IOCReport

loading gif

Files

File Path
Type
Category
Malicious
https://login-microsoftsecureviewer0937464528283770090.mybluemix.net/?https://login.microsoftonline.com/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https://www.office.com/landing&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637583272664519482.NzNjMmViYWMtOWZkYi00MmE1LTg5YmUtMzE4ZjNiNzUwYjhhMGU2OTE5YTYtYzQ1Ny00MGViLWJiOWQtZWQ5OGJhMmMzYThj&ui_locales=en-US&mkt=en-US&client-request-id=f9db538e-88c5-40c1-88d7-118712f78e38&state=vZXka_A_Wp_W-Y2mzlqo5k-F2ph0jsWAzk1y2jXmwmjBer6lswkBW1wouW5dO2YDMK5vrArRoeV-xS9zvCFcILNQUL3ne7mzj4c68JSqSWddFx2UvOwex6voCODBEiYaOemcwjXn7K0gMTubQoYWyKB49cB9wL2Ns1Cg9lAHcb6I_zlBkghGSq7wOQGhat8n9dkDuyaSKfStMxFupenekYq2tNYnLVGqEkSEccCa9hIMFjf4nUeUBJi6tmPfk840JBk7DOmqUszENZPe0ZOHuA&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.8.0.0#
URL
initial url
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\4ff7ac31-7db4-4474-8b64-2af070be74c5.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\5b20c907-dd68-4cd6-bd40-04d32b5aa242.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\8f0c3027-f3c9-4a12-a428-f00a7a957e5b.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0992dd96-2766-4070-948b-9b61821182a3.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6792a09f-17d7-429a-b680-3487631a85da.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9e10a215-963e-4bcb-981d-c5a5a167d3fd.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old.. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3f05bbd85ff6ba07_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-indexke (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.olds1 (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.oldl (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldp (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session._ (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsh_ (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences9 (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\81eb0d7c-7de5-4694-8843-963a755d70b1.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\331ec2a9-7163-4b92-b5a0-5c1ad516e2af.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State.. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old.c (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\Chrome Web Store Payments.ico. (copy)
MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\Chrome Web Store Payments.ico.md5
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\c2c7dcc3-bf2d-42c1-874c-9c263c86da10.tmp
MS Windows icon resource - 13 icons, 8x8, 32 bits/pixel, 10x10, 32 bits/pixel
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a161d6e2-e2c7-4599-aba1-f6460e3b144c.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a24a0cb0-6885-4118-b67c-662687a00b5e.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTTM (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old8 (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e61cc4f7-aa6c-4b15-ab20-39ab77707434.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f43ba6cb-0031-46db-8a74-26b4d6776d82.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old3 (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State, (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache4. (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\fedd46b0-657e-4042-b79f-42ee63684768.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\25dc00f4-f181-42db-850c-0cf862980824.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\4c94729a-77f1-412e-a9df-c8fe544d6879.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\4dd8fc8f-d621-42df-83d1-5fca67903bde.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\5676298d-f528-45da-b6fe-17ec33eb51f4.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\8c35d1ad-c76b-4c25-b778-de9cd8ba85ec.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\bab69f19-454b-489a-b8d3-4e1338d57440.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\5676298d-f528-45da-b6fe-17ec33eb51f4.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1202972981\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ml\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\mr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ms\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\nl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\pt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\sw\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\ta\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\te\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\zh\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\CRX_INSTALL\manifest.json
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1284269172\bab69f19-454b-489a-b8d3-4e1338d57440.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\4c94729a-77f1-412e-a9df-c8fe544d6879.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir6936_1986461416\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
There are 240 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://login-microsoftsecureviewer0937464528283770090.mybluemix.net/?https://login.microsoftonline.com/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https://www.office.com/landing&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637583272664519482.NzNjMmViYWMtOWZkYi00MmE1LTg5YmUtMzE4ZjNiNzUwYjhhMGU2OTE5YTYtYzQ1Ny00MGViLWJiOWQtZWQ5OGJhMmMzYThj&ui_locales=en-US&mkt=en-US&client-request-id=f9db538e-88c5-40c1-88d7-118712f78e38&state=vZXka_A_Wp_W-Y2mzlqo5k-F2ph0jsWAzk1y2jXmwmjBer6lswkBW1wouW5dO2YDMK5vrArRoeV-xS9zvCFcILNQUL3ne7mzj4c68JSqSWddFx2UvOwex6voCODBEiYaOemcwjXn7K0gMTubQoYWyKB49cB9wL2Ns1Cg9lAHcb6I_zlBkghGSq7wOQGhat8n9dkDuyaSKfStMxFupenekYq2tNYnLVGqEkSEccCa9hIMFjf4nUeUBJi6tmPfk840JBk7DOmqUszENZPe0ZOHuA&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.8.0.0#'
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1656,9430946587879938932,5453986757438409966,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1716 /prefetch:8
clean

URLs

Name
IP
Malicious
https://logincdn.msauth.net/16.000/Converged_v21033_-0mnSwu67knBd7qR7YN9GQ2.css
192.229.221.185
 clean
https://logincdn.msauth.net/16.000.28666.10/images/favicon.ico
192.229.221.185
 clean
https://dns.google
unknown
 clean
https://ogs.google.com
unknown
 clean
https://support.google.com/chromecast/troubleshooter/2995236
unknown
 clean
https://play.google.com
unknown
 clean
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
216.58.215.237
 clean
https://payments.google.com/payments/v4/js/integrator.js
unknown
 clean
https://www.google.com;
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=SavYdj8oubNNJdix5igEqwWrt6K2wGyeWogXR1mBxjUlbh07nZ6YN1MH%2B
unknown
 clean
https://hangouts.google.com/
unknown
 clean
https://mybluemix.net/s
unknown
 clean
https://logincdn.msauth.net/16.000.28666.10/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
192.229.221.185
 clean
https://sandbox.google.com/payments/v4/js/integrator.js
unknown
 clean
https://logincdn.msauth.net/16.000.28666.10/content/images/ellipsis_635a63d500a92a0b8497cdc58d0f66b1.svg
192.229.221.185
 clean
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
172.217.168.78
 clean
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
172.217.168.33
 clean
https://www.google.com
unknown
 clean
https://accounts.google.com
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js
104.16.19.94
 clean
https://support.google.com/chromecast/answer/2998456
unknown
 clean
https://login-microsoftsecureviewer0937464528283770090.mybluemix.net/?https://login.microsoftonline.
unknown
 clean
https://clients2.googleusercontent.com
unknown
 clean
https://apis.google.com
unknown
 clean
https://logincdn.msauth.net/16.000.28666.10/content/images/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg
192.229.221.185
 clean
https://www.google.com/
unknown
 clean
https://feedback.googleusercontent.com
unknown
 clean
https://logincdn.msauth.net/shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg
192.229.221.185
 clean
https://logincdn.msauth.net/16.000/Converged_v21033_5plpI1P0_uKjrokWdqCoBw2.css
192.229.221.185
 clean
https://clients2.google.com
unknown
 clean
https://clients2.google.com/service/update2/crx
unknown
 clean
There are 21 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
accounts.google.com
216.58.215.237
 clean
login-microsoftsecureviewer0937464528283770090.mybluemix.net
169.47.124.22
 clean
cdnjs.cloudflare.com
104.16.19.94
 clean
cs1227.wpc.alphacdn.net
192.229.221.185
 clean
clients.l.google.com
172.217.168.78
 clean
googlehosted.l.googleusercontent.com
172.217.168.33
 clean
logincdn.msauth.net
unknown
 clean
clients2.googleusercontent.com
unknown
 clean
clients2.google.com
unknown
 clean

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
216.58.215.237
accounts.google.com
United States
clean
169.47.124.22
login-microsoftsecureviewer0937464528283770090.mybluemix.net
United States
clean
192.168.2.6
unknown
unknown
clean
192.168.2.5
unknown
unknown
clean
172.217.168.78
clients.l.google.com
United States
clean
239.255.255.250
unknown
Reserved
clean
192.229.221.185
cs1227.wpc.alphacdn.net
United States
clean
172.217.168.33
googlehosted.l.googleusercontent.com
United States
clean
6.8.0.0
unknown
United States
clean
104.16.19.94
cdnjs.cloudflare.com
United States
clean
127.0.0.1
unknown
unknown
clean
There are 2 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
S-1-5-21-3853321935-2125563209-4053062332-1002
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
ahfgeienlihckogmohjhadlkjgocpleb
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gdaefkejpgkiemlaofpalmlakkmbjdnl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
kmendfapggjehodndflmmgagdbamhnfd
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mfehgcgbbipciphmccgaenjidiccnmng
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
mhjfbmdgcfjbbpaeojofohoefgiehjai
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
neajdppkdcdipfabeoofebfddakdcjhd
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nkeimhogjdpnpccoofpliimaahmaaome
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
nmmhkkegccagdldgiimedpiccmgmieda
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
StatusCodes
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
state
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
dr
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.reporting
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
module_blacklist_cache_md5_digest
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
media.storage_id_salt
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_account_id
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.account_id
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_seed
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_homepage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
default_search_provider_data.template_url_data
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
safebrowsing.incidents_sent
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
pinned_tabs
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
search_provider_overrides
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_default_search
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
prefs.preference_reset_time
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
google.services.last_username
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.startup_urls
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
session.restore_on_startup
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
software_reporter.prompt_version
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.last_triggered_for_startup_urls
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
settings_reset_prompt.prompt_wave
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
homepage_is_newtabpage
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
browser.show_home_button
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
user_experience_metrics.stability.exited_cleanly
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
lastrun
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
GlobalAssocChangedCounter
 clean
There are 35 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
DE21DFD000
unkown
page read and write
 clean
7FF4F9A7B000
unkown image
page readonly
 clean
B22CB3B000
unkown
page read and write
 clean
DE2195F000
unkown
page read and write
 clean
7FF5822B6000
unkown image
page readonly
 clean
1E530B60000
unkown
page read and write
 clean
2319BCED000
unkown
page read and write
 clean
7FF561802000
unkown image
page readonly
 clean
DE21CF9000
unkown
page read and write
 clean
7FF581FB7000
unkown image
page readonly
 clean
1E530C4E000
heap default
page read and write
 clean
B22CE7F000
unkown
page read and write
 clean
2319C2E0000
unkown
page read and write
 clean
7DF50EBE0000
unkown image
page readonly
 clean
7FF4F9636000
unkown image
page readonly
 clean
7DF50EBF0000
unkown image
page readonly
 clean
7FF5614C4000
unkown image
page readonly
 clean
7FF581DB2000
unkown image
page readonly
 clean
1A2EB670000
unkown image
page readonly
 clean
2319C54A000
unkown
page read and write
 clean
7DF54FEC0000
unkown image
page readonly
 clean
7FF4F9AE9000
unkown image
page readonly
 clean
7FF53ABE3000
unkown image
page readonly
 clean
24904C29000
unkown
page read and write
 clean
7DF54FED0000
unkown image
page readonly
 clean
7FF4F9645000
unkown image
page readonly
 clean
7FF53AD2A000
unkown image
page readonly
 clean
7DF54FEC2000
unkown image
page readonly
 clean
7DF44DD80000
unkown image
page readonly
 clean
DE21C7F000
unkown
page read and write
 clean
7DF5973B2000
unkown image
page readonly
 clean
2319C2E0000
unkown
page read and write
 clean
2319C56B000
unkown
page read and write
 clean
7FF53A915000
unkown image
page readonly
 clean
7DF5973C2000
unkown image
page readonly
 clean
390E9AE000
unkown
page read and write
 clean
24904C56000
unkown
page read and write
 clean
2319BC3C000
unkown
page read and write
 clean
7FF582040000
unkown image
page readonly
 clean
7FF5820EA000
unkown image
page readonly
 clean
7FF53A5C4000
unkown image
page readonly
 clean
7FF582081000
unkown image
page readonly
 clean
1A2EB85A000
unkown
page read and write
 clean
24904A80000
unkown image
page readonly
 clean
7FF582284000
unkown image
page readonly
 clean
24904A30000
unkown image
page read and write
 clean
7DF54FEB0000
unkown image
page readonly
 clean
7DF50EC00000
unkown image
page readonly
 clean
B22D07B000
unkown
page read and write
 clean
79A3DFF000
unkown
page read and write
 clean
7FF4F9931000
unkown image
page readonly
 clean
24904C7D000
unkown
page read and write
 clean
1E531030000
unkown image
page readonly
 clean
1E530B80000
unkown
page read and write
 clean
7FF582121000
unkown image
page readonly
 clean
7FF561754000
unkown image
page readonly
 clean
B22D37F000
unkown
page read and write
 clean
7FF53AB91000
unkown image
page readonly
 clean
2319BBE0000
unkown image
page readonly
 clean
7FF561764000
unkown image
page readonly
 clean
7FF5821AC000
unkown image
page readonly
 clean
2319BC70000
unkown
page read and write
 clean
7FF4F9ABA000
unkown image
page readonly
 clean
1E5311B0000
unkown image
page readonly
 clean
7FF58229F000
unkown image
page readonly
 clean
24904D00000
unkown
page read and write
 clean
7FF4F9AA7000
unkown image
page readonly
 clean
7DF576882000
unkown image
page readonly
 clean
1A2EB85D000
unkown
page read and write
 clean
7FF53ACA4000
unkown image
page readonly
 clean
B22CBBF000
unkown
page read and write
 clean
390EE7B000
unkown
page read and write
 clean
7FF4F996E000
unkown image
page readonly
 clean
7FF4F99BD000
unkown image
page readonly
 clean
7FF53ADAE000
unkown image
page readonly
 clean
1A2EBC00000
unkown image
page readonly
 clean
7FF53AD8A000
unkown image
page readonly
 clean
7FF53AAB7000
unkown image
page readonly
 clean
7DF54FEB2000
unkown image
page readonly
 clean
7FF58223A000
unkown image
page readonly
 clean
7FF53A900000
unkown image
page readonly
 clean
79A3AF8000
unkown
page read and write
 clean
7FF4F9ACF000
unkown image
page readonly
 clean
1E530BB0000
unkown image
page readonly
 clean
7FF58224B000
unkown image
page readonly
 clean
7FF4F9AED000
unkown image
page readonly
 clean
2319C2F0000
unkown image
page read and write
 clean
7FF4F9ADE000
unkown image
page readonly
 clean
2319BCFA000
unkown
page read and write
 clean
7FF4F9B54000
unkown image
page readonly
 clean
7FF56175A000
unkown image
page readonly
 clean
7FF4F9824000
unkown image
page readonly
 clean
7FF58220F000
unkown image
page readonly
 clean
7FF4F9A70000
unkown image
page readonly
 clean
1A2EB88D000
unkown
page read and write
 clean
7FF582193000
unkown image
page readonly
 clean
7DF576892000
unkown image
page readonly
 clean
7FF53ADB9000
unkown image
page readonly
 clean
7FF5821A4000
unkown image
page readonly
 clean
390F0FF000
unkown
page read and write
 clean
7FF53AD84000
unkown image
page readonly
 clean
7DF50EBE2000
unkown image
page readonly
 clean
2319C402000
unkown
page read and write
 clean
24905180000
unkown image
page readonly
 clean
7FF53AE2A000
unkown image
page readonly
 clean
1A2EB800000
unkown
page read and write
 clean
7FF581E55000
unkown image
page readonly
 clean
390ED7B000
unkown
page read and write
 clean
2319BA90000
unkown image
page readonly
 clean
79A367F000
unkown
page read and write
 clean
1E530C20000
heap default
page read and write
 clean
24904C00000
unkown
page read and write
 clean
1E530A30000
unkown image
page read and write
 clean
7FF4F98C1000
unkown image
page readonly
 clean
7DF5768A0000
unkown image
page readonly
 clean
1A2EB86E000
unkown
page read and write
 clean
7FF53AE31000
unkown image
page readonly
 clean
2319C190000
unkown image
page readonly
 clean
2319C2E0000
unkown
page read and write
 clean
7FF53A5CA000
unkown image
page readonly
 clean
2319BCF0000
unkown
page read and write
 clean
79A3BFF000
unkown
page read and write
 clean
7DF5973C2000
unkown image
page readonly
 clean
7FF4F99D4000
unkown image
page readonly
 clean
24904D02000
unkown
page read and write
 clean
1A2EB650000
unkown image
page read and write
 clean
2319BD02000
unkown
page read and write
 clean
7FF4F9B5A000
unkown image
page readonly
 clean
2319BA70000
unkown image
page readonly
 clean
2319BA70000
unkown image
page readonly
 clean
2319BCA1000
unkown
page read and write
 clean
2319C180000
unkown image
page readonly
 clean
7DF5973D0000
unkown image
page readonly
 clean
2319BCBF000
unkown
page read and write
 clean
7FF582332000
unkown image
page readonly
 clean
7FF4F9A5C000
unkown image
page readonly
 clean
7DF54FEB0000
unkown image
page readonly
 clean
7FF53AC93000
unkown image
page readonly
 clean
2319BCF0000
unkown
page read and write
 clean
7FF4F9A6E000
unkown image
page readonly
 clean
24904C27000
unkown
page read and write
 clean
7DF576890000
unkown image
page readonly
 clean
7FF4F9A87000
unkown image
page readonly
 clean
24904D08000
unkown
page read and write
 clean
7FF581E15000
unkown image
page readonly
 clean
7DF54FED0000
unkown image
page readonly
 clean
7FF581DAE000
unkown image
page readonly
 clean
7DF5973B0000
unkown image
page readonly
 clean
7FF4F9AE6000
unkown image
page readonly
 clean
2319BCDA000
unkown
page read and write
 clean
24904C13000
unkown
page read and write
 clean
7FF58222C000
unkown image
page readonly
 clean
7DF50EBE2000
unkown image
page readonly
 clean
7FF561067000
unkown image
page readonly
 clean
1A2EB690000
unkown image
page readonly
 clean
7FF582214000
unkown image
page readonly
 clean
7FF581B93000
unkown image
page readonly
 clean
24904A40000
heap private
page read and write
 clean
2319BC83000
unkown
page read and write
 clean
7FF582148000
unkown image
page readonly
 clean
1A2EB83C000
unkown
page read and write
 clean
1A2EB670000
unkown image
page readonly
 clean
7FF4F9A9F000
unkown image
page readonly
 clean
7FF53AD6C000
unkown image
page readonly
 clean
7FF582331000
unkown image
page readonly
 clean
24904C3C000
unkown
page read and write
 clean
2319BBC0000
unkown
page read and write
 clean
2319BCE3000
unkown
page read and write
 clean
7FF53AD94000
unkown image
page readonly
 clean
1A2EB6C0000
heap default
page read and write
 clean
7FF582091000
unkown image
page readonly
 clean
7FF58220B000
unkown image
page readonly
 clean
7FF581E57000
unkown image
page readonly
 clean
7FF4F9951000
unkown image
page readonly
 clean
7DF474750000
unkown image
page readonly
 clean
7FF581AC4000
unkown image
page readonly
 clean
7FF53AD3A000
unkown image
page readonly
 clean
1E530A70000
unkown image
page readonly
 clean
7FF582277000
unkown image
page readonly
 clean
1A2EB85F000
unkown
page read and write
 clean
79A37FC000
unkown
page read and write
 clean
2319BA50000
unkown image
page read and write
 clean
7FF58226F000
unkown image
page readonly
 clean
7FF5822AE000
unkown image
page readonly
 clean
7FF4F9AB4000
unkown image
page readonly
 clean
24904A70000
unkown image
page readonly
 clean
7FF53ADA8000
unkown image
page readonly
 clean
7DF50EC00000
unkown image
page readonly
 clean
7FF56171B000
unkown image
page readonly
 clean
7FF4F9AC4000
unkown image
page readonly
 clean
7FF53AC8D000
unkown image
page readonly
 clean
7FF582324000
unkown image
page readonly
 clean
1A2EB6A0000
unkown image
page readonly
 clean
7FF58221F000
unkown image
page readonly
 clean
1E5311C0000
unkown image
page readonly
 clean
7FF4F9913000
unkown image
page readonly
 clean
7FF56176E000
unkown image
page readonly
 clean
1E530C2B000
heap default
page read and write
 clean
24904A50000
unkown image
page readonly
 clean
1A2EB900000
unkown
page read and write
 clean
2319C500000
unkown
page read and write
 clean
1A2EB7C0000
unkown
page read and write
 clean
2319BCC6000
unkown
page read and write
 clean
7FF53AD77000
unkown image
page readonly
 clean
7FF582245000
unkown image
page readonly
 clean
1A2EB875000
unkown
page read and write
 clean
7FF58228A000
unkown image
page readonly
 clean
2319BC29000
unkown
page read and write
 clean
1A2EBA00000
unkown image
page readonly
 clean
7DF5973C0000
unkown image
page readonly
 clean
7FF53AD9F000
unkown image
page readonly
 clean
7DF54FEB2000
unkown image
page readonly
 clean
7FF53AC01000
unkown image
page readonly
 clean
7FF5821E0000
unkown image
page readonly
 clean
1A2EC002000
unkown
page read and write
 clean
7FF4F9A75000
unkown image
page readonly
 clean
7FF53AD2C000
unkown image
page readonly
 clean
2319BAA0000
unkown image
page readonly
 clean
7FF561778000
unkown image
page readonly
 clean
7FF581E06000
unkown image
page readonly
 clean
7FF4F9630000
unkown image
page readonly
 clean
1E530E20000
heap private
page read and write
 clean
7FF5617F4000
unkown image
page readonly
 clean
7DF50EBE0000
unkown image
page readonly
 clean
1E530E25000
heap private
page read and write
 clean
7FF4F99C3000
unkown image
page readonly
 clean
7FF581E00000
unkown image
page readonly
 clean
DE219DF000
unkown
page read and write
 clean
2319BC13000
unkown
page read and write
 clean
79A36FE000
unkown
page read and write
 clean
7DF50EBF0000
unkown image
page readonly
 clean
1E530E30000
unkown image
page readonly
 clean
7FF53AC21000
unkown image
page readonly
 clean
7FF581D1E000
unkown image
page readonly
 clean
24905000000
unkown image
page readonly
 clean
7FF4F92F4000
unkown image
page readonly
 clean
7FF582076000
unkown image
page readonly
 clean
7FF53AD4B000
unkown image
page readonly
 clean
7FF5822B9000
unkown image
page readonly
 clean
7FF56178D000
unkown image
page readonly
 clean
7FF58223E000
unkown image
page readonly
 clean
7FF5821F3000
unkown image
page readonly
 clean
7FF582257000
unkown image
page readonly
 clean
7FF561715000
unkown image
page readonly
 clean
7FF561063000
unkown image
page readonly
 clean
7FF53AE24000
unkown image
page readonly
 clean
7FF5820E3000
unkown image
page readonly
 clean
24904C4A000
unkown
page read and write
 clean
2319BC00000
unkown
page read and write
 clean
2319C510000
unkown
page read and write
 clean
390EEFE000
unkown
page read and write
 clean
7FF4F9B62000
unkown image
page readonly
 clean
B22D27F000
unkown
page read and write
 clean
79A3D7F000
unkown
page read and write
 clean
2319BAC0000
heap default
page read and write
 clean
1A2EB86E000
unkown
page read and write
 clean
2319BCA8000
unkown
page read and write
 clean
2319BD13000
unkown
page read and write
 clean
7FF561801000
unkown image
page readonly
 clean
7FF53AD3E000
unkown image
page readonly
 clean
1E530BD0000
unkown image
page read and write
 clean
24904AA0000
heap default
page read and write
 clean
7FF53AD6F000
unkown image
page readonly
 clean
7DF50EBF2000
unkown image
page readonly
 clean
7FF581FF4000
unkown image
page readonly
 clean
7FF582143000
unkown image
page readonly
 clean
7FF561748000
unkown image
page readonly
 clean
7DF495280000
unkown image
page readonly
 clean
7FF581B97000
unkown image
page readonly
 clean
1A2EBD80000
unkown image
page readonly
 clean
390EFF7000
unkown
page read and write
 clean
24904C71000
unkown
page read and write
 clean
7FF53AAF4000
unkown image
page readonly
 clean
79A33CB000
unkown
page read and write
 clean
1A2EB829000
unkown
page read and write
 clean
7FF4F9A5A000
unkown image
page readonly
 clean
7FF582074000
unkown image
page readonly
 clean
7FF561710000
unkown image
page readonly
 clean
1E530A50000
unkown image
page readonly
 clean
24904BA0000
unkown
page read and write
 clean
7FF58213B000
unkown image
page readonly
 clean
1A2EB908000
unkown
page read and write
 clean
7FF4F99DC000
unkown image
page readonly
 clean
7FF56173F000
unkown image
page readonly
 clean
1A2EB660000
heap private
page read and write
 clean
79A3CFB000
unkown
page read and write
 clean
7DF576890000
unkown image
page readonly
 clean
7FF4F97E7000
unkown image
page readonly
 clean
7FF53A906000
unkown image
page readonly
 clean
1A2EB902000
unkown
page read and write
 clean
7DF576882000
unkown image
page readonly
 clean
24904E00000
unkown image
page readonly
 clean
7FF56177E000
unkown image
page readonly
 clean
7FF53ADBD000
unkown image
page readonly
 clean
7FF581ACA000
unkown image
page readonly
 clean
7FF5822A8000
unkown image
page readonly
 clean
2319CA00000
unkown
page read and write
 clean
7FF53ADB6000
unkown image
page readonly
 clean
7FF581DA2000
unkown image
page readonly
 clean
2319BA60000
heap private
page read and write
 clean
7FF4F9A6A000
unkown image
page readonly
 clean
2319BC8A000
unkown
page read and write
 clean
1A2EB864000
unkown
page read and write
 clean
7FF582006000
unkown image
page readonly
 clean
DE21D7F000
unkown
page read and write
 clean
1A2EB913000
unkown
page read and write
 clean
7FF56173C000
unkown image
page readonly
 clean
2319BCC3000
unkown
page read and write
 clean
7FF581B42000
unkown image
page readonly
 clean
7FF53AD57000
unkown image
page readonly
 clean
1A2EB881000
unkown
page read and write
 clean
7DF50EBF2000
unkown image
page readonly
 clean
79A39F7000
unkown
page read and write
 clean
B22D177000
unkown
page read and write
 clean
7FF4F9AD8000
unkown image
page readonly
 clean
DE218DA000
unkown
page read and write
 clean
7FF581FFB000
unkown image
page readonly
 clean
24904C50000
unkown
page read and write
 clean
7FF53AC3E000
unkown image
page readonly
 clean
24904B80000
unkown image
page readonly
 clean
2319C270000
unkown image
page write copy
 clean
7FF53AC3B000
unkown image
page readonly
 clean
7DF5973B0000
unkown image
page readonly
 clean
7FF58232A000
unkown image
page readonly
 clean
7FF582294000
unkown image
page readonly
 clean
24905402000
unkown
page read and write
 clean
24904C88000
unkown
page read and write
 clean
7DF576892000
unkown image
page readonly
 clean
7FF4F996B000
unkown image
page readonly
 clean
7FF5821E2000
unkown image
page readonly
 clean
7FF4F92FA000
unkown image
page readonly
 clean
7FF53AD40000
unkown image
page readonly
 clean
7DF5973B2000
unkown image
page readonly
 clean
1A2EB858000
unkown
page read and write
 clean
7DF5973C0000
unkown image
page readonly
 clean
2319BE00000
unkown image
page readonly
 clean
7DF5973D0000
unkown image
page readonly
 clean
7FF58218D000
unkown image
page readonly
 clean
7FF53AD45000
unkown image
page readonly
 clean
2319C572000
unkown
page read and write
 clean
7DF576880000
unkown image
page readonly
 clean
2319BCAC000
unkown
page read and write
 clean
7FF4F9A9C000
unkown image
page readonly
 clean
390E92B000
unkown
page read and write
 clean
7FF582240000
unkown image
page readonly
 clean
1A2EB813000
unkown
page read and write
 clean
390EC7E000
unkown
page read and write
 clean
1A2EB7A0000
unkown image
page readonly
 clean
7FF53ACAC000
unkown image
page readonly
 clean
390F1FE000
unkown
page read and write
 clean
79A38F7000
unkown
page read and write
 clean
7DF5768A0000
unkown image
page readonly
 clean
7DF54FEC0000
unkown image
page readonly
 clean
7DF576880000
unkown image
page readonly
 clean
7FF561789000
unkown image
page readonly
 clean
24904A50000
unkown image
page readonly
 clean
7FF58222A000
unkown image
page readonly
 clean
2319C000000
unkown image
page readonly
 clean
7DF54FEC2000
unkown image
page readonly
 clean
1E530A50000
unkown image
page readonly
 clean
2319C512000
unkown
page read and write
 clean
2319C515000
unkown
page read and write
 clean
2319BBA0000
unkown image
page readonly
 clean
7DF40CAB0000
unkown image
page readonly
 clean
7FF53AE32000
unkown image
page readonly
 clean
7FF4F9B61000
unkown image
page readonly
 clean
24904D13000
unkown
page read and write
 clean
7FF58226C000
unkown image
page readonly
 clean
2319BCB2000
unkown
page read and write
 clean
7FF5617FA000
unkown image
page readonly
 clean
1E530BC0000
unkown image
page readonly
 clean
There are 361 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://login-microsoftsecureviewer0937464528283770090.mybluemix.net/?https://login.microsoftonline.com/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https://www.office.com/landing&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637583272664519482.NzNjMmViYWMtOWZkYi00MmE1LTg5YmUtMzE4ZjNiNzUwYjhhMGU2OTE5YTYtYzQ1Ny00MGViLWJiOWQtZWQ5OGJhMmMzYThj&ui_locales=en-US&mkt=en-US&client-request-id=f9db538e-88c5-40c1-88d7-118712f78e38&state=vZXka_A_Wp_W-Y2mzlqo5k-F2ph0jsWAzk1y2jXmwmjBer6lswkBW1wouW5dO2YDMK5vrArRoeV-xS9zvCFcILNQUL3ne7mzj4c68JSqSWddFx2UvOwex6voCODBEiYaOemcwjXn7K0gMTubQoYWyKB49cB9wL2Ns1Cg9lAHcb6I_zlBkghGSq7wOQGhat8n9dkDuyaSKfStMxFupenekYq2tNYnLVGqEkSEccCa9hIMFjf4nUeUBJi6tmPfk840JBk7DOmqUszENZPe0ZOHuA&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.8.0.0#
 malicious