IOC Report

loading gif

Files

File Path
Type
Category
Malicious
ATT24207.html
HTML document, ASCII text, with very long lines
initial sample
 malicious
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\0cdaff08-741e-4a35-80da-07000cf2ded5.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\0f5f1b5e-d478-40bf-89ba-086d178563b4.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\4626bc93-0719-49a8-90f2-614456ffbe71.tmp
SysEx File -
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7e2018b0-7bf6-4ff1-a5bd-494b40452eb3.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\866fb0af-e067-40ad-b995-5c81d5a78318.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\89bb9a81-a9fa-43c0-8514-46cac7cd46f0.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\05bfc0f1-1b5d-4bd9-b1c5-138106530940.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0f570192-92cc-492d-bde8-56eed6a617b2.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\149b772e-cbc3-4c34-b123-1b4fec6df0a2.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\17715a59-2c8c-4df5-a97d-899f3b6e68cf.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2078af3a-2234-447c-8802-e19ca7fbe715.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7c81fe1c-b07d-4bfe-9cc9-8cccd046d3b6.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9ade8e66-f4b1-4e2e-97f1-bcbafd870157.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldG (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.oldOG (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.oldMP (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateB1 (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.^ (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.oldvp (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\e77329a5-9a19-4dc2-b9ef-e00baa5a174a.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\3cddfce6-c5a2-4d2c-9441-dd7beef21176.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.oldg (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent StateMP (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.oldMP (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b37ea3ce-fe59-4663-bb87-70f479ed1ea0.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTS (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ffe7cba5-bbcd-4524-a58a-9acb535e6340.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State4 (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache\t (copy)
SysEx File -
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Subresource Filter\Indexed Rules\27\scoped_dir2200_1711716221\Ruleset Data
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\b12491cc-65b4-4a14-b7c9-30c65dbafebd.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\da0dbb4c-610b-4b45-a739-34e1f2f34453.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Temp\2200_1522987924\Filtering Rules
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1522987924\LICENSE.txt
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1522987924\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1522987924\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1522987924\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_pnacl_json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1644738246\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1751546738\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1751546738\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_1751546738\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_797188208\LICENSE
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_797188208\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_797188208\crl-set
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_797188208\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\2200_797188208\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\43e9316c-8138-4c92-9d2c-c2c3bb308c18.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\8cf289af-fe63-4637-84ba-e95eb8f7b677.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\43e9316c-8138-4c92-9d2c-c2c3bb308c18.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\iw\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ml\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\mr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ms\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\nl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\pt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\sw\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\ta\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\te\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\zh\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\angular.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\background_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\cast_sender.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\common.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\feedback.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\feedback.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\feedback_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\manifest.json
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\material_css_min.css
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\mirroring_cast_streaming.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\mirroring_common.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\mirroring_hangouts.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1739587724\CRX_INSTALL\mirroring_webrtc.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\craw_background.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\craw_window.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\css\craw_window.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\html\craw_window.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\flapper.gif
GIF image data, version 89a, 30 x 30
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\topbar_floating_button.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\topbar_floating_button_close.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\topbar_floating_button_hover.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\topbar_floating_button_maximize.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\images\topbar_floating_button_pressed.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir2200_1835166911\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
There are 247 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\ATT24207.html'
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,2607996047392706192,9024024679786612816,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1928 /prefetch:8
clean

URLs

Name
IP
Malicious
https://acctcdn.msauth.net/oneds_Xr2D7Nex80v7A-8bxF8jgQ2.js?v=1
152.199.21.175
 clean
https://account.live.com/Resources/images/Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2.svg
unknown
 clean
https://apis.google.com/js/client.js
unknown
 clean
https://account.live.com/Resources/images/favicon.ico4
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/imgs/arrow_left.svg
199.36.158.100
 clean
https://kifot.wancdnapp.page/616700eab73a140ba8549ca3.js
104.21.47.62
 clean
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfa
unknown
 clean
https://crash.corp.google.com/samples?reportid=&q=
unknown
 clean
https://easylist.to/)
unknown
 clean
https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_white_ufRYlllWOw4YyDRi
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/332031507388606b90fee610b57841a3.js
199.36.158.100
 clean
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
unknown
 clean
https://preprod-hangouts-googleapis.sandbox.google.com
unknown
 clean
https://www.google.com
unknown
 clean
https://account.live.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
unknown
 clean
https://acctcdn.msauth.net/knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=17-
unknown
 clean
https://hangouts.google.com/hangouts/_/logpref
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/imgs/microsoft_logo.svg
199.36.158.100
 clean
https://creativecommons.org/publicdomain/zero/1.0/.
unknown
 clean
https://acctcdn.msauth.net/bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1
152.199.21.175
 clean
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
unknown
 clean
https://unpkg.com/vue@2.6.11/dist/vue.min.js
104.16.126.175
 clean
https://acctcdn.msauth.net/jqueryshim_tGLkJ9mWEbN2n0ToVG2gvQ2.js?v=1
152.199.21.175
 clean
https://github.com/madler/zlib/blob/master/zlib.h
unknown
 clean
https://acctcdn.msauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg
152.199.21.175
 clean
https://aadcdn.msauth.net/ests/2.1/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
unknown
 clean
https://account.live.com/password/reset
unknown
 clean
https://www.google.com/tools/feedback
unknown
 clean
https://dns.google
unknown
 clean
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
unknown
 clean
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
152.199.21.175
 clean
https://cdnjs.cloudflare.com/ajax/libs/vuex/2.3.1/vuex.min.js
104.16.18.94
 clean
https://support.google.com/chromecast/troubleshooter/2995236
unknown
 clean
https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
152.199.21.175
 clean
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
unknown
 clean
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
172.217.168.78
 clean
https://payments.google.com/payments/v4/js/integrator.js
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/afa6a734c2a7acf6d83fe55994ffbde1nbr1634140376.js
199.36.158.100
 clean
https://acctcdn.msauth.net/resetpasswordpackage_L8Ee0uN0GOAyvurXVgtE8g2.js?v=1
152.199.21.175
 clean
https://www.google.com;
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/vuex/2.3.1/vuex.min.jsf
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/afa6a734c2a7acf6d83fe55994ffbde1nbr1634140376.j
unknown
 clean
https://acctcdn.msauth.net/jqueryshim_tGLkJ9mWEbN2n0ToVG2gvQ2.js?v=1:.
unknown
 clean
https://bit.ly/2UqudLYRecover
unknown
 clean
https://csp.withgoogle.com/csp/hosted-libraries-pushers
unknown
 clean
https://www.google.com/images/x2.gif
unknown
 clean
https://acctcdn.msauth.net/bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1
152.199.21.175
 clean
https://a.nel.cloudflare.com/report/v3?s=WBIgPf73%2BWxk5oUE8vtcPgBls90hzqDwCB4Vye3y%2F4znIs8zLZAiCeV
unknown
 clean
https://acctcdn.msauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svgw
unknown
 clean
https://www.google.com/images/dot2.gif
unknown
 clean
https://acctcdn.msauth.net/
unknown
 clean
https://play.google.com/log?format=json&hasfast=true
unknown
 clean
https://unpkg.com/vue-router@2.7.0/dist/vue-router.min.js
104.16.126.175
 clean
https://account.live.com/Resources/images/favicon.ico
unknown
 clean
https://acctcdn.msauth.net/wlivepackagefull_2169QIWB52Tqqm3jo5_AUA2.js?v=1
152.199.21.175
 clean
http://tools.ietf.org/html/rfc1950
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6669.4/content/images/favicon_a.ico~r
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=9GZUHXTtvE%2F15QkRa0W4K7oUlqhobZhX9fBp7Ouq2oruVaHd5me7bDA9v
unknown
 clean
https://unpkg.com/axios@0.16.1/dist/axios.min.js
104.16.126.175
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/css/b54d64bedeab2e123782af00bf32d7banbr16341403
unknown
 clean
https://unpkg.com/vue
unknown
 clean
https://account.live.com/Resources/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg
unknown
 clean
https://docs.google.com
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/css/afa6a734c2a7acf6d83fe55994ffbde1nbr16341403
unknown
 clean
https://www.google.com/
unknown
 clean
https://feedback.googleusercontent.com
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.3.6/mobile-detect.min.js
104.16.18.94
 clean
https://clients6.google.com
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/vee-validate/2.0.0-rc.3/vee-validate.min.js
104.16.18.94
 clean
https://www.google.com/images/cleardot.gif
unknown
 clean
https://rikcndapplala.web.app/zvhtjykjhvzxvxz/themes/js/a3107e4d4ae0ea783cd1177c52f1e6301634140370.j
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/vee-validate/2.0.0-rc.3/vee-validate.min.js?
unknown
 clean
https://www.google.com/log?format=json&hasfast=true
unknown
 clean
https://acctcdn.msauth.net/converged_ux_v2_kGcCYmU0rW3A6Zc7U1O8nw2.css?v=1
152.199.21.175
 clean
https://acctcdn.msauth.net/bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1$
unknown
 clean
https://sandbox.google.com/payments/v4/js/integrator.js
unknown
 clean
https://accounts.google.com/MergeSession
unknown
 clean
https://creativecommons.org/compatiblelicenses
unknown
 clean
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
216.58.215.225
 clean
https://github.com/easylist)
unknown
 clean
https://creativecommons.org/.
unknown
 clean
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6669.4/content/images/favicon_a.ico
unknown
 clean
https://bit.ly/2UqudLY
67.199.248.11
 clean
https://hangouts.clients6.google.com
unknown
 clean
https://meet.google.com
unknown
 clean
https://account.live.com/Resources/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg5x
unknown
 clean
https://accounts.google.com
unknown
 clean
https://clients2.google.com/cr/report
unknown
 clean
http://angularjs.org
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/vue-i18n/7.0.3/vue-i18n.min.js
104.16.18.94
 clean
https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q
unknown
 clean
https://github.com/angular/material
unknown
 clean
https://account.live.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
unknown
 clean
https://apis.google.com
unknown
 clean
https://unpkg.com/axios
unknown
 clean
https://unpkg.com/vue-router
unknown
 clean
https://www-googleapis-staging.sandbox.google.com
unknown
 clean
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
unknown
 clean
https://unpkg.com/lodash@4.17.4/lodash.min.js
104.16.126.175
 clean
https://clients2.google.com
unknown
 clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
kifot.wancdnapp.page
104.21.47.62
 clean
cs1100.wpc.omegacdn.net
152.199.23.37
 clean
accounts.google.com
172.217.168.45
 clean
rikcndapplala.web.app
199.36.158.100
 clean
cdnjs.cloudflare.com
104.16.18.94
 clean
bit.ly
67.199.248.11
 clean
sni1gl.wpc.alphacdn.net
152.199.21.175
 clean
clients.l.google.com
172.217.168.78
 clean
unpkg.com
104.16.126.175
 clean
googlehosted.l.googleusercontent.com
216.58.215.225
 clean
aadcdn.msftauth.net
unknown
 clean
aadcdn.msauth.net
unknown
 clean
account.live.com
unknown
 clean
acctcdn.msauth.net
unknown
 clean
clients2.googleusercontent.com
unknown
 clean
clients2.google.com
unknown
 clean
secure.aadcdn.microsoftonline-p.com
unknown
 clean
acctcdn.msftauth.net
unknown
 clean
There are 8 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
192.168.2.6
unknown
unknown
clean
172.217.168.45
accounts.google.com
United States
clean
104.16.18.94
cdnjs.cloudflare.com
United States
clean
67.199.248.11
bit.ly
United States
clean
216.58.215.225
googlehosted.l.googleusercontent.com
United States
clean
104.21.47.62
kifot.wancdnapp.page
United States
clean
199.36.158.100
rikcndapplala.web.app
United States
clean
172.217.168.78
clients.l.google.com
United States
clean
239.255.255.250
unknown
Reserved
clean
152.199.21.175
sni1gl.wpc.alphacdn.net
United States
clean
152.199.23.37
cs1100.wpc.omegacdn.net
United States
clean
127.0.0.1
unknown
unknown
clean
104.16.126.175
unpkg.com
United States
clean
There are 4 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
S-1-5-21-3853321935-2125563209-4053062332-1002
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gdaefkejpgkiemlaofpalmlakkmbjdnl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
kmendfapggjehodndflmmgagdbamhnfd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mfehgcgbbipciphmccgaenjidiccnmng
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
neajdppkdcdipfabeoofebfddakdcjhd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.reporting
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
module_blacklist_cache_md5_digest
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
media.storage_id_salt
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_seed
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
default_search_provider_data.template_url_data
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
safebrowsing.incidents_sent
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
pinned_tabs
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
search_provider_overrides
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_username
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.restore_on_startup
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_version
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage_is_newtabpage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
browser.show_home_button
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
 clean
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
lastrun
 clean
There are 34 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7DF5DF7F2000
unkown image
page readonly
 clean
2C5D7130000
unkown
page read and write
 clean
7FF52A8C4000
unkown image
page readonly
 clean
7FF52A725000
unkown image
page readonly
 clean
237E3F20000
unkown image
page read and write
 clean
213EC550000
unkown image
page readonly
 clean
7FF5D5A14000
unkown image
page readonly
 clean
2C5D712F000
unkown
page read and write
 clean
2C5D7173000
unkown
page read and write
 clean
2C5D2690000
unkown image
page read and write
 clean
2C5D7136000
unkown
page read and write
 clean
237E49C7000
unkown
page read and write
 clean
7DF5346B2000
unkown image
page readonly
 clean
2C5D70B1000
unkown
page read and write
 clean
237E3F40000
unkown image
page readonly
 clean
237E4E02000
unkown
page read and write
 clean
7DF5346D0000
unkown image
page readonly
 clean
7FF5D7BA4000
unkown image
page readonly
 clean
7FF52A80F000
unkown image
page readonly
 clean
7FF504281000
unkown image
page readonly
 clean
2C5D2113000
unkown
page read and write
 clean
DA00AEB000
unkown
page read and write
 clean
7FF5D5A57000
unkown image
page readonly
 clean
7FF550EEA000
unkown image
page readonly
 clean
FE03EFE000
stack
page read and write
 clean
237E4997000
unkown
page read and write
 clean
7FF5042D7000
unkown image
page readonly
 clean
237E4029000
unkown
page read and write
 clean
237E3F60000
unkown image
page readonly
 clean
7FF504216000
unkown image
page readonly
 clean
2C5D2890000
unkown image
page readonly
 clean
1E909FE0000
unkown
page read and write
 clean
7FF529423000
unkown image
page readonly
 clean
2C5D7270000
unkown
page read and write
 clean
237E495D000
unkown
page read and write
 clean
1C630629000
unkown
page read and write
 clean
7DF50E082000
unkown image
page readonly
 clean
7FF5D5982000
unkown image
page readonly
 clean
1DE14300000
heap default
page read and write
 clean
2C5D70BB000
unkown
page read and write
 clean
887F2FF000
stack
page read and write
 clean
1C630450000
heap private
page read and write
 clean
7FF5D7B75000
unkown image
page readonly
 clean
7DF5332B2000
unkown image
page readonly
 clean
2C5D7133000
unkown
page read and write
 clean
2C5D2860000
unkown image
page readonly
 clean
7FF550EDD000
unkown image
page readonly
 clean
7FF52A581000
unkown image
page readonly
 clean
237E3F40000
unkown image
page readonly
 clean
7DF55AD80000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
1A502FC7000
heap default
page read and write
 clean
237E4954000
unkown
page read and write
 clean
7FF5D785C000
unkown image
page readonly
 clean
7FF5D54D6000
unkown image
page readonly
 clean
7FF52A8D4000
unkown image
page readonly
 clean
237E4991000
unkown
page read and write
 clean
7DF50E080000
unkown image
page readonly
 clean
7FF52A8DB000
unkown image
page readonly
 clean
7FF5D5860000
unkown image
page readonly
 clean
2C5D2015000
unkown
page read and write
 clean
7DF5346C2000
unkown image
page readonly
 clean
7FF5D51AD000
unkown image
page readonly
 clean
7FF551F16000
unkown image
page readonly
 clean
2C5D7119000
unkown
page read and write
 clean
7FF529395000
unkown image
page readonly
 clean
7FF5D5817000
unkown image
page readonly
 clean
1DE14AE0000
unkown image
page readonly
 clean
7FF5D572F000
unkown image
page readonly
 clean
FE04179000
stack
page read and write
 clean
7FF5D7BCF000
unkown image
page readonly
 clean
2C5D7137000
unkown
page read and write
 clean
237E499F000
unkown
page read and write
 clean
1DE14290000
unkown image
page readonly
 clean
2C5D2118000
unkown
page read and write
 clean
237E3FA0000
unkown image
page readonly
 clean
7FF52A06D000
unkown image
page readonly
 clean
62373CB000
unkown
page read and write
 clean
2C5D711B000
unkown
page read and write
 clean
1E90A04B000
unkown
page read and write
 clean
213EC8D0000
unkown image
page readonly
 clean
2C5D1F60000
unkown image
page read and write
 clean
7DF55AD70000
unkown image
page readonly
 clean
1C630E02000
unkown
page read and write
 clean
213EC68A000
unkown
page read and write
 clean
2C5D70AF000
unkown
page read and write
 clean
2C5D6FA0000
unkown
page read and write
 clean
213EC550000
unkown image
page readonly
 clean
237E49D3000
unkown
page read and write
 clean
7DF5346B2000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
2C5D7133000
unkown
page read and write
 clean
1A502F80000
unkown
page read and write
 clean
7FF550F77000
unkown image
page readonly
 clean
2C5D7133000
unkown
page read and write
 clean
7FF5D5951000
unkown image
page readonly
 clean
237E497E000
unkown
page read and write
 clean
7DF5DF802000
unkown image
page readonly
 clean
7FF550ED3000
unkown image
page readonly
 clean
7FF5D7BF2000
unkown image
page readonly
 clean
7FF550F19000
unkown image
page readonly
 clean
2C5D1800000
unkown
page read and write
 clean
1E909FB0000
heap default
page read and write
 clean
7FF5D7B97000
unkown image
page readonly
 clean
7FF52943A000
unkown image
page readonly
 clean
7DF5332C2000
unkown image
page readonly
 clean
7FF550F8B000
unkown image
page readonly
 clean
DA0187A000
stack
page read and write
 clean
FE03FFA000
stack
page read and write
 clean
2C5D1888000
unkown
page read and write
 clean
7DF50E070000
unkown image
page readonly
 clean
2C5D6D51000
unkown
page read and write
 clean
2C5D6D57000
unkown
page read and write
 clean
623797F000
stack
page read and write
 clean
237E4989000
unkown
page read and write
 clean
7FF52A5CB000
unkown image
page readonly
 clean
7FF52A706000
unkown image
page readonly
 clean
237E4F02000
unkown
page read and write
 clean
7DF5DF802000
unkown image
page readonly
 clean
7DF50E090000
unkown image
page readonly
 clean
7FF52A8CD000
unkown image
page readonly
 clean
213EC5B0000
unkown image
page readonly
 clean
7FF551F47000
unkown image
page readonly
 clean
7FF5D57FD000
unkown image
page readonly
 clean
7FF550FB3000
unkown image
page readonly
 clean
2C5D1865000
unkown
page read and write
 clean
7DF5346B0000
unkown image
page readonly
 clean
FE0437F000
stack
page read and write
 clean
1C630460000
unkown image
page readonly
 clean
7FF5D5A0D000
unkown image
page readonly
 clean
7DF5332C0000
unkown image
page readonly
 clean
7FF5D51B3000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
2C5D7121000
unkown
page read and write
 clean
7FF5D5865000
unkown image
page readonly
 clean
7FF551FB7000
unkown image
page readonly
 clean
213EC66C000
unkown
page read and write
 clean
7FF5294C7000
unkown image
page readonly
 clean
1C630678000
unkown
page read and write
 clean
237E499F000
unkown
page read and write
 clean
2C5D70AF000
unkown
page read and write
 clean
7FF52A6AA000
unkown image
page readonly
 clean
1A502E70000
unkown image
page readonly
 clean
1A502FCF000
unkown
page read and write
 clean
2C5D16A0000
unkown image
page readonly
 clean
237E47B0000
unkown
page read and write
 clean
7FF551E21000
unkown image
page readonly
 clean
2C5D2850000
unkown image
page readonly
 clean
2C5D7121000
unkown
page read and write
 clean
237E49A1000
unkown
page read and write
 clean
213EC64D000
unkown
page read and write
 clean
237E40B2000
unkown
page read and write
 clean
7FF5D599D000
unkown image
page readonly
 clean
7DF50E072000
unkown image
page readonly
 clean
7FF5D7CC2000
unkown image
page readonly
 clean
6D6B8B000
unkown
page read and write
 clean
237E4965000
unkown
page read and write
 clean
7FF52A8C7000
unkown image
page readonly
 clean
2C5D70AE000
unkown
page read and write
 clean
2C5D2280000
unkown
page read and write
 clean
2C5D18F8000
unkown
page read and write
 clean
7FF5041E3000
unkown image
page readonly
 clean
237E4982000
unkown
page read and write
 clean
7FF5D7C87000
unkown image
page readonly
 clean
1E90A029000
unkown
page read and write
 clean
2C5D7102000
unkown
page read and write
 clean
7FF52A3C1000
unkown image
page readonly
 clean
2C5D711C000
unkown
page read and write
 clean
2C5D6EB0000
unkown
page read and write
 clean
2C5D2118000
unkown
page read and write
 clean
7FF52A8D7000
unkown image
page readonly
 clean
237E494A000
unkown
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
237E40A8000
unkown
page read and write
 clean
7FF504287000
unkown image
page readonly
 clean
FE0387B000
unkown
page read and write
 clean
7FF5D7C74000
unkown image
page readonly
 clean
7FF529181000
unkown image
page readonly
 clean
7FF551FE6000
unkown image
page readonly
 clean
1E90A2D0000
unkown image
page readonly
 clean
2C5D7145000
unkown
page read and write
 clean
7FF551FBB000
unkown image
page readonly
 clean
7DF5346C0000
unkown image
page readonly
 clean
7FF551707000
unkown image
page readonly
 clean
7FF550DB6000
unkown image
page readonly
 clean
2C5D6C30000
unkown
page read and write
 clean
237E4993000
unkown
page read and write
 clean
FE03BF7000
stack
page read and write
 clean
7FF5D5A46000
unkown image
page readonly
 clean
7FF5D7BA0000
unkown image
page readonly
 clean
1DE146D0000
unkown
page read and write
 clean
7FF5041F6000
unkown image
page readonly
 clean
2C5D2770000
unkown
page read and write
 clean
7FF5D797B000
unkown image
page readonly
 clean
7FF5D7C17000
unkown image
page readonly
 clean
237E4993000
unkown
page read and write
 clean
7FF551FCA000
unkown image
page readonly
 clean
237E4013000
unkown
page read and write
 clean
1E90A055000
unkown
page read and write
 clean
2C5D1813000
unkown
page read and write
 clean
237E496B000
unkown
page read and write
 clean
7FF5516F9000
unkown image
page readonly
 clean
7FF5D79B9000
unkown image
page readonly
 clean
2C5D7130000
unkown
page read and write
 clean
237E495D000
unkown
page read and write
 clean
2C5D16D0000
unkown image
page readonly
 clean
2C5D2002000
unkown
page read and write
 clean
1E909F50000
heap private
page read and write
 clean
7FF550F06000
unkown image
page readonly
 clean
2C5D6EA0000
unkown
page read and write
 clean
2C5D709C000
unkown
page read and write
 clean
6D6FFA000
stack
page read and write
 clean
1DE151F0000
unkown
page read and write
 clean
7DF459C60000
unkown image
page readonly
 clean
237E49BD000
unkown
page read and write
 clean
237E47C0000
unkown image
page read and write
 clean
2C5D1680000
unkown image
page read and write
 clean
7DF5332B2000
unkown image
page readonly
 clean
2C5D6D54000
unkown
page read and write
 clean
237E4E02000
unkown
page read and write
 clean
7FF5D5996000
unkown image
page readonly
 clean
1C6304B0000
heap default
page read and write
 clean
7FF5290AD000
unkown image
page readonly
 clean
237E49BD000
unkown
page read and write
 clean
7FF551E38000
unkown image
page readonly
 clean
1E90A650000
unkown image
page readonly
 clean
7FF551871000
unkown image
page readonly
 clean
7FF52A85D000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
2C5D7138000
unkown
page read and write
 clean
2C5D7136000
unkown
page read and write
 clean
2C5D2660000
unkown
page read and write
 clean
2C5D2159000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
7FF52A073000
unkown image
page readonly
 clean
237E3FC0000
unkown
page read and write
 clean
237E4913000
unkown
page read and write
 clean
213EC5D0000
unkown
page read and write
 clean
237E498B000
unkown
page read and write
 clean
623767E000
stack
page read and write
 clean
7FF5D7A67000
unkown image
page readonly
 clean
7FF5042D7000
unkown image
page readonly
 clean
1DE14280000
unkown
page read and write
 clean
237E4985000
unkown
page read and write
 clean
2C5D219A000
unkown
page read and write
 clean
2C5D70AF000
unkown
page read and write
 clean
B28F477000
stack
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
1E90A013000
unkown
page read and write
 clean
2C5D1FF0000
unkown
page read and write
 clean
7FF504227000
unkown image
page readonly
 clean
7FF5042C3000
unkown image
page readonly
 clean
2C5D1841000
unkown
page read and write
 clean
237E499F000
unkown
page read and write
 clean
7FF5D5225000
unkown image
page readonly
 clean
7FF52A6D7000
unkown image
page readonly
 clean
237E40C7000
unkown
page read and write
 clean
7DF55AD62000
unkown image
page readonly
 clean
7FF5D7BB4000
unkown image
page readonly
 clean
1A502FF0000
unkown
page read and write
 clean
7FF5D58D5000
unkown image
page readonly
 clean
237E4E02000
unkown
page read and write
 clean
237E498B000
unkown
page read and write
 clean
7FF52A83A000
unkown image
page readonly
 clean
7FF5D799F000
unkown image
page readonly
 clean
7FF52A906000
unkown image
page readonly
 clean
7FF550F84000
unkown image
page readonly
 clean
2C5D708B000
unkown
page read and write
 clean
2C5D2159000
unkown
page read and write
 clean
7FF5D5905000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
2C5D17F0000
unkown
page read and write
 clean
7DF5DF7F0000
unkown image
page readonly
 clean
7FF5D7C06000
unkown image
page readonly
 clean
213EC655000
unkown
page read and write
 clean
237E49AA000
unkown
page read and write
 clean
237E4E6A000
unkown
page read and write
 clean
7FF5294C1000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
7FF5D79CA000
unkown image
page readonly
 clean
237E47B0000
unkown
page read and write
 clean
237E490F000
unkown
page read and write
 clean
2C5D6C50000
unkown
page read and write
 clean
1A5030B0000
unkown
page read and write
 clean
1A502E90000
unkown image
page readonly
 clean
1A503110000
unkown image
page readonly
 clean
7FF5D79FE000
unkown image
page readonly
 clean
2C5D711C000
unkown
page read and write
 clean
6D7079000
stack
page read and write
 clean
237E4F00000
unkown
page read and write
 clean
7FF5294DB000
unkown image
page readonly
 clean
237E49A0000
unkown
page read and write
 clean
7FF550EC1000
unkown image
page readonly
 clean
237E49A7000
unkown
page read and write
 clean
2C5D2159000
unkown
page read and write
 clean
237E499F000
unkown
page read and write
 clean
237E408B000
unkown
page read and write
 clean
7FF550F87000
unkown image
page readonly
 clean
2C5D7145000
unkown
page read and write
 clean
7FF5D59A9000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
7FF550DD0000
unkown image
page readonly
 clean
7FF5D783C000
unkown image
page readonly
 clean
237E4991000
unkown
page read and write
 clean
7FF5D7B88000
unkown image
page readonly
 clean
237E3F90000
heap default
page read and write
 clean
DA00BEE000
stack
page read and write
 clean
2C5D70EC000
unkown
page read and write
 clean
213EC679000
unkown
page read and write
 clean
7FF5D77FB000
unkown image
page readonly
 clean
1E909F60000
unkown image
page readonly
 clean
237E4F02000
unkown
page read and write
 clean
237E499D000
unkown
page read and write
 clean
7DF55BD90000
unkown image
page readonly
 clean
2C5D2118000
unkown
page read and write
 clean
213EC62A000
unkown
page read and write
 clean
7FF5D7C19000
unkown image
page readonly
 clean
7FF52A8EA000
unkown image
page readonly
 clean
2C5D6D90000
unkown
page read and write
 clean
1DE14357000
heap default
page read and write
 clean
2C5D7125000
unkown
page read and write
 clean
237E404C000
unkown
page read and write
 clean
7FF5D595F000
unkown image
page readonly
 clean
2C5D7118000
unkown
page read and write
 clean
1DE1434D000
unkown
page read and write
 clean
1C63066C000
unkown
page read and write
 clean
7FF5D7A24000
unkown image
page readonly
 clean
7FF5D7BE6000
unkown image
page readonly
 clean
7FF529358000
unkown image
page readonly
 clean
2C5D70E1000
unkown
page read and write
 clean
1C630590000
unkown image
page readonly
 clean
2C5D7096000
unkown
page read and write
 clean
7FF5D54D3000
unkown image
page readonly
 clean
1DE14290000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
DA014FE000
stack
page read and write
 clean
2C5D70AF000
unkown
page read and write
 clean
2C5D188D000
unkown
page read and write
 clean
7FF551FB4000
unkown image
page readonly
 clean
7DF432580000
unkown image
page readonly
 clean
7FF529469000
unkown image
page readonly
 clean
FE038FF000
stack
page read and write
 clean
213EC702000
unkown
page read and write
 clean
7FF550F7D000
unkown image
page readonly
 clean
2C5D6E70000
unkown
page read and write
 clean
DA0167F000
stack
page read and write
 clean
2C5D703F000
unkown
page read and write
 clean
2C5D6E40000
unkown
page read and write
 clean
1E90A081000
unkown
page read and write
 clean
887F0FE000
stack
page read and write
 clean
237E4993000
unkown
page read and write
 clean
FE03DF8000
stack
page read and write
 clean
7FF550A71000
unkown image
page readonly
 clean
2C5D7260000
unkown
page read and write
 clean
7FF5D579B000
unkown image
page readonly
 clean
237E4E02000
unkown
page read and write
 clean
1DE14F70000
unkown
page read and write
 clean
237E4999000
unkown
page read and write
 clean
2C5D70D3000
unkown
page read and write
 clean
1C630800000
unkown image
page readonly
 clean
7DF50E090000
unkown image
page readonly
 clean
7FF5D7B31000
unkown image
page readonly
 clean
2C5D70B1000
unkown
page read and write
 clean
7DF4DF930000
unkown image
page readonly
 clean
2C5D1913000
unkown
page read and write
 clean
7FF5292D7000
unkown image
page readonly
 clean
7FF52940F000
unkown image
page readonly
 clean
505287A000
stack
page read and write
 clean
2C5D6D5B000
unkown
page read and write
 clean
1E90A802000
unkown
page read and write
 clean
237E4952000
unkown
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
7DF5E1A62000
unkown image
page readonly
 clean
1C63064F000
unkown
page read and write
 clean
2C5D712C000
unkown
page read and write
 clean
7DF55BDB0000
unkown image
page readonly
 clean
2C5D6E60000
unkown
page read and write
 clean
7FF5D7C7D000
unkown image
page readonly
 clean
62377FB000
stack
page read and write
 clean
213EC628000
unkown
page read and write
 clean
237E4E21000
unkown
page read and write
 clean
7FF5D749A000
unkown image
page readonly
 clean
237E4993000
unkown
page read and write
 clean
213EC540000
heap private
page read and write
 clean
237E495D000
unkown
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
7FF5D5A04000
unkown image
page readonly
 clean
237E4964000
unkown
page read and write
 clean
7FF5D79D0000
unkown image
page readonly
 clean
237E4911000
unkown
page read and write
 clean
7DF5332C2000
unkown image
page readonly
 clean
2C5D7137000
unkown
page read and write
 clean
237E499D000
unkown
page read and write
 clean
7FF551FE3000
unkown image
page readonly
 clean
7FF5D5A07000
unkown image
page readonly
 clean
237E4E21000
unkown
page read and write
 clean
1DE148E0000
unkown image
page readonly
 clean
237E4000000
unkown
page read and write
 clean
7FF52A728000
unkown image
page readonly
 clean
887F3FE000
stack
page read and write
 clean
1C630713000
unkown
page read and write
 clean
237E49AD000
unkown
page read and write
 clean
237E4740000
unkown image
page write copy
 clean
213EC713000
unkown
page read and write
 clean
887EF7B000
stack
page read and write
 clean
2C5D70BB000
unkown
page read and write
 clean
7FF5294EA000
unkown image
page readonly
 clean
1DE151D0000
unkown
page readonly
 clean
237E4985000
unkown
page read and write
 clean
1DE142B0000
unkown image
page readonly
 clean
2C5D6EC0000
unkown
page read and write
 clean
237E4997000
unkown
page read and write
 clean
7FF5D5976000
unkown image
page readonly
 clean
7FF52A720000
unkown image
page readonly
 clean
7FF5D796D000
unkown image
page readonly
 clean
237E4900000
unkown
page read and write
 clean
7FF551F04000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
7FF5D7BDD000
unkown image
page readonly
 clean
2C5D6D56000
unkown
page read and write
 clean
1E909F40000
unkown image
page read and write
 clean
2C5D8010000
unkown
page read and write
 clean
2C5D6EB0000
unkown
page read and write
 clean
237E49D3000
unkown
page read and write
 clean
7DF55AD60000
unkown image
page readonly
 clean
1C630708000
unkown
page read and write
 clean
2C5D70B4000
unkown
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
1DE14680000
unkown image
page readonly
 clean
2C5D2870000
unkown image
page readonly
 clean
1DE142E0000
unkown
page read and write
 clean
237E44D0000
unkown image
page readonly
 clean
1A502FEF000
unkown
page read and write
 clean
B28F37E000
stack
page read and write
 clean
7FF5D5827000
unkown image
page readonly
 clean
7DF55BDB0000
unkown image
page readonly
 clean
1C630480000
unkown image
page readonly
 clean
1E909FC0000
unkown image
page readonly
 clean
B28F2FB000
stack
page read and write
 clean
FE03CF7000
stack
page read and write
 clean
2C5D2BF0000
unkown
page read and write
 clean
7FF5D5963000
unkown image
page readonly
 clean
1A5030F0000
unkown image
page read and write
 clean
7FF5D7849000
unkown image
page readonly
 clean
7FF551D7C000
unkown image
page readonly
 clean
2C5D7133000
unkown
page read and write
 clean
7FF52A795000
unkown image
page readonly
 clean
2C5D6D71000
unkown
page read and write
 clean
7FF529512000
unkown image
page readonly
 clean
FE03A7F000
stack
page read and write
 clean
237E4055000
unkown
page read and write
 clean
FE0407F000
stack
page read and write
 clean
6237C7F000
stack
page read and write
 clean
237E4986000
unkown
page read and write
 clean
7FF536E9B000
unkown image
page readonly
 clean
7FF550F0D000
unkown image
page readonly
 clean
7FF5294D4000
unkown image
page readonly
 clean
237E495D000
unkown
page read and write
 clean
2C5D21DF000
unkown
page read and write
 clean
237E403C000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
7FF550F17000
unkown image
page readonly
 clean
7FF5D5501000
unkown image
page readonly
 clean
1DE15240000
unkown
page read and write
 clean
7FF5D7B45000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
237E4102000
unkown
page read and write
 clean
213ECE02000
unkown
page read and write
 clean
1DE1434D000
unkown
page read and write
 clean
7FF5042C6000
unkown image
page readonly
 clean
237E4113000
unkown
page read and write
 clean
237E49A1000
unkown
page read and write
 clean
2C5D6D50000
unkown
page read and write
 clean
2C5D16A0000
unkown image
page readonly
 clean
2C5D1867000
unkown
page read and write
 clean
7FF550ECF000
unkown image
page readonly
 clean
237E4953000
unkown
page read and write
 clean
237E49D9000
unkown
page read and write
 clean
2C5D2880000
unkown image
page readonly
 clean
7FF504297000
unkown image
page readonly
 clean
2C5D1860000
unkown
page read and write
 clean
7FF50429B000
unkown image
page readonly
 clean
7FF5D7A83000
unkown image
page readonly
 clean
237E49B0000
unkown
page read and write
 clean
7FF52A869000
unkown image
page readonly
 clean
7FF5D7A00000
unkown image
page readonly
 clean
2C5D186A000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
2C5D7130000
unkown
page read and write
 clean
7FF5D7B08000
unkown image
page readonly
 clean
2C5D28A0000
unkown image
page readonly
 clean
7FF529503000
unkown image
page readonly
 clean
7FF529325000
unkown image
page readonly
 clean
2C5D6E20000
unkown
page read and write
 clean
7DF5346B0000
unkown image
page readonly
 clean
7FF550FC2000
unkown image
page readonly
 clean
213EC650000
unkown
page read and write
 clean
237E49A6000
unkown
page read and write
 clean
237E47B0000
unkown
page read and write
 clean
2C5D7121000
unkown
page read and write
 clean
1A502FE2000
unkown
page read and write
 clean
7FF5D5790000
unkown image
page readonly
 clean
237E4084000
unkown
page read and write
 clean
7FF52A81F000
unkown image
page readonly
 clean
2C5D72B0000
unkown
page read and write
 clean
7FF551F3D000
unkown image
page readonly
 clean
7DF55AD60000
unkown image
page readonly
 clean
7FF5D7BEA000
unkown image
page readonly
 clean
213EC602000
unkown
page read and write
 clean
213EC613000
unkown
page read and write
 clean
2C5D70D8000
unkown
page read and write
 clean
237E49A7000
unkown
page read and write
 clean
1A502FE2000
unkown
page read and write
 clean
B28EDCC000
unkown
page read and write
 clean
2C5D7133000
unkown
page read and write
 clean
237E3F30000
heap private
page read and write
 clean
1DE14F00000
unkown
page read and write
 clean
2C5D6D74000
unkown
page read and write
 clean
7DF40BF40000
unkown image
page readonly
 clean
237E4964000
unkown
page read and write
 clean
1C630A00000
unkown image
page readonly
 clean
7FF5D5846000
unkown image
page readonly
 clean
1C630700000
unkown
page read and write
 clean
237E42D0000
unkown image
page readonly
 clean
237E49B8000
unkown
page read and write
 clean
7FF5D7BC1000
unkown image
page readonly
 clean
237E4058000
unkown
page read and write
 clean
2C5D1902000
unkown
page read and write
 clean
B28F0FE000
stack
page read and write
 clean
237E4E02000
unkown
page read and write
 clean
7FF5D7BD3000
unkown image
page readonly
 clean
7DF55BD90000
unkown image
page readonly
 clean
7DF55AD72000
unkown image
page readonly
 clean
237E49B7000
unkown
page read and write
 clean
2C5D6D50000
unkown
page read and write
 clean
237E4056000
unkown
page read and write
 clean
2C5D2199000
unkown
page read and write
 clean
7FF50428D000
unkown image
page readonly
 clean
7DF50E070000
unkown image
page readonly
 clean
2C5D1899000
unkown
page read and write
 clean
DA00B6D000
stack
page read and write
 clean
7FF5D597A000
unkown image
page readonly
 clean
1E90A053000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
1E90A050000
unkown
page read and write
 clean
50526FF000
stack
page read and write
 clean
237E40EA000
unkown
page read and write
 clean
1C630490000
unkown image
page readonly
 clean
213EC64A000
unkown
page read and write
 clean
2C5D6D70000
unkown
page read and write
 clean
7FF52A3C7000
unkown image
page readonly
 clean
7FF5D5868000
unkown image
page readonly
 clean
7FF5D7A5A000
unkown image
page readonly
 clean
7FF5D7A6F000
unkown image
page readonly
 clean
2C5D2159000
unkown
page read and write
 clean
7FF528FC7000
unkown image
page readonly
 clean
7FF5D5898000
unkown image
page readonly
 clean
237E4985000
unkown
page read and write
 clean
2C5D6D94000
unkown
page read and write
 clean
7FF5D59A7000
unkown image
page readonly
 clean
7FF52A867000
unkown image
page readonly
 clean
1A503490000
unkown image
page readonly
 clean
7FF5292E7000
unkown image
page readonly
 clean
7FF5D54CA000
unkown image
page readonly
 clean
2C5D2158000
unkown
page read and write
 clean
7FF550D5A000
unkown image
page readonly
 clean
237E40D9000
unkown
page read and write
 clean
6237B7F000
stack
page read and write
 clean
1DE14307000
heap default
page read and write
 clean
2C5D6D58000
unkown
page read and write
 clean
2C5D7107000
unkown
page read and write
 clean
7FF504294000
unkown image
page readonly
 clean
1A5030D0000
unkown image
page readonly
 clean
DA01AFE000
stack
page read and write
 clean
213EC530000
unkown image
page read and write
 clean
2C5D2200000
unkown
page read and write
 clean
7FF5D5222000
unkown image
page readonly
 clean
1DE14270000
unkown image
page read and write
 clean
1E90A066000
unkown
page read and write
 clean
2C5D2118000
unkown
page read and write
 clean
7FF5D7BA9000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
DA0157F000
stack
page read and write
 clean
7FF5D5A2A000
unkown image
page readonly
 clean
7FF5D5803000
unkown image
page readonly
 clean
7FF5D7549000
unkown image
page readonly
 clean
1A5030E0000
unkown image
page readonly
 clean
2C5D7121000
unkown
page read and write
 clean
7FF5D7401000
unkown image
page readonly
 clean
2C5D711F000
unkown
page read and write
 clean
FE03AFE000
stack
page read and write
 clean
237E4E02000
unkown
page read and write
 clean
7FF5D5A52000
unkown image
page readonly
 clean
7FF550F9A000
unkown image
page readonly
 clean
2C5D2118000
unkown
page read and write
 clean
2C5D709D000
unkown
page read and write
 clean
887EE7E000
stack
page read and write
 clean
7FF5D77F2000
unkown image
page readonly
 clean
7FF5D57B4000
unkown image
page readonly
 clean
7FF551704000
unkown image
page readonly
 clean
237E49C7000
unkown
page read and write
 clean
1C630B80000
unkown image
page readonly
 clean
2C5D2199000
unkown
page read and write
 clean
2C5D6E90000
unkown
page read and write
 clean
2C5D6D80000
unkown
page read and write
 clean
1E909F90000
unkown image
page readonly
 clean
7FF5D7BBF000
unkown image
page readonly
 clean
2C5D2100000
unkown
page read and write
 clean
7FF5D5944000
unkown image
page readonly
 clean
7DF55BDA0000
unkown image
page readonly
 clean
7FF52A903000
unkown image
page readonly
 clean
7FF5042AA000
unkown image
page readonly
 clean
2C5D70A6000
unkown
page read and write
 clean
7FF5294C4000
unkown image
page readonly
 clean
7DF5332B0000
unkown image
page readonly
 clean
1C63063C000
unkown
page read and write
 clean
7FF5D5507000
unkown image
page readonly
 clean
237E49A2000
unkown
page read and write
 clean
7DF5E1A60000
unkown image
page readonly
 clean
237E4052000
unkown
page read and write
 clean
2C5D21DD000
unkown
page read and write
 clean
237E4964000
unkown
page read and write
 clean
237E404A000
unkown
page read and write
 clean
B28F57F000
stack
page read and write
 clean
1E90A04D000
unkown
page read and write
 clean
1A502E70000
unkown image
page readonly
 clean
2C5D16C0000
unkown image
page readonly
 clean
7FF52A82D000
unkown image
page readonly
 clean
7FF5D5760000
unkown image
page readonly
 clean
2C5D711B000
unkown
page read and write
 clean
237E4985000
unkown
page read and write
 clean
7DF458C30000
unkown image
page readonly
 clean
7DF5DF7F0000
unkown image
page readonly
 clean
2C5D6EB0000
unkown
page read and write
 clean
7FF529320000
unkown image
page readonly
 clean
1A502FB0000
heap default
page read and write
 clean
7FF550FB6000
unkown image
page readonly
 clean
1DE142C0000
unkown image
page readonly
 clean
2C5D2159000
unkown
page read and write
 clean
7FF55071D000
unkown image
page readonly
 clean
7FF551FAD000
unkown image
page readonly
 clean
1C630460000
unkown image
page readonly
 clean
7FF550D97000
unkown image
page readonly
 clean
213EC5A0000
heap default
page read and write
 clean
7FF551FA4000
unkown image
page readonly
 clean
237E4989000
unkown
page read and write
 clean
213ECAD0000
unkown image
page readonly
 clean
237E4967000
unkown
page read and write
 clean
237E499F000
unkown
page read and write
 clean
1DE146C5000
heap private
page read and write
 clean
7FF551FF7000
unkown image
page readonly
 clean
237E404F000
unkown
page read and write
 clean
237E4964000
unkown
page read and write
 clean
7FF529467000
unkown image
page readonly
 clean
237E40F2000
unkown
page read and write
 clean
2C5D712A000
unkown
page read and write
 clean
237E4650000
unkown image
page readonly
 clean
1C63066A000
unkown
page read and write
 clean
B28F1FB000
stack
page read and write
 clean
7FF551FA7000
unkown image
page readonly
 clean
237E49A0000
unkown
page read and write
 clean
1E90A102000
unkown
page read and write
 clean
237E4802000
unkown
page read and write
 clean
7FF529411000
unkown image
page readonly
 clean
7FF5041E5000
unkown image
page readonly
 clean
1C630691000
unkown
page read and write
 clean
1C630613000
unkown
page read and write
 clean
7FF550F71000
unkown image
page readonly
 clean
7DF5E1A60000
unkown image
page readonly
 clean
7FF5D5939000
unkown image
page readonly
 clean
DA01779000
stack
page read and write
 clean
2C5D1D80000
unkown image
page readonly
 clean
1DE151E0000
unkown
page read and write
 clean
1E90A100000
unkown
page read and write
 clean
7FF550EE6000
unkown image
page readonly
 clean
237E4999000
unkown
page read and write
 clean
7DF50E082000
unkown image
page readonly
 clean
2C5D704C000
unkown
page read and write
 clean
7FF52A811000
unkown image
page readonly
 clean
7FF550FC7000
unkown image
page readonly
 clean
7FF5D7CB6000
unkown image
page readonly
 clean
2C5D17D0000
unkown image
page readonly
 clean
7FF5D7B01000
unkown image
page readonly
 clean
1E90A03C000
unkown
page read and write
 clean
7FF5D5A01000
unkown image
page readonly
 clean
7FF503AA2000
unkown image
page readonly
 clean
1DE144F0000
unkown image
page readonly
 clean
B28F07E000
stack
page read and write
 clean
237E49AB000
unkown
page read and write
 clean
7FF52A856000
unkown image
page readonly
 clean
237E4996000
unkown
page read and write
 clean
2C5D713F000
unkown
page read and write
 clean
1A502E50000
unkown image
page read and write
 clean
237E4E00000
unkown
page read and write
 clean
7FF5D5A43000
unkown image
page readonly
 clean
1DE144D0000
unkown
page read and write
 clean
505297C000
stack
page read and write
 clean
1DE1434D000
unkown
page read and write
 clean
7FF5D740B000
unkown image
page readonly
 clean
1E90A04F000
unkown
page read and write
 clean
7FF5D7988000
unkown image
page readonly
 clean
7DF55BDA2000
unkown image
page readonly
 clean
1A503100000
heap private
page read and write
 clean
2C5D6D80000
unkown
page read and write
 clean
2C5D70BB000
unkown
page read and write
 clean
2C5D1829000
unkown
page read and write
 clean
237E497E000
unkown
page read and write
 clean
7FF5D79C6000
unkown image
page readonly
 clean
237E40A9000
unkown
page read and write
 clean
7DF50E080000
unkown image
page readonly
 clean
DA0197D000
stack
page read and write
 clean
7FF52A912000
unkown image
page readonly
 clean
7FF5D7C0D000
unkown image
page readonly
 clean
237E4E6A000
unkown
page read and write
 clean
1C630655000
unkown
page read and write
 clean
887EB2C000
unkown
page read and write
 clean
1DE146C0000
heap private
page read and write
 clean
7DF55BDA0000
unkown image
page readonly
 clean
237E4108000
unkown
page read and write
 clean
2C5D219A000
unkown
page read and write
 clean
7FF5D5907000
unkown image
page readonly
 clean
7FF5D56C1000
unkown image
page readonly
 clean
1DE14F10000
unkown
page read and write
 clean
7FF550E08000
unkown image
page readonly
 clean
2C5D2500000
unkown
page read and write
 clean
7FF550C31000
unkown image
page readonly
 clean
213ECC50000
unkown image
page readonly
 clean
7FF5D7C9A000
unkown image
page readonly
 clean
7FF52941F000
unkown image
page readonly
 clean
2C5D1FE0000
unkown
page read and write
 clean
7FF5D52E9000
unkown image
page readonly
 clean
237E499B000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
237E4E02000
unkown
page read and write
 clean
6D70FE000
stack
page read and write
 clean
7FF52A823000
unkown image
page readonly
 clean
2C5D6E80000
unkown
page read and write
 clean
7DF5332D0000
unkown image
page readonly
 clean
237E499C000
unkown
page read and write
 clean
1C630702000
unkown
page read and write
 clean
7DF55BDA2000
unkown image
page readonly
 clean
7FF5D5934000
unkown image
page readonly
 clean
7FF5294CD000
unkown image
page readonly
 clean
7DF5332C0000
unkown image
page readonly
 clean
7FF5D7822000
unkown image
page readonly
 clean
DA0117A000
stack
page read and write
 clean
7FF5D5A57000
unkown image
page readonly
 clean
1E909F60000
unkown image
page readonly
 clean
7FF5294D7000
unkown image
page readonly
 clean
237E4965000
unkown
page read and write
 clean
DA0137B000
stack
page read and write
 clean
7FF5D7995000
unkown image
page readonly
 clean
7DF55BD92000
unkown image
page readonly
 clean
7FF529306000
unkown image
page readonly
 clean
7DF5E1A62000
unkown image
page readonly
 clean
887F07B000
stack
page read and write
 clean
237E4999000
unkown
page read and write
 clean
1E90A108000
unkown
page read and write
 clean
7FF504284000
unkown image
page readonly
 clean
237E4054000
unkown
page read and write
 clean
7FF5D7496000
unkown image
page readonly
 clean
237E4997000
unkown
page read and write
 clean
2C5D6EA0000
unkown
page read and write
 clean
7FF5D7C1E000
unkown image
page readonly
 clean
2C5D2000000
unkown
page read and write
 clean
7DF55AD70000
unkown image
page readonly
 clean
2C5D7134000
unkown
page read and write
 clean
FE0427B000
stack
page read and write
 clean
237E49B5000
unkown
page read and write
 clean
237E499B000
unkown
page read and write
 clean
2C5D7062000
unkown
page read and write
 clean
2C5D702D000
unkown
page read and write
 clean
7FF550A77000
unkown image
page readonly
 clean
7FF528FC1000
unkown image
page readonly
 clean
2C5D7136000
unkown
page read and write
 clean
237E40C1000
unkown
page read and write
 clean
2C5D712E000
unkown
page read and write
 clean
237E3F70000
unkown image
page readonly
 clean
7FF550723000
unkown image
page readonly
 clean
2C5D710E000
unkown
page read and write
 clean
7FF550EBF000
unkown image
page readonly
 clean
7DF55BD92000
unkown image
page readonly
 clean
7DF5E1A80000
unkown image
page readonly
 clean
7FF5D5A17000
unkown image
page readonly
 clean
DA0147F000
stack
page read and write
 clean
50528FF000
stack
page read and write
 clean
7FF5D7887000
unkown image
page readonly
 clean
7FF5D79B2000
unkown image
page readonly
 clean
505267A000
unkown
page read and write
 clean
1C63066A000
unkown
page read and write
 clean
2C5D7220000
unkown
page read and write
 clean
DA013FF000
stack
page read and write
 clean
7FF5D7CC7000
unkown image
page readonly
 clean
213EC63C000
unkown
page read and write
 clean
1A503310000
unkown image
page readonly
 clean
7FF5D7A0B000
unkown image
page readonly
 clean
2C5D7130000
unkown
page read and write
 clean
237E49A4000
unkown
page read and write
 clean
1C630683000
unkown
page read and write
 clean
213EC700000
unkown
page read and write
 clean
7DF4DD6C0000
unkown image
page readonly
 clean
237E495D000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
7DF5332B0000
unkown image
page readonly
 clean
1E90A000000
unkown
page read and write
 clean
237E4116000
unkown
page read and write
 clean
7DF55AD62000
unkown image
page readonly
 clean
1DE14345000
unkown
page read and write
 clean
213EC580000
unkown image
page readonly
 clean
1E90A058000
unkown
page read and write
 clean
2C5D1FE3000
unkown
page read and write
 clean
7FF5D57FF000
unkown image
page readonly
 clean
7FF503AA5000
unkown image
page readonly
 clean
887F1F7000
stack
page read and write
 clean
7FF529328000
unkown image
page readonly
 clean
7DF5DF800000
unkown image
page readonly
 clean
7FF529506000
unkown image
page readonly
 clean
7DF5E1A70000
unkown image
page readonly
 clean
7FF5D596D000
unkown image
page readonly
 clean
7DF5E1A72000
unkown image
page readonly
 clean
7FF52A836000
unkown image
page readonly
 clean
7FF5D7C77000
unkown image
page readonly
 clean
7FF529456000
unkown image
page readonly
 clean
2C5D7121000
unkown
page read and write
 clean
7FF50421D000
unkown image
page readonly
 clean
7FF5D7C84000
unkown image
page readonly
 clean
1C630440000
unkown image
page read and write
 clean
2C5D1690000
heap private
page read and write
 clean
213EC600000
unkown
page read and write
 clean
7FF52942D000
unkown image
page readonly
 clean
7DF50E072000
unkown image
page readonly
 clean
2C5D1A00000
unkown image
page readonly
 clean
1E90A4D0000
unkown image
page readonly
 clean
237E49AD000
unkown
page read and write
 clean
1E90A057000
unkown
page read and write
 clean
2C5D6D51000
unkown
page read and write
 clean
7DF5DF800000
unkown image
page readonly
 clean
7FF5D55B2000
unkown image
page readonly
 clean
7FF5D5725000
unkown image
page readonly
 clean
1DE146C9000
heap private
page read and write
 clean
2C5D6C40000
unkown
page read and write
 clean
1A502FE2000
unkown
page read and write
 clean
2C5D6BF3000
unkown
page read and write
 clean
7FF550DD5000
unkown image
page readonly
 clean
2C5D70C7000
unkown
page read and write
 clean
7DF431180000
unkown image
page readonly
 clean
237E4965000
unkown
page read and write
 clean
2C5D6D50000
unkown
page read and write
 clean
7DF5346C0000
unkown image
page readonly
 clean
7FF551F36000
unkown image
page readonly
 clean
7DF5DF810000
unkown image
page readonly
 clean
7FF52945D000
unkown image
page readonly
 clean
7FF551F49000
unkown image
page readonly
 clean
7FF550EF2000
unkown image
page readonly
 clean
2C5D6BF0000
unkown
page read and write
 clean
B28F67F000
stack
page read and write
 clean
2C5D2109000
unkown
page read and write
 clean
DA00EF8000
stack
page read and write
 clean
213EC681000
unkown
page read and write
 clean
7FF504229000
unkown image
page readonly
 clean
1A502FD0000
unkown
page read and write
 clean
7FF5D7A6D000
unkown image
page readonly
 clean
237E3FE0000
unkown image
page readonly
 clean
7DF5DF810000
unkown image
page readonly
 clean
7FF5D7C71000
unkown image
page readonly
 clean
2C5D1D90000
unkown image
page readonly
 clean
2C5D6EB0000
unkown
page read and write
 clean
2C5D2118000
unkown
page read and write
 clean
7DF5332D0000
unkown image
page readonly
 clean
2C5D8000000
unkown
page read and write
 clean
7FF529442000
unkown image
page readonly
 clean
887EBAD000
stack
page read and write
 clean
2C5D7112000
unkown
page read and write
 clean
7FF529517000
unkown image
page readonly
 clean
7FF551E31000
unkown image
page readonly
 clean
2C5D717D000
unkown
page read and write
 clean
7FF551709000
unkown image
page readonly
 clean
7FF5D79C4000
unkown image
page readonly
 clean
1C6305B0000
unkown
page read and write
 clean
2C5D70AC000
unkown
page read and write
 clean
2C5D713A000
unkown
page read and write
 clean
7FF52A917000
unkown image
page readonly
 clean
1C630600000
unkown
page read and write
 clean
7FF551E08000
unkown image
page readonly
 clean
2C5D712E000
unkown
page read and write
 clean
237E4E02000
unkown
page read and write
 clean
7FF551FA1000
unkown image
page readonly
 clean
2C5D701F000
unkown
page read and write
 clean
2C5D7132000
unkown
page read and write
 clean
7FF5D52E5000
unkown image
page readonly
 clean
2C5D2118000
unkown
page read and write
 clean
2C5D1C00000
unkown image
page readonly
 clean
2C5D2159000
unkown
page read and write
 clean
213EC708000
unkown
page read and write
 clean
7FF5D7A73000
unkown image
page readonly
 clean
6D7179000
stack
page read and write
 clean
7FF529436000
unkown image
page readonly
 clean
7FF5D7CB3000
unkown image
page readonly
 clean
50527F9000
stack
page read and write
 clean
505277F000
stack
page read and write
 clean
2C5D1FC1000
unkown
page read and write
 clean
7FF550F74000
unkown image
page readonly
 clean
7FF5D578E000
unkown image
page readonly
 clean
1E90A113000
unkown
page read and write
 clean
7DF5E1A70000
unkown image
page readonly
 clean
213EC570000
unkown image
page readonly
 clean
DA0107A000
stack
page read and write
 clean
7FF5D7B94000
unkown image
page readonly
 clean
DA015FF000
stack
page read and write
 clean
DA0127E000
stack
page read and write
 clean
2C5D16F0000
heap default
page read and write
 clean
7FF551EEF000
unkown image
page readonly
 clean
1DE151C0000
unkown
page read and write
 clean
7FF5041EE000
unkown image
page readonly
 clean
1DE14F80000
unkown
page read and write
 clean
7DF55AD80000
unkown image
page readonly
 clean
1A503105000
heap private
page read and write
 clean
6237A77000
stack
page read and write
 clean
7FF550D87000
unkown image
page readonly
 clean
7FF52A6E7000
unkown image
page readonly
 clean
2C5D8010000
unkown
page read and write
 clean
7FF5D57EA000
unkown image
page readonly
 clean
237E495D000
unkown
page read and write
 clean
7FF52A8C1000
unkown image
page readonly
 clean
7FF52A842000
unkown image
page readonly
 clean
7FF52A917000
unkown image
page readonly
 clean
7DF55AD72000
unkown image
page readonly
 clean
7DF5346D0000
unkown image
page readonly
 clean
7FF550DD8000
unkown image
page readonly
 clean
2C5D6E20000
unkown
page read and write
 clean
7DF5E1A80000
unkown image
page readonly
 clean
2C5D6D90000
unkown
page read and write
 clean
237E49BE000
unkown
page read and write
 clean
7DF5DF7F2000
unkown image
page readonly
 clean
7FF550C7B000
unkown image
page readonly
 clean
7FF551FF7000
unkown image
page readonly
 clean
7DF5E1A72000
unkown image
page readonly
 clean
2C5D7133000
unkown
page read and write
 clean
7FF5D594F000
unkown image
page readonly
 clean
1A502FC2000
unkown
page read and write
 clean
7FF5D7A97000
unkown image
page readonly
 clean
7FF550E45000
unkown image
page readonly
 clean
7FF52A758000
unkown image
page readonly
 clean
7FF5D7973000
unkown image
page readonly
 clean
2C5D6D5E000
unkown
page read and write
 clean
7FF5292AA000
unkown image
page readonly
 clean
2C5D2158000
unkown
page read and write
 clean
7FF5D5930000
unkown image
page readonly
 clean
1E909F80000
unkown image
page readonly
 clean
1DE14500000
unkown image
page readonly
 clean
7FF550FC7000
unkown image
page readonly
 clean
2C5D7260000
unkown
page read and write
 clean
1A502FBB000
heap default
page read and write
 clean
237E40E1000
unkown
page read and write
 clean
7DF5346C2000
unkown image
page readonly
 clean
1E90A070000
unkown
page read and write
 clean
62376FE000
stack
page read and write
 clean
237E4070000
unkown
page read and write
 clean
2C5D2158000
unkown
page read and write
 clean
2C5D2118000
unkown
page read and write
 clean
62378FB000
stack
page read and write
 clean
2C5D7000000
unkown
page read and write
 clean
2C5D21DB000
unkown
page read and write
 clean
7FF5D5918000
unkown image
page readonly
 clean
2C5D717A000
unkown
page read and write
 clean
7FF529517000
unkown image
page readonly
 clean
7FF536E9B000
unkown image
page readonly
 clean
237E495D000
unkown
page read and write
 clean
237E4F63000
unkown
page read and write
 clean
2C5D2159000
unkown
page read and write
 clean
237E4964000
unkown
page read and write
 clean
There are 961 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
file:///C:/Users/user/Desktop/ATT24207.html?bbre=1634226343231#/1634226343231-@&WQ3JwLcquUHyk5hzPVseNTK4t!&@R6wPnDsXgHNIv2fx!&@-ZWxpc2FiZXRoLmdhbGxleUBjaHV2LmNo-1634226343231/1634226343231
 clean
https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/login.srf%3Fwa%3Dwsignin1.0%26rpsnv%3D13%26ct%3D1526624083%26rver%3D6.7.6640.0%26wp%3DMBI_SSL%26wreply%3Dhttps%253a%252f%252foutlook.live.com%252fowa%252f%253fnlp%253d1%2526RpsCsrfState%253dbcb5f3f6-b97d-ed7b-9df9-8861d8e6ea95%26id%3D292841%26CBCXT%3Dout%26lw%3D1%26fl%3Ddob%252cflname%252cwld%26cobrandid%3D90015%26contextid%3D982B2F78FD1575EA%26bk%3D1526624084&id=292841&uiflavor=web&cobrandid=723718773160&uaid=71693e68d6ab4064b6ac1c2f53d534bb&mkt=EN-US&lc=1033&bk=1526624084
 clean