Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
107.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
|
JSON data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmp1075.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp14D0.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp1EE7.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp267B.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp3669.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp3697.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp3978.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp3B29.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp3CA9.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp46F9.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp4B47.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp4C6D.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp587C.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp5D7A.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp5EAA.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp67CB.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp6849.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp7B39.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp7BFD.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp7DF7.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp8341.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp85D3.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9139.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9A96.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9D57.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9E2A.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9F7C.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp9FA5.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpA256.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpA27F.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpA652.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpAA08.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpAC54.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpAE56.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpB201.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpBC4F.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpC1AF.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpC2A3.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpC4DF.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpC756.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpD407.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpD64F.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpD916.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpDC8Ctmp.zip
|
Zip archive data, at least v2.0 to extract, compression method=deflate
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpE415.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpE744.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpEC43.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpECBB.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpF211.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8,
version-valid-for 4
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpF63D.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpF64D.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpFB4F.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmpFBC5.tmp
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8,
version-valid-for 7
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\LICENSE
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ar\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\bg\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\bn\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ca\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\cs\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\da\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\de\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\el\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\en\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\es\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\et\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\fa\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\fi\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\fr\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\fy\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\he\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\hi\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\hr\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\hu\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\id\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\it\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ja\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ko\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\nl\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\no\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\pl\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\pt\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\pt_BR\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ro\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\ru\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\sq\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\sr\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\sv\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\th\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\tr\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\uk\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\vi\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\zh_CN\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\_locales\zh_TW\messages.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\DroidSansMono.woff2
|
Web Open Font Format (Version 2), TrueType, length 7568, version 1.0
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\content.css
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\content.css.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\import.css
|
Objective-C source, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\import.css.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\mocha.css
|
Unicode text, UTF-8 text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\mocha.css.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\permissions.css
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\permissions.css.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\popup.css
|
ASCII text, with very long lines (311)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\css\popup.css.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\argon.js
|
ASCII text, with very long lines (47996)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\argon.js.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\background.js
|
ASCII text, with very long lines (65468)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\background.js.LICENSE.txt
|
Unicode text, UTF-8 text, with very long lines (756)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\background.js.map
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\content.js
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\content.js.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\import.js
|
ASCII text, with very long lines (65472)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\import.js.LICENSE.txt
|
Unicode text, UTF-8 text, with very long lines (756)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\import.js.map
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\options.js
|
ASCII text, with very long lines (65471)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\options.js.LICENSE.txt
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\options.js.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\permissions.js
|
ASCII text, with very long lines (65467)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\permissions.js.LICENSE.txt
|
ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\permissions.js.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\popup.js
|
ASCII text, with very long lines (65473)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\popup.js.LICENSE.txt
|
Unicode text, UTF-8 text, with very long lines (756)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\popup.js.map
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\qrdebug.js
|
ASCII text, with very long lines (1119)
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\dist\qrdebug.js.map
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon.svg
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon19.png
|
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon38.png
|
PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\icon48.png
|
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\images\scan.gif
|
GIF image data, version 89a, 300 x 300
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\manifest-pwa.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\manifest.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\schema.json
|
JSON data
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\argon.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\import.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\licenses.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\options.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\permissions.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\popup.html
|
HTML document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\qrdebug.html
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\snofla\blg\02a10a9fb79f454eb9b579eb295605f6\view\test.html
|
HTML document, ASCII text
|
dropped
|
There are 136 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\107.exe
|
"C:\Users\user\Desktop\107.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
|
"C:\Users\user\Desktop\107.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://213.109.202.97:9000/wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F
|
213.109.202.97
|
|
|
|
https://pastebin.com/raw/Ld9GfkdJ
|
unknown
|
||
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
|
https://github.com/Authenticator-Extension
|
unknown
|
||
|
http://www.droidfonts.com/
|
unknown
|
||
|
https://duckduckgo.com/ac/?q=
|
unknown
|
||
|
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
||
|
https://github.com/multiwebinc
|
unknown
|
||
|
https://chrome.google.com/webstore
|
unknown
|
||
|
https://drive-daily-2.corp.google.com/
|
unknown
|
||
|
https://drive-autopush.corp.google.com/
|
unknown
|
||
|
https://drive-daily-4.corp.google.com/
|
unknown
|
||
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
|
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
||
|
https://duckduckgo.com/chrome_newtabS
|
unknown
|
||
|
https://www.ecosia.org/newtab/
|
unknown
|
||
|
https://drive-daily-1.corp.google.com/
|
unknown
|
||
|
https://drive-daily-5.corp.google.com/
|
unknown
|
||
|
https://docs.google.com/
|
unknown
|
||
|
http://213.109.202.97:9000
|
unknown
|
||
|
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
||
|
https://drive-staging.corp.google.com/
|
unknown
|
||
|
https://drive-daily-6.corp.google.com/
|
unknown
|
||
|
https://drive.google.com/
|
unknown
|
||
|
https://drive-daily-0.corp.google.com/
|
unknown
|
||
|
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
|
unknown
|
||
|
https://drive-preprod.corp.google.com/
|
unknown
|
||
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
|
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
||
|
https://github.com/FortAwesome/Font-Awesome
|
unknown
|
||
|
https://www.google.com/
|
unknown
|
||
|
https://login.microsoftonline.com/common/oauth2/v2.0/token
|
unknown
|
||
|
https://drive-daily-3.corp.google.com/
|
unknown
|
There are 23 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
213.109.202.97
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASAPI32
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\RegAsm_RASMANCS
|
FileDirectory
|
There are 5 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
402000
|
remote allocation
|
page execute read
|
|
|
|
45A0000
|
unclassified section
|
page execute and read and write
|
|
|
|
4680000
|
direct allocation
|
page read and write
|
|
|
|
44C0000
|
direct allocation
|
page read and write
|
|
|
|
E36000
|
trusted library allocation
|
page execute and read and write
|
||
|
741D000
|
stack
|
page read and write
|
||
|
E3A000
|
trusted library allocation
|
page execute and read and write
|
||
|
602D000
|
stack
|
page read and write
|
||
|
3C75000
|
trusted library allocation
|
page read and write
|
||
|
2F08000
|
trusted library allocation
|
page read and write
|
||
|
506E000
|
trusted library allocation
|
page read and write
|
||
|
400000
|
remote allocation
|
page readonly
|
||
|
28D0000
|
heap
|
page read and write
|
||
|
73DD000
|
stack
|
page read and write
|
||
|
6F0000
|
unkown
|
page readonly
|
||
|
29FE000
|
stack
|
page read and write
|
||
|
6440000
|
trusted library allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
6D70000
|
trusted library allocation
|
page execute and read and write
|
||
|
6160000
|
trusted library allocation
|
page read and write
|
||
|
5120000
|
heap
|
page read and write
|
||
|
50B0000
|
trusted library allocation
|
page read and write
|
||
|
6ED0000
|
trusted library allocation
|
page read and write
|
||
|
6072000
|
trusted library allocation
|
page read and write
|
||
|
2D01000
|
trusted library allocation
|
page read and write
|
||
|
7680000
|
trusted library allocation
|
page execute and read and write
|
||
|
291E000
|
stack
|
page read and write
|
||
|
2930000
|
heap
|
page read and write
|
||
|
5E2E000
|
stack
|
page read and write
|
||
|
E45000
|
trusted library allocation
|
page execute and read and write
|
||
|
2B0E000
|
heap
|
page read and write
|
||
|
E32000
|
trusted library allocation
|
page read and write
|
||
|
F21000
|
heap
|
page read and write
|
||
|
6E7000
|
unkown
|
page read and write
|
||
|
6150000
|
trusted library allocation
|
page execute and read and write
|
||
|
6141000
|
trusted library allocation
|
page read and write
|
||
|
50C0000
|
trusted library allocation
|
page read and write
|
||
|
28BE000
|
stack
|
page read and write
|
||
|
7B7D000
|
stack
|
page read and write
|
||
|
50A0000
|
trusted library allocation
|
page read and write
|
||
|
53B0000
|
trusted library allocation
|
page execute and read and write
|
||
|
2CE7000
|
trusted library allocation
|
page read and write
|
||
|
2CC4000
|
trusted library allocation
|
page read and write
|
||
|
2A3C000
|
stack
|
page read and write
|
||
|
5770000
|
trusted library allocation
|
page read and write
|
||
|
689000
|
unkown
|
page read and write
|
||
|
790E000
|
stack
|
page read and write
|
||
|
6B7C000
|
heap
|
page read and write
|
||
|
5050000
|
trusted library allocation
|
page read and write
|
||
|
3170000
|
trusted library allocation
|
page read and write
|
||
|
4D0D000
|
stack
|
page read and write
|
||
|
6095000
|
trusted library allocation
|
page read and write
|
||
|
6070000
|
trusted library allocation
|
page read and write
|
||
|
61CE000
|
stack
|
page read and write
|
||
|
F2B000
|
heap
|
page read and write
|
||
|
2C3F000
|
trusted library allocation
|
page read and write
|
||
|
2C17000
|
trusted library allocation
|
page read and write
|
||
|
50BB000
|
trusted library allocation
|
page read and write
|
||
|
689000
|
unkown
|
page write copy
|
||
|
44BF000
|
stack
|
page read and write
|
||
|
E90000
|
heap
|
page execute and read and write
|
||
|
E42000
|
trusted library allocation
|
page read and write
|
||
|
2DA0000
|
heap
|
page read and write
|
||
|
534E000
|
stack
|
page read and write
|
||
|
E8B000
|
trusted library allocation
|
page read and write
|
||
|
6180000
|
trusted library allocation
|
page execute and read and write
|
||
|
10AE000
|
stack
|
page read and write
|
||
|
2C31000
|
trusted library allocation
|
page read and write
|
||
|
7A00000
|
trusted library allocation
|
page read and write
|
||
|
7DDD000
|
stack
|
page read and write
|
||
|
3B71000
|
trusted library allocation
|
page read and write
|
||
|
2CAE000
|
trusted library allocation
|
page read and write
|
||
|
3C6D000
|
trusted library allocation
|
page read and write
|
||
|
5076000
|
trusted library allocation
|
page read and write
|
||
|
6B83000
|
heap
|
page read and write
|
||
|
5FAE000
|
stack
|
page read and write
|
||
|
5F2000
|
unkown
|
page readonly
|
||
|
6D0D000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
608F000
|
trusted library allocation
|
page read and write
|
||
|
5F2000
|
unkown
|
page readonly
|
||
|
2A48000
|
trusted library allocation
|
page read and write
|
||
|
2C2A000
|
trusted library allocation
|
page read and write
|
||
|
6230000
|
trusted library allocation
|
page execute and read and write
|
||
|
313B000
|
trusted library allocation
|
page read and write
|
||
|
E1D000
|
trusted library allocation
|
page execute and read and write
|
||
|
51E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
5390000
|
trusted library allocation
|
page execute and read and write
|
||
|
3152000
|
trusted library allocation
|
page read and write
|
||
|
606D000
|
stack
|
page read and write
|
||
|
60C0000
|
trusted library allocation
|
page execute and read and write
|
||
|
E20000
|
trusted library allocation
|
page read and write
|
||
|
6120000
|
trusted library allocation
|
page execute and read and write
|
||
|
E40000
|
trusted library allocation
|
page read and write
|
||
|
6B9D000
|
heap
|
page read and write
|
||
|
510B000
|
trusted library allocation
|
page read and write
|
||
|
6B81000
|
heap
|
page read and write
|
||
|
53E0000
|
trusted library allocation
|
page read and write
|
||
|
9E8000
|
stack
|
page read and write
|
||
|
6AD0000
|
heap
|
page read and write
|
||
|
50A6000
|
trusted library allocation
|
page read and write
|
||
|
8EB000
|
stack
|
page read and write
|
||
|
27F0000
|
heap
|
page read and write
|
||
|
5100000
|
trusted library allocation
|
page read and write
|
||
|
10C9000
|
trusted library allocation
|
page read and write
|
||
|
6F0000
|
unkown
|
page readonly
|
||
|
2B6E000
|
stack
|
page read and write
|
||
|
2C36000
|
trusted library allocation
|
page read and write
|
||
|
317B000
|
trusted library allocation
|
page read and write
|
||
|
2C96000
|
trusted library allocation
|
page read and write
|
||
|
2B71000
|
trusted library allocation
|
page read and write
|
||
|
72DD000
|
stack
|
page read and write
|
||
|
2CE3000
|
trusted library allocation
|
page read and write
|
||
|
2C8D000
|
trusted library allocation
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
506A000
|
trusted library allocation
|
page read and write
|
||
|
10D7000
|
heap
|
page read and write
|
||
|
71A0000
|
heap
|
page read and write
|
||
|
10D0000
|
heap
|
page read and write
|
||
|
2CEF000
|
trusted library allocation
|
page read and write
|
||
|
50F4000
|
trusted library allocation
|
page read and write
|
||
|
6ADF000
|
heap
|
page read and write
|
||
|
6D80000
|
trusted library allocation
|
page read and write
|
||
|
505E000
|
trusted library allocation
|
page read and write
|
||
|
7A70000
|
heap
|
page read and write
|
||
|
2C2D000
|
trusted library allocation
|
page read and write
|
||
|
3CE1000
|
trusted library allocation
|
page read and write
|
||
|
766D000
|
stack
|
page read and write
|
||
|
2C8F000
|
trusted library allocation
|
page read and write
|
||
|
EE5000
|
heap
|
page read and write
|
||
|
3160000
|
trusted library allocation
|
page read and write
|
||
|
CCE000
|
stack
|
page read and write
|
||
|
68A000
|
unkown
|
page write copy
|
||
|
6088000
|
trusted library allocation
|
page read and write
|
||
|
C60000
|
heap
|
page read and write
|
||
|
E00000
|
trusted library allocation
|
page read and write
|
||
|
5071000
|
trusted library allocation
|
page read and write
|
||
|
5729000
|
stack
|
page read and write
|
||
|
2CD7000
|
trusted library allocation
|
page read and write
|
||
|
3162000
|
trusted library allocation
|
page read and write
|
||
|
10C0000
|
trusted library allocation
|
page read and write
|
||
|
E2D000
|
trusted library allocation
|
page execute and read and write
|
||
|
6B32000
|
heap
|
page read and write
|
||
|
2F22000
|
trusted library allocation
|
page read and write
|
||
|
3C8E000
|
trusted library allocation
|
page read and write
|
||
|
60E0000
|
trusted library allocation
|
page read and write
|
||
|
3C7E000
|
trusted library allocation
|
page read and write
|
||
|
7B90000
|
trusted library allocation
|
page execute and read and write
|
||
|
2DC6000
|
trusted library allocation
|
page read and write
|
||
|
751D000
|
stack
|
page read and write
|
||
|
2C69000
|
trusted library allocation
|
page read and write
|
||
|
3146000
|
trusted library allocation
|
page read and write
|
||
|
2A7E000
|
stack
|
page read and write
|
||
|
3182000
|
trusted library allocation
|
page read and write
|
||
|
EF2000
|
heap
|
page read and write
|
||
|
6B49000
|
heap
|
page read and write
|
||
|
E14000
|
trusted library allocation
|
page read and write
|
||
|
7F420000
|
trusted library allocation
|
page execute and read and write
|
||
|
19D000
|
stack
|
page read and write
|
||
|
60F0000
|
trusted library allocation
|
page read and write
|
||
|
4C2000
|
remote allocation
|
page readonly
|
||
|
400000
|
unkown
|
page readonly
|
||
|
6EE000
|
unkown
|
page read and write
|
||
|
29BE000
|
stack
|
page read and write
|
||
|
643F000
|
stack
|
page read and write
|
||
|
5F2C000
|
stack
|
page read and write
|
||
|
542E000
|
stack
|
page read and write
|
||
|
4B78000
|
trusted library allocation
|
page read and write
|
||
|
6C0C000
|
stack
|
page read and write
|
||
|
71B0000
|
heap
|
page read and write
|
||
|
507D000
|
trusted library allocation
|
page read and write
|
||
|
CD0000
|
heap
|
page read and write
|
||
|
2CB7000
|
trusted library allocation
|
page read and write
|
||
|
6B7F000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
6220000
|
trusted library allocation
|
page execute and read and write
|
||
|
505B000
|
trusted library allocation
|
page read and write
|
||
|
6EE0000
|
heap
|
page read and write
|
||
|
7CDE000
|
stack
|
page read and write
|
||
|
4676000
|
unclassified section
|
page execute and read and write
|
||
|
2A3F000
|
stack
|
page read and write
|
||
|
5FEE000
|
stack
|
page read and write
|
||
|
EA0000
|
trusted library allocation
|
page read and write
|
||
|
C50000
|
heap
|
page read and write
|
||
|
6B15000
|
heap
|
page read and write
|
||
|
51D0000
|
trusted library allocation
|
page read and write
|
||
|
D20000
|
heap
|
page read and write
|
||
|
7670000
|
heap
|
page read and write
|
||
|
780D000
|
stack
|
page read and write
|
||
|
2C25000
|
trusted library allocation
|
page read and write
|
||
|
6F3A000
|
stack
|
page read and write
|
||
|
7A4D000
|
stack
|
page read and write
|
||
|
2A50000
|
trusted library allocation
|
page read and write
|
||
|
5F6E000
|
stack
|
page read and write
|
||
|
2B26000
|
heap
|
page read and write
|
||
|
6130000
|
trusted library allocation
|
page execute and read and write
|
||
|
2F13000
|
trusted library allocation
|
page read and write
|
||
|
2CDE000
|
trusted library allocation
|
page read and write
|
||
|
2A40000
|
trusted library allocation
|
page read and write
|
||
|
538C000
|
stack
|
page read and write
|
||
|
5123000
|
heap
|
page read and write
|
||
|
2CF6000
|
trusted library allocation
|
page read and write
|
||
|
F27000
|
heap
|
page read and write
|
||
|
6D40000
|
trusted library allocation
|
page read and write
|
||
|
EB0000
|
heap
|
page read and write
|
||
|
2CCC000
|
trusted library allocation
|
page read and write
|
||
|
E4B000
|
trusted library allocation
|
page execute and read and write
|
||
|
2F2D000
|
trusted library allocation
|
page read and write
|
||
|
D25000
|
heap
|
page read and write
|
||
|
E80000
|
trusted library allocation
|
page read and write
|
||
|
2F33000
|
trusted library allocation
|
page read and write
|
||
|
6B4F000
|
heap
|
page read and write
|
||
|
50A3000
|
trusted library allocation
|
page read and write
|
||
|
609F000
|
trusted library allocation
|
page read and write
|
||
|
527D000
|
stack
|
page read and write
|
||
|
2B0A000
|
heap
|
page read and write
|
||
|
6D10000
|
heap
|
page read and write
|
||
|
576E000
|
stack
|
page read and write
|
||
|
D07000
|
heap
|
page read and write
|
||
|
2A60000
|
heap
|
page read and write
|
||
|
6075000
|
trusted library allocation
|
page read and write
|
||
|
E60000
|
trusted library allocation
|
page read and write
|
||
|
7039000
|
stack
|
page read and write
|
||
|
5110000
|
trusted library allocation
|
page read and write
|
||
|
50F0000
|
trusted library allocation
|
page read and write
|
||
|
709C000
|
stack
|
page read and write
|
||
|
7B80000
|
trusted library allocation
|
page read and write
|
||
|
5772000
|
trusted library allocation
|
page read and write
|
||
|
E47000
|
trusted library allocation
|
page execute and read and write
|
||
|
2C4C000
|
trusted library allocation
|
page read and write
|
||
|
60D0000
|
trusted library allocation
|
page read and write
|
||
|
E70000
|
trusted library allocation
|
page execute and read and write
|
||
|
6079000
|
trusted library allocation
|
page read and write
|
||
|
D00000
|
heap
|
page read and write
|
||
|
609A000
|
trusted library allocation
|
page read and write
|
||
|
E13000
|
trusted library allocation
|
page execute and read and write
|
||
|
633F000
|
stack
|
page read and write
|
||
|
EB8000
|
heap
|
page read and write
|
||
|
2C82000
|
trusted library allocation
|
page read and write
|
||
|
3006000
|
trusted library allocation
|
page read and write
|
||
|
756E000
|
stack
|
page read and write
|
||
|
10B0000
|
trusted library allocation
|
page read and write
|
||
|
6D50000
|
trusted library section
|
page read and write
|
||
|
5280000
|
heap
|
page execute and read and write
|
||
|
6EF0000
|
trusted library allocation
|
page execute and read and write
|
||
|
2B00000
|
heap
|
page read and write
|
||
|
FA7000
|
heap
|
page read and write
|
||
|
E10000
|
trusted library allocation
|
page read and write
|
||
|
F3D000
|
heap
|
page read and write
|
||
|
E30000
|
trusted library allocation
|
page read and write
|
||
|
7197000
|
stack
|
page read and write
|
There are 241 hidden memdumps, click here to show them.