IOC Report

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
data
dropped
 malicious
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\270d1ae3-a8e7-4718-a439-2a420bd945e9.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\2ab76064-d0eb-479f-a001-d137bfb0f71f.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\3c4dc10a-6b29-49a3-9531-7a271ac47c5a.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\4988ff75-f3c8-4e83-adb3-ab386877b5dc.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\77174424-62b6-405e-8363-cd74b0bbc544.tmp
SysEx File -
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7a85afbb-5c77-44f7-a060-367613a9a524.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7b8d9eae-c9ae-4711-acd3-201be1566198.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\7c70e6dc-cfdd-47dc-aff2-225058a56d48.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\03fd430f-6deb-4812-99ea-b59a9ede9e29.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\29bc34f5-ae61-4202-89cb-7e973df930ea.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\34b742d5-f474-4352-8242-7e48018712e4.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6462047e-159c-4168-9b87-6db31197f81b.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\778ac3b2-2ab8-45de-b205-14c7086cf6d7.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9ea6abee-46f6-4153-bd83-a7e1b9d4814e.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old% (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old.B (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs\ (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.oldSe (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences= (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences\ (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencese (copy)
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\7e6b36eb-98aa-4434-8749-4a693a5e1731.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.olda: (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.oldng (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\f93d8e45-faf5-491c-9138-e9c96212eb0a.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldil (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b415c51a-f271-4a14-911b-4b40365a2243.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c63a4195-cd9b-4e97-9bd6-d38a86e81c6c.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d2626725-d28e-45ff-a2c0-28625d45d5fc.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTMP (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ecfda881-c92d-42a7-8a24-b3f961b013bf.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
SysEx File -
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cachees (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cachek (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\e2a52ef3-d9e4-4ae3-9ab0-8fead634d03b.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\02b52002-df87-4003-982f-e0e074545ca6.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\19d878a5-c6a3-4793-8c33-3d2098c2f1f0.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\5592_284229910\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5592_284229910\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5592_284229910\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5592_284229910\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\a0be83fa-aeb7-4184-a640-fe762ec5a62d.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\b7b477e5-745d-45d0-80f0-de6189243683.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\19d878a5-c6a3-4793-8c33-3d2098c2f1f0.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\craw_background.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\craw_window.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\css\craw_window.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\html\craw_window.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\flapper.gif
GIF image data, version 89a, 30 x 30
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\topbar_floating_button.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\topbar_floating_button_close.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\topbar_floating_button_hover.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\topbar_floating_button_maximize.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\images\topbar_floating_button_pressed.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1078669202\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\am\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ar\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\bg\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\bn\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ca\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\cs\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\da\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\de\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\el\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\en\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\es\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\et\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\fa\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\fi\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\fil\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\fr\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\gu\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\hi\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\hr\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\hu\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\id\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\it\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\iw\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ja\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\kn\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ko\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\lt\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\lv\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ml\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\mr\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ms\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\nb\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\nl\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\pl\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\pt\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ro\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ru\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\sk\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\sl\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\sr\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\sv\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\sw\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\ta\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\te\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\th\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\tr\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\uk\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\vi\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\zh\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\_locales\zh_TW\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\angular.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\background_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\cast_sender.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\common.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\feedback.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\feedback.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\feedback_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\CRX_INSTALL\manifest.json
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5592_1521302513\b7b477e5-745d-45d0-80f0-de6189243683.tmp
Google Chrome extension, version 3
dropped
 clean
There are 217 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://u24446853.ct.sendgrid.net/ls/click?upn=2uaNz-2FYjiscZpiutVe517e1jlr3lepEnrnsWNCPAOwkCCTXQeXr-2BepbdfLnt25C-2FIpGIpmBWJIGrGI7WTghaHYbzg4YPxvCdg3xu75rKS5Z2dWj-2BwSmMRg34ICZ8ja8fHD8I_kEclMa76Gh3cVzwZQhAnSe3K0XLsCUjXxFgNkspkWtxOoIRO696T7loAgXlV1fQeo1r4IGHI7gZO7Q-2B7Wf386LPWKE4j1-2Bc5-2Fm0r-2BYto7ntGbibabQUAIufAXApvWOajwe84D0s1aeXv3ZLXcvEwsx-2B15P3e1GldBbfHsodO-2FN22e-2BuVkMRTdrcV05bYTaxJ32HhzbBwK7tH99O7QgCkhLLBEM7J-2FRKwNmANA-2FnTiZYeQJHgZP9NamfB-2B4QxAz5qLCNhSBSd71T5mmEm9aAwn-2Fb7-2BhEPvbCOanNtcY22SYCG4Cw9CFSGE2VeVA1JLBHoba8KwaGYRgBFr-2FeSMfVZrL6Yev7-2BB-2BjC-2FGLBtU-2Fba-2Bk1V0rT35pyYq6lC20GCteOOn6sf1oo-2F-2FJvIl5jwKFxuS2ELtvjiwKdbWt3Y0WC66t4KhQNwFHtevHRPNr3tqbe36wj9MvC46XfPd-2FJxAeIK6iJWsV7K2ArOrNvW7zSS87IFMGinq4g7dS-2FM0SDzSJ098QQeJADirLBUhRDX1eQ4GzwDGjp-2FMwCDu24D18aD2-2Bl-2BCex5oLDpyelAJmPjz8sGQOYguay3GWxdtkVNROgUlIYD-2F-2FWnWcK5eFCJPj2JruJodGVfRXWpXotlhnJAuZb74DVzPeoycMdCUnuZyzDYBojQcCt4APV8zkE-2F8JBMX5-2BCW2P3dOcWG-2FvW-2F6bH9c6X5SMfq-2BQFhotTNO0-2BCPMPlBZEbUkOSThv7Bo37a2bwxZQ8XADBXCWUzDbpUO0CiOVj10FsjlksA-2B3ove-2BVVIVKGnHw53y2wl5FfP8Wmt5KNwaLGhyKy0kcqTApKSiPJqtynExy5awEjETFhGMlS2lBtvIp1q5HApJYSsaMh2gMQDVc8ZHhfjt7ODK3QHtTOQTruvo-2Bz5Zu49ytPbtvrFag-3D-3D
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1528,6543888065847324446,5589979798800107218,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1948 /prefetch:8
clean

URLs

Name
IP
Malicious
https://u24446853.ct.sendgrid.net/ls/click?upn=2uaNz-2FYjiscZpiutVe517e1jlr3lepEnrnsWNCPAOwkCCTXQeXr-2BepbdfLnt25C-2FIpGIpmBWJIGrGI7WTghaHYbzg4YPxvCdg3xu75rKS5Z2dWj-2BwSmMRg34ICZ8ja8fHD8I_kEclMa76Gh3cVzwZQhAnSe3K0XLsCUjXxFgNkspkWtxOoIRO696T7loAgXlV1fQeo1r4IGHI7gZO7Q-2B7Wf386LPWKE4j1-2Bc5-2Fm0r-2BYto7ntGbibabQUAIufAXApvWOajwe84D0s1aeXv3ZLXcvEwsx-2B15P3e1GldBbfHsodO-2FN22e-2BuVkMRTdrcV05bYTaxJ32HhzbBwK7tH99O7QgCkhLLBEM7J-2FRKwNmANA-2FnTiZYeQJHgZP9NamfB-2B4QxAz5qLCNhSBSd71T5mmEm9aAwn-2Fb7-2BhEPvbCOanNtcY22SYCG4Cw9CFSGE2VeVA1JLBHoba8KwaGYRgBFr-2FeSMfVZrL6Yev7-2BB-2BjC-2FGLBtU-2Fba-2Bk1V0rT35pyYq6lC20GCteOOn6sf1oo-2F-2FJvIl5jwKFxuS2ELtvjiwKdbWt3Y0WC66t4KhQNwFHtevHRPNr3tqbe36wj9MvC46XfPd-2FJxAeIK6iJWsV7K2ArOrNvW7zSS87IFMGinq4g7dS-2FM0SDzSJ098QQeJADirLBUhRDX1eQ4GzwDGjp-2FMwCDu24D18aD2-2Bl-2BCex5oLDpyelAJmPjz8sGQOYguay3GWxdtkVNROgUlIYD-2F-2FWnWcK5eFCJPj2JruJodGVfRXWpXotlhnJAuZb74DVzPeoycMdCUnuZyzDYBojQcCt4APV8zkE-2F8JBMX5-2BCW2P3dOcWG-2FvW-2F6bH9c6X5SMfq-2BQFhotTNO0-2BCPMPlBZEbUkOSThv7Bo37a2bwxZQ8XADBXCWUzDbpUO0CiOVj10FsjlksA-2B3ove-2BVVIVKGnHw53y2wl5FfP8Wmt5KNwaLGhyKy0kcqTApKSiPJqtynExy5awEjETFhGMlS2lBtvIp1q5HApJYSsaMh2gMQDVc8ZHhfjt7ODK3QHtTOQTruvo-2Bz5Zu49ytPbtvrFag-3D-3D
malicious
https://app.forexliteoptions.com/core/database/xero/css/hover.css
198.54.115.249
 malicious
https://account.live.com/Resources/images/Microsoft_Logotype_White_4MYDQRab31HKDWWN-1HafA2.svg
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=UZEov5stylofvQeTvi6FdBRF92t9kWFo6Mur%2FZPLYvDuKXws2P0vCg%2F
unknown
 clean
https://logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
192.229.221.185
 clean
https://account.live.com/Resources/images/favicon.ico4
unknown
 clean
https://code.jquery.com/jquery-3.2.1.slim.min.js
unknown
 clean
https://635028.selcdn.ru/msoffice/index2.html#miranda_muscente
unknown
 clean
https://crash.corp.google.com/samples?reportid=&q=
unknown
 clean
https://u24446853.ct.sendgrid.net/ls/click?upn=2uaNz-2FYjiscZpiutVe517e1jlr3lepEnrnsWNCPAOwkCCTXQeXr
unknown
 clean
https://kit-free.fontawesome.com/releases/latest/css/free-v4-shims.min.css/
unknown
 clean
https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_white_ufRYlllWOw4YyDRi
unknown
 clean
https://acctcdn.msauth.net/oneds_EMWt_lK9fDTY6ZqY6xYrUA2.js?v=1
152.199.21.175
 clean
http://pki.goog/repo/certs/gtsr1.der04
unknown
 clean
https://www.google.com
unknown
 clean
https://account.live.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
unknown
 clean
https://635028.selcdn.ru/msoffice/index2.html#miranda_muscente@condenast.com
clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207
 clean
https://acctcdn.msauth.net/bootstrapshim_IX6xrWCoGcREOsbbsQ1Yvg2.js?v=1
152.199.21.175
 clean
https://kit.fontawesome.com/585b051251.js
unknown
 clean
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
unknown
 clean
https://acctcdn.msauth.net/jqueryshim_tGLkJ9mWEbN2n0ToVG2gvQ2.js?v=1
152.199.21.175
 clean
https://a.nel.cloudflare.com/report/v3?s=Mv7kpnB9XBHXWPxF04Nn3UQelYcsJiE2Ph9zggIq4mds9xJATEd07ejKNGN
unknown
 clean
https://acctcdn.msauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg
152.199.21.175
 clean
https://u24446853.ct.sendgrid.net/ls/click?upn=2uaNz-2FYjiscZpiutVe517e1jlr3lepEnrnsWNCPAOwkCCTXQeXr-2BepbdfLnt25C-2FIpGIpmBWJIGrGI7WTghaHYbzg4YPxvCdg3xu75rKS5Z2dWj-2BwSmMRg34ICZ8ja8fHD8I_kEclMa76Gh3cVzwZQhAnSe3K0XLsCUjXxFgNkspkWtxOoIRO696T7loAgXlV1fQeo1r4IGHI7gZO7Q-2B7Wf386LPWKE4j1-2Bc5-2Fm0r-2BYto7ntGbibabQUAIufAXApvWOajwe84D0s1aeXv3ZLXcvEwsx-2B15P3e1GldBbfHsodO-2FN22e-2BuVkMRTdrcV05bYTaxJ32HhzbBwK7tH99O7QgCkhLLBEM7J-2FRKwNmANA-2FnTiZYeQJHgZP9NamfB-2B4QxAz5qLCNhSBSd71T5mmEm9aAwn-2Fb7-2BhEPvbCOanNtcY22SYCG4Cw9CFSGE2VeVA1JLBHoba8KwaGYRgBFr-2FeSMfVZrL6Yev7-2BB-2BjC-2FGLBtU-2Fba-2Bk1V0rT35pyYq6lC20GCteOOn6sf1oo-2F-2FJvIl5jwKFxuS2ELtvjiwKdbWt3Y0WC66t4KhQNwFHtevHRPNr3tqbe36wj9MvC46XfPd-2FJxAeIK6iJWsV7K2ArOrNvW7zSS87IFMGinq4g7dS-2FM0SDzSJ098QQeJADirLBUhRDX1eQ4GzwDGjp-2FMwCDu24D18aD2-2Bl-2BCex5oLDpyelAJmPjz8sGQOYguay3GWxdtkVNROgUlIYD-2F-2FWnWcK5eFCJPj2JruJodGVfRXWpXotlhnJAuZb74DVzPeoycMdCUnuZyzDYBojQcCt4APV8zkE-2F8JBMX5-2BCW2P3dOcWG-2FvW-2F6bH9c6X5SMfq-2BQFhotTNO0-2BCPMPlBZEbUkOSThv7Bo37a2bwxZQ8XADBXCWUzDbpUO0CiOVj10FsjlksA-2B3ove-2BVVIVKGnHw53y2wl5FfP8Wmt5KNwaLGhyKy0kcqTApKSiPJqtynExy5awEjETFhGMlS2lBtvIp1q5HApJYSsaMh2gMQDVc8ZHhfjt7ODK3QHtTOQTruvo-2Bz5Zu49ytPbtvrFag-3D-3D
167.89.115.121
 clean
https://account.live.com/password/reset
unknown
 clean
https://www.google.com/tools/feedback
unknown
 clean
https://kit.fontawesome.com/585b051251.jsG4
unknown
 clean
https://dns.google
unknown
 clean
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
unknown
 clean
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
152.199.21.175
 clean
https://support.google.com/chromecast/troubleshooter/2995236
unknown
 clean
https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
152.199.21.175
 clean
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
142.250.203.110
 clean
https://payments.google.com/payments/v4/js/integrator.js
unknown
 clean
https://acctcdn.msauth.net/resetpasswordpackage_L8Ee0uN0GOAyvurXVgtE8g2.js?v=1
152.199.21.175
 clean
https://www.google.com;
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.10.207
 clean
http://crl.pki.goog/gtsr1/gtsr1.crl0W
unknown
 clean
https://acctcdn.msauth.net/jqueryshim_tGLkJ9mWEbN2n0ToVG2gvQ2.js?v=1:.
unknown
 clean
https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
unknown
 clean
https://pki.goog/repository/0
unknown
 clean
https://csp.withgoogle.com/csp/hosted-libraries-pushers
unknown
 clean
https://www.google.com/images/x2.gif
unknown
 clean
https://acctcdn.msauth.net/bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1
152.199.21.175
 clean
https://acctcdn.msauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svgw
unknown
 clean
https://www.google.com/images/dot2.gif
unknown
 clean
https://635028.selcdn.ru/msoffice/r.html
92.53.68.201
 clean
https://account.live.com/Resources/images/favicon.ico
unknown
 clean
https://acctcdn.msauth.net/wlivepackagefull_2169QIWB52Tqqm3jo5_AUA2.js?v=1
152.199.21.175
 clean
https://kit-free.fontawesome.com/releases/latest/css/free.min.css
unknown
 clean
https://gyazo.com
unknown
 clean
https://account.live.com/Resources/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg
unknown
 clean
https://www.google.com/
unknown
 clean
https://feedback.googleusercontent.com
unknown
 clean
http://crl.pki.goog/gsr1/gsr1.crl0;
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf
unknown
 clean
https://ka-f.fontawesome.com
unknown
 clean
https://www.google.com/images/cleardot.gif
unknown
 clean
https://635028.selcdn.ru/msoffice/index2.html
92.53.68.201
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crl0
unknown
 clean
https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
unknown
 clean
https://code.jquery.com/jquery-3.2.1.slim.min.jsy
unknown
 clean
https://acctcdn.msauth.net/converged_ux_v2_kGcCYmU0rW3A6Zc7U1O8nw2.css?v=1
152.199.21.175
 clean
https://acctcdn.msauth.net/bootstrapcomponentshim_yGKy8jAx8RL2bLqmBF063w2.js?v=1$
unknown
 clean
https://sandbox.google.com/payments/v4/js/integrator.js
unknown
 clean
https://635028.selcdn.ru/favicon.ico
92.53.68.201
 clean
https://635028.selcdn.ru/msoffice/r.html#miranda_muscente
unknown
 clean
https://635028.selcdn.ru
unknown
 clean
https://accounts.google.com/MergeSession
unknown
 clean
https://login.microsoftonline.com/?username=
unknown
 clean
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
142.250.203.97
 clean
https://acctcdn.msauth.net/accountcorepackage_UH__VcmA5_qVhPpsKA_TNQ2.js?v=1
152.199.21.175
 clean
https://account.live.com/Resources/images/Microsoft_Logotype_Gray_X-qkgtg8KmnQEvm_9mDTcw2.svg5x
unknown
 clean
https://accounts.google.com
unknown
 clean
http://angularjs.org
unknown
 clean
https://account.live.com/Resources/images/AppCentipede/AppCentipede_Microsoft_HFeToeM4u6fzMQF_f_rQ5Q
unknown
 clean
https://github.com/angular/material
unknown
 clean
https://account.live.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
unknown
 clean
https://apis.google.com
unknown
 clean
https://logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90b
unknown
 clean
https://www-googleapis-staging.sandbox.google.com
unknown
 clean
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
unknown
 clean
https://clients2.google.com
unknown
 clean
https://slender-distinct-direction.glitch.me
unknown
 clean
https://www.google.com/intl/en-US/chrome/blank.html
unknown
 clean
https://ogs.google.com
unknown
 clean
https://i.gyazo.com/214d89a26f0ac918a09f216a1b0f97b4.png
104.19.142.111
 clean
https://635028.selcdn.ru/msoffice/index2.htmlM
unknown
 clean
https://code.jquery.com/jquery-3.1.1.min.js
unknown
 clean
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
172.217.168.45
 clean
https://acctcdn.msauth.net/knockout_old_GJ62c6D9R5HuKFdkoO8XYw2.js?v=1
152.199.21.175
 clean
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
unknown
 clean
https://hangouts.google.com/
unknown
 clean
https://acctcdn.msauth.net/resetpasswordpackage_L8Ee0uN0GOAyvurXVgtE8g2.js?v=1a
unknown
 clean
http://pki.goog/gsr1/gsr1.crt02
unknown
 clean
https://www.google.com/s2/favicons?domain=
unknown
 clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.10.207
 clean
https://code.jquery.com/jquery-3.3.1.js
unknown
 clean
https://acctcdn.msauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
152.199.21.175
 clean
http://llvm.org/):
unknown
 clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
gstaticadssl.l.google.com
172.217.168.3
 clean
stackpath.bootstrapcdn.com
104.18.10.207
 clean
accounts.google.com
172.217.168.45
 clean
i.gyazo.com
104.19.142.111
 clean
sni1gl.wpc.alphacdn.net
152.199.21.175
 clean
selcdn.ru
92.53.68.201
 clean
maxcdn.bootstrapcdn.com
104.18.10.207
 clean
app.forexliteoptions.com
198.54.115.249
 clean
u24446853.ct.sendgrid.net
167.89.115.121
 clean
cdnjs.cloudflare.com
104.16.19.94
 clean
cs1227.wpc.alphacdn.net
192.229.221.185
 clean
clients.l.google.com
142.250.203.110
 clean
googlehosted.l.googleusercontent.com
142.250.203.97
 clean
logincdn.msauth.net
unknown
 clean
ka-f.fontawesome.com
unknown
 clean
kit.fontawesome.com
unknown
 clean
account.live.com
unknown
 clean
acctcdn.msauth.net
unknown
 clean
kit-free.fontawesome.com
unknown
 clean
clients2.googleusercontent.com
unknown
 clean
clients2.google.com
unknown
 clean
code.jquery.com
unknown
 clean
635028.selcdn.ru
unknown
 clean
acctcdn.msftauth.net
unknown
 clean
There are 14 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
104.18.10.207
stackpath.bootstrapcdn.com
United States
clean
142.250.203.110
clients.l.google.com
United States
clean
172.217.168.45
accounts.google.com
United States
clean
142.250.203.97
googlehosted.l.googleusercontent.com
United States
clean
172.217.168.3
gstaticadssl.l.google.com
United States
clean
92.53.68.201
selcdn.ru
Russian Federation
clean
167.89.115.121
u24446853.ct.sendgrid.net
United States
clean
104.19.142.111
i.gyazo.com
United States
clean
239.255.255.250
unknown
Reserved
clean
192.229.221.185
cs1227.wpc.alphacdn.net
United States
clean
152.199.21.175
sni1gl.wpc.alphacdn.net
United States
clean
198.54.115.249
app.forexliteoptions.com
United States
clean
104.16.19.94
cdnjs.cloudflare.com
United States
clean
127.0.0.1
unknown
unknown
clean
There are 5 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gdaefkejpgkiemlaofpalmlakkmbjdnl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
kmendfapggjehodndflmmgagdbamhnfd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mfehgcgbbipciphmccgaenjidiccnmng
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
neajdppkdcdipfabeoofebfddakdcjhd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
S-1-5-21-3853321935-2125563209-4053062332-1002
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.reporting
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
module_blacklist_cache_md5_digest
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
media.storage_id_salt
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_seed
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
default_search_provider_data.template_url_data
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
safebrowsing.incidents_sent
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
pinned_tabs
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
search_provider_overrides
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_username
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.restore_on_startup
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_version
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage_is_newtabpage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
browser.show_home_button
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
 clean
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
lastrun
 clean
There are 31 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1F99CE2B000
unkown
page read and write
 clean
15F86300000
unkown
page read and write
 clean
7FF55E1A9000
unkown image
page readonly
 clean
7FF5A1B8F000
unkown image
page readonly
 clean
1B970242000
unkown
page read and write
 clean
1F998159000
unkown
page read and write
 clean
1B970247000
unkown
page read and write
 clean
7FF56EA8B000
unkown image
page readonly
 clean
7FF4F3A77000
unkown image
page readonly
 clean
15F86256000
unkown
page read and write
 clean
1B97024B000
unkown
page read and write
 clean
1F246270000
unkown image
page readonly
 clean
1F99CED8000
unkown
page read and write
 clean
1F99783D000
unkown
page read and write
 clean
7FF53C443000
unkown image
page readonly
 clean
7FF52ACF8000
unkown image
page readonly
 clean
15F86213000
unkown
page read and write
 clean
1F998281000
unkown
page read and write
 clean
1A8C6C53000
unkown
page read and write
 clean
7FF53BAD4000
unkown image
page readonly
 clean
7DF573B70000
unkown image
page readonly
 clean
1B970180000
unkown image
page read and write
 clean
7FF55E167000
unkown image
page readonly
 clean
7DF573B72000
unkown image
page readonly
 clean
1F9977E1000
unkown
page read and write
 clean
1B9701A0000
unkown image
page readonly
 clean
7FF53C46E000
unkown image
page readonly
 clean
7FF55E0E4000
unkown image
page readonly
 clean
7FF553BED000
unkown image
page readonly
 clean
F01059B000
unkown
page read and write
 clean
7FF553D9A000
unkown image
page readonly
 clean
12F9E050000
heap default
page read and write
 clean
7DF479B00000
unkown image
page readonly
 clean
1B9706E0000
unkown image
page readonly
 clean
7FF5A1AA8000
unkown image
page readonly
 clean
7FF553D43000
unkown image
page readonly
 clean
2B0C5402000
unkown
page read and write
 clean
1F99CD10000
unkown
page read and write
 clean
7DF57BC32000
unkown image
page readonly
 clean
461587E000
stack
page read and write
 clean
30BB07F000
stack
page read and write
 clean
15F861E0000
unkown image
page readonly
 clean
1F246413000
unkown
page read and write
 clean
12F9EA02000
unkown
page read and write
 clean
7FF566324000
unkown image
page readonly
 clean
7FF56624C000
unkown image
page readonly
 clean
7FF553C3E000
unkown image
page readonly
 clean
1F246C02000
unkown
page read and write
 clean
1F997D90000
unkown image
page readonly
 clean
7FF55E24D000
unkown image
page readonly
 clean
2B0C543F000
unkown
page read and write
 clean
5D3E47B000
stack
page read and write
 clean
7FF56EA5F000
unkown image
page readonly
 clean
1A8C6C4D000
unkown
page read and write
 clean
1E454EE2000
unkown
page read and write
 clean
1F99CCD0000
unkown
page read and write
 clean
7FF56633F000
unkown image
page readonly
 clean
1F99CBB0000
unkown
page read and write
 clean
1A8C6C3C000
unkown
page read and write
 clean
7FF553E3E000
unkown image
page readonly
 clean
1F997878000
unkown
page read and write
 clean
15F86313000
unkown
page read and write
 clean
1F2463A0000
unkown
page read and write
 clean
7FF4F3B7B000
unkown image
page readonly
 clean
7FF4F3B7F000
unkown image
page readonly
 clean
12F9E400000
unkown image
page readonly
 clean
1E454ECA000
unkown
page read and write
 clean
1F246400000
unkown
page read and write
 clean
7DF509480000
unkown image
page readonly
 clean
7FF553D5C000
unkown image
page readonly
 clean
7FF55E148000
unkown image
page readonly
 clean
2B0C58D0000
unkown image
page readonly
 clean
7FF55E007000
unkown image
page readonly
 clean
7DF5843B0000
unkown image
page readonly
 clean
A7623FD000
stack
page read and write
 clean
1F99D1A0000
unkown
page read and write
 clean
1B970245000
unkown
page read and write
 clean
7DF467610000
unkown image
page readonly
 clean
7DF509470000
unkown image
page readonly
 clean
1A8C6A00000
unkown image
page readonly
 clean
1B9701D0000
unkown image
page readonly
 clean
7FF566258000
unkown image
page readonly
 clean
98A36FE000
stack
page read and write
 clean
7FF4F3B50000
unkown image
page readonly
 clean
1E454D00000
unkown image
page readonly
 clean
7FF56EA9F000
unkown image
page readonly
 clean
7FF5A1A85000
unkown image
page readonly
 clean
12F9E020000
unkown image
page readonly
 clean
1F997875000
unkown
page read and write
 clean
7FF52B04F000
unkown image
page readonly
 clean
7FF565FF3000
unkown image
page readonly
 clean
7FF52AF5D000
unkown image
page readonly
 clean
7FF4F3A8C000
unkown image
page readonly
 clean
1F9987E0000
unkown image
page readonly
 clean
7DF569740000
unkown image
page readonly
 clean
7FF55DE14000
unkown image
page readonly
 clean
7FF56E982000
unkown image
page readonly
 clean
15F860B0000
unkown image
page readonly
 clean
7FF4F3AB9000
unkown image
page readonly
 clean
1F246230000
unkown image
page read and write
 clean
7FF5A1B74000
unkown image
page readonly
 clean
1B970267000
unkown
page read and write
 clean
1E455000000
unkown image
page readonly
 clean
7DF509482000
unkown image
page readonly
 clean
30BAF7E000
stack
page read and write
 clean
7FF53C577000
unkown image
page readonly
 clean
7DF57BC30000
unkown image
page readonly
 clean
7FF55E004000
unkown image
page readonly
 clean
7DF551F70000
unkown image
page readonly
 clean
12F9E308000
unkown
page read and write
 clean
7FF4F39F4000
unkown image
page readonly
 clean
1F998201000
unkown
page read and write
 clean
7FF5A1A72000
unkown image
page readonly
 clean
7FF52AFB5000
unkown image
page readonly
 clean
2B0C56D0000
unkown image
page readonly
 clean
30BA87E000
stack
page read and write
 clean
7DF551F72000
unkown image
page readonly
 clean
7DF509490000
unkown image
page readonly
 clean
1B970249000
unkown
page read and write
 clean
7DF482260000
unkown image
page readonly
 clean
7FF55DF61000
unkown image
page readonly
 clean
7FF53C67F000
unkown image
page readonly
 clean
1B9706D0000
unkown image
page readonly
 clean
7FF566310000
unkown image
page readonly
 clean
2B0C5A60000
unkown image
page readonly
 clean
7FF5A19A6000
unkown image
page readonly
 clean
7FF5660DD000
unkown image
page readonly
 clean
1F997891000
unkown
page read and write
 clean
5D3E7FD000
stack
page read and write
 clean
7FF56DF0B000
unkown image
page readonly
 clean
7FF56633B000
unkown image
page readonly
 clean
7FF53C664000
unkown image
page readonly
 clean
1F246250000
unkown image
page readonly
 clean
49CEBFE000
stack
page read and write
 clean
7FF55DDEA000
unkown image
page readonly
 clean
7DF540940000
unkown image
page readonly
 clean
7FF52B01B000
unkown image
page readonly
 clean
12F9E600000
unkown image
page readonly
 clean
1F998B60000
unkown
page read and write
 clean
1F2463D0000
unkown
page read and write
 clean
1B970239000
unkown
page read and write
 clean
7FF4F3B7F000
unkown image
page readonly
 clean
7FF553E2D000
unkown image
page readonly
 clean
15F86860000
unkown
page read and write
 clean
7DF509470000
unkown image
page readonly
 clean
5D3E6FF000
stack
page read and write
 clean
12F9E000000
unkown image
page readonly
 clean
1F998118000
unkown
page read and write
 clean
7FF553E34000
unkown image
page readonly
 clean
2B0C5C02000
unkown
page read and write
 clean
7FF55DA21000
unkown image
page readonly
 clean
7DF540952000
unkown image
page readonly
 clean
7FF56633F000
unkown image
page readonly
 clean
15F86090000
unkown image
page read and write
 clean
A761DFE000
stack
page read and write
 clean
7FF52ADED000
unkown image
page readonly
 clean
7FF4F3ACA000
unkown image
page readonly
 clean
7DF573B70000
unkown image
page readonly
 clean
1F99CEA6000
unkown
page read and write
 clean
1B970240000
unkown
page read and write
 clean
7FF52B016000
unkown image
page readonly
 clean
7FF5A163F000
unkown image
page readonly
 clean
12F9DFF0000
heap private
page read and write
 clean
1F99CCF4000
unkown
page read and write
 clean
1E455210000
unkown image
page readonly
 clean
1B970231000
unkown
page read and write
 clean
1F997770000
unkown
page read and write
 clean
1F99CE0C000
unkown
page read and write
 clean
7DF569752000
unkown image
page readonly
 clean
7DF44FE40000
unkown image
page readonly
 clean
1B970230000
unkown
page read and write
 clean
30BB0FE000
stack
page read and write
 clean
7FF56E997000
unkown image
page readonly
 clean
7DF57BC42000
unkown image
page readonly
 clean
12F9E253000
unkown
page read and write
 clean
1B59BF7000
stack
page read and write
 clean
7FF55E1BA000
unkown image
page readonly
 clean
12F9E213000
unkown
page read and write
 clean
1B97026A000
unkown
page read and write
 clean
1F99D010000
unkown
page read and write
 clean
7FF5A1B8F000
unkown image
page readonly
 clean
49CF1FE000
stack
page read and write
 clean
1B97027C000
unkown
page read and write
 clean
1F99CF09000
unkown
page read and write
 clean
7DF573B62000
unkown image
page readonly
 clean
7FF53C493000
unkown image
page readonly
 clean
7FF53C5B5000
unkown image
page readonly
 clean
7FF56626D000
unkown image
page readonly
 clean
2B0C5513000
unkown
page read and write
 clean
7FF56EA6B000
unkown image
page readonly
 clean
7FF553913000
unkown image
page readonly
 clean
1F99CE1D000
unkown
page read and write
 clean
7DF5B7490000
unkown image
page readonly
 clean
15F86302000
unkown
page read and write
 clean
7FF553D68000
unkown image
page readonly
 clean
1F998810000
unkown image
page readonly
 clean
1F998015000
unkown
page read and write
 clean
7FF53C5B9000
unkown image
page readonly
 clean
7FF5A16EA000
unkown image
page readonly
 clean
7FF53C4D5000
unkown image
page readonly
 clean
15F86780000
unkown image
page readonly
 clean
7FF55DF93000
unkown image
page readonly
 clean
7FF56E91E000
unkown image
page readonly
 clean
7FF53C587000
unkown image
page readonly
 clean
1B97026E000
unkown
page read and write
 clean
1B9701F0000
heap default
page read and write
 clean
1B59CFF000
stack
page read and write
 clean
1A8C6D13000
unkown
page read and write
 clean
7FF5A1ABD000
unkown image
page readonly
 clean
12F9E248000
unkown
page read and write
 clean
1B970860000
unkown image
page readonly
 clean
7FF56EA05000
unkown image
page readonly
 clean
2B0C5A70000
unkown image
page readonly
 clean
1E454E3E000
unkown
page read and write
 clean
7FF55DD1F000
unkown image
page readonly
 clean
7DF540960000
unkown image
page readonly
 clean
A761C7B000
unkown
page read and write
 clean
1F99CEFC000
unkown
page read and write
 clean
7FF55E152000
unkown image
page readonly
 clean
1B970302000
unkown
page read and write
 clean
7FF56E9EA000
unkown image
page readonly
 clean
1F997873000
unkown
page read and write
 clean
7FF52AD48000
unkown image
page readonly
 clean
1F997780000
unkown image
page read and write
 clean
1F99CE00000
unkown
page read and write
 clean
7DF569760000
unkown image
page readonly
 clean
1F99789C000
unkown
page read and write
 clean
7FF56EA8E000
unkown image
page readonly
 clean
12F9E229000
unkown
page read and write
 clean
7FF5A1A87000
unkown image
page readonly
 clean
15F8623C000
unkown
page read and write
 clean
12F9E24B000
unkown
page read and write
 clean
7FF56630B000
unkown image
page readonly
 clean
1B970276000
unkown
page read and write
 clean
1F246980000
unkown image
page readonly
 clean
1E455480000
unkown
page read and write
 clean
1E454CF0000
unkown image
page readonly
 clean
7FF55DF2E000
unkown image
page readonly
 clean
1F2462A0000
heap default
page read and write
 clean
7FF53C58C000
unkown image
page readonly
 clean
2B0C53F0000
heap default
page read and write
 clean
1F99CEE5000
unkown
page read and write
 clean
7FF4F3B6B000
unkown image
page readonly
 clean
7FF5A1A0E000
unkown image
page readonly
 clean
7FF55E163000
unkown image
page readonly
 clean
15F86400000
unkown image
page readonly
 clean
1F246990000
unkown image
page readonly
 clean
7DF57BC50000
unkown image
page readonly
 clean
1A8C6A00000
unkown image
page readonly
 clean
7DF57BC50000
unkown image
page readonly
 clean
4615CFF000
stack
page read and write
 clean
1E454CC0000
heap private
page read and write
 clean
1F998000000
unkown
page read and write
 clean
1F99CCF1000
unkown
page read and write
 clean
1A8C6A30000
unkown image
page readonly
 clean
7FF4F3658000
unkown image
page readonly
 clean
7DF407340000
unkown image
page readonly
 clean
7DF573B80000
unkown image
page readonly
 clean
7DF551F90000
unkown image
page readonly
 clean
1F997C00000
unkown image
page readonly
 clean
1B970265000
unkown
page read and write
 clean
1F9978FD000
unkown
page read and write
 clean
7FF55E144000
unkown image
page readonly
 clean
7FF55E1A5000
unkown image
page readonly
 clean
7FF4F3643000
unkown image
page readonly
 clean
4615BF7000
stack
page read and write
 clean
1F997620000
unkown image
page readonly
 clean
1F9987D0000
unkown image
page readonly
 clean
7DF540950000
unkown image
page readonly
 clean
7DF5843B0000
unkown image
page readonly
 clean
7FF56E866000
unkown image
page readonly
 clean
7FF53C67F000
unkown image
page readonly
 clean
1A8C6D02000
unkown
page read and write
 clean
7DF584392000
unkown image
page readonly
 clean
15F860E0000
unkown image
page readonly
 clean
1E454EBB000
unkown
page read and write
 clean
7FF55E177000
unkown image
page readonly
 clean
7FF53C5AD000
unkown image
page readonly
 clean
7FF5A1B4F000
unkown image
page readonly
 clean
7DF43E810000
unkown image
page readonly
 clean
7FF55DDFF000
unkown image
page readonly
 clean
7FF55E19D000
unkown image
page readonly
 clean
7FF4F394E000
unkown image
page readonly
 clean
7FF52A49D000
unkown image
page readonly
 clean
7FF55DDE4000
unkown image
page readonly
 clean
1F99CE30000
unkown
page read and write
 clean
1B5987E000
stack
page read and write
 clean
1F997650000
unkown image
page readonly
 clean
7FF55DDBF000
unkown image
page readonly
 clean
7FF55E028000
unkown image
page readonly
 clean
1B9701C0000
unkown image
page readonly
 clean
2B0C545B000
unkown
page read and write
 clean
49CEFFF000
stack
page read and write
 clean
1F99782A000
unkown
page read and write
 clean
7FF56EA70000
unkown image
page readonly
 clean
7FF53C5E5000
unkown image
page readonly
 clean
7FF553928000
unkown image
page readonly
 clean
2B0C53A0000
unkown image
page readonly
 clean
7FF52AF10000
unkown image
page readonly
 clean
1F9987C0000
unkown image
page readonly
 clean
7FF55DA96000
unkown image
page readonly
 clean
7DF569742000
unkown image
page readonly
 clean
7FF53C65D000
unkown image
page readonly
 clean
1F9987F0000
unkown image
page readonly
 clean
1F998500000
unkown
page read and write
 clean
1F246380000
unkown image
page readonly
 clean
7FF56E98C000
unkown image
page readonly
 clean
7FF55DF63000
unkown image
page readonly
 clean
2B0C5429000
unkown
page read and write
 clean
1F997913000
unkown
page read and write
 clean
7DF5843A0000
unkown image
page readonly
 clean
7DF5B7492000
unkown image
page readonly
 clean
7DF569750000
unkown image
page readonly
 clean
7FF566275000
unkown image
page readonly
 clean
49CEDFB000
stack
page read and write
 clean
7FF56E974000
unkown image
page readonly
 clean
1E454ED2000
unkown
page read and write
 clean
1F99CCDE000
unkown
page read and write
 clean
7FF55E15C000
unkown image
page readonly
 clean
1E455700000
unkown
page read and write
 clean
1F99D140000
unkown
page read and write
 clean
98A33CB000
unkown
page read and write
 clean
15F8627E000
unkown
page read and write
 clean
7FF56EA7D000
unkown image
page readonly
 clean
1B97027F000
unkown
page read and write
 clean
1B970229000
unkown
page read and write
 clean
12F9E26F000
unkown
page read and write
 clean
1F997A00000
unkown image
page readonly
 clean
12F9E281000
unkown
page read and write
 clean
7FF55E188000
unkown image
page readonly
 clean
7FF55E140000
unkown image
page readonly
 clean
A76217D000
stack
page read and write
 clean
7FF4F39CF000
unkown image
page readonly
 clean
7FF553D89000
unkown image
page readonly
 clean
7FF4F39D5000
unkown image
page readonly
 clean
5D3E4FE000
stack
page read and write
 clean
7DF5B7492000
unkown image
page readonly
 clean
98A3A7E000
stack
page read and write
 clean
1A8C6A50000
heap default
page read and write
 clean
15F860A0000
heap private
page read and write
 clean
7FF4F3993000
unkown image
page readonly
 clean
7FF55DF77000
unkown image
page readonly
 clean
7FF53C66B000
unkown image
page readonly
 clean
1E454F02000
unkown
page read and write
 clean
461551C000
unkown
page read and write
 clean
7FF56E85C000
unkown image
page readonly
 clean
1F99CE9C000
unkown
page read and write
 clean
1B97024E000
unkown
page read and write
 clean
1F99CCD0000
unkown
page read and write
 clean
49CE97C000
stack
page read and write
 clean
1F998600000
unkown image
page read and write
 clean
5D3E5F7000
stack
page read and write
 clean
7FF55E0A7000
unkown image
page readonly
 clean
7FF53C67B000
unkown image
page readonly
 clean
2B0C546F000
unkown
page read and write
 clean
1A8C6E00000
unkown image
page readonly
 clean
1F246429000
unkown
page read and write
 clean
1B970190000
heap private
page read and write
 clean
1F99CE20000
unkown
page read and write
 clean
7DF5843A0000
unkown image
page readonly
 clean
1A8C6C8A000
unkown
page read and write
 clean
15F8626D000
unkown
page read and write
 clean
7DF509472000
unkown image
page readonly
 clean
1F99CEFA000
unkown
page read and write
 clean
7FF566279000
unkown image
page readonly
 clean
7FF56E86F000
unkown image
page readonly
 clean
7FF5A1922000
unkown image
page readonly
 clean
7FF55DDF7000
unkown image
page readonly
 clean
2B0C5476000
unkown
page read and write
 clean
7FF55E023000
unkown image
page readonly
 clean
7FF4F3943000
unkown image
page readonly
 clean
7FF52B03E000
unkown image
page readonly
 clean
1B97027B000
unkown
page read and write
 clean
F010E7D000
stack
page read and write
 clean
7FF52AF9A000
unkown image
page readonly
 clean
7FF553D85000
unkown image
page readonly
 clean
7FF553919000
unkown image
page readonly
 clean
5D3DFEE000
stack
page read and write
 clean
1B970A02000
unkown
page read and write
 clean
7DF573B60000
unkown image
page readonly
 clean
1B970200000
unkown
page read and write
 clean
7FF55E22F000
unkown image
page readonly
 clean
1F99CEF1000
unkown
page read and write
 clean
7DF551F80000
unkown image
page readonly
 clean
7FF55E228000
unkown image
page readonly
 clean
7DF471A30000
unkown image
page readonly
 clean
7FF55E120000
unkown image
page readonly
 clean
1A8C6D00000
unkown
page read and write
 clean
1F9978BB000
unkown
page read and write
 clean
1B97022D000
unkown
page read and write
 clean
1A8C6C70000
unkown
page read and write
 clean
1B5951B000
unkown
page read and write
 clean
7FF5662FF000
unkown image
page readonly
 clean
1E455712000
unkown
page read and write
 clean
F0109FB000
stack
page read and write
 clean
7FF56E993000
unkown image
page readonly
 clean
7FF52AF85000
unkown image
page readonly
 clean
1F246502000
unkown
page read and write
 clean
12F9E030000
unkown image
page readonly
 clean
1B59DFF000
stack
page read and write
 clean
1A8C7000000
unkown image
page readonly
 clean
7DF5B74A0000
unkown image
page readonly
 clean
4615AFB000
stack
page read and write
 clean
7FF55E26F000
unkown image
page readonly
 clean
1E454ECC000
unkown
page read and write
 clean
F01107F000
stack
page read and write
 clean
7FF55E26F000
unkown image
page readonly
 clean
7FF52B02D000
unkown image
page readonly
 clean
F01127F000
stack
page read and write
 clean
1F99D080000
unkown
page read and write
 clean
30BA9F7000
stack
page read and write
 clean
7FF55DF6D000
unkown image
page readonly
 clean
7FF553E4F000
unkown image
page readonly
 clean
7FF52AF57000
unkown image
page readonly
 clean
7FF4F3833000
unkown image
page readonly
 clean
7FF5A1AC5000
unkown image
page readonly
 clean
7FF5A1B7B000
unkown image
page readonly
 clean
98A397E000
stack
page read and write
 clean
7FF4F3B4B000
unkown image
page readonly
 clean
1E454CD0000
unkown image
page readonly
 clean
2B0C5380000
unkown image
page read and write
 clean
F01137E000
stack
page read and write
 clean
1E454E00000
unkown
page read and write
 clean
7FF553E3B000
unkown image
page readonly
 clean
12F9E200000
unkown
page read and write
 clean
1F997FD0000
unkown
page read and write
 clean
7FF53C4CF000
unkown image
page readonly
 clean
7FF5A1B7E000
unkown image
page readonly
 clean
7FF53C4F4000
unkown image
page readonly
 clean
1F246280000
unkown image
page readonly
 clean
7FF5A1B5E000
unkown image
page readonly
 clean
2B0C53A0000
unkown image
page readonly
 clean
7FF566306000
unkown image
page readonly
 clean
7FF55DF5C000
unkown image
page readonly
 clean
7FF52AF20000
unkown image
page readonly
 clean
1A8C6B30000
unkown image
page readonly
 clean
1F99CBC0000
unkown
page read and write
 clean
7DF540960000
unkown image
page readonly
 clean
7FF56628A000
unkown image
page readonly
 clean
7FF53C149000
unkown image
page readonly
 clean
461559E000
stack
page read and write
 clean
1B97022E000
unkown
page read and write
 clean
1F997600000
unkown image
page read and write
 clean
7DF584390000
unkown image
page readonly
 clean
1F2463D0000
unkown
page read and write
 clean
12F9E150000
unkown
page read and write
 clean
7FF4F3A73000
unkown image
page readonly
 clean
7FF52A4A4000
unkown image
page readonly
 clean
1A8C6C13000
unkown
page read and write
 clean
1E455390000
unkown image
page readonly
 clean
7FF5A19B2000
unkown image
page readonly
 clean
2B0C5502000
unkown
page read and write
 clean
1B97023D000
unkown
page read and write
 clean
7DF569760000
unkown image
page readonly
 clean
7DF5B7482000
unkown image
page readonly
 clean
7FF553E0F000
unkown image
page readonly
 clean
1F998113000
unkown
page read and write
 clean
7DF551F72000
unkown image
page readonly
 clean
1B970231000
unkown
page read and write
 clean
46159FE000
stack
page read and write
 clean
1F99D020000
unkown
page read and write
 clean
7DF5B74A0000
unkown image
page readonly
 clean
7FF55DA2D000
unkown image
page readonly
 clean
2B0C5413000
unkown
page read and write
 clean
1E455200000
unkown image
page readonly
 clean
1E454CB0000
unkown image
page read and write
 clean
7FF53C64B000
unkown image
page readonly
 clean
7FF5A1A64000
unkown image
page readonly
 clean
7FF52B03B000
unkown image
page readonly
 clean
7FF55DE1E000
unkown image
page readonly
 clean
7FF55E23E000
unkown image
page readonly
 clean
7FF5A16EE000
unkown image
page readonly
 clean
7FF553E16000
unkown image
page readonly
 clean
F010B7C000
stack
page read and write
 clean
7FF53C333000
unkown image
page readonly
 clean
1F997610000
heap private
page read and write
 clean
7DF509472000
unkown image
page readonly
 clean
15F86600000
unkown image
page readonly
 clean
7FF53C44E000
unkown image
page readonly
 clean
1F997750000
unkown image
page readonly
 clean
5D3DF6B000
unkown
page read and write
 clean
49CEEFD000
stack
page read and write
 clean
7FF5662A5000
unkown image
page readonly
 clean
7FF566237000
unkown image
page readonly
 clean
7FF4F3A87000
unkown image
page readonly
 clean
7FF5A1B8B000
unkown image
page readonly
 clean
1E454F13000
unkown
page read and write
 clean
15F8624F000
unkown
page read and write
 clean
7DF509482000
unkown image
page readonly
 clean
7FF4F3B3F000
unkown image
page readonly
 clean
7FF52AD06000
unkown image
page readonly
 clean
7FF55DFC0000
unkown image
page readonly
 clean
7FF53C5C3000
unkown image
page readonly
 clean
7FF5A192D000
unkown image
page readonly
 clean
1F998118000
unkown
page read and write
 clean
15F86A02000
unkown
page read and write
 clean
7FF5A1A04000
unkown image
page readonly
 clean
7DF57BC40000
unkown image
page readonly
 clean
1F998800000
unkown image
page readonly
 clean
7FF4F39E7000
unkown image
page readonly
 clean
7DF57BC32000
unkown image
page readonly
 clean
1A8C6B50000
unkown
page read and write
 clean
7DF584392000
unkown image
page readonly
 clean
1F997800000
unkown
page read and write
 clean
1A8C6C7E000
unkown
page read and write
 clean
12F9E000000
unkown image
page readonly
 clean
7FF56E9D5000
unkown image
page readonly
 clean
7DF4B5350000
unkown image
page readonly
 clean
7DF584390000
unkown image
page readonly
 clean
7FF55E0BF000
unkown image
page readonly
 clean
1E454E6E000
unkown
page read and write
 clean
7FF56E9E3000
unkown image
page readonly
 clean
1F99D080000
unkown
page read and write
 clean
7FF4F3A98000
unkown image
page readonly
 clean
7DF57BC30000
unkown image
page readonly
 clean
30BB57F000
stack
page read and write
 clean
7FF55E1B3000
unkown image
page readonly
 clean
7FF5A1B5B000
unkown image
page readonly
 clean
7FF553E1B000
unkown image
page readonly
 clean
1F99D040000
unkown
page read and write
 clean
7FF55DEFA000
unkown image
page readonly
 clean
1E454E24000
unkown
page read and write
 clean
7FF53C638000
unkown image
page readonly
 clean
1A8C6C00000
unkown
page read and write
 clean
7FF5A1856000
unkown image
page readonly
 clean
2B0C53C0000
unkown image
page readonly
 clean
7FF5A1AD3000
unkown image
page readonly
 clean
7FF53C5CA000
unkown image
page readonly
 clean
7FF5A1B56000
unkown image
page readonly
 clean
2B0C5390000
heap private
page read and write
 clean
7FF4F3B6E000
unkown image
page readonly
 clean
1B97024F000
unkown
page read and write
 clean
30BACFE000
stack
page read and write
 clean
A761F7E000
stack
page read and write
 clean
49CF0FD000
stack
page read and write
 clean
7FF4F3304000
unkown image
page readonly
 clean
1F246440000
unkown
page read and write
 clean
5D3E27E000
stack
page read and write
 clean
7DF5B7490000
unkown image
page readonly
 clean
98A3B7E000
stack
page read and write
 clean
F01117E000
stack
page read and write
 clean
1F99CCD1000
unkown
page read and write
 clean
7DF5843A2000
unkown image
page readonly
 clean
2B0C5400000
unkown
page read and write
 clean
7FF55E11D000
unkown image
page readonly
 clean
1F99CE3C000
unkown
page read and write
 clean
7FF4F3649000
unkown image
page readonly
 clean
1B97023A000
unkown
page read and write
 clean
30BAAF9000
stack
page read and write
 clean
1B59AFE000
stack
page read and write
 clean
1E454D20000
heap default
page read and write
 clean
7FF55E25E000
unkown image
page readonly
 clean
7FF4F3B64000
unkown image
page readonly
 clean
1F99D080000
unkown
page read and write
 clean
1F99CD10000
unkown
page read and write
 clean
7DF57BC40000
unkown image
page readonly
 clean
7FF55DD76000
unkown image
page readonly
 clean
1F998002000
unkown
page read and write
 clean
7DF5843A2000
unkown image
page readonly
 clean
12F9E780000
unkown image
page readonly
 clean
7FF52B020000
unkown image
page readonly
 clean
1F998159000
unkown
page read and write
 clean
7FF56E9D9000
unkown image
page readonly
 clean
7FF52AF93000
unkown image
page readonly
 clean
1F99D000000
unkown
page read and write
 clean
1F9986E0000
unkown
page read and write
 clean
1F997670000
heap default
page read and write
 clean
7DF551F70000
unkown image
page readonly
 clean
1F99CD00000
unkown
page read and write
 clean
7FF565799000
unkown image
page readonly
 clean
7FF52B04F000
unkown image
page readonly
 clean
1B970285000
unkown
page read and write
 clean
7FF52B008000
unkown image
page readonly
 clean
1B970246000
unkown
page read and write
 clean
7DF509480000
unkown image
page readonly
 clean
1F99CF02000
unkown
page read and write
 clean
12F9E300000
unkown
page read and write
 clean
7FF56632E000
unkown image
page readonly
 clean
7FF5A13D4000
unkown image
page readonly
 clean
7FF53C66E000
unkown image
page readonly
 clean
7DF540952000
unkown image
page readonly
 clean
7FF52B04D000
unkown image
page readonly
 clean
49CE57B000
unkown
page read and write
 clean
1F997FE0000
unkown
page read and write
 clean
1B970263000
unkown
page read and write
 clean
1A8C6D08000
unkown
page read and write
 clean
30BB47F000
stack
page read and write
 clean
1F246800000
unkown image
page readonly
 clean
7FF5A1ADA000
unkown image
page readonly
 clean
30BABFA000
stack
page read and write
 clean
7FF56EA9F000
unkown image
page readonly
 clean
7DF551F82000
unkown image
page readonly
 clean
1E45573A000
unkown
page read and write
 clean
15F86253000
unkown
page read and write
 clean
1F997858000
unkown
page read and write
 clean
1A8C69E0000
unkown image
page read and write
 clean
7FF5A1B8D000
unkown image
page readonly
 clean
7FF5A199D000
unkown image
page readonly
 clean
7FF56EA58000
unkown image
page readonly
 clean
7FF553E08000
unkown image
page readonly
 clean
15F860B0000
unkown image
page readonly
 clean
7FF53BACE000
unkown image
page readonly
 clean
7FF55E254000
unkown image
page readonly
 clean
1F99CE82000
unkown
page read and write
 clean
7DF569740000
unkown image
page readonly
 clean
1B970275000
unkown
page read and write
 clean
7FF55E25B000
unkown image
page readonly
 clean
7FF53C650000
unkown image
page readonly
 clean
7DF5B7480000
unkown image
page readonly
 clean
7FF55E1D5000
unkown image
page readonly
 clean
7FF5535D4000
unkown image
page readonly
 clean
1F246250000
unkown image
page readonly
 clean
7FF55E26D000
unkown image
page readonly
 clean
30BB37B000
stack
page read and write
 clean
1F24645C000
unkown
page read and write
 clean
7FF56E9CD000
unkown image
page readonly
 clean
1B970213000
unkown
page read and write
 clean
7FF53C158000
unkown image
page readonly
 clean
7FF5A1B6D000
unkown image
page readonly
 clean
1B970278000
unkown
page read and write
 clean
1F997620000
unkown image
page readonly
 clean
7FF4F3AAD000
unkown image
page readonly
 clean
1B9704D0000
unkown image
page readonly
 clean
7DF573B60000
unkown image
page readonly
 clean
7FF56EA9B000
unkown image
page readonly
 clean
7DF540942000
unkown image
page readonly
 clean
15F8624C000
unkown
page read and write
 clean
7FF52AF47000
unkown image
page readonly
 clean
7FF55E17C000
unkown image
page readonly
 clean
98A387E000
stack
page read and write
 clean
12F9E130000
unkown image
page readonly
 clean
1B97026C000
unkown
page read and write
 clean
7FF55DA24000
unkown image
page readonly
 clean
A7621FF000
stack
page read and write
 clean
12F9E277000
unkown
page read and write
 clean
7FF553C13000
unkown image
page readonly
 clean
7FF52AF33000
unkown image
page readonly
 clean
7DF5B7480000
unkown image
page readonly
 clean
7FF55E130000
unkown image
page readonly
 clean
7FF553DB5000
unkown image
page readonly
 clean
7FF56E83D000
unkown image
page readonly
 clean
F010C7F000
stack
page read and write
 clean
2B0C5B50000
unkown
page read and write
 clean
2B0C5465000
unkown
page read and write
 clean
7FF56E832000
unkown image
page readonly
 clean
7FF56E79D000
unkown image
page readonly
 clean
1E455602000
unkown
page read and write
 clean
49CED7D000
stack
page read and write
 clean
5D3E8FA000
stack
page read and write
 clean
1A8C7180000
unkown image
page readonly
 clean
1F99CEDF000
unkown
page read and write
 clean
7DF573B72000
unkown image
page readonly
 clean
7FF56632B000
unkown image
page readonly
 clean
7FF55DAB6000
unkown image
page readonly
 clean
7FF5A1AC9000
unkown image
page readonly
 clean
7FF5A1A83000
unkown image
page readonly
 clean
7FF55DF91000
unkown image
page readonly
 clean
7FF56E9A8000
unkown image
page readonly
 clean
7FF4F396E000
unkown image
page readonly
 clean
7FF56E9B8000
unkown image
page readonly
 clean
1F99CCF0000
unkown
page read and write
 clean
1E454E29000
unkown
page read and write
 clean
1F99CF02000
unkown
page read and write
 clean
1B970260000
unkown
page read and write
 clean
7FF553D47000
unkown image
page readonly
 clean
1F246600000
unkown image
page readonly
 clean
7FF5A1B48000
unkown image
page readonly
 clean
15F860D0000
unkown image
page readonly
 clean
7FF5A1A97000
unkown image
page readonly
 clean
1F99CDA0000
unkown
page read and write
 clean
4615DFE000
stack
page read and write
 clean
30BA58B000
unkown
page read and write
 clean
1F99788C000
unkown
page read and write
 clean
7FF553CA5000
unkown image
page readonly
 clean
30BAFFF000
stack
page read and write
 clean
7FF553C63000
unkown image
page readonly
 clean
7DF573B80000
unkown image
page readonly
 clean
1F998102000
unkown
page read and write
 clean
7FF4F3B5D000
unkown image
page readonly
 clean
7FF55E03C000
unkown image
page readonly
 clean
7DF551F90000
unkown image
page readonly
 clean
7DF540942000
unkown image
page readonly
 clean
1F997D80000
unkown image
page readonly
 clean
7FF566283000
unkown image
page readonly
 clean
2B0C58E0000
unkown image
page readonly
 clean
7DF551F80000
unkown image
page readonly
 clean
7DF540950000
unkown image
page readonly
 clean
7FF553CB7000
unkown image
page readonly
 clean
7FF52B00F000
unkown image
page readonly
 clean
1F99CE49000
unkown
page read and write
 clean
7FF5A1A9C000
unkown image
page readonly
 clean
7FF53C646000
unkown image
page readonly
 clean
7FF553C9F000
unkown image
page readonly
 clean
1F99CEAF000
unkown
page read and write
 clean
7FF53C598000
unkown image
page readonly
 clean
1B970262000
unkown
page read and write
 clean
7FF55DDA1000
unkown image
page readonly
 clean
12F9E23C000
unkown
page read and write
 clean
1F99D030000
unkown
page read and write
 clean
F010D7F000
stack
page read and write
 clean
30BAEFF000
stack
page read and write
 clean
1F2463D0000
unkown
page read and write
 clean
7FF553C1E000
unkown image
page readonly
 clean
7FF53C63F000
unkown image
page readonly
 clean
1F99789E000
unkown
page read and write
 clean
7FF4F391D000
unkown image
page readonly
 clean
98A367E000
stack
page read and write
 clean
12F9E313000
unkown
page read and write
 clean
1F99CDD0000
unkown
page read and write
 clean
7FF55E127000
unkown image
page readonly
 clean
7FF56EA66000
unkown image
page readonly
 clean
7FF55E236000
unkown image
page readonly
 clean
1F246A60000
unkown
page read and write
 clean
7FF553E4F000
unkown image
page readonly
 clean
1F997FF0000
unkown
page read and write
 clean
30BB27C000
stack
page read and write
 clean
1F997813000
unkown
page read and write
 clean
1F99CBD0000
unkown
page read and write
 clean
7FF52AF89000
unkown image
page readonly
 clean
1B9701A0000
unkown image
page readonly
 clean
7FF55E00D000
unkown image
page readonly
 clean
1F997640000
unkown image
page readonly
 clean
1F998100000
unkown
page read and write
 clean
7FF553B03000
unkown image
page readonly
 clean
7FF55E26B000
unkown image
page readonly
 clean
7FF5A1AF5000
unkown image
page readonly
 clean
1B59A7B000
stack
page read and write
 clean
7FF55DA37000
unkown image
page readonly
 clean
7FF565EC7000
unkown image
page readonly
 clean
15F86229000
unkown
page read and write
 clean
7DF551F82000
unkown image
page readonly
 clean
1A8C7402000
unkown
page read and write
 clean
7FF5A18D8000
unkown image
page readonly
 clean
7FF53C41D000
unkown image
page readonly
 clean
15F86308000
unkown
page read and write
 clean
7FF4F3AC3000
unkown image
page readonly
 clean
7DF569750000
unkown image
page readonly
 clean
1A8C6C29000
unkown
page read and write
 clean
1E454E13000
unkown
page read and write
 clean
7FF565B85000
unkown image
page readonly
 clean
1F246240000
heap private
page read and write
 clean
30BB17F000
stack
page read and write
 clean
1A8C6A20000
unkown image
page readonly
 clean
1E4553A0000
unkown image
page readonly
 clean
12F9E24E000
unkown
page read and write
 clean
7DF5B7482000
unkown image
page readonly
 clean
30BADFB000
stack
page read and write
 clean
15F86286000
unkown
page read and write
 clean
1F246402000
unkown
page read and write
 clean
2B0C5465000
unkown
page read and write
 clean
49CEC7C000
stack
page read and write
 clean
7FF553E4B000
unkown image
page readonly
 clean
1F998118000
unkown
page read and write
 clean
1E4554C0000
unkown image
page write copy
 clean
1F99CD14000
unkown
page read and write
 clean
7DF569752000
unkown image
page readonly
 clean
2B0C53D0000
unkown image
page readonly
 clean
1F99CEF1000
unkown
page read and write
 clean
7DF509490000
unkown image
page readonly
 clean
7FF52AF7D000
unkown image
page readonly
 clean
7FF56EA9D000
unkown image
page readonly
 clean
7FF56E7A7000
unkown image
page readonly
 clean
7FF55E23B000
unkown image
page readonly
 clean
1E454E87000
unkown
page read and write
 clean
7DF569742000
unkown image
page readonly
 clean
7FF553E20000
unkown image
page readonly
 clean
15F86200000
unkown
page read and write
 clean
7FF55DF5A000
unkown image
page readonly
 clean
1F99CEE6000
unkown
page read and write
 clean
1E454CD0000
unkown image
page readonly
 clean
7FF53C143000
unkown image
page readonly
 clean
7FF5A1A7C000
unkown image
page readonly
 clean
1B5959E000
stack
page read and write
 clean
1B970950000
unkown
page read and write
 clean
7FF56EA84000
unkown image
page readonly
 clean
15F8624A000
unkown
page read and write
 clean
1F99786E000
unkown
page read and write
 clean
7FF553CC4000
unkown image
page readonly
 clean
7FF553D57000
unkown image
page readonly
 clean
7FF5A1868000
unkown image
page readonly
 clean
7FF4F3AE5000
unkown image
page readonly
 clean
15F86251000
unkown
page read and write
 clean
1A8C69F0000
heap private
page read and write
 clean
7DF540940000
unkown image
page readonly
 clean
7FF53BE8E000
unkown image
page readonly
 clean
15F86100000
heap default
page read and write
 clean
A761EFE000
stack
page read and write
 clean
7DF573B62000
unkown image
page readonly
 clean
7FF52B034000
unkown image
page readonly
 clean
7FF5662F8000
unkown image
page readonly
 clean
7FF53C573000
unkown image
page readonly
 clean
1F99CEDC000
unkown
page read and write
 clean
A7622FD000
stack
page read and write
 clean
A76207E000
stack
page read and write
 clean
7FF553D7D000
unkown image
page readonly
 clean
12F9DFE0000
unkown image
page read and write
 clean
7FF4F3B46000
unkown image
page readonly
 clean
1F99CCD8000
unkown
page read and write
 clean
F010F7F000
stack
page read and write
 clean
1F99CE61000
unkown
page read and write
 clean
7FF56E72A000
unkown image
page readonly
 clean
7FF4F3B38000
unkown image
page readonly
 clean
7FF4F3AB5000
unkown image
page readonly
 clean
7FF56E9AC000
unkown image
page readonly
 clean
1F997902000
unkown
page read and write
 clean
49CEAFF000
stack
page read and write
 clean
12F9E302000
unkown
page read and write
 clean
1F99CF00000
unkown
page read and write
 clean
7FF55DDF0000
unkown image
page readonly
 clean
7DF57BC42000
unkown image
page readonly
 clean
7FF553D93000
unkown image
page readonly
 clean
1F99CD00000
unkown
page read and write
 clean
There are 802 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://635028.selcdn.ru/msoffice/index2.html#miranda_muscente@condenast.com
 malicious
https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/login.srf%3fwa%3dwsignin1.0%26rpsnv%3d13%26ct%3d1594824447%26rver%3d7.0.6737.0%26wp%3dMBI_SSL%26wreply%3dhttps%253a%252f%252foutlook.live.com%252fowa%252f%253fnlp%253d1%2526RpsCsrfState%253d096991c0-c96c-6a4e-6fe9-e91b0da948f1%26id%3d292841%26aadredir%3d1%26CBCXT%3dout%26lw%3d1%26fl%3ddob%252cflname%252cwld%26cobrandid%3d90015%26contextid%3d2C688CEDDDA7EE22%26bk%3d1594880420&id=292841&uiflavor=web&cobrandid=90015&uaid=657745d4db72409899b7bb19b09796de&mkt=EN-GB&lc=2057&bk=1594880420#
 clean