IOCReport

loading gif

Files

File Path
Type
Category
Malicious
5781525.html
HTML document, ASCII text, with no line terminators
initial sample
malicious
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 59863 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\14312168-069c-4fa3-8118-dfd50a673f39.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\23bf655f-6599-44fe-a43b-47058c044c59.tmp
SysEx File -
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\39fc37b9-966b-4ca0-8e62-29a5d4bbb50b.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\76dfd5d4-1613-4a4b-a2e7-7e29a8e68ee8.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7d9afb9d-9078-47c1-abcc-16760e26df16.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\9ade6691-5e3a-4a67-a575-69850ea6d644.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0ab0680b-4e1c-4a2b-8b43-c3befe722cea.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\33402a9f-d8e5-410d-b8fa-4032bf492e75.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\34d8e2ae-acb6-4142-b400-5ae0a041f5ff.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\36ea0779-8047-4421-86c0-3e9fd52f6a28.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4101622d-eadb-424c-a187-cc154041c0bb.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\784388af-9f29-4268-a958-4147d170c664.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7a860c75-6872-43b8-94de-e9bbc76d61a5.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ee250fc-7e00-4ade-a5e0-b2a701ed64b7.tmp
ASCII text, with very long lines, with no line terminators
modified
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\602f5f874f3385c7_0
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91be9c6b8d3150fe_0
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e222f00a6abb9a7f_0
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000001.dbtmp
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\a272768a-2d2b-447d-9f4d-ad5da35b066d.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\08d7be13-d743-4068-aaec-c768e3510e7b.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\03ac99f3-643f-481c-85f6-48d54b737f8e.tmp
MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\Chrome Web Store Payments.ico.md5
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\aa532e48-b5df-461e-98b8-45ec6438bf4b.tmp
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\af881b9e-397e-4fad-af41-04b8107a331a.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f5b31b92-6d7d-4c7b-9a6a-da176284aad8.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fa4356d7-5b45-446c-9f69-6b7c44a6657e.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\9.22.0\Indexing in Progress
empty
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir5388_274931714\Ruleset Data
data
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\afdf7848-2aa1-4206-a225-ee8e203a028f.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\c41ff449-9267-44a2-a707-6ba9f35e8501.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\c6dc3c91-2399-4fec-bfb1-369dae90cf33.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\d55cf44f-34d8-4315-aee1-e190c063472a.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\e59320df-7817-4289-a16d-73186a326064.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\e64c5cba-7a99-482e-ae48-f6dd6738bb12.tmp
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\eb6ffa7a-063a-4ac9-be8f-c1b8ae0820f6.tmp
ASCII text, with very long lines, with no line terminators
modified
clean
C:\Users\user\AppData\Local\Temp\0946a50c-a2d6-41bf-af35-db70a7e80096.tmp
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\1123fd66-7574-4751-80c0-0ec5f5b75c1d.tmp
Google Chrome extension, version 3
dropped
clean
C:\Users\user\AppData\Local\Temp\5388_1000634914\manifest.fingerprint
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\5388_1303184666\manifest.fingerprint
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\5388_456296302\manifest.fingerprint
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\5388_62047560\manifest.fingerprint
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\5388_71861835\manifest.fingerprint
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\a6fd33aa-bd7c-47e3-bfe7-205668391ce6.tmp
Google Chrome extension, version 3
dropped
clean
C:\Users\user\AppData\Local\Temp\b3562bd3-ce72-4819-8cc6-eb3135f46536.tmp
Google Chrome extension, version 3
dropped
clean
C:\Users\user\AppData\Local\Temp\d29de9b4-bf61-4022-8a8a-93eefd451350.tmp
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\ede6c696-3d78-49f5-aa9b-ac462cd2dd76.tmp
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\1123fd66-7574-4751-80c0-0ec5f5b75c1d.tmp
Google Chrome extension, version 3
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_1107776590\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ml\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\mr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ms\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\nl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\pt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\sw\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\ta\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\te\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\zh\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\CRX_INSTALL\manifest.json
ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_526646119\a6fd33aa-bd7c-47e3-bfe7-205668391ce6.tmp
Google Chrome extension, version 3
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\scoped_dir5388_944065575\b3562bd3-ce72-4819-8cc6-eb3135f46536.tmp
Google Chrome extension, version 3
dropped
clean
\Device\NamedPipe\mojo.5388.6196.7101634713634079956
PGP\011Secret Key -
dropped
clean
There are 241 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\5781525.html'
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1492,177793998006335442,11202177534024855872,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1708 /prefetch:8
clean

URLs

Name
IP
Malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=/
unknown
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=$
unknown
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=2:
unknown
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=2
unknown
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=
malicious
https://kristenbakercoach.com/wp-admin/js/redir/?csrftoken=MTYyMDg0OTEzMWQzZjE1NGExMzM1YTYzODE1ZGQ3OGIxZWFkM2UxMWVkOWE0MWJiMDIwOWIyZTg4OGIwYjc5MGQ0ZWUyNDk5YzUyZmJiNGNjYw==
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=
unknown
malicious
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/nextlogin?csrftoken=MTYyMDg0OTE0NWQzZjE1NGExMzM1YTYzODE1ZGQ3OGIxZWFkM2UxMWVkOWE0MWJiMDJjNzcxMzM4YzdmNDhhY2QyNjA4N2E3OGU2ZDQ3OGQyNg==&email=pheeke@esd.wa.gov
malicious
http://esd.rwbdg.com/
103.120.64.61
clean
https://a.nel.cloudflare.com/report?s=ppHr7A2wLF5kAcE6y%2BVpsyCo9aMygCPKYaC9CDSC%2BOjgJWlpB82XDV9HuT
unknown
clean
https://dns.google
unknown
clean
https://writerly.ca/#pheeke
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/?email=pheeke%40esd.wa.govSign
unknown
clean
https://kristenbakercoach.com/wp-admin/js/redir/?referrer=pheeke
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/lib/img/favicon.ico
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/nextlogin?csrftoken=MTYyMDg0OTE0NWQzZjE1NGExMzM1YTYz
unknown
clean
http://esd.rwbdg.com/wild/api.php
103.120.64.61
clean
http://rwbdg.com/u
unknown
clean
http://Esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=%22%20%2F%3E
unknown
clean
https://code.jquery.com
unknown
clean
https://kristenbakercoach.com/favicon.ico
unknown
clean
https://www.eaqarat-iran.ir/
unknown
clean
https://writerly.ca
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/?email=pheeke%40esd.wa.gov
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/checkemail?email=pheeke
unknown
clean
http://esd.rwbdg.com
unknown
clean
https://kristenbakercoach.com
unknown
clean
https://kristenbakercoach.com/wp-admin/js/redir/check.php4
unknown
clean
https://www.eaqarat-iran.ir
unknown
clean
https://kristenbakercoach.com/wp-admin/js/redir/check.php/
unknown
clean
https://code.jquery.com/jquery-3.5.1.js
unknown
clean
https://kristenbakercoach.com/
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/index?email=pheeke
unknown
clean
https://clients2.googleusercontent.com
unknown
clean
http://esd.rwbdg.com/favicon.ico
103.120.64.61
clean
https://i0.wp.com
unknown
clean
https://kristenbakercoach.com/wp-admin/js/redir/?csrftoken=MTYyMDg0OTEzMWQzZjE1NGExMzM1YTYzODE1ZGQ3O
unknown
clean
https://kristenbakercoach.comh
unknown
clean
https://feedback.googleusercontent.com
unknown
clean
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/lib/img/favicon.ico-
unknown
clean
https://kristenbakercoach.com/wp-admin/js/redir/check.php
unknown
clean
There are 31 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
writerly.ca
172.67.150.89
clean
kristenbakercoach.com
192.254.185.127
clean
i0.wp.com
192.0.77.2
clean
googlehosted.l.googleusercontent.com
142.250.185.65
clean
esd.rwbdg.com
103.120.64.61
clean
eaqarat-iran.ir
5.144.130.32
clean
clients2.googleusercontent.com
unknown
clean
code.jquery.com
unknown
clean
www.eaqarat-iran.ir
unknown
clean

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
103.120.64.61
esd.rwbdg.com
Indonesia
clean
5.144.130.32
eaqarat-iran.ir
Iran (ISLAMIC Republic Of)
clean
142.250.185.65
googlehosted.l.googleusercontent.com
United States
clean
172.67.150.89
writerly.ca
United States
clean
192.0.77.2
i0.wp.com
United States
clean
239.255.255.250
unknown
Reserved
clean
192.254.185.127
kristenbakercoach.com
United States
clean
127.0.0.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
S-1-5-21-3853321935-2125563209-4053062332-1002
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
ahfgeienlihckogmohjhadlkjgocpleb
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gdaefkejpgkiemlaofpalmlakkmbjdnl
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
kmendfapggjehodndflmmgagdbamhnfd
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mfehgcgbbipciphmccgaenjidiccnmng
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mhjfbmdgcfjbbpaeojofohoefgiehjai
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
neajdppkdcdipfabeoofebfddakdcjhd
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nkeimhogjdpnpccoofpliimaahmaaome
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pkedcjkdefgpdelpbcmbmeomcjbeemfm
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.reporting
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
module_blacklist_cache_md5_digest
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
media.storage_id_salt
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_account_id
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.account_id
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_seed
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_homepage
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
default_search_provider_data.template_url_data
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
safebrowsing.incidents_sent
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pinned_tabs
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
search_provider_overrides
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_default_search
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_username
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.startup_urls
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.restore_on_startup
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_version
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_startup_urls
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.prompt_wave
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage_is_newtabpage
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
browser.show_home_button
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
user_experience_metrics.stability.exited_cleanly
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
lastrun
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
GlobalAssocChangedCounter
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
Blob
clean
There are 41 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1D337468000
unkown
page read and write
clean
7FF50A7DF000
unkown
page readonly
clean
1AF4E24B000
unkown
page read and write
clean
7FF50A065000
unkown
page readonly
clean
1D0CC053000
unkown
page read and write
clean
7FF5A9812000
unkown
page readonly
clean
7FF578196000
unkown
page readonly
clean
7FF528C66000
unkown
page readonly
clean
20EE16CD000
unkown
page read and write
clean
7FF590295000
unkown
page readonly
clean
1CE94860000
unkown
page read and write
clean
1CE945F0000
unkown
page read and write
clean
7FF50AA4E000
unkown
page readonly
clean
23D8411E000
unkown
page read and write
clean
2708E500000
unkown
page read and write
clean
2061B8EC000
unkown
page read and write
clean
2061DB43000
unkown
page read and write
clean
7FF5C98E0000
unkown
page readonly
clean
23D8383C000
unkown
page read and write
clean
7FF578192000
unkown
page readonly
clean
20EE1713000
unkown
page read and write
clean
235BBB00000
unkown
page read and write
clean
1CE8FF00000
unkown
page read and write
clean
7FF565921000
unkown
page readonly
clean
1EF422AD000
unkown
page read and write
clean
235BB920000
heap private
page read and write
clean
1CE946F5000
unkown
page read and write
clean
7FF565848000
unkown
page readonly
clean
1CE8FB19000
unkown
page read and write
clean
7FF5A2807000
unkown
page readonly
clean
7FF50A92A000
unkown
page readonly
clean
7FF5A270A000
unkown
page readonly
clean
235BBB13000
unkown
page read and write
clean
1BFFEE68000
unkown
page read and write
clean
23D84115000
unkown
page read and write
clean
23D83800000
unkown
page read and write
clean
7FF5A2812000
unkown
page readonly
clean
54665CB000
unkown
page read and write
clean
7FF5C9982000
unkown
page readonly
clean
D338DF7000
unkown
page read and write
clean
7FF535651000
unkown
page readonly
clean
7FF50A968000
unkown
page readonly
clean
1CE94710000
unkown
page read and write
clean
1CE8FB5C000
unkown
page read and write
clean
7FF5C96A5000
unkown
page readonly
clean
7FF5B272A000
unkown
page readonly
clean
19B20713000
unkown
page read and write
clean
7FF4FF529000
unkown
page readonly
clean
15407411000
heap default
page read and write
clean
875C67F000
unkown
page read and write
clean
1D337380000
unkown
page readonly
clean
7FF5719E9000
unkown
page readonly
clean
1CE946F4000
unkown
page read and write
clean
7FF5A2F7E000
unkown
page readonly
clean
1F1D0439000
unkown
page read and write
clean
6F15D4F000
unkown
page read and write
clean
19793710000
unkown
page read and write
clean
7FF592397000
unkown
page readonly
clean
1F0C2502000
unkown
page read and write
clean
7FF509948000
unkown
page readonly
clean
7FF53C0B9000
unkown
page readonly
clean
1CE94840000
unkown
page read and write
clean
1F1D044F000
unkown
page read and write
clean
235BBA02000
unkown
page read and write
clean
7FF520F31000
unkown
page readonly
clean
7FF5357A5000
unkown
page readonly
clean
1CE946F0000
unkown
page read and write
clean
7FF5D63FD000
unkown
page readonly
clean
1EF43030000
unkown
page read and write
clean
7FF5A983A000
unkown
page readonly
clean
2B8507E000
unkown
page read and write
clean
23D83720000
heap private
page read and write
clean
7FF53BFC2000
unkown
page readonly
clean
2708E487000
unkown
page read and write
clean
7FF5B2726000
unkown
page readonly
clean
7FF4FF479000
unkown
page readonly
clean
1CE8FB59000
unkown
page read and write
clean
A288B7B000
unkown
page read and write
clean
12AD37A000
unkown
page read and write
clean
11BB4FE000
unkown
page read and write
clean
7FF5316DE000
unkown
page readonly
clean
2061D780000
unkown
page read and write
clean
5466BFF000
unkown
page read and write
clean
1B01E000000
unkown
page read and write
clean
1EF42495000
heap private
page read and write
clean
1A59EFA000
unkown
page read and write
clean
875BF7B000
unkown
page read and write
clean
7FF53179E000
unkown
page readonly
clean
7FF57190C000
unkown
page readonly
clean
7FF5210BF000
unkown
page readonly
clean
1D33746C000
unkown
page read and write
clean
2061DA53000
unkown
page read and write
clean
1CE94AE5000
unkown
page read and write
clean
2061B913000
unkown
page read and write
clean
7FF5B2580000
unkown
page readonly
clean
7FF578220000
unkown
page readonly
clean
19B20A00000
unkown
page readonly
clean
7FF565963000
unkown
page readonly
clean
7FF53BEC3000
unkown
page readonly
clean
7FF5288B4000
unkown
page readonly
clean
7FF5D64F0000
unkown
page readonly
clean
1A59D7F000
unkown
page read and write
clean
2061B8BB000
unkown
page read and write
clean
2B84DFB000
unkown
page read and write
clean
23A87930000
unkown
page read and write
clean
7FF535811000
unkown
page readonly
clean
7FF5C995C000
unkown
page readonly
clean
27578C13000
unkown
page read and write
clean
7FF591F35000
unkown
page readonly
clean
1CE94C00000
unkown
page read and write
clean
7FF50A0AC000
unkown
page readonly
clean
2061D94F000
unkown
page read and write
clean
2061D9B1000
unkown
page read and write
clean
7FF565658000
unkown
page readonly
clean
B056FCB000
unkown
page read and write
clean
1D0CC802000
unkown
page read and write
clean
20EE1500000
heap default
page read and write
clean
5466C7C000
unkown
page read and write
clean
61E15FE000
unkown
page read and write
clean
7FF4FF46F000
unkown
page readonly
clean
7FF5A31C2000
unkown
page readonly
clean
7FF5A27EC000
unkown
page readonly
clean
1CE8F271000
unkown
page read and write
clean
1CE8F2B7000
unkown
page read and write
clean
7FF53C036000
unkown
page readonly
clean
1CE90110000
unkown
page read and write
clean
20EE1F12000
unkown
page read and write
clean
27578C02000
unkown
page read and write
clean
2061D9A6000
unkown
page read and write
clean
7FF5C99DE000
unkown
page readonly
clean
7FF53C0B9000
unkown
page readonly
clean
19791914000
unkown
page read and write
clean
7FF509E77000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
2061DB83000
unkown
page read and write
clean
7FF5A978C000
unkown
page readonly
clean
1F1D0449000
unkown
page read and write
clean
7FF50A6C7000
unkown
page readonly
clean
7FF520CB1000
unkown
page readonly
clean
7FF50A6C3000
unkown
page readonly
clean
23A87C00000
unkown
page read and write
clean
214EE1E0000
unkown
page read and write
clean
1A5A0FB000
unkown
page read and write
clean
1A59C7B000
unkown
page read and write
clean
7FF52098D000
unkown
page readonly
clean
7FF53BFDA000
unkown
page readonly
clean
7FF5C9925000
unkown
page readonly
clean
BA2FBDE000
unkown
page read and write
clean
7FF5B2796000
unkown
page readonly
clean
7FF5D6461000
unkown
page readonly
clean
7FF59232E000
unkown
page readonly
clean
A2889F5000
unkown
page read and write
clean
1F1D03A0000
unkown
page readonly
clean
7FF595A65000
unkown
page readonly
clean
1CE8FB02000
unkown
page read and write
clean
1B01E059000
unkown
page read and write
clean
7FF5A96EA000
unkown
page readonly
clean
1CE949C4000
unkown
page readonly
clean
7FF528C25000
unkown
page readonly
clean
7FF53559F000
unkown
page readonly
clean
6D3AAFF000
unkown
page read and write
clean
7FF595B79000
unkown
page readonly
clean
1D0CC08A000
unkown
page read and write
clean
15407320000
unkown
page readonly
clean
7FF531726000
unkown
page readonly
clean
7FF53C03C000
unkown
page readonly
clean
7FF5B275F000
unkown
page readonly
clean
7FF5655C1000
unkown
page readonly
clean
1EF42170000
unkown
page readonly
clean
1F1D0469000
unkown
page read and write
clean
2708E3C0000
heap default
page read and write
clean
1EF42268000
heap default
page read and write
clean
2061D973000
unkown
page read and write
clean
20EE15E0000
unkown
page readonly
clean
7FF5A989C000
unkown
page readonly
clean
2061DD02000
unkown
page read and write
clean
15407310000
unkown
page readonly
clean
7FF5A9896000
unkown
page readonly
clean
23A871A0000
heap default
page read and write
clean
7FF5D64EE000
unkown
page readonly
clean
19B21000000
unkown
page readonly
clean
20EE1702000
unkown
page read and write
clean
154072F0000
unkown
page read and write
clean
2061DA84000
unkown
page read and write
clean
BA301FF000
unkown
page read and write
clean
2061E010000
unkown
page read and write
clean
12AD2FA000
unkown
page read and write
clean
7FF531661000
unkown
page readonly
clean
23A87202000
unkown
page read and write
clean
7FF50A848000
unkown
page readonly
clean
7FF5A9410000
unkown
page readonly
clean
7FF571A99000
unkown
page readonly
clean
7FF50A950000
unkown
page readonly
clean
1CE8F2F9000
unkown
page read and write
clean
7DFEB2C61000
unkown
page readonly
clean
7FF595DA9000
unkown
page readonly
clean
7FF5659C5000
unkown
page readonly
clean
875C57D000
unkown
page read and write
clean
5C7DC7B000
unkown
page read and write
clean
23D83813000
unkown
page read and write
clean
197918BE000
unkown
page read and write
clean
23A87252000
unkown
page read and write
clean
7FF5357B4000
unkown
page readonly
clean
1F0C2459000
unkown
page read and write
clean
7FF535320000
unkown
page readonly
clean
2061D9E5000
unkown
page read and write
clean
1CE94AD8000
unkown
page read and write
clean
7FF5B24E0000
unkown
page readonly
clean
7FF5A9911000
unkown
page readonly
clean
154073D0000
heap default
page read and write
clean
7FF565998000
unkown
page readonly
clean
7FF5854E9000
unkown
page readonly
clean
1F1D044B000
unkown
page read and write
clean
7FF5D6224000
unkown
page readonly
clean
7FF50A05E000
unkown
page readonly
clean
9C7D27F000
unkown
page read and write
clean
7FF4FF39C000
unkown
page readonly
clean
7FF5D6062000
unkown
page readonly
clean
7FF56573E000
unkown
page readonly
clean
7FF5316CA000
unkown
page readonly
clean
7FF5316B6000
unkown
page readonly
clean
2061DA77000
unkown
page read and write
clean
19B20C70000
unkown
page readonly
clean
1979187D000
unkown
page read and write
clean
7FF5A9420000
unkown
page readonly
clean
7FF520D8C000
unkown
page readonly
clean
7FF520EDE000
unkown
page readonly
clean
1AF4E255000
unkown
page read and write
clean
7FF571A91000
unkown
page readonly
clean
7FF53BF2C000
unkown
page readonly
clean
7FF50A99F000
unkown
page readonly
clean
2061DAA4000
unkown
page read and write
clean
7FF520E8F000
unkown
page readonly
clean
19B20E02000
unkown
page read and write
clean
1F1D0483000
unkown
page read and write
clean
8D33BFE000
unkown
page read and write
clean
7FF528905000
unkown
page readonly
clean
1F0C21B0000
heap private
page read and write
clean
1BFFEF13000
unkown
page read and write
clean
1CE8FA15000
unkown
page read and write
clean
7FF509FE1000
unkown
page readonly
clean
7FF53171C000
unkown
page readonly
clean
19793780000
unkown
page readonly
clean
7FF53C0B1000
unkown
page readonly
clean
7FF59233F000
unkown
page readonly
clean
7FF509D93000
unkown
page readonly
clean
235BD530000
unkown
page read and write
clean
23D84136000
unkown
page read and write
clean
414D0FF000
unkown
page read and write
clean
7FF5C994D000
unkown
page readonly
clean
7FF57815A000
unkown
page readonly
clean
235BB990000
unkown
page readonly
clean
2061E110000
unkown
page read and write
clean
2061B96D000
unkown
page read and write
clean
235BBC00000
unkown
page readonly
clean
1CE94AE3000
unkown
page read and write
clean
1CE946F4000
unkown
page read and write
clean
7FF595D1C000
unkown
page readonly
clean
1CE94AE1000
unkown
page read and write
clean
7FF5C9956000
unkown
page readonly
clean
197918B8000
unkown
page read and write
clean
19793802000
unkown
page read and write
clean
1D0CC113000
unkown
page read and write
clean
7FF58F71D000
unkown
page readonly
clean
7FF50A58D000
unkown
page readonly
clean
235BB980000
heap default
page read and write
clean
7FF5A2804000
unkown
page readonly
clean
7FF5D641A000
unkown
page readonly
clean
B0573FF000
unkown
page read and write
clean
1F1D044E000
unkown
page read and write
clean
1A59CFB000
unkown
page read and write
clean
1CE8FB59000
unkown
page read and write
clean
7FF578141000
unkown
page readonly
clean
19B20647000
unkown
page read and write
clean
7FF5D6485000
unkown
page readonly
clean
7FF509D84000
unkown
page readonly
clean
7FF5A3177000
unkown
page readonly
clean
7FF5A2800000
unkown
page readonly
clean
2061E010000
unkown
page read and write
clean
7FF5659D9000
unkown
page readonly
clean
2061D94D000
unkown
page read and write
clean
1CE8F190000
unkown
page read and write
clean
3EDAEFF000
unkown
page read and write
clean
BB0F6FA000
unkown
page read and write
clean
414D17E000
unkown
page read and write
clean
19B2064A000
unkown
page read and write
clean
7FF5A3267000
unkown
page readonly
clean
20EE1B90000
unkown
page readonly
clean
7FF5D6307000
unkown
page readonly
clean
1CE90200000
unkown
page readonly
clean
7FF5A2714000
unkown
page readonly
clean
1F1D06D0000
unkown
page readonly
clean
8D33AFB000
unkown
page read and write
clean
23A87302000
unkown
page read and write
clean
2708E3F0000
unkown
page read and write
clean
197918C6000
unkown
page read and write
clean
3EDA8FD000
unkown
page read and write
clean
23D8414D000
unkown
page read and write
clean
7FF571A25000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
1A5A27F000
unkown
page read and write
clean
1AF4E313000
unkown
page read and write
clean
1CE94711000
unkown
page read and write
clean
2061BB20000
unkown
page readonly
clean
1D337250000
heap default
page read and write
clean
875C17F000
unkown
page read and write
clean
7FF528C51000
unkown
page readonly
clean
1CE946FA000
unkown
page read and write
clean
23D83882000
unkown
page read and write
clean
BA2FFFE000
unkown
page read and write
clean
7FF509F37000
unkown
page readonly
clean
1AF4E249000
unkown
page read and write
clean
1A59E7B000
unkown
page read and write
clean
7FF535819000
unkown
page readonly
clean
7FF528CE9000
unkown
page readonly
clean
1CE8F170000
unkown
page readonly
clean
BB0F77F000
unkown
page read and write
clean
7FF50A038000
unkown
page readonly
clean
1D337413000
unkown
page read and write
clean
1CE8F26C000
unkown
page read and write
clean
7FF521082000
unkown
page readonly
clean
1CE8FB19000
unkown
page read and write
clean
7FF53BFEE000
unkown
page readonly
clean
7FF520E9A000
unkown
page readonly
clean
214EC453000
unkown
page read and write
clean
7FF565750000
unkown
page readonly
clean
2061E310000
unkown
page read and write
clean
7FF535623000
unkown
page readonly
clean
7FF590259000
unkown
page readonly
clean
7FF531747000
unkown
page readonly
clean
1CE946FF000
unkown
page read and write
clean
19791760000
heap private
page read and write
clean
23D838C2000
unkown
page read and write
clean
7FF5902FE000
unkown
page readonly
clean
7FF5A31D6000
unkown
page readonly
clean
7FF50A9F4000
unkown
page readonly
clean
19791813000
unkown
page read and write
clean
1EF42110000
unkown
page read and write
clean
20EE1F00000
unkown
page read and write
clean
7FF5C964D000
unkown
page readonly
clean
1D337468000
unkown
page read and write
clean
7FF561C71000
unkown
page readonly
clean
2061D780000
unkown
page readonly
clean
23D838E0000
unkown
page read and write
clean
1D0CC002000
unkown
page read and write
clean
19791887000
unkown
page read and write
clean
F94591B000
unkown
page read and write
clean
2708E44C000
unkown
page read and write
clean
1F1D0455000
unkown
page read and write
clean
1AF4EF40000
unkown
page readonly
clean
1CE94A3F000
unkown
page read and write
clean
23A874D0000
unkown
page readonly
clean
1AF4E200000
unkown
page read and write
clean
1CE8F9E3000
unkown
page read and write
clean
1CE94B00000
unkown
page read and write
clean
1CE8F9C1000
unkown
page read and write
clean
27578BF0000
unkown
page readonly
clean
7FF5659F1000
unkown
page readonly
clean
F9460FE000
unkown
page read and write
clean
214EC600000
unkown
page readonly
clean
1F1D0446000
unkown
page read and write
clean
7FF5A26E7000
unkown
page readonly
clean
1D0CC071000
unkown
page read and write
clean
2061D99C000
unkown
page read and write
clean
7FF520BE9000
unkown
page readonly
clean
1F1D0440000
unkown
page read and write
clean
14F0C854000
unkown
page read and write
clean
1BFFEE6A000
unkown
page read and write
clean
7FF4FF422000
unkown
page readonly
clean
7FF5C9984000
unkown
page readonly
clean
7FF5B2474000
unkown
page readonly
clean
7FF53574E000
unkown
page readonly
clean
7FF591F31000
unkown
page readonly
clean
7FF5A31AC000
unkown
page readonly
clean
1CE949B0000
unkown
page read and write
clean
7FF521171000
unkown
page readonly
clean
7FF5B27A7000
unkown
page readonly
clean
19793720000
unkown
page readonly
clean
7FF585477000
unkown
page readonly
clean
2061DA00000
unkown
page read and write
clean
1F1D0445000
unkown
page read and write
clean
1CE94ABA000
unkown
page read and write
clean
F945D75000
unkown
page read and write
clean
1CE90230000
unkown
page readonly
clean
1D0CC04B000
unkown
page read and write
clean
6F1637F000
unkown
page read and write
clean
7FF4FF01A000
unkown
page readonly
clean
7FF5A302E000
unkown
page readonly
clean
7FF50A04A000
unkown
page readonly
clean
7FF59023E000
unkown
page readonly
clean
7FF5B24D5000
unkown
page readonly
clean
1BFFF560000
unkown
page readonly
clean
7FF4FF2EA000
unkown
page readonly
clean
2061E000000
unkown
page read and write
clean
7FF5210AE000
unkown
page readonly
clean
6D3A5DB000
unkown
page read and write
clean
7FF521179000
unkown
page readonly
clean
7FF5D6449000
unkown
page readonly
clean
7FF5657AB000
unkown
page readonly
clean
1CE8F241000
unkown
page read and write
clean
7FF57820C000
unkown
page readonly
clean
7FF590218000
unkown
page readonly
clean
7FF5315B3000
unkown
page readonly
clean
1A594EB000
unkown
page read and write
clean
1BFFEF00000
unkown
page read and write
clean
7FF5A31C0000
unkown
page readonly
clean
1A5956E000
unkown
page read and write
clean
1D33746A000
unkown
page read and write
clean
7FF53BFF5000
unkown
page readonly
clean
1F0C2220000
unkown
page readonly
clean
1D0CC026000
unkown
page read and write
clean
23D837A0000
unkown
page readonly
clean
19B20655000
unkown
page read and write
clean
2061D3C0000
unkown
page readonly
clean
7FF5D612E000
unkown
page readonly
clean
1B01E079000
unkown
page read and write
clean
7FF53553A000
unkown
page readonly
clean
7FF5853BC000
unkown
page readonly
clean
7FF528C4D000
unkown
page readonly
clean
14F0C710000
unkown
page readonly
clean
5C7DD77000
unkown
page read and write
clean
D338FFD000
unkown
page read and write
clean
1A59AF9000
unkown
page read and write
clean
7FF50A90A000
unkown
page readonly
clean
19793964000
unkown
page read and write
clean
19791854000
unkown
page read and write
clean
7FF520FB1000
unkown
page readonly
clean
2061D913000
unkown
page read and write
clean
7FF528C6C000
unkown
page readonly
clean
B05727E000
unkown
page read and write
clean
3EDAAFE000
unkown
page read and write
clean
235BBA5F000
unkown
page read and write
clean
7FF5C8DEE000
unkown
page readonly
clean
23D838C6000
unkown
page read and write
clean
7FF565941000
unkown
page readonly
clean
11BAF3B000
unkown
page read and write
clean
7FF565A15000
unkown
page readonly
clean
1CE94AB0000
unkown
page read and write
clean
7FF5781ED000
unkown
page readonly
clean
42E047C000
unkown
page read and write
clean
7FF592127000
unkown
page readonly
clean
1AF4E400000
unkown
page readonly
clean
1BFFEE6E000
unkown
page read and write
clean
5C7DA7E000
unkown
page read and write
clean
1D337260000
unkown
page readonly
clean
23D83FB0000
unkown
page read and write
clean
1EF42460000
unkown
page readonly
clean
2708E3D0000
unkown
page readonly
clean
1CE94B02000
unkown
page read and write
clean
7FF5659FC000
unkown
page readonly
clean
23D83A00000
unkown
page readonly
clean
5C7D74C000
unkown
page read and write
clean
7FF4FF4A6000
unkown
page readonly
clean
7FF50A0A6000
unkown
page readonly
clean
20EE1629000
unkown
page read and write
clean
7FF5D645D000
unkown
page readonly
clean
7FF577FF0000
unkown
page readonly
clean
14F0C7F0000
unkown
page read and write
clean
1B01E2D0000
unkown
page readonly
clean
7FF53BEA8000
unkown
page readonly
clean
7FF595DA9000
unkown
page readonly
clean
7FF5781C5000
unkown
page readonly
clean
7FF59237C000
unkown
page readonly
clean
1CE94593000
unkown
page read and write
clean
7FF5C98E2000
unkown
page readonly
clean
20EE2340000
unkown
page readonly
clean
7FF50A096000
unkown
page readonly
clean
7FF578093000
unkown
page readonly
clean
235BBA90000
unkown
page read and write
clean
235BBA00000
unkown
page read and write
clean
1CE947C0000
unkown
page readonly
clean
23D83913000
unkown
page read and write
clean
23A87A02000
unkown
page read and write
clean
8D337FA000
unkown
page read and write
clean
7FF521057000
unkown
page readonly
clean
23D83790000
unkown
page readonly
clean
197917C0000
heap default
page read and write
clean
1BFFEE40000
unkown
page read and write
clean
1CE90590000
unkown
page read and write
clean
7FF5A9822000
unkown
page readonly
clean
7FF5316B8000
unkown
page readonly
clean
1F1D0447000
unkown
page read and write
clean
7FF5A2FFC000
unkown
page readonly
clean
7FF5922DC000
unkown
page readonly
clean
7FF5851A5000
unkown
page readonly
clean
D338CF7000
unkown
page read and write
clean
1CE94A2D000
unkown
page read and write
clean
7FF5A9855000
unkown
page readonly
clean
1540740A000
heap default
page read and write
clean
1EF42E10000
unkown
page read and write
clean
19B20613000
unkown
page read and write
clean
1CE947F8000
unkown
page read and write
clean
2708E6D0000
unkown
page readonly
clean
7FF5C97B9000
unkown
page readonly
clean
1CE90240000
unkown
page readonly
clean
BA2FADB000
unkown
page read and write
clean
2708E502000
unkown
page read and write
clean
14F0C5C0000
heap private
page read and write
clean
1D0CC102000
unkown
page read and write
clean
23A87200000
unkown
page read and write
clean
5466CF9000
unkown
page read and write
clean
7FF571833000
unkown
page readonly
clean
2061E210000
unkown
page read and write
clean
61E11FF000
unkown
page read and write
clean
5C7DB75000
unkown
page read and write
clean
7FF56515E000
unkown
page readonly
clean
7FF5B277D000
unkown
page readonly
clean
6D3A979000
unkown
page read and write
clean
19B20702000
unkown
page read and write
clean
1BFFEE6E000
unkown
page read and write
clean
7FF585439000
unkown
page readonly
clean
23D83F90000
unkown
page readonly
clean
7FF5D6406000
unkown
page readonly
clean
7FF528BB7000
unkown
page readonly
clean
7FF565737000
unkown
page readonly
clean
19791800000
unkown
page read and write
clean
12ACF2B000
unkown
page read and write
clean
7FF53BBAA000
unkown
page readonly
clean
7FF5852D8000
unkown
page readonly
clean
7FF4FF420000
unkown
page readonly
clean
7FF50A9C6000
unkown
page readonly
clean
7FF53B4DB000
unkown
page readonly
clean
14F0C7E0000
unkown
page readonly
clean
23A87140000
heap private
page read and write
clean
1BFFEE6A000
unkown
page read and write
clean
1AF4E252000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
1EF43060000
unkown
page readonly
clean
7FF595CCA000
unkown
page readonly
clean
19B20700000
unkown
page read and write
clean
1F1D0C02000
unkown
page read and write
clean
1B01E100000
unkown
page read and write
clean
7FF50A129000
unkown
page readonly
clean
7FF5A27A5000
unkown
page readonly
clean
42E077E000
unkown
page read and write
clean
7FF5D63E8000
unkown
page readonly
clean
1CE946F5000
unkown
page read and write
clean
1CE94AC1000
unkown
page read and write
clean
7FF5781AA000
unkown
page readonly
clean
7FF5A98A5000
unkown
page readonly
clean
7FF5854E1000
unkown
page readonly
clean
7FF5A9886000
unkown
page readonly
clean
2061D951000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
7FF5719A8000
unkown
page readonly
clean
1979188C000
unkown
page read and write
clean
7FF521088000
unkown
page readonly
clean
14F0C800000
unkown
page read and write
clean
7FF5781F6000
unkown
page readonly
clean
197918A7000
unkown
page read and write
clean
2061DA37000
unkown
page read and write
clean
7FF528C75000
unkown
page readonly
clean
1EF422C0000
heap default
page read and write
clean
2061D9C2000
unkown
page read and write
clean
7FF5D643F000
unkown
page readonly
clean
7FF5A317A000
unkown
page readonly
clean
7FF56583C000
unkown
page readonly
clean
14F0C841000
unkown
page read and write
clean
1B01E113000
unkown
page read and write
clean
1CE94734000
unkown
page read and write
clean
20EE14A0000
heap private
page read and write
clean
7FF5288A0000
unkown
page readonly
clean
1F0C3EA0000
unkown
page readonly
clean
7FF50A798000
unkown
page readonly
clean
7FF5316B2000
unkown
page readonly
clean
1A5A1FD000
unkown
page read and write
clean
7FF5A27D1000
unkown
page readonly
clean
1F0C3DA0000
unkown
page read and write
clean
7FF5A9723000
unkown
page readonly
clean
7FF5314FA000
unkown
page readonly
clean
1CE94A62000
unkown
page read and write
clean
7FF535728000
unkown
page readonly
clean
2708E600000
unkown
page readonly
clean
1CE94970000
unkown
page readonly
clean
7FF5C98F2000
unkown
page readonly
clean
7FF5A972D000
unkown
page readonly
clean
7FF53573A000
unkown
page readonly
clean
7FF595D35000
unkown
page readonly
clean
7FF5657EE000
unkown
page readonly
clean
7FF590245000
unkown
page readonly
clean
7FF5A32C9000
unkown
page readonly
clean
1CE8FB13000
unkown
page read and write
clean
7FF578227000
unkown
page readonly
clean
1CE94890000
unkown
page readonly
clean
23A871B0000
unkown
page readonly
clean
7FF561C71000
unkown
page readonly
clean
1D33746B000
unkown
page read and write
clean
7FF5B2786000
unkown
page readonly
clean
1BFFEE6A000
unkown
page read and write
clean
7FF520F3E000
unkown
page readonly
clean
1B01EA00000
unkown
page readonly
clean
7FF57827E000
unkown
page readonly
clean
2061D700000
unkown
page read and write
clean
7FF50A036000
unkown
page readonly
clean
1A5987A000
unkown
page read and write
clean
1AF4E255000
unkown
page read and write
clean
7FF5781FC000
unkown
page readonly
clean
414CE7C000
unkown
page read and write
clean
1BFFEE6E000
unkown
page read and write
clean
1CE8F090000
heap default
page read and write
clean
2061B95E000
unkown
page read and write
clean
8D338FA000
unkown
page read and write
clean
7FF595B0E000
unkown
page readonly
clean
7FF5B26EA000
unkown
page readonly
clean
7FF5C96B0000
unkown
page readonly
clean
1EF422B5000
unkown
page read and write
clean
7FF528CE1000
unkown
page readonly
clean
7FF5C9713000
unkown
page readonly
clean
20EE1800000
unkown
page readonly
clean
6F15DCF000
unkown
page read and write
clean
1F0C2413000
unkown
page read and write
clean
7FF5D6476000
unkown
page readonly
clean
19793790000
unkown
page read and write
clean
7FF590309000
unkown
page readonly
clean
7FF5D6298000
unkown
page readonly
clean
1CE8FB19000
unkown
page read and write
clean
7FF5317A9000
unkown
page readonly
clean
7FF509FFA000
unkown
page readonly
clean
7FF5D6385000
unkown
page readonly
clean
1D33746B000
unkown
page read and write
clean
7FF5C8E05000
unkown
page readonly
clean
1EF430D0000
unkown
page read and write
clean
7FF5A323C000
unkown
page readonly
clean
7FF5A277A000
unkown
page readonly
clean
1CE8F400000
unkown
page readonly
clean
7FF4FF465000
unkown
page readonly
clean
7FF5902A7000
unkown
page readonly
clean
42E06FF000
unkown
page read and write
clean
A288A7E000
unkown
page read and write
clean
7FF53BBB0000
unkown
page readonly
clean
1AF4EC00000
unkown
page readonly
clean
1F1D0461000
unkown
page read and write
clean
7FF5712BA000
unkown
page readonly
clean
20EE16BC000
unkown
page read and write
clean
7FF5951BF000
unkown
page readonly
clean
1D33746B000
unkown
page read and write
clean
1CE90030000
unkown
page read and write
clean
7FF595A5E000
unkown
page readonly
clean
2061B813000
unkown
page read and write
clean
2708E429000
unkown
page read and write
clean
1F1D0441000
unkown
page read and write
clean
7FF5A9751000
unkown
page readonly
clean
7FF565745000
unkown
page readonly
clean
1CE94A55000
unkown
page read and write
clean
214EC3C0000
unkown
page readonly
clean
14F0C802000
unkown
page read and write
clean
7FF5355EA000
unkown
page readonly
clean
7FF4FF333000
unkown
page readonly
clean
7FF5902A0000
unkown
page readonly
clean
8D33DFE000
unkown
page read and write
clean
19B2068A000
unkown
page read and write
clean
6F161FE000
unkown
page read and write
clean
2061D950000
unkown
page read and write
clean
197933C0000
unkown
page readonly
clean
7FF50A911000
unkown
page readonly
clean
2061DC02000
unkown
page read and write
clean
7FF5D625E000
unkown
page readonly
clean
7FF50AA59000
unkown
page readonly
clean
197937A0000
unkown
page readonly
clean
7FF58539A000
unkown
page readonly
clean
7FF595B68000
unkown
page readonly
clean
1A595EF000
unkown
page read and write
clean
7FF5A247C000
unkown
page readonly
clean
1CE8F200000
unkown
page read and write
clean
19791A00000
unkown
page readonly
clean
D33907F000
unkown
page read and write
clean
7FF59008F000
unkown
page readonly
clean
7FF521068000
unkown
page readonly
clean
1CE8F0A0000
unkown
page readonly
clean
2061D9DE000
unkown
page read and write
clean
7FF5210C9000
unkown
page readonly
clean
7FF5A313C000
unkown
page readonly
clean
7FF50A8FA000
unkown
page readonly
clean
23D83902000
unkown
page read and write
clean
20EE1CA0000
unkown
page write copy
clean
7FF590276000
unkown
page readonly
clean
7FF531657000
unkown
page readonly
clean
1AF4E302000
unkown
page read and write
clean
1EF422AD000
unkown
page read and write
clean
7FF5B2608000
unkown
page readonly
clean
7FF571905000
unkown
page readonly
clean
1D0CC013000
unkown
page read and write
clean
7FF5B2728000
unkown
page readonly
clean
8D3407D000
unkown
page read and write
clean
3EDA7FF000
unkown
page read and write
clean
27578C29000
unkown
page read and write
clean
1BFFEE13000
unkown
page read and write
clean
1B01E740000
unkown
page readonly
clean
8D33F7A000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
7FF5B27B0000
unkown
page readonly
clean
2061B8E9000
unkown
page read and write
clean
7FF50A937000
unkown
page readonly
clean
7FF5316BA000
unkown
page readonly
clean
7FF5315B7000
unkown
page readonly
clean
1CE8F29A000
unkown
page read and write
clean
1CE94850000
unkown
page read and write
clean
1BFFEE00000
unkown
page read and write
clean
7FF53BFC6000
unkown
page readonly
clean
1CE946F8000
unkown
page read and write
clean
214EC429000
unkown
page read and write
clean
2061D780000
unkown
page read and write
clean
2708EE00000
unkown
page readonly
clean
7FF56596C000
unkown
page readonly
clean
214EC46D000
unkown
page read and write
clean
1EF422B5000
unkown
page read and write
clean
54669FA000
unkown
page read and write
clean
1CE94590000
unkown
page read and write
clean
7FF5A32C9000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
1D0CC000000
unkown
page read and write
clean
7FF531417000
unkown
page readonly
clean
7FF5B273A000
unkown
page readonly
clean
7FF53BE8A000
unkown
page readonly
clean
2708E43C000
unkown
page read and write
clean
2061D934000
unkown
page read and write
clean
1CE94720000
unkown
page read and write
clean
1CE90210000
unkown
page readonly
clean
1CE94AAB000
unkown
page read and write
clean
7FF53BDDA000
unkown
page readonly
clean
1D0CC660000
unkown
page readonly
clean
23A87213000
unkown
page read and write
clean
7FF58541E000
unkown
page readonly
clean
7FF531413000
unkown
page readonly
clean
7FF5A2869000
unkown
page readonly
clean
7FF5D6435000
unkown
page readonly
clean
1D337468000
unkown
page read and write
clean
7FF565A80000
unkown
page readonly
clean
7FF509FFC000
unkown
page readonly
clean
B0572FE000
unkown
page read and write
clean
7FF5C976F000
unkown
page readonly
clean
2061B91C000
unkown
page read and write
clean
7FF5852F3000
unkown
page readonly
clean
7FF5280DD000
unkown
page readonly
clean
19793790000
unkown
page read and write
clean
19791900000
unkown
page read and write
clean
D338AFF000
unkown
page read and write
clean
8D33CFE000
unkown
page read and write
clean
7FF595CEF000
unkown
page readonly
clean
7FF5B2769000
unkown
page readonly
clean
2B851FA000
unkown
page read and write
clean
23D83E60000
unkown
page readonly
clean
1F0C22F0000
unkown
page write copy
clean
7FF585144000
unkown
page readonly
clean
2708EC02000
unkown
page read and write
clean
7FF578289000
unkown
page readonly
clean
7FF5D64F9000
unkown
page readonly
clean
2061DB43000
unkown
page read and write
clean
1CE94AE8000
unkown
page read and write
clean
7FF5D60E1000
unkown
page readonly
clean
1CE94AA2000
unkown
page read and write
clean
414D67C000
unkown
page read and write
clean
7FF50A9C1000
unkown
page readonly
clean
20EE16CB000
unkown
page read and write
clean
235BBA5F000
unkown
page read and write
clean
7FF590216000
unkown
page readonly
clean
15407635000
heap private
page read and write
clean
1BFFEE6E000
unkown
page read and write
clean
1F1D047D000
unkown
page read and write
clean
1A5997F000
unkown
page read and write
clean
7FF5657C8000
unkown
page readonly
clean
1CE8F213000
unkown
page read and write
clean
7FF520E40000
unkown
page readonly
clean
1CE94AD4000
unkown
page read and write
clean
7FF535608000
unkown
page readonly
clean
42E07FC000
unkown
page read and write
clean
7FF595DA1000
unkown
page readonly
clean
7FF592385000
unkown
page readonly
clean
27578D02000
unkown
page read and write
clean
7FF5A9826000
unkown
page readonly
clean
1979391D000
unkown
page read and write
clean
7FF5A9919000
unkown
page readonly
clean
2061D993000
unkown
page read and write
clean
1D33746B000
unkown
page read and write
clean
7FF5659CF000
unkown
page readonly
clean
7FF50A079000
unkown
page readonly
clean
7FF5655C3000
unkown
page readonly
clean
61E12FC000
unkown
page read and write
clean
7FF50A0C4000
unkown
page readonly
clean
7FF56569F000
unkown
page readonly
clean
1CE8FB5C000
unkown
page read and write
clean
8D332DC000
unkown
page read and write
clean
7FF5C99E9000
unkown
page readonly
clean
1D3371F0000
heap private
page read and write
clean
27578BE0000
heap default
page read and write
clean
7FF5A8FEB000
unkown
page readonly
clean
2061D9BF000
unkown
page read and write
clean
1F1D0502000
unkown
page read and write
clean
7FF595D44000
unkown
page readonly
clean
7FF5A96DE000
unkown
page readonly
clean
7FF5B2487000
unkown
page readonly
clean
7FF595CF9000
unkown
page readonly
clean
1CE94940000
unkown
page read and write
clean
3EDA67A000
unkown
page read and write
clean
27578C5C000
unkown
page read and write
clean
A288C77000
unkown
page read and write
clean
7FF4FF432000
unkown
page readonly
clean
1F1D0460000
unkown
page read and write
clean
7FF571A06000
unkown
page readonly
clean
7FF5781CF000
unkown
page readonly
clean
19793933000
unkown
page read and write
clean
7FF52105C000
unkown
page readonly
clean
6F16279000
unkown
page read and write
clean
7FF521114000
unkown
page readonly
clean
1CE94AAF000
unkown
page read and write
clean
7FF5A2861000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
7FF5652C5000
unkown
page readonly
clean
1CE8F29C000
unkown
page read and write
clean
1CE947D4000
unkown
page readonly
clean
3EDADFF000
unkown
page read and write
clean
7FF5854DE000
unkown
page readonly
clean
1CE8F180000
unkown
page readonly
clean
7FF50A92C000
unkown
page readonly
clean
7FF5C9939000
unkown
page readonly
clean
1EF42260000
heap default
page read and write
clean
7FF5A3219000
unkown
page readonly
clean
1F1D0466000
unkown
page read and write
clean
1F0C2340000
unkown
page readonly
clean
5466A7F000
unkown
page read and write
clean
7FF564ED8000
unkown
page readonly
clean
23D83AD0000
unkown
page readonly
clean
14F0C82A000
unkown
page read and write
clean
7FF528C5C000
unkown
page readonly
clean
1EF42D90000
unkown
page read and write
clean
7FF50A03A000
unkown
page readonly
clean
7FF5B2819000
unkown
page readonly
clean
14F0C620000
heap default
page read and write
clean
7FF5A2F90000
unkown
page readonly
clean
7FF5D6377000
unkown
page readonly
clean
7FF5316F9000
unkown
page readonly
clean
15407360000
unkown
page readonly
clean
1BFFEE6A000
unkown
page read and write
clean
154073D8000
heap default
page read and write
clean
7FF5A963A000
unkown
page readonly
clean
235BBA4F000
unkown
page read and write
clean
1B01E002000
unkown
page read and write
clean
7FF592361000
unkown
page readonly
clean
7FF53172C000
unkown
page readonly
clean
7FF5A31EA000
unkown
page readonly
clean
7FF56569C000
unkown
page readonly
clean
2061BA00000
unkown
page readonly
clean
7FF5718A7000
unkown
page readonly
clean
1CE946F0000
unkown
page read and write
clean
14F0C700000
unkown
page readonly
clean
1CE8FB18000
unkown
page read and write
clean
1CE94980000
unkown
page read and write
clean
7FF5317A1000
unkown
page readonly
clean
7FF5A2776000
unkown
page readonly
clean
214EC230000
heap private
page read and write
clean
6D3AA7E000
unkown
page read and write
clean
2061E110000
unkown
page read and write
clean
7FF528CE9000
unkown
page readonly
clean
214EC513000
unkown
page read and write
clean
214EC502000
unkown
page read and write
clean
7FF585250000
unkown
page readonly
clean
235BB9A0000
unkown
page readonly
clean
BB0F30F000
unkown
page read and write
clean
7FF5A319C000
unkown
page readonly
clean
7FF5C98F6000
unkown
page readonly
clean
7FF595D9E000
unkown
page readonly
clean
1CE94A00000
unkown
page read and write
clean
7FF585487000
unkown
page readonly
clean
7FF58F71B000
unkown
page readonly
clean
7FF571A0C000
unkown
page readonly
clean
1EF43070000
unkown
page read and write
clean
D33873B000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
1F1D046A000
unkown
page read and write
clean
23A871C0000
unkown
page readonly
clean
D338BFC000
unkown
page read and write
clean
1F1D0390000
heap default
page read and write
clean
235BBA4F000
unkown
page read and write
clean
2B85179000
unkown
page read and write
clean
7FF4FF33D000
unkown
page readonly
clean
7FF50A867000
unkown
page readonly
clean
7FF509F33000
unkown
page readonly
clean
7FF5A98B0000
unkown
page readonly
clean
2061E710000
unkown
page read and write
clean
7FF4FF361000
unkown
page readonly
clean
7FF5854E9000
unkown
page readonly
clean
1B01DFF0000
heap default
page read and write
clean
20EE15F0000
unkown
page readonly
clean
2061D2C0000
unkown
page read and write
clean
1AF4E130000
heap private
page read and write
clean
5466D7F000
unkown
page read and write
clean
7FF50A9F7000
unkown
page readonly
clean
1F1D0444000
unkown
page read and write
clean
7FF535769000
unkown
page readonly
clean
1B01E03C000
unkown
page read and write
clean
414D3FE000
unkown
page read and write
clean
23A871D0000
unkown
page read and write
clean
2B850FE000
unkown
page read and write
clean
7FF5A3181000
unkown
page readonly
clean
1AF4E1A0000
unkown
page readonly
clean
7FF59235D000
unkown
page readonly
clean
7FF585425000
unkown
page readonly
clean
7FF53530A000
unkown
page readonly
clean
A2888FE000
unkown
page read and write
clean
1AF4E1B0000
unkown
page readonly
clean
1CE946FA000
unkown
page read and write
clean
7FF5A3008000
unkown
page readonly
clean
7FF50A121000
unkown
page readonly
clean
7FF5A3161000
unkown
page readonly
clean
1A5A179000
unkown
page read and write
clean
2061D9C8000
unkown
page read and write
clean
1CE94830000
unkown
page read and write
clean
14F0C902000
unkown
page read and write
clean
1CE94A12000
unkown
page read and write
clean
7FF521086000
unkown
page readonly
clean
1D0CC029000
unkown
page read and write
clean
7FF578206000
unkown
page readonly
clean
6D3A8FE000
unkown
page read and write
clean
7FF595D40000
unkown
page readonly
clean
7FF520FB7000
unkown
page readonly
clean
214EC43F000
unkown
page read and write
clean
7FF509D97000
unkown
page readonly
clean
7FF5A324C000
unkown
page readonly
clean
7FF5923F9000
unkown
page readonly
clean
61E0E7C000
unkown
page read and write
clean
7FF53BE3F000
unkown
page readonly
clean
2061D710000
unkown
page readonly
clean
7FF591FC8000
unkown
page readonly
clean
7FF50AA59000
unkown
page readonly
clean
1CE90220000
unkown
page readonly
clean
7FF5A3236000
unkown
page readonly
clean
2061B8B1000
unkown
page read and write
clean
7FF5A2F37000
unkown
page readonly
clean
7FF578078000
unkown
page readonly
clean
23D84200000
unkown
page readonly
clean
7FF5A3135000
unkown
page readonly
clean
1F1D0600000
unkown
page readonly
clean
7FF528BF2000
unkown
page readonly
clean
7FF5317A9000
unkown
page readonly
clean
1CE8FB19000
unkown
page read and write
clean
1CE8FB59000
unkown
page read and write
clean
2061B8CC000
unkown
page read and write
clean
23D83780000
heap default
page read and write
clean
1CE945E0000
unkown
page read and write
clean
7FF5288A3000
unkown
page readonly
clean
7FF5A2DD3000
unkown
page readonly
clean
7FF53568C000
unkown
page readonly
clean
1CE949D0000
unkown
page readonly
clean
7FF592297000
unkown
page readonly
clean
7FF578137000
unkown
page readonly
clean
7FF521105000
unkown
page readonly
clean
7FF5C98D8000
unkown
page readonly
clean
1D0CC100000
unkown
page read and write
clean
1BFFEE6A000
unkown
page read and write
clean
7FF5659ED000
unkown
page readonly
clean
7FF5C9975000
unkown
page readonly
clean
7FF595A70000
unkown
page readonly
clean
7FF595CB2000
unkown
page readonly
clean
7FF585480000
unkown
page readonly
clean
7FF50A966000
unkown
page readonly
clean
1EF422C8000
heap default
page read and write
clean
1F1D0402000
unkown
page read and write
clean
1CE945A0000
unkown
page readonly
clean
1CE94AE1000
unkown
page read and write
clean
7FF5922B1000
unkown
page readonly
clean
14F0CDA0000
unkown
page readonly
clean
7FF585466000
unkown
page readonly
clean
7FF5A27F5000
unkown
page readonly
clean
7FF5655C5000
unkown
page readonly
clean
7FF5A280D000
unkown
page readonly
clean
235BBA3D000
unkown
page read and write
clean
7FF5853A1000
unkown
page readonly
clean
1EF42DA0000
unkown
page read and write
clean
2708E44B000
unkown
page read and write
clean
7FF531470000
unkown
page readonly
clean
2708E513000
unkown
page read and write
clean
7FF5B280E000
unkown
page readonly
clean
7FF528BE2000
unkown
page readonly
clean
7FF595D2C000
unkown
page readonly
clean
7FF565841000
unkown
page readonly
clean
7FF584BBB000
unkown
page readonly
clean
23D84002000
unkown
page read and write
clean
19793923000
unkown
page read and write
clean
7FF56580F000
unkown
page readonly
clean
1CE94730000
unkown
page read and write
clean
27578E00000
unkown
page readonly
clean
7FF535657000
unkown
page readonly
clean
875C77D000
unkown
page read and write
clean
2B8527F000
unkown
page read and write
clean
1CE946F0000
unkown
page read and write
clean
14F0C630000
unkown
page readonly
clean
1A59FFB000
unkown
page read and write
clean
1D0CCA00000
unkown
page readonly
clean
23D83FA0000
unkown
page readonly
clean
1B01E4D0000
unkown
page readonly
clean
7FF5A3030000
unkown
page readonly
clean
7FF585153000
unkown
page readonly
clean
7FF4FF44A000
unkown
page readonly
clean
2061E110000
unkown
page read and write
clean
9C7D37E000
unkown
page read and write
clean
7FF521110000
unkown
page readonly
clean
7FF5852F7000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
1D337513000
unkown
page read and write
clean
7FF5A2778000
unkown
page readonly
clean
7FF534C3B000
unkown
page readonly
clean
7FF5B2755000
unkown
page readonly
clean
7FF535710000
unkown
page readonly
clean
7FF50A8F1000
unkown
page readonly
clean
7FF5A3264000
unkown
page readonly
clean
1EF422A4000
unkown
page read and write
clean
7FF592376000
unkown
page readonly
clean
7FF592308000
unkown
page readonly
clean
7FF4FF4C4000
unkown
page readonly
clean
7FF509FD7000
unkown
page readonly
clean
7FF595CE5000
unkown
page readonly
clean
875C47B000
unkown
page read and write
clean
2061D95A000
unkown
page read and write
clean
D3387BF000
unkown
page read and write
clean
D338EFE000
unkown
page read and write
clean
11BB5F7000
unkown
page read and write
clean
1BFFEE70000
unkown
page read and write
clean
7FF5C991E000
unkown
page readonly
clean
7FF4FF4AC000
unkown
page readonly
clean
7FF4FF438000
unkown
page readonly
clean
19B204C0000
heap private
page read and write
clean
235BD550000
unkown
page readonly
clean
7FF5A98B7000
unkown
page readonly
clean
7FF520C80000
unkown
page readonly
clean
1CE94AE8000
unkown
page read and write
clean
1EF42390000
unkown
page readonly
clean
235BC060000
unkown
page readonly
clean
7FF5711F9000
unkown
page readonly
clean
7FF509E90000
unkown
page readonly
clean
7FF5A9810000
unkown
page readonly
clean
1CE8F28A000
unkown
page read and write
clean
20EE1600000
unkown
page read and write
clean
1CE8FB19000
unkown
page read and write
clean
2061E410000
unkown
page read and write
clean
8D33D7F000
unkown
page read and write
clean
7FF59026D000
unkown
page readonly
clean
1A59F7A000
unkown
page read and write
clean
8D33E7F000
unkown
page read and write
clean
7FF5D6497000
unkown
page readonly
clean
7FF565600000
unkown
page readonly
clean
7FF50A9CC000
unkown
page readonly
clean
2061DA7B000
unkown
page read and write
clean
7FF520F2C000
unkown
page readonly
clean
1EF42A40000
unkown
page readonly
clean
7FF5A2F24000
unkown
page readonly
clean
7FF5C9225000
unkown
page readonly
clean
1CE94840000
unkown
page read and write
clean
1CE90000000
unkown
page read and write
clean
3EDA47B000
unkown
page read and write
clean
1CE946FE000
unkown
page read and write
clean
7FF50A78C000
unkown
page readonly
clean
7FF528A6F000
unkown
page readonly
clean
7FF592302000
unkown
page readonly
clean
197932C0000
unkown
page read and write
clean
7FF520DFC000
unkown
page readonly
clean
7FF56561E000
unkown
page readonly
clean
7FF5D605E000
unkown
page readonly
clean
1D337502000
unkown
page read and write
clean
7FF4FF48D000
unkown
page readonly
clean
BB0F38F000
unkown
page read and write
clean
7FF5A24E3000
unkown
page readonly
clean
7FF592335000
unkown
page readonly
clean
7FF53577D000
unkown
page readonly
clean
1CE94AC9000
unkown
page read and write
clean
7FF5C97F7000
unkown
page readonly
clean
BB0F7FD000
unkown
page read and write
clean
7FF50A707000
unkown
page readonly
clean
7FF5718C3000
unkown
page readonly
clean
1AF4EA02000
unkown
page read and write
clean
19793790000
unkown
page read and write
clean
19B20520000
heap default
page read and write
clean
7FF565907000
unkown
page readonly
clean
7FF5D60CF000
unkown
page readonly
clean
7FF5A270E000
unkown
page readonly
clean
7FF5B2623000
unkown
page readonly
clean
546697A000
unkown
page read and write
clean
7FF521011000
unkown
page readonly
clean
F945C7E000
unkown
page read and write
clean
7FF59202E000
unkown
page readonly
clean
2061DC00000
unkown
page read and write
clean
7FF5A31FE000
unkown
page readonly
clean
23D83F30000
unkown
page write copy
clean
1F1D0431000
unkown
page read and write
clean
7FF5656BA000
unkown
page readonly
clean
7FF5853F2000
unkown
page readonly
clean
414D27E000
unkown
page read and write
clean
1CE8F1A0000
unkown
page read and write
clean
2061DA3B000
unkown
page read and write
clean
7FF5210EC000
unkown
page readonly
clean
7FF5A319A000
unkown
page readonly
clean
7FF5C9750000
unkown
page readonly
clean
7FF5C9875000
unkown
page readonly
clean
2061E310000
unkown
page read and write
clean
1F0C2400000
unkown
page read and write
clean
7FF5657BC000
unkown
page readonly
clean
875C3FC000
unkown
page read and write
clean
7FF5B26EC000
unkown
page readonly
clean
1CE8F288000
unkown
page read and write
clean
7FF595D47000
unkown
page readonly
clean
7FF5D636C000
unkown
page readonly
clean
7FF50A93C000
unkown
page readonly
clean
7FF571A1C000
unkown
page readonly
clean
235BBB02000
unkown
page read and write
clean
7FF595B2F000
unkown
page readonly
clean
1AF4E300000
unkown
page read and write
clean
1F1D044D000
unkown
page read and write
clean
7FF5A988C000
unkown
page readonly
clean
7FF5A2F85000
unkown
page readonly
clean
7FF5D631C000
unkown
page readonly
clean
7FF5D6310000
unkown
page readonly
clean
1CE948B0000
unkown
page readonly
clean
7FF53C026000
unkown
page readonly
clean
7FF528BF8000
unkown
page readonly
clean
19B20650000
unkown
page read and write
clean
7FF53167C000
unkown
page readonly
clean
7FF5B278C000
unkown
page readonly
clean
1CE8FA00000
unkown
page read and write
clean
20EE16E2000
unkown
page read and write
clean
1D0CC04F000
unkown
page read and write
clean
7FF520FEC000
unkown
page readonly
clean
7FF53BBC0000
unkown
page readonly
clean
7FF5A2DFD000
unkown
page readonly
clean
7FF520F87000
unkown
page readonly
clean
7FF53C0AE000
unkown
page readonly
clean
1F1D043D000
unkown
page read and write
clean
7FF5A31D2000
unkown
page readonly
clean
2708E508000
unkown
page read and write
clean
1CE94850000
unkown
page readonly
clean
7FF565978000
unkown
page readonly
clean
2061B868000
unkown
page read and write
clean
1540921F000
heap private
page read and write
clean
1BFFEE68000
unkown
page read and write
clean
154072D0000
unkown
page read and write
clean
7FF5C99E1000
unkown
page readonly
clean
7FF535712000
unkown
page readonly
clean
235BD800000
unkown
page readonly
clean
7FF50AA51000
unkown
page readonly
clean
7FF50A9D6000
unkown
page readonly
clean
2061B800000
unkown
page read and write
clean
11BB7FF000
unkown
page read and write
clean
2708E400000
unkown
page read and write
clean
7FF53BE7A000
unkown
page readonly
clean
1CE8F313000
unkown
page read and write
clean
7FF5C958D000
unkown
page readonly
clean
1B01E802000
unkown
page read and write
clean
19B20530000
unkown
page readonly
clean
1BFFED20000
heap private
page read and write
clean
235BBA77000
unkown
page read and write
clean
7FF5C8E33000
unkown
page readonly
clean
7FF5958E3000
unkown
page readonly
clean
2061DA73000
unkown
page read and write
clean
1D0CC04D000
unkown
page read and write
clean
7FF5355DE000
unkown
page readonly
clean
19B20602000
unkown
page read and write
clean
12ACFAE000
unkown
page read and write
clean
7FF5D647C000
unkown
page readonly
clean
1F0C2600000
unkown
page readonly
clean
154075E0000
heap private
page read and write
clean
2061E610000
unkown
page read and write
clean
1AF4E24D000
unkown
page read and write
clean
875C2FC000
unkown
page read and write
clean
7FF535755000
unkown
page readonly
clean
7FF531510000
unkown
page readonly
clean
7FF4FF2FA000
unkown
page readonly
clean
1A59A7A000
unkown
page read and write
clean
1CE949F0000
unkown
page read and write
clean
11BB375000
unkown
page read and write
clean
7FF5A98B4000
unkown
page readonly
clean
7FF585456000
unkown
page readonly
clean
7FF5B2819000
unkown
page readonly
clean
B05747F000
unkown
page read and write
clean
7FF59002A000
unkown
page readonly
clean
235BD540000
unkown
page readonly
clean
1F0C2402000
unkown
page read and write
clean
2708E457000
unkown
page read and write
clean
11BAFBD000
unkown
page read and write
clean
1CE8F9F0000
unkown
page read and write
clean
2061B91D000
unkown
page read and write
clean
1EF422AD000
unkown
page read and write
clean
7FF565A06000
unkown
page readonly
clean
7FF5781BE000
unkown
page readonly
clean
7FF5922F2000
unkown
page readonly
clean
5C7D7CE000
unkown
page read and write
clean
7FF50A6B4000
unkown
page readonly
clean
7FF5C996C000
unkown
page readonly
clean
7FF5A2F4C000
unkown
page readonly
clean
27578B80000
heap private
page read and write
clean
2061DB83000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
7FF565967000
unkown
page readonly
clean
54668FF000
unkown
page read and write
clean
23D83829000
unkown
page read and write
clean
1A5A2FD000
unkown
page read and write
clean
2708E44E000
unkown
page read and write
clean
1CE90250000
unkown
page readonly
clean
235BD602000
unkown
page read and write
clean
42E067D000
unkown
page read and write
clean
7FF5921CA000
unkown
page readonly
clean
A2885DB000
unkown
page read and write
clean
2061D976000
unkown
page read and write
clean
7FF565277000
unkown
page readonly
clean
7FF5B279C000
unkown
page readonly
clean
7FF4FE94B000
unkown
page readonly
clean
1D337468000
unkown
page read and write
clean
20EE1E02000
unkown
page read and write
clean
7FF585157000
unkown
page readonly
clean
2061DA7F000
unkown
page read and write
clean
235BD530000
unkown
page read and write
clean
23A87400000
unkown
page readonly
clean
7FF52102A000
unkown
page readonly
clean
1CE94714000
unkown
page read and write
clean
1D33746C000
unkown
page read and write
clean
15407630000
heap private
page read and write
clean
1F1D03B0000
unkown
page readonly
clean
1CE90010000
unkown
page read and write
clean
7FF5659F6000
unkown
page readonly
clean
7FF56570C000
unkown
page readonly
clean
214EC413000
unkown
page read and write
clean
7FF528C1E000
unkown
page readonly
clean
7FF565A27000
unkown
page readonly
clean
1BFFF460000
unkown
page read and write
clean
7FF5A2869000
unkown
page readonly
clean
7FF5781D9000
unkown
page readonly
clean
1D337600000
unkown
page readonly
clean
2061E710000
unkown
page read and write
clean
1B01DF90000
heap private
page read and write
clean
1CE949C0000
unkown
page readonly
clean
7FF5316EF000
unkown
page readonly
clean
7FF5A27D6000
unkown
page readonly
clean
7FF5357B0000
unkown
page readonly
clean
1CE94AD8000
unkown
page read and write
clean
214EC400000
unkown
page read and write
clean
1B01E670000
unkown
page readonly
clean
7FF50A948000
unkown
page readonly
clean
1B01E06F000
unkown
page read and write
clean
F9461FE000
unkown
page read and write
clean
7FF565A20000
unkown
page readonly
clean
23A87930000
unkown
page read and write
clean
7FF595CA2000
unkown
page readonly
clean
2061E310000
unkown
page read and write
clean
1D0CC04A000
unkown
page read and write
clean
7FF565696000
unkown
page readonly
clean
1BFFF0D0000
unkown
page readonly
clean
7FF565A89000
unkown
page readonly
clean
7FF5316E5000
unkown
page readonly
clean
1CE8FB59000
unkown
page read and write
clean
1CE94AC9000
unkown
page read and write
clean
7FF59028C000
unkown
page readonly
clean
7FF56582E000
unkown
page readonly
clean
1A5A07D000
unkown
page read and write
clean
7FF5853F6000
unkown
page readonly
clean
7FF5A9708000
unkown
page readonly
clean
15408F30000
heap private
page read and write
clean
2708E470000
unkown
page read and write
clean
20EE2000000
unkown
page readonly
clean
7FF565957000
unkown
page readonly
clean
7FF5923F9000
unkown
page readonly
clean
214EC290000
heap default
page read and write
clean
7FF58546C000
unkown
page readonly
clean
2708E453000
unkown
page read and write
clean
2061B83F000
unkown
page read and write
clean
15409120000
heap private
page read and write
clean
1A59DFB000
unkown
page read and write
clean
1EF43050000
unkown
page read and write
clean
214EDEA0000
unkown
page readonly
clean
2061D7A0000
unkown
page readonly
clean
7FF50A11E000
unkown
page readonly
clean
7FF520E35000
unkown
page readonly
clean
7FF50A9E7000
unkown
page readonly
clean
7FF5A31B8000
unkown
page readonly
clean
61E10FE000
unkown
page read and write
clean
2061DE00000
unkown
page readonly
clean
7FF565982000
unkown
page readonly
clean
7FF50A97A000
unkown
page readonly
clean
1B01E074000
unkown
page read and write
clean
27578ED0000
unkown
page write copy
clean
7FF578281000
unkown
page readonly
clean
7FF50A933000
unkown
page readonly
clean
27578C44000
unkown
page read and write
clean
11BB6FF000
unkown
page read and write
clean
7FF5A9828000
unkown
page readonly
clean
23A87930000
unkown
page read and write
clean
2061E610000
unkown
page read and write
clean
7FF5A32BE000
unkown
page readonly
clean
19B20670000
unkown
page read and write
clean
1CE94AC9000
unkown
page read and write
clean
2061D94F000
unkown
page read and write
clean
7FF50A09C000
unkown
page readonly
clean
2061D802000
unkown
page read and write
clean
7FF577F50000
unkown
page readonly
clean
7FF5210B5000
unkown
page readonly
clean
1CE8F274000
unkown
page read and write
clean
235BBA67000
unkown
page read and write
clean
7FF5B26CA000
unkown
page readonly
clean
15407200000
unkown
page readonly
clean
7FF592394000
unkown
page readonly
clean
2061B856000
unkown
page read and write
clean
7FF5B26C7000
unkown
page readonly
clean
7FF58540A000
unkown
page readonly
clean
7FF5A27CD000
unkown
page readonly
clean
23D838EA000
unkown
page read and write
clean
7FF58545C000
unkown
page readonly
clean
414D4FD000
unkown
page read and write
clean
546687F000
unkown
page read and write
clean
7FF520DA7000
unkown
page readonly
clean
7FF53BFC8000
unkown
page readonly
clean
7FF528C84000
unkown
page readonly
clean
1CE94850000
unkown
page read and write
clean
7FF50A06F000
unkown
page readonly
clean
7FF5C9525000
unkown
page readonly
clean
F945FF7000
unkown
page read and write
clean
1AF4E190000
heap default
page read and write
clean
7FF520C70000
unkown
page readonly
clean
7FF578289000
unkown
page readonly
clean
7FF4FF529000
unkown
page readonly
clean
19793900000
unkown
page read and write
clean
1CE94AE5000
unkown
page read and write
clean
7FF5658FC000
unkown
page readonly
clean
7FF5D6466000
unkown
page readonly
clean
7FF5A3255000
unkown
page readonly
clean
1CE946F9000
unkown
page read and write
clean
23D84100000
unkown
page read and write
clean
7FF595D26000
unkown
page readonly
clean
1CE949D4000
unkown
page readonly
clean
2061DC82000
unkown
page read and write
clean
7FF50A995000
unkown
page readonly
clean
7FF57815C000
unkown
page readonly
clean
2061DB00000
unkown
page read and write
clean
7FF535726000
unkown
page readonly
clean
7FF5D6146000
unkown
page readonly
clean
1BFFEE67000
unkown
page read and write
clean
19791902000
unkown
page read and write
clean
154093A0000
heap private
page read and write
clean
7FF528C56000
unkown
page readonly
clean
235BBA26000
unkown
page read and write
clean
7FF577F45000
unkown
page readonly
clean
5C7DE7F000
unkown
page read and write
clean
154079D0000
unkown
page readonly
clean
7FF528C2F000
unkown
page readonly
clean
154071A0000
unkown
page readonly
clean
1EF42E00000
unkown
page read and write
clean
14F0C913000
unkown
page read and write
clean
23D838F9000
unkown
page read and write
clean
7FF52109A000
unkown
page readonly
clean
7FF50A032000
unkown
page readonly
clean
8D33C7F000
unkown
page read and write
clean
1F1D0448000
unkown
page read and write
clean
1BFFEE6E000
unkown
page read and write
clean
1CE8FB5C000
unkown
page read and write
clean
7FF5A3260000
unkown
page readonly
clean
7FF5A9757000
unkown
page readonly
clean
214EDDA0000
unkown
page read and write
clean
154074D0000
unkown
page readonly
clean
BA300FF000
unkown
page read and write
clean
2061E510000
unkown
page read and write
clean
1B01E102000
unkown
page read and write
clean
1CE94730000
unkown
page read and write
clean
7FF4FF2AF000
unkown
page readonly
clean
1A598FA000
unkown
page read and write
clean
7FF5C9521000
unkown
page readonly
clean
235BD560000
unkown
page write copy
clean
7FF592349000
unkown
page readonly
clean
9C7D17B000
unkown
page read and write
clean
23D837E0000
unkown
page readonly
clean
23D84128000
unkown
page read and write
clean
1F1D046C000
unkown
page read and write
clean
7FF53167A000
unkown
page readonly
clean
7FF528C39000
unkown
page readonly
clean
2061D720000
heap private
page read and write
clean
1D0CBEB0000
unkown
page readonly
clean
19B21340000
unkown
page readonly
clean
7FF535786000
unkown
page readonly
clean
1CE8FB19000
unkown
page read and write
clean
1BFFEE54000
unkown
page read and write
clean
20EE1F3A000
unkown
page read and write
clean
7FF5A940A000
unkown
page readonly
clean
235BBA13000
unkown
page read and write
clean
7FF5A990E000
unkown
page readonly
clean
7FF53C02C000
unkown
page readonly
clean
7FF5B1C37000
unkown
page readonly
clean
7FF565A7E000
unkown
page readonly
clean
1D33746B000
unkown
page read and write
clean
1AF4E213000
unkown
page read and write
clean
1D0CBF90000
unkown
page readonly
clean
1D0CC04C000
unkown
page read and write
clean
7FF5210FC000
unkown
page readonly
clean
875BB5B000
unkown
page read and write
clean
7FF520EB8000
unkown
page readonly
clean
7FF5A27B9000
unkown
page readonly
clean
12AD3FE000
unkown
page read and write
clean
23A87860000
unkown
page readonly
clean
7FF531737000
unkown
page readonly
clean
3EDABFF000
unkown
page read and write
clean
7FF565A89000
unkown
page readonly
clean
7FF5A31A3000
unkown
page readonly
clean
7FF577EE4000
unkown
page readonly
clean
19791913000
unkown
page read and write
clean
1D0CBE40000
heap private
page read and write
clean
7FF531598000
unkown
page readonly
clean
2061B880000
unkown
page read and write
clean
7FF57795B000
unkown
page readonly
clean
1D0CBFA0000
unkown
page read and write
clean
7FF5B27B4000
unkown
page readonly
clean
1CE94A43000
unkown
page read and write
clean
1CE8FB19000
unkown
page read and write
clean
1CE94A9F000
unkown
page read and write
clean
23D837B0000
unkown
page read and write
clean
7FF4FF24A000
unkown
page readonly
clean
7FF5851B0000
unkown
page readonly
clean
1BFFEE29000
unkown
page read and write
clean
1D0CC051000
unkown
page read and write
clean
23D83F80000
unkown
page readonly
clean
1CE94990000
unkown
page read and write
clean
7FF5A304F000
unkown
page readonly
clean
7FF50A0C0000
unkown
page readonly
clean
7FF5B27B7000
unkown
page readonly
clean
14F0C857000
unkown
page read and write
clean
7FF5D627F000
unkown
page readonly
clean
2061D9C0000
unkown
page read and write
clean
1CE94850000
unkown
page read and write
clean
1F1D045F000
unkown
page read and write
clean
7FF590301000
unkown
page readonly
clean
19B20800000
unkown
page readonly
clean
15407640000
unkown
page readonly
clean
7FF5A9869000
unkown
page readonly
clean
2061B7B0000
heap default
page read and write
clean
19791B20000
unkown
page readonly
clean
7FF58542F000
unkown
page readonly
clean
7FF565617000
unkown
page readonly
clean
7FF5B2483000
unkown
page readonly
clean
7FF53579C000
unkown
page readonly
clean
1F0C245B000
unkown
page read and write
clean
1979390A000
unkown
page read and write
clean
7FF5D6494000
unkown
page readonly
clean
7FF5A27E6000
unkown
page readonly
clean
7FF53562D000
unkown
page readonly
clean
2061D900000
unkown
page read and write
clean
7FF5923F0000
unkown
page readonly
clean
7FF577EF7000
unkown
page readonly
clean
7FF5A320F000
unkown
page readonly
clean
7FF50A8CC000
unkown
page readonly
clean
19793902000
unkown
page read and write
clean
7FF5A985F000
unkown
page readonly
clean
20EE166E000
unkown
page read and write
clean
A288D7F000
unkown
page read and write
clean
1BFFEE6C000
unkown
page read and write
clean
7FF521072000
unkown
page readonly
clean
2061E110000
unkown
page read and write
clean
1D337468000
unkown
page read and write
clean
7FF50A563000
unkown
page readonly
clean
7FF592366000
unkown
page readonly
clean
7FF50A9BD000
unkown
page readonly
clean
7FF5A32C1000
unkown
page readonly
clean
2708E3E0000
unkown
page readonly
clean
7FF50A08D000
unkown
page readonly
clean
7FF520F68000
unkown
page readonly
clean
414D37E000
unkown
page read and write
clean
12AD27E000
unkown
page read and write
clean
7FF520BED000
unkown
page readonly
clean
19791AD0000
unkown
page write copy
clean
7FF528BE0000
unkown
page readonly
clean
7FF578224000
unkown
page readonly
clean
2061B857000
unkown
page read and write
clean
7FF5A9919000
unkown
page readonly
clean
20EE1613000
unkown
page read and write
clean
1D337429000
unkown
page read and write
clean
19791829000
unkown
page read and write
clean
1CE94800000
unkown
page read and write
clean
1CE947C0000
unkown
page read and write
clean
235BB9B0000
unkown
page read and write
clean
7FF5D63DC000
unkown
page readonly
clean
23D83870000
unkown
page read and write
clean
7FF53575F000
unkown
page readonly
clean
7FF5210F6000
unkown
page readonly
clean
7FF53C01D000
unkown
page readonly
clean
7FF5C992F000
unkown
page readonly
clean
7FF53C009000
unkown
page readonly
clean
61E14FE000
unkown
page read and write
clean
7FF5A279E000
unkown
page readonly
clean
7FF53C050000
unkown
page readonly
clean
7FF5A301A000
unkown
page readonly
clean
7FF521027000
unkown
page readonly
clean
1B01E200000
unkown
page readonly
clean
7FF535796000
unkown
page readonly
clean
7FF592306000
unkown
page readonly
clean
7FF4FF318000
unkown
page readonly
clean
7FF50A7AA000
unkown
page readonly
clean
235BBB18000
unkown
page read and write
clean
7FF59024F000
unkown
page readonly
clean
7FF5C9788000
unkown
page readonly
clean
7FF521053000
unkown
page readonly
clean
1CE8F790000
unkown
page readonly
clean
7FF5922AA000
unkown
page readonly
clean
7FF4FF496000
unkown
page readonly
clean
23D838B2000
unkown
page read and write
clean
7FF50A9DC000
unkown
page readonly
clean
7FF57813A000
unkown
page readonly
clean
7FF50A0B7000
unkown
page readonly
clean
7FF585484000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
7FF52092A000
unkown
page readonly
clean
5466AFA000
unkown
page read and write
clean
7FF5922F0000
unkown
page readonly
clean
235BD470000
unkown
page read and write
clean
7FF5A31A7000
unkown
page readonly
clean
19793A00000
unkown
page readonly
clean
235BB9D0000
unkown
page read and write
clean
7FF5719FD000
unkown
page readonly
clean
11BB47B000
unkown
page read and write
clean
7FF509F18000
unkown
page readonly
clean
6D3A9F9000
unkown
page read and write
clean
1CE8FB19000
unkown
page read and write
clean
7FF535819000
unkown
page readonly
clean
3EDACFF000
unkown
page read and write
clean
7FF5C98F8000
unkown
page readonly
clean
19793730000
heap private
page read and write
clean
23A87240000
unkown
page read and write
clean
61E13FC000
unkown
page read and write
clean
235BBA5E000
unkown
page read and write
clean
7FF5288A7000
unkown
page readonly
clean
1BFFEE6C000
unkown
page read and write
clean
7FF5D64F9000
unkown
page readonly
clean
1A599FA000
unkown
page read and write
clean
2061DA12000
unkown
page read and write
clean
F945EFE000
unkown
page read and write
clean
2061DD00000
unkown
page read and write
clean
7FF577FDA000
unkown
page readonly
clean
7FF5A31D8000
unkown
page readonly
clean
2061D770000
unkown
page readonly
clean
7FF565996000
unkown
page readonly
clean
19793790000
unkown
page read and write
clean
7FF5D6402000
unkown
page readonly
clean
1D337468000
unkown
page read and write
clean
7FF595978000
unkown
page readonly
clean
1D337500000
unkown
page read and write
clean
7FF521117000
unkown
page readonly
clean
7FF5D63F0000
unkown
page readonly
clean
7FF578217000
unkown
page readonly
clean
7FF59236C000
unkown
page readonly
clean
15407410000
unkown
page read and write
clean
23D838A9000
unkown
page read and write
clean
7FF5719A6000
unkown
page readonly
clean
7FF577EF3000
unkown
page readonly
clean
7FF50A98E000
unkown
page readonly
clean
7FF5853FA000
unkown
page readonly
clean
1CE94AC3000
unkown
page read and write
clean
19B20C80000
unkown
page read and write
clean
19B20600000
unkown
page read and write
clean
7FF531744000
unkown
page readonly
clean
7FF5A2760000
unkown
page readonly
clean
7FF4FF4C0000
unkown
page readonly
clean
2708E360000
heap private
page read and write
clean
D338A7B000
unkown
page read and write
clean
1BFFEF02000
unkown
page read and write
clean
7FF590309000
unkown
page readonly
clean
7FF56594B000
unkown
page readonly
clean
2061B829000
unkown
page read and write
clean
2061B7C0000
unkown
page readonly
clean
7FF50A6DC000
unkown
page readonly
clean
1AF4E23C000
unkown
page read and write
clean
1B01E029000
unkown
page read and write
clean
7FF528CDE000
unkown
page readonly
clean
7FF5922A7000
unkown
page readonly
clean
2061B92C000
unkown
page read and write
clean
7FF50A7C0000
unkown
page readonly
clean
1AF4E1C0000
unkown
page read and write
clean
7FF595CB8000
unkown
page readonly
clean
7FF52116E000
unkown
page readonly
clean
1CE901F0000
unkown
page readonly
clean
1EF426B0000
unkown
page readonly
clean
1CE8FB18000
unkown
page read and write
clean
61E0FFF000
unkown
page read and write
clean
7FF4FF45E000
unkown
page readonly
clean
7FF509944000
unkown
page readonly
clean
7FF50A9A9000
unkown
page readonly
clean
1CE94AE1000
unkown
page read and write
clean
1EF42490000
heap private
page read and write
clean
7FF595CA0000
unkown
page readonly
clean
19791840000
unkown
page read and write
clean
7FF5D6408000
unkown
page readonly
clean
7FF53BFB2000
unkown
page readonly
clean
7FF56515C000
unkown
page readonly
clean
20EE1F14000
unkown
page read and write
clean
7FF530BC7000
unkown
page readonly
clean
7FF53578C000
unkown
page readonly
clean
7FF5659BE000
unkown
page readonly
clean
7FF5A278A000
unkown
page readonly
clean
7FF5D6490000
unkown
page readonly
clean
7FF50A8C5000
unkown
page readonly
clean
7FF571A16000
unkown
page readonly
clean
7FF595D0D000
unkown
page readonly
clean
7FF521179000
unkown
page readonly
clean
7FF50A904000
unkown
page readonly
clean
7FF5A285E000
unkown
page readonly
clean
7FF5923EE000
unkown
page readonly
clean
6D3A87F000
unkown
page read and write
clean
7FF50A0C7000
unkown
page readonly
clean
7FF5853BA000
unkown
page readonly
clean
14F0C85B000
unkown
page read and write
clean
7FF531716000
unkown
page readonly
clean
7FF5355DA000
unkown
page readonly
clean
7FF5659AA000
unkown
page readonly
clean
7FF5C9966000
unkown
page readonly
clean
7FF595CB6000
unkown
page readonly
clean
14F0C813000
unkown
page read and write
clean
1D338DA0000
unkown
page read and write
clean
1F1D0413000
unkown
page read and write
clean
19B2064E000
unkown
page read and write
clean
7FF5A987D000
unkown
page readonly
clean
1F1D047A000
unkown
page read and write
clean
8D3335E000
unkown
page read and write
clean
1D338EA0000
unkown
page readonly
clean
7FF5A30D7000
unkown
page readonly
clean
5466B79000
unkown
page read and write
clean
1D0CC03C000
unkown
page read and write
clean
2061D780000
unkown
page read and write
clean
214EC370000
unkown
page write copy
clean
7FF5B2811000
unkown
page readonly
clean
7FF5A27DC000
unkown
page readonly
clean
7FF50A70E000
unkown
page readonly
clean
7FF595C7A000
unkown
page readonly
clean
8D336F7000
unkown
page read and write
clean
1CE945D0000
unkown
page read and write
clean
1CE8F276000
unkown
page read and write
clean
875C27E000
unkown
page read and write
clean
7FF565992000
unkown
page readonly
clean
27578C00000
unkown
page read and write
clean
214EC402000
unkown
page read and write
clean
7FF53BEF1000
unkown
page readonly
clean
7FF5D63CA000
unkown
page readonly
clean
7FF578198000
unkown
page readonly
clean
7FF50A962000
unkown
page readonly
clean
1CE8FB18000
unkown
page read and write
clean
7FF53BECD000
unkown
page readonly
clean
7FF50A715000
unkown
page readonly
clean
7FF5712B3000
unkown
page readonly
clean
7FF5719CE000
unkown
page readonly
clean
7FF53BE7E000
unkown
page readonly
clean
1CE8F28E000
unkown
page read and write
clean
235BBCD0000
unkown
page readonly
clean
7FF520EFF000
unkown
page readonly
clean
2061B95D000
unkown
page read and write
clean
A28887E000
unkown
page read and write
clean
2061E710000
unkown
page read and write
clean
1CE94850000
unkown
page read and write
clean
2757A6C0000
unkown
page read and write
clean
7FF520D8F000
unkown
page readonly
clean
8D3417E000
unkown
page read and write
clean
1D0CBF80000
unkown
page readonly
clean
7FF4FF2EE000
unkown
page readonly
clean
7FF521070000
unkown
page readonly
clean
2708F140000
unkown
page readonly
clean
1CE94720000
unkown
page read and write
clean
7FF578097000
unkown
page readonly
clean
2061DC42000
unkown
page read and write
clean
7FF4FF49C000
unkown
page readonly
clean
7FF50A907000
unkown
page readonly
clean
7FF5210E6000
unkown
page readonly
clean
7FF58544D000
unkown
page readonly
clean
2061B750000
heap private
page read and write
clean
1D0CC050000
unkown
page read and write
clean
1CE8F229000
unkown
page read and write
clean
1CE947C4000
unkown
page read and write
clean
7FF50A9E5000
unkown
page readonly
clean
235BBA4E000
unkown
page read and write
clean
12AD47F000
unkown
page read and write
clean
20EE1688000
unkown
page read and write
clean
7FF531404000
unkown
page readonly
clean
7FF53BEF7000
unkown
page readonly
clean
1AF4E308000
unkown
page read and write
clean
20EE163E000
unkown
page read and write
clean
7FF528C87000
unkown
page readonly
clean
1CE94930000
unkown
page readonly
clean
14F0D000000
unkown
page readonly
clean
BA2FB5E000
unkown
page read and write
clean
7FF5C99E9000
unkown
page readonly
clean
1F1D0429000
unkown
page read and write
clean
7FF571A8E000
unkown
page readonly
clean
235BD4B0000
unkown
page read and write
clean
20EE1C60000
unkown
page read and write
clean
1CE94950000
unkown
page readonly
clean
7FF5D646C000
unkown
page readonly
clean
7FF5A24EC000
unkown
page readonly
clean
14F0C876000
unkown
page read and write
clean
7FF595C98000
unkown
page readonly
clean
7FF56568D000
unkown
page readonly
clean
6F16179000
unkown
page read and write
clean
1A59B79000
unkown
page read and write
clean
1CE8FB5A000
unkown
page read and write
clean
7FF564EBA000
unkown
page readonly
clean
1BFFEE6E000
unkown
page read and write
clean
2061B93C000
unkown
page read and write
clean
7FF565A0C000
unkown
page readonly
clean
7FF50A952000
unkown
page readonly
clean
1F1D0400000
unkown
page read and write
clean
7FF595CDE000
unkown
page readonly
clean
61E0C7B000
unkown
page read and write
clean
15407380000
unkown
page readonly
clean
197937C0000
unkown
page readonly
clean
235BBB1C000
unkown
page read and write
clean
7FF5A316A000
unkown
page readonly
clean
2061B91C000
unkown
page read and write
clean
7FF53170D000
unkown
page readonly
clean
7FF571A99000
unkown
page readonly
clean
7FF571326000
unkown
page readonly
clean
B0574FA000
unkown
page read and write
clean
1AF4E285000
unkown
page read and write
clean
7FF590055000
unkown
page readonly
clean
7FF5A3205000
unkown
page readonly
clean
1CE948A0000
unkown
page readonly
clean
7FF509FDA000
unkown
page readonly
clean
7FF5B274E000
unkown
page readonly
clean
1CE94A4C000
unkown
page read and write
clean
1CE94AE8000
unkown
page read and write
clean
7FF5711F2000
unkown
page readonly
clean
1CE94ACB000
unkown
page read and write
clean
A288E7F000
unkown
page read and write
clean
7FF520C6A000
unkown
page readonly
clean
7FF5719D5000
unkown
page readonly
clean
7FF53BFFF000
unkown
page readonly
clean
8D339FE000
unkown
page read and write
clean
1CE94810000
unkown
page read and write
clean
7FF53C045000
unkown
page readonly
clean
7FF5719AA000
unkown
page readonly
clean
7FF585397000
unkown
page readonly
clean
7FF531740000
unkown
page readonly
clean
1F1D0476000
unkown
page read and write
clean
7FF565980000
unkown
page readonly
clean
7FF509DF0000
unkown
page readonly
clean
7FF5C961A000
unkown
page readonly
clean
7FF5A2057000
unkown
page readonly
clean
1CE94ACA000
unkown
page read and write
clean
7FF4FF030000
unkown
page readonly
clean
27578F20000
unkown
page readonly
clean
2061D923000
unkown
page read and write
clean
1BFFEDE0000
unkown
page readonly
clean
15407370000
unkown
page readonly
clean
1CE94AC9000
unkown
page read and write
clean
7FF5658F5000
unkown
page readonly
clean
1F0C2429000
unkown
page read and write
clean
2757A7C0000
unkown
page readonly
clean
1A59BFA000
unkown
page read and write
clean
1CE8FB00000
unkown
page read and write
clean
7FF5A30B8000
unkown
page readonly
clean
2061DB43000
unkown
page read and write
clean
1BFFED90000
unkown
page write copy
clean
7FF571321000
unkown
page readonly
clean
7FF595D16000
unkown
page readonly
clean
14F0CA00000
unkown
page readonly
clean
7FF565859000
unkown
page readonly
clean
11BB27E000
unkown
page read and write
clean
1D0CBEA0000
heap default
page read and write
clean
1AF4E24F000
unkown
page read and write
clean
19B2063C000
unkown
page read and write
clean
F94599E000
unkown
page read and write
clean
7FF590286000
unkown
page readonly
clean
1F0C2442000
unkown
page read and write
clean
7FF53C057000
unkown
page readonly
clean
7FF4FF4B5000
unkown
page readonly
clean
7FF520EAC000
unkown
page readonly
clean
2708E44F000
unkown
page read and write
clean
1F1D03C0000
unkown
page read and write
clean
1F1D0330000
heap private
page read and write
clean
1D337330000
unkown
page write copy
clean
7FF53165A000
unkown
page readonly
clean
7FF50A7BE000
unkown
page readonly
clean
7FF591F33000
unkown
page readonly
clean
7FF565850000
unkown
page readonly
clean
1EF42360000
unkown
page read and write
clean
7FF59027C000
unkown
page readonly
clean
1F1D0430000
unkown
page read and write
clean
2061D964000
unkown
page read and write
clean
1CE947D0000
unkown
page read and write
clean
7FF5D60D2000
unkown
page readonly
clean
7FF5A30D3000
unkown
page readonly
clean
7FF58523A000
unkown
page readonly
clean
235BD530000
unkown
page read and write
clean
7FF4FF436000
unkown
page readonly
clean
1CE946F1000
unkown
page read and write
clean
1CE8FA02000
unkown
page read and write
clean
7FF5712AD000
unkown
page readonly
clean
7FF590200000
unkown
page readonly
clean
1AF4E22A000
unkown
page read and write
clean
23D83FC0000
unkown
page readonly
clean
1CE8FB5A000
unkown
page read and write
clean
197917D0000
unkown
page readonly
clean
7FF50A9F0000
unkown
page readonly
clean
7FF5A3231000
unkown
page readonly
clean
7FF5712B5000
unkown
page readonly
clean
1BFFF000000
unkown
page readonly
clean
214EC2A0000
unkown
page readonly
clean
7FF4FF521000
unkown
page readonly
clean
7FF50A720000
unkown
page readonly
clean
1CE94AE1000
unkown
page read and write
clean
7FF521031000
unkown
page readonly
clean
6F160F9000
unkown
page read and write
clean
23D838BC000
unkown
page read and write
clean
7FF5D642E000
unkown
page readonly
clean
1CE8FC80000
unkown
page read and write
clean
1F0C2210000
heap default
page read and write
clean
19B20629000
unkown
page read and write
clean
7FF565937000
unkown
page readonly
clean
2061E410000
unkown
page read and write
clean
BB0F28B000
unkown
page read and write
clean
7FF5A969F000
unkown
page readonly
clean
7FF535310000
unkown
page readonly
clean
3EDAFFF000
unkown
page read and write
clean
7FF5853F8000
unkown
page readonly
clean
2061BAD0000
unkown
page write copy
clean
7FF531465000
unkown
page readonly
clean
2061B902000
unkown
page read and write
clean
1EF43080000
unkown
page read and write
clean
2061B8BB000
unkown
page read and write
clean
2708E413000
unkown
page read and write
clean
20EE1510000
unkown
page readonly
clean
1CE946FB000
unkown
page read and write
clean
7FF5B256A000
unkown
page readonly
clean
1D0CC108000
unkown
page read and write
clean
14F0CE02000
unkown
page read and write
clean
1BFFEE67000
unkown
page read and write
clean
7FF5A3174000
unkown
page readonly
clean
7FF50A863000
unkown
page readonly
clean
1CE8F257000
unkown
page read and write
clean
7FF595B48000
unkown
page readonly
clean
7FF5B2722000
unkown
page readonly
clean
7FF520E93000
unkown
page readonly
clean
1EF42499000
heap private
page read and write
clean
1F1D0479000
unkown
page read and write
clean
7FF565A24000
unkown
page readonly
clean
1CE8F9E0000
unkown
page read and write
clean
7FF5A2F77000
unkown
page readonly
clean
7FF5A3257000
unkown
page readonly
clean
23A87229000
unkown
page read and write
clean
1EF42240000
unkown
page read and write
clean
7FF5902A4000
unkown
page readonly
clean
6F15CCB000
unkown
page read and write
clean
7FF520F83000
unkown
page readonly
clean
7FF5B26D1000
unkown
page readonly
clean
7FF509E7A000
unkown
page readonly
clean
875C87F000
unkown
page read and write
clean
1CE8FB5A000
unkown
page read and write
clean
7FF5A3246000
unkown
page readonly
clean
1CE94A88000
unkown
page read and write
clean
7FF4FF367000
unkown
page readonly
clean
1D0CC200000
unkown
page readonly
clean
1EF42380000
unkown
page readonly
clean
1F1D0442000
unkown
page read and write
clean
2061E210000
unkown
page read and write
clean
1D337402000
unkown
page read and write
clean
1D337457000
unkown
page read and write
clean
7FF5C9987000
unkown
page readonly
clean
1CE94820000
unkown
page read and write
clean
7FF59022A000
unkown
page readonly
clean
214EC500000
unkown
page read and write
clean
1CE8F030000
heap private
page read and write
clean
1B01E013000
unkown
page read and write
clean
7FF5922E8000
unkown
page readonly
clean
7FF5B2627000
unkown
page readonly
clean
6F162F9000
unkown
page read and write
clean
7FF5A2F33000
unkown
page readonly
clean
7FF5D63F2000
unkown
page readonly
clean
19794010000
unkown
page read and write
clean
7FF53580E000
unkown
page readonly
clean
7FF5210DD000
unkown
page readonly
clean
7FF592160000
unkown
page readonly
clean
7FF50A77B000
unkown
page readonly
clean
7FF595A57000
unkown
page readonly
clean
1BFFEE02000
unkown
page read and write
clean
1AF4E263000
unkown
page read and write
clean
1CE8FB18000
unkown
page read and write
clean
235BBA2A000
unkown
page read and write
clean
9C7CBCB000
unkown
page read and write
clean
7FF5A322D000
unkown
page readonly
clean
1B01E750000
unkown
page read and write
clean
7FF5A2FEB000
unkown
page readonly
clean
7FF5A984E000
unkown
page readonly
clean
7FF57819A000
unkown
page readonly
clean
F945E7B000
unkown
page read and write
clean
1EF424A0000
unkown
page read and write
clean
7FF5C98D4000
unkown
page readonly
clean
1F1D0454000
unkown
page read and write
clean
7FF5A2762000
unkown
page readonly
clean
19B20708000
unkown
page read and write
clean
7FF595C8C000
unkown
page readonly
clean
1AF4E4D0000
unkown
page readonly
clean
7FF53BFB0000
unkown
page readonly
clean
1CE8F302000
unkown
page read and write
clean
7FF4FF4C7000
unkown
page readonly
clean
1D33743F000
unkown
page read and write
clean
BB0F679000
unkown
page read and write
clean
5C7DF7F000
unkown
page read and write
clean
7FF4FF51E000
unkown
page readonly
clean
1CE94A20000
unkown
page read and write
clean
23A87258000
unkown
page read and write
clean
7FF520F4A000
unkown
page readonly
clean
7FF520993000
unkown
page readonly
clean
6F1607E000
unkown
page read and write
clean
7FF595C35000
unkown
page readonly
clean
7FF535722000
unkown
page readonly
clean
7FF50A129000
unkown
page readonly
clean
20EE1C90000
unkown
page readonly
clean
7FF53C054000
unkown
page readonly
clean
7FF5357B7000
unkown
page readonly
clean
7FF5712AA000
unkown
page readonly
clean
1D337400000
unkown
page read and write
clean
7FF4FF020000
unkown
page readonly
clean
B05737A000
unkown
page read and write
clean
1BFFED80000
heap default
page read and write
clean
23D8388A000
unkown
page read and write
clean
7FF528BAB000
unkown
page readonly
clean
7FF509DE5000
unkown
page readonly
clean
There are 1901 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://www.eaqarat-iran.ir/wp-admin/js/eng/app/nextlogin?csrftoken=MTYyMDg0OTE0NWQzZjE1NGExMzM1YTYzODE1ZGQ3OGIxZWFkM2UxMWVkOWE0MWJiMDJjNzcxMzM4YzdmNDhhY2QyNjA4N2E3OGU2ZDQ3OGQyNg==&email=pheeke@esd.wa.gov
malicious
http://esd.rwbdg.com/#aHR0cHM6Ly93cml0ZXJseS5jYS8jcGhlZWtlQGVzZC53YS5nb3Y=
clean
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ldr7MUaAAAAAMaYQTNpSsqRobZNq7kDdyq0WezE&co=aHR0cHM6Ly9rcmlzdGVuYmFrZXJjb2FjaC5jb206NDQz&hl=en&v=npGaewopg1UaB8CNtYfx-y1j&size=invisible&cb=af1b37wds0i6
clean
https://kristenbakercoach.com/wp-admin/js/redir/?csrftoken=MTYyMDg0OTEzMWQzZjE1NGExMzM1YTYzODE1ZGQ3OGIxZWFkM2UxMWVkOWE0MWJiMDIwOWIyZTg4OGIwYjc5MGQ0ZWUyNDk5YzUyZmJiNGNjYw==
clean