readonly
|
|
|
|
7FF51F2EB000
|
unkown
|
page readonly
|
|
|
|
22352AC7000
|
unkown
|
page read and write
|
|
|
|
255E57F000
|
unkown
|
page read and write
|
|
|
|
7FF5844FF000
|
unkown
|
page readonly
|
|
|
|
7FF58BE1D000
|
unkown
|
page readonly
|
|
|
|
1B4B48B0000
|
heap default
|
page read and write
|
|
|
|
7FF51E70D000
|
unkown
|
page readonly
|
|
|
|
7FF58055F000
|
unkown
|
page readonly
|
|
|
|
7FF580B6C000
|
unkown
|
page readonly
|
|
|
|
286A3E00000
|
unkown
|
page readonly
|
|
|
|
3CF18FE000
|
unkown
|
page read and write
|
|
|
|
7FF525E8B000
|
unkown
|
page readonly
|
|
|
|
7FF525DC5000
|
unkown
|
page readonly
|
|
|
|
225FA05C000
|
unkown
|
page read and write
|
|
|
|
7FF584704000
|
unkown
|
page readonly
|
|
|
|
22352B02000
|
unkown
|
page read and write
|
|
|
|
806AFFA000
|
unkown
|
page read and write
|
|
|
|
7FF5130AB000
|
unkown
|
page readonly
|
|
|
|
18B89D30000
|
unkown
|
page read and write
|
|
|
|
7FF58E5C2000
|
unkown
|
page readonly
|
|
|
|
18B89AC0000
|
unkown
|
page readonly
|
|
|
|
18B856E0000
|
unkown
|
page readonly
|
|
|
|
7FF58E9CE000
|
unkown
|
page readonly
|
|
|
|
18B846FF000
|
unkown
|
page read and write
|
|
|
|
153D77E000
|
unkown
|
page read and write
|
|
|
|
221461C0000
|
unkown
|
page read and write
|
|
|
|
7FF5804E3000
|
unkown
|
page readonly
|
|
|
|
F9EBE7F000
|
unkown
|
page read and write
|
|
|
|
7FF5804AC000
|
unkown
|
page readonly
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
255E87F000
|
unkown
|
page read and write
|
|
|
|
2214486A000
|
unkown
|
page read and write
|
|
|
|
7FF580566000
|
unkown
|
page readonly
|
|
|
|
7FF51E6DB000
|
unkown
|
page readonly
|
|
|
|
7FF58140E000
|
unkown
|
page readonly
|
|
|
|
2607FAE0000
|
unkown
|
page readonly
|
|
|
|
18B8A060000
|
unkown
|
page read and write
|
|
|
|
153DAFF000
|
unkown
|
page read and write
|
|
|
|
22352AA9000
|
unkown
|
page read and write
|
|
|
|
7FF584928000
|
unkown
|
page readonly
|
|
|
|
7FF58E9C4000
|
unkown
|
page readonly
|
|
|
|
26BD9A8A000
|
unkown
|
page read and write
|
|
|
|
1CC98D40000
|
unkown
|
page readonly
|
|
|
|
7FF525C9D000
|
unkown
|
page readonly
|
|
|
|
7FF580474000
|
unkown
|
page readonly
|
|
|
|
7FF58E9BD000
|
unkown
|
page readonly
|
|
|
|
7FF58BD79000
|
unkown
|
page readonly
|
|
|
|
7FF580503000
|
unkown
|
page readonly
|
|
|
|
1D316E6A000
|
unkown
|
page read and write
|
|
|
|
7FF584513000
|
unkown
|
page readonly
|
|
|
|
7FF525B97000
|
unkown
|
page readonly
|
|
|
|
7FF584954000
|
unkown
|
page readonly
|
|
|
|
225F9FC0000
|
heap default
|
page read and write
|
|
|
|
1709E229000
|
unkown
|
page read and write
|
|
|
|
153DA7D000
|
unkown
|
page read and write
|
|
|
|
2607FC71000
|
unkown
|
page read and write
|
|
|
|
D74537D000
|
unkown
|
page read and write
|
|
|
|
7FF581327000
|
unkown
|
page readonly
|
|
|
|
7FF5848BA000
|
unkown
|
page readonly
|
|
|
|
7FF4FA826000
|
unkown
|
page readonly
|
|
|
|
7FF51E70B000
|
unkown
|
page readonly
|
|
|
|
18B89E24000
|
unkown
|
page read and write
|
|
|
|
7FF51E653000
|
unkown
|
page readonly
|
|
|
|
7FF525C07000
|
unkown
|
page readonly
|
|
|
|
1995AA30000
|
unkown
|
page readonly
|
|
|
|
7FF584728000
|
unkown
|
page readonly
|
|
|
|
2607FC13000
|
unkown
|
page read and write
|
|
|
|
18B89C31000
|
unkown
|
page read and write
|
|
|
|
7FF58B684000
|
unkown
|
page readonly
|
|
|
|
22144813000
|
unkown
|
page read and write
|
|
|
|
1D317602000
|
unkown
|
page read and write
|
|
|
|
7FF58492F000
|
unkown
|
page readonly
|
|
|
|
7FF575C45000
|
unkown
|
page readonly
|
|
|
|
18B8A090000
|
unkown
|
page readonly
|
|
|
|
5E0FA7C000
|
unkown
|
page read and write
|
|
|
|
7FF584661000
|
unkown
|
page readonly
|
|
|
|
7FF547ECD000
|
unkown
|
page readonly
|
|
|
|
A96827E000
|
unkown
|
page read and write
|
|
|
|
1B4B49B0000
|
unkown
|
page read and write
|
|
|
|
7FF58496F000
|
unkown
|
page readonly
|
|
|
|
7FF58E923000
|
unkown
|
page readonly
|
|
|
|
7FF58E9DF000
|
unkown
|
page readonly
|
|
|
|
22354A90000
|
unkown
|
page readonly
|
|
|
|
7FF58057D000
|
unkown
|
page readonly
|
|
|
|
225FA002000
|
unkown
|
page read and write
|
|
|
|
22352A90000
|
unkown
|
page read and write
|
|
|
|
1995AC6B000
|
unkown
|
page read and write
|
|
|
|
1995AD13000
|
unkown
|
page read and write
|
|
|
|
7FF58141F000
|
unkown
|
page readonly
|
|
|
|
22144867000
|
unkown
|
page read and write
|
|
|
|
7FF5812CD000
|
unkown
|
page readonly
|
|
|
|
153D6FC000
|
unkown
|
page read and write
|
|
|
|
7FF51F2DD000
|
unkown
|
page readonly
|
|
|
|
1B4B4A13000
|
unkown
|
page read and write
|
|
|
|
26080550000
|
unkown
|
page readonly
|
|
|
|
1D316E6C000
|
unkown
|
page read and write
|
|
|
|
225FAA00000
|
unkown
|
page read and write
|
|
|
|
1D316E66000
|
unkown
|
page read and write
|
|
|
|
7FF58132C000
|
unkown
|
page readonly
|
|
|
|
7FF58BACA000
|
unkown
|
page readonly
|
|
|
|
1709E4D0000
|
unkown
|
page readonly
|
|
|
|
806AF7E000
|
unkown
|
page read and write
|
|
|
|
1995AC13000
|
unkown
|
page read and write
|
|
|
|
22352A99000
|
unkown
|
page read and write
|
|
|
|
1B4B4A02000
|
unkown
|
page read and write
|
|
|
|
7FF4FABF6000
|
unkown
|
page readonly
|
|
|
|
7FF51E675000
|
unkown
|
page readonly
|
|
|
|
806AE7B000
|
unkown
|
page read and write
|
|
|
|
7FF580FEF000
|
unkown
|
page readonly
|
|
|
|
1709E200000
|
unkown
|
page read and write
|
|
|
|
7FF51F235000
|
unkown
|
page readonly
|
|
|
|
F9EB77D000
|
unkown
|
page read and write
|
|
|
|
7FF5813EB000
|
unkown
|
page readonly
|
|
|
|
223529F0000
|
unkown
|
page read and write
|
|
|
|
7FF547F8E000
|
unkown
|
page readonly
|
|
|
|
26BD9B00000
|
unkown
|
page read and write
|
|
|
|
1B4B4A55000
|
unkown
|
page read and write
|
|
|
|
26BD9B13000
|
unkown
|
page read and write
|
|
|
|
7FF547D3D000
|
unkown
|
page readonly
|
|
|
|
2607F9A0000
|
heap private
|
page read and write
|
|
|
|
7FF575CAB000
|
unkown
|
page readonly
|
|
|
|
F9EBD7D000
|
unkown
|
page read and write
|
|
|
|
22352890000
|
unkown
|
page readonly
|
|
|
|
7FF5804A7000
|
unkown
|
page readonly
|
|
|
|
225FA660000
|
unkown
|
page readonly
|
|
|
|
26BD9A3C000
|
unkown
|
page read and write
|
|
|
|
22144867000
|
unkown
|
page read and write
|
|
|
|
7FF5846C0000
|
unkown
|
page readonly
|
|
|
|
225F9F60000
|
heap private
|
page read and write
|
|
|
|
7FF51E61C000
|
unkown
|
page readonly
|
|
|
|
286A4312000
|
unkown
|
page read and write
|
|
|
|
7FF51E6DE000
|
unkown
|
page readonly
|
|
|
|
7FF4FAC2F000
|
unkown
|
page readonly
|
|
|
|
225FA102000
|
unkown
|
page read and write
|
|
|
|
7FF547F05000
|
unkown
|
page readonly
|
|
|
|
3CF1AFF000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB69000
|
unkown
|
page readonly
|
|
|
|
7FF52553B000
|
unkown
|
page readonly
|
|
|
|
AE51F77000
|
unkown
|
page read and write
|
|
|
|
7FF575C0D000
|
unkown
|
page readonly
|
|
|
|
7FF51E603000
|
unkown
|
page readonly
|
|
|
|
1CC97310000
|
unkown
|
page read and write
|
|
|
|
7FF58441F000
|
unkown
|
page readonly
|
|
|
|
5E0FE7F000
|
unkown
|
page read and write
|
|
|
|
7FF547E1E000
|
unkown
|
page readonly
|
|
|
|
7FF512E4D000
|
unkown
|
page readonly
|
|
|
|
286A3BE0000
|
unkown
|
page readonly
|
|
|
|
22352B18000
|
unkown
|
page read and write
|
|
|
|
7FF584827000
|
unkown
|
page readonly
|
|
|
|
2607FC5A000
|
unkown
|
page read and write
|
|
|
|
7FF58465C000
|
unkown
|
page readonly
|
|
|
|
7FF580140000
|
unkown
|
page readonly
|
|
|
|
7FF4FAB3C000
|
unkown
|
page readonly
|
|
|
|
7FF58BD6D000
|
unkown
|
page readonly
|
|
|
|
7FF547ED5000
|
unkown
|
page readonly
|
|
|
|
18B855E0000
|
unkown
|
page read and write
|
|
|
|
1709FD70000
|
unkown
|
page readonly
|
|
|
|
2607FC00000
|
unkown
|
page read and write
|
|
|
|
7FF5848D5000
|
unkown
|
page readonly
|
|
|
|
7FF58E890000
|
unkown
|
page readonly
|
|
|
|
7FF547E82000
|
unkown
|
page readonly
|
|
|
|
255E47A000
|
unkown
|
page read and write
|
|
|
|
153D7FE000
|
unkown
|
page read and write
|
|
|
|
7FF5847E4000
|
unkown
|
page readonly
|
|
|
|
7FF58122D000
|
unkown
|
page readonly
|
|
|
|
7FF547EAC000
|
unkown
|
page readonly
|
|
|
|
7FF512EC3000
|
unkown
|
page readonly
|
|
|
|
223544A0000
|
unkown
|
page readonly
|
|
|
|
18B845C0000
|
unkown
|
page readonly
|
|
|
|
7FF51E6ED000
|
unkown
|
page readonly
|
|
|
|
7FF512FF3000
|
unkown
|
page readonly
|
|
|
|
7FF547F8B000
|
unkown
|
page readonly
|
|
|
|
7FF547F6B000
|
unkown
|
page readonly
|
|
|
|
948BA7B000
|
unkown
|
page read and write
|
|
|
|
1D316E00000
|
unkown
|
page read and write
|
|
|
|
5497AFE000
|
unkown
|
page read and write
|
|
|
|
7FF575BD7000
|
unkown
|
page readonly
|
|
|
|
18B89D18000
|
unkown
|
page read and write
|
|
|
|
1B4B4B02000
|
unkown
|
page read and write
|
|
|
|
7FF575CCE000
|
unkown
|
page readonly
|
|
|
|
7FF525B8D000
|
unkown
|
page readonly
|
|
|
|
1D316E5A000
|
unkown
|
page read and write
|
|
|
|
7FF5844E4000
|
unkown
|
page readonly
|
|
|
|
7FF51F2D0000
|
unkown
|
page readonly
|
|
|
|
1CC97350000
|
unkown
|
page readonly
|
|
|
|
7FF51E6F4000
|
unkown
|
page readonly
|
|
|
|
AE5191C000
|
unkown
|
page read and write
|
|
|
|
18B84677000
|
unkown
|
page read and write
|
|
|
|
7FF525DF3000
|
unkown
|
page readonly
|
|
|
|
18B856D0000
|
unkown
|
page readonly
|
|
|
|
F9EBB7E000
|
unkown
|
page read and write
|
|
|
|
221446D0000
|
heap default
|
page read and write
|
|
|
|
7FF584852000
|
unkown
|
page readonly
|
|
|
|
18B85400000
|
unkown
|
page read and write
|
|
|
|
18B89EB6000
|
unkown
|
page read and write
|
|
|
|
7FF51F1D0000
|
unkown
|
page readonly
|
|
|
|
948BCFF000
|
unkown
|
page read and write
|
|
|
|
7FF58489D000
|
unkown
|
page readonly
|
|
|
|
26BD99E0000
|
unkown
|
page read and write
|
|
|
|
7FF525E4F000
|
unkown
|
page readonly
|
|
|
|
7FF547CA7000
|
unkown
|
page readonly
|
|
|
|
1D316E02000
|
unkown
|
page read and write
|
|
|
|
7FF58BCED000
|
unkown
|
page readonly
|
|
|
|
26BD9A4D000
|
unkown
|
page read and write
|
|
|
|
286A3C89000
|
unkown
|
page read and write
|
|
|
|
22144670000
|
heap private
|
page read and write
|
|
|
|
26BD9820000
|
unkown
|
page readonly
|
|
|
|
AE5217C000
|
unkown
|
page read and write
|
|
|
|
18B89D60000
|
unkown
|
page read and write
|
|
|
|
26BD9A00000
|
unkown
|
page read and write
|
|
|
|
18B845D0000
|
unkown
|
page readonly
|
|
|
|
7FF58BE3F000
|
unkown
|
page readonly
|
|
|
|
7FF513094000
|
unkown
|
page readonly
|
|
|
|
18B84600000
|
unkown
|
page read and write
|
|
|
|
7FF58100A000
|
unkown
|
page readonly
|
|
|
|
7FF580085000
|
unkown
|
page readonly
|
|
|
|
7FF5802C1000
|
unkown
|
page readonly
|
|
|
|
7FF575BEC000
|
unkown
|
page readonly
|
|
|
|
26BD9A13000
|
unkown
|
page read and write
|
|
|
|
7FF547EE3000
|
unkown
|
page readonly
|
|
|
|
255EB7A000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB9D000
|
unkown
|
page readonly
|
|
|
|
7FF51F2C6000
|
unkown
|
page readonly
|
|
|
|
26BD9A6F000
|
unkown
|
page read and write
|
|
|
|
1D316E69000
|
unkown
|
page read and write
|
|
|
|
1995AC00000
|
unkown
|
page read and write
|
|
|
|
5497E7E000
|
unkown
|
page read and write
|
|
|
|
7FF512EFF000
|
unkown
|
page readonly
|
|
|
|
7FF580FFD000
|
unkown
|
page readonly
|
|
|
|
7FF58056B000
|
unkown
|
page readonly
|
|
|
|
1709E213000
|
unkown
|
page read and write
|
|
|
|
7FF512E73000
|
unkown
|
page readonly
|
|
|
|
18B89C1E000
|
unkown
|
page read and write
|
|
|
|
7FF584820000
|
unkown
|
page readonly
|
|
|
|
18B89EAC000
|
unkown
|
page read and write
|
|
|
|
D7449FB000
|
unkown
|
page read and write
|
|
|
|
7FF584141000
|
unkown
|
page readonly
|
|
|
|
286A3C00000
|
unkown
|
page read and write
|
|
|
|
7FF58016F000
|
unkown
|
page readonly
|
|
|
|
18B84696000
|
unkown
|
page read and write
|
|
|
|
1709E202000
|
unkown
|
page read and write
|
|
|
|
7FF58E998000
|
unkown
|
page readonly
|
|
|
|
2214486E000
|
unkown
|
page read and write
|
|
|
|
18B84658000
|
unkown
|
page read and write
|
|
|
|
7FF575C9F000
|
unkown
|
page readonly
|
|
|
|
2214483F000
|
unkown
|
page read and write
|
|
|
|
7FF4FAC1E000
|
unkown
|
page readonly
|
|
|
|
7FF51F22D000
|
unkown
|
page readonly
|
|
|
|
18B89B10000
|
unkown
|
page read and write
|
|
|
|
7FF5803D7000
|
unkown
|
page readonly
|
|
|
|
1995AB50000
|
unkown
|
page readonly
|
|
|
|
1D316D70000
|
unkown
|
page read and write
|
|
|
|
7FF51E5F2000
|
unkown
|
page readonly
|
|
|
|
1D316E64000
|
unkown
|
page read and write
|
|
|
|
7FF4FAB48000
|
unkown
|
page readonly
|
|
|
|
255EE7B000
|
unkown
|
page read and write
|
|
|
|
5E0FB7E000
|
unkown
|
page read and write
|
|
|
|
18B856F0000
|
unkown
|
page readonly
|
|
|
|
7FF575CDF000
|
unkown
|
page readonly
|
|
|
|
7FF58E9DB000
|
unkown
|
page readonly
|
|
|
|
18B89CE0000
|
unkown
|
page read and write
|
|
|
|
2607FE00000
|
unkown
|
page readonly
|
|
|
|
1D316F02000
|
unkown
|
page read and write
|
|
|
|
7FF58E88D000
|
unkown
|
page readonly
|
|
|
|
1D316E33000
|
unkown
|
page read and write
|
|
|
|
7FF580584000
|
unkown
|
page readonly
|
|
|
|
255E77B000
|
unkown
|
page read and write
|
|
|
|
7FF575CA6000
|
unkown
|
page readonly
|
|
|
|
7FF58058B000
|
unkown
|
page readonly
|
|
|
|
806AEFE000
|
unkown
|
page read and write
|
|
|
|
18B89D70000
|
unkown
|
page read and write
|
|
|
|
7FF58BD8A000
|
unkown
|
page readonly
|
|
|
|
22354900000
|
unkown
|
page read and write
|
|
|
|
7FF525A6D000
|
unkown
|
page readonly
|
|
|
|
18B85A60000
|
unkown
|
page read and write
|
|
|
|
22352880000
|
heap default
|
page read and write
|
|
There are 1006 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://docs.google.com/document/d/e/2PACX-1vR7YG46KCA4W3c6lWOCRZa9iVxKHpJ_UPOxYmoLJIZ9VMR7vP_J8ndmrPjRlbE1II4lR_GR0kBskRfp/pub
|
|
|
|
https://accounts.google.com/signin/v2/identifier?passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2F&followup=https%3A%2F%2Fdocs.google.com%2F&emr=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin
|
|
|
|
https://www.google.com/url?q=https://risemove.com/.manage/tracking_34598451605&sa=D&source=editors&ust=1618040382786000&usg=AOvVaw2a5O3WNdtzelVnrFNVlATG
|
|
|
|
https://www.google.com/url?q=https://risemove.com/.manage/tracking_34598451605&sa=D&source=editors&ust=1618040382787000&usg=AOvVaw19zJPUMugSdu1BWe0hBqoN
|
|
|
|
https://www.google.com/url?q=https://risemove.com/.manage/tracking_34598451605&sa=D&source=editors&ust=1618040382788000&usg=AOvVaw02aCWOHVme1RycmHFnsQiz
|
|
|
|
https://www.google.com/url?q=https://risemove.com/.manage/tracking_34598451605&sa=D&source=editors&ust=1618040382784000&usg=AOvVaw0XgO97EwnWC2qi6Qyzh8Q0
|
|
|
|
https://accounts.google.com/signin/v2/identifier?service=wise&passive=1209600&continue=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&followup=https%3A%2F%2Fdocs.google.com%2Fabuse%3Fid%3DAKkXjow_Qcl6gQ9GKmHAmGe5Z-2rGOj2OWk0crSWY509vNXoY8wVcYK5zBnM_iSzMneEs8d9CuwpDwUXjZkdUWY%3A0&flowName=GlifWebSignIn&flowEntry=ServiceLogin
|
|