Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Secure_Message_81.90.a1.00.00.htm
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\2efa97c3-cad7-4147-9989-e48775807761.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\3f24ab65-e20d-4e16-b297-6257803a0a4e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\583b4e2a-47be-4e5b-bbb6-7d2ba1eaaf4a.tmp
|
SysEx File -
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\5d302738-decd-48e7-a4a9-d5f4b9d68352.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6aec4f00-a9c5-49f4-a30b-4c7d72efa899.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\7dd8b307-1cfe-44e1-8fce-b3e467d5ba66.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1ff81cf4-aada-4525-8c73-32c5e451d298.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2d3d1e7c-2765-40ec-9d83-e95780a73854.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3004ef58-dc53-48db-8e66-95060a76b559.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3b3c90f2-d12a-4b0e-a8ef-f14a3c1574ec.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\42bc1443-b4af-4836-bd18-dd08f1df90c0.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\49cab005-de14-4e98-aeae-0841c28696ef.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9636a448-18f3-474d-8228-4e09d7713b4f.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old( (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old( (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsn (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State} (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesmp (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesss (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\54c34b35-446f-443d-8add-de06c5ab639e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State9e (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old(.
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.olde/
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.oldmt
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State9e (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old&i
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.olde/
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\cbf8e6a1-b43c-46f5-8710-4616c7782530.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldUT (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.oldMP
(copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b607cd46-555b-4aba-bdf7-21aae138639d.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\b65fe7a1-beeb-4362-bc26-c96e4be9f442.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\be1ffe2b-362b-4be5-8a92-a9525880e3e8.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENTMP (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e85274c3-f0c8-412b-bcbc-546fecdac0c1.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f848a34f-676a-443b-9bde-4a6319e90e41.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fd731932-ad8d-4ac2-9b4a-9c6dfed9c54c.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old8f (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State. (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State` (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Stateon (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local States} (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache. (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache.T (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cachecs (copy)
|
SysEx File -
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\d66ed7c1-56ab-4728-83e0-9f4f798c19f2.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\e116f2e4-5ed0-4efe-b8d5-41b5905c4602.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\e9253910-3591-45d5-b975-74c971173b7d.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f9d95e13-1d2e-4756-afec-3758afb9d6c7.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\fc5538ca-d1eb-4c34-a776-b457ceb18919.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\51a09765-b04f-45df-9b27-4055b4a5a4e5.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_pnacl_json
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377,
stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
|
current ar archive
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
|
current ar archive
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
|
current ar archive
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
|
current ar archive
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce,
stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9,
stripped
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_1697668034\manifest.json
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_209113009\LICENSE
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_209113009\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_209113009\crl-set
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_209113009\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\6356_209113009\manifest.json
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\85e35a70-caa7-4042-8c96-d3c407b83851.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\a15ff5b1-fa71-4152-86b6-124bdc0f0def.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\e9a74b03-1e1c-4c19-a791-4dff4c97119c.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\85e35a70-caa7-4042-8c96-d3c407b83851.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\images\topbar_floating_button_pressed.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_1455650116\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\iw\messages.json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\angular.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\background_script.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\cast_sender.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\common.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\feedback.css
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\feedback.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\feedback_script.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\material_css_min.css
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\mirroring_cast_streaming.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\mirroring_common.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\mirroring_hangouts.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\CRX_INSTALL\mirroring_webrtc.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir6356_372378404\a15ff5b1-fa71-4152-86b6-124bdc0f0def.tmp
|
Google Chrome extension, version 3
|
dropped
|
There are 255 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "C:\Users\user\Desktop\Secure_Message_81.90.a1.00.00.htm
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,5484983141683312588,9650165253350423924,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1916 /prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
file:///C:/Users/user/Desktop/Secure_Message_81.90.a1.00.00.htm
|
|
||
|
https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js
|
104.18.10.207
|
||
|
https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
|
|||
|
https://apis.google.com/js/client.js
|
unknown
|
||
|
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_ktc4wemsewhydsbdjhhsja2.js
|
unknown
|
||
|
https://www.google.com/images/cleardot.gif
|
unknown
|
||
|
https://play.google.com
|
unknown
|
||
|
https://aadcdn.msauth.net/shared/1.0/content/images/personal_account_0f72b5950600f24e7f9a604b186f394
|
unknown
|
||
|
https://aadcdn.msauth.net/shared/1.0/content/images/work_account_1963c6b1926b773986f53f844ce4c32e.pn
|
unknown
|
||
|
https://crash.corp.google.com/samples?reportid=&q=
|
unknown
|
||
|
https://www.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://www.flottechllc.com/la/ba.PNG
|
185.141.25.244
|
||
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
||
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
|
unknown
|
||
|
https://accounts.google.com/MergeSession
|
unknown
|
||
|
https://preprod-hangouts-googleapis.sandbox.google.com
|
unknown
|
||
|
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
|
142.250.203.97
|
||
|
https://logincdn.msauth.net/16.000.28543.10/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
|
192.229.221.185
|
||
|
https://www.google.com
|
unknown
|
||
|
https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.bundle.min.js
|
104.18.10.207
|
||
|
https://hangouts.clients6.google.com
|
unknown
|
||
|
https://meet.google.com
|
unknown
|
||
|
https://hangouts.google.com/hangouts/_/logpref
|
unknown
|
||
|
https://logincdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d
|
unknown
|
||
|
https://logincdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
|
192.229.221.185
|
||
|
https://accounts.google.com
|
unknown
|
||
|
https://clients2.google.com/cr/report
|
unknown
|
||
|
http://angularjs.org
|
unknown
|
||
|
https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
|
unknown
|
||
|
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.jsM
|
unknown
|
||
|
https://creativecommons.org/publicdomain/zero/1.0/.
|
unknown
|
||
|
https://github.com/angular/material
|
unknown
|
||
|
https://apis.google.com
|
unknown
|
||
|
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_kfhrfyfy-sm2tmkm5ficcw2
|
unknown
|
||
|
https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_7916a894ebde7d29c2cc29b267f1299f.j
|
unknown
|
||
|
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
|
unknown
|
||
|
https://github.com/madler/zlib/blob/master/zlib.h
|
unknown
|
||
|
https://www-googleapis-staging.sandbox.google.com
|
unknown
|
||
|
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
|
unknown
|
||
|
https://clients2.google.com
|
unknown
|
||
|
https://www.google.com/tools/feedback
|
unknown
|
||
|
https://logincdn.msauth.net/16.000/Converged_v22057_egJPTAx_byK-yF_CMCKFeg2.css
|
192.229.221.185
|
||
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
||
|
https://dns.google
|
unknown
|
||
|
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
|
unknown
|
||
|
https://www.google.com/intl/en-US/chrome/blank.html
|
unknown
|
||
|
https://ogs.google.com
|
unknown
|
||
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
||
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
|
unknown
|
||
|
https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.sv
|
unknown
|
||
|
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
142.250.203.110
|
||
|
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
|
172.217.168.45
|
||
|
https://a.nel.cloudflare.com/report/v3?s=Xd7HOld6SfsC8yMk%2FBXyiOgRqiikG%2BTif4oxVntHXJ3jBVEq4FFrBg9
|
unknown
|
||
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
||
|
https://www.google.com;
|
unknown
|
||
|
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
|
unknown
|
||
|
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
|
unknown
|
||
|
https://hangouts.google.com/
|
unknown
|
||
|
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
|
104.18.10.207
|
||
|
https://csp.withgoogle.com/csp/hosted-libraries-pushers
|
unknown
|
||
|
https://www.google.com/images/x2.gif
|
unknown
|
||
|
https://www.flottechllc.com
|
unknown
|
||
|
https://aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo.png
|
unknown
|
||
|
http://llvm.org/):
|
unknown
|
||
|
https://www.google.com/images/dot2.gif
|
unknown
|
||
|
https://meetings.clients6.google.com
|
unknown
|
||
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
||
|
https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
|
192.229.221.185
|
||
|
https://code.google.com/p/nativeclient/issues/entry%s:
|
unknown
|
||
|
https://identity.nel.measure.office.net/api/report?catId=GW
|
unknown
|
||
|
http://tools.ietf.org/html/rfc1950
|
unknown
|
||
|
https://logincdn.msauth.net/16.000.28543.10/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc1937
|
unknown
|
||
|
https://code.google.com/p/nativeclient/issues/entry
|
unknown
|
||
|
https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:
|
unknown
|
||
|
https://support.google.com/chromecast/answer/2998456
|
unknown
|
||
|
https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2-small_e58aafc980614a9cd7796bea7b5e
|
unknown
|
||
|
https://clients2.googleusercontent.com
|
unknown
|
||
|
https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
|
unknown
|
||
|
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
|
104.16.19.94
|
||
|
https://docs.google.com
|
unknown
|
||
|
https://www.google.com/
|
unknown
|
||
|
https://feedback.googleusercontent.com
|
unknown
|
||
|
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
|
unknown
|
||
|
https://clients2.google.com/service/update2/crx
|
unknown
|
||
|
https://clients6.google.com
|
unknown
|
There are 75 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
stackpath.bootstrapcdn.com
|
104.18.10.207
|
||
|
cs1100.wpc.omegacdn.net
|
152.199.23.37
|
||
|
accounts.google.com
|
172.217.168.45
|
||
|
cdnjs.cloudflare.com
|
104.16.19.94
|
||
|
flottechllc.com
|
185.141.25.244
|
||
|
cs1227.wpc.alphacdn.net
|
192.229.221.185
|
||
|
clients.l.google.com
|
142.250.203.110
|
||
|
googlehosted.l.googleusercontent.com
|
142.250.203.97
|
||
|
logincdn.msauth.net
|
unknown
|
||
|
clients2.googleusercontent.com
|
unknown
|
||
|
clients2.google.com
|
unknown
|
||
|
www.flottechllc.com
|
unknown
|
||
|
aadcdn.msftauth.net
|
unknown
|
||
|
login.microsoftonline.com
|
unknown
|
||
|
aadcdn.msauth.net
|
unknown
|
There are 5 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
||
|
104.18.10.207
|
stackpath.bootstrapcdn.com
|
United States
|
||
|
142.250.203.110
|
clients.l.google.com
|
United States
|
||
|
172.217.168.45
|
accounts.google.com
|
United States
|
||
|
142.250.203.97
|
googlehosted.l.googleusercontent.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
192.229.221.185
|
cs1227.wpc.alphacdn.net
|
United States
|
||
|
185.141.25.244
|
flottechllc.com
|
Netherlands
|
||
|
104.16.19.94
|
cdnjs.cloudflare.com
|
United States
|
||
|
127.0.0.1
|
unknown
|
unknown
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
ahfgeienlihckogmohjhadlkjgocpleb
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
kmendfapggjehodndflmmgagdbamhnfd
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mfehgcgbbipciphmccgaenjidiccnmng
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
neajdppkdcdipfabeoofebfddakdcjhd
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nkeimhogjdpnpccoofpliimaahmaaome
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
dr
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.reporting
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
module_blacklist_cache_md5_digest
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
media.storage_id_salt
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_account_id
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.account_id
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_seed
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_homepage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
default_search_provider_data.template_url_data
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
safebrowsing.incidents_sent
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
pinned_tabs
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
search_provider_overrides
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_default_search
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_username
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.startup_urls
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.restore_on_startup
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_version
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_startup_urls
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.prompt_wave
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage_is_newtabpage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
browser.show_home_button
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
|
user_experience_metrics.stability.exited_cleanly
|
||
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
lastrun
|
There are 35 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
20E3F83D000
|
unkown
|
page read and write
|
||
|
1E636291000
|
unkown
|
page read and write
|
||
|
2F9463A7000
|
unkown
|
page read and write
|
||
|
26A76B50000
|
trusted library allocation
|
page read and write
|
||
|
2F94637A000
|
unkown
|
page read and write
|
||
|
2F94637C000
|
unkown
|
page read and write
|
||
|
2F94639B000
|
unkown
|
page read and write
|
||
|
26A76B60000
|
trusted library allocation
|
page read and write
|
||
|
2F94689D000
|
unkown
|
page read and write
|
||
|
2F945AB2000
|
unkown
|
page read and write
|
||
|
2F945AE1000
|
unkown
|
page read and write
|
||
|
1E79F248000
|
unkown
|
page read and write
|
||
|
2202FC74000
|
unkown
|
page read and write
|
||
|
2B7DA920000
|
heap
|
page read and write
|
||
|
265DC866000
|
unkown
|
page read and write
|
||
|
1D7029C0000
|
heap
|
page read and write
|
||
|
2F4D6FF000
|
stack
|
page read and write
|
||
|
26A76B89000
|
heap
|
page read and write
|
||
|
D4926FC000
|
stack
|
page read and write
|
||
|
2F946379000
|
unkown
|
page read and write
|
||
|
265DC813000
|
unkown
|
page read and write
|
||
|
26A769E0000
|
heap
|
page read and write
|
||
|
1E79F1B0000
|
trusted library allocation
|
page read and write
|
||
|
20E3F800000
|
unkown
|
page read and write
|
||
|
EC9687E000
|
stack
|
page read and write
|
||
|
FF409F8000
|
stack
|
page read and write
|
||
|
FD378FE000
|
stack
|
page read and write
|
||
|
265DC750000
|
heap
|
page read and write
|
||
|
1E79F271000
|
unkown
|
page read and write
|
||
|
A788DFC000
|
stack
|
page read and write
|
||
|
1FE09FE000
|
stack
|
page read and write
|
||
|
2F946902000
|
unkown
|
page read and write
|
||
|
1D702C5A000
|
unkown
|
page read and write
|
||
|
2F94638D000
|
unkown
|
page read and write
|
||
|
2B7DA9F0000
|
remote allocation
|
page read and write
|
||
|
1E636130000
|
heap
|
page read and write
|
||
|
2F94637F000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
2F9463DB000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
FF402FE000
|
stack
|
page read and write
|
||
|
1E7A0CB0000
|
trusted library allocation
|
page read and write
|
||
|
265DC83B000
|
unkown
|
page read and write
|
||
|
2F946376000
|
unkown
|
page read and write
|
||
|
2F946384000
|
unkown
|
page read and write
|
||
|
265DC85F000
|
unkown
|
page read and write
|
||
|
2F9463A7000
|
unkown
|
page read and write
|
||
|
2202FC28000
|
unkown
|
page read and write
|
||
|
B31C8FA000
|
stack
|
page read and write
|
||
|
265DC87B000
|
unkown
|
page read and write
|
||
|
2F946390000
|
unkown
|
page read and write
|
||
|
2202FC3E000
|
unkown
|
page read and write
|
||
|
FD37AFA000
|
stack
|
page read and write
|
||
|
265DC875000
|
unkown
|
page read and write
|
||
|
FF4027E000
|
stack
|
page read and write
|
||
|
2AAC8E00000
|
unkown
|
page read and write
|
||
|
2F94638C000
|
unkown
|
page read and write
|
||
|
20E3F913000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F945A54000
|
unkown
|
page read and write
|
||
|
2B7DB202000
|
unkown
|
page read and write
|
||
|
265DC860000
|
unkown
|
page read and write
|
||
|
1D703202000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
1FE06FD000
|
stack
|
page read and write
|
||
|
1E79F258000
|
unkown
|
page read and write
|
||
|
2202FC6D000
|
unkown
|
page read and write
|
||
|
26A76B80000
|
heap
|
page read and write
|
||
|
2F94635E000
|
unkown
|
page read and write
|
||
|
B31CDFA000
|
stack
|
page read and write
|
||
|
D4929FE000
|
stack
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
1B784405000
|
heap
|
page read and write
|
||
|
2AAC8F02000
|
unkown
|
page read and write
|
||
|
1E79F200000
|
unkown
|
page read and write
|
||
|
26A76A2D000
|
heap
|
page read and write
|
||
|
1E636253000
|
unkown
|
page read and write
|
||
|
2F946376000
|
unkown
|
page read and write
|
||
|
1FE0BFF000
|
stack
|
page read and write
|
||
|
2B7DA930000
|
heap
|
page read and write
|
||
|
1B7842E0000
|
heap
|
page read and write
|
||
|
66B1CFC000
|
stack
|
page read and write
|
||
|
FF40677000
|
stack
|
page read and write
|
||
|
2AAC8E13000
|
unkown
|
page read and write
|
||
|
265DD002000
|
unkown
|
page read and write
|
||
|
20E3F680000
|
heap
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
2F946372000
|
unkown
|
page read and write
|
||
|
1E79F313000
|
unkown
|
page read and write
|
||
|
2F945AAB000
|
unkown
|
page read and write
|
||
|
2202FC13000
|
unkown
|
page read and write
|
||
|
2202FC00000
|
unkown
|
page read and write
|
||
|
1E63624E000
|
unkown
|
page read and write
|
||
|
2F946385000
|
unkown
|
page read and write
|
||
|
66B18FF000
|
stack
|
page read and write
|
||
|
2F945A4E000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
20E40002000
|
unkown
|
page read and write
|
||
|
2AAC8E48000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
1D702C54000
|
unkown
|
page read and write
|
||
|
1E636302000
|
unkown
|
page read and write
|
||
|
265DC841000
|
unkown
|
page read and write
|
||
|
2F94637E000
|
unkown
|
page read and write
|
||
|
2B7DA9F0000
|
remote allocation
|
page read and write
|
||
|
265DC846000
|
unkown
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
2F94639B000
|
unkown
|
page read and write
|
||
|
265DC883000
|
unkown
|
page read and write
|
||
|
1E636308000
|
unkown
|
page read and write
|
||
|
2F9463DC000
|
unkown
|
page read and write
|
||
|
265DC874000
|
unkown
|
page read and write
|
||
|
26A77850000
|
trusted library allocation
|
page read and write
|
||
|
B31CC79000
|
stack
|
page read and write
|
||
|
2F946372000
|
unkown
|
page read and write
|
||
|
29F3F000000
|
unkown
|
page read and write
|
||
|
D4927FB000
|
stack
|
page read and write
|
||
|
1D702C4C000
|
unkown
|
page read and write
|
||
|
2F946379000
|
unkown
|
page read and write
|
||
|
81CB5FC000
|
stack
|
page read and write
|
||
|
2202FD13000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
FD37A7E000
|
stack
|
page read and write
|
||
|
26A77800000
|
trusted library allocation
|
page read and write
|
||
|
1D702C5D000
|
unkown
|
page read and write
|
||
|
2F94637A000
|
unkown
|
page read and write
|
||
|
B31C97E000
|
stack
|
page read and write
|
||
|
2202FC02000
|
unkown
|
page read and write
|
||
|
1FE0AFF000
|
stack
|
page read and write
|
||
|
1B784310000
|
heap
|
page read and write
|
||
|
2AAC8E4E000
|
unkown
|
page read and write
|
||
|
265DC867000
|
unkown
|
page read and write
|
||
|
1D702C00000
|
unkown
|
page read and write
|
||
|
2B7DAA2F000
|
unkown
|
page read and write
|
||
|
2F946388000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
1B7843E0000
|
heap
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
2F945A52000
|
unkown
|
page read and write
|
||
|
1E63627E000
|
unkown
|
page read and write
|
||
|
EAFB67E000
|
stack
|
page read and write
|
||
|
FD37B7D000
|
stack
|
page read and write
|
||
|
81CB77E000
|
stack
|
page read and write
|
||
|
2F946900000
|
unkown
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
A788F7D000
|
stack
|
page read and write
|
||
|
26A76A2D000
|
heap
|
page read and write
|
||
|
FF404FA000
|
stack
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
2202FD00000
|
unkown
|
page read and write
|
||
|
1D702D08000
|
unkown
|
page read and write
|
||
|
66B16FE000
|
stack
|
page read and write
|
||
|
2F9458C0000
|
heap
|
page read and write
|
||
|
29F3F0E8000
|
unkown
|
page read and write
|
||
|
2AAC8E3C000
|
unkown
|
page read and write
|
||
|
2F94637C000
|
unkown
|
page read and write
|
||
|
2F945A4A000
|
unkown
|
page read and write
|
||
|
2F945AD6000
|
unkown
|
page read and write
|
||
|
1E79F300000
|
unkown
|
page read and write
|
||
|
2F946202000
|
unkown
|
page read and write
|
||
|
1B7843F6000
|
heap
|
page read and write
|
||
|
20E3F829000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F94637A000
|
unkown
|
page read and write
|
||
|
A788B7E000
|
stack
|
page read and write
|
||
|
1D702C2C000
|
unkown
|
page read and write
|
||
|
EAFB27E000
|
stack
|
page read and write
|
||
|
1B78441F000
|
heap
|
page read and write
|
||
|
2F946380000
|
unkown
|
page read and write
|
||
|
265DC863000
|
unkown
|
page read and write
|
||
|
2F4D4FE000
|
stack
|
page read and write
|
||
|
265DC826000
|
unkown
|
page read and write
|
||
|
2F94637E000
|
unkown
|
page read and write
|
||
|
2F946391000
|
unkown
|
page read and write
|
||
|
2F945A83000
|
unkown
|
page read and write
|
||
|
66B17FF000
|
stack
|
page read and write
|
||
|
1B7841A0000
|
heap
|
page read and write
|
||
|
29F3F013000
|
unkown
|
page read and write
|
||
|
EC96BFF000
|
stack
|
page read and write
|
||
|
1E636300000
|
unkown
|
page read and write
|
||
|
2F94639E000
|
unkown
|
page read and write
|
||
|
1E79F249000
|
unkown
|
page read and write
|
||
|
2F9460E0000
|
remote allocation
|
page read and write
|
||
|
2F946370000
|
unkown
|
page read and write
|
||
|
A788CFC000
|
stack
|
page read and write
|
||
|
1B78440D000
|
heap
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
FD3797D000
|
stack
|
page read and write
|
||
|
D4928F7000
|
stack
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
1E79F1E0000
|
remote allocation
|
page read and write
|
||
|
2AAC9602000
|
unkown
|
page read and write
|
||
|
81CB6FB000
|
stack
|
page read and write
|
||
|
1E636249000
|
unkown
|
page read and write
|
||
|
2F9463C7000
|
unkown
|
page read and write
|
||
|
2F946370000
|
unkown
|
page read and write
|
||
|
2AAC8C00000
|
heap
|
page read and write
|
||
|
81CBA7D000
|
stack
|
page read and write
|
||
|
2F945AC0000
|
unkown
|
page read and write
|
||
|
2F9463C8000
|
unkown
|
page read and write
|
||
|
26A76880000
|
heap
|
page read and write
|
||
|
1E79F260000
|
unkown
|
page read and write
|
||
|
29F3F041000
|
unkown
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
1E636213000
|
unkown
|
page read and write
|
||
|
2202FB40000
|
heap
|
page read and write
|
||
|
A7885DC000
|
stack
|
page read and write
|
||
|
2F946803000
|
unkown
|
page read and write
|
||
|
20E3F900000
|
unkown
|
page read and write
|
||
|
EAFB0FC000
|
stack
|
page read and write
|
||
|
1E63623C000
|
unkown
|
page read and write
|
||
|
26A76A25000
|
heap
|
page read and write
|
||
|
26A77590000
|
trusted library allocation
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
66B157D000
|
stack
|
page read and write
|
||
|
265DC87D000
|
unkown
|
page read and write
|
||
|
81CB97E000
|
stack
|
page read and write
|
||
|
4220CFF000
|
stack
|
page read and write
|
||
|
2F4D47B000
|
stack
|
page read and write
|
||
|
265DC859000
|
unkown
|
page read and write
|
||
|
2202FC5A000
|
unkown
|
page read and write
|
||
|
2F94637A000
|
unkown
|
page read and write
|
||
|
2F945B16000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
265DC82D000
|
unkown
|
page read and write
|
||
|
2F945A51000
|
unkown
|
page read and write
|
||
|
26A769E8000
|
heap
|
page read and write
|
||
|
1E79F249000
|
unkown
|
page read and write
|
||
|
1E7A0C70000
|
trusted library allocation
|
page read and write
|
||
|
1E636256000
|
unkown
|
page read and write
|
||
|
4220EFE000
|
stack
|
page read and write
|
||
|
265DC7C0000
|
heap
|
page read and write
|
||
|
1E79F213000
|
unkown
|
page read and write
|
||
|
1D702D00000
|
unkown
|
page read and write
|
||
|
1D703190000
|
unkown
|
page read and write
|
||
|
2B7DA9F0000
|
remote allocation
|
page read and write
|
||
|
FF408FF000
|
stack
|
page read and write
|
||
|
2F946372000
|
unkown
|
page read and write
|
||
|
26A76A50000
|
heap
|
page read and write
|
||
|
1E636251000
|
unkown
|
page read and write
|
||
|
2F945B13000
|
unkown
|
page read and write
|
||
|
1E636270000
|
unkown
|
page read and write
|
||
|
1E79F23D000
|
unkown
|
page read and write
|
||
|
2F9460E0000
|
remote allocation
|
page read and write
|
||
|
2F94637F000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
1D702C81000
|
unkown
|
page read and write
|
||
|
265DC842000
|
unkown
|
page read and write
|
||
|
265DC869000
|
unkown
|
page read and write
|
||
|
2F946384000
|
unkown
|
page read and write
|
||
|
FF40777000
|
stack
|
page read and write
|
||
|
1FE05FB000
|
stack
|
page read and write
|
||
|
1E7A0E02000
|
unkown
|
page read and write
|
||
|
20E3F620000
|
heap
|
page read and write
|
||
|
26A76890000
|
trusted library allocation
|
page read and write
|
||
|
2F946390000
|
unkown
|
page read and write
|
||
|
FD375FC000
|
stack
|
page read and write
|
||
|
FD379F9000
|
stack
|
page read and write
|
||
|
29F3F602000
|
unkown
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
2AAC8F13000
|
unkown
|
page read and write
|
||
|
2B7DAA00000
|
unkown
|
page read and write
|
||
|
265DC877000
|
unkown
|
page read and write
|
||
|
2F9463A9000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
29F3F0CD000
|
unkown
|
page read and write
|
||
|
2F94638C000
|
unkown
|
page read and write
|
||
|
265DC85C000
|
unkown
|
page read and write
|
||
|
1E79F1E0000
|
remote allocation
|
page read and write
|
||
|
2F945860000
|
heap
|
page read and write
|
||
|
265DC87E000
|
unkown
|
page read and write
|
||
|
B31CD7E000
|
stack
|
page read and write
|
||
|
265DC82F000
|
unkown
|
page read and write
|
||
|
81CB4FE000
|
stack
|
page read and write
|
||
|
2F945850000
|
heap
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
2F4CFAE000
|
stack
|
page read and write
|
||
|
2F945B08000
|
unkown
|
page read and write
|
||
|
2F945A29000
|
unkown
|
page read and write
|
||
|
265DC83D000
|
unkown
|
page read and write
|
||
|
2F9463BC000
|
unkown
|
page read and write
|
||
|
20E3F870000
|
unkown
|
page read and write
|
||
|
2AAC8E29000
|
unkown
|
page read and write
|
||
|
2AAC8F00000
|
unkown
|
page read and write
|
||
|
265DC902000
|
unkown
|
page read and write
|
||
|
A788E7B000
|
stack
|
page read and write
|
||
|
2F9463AE000
|
unkown
|
page read and write
|
||
|
26A76A2D000
|
heap
|
page read and write
|
||
|
2F9463A6000
|
unkown
|
page read and write
|
||
|
2F945A3C000
|
unkown
|
page read and write
|
||
|
2F946379000
|
unkown
|
page read and write
|
||
|
66B1AFD000
|
stack
|
page read and write
|
||
|
1E636229000
|
unkown
|
page read and write
|
||
|
29F3EE30000
|
heap
|
page read and write
|
||
|
2F946370000
|
unkown
|
page read and write
|
||
|
EAFB17E000
|
stack
|
page read and write
|
||
|
2F9463BD000
|
unkown
|
page read and write
|
||
|
EC965DE000
|
stack
|
page read and write
|
||
|
29F3F0BC000
|
unkown
|
page read and write
|
||
|
2F94637E000
|
unkown
|
page read and write
|
||
|
2B7DAA5F000
|
unkown
|
page read and write
|
||
|
2F9463C9000
|
unkown
|
page read and write
|
||
|
2F945AC6000
|
unkown
|
page read and write
|
||
|
81CB47E000
|
stack
|
page read and write
|
||
|
2F9463BA000
|
unkown
|
page read and write
|
||
|
29F3EDD0000
|
heap
|
page read and write
|
||
|
1E79F202000
|
unkown
|
page read and write
|
||
|
265DC84E000
|
unkown
|
page read and write
|
||
|
D49233E000
|
stack
|
page read and write
|
||
|
1B78440D000
|
heap
|
page read and write
|
||
|
1B7843EB000
|
heap
|
page read and write
|
||
|
2F945A4D000
|
unkown
|
page read and write
|
||
|
1B784410000
|
heap
|
page read and write
|
||
|
2F9460E0000
|
remote allocation
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
1FE0CFE000
|
stack
|
page read and write
|
||
|
2F9459C0000
|
unkown
|
page read and write
|
||
|
2F94689D000
|
unkown
|
page read and write
|
||
|
1E6361C0000
|
unkown
|
page read and write
|
||
|
2F9463C9000
|
unkown
|
page read and write
|
||
|
1B7843F1000
|
heap
|
page read and write
|
||
|
2AAC8E7F000
|
unkown
|
page read and write
|
||
|
2202FAD0000
|
heap
|
page read and write
|
||
|
1E79F1E0000
|
remote allocation
|
page read and write
|
||
|
2202FB70000
|
unkown
|
page read and write
|
||
|
2F4D27E000
|
stack
|
page read and write
|
||
|
2F946379000
|
unkown
|
page read and write
|
||
|
2F94636C000
|
unkown
|
page read and write
|
||
|
26A777F0000
|
trusted library allocation
|
page read and write
|
||
|
FF3FF8C000
|
stack
|
page read and write
|
||
|
2F9463AD000
|
unkown
|
page read and write
|
||
|
2AAC8E4B000
|
unkown
|
page read and write
|
||
|
B31CCFF000
|
stack
|
page read and write
|
||
|
2F946372000
|
unkown
|
page read and write
|
||
|
FF40BF8000
|
stack
|
page read and write
|
||
|
2F94638F000
|
unkown
|
page read and write
|
||
|
1E636255000
|
unkown
|
page read and write
|
||
|
2F9463BF000
|
unkown
|
page read and write
|
||
|
2F94682E000
|
unkown
|
page read and write
|
||
|
2AAC8E53000
|
unkown
|
page read and write
|
||
|
2AAC8E02000
|
unkown
|
page read and write
|
||
|
2B7DAA13000
|
unkown
|
page read and write
|
||
|
EC96AFE000
|
stack
|
page read and write
|
||
|
265DC845000
|
unkown
|
page read and write
|
||
|
1E79F22A000
|
unkown
|
page read and write
|
||
|
20E3F876000
|
unkown
|
page read and write
|
||
|
265DC862000
|
unkown
|
page read and write
|
||
|
1E636200000
|
unkown
|
page read and write
|
||
|
1D702D02000
|
unkown
|
page read and write
|
||
|
1E79F259000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
20E3F610000
|
heap
|
page read and write
|
||
|
20E3F863000
|
unkown
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
2F4D37B000
|
stack
|
page read and write
|
||
|
2F945A13000
|
unkown
|
page read and write
|
||
|
1B784410000
|
heap
|
page read and write
|
||
|
20E3F902000
|
unkown
|
page read and write
|
||
|
2F946372000
|
unkown
|
page read and write
|
||
|
2F946379000
|
unkown
|
page read and write
|
||
|
26A76AE0000
|
heap
|
page read and write
|
||
|
20E3F813000
|
unkown
|
page read and write
|
||
|
66B115B000
|
stack
|
page read and write
|
||
|
2F946378000
|
unkown
|
page read and write
|
||
|
2F94634D000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
29F3F113000
|
unkown
|
page read and write
|
||
|
29F3EDC0000
|
heap
|
page read and write
|
||
|
B31C9FE000
|
stack
|
page read and write
|
||
|
2F945AF6000
|
unkown
|
page read and write
|
||
|
66B19FC000
|
stack
|
page read and write
|
||
|
1E636190000
|
heap
|
page read and write
|
||
|
2AAC8C60000
|
heap
|
page read and write
|
||
|
4220DFB000
|
stack
|
page read and write
|
||
|
1E79F259000
|
unkown
|
page read and write
|
||
|
2F945A49000
|
unkown
|
page read and write
|
||
|
2F9463C9000
|
unkown
|
page read and write
|
||
|
FD3787D000
|
stack
|
page read and write
|
||
|
2F946359000
|
unkown
|
page read and write
|
||
|
2F946802000
|
unkown
|
page read and write
|
||
|
2F945B02000
|
unkown
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
1D702C3C000
|
unkown
|
page read and write
|
||
|
2F946391000
|
unkown
|
page read and write
|
||
|
2F945A7F000
|
unkown
|
page read and write
|
||
|
20E3F860000
|
unkown
|
page read and write
|
||
|
2F4D7FE000
|
stack
|
page read and write
|
||
|
2F946315000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
20E3F86B000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
2F946390000
|
unkown
|
page read and write
|
||
|
2F9463AD000
|
unkown
|
page read and write
|
||
|
2AAC8BF0000
|
heap
|
page read and write
|
||
|
FF40AFF000
|
stack
|
page read and write
|
||
|
26A769F1000
|
heap
|
page read and write
|
||
|
2F94683C000
|
unkown
|
page read and write
|
||
|
1E79F100000
|
heap
|
page read and write
|
||
|
1D702C5F000
|
unkown
|
page read and write
|
||
|
2F9463A8000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
A7889FC000
|
stack
|
page read and write
|
||
|
26A76B70000
|
trusted library allocation
|
page read and write
|
||
|
2F9463B7000
|
unkown
|
page read and write
|
||
|
265DC844000
|
unkown
|
page read and write
|
||
|
2F9463A8000
|
unkown
|
page read and write
|
||
|
265DC7F0000
|
unkown
|
page read and write
|
||
|
2F945A4C000
|
unkown
|
page read and write
|
||
|
265DC82A000
|
unkown
|
page read and write
|
||
|
EAFAE7B000
|
stack
|
page read and write
|
||
|
265DC87A000
|
unkown
|
page read and write
|
||
|
1B784410000
|
heap
|
page read and write
|
||
|
29F3F0C1000
|
unkown
|
page read and write
|
||
|
265DC861000
|
unkown
|
page read and write
|
||
|
2F9463BE000
|
unkown
|
page read and write
|
||
|
265DC879000
|
unkown
|
page read and write
|
||
|
2F94631B000
|
unkown
|
page read and write
|
||
|
2F945A00000
|
unkown
|
page read and write
|
||
|
1E79F190000
|
unkown
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F94638F000
|
unkown
|
page read and write
|
||
|
2F4D5F7000
|
stack
|
page read and write
|
||
|
20E3F85A000
|
unkown
|
page read and write
|
||
|
26A777E0000
|
heap
|
page readonly
|
||
|
2F945AEB000
|
unkown
|
page read and write
|
||
|
2F9463AB000
|
unkown
|
page read and write
|
||
|
1E79F160000
|
heap
|
page read and write
|
||
|
2F946376000
|
unkown
|
page read and write
|
||
|
FF4087E000
|
stack
|
page read and write
|
||
|
1E636A02000
|
unkown
|
page read and write
|
||
|
2F94639C000
|
unkown
|
page read and write
|
||
|
2F945A48000
|
unkown
|
page read and write
|
||
|
2F9463A8000
|
unkown
|
page read and write
|
||
|
1B78440D000
|
heap
|
page read and write
|
||
|
2F94683C000
|
unkown
|
page read and write
|
||
|
29F3F029000
|
unkown
|
page read and write
|
||
|
2F9463AC000
|
unkown
|
page read and write
|
||
|
29F3F073000
|
unkown
|
page read and write
|
||
|
22030402000
|
unkown
|
page read and write
|
||
|
1D702C13000
|
unkown
|
page read and write
|
||
|
2F946384000
|
unkown
|
page read and write
|
||
|
1E636313000
|
unkown
|
page read and write
|
||
|
2B7DA9C0000
|
unkown
|
page read and write
|
||
|
29F3F700000
|
unkown
|
page read and write
|
||
|
2F945A55000
|
unkown
|
page read and write
|
||
|
2F945A83000
|
unkown
|
page read and write
|
||
|
1B7842F0000
|
heap
|
page read and write
|
||
|
2F945A7C000
|
unkown
|
page read and write
|
||
|
265DC849000
|
unkown
|
page read and write
|
||
|
1D702C64000
|
unkown
|
page read and write
|
||
|
A78907F000
|
stack
|
page read and write
|
||
|
EAFB37D000
|
stack
|
page read and write
|
||
|
2F946800000
|
unkown
|
page read and write
|
||
|
2B7DAA02000
|
unkown
|
page read and write
|
||
|
2F4CF2C000
|
stack
|
page read and write
|
||
|
A78917D000
|
stack
|
page read and write
|
||
|
1B7842E5000
|
heap
|
page read and write
|
||
|
2F946376000
|
unkown
|
page read and write
|
||
|
2AAC8E6F000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
265DC864000
|
unkown
|
page read and write
|
||
|
20E3F802000
|
unkown
|
page read and write
|
||
|
265DC858000
|
unkown
|
page read and write
|
||
|
29F3F590000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
1B78441E000
|
heap
|
page read and write
|
||
|
1FE047B000
|
stack
|
page read and write
|
||
|
2F94637F000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
81CBB7F000
|
stack
|
page read and write
|
||
|
1D702C29000
|
unkown
|
page read and write
|
||
|
2B7DAA3C000
|
unkown
|
page read and write
|
||
|
2F94637F000
|
unkown
|
page read and write
|
||
|
A78927F000
|
stack
|
page read and write
|
||
|
2F9463A1000
|
unkown
|
page read and write
|
||
|
265DC840000
|
unkown
|
page read and write
|
||
|
29F3F0E3000
|
unkown
|
page read and write
|
||
|
1E79F302000
|
unkown
|
page read and write
|
||
|
66B1BFE000
|
stack
|
page read and write
|
||
|
D4922BB000
|
stack
|
page read and write
|
||
|
2F94637E000
|
unkown
|
page read and write
|
||
|
1B784406000
|
heap
|
page read and write
|
||
|
265DC760000
|
heap
|
page read and write
|
||
|
265DC85E000
|
unkown
|
page read and write
|
||
|
1E63624D000
|
unkown
|
page read and write
|
||
|
2F946391000
|
unkown
|
page read and write
|
||
|
2F94638A000
|
unkown
|
page read and write
|
||
|
1E636120000
|
heap
|
page read and write
|
||
|
1FE027B000
|
stack
|
page read and write
|
||
|
2F945A8B000
|
unkown
|
page read and write
|
||
|
81CB877000
|
stack
|
page read and write
|
||
|
2F946386000
|
unkown
|
page read and write
|
||
|
2202FC7A000
|
unkown
|
page read and write
|
||
|
EC96CFF000
|
stack
|
page read and write
|
||
|
26A777D0000
|
trusted library allocation
|
page read and write
|
||
|
2F945A57000
|
unkown
|
page read and write
|
||
|
26A769C0000
|
heap
|
page read and write
|
||
|
2B7DAA24000
|
unkown
|
page read and write
|
||
|
265DC857000
|
unkown
|
page read and write
|
||
|
1FE0DFF000
|
stack
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
4220BFB000
|
stack
|
page read and write
|
||
|
2AAC8E8A000
|
unkown
|
page read and write
|
||
|
265DC800000
|
unkown
|
page read and write
|
||
|
2F946300000
|
unkown
|
page read and write
|
||
|
EC969FE000
|
stack
|
page read and write
|
||
|
2B7DA990000
|
heap
|
page read and write
|
||
|
1D702A30000
|
heap
|
page read and write
|
||
|
1E636288000
|
unkown
|
page read and write
|
||
|
42206EB000
|
stack
|
page read and write
|
||
|
1E79F318000
|
unkown
|
page read and write
|
||
|
FF4057E000
|
stack
|
page read and write
|
||
|
D4923BE000
|
stack
|
page read and write
|
||
|
2F946384000
|
unkown
|
page read and write
|
||
|
1D702D13000
|
unkown
|
page read and write
|
||
|
20E3F780000
|
unkown
|
page read and write
|
||
|
2F945AA7000
|
unkown
|
page read and write
|
||
|
2202FAE0000
|
heap
|
page read and write
|
||
|
2AAC8F08000
|
unkown
|
page read and write
|
||
|
1E79F0F0000
|
heap
|
page read and write
|
||
|
1D7029D0000
|
heap
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2B7DAB02000
|
unkown
|
page read and write
|
||
|
29F3F102000
|
unkown
|
page read and write
|
||
|
26A76B90000
|
trusted library allocation
|
page read and write
|
||
|
81CB1FB000
|
stack
|
page read and write
|
||
|
1E79F28A000
|
unkown
|
page read and write
|
||
|
2F945A71000
|
unkown
|
page read and write
|
||
|
D492AFF000
|
stack
|
page read and write
|
||
|
1E63624B000
|
unkown
|
page read and write
|
||
|
2F9463A9000
|
unkown
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
A788C7E000
|
stack
|
page read and write
|
||
|
2F9463A9000
|
unkown
|
page read and write
|
||
|
2F946380000
|
unkown
|
page read and write
|
||
|
2F945A4F000
|
unkown
|
page read and write
|
||
|
20E3F860000
|
unkown
|
page read and write
|
||
|
EC9655B000
|
stack
|
page read and write
|
||
|
2202FD02000
|
unkown
|
page read and write
|
||
|
29F3F0CB000
|
unkown
|
page read and write
|
||
|
FF40CFF000
|
stack
|
page read and write
|
||
|
EAFB3FF000
|
stack
|
page read and write
|
||
|
2F94639D000
|
unkown
|
page read and write
|
||
|
20E3F869000
|
unkown
|
page read and write
|
||
|
2F946821000
|
unkown
|
page read and write
|
||
|
2F946382000
|
unkown
|
page read and write
|
||
|
2F9463A6000
|
unkown
|
page read and write
|
||
|
2F945ABF000
|
unkown
|
page read and write
|
||
|
1FE08FD000
|
stack
|
page read and write
|
||
|
2F9463A1000
|
unkown
|
page read and write
|
||
|
2F946371000
|
unkown
|
page read and write
|
||
|
EAFB4FD000
|
stack
|
page read and write
|
||
|
265DC832000
|
unkown
|
page read and write
|
||
|
2F94637E000
|
unkown
|
page read and write
|
||
|
26A76B85000
|
heap
|
page read and write
|
||
|
2AAC8D60000
|
unkown
|
page read and write
|
||
|
2F946380000
|
unkown
|
page read and write
|
||
|
2F94638F000
|
unkown
|
page read and write
|
||
|
2F9463B7000
|
unkown
|
page read and write
|
||
|
265DC85A000
|
unkown
|
page read and write
|
||
|
2F945AA0000
|
unkown
|
page read and write
|
There are 554 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
|
|
|
|
file:///C:/Users/user/Desktop/Secure_Message_81.90.a1.00.00.htm
|