Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
sbcss_Richard.DeNava_#inv0549387TWQYqzTPaYeqvaYMnpdIfJAwwzbguzauViQVRRplvOktNmAire.HTM
|
HTML document, ASCII text, with very long lines, with no line terminators
|
initial sample
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\20c0eda0-7d0a-4109-8174-b4316806c450.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\250b5887-4301-4fbe-8ab1-0e5ed6040b7c.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\2b72e926-93f1-40ef-9a65-cbc27cc1d6ed.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\48378e81-31b9-4972-b062-963ee14ae77d.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\4fe0eba8-2d68-41b5-8f44-3fc311df1337.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6246f56f-5144-4406-af09-ccd2bfae8fd3.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\66780eac-79f9-4eed-92fc-ebdb590afb7d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6fabf9b2-6c21-4e16-96ac-8603c031798d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\850f8a7f-d519-49f0-b168-b06e499e3bea.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\872e2f90-1ccb-44cd-9864-cc175c4ac7b8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\08c0142a-7f33-438e-ad4d-716a5bd349b4.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\18cbd6c5-130b-4e01-a3b6-7b5e9c6cfcc1.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\25cfb9ec-8f6c-47af-bdc0-d19aa32346d4.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\39381c81-7d48-499d-98df-583e84a16804.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\440c4d66-43fd-4c46-8b71-b7c2152e6b91.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5678d1b1-a7f3-4ece-96ab-251fa24a9186.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5daa7bbe-ac98-4eaa-9ba4-25e416fd4008.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\61ca350f-66cc-4ba5-ace2-ccd6a4a1ef72.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7b626a04-66aa-4695-8e80-17464b92bdf7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7c0ddb3f-d16e-42a0-a756-0a76c22c3b62.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\82d6c8a6-01c3-43ee-a122-fea091904515.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\98d13bd6-8da1-43d6-bc44-3a546958005d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9997f2b1-fd82-4d33-85f7-afd1b2160c5d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldG (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.oldj (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.oldge (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old8C (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session. (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.oldil (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State5 (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.. (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesTe (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.oldTM (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.oldL (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\917d8206-ef5f-41c1-b1b1-0fa0d057c3a4.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.oldd
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.oldon
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\a9575fb5-0b8c-4e74-af1c-02ec3b64f16a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldTM (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c97e0b5a-44dc-4843-aef6-cd2c577dc738.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ca26d1f6-17b1-4589-bef4-fbf2f86a56f2.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e4765a95-70af-441a-baf2-cbfa85f0077f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State5 (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State:u (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache. (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\9.28.0\Indexing in Progress
|
empty
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir5428_885068947\Ruleset Data
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\dc076e75-8c8a-4c12-94a6-edd5f1975f8a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ed6a2598-6263-4d18-b439-32c1cd564fdd.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f6d0925f-d7fb-4b7d-9f68-07211616eb31.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0b1d8c03-8fc6-46e2-ad81-58197eddc0c3.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\44cf4753-30d2-44b2-a478-39483559d6fc.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5428_1015105\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5428_1422264496\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5428_1605041789\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5428_1794162246\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5428_2076531315\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\e45d3f75-a397-4230-a547-a422e2e1e017.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ecbc03d1-bc1a-4939-aba5-3bbed18fee5d.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\44cf4753-30d2-44b2-a478-39483559d6fc.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_903677326\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5428_92769427\ecbc03d1-bc1a-4939-aba5-3bbed18fee5d.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
There are 217 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\sbcss_Richard.DeNava_#inv0549387TWQYqzTPaYeqvaYMnpdIfJAwwzbguzauViQVRRplvOktNmAire.HTM'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,10147445341090227245,8554567358196560481,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1808 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://www.google.com
|
unknown
|
|
|
|
https://dns.google
|
unknown
|
|
|
|
https://ogs.google.com
|
unknown
|
|
|
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
|
|
|
https://development.toiletface.co.uk
|
unknown
|
|
|
|
https://accounts.google.com
|
unknown
|
|
|
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://www.google.com;
|
unknown
|
|
|
|
https://support.google.com/chromecast/answer/2998456
|
unknown
|
|
|
|
https://hangouts.google.com/
|
unknown
|
|
|
|
https://cdnjs.cloudflare.com
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://apis.google.com
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
|
unknown
|
|
|
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://www.google.com/
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/downloads-lorry
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://a.nel.cloudflare.com/report/v3?s=LjtzJDbXRSwrQMTJpCiPOA5Wsk5xd5GHXyJvHzaVDCViyDpSJz83p3uOLq7
|
unknown
|
|
|
|
https://clients2.google.com
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx
|
unknown
|
|
There are 11 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
accounts.google.com
|
216.58.205.77
|
|
|
|
cdnjs.cloudflare.com
|
104.16.18.94
|
|
|
|
clients.l.google.com
|
216.58.208.174
|
|
|
|
development.toiletface.co.uk
|
77.72.1.226
|
|
|
|
googlehosted.l.googleusercontent.com
|
216.58.208.129
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
clients2.google.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
77.72.1.226
|
development.toiletface.co.uk
|
United Kingdom
|
|
|
|
216.58.208.174
|
clients.l.google.com
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
216.58.205.77
|
accounts.google.com
|
United States
|
|
|
|
192.168.2.4
|
unknown
|
unknown
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
216.58.208.129
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
104.16.18.94
|
cdnjs.cloudflare.com
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
Blob
|
|
There are 34 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
27210B02000
|
unkown
|
page read and write
|
|
|
|
213A3D00000
|
unkown
|
page readonly
|
|
|
|
7FF51B8E4000
|
unkown
|
page readonly
|
|
|
|
7FF568AF4000
|
unkown
|
page readonly
|
|
|
|
190A1CFC000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
470E67F000
|
unkown
|
page read and write
|
|
|
|
7FF5B6B6B000
|
unkown
|
page readonly
|
|
|
|
7FF5D5195000
|
unkown
|
page readonly
|
|
|
|
1909D4F0000
|
unkown
|
page read and write
|
|
|
|
181128C0000
|
unkown
|
page read and write
|
|
|
|
7FF58E53B000
|
unkown
|
page readonly
|
|
|
|
7FF5E13EF000
|
unkown
|
page readonly
|
|
|
|
7FF58E564000
|
unkown
|
page readonly
|
|
|
|
7FF5B676B000
|
unkown
|
page readonly
|
|
|
|
23FAD245000
|
unkown
|
page read and write
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
190A1C80000
|
unkown
|
page read and write
|
|
|
|
1B3A6482000
|
unkown
|
page read and write
|
|
|
|
1909D001000
|
unkown
|
page read and write
|
|
|
|
7FF544AAC000
|
unkown
|
page readonly
|
|
|
|
190A1CE5000
|
unkown
|
page read and write
|
|
|
|
7FF568B63000
|
unkown
|
page readonly
|
|
|
|
1B674DE0000
|
unkown
|
page read and write
|
|
|
|
7FF5B6962000
|
unkown
|
page readonly
|
|
|
|
190A1FF4000
|
unkown
|
page readonly
|
|
|
|
1B3A6502000
|
unkown
|
page read and write
|
|
|
|
7FF51B9C3000
|
unkown
|
page readonly
|
|
|
|
7FF5D5212000
|
unkown
|
page readonly
|
|
|
|
7FF5E1411000
|
unkown
|
page readonly
|
|
|
|
490E47F000
|
unkown
|
page read and write
|
|
|
|
190A1FA0000
|
unkown
|
page readonly
|
|
|
|
23FAD400000
|
unkown
|
page readonly
|
|
|
|
23FAD200000
|
unkown
|
page read and write
|
|
|
|
7FF5E6842000
|
unkown
|
page readonly
|
|
|
|
1909CF59000
|
unkown
|
page read and write
|
|
|
|
23FADA02000
|
unkown
|
page read and write
|
|
|
|
1909C460000
|
heap private
|
page read and write
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
23FAD0C0000
|
unkown
|
page readonly
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
7FF551454000
|
unkown
|
page readonly
|
|
|
|
7FF598260000
|
unkown
|
page readonly
|
|
|
|
2555CFF0000
|
unkown
|
page readonly
|
|
|
|
7FF568A78000
|
unkown
|
page readonly
|
|
|
|
7FF52EE82000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
190A1C70000
|
unkown
|
page read and write
|
|
|
|
27210A6A000
|
unkown
|
page read and write
|
|
|
|
22BB5150000
|
unkown
|
page read and write
|
|
|
|
23FAD266000
|
unkown
|
page read and write
|
|
|
|
1909CE00000
|
unkown
|
page read and write
|
|
|
|
25D07FE000
|
unkown
|
page read and write
|
|
|
|
1909CE15000
|
unkown
|
page read and write
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
1C451ED0000
|
unkown
|
page readonly
|
|
|
|
23FAD25C000
|
unkown
|
page read and write
|
|
|
|
7FF5E1242000
|
unkown
|
page readonly
|
|
|
|
190A1D02000
|
unkown
|
page read and write
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
7FF5E1466000
|
unkown
|
page readonly
|
|
|
|
7FF5E601E000
|
unkown
|
page readonly
|
|
|
|
AAE8AF8000
|
unkown
|
page read and write
|
|
|
|
272109A0000
|
unkown
|
page read and write
|
|
|
|
1B3A6D76000
|
unkown
|
page read and write
|
|
|
|
22BB35F0000
|
unkown
|
page read and write
|
|
|
|
7FF568A91000
|
unkown
|
page readonly
|
|
|
|
1B3A7400000
|
unkown
|
page readonly
|
|
|
|
7FF5A8196000
|
unkown
|
page readonly
|
|
|
|
B503AFC000
|
unkown
|
page read and write
|
|
|
|
22BB5400000
|
unkown
|
page readonly
|
|
|
|
1B675700000
|
unkown
|
page read and write
|
|
|
|
7FF544915000
|
unkown
|
page readonly
|
|
|
|
7FF58E39E000
|
unkown
|
page readonly
|
|
|
|
190A1BF0000
|
unkown
|
page readonly
|
|
|
|
22BB3658000
|
unkown
|
page read and write
|
|
|
|
2555D760000
|
unkown
|
page read and write
|
|
|
|
7FF598BA1000
|
unkown
|
page readonly
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
7FF53BB68000
|
unkown
|
page readonly
|
|
|
|
27211202000
|
unkown
|
page read and write
|
|
|
|
23C1A229000
|
unkown
|
page read and write
|
|
|
|
7FF5449BC000
|
unkown
|
page readonly
|
|
|
|
7FF54490F000
|
unkown
|
page readonly
|
|
|
|
1C452100000
|
unkown
|
page read and write
|
|
|
|
7FF5B6AE5000
|
unkown
|
page readonly
|
|
|
|
BF0B1B000
|
unkown
|
page read and write
|
|
|
|
7FF5B6AE0000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
1B3A64FA000
|
unkown
|
page read and write
|
|
|
|
5EDD6FE000
|
unkown
|
page read and write
|
|
|
|
158E7180000
|
unkown
|
page readonly
|
|
|
|
7FF598A79000
|
unkown
|
page readonly
|
|
|
|
7FF5E14D6000
|
unkown
|
page readonly
|
|
|
|
1909CF9A000
|
unkown
|
page read and write
|
|
|
|
7FF51B722000
|
unkown
|
page readonly
|
|
|
|
213A3B40000
|
unkown
|
page read and write
|
|
|
|
AAE8FFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D5268000
|
unkown
|
page readonly
|
|
|
|
158E7160000
|
heap default
|
page read and write
|
|
|
|
7FF52EE51000
|
unkown
|
page readonly
|
|
|
|
D3022FE000
|
unkown
|
page read and write
|
|
|
|
D8656FE000
|
unkown
|
page read and write
|
|
|
|
190A19A0000
|
unkown
|
page read and write
|
|
|
|
190A1CE5000
|
unkown
|
page read and write
|
|
|
|
7FF51B6DB000
|
unkown
|
page readonly
|
|
|
|
190A1CE1000
|
unkown
|
page read and write
|
|
|
|
7FF551450000
|
unkown
|
page readonly
|
|
|
|
7FF53BB40000
|
unkown
|
page readonly
|
|
|
|
190A2020000
|
unkown
|
page read and write
|
|
|
|
7FF52EE7C000
|
unkown
|
page readonly
|
|
|
|
23FAD302000
|
unkown
|
page read and write
|
|
|
|
7FF53BB35000
|
unkown
|
page readonly
|
|
|
|
7FF5E669D000
|
unkown
|
page readonly
|
|
|
|
1B3A6413000
|
unkown
|
page read and write
|
|
|
|
7FF5B67D2000
|
unkown
|
page readonly
|
|
|
|
7FF543FDF000
|
unkown
|
page readonly
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
7FF551485000
|
unkown
|
page readonly
|
|
|
|
D86557E000
|
unkown
|
page read and write
|
|
|
|
190A1CCD000
|
unkown
|
page read and write
|
|
|
|
1B675713000
|
unkown
|
page read and write
|
|
|
|
1B3A6DBC000
|
unkown
|
page read and write
|
|
|
|
7FF52EE1B000
|
unkown
|
page readonly
|
|
|
|
7FF54464C000
|
unkown
|
page readonly
|
|
|
|
27210A28000
|
unkown
|
page read and write
|
|
|
|
7FF58E131000
|
unkown
|
page readonly
|
|
|
|
7FF5E684C000
|
unkown
|
page readonly
|
|
|
|
7FF52EE96000
|
unkown
|
page readonly
|
|
|
|
7FF5A817C000
|
unkown
|
page readonly
|
|
|
|
213A3C2F000
|
unkown
|
page read and write
|
|
|
|
1909D410000
|
unkown
|
page read and write
|
|
|
|
1B3A6D77000
|
unkown
|
page read and write
|
|
|
|
1DE4BC00000
|
unkown
|
page readonly
|
|
|
|
1B3A6AF0000
|
unkown
|
page read and write
|
|
|
|
1C451E60000
|
heap private
|
page read and write
|
|
|
|
22BB35A0000
|
heap default
|
page read and write
|
|
|
|
158E7213000
|
unkown
|
page read and write
|
|
|
|
7FF544AB2000
|
unkown
|
page readonly
|
|
|
|
1909D620000
|
unkown
|
page readonly
|
|
|
|
1DE4B200000
|
unkown
|
page read and write
|
|
|
|
22BB5170000
|
unkown
|
page readonly
|
|
|
|
7FF598CD0000
|
unkown
|
page readonly
|
|
|
|
158E725A000
|
unkown
|
page read and write
|
|
|
|
7FF52EE0B000
|
unkown
|
page readonly
|
|
|
|
158E74D0000
|
unkown
|
page readonly
|
|
|
|
2555CFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5B33D6000
|
unkown
|
page readonly
|
|
|
|
23FAD23B000
|
unkown
|
page read and write
|
|
|
|
D396FDA000
|
unkown
|
page read and write
|
|
|
|
7FF5D593C000
|
unkown
|
page readonly
|
|
|
|
1B3A6DC1000
|
unkown
|
page read and write
|
|
|
|
18112B90000
|
unkown
|
page read and write
|
|
|
|
7FF52EBDF000
|
unkown
|
page readonly
|
|
|
|
22BB3647000
|
unkown
|
page read and write
|
|
|
|
7FF568AE6000
|
unkown
|
page readonly
|
|
|
|
1B3A6DCA000
|
unkown
|
page read and write
|
|
|
|
7FF56892D000
|
unkown
|
page readonly
|
|
|
|
23FAD246000
|
unkown
|
page read and write
|
|
|
|
190A1CEC000
|
unkown
|
page read and write
|
|
|
|
7FF5E66EA000
|
unkown
|
page readonly
|
|
|
|
22BB362A000
|
unkown
|
page read and write
|
|
|
|
213A3BB0000
|
unkown
|
page read and write
|
|
|
|
B503EFE000
|
unkown
|
page read and write
|
|
|
|
7FF598CE1000
|
unkown
|
page readonly
|
|
|
|
2555CFD0000
|
heap default
|
page read and write
|
|
|
|
7FF5B6B15000
|
unkown
|
page readonly
|
|
|
|
23FAD22D000
|
unkown
|
page read and write
|
|
|
|
7FF58E511000
|
unkown
|
page readonly
|
|
|
|
7FF568B63000
|
unkown
|
page readonly
|
|
|
|
190A1CE5000
|
unkown
|
page read and write
|
|
|
|
1909CF00000
|
unkown
|
page read and write
|
|
|
|
7FF51B8E0000
|
unkown
|
page readonly
|
|
|
|
1909CF13000
|
unkown
|
page read and write
|
|
|
|
7FF598D2C000
|
unkown
|
page readonly
|
|
|
|
7FF58E5BC000
|
unkown
|
page readonly
|
|
|
|
1B3A62D0000
|
heap default
|
page read and write
|
|
|
|
7FF5A8189000
|
unkown
|
page readonly
|
|
|
|
18112860000
|
unkown
|
page read and write
|
|
|
|
7FF551533000
|
unkown
|
page readonly
|
|
|
|
1B3A6D55000
|
unkown
|
page read and write
|
|
|
|
470EE7F000
|
unkown
|
page read and write
|
|
|
|
7FF5E14C6000
|
unkown
|
page readonly
|
|
|
|
7FF544646000
|
unkown
|
page readonly
|
|
|
|
7FF5B67F3000
|
unkown
|
page readonly
|
|
|
|
22BB3665000
|
unkown
|
page read and write
|
|
|
|
18111E90000
|
unkown
|
page read and write
|
|
|
|
27210A00000
|
unkown
|
page read and write
|
|
|
|
213A3C00000
|
heap default
|
page read and write
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
1B3A6D58000
|
unkown
|
page read and write
|
|
|
|
1B3A6D3A000
|
unkown
|
page read and write
|
|
|
|
18111BD0000
|
unkown
|
page read and write
|
|
|
|
1DE4B308000
|
unkown
|
page read and write
|
|
|
|
190A1C2F000
|
unkown
|
page read and write
|
|
|
|
2555D052000
|
unkown
|
page read and write
|
|
|
|
7FF544A60000
|
unkown
|
page readonly
|
|
|
|
7FF5D59C6000
|
unkown
|
page readonly
|
|
|
|
27210970000
|
heap default
|
page read and write
|
|
|
|
190A1B25000
|
unkown
|
page read and write
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
23C1A080000
|
heap default
|
page read and write
|
|
|
|
7FF5B6AB1000
|
unkown
|
page readonly
|
|
|
|
1B3A644F000
|
unkown
|
page read and write
|
|
|
|
190A1E80000
|
unkown
|
page read and write
|
|
|
|
23C1A313000
|
unkown
|
page read and write
|
|
|
|
490DDFA000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
23FAD232000
|
unkown
|
page read and write
|
|
|
|
1B3A6D87000
|
unkown
|
page read and write
|
|
|
|
7FF5E6665000
|
unkown
|
page readonly
|
|
|
|
B503D7E000
|
unkown
|
page read and write
|
|
|
|
7FF52ECE5000
|
unkown
|
page readonly
|
|
|
|
7FF5A8134000
|
unkown
|
page readonly
|
|
|
|
7FF55149C000
|
unkown
|
page readonly
|
|
|
|
1B3A6AF0000
|
unkown
|
page read and write
|
|
|
|
1B3A6D76000
|
unkown
|
page read and write
|
|
|
|
1B3A6D00000
|
unkown
|
page read and write
|
|
|
|
490DCF7000
|
unkown
|
page read and write
|
|
|
|
23C1A860000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA7000
|
unkown
|
page read and write
|
|
|
|
190A1B60000
|
unkown
|
page read and write
|
|
|
|
7FF5E6475000
|
unkown
|
page readonly
|
|
|
|
F3EB87F000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
7FF5A8182000
|
unkown
|
page readonly
|
|
|
|
7FF52ED8C000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
1B675460000
|
unkown
|
page readonly
|
|
|
|
7FF598DB3000
|
unkown
|
page readonly
|
|
|
|
D8653FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A8213000
|
unkown
|
page readonly
|
|
|
|
7FF598AA4000
|
unkown
|
page readonly
|
|
|
|
7FF52ECC0000
|
unkown
|
page readonly
|
|
|
|
1B3A6D75000
|
unkown
|
page read and write
|
|
|
|
AAE8F77000
|
unkown
|
page read and write
|
|
|
|
7FF5E683C000
|
unkown
|
page readonly
|
|
|
|
22BB5150000
|
unkown
|
page read and write
|
|
|
|
7FF5B6758000
|
unkown
|
page readonly
|
|
|
|
1B675540000
|
unkown
|
page readonly
|
|
|
|
23C1A213000
|
unkown
|
page read and write
|
|
|
|
1909D5F0000
|
unkown
|
page readonly
|
|
|
|
1909CF29000
|
unkown
|
page read and write
|
|
|
|
7FF52EDF0000
|
unkown
|
page readonly
|
|
|
|
1C452068000
|
unkown
|
page read and write
|
|
|
|
7FF5E1474000
|
unkown
|
page readonly
|
|
|
|
7FF55143B000
|
unkown
|
page readonly
|
|
|
|
7FF53BAF0000
|
unkown
|
page readonly
|
|
|
|
7FF5D59D3000
|
unkown
|
page readonly
|
|
|
|
7FF51B675000
|
unkown
|
page readonly
|
|
|
|
7FF5D58D8000
|
unkown
|
page readonly
|
|
|
|
23FAD25D000
|
unkown
|
page read and write
|
|
|
|
1B3A6D47000
|
unkown
|
page read and write
|
|
|
|
1909CDF3000
|
unkown
|
page read and write
|
|
|
|
23C1A300000
|
unkown
|
page read and write
|
|
|
|
25D09FF000
|
unkown
|
page read and write
|
|
|
|
7FF598CF1000
|
unkown
|
page readonly
|
|
|
|
7FF551036000
|
unkown
|
page readonly
|
|
|
|
1DE4B202000
|
unkown
|
page read and write
|
|
|
|
23FAD24E000
|
unkown
|
page read and write
|
|
|
|
7FF58E4F4000
|
unkown
|
page readonly
|
|
|
|
1B3A6D0A000
|
unkown
|
page read and write
|
|
|
|
190A1C17000
|
unkown
|
page read and write
|
|
|
|
7FF58E463000
|
unkown
|
page readonly
|
|
|
|
7FF52ED2A000
|
unkown
|
page readonly
|
|
|
|
22BB3657000
|
unkown
|
page read and write
|
|
|
|
23FAD190000
|
unkown
|
page readonly
|
|
|
|
22BB35B0000
|
unkown
|
page readonly
|
|
|
|
7FF5D520F000
|
unkown
|
page readonly
|
|
|
|
1C452108000
|
unkown
|
page read and write
|
|
|
|
1B3A6D59000
|
unkown
|
page read and write
|
|
|
|
1C452088000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
7FF5E60D2000
|
unkown
|
page readonly
|
|
|
|
190A1CF7000
|
unkown
|
page read and write
|
|
|
|
7FF551533000
|
unkown
|
page readonly
|
|
|
|
190A1EE0000
|
unkown
|
page readonly
|
|
|
|
18112B30000
|
unkown
|
page read and write
|
|
|
|
7FF5E68D3000
|
unkown
|
page readonly
|
|
|
|
23C1A200000
|
unkown
|
page read and write
|
|
|
|
7FF568AD2000
|
unkown
|
page readonly
|
|
|
|
490DFFF000
|
unkown
|
page read and write
|
|
|
|
7FF598CD4000
|
unkown
|
page readonly
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
7FF5514A9000
|
unkown
|
page readonly
|
|
|
|
7FF5E5D64000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B0B000
|
unkown
|
page readonly
|
|
|
|
D3024FE000
|
unkown
|
page read and write
|
|
|
|
7FF5688C2000
|
unkown
|
page readonly
|
|
|
|
7FF5B67F9000
|
unkown
|
page readonly
|
|
|
|
18112850000
|
unkown
|
page read and write
|
|
|
|
7FF598D22000
|
unkown
|
page readonly
|
|
|
|
7FF58E135000
|
unkown
|
page readonly
|
|
|
|
1909C5B0000
|
unkown
|
page readonly
|
|
|
|
213A3C12000
|
unkown
|
page read and write
|
|
|
|
7FF5E67F0000
|
unkown
|
page readonly
|
|
|
|
1B3A6D51000
|
unkown
|
page read and write
|
|
|
|
7FF53BBCC000
|
unkown
|
page readonly
|
|
|
|
7FF5B69F1000
|
unkown
|
page readonly
|
|
|
|
7FF53BB5C000
|
unkown
|
page readonly
|
|
|
|
1B3A6D85000
|
unkown
|
page read and write
|
|
|
|
7FF5A79DD000
|
unkown
|
page readonly
|
|
|
|
7FF5E14E3000
|
unkown
|
page readonly
|
|
|
|
1B3A6AD0000
|
unkown
|
page readonly
|
|
|
|
7FF53BBA5000
|
unkown
|
page readonly
|
|
|
|
1909D610000
|
unkown
|
page readonly
|
|
|
|
470E77D000
|
unkown
|
page read and write
|
|
|
|
1DE4B313000
|
unkown
|
page read and write
|
|
|
|
7FF5E67C1000
|
unkown
|
page readonly
|
|
|
|
7FF5D5942000
|
unkown
|
page readonly
|
|
|
|
1B3A6D3A000
|
unkown
|
page read and write
|
|
|
|
1B3A6D6B000
|
unkown
|
page read and write
|
|
|
|
1BFCD9D000
|
unkown
|
page read and write
|
|
|
|
23FAD259000
|
unkown
|
page read and write
|
|
|
|
AAE887D000
|
unkown
|
page read and write
|
|
|
|
7FF551516000
|
unkown
|
page readonly
|
|
|
|
F3EB67B000
|
unkown
|
page read and write
|
|
|
|
213A3F20000
|
heap private
|
page read and write
|
|
|
|
1B3A7300000
|
unkown
|
page read and write
|
|
|
|
7FF598B65000
|
unkown
|
page readonly
|
|
|
|
7FF5E663A000
|
unkown
|
page readonly
|
|
|
|
7FF5D58F0000
|
unkown
|
page readonly
|
|
|
|
7FF53B7A8000
|
unkown
|
page readonly
|
|
|
|
7FF5D5956000
|
unkown
|
page readonly
|
|
|
|
7FF568ADC000
|
unkown
|
page readonly
|
|
|
|
7FF53BA1D000
|
unkown
|
page readonly
|
|
|
|
D39737E000
|
unkown
|
page read and write
|
|
|
|
23FAD25F000
|
unkown
|
page read and write
|
|
|
|
2555DA00000
|
unkown
|
page read and write
|
|
|
|
1B3A6D55000
|
unkown
|
page read and write
|
|
|
|
7FF52EC3F000
|
unkown
|
page readonly
|
|
|
|
7FF5E1452000
|
unkown
|
page readonly
|
|
|
|
1B3A6D96000
|
unkown
|
page read and write
|
|
|
|
B503C7E000
|
unkown
|
page read and write
|
|
|
|
22BB5202000
|
unkown
|
page read and write
|
|
|
|
1B3A7261000
|
unkown
|
page read and write
|
|
|
|
7FF55103C000
|
unkown
|
page readonly
|
|
|
|
470EC7F000
|
unkown
|
page read and write
|
|
|
|
7FF5E6632000
|
unkown
|
page readonly
|
|
|
|
7FF568A6F000
|
unkown
|
page readonly
|
|
|
|
25D05FB000
|
unkown
|
page read and write
|
|
|
|
23FAD23D000
|
unkown
|
page read and write
|
|
|
|
190A1CFC000
|
unkown
|
page read and write
|
|
|
|
FFBE07E000
|
unkown
|
page read and write
|
|
|
|
2555D802000
|
unkown
|
page read and write
|
|
|
|
1B3A6D69000
|
unkown
|
page read and write
|
|
|
|
1DE4B302000
|
unkown
|
page read and write
|
|
|
|
7FF551469000
|
unkown
|
page readonly
|
|
|
|
7FF53BBD1000
|
unkown
|
page readonly
|
|
|
|
B50427D000
|
unkown
|
page read and write
|
|
|
|
1B3A64CC000
|
unkown
|
page read and write
|
|
|
|
7FF58E542000
|
unkown
|
page readonly
|
|
|
|
7FF5E66C1000
|
unkown
|
page readonly
|
|
|
|
AAE8E7E000
|
unkown
|
page read and write
|
|
|
|
27211400000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B39000
|
unkown
|
page readonly
|
|
|
|
7FF5D5925000
|
unkown
|
page readonly
|
|
|
|
7FF5D57FE000
|
unkown
|
page readonly
|
|
|
|
1B674E13000
|
unkown
|
page read and write
|
|
|
|
7FF598D29000
|
unkown
|
page readonly
|
|
|
|
1909C713000
|
unkown
|
page read and write
|
|
|
|
7FF53BB81000
|
unkown
|
page readonly
|
|
|
|
7FF5E67CC000
|
unkown
|
page readonly
|
|
|
|
158E7A02000
|
unkown
|
page read and write
|
|
|
|
22BB38D0000
|
unkown
|
page readonly
|
|
|
|
FFBE177000
|
unkown
|
page read and write
|
|
|
|
7FF568A99000
|
unkown
|
page readonly
|
|
|
|
190A1F70000
|
unkown
|
page read and write
|
|
|
|
1B674ECF000
|
unkown
|
page read and write
|
|
|
|
AAE90FD000
|
unkown
|
page read and write
|
|
|
|
190A1A00000
|
unkown
|
page read and write
|
|
|
|
7FF5D59D3000
|
unkown
|
page readonly
|
|
|
|
7FF5E1469000
|
unkown
|
page readonly
|
|
|
|
190A1CE1000
|
unkown
|
page read and write
|
|
|
|
7FF5E14E3000
|
unkown
|
page readonly
|
|
|
|
7FF551448000
|
unkown
|
page readonly
|
|
|
|
7FF5D58F4000
|
unkown
|
page readonly
|
|
|
|
1DE4B4D0000
|
unkown
|
page readonly
|
|
|
|
490E0FA000
|
unkown
|
page read and write
|
|
|
|
7FF58E54C000
|
unkown
|
page readonly
|
|
|
|
7FF58E365000
|
unkown
|
page readonly
|
|
|
|
23C1A24F000
|
unkown
|
page read and write
|
|
|
|
1B3A6D66000
|
unkown
|
page read and write
|
|
|
|
158E7275000
|
unkown
|
page read and write
|
|
|
|
7FF52EDF5000
|
unkown
|
page readonly
|
|
|
|
7FF544A58000
|
unkown
|
page readonly
|
|
|
|
BF12FF000
|
unkown
|
page read and write
|
|
|
|
1DE4B267000
|
unkown
|
page read and write
|
|
|
|
23C1A170000
|
unkown
|
page readonly
|
|
|
|
7FF5B692F000
|
unkown
|
page readonly
|
|
|
|
190A1B20000
|
unkown
|
page read and write
|
|
|
|
7FF5B6BE6000
|
unkown
|
page readonly
|
|
|
|
7FF5B6769000
|
unkown
|
page readonly
|
|
|
|
7FF54490D000
|
unkown
|
page readonly
|
|
|
|
1B3A6D96000
|
unkown
|
page read and write
|
|
|
|
190A1CE1000
|
unkown
|
page read and write
|
|
|
|
1DE4B260000
|
unkown
|
page read and write
|
|
|
|
1B674DD0000
|
unkown
|
page readonly
|
|
|
|
7FF544AB9000
|
unkown
|
page readonly
|
|
|
|
7FF5A8128000
|
unkown
|
page readonly
|
|
|
|
7FF568B56000
|
unkown
|
page readonly
|
|
|
|
1909CDF0000
|
unkown
|
page read and write
|
|
|
|
7FF598CC5000
|
unkown
|
page readonly
|
|
|
|
1B3A6D85000
|
unkown
|
page read and write
|
|
|
|
1909C68E000
|
unkown
|
page read and write
|
|
|
|
7FF5E67BD000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B72000
|
unkown
|
page readonly
|
|
|
|
7FF567FF3000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
27211060000
|
unkown
|
page readonly
|
|
|
|
7FF5E67E8000
|
unkown
|
page readonly
|
|
|
|
7FF5B6A80000
|
unkown
|
page readonly
|
|
|
|
490E37E000
|
unkown
|
page read and write
|
|
|
|
5EDDBFD000
|
unkown
|
page read and write
|
|
|
|
190A1C21000
|
unkown
|
page read and write
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
7FF51B915000
|
unkown
|
page readonly
|
|
|
|
7FF568935000
|
unkown
|
page readonly
|
|
|
|
27210910000
|
heap private
|
page read and write
|
|
|
|
7FF5E68D3000
|
unkown
|
page readonly
|
|
|
|
7FF5512FD000
|
unkown
|
page readonly
|
|
|
|
1909C4C0000
|
heap default
|
page read and write
|
|
|
|
190A1CC5000
|
unkown
|
page read and write
|
|
|
|
158E7860000
|
unkown
|
page readonly
|
|
|
|
7FF5D520B000
|
unkown
|
page readonly
|
|
|
|
BF13FC000
|
unkown
|
page read and write
|
|
|
|
7FF51B9AC000
|
unkown
|
page readonly
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
1B3A6D4F000
|
unkown
|
page read and write
|
|
|
|
1B3A6D75000
|
unkown
|
page read and write
|
|
|
|
18111CD2000
|
heap default
|
page read and write
|
|
|
|
1909C613000
|
unkown
|
page read and write
|
|
|
|
7FF53B7BB000
|
unkown
|
page readonly
|
|
|
|
1909C675000
|
unkown
|
page read and write
|
|
|
|
213A3C27000
|
unkown
|
page read and write
|
|
|
|
7FF52EE8C000
|
unkown
|
page readonly
|
|
|
|
1909C5D0000
|
unkown
|
page read and write
|
|
|
|
7FF51B9B5000
|
unkown
|
page readonly
|
|
|
|
1909C692000
|
unkown
|
page read and write
|
|
|
|
1B674DB0000
|
heap default
|
page read and write
|
|
|
|
1B3A6D3A000
|
unkown
|
page read and write
|
|
|
|
7FF5E0970000
|
unkown
|
page readonly
|
|
|
|
D30237E000
|
unkown
|
page read and write
|
|
|
|
7FF56899A000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B86000
|
unkown
|
page readonly
|
|
|
|
190A1FB4000
|
unkown
|
page write copy
|
|
|
|
7FF5B6A7C000
|
unkown
|
page readonly
|
|
|
|
7FF5B69CD000
|
unkown
|
page readonly
|
|
|
|
1B3A64A7000
|
unkown
|
page read and write
|
|
|
|
7FF53B10A000
|
unkown
|
page readonly
|
|
|
|
190A1990000
|
unkown
|
page read and write
|
|
|
|
190A1E40000
|
unkown
|
page read and write
|
|
|
|
1B675550000
|
unkown
|
page write copy
|
|
|
|
7FF5B63B8000
|
unkown
|
page readonly
|
|
|
|
7FF5B6C03000
|
unkown
|
page readonly
|
|
|
|
7FF58E509000
|
unkown
|
page readonly
|
|
|
|
7FF568A84000
|
unkown
|
page readonly
|
|
|
|
23FAD1A0000
|
unkown
|
page readonly
|
|
|
|
22BB3700000
|
unkown
|
page read and write
|
|
|
|
7FF52ED25000
|
unkown
|
page readonly
|
|
|
|
1B674E29000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
7FF5B6364000
|
unkown
|
page readonly
|
|
|
|
22BB368A000
|
unkown
|
page read and write
|
|
|
|
7FF52EA1C000
|
unkown
|
page readonly
|
|
|
|
7FF5E1421000
|
unkown
|
page readonly
|
|
|
|
1B3A6D5C000
|
unkown
|
page read and write
|
|
|
|
190A1CB0000
|
unkown
|
page read and write
|
|
|
|
18111C70000
|
unkown
|
page readonly
|
|
|
|
1909CF9E000
|
unkown
|
page read and write
|
|
|
|
158E7100000
|
heap private
|
page read and write
|
|
|
|
1909D990000
|
unkown
|
page read and write
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
5EDD7FF000
|
unkown
|
page read and write
|
|
|
|
1B6750D0000
|
unkown
|
page readonly
|
|
|
|
1909D080000
|
unkown
|
page read and write
|
|
|
|
1B3A6D77000
|
unkown
|
page read and write
|
|
|
|
1B3A643C000
|
unkown
|
page read and write
|
|
|
|
23C1AC00000
|
unkown
|
page readonly
|
|
|
|
7FF58E4F0000
|
unkown
|
page readonly
|
|
|
|
23C1A020000
|
heap private
|
page read and write
|
|
|
|
1B3A7254000
|
unkown
|
page read and write
|
|
|
|
25D019E000
|
unkown
|
page read and write
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
1BFD27F000
|
unkown
|
page read and write
|
|
|
|
7FF544A81000
|
unkown
|
page readonly
|
|
|
|
1DE4B400000
|
unkown
|
page readonly
|
|
|
|
7FF53B7B9000
|
unkown
|
page readonly
|
|
|
|
7FF5E6439000
|
unkown
|
page readonly
|
|
|
|
7FF52EB98000
|
unkown
|
page readonly
|
|
|
|
7FF544A64000
|
unkown
|
page readonly
|
|
|
|
7FF58E3EA000
|
unkown
|
page readonly
|
|
|
|
1B674E87000
|
unkown
|
page read and write
|
|
|
|
1C451FC0000
|
unkown
|
page read and write
|
|
|
|
7FF598CBF000
|
unkown
|
page readonly
|
|
|
|
1B3A6D40000
|
unkown
|
page read and write
|
|
|
|
190A1E90000
|
unkown
|
page read and write
|
|
|
|
7FF52E7D8000
|
unkown
|
page readonly
|
|
|
|
7FF544B36000
|
unkown
|
page readonly
|
|
|
|
7FF53BBBB000
|
unkown
|
page readonly
|
|
|
|
1B3A6D75000
|
unkown
|
page read and write
|
|
|
|
190A1B2E000
|
unkown
|
page read and write
|
|
|
|
D3972FE000
|
unkown
|
page read and write
|
|
|
|
7FF51B9C3000
|
unkown
|
page readonly
|
|
|
|
7FF53BC53000
|
unkown
|
page readonly
|
|
|
|
7FF5E1404000
|
unkown
|
page readonly
|
|
|
|
F3EB77F000
|
unkown
|
page read and write
|
|
|
|
7FF58E4A4000
|
unkown
|
page readonly
|
|
|
|
7FF598B12000
|
unkown
|
page readonly
|
|
|
|
1B3A6AF0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5901000
|
unkown
|
page readonly
|
|
|
|
7FF5689DC000
|
unkown
|
page readonly
|
|
|
|
7FF52EF13000
|
unkown
|
page readonly
|
|
|
|
1B3A6D5A000
|
unkown
|
page read and write
|
|
|
|
7FF5B6AF0000
|
unkown
|
page readonly
|
|
|
|
18111CC0000
|
heap default
|
page read and write
|
|
|
|
7FF5B6AFB000
|
unkown
|
page readonly
|
|
|
|
AAE8B7E000
|
unkown
|
page read and write
|
|
|
|
AAE8C78000
|
unkown
|
page read and write
|
|
|
|
23FAD258000
|
unkown
|
page read and write
|
|
|
|
190A1FB7000
|
unkown
|
page write copy
|
|
|
|
7FF53BB01000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
7FF598CBB000
|
unkown
|
page readonly
|
|
|
|
23FAD283000
|
unkown
|
page read and write
|
|
|
|
7FF51B679000
|
unkown
|
page readonly
|
|
|
|
7FF52EE1F000
|
unkown
|
page readonly
|
|
|
|
7FF551445000
|
unkown
|
page readonly
|
|
|
|
7FF5B6935000
|
unkown
|
page readonly
|
|
|
|
27210A59000
|
unkown
|
page read and write
|
|
|
|
7FF5B6AC4000
|
unkown
|
page readonly
|
|
|
|
23C1A302000
|
unkown
|
page read and write
|
|
|
|
7FF5E6428000
|
unkown
|
page readonly
|
|
|
|
7FF58E4CB000
|
unkown
|
page readonly
|
|
|
|
1DE4B262000
|
unkown
|
page read and write
|
|
|
|
23FAD244000
|
unkown
|
page read and write
|
|
|
|
190A1FC0000
|
unkown
|
page read and write
|
|
|
|
7FF551305000
|
unkown
|
page readonly
|
|
|
|
7FF52EEA4000
|
unkown
|
page readonly
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
7FF5B68CB000
|
unkown
|
page readonly
|
|
|
|
158E7202000
|
unkown
|
page read and write
|
|
|
|
158E7268000
|
unkown
|
page read and write
|
|
|
|
1B3A6B00000
|
unkown
|
page read and write
|
|
|
|
23C1A286000
|
unkown
|
page read and write
|
|
|
|
7FF58E2AA000
|
unkown
|
page readonly
|
|
|
|
23FAD202000
|
unkown
|
page read and write
|
|
|
|
7FF598C95000
|
unkown
|
page readonly
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
190A1B2B000
|
unkown
|
page read and write
|
|
|
|
1909C658000
|
unkown
|
page read and write
|
|
|
|
7FF5E643B000
|
unkown
|
page readonly
|
|
|
|
22BB3613000
|
unkown
|
page read and write
|
|
|
|
7FF544A4B000
|
unkown
|
page readonly
|
|
|
|
7FF53BBC9000
|
unkown
|
page readonly
|
|
|
|
25D011F000
|
unkown
|
page read and write
|
|
|
|
1B674E43000
|
unkown
|
page read and write
|
|
|
|
22BB5160000
|
unkown
|
page readonly
|
|
|
|
1909CF08000
|
unkown
|
page read and write
|
|
|
|
7FF5B63E9000
|
unkown
|
page readonly
|
|
|
|
18111DC0000
|
unkown
|
page readonly
|
|
|
|
1DE4BF40000
|
unkown
|
page readonly
|
|
|
|
470EB7E000
|
unkown
|
page read and write
|
|
|
|
7FF544AD4000
|
unkown
|
page readonly
|
|
|
|
190A1B44000
|
unkown
|
page read and write
|
|
|
|
470E10B000
|
unkown
|
page read and write
|
|
|
|
1909D600000
|
unkown
|
page readonly
|
|
|
|
D39727F000
|
unkown
|
page read and write
|
|
|
|
190A1E80000
|
unkown
|
page read and write
|
|
|
|
7FF58E501000
|
unkown
|
page readonly
|
|
|
|
190A1ED0000
|
unkown
|
page readonly
|
|
|
|
7DFE96A91000
|
unkown
|
page readonly
|
|
|
|
22BB366D000
|
unkown
|
page read and write
|
|
|
|
7FF598CA0000
|
unkown
|
page readonly
|
|
|
|
1B3A6D47000
|
unkown
|
page read and write
|
|
|
|
7FF544A4F000
|
unkown
|
page readonly
|
|
|
|
7FF5B6AD4000
|
unkown
|
page readonly
|
|
|
|
7FF568B46000
|
unkown
|
page readonly
|
|
|
|
1B3A6D34000
|
unkown
|
page read and write
|
|
|
|
23FAD0B0000
|
heap default
|
page read and write
|
|
|
|
D86567D000
|
unkown
|
page read and write
|
|
|
|
7FF51B890000
|
unkown
|
page readonly
|
|
|
|
190A1CF2000
|
unkown
|
page read and write
|
|
|
|
190A1E70000
|
unkown
|
page read and write
|
|
|
|
7FF568AD9000
|
unkown
|
page readonly
|
|
|
|
25D04F5000
|
unkown
|
page read and write
|
|
|
|
7FF5A8206000
|
unkown
|
page readonly
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
190A1C55000
|
unkown
|
page read and write
|
|
|
|
1909C5C0000
|
unkown
|
page read and write
|
|
|
|
7FF544B43000
|
unkown
|
page readonly
|
|
|
|
1BFD2FB000
|
unkown
|
page read and write
|
|
|
|
1B3A6D33000
|
unkown
|
page read and write
|
|
|
|
1BFD07E000
|
unkown
|
page read and write
|
|
|
|
1DE4B170000
|
heap private
|
page read and write
|
|
|
|
7FF5B6A10000
|
unkown
|
page readonly
|
|
|
|
1C451FA0000
|
unkown
|
page readonly
|
|
|
|
190A1B40000
|
unkown
|
page read and write
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
1DE4B930000
|
unkown
|
page read and write
|
|
|
|
1B3A6DAC000
|
unkown
|
page read and write
|
|
|
|
5EDDAFE000
|
unkown
|
page read and write
|
|
|
|
7FF598DB3000
|
unkown
|
page readonly
|
|
|
|
1BFD1F9000
|
unkown
|
page read and write
|
|
|
|
7FF5512D9000
|
unkown
|
page readonly
|
|
|
|
7FF598A7F000
|
unkown
|
page readonly
|
|
|
|
1B3A6D64000
|
unkown
|
page read and write
|
|
|
|
1909C67A000
|
unkown
|
page read and write
|
|
|
|
1B3A64A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B6ADC000
|
unkown
|
page readonly
|
|
|
|
7FF598CAC000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B20000
|
unkown
|
page readonly
|
|
|
|
7FF598DA5000
|
unkown
|
page readonly
|
|
|
|
7FF5E5D86000
|
unkown
|
page readonly
|
|
|
|
7FF5E096E000
|
unkown
|
page readonly
|
|
|
|
190A1B41000
|
unkown
|
page read and write
|
|
|
|
1C452113000
|
unkown
|
page read and write
|
|
|
|
190A1CDD000
|
unkown
|
page read and write
|
|
|
|
5EDD8FC000
|
unkown
|
page read and write
|
|
|
|
D8657FD000
|
unkown
|
page read and write
|
|
|
|
7FF5A8165000
|
unkown
|
page readonly
|
|
|
|
190A1B25000
|
unkown
|
page read and write
|
|
|
|
7FF5514A2000
|
unkown
|
page readonly
|
|
|
|
190A2050000
|
unkown
|
page readonly
|
|
|
|
7FF551461000
|
unkown
|
page readonly
|
|
|
|
190A1E80000
|
unkown
|
page readonly
|
|
|
|
190A1A10000
|
unkown
|
page read and write
|
|
|
|
190A2044000
|
unkown
|
page readonly
|
|
|
|
190A1CCC000
|
unkown
|
page read and write
|
|
|
|
18111D07000
|
unkown
|
page read and write
|
|
|
|
5EDD47E000
|
unkown
|
page read and write
|
|
|
|
7FF5B69AB000
|
unkown
|
page readonly
|
|
|
|
1B3A6D87000
|
unkown
|
page read and write
|
|
|
|
7FF53BB4C000
|
unkown
|
page readonly
|
|
|
|
190A1B2F000
|
unkown
|
page read and write
|
|
|
|
1B3A64C2000
|
unkown
|
page read and write
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
1B3A6AE0000
|
unkown
|
page readonly
|
|
|
|
7FF51B8CB000
|
unkown
|
page readonly
|
|
|
|
490E97A000
|
unkown
|
page read and write
|
|
|
|
190A1B60000
|
unkown
|
page read and write
|
|
|
|
1B3A6D67000
|
unkown
|
page read and write
|
|
|
|
1909D630000
|
unkown
|
page readonly
|
|
|
|
22BB371B000
|
unkown
|
page read and write
|
|
|
|
7FF58E525000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B7C000
|
unkown
|
page readonly
|
|
|
|
7FF5E1459000
|
unkown
|
page readonly
|
|
|
|
7FF53BBD6000
|
unkown
|
page readonly
|
|
|
|
23FAD260000
|
unkown
|
page read and write
|
|
|
|
7FF52EA79000
|
unkown
|
page readonly
|
|
|
|
18111C90000
|
heap private
|
page read and write
|
|
|
|
1B3A6D7C000
|
unkown
|
page read and write
|
|
|
|
2555D2D0000
|
unkown
|
page readonly
|
|
|
|
F3EB27C000
|
unkown
|
page read and write
|
|
|
|
23FAD22F000
|
unkown
|
page read and write
|
|
|
|
190A2018000
|
unkown
|
page read and write
|
|
|
|
190A1CE1000
|
unkown
|
page read and write
|
|
|
|
1C45205F000
|
unkown
|
page read and write
|
|
|
|
7FF5D584C000
|
unkown
|
page readonly
|
|
|
|
7FF5B699B000
|
unkown
|
page readonly
|
|
|
|
190A1B50000
|
unkown
|
page read and write
|
|
|
|
1909C5A0000
|
unkown
|
page readonly
|
|
|
|
1B3A6A80000
|
unkown
|
page write copy
|
|
|
|
1B3A6D69000
|
unkown
|
page read and write
|
|
|
|
190A1B2B000
|
unkown
|
page read and write
|
|
|
|
1B3A6D43000
|
unkown
|
page read and write
|
|
|
|
7FF543FD3000
|
unkown
|
page readonly
|
|
|
|
1DE4B23C000
|
unkown
|
page read and write
|
|
|
|
158E7302000
|
unkown
|
page read and write
|
|
|
|
190A1CAD000
|
unkown
|
page read and write
|
|
|
|
7FF54497A000
|
unkown
|
page readonly
|
|
|
|
190A1B20000
|
unkown
|
page read and write
|
|
|
|
1B674F13000
|
unkown
|
page read and write
|
|
|
|
7FF5E145C000
|
unkown
|
page readonly
|
|
|
|
B503DFC000
|
unkown
|
page read and write
|
|
|
|
23FAD257000
|
unkown
|
page read and write
|
|
|
|
27210A7D000
|
unkown
|
page read and write
|
|
|
|
23FAD26C000
|
unkown
|
page read and write
|
|
|
|
213A3C28000
|
unkown
|
page read and write
|
|
|
|
213A3C2F000
|
unkown
|
page read and write
|
|
|
|
7FF56866C000
|
unkown
|
page readonly
|
|
|
|
7FF5D5949000
|
unkown
|
page readonly
|
|
|
|
7FF568A6B000
|
unkown
|
page readonly
|
|
|
|
1B3A648A000
|
unkown
|
page read and write
|
|
|
|
F3EB57B000
|
unkown
|
page read and write
|
|
|
|
1B3A6C02000
|
unkown
|
page read and write
|
|
|
|
1B3A6D23000
|
unkown
|
page read and write
|
|
|
|
7FF58E4C9000
|
unkown
|
page readonly
|
|
|
|
190A2060000
|
unkown
|
page readonly
|
|
|
|
1B3A6D66000
|
unkown
|
page read and write
|
|
|
|
1909D400000
|
unkown
|
page read and write
|
|
|
|
7FF5B6B24000
|
unkown
|
page readonly
|
|
|
|
FFBE27E000
|
unkown
|
page read and write
|
|
|
|
D3027FE000
|
unkown
|
page read and write
|
|
|
|
7FF5448E9000
|
unkown
|
page readonly
|
|
|
|
7FF5E67DF000
|
unkown
|
page readonly
|
|
|
|
7FF52EABA000
|
unkown
|
page readonly
|
|
|
|
7FF51B8A6000
|
unkown
|
page readonly
|
|
|
|
190A1CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5510D3000
|
unkown
|
page readonly
|
|
|
|
1909C6BB000
|
unkown
|
page read and write
|
|
|
|
470ED7E000
|
unkown
|
page read and write
|
|
|
|
7FF51B8BC000
|
unkown
|
page readonly
|
|
|
|
7FF5B6A75000
|
unkown
|
page readonly
|
|
|
|
D30227B000
|
unkown
|
page read and write
|
|
|
|
1B67573A000
|
unkown
|
page read and write
|
|
|
|
2555D000000
|
unkown
|
page read and write
|
|
|
|
190A1CBE000
|
unkown
|
page read and write
|
|
|
|
7FF5E68C6000
|
unkown
|
page readonly
|
|
|
|
1DE4B213000
|
unkown
|
page read and write
|
|
|
|
BF11F7000
|
unkown
|
page read and write
|
|
|
|
7FF551292000
|
unkown
|
page readonly
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
1B674EE7000
|
unkown
|
page read and write
|
|
|
|
18111C80000
|
unkown
|
page readonly
|
|
|
|
190A1B2C000
|
unkown
|
page read and write
|
|
|
|
7FF568A80000
|
unkown
|
page readonly
|
|
|
|
1B674D50000
|
heap private
|
page read and write
|
|
|
|
7FF52EC45000
|
unkown
|
page readonly
|
|
|
|
7FF5E1168000
|
unkown
|
page readonly
|
|
|
|
1DE4BA02000
|
unkown
|
page read and write
|
|
|
|
190A1E30000
|
unkown
|
page read and write
|
|
|
|
18111C99000
|
heap private
|
page read and write
|
|
|
|
7FF52EE30000
|
unkown
|
page readonly
|
|
|
|
7FF5514C4000
|
unkown
|
page readonly
|
|
|
|
22BB3C60000
|
unkown
|
page readonly
|
|
|
|
7FF5B67CD000
|
unkown
|
page readonly
|
|
|
|
2555D760000
|
unkown
|
page read and write
|
|
|
|
18112B20000
|
unkown
|
page readonly
|
|
|
|
213A3C2F000
|
unkown
|
page read and write
|
|
|
|
7FF5D58E0000
|
unkown
|
page readonly
|
|
|
|
190A1BF0000
|
unkown
|
page read and write
|
|
|
|
7FF5B6B18000
|
unkown
|
page readonly
|
|
|
|
23C1A400000
|
unkown
|
page readonly
|
|
|
|
1B3A6DBC000
|
unkown
|
page read and write
|
|
|
|
7FF58E4E8000
|
unkown
|
page readonly
|
|
|
|
1B3A6400000
|
unkown
|
page read and write
|
|
|
|
7FF52EF13000
|
unkown
|
page readonly
|
|
|
|
1B674EE1000
|
unkown
|
page read and write
|
|
|
|
7FF568AA1000
|
unkown
|
page readonly
|
|
|
|
1B3A64AA000
|
unkown
|
page read and write
|
|
|
|
190A1CE3000
|
unkown
|
page read and write
|
|
|
|
7FF58E549000
|
unkown
|
page readonly
|
|
|
|
190A19C3000
|
unkown
|
page read and write
|
|
|
|
BF0E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5E1435000
|
unkown
|
page readonly
|
|
|
|
23FAD261000
|
unkown
|
page read and write
|
|
|
|
7FF58E5D3000
|
unkown
|
page readonly
|
|
|
|
1B3A6D56000
|
unkown
|
page read and write
|
|
|
|
27210A41000
|
unkown
|
page read and write
|
|
|
|
7FF5A8141000
|
unkown
|
page readonly
|
|
|
|
7FF568666000
|
unkown
|
page readonly
|
|
|
|
D39747F000
|
unkown
|
page read and write
|
|
|
|
490E4FF000
|
unkown
|
page read and write
|
|
|
|
23C1A308000
|
unkown
|
page read and write
|
|
|
|
190A1E80000
|
unkown
|
page read and write
|
|
|
|
7FF51B932000
|
unkown
|
page readonly
|
|
|
|
7FF5E64AA000
|
unkown
|
page readonly
|
|
|
|
1B675602000
|
unkown
|
page read and write
|
|
|
|
25D06F7000
|
unkown
|
page read and write
|
|
|
|
7FF5B6998000
|
unkown
|
page readonly
|
|
|
|
1B3A63C0000
|
unkown
|
page readonly
|
|
|
|
7FF52EE49000
|
unkown
|
page readonly
|
|
|
|
BF0B9E000
|
unkown
|
page read and write
|
|
|
|
D3974FD000
|
unkown
|
page read and write
|
|
|
|
23FAD269000
|
unkown
|
page read and write
|
|
|
|
7FF5511B8000
|
unkown
|
page readonly
|
|
|
|
7FF52E3A3000
|
unkown
|
page readonly
|
|
|
|
7FF53BC53000
|
unkown
|
page readonly
|
|
|
|
7FF5447C8000
|
unkown
|
page readonly
|
|
|
|
7FF51B884000
|
unkown
|
page readonly
|
|
|
|
7FF544A95000
|
unkown
|
page readonly
|
|
|
|
7FF5B690E000
|
unkown
|
page readonly
|
|
|
|
158E7264000
|
unkown
|
page read and write
|
|
|
|
1DE4B256000
|
unkown
|
page read and write
|
|
|
|
D864F5C000
|
unkown
|
page read and write
|
|
|
|
AAE88FE000
|
unkown
|
page read and write
|
|
|
|
1909C69E000
|
unkown
|
page read and write
|
|
|
|
7FF5E6031000
|
unkown
|
page readonly
|
|
|
|
7FF5B6774000
|
unkown
|
page readonly
|
|
|
|
1B3A6513000
|
unkown
|
page read and write
|
|
|
|
7FF5D59B6000
|
unkown
|
page readonly
|
|
|
|
7FF5B68FF000
|
unkown
|
page readonly
|
|
|
|
190A1CE1000
|
unkown
|
page read and write
|
|
|
|
1DE4B28A000
|
unkown
|
page read and write
|
|
|
|
1B3A6D75000
|
unkown
|
page read and write
|
|
|
|
AAE91F8000
|
unkown
|
page read and write
|
|
|
|
1909C670000
|
unkown
|
page read and write
|
|
|
|
7FF52EC0F000
|
unkown
|
page readonly
|
|
|
|
1909D300000
|
unkown
|
page read and write
|
|
|
|
27210A66000
|
unkown
|
page read and write
|
|
|
|
23FAD1B0000
|
unkown
|
page read and write
|
|
|
|
7FF5B68ED000
|
unkown
|
page readonly
|
|
|
|
AAE89F5000
|
unkown
|
page read and write
|
|
|
|
7FF5B6B94000
|
unkown
|
page readonly
|
|
|
|
7FF5B60D8000
|
unkown
|
page readonly
|
|
|
|
7FF5E659B000
|
unkown
|
page readonly
|
|
|
|
1909C6A0000
|
unkown
|
page read and write
|
|
|
|
190A1BF4000
|
unkown
|
page read and write
|
|
|
|
7FF5A8130000
|
unkown
|
page readonly
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
7FF598D96000
|
unkown
|
page readonly
|
|
|
|
23FAD249000
|
unkown
|
page read and write
|
|
|
|
23FAD226000
|
unkown
|
page read and write
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
158E71B0000
|
unkown
|
page readonly
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
7FF5B33D6000
|
unkown
|
page readonly
|
|
|
|
190A1E20000
|
unkown
|
page read and write
|
|
|
|
7FF598CC8000
|
unkown
|
page readonly
|
|
|
|
22BB3800000
|
unkown
|
page readonly
|
|
|
|
7FF5D57E5000
|
unkown
|
page readonly
|
|
|
|
7FF52EE28000
|
unkown
|
page readonly
|
|
|
|
7FF568A75000
|
unkown
|
page readonly
|
|
|
|
7FF598D44000
|
unkown
|
page readonly
|
|
|
|
1B3A6D5C000
|
unkown
|
page read and write
|
|
|
|
22BB5190000
|
unkown
|
page write copy
|
|
|
|
5EDD5FE000
|
unkown
|
page read and write
|
|
|
|
7FF52E6DD000
|
unkown
|
page readonly
|
|
|
|
213A3BA0000
|
unkown
|
page readonly
|
|
|
|
25D08FC000
|
unkown
|
page read and write
|
|
|
|
158E7400000
|
unkown
|
page readonly
|
|
|
|
1B3A6DCA000
|
unkown
|
page read and write
|
|
|
|
7FF5B6796000
|
unkown
|
page readonly
|
|
|
|
18112430000
|
unkown
|
page readonly
|
|
|
|
490E1FB000
|
unkown
|
page read and write
|
|
|
|
190A1C9E000
|
unkown
|
page read and write
|
|
|
|
7FF544AC6000
|
unkown
|
page readonly
|
|
|
|
7FF51B939000
|
unkown
|
page readonly
|
|
|
|
1B3A7261000
|
unkown
|
page read and write
|
|
|
|
22BB50D0000
|
unkown
|
page read and write
|
|
|
|
7FF598A9D000
|
unkown
|
page readonly
|
|
|
|
190A1B26000
|
unkown
|
page read and write
|
|
|
|
B5036EB000
|
unkown
|
page read and write
|
|
|
|
1B3A7200000
|
unkown
|
page read and write
|
|
|
|
7FF598C84000
|
unkown
|
page readonly
|
|
|
|
190A1C00000
|
unkown
|
page read and write
|
|
|
|
7FF53BC45000
|
unkown
|
page readonly
|
|
|
|
7FF5E6849000
|
unkown
|
page readonly
|
|
|
|
490E77F000
|
unkown
|
page read and write
|
|
|
|
1B675800000
|
unkown
|
page readonly
|
|
|
|
2555D040000
|
unkown
|
page read and write
|
|
|
|
158E7200000
|
unkown
|
page read and write
|
|
|
|
7FF53BB5F000
|
unkown
|
page readonly
|
|
|
|
1C452670000
|
unkown
|
page readonly
|
|
|
|
7FF51B93C000
|
unkown
|
page readonly
|
|
|
|
23FAD213000
|
unkown
|
page read and write
|
|
|
|
BF10FE000
|
unkown
|
page read and write
|
|
|
|
23C1AA02000
|
unkown
|
page read and write
|
|
|
|
7FF58E4DC000
|
unkown
|
page readonly
|
|
|
|
158E7190000
|
unkown
|
page read and write
|
|
|
|
D86597E000
|
unkown
|
page read and write
|
|
|
|
7FF5B60E2000
|
unkown
|
page readonly
|
|
|
|
7FF52ED50000
|
unkown
|
page readonly
|
|
|
|
7FF5514B6000
|
unkown
|
page readonly
|
|
|
|
7FF551370000
|
unkown
|
page readonly
|
|
|
|
213A3C0B000
|
heap default
|
page read and write
|
|
|
|
7FF58DA87000
|
unkown
|
page readonly
|
|
|
|
7FF5D58E6000
|
unkown
|
page readonly
|
|
|
|
27210A81000
|
unkown
|
page read and write
|
|
|
|
7FF5E67DC000
|
unkown
|
page readonly
|
|
|
|
7FF52EE41000
|
unkown
|
page readonly
|
|
|
|
5EDD9FC000
|
unkown
|
page read and write
|
|
|
|
1B3A64A6000
|
unkown
|
page read and write
|
|
|
|
190A1D02000
|
unkown
|
page read and write
|
|
|
|
1909C4D0000
|
unkown
|
page readonly
|
|
|
|
7FF52EA7B000
|
unkown
|
page readonly
|
|
|
|
1909CF59000
|
unkown
|
page read and write
|
|
|
|
23FAD234000
|
unkown
|
page read and write
|
|
|
|
190A1CDA000
|
unkown
|
page read and write
|
|
|
|
1B3A6D91000
|
unkown
|
page read and write
|
|
|
|
22BB3675000
|
unkown
|
page read and write
|
|
|
|
7FF598D1C000
|
unkown
|
page readonly
|
|
|
|
7FF58E332000
|
unkown
|
page readonly
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
1B3A6DCA000
|
unkown
|
page read and write
|
|
|
|
1DE4B1D0000
|
heap default
|
page read and write
|
|
|
|
190A1C4C000
|
unkown
|
page read and write
|
|
|
|
7FF544980000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
190A1B26000
|
unkown
|
page read and write
|
|
|
|
22BB5150000
|
unkown
|
page read and write
|
|
|
|
7FF598CE9000
|
unkown
|
page readonly
|
|
|
|
1B674ECD000
|
unkown
|
page read and write
|
|
|
|
22BB35D0000
|
unkown
|
page read and write
|
|
|
|
7FF51B8D5000
|
unkown
|
page readonly
|
|
|
|
1B3A6D76000
|
unkown
|
page read and write
|
|
|
|
7FF53BB74000
|
unkown
|
page readonly
|
|
|
|
490D9DD000
|
unkown
|
page read and write
|
|
|
|
7FF5E6573000
|
unkown
|
page readonly
|
|
|
|
1B3A6D75000
|
unkown
|
page read and write
|
|
|
|
7FF5E144C000
|
unkown
|
page readonly
|
|
|
|
1909C68C000
|
unkown
|
page read and write
|
|
|
|
7FF51B941000
|
unkown
|
page readonly
|
|
|
|
7FF5E5D6C000
|
unkown
|
page readonly
|
|
|
|
7FF53B919000
|
unkown
|
page readonly
|
|
|
|
7FF5E647E000
|
unkown
|
page readonly
|
|
|
|
7FF52EEF6000
|
unkown
|
page readonly
|
|
|
|
213A3C17000
|
heap default
|
page read and write
|
|
|
|
1B3A6D55000
|
unkown
|
page read and write
|
|
|
|
7FF52EE65000
|
unkown
|
page readonly
|
|
|
|
7FF58E4B5000
|
unkown
|
page readonly
|
|
|
|
190A1E60000
|
unkown
|
page read and write
|
|
|
|
1B3A6270000
|
heap private
|
page read and write
|
|
|
|
7FF5B6BEC000
|
unkown
|
page readonly
|
|
|
|
190A1F60000
|
unkown
|
page readonly
|
|
|
|
23FAD050000
|
heap private
|
page read and write
|
|
|
|
1B674EBE000
|
unkown
|
page read and write
|
|
|
|
190A1CF7000
|
unkown
|
page read and write
|
|
|
|
7FF598D05000
|
unkown
|
page readonly
|
|
|
|
7FF51B946000
|
unkown
|
page readonly
|
|
|
|
1909C600000
|
unkown
|
page read and write
|
|
|
|
FFBDFFB000
|
unkown
|
page read and write
|
|
|
|
1B3A62E0000
|
unkown
|
page readonly
|
|
|
|
7FF568A5C000
|
unkown
|
page readonly
|
|
|
|
190A1C3F000
|
unkown
|
page read and write
|
|
|
|
1B3A6E00000
|
unkown
|
page readonly
|
|
|
|
1B3A63B0000
|
unkown
|
page readonly
|
|
|
|
7FF58E4DF000
|
unkown
|
page readonly
|
|
|
|
7FF53B9BA000
|
unkown
|
page readonly
|
|
|
|
22BB369A000
|
unkown
|
page read and write
|
|
|
|
7FF5E67E5000
|
unkown
|
page readonly
|
|
|
|
23FAD279000
|
unkown
|
page read and write
|
|
|
|
181120A0000
|
unkown
|
page readonly
|
|
|
|
190A1B20000
|
unkown
|
page read and write
|
|
|
|
7FF5A818C000
|
unkown
|
page readonly
|
|
|
|
18111C30000
|
unkown
|
page read and write
|
|
|
|
7FF5E67F4000
|
unkown
|
page readonly
|
|
|
|
7FF5E6825000
|
unkown
|
page readonly
|
|
|
|
1DE4B1F0000
|
unkown
|
page readonly
|
|
|
|
B50417E000
|
unkown
|
page read and write
|
|
|
|
1B3A6D87000
|
unkown
|
page read and write
|
|
|
|
2555D013000
|
unkown
|
page read and write
|
|
|
|
7FF5E6088000
|
unkown
|
page readonly
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
1C451EC0000
|
heap default
|
page read and write
|
|
|
|
1B3A64B2000
|
unkown
|
page read and write
|
|
|
|
7FF551526000
|
unkown
|
page readonly
|
|
|
|
7FF5E68BC000
|
unkown
|
page readonly
|
|
|
|
190A1EC0000
|
unkown
|
page readonly
|
|
|
|
1C452054000
|
unkown
|
page read and write
|
|
|
|
1909D5D0000
|
unkown
|
page readonly
|
|
|
|
7FF5A81F6000
|
unkown
|
page readonly
|
|
|
|
7FF5A81FC000
|
unkown
|
page readonly
|
|
|
|
7FF52ED4A000
|
unkown
|
page readonly
|
|
|
|
1909C702000
|
unkown
|
page read and write
|
|
|
|
490E3FE000
|
unkown
|
page read and write
|
|
|
|
23C1A23C000
|
unkown
|
page read and write
|
|
|
|
FFBE37E000
|
unkown
|
page read and write
|
|
|
|
7FF544A79000
|
unkown
|
page readonly
|
|
|
|
190A2030000
|
unkown
|
page read and write
|
|
|
|
158E7313000
|
unkown
|
page read and write
|
|
|
|
7FF51AE4B000
|
unkown
|
page readonly
|
|
|
|
22BB5090000
|
unkown
|
page read and write
|
|
|
|
7FF5D5757000
|
unkown
|
page readonly
|
|
|
|
1C452013000
|
unkown
|
page read and write
|
|
|
|
18111D0F000
|
unkown
|
page read and write
|
|
|
|
7FF568AB5000
|
unkown
|
page readonly
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
27210CD0000
|
unkown
|
page readonly
|
|
|
|
D86547C000
|
unkown
|
page read and write
|
|
|
|
B50407D000
|
unkown
|
page read and write
|
|
|
|
1B3A6D51000
|
unkown
|
page read and write
|
|
|
|
1B3A6D17000
|
unkown
|
page read and write
|
|
|
|
22BB3702000
|
unkown
|
page read and write
|
|
|
|
1B3A6D50000
|
unkown
|
page read and write
|
|
|
|
7FF52EDC3000
|
unkown
|
page readonly
|
|
|
|
7FF53BB70000
|
unkown
|
page readonly
|
|
|
|
7FF5B6AD0000
|
unkown
|
page readonly
|
|
|
|
1B3A6AF0000
|
unkown
|
page read and write
|
|
|
|
190A2070000
|
unkown
|
page read and write
|
|
|
|
190A19C0000
|
unkown
|
page read and write
|
|
|
|
181128D0000
|
unkown
|
page read and write
|
|
|
|
7FF568ACC000
|
unkown
|
page readonly
|
|
|
|
7FF52EE25000
|
unkown
|
page readonly
|
|
|
|
190A1B21000
|
unkown
|
page read and write
|
|
|
|
1B3A6600000
|
unkown
|
page readonly
|
|
|
|
7FF56892F000
|
unkown
|
page readonly
|
|
|
|
7FF5E6014000
|
unkown
|
page readonly
|
|
|
|
7FF598D36000
|
unkown
|
page readonly
|
|
|
|
5EDD27B000
|
unkown
|
page read and write
|
|
|
|
190A1D00000
|
unkown
|
page read and write
|
|
|
|
190A1FD0000
|
unkown
|
page read and write
|
|
|
|
7FF5B6911000
|
unkown
|
page readonly
|
|
|
|
1B3A644D000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
FFBDBBE000
|
unkown
|
page read and write
|
|
|
|
190A1A20000
|
unkown
|
page read and write
|
|
|
|
7FF5E623C000
|
unkown
|
page readonly
|
|
|
|
18111C50000
|
unkown
|
page read and write
|
|
|
|
7FF55143F000
|
unkown
|
page readonly
|
|
|
|
7FF551471000
|
unkown
|
page readonly
|
|
|
|
1B3A6DA8000
|
unkown
|
page read and write
|
|
|
|
190A2088000
|
unkown
|
page readonly
|
|
|
|
7FF55136A000
|
unkown
|
page readonly
|
|
|
|
190A1E04000
|
unkown
|
page readonly
|
|
|
|
470E57B000
|
unkown
|
page read and write
|
|
|
|
190A19D0000
|
unkown
|
page readonly
|
|
|
|
1B3A6D3B000
|
unkown
|
page read and write
|
|
|
|
23C1A090000
|
unkown
|
page readonly
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
1DE4B25C000
|
unkown
|
page read and write
|
|
|
|
23FAD241000
|
unkown
|
page read and write
|
|
|
|
1BFD0FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B68C9000
|
unkown
|
page readonly
|
|
|
|
7FF544B43000
|
unkown
|
page readonly
|
|
|
|
1B3A6429000
|
unkown
|
page read and write
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
7FF52ECB9000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B55000
|
unkown
|
page readonly
|
|
|
|
190A1B64000
|
unkown
|
page read and write
|
|
|
|
7FF52EDEC000
|
unkown
|
page readonly
|
|
|
|
7FF598C43000
|
unkown
|
page readonly
|
|
|
|
1B674E6E000
|
unkown
|
page read and write
|
|
|
|
2555D660000
|
unkown
|
page readonly
|
|
|
|
23FAD27D000
|
unkown
|
page read and write
|
|
|
|
18111CC8000
|
heap default
|
page read and write
|
|
|
|
D3025FF000
|
unkown
|
page read and write
|
|
|
|
190A2054000
|
unkown
|
page readonly
|
|
|
|
7FF544A3C000
|
unkown
|
page readonly
|
|
|
|
1B3A64E3000
|
unkown
|
page read and write
|
|
|
|
490E2FF000
|
unkown
|
page read and write
|
|
|
|
190A2064000
|
unkown
|
page readonly
|
|
|
|
7FF5D5845000
|
unkown
|
page readonly
|
|
|
|
158E7170000
|
unkown
|
page readonly
|
|
|
|
7FF58E5C5000
|
unkown
|
page readonly
|
|
|
|
1DE4B229000
|
unkown
|
page read and write
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
7FF52EF05000
|
unkown
|
page readonly
|
|
|
|
1909C6FD000
|
unkown
|
page read and write
|
|
|
|
22BB363D000
|
unkown
|
page read and write
|
|
|
|
7FF52EE34000
|
unkown
|
page readonly
|
|
|
|
7FF52ECDF000
|
unkown
|
page readonly
|
|
|
|
190A1E50000
|
unkown
|
page read and write
|
|
|
|
7FF5A811F000
|
unkown
|
page readonly
|
|
|
|
1B3A6D76000
|
unkown
|
page read and write
|
|
|
|
1B3A6D7B000
|
unkown
|
page read and write
|
|
|
|
BF107B000
|
unkown
|
page read and write
|
|
|
|
190A1FF0000
|
unkown
|
page read and write
|
|
|
|
7FF58E3E5000
|
unkown
|
page readonly
|
|
|
|
23FAD22A000
|
unkown
|
page read and write
|
|
|
|
213A3F25000
|
heap private
|
page read and write
|
|
|
|
23FAD240000
|
unkown
|
page read and write
|
|
|
|
1C452029000
|
unkown
|
page read and write
|
|
|
|
D3973F9000
|
unkown
|
page read and write
|
|
|
|
490DEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5512FF000
|
unkown
|
page readonly
|
|
|
|
1909C63F000
|
unkown
|
page read and write
|
|
|
|
190A2040000
|
unkown
|
page readonly
|
|
|
|
190A1CFC000
|
unkown
|
page read and write
|
|
|
|
23FAD27A000
|
unkown
|
page read and write
|
|
|
|
7FF5D57EA000
|
unkown
|
page readonly
|
|
|
|
1B3A63F0000
|
unkown
|
page readonly
|
|
|
|
7FF51B8F1000
|
unkown
|
page readonly
|
|
|
|
7FF5A8213000
|
unkown
|
page readonly
|
|
|
|
7FF58E19D000
|
unkown
|
page readonly
|
|
|
|
7FF52EA16000
|
unkown
|
page readonly
|
|
|
|
1C452000000
|
unkown
|
page read and write
|
|
|
|
7FF53B9E8000
|
unkown
|
page readonly
|
|
|
|
7FF5B6C03000
|
unkown
|
page readonly
|
|
|
|
7FF5D58E8000
|
unkown
|
page readonly
|
|
|
|
1B3A6D2D000
|
unkown
|
page read and write
|
|
|
|
7FF5E13F5000
|
unkown
|
page readonly
|
|
|
|
7FF52EC72000
|
unkown
|
page readonly
|
|
|
|
1C452062000
|
unkown
|
page read and write
|
|
|
|
1C452802000
|
unkown
|
page read and write
|
|
|
|
190A1CFC000
|
unkown
|
page read and write
|
|
|
|
7FF5E5D66000
|
unkown
|
page readonly
|
|
|
|
7FF5B63B5000
|
unkown
|
page readonly
|
|
|
|
1B3A6D65000
|
unkown
|
page read and write
|
|
|
|
7FF5B6B0F000
|
unkown
|
page readonly
|
|
|
|
23C1A180000
|
unkown
|
page read and write
|
|
|
|
27210A02000
|
unkown
|
page read and write
|
|
|
|
7FF5448A2000
|
unkown
|
page readonly
|
|
|
|
190A1B27000
|
unkown
|
page read and write
|
|
|
|
18111D0F000
|
unkown
|
page read and write
|
|
|
|
7FF5E68B6000
|
unkown
|
page readonly
|
|
|
|
AAE92F8000
|
unkown
|
page read and write
|
|
|
|
1B674F02000
|
unkown
|
page read and write
|
|
|
|
1C452065000
|
unkown
|
page read and write
|
|
|
|
190A1D02000
|
unkown
|
page read and write
|
|
|
|
7FF51B8D1000
|
unkown
|
page readonly
|
|
|
|
D3026FE000
|
unkown
|
page read and write
|
|
|
|
7FF598B45000
|
unkown
|
page readonly
|
|
|
|
1B3A6D77000
|
unkown
|
page read and write
|
|
|
|
7FF5D594C000
|
unkown
|
page readonly
|
|
|
|
213A3B60000
|
unkown
|
page read and write
|
|
|
|
7FF52EE00000
|
unkown
|
page readonly
|
|
|
|
1B3A6D85000
|
unkown
|
page read and write
|
|
|
|
1B3A64E6000
|
unkown
|
page read and write
|
|
|
|
23FAD242000
|
unkown
|
page read and write
|
|
|
|
7FF5687E8000
|
unkown
|
page readonly
|
|
|
|
23FAD25A000
|
unkown
|
page read and write
|
|
|
|
1B3A6DA6000
|
unkown
|
page read and write
|
|
|
|
7FF5E1419000
|
unkown
|
page readonly
|
|
|
|
18112B10000
|
unkown
|
page read and write
|
|
|
|
1B3A6D3A000
|
unkown
|
page read and write
|
|
|
|
7FF544ABC000
|
unkown
|
page readonly
|
|
|
|
7FF52EE89000
|
unkown
|
page readonly
|
|
|
|
1909C678000
|
unkown
|
page read and write
|
|
|
|
1B3A644B000
|
unkown
|
page read and write
|
|
|
|
1C451FB0000
|
unkown
|
page readonly
|
|
|
|
190A2020000
|
unkown
|
page read and write
|
|
|
|
190A1CDA000
|
unkown
|
page read and write
|
|
|
|
1B3A6451000
|
unkown
|
page read and write
|
|
|
|
7FF5B68CF000
|
unkown
|
page readonly
|
|
|
|
7FF58E5D3000
|
unkown
|
page readonly
|
|
|
|
7FF51B92C000
|
unkown
|
page readonly
|
|
|
|
1B675000000
|
unkown
|
page readonly
|
|
|
|
158E7229000
|
unkown
|
page read and write
|
|
|
|
7FF5E6856000
|
unkown
|
page readonly
|
|
|
|
190A1C62000
|
unkown
|
page read and write
|
|
|
|
7FF568909000
|
unkown
|
page readonly
|
|
|
|
1909CB90000
|
unkown
|
page readonly
|
|
|
|
190A1B28000
|
unkown
|
page read and write
|
|
|
|
190A1CF2000
|
unkown
|
page read and write
|
|
|
|
1909CF59000
|
unkown
|
page read and write
|
|
|
|
470EF7F000
|
unkown
|
page read and write
|
|
|
|
190A1CCA000
|
unkown
|
page read and write
|
|
|
|
B503F7B000
|
unkown
|
page read and write
|
|
|
|
7FF58E44C000
|
unkown
|
page readonly
|
|
|
|
7FF5E659F000
|
unkown
|
page readonly
|
|
|
|
190A1F80000
|
unkown
|
page readonly
|
|
|
|
1B3A6D6D000
|
unkown
|
page read and write
|
|
|
|
23C1A255000
|
unkown
|
page read and write
|
|
|
|
7FF58E4C0000
|
unkown
|
page readonly
|
|
|
|
1B3A6471000
|
unkown
|
page read and write
|
|
|
|
1C452200000
|
unkown
|
page readonly
|
|
|
|
190A1D5C000
|
unkown
|
page read and write
|
|
|
|
7FF58E556000
|
unkown
|
page readonly
|
|
|
|
18111D0F000
|
unkown
|
page read and write
|
|
|
|
22BB3648000
|
unkown
|
page read and write
|
|
|
|
2555D102000
|
unkown
|
page read and write
|
|
|
|
1B3A7202000
|
unkown
|
page read and write
|
|
|
|
FFBDABB000
|
unkown
|
page read and write
|
|
|
|
7FF53BC3C000
|
unkown
|
page readonly
|
|
|
|
1909CE02000
|
unkown
|
page read and write
|
|
|
|
1B3A6B10000
|
unkown
|
page readonly
|
|
|
|
1B3A6D4F000
|
unkown
|
page read and write
|
|
|
|
22BB3540000
|
heap private
|
page read and write
|
|
|
|
1BFCD1B000
|
unkown
|
page read and write
|
|
|
|
7FF5E6801000
|
unkown
|
page readonly
|
|
|
|
7FF51B8CF000
|
unkown
|
page readonly
|
|
|
|
1B3A6516000
|
unkown
|
page read and write
|
|
|
|
2555CF70000
|
heap private
|
page read and write
|
|
|
|
7FF5B69B0000
|
unkown
|
page readonly
|
|
|
|
7FF58E2BC000
|
unkown
|
page readonly
|
|
|
|
7FF53B81D000
|
unkown
|
page readonly
|
|
|
|
1B3A6D7D000
|
unkown
|
page read and write
|
|
|
|
22BB3713000
|
unkown
|
page read and write
|
|
|
|
1C452002000
|
unkown
|
page read and write
|
|
|
|
1B3A7302000
|
unkown
|
page read and write
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
7FF53BC36000
|
unkown
|
page readonly
|
|
|
|
190A1CF2000
|
unkown
|
page read and write
|
|
|
|
FFBDB3E000
|
unkown
|
page read and write
|
|
|
|
7FF52E3AF000
|
unkown
|
page readonly
|
|
|
|
158E7C00000
|
unkown
|
page readonly
|
|
|
|
7FF51B9A6000
|
unkown
|
page readonly
|
|
|
|
18112B40000
|
unkown
|
page read and write
|
|
|
|
7FF544A55000
|
unkown
|
page readonly
|
|
|
|
2555D760000
|
unkown
|
page read and write
|
|
|
|
1B3A6D6B000
|
unkown
|
page read and write
|
|
|
|
22BB3718000
|
unkown
|
page read and write
|
|
|
|
7FF5B6BF5000
|
unkown
|
page readonly
|
|
|
|
27210980000
|
unkown
|
page readonly
|
|
|
|
7FF53BB03000
|
unkown
|
page readonly
|
|
|
|
490E57F000
|
unkown
|
page read and write
|
|
|
|
7FF5E1400000
|
unkown
|
page readonly
|
|
|
|
1B675B40000
|
unkown
|
page readonly
|
|
|
|
490D8DB000
|
unkown
|
page read and write
|
|
|
|
1C45203C000
|
unkown
|
page read and write
|
|
|
|
7FF5E13F8000
|
unkown
|
page readonly
|
|
|
|
2555D730000
|
unkown
|
page read and write
|
|
|
|
7FF52ECDD000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B31000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B79000
|
unkown
|
page readonly
|
|
|
|
18112500000
|
unkown
|
page readonly
|
|
|
|
7FF58E5B6000
|
unkown
|
page readonly
|
|
|
|
27210B00000
|
unkown
|
page read and write
|
|
|
|
7FF544A71000
|
unkown
|
page readonly
|
|
|
|
7FF5E6763000
|
unkown
|
page readonly
|
|
|
|
190A1B21000
|
unkown
|
page read and write
|
|
|
|
7FF55142C000
|
unkown
|
page readonly
|
|
|
|
1909D5E0000
|
unkown
|
page readonly
|
|
|
|
2555D200000
|
unkown
|
page readonly
|
|
|
|
7FF5B6B41000
|
unkown
|
page readonly
|
|
|
|
7FF5D519D000
|
unkown
|
page readonly
|
|
|
|
27210990000
|
unkown
|
page readonly
|
|
|
|
22BB3600000
|
unkown
|
page read and write
|
|
|
|
1DE4B1E0000
|
unkown
|
page readonly
|
|
|
|
7FF567FFF000
|
unkown
|
page readonly
|
|
|
|
190A1E07000
|
unkown
|
page readonly
|
|
|
|
190A1CF2000
|
unkown
|
page read and write
|
|
|
|
7FF5B69B5000
|
unkown
|
page readonly
|
|
|
|
18111C95000
|
heap private
|
page read and write
|
|
|
|
23C1A160000
|
unkown
|
page readonly
|
|
|
|
22BB35C0000
|
unkown
|
page readonly
|
|
|
|
1909CF9D000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
1C452102000
|
unkown
|
page read and write
|
|
|
|
1909CF18000
|
unkown
|
page read and write
|
|
|
|
213A3B90000
|
unkown
|
page readonly
|
|
|
|
470EA7D000
|
unkown
|
page read and write
|
|
|
|
1909D971000
|
unkown
|
page read and write
|
|
|
|
1DE4B300000
|
unkown
|
page read and write
|
|
|
|
1909CF9E000
|
unkown
|
page read and write
|
|
|
|
1909CF59000
|
unkown
|
page read and write
|
|
|
|
27210C00000
|
unkown
|
page readonly
|
|
|
|
23C1A26F000
|
unkown
|
page read and write
|
|
|
|
1B3A6D50000
|
unkown
|
page read and write
|
|
|
|
1909C800000
|
unkown
|
page readonly
|
|
|
|
190A1CF2000
|
unkown
|
page read and write
|
|
|
|
7FF51B8D8000
|
unkown
|
page readonly
|
|
|
|
190A1B50000
|
unkown
|
page read and write
|
|
|
|
7FF5A8121000
|
unkown
|
page readonly
|
|
|
|
7FF52EDC1000
|
unkown
|
page readonly
|
|
|
|
7FF5513AC000
|
unkown
|
page readonly
|
|
|
|
2555D059000
|
unkown
|
page read and write
|
|
|
|
2555D02A000
|
unkown
|
page read and write
|
|
|
|
AAE859B000
|
unkown
|
page read and write
|
|
|
|
27210B13000
|
unkown
|
page read and write
|
|
|
|
25D009B000
|
unkown
|
page read and write
|
|
|
|
23FAD234000
|
unkown
|
page read and write
|
|
|
|
470E97F000
|
unkown
|
page read and write
|
|
|
|
22BB3689000
|
unkown
|
page read and write
|
|
|
|
7FF5514AC000
|
unkown
|
page readonly
|
|
|
|
AAE8D77000
|
unkown
|
page read and write
|
|
|
|
213A3F30000
|
unkown
|
page readonly
|
|
|
|
7FF5B68F4000
|
unkown
|
page readonly
|
|
|
|
23FAD26A000
|
unkown
|
page read and write
|
|
|
|
1B3A6D47000
|
unkown
|
page read and write
|
|
|
|
1B3A6D45000
|
unkown
|
page read and write
|
|
|
|
190A1CE5000
|
unkown
|
page read and write
|
|
|
|
7FF5689A0000
|
unkown
|
page readonly
|
|
|
|
490E27E000
|
unkown
|
page read and write
|
|
|
|
1C452A00000
|
unkown
|
page readonly
|
|
|
|
2555D002000
|
unkown
|
page read and write
|
|
|
|
1B3A63D0000
|
unkown
|
page read and write
|
|
|
|
1B674DC0000
|
unkown
|
page readonly
|
|
|
|
1BFD179000
|
unkown
|
page read and write
|
|
|
|
B50437E000
|
unkown
|
page read and write
|
|
|
|
158E723D000
|
unkown
|
page read and write
|
|
|
|
1B674E00000
|
unkown
|
page read and write
|
|
|
|
7FF544B26000
|
unkown
|
page readonly
|
|
|
|
7FF58E4E5000
|
unkown
|
page readonly
|
|
|
|
27210A13000
|
unkown
|
page read and write
|
|
|
|
1909C629000
|
unkown
|
page read and write
|
|
|
|
1B3A6508000
|
unkown
|
page read and write
|
|
|
|
7FF53BBC2000
|
unkown
|
page readonly
|
|
|
|
23FAD276000
|
unkown
|
page read and write
|
|
|
|
7FF5E66E5000
|
unkown
|
page readonly
|
|
|
|
7FF53BB65000
|
unkown
|
page readonly
|
|
|
|
190A1CF9000
|
unkown
|
page read and write
|
|
|
|
1B3A6D43000
|
unkown
|
page read and write
|
|
|
|
190A1CA0000
|
unkown
|
page read and write
|
|
There are 1247 hidden memdumps, click here to show them.