Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Project Proposal and Analysis.html
|
HTML document, ASCII text, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\072bd3ae-c1ab-4d57-afa1-57ad110c0b4d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0905d002-c630-47fd-9177-c0c5de23f6e7.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\162bcb75-8048-4e9d-b63f-f80499b697a9.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\3528511f-b6fc-4156-aee1-272847bcf05e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\4bd52f32-f80d-47c4-8fc8-c1637740570b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\5c64f41e-784c-47c1-8dfe-c7f9efdfb6e9.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6ce4d940-ec74-408b-b472-d66424e2e7f8.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\8692ceb9-bffa-4565-a44f-db279e2bc348.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\973d2688-c16b-4391-865a-4f80eb8cff59.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\9f3e468a-98a1-4497-8873-c52b0e63117c.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\135eb369-fdd5-4744-adf0-e75278f2ac5f.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\13c16ad6-c8d0-48a3-83e4-c1ac25ad3598.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\278ec475-abd7-486f-9800-57ffa61cb045.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3f7747bf-38de-4800-9572-e91c847d6394.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4b203e18-c1f7-4205-b3c2-81faafbd8c4b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4ef6881f-d542-4f41-a875-790d27716203.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6506ddb1-0f3d-41be-818c-bf4a54262c2c.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7197c501-fe76-4e7c-a927-78f6762dc3c7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7c137eee-a0aa-4813-9384-55748a83664e.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8080bccf-8863-48a5-b156-cc9080489d38.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8c5c62a0-ef61-4478-961e-e6c97a2098ed.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\974f35ef-0fd4-404f-badb-817eb7b5799b.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9cc3dfae-55b0-4509-bfe0-e8717fc3c3cf.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldCK (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old.G (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4278acc4333443e6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f3329f3f8204488_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\59f8bbf14d4853fd_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7291a5a014c1cea6_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7e4cea594f77c74d_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8fdad95f34dd1d59_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a7469dcb9561abcd_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old.. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldil (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old01 (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences0 (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences0) (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesE (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesb (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences'. (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences. (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.oldTM (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old.E (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
Statemp (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old`
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\cec7fb21-548b-40af-8254-ab21f60c91a2.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\13d4f0f9-f60f-49b4-b615-33b9561f3c56.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\aa2fd94a-1fe3-488f-ad51-159715da3d2a.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b5c20bb8-9b6b-4f84-8a8f-d90f5a9cd491.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d03c09a3-38ce-4f85-bc67-a4a3652a4c90.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f811528d-6df5-404a-9022-15d726ddee14.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ffe51d18-e73c-443d-a417-6043c40880f5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateBm (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateGU (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateIV (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StatePU (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local StateQW (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache. (copy)
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache.( (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\9.28.0\Indexing in Progress
|
empty
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir5996_553426729\Ruleset Data
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\b898fe47-5e6d-488a-9f40-678f65ef1de1.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\d646a44d-28ce-4eae-a7de-f6c52bb7ca72.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\da04ec2a-41d9-4697-acb8-ad6a7f337ecd.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\dd8b41d6-5abe-449d-8719-9209148947ae.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\02f4bd2c-d0b3-4fac-8883-d0e47431cd11.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_1021953749\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_1096350542\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_1186615242\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_139741385\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_1448378953\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_215812071\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_283791898\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_483587872\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\5996_51343585\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7496397a-d09a-402f-9d1b-6368617f1081.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7cd4b92c-1a64-4623-b5cd-3ebc44d64184.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\7dd141bd-0043-4ec5-a39f-97dfe7e82d71.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\7496397a-d09a-402f-9d1b-6368617f1081.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_1112829535\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\7dd141bd-0043-4ec5-a39f-97dfe7e82d71.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir5996_4885426\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
There are 243 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\Project
Proposal and Analysis.html'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1552,17296826692838302678,18007796765270658976,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1664 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/login.html?tbuif=sHBcor3ZWsDXGbZ&eortgt=gO8AAWZRfi7ClGh&izrjqburft=2jN9OaUtQbOToDiD2&welygot=BSnCu4Pw8wRPJF9qJXebOTu3bF3hjV&axhrm=vYn7eCukD52W8boRtlM7yT8&floywhix=2pHOlZLUuTVAcbQ7El9YY&ajm=t3pKqCucGSJH2hNfMr9aVBP5CWa&gid=ToojiO2cjpBvMOP1h7S
|
|
||
|
https://aadcdn.msauth.net/
|
unknown
|
|
|
|
https://acctcdn.msauth.net/lightweightsignuppackage_2AvLXlM9Do2tIgiv0FDCDg2.js?v=1
|
unknown
|
|
|
|
https://acctcdn.msauth.net/oneds_Xr2D7Nex80v7A-8bxF8jgQ2.js?v=1
|
unknown
|
|
|
|
https://dns.google
|
unknown
|
|
|
|
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
|
unknown
|
|
|
|
https://ogs.google.com
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/index.html
|
unknown
|
|
|
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
|
|
|
https://signup.live.com
|
unknown
|
|
|
|
https://signup.live.com/
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/index.html5
|
unknown
|
|
|
|
https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
|
unknown
|
|
|
|
https://acctcdn.msauth.net
|
unknown
|
|
|
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://www.google.com;
|
unknown
|
|
|
|
https://hangouts.google.com/
|
unknown
|
|
|
|
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1
|
unknown
|
|
|
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/login.html?tbuif=sHBcor3ZW
|
unknown
|
|
|
|
https://www.google.com
|
unknown
|
|
|
|
https://acctcdn.msauth.net/
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/index.htmlSign
|
unknown
|
|
|
|
https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
|
unknown
|
|
|
|
https://fpt.live.com
|
unknown
|
|
|
|
https://accounts.google.com
|
unknown
|
|
|
|
https://live.com/
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud
|
unknown
|
|
|
|
https://signup.live.com/signup#
|
unknown
|
|
|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/index.htmlP
|
unknown
|
|
|
|
https://support.google.com/chromecast/answer/2998456
|
unknown
|
|
|
|
https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1
|
unknown
|
|
|
|
https://acctcdn.msauth.net/images/favicon.ico?v=2
|
unknown
|
|
|
|
https://appdomain.cloud/
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://fpt.live.com/?session_id=b58882512b7c40d78c42f4d88f1affac&CustomerId=33e01921-4d64-4f8c-a055
|
unknown
|
|
|
|
https://apis.google.com
|
unknown
|
|
|
|
https://live.com/(
|
unknown
|
|
|
|
https://aadcdn.msauth.net
|
unknown
|
|
|
|
https://www.google.com/
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/downloads-lorry
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://clients2.google.com
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx
|
unknown
|
|
There are 35 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
accounts.google.com
|
216.58.205.77
|
|
|
|
sni1gl.wpc.alphacdn.net
|
152.199.21.175
|
|
|
|
clients.l.google.com
|
216.58.208.174
|
|
|
|
s3.jp-osa.cloud-object-storage.appdomain.cloud
|
163.68.118.49
|
|
|
|
googlehosted.l.googleusercontent.com
|
216.58.208.129
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
signup.live.com
|
unknown
|
|
|
|
clients2.google.com
|
unknown
|
|
|
|
mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud
|
unknown
|
|
|
|
aadcdn.msauth.net
|
unknown
|
|
|
|
fpt.live.com
|
unknown
|
|
|
|
acctcdn.msauth.net
|
unknown
|
|
|
|
acctcdn.msftauth.net
|
unknown
|
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
216.58.208.174
|
clients.l.google.com
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
216.58.205.77
|
accounts.google.com
|
United States
|
|
|
|
192.168.2.4
|
unknown
|
unknown
|
|
|
|
163.68.118.49
|
s3.jp-osa.cloud-object-storage.appdomain.cloud
|
France
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
216.58.208.129
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
152.199.21.175
|
sni1gl.wpc.alphacdn.net
|
United States
|
|
|
|
192.168.2.255
|
unknown
|
unknown
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
StatusCodes
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
state
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.reporting
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
module_blacklist_cache_md5_digest
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
media.storage_id_salt
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.account_id
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_seed
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
default_search_provider_data.template_url_data
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
safebrowsing.incidents_sent
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
pinned_tabs
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
search_provider_overrides
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
prefs.preference_reset_time
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
google.services.last_username
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
session.restore_on_startup
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
software_reporter.prompt_version
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
settings_reset_prompt.prompt_wave
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
homepage_is_newtabpage
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
browser.show_home_button
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
lastrun
|
|
There are 32 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
13B01661000
|
unkown
|
page read and write
|
|
|
|
7FF5AF498000
|
unkown
|
page readonly
|
|
|
|
2121B8EA000
|
unkown
|
page read and write
|
|
|
|
1F4EC629000
|
unkown
|
page read and write
|
|
|
|
13B0119F000
|
unkown
|
page read and write
|
|
|
|
311747E000
|
unkown
|
page read and write
|
|
|
|
13B011A1000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
13B01176000
|
unkown
|
page read and write
|
|
|
|
2794DE00000
|
unkown
|
page readonly
|
|
|
|
7FF574CF5000
|
unkown
|
page readonly
|
|
|
|
13B00F50000
|
unkown
|
page readonly
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D35AF000
|
unkown
|
page readonly
|
|
|
|
2121B8EF000
|
unkown
|
page read and write
|
|
|
|
1EB1525B000
|
unkown
|
page read and write
|
|
|
|
1BF66450000
|
unkown
|
page read and write
|
|
|
|
2121B4C4000
|
unkown
|
page read and write
|
|
|
|
7FF5A31CC000
|
unkown
|
page readonly
|
|
|
|
17355CE3000
|
unkown
|
page read and write
|
|
|
|
13B01654000
|
unkown
|
page read and write
|
|
|
|
21244DD0000
|
heap private
|
page read and write
|
|
|
|
13B00FD0000
|
unkown
|
page readonly
|
|
|
|
13B011B0000
|
unkown
|
page read and write
|
|
|
|
7FF5D3686000
|
unkown
|
page readonly
|
|
|
|
7FF5D3065000
|
unkown
|
page readonly
|
|
|
|
2B3C0A4D000
|
unkown
|
page read and write
|
|
|
|
7FF5AF895000
|
unkown
|
page readonly
|
|
|
|
20A6C313000
|
unkown
|
page read and write
|
|
|
|
7FF574E2B000
|
unkown
|
page readonly
|
|
|
|
212167C0000
|
unkown
|
page read and write
|
|
|
|
1CF4B413000
|
unkown
|
page read and write
|
|
|
|
7FF5AF731000
|
unkown
|
page readonly
|
|
|
|
7FF5E6265000
|
unkown
|
page readonly
|
|
|
|
7FF5675CC000
|
unkown
|
page readonly
|
|
|
|
2B3C0A00000
|
unkown
|
page read and write
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
21244E30000
|
heap default
|
page read and write
|
|
|
|
1BF66400000
|
unkown
|
page read and write
|
|
|
|
7FF5E6366000
|
unkown
|
page readonly
|
|
|
|
7FF5675DC000
|
unkown
|
page readonly
|
|
|
|
7FF567663000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
7FF5E62F9000
|
unkown
|
page readonly
|
|
|
|
7FF5675E6000
|
unkown
|
page readonly
|
|
|
|
13B011A5000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D64000
|
unkown
|
page readonly
|
|
|
|
7FF5E5B42000
|
unkown
|
page readonly
|
|
|
|
1EB15229000
|
unkown
|
page read and write
|
|
|
|
13B01661000
|
unkown
|
page read and write
|
|
|
|
7FF5D2FA5000
|
unkown
|
page readonly
|
|
|
|
21216113000
|
unkown
|
page read and write
|
|
|
|
982A7FF000
|
unkown
|
page read and write
|
|
|
|
7FF585CF1000
|
unkown
|
page readonly
|
|
|
|
17355C29000
|
unkown
|
page read and write
|
|
|
|
7FF51AAF2000
|
unkown
|
page readonly
|
|
|
|
1BF66413000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
13B011AC000
|
unkown
|
page read and write
|
|
|
|
13B01176000
|
unkown
|
page read and write
|
|
|
|
7FF5673C2000
|
unkown
|
page readonly
|
|
|
|
1CF4B432000
|
unkown
|
page read and write
|
|
|
|
13B01177000
|
unkown
|
page read and write
|
|
|
|
7FF574E61000
|
unkown
|
page readonly
|
|
|
|
7FF51AA44000
|
unkown
|
page readonly
|
|
|
|
20502170000
|
unkown
|
page readonly
|
|
|
|
17355AF0000
|
unkown
|
page readonly
|
|
|
|
7FF5AF936000
|
unkown
|
page readonly
|
|
|
|
7FF5D33C3000
|
unkown
|
page readonly
|
|
|
|
7FF51AB75000
|
unkown
|
page readonly
|
|
|
|
13B01200000
|
unkown
|
page readonly
|
|
|
|
7FF5D3169000
|
unkown
|
page readonly
|
|
|
|
13B00A00000
|
unkown
|
page readonly
|
|
|
|
7FF5AF60B000
|
unkown
|
page readonly
|
|
|
|
13B008EA000
|
unkown
|
page read and write
|
|
|
|
7FF50F366000
|
unkown
|
page readonly
|
|
|
|
7FF5AF2AC000
|
unkown
|
page readonly
|
|
|
|
2121B4C0000
|
unkown
|
page read and write
|
|
|
|
2121B81F000
|
unkown
|
page read and write
|
|
|
|
7FF56756F000
|
unkown
|
page readonly
|
|
|
|
31171DE000
|
unkown
|
page read and write
|
|
|
|
7FF567584000
|
unkown
|
page readonly
|
|
|
|
A8F5A75000
|
unkown
|
page read and write
|
|
|
|
7FF5AF4A9000
|
unkown
|
page readonly
|
|
|
|
7FF5E62B1000
|
unkown
|
page readonly
|
|
|
|
1F4EC500000
|
heap default
|
page read and write
|
|
|
|
DBDB57C000
|
unkown
|
page read and write
|
|
|
|
7FF567578000
|
unkown
|
page readonly
|
|
|
|
205021E0000
|
unkown
|
page readonly
|
|
|
|
7FF5E614D000
|
unkown
|
page readonly
|
|
|
|
7FF585CE1000
|
unkown
|
page readonly
|
|
|
|
13B01180000
|
unkown
|
page read and write
|
|
|
|
7FF50F1AE000
|
unkown
|
page readonly
|
|
|
|
2121B360000
|
unkown
|
page read and write
|
|
|
|
7FF574E59000
|
unkown
|
page readonly
|
|
|
|
20A6C200000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DE3000
|
unkown
|
page readonly
|
|
|
|
7FF541E95000
|
unkown
|
page readonly
|
|
|
|
1CF4B47D000
|
unkown
|
page read and write
|
|
|
|
7FF5D2FA0000
|
unkown
|
page readonly
|
|
|
|
71CDE7E000
|
unkown
|
page read and write
|
|
|
|
17355CD4000
|
unkown
|
page read and write
|
|
|
|
13B011B2000
|
unkown
|
page read and write
|
|
|
|
2121B8F4000
|
unkown
|
page read and write
|
|
|
|
7FF5E7654000
|
unkown
|
page readonly
|
|
|
|
2121B4C9000
|
unkown
|
page read and write
|
|
|
|
13B011B1000
|
unkown
|
page read and write
|
|
|
|
7FF5D320B000
|
unkown
|
page readonly
|
|
|
|
13B00855000
|
unkown
|
page read and write
|
|
|
|
2B3C09A0000
|
unkown
|
page readonly
|
|
|
|
7FF5E5EEB000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
2121B8E6000
|
unkown
|
page read and write
|
|
|
|
7FF5D35B5000
|
unkown
|
page readonly
|
|
|
|
7FF56B085000
|
unkown
|
page readonly
|
|
|
|
7FF4ECD86000
|
unkown
|
page readonly
|
|
|
|
7FF5E60E2000
|
unkown
|
page readonly
|
|
|
|
7FF5D3695000
|
unkown
|
page readonly
|
|
|
|
2121B8C7000
|
unkown
|
page read and write
|
|
|
|
21245602000
|
unkown
|
page read and write
|
|
|
|
7FF56AF70000
|
unkown
|
page readonly
|
|
|
|
212169DD000
|
unkown
|
page read and write
|
|
|
|
7FF585CE9000
|
unkown
|
page readonly
|
|
|
|
17356190000
|
unkown
|
page readonly
|
|
|
|
2121C010000
|
unkown
|
page read and write
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
7FF5E625C000
|
unkown
|
page readonly
|
|
|
|
2121B710000
|
unkown
|
page read and write
|
|
|
|
13B0119D000
|
unkown
|
page read and write
|
|
|
|
255070E2000
|
unkown
|
page read and write
|
|
|
|
21216958000
|
unkown
|
page read and write
|
|
|
|
20A6CA02000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF5D35F5000
|
unkown
|
page readonly
|
|
|
|
6255AFE000
|
unkown
|
page read and write
|
|
|
|
1EB1528C000
|
unkown
|
page read and write
|
|
|
|
1CF4B456000
|
unkown
|
page read and write
|
|
|
|
7FF5E619A000
|
unkown
|
page readonly
|
|
|
|
7FF574E9C000
|
unkown
|
page readonly
|
|
|
|
17355C6D000
|
unkown
|
page read and write
|
|
|
|
21245000000
|
unkown
|
page read and write
|
|
|
|
998CFFA000
|
unkown
|
page read and write
|
|
|
|
21216057000
|
unkown
|
page read and write
|
|
|
|
7FF51AB6C000
|
unkown
|
page readonly
|
|
|
|
13B011A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D30D5000
|
unkown
|
page readonly
|
|
|
|
7FF574E8C000
|
unkown
|
page readonly
|
|
|
|
7FF585D1C000
|
unkown
|
page readonly
|
|
|
|
1EB15252000
|
unkown
|
page read and write
|
|
|
|
2121B7A0000
|
unkown
|
page readonly
|
|
|
|
FC7337F000
|
unkown
|
page read and write
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
7FF567451000
|
unkown
|
page readonly
|
|
|
|
1BF66455000
|
unkown
|
page read and write
|
|
|
|
DBDB175000
|
unkown
|
page read and write
|
|
|
|
7FF51AAA4000
|
unkown
|
page readonly
|
|
|
|
7FF574E1C000
|
unkown
|
page readonly
|
|
|
|
20502150000
|
heap default
|
page read and write
|
|
|
|
7FF5E6233000
|
unkown
|
page readonly
|
|
|
|
1F4EC5E0000
|
unkown
|
page readonly
|
|
|
|
7FF5D3612000
|
unkown
|
page readonly
|
|
|
|
1CF4B445000
|
unkown
|
page read and write
|
|
|
|
7FF5E6295000
|
unkown
|
page readonly
|
|
|
|
9829FF8000
|
unkown
|
page read and write
|
|
|
|
7FF5E604F000
|
unkown
|
page readonly
|
|
|
|
2B3C0A2A000
|
unkown
|
page read and write
|
|
|
|
7FF5E60B5000
|
unkown
|
page readonly
|
|
|
|
13B00913000
|
unkown
|
page read and write
|
|
|
|
2121B8EB000
|
unkown
|
page read and write
|
|
|
|
2121BA50000
|
unkown
|
page read and write
|
|
|
|
2121B8E3000
|
unkown
|
page read and write
|
|
|
|
1F4EC702000
|
unkown
|
page read and write
|
|
|
|
7FF50F2D5000
|
unkown
|
page readonly
|
|
|
|
17355A80000
|
heap private
|
page read and write
|
|
|
|
1F4EC641000
|
unkown
|
page read and write
|
|
|
|
2121B4C6000
|
unkown
|
page read and write
|
|
|
|
7FF542254000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
7FF51A011000
|
unkown
|
page readonly
|
|
|
|
7FF5D31E5000
|
unkown
|
page readonly
|
|
|
|
7FF5D2DE9000
|
unkown
|
page readonly
|
|
|
|
7FF585CC8000
|
unkown
|
page readonly
|
|
|
|
CBA10DA000
|
unkown
|
page read and write
|
|
|
|
7FF5E73B8000
|
unkown
|
page readonly
|
|
|
|
13B01141000
|
unkown
|
page read and write
|
|
|
|
1F4ECB90000
|
unkown
|
page readonly
|
|
|
|
2121B8EB000
|
unkown
|
page read and write
|
|
|
|
1BF66513000
|
unkown
|
page read and write
|
|
|
|
7FF5A31D6000
|
unkown
|
page readonly
|
|
|
|
2794D8A1000
|
heap default
|
page read and write
|
|
|
|
7FF54223C000
|
unkown
|
page readonly
|
|
|
|
998CE7E000
|
unkown
|
page read and write
|
|
|
|
7FF51AB83000
|
unkown
|
page readonly
|
|
|
|
205021F0000
|
unkown
|
page readonly
|
|
|
|
13B0085B000
|
unkown
|
page read and write
|
|
|
|
2121B8E6000
|
unkown
|
page read and write
|
|
|
|
13B00853000
|
unkown
|
page read and write
|
|
|
|
7FF585DA6000
|
unkown
|
page readonly
|
|
|
|
13B011A1000
|
unkown
|
page read and write
|
|
|
|
2794D8DE000
|
unkown
|
page read and write
|
|
|
|
982A5FF000
|
unkown
|
page read and write
|
|
|
|
21216FF0000
|
unkown
|
page readonly
|
|
|
|
2121B4C1000
|
unkown
|
page read and write
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
1BF66422000
|
unkown
|
page read and write
|
|
|
|
7FF50F296000
|
unkown
|
page readonly
|
|
|
|
7DFDC4E46000
|
unkown
|
page readonly
|
|
|
|
17356280000
|
unkown
|
page write copy
|
|
|
|
2B3C0B02000
|
unkown
|
page read and write
|
|
|
|
2121B8EC000
|
unkown
|
page read and write
|
|
|
|
2121B8E5000
|
unkown
|
page read and write
|
|
|
|
20A6C1E0000
|
unkown
|
page readonly
|
|
|
|
62558FC000
|
unkown
|
page read and write
|
|
|
|
255070A0000
|
unkown
|
page readonly
|
|
|
|
1F4EC713000
|
unkown
|
page read and write
|
|
|
|
255073A5000
|
heap private
|
page read and write
|
|
|
|
13B01125000
|
unkown
|
page read and write
|
|
|
|
21215F60000
|
unkown
|
page read and write
|
|
|
|
21215F70000
|
unkown
|
page read and write
|
|
|
|
21216041000
|
unkown
|
page read and write
|
|
|
|
7FF56B0B6000
|
unkown
|
page readonly
|
|
|
|
2121B4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E62C1000
|
unkown
|
page readonly
|
|
|
|
2121B8E3000
|
unkown
|
page read and write
|
|
|
|
E3881FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E6375000
|
unkown
|
page readonly
|
|
|
|
7FF5E76A9000
|
unkown
|
page readonly
|
|
|
|
7FF5D36A3000
|
unkown
|
page readonly
|
|
|
|
7FF5E62EC000
|
unkown
|
page readonly
|
|
|
|
A8F58FE000
|
unkown
|
page read and write
|
|
|
|
21216EE0000
|
unkown
|
page read and write
|
|
|
|
7FF5675F4000
|
unkown
|
page readonly
|
|
|
|
20A6C27B000
|
unkown
|
page read and write
|
|
|
|
20502289000
|
unkown
|
page read and write
|
|
|
|
2121B8EC000
|
unkown
|
page read and write
|
|
|
|
17355C89000
|
unkown
|
page read and write
|
|
|
|
7FF5D29A3000
|
unkown
|
page readonly
|
|
|
|
7FF50F2A0000
|
unkown
|
page readonly
|
|
|
|
2121B620000
|
unkown
|
page read and write
|
|
|
|
1CF4B230000
|
heap default
|
page read and write
|
|
|
|
7FF50F19A000
|
unkown
|
page readonly
|
|
|
|
7FF574E2F000
|
unkown
|
page readonly
|
|
|
|
7FF50F288000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EBB000
|
unkown
|
page readonly
|
|
|
|
2794E190000
|
unkown
|
page readonly
|
|
|
|
7FF56B048000
|
unkown
|
page readonly
|
|
|
|
7FF585D39000
|
unkown
|
page readonly
|
|
|
|
1CF4B46D000
|
unkown
|
page read and write
|
|
|
|
7FF5417F3000
|
unkown
|
page readonly
|
|
|
|
311715C000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD86000
|
unkown
|
page readonly
|
|
|
|
13B01172000
|
unkown
|
page read and write
|
|
|
|
13B011B4000
|
unkown
|
page read and write
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
2121B8EC000
|
unkown
|
page read and write
|
|
|
|
2121B863000
|
unkown
|
page read and write
|
|
|
|
7FF5D35D1000
|
unkown
|
page readonly
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
13B0084E000
|
unkown
|
page read and write
|
|
|
|
982A77F000
|
unkown
|
page read and write
|
|
|
|
7FF56B071000
|
unkown
|
page readonly
|
|
|
|
7FF585D44000
|
unkown
|
page readonly
|
|
|
|
1CF4B442000
|
unkown
|
page read and write
|
|
|
|
1EB14FD0000
|
heap private
|
page read and write
|
|
|
|
21216FE0000
|
unkown
|
page readonly
|
|
|
|
13B00FE0000
|
unkown
|
page readonly
|
|
|
|
7FF574E75000
|
unkown
|
page readonly
|
|
|
|
2B3C0A3C000
|
unkown
|
page read and write
|
|
|
|
6255F7F000
|
unkown
|
page read and write
|
|
|
|
7FF5AF4EE000
|
unkown
|
page readonly
|
|
|
|
2794E6F0000
|
unkown
|
page readonly
|
|
|
|
7FF585D36000
|
unkown
|
page readonly
|
|
|
|
7FF5AF943000
|
unkown
|
page readonly
|
|
|
|
2E96DFE000
|
unkown
|
page read and write
|
|
|
|
2794D8DE000
|
unkown
|
page read and write
|
|
|
|
1CF4B440000
|
unkown
|
page read and write
|
|
|
|
7FF5D346D000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
7FF5E61FC000
|
unkown
|
page readonly
|
|
|
|
25507111000
|
unkown
|
page read and write
|
|
|
|
13B008F3000
|
unkown
|
page read and write
|
|
|
|
7FF5673F5000
|
unkown
|
page readonly
|
|
|
|
1CF4B458000
|
unkown
|
page read and write
|
|
|
|
1EB15110000
|
unkown
|
page readonly
|
|
|
|
7FF5E7570000
|
unkown
|
page readonly
|
|
|
|
7FF5D3176000
|
unkown
|
page readonly
|
|
|
|
1EB15D40000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
7FF5E76A2000
|
unkown
|
page readonly
|
|
|
|
1CF4B45F000
|
unkown
|
page read and write
|
|
|
|
2794E700000
|
unkown
|
page read and write
|
|
|
|
7FF574BA8000
|
unkown
|
page readonly
|
|
|
|
7FF5674F3000
|
unkown
|
page readonly
|
|
|
|
7FF5D2FBD000
|
unkown
|
page readonly
|
|
|
|
13B00FC0000
|
unkown
|
page readonly
|
|
|
|
13B01180000
|
unkown
|
page read and write
|
|
|
|
13B011A0000
|
unkown
|
page read and write
|
|
|
|
2121B780000
|
unkown
|
page read and write
|
|
|
|
20502247000
|
unkown
|
page read and write
|
|
|
|
7FF585D22000
|
unkown
|
page readonly
|
|
|
|
C618EC000
|
unkown
|
page read and write
|
|
|
|
13B0084F000
|
unkown
|
page read and write
|
|
|
|
2121B8E6000
|
unkown
|
page read and write
|
|
|
|
1F4EC665000
|
unkown
|
page read and write
|
|
|
|
2794DBE5000
|
heap private
|
page read and write
|
|
|
|
1EB15200000
|
unkown
|
page read and write
|
|
|
|
212169DD000
|
unkown
|
page read and write
|
|
|
|
13B0084A000
|
unkown
|
page read and write
|
|
|
|
21217020000
|
unkown
|
page readonly
|
|
|
|
7FF574D5A000
|
unkown
|
page readonly
|
|
|
|
7FF5AF4E5000
|
unkown
|
page readonly
|
|
|
|
71CDD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E75AC000
|
unkown
|
page readonly
|
|
|
|
2121B7F4000
|
unkown
|
page readonly
|
|
|
|
7FF5D30FB000
|
unkown
|
page readonly
|
|
|
|
1BF66290000
|
unkown
|
page readonly
|
|
|
|
2794E710000
|
unkown
|
page read and write
|
|
|
|
2121B5F0000
|
unkown
|
page read and write
|
|
|
|
7FF54214A000
|
unkown
|
page readonly
|
|
|
|
7FF5D30FF000
|
unkown
|
page readonly
|
|
|
|
21216070000
|
unkown
|
page read and write
|
|
|
|
21215F50000
|
unkown
|
page readonly
|
|
|
|
1EB1522D000
|
unkown
|
page read and write
|
|
|
|
13B0110C000
|
unkown
|
page read and write
|
|
|
|
2121B740000
|
unkown
|
page readonly
|
|
|
|
2121609E000
|
unkown
|
page read and write
|
|
|
|
6255E7D000
|
unkown
|
page read and write
|
|
|
|
7FF567599000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
13B01180000
|
unkown
|
page read and write
|
|
|
|
13B0119D000
|
unkown
|
page read and write
|
|
|
|
7FF5D3553000
|
unkown
|
page readonly
|
|
|
|
1EB151F0000
|
unkown
|
page readonly
|
|
|
|
7FF56755C000
|
unkown
|
page readonly
|
|
|
|
21216913000
|
unkown
|
page read and write
|
|
|
|
2121B8EF000
|
unkown
|
page read and write
|
|
|
|
71CE47F000
|
unkown
|
page read and write
|
|
|
|
2121B7F0000
|
unkown
|
page readonly
|
|
|
|
13B00908000
|
unkown
|
page read and write
|
|
|
|
7FF50F1FC000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
7FF51AA95000
|
unkown
|
page readonly
|
|
|
|
2121BA28000
|
unkown
|
page readonly
|
|
|
|
13B0117C000
|
unkown
|
page read and write
|
|
|
|
7FF542229000
|
unkown
|
page readonly
|
|
|
|
CBA14FF000
|
unkown
|
page read and write
|
|
|
|
2121B8E9000
|
unkown
|
page read and write
|
|
|
|
21216FC0000
|
unkown
|
page readonly
|
|
|
|
2B3C1400000
|
unkown
|
page readonly
|
|
|
|
2121B4E1000
|
unkown
|
page read and write
|
|
|
|
21216200000
|
unkown
|
page readonly
|
|
|
|
21216800000
|
unkown
|
page read and write
|
|
|
|
7FF5E62B9000
|
unkown
|
page readonly
|
|
|
|
A8F5B7B000
|
unkown
|
page read and write
|
|
|
|
2794D820000
|
unkown
|
page read and write
|
|
|
|
1CF4B47A000
|
unkown
|
page read and write
|
|
|
|
13B0117A000
|
unkown
|
page read and write
|
|
|
|
1EB15266000
|
unkown
|
page read and write
|
|
|
|
7FF5AF871000
|
unkown
|
page readonly
|
|
|
|
1CF4B990000
|
unkown
|
page read and write
|
|
|
|
DBDB377000
|
unkown
|
page read and write
|
|
|
|
1CF4B444000
|
unkown
|
page read and write
|
|
|
|
7FF5E5E86000
|
unkown
|
page readonly
|
|
|
|
71CE17D000
|
unkown
|
page read and write
|
|
|
|
1EB15308000
|
unkown
|
page read and write
|
|
|
|
6255B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5E7733000
|
unkown
|
page readonly
|
|
|
|
7FF5D359C000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
13B01199000
|
unkown
|
page read and write
|
|
|
|
1CF4B47B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8BC000
|
unkown
|
page readonly
|
|
|
|
2121B767000
|
unkown
|
page write copy
|
|
|
|
7FF574CC9000
|
unkown
|
page readonly
|
|
|
|
7FF5E628F000
|
unkown
|
page readonly
|
|
|
|
13B00870000
|
unkown
|
page read and write
|
|
|
|
7FF5D30C4000
|
unkown
|
page readonly
|
|
|
|
7FF5AF755000
|
unkown
|
page readonly
|
|
|
|
7FF542204000
|
unkown
|
page readonly
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
1CF4B459000
|
unkown
|
page read and write
|
|
|
|
7FF5AF75A000
|
unkown
|
page readonly
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
2121B8ED000
|
unkown
|
page read and write
|
|
|
|
7FF56B133000
|
unkown
|
page readonly
|
|
|
|
7FF5A29A2000
|
unkown
|
page readonly
|
|
|
|
212169DD000
|
unkown
|
page read and write
|
|
|
|
7FF56B0C4000
|
unkown
|
page readonly
|
|
|
|
DBDADAE000
|
unkown
|
page read and write
|
|
|
|
2B3C0B13000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF5D3585000
|
unkown
|
page readonly
|
|
|
|
2121B5A4000
|
unkown
|
page read and write
|
|
|
|
7FF5A31E3000
|
unkown
|
page readonly
|
|
|
|
2121B700000
|
unkown
|
page readonly
|
|
|
|
25507050000
|
unkown
|
page read and write
|
|
|
|
2B3C0990000
|
unkown
|
page readonly
|
|
|
|
7FF50EBC2000
|
unkown
|
page readonly
|
|
|
|
1CF4B441000
|
unkown
|
page read and write
|
|
|
|
7FF5A31C6000
|
unkown
|
page readonly
|
|
|
|
7FF5AF92C000
|
unkown
|
page readonly
|
|
|
|
17356500000
|
unkown
|
page read and write
|
|
|
|
2B3C0920000
|
heap private
|
page read and write
|
|
|
|
1CF4B3F0000
|
unkown
|
page readonly
|
|
|
|
7FF567383000
|
unkown
|
page readonly
|
|
|
|
25506F80000
|
unkown
|
page readonly
|
|
|
|
13B011A5000
|
unkown
|
page read and write
|
|
|
|
2E96CFE000
|
unkown
|
page read and write
|
|
|
|
20A6C1D0000
|
heap default
|
page read and write
|
|
|
|
2121B8EF000
|
unkown
|
page read and write
|
|
|
|
7FF5D361C000
|
unkown
|
page readonly
|
|
|
|
7FF5D26CD000
|
unkown
|
page readonly
|
|
|
|
7FF5E7650000
|
unkown
|
page readonly
|
|
|
|
212455C0000
|
unkown
|
page read and write
|
|
|
|
17355CBF000
|
unkown
|
page read and write
|
|
|
|
E387FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D3121000
|
unkown
|
page readonly
|
|
|
|
1F4ECC60000
|
unkown
|
page read and write
|
|
|
|
1CF4B462000
|
unkown
|
page read and write
|
|
|
|
1BF66508000
|
unkown
|
page read and write
|
|
|
|
CBA157F000
|
unkown
|
page read and write
|
|
|
|
25507100000
|
unkown
|
page read and write
|
|
|
|
7FF585D05000
|
unkown
|
page readonly
|
|
|
|
13B00888000
|
unkown
|
page read and write
|
|
|
|
7FF5A3100000
|
unkown
|
page readonly
|
|
|
|
13B008B0000
|
unkown
|
page read and write
|
|
|
|
2121B4F0000
|
unkown
|
page read and write
|
|
|
|
982A67F000
|
unkown
|
page read and write
|
|
|
|
21244E40000
|
unkown
|
page readonly
|
|
|
|
2E96EFE000
|
unkown
|
page read and write
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
1CF4B400000
|
unkown
|
page read and write
|
|
|
|
1F4EC510000
|
unkown
|
page readonly
|
|
|
|
212455C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6129000
|
unkown
|
page readonly
|
|
|
|
6255C7C000
|
unkown
|
page read and write
|
|
|
|
1CF4B1D0000
|
heap private
|
page read and write
|
|
|
|
7FF542092000
|
unkown
|
page readonly
|
|
|
|
7FF5E7733000
|
unkown
|
page readonly
|
|
|
|
21245200000
|
unkown
|
page readonly
|
|
|
|
20502200000
|
unkown
|
page read and write
|
|
|
|
2121B764000
|
unkown
|
page write copy
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
2121B7B0000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D5B000
|
unkown
|
page readonly
|
|
|
|
7FF5675D2000
|
unkown
|
page readonly
|
|
|
|
2121B8B4000
|
unkown
|
page read and write
|
|
|
|
7FF5E74FD000
|
unkown
|
page readonly
|
|
|
|
17356270000
|
unkown
|
page readonly
|
|
|
|
7FF542248000
|
unkown
|
page readonly
|
|
|
|
7FF5420FD000
|
unkown
|
page readonly
|
|
|
|
7FF542333000
|
unkown
|
page readonly
|
|
|
|
FC7307B000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
20503C70000
|
unkown
|
page read and write
|
|
|
|
9829EFD000
|
unkown
|
page read and write
|
|
|
|
21216076000
|
unkown
|
page read and write
|
|
|
|
7FF5E7645000
|
unkown
|
page readonly
|
|
|
|
7FF5A314C000
|
unkown
|
page readonly
|
|
|
|
20502262000
|
unkown
|
page read and write
|
|
|
|
7FF5D35B8000
|
unkown
|
page readonly
|
|
|
|
13B00FE0000
|
unkown
|
page read and write
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
7FF585CBF000
|
unkown
|
page readonly
|
|
|
|
7FF5D316C000
|
unkown
|
page readonly
|
|
|
|
17355BD0000
|
unkown
|
page readonly
|
|
|
|
2121B5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D86000
|
unkown
|
page readonly
|
|
|
|
13B008A6000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DBD000
|
unkown
|
page readonly
|
|
|
|
7FF56B0A2000
|
unkown
|
page readonly
|
|
|
|
7FF51AAEC000
|
unkown
|
page readonly
|
|
|
|
1CF4BA02000
|
unkown
|
page read and write
|
|
|
|
7FF5E74FF000
|
unkown
|
page readonly
|
|
|
|
7FF566B1E000
|
unkown
|
page readonly
|
|
|
|
205024D0000
|
unkown
|
page readonly
|
|
|
|
255073A0000
|
heap private
|
page read and write
|
|
|
|
998D0F9000
|
unkown
|
page read and write
|
|
|
|
7FF56AFAC000
|
unkown
|
page readonly
|
|
|
|
7FF574E38000
|
unkown
|
page readonly
|
|
|
|
1BF66446000
|
unkown
|
page read and write
|
|
|
|
2121699A000
|
unkown
|
page read and write
|
|
|
|
7FF5D3162000
|
unkown
|
page readonly
|
|
|
|
E387F7B000
|
unkown
|
page read and write
|
|
|
|
20502202000
|
unkown
|
page read and write
|
|
|
|
7FF574F23000
|
unkown
|
page readonly
|
|
|
|
7FF5AF4AB000
|
unkown
|
page readonly
|
|
|
|
7FF5421AC000
|
unkown
|
page readonly
|
|
|
|
17355C00000
|
unkown
|
page read and write
|
|
|
|
7FF56B054000
|
unkown
|
page readonly
|
|
|
|
2E96A7B000
|
unkown
|
page read and write
|
|
|
|
13B011A8000
|
unkown
|
page read and write
|
|
|
|
7FF5D326D000
|
unkown
|
page readonly
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
21215E00000
|
heap private
|
page read and write
|
|
|
|
7FF51A835000
|
unkown
|
page readonly
|
|
|
|
7FF5D360B000
|
unkown
|
page readonly
|
|
|
|
25507100000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8B9000
|
unkown
|
page readonly
|
|
|
|
1CF4B45A000
|
unkown
|
page read and write
|
|
|
|
20A6C1F0000
|
unkown
|
page readonly
|
|
|
|
7FF5422C4000
|
unkown
|
page readonly
|
|
|
|
21216815000
|
unkown
|
page read and write
|
|
|
|
2121B84C000
|
unkown
|
page read and write
|
|
|
|
21216FD0000
|
unkown
|
page readonly
|
|
|
|
2B3C0A4A000
|
unkown
|
page read and write
|
|
|
|
2121B630000
|
unkown
|
page read and write
|
|
|
|
2121B4CB000
|
unkown
|
page read and write
|
|
|
|
21216089000
|
unkown
|
page read and write
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
9829BEB000
|
unkown
|
page read and write
|
|
|
|
982A3FA000
|
unkown
|
page read and write
|
|
|
|
998CB8B000
|
unkown
|
page read and write
|
|
|
|
2794DBE9000
|
heap private
|
page read and write
|
|
|
|
7FF5675A1000
|
unkown
|
page readonly
|
|
|
|
20A6C202000
|
unkown
|
page read and write
|
|
|
|
7FF5D3184000
|
unkown
|
page readonly
|
|
|
|
21215F40000
|
unkown
|
page readonly
|
|
|
|
7FF5E76B6000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F08000
|
unkown
|
page readonly
|
|
|
|
7FF54231C000
|
unkown
|
page readonly
|
|
|
|
21216590000
|
unkown
|
page readonly
|
|
|
|
1CF4B474000
|
unkown
|
page read and write
|
|
|
|
7FF5D30B4000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
7FF5675B5000
|
unkown
|
page readonly
|
|
|
|
2121B7E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6306000
|
unkown
|
page readonly
|
|
|
|
7FF5AF6DB000
|
unkown
|
page readonly
|
|
|
|
7FF5E7669000
|
unkown
|
page readonly
|
|
|
|
13B00829000
|
unkown
|
page read and write
|
|
|
|
1BF6648A000
|
unkown
|
page read and write
|
|
|
|
7FF5A30EF000
|
unkown
|
page readonly
|
|
|
|
2121B620000
|
unkown
|
page readonly
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
13B008A8000
|
unkown
|
page read and write
|
|
|
|
62552BB000
|
unkown
|
page read and write
|
|
|
|
2B3C0980000
|
heap default
|
page read and write
|
|
|
|
7FF5E5ABE000
|
unkown
|
page readonly
|
|
|
|
1CF4B463000
|
unkown
|
page read and write
|
|
|
|
7FF56AEFD000
|
unkown
|
page readonly
|
|
|
|
17355E00000
|
unkown
|
page readonly
|
|
|
|
2121B8DD000
|
unkown
|
page read and write
|
|
|
|
1CF4B465000
|
unkown
|
page read and write
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
13B011AC000
|
unkown
|
page read and write
|
|
|
|
20A6C170000
|
heap private
|
page read and write
|
|
|
|
13B01177000
|
unkown
|
page read and write
|
|
|
|
1BF66360000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EBF000
|
unkown
|
page readonly
|
|
|
|
21215E60000
|
heap default
|
page read and write
|
|
|
|
13B00AD0000
|
unkown
|
page readonly
|
|
|
|
E3880F7000
|
unkown
|
page read and write
|
|
|
|
13B00849000
|
unkown
|
page read and write
|
|
|
|
7FF5E5F2A000
|
unkown
|
page readonly
|
|
|
|
21216000000
|
unkown
|
page read and write
|
|
|
|
7FF574EA6000
|
unkown
|
page readonly
|
|
|
|
2794D7A0000
|
unkown
|
page read and write
|
|
|
|
21216900000
|
unkown
|
page read and write
|
|
|
|
7FF51AA50000
|
unkown
|
page readonly
|
|
|
|
2794D990000
|
unkown
|
page readonly
|
|
|
|
13B011AE000
|
unkown
|
page read and write
|
|
|
|
2121B7C8000
|
unkown
|
page read and write
|
|
|
|
2794D800000
|
unkown
|
page read and write
|
|
|
|
7FF5E62D5000
|
unkown
|
page readonly
|
|
|
|
2794D850000
|
unkown
|
page readonly
|
|
|
|
7FF5AF84F000
|
unkown
|
page readonly
|
|
|
|
2121608E000
|
unkown
|
page read and write
|
|
|
|
7FF5D3590000
|
unkown
|
page readonly
|
|
|
|
7FF567534000
|
unkown
|
page readonly
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
62559FE000
|
unkown
|
page read and write
|
|
|
|
2121B610000
|
unkown
|
page read and write
|
|
|
|
7FF5D31F3000
|
unkown
|
page readonly
|
|
|
|
2121B800000
|
unkown
|
page read and write
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
13B01175000
|
unkown
|
page read and write
|
|
|
|
2121B680000
|
unkown
|
page readonly
|
|
|
|
1CF4B43B000
|
unkown
|
page read and write
|
|
|
|
71CE37E000
|
unkown
|
page read and write
|
|
|
|
20503CB0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF860000
|
unkown
|
page readonly
|
|
|
|
2121B7D0000
|
unkown
|
page read and write
|
|
|
|
7FF56A874000
|
unkown
|
page readonly
|
|
|
|
7FF574F06000
|
unkown
|
page readonly
|
|
|
|
7FF567354000
|
unkown
|
page readonly
|
|
|
|
255070C0000
|
unkown
|
page read and write
|
|
|
|
20A6C302000
|
unkown
|
page read and write
|
|
|
|
7FF5D2EE4000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
212167D0000
|
unkown
|
page read and write
|
|
|
|
21216959000
|
unkown
|
page read and write
|
|
|
|
13B007F0000
|
unkown
|
page read and write
|
|
|
|
2121B660000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
2121B504000
|
unkown
|
page read and write
|
|
|
|
1EB15802000
|
unkown
|
page read and write
|
|
|
|
A8F5BFE000
|
unkown
|
page read and write
|
|
|
|
20A6C25A000
|
unkown
|
page read and write
|
|
|
|
FC7327F000
|
unkown
|
page read and write
|
|
|
|
255070F6000
|
unkown
|
page read and write
|
|
|
|
1BF66380000
|
unkown
|
page read and write
|
|
|
|
20A6C4D0000
|
unkown
|
page readonly
|
|
|
|
7FF56B133000
|
unkown
|
page readonly
|
|
|
|
7FF54222B000
|
unkown
|
page readonly
|
|
|
|
7FF54223F000
|
unkown
|
page readonly
|
|
|
|
1EB1523C000
|
unkown
|
page read and write
|
|
|
|
7FF5D340A000
|
unkown
|
page readonly
|
|
|
|
7FF5E7661000
|
unkown
|
page readonly
|
|
|
|
C6207F000
|
unkown
|
page read and write
|
|
|
|
13B011A0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF084000
|
unkown
|
page readonly
|
|
|
|
7FF50F2F9000
|
unkown
|
page readonly
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
21244F10000
|
unkown
|
page readonly
|
|
|
|
7FF541EFD000
|
unkown
|
page readonly
|
|
|
|
2121B4F0000
|
unkown
|
page read and write
|
|
|
|
13B00760000
|
heap private
|
page read and write
|
|
|
|
21216102000
|
unkown
|
page read and write
|
|
|
|
2121B4C0000
|
unkown
|
page read and write
|
|
|
|
13B01175000
|
unkown
|
page read and write
|
|
|
|
1F4EC65B000
|
unkown
|
page read and write
|
|
|
|
1CF4B310000
|
unkown
|
page readonly
|
|
|
|
2121B500000
|
unkown
|
page read and write
|
|
|
|
7FF56B050000
|
unkown
|
page readonly
|
|
|
|
1F4EC800000
|
unkown
|
page readonly
|
|
|
|
CBA1479000
|
unkown
|
page read and write
|
|
|
|
2121B750000
|
unkown
|
page read and write
|
|
|
|
13B011A6000
|
unkown
|
page read and write
|
|
|
|
21216079000
|
unkown
|
page read and write
|
|
|
|
13B01180000
|
unkown
|
page read and write
|
|
|
|
1CF4B464000
|
unkown
|
page read and write
|
|
|
|
7FF5D29F3000
|
unkown
|
page readonly
|
|
|
|
7FF5420C5000
|
unkown
|
page readonly
|
|
|
|
25507070000
|
unkown
|
page read and write
|
|
|
|
13B01700000
|
unkown
|
page read and write
|
|
|
|
1CF4B484000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
13B011A1000
|
unkown
|
page read and write
|
|
|
|
CBA115F000
|
unkown
|
page read and write
|
|
|
|
17356600000
|
unkown
|
page readonly
|
|
|
|
E387E75000
|
unkown
|
page read and write
|
|
|
|
7FF5D3110000
|
unkown
|
page readonly
|
|
|
|
21216959000
|
unkown
|
page read and write
|
|
|
|
21217010000
|
unkown
|
page readonly
|
|
|
|
2794E4D0000
|
unkown
|
page read and write
|
|
|
|
2121B7B4000
|
unkown
|
page readonly
|
|
|
|
2121B8EC000
|
unkown
|
page read and write
|
|
|
|
2121699D000
|
unkown
|
page read and write
|
|
|
|
71CD92C000
|
unkown
|
page read and write
|
|
|
|
7FF585D29000
|
unkown
|
page readonly
|
|
|
|
7FF5E723C000
|
unkown
|
page readonly
|
|
|
|
1BF6642A000
|
unkown
|
page read and write
|
|
|
|
21244FF0000
|
unkown
|
page readonly
|
|
|
|
1CF4B447000
|
unkown
|
page read and write
|
|
|
|
2121B777000
|
unkown
|
page readonly
|
|
|
|
7FF5D3369000
|
unkown
|
page readonly
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
2794E760000
|
unkown
|
page read and write
|
|
|
|
311797F000
|
unkown
|
page read and write
|
|
|
|
21216958000
|
unkown
|
page read and write
|
|
|
|
17355BE0000
|
unkown
|
page read and write
|
|
|
|
7FF50EC18000
|
unkown
|
page readonly
|
|
|
|
7FF585DB3000
|
unkown
|
page readonly
|
|
|
|
7FF5E7671000
|
unkown
|
page readonly
|
|
|
|
7FF5E62FC000
|
unkown
|
page readonly
|
|
|
|
1F4EC666000
|
unkown
|
page read and write
|
|
|
|
7FF5422A9000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
7FF56732F000
|
unkown
|
page readonly
|
|
|
|
1EB15A00000
|
unkown
|
page readonly
|
|
|
|
13B00882000
|
unkown
|
page read and write
|
|
|
|
1CF4B45C000
|
unkown
|
page read and write
|
|
|
|
20502400000
|
unkown
|
page readonly
|
|
|
|
1EB15400000
|
unkown
|
page readonly
|
|
|
|
7FF5E763B000
|
unkown
|
page readonly
|
|
|
|
7FF5AF70D000
|
unkown
|
page readonly
|
|
|
|
20A6C240000
|
unkown
|
page read and write
|
|
|
|
7FF541E91000
|
unkown
|
page readonly
|
|
|
|
13B01172000
|
unkown
|
page read and write
|
|
|
|
1EB15030000
|
heap default
|
page read and write
|
|
|
|
7FF56AC3C000
|
unkown
|
page readonly
|
|
|
|
13B007C0000
|
heap default
|
page read and write
|
|
|
|
7FF542271000
|
unkown
|
page readonly
|
|
|
|
2121B774000
|
unkown
|
page readonly
|
|
|
|
7FF5E5C48000
|
unkown
|
page readonly
|
|
|
|
1CF4B467000
|
unkown
|
page read and write
|
|
|
|
20502258000
|
unkown
|
page read and write
|
|
|
|
7FF5AF60F000
|
unkown
|
page readonly
|
|
|
|
2794D840000
|
unkown
|
page readonly
|
|
|
|
2121B8F9000
|
unkown
|
page read and write
|
|
|
|
13B01800000
|
unkown
|
page readonly
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
7FF5AF7D3000
|
unkown
|
page readonly
|
|
|
|
13B008EB000
|
unkown
|
page read and write
|
|
|
|
13B011A1000
|
unkown
|
page read and write
|
|
|
|
982A87E000
|
unkown
|
page read and write
|
|
|
|
2121B3B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6130000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F01000
|
unkown
|
page readonly
|
|
|
|
7FF56B069000
|
unkown
|
page readonly
|
|
|
|
7FF51AAD5000
|
unkown
|
page readonly
|
|
|
|
7FF574E99000
|
unkown
|
page readonly
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
2B3C1202000
|
unkown
|
page read and write
|
|
|
|
7FF5E6231000
|
unkown
|
page readonly
|
|
|
|
7FF5D31D6000
|
unkown
|
page readonly
|
|
|
|
7FF56AC36000
|
unkown
|
page readonly
|
|
|
|
2121B720000
|
unkown
|
page readonly
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
7FF5AF83C000
|
unkown
|
page readonly
|
|
|
|
212169DD000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF51AAF9000
|
unkown
|
page readonly
|
|
|
|
13B01175000
|
unkown
|
page read and write
|
|
|
|
2121B620000
|
unkown
|
page read and write
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
7FF5D2D48000
|
unkown
|
page readonly
|
|
|
|
2121B4CB000
|
unkown
|
page read and write
|
|
|
|
E387C7B000
|
unkown
|
page read and write
|
|
|
|
7FF56B0A9000
|
unkown
|
page readonly
|
|
|
|
7FF574E51000
|
unkown
|
page readonly
|
|
|
|
2121B8ED000
|
unkown
|
page read and write
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
13B01120000
|
unkown
|
page read and write
|
|
|
|
7FF56AED9000
|
unkown
|
page readonly
|
|
|
|
2121B8F9000
|
unkown
|
page read and write
|
|
|
|
A8F587B000
|
unkown
|
page read and write
|
|
|
|
7FF5E62F2000
|
unkown
|
page readonly
|
|
|
|
7FF5D3114000
|
unkown
|
page readonly
|
|
|
|
13B008BF000
|
unkown
|
page read and write
|
|
|
|
7FF56B03F000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
998CEFD000
|
unkown
|
page read and write
|
|
|
|
7FF5E74D9000
|
unkown
|
page readonly
|
|
|
|
13B01125000
|
unkown
|
page read and write
|
|
|
|
1BF66E00000
|
unkown
|
page readonly
|
|
|
|
7FF51A839000
|
unkown
|
page readonly
|
|
|
|
13B011A0000
|
unkown
|
page read and write
|
|
|
|
20503E02000
|
unkown
|
page read and write
|
|
|
|
13B01178000
|
unkown
|
page read and write
|
|
|
|
2121B670000
|
unkown
|
page readonly
|
|
|
|
7FF56B0AC000
|
unkown
|
page readonly
|
|
|
|
20504000000
|
unkown
|
page readonly
|
|
|
|
17355CC7000
|
unkown
|
page read and write
|
|
|
|
7FF567550000
|
unkown
|
page readonly
|
|
|
|
13B00852000
|
unkown
|
page read and write
|
|
|
|
1F4EC676000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F1F000
|
unkown
|
page readonly
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
1F4EC5F0000
|
unkown
|
page readonly
|
|
|
|
212167E0000
|
unkown
|
page read and write
|
|
|
|
7FF574D60000
|
unkown
|
page readonly
|
|
|
|
7FF56B045000
|
unkown
|
page readonly
|
|
|
|
998CF79000
|
unkown
|
page read and write
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
7FF51AAFC000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
1CF4B240000
|
unkown
|
page readonly
|
|
|
|
1BF6644B000
|
unkown
|
page read and write
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
7FF56A86E000
|
unkown
|
page readonly
|
|
|
|
7FF542316000
|
unkown
|
page readonly
|
|
|
|
7FF56B02C000
|
unkown
|
page readonly
|
|
|
|
7FF5E607F000
|
unkown
|
page readonly
|
|
|
|
17355C13000
|
unkown
|
page read and write
|
|
|
|
13B00858000
|
unkown
|
page read and write
|
|
|
|
2121B590000
|
unkown
|
page read and write
|
|
|
|
13B00902000
|
unkown
|
page read and write
|
|
|
|
2121C000000
|
unkown
|
page read and write
|
|
|
|
7FF5E6BD2000
|
unkown
|
page readonly
|
|
|
|
71CE27F000
|
unkown
|
page read and write
|
|
|
|
7FF542145000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D2EFE000
|
unkown
|
page readonly
|
|
|
|
7FF5D31F8000
|
unkown
|
page readonly
|
|
|
|
2794DBE0000
|
heap private
|
page read and write
|
|
|
|
71CE57F000
|
unkown
|
page read and write
|
|
|
|
21216E00000
|
unkown
|
page read and write
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
7FF5E5EE9000
|
unkown
|
page readonly
|
|
|
|
7FF51AB66000
|
unkown
|
page readonly
|
|
|
|
7FF567655000
|
unkown
|
page readonly
|
|
|
|
7FF574E35000
|
unkown
|
page readonly
|
|
|
|
E387CFE000
|
unkown
|
page read and write
|
|
|
|
20502213000
|
unkown
|
page read and write
|
|
|
|
2121B8E6000
|
unkown
|
page read and write
|
|
|
|
DBDAD2B000
|
unkown
|
page read and write
|
|
|
|
17355D13000
|
unkown
|
page read and write
|
|
|
|
20502258000
|
unkown
|
page read and write
|
|
|
|
21217360000
|
unkown
|
page read and write
|
|
|
|
1CF4B475000
|
unkown
|
page read and write
|
|
|
|
7FF5A3166000
|
unkown
|
page readonly
|
|
|
|
1F4EC600000
|
unkown
|
page read and write
|
|
|
|
7FF51AA91000
|
unkown
|
page readonly
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
2121B8EA000
|
unkown
|
page read and write
|
|
|
|
2B3C0A13000
|
unkown
|
page read and write
|
|
|
|
7FF51AA7C000
|
unkown
|
page readonly
|
|
|
|
7FF50F107000
|
unkown
|
page readonly
|
|
|
|
20A6C228000
|
unkown
|
page read and write
|
|
|
|
7FF542220000
|
unkown
|
page readonly
|
|
|
|
7FF5D30A1000
|
unkown
|
page readonly
|
|
|
|
13B008D6000
|
unkown
|
page read and write
|
|
|
|
2121B89E000
|
unkown
|
page read and write
|
|
|
|
2121B4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E6314000
|
unkown
|
page readonly
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
7FF56734D000
|
unkown
|
page readonly
|
|
|
|
982A4FB000
|
unkown
|
page read and write
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
7FF5D3551000
|
unkown
|
page readonly
|
|
|
|
7FF5D26D2000
|
unkown
|
page readonly
|
|
|
|
20502860000
|
unkown
|
page readonly
|
|
|
|
7FF566B23000
|
unkown
|
page readonly
|
|
|
|
7FF54200A000
|
unkown
|
page readonly
|
|
|
|
7FF5D306C000
|
unkown
|
page readonly
|
|
|
|
7FF51AAB1000
|
unkown
|
page readonly
|
|
|
|
1B95DFE000
|
unkown
|
page read and write
|
|
|
|
2121B8E9000
|
unkown
|
page read and write
|
|
|
|
7FF585D96000
|
unkown
|
page readonly
|
|
|
|
2794DB40000
|
unkown
|
page read and write
|
|
|
|
2121B600000
|
unkown
|
page read and write
|
|
|
|
13B0113B000
|
unkown
|
page read and write
|
|
|
|
7FF50F2EC000
|
unkown
|
page readonly
|
|
|
|
13B01002000
|
unkown
|
page read and write
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
1BF6646F000
|
unkown
|
page read and write
|
|
|
|
13B00800000
|
unkown
|
page read and write
|
|
|
|
7FF5D2E05000
|
unkown
|
page readonly
|
|
|
|
2121BA00000
|
unkown
|
page readonly
|
|
|
|
17355C42000
|
unkown
|
page read and write
|
|
|
|
255073B0000
|
unkown
|
page readonly
|
|
|
|
21216A01000
|
unkown
|
page read and write
|
|
|
|
7FF574E44000
|
unkown
|
page readonly
|
|
|
|
7FF5E61BA000
|
unkown
|
page readonly
|
|
|
|
7FF5A30F1000
|
unkown
|
page readonly
|
|
|
|
7FF5D2EEF000
|
unkown
|
page readonly
|
|
|
|
7FF5E60AF000
|
unkown
|
page readonly
|
|
|
|
7FF5A3152000
|
unkown
|
page readonly
|
|
|
|
1BF66C02000
|
unkown
|
page read and write
|
|
|
|
7FF585CD4000
|
unkown
|
page readonly
|
|
|
|
2794D899000
|
heap default
|
page read and write
|
|
|
|
7FF567591000
|
unkown
|
page readonly
|
|
|
|
13B00856000
|
unkown
|
page read and write
|
|
|
|
7FF5A3159000
|
unkown
|
page readonly
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
7FF5AEDFB000
|
unkown
|
page readonly
|
|
|
|
7FF5E7236000
|
unkown
|
page readonly
|
|
|
|
C6227C000
|
unkown
|
page read and write
|
|
|
|
2121B5E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D30D0000
|
unkown
|
page readonly
|
|
|
|
982AA7F000
|
unkown
|
page read and write
|
|
|
|
1CF4B46A000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF5E5AC4000
|
unkown
|
page readonly
|
|
|
|
2121B856000
|
unkown
|
page read and write
|
|
|
|
21245102000
|
unkown
|
page read and write
|
|
|
|
2121B4CE000
|
unkown
|
page read and write
|
|
|
|
20A6C213000
|
unkown
|
page read and write
|
|
|
|
2121B4E4000
|
unkown
|
page read and write
|
|
|
|
1BF66500000
|
unkown
|
page read and write
|
|
|
|
998D07F000
|
unkown
|
page read and write
|
|
|
|
7FF585B12000
|
unkown
|
page readonly
|
|
|
|
7FF5D2D59000
|
unkown
|
page readonly
|
|
|
|
7FF5D2FE1000
|
unkown
|
page readonly
|
|
|
|
3117878000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF5A315C000
|
unkown
|
page readonly
|
|
|
|
7FF5D35AC000
|
unkown
|
page readonly
|
|
|
|
7FF5AEE11000
|
unkown
|
page readonly
|
|
|
|
13B01180000
|
unkown
|
page read and write
|
|
|
|
2121B4CC000
|
unkown
|
page read and write
|
|
|
|
7FF50F290000
|
unkown
|
page readonly
|
|
|
|
2121B900000
|
unkown
|
page read and write
|
|
|
|
7FF5A3104000
|
unkown
|
page readonly
|
|
|
|
13B011A8000
|
unkown
|
page read and write
|
|
|
|
2B3C0B08000
|
unkown
|
page read and write
|
|
|
|
7FF56B126000
|
unkown
|
page readonly
|
|
|
|
13B0119F000
|
unkown
|
page read and write
|
|
|
|
7FF50F383000
|
unkown
|
page readonly
|
|
|
|
7FF5E5E8C000
|
unkown
|
page readonly
|
|
|
|
21216929000
|
unkown
|
page read and write
|
|
|
|
3117C7B000
|
unkown
|
page read and write
|
|
|
|
7FF574C82000
|
unkown
|
page readonly
|
|
|
|
7FF56756B000
|
unkown
|
page readonly
|
|
|
|
21245800000
|
unkown
|
page read and write
|
|
|
|
13B011BD000
|
unkown
|
page read and write
|
|
|
|
13B011B1000
|
unkown
|
page read and write
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
7FF5E7505000
|
unkown
|
page readonly
|
|
|
|
2794D890000
|
heap default
|
page read and write
|
|
|
|
7FF5D35C0000
|
unkown
|
page readonly
|
|
|
|
13B011A7000
|
unkown
|
page read and write
|
|
|
|
7FF50F2B1000
|
unkown
|
page readonly
|
|
|
|
7FF5AF6D5000
|
unkown
|
page readonly
|
|
|
|
7FF5D35C4000
|
unkown
|
page readonly
|
|
|
|
7FF5E6270000
|
unkown
|
page readonly
|
|
|
|
2121B8EF000
|
unkown
|
page read and write
|
|
|
|
20502248000
|
unkown
|
page read and write
|
|
|
|
21245040000
|
unkown
|
page read and write
|
|
|
|
21216029000
|
unkown
|
page read and write
|
|
|
|
2794DBF0000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
7FF5AF5E3000
|
unkown
|
page readonly
|
|
|
|
13B0083C000
|
unkown
|
page read and write
|
|
|
|
7FF5D2955000
|
unkown
|
page readonly
|
|
|
|
2121B8E5000
|
unkown
|
page read and write
|
|
|
|
20502257000
|
unkown
|
page read and write
|
|
|
|
255070B0000
|
unkown
|
page readonly
|
|
|
|
13B011DA000
|
unkown
|
page read and write
|
|
|
|
7FF5AF6AA000
|
unkown
|
page readonly
|
|
|
|
2121B8EF000
|
unkown
|
page read and write
|
|
|
|
21245013000
|
unkown
|
page read and write
|
|
|
|
2B3C0A55000
|
unkown
|
page read and write
|
|
|
|
7FF5421C3000
|
unkown
|
page readonly
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
CBA15FA000
|
unkown
|
page read and write
|
|
|
|
2E96AFE000
|
unkown
|
page read and write
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
13B01173000
|
unkown
|
page read and write
|
|
|
|
7FF56AF6A000
|
unkown
|
page readonly
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
7FF585CC5000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
20502160000
|
unkown
|
page readonly
|
|
|
|
7FF542333000
|
unkown
|
page readonly
|
|
|
|
2121B8C4000
|
unkown
|
page read and write
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
1CF4B427000
|
unkown
|
page read and write
|
|
|
|
7FF567575000
|
unkown
|
page readonly
|
|
|
|
13B0119F000
|
unkown
|
page read and write
|
|
|
|
7FF567545000
|
unkown
|
page readonly
|
|
|
|
7FF5D3000000
|
unkown
|
page readonly
|
|
|
|
17355AE0000
|
heap default
|
page read and write
|
|
|
|
7FF574D9C000
|
unkown
|
page readonly
|
|
|
|
2121B363000
|
unkown
|
page read and write
|
|
|
|
13B00FF0000
|
unkown
|
page read and write
|
|
|
|
1EB15300000
|
unkown
|
page read and write
|
|
|
|
20502300000
|
unkown
|
page read and write
|
|
|
|
13B0119F000
|
unkown
|
page read and write
|
|
|
|
255070D0000
|
heap default
|
page read and write
|
|
|
|
7FF56B116000
|
unkown
|
page readonly
|
|
|
|
2794DB30000
|
unkown
|
page read and write
|
|
|
|
7FF5AF82D000
|
unkown
|
page readonly
|
|
|
|
7FF5D3131000
|
unkown
|
page readonly
|
|
|
|
13B008DE000
|
unkown
|
page read and write
|
|
|
|
7FF574EB4000
|
unkown
|
page readonly
|
|
|
|
20A6C860000
|
unkown
|
page readonly
|
|
|
|
7FF56AEFF000
|
unkown
|
page readonly
|
|
|
|
7FF50F2A4000
|
unkown
|
page readonly
|
|
|
|
7FF542269000
|
unkown
|
page readonly
|
|
|
|
7FF5AF858000
|
unkown
|
page readonly
|
|
|
|
1CF4B42A000
|
unkown
|
page read and write
|
|
|
|
13B01172000
|
unkown
|
page read and write
|
|
|
|
7FF567646000
|
unkown
|
page readonly
|
|
|
|
13B01163000
|
unkown
|
page read and write
|
|
|
|
2121B8F9000
|
unkown
|
page read and write
|
|
|
|
7FF5E7716000
|
unkown
|
page readonly
|
|
|
|
7FF5D3105000
|
unkown
|
page readonly
|
|
|
|
13B01702000
|
unkown
|
page read and write
|
|
|
|
13B011B1000
|
unkown
|
page read and write
|
|
|
|
C6237E000
|
unkown
|
page read and write
|
|
|
|
13B011B0000
|
unkown
|
page read and write
|
|
|
|
2121B4C5000
|
unkown
|
page read and write
|
|
|
|
1BF66600000
|
unkown
|
page readonly
|
|
|
|
13B011AC000
|
unkown
|
page read and write
|
|
|
|
2124505C000
|
unkown
|
page read and write
|
|
|
|
20502248000
|
unkown
|
page read and write
|
|
|
|
2121BA34000
|
unkown
|
page readonly
|
|
|
|
3117B7F000
|
unkown
|
page read and write
|
|
|
|
FC7317B000
|
unkown
|
page read and write
|
|
|
|
7FF50F1F5000
|
unkown
|
page readonly
|
|
|
|
7FF542245000
|
unkown
|
page readonly
|
|
|
|
7FF5E62A0000
|
unkown
|
page readonly
|
|
|
|
1BF6643C000
|
unkown
|
page read and write
|
|
|
|
21216013000
|
unkown
|
page read and write
|
|
|
|
7FF5D3209000
|
unkown
|
page readonly
|
|
|
|
13B00F70000
|
unkown
|
page write copy
|
|
|
|
625567E000
|
unkown
|
page read and write
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
7FF585251000
|
unkown
|
page readonly
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
7FF542325000
|
unkown
|
page readonly
|
|
|
|
FC72B5B000
|
unkown
|
page read and write
|
|
|
|
1EB15790000
|
unkown
|
page read and write
|
|
|
|
7FF5D3129000
|
unkown
|
page readonly
|
|
|
|
205020F0000
|
heap private
|
page read and write
|
|
|
|
2121B5C0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF08E000
|
unkown
|
page readonly
|
|
|
|
2B3C0C00000
|
unkown
|
page readonly
|
|
|
|
7FF542250000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
7FF5D26C3000
|
unkown
|
page readonly
|
|
|
|
13B0084D000
|
unkown
|
page read and write
|
|
|
|
A8F5DFF000
|
unkown
|
page read and write
|
|
|
|
21215FF3000
|
unkown
|
page read and write
|
|
|
|
982AC7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D2EB9000
|
unkown
|
page readonly
|
|
|
|
7FF5D30EB000
|
unkown
|
page readonly
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
1B95E7C000
|
unkown
|
page read and write
|
|
|
|
2121BA30000
|
unkown
|
page read and write
|
|
|
|
7FF56AF05000
|
unkown
|
page readonly
|
|
|
|
1BF66A60000
|
unkown
|
page readonly
|
|
|
|
982A1FA000
|
unkown
|
page read and write
|
|
|
|
A8F5CF7000
|
unkown
|
page read and write
|
|
|
|
C6247D000
|
unkown
|
page read and write
|
|
|
|
7FF5D3145000
|
unkown
|
page readonly
|
|
|
|
13B01113000
|
unkown
|
page read and write
|
|
|
|
1CF4B46B000
|
unkown
|
page read and write
|
|
|
|
13B01199000
|
unkown
|
page read and write
|
|
|
|
13B0084B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF855000
|
unkown
|
page readonly
|
|
|
|
205021D0000
|
unkown
|
page read and write
|
|
|
|
7FF5D368C000
|
unkown
|
page readonly
|
|
|
|
1EB15313000
|
unkown
|
page read and write
|
|
|
|
DBDB27B000
|
unkown
|
page read and write
|
|
|
|
13B0085C000
|
unkown
|
page read and write
|
|
|
|
7FF5D30E0000
|
unkown
|
page readonly
|
|
|
|
7FF50F2F2000
|
unkown
|
page readonly
|
|
|
|
20502180000
|
unkown
|
page read and write
|
|
|
|
3117A78000
|
unkown
|
page read and write
|
|
|
|
7FF54201C000
|
unkown
|
page readonly
|
|
|
|
7FF51A8E2000
|
unkown
|
page readonly
|
|
|
|
7FF51AB06000
|
unkown
|
page readonly
|
|
|
|
7FF5D315B000
|
unkown
|
page readonly
|
|
|
|
2121B590000
|
unkown
|
page read and write
|
|
|
|
7FF5E6298000
|
unkown
|
page readonly
|
|
|
|
2121B620000
|
unkown
|
page read and write
|
|
|
|
7FF56A96C000
|
unkown
|
page readonly
|
|
|
|
7FF5A2A1A000
|
unkown
|
page readonly
|
|
|
|
1CF4B43D000
|
unkown
|
page read and write
|
|
|
|
17355CD0000
|
unkown
|
page read and write
|
|
|
|
212169DF000
|
unkown
|
page read and write
|
|
|
|
1CF4B468000
|
unkown
|
page read and write
|
|
|
|
7FF56AE92000
|
unkown
|
page readonly
|
|
|
|
212160FB000
|
unkown
|
page read and write
|
|
|
|
2794E6E0000
|
unkown
|
page read and write
|
|
|
|
7FF574CED000
|
unkown
|
page readonly
|
|
|
|
7FF542261000
|
unkown
|
page readonly
|
|
|
|
7FF5A31E3000
|
unkown
|
page readonly
|
|
|
|
C61E7F000
|
unkown
|
page read and write
|
|
|
|
7FF5AF943000
|
unkown
|
page readonly
|
|
|
|
7FF54229B000
|
unkown
|
page readonly
|
|
|
|
2121B946000
|
unkown
|
page read and write
|
|
|
|
7FF5D29E8000
|
unkown
|
page readonly
|
|
|
|
2121B4CA000
|
unkown
|
page read and write
|
|
|
|
13B01540000
|
unkown
|
page readonly
|
|
|
|
21215FF0000
|
unkown
|
page read and write
|
|
|
|
7FF585CD0000
|
unkown
|
page readonly
|
|
|
|
7FF56ADB8000
|
unkown
|
page readonly
|
|
|
|
13B0112D000
|
unkown
|
page read and write
|
|
|
|
7FF5422AC000
|
unkown
|
page readonly
|
|
|
|
1CF4B457000
|
unkown
|
page read and write
|
|
|
|
CBA11DE000
|
unkown
|
page read and write
|
|
|
|
17356402000
|
unkown
|
page read and write
|
|
|
|
7FF5AF6A2000
|
unkown
|
page readonly
|
|
|
|
2B3C1740000
|
unkown
|
page readonly
|
|
|
|
2121B5D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E7648000
|
unkown
|
page readonly
|
|
|
|
2121B83F000
|
unkown
|
page read and write
|
|
|
|
7FF574A26000
|
unkown
|
page readonly
|
|
|
|
7FF50EBBF000
|
unkown
|
page readonly
|
|
|
|
7FF51AA66000
|
unkown
|
page readonly
|
|
|
|
2121B4E0000
|
unkown
|
page read and write
|
|
|
|
7FF5E762C000
|
unkown
|
page readonly
|
|
|
|
7FF5E6008000
|
unkown
|
page readonly
|
|
|
|
62556FC000
|
unkown
|
page read and write
|
|
|
|
255070E7000
|
heap default
|
page read and write
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
1CF4B502000
|
unkown
|
page read and write
|
|
|
|
3117777000
|
unkown
|
page read and write
|
|
|
|
1CF4B461000
|
unkown
|
page read and write
|
|
|
|
1CF4B460000
|
unkown
|
page read and write
|
|
|
|
7FF5D30CC000
|
unkown
|
page readonly
|
|
|
|
7FF5D3626000
|
unkown
|
page readonly
|
|
|
|
13B011B1000
|
unkown
|
page read and write
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
2121BA30000
|
unkown
|
page readonly
|
|
|
|
7FF5D3621000
|
unkown
|
page readonly
|
|
|
|
7FF56B061000
|
unkown
|
page readonly
|
|
|
|
7FF5D36A3000
|
unkown
|
page readonly
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
1EB15302000
|
unkown
|
page read and write
|
|
|
|
2121B949000
|
unkown
|
page read and write
|
|
|
|
7FF5E61C0000
|
unkown
|
page readonly
|
|
|
|
2121B4C0000
|
unkown
|
page read and write
|
|
|
|
7FF5E614F000
|
unkown
|
page readonly
|
|
|
|
1CF4B477000
|
unkown
|
page read and write
|
|
|
|
13B007D0000
|
unkown
|
page readonly
|
|
|
|
2550710F000
|
unkown
|
page read and write
|
|
|
|
21216093000
|
unkown
|
page read and write
|
|
|
|
7FF5E6383000
|
unkown
|
page readonly
|
|
|
|
2121B902000
|
unkown
|
page read and write
|
|
|
|
20502318000
|
unkown
|
page read and write
|
|
|
|
7FF57475C000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
2121B8B0000
|
unkown
|
page read and write
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
20A6C400000
|
unkown
|
page readonly
|
|
|
|
DBDB07E000
|
unkown
|
page read and write
|
|
|
|
13B01163000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F9B000
|
unkown
|
page readonly
|
|
|
|
1BF66370000
|
unkown
|
page readonly
|
|
|
|
6255D7F000
|
unkown
|
page read and write
|
|
|
|
21215FD1000
|
unkown
|
page read and write
|
|
|
|
205021D0000
|
unkown
|
page read and write
|
|
|
|
1F4EC613000
|
unkown
|
page read and write
|
|
|
|
13B0119B000
|
unkown
|
page read and write
|
|
|
|
13B011A3000
|
unkown
|
page read and write
|
|
|
|
7FF5D2EDD000
|
unkown
|
page readonly
|
|
|
|
2794DA60000
|
unkown
|
page readonly
|
|
|
|
212169DC000
|
unkown
|
page read and write
|
|
|
|
3117575000
|
unkown
|
page read and write
|
|
|
|
7FF50EB06000
|
unkown
|
page readonly
|
|
|
|
17355BC0000
|
unkown
|
page readonly
|
|
|
|
20502302000
|
unkown
|
page read and write
|
|
|
|
7FF51AA8B000
|
unkown
|
page readonly
|
|
|
|
7FF5AEDE4000
|
unkown
|
page readonly
|
|
|
|
7FF5AF864000
|
unkown
|
page readonly
|
|
|
|
20502313000
|
unkown
|
page read and write
|
|
|
|
255070DB000
|
heap default
|
page read and write
|
|
|
|
1B9593B000
|
unkown
|
page read and write
|
|
|
|
7FF50EB7E000
|
unkown
|
page readonly
|
|
|
|
2121B943000
|
unkown
|
page read and write
|
|
|
|
21216802000
|
unkown
|
page read and write
|
|
|
|
1CF4B44D000
|
unkown
|
page read and write
|
|
|
|
2121B82C000
|
unkown
|
page read and write
|
|
|
|
7FF567580000
|
unkown
|
page readonly
|
|
|
|
7FF5D31F3000
|
unkown
|
page readonly
|
|
|
|
2121B3C0000
|
unkown
|
page read and write
|
|
|
|
255070F7000
|
unkown
|
page read and write
|
|
|
|
13B01167000
|
unkown
|
page read and write
|
|
|
|
7FF5A3111000
|
unkown
|
page readonly
|
|
|
|
2121B370000
|
unkown
|
page readonly
|
|
|
|
20A6C300000
|
unkown
|
page read and write
|
|
|
|
7FF5E627B000
|
unkown
|
page readonly
|
|
|
|
2B3C09B0000
|
unkown
|
page read and write
|
|
|
|
7FF50F376000
|
unkown
|
page readonly
|
|
|
|
1BF6644D000
|
unkown
|
page read and write
|
|
|
|
C61F7F000
|
unkown
|
page read and write
|
|
|
|
7FF51AAA0000
|
unkown
|
page readonly
|
|
|
|
21245029000
|
unkown
|
page read and write
|
|
|
|
2121B8E8000
|
unkown
|
page read and write
|
|
|
|
7FF5D3540000
|
unkown
|
page readonly
|
|
|
|
2050223D000
|
unkown
|
page read and write
|
|
|
|
1B9637E000
|
unkown
|
page read and write
|
|
|
|
21215E70000
|
unkown
|
page readonly
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
7FF5D3070000
|
unkown
|
page readonly
|
|
|
|
2B3C0A6C000
|
unkown
|
page read and write
|
|
|
|
13B01199000
|
unkown
|
page read and write
|
|
|
|
7FF5E6195000
|
unkown
|
page readonly
|
|
|
|
7FF5E6260000
|
unkown
|
page readonly
|
|
|
|
1EB15261000
|
unkown
|
page read and write
|
|
|
|
1B9607D000
|
unkown
|
page read and write
|
|
|
|
13B01176000
|
unkown
|
page read and write
|
|
|
|
212169DD000
|
unkown
|
page read and write
|
|
|
|
7FF56B03B000
|
unkown
|
page readonly
|
|
|
|
1BF66220000
|
heap private
|
page read and write
|
|
|
|
2E96B7E000
|
unkown
|
page read and write
|
|
|
|
2121B8A0000
|
unkown
|
page read and write
|
|
|
|
17355D02000
|
unkown
|
page read and write
|
|
|
|
7FF574664000
|
unkown
|
page readonly
|
|
|
|
13B00FE0000
|
unkown
|
page read and write
|
|
|
|
255070DD000
|
heap default
|
page read and write
|
|
|
|
17356532000
|
unkown
|
page read and write
|
|
|
|
7FF585D2C000
|
unkown
|
page readonly
|
|
|
|
2121608C000
|
unkown
|
page read and write
|
|
|
|
1B961FD000
|
unkown
|
page read and write
|
|
|
|
1F4ED000000
|
unkown
|
page readonly
|
|
|
|
7FF567329000
|
unkown
|
page readonly
|
|
|
|
982A57E000
|
unkown
|
page read and write
|
|
|
|
1BF66502000
|
unkown
|
page read and write
|
|
|
|
7FF567415000
|
unkown
|
page readonly
|
|
|
|
1EB15213000
|
unkown
|
page read and write
|
|
|
|
7FF50F195000
|
unkown
|
page readonly
|
|
|
|
982A0FA000
|
unkown
|
page read and write
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
13B011AC000
|
unkown
|
page read and write
|
|
|
|
7FF5AF8AC000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F13000
|
unkown
|
page readonly
|
|
|
|
2121B8E1000
|
unkown
|
page read and write
|
|
|
|
25507100000
|
unkown
|
page read and write
|
|
|
|
7FF5D30C0000
|
unkown
|
page readonly
|
|
|
|
DBDB67F000
|
unkown
|
page read and write
|
|
|
|
3117D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AF831000
|
unkown
|
page readonly
|
|
|
|
7FF567663000
|
unkown
|
page readonly
|
|
|
|
7FF51A89B000
|
unkown
|
page readonly
|
|
|
|
13B01175000
|
unkown
|
page read and write
|
|
|
|
2121BA04000
|
unkown
|
page readonly
|
|
|
|
7FF50F298000
|
unkown
|
page readonly
|
|
|
|
13B0113F000
|
unkown
|
page read and write
|
|
|
|
212455C0000
|
unkown
|
page read and write
|
|
|
|
2121699C000
|
unkown
|
page read and write
|
|
|
|
17356940000
|
unkown
|
page readonly
|
|
|
|
1EB15281000
|
unkown
|
page read and write
|
|
|
|
7FF5AF51A000
|
unkown
|
page readonly
|
|
|
|
7FF5D3619000
|
unkown
|
page readonly
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
71CE67F000
|
unkown
|
page read and write
|
|
|
|
21216918000
|
unkown
|
page read and write
|
|
|
|
7FF5AF0A2000
|
unkown
|
page readonly
|
|
|
|
7FF5A30F8000
|
unkown
|
page readonly
|
|
|
|
205021A0000
|
unkown
|
page read and write
|
|
|
|
2121B812000
|
unkown
|
page read and write
|
|
|
|
13B01600000
|
unkown
|
page read and write
|
|
|
|
7FF542285000
|
unkown
|
page readonly
|
|
|
|
7FF5E76AC000
|
unkown
|
page readonly
|
|
|
|
E387D7E000
|
unkown
|
page read and write
|
|
|
|
2B3C0B00000
|
unkown
|
page read and write
|
|
|
|
7FF574E92000
|
unkown
|
page readonly
|
|
|
|
7FF585DB3000
|
unkown
|
page readonly
|
|
|
|
13B011A2000
|
unkown
|
page read and write
|
|
|
|
1EB15040000
|
unkown
|
page readonly
|
|
|
|
7FF5E62A4000
|
unkown
|
page readonly
|
|
|
|
2794DBA0000
|
unkown
|
page read and write
|
|
|
|
7FF5675D9000
|
unkown
|
page readonly
|
|
|
|
7FF5E756A000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8C6000
|
unkown
|
page readonly
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
13B008C6000
|
unkown
|
page read and write
|
|
|
|
7FF5E628B000
|
unkown
|
page readonly
|
|
|
|
21244F20000
|
unkown
|
page readonly
|
|
|
|
7FF5E5BBA000
|
unkown
|
page readonly
|
|
|
|
1F4EC4A0000
|
heap private
|
page read and write
|
|
|
|
7FF574F16000
|
unkown
|
page readonly
|
|
|
|
7FF50F383000
|
unkown
|
page readonly
|
|
|
|
7FF5A3135000
|
unkown
|
page readonly
|
|
|
|
21245590000
|
unkown
|
page read and write
|
|
|
|
21217000000
|
unkown
|
page readonly
|
|
|
|
13B01193000
|
unkown
|
page read and write
|
|
|
|
7FF5AF926000
|
unkown
|
page readonly
|
|
|
|
2121B3A0000
|
unkown
|
page read and write
|
|
|
|
2794D8DE000
|
unkown
|
page read and write
|
|
|
|
1F4ECE02000
|
unkown
|
page read and write
|
|
|
|
13B01602000
|
unkown
|
page read and write
|
|
|
|
DBDB47E000
|
unkown
|
page read and write
|
|
|
|
21216A80000
|
unkown
|
page read and write
|
|
|
|
1BF66280000
|
heap default
|
page read and write
|
|
|
|
2121B4C8000
|
unkown
|
page read and write
|
|
|
|
7FF5D2F8B000
|
unkown
|
page readonly
|
|
|
|
7FF51AA8F000
|
unkown
|
page readonly
|
|
|
|
2121B7A4000
|
unkown
|
page readonly
|
|
|
|
71CDF7C000
|
unkown
|
page read and write
|
|
|
|
1B960FE000
|
unkown
|
page read and write
|
|
|
|
7FF5E7726000
|
unkown
|
page readonly
|
|
|
|
7FF51AB01000
|
unkown
|
page readonly
|
|
|
|
7FF574A2C000
|
unkown
|
page readonly
|
|
|
|
13B00813000
|
unkown
|
page read and write
|
|
|
|
7FF5D3108000
|
unkown
|
page readonly
|
|
|
|
7FF5E7685000
|
unkown
|
page readonly
|
|
|
|
7FF5AF8B2000
|
unkown
|
page readonly
|
|
|
|
7FF574E40000
|
unkown
|
page readonly
|
|
|
|
1F4ECC80000
|
unkown
|
page readonly
|
|
|
|
2B3C0A9B000
|
unkown
|
page read and write
|
|
|
|
982A2FE000
|
unkown
|
page read and write
|
|
|
|
2121B4C1000
|
unkown
|
page read and write
|
|
|
|
7FF5E76C4000
|
unkown
|
page readonly
|
|
|
|
13B01132000
|
unkown
|
page read and write
|
|
|
|
E3882FF000
|
unkown
|
page read and write
|
|
|
|
205021D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E763F000
|
unkown
|
page readonly
|
|
|
|
A8F597D000
|
unkown
|
page read and write
|
|
|
|
13B011A1000
|
unkown
|
page read and write
|
|
|
|
7FF50F2FC000
|
unkown
|
page readonly
|
|
|
|
7FF5422B6000
|
unkown
|
page readonly
|
|
|
|
2121B7D0000
|
unkown
|
page read and write
|
|
|
|
2794D8DB000
|
heap default
|
page read and write
|
|
|
|
7FF51AA98000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F52000
|
unkown
|
page readonly
|
|
|
|
2E96FFE000
|
unkown
|
page read and write
|
|
|
|
7FF56B09C000
|
unkown
|
page readonly
|
|
|
|
A8F5EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5422A2000
|
unkown
|
page readonly
|
|
|
|
7FF5E6155000
|
unkown
|
page readonly
|
|
|
|
13B00850000
|
unkown
|
page read and write
|
|
|
|
2121699D000
|
unkown
|
page read and write
|
|
|
|
20503D40000
|
unkown
|
page write copy
|
|
|
|
2121B4C4000
|
unkown
|
page read and write
|
|
|
|
7FF574CEF000
|
unkown
|
page readonly
|
|
|
|
13B011B0000
|
unkown
|
page read and write
|
|
|
|
1CF4B600000
|
unkown
|
page readonly
|
|
|
|
7FF5D2F25000
|
unkown
|
page readonly
|
|
|
|
1EB1525F000
|
unkown
|
page read and write
|
|
|
|
2B3C0A50000
|
unkown
|
page read and write
|
|
|
|
7FF5AF84C000
|
unkown
|
page readonly
|
|
|
|
7FF542215000
|
unkown
|
page readonly
|
|
|
|
2121B4CB000
|
unkown
|
page read and write
|
|
|
|
2121B8CB000
|
unkown
|
page read and write
|
|
|
|
21216D00000
|
unkown
|
page read and write
|
|
|
|
7FF5E6383000
|
unkown
|
page readonly
|
|
|
|
13B007E0000
|
unkown
|
page readonly
|
|
|
|
7FF51AB83000
|
unkown
|
page readonly
|
|
|
|
1B95F7E000
|
unkown
|
page read and write
|
|
|
|
C6217C000
|
unkown
|
page read and write
|
|
|
|
2121B4C5000
|
unkown
|
page read and write
|
|
|
|
7FF5E7492000
|
unkown
|
page readonly
|
|
|
|
982A6FE000
|
unkown
|
page read and write
|
|
|
|
2121B620000
|
unkown
|
page read and write
|
|
|
|
20A6CC00000
|
unkown
|
page readonly
|
|
|
|
13B00FE0000
|
unkown
|
page read and write
|
|
|
|
7FF574F23000
|
unkown
|
page readonly
|
|
|
|
7FF50F306000
|
unkown
|
page readonly
|
|
|
|
13B01100000
|
unkown
|
page read and write
|
|
|
|
13B011C7000
|
unkown
|
page read and write
|
|
|
|
13B01162000
|
unkown
|
page read and write
|
|
|
|
7FF5E769C000
|
unkown
|
page readonly
|
|
|
|
2050222A000
|
unkown
|
page read and write
|
|
|
|
7FF585A38000
|
unkown
|
page readonly
|
|
|
|
2B3C0CD0000
|
unkown
|
page readonly
|
|
|
|
21216908000
|
unkown
|
page read and write
|
|
|
|
20A6C930000
|
unkown
|
page read and write
|
|
|
|
7FF57465E000
|
unkown
|
page readonly
|
|
|
|
2121B610000
|
unkown
|
page read and write
|
|
|
|
13B01151000
|
unkown
|
page read and write
|
|
|
|
7FF5D31DC000
|
unkown
|
page readonly
|
|
|
|
1F4EC66F000
|
unkown
|
page read and write
|
|
|
|
21245002000
|
unkown
|
page read and write
|
|
|
|
13B01153000
|
unkown
|
page read and write
|
|
|
|
3117677000
|
unkown
|
page read and write
|
|
|
|
2121B8E3000
|
unkown
|
page read and write
|
|
|
|
3117AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5D2DC2000
|
unkown
|
page readonly
|
|
|
|
2B3C0A9E000
|
unkown
|
page read and write
|
|
|
|
1F4EC602000
|
unkown
|
page read and write
|
|
There are 1321 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://mailbuk50.s3.jp-osa.cloud-object-storage.appdomain.cloud/hebetate/login.html?tbuif=sHBcor3ZWsDXGbZ&eortgt=gO8AAWZRfi7ClGh&izrjqburft=2jN9OaUtQbOToDiD2&welygot=BSnCu4Pw8wRPJF9qJXebOTu3bF3hjV&axhrm=vYn7eCukD52W8boRtlM7yT8&floywhix=2pHOlZLUuTVAcbQ7El9YY&ajm=t3pKqCucGSJH2hNfMr9aVBP5CWa&gid=ToojiO2cjpBvMOP1h7S
|
|
|
|
https://signup.live.com/signup?ru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26response_type%3dcode%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26scope%3dopenid%2bprofile%2bemail%2boffline_access%26response_mode%3dform_post%26redirect_uri%3dhttps%253a%252f%252flogin.microsoftonline.com%252fcommon%252ffederation%252foauth2%26state%3drQIIAYWSO2_TUABG47QNtOItBsSAOjAgkNPre_2IIyHhxEmTJo7zsOvYi2UnfuVhp44dOxETLAxIMHeDASFgQiAhJuZKSGwgFlbEhBADGxT-AMsZvjN-Z-sEnafzIA-urxF5oniVRCRlMCaLswaNcJIlAG6QkMYRhWgEATGkAAovbJ3r3Ln3-vaNj7ful35-enD594tDbFOfeAsrPwimz7ArbhTN5sWdnSRJ8oFte4N_Ymdi-EPPd95g2AcM-4phh9kNy8fl3rPsnEYMoliaoQjAQAhZAPOaJKQqFBJR4iJ1KhCaB4CqqGlTqRxv9UjY7U4E2IHirjbV-EEiKDJqKfVUU4RIHe176hIAUVGXTclJRd6JBF6AmqQSrdE4EVZ19Dl7VuTiyIV_EYTeyvqR3bSDcKrPgnl0uPY8u-rOO6bqr6yewFMsQxpdvxFynE60XbO7X476HjoQpm7VWUbGEmdDhtGjJVUd9GtKXA_50N3nwiBI-0bS7uEHtNlolFtjRE8WNrk7phdWrU3ynGkoiRn4U9mMyWadcZqGw1eVAy2lR31aTkVN1r1-OeCFg2QRJAnpkIzKOMG8AyaVVVreowg9xR2Zr01hEzfnfBssxwHuV0BvIboDJwVwUGuMQ8ZxZcEsN1m9MEQFX5NGQ6XJeWy1W2qD0mxhU4G9VyposYuq3WTVUHflhSXLZivq-a4y5-KJgNdQFDsMO7SYZm1UsyS0KnE62ZMKtPNyLXf88DTwj9bOBDPL94bbszCwvYn1YR37tn7qZO5c7lJmO3PtIjjzax17vHEc0dP3XzbY5ZPy3UekHcmvMkcbOyq_Qou-VQFSTE3SAjKBMqLL7mxPrcRLUYyHHdZGzn4dAO4mUSQe5rCHudxR7nyd11sVqSdxLZ7r8lAH33PYvROZt5v_SfHz1kUIIMABixPMNgRFgihSQHt3OvMH0%26estsfed%3d1%26lw%3d1%26fl%3deasi2%26fci%3d4345a7b9-9a63-4910-a426-35363201d503%26mkt%3den-US%26uaid%3db58882512b7c40d78c42f4d88f1affac%26mssupv%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=b58882512b7c40d78c42f4d88f1affac&suc=4345a7b9-9a63-4910-a426-35363201d503&lic=1
|
|