Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
malicious.html
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
initial sample
|
||
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\3b7353bd-c059-4377-b6d9-a0dc5d6c32ca.tmp
|
SysEx File -
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\06b20846-b3d0-47fe-8660-db88e117a420.tmp
|
very short file (no magic)
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\292a1145-4cf8-488f-962d-9e3f19e4d6b5.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3f9ac868-ce1c-4051-8431-cf87c5628e03.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\49e4605c-b496-4b81-b286-c9cb0b84e913.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6f3b2d17-c247-4efd-8a35-2dc77c4ee9fa.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\74677654-e294-4b53-8189-c66fb7ab1132.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\94833eac-738b-4825-9e9d-710f7c1e715a.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
|
dBase III DBT, next free block index 3238316739, block length 1024
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old. (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.oldMP (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsa\ (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesMP (copy)
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\45aa492c-6642-458f-ae47-4246b7b52ea9.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State.. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.oldR.
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old..
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\1b3a9eb5-1252-4f90-8154-eb32fae9a30d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.oldx
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.oldTA
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.oldj
(copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTMP (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old.. (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e75ecffe-1f74-482e-affd-54aea94bd073.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.oldT. (copy)
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info CachePT (copy)
|
SysEx File -
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\b1625b90-b616-42f0-a656-5bf73fe5cb77.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\b19133da-9f15-46c4-83cc-7dcb52dcaeaf.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\b50bbbcd-8c6f-469e-b0c2-0c8e4cc4e15e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\d2634b34-ee1a-488b-ac69-96e1c55a5530.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\f801454c-69d0-4b56-948e-b7842ff19173.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_pnacl_json
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377,
stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
|
current ar archive
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
|
current ar archive
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
|
current ar archive
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
|
current ar archive
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce,
stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9,
stripped
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\2908_1830273921\manifest.json
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\bbe74a36-ca42-426e-913e-0b6d123bd0cd.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\f87f1eff-de6a-4f6c-8a9f-eb1aa29c9d4d.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\images\topbar_floating_button_pressed.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_1823948342\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\iw\messages.json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\angular.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\background_script.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\cast_sender.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\common.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\feedback.css
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\feedback.html
|
HTML document, ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\feedback_script.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\material_css_min.css
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\mirroring_cast_streaming.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\mirroring_common.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\mirroring_hangouts.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\CRX_INSTALL\mirroring_webrtc.js
|
ASCII text, with very long lines
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\scoped_dir2908_374621791\bbe74a36-ca42-426e-913e-0b6d123bd0cd.tmp
|
Google Chrome extension, version 3
|
dropped
|
There are 227 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'C:\Users\user\Desktop\malicious.html'
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1516,7360202430288658064,14106405069251077946,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1924 /prefetch:8
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
file:///C:/Users/user/Desktop/malicious.html
|
|||
https://%65%7a%6f%6e%65%73%65%63%75%72%69%74%79%2e%69%6e%66%6f/%63%6f%61%63%68/process.php
|
unknown
|
||
https://apis.google.com/js/client.js
|
unknown
|
||
https://www.google.com/images/cleardot.gif
|
unknown
|
||
https://admtalinka.ru/css/.jd/nw/call.php?u=scott.livingstone@saskhealthauthority.ca
|
185.42.12.128
|
||
https://crash.corp.google.com/samples?reportid=&q=
|
unknown
|
||
https://www.google.com/log?format=json&hasfast=true
|
unknown
|
||
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
||
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
|
unknown
|
||
https://accounts.google.com/MergeSession
|
unknown
|
||
https://preprod-hangouts-googleapis.sandbox.google.com
|
unknown
|
||
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
|
216.58.212.161
|
||
https://www.google.com
|
unknown
|
||
https://onedrive.live.com/?authkey=%21AEz3Chh9CURu9EQ&cid=28E9EC3AAC12FF13&id=28E9EC3AAC12FF13%21253
|
unknown
|
||
https://admtalinka.ru/css/.jd/nw/clearbit.php?d=saskhealthauthority.ca
|
185.42.12.128
|
||
https://admtalinka.ru/css/.jd/nw/call.php?u=scott.livingstone
|
unknown
|
||
https://hangouts.clients6.google.com
|
unknown
|
||
https://meet.google.com
|
unknown
|
||
https://hangouts.google.com/hangouts/_/logpref
|
unknown
|
||
https://accounts.google.com
|
unknown
|
||
https://clients2.google.com/cr/report
|
unknown
|
||
http://angularjs.org
|
unknown
|
||
https://%61%64%6d%74%61%6c%69%6e%6b%61%2e%72%75/%63%73%73/%2e%6a%64/%6e%77/clearbit.php?d=
|
unknown
|
||
https://creativecommons.org/publicdomain/zero/1.0/.
|
unknown
|
||
https://github.com/angular/material
|
unknown
|
||
https://apis.google.com
|
unknown
|
||
https://%61%64%6d%74%61%6c%69%6e%6b%61%2e%72%75/%63%73%73/%2e%6a%64/%6e%77/call.php?u=
|
unknown
|
||
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
|
unknown
|
||
https://github.com/madler/zlib/blob/master/zlib.h
|
unknown
|
||
https://www-googleapis-staging.sandbox.google.com
|
unknown
|
||
https://clients2.google.com
|
unknown
|
||
https://www.google.com/tools/feedback
|
unknown
|
||
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
||
https://dns.google
|
unknown
|
||
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
|
unknown
|
||
https://www.google.com/intl/en-US/chrome/blank.html
|
unknown
|
||
https://ogs.google.com
|
unknown
|
||
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
||
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
|
unknown
|
||
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
142.250.185.110
|
||
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
|
216.58.212.141
|
||
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
||
https://www.google.com;
|
unknown
|
||
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
|
unknown
|
||
https://hangouts.google.com/
|
unknown
|
||
https://www.google.com/images/x2.gif
|
unknown
|
||
http://llvm.org/):
|
unknown
|
||
https://www.google.com/images/dot2.gif
|
unknown
|
||
https://meetings.clients6.google.com
|
unknown
|
||
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
||
https://code.google.com/p/nativeclient/issues/entry%s:
|
unknown
|
||
http://tools.ietf.org/html/rfc1950
|
unknown
|
||
https://code.google.com/p/nativeclient/issues/entry
|
unknown
|
||
https://sts.ehealthsask.ca/adfs/ls/?username=scott.livingstone%40saskhealthauthority.ca&wa=wsignin1.
|
unknown
|
||
https://support.google.com/chromecast/answer/2998456
|
unknown
|
||
https://clients2.googleusercontent.com
|
unknown
|
||
https://docs.google.com
|
unknown
|
||
https://www.google.com/
|
unknown
|
||
https://feedback.googleusercontent.com
|
unknown
|
||
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
|
unknown
|
||
https://clients2.google.com/service/update2/crx
|
unknown
|
||
https://clients6.google.com
|
unknown
|
There are 52 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
admtalinka.ru
|
185.42.12.128
|
||
accounts.google.com
|
216.58.212.141
|
||
clients.l.google.com
|
142.250.185.110
|
||
googlehosted.l.googleusercontent.com
|
216.58.212.161
|
||
clients2.googleusercontent.com
|
unknown
|
||
clients2.google.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.1
|
unknown
|
unknown
|
||
142.250.185.110
|
clients.l.google.com
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
185.42.12.128
|
admtalinka.ru
|
Russian Federation
|
||
216.58.212.161
|
googlehosted.l.googleusercontent.com
|
United States
|
||
216.58.212.141
|
accounts.google.com
|
United States
|
||
127.0.0.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
ahfgeienlihckogmohjhadlkjgocpleb
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
kmendfapggjehodndflmmgagdbamhnfd
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mfehgcgbbipciphmccgaenjidiccnmng
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
neajdppkdcdipfabeoofebfddakdcjhd
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nkeimhogjdpnpccoofpliimaahmaaome
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.reporting
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
module_blacklist_cache_md5_digest
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
media.storage_id_salt
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_account_id
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.account_id
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_seed
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_homepage
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
default_search_provider_data.template_url_data
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
safebrowsing.incidents_sent
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
pinned_tabs
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
search_provider_overrides
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_default_search
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_username
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.startup_urls
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.restore_on_startup
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_version
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_startup_urls
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.prompt_wave
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage_is_newtabpage
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
browser.show_home_button
|
||
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
|
user_experience_metrics.stability.exited_cleanly
|
||
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
lastrun
|
There are 34 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF5E4F43000
|
unkown image
|
page readonly
|
||
1D16DB13000
|
unkown
|
page read and write
|
||
1D16E202000
|
unkown
|
page read and write
|
||
7DF544FF0000
|
unkown image
|
page readonly
|
||
7FF5B4B7D000
|
unkown image
|
page readonly
|
||
7FF541363000
|
unkown image
|
page readonly
|
||
7FF535FBD000
|
unkown image
|
page readonly
|
||
1D47B79D000
|
unkown
|
page read and write
|
||
7FF50A0CF000
|
unkown image
|
page readonly
|
||
1D47B7A8000
|
unkown
|
page read and write
|
||
7DF51FA10000
|
unkown image
|
page readonly
|
||
1685D656000
|
unkown
|
page read and write
|
||
7FF50A049000
|
unkown image
|
page readonly
|
||
7FF51BE86000
|
unkown image
|
page readonly
|
||
23004308000
|
unkown
|
page read and write
|
||
7FF535E26000
|
unkown image
|
page readonly
|
||
1F3BFAFE000
|
unkown
|
page read and write
|
||
7FF54146F000
|
unkown image
|
page readonly
|
||
221BF252000
|
unkown
|
page read and write
|
||
24CD2800000
|
unkown image
|
page readonly
|
||
7FF521F23000
|
unkown image
|
page readonly
|
||
7DF531AD0000
|
unkown image
|
page readonly
|
||
1F3C0400000
|
unkown
|
page read and write
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
7FF5E524F000
|
unkown image
|
page readonly
|
||
6B75DFE000
|
stack
|
page read and write
|
||
1D47B786000
|
unkown
|
page read and write
|
||
7FF5D4CB8000
|
unkown image
|
page readonly
|
||
7FF5D568E000
|
unkown image
|
page readonly
|
||
7DF556D62000
|
unkown image
|
page readonly
|
||
7FF5E5256000
|
unkown image
|
page readonly
|
||
227B8650000
|
unkown image
|
page readonly
|
||
1F3C4F23000
|
unkown
|
page read and write
|
||
1D16D850000
|
heap private
|
page read and write
|
||
2300423C000
|
unkown
|
page read and write
|
||
1458A7D0000
|
unkown image
|
page readonly
|
||
1AE8679000
|
stack
|
page read and write
|
||
230041F0000
|
unkown
|
page read and write
|
||
1F3C0202000
|
unkown
|
page read and write
|
||
7FF50A028000
|
unkown image
|
page readonly
|
||
7FF5B041C000
|
unkown image
|
page readonly
|
||
7FF509EAD000
|
unkown image
|
page readonly
|
||
7DF5C5E10000
|
unkown image
|
page readonly
|
||
227B8047000
|
unkown
|
page read and write
|
||
1F3C0800000
|
unkown image
|
page read and write
|
||
7FF5D5886000
|
unkown image
|
page readonly
|
||
24CD2629000
|
unkown
|
page read and write
|
||
7DF54BA12000
|
unkown image
|
page readonly
|
||
1D47B79B000
|
unkown
|
page read and write
|
||
18B3C370000
|
unkown image
|
page readonly
|
||
7FF54139D000
|
unkown image
|
page readonly
|
||
7FF5D57B3000
|
unkown image
|
page readonly
|
||
1685D713000
|
unkown
|
page read and write
|
||
7FF509FF2000
|
unkown image
|
page readonly
|
||
6B75F7E000
|
stack
|
page read and write
|
||
221BFA02000
|
unkown
|
page read and write
|
||
17DB258E000
|
unkown
|
page read and write
|
||
7FF5E50A3000
|
unkown image
|
page readonly
|
||
1AE81FE000
|
stack
|
page read and write
|
||
1F3BF860000
|
unkown image
|
page readonly
|
||
7FF52F4B3000
|
unkown image
|
page readonly
|
||
7FF521A8F000
|
unkown image
|
page readonly
|
||
7FF521F19000
|
unkown image
|
page readonly
|
||
1D16DE00000
|
unkown image
|
page readonly
|
||
2CA7FE000
|
stack
|
page read and write
|
||
2CA37E000
|
stack
|
page read and write
|
||
7FF521B3A000
|
unkown image
|
page readonly
|
||
1D16D890000
|
unkown image
|
page readonly
|
||
7FF521F45000
|
unkown image
|
page readonly
|
||
1458A9D0000
|
unkown
|
page read and write
|
||
7DF544FF2000
|
unkown image
|
page readonly
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
2CA27C000
|
unkown
|
page read and write
|
||
7FF5412BF000
|
unkown image
|
page readonly
|
||
17DB28F0000
|
unkown image
|
page readonly
|
||
7FF535E5D000
|
unkown image
|
page readonly
|
||
904BFE000
|
stack
|
page read and write
|
||
23004202000
|
unkown
|
page read and write
|
||
7FF52F6EF000
|
unkown image
|
page readonly
|
||
7FF51C1A0000
|
unkown image
|
page readonly
|
||
1F3BF810000
|
unkown image
|
page read and write
|
||
7FF509517000
|
unkown image
|
page readonly
|
||
7FF5D5715000
|
unkown image
|
page readonly
|
||
7DF531AC0000
|
unkown image
|
page readonly
|
||
7FF57D7E6000
|
unkown image
|
page readonly
|
||
1D47B77F000
|
unkown
|
page read and write
|
||
7FF5D5890000
|
unkown image
|
page readonly
|
||
7FF54146F000
|
unkown image
|
page readonly
|
||
1458AF90000
|
unkown
|
page read and write
|
||
7FF57E07E000
|
unkown image
|
page readonly
|
||
7FF5B43F3000
|
unkown image
|
page readonly
|
||
D22A57E000
|
stack
|
page read and write
|
||
7DF5CA550000
|
unkown image
|
page readonly
|
||
7DF5B4070000
|
unkown image
|
page readonly
|
||
7FF541228000
|
unkown image
|
page readonly
|
||
1F3C4F06000
|
unkown
|
page read and write
|
||
7FF50A0ED000
|
unkown image
|
page readonly
|
||
7DF51FA02000
|
unkown image
|
page readonly
|
||
7FF5B0407000
|
unkown image
|
page readonly
|
||
7DF42F990000
|
unkown image
|
page readonly
|
||
1458AB02000
|
unkown
|
page read and write
|
||
7FF51C109000
|
unkown image
|
page readonly
|
||
1685D613000
|
unkown
|
page read and write
|
||
7FF5E49F8000
|
unkown image
|
page readonly
|
||
7FF541367000
|
unkown image
|
page readonly
|
||
7FF51C1B4000
|
unkown image
|
page readonly
|
||
1D47B76E000
|
unkown
|
page read and write
|
||
1D47B77F000
|
unkown
|
page read and write
|
||
1F3C4EB6000
|
unkown
|
page read and write
|
||
18B3C464000
|
unkown
|
page read and write
|
||
221BF251000
|
unkown
|
page read and write
|
||
7DF5FAB80000
|
unkown image
|
page readonly
|
||
7FF57E06D000
|
unkown image
|
page readonly
|
||
1F3BFA00000
|
unkown
|
page read and write
|
||
24CD24F0000
|
unkown image
|
page readonly
|
||
7FF535FF2000
|
unkown image
|
page readonly
|
||
1458A7A0000
|
heap private
|
page read and write
|
||
7DF593980000
|
unkown image
|
page readonly
|
||
1D47B788000
|
unkown
|
page read and write
|
||
904FFE000
|
stack
|
page read and write
|
||
7DF54BA00000
|
unkown image
|
page readonly
|
||
7FF53610D000
|
unkown image
|
page readonly
|
||
1F3C4E4B000
|
unkown
|
page read and write
|
||
1F3C4F02000
|
unkown
|
page read and write
|
||
13F5DFE0000
|
unkown image
|
page read and write
|
||
221BF24C000
|
unkown
|
page read and write
|
||
7FF5360DB000
|
unkown image
|
page readonly
|
||
7FF509DC9000
|
unkown image
|
page readonly
|
||
1D47B78E000
|
unkown
|
page read and write
|
||
1D47AC00000
|
unkown image
|
page readonly
|
||
23004213000
|
unkown
|
page read and write
|
||
1D16D840000
|
unkown image
|
page read and write
|
||
1685D700000
|
unkown
|
page read and write
|
||
13F5E1CF000
|
unkown
|
page read and write
|
||
1F3BFA91000
|
unkown
|
page read and write
|
||
1F3C4F08000
|
unkown
|
page read and write
|
||
13F5E1EE000
|
heap default
|
page read and write
|
||
1F3BF880000
|
heap default
|
page read and write
|
||
7DF544FE2000
|
unkown image
|
page readonly
|
||
7FF51BE78000
|
unkown image
|
page readonly
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
7FF541193000
|
unkown image
|
page readonly
|
||
13F5E280000
|
unkown image
|
page readonly
|
||
7FF50A045000
|
unkown image
|
page readonly
|
||
24CD26BF000
|
unkown
|
page read and write
|
||
1D47B778000
|
unkown
|
page read and write
|
||
23004200000
|
unkown
|
page read and write
|
||
7FF54115C000
|
unkown image
|
page readonly
|
||
1685D600000
|
unkown
|
page read and write
|
||
7FF52F6CD000
|
unkown image
|
page readonly
|
||
1685D668000
|
unkown
|
page read and write
|
||
7FF5360ED000
|
unkown image
|
page readonly
|
||
2CA6F7000
|
stack
|
page read and write
|
||
18B3C513000
|
unkown
|
page read and write
|
||
7FF57DF94000
|
unkown image
|
page readonly
|
||
1F3BF820000
|
heap private
|
page read and write
|
||
24CD2640000
|
unkown
|
page read and write
|
||
1D47B790000
|
unkown
|
page read and write
|
||
7FF5E51D3000
|
unkown image
|
page readonly
|
||
1D47B470000
|
unkown
|
page read and write
|
||
227B8000000
|
unkown
|
page read and write
|
||
1F3C4F02000
|
unkown
|
page read and write
|
||
1F3C4EB6000
|
unkown
|
page read and write
|
||
DFC7F7E000
|
stack
|
page read and write
|
||
7FF5411C0000
|
unkown image
|
page readonly
|
||
7FF53601C000
|
unkown image
|
page readonly
|
||
18B3C43F000
|
unkown
|
page read and write
|
||
13F5E030000
|
unkown image
|
page readonly
|
||
557B4FF000
|
stack
|
page read and write
|
||
1D47B78B000
|
unkown
|
page read and write
|
||
7DF545000000
|
unkown image
|
page readonly
|
||
1AE84F9000
|
stack
|
page read and write
|
||
7DF54BA20000
|
unkown image
|
page readonly
|
||
7FF57E08F000
|
unkown image
|
page readonly
|
||
7FF5360F4000
|
unkown image
|
page readonly
|
||
7FF521B3E000
|
unkown image
|
page readonly
|
||
7FF541352000
|
unkown image
|
page readonly
|
||
7DF4498D0000
|
unkown image
|
page readonly
|
||
5F35978000
|
stack
|
page read and write
|
||
7FF5B04E0000
|
unkown image
|
page readonly
|
||
1685DE02000
|
unkown
|
page read and write
|
||
17DB2730000
|
unkown
|
page read and write
|
||
1F3C4EEF000
|
unkown
|
page read and write
|
||
1D47B784000
|
unkown
|
page read and write
|
||
7FF5E5187000
|
unkown image
|
page readonly
|
||
1F3C5240000
|
unkown
|
page read and write
|
||
70F15FF000
|
stack
|
page read and write
|
||
7FF57E048000
|
unkown image
|
page readonly
|
||
221BF288000
|
unkown
|
page read and write
|
||
23004251000
|
unkown
|
page read and write
|
||
7FF54146B000
|
unkown image
|
page readonly
|
||
1458A8F0000
|
unkown image
|
page readonly
|
||
7FF5D580A000
|
unkown image
|
page readonly
|
||
7FF521F9F000
|
unkown image
|
page readonly
|
||
7DF5CA552000
|
unkown image
|
page readonly
|
||
1F3C0302000
|
unkown
|
page read and write
|
||
7FF57DF9C000
|
unkown image
|
page readonly
|
||
1D16DB08000
|
unkown
|
page read and write
|
||
7FF571D3E000
|
unkown image
|
page readonly
|
||
1458A800000
|
heap default
|
page read and write
|
||
7FF52F608000
|
unkown image
|
page readonly
|
||
1685D602000
|
unkown
|
page read and write
|
||
1F3C0200000
|
unkown
|
page read and write
|
||
7DF5C5E02000
|
unkown image
|
page readonly
|
||
1D47B75B000
|
unkown
|
page read and write
|
||
1F3C4F23000
|
unkown
|
page read and write
|
||
227B7F80000
|
heap default
|
page read and write
|
||
7FF50A10D000
|
unkown image
|
page readonly
|
||
227B7F20000
|
heap private
|
page read and write
|
||
7FF5412A7000
|
unkown image
|
page readonly
|
||
DFC7CFB000
|
stack
|
page read and write
|
||
D22A9FF000
|
stack
|
page read and write
|
||
5F3550C000
|
unkown
|
page read and write
|
||
1F3BFA7B000
|
unkown
|
page read and write
|
||
7FF5B4B5D000
|
unkown image
|
page readonly
|
||
17DB258E000
|
unkown
|
page read and write
|
||
70F0DFF000
|
stack
|
page read and write
|
||
1458AA13000
|
unkown
|
page read and write
|
||
221BF1F0000
|
heap default
|
page read and write
|
||
227B8061000
|
unkown
|
page read and write
|
||
7FF541327000
|
unkown image
|
page readonly
|
||
7FF52F4DE000
|
unkown image
|
page readonly
|
||
7FF521D7D000
|
unkown image
|
page readonly
|
||
1D47BD63000
|
unkown
|
page read and write
|
||
7DF5C5E00000
|
unkown image
|
page readonly
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
7DF5FABA0000
|
unkown image
|
page readonly
|
||
DFC7BFC000
|
stack
|
page read and write
|
||
7FF521FAE000
|
unkown image
|
page readonly
|
||
1F3C4F1F000
|
unkown
|
page read and write
|
||
1D47B778000
|
unkown
|
page read and write
|
||
7FF521FA6000
|
unkown image
|
page readonly
|
||
7FF5E4D68000
|
unkown image
|
page readonly
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7DF5378D0000
|
unkown image
|
page readonly
|
||
5F3627A000
|
stack
|
page read and write
|
||
13F5E1CC000
|
unkown
|
page read and write
|
||
70F10FE000
|
stack
|
page read and write
|
||
7FF57E07B000
|
unkown image
|
page readonly
|
||
23004090000
|
heap private
|
page read and write
|
||
1F3C5124000
|
unkown
|
page read and write
|
||
1F3C0318000
|
unkown
|
page read and write
|
||
7FF52F5E7000
|
unkown image
|
page readonly
|
||
24CD26D0000
|
unkown
|
page read and write
|
||
6B75D7E000
|
stack
|
page read and write
|
||
7FF521FAB000
|
unkown image
|
page readonly
|
||
1D47B794000
|
unkown
|
page read and write
|
||
1F3C4ED9000
|
unkown
|
page read and write
|
||
1458A7E0000
|
unkown image
|
page readonly
|
||
1F3BFF90000
|
unkown image
|
page readonly
|
||
7FF521824000
|
unkown image
|
page readonly
|
||
7FF540F1F000
|
unkown image
|
page readonly
|
||
13F5ECE0000
|
unkown
|
page read and write
|
||
1D16DA4F000
|
unkown
|
page read and write
|
||
1D47B789000
|
unkown
|
page read and write
|
||
7FF5B045A000
|
unkown image
|
page readonly
|
||
17DB2540000
|
unkown
|
page read and write
|
||
1F3C5100000
|
unkown
|
page read and write
|
||
18B3CA50000
|
unkown image
|
page readonly
|
||
24CD2B90000
|
unkown image
|
page readonly
|
||
221BF1A0000
|
unkown image
|
page readonly
|
||
1AE86FF000
|
stack
|
page read and write
|
||
7FF51C0DD000
|
unkown image
|
page readonly
|
||
7FF509ED6000
|
unkown image
|
page readonly
|
||
7FF5AF913000
|
unkown image
|
page readonly
|
||
7FF57DEC7000
|
unkown image
|
page readonly
|
||
2CA57B000
|
stack
|
page read and write
|
||
904CFD000
|
stack
|
page read and write
|
||
7FF52F1C8000
|
unkown image
|
page readonly
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7FF54123C000
|
unkown image
|
page readonly
|
||
7FF50A053000
|
unkown image
|
page readonly
|
||
24CD2600000
|
unkown
|
page read and write
|
||
227B804D000
|
unkown
|
page read and write
|
||
227B7FB0000
|
unkown
|
page read and write
|
||
24CD2500000
|
unkown image
|
page readonly
|
||
2CA47B000
|
stack
|
page read and write
|
||
7DF442EB0000
|
unkown image
|
page readonly
|
||
7FF51C1BB000
|
unkown image
|
page readonly
|
||
7FF54145B000
|
unkown image
|
page readonly
|
||
17DB259D000
|
unkown
|
page read and write
|
||
7FF5B4B9A000
|
unkown image
|
page readonly
|
||
7DF544FF2000
|
unkown image
|
page readonly
|
||
7FF5408A7000
|
unkown image
|
page readonly
|
||
7FF52F6D4000
|
unkown image
|
page readonly
|
||
5F35F7E000
|
stack
|
page read and write
|
||
7FF53610F000
|
unkown image
|
page readonly
|
||
7FF54137C000
|
unkown image
|
page readonly
|
||
1F3C5240000
|
unkown
|
page read and write
|
||
7FF535E87000
|
unkown image
|
page readonly
|
||
17DB258E000
|
unkown
|
page read and write
|
||
7FF521FBD000
|
unkown image
|
page readonly
|
||
7FF57E04F000
|
unkown image
|
page readonly
|
||
7FF521E54000
|
unkown image
|
page readonly
|
||
1D47B79A000
|
unkown
|
page read and write
|
||
7FF52EE5E000
|
unkown image
|
page readonly
|
||
227B805A000
|
unkown
|
page read and write
|
||
7FF5D57B7000
|
unkown image
|
page readonly
|
||
23004080000
|
unkown image
|
page read and write
|
||
24CD2713000
|
unkown
|
page read and write
|
||
1D47AEE5000
|
unkown
|
page read and write
|
||
1D47B7D4000
|
unkown
|
page read and write
|
||
2CA2FE000
|
stack
|
page read and write
|
||
7FF541330000
|
unkown image
|
page readonly
|
||
1D16DA00000
|
unkown
|
page read and write
|
||
1F3C4D60000
|
unkown
|
page read and write
|
||
1458AA00000
|
unkown
|
page read and write
|
||
7FF51C1BE000
|
unkown image
|
page readonly
|
||
7FF541204000
|
unkown image
|
page readonly
|
||
5F35B7A000
|
stack
|
page read and write
|
||
1F3C01C1000
|
unkown
|
page read and write
|
||
7FF521F15000
|
unkown image
|
page readonly
|
||
18B3C402000
|
unkown
|
page read and write
|
||
7FF521CA6000
|
unkown image
|
page readonly
|
||
7FF57DE1A000
|
unkown image
|
page readonly
|
||
227B7F90000
|
unkown image
|
page readonly
|
||
1F3BF9F0000
|
unkown
|
page read and write
|
||
7DF531AC2000
|
unkown image
|
page readonly
|
||
17DB2C70000
|
unkown image
|
page readonly
|
||
7FF5D58BB000
|
unkown image
|
page readonly
|
||
7FF521FC4000
|
unkown image
|
page readonly
|
||
5F3617F000
|
stack
|
page read and write
|
||
7FF5E49FE000
|
unkown image
|
page readonly
|
||
13F5E000000
|
unkown image
|
page readonly
|
||
7DF556D60000
|
unkown image
|
page readonly
|
||
DFC77CB000
|
unkown
|
page read and write
|
||
7FF5E526D000
|
unkown image
|
page readonly
|
||
1F3C4EED000
|
unkown
|
page read and write
|
||
1685D640000
|
unkown
|
page read and write
|
||
1F3C4DD0000
|
unkown
|
page read and write
|
||
7DF5378E2000
|
unkown image
|
page readonly
|
||
7FF5360FE000
|
unkown image
|
page readonly
|
||
D22A7FE000
|
stack
|
page read and write
|
||
13F5E000000
|
unkown image
|
page readonly
|
||
7FF50A075000
|
unkown image
|
page readonly
|
||
7FF5E5274000
|
unkown image
|
page readonly
|
||
7FF5B0475000
|
unkown image
|
page readonly
|
||
7FF50A0D6000
|
unkown image
|
page readonly
|
||
13F5EF40000
|
unkown
|
page readonly
|
||
1D47B777000
|
unkown
|
page read and write
|
||
7FF521DF6000
|
unkown image
|
page readonly
|
||
2CA5FE000
|
stack
|
page read and write
|
||
1F3C4F0A000
|
unkown
|
page read and write
|
||
7FF52F633000
|
unkown image
|
page readonly
|
||
1685DAD0000
|
unkown image
|
page readonly
|
||
1685D628000
|
unkown
|
page read and write
|
||
1F3C4E14000
|
unkown
|
page read and write
|
||
7FF5B4BB3000
|
unkown image
|
page readonly
|
||
1AE85FE000
|
stack
|
page read and write
|
||
1F3C0318000
|
unkown
|
page read and write
|
||
7DF5CA560000
|
unkown image
|
page readonly
|
||
7FF57E08F000
|
unkown image
|
page readonly
|
||
5F35D79000
|
stack
|
page read and write
|
||
557AD8F000
|
stack
|
page read and write
|
||
1F3C4DC0000
|
unkown
|
page read and write
|
||
13F5E140000
|
unkown
|
page read and write
|
||
7FF5E51C5000
|
unkown image
|
page readonly
|
||
7FF57E056000
|
unkown image
|
page readonly
|
||
7FF541163000
|
unkown image
|
page readonly
|
||
1AE817F000
|
stack
|
page read and write
|
||
7DF5B4072000
|
unkown image
|
page readonly
|
||
7FF540FD3000
|
unkown image
|
page readonly
|
||
1F3C4DF0000
|
unkown
|
page read and write
|
||
7FF5B4C08000
|
unkown image
|
page readonly
|
||
1F3C4EB6000
|
unkown
|
page read and write
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
1D16D860000
|
unkown image
|
page readonly
|
||
13F5E460000
|
heap private
|
page read and write
|
||
7DF5EB1B0000
|
unkown image
|
page readonly
|
||
1D47B790000
|
unkown
|
page read and write
|
||
7FF50A05A000
|
unkown image
|
page readonly
|
||
7FF535FC0000
|
unkown image
|
page readonly
|
||
7FF5E519C000
|
unkown image
|
page readonly
|
||
7FF50A0FE000
|
unkown image
|
page readonly
|
||
7DF5378D0000
|
unkown image
|
page readonly
|
||
7DF531AC0000
|
unkown image
|
page readonly
|
||
7DF5939A0000
|
unkown image
|
page readonly
|
||
7FF5B4C4F000
|
unkown image
|
page readonly
|
||
13F5EF50000
|
unkown
|
page read and write
|
||
5F35E7B000
|
stack
|
page read and write
|
||
1F3C4F02000
|
unkown
|
page read and write
|
||
221BF860000
|
unkown image
|
page readonly
|
||
7FF52F6B6000
|
unkown image
|
page readonly
|
||
7FF5D58BF000
|
unkown image
|
page readonly
|
||
17DB2520000
|
unkown image
|
page readonly
|
||
1458AC00000
|
unkown image
|
page readonly
|
||
7FF5B0428000
|
unkown image
|
page readonly
|
||
904E7D000
|
stack
|
page read and write
|
||
2300424A000
|
unkown
|
page read and write
|
||
1D16DB02000
|
unkown
|
page read and write
|
||
7DF51FA00000
|
unkown image
|
page readonly
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
1F3C4F04000
|
unkown
|
page read and write
|
||
1F3C5200000
|
unkown
|
page read and write
|
||
1F3C0A00000
|
unkown image
|
page readonly
|
||
D22A47B000
|
unkown
|
page read and write
|
||
7DF54BA02000
|
unkown image
|
page readonly
|
||
23004A02000
|
unkown
|
page read and write
|
||
7FF540C13000
|
unkown image
|
page readonly
|
||
1685D5A0000
|
unkown image
|
page readonly
|
||
227B7F60000
|
unkown image
|
page readonly
|
||
DD018BC000
|
unkown
|
page read and write
|
||
7DF4357A0000
|
unkown image
|
page readonly
|
||
24CD2A00000
|
unkown image
|
page readonly
|
||
18B3C400000
|
unkown
|
page read and write
|
||
7FF5B4C0F000
|
unkown image
|
page readonly
|
||
7FF5B0453000
|
unkown image
|
page readonly
|
||
7FF541340000
|
unkown image
|
page readonly
|
||
1D47B7BB000
|
unkown
|
page read and write
|
||
1D47B77F000
|
unkown
|
page read and write
|
||
7FF536053000
|
unkown image
|
page readonly
|
||
7FF57E05B000
|
unkown image
|
page readonly
|
||
1F3C4F03000
|
unkown
|
page read and write
|
||
1F3C5240000
|
unkown
|
page read and write
|
||
1458AA5C000
|
unkown
|
page read and write
|
||
18B3C502000
|
unkown
|
page read and write
|
||
7DF556D80000
|
unkown image
|
page readonly
|
||
7FF509FFC000
|
unkown image
|
page readonly
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
70F0EFC000
|
stack
|
page read and write
|
||
1F3BFABC000
|
unkown
|
page read and write
|
||
1F3C4E30000
|
unkown
|
page read and write
|
||
1458B200000
|
unkown
|
page read and write
|
||
7FF5D57ED000
|
unkown image
|
page readonly
|
||
7FF50A018000
|
unkown image
|
page readonly
|
||
7FF52F6DB000
|
unkown image
|
page readonly
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
1685D8D0000
|
unkown image
|
page readonly
|
||
7FF5D589D000
|
unkown image
|
page readonly
|
||
70F14FE000
|
stack
|
page read and write
|
||
13F5E020000
|
unkown image
|
page readonly
|
||
7FF51C0A0000
|
unkown image
|
page readonly
|
||
1F3C5103000
|
unkown
|
page read and write
|
||
7FF521EE7000
|
unkown image
|
page readonly
|
||
7DF544FF0000
|
unkown image
|
page readonly
|
||
1F3C4EAE000
|
unkown
|
page read and write
|
||
1D16DA13000
|
unkown
|
page read and write
|
||
7FF5B4C34000
|
unkown image
|
page readonly
|
||
7FF541454000
|
unkown image
|
page readonly
|
||
17DB2AF0000
|
unkown image
|
page readonly
|
||
7FF52F5F7000
|
unkown image
|
page readonly
|
||
227B806A000
|
unkown
|
page read and write
|
||
6B75CFF000
|
stack
|
page read and write
|
||
7DF593992000
|
unkown image
|
page readonly
|
||
7FF54116D000
|
unkown image
|
page readonly
|
||
7FF536045000
|
unkown image
|
page readonly
|
||
1D16DA3C000
|
unkown
|
page read and write
|
||
1F3C4DE0000
|
unkown
|
page read and write
|
||
7FF54144D000
|
unkown image
|
page readonly
|
||
17DB259E000
|
unkown
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
17DB2596000
|
unkown
|
page read and write
|
||
17DB2586000
|
unkown
|
page read and write
|
||
7FF541377000
|
unkown image
|
page readonly
|
||
1D47B79A000
|
unkown
|
page read and write
|
||
1F3C4F0C000
|
unkown
|
page read and write
|
||
7FF5D5389000
|
unkown image
|
page readonly
|
||
1685D570000
|
unkown image
|
page readonly
|
||
7DF5378D2000
|
unkown image
|
page readonly
|
||
1D47B470000
|
unkown
|
page read and write
|
||
DD0247E000
|
stack
|
page read and write
|
||
1D47AEE8000
|
unkown
|
page read and write
|
||
1F3BF830000
|
unkown image
|
page readonly
|
||
7FF51BF6D000
|
unkown image
|
page readonly
|
||
1685D679000
|
unkown
|
page read and write
|
||
1F3BF980000
|
unkown
|
page read and write
|
||
7DF5FABA0000
|
unkown image
|
page readonly
|
||
1F3C5000000
|
unkown
|
page read and write
|
||
1F3BFF80000
|
unkown image
|
page readonly
|
||
227B805F000
|
unkown
|
page read and write
|
||
7DF4F8A50000
|
unkown image
|
page readonly
|
||
227B807A000
|
unkown
|
page read and write
|
||
1F3C4F2B000
|
unkown
|
page read and write
|
||
7DF5378E2000
|
unkown image
|
page readonly
|
||
7FF52F253000
|
unkown image
|
page readonly
|
||
1D47B759000
|
unkown
|
page read and write
|
||
1F3C4EF9000
|
unkown
|
page read and write
|
||
7FF50951C000
|
unkown image
|
page readonly
|
||
1F3C5230000
|
unkown
|
page read and write
|
||
24CD2A10000
|
unkown image
|
page readonly
|
||
7FF52F6C0000
|
unkown image
|
page readonly
|
||
18B3CA60000
|
unkown image
|
page readonly
|
||
1D16DA2A000
|
unkown
|
page read and write
|
||
1D47B7DB000
|
unkown
|
page read and write
|
||
7FF5B01C3000
|
unkown image
|
page readonly
|
||
230040D0000
|
unkown image
|
page readonly
|
||
7FF536049000
|
unkown image
|
page readonly
|
||
7FF54112F000
|
unkown image
|
page readonly
|
||
5F35FFE000
|
stack
|
page read and write
|
||
1458AE00000
|
unkown image
|
page readonly
|
||
227B82D0000
|
unkown image
|
page readonly
|
||
7FF53605A000
|
unkown image
|
page readonly
|
||
7FF5D57D8000
|
unkown image
|
page readonly
|
||
7FF57DFC9000
|
unkown image
|
page readonly
|
||
7FF521FCB000
|
unkown image
|
page readonly
|
||
7FF52EE58000
|
unkown image
|
page readonly
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
7DF5C5E02000
|
unkown image
|
page readonly
|
||
7FF5B04FE000
|
unkown image
|
page readonly
|
||
7DF5CA542000
|
unkown image
|
page readonly
|
||
7DF544FE0000
|
unkown image
|
page readonly
|
||
7FF5D570F000
|
unkown image
|
page readonly
|
||
17DB28E0000
|
heap private
|
page read and write
|
||
7DF593982000
|
unkown image
|
page readonly
|
||
7FF5360C8000
|
unkown image
|
page readonly
|
||
7DF5B4090000
|
unkown image
|
page readonly
|
||
221BF1D0000
|
unkown image
|
page readonly
|
||
7DF531AE0000
|
unkown image
|
page readonly
|
||
7FF5B0449000
|
unkown image
|
page readonly
|
||
7FF5B4BB5000
|
unkown image
|
page readonly
|
||
557B0FB000
|
stack
|
page read and write
|
||
1458A7B0000
|
unkown image
|
page readonly
|
||
7DF556D70000
|
unkown image
|
page readonly
|
||
7DF54BA20000
|
unkown image
|
page readonly
|
||
227B8067000
|
unkown
|
page read and write
|
||
7FF51B5C2000
|
unkown image
|
page readonly
|
||
24CD26E2000
|
unkown
|
page read and write
|
||
18B3C360000
|
heap private
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
7FF535C41000
|
unkown image
|
page readonly
|
||
227B8059000
|
unkown
|
page read and write
|
||
1F3C51B0000
|
unkown
|
page read and write
|
||
7FF5410FA000
|
unkown image
|
page readonly
|
||
1F3C5108000
|
unkown
|
page read and write
|
||
1F3C4F1E000
|
unkown
|
page read and write
|
||
7FF51C19B000
|
unkown image
|
page readonly
|
||
24CD2613000
|
unkown
|
page read and write
|
||
7FF5E502A000
|
unkown image
|
page readonly
|
||
1D47BC02000
|
unkown
|
page read and write
|
||
230040C0000
|
unkown image
|
page readonly
|
||
18B3C475000
|
unkown
|
page read and write
|
||
7FF5D57C7000
|
unkown image
|
page readonly
|
||
230040A0000
|
unkown image
|
page readonly
|
||
5F360FF000
|
stack
|
page read and write
|
||
7FF50A0E0000
|
unkown image
|
page readonly
|
||
7DF531AD2000
|
unkown image
|
page readonly
|
||
7FF51C135000
|
unkown image
|
page readonly
|
||
7DF5FAB92000
|
unkown image
|
page readonly
|
||
1D47B781000
|
unkown
|
page read and write
|
||
7FF5B4C20000
|
unkown image
|
page readonly
|
||
1F3BFE00000
|
unkown image
|
page readonly
|
||
7DF51FA12000
|
unkown image
|
page readonly
|
||
24CD2C80000
|
unkown
|
page read and write
|
||
1F3C5121000
|
unkown
|
page read and write
|
||
7DF51FA20000
|
unkown image
|
page readonly
|
||
7FF5213FA000
|
unkown image
|
page readonly
|
||
7FF57D929000
|
unkown image
|
page readonly
|
||
221BF300000
|
unkown
|
page read and write
|
||
7FF50A10F000
|
unkown image
|
page readonly
|
||
DFC7A7E000
|
stack
|
page read and write
|
||
7DF593992000
|
unkown image
|
page readonly
|
||
7DF5EB1C0000
|
unkown image
|
page readonly
|
||
24CD2520000
|
heap default
|
page read and write
|
||
1D47BD02000
|
unkown
|
page read and write
|
||
DD01F7E000
|
stack
|
page read and write
|
||
1D47B77E000
|
unkown
|
page read and write
|
||
227B806D000
|
unkown
|
page read and write
|
||
1D47B470000
|
unkown
|
page read and write
|
||
24CD24D0000
|
unkown image
|
page readonly
|
||
7FF521FDF000
|
unkown image
|
page readonly
|
||
7DF5C5E20000
|
unkown image
|
page readonly
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
7FF521E5E000
|
unkown image
|
page readonly
|
||
7DF5EB1B0000
|
unkown image
|
page readonly
|
||
1F3C4E3E000
|
unkown
|
page read and write
|
||
13F5E1C5000
|
unkown
|
page read and write
|
||
7FF5412E4000
|
unkown image
|
page readonly
|
||
221BF313000
|
unkown
|
page read and write
|
||
70F11FE000
|
stack
|
page read and write
|
||
23004780000
|
unkown image
|
page readonly
|
||
1F3C08E0000
|
unkown
|
page read and write
|
||
1D47B75B000
|
unkown
|
page read and write
|
||
1685D560000
|
heap private
|
page read and write
|
||
7FF5E5053000
|
unkown image
|
page readonly
|
||
1F3C4DE0000
|
unkown
|
page read and write
|
||
1F3BFA72000
|
unkown
|
page read and write
|
||
1D47B779000
|
unkown
|
page read and write
|
||
7FF57D7EE000
|
unkown image
|
page readonly
|
||
7DF5FAB82000
|
unkown image
|
page readonly
|
||
1D47BC02000
|
unkown
|
page read and write
|
||
1F3BFC00000
|
unkown image
|
page readonly
|
||
1D47B781000
|
unkown
|
page read and write
|
||
221BF190000
|
heap private
|
page read and write
|
||
1458AA24000
|
unkown
|
page read and write
|
||
1D47BC6A000
|
unkown
|
page read and write
|
||
1D47B7A5000
|
unkown
|
page read and write
|
||
7FF52F61D000
|
unkown image
|
page readonly
|
||
7FF51C1CF000
|
unkown image
|
page readonly
|
||
13F5DFF0000
|
unkown
|
page read and write
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7DF5EB1B2000
|
unkown image
|
page readonly
|
||
7DF5CA550000
|
unkown image
|
page readonly
|
||
227B8057000
|
unkown
|
page read and write
|
||
1D16D8B0000
|
heap default
|
page read and write
|
||
1D47B7DB000
|
unkown
|
page read and write
|
||
7DF54BA10000
|
unkown image
|
page readonly
|
||
227B8058000
|
unkown
|
page read and write
|
||
227B8042000
|
unkown
|
page read and write
|
||
1D47BD02000
|
unkown
|
page read and write
|
||
17DB2500000
|
unkown image
|
page readonly
|
||
1F3BF990000
|
unkown image
|
page read and write
|
||
24CD2CC0000
|
unkown image
|
page write copy
|
||
1685DC60000
|
unkown image
|
page readonly
|
||
7FF54142F000
|
unkown image
|
page readonly
|
||
1D47BC6A000
|
unkown
|
page read and write
|
||
7FF5B04FB000
|
unkown image
|
page readonly
|
||
13F5E188000
|
heap default
|
page read and write
|
||
7FF5B04C8000
|
unkown image
|
page readonly
|
||
70F0C7A000
|
stack
|
page read and write
|
||
7DF5EB1C2000
|
unkown image
|
page readonly
|
||
5F3647F000
|
stack
|
page read and write
|
||
7DF54BA00000
|
unkown image
|
page readonly
|
||
7FF52F5FC000
|
unkown image
|
page readonly
|
||
7FF52F63A000
|
unkown image
|
page readonly
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
7FF54135C000
|
unkown image
|
page readonly
|
||
13F5E680000
|
unkown image
|
page readonly
|
||
7DF593982000
|
unkown image
|
page readonly
|
||
1458AF80000
|
unkown image
|
page readonly
|
||
7FF5E5104000
|
unkown image
|
page readonly
|
||
DFC7AFE000
|
stack
|
page read and write
|
||
1F3C4F20000
|
unkown
|
page read and write
|
||
7FF54131D000
|
unkown image
|
page readonly
|
||
1685D5D0000
|
unkown image
|
page readonly
|
||
70F0A7B000
|
unkown
|
page read and write
|
||
7FF521FCE000
|
unkown image
|
page readonly
|
||
1F3C0359000
|
unkown
|
page read and write
|
||
7FF521DED000
|
unkown image
|
page readonly
|
||
7FF51C188000
|
unkown image
|
page readonly
|
||
7FF5E4D53000
|
unkown image
|
page readonly
|
||
1D16DB00000
|
unkown
|
page read and write
|
||
7FF51C0B3000
|
unkown image
|
page readonly
|
||
13F5E470000
|
unkown
|
page read and write
|
||
17DB28E5000
|
heap private
|
page read and write
|
||
221BF269000
|
unkown
|
page read and write
|
||
7FF5D58A4000
|
unkown image
|
page readonly
|
||
1458A8E0000
|
unkown image
|
page readonly
|
||
1F3C4F2D000
|
unkown
|
page read and write
|
||
227B803B000
|
unkown
|
page read and write
|
||
7FF535FAD000
|
unkown image
|
page readonly
|
||
1F3BF960000
|
unkown image
|
page readonly
|
||
1F3C5210000
|
unkown
|
page read and write
|
||
7FF51C113000
|
unkown image
|
page readonly
|
||
18B3C46F000
|
unkown
|
page read and write
|
||
7DF5C5E10000
|
unkown image
|
page readonly
|
||
7DF5FAB92000
|
unkown image
|
page readonly
|
||
1458AF90000
|
unkown
|
page read and write
|
||
7FF54146D000
|
unkown image
|
page readonly
|
||
7DF51FA02000
|
unkown image
|
page readonly
|
||
1D47B757000
|
unkown
|
page read and write
|
||
227B803D000
|
unkown
|
page read and write
|
||
7FF521F98000
|
unkown image
|
page readonly
|
||
1F3C0318000
|
unkown
|
page read and write
|
||
7FF536075000
|
unkown image
|
page readonly
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
557AD0F000
|
stack
|
page read and write
|
||
7FF5E50E5000
|
unkown image
|
page readonly
|
||
7DF5939A0000
|
unkown image
|
page readonly
|
||
1F3C0359000
|
unkown
|
page read and write
|
||
7DF5FAB80000
|
unkown image
|
page readonly
|
||
1D47BC02000
|
unkown
|
page read and write
|
||
70F12FE000
|
stack
|
page read and write
|
||
18B3C3D0000
|
unkown image
|
page readonly
|
||
1F3BFA58000
|
unkown
|
page read and write
|
||
1F3C4F04000
|
unkown
|
page read and write
|
||
7FF5408BA000
|
unkown image
|
page readonly
|
||
1D47B776000
|
unkown
|
page read and write
|
||
7DF4E9080000
|
unkown image
|
page readonly
|
||
7FF535EDE000
|
unkown image
|
page readonly
|
||
1F3C0700000
|
unkown
|
page read and write
|
||
227B8102000
|
unkown
|
page read and write
|
||
221BF23C000
|
unkown
|
page read and write
|
||
1F3C5101000
|
unkown
|
page read and write
|
||
1D47B776000
|
unkown
|
page read and write
|
||
7FF57E060000
|
unkown image
|
page readonly
|
||
1F3C4EB0000
|
unkown
|
page read and write
|
||
7DF5CA540000
|
unkown image
|
page readonly
|
||
1685D5F0000
|
unkown
|
page read and write
|
||
7FF51C0C7000
|
unkown image
|
page readonly
|
||
7FF52F6A8000
|
unkown image
|
page readonly
|
||
7DF51FA12000
|
unkown image
|
page readonly
|
||
1F3BFB02000
|
unkown
|
page read and write
|
||
1107CFE000
|
stack
|
page read and write
|
||
7FF5D5825000
|
unkown image
|
page readonly
|
||
5F35A7A000
|
stack
|
page read and write
|
||
1F3BF830000
|
unkown image
|
page readonly
|
||
227B807E000
|
unkown
|
page read and write
|
||
1F3C09E0000
|
unkown image
|
page readonly
|
||
7FF52F629000
|
unkown image
|
page readonly
|
||
227B7F30000
|
unkown image
|
page readonly
|
||
7FF5B04F4000
|
unkown image
|
page readonly
|
||
24CD266E000
|
unkown
|
page read and write
|
||
7FF5E505E000
|
unkown image
|
page readonly
|
||
1458AA33000
|
unkown
|
page read and write
|
||
1F3C0318000
|
unkown
|
page read and write
|
||
17DB2571000
|
unkown
|
page read and write
|
||
1F3BFA13000
|
unkown
|
page read and write
|
||
7FF5B4C2D000
|
unkown image
|
page readonly
|
||
7FF50A0C8000
|
unkown image
|
page readonly
|
||
1F3BFA29000
|
unkown
|
page read and write
|
||
7FF50A10F000
|
unkown image
|
page readonly
|
||
D22A6FE000
|
stack
|
page read and write
|
||
7FF540FA1000
|
unkown image
|
page readonly
|
||
7FF51C1CF000
|
unkown image
|
page readonly
|
||
7FF5E51A8000
|
unkown image
|
page readonly
|
||
1D16DA70000
|
unkown
|
page read and write
|
||
1F3C09C0000
|
unkown image
|
page readonly
|
||
557B5FF000
|
stack
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
227B807B000
|
unkown
|
page read and write
|
||
7FF5D5734000
|
unkown image
|
page readonly
|
||
7DF5FAB90000
|
unkown image
|
page readonly
|
||
7FF52F6EB000
|
unkown image
|
page readonly
|
||
7FF51C1AD000
|
unkown image
|
page readonly
|
||
1F3C4F22000
|
unkown
|
page read and write
|
||
221BF6D0000
|
unkown image
|
page readonly
|
||
17DB2770000
|
unkown image
|
page readonly
|
||
1D16D9B0000
|
unkown
|
page read and write
|
||
7FF540F76000
|
unkown image
|
page readonly
|
||
1458B002000
|
unkown
|
page read and write
|
||
7DF5EB1C0000
|
unkown image
|
page readonly
|
||
7FF5360DE000
|
unkown image
|
page readonly
|
||
7FF521D28000
|
unkown image
|
page readonly
|
||
1F3C5124000
|
unkown
|
page read and write
|
||
7FF54145E000
|
unkown image
|
page readonly
|
||
7DF531AC2000
|
unkown image
|
page readonly
|
||
7DF5378E0000
|
unkown image
|
page readonly
|
||
7FF5D5398000
|
unkown image
|
page readonly
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
1D47B79F000
|
unkown
|
page read and write
|
||
7FF52F503000
|
unkown image
|
page readonly
|
||
1F3C5250000
|
unkown
|
page read and write
|
||
1107BFB000
|
stack
|
page read and write
|
||
1458AA2A000
|
unkown
|
page read and write
|
||
1D16D880000
|
unkown image
|
page readonly
|
||
7DF5378F0000
|
unkown image
|
page readonly
|
||
7FF53603D000
|
unkown image
|
page readonly
|
||
5F35C7E000
|
stack
|
page read and write
|
||
1F3C4F1E000
|
unkown
|
page read and write
|
||
7FF51BEC8000
|
unkown image
|
page readonly
|
||
1D16DC00000
|
unkown image
|
page readonly
|
||
221BF229000
|
unkown
|
page read and write
|
||
7FF5E4D59000
|
unkown image
|
page readonly
|
||
7DF556D72000
|
unkown image
|
page readonly
|
||
23004600000
|
unkown image
|
page readonly
|
||
1D16DA2D000
|
unkown
|
page read and write
|
||
7FF5D57F5000
|
unkown image
|
page readonly
|
||
7FF541161000
|
unkown image
|
page readonly
|
||
24CD2F00000
|
unkown
|
page read and write
|
||
1F3C4DF0000
|
unkown
|
page read and write
|
||
7FF540C0F000
|
unkown image
|
page readonly
|
||
7FF52F1B9000
|
unkown image
|
page readonly
|
||
7FF57D860000
|
unkown image
|
page readonly
|
||
1F3C5330000
|
unkown
|
page read and write
|
||
13F5E450000
|
unkown
|
page read and write
|
||
1F3C4F1B000
|
unkown
|
page read and write
|
||
23004302000
|
unkown
|
page read and write
|
||
7FF5D58BF000
|
unkown image
|
page readonly
|
||
7FF521D72000
|
unkown image
|
page readonly
|
||
7FF535C16000
|
unkown image
|
page readonly
|
||
7FF541129000
|
unkown image
|
page readonly
|
||
1F3C4F34000
|
unkown
|
page read and write
|
||
7FF52F6BB000
|
unkown image
|
page readonly
|
||
7FF54143B000
|
unkown image
|
page readonly
|
||
227B8029000
|
unkown
|
page read and write
|
||
7DF5378D2000
|
unkown image
|
page readonly
|
||
70F13FF000
|
stack
|
page read and write
|
||
1D16DA4B000
|
unkown
|
page read and write
|
||
7FF509ECC000
|
unkown image
|
page readonly
|
||
7FF5B050F000
|
unkown image
|
page readonly
|
||
24CD2702000
|
unkown
|
page read and write
|
||
7DF5C5E00000
|
unkown image
|
page readonly
|
||
1F3C4E23000
|
unkown
|
page read and write
|
||
1F3C4E00000
|
unkown
|
page read and write
|
||
1D47AEA7000
|
unkown
|
page read and write
|
||
13F5E440000
|
unkown
|
page read and write
|
||
7FF52F6EF000
|
unkown image
|
page readonly
|
||
DD0227B000
|
stack
|
page read and write
|
||
221BF302000
|
unkown
|
page read and write
|
||
7FF5B4B89000
|
unkown image
|
page readonly
|
||
7DF5378E0000
|
unkown image
|
page readonly
|
||
1D47B780000
|
unkown
|
page read and write
|
||
557AC8C000
|
unkown
|
page read and write
|
||
1F3C4F1C000
|
unkown
|
page read and write
|
||
1D47B7D7000
|
unkown
|
page read and write
|
||
7FF541191000
|
unkown image
|
page readonly
|
||
227B8060000
|
unkown
|
page read and write
|
||
221BF180000
|
unkown image
|
page read and write
|
||
7FF57DE9D000
|
unkown image
|
page readonly
|
||
18B3C3A0000
|
unkown image
|
page readonly
|
||
7FF5B02AD000
|
unkown image
|
page readonly
|
||
18B3C465000
|
unkown
|
page read and write
|
||
2CA9FE000
|
stack
|
page read and write
|
||
7FF52F625000
|
unkown image
|
page readonly
|
||
7DF531AD0000
|
unkown image
|
page readonly
|
||
18B3C3C0000
|
heap default
|
page read and write
|
||
7DF544FE2000
|
unkown image
|
page readonly
|
||
7DF54BA02000
|
unkown image
|
page readonly
|
||
1AE847E000
|
stack
|
page read and write
|
||
24CD24C0000
|
heap private
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
18B3C370000
|
unkown image
|
page readonly
|
||
7DF5CA560000
|
unkown image
|
page readonly
|
||
1685D550000
|
unkown image
|
page read and write
|
||
227B84D0000
|
unkown image
|
page readonly
|
||
227B8062000
|
unkown
|
page read and write
|
||
1F3C5100000
|
unkown
|
page read and write
|
||
7FF521EC2000
|
unkown image
|
page readonly
|
||
7DF41D8D0000
|
unkown image
|
page readonly
|
||
7FF5E528B000
|
unkown image
|
page readonly
|
||
7FF57DFD3000
|
unkown image
|
page readonly
|
||
7FF5D56D3000
|
unkown image
|
page readonly
|
||
2300424F000
|
unkown
|
page read and write
|
||
11079FB000
|
stack
|
page read and write
|
||
1D47B780000
|
unkown
|
page read and write
|
||
1D16DA88000
|
unkown
|
page read and write
|
||
17DB2597000
|
unkown
|
page read and write
|
||
7FF5E5248000
|
unkown image
|
page readonly
|
||
7DF5CA552000
|
unkown image
|
page readonly
|
||
6B75EFE000
|
stack
|
page read and write
|
||
1D47B78C000
|
unkown
|
page read and write
|
||
1D47B781000
|
unkown
|
page read and write
|
||
18B3C6D0000
|
unkown image
|
page readonly
|
||
1685D590000
|
unkown image
|
page readonly
|
||
221BF270000
|
unkown
|
page read and write
|
||
1685D5C0000
|
heap default
|
page read and write
|
||
7FF5360CF000
|
unkown image
|
page readonly
|
||
1F3C4F10000
|
unkown
|
page read and write
|
||
7FF52F6DE000
|
unkown image
|
page readonly
|
||
1AE80FC000
|
unkown
|
page read and write
|
||
7FF51C18F000
|
unkown image
|
page readonly
|
||
1D47B7A3000
|
unkown
|
page read and write
|
||
23004400000
|
unkown image
|
page readonly
|
||
7FF5B0445000
|
unkown image
|
page readonly
|
||
557B3FE000
|
stack
|
page read and write
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
1685DC50000
|
unkown image
|
page readonly
|
||
7FF5B050F000
|
unkown image
|
page readonly
|
||
1F3C039A000
|
unkown
|
page read and write
|
||
DD0207E000
|
stack
|
page read and write
|
||
DD0237D000
|
stack
|
page read and write
|
||
7FF5B043D000
|
unkown image
|
page readonly
|
||
1F3BFA77000
|
unkown
|
page read and write
|
||
227B806B000
|
unkown
|
page read and write
|
||
1458AF90000
|
unkown
|
page read and write
|
||
24CD2BA0000
|
unkown image
|
page readonly
|
||
2CA8FD000
|
stack
|
page read and write
|
||
7FF521ED3000
|
unkown image
|
page readonly
|
||
1F3C4DF0000
|
unkown
|
page read and write
|
||
1F3C4ED9000
|
unkown
|
page read and write
|
||
7FF50A0DB000
|
unkown image
|
page readonly
|
||
DD01CFC000
|
stack
|
page read and write
|
||
1D47B786000
|
unkown
|
page read and write
|
||
1F3C4F10000
|
unkown
|
page read and write
|
||
7FF509D9A000
|
unkown image
|
page readonly
|
||
7FF5B4C4F000
|
unkown image
|
page readonly
|
||
7FF5D588B000
|
unkown image
|
page readonly
|
||
7FF52F53F000
|
unkown image
|
page readonly
|
||
7FF5AF953000
|
unkown image
|
page readonly
|
||
DFC807E000
|
stack
|
page read and write
|
||
24CD268A000
|
unkown
|
page read and write
|
||
1F3C4F22000
|
unkown
|
page read and write
|
||
7FF50A0FB000
|
unkown image
|
page readonly
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7FF5E507E000
|
unkown image
|
page readonly
|
||
7FF5B4C16000
|
unkown image
|
page readonly
|
||
1F3C09D0000
|
unkown image
|
page readonly
|
||
7DF5EB1B2000
|
unkown image
|
page readonly
|
||
7FF51C1CD000
|
unkown image
|
page readonly
|
||
7DF51FA10000
|
unkown image
|
page readonly
|
||
227B7F30000
|
unkown image
|
page readonly
|
||
7FF541223000
|
unkown image
|
page readonly
|
||
7DF51FA20000
|
unkown image
|
page readonly
|
||
1D16DA4E000
|
unkown
|
page read and write
|
||
1F3BFB13000
|
unkown
|
page read and write
|
||
7FF540FF0000
|
unkown image
|
page readonly
|
||
7FF50A03D000
|
unkown image
|
page readonly
|
||
7FF5E502D000
|
unkown image
|
page readonly
|
||
7FF509E0D000
|
unkown image
|
page readonly
|
||
7FF540FE4000
|
unkown image
|
page readonly
|
||
18B3C350000
|
unkown image
|
page read and write
|
||
7FF5D57CC000
|
unkown image
|
page readonly
|
||
18B3C3F0000
|
unkown
|
page read and write
|
||
7FF521CB8000
|
unkown image
|
page readonly
|
||
7FF5B4C3E000
|
unkown image
|
page readonly
|
||
7FF5360D6000
|
unkown image
|
page readonly
|
||
7FF5D587F000
|
unkown image
|
page readonly
|
||
7FF5E525B000
|
unkown image
|
page readonly
|
||
7DF5B4080000
|
unkown image
|
page readonly
|
||
904D7F000
|
stack
|
page read and write
|
||
18B3C390000
|
unkown image
|
page readonly
|
||
1458AA02000
|
unkown
|
page read and write
|
||
1F3C4F1B000
|
unkown
|
page read and write
|
||
5F35EFF000
|
stack
|
page read and write
|
||
7FF51C105000
|
unkown image
|
page readonly
|
||
DD021FD000
|
stack
|
page read and write
|
||
7FF57DFF5000
|
unkown image
|
page readonly
|
||
7FF541344000
|
unkown image
|
page readonly
|
||
17DB2587000
|
unkown
|
page read and write
|
||
7DF5C5E12000
|
unkown image
|
page readonly
|
||
7DF5CA542000
|
unkown image
|
page readonly
|
||
7FF5360FB000
|
unkown image
|
page readonly
|
||
7FF57DEB9000
|
unkown image
|
page readonly
|
||
7FF52F5E3000
|
unkown image
|
page readonly
|
||
7FF5D56AE000
|
unkown image
|
page readonly
|
||
23004300000
|
unkown
|
page read and write
|
||
7FF541348000
|
unkown image
|
page readonly
|
||
7FF53610F000
|
unkown image
|
page readonly
|
||
7FF50A0F4000
|
unkown image
|
page readonly
|
||
7FF521FDB000
|
unkown image
|
page readonly
|
||
7DF5EB1D0000
|
unkown image
|
page readonly
|
||
7DF5EB1D0000
|
unkown image
|
page readonly
|
||
7FF5E51BD000
|
unkown image
|
page readonly
|
||
13F5E465000
|
heap private
|
page read and write
|
||
7FF509EDF000
|
unkown image
|
page readonly
|
||
7FF5B4C3B000
|
unkown image
|
page readonly
|
||
227B8032000
|
unkown
|
page read and write
|
||
DD01EFC000
|
stack
|
page read and write
|
||
11075EF000
|
stack
|
page read and write
|
||
1F3C4F20000
|
unkown
|
page read and write
|
||
7FF5B4B93000
|
unkown image
|
page readonly
|
||
1458AA3D000
|
unkown
|
page read and write
|
||
1F3C4F20000
|
unkown
|
page read and write
|
||
1F3C51B0000
|
unkown
|
page read and write
|
||
7DF5C5E20000
|
unkown image
|
page readonly
|
||
1F3C510E000
|
unkown
|
page read and write
|
||
7FF50A007000
|
unkown image
|
page readonly
|
||
221BF6E0000
|
unkown image
|
page readonly
|
||
DFC7D7F000
|
stack
|
page read and write
|
||
7FF51C090000
|
unkown image
|
page readonly
|
||
7FF5E51DA000
|
unkown image
|
page readonly
|
||
221BF274000
|
unkown
|
page read and write
|
||
13F5E180000
|
heap default
|
page read and write
|
||
13F5E469000
|
heap private
|
page read and write
|
||
1D47B786000
|
unkown
|
page read and write
|
||
221BF213000
|
unkown
|
page read and write
|
||
7DF556D62000
|
unkown image
|
page readonly
|
||
230041D0000
|
unkown image
|
page readonly
|
||
1F3C0D60000
|
unkown
|
page read and write
|
||
7FF5D4CBE000
|
unkown image
|
page readonly
|
||
7FF509E17000
|
unkown image
|
page readonly
|
||
7FF5B04DB000
|
unkown image
|
page readonly
|
||
7FF52F6AF000
|
unkown image
|
page readonly
|
||
7FF5B47F6000
|
unkown image
|
page readonly
|
||
7FF521ECC000
|
unkown image
|
page readonly
|
||
1D16DA7F000
|
unkown
|
page read and write
|
||
1F3C5120000
|
unkown
|
page read and write
|
||
7FF57DFC5000
|
unkown image
|
page readonly
|
||
1F3C4F20000
|
unkown
|
page read and write
|
||
13F5E880000
|
unkown image
|
page readonly
|
||
18B3C413000
|
unkown
|
page read and write
|
||
7FF535FFC000
|
unkown image
|
page readonly
|
||
1D47BD63000
|
unkown
|
page read and write
|
||
7FF5D5683000
|
unkown image
|
page readonly
|
||
7FF541428000
|
unkown image
|
page readonly
|
||
7DF51FA00000
|
unkown image
|
page readonly
|
||
7FF5D5573000
|
unkown image
|
page readonly
|
||
1D47B7CD000
|
unkown
|
page read and write
|
||
7FF5E5197000
|
unkown image
|
page readonly
|
||
1D47B78B000
|
unkown
|
page read and write
|
||
221BF308000
|
unkown
|
page read and write
|
||
7FF521EB4000
|
unkown image
|
page readonly
|
||
1D16DA52000
|
unkown
|
page read and write
|
||
7FF5413B3000
|
unkown image
|
page readonly
|
||
7FF5E527B000
|
unkown image
|
page readonly
|
||
7DF593980000
|
unkown image
|
page readonly
|
||
227B8040000
|
unkown
|
page read and write
|
||
13F5EFB0000
|
unkown
|
page read and write
|
||
227B8026000
|
unkown
|
page read and write
|
||
13F5E1CC000
|
unkown
|
page read and write
|
||
227B8084000
|
unkown
|
page read and write
|
||
7FF5E527E000
|
unkown image
|
page readonly
|
||
1D47B780000
|
unkown
|
page read and write
|
||
1F3BFA8B000
|
unkown
|
page read and write
|
||
1D47B7A7000
|
unkown
|
page read and write
|
||
7FF5E51F5000
|
unkown image
|
page readonly
|
||
11074EB000
|
unkown
|
page read and write
|
||
7FF5D57F9000
|
unkown image
|
page readonly
|
||
7FF54120D000
|
unkown image
|
page readonly
|
||
13F5ECF0000
|
unkown
|
page read and write
|
||
1F3C5220000
|
unkown
|
page read and write
|
||
1F3BFAA1000
|
unkown
|
page read and write
|
||
221BF27F000
|
unkown
|
page read and write
|
||
7FF57E074000
|
unkown image
|
page readonly
|
||
1F3C4F1E000
|
unkown
|
page read and write
|
||
7DF545000000
|
unkown image
|
page readonly
|
||
7FF521FDF000
|
unkown image
|
page readonly
|
||
1F3BF850000
|
unkown image
|
page readonly
|
||
7FF5B4C1B000
|
unkown image
|
page readonly
|
||
557B2F7000
|
stack
|
page read and write
|
||
7FF5413BA000
|
unkown image
|
page readonly
|
||
24CD24B0000
|
unkown image
|
page read and write
|
||
1D47B77A000
|
unkown
|
page read and write
|
||
7DF5378F0000
|
unkown image
|
page readonly
|
||
7DF593990000
|
unkown image
|
page readonly
|
||
7FF52F564000
|
unkown image
|
page readonly
|
||
7FF535954000
|
unkown image
|
page readonly
|
||
1685D702000
|
unkown
|
page read and write
|
||
7FF52F655000
|
unkown image
|
page readonly
|
||
7FF57DFBD000
|
unkown image
|
page readonly
|
||
7FF521F0D000
|
unkown image
|
page readonly
|
||
7FF535D9A000
|
unkown image
|
page readonly
|
||
7FF59E77F000
|
unkown image
|
page readonly
|
||
1F3C4F38000
|
unkown
|
page read and write
|
||
7DF454C30000
|
unkown image
|
page readonly
|
||
DD020FC000
|
stack
|
page read and write
|
||
7DF5FAB82000
|
unkown image
|
page readonly
|
||
7FF5D58AE000
|
unkown image
|
page readonly
|
||
7FF54143E000
|
unkown image
|
page readonly
|
||
1F3C4F29000
|
unkown
|
page read and write
|
||
13F5E160000
|
unkown image
|
page readonly
|
||
1D47B778000
|
unkown
|
page read and write
|
||
1D47B79C000
|
unkown
|
page read and write
|
||
7DF5EB1C2000
|
unkown image
|
page readonly
|
||
7FF536014000
|
unkown image
|
page readonly
|
||
7FF5B04D6000
|
unkown image
|
page readonly
|
||
7FF5E51C9000
|
unkown image
|
page readonly
|
||
904AFC000
|
stack
|
page read and write
|
||
6B75C7A000
|
unkown
|
page read and write
|
||
7FF5B4B85000
|
unkown image
|
page readonly
|
||
7FF52F48D000
|
unkown image
|
page readonly
|
||
7FF521ED5000
|
unkown image
|
page readonly
|
||
7FF541388000
|
unkown image
|
page readonly
|
||
5F3558F000
|
stack
|
page read and write
|
||
7DF531AD2000
|
unkown image
|
page readonly
|
||
1F3BFA8F000
|
unkown
|
page read and write
|
||
7FF535FC7000
|
unkown image
|
page readonly
|
||
7FF5E50DF000
|
unkown image
|
page readonly
|
||
18B3C8D0000
|
unkown image
|
page readonly
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
18B3C456000
|
unkown
|
page read and write
|
||
1685D570000
|
unkown image
|
page readonly
|
||
1F3C4EB6000
|
unkown
|
page read and write
|
||
1F3C4EB6000
|
unkown
|
page read and write
|
||
1F3C4F1E000
|
unkown
|
page read and write
|
||
7FF5D5803000
|
unkown image
|
page readonly
|
||
230040F0000
|
heap default
|
page read and write
|
||
7FF51C0D7000
|
unkown image
|
page readonly
|
||
1F3C0359000
|
unkown
|
page read and write
|
||
1F3C0300000
|
unkown
|
page read and write
|
||
7DF531AE0000
|
unkown image
|
page readonly
|
||
227B8013000
|
unkown
|
page read and write
|
||
1D16D990000
|
unkown image
|
page readonly
|
||
D22A8FE000
|
stack
|
page read and write
|
||
7FF571D3E000
|
unkown image
|
page readonly
|
||
1AE857C000
|
stack
|
page read and write
|
||
1D47B78B000
|
unkown
|
page read and write
|
||
7DF4C3CD0000
|
unkown image
|
page readonly
|
||
1D47B792000
|
unkown
|
page read and write
|
||
17DB2500000
|
unkown image
|
page readonly
|
||
1D47B7A3000
|
unkown
|
page read and write
|
||
227B8055000
|
unkown
|
page read and write
|
||
1F3C4E99000
|
unkown
|
page read and write
|
||
7FF509EA2000
|
unkown image
|
page readonly
|
||
7FF5D5383000
|
unkown image
|
page readonly
|
||
221BF269000
|
unkown
|
page read and write
|
||
227B8056000
|
unkown
|
page read and write
|
||
17DB24E0000
|
unkown image
|
page read and write
|
||
7FF5E5183000
|
unkown image
|
page readonly
|
||
1F3C5106000
|
unkown
|
page read and write
|
||
2300426F000
|
unkown
|
page read and write
|
||
227B8802000
|
unkown
|
page read and write
|
||
7FF5413A9000
|
unkown image
|
page readonly
|
||
17DB2576000
|
heap default
|
page read and write
|
||
7DF54BA10000
|
unkown image
|
page readonly
|
||
7FF5413D5000
|
unkown image
|
page readonly
|
||
1D47BC02000
|
unkown
|
page read and write
|
||
1D16DA55000
|
unkown
|
page read and write
|
||
7FF541320000
|
unkown image
|
page readonly
|
||
1F3C5120000
|
unkown
|
page read and write
|
||
7DF556D72000
|
unkown image
|
page readonly
|
||
7FF52F4BE000
|
unkown image
|
page readonly
|
||
1458A7B0000
|
unkown image
|
page readonly
|
||
1D16DF80000
|
unkown image
|
page readonly
|
||
13F5E120000
|
unkown
|
page read and write
|
||
23004229000
|
unkown
|
page read and write
|
||
9045AB000
|
unkown
|
page read and write
|
||
7FF536017000
|
unkown image
|
page readonly
|
||
DD0257E000
|
stack
|
page read and write
|
||
1F3C0A10000
|
unkown image
|
page readonly
|
||
227B8041000
|
unkown
|
page read and write
|
||
24CD24D0000
|
unkown image
|
page readonly
|
||
1F3BFA40000
|
unkown
|
page read and write
|
||
1F3C5104000
|
unkown
|
page read and write
|
||
1F3C09F0000
|
unkown image
|
page readonly
|
||
7FF52F3A3000
|
unkown image
|
page readonly
|
||
221BF4D0000
|
unkown image
|
page readonly
|
||
1F3BF9F3000
|
unkown
|
page read and write
|
||
227B8077000
|
unkown
|
page read and write
|
||
7FF5D565D000
|
unkown image
|
page readonly
|
||
1D47B78B000
|
unkown
|
page read and write
|
||
1D47BC02000
|
unkown
|
page read and write
|
||
1F3C0215000
|
unkown
|
page read and write
|
||
227B805C000
|
unkown
|
page read and write
|
||
1D47B79C000
|
unkown
|
page read and write
|
||
1107AFB000
|
stack
|
page read and write
|
||
7FF541013000
|
unkown image
|
page readonly
|
||
221BF256000
|
unkown
|
page read and write
|
||
13F5EF30000
|
unkown
|
page read and write
|
||
17DB2560000
|
heap default
|
page read and write
|
||
227B7F10000
|
unkown image
|
page read and write
|
||
7FF57D914000
|
unkown image
|
page readonly
|
||
7FF521EEC000
|
unkown image
|
page readonly
|
||
7FF521F2A000
|
unkown image
|
page readonly
|
||
7DF5FAB90000
|
unkown image
|
page readonly
|
||
1D47B78B000
|
unkown
|
page read and write
|
||
2300424C000
|
unkown
|
page read and write
|
||
7DF5B4082000
|
unkown image
|
page readonly
|
||
7FF50A10B000
|
unkown image
|
page readonly
|
||
7FF50A003000
|
unkown image
|
page readonly
|
||
13F5E400000
|
unkown image
|
page readonly
|
||
221BF200000
|
unkown
|
page read and write
|
||
1F3C0359000
|
unkown
|
page read and write
|
||
7FF536007000
|
unkown image
|
page readonly
|
||
221BF950000
|
unkown
|
page read and write
|
||
227B8035000
|
unkown
|
page read and write
|
||
7FF52F1B3000
|
unkown image
|
page readonly
|
||
1F3C0313000
|
unkown
|
page read and write
|
||
7FF521FDD000
|
unkown image
|
page readonly
|
||
7FF5E528F000
|
unkown image
|
page readonly
|
||
221BF1A0000
|
unkown image
|
page readonly
|
||
557B1FB000
|
stack
|
page read and write
|
||
7FF52F545000
|
unkown image
|
page readonly
|
||
1F3C53D0000
|
unkown
|
page read and write
|
||
1D47B77E000
|
unkown
|
page read and write
|
||
18B3C45A000
|
unkown
|
page read and write
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7DF491850000
|
unkown image
|
page readonly
|
||
1D47BC26000
|
unkown
|
page read and write
|
||
17DB2760000
|
unkown image
|
page readonly
|
||
2300428D000
|
unkown
|
page read and write
|
||
1F3C01E0000
|
unkown
|
page read and write
|
||
7FF50A01C000
|
unkown image
|
page readonly
|
||
7FF509FE4000
|
unkown image
|
page readonly
|
||
7FF521EF8000
|
unkown image
|
page readonly
|
||
18B3CC02000
|
unkown
|
page read and write
|
||
7DF544FE0000
|
unkown image
|
page readonly
|
||
1D47B778000
|
unkown
|
page read and write
|
||
1F3C4EDE000
|
unkown
|
page read and write
|
||
1F3C4E60000
|
unkown
|
page read and write
|
||
230040A0000
|
unkown image
|
page readonly
|
||
24CD2E02000
|
unkown
|
page read and write
|
||
7FF51C0FD000
|
unkown image
|
page readonly
|
||
7DF54BA12000
|
unkown image
|
page readonly
|
||
7FF541177000
|
unkown image
|
page readonly
|
||
D22A4FE000
|
stack
|
page read and write
|
||
7FF540FEA000
|
unkown image
|
page readonly
|
||
904A7E000
|
stack
|
page read and write
|
||
7FF541153000
|
unkown image
|
page readonly
|
||
1F3C01F0000
|
unkown
|
page read and write
|
||
7DF593990000
|
unkown image
|
page readonly
|
||
1F3C51F0000
|
unkown
|
page read and write
|
||
7FF540FFF000
|
unkown image
|
page readonly
|
||
1F3C4E62000
|
unkown
|
page read and write
|
||
7FF5E528F000
|
unkown image
|
page readonly
|
||
DFC7E77000
|
stack
|
page read and write
|
||
1F3BFA95000
|
unkown
|
page read and write
|
||
7FF521ED7000
|
unkown image
|
page readonly
|
||
13F5E1CD000
|
unkown
|
page read and write
|
||
7DF4C8410000
|
unkown image
|
page readonly
|
||
1D47B788000
|
unkown
|
page read and write
|
||
7DF556D60000
|
unkown image
|
page readonly
|
||
7FF541436000
|
unkown image
|
page readonly
|
||
221BF1C0000
|
unkown image
|
page readonly
|
||
23004313000
|
unkown
|
page read and write
|
||
7FF5D58AB000
|
unkown image
|
page readonly
|
||
7DF556D80000
|
unkown image
|
page readonly
|
||
110756F000
|
stack
|
page read and write
|
||
7FF51C11A000
|
unkown image
|
page readonly
|
||
5F3607E000
|
stack
|
page read and write
|
||
7FF51C196000
|
unkown image
|
page readonly
|
||
7FF5D5878000
|
unkown image
|
page readonly
|
||
7FF54115A000
|
unkown image
|
page readonly
|
||
7FF535DC9000
|
unkown image
|
page readonly
|
||
7FF5E5260000
|
unkown image
|
page readonly
|
||
1F3C4EB7000
|
unkown
|
page read and write
|
||
1D16D860000
|
unkown image
|
page readonly
|
||
1D47B75C000
|
unkown
|
page read and write
|
||
7FF521E02000
|
unkown image
|
page readonly
|
||
18B3C429000
|
unkown
|
page read and write
|
||
7FF5408B2000
|
unkown image
|
page readonly
|
||
227B7F50000
|
unkown image
|
page readonly
|
||
7FF509F8E000
|
unkown image
|
page readonly
|
||
6B75E79000
|
stack
|
page read and write
|
||
1458A790000
|
unkown image
|
page read and write
|
||
7FF5413A5000
|
unkown image
|
page readonly
|
||
7DF5CA540000
|
unkown image
|
page readonly
|
||
1D47B7D7000
|
unkown
|
page read and write
|
||
7FF5B050B000
|
unkown image
|
page readonly
|
||
13F5EF60000
|
unkown
|
page read and write
|
||
1F3C4ED7000
|
unkown
|
page read and write
|
||
1D47B7BD000
|
unkown
|
page read and write
|
||
7FF5B04CF000
|
unkown image
|
page readonly
|
||
7DF556D70000
|
unkown image
|
page readonly
|
||
7DF5C5E12000
|
unkown image
|
page readonly
|
There are 1187 hidden memdumps, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
file:///C:/Users/user/Desktop/malicious.html
|