Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0e29182c-003a-4ace-ab5e-4f3ce958f822.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\48b73762-56a3-4cd2-8136-2a8213c5f585.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\6260c43a-ec9d-4c54-8483-01c608068673.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\79a31f17-11e6-4b0b-b4f3-7b4a5b382759.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\993dd78d-87bc-4f03-bd1d-fd088479138a.tmp
|
SysEx File -
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1010df0a-3bc4-4df1-9aa2-71d78d9e86e0.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1268924f-714d-4cca-a83b-dabbee905be4.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2fcc885a-d998-453c-b75f-77a626e0828b.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3366642a-b208-44f4-9666-8a0bc74c8886.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3cd09691-8017-4dd6-ab6b-0ceba7722517.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3dfd17ad-226f-4ce3-9a59-a806c97a13ef.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5fcad953-b64e-4f9e-a365-7f5c02db0e9d.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9e62b013-d25c-4aee-8911-87c356304209.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\38f03569-7f2f-4f21-b256-9c244d98e639\6cedbd8ba1958011_0
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\38f03569-7f2f-4f21-b256-9c244d98e639\index
|
ISO-8859 text, with no line terminators, with escape sequences
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\38f03569-7f2f-4f21-b256-9c244d98e639\index-dir\temp-index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\38f03569-7f2f-4f21-b256-9c244d98e639\index-dir\the-real-index
(copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\index.txt
(copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\f7750fe543b15730b11be8c257b6a20c5057dfeb\index.txt.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000001.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\MANIFEST-000001
|
PGP\011Secret Key -
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index
|
ISO-8859 text, with no line terminators, with escape sequences
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\db6b0f7a-620e-47df-adf7-369320b3de00.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\8f6252b1-483e-4433-a007-3c8bb0b23fed.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\TransportSecurity (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a17ddf41-6e24-49f0-a8d3-eed64fe28483.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\bf40c10f-c046-4c3b-afa6-c3dca14037b6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c800bb10-0f12-4e1c-b44c-e53f68d99c29.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d0aab5b8-33ca-4db0-9a84-b48d69066dc0.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fc3b3394-aeb0-4a78-9354-4cdd88aebbbc.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\a49f9945-5bbc-4bf3-ad51-c4893b54d231.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\d48bd42f-4b8a-429e-be69-e85284b07e7e.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ecf891df-bc5b-4731-99ba-8eb9e5fb4567.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\f3bb094e-1491-414e-8b87-cacc8b3a67bf.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\2d9f91ee-06c2-4623-aaf9-531792f33b0f.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\c69add69-d268-46f6-be66-b764a53639c1.tmp
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\2d9f91ee-06c2-4623-aaf9-531792f33b0f.tmp
|
Google Chrome extension, version 3
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\images\topbar_floating_button_pressed.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\scoped_dir3808_876821841\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
There are 106 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "http://titleportals.com
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1512,16769074907998469638,7604037394124803263,131072
--lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://titleportals.com
|
 |
||
|
https://aksiyonteknik.com.tr/js/OFFICE/home/
|
185.103.196.211
|
|
|
|
https://aksiyonteknik.com.tr/js/OFFICE/home/2018.png
|
185.103.196.211
|
|
|
|
https://aksiyonteknik.com.tr/js/OFFICE/center/?sslchannel=true&sessionid=OTOYJovaMRXQj1L2uNuRQfgeC1GOLZz4QA0QhasDAeI9xxxEjfa3EOy4z7B9Y4hBUG3ZXdhzXZ9gsS7O
|
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
|
unknown
|
||
|
https://location.ctic.com/ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yNllrZsOapvNsRC1m7hXLgsBqrfe60OG6eBkCuxfRwBWaGzLwfYPRFWUgM8CWYT0OFaOUBc1XtK32vNXhrc10ZEBRJWqS67AlkZ7w00d1qFLwD5WO0gXuf-U5QT3Mx2PyOBSREBBW48BM6eUxLCEcRE1&t=49337fe8
|
52.179.225.139
|
||
|
https://titleportals.com/
|
160.153.136.3
|
||
|
https://location.ctic.com/scripts/officelocatorV8b.js
|
52.179.225.139
|
||
|
https://stats.g.doubleclick.net
|
unknown
|
||
|
https://location.ctic.com/ScriptResource.axd?d=CJzfp47zwbZkqPEVws6eAG3zvDzIBYIhQrrxQerK8JqsHpw3gxxY5Nv3TJnM-HI3nKx6MEtgsMPJIcTxv-2448uel2-5_KMFl43bVIYS7UYGyJ0uiuUIUWLSEzmpwhDZMKyq4EoJb4E4uPJT572-Ew2&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://ctic.com/services.aspx
|
|||
|
https://learn.zix.com/_next/image?url=%2Fimg%2Fzix_ot_logo.png&w=256&q=75
|
104.198.14.52
|
||
|
https://location.ctic.com/WebResource.axd?d=fqCPrKvoPJVc1rV7IcjHjTC1Euk1JpPxJtQUTU07H9YduyOTevUSrbVNFSF5A3XbJOUZWzkIXTyXGtN6Q1GmH8wwbyhXMjDg7re6VxyDGsMQzqJstnQWUk39kaIqM5rgudD8WNsRtF_3gjJwRigvbg2&t=637387657600000000
|
52.179.225.139
|
||
|
https://titleportals.com/sw.jsaD
|
unknown
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
|
unknown
|
||
|
https://location.ctic.com/images/ServiceIcons/UCCPlusIcon.png
|
52.179.225.139
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
|
unknown
|
||
|
https://location.ctic.com/ScriptResource.axd?d=v_I7_Ww9YDbzP79DTo1lX2_HAoS2zOixeZn2htLcCw3C81xWgdnzK4kgXIT3m821wFCw9TiEGHtdPnFVMrwptnqB0smdYpFykBNvTA5MH-pT8Drz2xdrC199t0dVn3TPApEDcK-aCAyIzS-BxJDeoDD9hnx4ZatjKQgC3ikEyLg1&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://location.ctic.com/images/Logoicons/FNTGIcon.png
|
52.179.225.139
|
||
|
https://learn.zix.com/_next/static/chunks/framework-e70c6273bfe3f237.js
|
104.198.14.52
|
||
|
https://img1.wsimg.com
|
unknown
|
||
|
https://www.google.com/pagead/1p-user-list/1007604421/?random=1656668116399&cv=9&fst=1656666000000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=1&u_nmime=2>m=2wg6t0&sendb=1&frm=0&url=https%3A%2F%2Flearn.zix.com%2F&tiba=Learn%20More%20%7C%20Zix&async=1&fmt=3&is_vtc=1&random=2672146430&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
|
142.251.36.196
|
||
|
https://www.google.com
|
unknown
|
||
|
https://learn.zix.com/_next/image?url=https%3A%2F%2Fimages.ctfassets.net%2F4tkc0oryl0w0%2FQr1IOKWvPlTCJkalBnUzb%2Fa84389ad8c6db74618662e7574cf9473%2Fencrypt.png&w=1920&q=75
|
104.198.14.52
|
||
|
https://ctic.com/services.aspx#ctl00_menuMain_SkipLink
|
|||
|
https://location.ctic.com/images/ServiceIcons/RecordingSpecialProjectsIcon.png
|
52.179.225.139
|
||
|
https://isteam.wsimg.com
|
unknown
|
||
|
https://titleportals.com/?__WB_REVISION__=1656632790505
|
unknown
|
||
|
https://location.ctic.com/images/Commercial.png
|
52.179.225.139
|
||
|
https://location.ctic.com/images/Logoicons/fnticicon.png
|
52.179.225.139
|
||
|
https://learn.zix.com/_next/image?url=%2Fimg%2Fzix_ot_logo.png&w=384&q=75
|
104.198.14.52
|
||
|
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
|
unknown
|
||
|
https://location.ctic.com/ScriptResource.axd?d=r5UL-hsNriOxS7UV4wWMiBtmGXBwascwHiSyGwG-7jbgEjOTvs8EXVPukm4d-lG8eKQ5YGhrdEsoLgnt6zwsKsQ_e0mknmbRYu0c2527eJl8AuS9fvq8fnH_MvK2i-WJD5-irjp42UR6PFmgtQEaI9J7ShSnibhIII7l2irW_ao1&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://titleportals.com/favicon.ico
|
160.153.136.3
|
||
|
https://location.ctic.com/Content/bootstrap.min.css
|
52.179.225.139
|
||
|
https://ctic.com/WebResource.axd?d=IBJQaD7fveb55KcR4-fQDfTsfrgwBmMVeipt17IDyiQmY6SbNyu7xCosHvVir5cU3nSBvMTT6Jha3TPZ2M01cq5q-Zs1&t=637811740157966200
|
52.179.225.139
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
|
unknown
|
||
|
https://location.ctic.com/images/placehlder.png
|
52.179.225.139
|
||
|
https://dns.google
|
unknown
|
||
|
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
|
unknown
|
||
|
https://location.ctic.com/
|
|||
|
https://learn.zix.com/_ipx/w_3840,q_75/https%3A%2F%2Fimages.ctfassets.net%2F4tkc0oryl0w0%2FQr1IOKWvPlTCJkalBnUzb%2Fa84389ad8c6db74618662e7574cf9473%2Fencrypt.png?url=https%3A%2F%2Fimages.ctfassets.net%2F4tkc0oryl0w0%2FQr1IOKWvPlTCJkalBnUzb%2Fa84389ad8c6db74618662e7574cf9473%2Fencrypt.png&w=3840&q=75
|
104.198.14.52
|
||
|
https://img1.wsimg.com/gfonts/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2
|
unknown
|
||
|
https://ctic.com/WebResource.axd?d=QHOpV9n2mmkWhHvrWZpfdgSG4brmNdekVq1V2eiTXljnCT9ZMz_VQ3SJiT_yP_p2C5IjBmFfiS3Hu8ZNCjUwsCWsBRY1&t=637811740157966200
|
52.179.225.139
|
||
|
https://location.ctic.com/images/Logoicons/clticicon.png
|
52.179.225.139
|
||
|
https://learn.zix.com/_next/static/JUhEJajYhbX_sm8b4qvqE/_buildManifest.js
|
104.198.14.52
|
||
|
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
142.251.36.238
|
||
|
https://ctic.com/404.aspx?aspxerrorpath=/WebResource.axd
|
52.179.225.139
|
||
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
||
|
https://ctic.com/services.aspx
|
52.179.225.139
|
||
|
https://ctic.com/Stylesheets/stylesheet.css
|
52.179.225.139
|
||
|
https://ctic.com/Images/header.png
|
52.179.225.139
|
||
|
https://ctic.com/images/FNFLogo.png
|
52.179.225.139
|
||
|
https://titleportals.com/manifest.webmanifest
|
160.153.136.3
|
||
|
https://location.ctic.com/ScriptResource.axd?d=U8OMYmPzb2LbIsKauUCqxkSNWqJn5xVY3b5X4pyEdLSY-7J0Bx8WkVkX2bVFDtnNnOj2ZnuwKjJxY9Qex5nruLENBY1aOVlDzDlemXLGsE1DQZb0kgRrKn1wxNdESRcWdVyQcUaP_ax1uyUDtiJlB93vk1sVAsVKaRxoORUehdU1&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://location.ctic.com/WebResource.axd?d=jATR2aT4MP7vIvfz8UagJKkiwdWFUrwMafXE7LMaJNGoTglPSi0_VyioPRJ_E6rieJtei38XC55ILIgZP84quJoMvucMYd71Gq6xV6YcSH517JXcTQrNAAzIGoOA5NbgJpaynTxgn2P0gq1On2PsOA2&t=637387657600000000
|
52.179.225.139
|
||
|
https://titleportals.com/sw.js
|
160.153.136.3
|
||
|
https://location.ctic.com/WebResource.axd?d=VdPoLqp1pEU6N0-IfFplZKyznpp8R-oKlM6P0m_n0dRdELswoZPmL5iYOcnZas4LTiTAiwSD5KRary5uUle6KSe9yIGXLK2n2Ah9MpWCJVm7EFRWChA48hFuri4pLW6s6KdwvM6O2irOEXFKC0Nqkg2&t=637387657600000000
|
52.179.225.139
|
||
|
https://location.ctic.com/images/Logoicons/TTICicon.png
|
52.179.225.139
|
||
|
https://www.google.com/images/x2.gif
|
unknown
|
||
|
https://apt.techtarget.com/activity/activity.gif?activityTypeId=31&cid=22110178&version=2.1.1&ref=https%3A%2F%2Flearn.zix.com%2F&r=1656668116332
|
206.19.49.24
|
||
|
https://ctic.com/images/homePageImage.jpg
|
52.179.225.139
|
||
|
https://apt.techtarget.com/activity/activity.gif?activityTypeId=31&cid=22110178&version=2.1.1&ref=https%3A%2F%2Flearn.zix.com%2F&r=1656668116333
|
206.19.49.24
|
||
|
https://ctic.com/Default.aspx
|
52.179.225.139
|
||
|
https://location.ctic.com/ScriptResource.axd?d=fgH2o6PXbcTnUV6W8ibPa1UTg5SpqtP6BID4MUADpeOgOUH0AFf-BUgtmWkycZL20EiuRR1rJ__-cP-0kg08UXQPP0SCZK-CrwD3dy7uuJSkDPJChrz8kmqg5J-7KumM0&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://location.ctic.com/images/ServiceIcons/ClosingEscrowIcon.png
|
52.179.225.139
|
||
|
https://location.ctic.com/ScriptResource.axd?d=kLB9_fq97ui9imtAf9uBuF1NpVRG1UQQVuRIV-a3kOc-w2fE7KpvxbpOBSq6c_m8agsMDmWyaPfkDVqDvhNZn7p_IVYKBucXBcn5t3jsnW7QHRj0XcM8oW39SttS3UEOyXSSXDl0qSyYCS0KoUyI8w2&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://location.ctic.com/ScriptResource.axd?d=QZl-WVTSCJn1xAKqTrLix8EyLA5WfLXycD4EDaxR-feekCFUL36YCQ9BG3LeTyocq9jc5LFpobfAqDWUPhTGlrtu43J8bVOjOXmsJ4IAvznRHaNPTCZWB2RcoDVdLfg5V5ojI-RxabX_cOuB0ErE9kmn4tVoRm9fpsfCT9a1h581&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://www.google.com/images/dot2.gif
|
unknown
|
||
|
https://pipedream.wistia.com/mput?topic=metrics
|
52.54.116.217
|
||
|
https://ctic.com/default.aspx
|
52.179.225.139
|
||
|
https://location.ctic.com/images/NearMeIcon.png
|
52.179.225.139
|
||
|
https://location.ctic.com/WebResource.axd?d=f1eAwWpm15Num4LTAbKSBK_zV3-4eqoVprQ24hS1BcPFjzvRA402RTA_sA0Sym8X5vIunZXu1RzvPKFStfoYUxmRN20AtEOuSKT9Lu0TeWlglxvG232gUeVBZWT_4VpkTbHHV2WaLRkJWg5_hRLgdGHpMo5F3gjn6xWAxNvmW2A1&t=637387657600000000
|
52.179.225.139
|
||
|
https://ctic.com/services.aspx2
|
unknown
|
||
|
https://learn.zix.com/_next/static/JUhEJajYhbX_sm8b4qvqE/_ssgManifest.js
|
104.198.14.52
|
||
|
https://location.ctic.com/images/Logoicons/lticicon.png
|
52.179.225.139
|
||
|
https://aksiyonteknik.com.tr/js/OFFICE/home
|
185.103.196.211
|
||
|
https://location.ctic.com/scripts/balupton-jquery-scrollto-a1eb8a5/lib/jquery-scrollto.js
|
52.179.225.139
|
||
|
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-91357340-1&cid=1187505010.1656668116&jid=1949436357&gjid=935377435&_gid=1257152793.1656668117&_u=aCDAgEAjQAAAAE~&z=28292997
|
108.177.15.155
|
||
|
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
|
unknown
|
||
|
https://location.ctic.com/ScriptResource.axd?d=pL5wgiwL1GpmyqMwhkDjF4c_RNDd2bVNxvn19KzsTeyUAaLvhqNc_FYdbuGEx47nAp8QjDMTQ-BBmQGadO_K05Ih6O6n_K0a16s5IUG3mH5Signt1J8YewAKEK7mOnb8C4fWWvEML5PdFJu9sQh7Jg2&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://img1.wsimg.com/gfonts/s/archivoblack/v17/HTxqL289NzCGg4MzN6KJ7eW6CYKF_i7y.woff2)
|
unknown
|
||
|
https://learn.zix.com/
|
104.198.14.52
|
||
|
https://fg8vvsvnieiv3ej16jby.litix.io/
|
52.70.210.174
|
||
|
https://www.google.com/
|
unknown
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
|
unknown
|
||
|
https://aksiyonteknik.com.tr/js/OFFICE/center/bgblur.png
|
185.103.196.211
|
||
|
https://location.ctic.com/ScriptResource.axd?d=dnHi0nMgDDe1Bo6v1KTdpIvDS8CB0DZR5Mt5396HusV8op_xAyYGoNCkXHpY7CA_gQJsuzQAB-t9eW48qt4TibDzZwVNCvHJNc9VJSDYbIAfouilLdFvNVF2m43sDq2kxs-rOZXyaGgCmCxdRzUH5g2&t=ffffffffefa1ed2f
|
52.179.225.139
|
||
|
https://aksiyonteknik.com.tr/js/OFFICE/FUNC/o365.png
|
185.103.196.211
|
||
|
https://titleportals.com/2
|
unknown
|
||
|
https://ctic.com/images/OfficeButtonCT.png
|
52.179.225.139
|
||
|
https://img1.wsimg.com/gfonts/s/montserrat/v24/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
|
unknown
|
||
|
https://app.steezy.co/favicon.ico
|
34.98.122.12
|
||
|
https://www.google.ch/pagead/1p-user-list/1007604421/?random=1656668116399&cv=9&fst=1656666000000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=1&u_nmime=2>m=2wg6t0&sendb=1&frm=0&url=https%3A%2F%2Flearn.zix.com%2F&tiba=Learn%20More%20%7C%20Zix&async=1&fmt=3&is_vtc=1&random=2672146430&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
|
172.217.16.163
|
||
|
https://www.google.com/images/cleardot.gif
|
unknown
|
||
|
https://location.ctic.com/images/CTICLogo.png
|
52.179.225.139
|
||
|
https://play.google.com
|
unknown
|
||
|
https://location.ctic.com/images/Residential.png
|
52.179.225.139
|
||
|
http://titleportals.com/
|
160.153.136.3
|
||
|
https://www.google.ch
|
unknown
|
||
|
https://location.ctic.com/WebResource.axd?d=ki1n1Eahlh7Hg67y-z8gJqJBGNbaGaMMwlnKRV_n3YJ7ndOsyYsROLoAAXZXGZOjUu-YUfxZ6Cv4C3Slc-c6ObBZFvzplc9YRtGN--8JoSUGvkgBOJun1fmZpiNYFcb68Z3aTInS8Ddmwif_HzT-3Q2&t=637387657600000000
|
52.179.225.139
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
gstaticadssl.l.google.com
|
142.251.36.227
|
||
|
location.fntg.com
|
52.179.225.139
|
||
|
ctic.com
|
52.179.225.139
|
||
|
accounts.google.com
|
142.251.36.205
|
||
|
stats.l.doubleclick.net
|
108.177.15.155
|
||
|
dual-a-0001.a-msedge.net
|
204.79.197.200
|
||
|
a4d6c1c8368a911ea98860aeb4e6dc37-182063218.us-east-1.elb.amazonaws.com
|
52.70.210.174
|
||
|
www-googletagmanager.l.google.com
|
142.251.37.8
|
||
|
titleportals.com
|
160.153.136.3
|
||
|
isteam.wsimg.com
|
52.29.111.77
|
||
|
aksiyonteknik.com.tr
|
185.103.196.211
|
||
|
app.steezy.co
|
34.98.122.12
|
||
|
apt-lb.techtarget.com
|
206.19.49.24
|
||
|
prod-east-stats-tap-alb-627711272.us-east-1.elb.amazonaws.com
|
18.205.143.103
|
||
|
googleads.g.doubleclick.net
|
142.251.37.2
|
||
|
ssl-google-analytics.l.google.com
|
142.251.36.232
|
||
|
www.google.com
|
142.251.36.196
|
||
|
clients.l.google.com
|
142.251.36.238
|
||
|
www.google.ch
|
172.217.16.163
|
||
|
prod-east-pipedream-alb-988701200.us-east-1.elb.amazonaws.com
|
52.54.116.217
|
||
|
learn.zix.com
|
104.198.14.52
|
||
|
img1.wsimg.com
|
unknown
|
||
|
fast.wistia.com
|
unknown
|
||
|
dev.virtualearth.net
|
unknown
|
||
|
img6.wsimg.com
|
unknown
|
||
|
stats.g.doubleclick.net
|
unknown
|
||
|
clients2.google.com
|
unknown
|
||
|
code.jquery.com
|
unknown
|
||
|
t1.ssl.ak.dynamic.tiles.virtualearth.net
|
unknown
|
||
|
t0.ssl.ak.dynamic.tiles.virtualearth.net
|
unknown
|
||
|
fg8vvsvnieiv3ej16jby.litix.io
|
unknown
|
||
|
distillery.wistia.com
|
unknown
|
||
|
location.ctic.com
|
unknown
|
||
|
use.typekit.net
|
unknown
|
||
|
events.api.secureserver.net
|
unknown
|
||
|
embed-ssl.wistia.com
|
unknown
|
||
|
p.typekit.net
|
unknown
|
||
|
pipedream.wistia.com
|
unknown
|
||
|
apt.techtarget.com
|
unknown
|
||
|
trk.techtarget.com
|
unknown
|
||
|
fast.wistia.net
|
unknown
|
There are 31 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
108.177.15.155
|
stats.l.doubleclick.net
|
United States
|
||
|
52.70.210.174
|
a4d6c1c8368a911ea98860aeb4e6dc37-182063218.us-east-1.elb.amazonaws.com
|
United States
|
||
|
192.168.2.1
|
unknown
|
unknown
|
||
|
204.79.197.200
|
dual-a-0001.a-msedge.net
|
United States
|
||
|
142.251.36.205
|
accounts.google.com
|
United States
|
||
|
160.153.136.3
|
titleportals.com
|
United States
|
||
|
52.179.225.139
|
location.fntg.com
|
United States
|
||
|
206.19.49.24
|
apt-lb.techtarget.com
|
United States
|
||
|
142.251.37.8
|
www-googletagmanager.l.google.com
|
United States
|
||
|
52.54.116.217
|
prod-east-pipedream-alb-988701200.us-east-1.elb.amazonaws.com
|
United States
|
||
|
142.251.37.2
|
googleads.g.doubleclick.net
|
United States
|
||
|
172.217.16.163
|
www.google.ch
|
United States
|
||
|
104.198.14.52
|
learn.zix.com
|
United States
|
||
|
142.251.36.238
|
clients.l.google.com
|
United States
|
||
|
142.251.36.232
|
ssl-google-analytics.l.google.com
|
United States
|
||
|
142.251.36.196
|
www.google.com
|
United States
|
||
|
185.103.196.211
|
aksiyonteknik.com.tr
|
Turkey
|
||
|
18.205.143.103
|
prod-east-stats-tap-alb-627711272.us-east-1.elb.amazonaws.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
52.29.111.77
|
isteam.wsimg.com
|
United States
|
||
|
34.98.122.12
|
app.steezy.co
|
United States
|
||
|
127.0.0.1
|
unknown
|
unknown
|
There are 12 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
ahfgeienlihckogmohjhadlkjgocpleb
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
kmendfapggjehodndflmmgagdbamhnfd
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mfehgcgbbipciphmccgaenjidiccnmng
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
neajdppkdcdipfabeoofebfddakdcjhd
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nkeimhogjdpnpccoofpliimaahmaaome
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
||
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
dr
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.reporting
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
module_blacklist_cache_md5_digest
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
media.storage_id_salt
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_account_id
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.account_id
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_seed
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_homepage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
default_search_provider_data.template_url_data
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
safebrowsing.incidents_sent
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
pinned_tabs
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
search_provider_overrides
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_default_search
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_username
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.startup_urls
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.restore_on_startup
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_version
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_startup_urls
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.prompt_wave
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage_is_newtabpage
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
browser.show_home_button
|
||
|
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
|
user_experience_metrics.stability.exited_cleanly
|
||
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
lastrun
|
There are 33 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2353168B000
|
heap
|
page read and write
|
||
|
2BB66002000
|
trusted library allocation
|
page read and write
|
||
|
20E5B4D0000
|
heap
|
page read and write
|
||
|
23531713000
|
heap
|
page read and write
|
||
|
23531DF0000
|
trusted library allocation
|
page read and write
|
||
|
23536B20000
|
trusted library allocation
|
page read and write
|
||
|
FEB737E000
|
stack
|
page read and write
|
||
|
A3B3EFE000
|
stack
|
page read and write
|
||
|
225B6802000
|
trusted library allocation
|
page read and write
|
||
|
2BB65E60000
|
trusted library allocation
|
page read and write
|
||
|
1A42E266000
|
heap
|
page read and write
|
||
|
23531691000
|
heap
|
page read and write
|
||
|
A3B3B7F000
|
stack
|
page read and write
|
||
|
23536B64000
|
trusted library allocation
|
page read and write
|
||
|
14505A90000
|
heap
|
page read and write
|
||
|
2B554E6F000
|
heap
|
page read and write
|
||
|
A3B3A79000
|
stack
|
page read and write
|
||
|
5B51CFE000
|
stack
|
page read and write
|
||
|
14505D13000
|
heap
|
page read and write
|
||
|
D7C947D000
|
stack
|
page read and write
|
||
|
23536C80000
|
trusted library allocation
|
page read and write
|
||
|
14505D00000
|
heap
|
page read and write
|
||
|
23531E15000
|
heap
|
page read and write
|
||
|
23531F18000
|
heap
|
page read and write
|
||
|
2B554F13000
|
heap
|
page read and write
|
||
|
A3B427F000
|
stack
|
page read and write
|
||
|
2353168D000
|
heap
|
page read and write
|
||
|
D7C9277000
|
stack
|
page read and write
|
||
|
5B5217F000
|
stack
|
page read and write
|
||
|
2BB65800000
|
heap
|
page read and write
|
||
|
FEB77FF000
|
stack
|
page read and write
|
||
|
20E5B6C4000
|
heap
|
page read and write
|
||
|
14505C82000
|
heap
|
page read and write
|
||
|
225B5FF0000
|
trusted library allocation
|
page read and write
|
||
|
23531450000
|
heap
|
page read and write
|
||
|
EF2A37F000
|
stack
|
page read and write
|
||
|
235325D0000
|
trusted library section
|
page readonly
|
||
|
23536CFC000
|
heap
|
page read and write
|
||
|
20E5B4C0000
|
heap
|
page read and write
|
||
|
225B6063000
|
heap
|
page read and write
|
||
|
2BB65700000
|
heap
|
page read and write
|
||
|
2B554E3C000
|
heap
|
page read and write
|
||
|
225B602C000
|
heap
|
page read and write
|
||
|
23536D02000
|
heap
|
page read and write
|
||
|
20E5BE02000
|
heap
|
page read and write
|
||
|
23531674000
|
heap
|
page read and write
|
||
|
FEB6B1B000
|
stack
|
page read and write
|
||
|
2353169F000
|
heap
|
page read and write
|
||
|
1A42E26D000
|
heap
|
page read and write
|
||
|
EF29B7E000
|
stack
|
page read and write
|
||
|
34AC17F000
|
stack
|
page read and write
|
||
|
20E5B629000
|
heap
|
page read and write
|
||
|
FEB73FC000
|
stack
|
page read and write
|
||
|
23531677000
|
heap
|
page read and write
|
||
|
225B6100000
|
heap
|
page read and write
|
||
|
1A42E060000
|
heap
|
page read and write
|
||
|
23536E80000
|
remote allocation
|
page read and write
|
||
|
14505A20000
|
heap
|
page read and write
|
||
|
1A42E246000
|
heap
|
page read and write
|
||
|
D7C907C000
|
stack
|
page read and write
|
||
|
2BB65690000
|
heap
|
page read and write
|
||
|
2BB6582A000
|
heap
|
page read and write
|
||
|
A3B417C000
|
stack
|
page read and write
|
||
|
23531F18000
|
heap
|
page read and write
|
||
|
A3B3FFF000
|
stack
|
page read and write
|
||
|
1A42E269000
|
heap
|
page read and write
|
||
|
14505C00000
|
heap
|
page read and write
|
||
|
23536BF0000
|
trusted library allocation
|
page read and write
|
||
|
A3B3F7F000
|
stack
|
page read and write
|
||
|
23531DF3000
|
trusted library allocation
|
page read and write
|
||
|
235325C0000
|
trusted library section
|
page readonly
|
||
|
C3C18FE000
|
stack
|
page read and write
|
||
|
235325E0000
|
trusted library section
|
page readonly
|
||
|
5B5207E000
|
stack
|
page read and write
|
||
|
225B607F000
|
heap
|
page read and write
|
||
|
225B6113000
|
heap
|
page read and write
|
||
|
A3B407F000
|
stack
|
page read and write
|
||
|
23531F9A000
|
heap
|
page read and write
|
||
|
1A42E25E000
|
heap
|
page read and write
|
||
|
1A42E257000
|
heap
|
page read and write
|
||
|
D7C917C000
|
stack
|
page read and write
|
||
|
D7C937F000
|
stack
|
page read and write
|
||
|
D7C8F7E000
|
stack
|
page read and write
|
||
|
1A42E25C000
|
heap
|
page read and write
|
||
|
23536CFA000
|
heap
|
page read and write
|
||
|
2BB65813000
|
heap
|
page read and write
|
||
|
23531E00000
|
heap
|
page read and write
|
||
|
1A42E27B000
|
heap
|
page read and write
|
||
|
D7C8E7B000
|
stack
|
page read and write
|
||
|
A3B33EB000
|
stack
|
page read and write
|
||
|
20E5B613000
|
heap
|
page read and write
|
||
|
23531F13000
|
heap
|
page read and write
|
||
|
1A42E0C0000
|
heap
|
page read and write
|
||
|
23531F00000
|
heap
|
page read and write
|
||
|
FEB727E000
|
stack
|
page read and write
|
||
|
FEB74FC000
|
stack
|
page read and write
|
||
|
14505C02000
|
heap
|
page read and write
|
||
|
A3B37F7000
|
stack
|
page read and write
|
||
|
34AC07E000
|
stack
|
page read and write
|
||
|
1A42E240000
|
heap
|
page read and write
|
||
|
14505A30000
|
heap
|
page read and write
|
||
|
1A42E226000
|
heap
|
page read and write
|
||
|
EF2A17F000
|
stack
|
page read and write
|
||
|
FEB75FE000
|
stack
|
page read and write
|
||
|
1A42E213000
|
heap
|
page read and write
|
||
|
2B554E02000
|
heap
|
page read and write
|
||
|
235315D0000
|
trusted library section
|
page read and write
|
||
|
2BB65E90000
|
remote allocation
|
page read and write
|
||
|
2BB65802000
|
heap
|
page read and write
|
||
|
FEB717B000
|
stack
|
page read and write
|
||
|
EF2A27F000
|
stack
|
page read and write
|
||
|
EF2A07F000
|
stack
|
page read and write
|
||
|
14505B90000
|
trusted library allocation
|
page read and write
|
||
|
225B6055000
|
heap
|
page read and write
|
||
|
2B554E5B000
|
heap
|
page read and write
|
||
|
20E5B6CE000
|
heap
|
page read and write
|
||
|
2353169D000
|
heap
|
page read and write
|
||
|
5B51E7E000
|
stack
|
page read and write
|
||
|
20E5B713000
|
heap
|
page read and write
|
||
|
2BB65E90000
|
remote allocation
|
page read and write
|
||
|
1A42E277000
|
heap
|
page read and write
|
||
|
225B6066000
|
heap
|
page read and write
|
||
|
2B554E29000
|
heap
|
page read and write
|
||
|
23536B21000
|
trusted library allocation
|
page read and write
|
||
|
1A42E23D000
|
heap
|
page read and write
|
||
|
C3C19FE000
|
stack
|
page read and write
|
||
|
C3C1B7F000
|
stack
|
page read and write
|
||
|
2B555602000
|
trusted library allocation
|
page read and write
|
||
|
23531600000
|
heap
|
page read and write
|
||
|
23536B60000
|
trusted library allocation
|
page read and write
|
||
|
23536B44000
|
trusted library allocation
|
page read and write
|
||
|
5B51C7E000
|
stack
|
page read and write
|
||
|
2353163D000
|
heap
|
page read and write
|
||
|
2B554E55000
|
heap
|
page read and write
|
||
|
14505C13000
|
heap
|
page read and write
|
||
|
225B6069000
|
heap
|
page read and write
|
||
|
14505C25000
|
heap
|
page read and write
|
||
|
20E5B560000
|
trusted library allocation
|
page read and write
|
||
|
225B5E80000
|
heap
|
page read and write
|
||
|
1A42E25A000
|
heap
|
page read and write
|
||
|
C3C1C7D000
|
stack
|
page read and write
|
||
|
14506402000
|
trusted library allocation
|
page read and write
|
||
|
23532001000
|
trusted library allocation
|
page read and write
|
||
|
1A42E258000
|
heap
|
page read and write
|
||
|
34ABF7B000
|
stack
|
page read and write
|
||
|
2B554D60000
|
heap
|
page read and write
|
||
|
2B554E1F000
|
heap
|
page read and write
|
||
|
20E5B640000
|
heap
|
page read and write
|
||
|
2B554E75000
|
heap
|
page read and write
|
||
|
D7C957E000
|
stack
|
page read and write
|
||
|
2B554E00000
|
heap
|
page read and write
|
||
|
23536B2E000
|
trusted library allocation
|
page read and write
|
||
|
23536E80000
|
remote allocation
|
page read and write
|
||
|
1A42E255000
|
heap
|
page read and write
|
||
|
2BB65902000
|
heap
|
page read and write
|
||
|
1A42E263000
|
heap
|
page read and write
|
||
|
23532081000
|
trusted library allocation
|
page read and write
|
||
|
EF29C7C000
|
stack
|
page read and write
|
||
|
1A42E302000
|
heap
|
page read and write
|
||
|
1A42E200000
|
heap
|
page read and write
|
||
|
EF29D7F000
|
stack
|
page read and write
|
||
|
2BB65E90000
|
remote allocation
|
page read and write
|
||
|
20E5B6BF000
|
heap
|
page read and write
|
||
|
23536B50000
|
trusted library allocation
|
page read and write
|
||
|
225B6108000
|
heap
|
page read and write
|
||
|
235314C0000
|
heap
|
page read and write
|
||
|
23531460000
|
heap
|
page read and write
|
||
|
EF2987B000
|
stack
|
page read and write
|
||
|
20E5B66E000
|
heap
|
page read and write
|
||
|
20E5B688000
|
heap
|
page read and write
|
||
|
A3B387D000
|
stack
|
page read and write
|
||
|
1A42E260000
|
heap
|
page read and write
|
||
|
23531613000
|
heap
|
page read and write
|
||
|
225B6102000
|
heap
|
page read and write
|
||
|
5B51F7F000
|
stack
|
page read and write
|
||
|
225B5E90000
|
heap
|
page read and write
|
||
|
23531702000
|
heap
|
page read and write
|
||
|
23536B28000
|
trusted library allocation
|
page read and write
|
||
|
225B5EF0000
|
heap
|
page read and write
|
||
|
23536B20000
|
trusted library allocation
|
page read and write
|
||
|
A3B3D7B000
|
stack
|
page read and write
|
||
|
235324E0000
|
trusted library allocation
|
page read and write
|
||
|
EF29E7D000
|
stack
|
page read and write
|
||
|
1A42E264000
|
heap
|
page read and write
|
||
|
FEB6EFF000
|
stack
|
page read and write
|
||
|
2B554F02000
|
heap
|
page read and write
|
||
|
C3C1D7D000
|
stack
|
page read and write
|
||
|
1A42E27A000
|
heap
|
page read and write
|
||
|
1A42E1C0000
|
trusted library allocation
|
page read and write
|
||
|
1A42E25F000
|
heap
|
page read and write
|
||
|
A3B3C7A000
|
stack
|
page read and write
|
||
|
14505C54000
|
heap
|
page read and write
|
||
|
A3B367E000
|
stack
|
page read and write
|
||
|
20E5B6D0000
|
heap
|
page read and write
|
||
|
225B607F000
|
heap
|
page read and write
|
||
|
2B554DC0000
|
heap
|
page read and write
|
||
|
20E5BF00000
|
heap
|
page read and write
|
||
|
225B6000000
|
heap
|
page read and write
|
||
|
14505C7B000
|
heap
|
page read and write
|
||
|
1A42E267000
|
heap
|
page read and write
|
||
|
23531629000
|
heap
|
page read and write
|
||
|
C3C187E000
|
stack
|
page read and write
|
||
|
225B603C000
|
heap
|
page read and write
|
||
|
C3C13FB000
|
stack
|
page read and write
|
||
|
C3C1AFD000
|
stack
|
page read and write
|
||
|
2BB656A0000
|
heap
|
page read and write
|
||
|
14505D02000
|
heap
|
page read and write
|
||
|
1A42E259000
|
heap
|
page read and write
|
||
|
20E5B600000
|
heap
|
page read and write
|
||
|
D7C8EFD000
|
stack
|
page read and write
|
||
|
23531F18000
|
heap
|
page read and write
|
||
|
23536E80000
|
remote allocation
|
page read and write
|
||
|
23531E02000
|
heap
|
page read and write
|
||
|
23531679000
|
heap
|
page read and write
|
||
|
FEB6F7C000
|
stack
|
page read and write
|
||
|
1A42E27E000
|
heap
|
page read and write
|
||
|
23536B41000
|
trusted library allocation
|
page read and write
|
||
|
23536CF6000
|
heap
|
page read and write
|
||
|
1A42E262000
|
heap
|
page read and write
|
||
|
225B605D000
|
heap
|
page read and write
|
||
|
20E5B530000
|
heap
|
page read and write
|
||
|
235315C0000
|
trusted library allocation
|
page read and write
|
||
|
1A42E261000
|
heap
|
page read and write
|
||
|
23536C70000
|
trusted library allocation
|
page read and write
|
||
|
2B554E65000
|
heap
|
page read and write
|
||
|
225B6088000
|
heap
|
page read and write
|
||
|
14505C28000
|
heap
|
page read and write
|
||
|
14505C3C000
|
heap
|
page read and write
|
||
|
1A42EA02000
|
trusted library allocation
|
page read and write
|
||
|
1A42E26B000
|
heap
|
page read and write
|
||
|
20E5B702000
|
heap
|
page read and write
|
||
|
1A42E231000
|
heap
|
page read and write
|
||
|
1A42E256000
|
heap
|
page read and write
|
||
|
5B5199B000
|
stack
|
page read and write
|
||
|
1A42E050000
|
heap
|
page read and write
|
||
|
EF29A7B000
|
stack
|
page read and write
|
||
|
225B6060000
|
heap
|
page read and write
|
||
|
2B554DF0000
|
trusted library allocation
|
page read and write
|
||
|
225B6029000
|
heap
|
page read and write
|
||
|
235316FB000
|
heap
|
page read and write
|
||
|
1A42E284000
|
heap
|
page read and write
|
||
|
23532300000
|
trusted library allocation
|
page read and write
|
||
|
225B6013000
|
heap
|
page read and write
|
||
|
A3B3E7E000
|
stack
|
page read and write
|
||
|
FEB76FC000
|
stack
|
page read and write
|
||
|
EF29F7E000
|
stack
|
page read and write
|
||
|
20E5B6E3000
|
heap
|
page read and write
|
||
|
34ABE7B000
|
stack
|
page read and write
|
||
|
34AB93B000
|
stack
|
page read and write
|
||
|
1A42E229000
|
heap
|
page read and write
|
||
|
2353166F000
|
heap
|
page read and write
|
||
|
2BB6583D000
|
heap
|
page read and write
|
||
|
A3B3DFF000
|
stack
|
page read and write
|
||
|
2B554E13000
|
heap
|
page read and write
|
||
|
14505C70000
|
heap
|
page read and write
|
||
|
2B554D50000
|
heap
|
page read and write
|
||
|
A3B397A000
|
stack
|
page read and write
|
||
|
1A42E24D000
|
heap
|
page read and write
|
||
|
23531656000
|
heap
|
page read and write
|
||
|
1A42E202000
|
heap
|
page read and write
|
||
|
2BB6585C000
|
heap
|
page read and write
|
||
|
1A42E241000
|
heap
|
page read and write
|
||
|
1A42E242000
|
heap
|
page read and write
|
There are 253 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://aksiyonteknik.com.tr/js/OFFICE/home/
|
|
|
|
https://titleportals.com/
|
||
|
https://ctic.com/services.aspx
|
||
|
https://aksiyonteknik.com.tr/js/OFFICE/center/?sslchannel=true&sessionid=OTOYJovaMRXQj1L2uNuRQfgeC1GOLZz4QA0QhasDAeI9xxxEjfa3EOy4z7B9Y4hBUG3ZXdhzXZ9gsS7O
|
||
|
https://fast.wistia.net/embed/iframe/5nd69z3ng1?videoFoam=true&autoPlay=false&playerColor=101421
|
||
|
https://fast.wistia.net/embed/iframe/j3o05yybng?videoFoam=true&autoPlay=false&playerColor=101421
|
||
|
https://fast.wistia.net/embed/iframe/j5x1dchhqx?videoFoam=true&autoPlay=false&playerColor=101421
|
||
|
https://learn.zix.com/
|
||
|
https://ctic.com/default.aspx
|
||
|
https://ctic.com/services.aspx#ctl00_menuMain_SkipLink
|
||
|
https://ctic.com/TitleInfo.aspx
|
||
|
https://ctic.com/InfoLibrary.aspx
|
||
|
https://location.ctic.com/
|
There are 3 hidden doms, click here to show them.