Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\0747b078-8455-45da-9b5f-1708766e3fd1.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\13862d90-2ade-4a4b-93d0-861111457294.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\31cbcb14-cefb-4313-a68c-a8c773bd4eb4.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\3624aaf5-82f7-4e7d-9f16-d03b9a621939.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\74605cdf-3394-4f49-8c8a-b16cfb60513e.tmp
|
SysEx File -
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\084a4660-5722-402e-94f7-05bce1b71330.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\10cb4e43-fd54-4302-a4dd-878a678540f1.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2ad62743-3b90-4cfb-9b54-cb0f7b9ce536.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\31f387d0-4257-40cb-82c0-53540013ae97.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\330e0977-9ca2-4479-ac94-a8eaf3213a2c.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3bdd71d1-374b-49a0-9d61-3e19b5ae01b4.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3c9931f7-90e4-4db2-ae6a-8f71f947ddc3.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\66a016f7-0cd8-4049-91a7-2d59e892274c.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\84cc1658-495a-4f55-aaf7-ed387f03b710.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old.. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_0\_metadata\computed_hashes.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old.. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldg (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session. (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabs0 (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State3 (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences._ (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences\ (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencesos (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.. (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesMP (copy)
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent
Stateb6 (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.oldr
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old.
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\c8ea2adb-9fb7-4a4e-bbe5-d0672d42b3b6.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent
StateMP (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.olde/
(copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\aed40cdd-280c-409f-82e2-ba55dba3782a.tmp
|
ASCII text, with very long lines, with no line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old1 (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c9b42169-9fc9-4647-a23e-ab1bdd874512.tmp
|
UTF-8 Unicode text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d36668a4-048a-4e72-9792-00c7b81b9792.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT. (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
|
MPEG-4 LOAS
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f3511f65-53fa-428a-a0f5-271915fa4def.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fd417260-03f6-4c6d-8c0f-1cba390036b3.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old8 (copy)
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Staten (copy)
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local States (copy)
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache.T (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\ae517105-1d42-4d18-b119-ccfd93584b10.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\cb89abca-9d42-45d0-b1d7-0ba78f18b503.tmp
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0341d3b0-9f93-41b4-b803-c84bef620e1b.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\0ba1c556-d0fe-43cf-aa6d-c8fa905fa653.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\130223fb-63a4-4299-a142-22c630962f95.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_pnacl_json
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
|
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377,
stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
|
current ar archive
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
|
current ar archive
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
|
current ar archive
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
|
current ar archive
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce,
stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
|
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9,
stripped
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\manifest.fingerprint
|
ASCII text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6828_185758557\manifest.json
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\d85fb6e2-320f-4821-a74d-3390d0f3cc8d.tmp
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\en\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\en_GB\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\es_419\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\fil\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\id\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\nl\messages.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\pt_BR\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\pt_PT\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\zh_CN\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\craw_background.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\craw_window.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\css\craw_window.css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\html\craw_window.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\flapper.gif
|
GIF image data, version 89a, 30 x 30
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\icon_128.png
|
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\icon_16.png
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\topbar_floating_button.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\topbar_floating_button_close.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\topbar_floating_button_hover.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\topbar_floating_button_maximize.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\images\topbar_floating_button_pressed.png
|
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_318086039\CRX_INSTALL\manifest.json
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\0ba1c556-d0fe-43cf-aa6d-c8fa905fa653.tmp
|
Google Chrome extension, version 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\am\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ar\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\bg\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\bn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ca\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\cs\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\da\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\de\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\el\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\en\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\es\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\et\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\fa\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\fi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\fil\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\fr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\gu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\hi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\hr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\hu\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\id\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\it\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\iw\messages.json
|
HTML document, ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ja\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\kn\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ko\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\lt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\lv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ml\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\mr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ms\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\nb\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\nl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\pl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\pt\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ro\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ru\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\sk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\sl\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\sr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\sv\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\sw\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\ta\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\te\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\th\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\tr\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\uk\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\vi\messages.json
|
UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\zh\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_locales\zh_TW\messages.json
|
UTF-8 Unicode text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\_metadata\verified_contents.json
|
ASCII text, with very long lines, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\angular.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\background_script.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\cast_sender.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\common.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\feedback.css
|
ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\feedback.html
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\feedback_script.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\manifest.json
|
ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\material_css_min.css
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\mirroring_cast_streaming.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\mirroring_common.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\mirroring_hangouts.js
|
ASCII text, with very long lines
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\scoped_dir6828_834572837\CRX_INSTALL\mirroring_webrtc.js
|
ASCII text, with very long lines
|
dropped
|
|
There are 238 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#brentw@tulsack.com'
|
|
|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1572,6829742933435115812,12220034111590149017,131072
--lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1952 /prefetch:8
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#brentw@tulsack.com
|
 |
||
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#brentw@tulsack.com
|
|
||
|
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf
|
unknown
|
|
|
|
https://www.google.com/images/cleardot.gif
|
unknown
|
|
|
|
https://code.jquery.com/jquery-3.2.1.slim.min.js
|
unknown
|
|
|
|
https://play.google.com
|
unknown
|
|
|
|
https://www.google.com/log?format=json&hasfast=true
|
unknown
|
|
|
|
http://crls.pki.goog/gts1c3/QqFxbi9M48c.crl0
|
unknown
|
|
|
|
https://sandbox.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
|
unknown
|
|
|
|
https://accounts.google.com/MergeSession
|
unknown
|
|
|
|
https://logo.clearbit.com/https:/tulsack.comD
|
unknown
|
|
|
|
https://preprod-hangouts-googleapis.sandbox.google.com
|
unknown
|
|
|
|
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
|
142.250.203.97
|
|
|
|
http://pki.goog/repo/certs/gtsr1.der04
|
unknown
|
|
|
|
https://www.google.com
|
unknown
|
|
|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#brentw
|
unknown
|
|
|
|
https://hangouts.clients6.google.com
|
unknown
|
|
|
|
https://hangouts.google.com/hangouts/_/logpref
|
unknown
|
|
|
|
https://accounts.google.com
|
unknown
|
|
|
|
https://clients2.google.com/cr/report
|
unknown
|
|
|
|
https://cdn.jsdelivr.net/npm/jquery.session
|
unknown
|
|
|
|
http://angularjs.org
|
unknown
|
|
|
|
https://creativecommons.org/publicdomain/zero/1.0/.
|
unknown
|
|
|
|
https://github.com/angular/material
|
unknown
|
|
|
|
https://apis.google.com
|
unknown
|
|
|
|
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
|
104.18.11.207
|
|
|
|
https://logo.clearbit.com/https://tulsack.com
|
18.64.103.102
|
|
|
|
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
|
unknown
|
|
|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/
|
142.250.203.116
|
|
|
|
https://github.com/madler/zlib/blob/master/zlib.h
|
unknown
|
|
|
|
https://www-googleapis-staging.sandbox.google.com
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
|
unknown
|
|
|
|
https://clients2.google.com
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
|
|
|
https://dns.google
|
unknown
|
|
|
|
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
|
unknown
|
|
|
|
https://www.google.com/intl/en-US/chrome/blank.html
|
unknown
|
|
|
|
https://ogs.google.com
|
unknown
|
|
|
|
https://support.google.com/chromecast/troubleshooter/2995236
|
unknown
|
|
|
|
https://logo.clearbit.com/https:/tulsack.com
|
18.64.103.102
|
|
|
|
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
|
unknown
|
|
|
|
https://www.jsdelivr.com/using-sri-with-dynamic-files
|
unknown
|
|
|
|
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
|
172.217.168.13
|
|
|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/favicon.ico
|
unknown
|
|
|
|
https://payments.google.com/payments/v4/js/integrator.js
|
unknown
|
|
|
|
https://www.google.com;
|
unknown
|
|
|
|
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
|
unknown
|
|
|
|
https://hangouts.google.com/
|
unknown
|
|
|
|
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
|
104.18.11.207
|
|
|
|
http://crl.pki.goog/gtsr1/gtsr1.crl0W
|
unknown
|
|
|
|
https://pki.goog/repository/0
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/hosted-libraries-pushers
|
unknown
|
|
|
|
https://www.google.com/images/x2.gif
|
unknown
|
|
|
|
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
|
172.217.168.46
|
|
|
|
http://llvm.org/):
|
unknown
|
|
|
|
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsM
|
unknown
|
|
|
|
https://www.google.com/images/dot2.gif
|
unknown
|
|
|
|
https://meetings.clients6.google.com
|
unknown
|
|
|
|
https://play.google.com/log?format=json&hasfast=true
|
unknown
|
|
|
|
https://tulsack.com/
|
unknown
|
|
|
|
https://ajax.googleapis.luchifab.com/ajax.googleapis/ajax/libs/jquery/2.2.4/jquery.min.js
|
198.54.120.22
|
|
|
|
https://code.google.com/p/nativeclient/issues/entry%s:
|
unknown
|
|
|
|
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
|
104.16.19.94
|
|
|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#
|
unknown
|
|
|
|
http://tools.ietf.org/html/rfc1950
|
unknown
|
|
|
|
https://a.nel.cloudflare.com/report/v3?s=cjPfAbITCWq%2FHxTrWQrdUIrp7ZmqqKF2m6%2FdWhgrkTSI%2F%2Bj8x4n
|
unknown
|
|
|
|
https://code.google.com/p/nativeclient/issues/entry
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:
|
unknown
|
|
|
|
https://support.google.com/chromecast/answer/2998456
|
unknown
|
|
|
|
https://clients2.googleusercontent.com
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
|
unknown
|
|
|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com
|
unknown
|
|
|
|
https://www.google.com/
|
unknown
|
|
|
|
https://feedback.googleusercontent.com
|
unknown
|
|
|
|
https://chromium.googlesource.com/a/native_client/pnacl-clang.git
|
unknown
|
|
|
|
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
|
104.18.11.207
|
|
|
|
https://clients2.google.com/service/update2/crx
|
unknown
|
|
|
|
https://clients6.google.com
|
unknown
|
|
|
|
http://pki.goog/repo/certs/gts1c3.der0
|
unknown
|
|
There are 69 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
stackpath.bootstrapcdn.com
|
104.18.11.207
|
|
|
|
d26p066pn2w0s0.cloudfront.net
|
18.64.103.102
|
|
|
|
accounts.google.com
|
172.217.168.13
|
|
|
|
cdnjs.cloudflare.com
|
104.16.19.94
|
|
|
|
maxcdn.bootstrapcdn.com
|
104.18.11.207
|
|
|
|
k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com
|
142.250.203.116
|
|
|
|
tulsack.com
|
15.197.142.173
|
|
|
|
clients.l.google.com
|
172.217.168.46
|
|
|
|
ajax.googleapis.luchifab.com
|
198.54.120.22
|
|
|
|
googlehosted.l.googleusercontent.com
|
142.250.203.97
|
|
|
|
clients2.googleusercontent.com
|
unknown
|
|
|
|
clients2.google.com
|
unknown
|
|
|
|
code.jquery.com
|
unknown
|
|
|
|
cdn.jsdelivr.net
|
unknown
|
|
|
|
logo.clearbit.com
|
unknown
|
|
There are 5 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
142.250.203.116
|
k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com
|
United States
|
|
|
|
198.54.120.22
|
ajax.googleapis.luchifab.com
|
United States
|
|
|
|
15.197.142.173
|
tulsack.com
|
United States
|
|
|
|
192.168.2.4
|
unknown
|
unknown
|
|
|
|
192.168.2.6
|
unknown
|
unknown
|
|
|
|
172.217.168.46
|
clients.l.google.com
|
United States
|
|
|
|
172.217.168.13
|
accounts.google.com
|
United States
|
|
|
|
104.18.11.207
|
stackpath.bootstrapcdn.com
|
United States
|
|
|
|
18.64.103.102
|
d26p066pn2w0s0.cloudfront.net
|
United States
|
|
|
|
142.250.203.97
|
googlehosted.l.googleusercontent.com
|
United States
|
|
|
|
239.255.255.250
|
unknown
|
Reserved
|
|
|
|
104.16.19.94
|
cdnjs.cloudflare.com
|
United States
|
|
|
|
127.0.0.1
|
unknown
|
unknown
|
|
There are 4 hidden IPs, click here to show them.
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
ahfgeienlihckogmohjhadlkjgocpleb
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gdaefkejpgkiemlaofpalmlakkmbjdnl
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
kmendfapggjehodndflmmgagdbamhnfd
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mfehgcgbbipciphmccgaenjidiccnmng
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
mhjfbmdgcfjbbpaeojofohoefgiehjai
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
neajdppkdcdipfabeoofebfddakdcjhd
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nkeimhogjdpnpccoofpliimaahmaaome
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
gfdkimpbcpahaombhbimeihdjnejgicl
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
|
S-1-5-21-3853321935-2125563209-4053062332-1002
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
pkedcjkdefgpdelpbcmbmeomcjbeemfm
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
|
nmmhkkegccagdldgiimedpiccmgmieda
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
|
StatusCodes
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
|
state
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
dr
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.reporting
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
module_blacklist_cache_md5_digest
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
media.storage_id_salt
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_account_id
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.account_id
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_seed
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_homepage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
default_search_provider_data.template_url_data
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
safebrowsing.incidents_sent
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
pinned_tabs
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
search_provider_overrides
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_default_search
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
prefs.preference_reset_time
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
google.services.last_username
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.startup_urls
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
session.restore_on_startup
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
software_reporter.prompt_version
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.last_triggered_for_startup_urls
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
settings_reset_prompt.prompt_wave
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
homepage_is_newtabpage
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
|
browser.show_home_button
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
|
user_experience_metrics.stability.exited_cleanly
|
|
|
|
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
|
lastrun
|
|
There are 34 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
22B3C3B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30B2000
|
unkown image
|
page readonly
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
22B3BC77000
|
unkown
|
page read and write
|
|
|
|
22B414E0000
|
unkown
|
page read and write
|
|
|
|
1E5A20D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5297C5000
|
unkown image
|
page readonly
|
|
|
|
22B414F0000
|
unkown
|
page read and write
|
|
|
|
141DB1A2000
|
unkown
|
page read and write
|
|
|
|
1D2B8C02000
|
unkown
|
page read and write
|
|
|
|
141DB1A7000
|
unkown
|
page read and write
|
|
|
|
7FF529611000
|
unkown image
|
page readonly
|
|
|
|
22B3BC7A000
|
unkown
|
page read and write
|
|
|
|
1BEBCDD7000
|
unkown
|
page read and write
|
|
|
|
7DF5727A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD1F000
|
unkown image
|
page readonly
|
|
|
|
22B3BED0000
|
unkown image
|
page readonly
|
|
|
|
7DF53E940000
|
unkown image
|
page readonly
|
|
|
|
141DB17F000
|
unkown
|
page read and write
|
|
|
|
7FF543A0B000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE40000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30B2000
|
unkown image
|
page readonly
|
|
|
|
1BEBD140000
|
heap private
|
page read and write
|
|
|
|
7FF529386000
|
unkown image
|
page readonly
|
|
|
|
7FF5438E1000
|
unkown image
|
page readonly
|
|
|
|
7FF55D1E6000
|
unkown image
|
page readonly
|
|
|
|
7DF558B70000
|
unkown image
|
page readonly
|
|
|
|
22B3CA00000
|
unkown
|
page read and write
|
|
|
|
7FF526CEF000
|
unkown image
|
page readonly
|
|
|
|
7DF5727B0000
|
unkown image
|
page readonly
|
|
|
|
7FF529537000
|
unkown image
|
page readonly
|
|
|
|
1D2B8D00000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC2A000
|
unkown image
|
page readonly
|
|
|
|
7FF52981F000
|
unkown image
|
page readonly
|
|
|
|
22B411C0000
|
unkown
|
page read and write
|
|
|
|
22B41424000
|
unkown
|
page read and write
|
|
|
|
7FF5BDEFF000
|
unkown image
|
page readonly
|
|
|
|
141DB167000
|
unkown
|
page read and write
|
|
|
|
1BEBCDB0000
|
heap default
|
page read and write
|
|
|
|
1BEBCD30000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF2A000
|
unkown image
|
page readonly
|
|
|
|
AEA02FE000
|
stack
|
page read and write
|
|
|
|
AEA04FE000
|
stack
|
page read and write
|
|
|
|
21341570000
|
unkown
|
page read and write
|
|
|
|
2134164B000
|
unkown
|
page read and write
|
|
|
|
7FF5BDD81000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDFA8000
|
unkown image
|
page readonly
|
|
|
|
7FF5438FB000
|
unkown image
|
page readonly
|
|
|
|
1D2B8B70000
|
unkown image
|
page readonly
|
|
|
|
1D2B8D13000
|
unkown
|
page read and write
|
|
|
|
B4A827A000
|
stack
|
page read and write
|
|
|
|
1E5A2213000
|
unkown
|
page read and write
|
|
|
|
7FF55D688000
|
unkown image
|
page readonly
|
|
|
|
21341700000
|
unkown
|
page read and write
|
|
|
|
1E5A20A0000
|
unkown image
|
page readonly
|
|
|
|
22B3BC92000
|
unkown
|
page read and write
|
|
|
|
7FF526D14000
|
unkown image
|
page readonly
|
|
|
|
1E5A2308000
|
unkown
|
page read and write
|
|
|
|
7DF5727A2000
|
unkown image
|
page readonly
|
|
|
|
7DF5B08C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF6C000
|
unkown image
|
page readonly
|
|
|
|
1BEBCCF0000
|
unkown image
|
page readonly
|
|
|
|
21341E02000
|
unkown
|
page read and write
|
|
|
|
22B3BAD0000
|
heap private
|
page read and write
|
|
|
|
7FF543777000
|
unkown image
|
page readonly
|
|
|
|
7FF55D60C000
|
unkown image
|
page readonly
|
|
|
|
B4A7C7C000
|
unkown
|
page read and write
|
|
|
|
7FF55D637000
|
unkown image
|
page readonly
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
7FF5435D5000
|
unkown image
|
page readonly
|
|
|
|
7FF543A79000
|
unkown image
|
page readonly
|
|
|
|
1E5A2253000
|
unkown
|
page read and write
|
|
|
|
1BEBCCD0000
|
unkown image
|
page read and write
|
|
|
|
141DB19A000
|
unkown
|
page read and write
|
|
|
|
7FF5297EC000
|
unkown image
|
page readonly
|
|
|
|
22B3BC00000
|
unkown
|
page read and write
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
B4A877E000
|
stack
|
page read and write
|
|
|
|
141DB1C7000
|
unkown
|
page read and write
|
|
|
|
7FF5BDAA2000
|
unkown image
|
page readonly
|
|
|
|
7FF5296A1000
|
unkown image
|
page readonly
|
|
|
|
7DF558B82000
|
unkown image
|
page readonly
|
|
|
|
7FF54396C000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDEF3000
|
unkown image
|
page readonly
|
|
|
|
21341420000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDEE0000
|
unkown image
|
page readonly
|
|
|
|
7DF4D0F80000
|
unkown image
|
page readonly
|
|
|
|
22B41190000
|
unkown
|
page read and write
|
|
|
|
22B3C513000
|
unkown
|
page read and write
|
|
|
|
21EC7E000
|
stack
|
page read and write
|
|
|
|
B4A847E000
|
stack
|
page read and write
|
|
|
|
7DF53E932000
|
unkown image
|
page readonly
|
|
|
|
7DF53E950000
|
unkown image
|
page readonly
|
|
|
|
1D2B8C13000
|
unkown
|
page read and write
|
|
|
|
1D2B8A20000
|
unkown image
|
page read and write
|
|
|
|
21E7EE000
|
stack
|
page read and write
|
|
|
|
1BEBCDED000
|
unkown
|
page read and write
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
7FF5298AA000
|
unkown image
|
page readonly
|
|
|
|
1D2B8C5E000
|
unkown
|
page read and write
|
|
|
|
7FF55D664000
|
unkown image
|
page readonly
|
|
|
|
1D2B8C2A000
|
unkown
|
page read and write
|
|
|
|
7FF55D584000
|
unkown image
|
page readonly
|
|
|
|
7DF53E940000
|
unkown image
|
page readonly
|
|
|
|
7FF526CC5000
|
unkown image
|
page readonly
|
|
|
|
1D2B8C7F000
|
unkown
|
page read and write
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
7DF53BE32000
|
unkown image
|
page readonly
|
|
|
|
7FF543A2C000
|
unkown image
|
page readonly
|
|
|
|
1E5A2400000
|
unkown image
|
page readonly
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
7FF543A2F000
|
unkown image
|
page readonly
|
|
|
|
21E6EB000
|
unkown
|
page read and write
|
|
|
|
2134167C000
|
unkown
|
page read and write
|
|
|
|
22B4122F000
|
unkown
|
page read and write
|
|
|
|
141DB189000
|
unkown
|
page read and write
|
|
|
|
22B4128A000
|
unkown
|
page read and write
|
|
|
|
1BEBCDDF000
|
unkown
|
page read and write
|
|
|
|
22B3C402000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF77000
|
unkown image
|
page readonly
|
|
|
|
7FF55D1E0000
|
unkown image
|
page readonly
|
|
|
|
22B41010000
|
unkown
|
page read and write
|
|
|
|
1E5A2090000
|
heap private
|
page read and write
|
|
|
|
22B3C3D0000
|
unkown image
|
page readonly
|
|
|
|
22B3BB10000
|
unkown image
|
page readonly
|
|
|
|
22B4127A000
|
unkown
|
page read and write
|
|
|
|
21341648000
|
unkown
|
page read and write
|
|
|
|
21E76E000
|
stack
|
page read and write
|
|
|
|
7FF5BDC24000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDB57000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDB55000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDA0000
|
unkown image
|
page read and write
|
|
|
|
1D2B8D02000
|
unkown
|
page read and write
|
|
|
|
7FF543A37000
|
unkown image
|
page readonly
|
|
|
|
7FF5435C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF6F000
|
unkown image
|
page readonly
|
|
|
|
7FF543A00000
|
unkown image
|
page readonly
|
|
|
|
AEA06FE000
|
stack
|
page read and write
|
|
|
|
7FF5BDF3E000
|
unkown image
|
page readonly
|
|
|
|
1BEBCCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D58C000
|
unkown image
|
page readonly
|
|
|
|
7FF5BE031000
|
unkown image
|
page readonly
|
|
|
|
1D2B8A40000
|
unkown image
|
page readonly
|
|
|
|
7FF526D3D000
|
unkown image
|
page readonly
|
|
|
|
7DF53E942000
|
unkown image
|
page readonly
|
|
|
|
7FF529828000
|
unkown image
|
page readonly
|
|
|
|
22B3BB30000
|
heap default
|
page read and write
|
|
|
|
21341450000
|
unkown image
|
page readonly
|
|
|
|
7FF5292F6000
|
unkown image
|
page readonly
|
|
|
|
22B3BCB2000
|
unkown
|
page read and write
|
|
|
|
141DB19E000
|
unkown
|
page read and write
|
|
|
|
6173A7E000
|
stack
|
page read and write
|
|
|
|
141DB19A000
|
unkown
|
page read and write
|
|
|
|
21341400000
|
unkown image
|
page read and write
|
|
|
|
22B41460000
|
unkown
|
page read and write
|
|
|
|
141DB1C7000
|
unkown
|
page read and write
|
|
|
|
21341613000
|
unkown
|
page read and write
|
|
|
|
22B41283000
|
unkown
|
page read and write
|
|
|
|
7FF526CEC000
|
unkown image
|
page readonly
|
|
|
|
22B3BB60000
|
unkown
|
page read and write
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
7FF55D501000
|
unkown image
|
page readonly
|
|
|
|
1BEBCD10000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDE86000
|
unkown image
|
page readonly
|
|
|
|
7FF55D70A000
|
unkown image
|
page readonly
|
|
|
|
1BEBCF80000
|
unkown image
|
page readonly
|
|
|
|
7FF5297F7000
|
unkown image
|
page readonly
|
|
|
|
7FF5BD7D5000
|
unkown image
|
page readonly
|
|
|
|
7DF456A40000
|
unkown image
|
page readonly
|
|
|
|
1E5A2229000
|
unkown
|
page read and write
|
|
|
|
21341B80000
|
unkown image
|
page readonly
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
22B3BC3F000
|
unkown
|
page read and write
|
|
|
|
22B3C518000
|
unkown
|
page read and write
|
|
|
|
1BEBCDEC000
|
unkown
|
page read and write
|
|
|
|
1D2B8C3C000
|
unkown
|
page read and write
|
|
|
|
141DB1A2000
|
unkown
|
page read and write
|
|
|
|
B4A7E77000
|
stack
|
page read and write
|
|
|
|
1E5A224B000
|
unkown
|
page read and write
|
|
|
|
7FF5BDDEF000
|
unkown image
|
page readonly
|
|
|
|
1D2B9000000
|
unkown image
|
page readonly
|
|
|
|
141DB19A000
|
unkown
|
page read and write
|
|
|
|
7FF55D66A000
|
unkown image
|
page readonly
|
|
|
|
21341470000
|
heap default
|
page read and write
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
7FF543AEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5297CB000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30C0000
|
unkown image
|
page readonly
|
|
|
|
22B3C3F0000
|
unkown
|
page read and write
|
|
|
|
21341800000
|
unkown image
|
page readonly
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
1E5A228A000
|
unkown
|
page read and write
|
|
|
|
7DF53BE40000
|
unkown image
|
page readonly
|
|
|
|
7FF55D61E000
|
unkown image
|
page readonly
|
|
|
|
7FF5296BB000
|
unkown image
|
page readonly
|
|
|
|
21341600000
|
unkown
|
page read and write
|
|
|
|
141DB66A000
|
unkown
|
page read and write
|
|
|
|
22B41261000
|
unkown
|
page read and write
|
|
|
|
1E5A2248000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF88000
|
unkown image
|
page readonly
|
|
|
|
AEA027B000
|
stack
|
page read and write
|
|
|
|
7FF543A76000
|
unkown image
|
page readonly
|
|
|
|
7FF55D4C3000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD3D000
|
unkown image
|
page readonly
|
|
|
|
22B4128E000
|
unkown
|
page read and write
|
|
|
|
22B3C390000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDCF0000
|
unkown image
|
page readonly
|
|
|
|
2134168A000
|
unkown
|
page read and write
|
|
|
|
22B411C0000
|
unkown
|
page read and write
|
|
|
|
22B3C0D0000
|
unkown image
|
page readonly
|
|
|
|
6173FFE000
|
stack
|
page read and write
|
|
|
|
7FF526DAA000
|
unkown image
|
page readonly
|
|
|
|
7DF43C800000
|
unkown image
|
page readonly
|
|
|
|
7DF572790000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDB96000
|
unkown image
|
page readonly
|
|
|
|
7FF55D64C000
|
unkown image
|
page readonly
|
|
|
|
141DB192000
|
unkown
|
page read and write
|
|
|
|
141DB1D9000
|
unkown
|
page read and write
|
|
|
|
22B414F0000
|
unkown
|
page read and write
|
|
|
|
7DF470660000
|
unkown image
|
page readonly
|
|
|
|
7FF529839000
|
unkown image
|
page readonly
|
|
|
|
7FF543536000
|
unkown image
|
page readonly
|
|
|
|
7FF5BE024000
|
unkown image
|
page readonly
|
|
|
|
7FF5BD7E6000
|
unkown image
|
page readonly
|
|
|
|
FE03FF000
|
stack
|
page read and write
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
7FF543851000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE50000
|
unkown image
|
page readonly
|
|
|
|
22B3C559000
|
unkown
|
page read and write
|
|
|
|
22B4140E000
|
unkown
|
page read and write
|
|
|
|
7DF53BE42000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDE01000
|
unkown image
|
page readonly
|
|
|
|
141DB18E000
|
unkown
|
page read and write
|
|
|
|
7FF5BE02A000
|
unkown image
|
page readonly
|
|
|
|
7DF558B90000
|
unkown image
|
page readonly
|
|
|
|
22B41421000
|
unkown
|
page read and write
|
|
|
|
22B41200000
|
unkown
|
page read and write
|
|
|
|
FE027F000
|
stack
|
page read and write
|
|
|
|
1D2B8A40000
|
unkown image
|
page readonly
|
|
|
|
22B411A1000
|
unkown
|
page read and write
|
|
|
|
21341708000
|
unkown
|
page read and write
|
|
|
|
22B3BAE0000
|
unkown image
|
page readonly
|
|
|
|
1BEBCD80000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDE1000
|
unkown
|
page read and write
|
|
|
|
141DB184000
|
unkown
|
page read and write
|
|
|
|
7FF529804000
|
unkown image
|
page readonly
|
|
|
|
141DB19C000
|
unkown
|
page read and write
|
|
|
|
22B41222000
|
unkown
|
page read and write
|
|
|
|
1BEBCD90000
|
unkown image
|
page readonly
|
|
|
|
AE9FDAE000
|
stack
|
page read and write
|
|
|
|
7DF572792000
|
unkown image
|
page readonly
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE032000
|
unkown image
|
page readonly
|
|
|
|
7FF52980A000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30C2000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD18000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE50000
|
unkown image
|
page readonly
|
|
|
|
7FF543A6E000
|
unkown image
|
page readonly
|
|
|
|
7FF529395000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD31000
|
unkown image
|
page readonly
|
|
|
|
7FF55D64F000
|
unkown image
|
page readonly
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
141DB61D000
|
unkown
|
page read and write
|
|
|
|
7FF526DB2000
|
unkown image
|
page readonly
|
|
|
|
7DF53E930000
|
unkown image
|
page readonly
|
|
|
|
22B414B0000
|
unkown
|
page read and write
|
|
|
|
7FF5BDEAC000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30C2000
|
unkown image
|
page readonly
|
|
|
|
22B41408000
|
unkown
|
page read and write
|
|
|
|
21ED77000
|
stack
|
page read and write
|
|
|
|
7FF5439FA000
|
unkown image
|
page readonly
|
|
|
|
22B41500000
|
unkown
|
page read and write
|
|
|
|
22B41090000
|
unkown
|
page read and write
|
|
|
|
22B3C500000
|
unkown
|
page read and write
|
|
|
|
141DB69D000
|
unkown
|
page read and write
|
|
|
|
6173DF7000
|
stack
|
page read and write
|
|
|
|
7FF5BDF03000
|
unkown image
|
page readonly
|
|
|
|
22B3C415000
|
unkown
|
page read and write
|
|
|
|
22B3BC7C000
|
unkown
|
page read and write
|
|
|
|
22B3BB00000
|
unkown image
|
page readonly
|
|
|
|
7DF558B72000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD76000
|
unkown image
|
page readonly
|
|
|
|
22B3C558000
|
unkown
|
page read and write
|
|
|
|
1D2B9180000
|
unkown image
|
page readonly
|
|
|
|
141DB63C000
|
unkown
|
page read and write
|
|
|
|
7FF5BDFB9000
|
unkown image
|
page readonly
|
|
|
|
7FF55D704000
|
unkown image
|
page readonly
|
|
|
|
B4A7F7D000
|
stack
|
page read and write
|
|
|
|
7FF526DA4000
|
unkown image
|
page readonly
|
|
|
|
7FF5BD7B8000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDE1000
|
unkown
|
page read and write
|
|
|
|
7FF526D04000
|
unkown image
|
page readonly
|
|
|
|
7DF5B08E0000
|
unkown image
|
page readonly
|
|
|
|
7FF529713000
|
unkown image
|
page readonly
|
|
|
|
1D2B9402000
|
unkown
|
page read and write
|
|
|
|
22B3C400000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF3A000
|
unkown image
|
page readonly
|
|
|
|
7FF5297BE000
|
unkown image
|
page readonly
|
|
|
|
1D2B8A30000
|
heap private
|
page read and write
|
|
|
|
7FF526D28000
|
unkown image
|
page readonly
|
|
|
|
1E5A2313000
|
unkown
|
page read and write
|
|
|
|
141DA7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5298A4000
|
unkown image
|
page readonly
|
|
|
|
7FF55D573000
|
unkown image
|
page readonly
|
|
|
|
7FF529380000
|
unkown image
|
page readonly
|
|
|
|
7FF55D62B000
|
unkown image
|
page readonly
|
|
|
|
141DA7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5BDD06000
|
unkown image
|
page readonly
|
|
|
|
7FF5435C6000
|
unkown image
|
page readonly
|
|
|
|
22B3BC72000
|
unkown
|
page read and write
|
|
|
|
7DF572792000
|
unkown image
|
page readonly
|
|
|
|
22B41240000
|
unkown
|
page read and write
|
|
|
|
FDFFAA000
|
unkown
|
page read and write
|
|
|
|
22B3C781000
|
unkown
|
page read and write
|
|
|
|
6173B7C000
|
stack
|
page read and write
|
|
|
|
7FF5BDE8D000
|
unkown image
|
page readonly
|
|
|
|
1E5A2202000
|
unkown
|
page read and write
|
|
|
|
7FF5BDD91000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDC30000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD74000
|
unkown image
|
page readonly
|
|
|
|
22B41000000
|
unkown
|
page read and write
|
|
|
|
21341629000
|
unkown
|
page read and write
|
|
|
|
21341713000
|
unkown
|
page read and write
|
|
|
|
1E5A227C000
|
unkown
|
page read and write
|
|
|
|
21341440000
|
unkown image
|
page readonly
|
|
|
|
141DB15D000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF2C000
|
unkown image
|
page readonly
|
|
|
|
7DF53E930000
|
unkown image
|
page readonly
|
|
|
|
7DF5B08D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5727B0000
|
unkown image
|
page readonly
|
|
|
|
141DA7F0000
|
unkown
|
page read and write
|
|
|
|
AEA05FF000
|
stack
|
page read and write
|
|
|
|
22B4124D000
|
unkown
|
page read and write
|
|
|
|
22B3D000000
|
unkown
|
page read and write
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
1BEBCDC1000
|
unkown
|
page read and write
|
|
|
|
7FF526D0A000
|
unkown image
|
page readonly
|
|
|
|
141DB15D000
|
unkown
|
page read and write
|
|
|
|
6173EFE000
|
stack
|
page read and write
|
|
|
|
7FF526CF8000
|
unkown image
|
page readonly
|
|
|
|
141DB1A0000
|
unkown
|
page read and write
|
|
|
|
1D2B8E00000
|
unkown image
|
page readonly
|
|
|
|
2134163C000
|
unkown
|
page read and write
|
|
|
|
7FF529814000
|
unkown image
|
page readonly
|
|
|
|
6173CFE000
|
stack
|
page read and write
|
|
|
|
1E5A20F0000
|
heap default
|
page read and write
|
|
|
|
B4A837B000
|
stack
|
page read and write
|
|
|
|
7FF5296BE000
|
unkown image
|
page readonly
|
|
|
|
7FF529724000
|
unkown image
|
page readonly
|
|
|
|
7FF5297D7000
|
unkown image
|
page readonly
|
|
|
|
21EE7E000
|
stack
|
page read and write
|
|
|
|
1E5A2300000
|
unkown
|
page read and write
|
|
|
|
141DB167000
|
unkown
|
page read and write
|
|
|
|
7FF55D56D000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDDD2000
|
unkown image
|
page readonly
|
|
|
|
7FF55D712000
|
unkown image
|
page readonly
|
|
|
|
7FF543964000
|
unkown image
|
page readonly
|
|
|
|
7DF558B82000
|
unkown image
|
page readonly
|
|
|
|
7DF53E942000
|
unkown image
|
page readonly
|
|
|
|
7FF55D51B000
|
unkown image
|
page readonly
|
|
|
|
21341702000
|
unkown
|
page read and write
|
|
|
|
1BEBD145000
|
heap private
|
page read and write
|
|
|
|
7FF55D657000
|
unkown image
|
page readonly
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
7DF5B08C2000
|
unkown image
|
page readonly
|
|
|
|
B4A817E000
|
stack
|
page read and write
|
|
|
|
7FF5BDF9F000
|
unkown image
|
page readonly
|
|
|
|
7DF5727A0000
|
unkown image
|
page readonly
|
|
|
|
617376C000
|
unkown
|
page read and write
|
|
|
|
7FF529681000
|
unkown image
|
page readonly
|
|
|
|
7FF55D397000
|
unkown image
|
page readonly
|
|
|
|
AEA007E000
|
stack
|
page read and write
|
|
|
|
1E5A20A0000
|
unkown image
|
page readonly
|
|
|
|
7FF526CC0000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE30000
|
unkown image
|
page readonly
|
|
|
|
7FF529836000
|
unkown image
|
page readonly
|
|
|
|
22B411D4000
|
unkown
|
page read and write
|
|
|
|
7FF543AE4000
|
unkown image
|
page readonly
|
|
|
|
141DB1A0000
|
unkown
|
page read and write
|
|
|
|
FE047F000
|
stack
|
page read and write
|
|
|
|
21341420000
|
unkown image
|
page readonly
|
|
|
|
21341410000
|
heap private
|
page read and write
|
|
|
|
7FF55D699000
|
unkown image
|
page readonly
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
7FF5BDD2B000
|
unkown image
|
page readonly
|
|
|
|
7FF5297AA000
|
unkown image
|
page readonly
|
|
|
|
7FF543A68000
|
unkown image
|
page readonly
|
|
|
|
141DB61F000
|
unkown
|
page read and write
|
|
|
|
7DF53E950000
|
unkown image
|
page readonly
|
|
|
|
7FF5431BA000
|
unkown image
|
page readonly
|
|
|
|
7FF526CCB000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30C0000
|
unkown image
|
page readonly
|
|
|
|
7FF543A54000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDBC1000
|
unkown image
|
page readonly
|
|
|
|
141DB17E000
|
unkown
|
page read and write
|
|
|
|
22B3C250000
|
unkown image
|
page readonly
|
|
|
|
141DB1A0000
|
unkown
|
page read and write
|
|
|
|
7FF5BDBA0000
|
unkown image
|
page readonly
|
|
|
|
22B415E0000
|
unkown
|
page read and write
|
|
|
|
141DB186000
|
unkown
|
page read and write
|
|
|
|
22B411A0000
|
unkown
|
page read and write
|
|
|
|
7DF572790000
|
unkown image
|
page readonly
|
|
|
|
AE9FD2B000
|
unkown
|
page read and write
|
|
|
|
FE02FE000
|
stack
|
page read and write
|
|
|
|
1BEBCDE1000
|
unkown
|
page read and write
|
|
|
|
22B3BC57000
|
unkown
|
page read and write
|
|
|
|
1E5A20C0000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE32000
|
unkown image
|
page readonly
|
|
|
|
7FF543A7D000
|
unkown image
|
page readonly
|
|
|
|
7FF543A4A000
|
unkown image
|
page readonly
|
|
|
|
7FF526D2E000
|
unkown image
|
page readonly
|
|
|
|
141DB1A0000
|
unkown
|
page read and write
|
|
|
|
FE0379000
|
stack
|
page read and write
|
|
|
|
7FF5BDDE5000
|
unkown image
|
page readonly
|
|
|
|
7FF5297EF000
|
unkown image
|
page readonly
|
|
|
|
141DB161000
|
unkown
|
page read and write
|
|
|
|
1D2B8C64000
|
unkown
|
page read and write
|
|
|
|
141DB18F000
|
unkown
|
page read and write
|
|
|
|
22B3C260000
|
unkown image
|
page readonly
|
|
|
|
7FF52982E000
|
unkown image
|
page readonly
|
|
|
|
7FF5439EC000
|
unkown image
|
page readonly
|
|
|
|
1E5A2302000
|
unkown
|
page read and write
|
|
|
|
7FF5298B1000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDFAE000
|
unkown image
|
page readonly
|
|
|
|
7FF5438C1000
|
unkown image
|
page readonly
|
|
|
|
22B414D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF84000
|
unkown image
|
page readonly
|
|
|
|
21EBFB000
|
stack
|
page read and write
|
|
|
|
22B3BD00000
|
unkown
|
page read and write
|
|
|
|
1D2B8C6E000
|
unkown
|
page read and write
|
|
|
|
7FF55D620000
|
unkown image
|
page readonly
|
|
|
|
141DB19F000
|
unkown
|
page read and write
|
|
|
|
22B3C3E0000
|
unkown image
|
page readonly
|
|
|
|
141DB165000
|
unkown
|
page read and write
|
|
|
|
7FF529663000
|
unkown image
|
page readonly
|
|
|
|
22B4128C000
|
unkown
|
page read and write
|
|
|
|
7FF55D69D000
|
unkown image
|
page readonly
|
|
|
|
7FF543953000
|
unkown image
|
page readonly
|
|
|
|
7FF543A44000
|
unkown image
|
page readonly
|
|
|
|
B4A7CFE000
|
stack
|
page read and write
|
|
|
|
1D2B8A60000
|
unkown image
|
page readonly
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
1D2B8B90000
|
unkown
|
page read and write
|
|
|
|
7FF55D471000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF40000
|
unkown image
|
page readonly
|
|
|
|
22B3C3A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5297AC000
|
unkown image
|
page readonly
|
|
|
|
7FF5297C0000
|
unkown image
|
page readonly
|
|
|
|
7FF526617000
|
unkown image
|
page readonly
|
|
|
|
141DB1B1000
|
unkown
|
page read and write
|
|
|
|
7FF5439EA000
|
unkown image
|
page readonly
|
|
|
|
141DB1A5000
|
unkown
|
page read and write
|
|
|
|
1BEBCDDF000
|
unkown
|
page read and write
|
|
|
|
22B3BD13000
|
unkown
|
page read and write
|
|
|
|
1E5A223C000
|
unkown
|
page read and write
|
|
|
|
141DB196000
|
unkown
|
page read and write
|
|
|
|
141DB187000
|
unkown
|
page read and write
|
|
|
|
22B41190000
|
unkown
|
page read and write
|
|
|
|
22B3BCA3000
|
unkown
|
page read and write
|
|
|
|
B4A83FF000
|
stack
|
page read and write
|
|
|
|
1E5A2780000
|
unkown image
|
page readonly
|
|
|
|
7FF59B842000
|
unkown image
|
page readonly
|
|
|
|
141DB18E000
|
unkown
|
page read and write
|
|
|
|
7FF528F74000
|
unkown image
|
page readonly
|
|
|
|
7DF558B80000
|
unkown image
|
page readonly
|
|
|
|
141DB174000
|
unkown
|
page read and write
|
|
|
|
1E5A2A02000
|
unkown
|
page read and write
|
|
|
|
7DF558B72000
|
unkown image
|
page readonly
|
|
|
|
141DB603000
|
unkown
|
page read and write
|
|
|
|
7FF543A5F000
|
unkown image
|
page readonly
|
|
|
|
141DB69D000
|
unkown
|
page read and write
|
|
|
|
7FF526613000
|
unkown image
|
page readonly
|
|
|
|
7FF55D674000
|
unkown image
|
page readonly
|
|
|
|
141DB1A0000
|
unkown
|
page read and write
|
|
|
|
1D2B8A90000
|
heap default
|
page read and write
|
|
|
|
7FF52972C000
|
unkown image
|
page readonly
|
|
|
|
141DB18E000
|
unkown
|
page read and write
|
|
|
|
1E5A21D0000
|
unkown image
|
page readonly
|
|
|
|
22B3BB70000
|
unkown image
|
page read and write
|
|
|
|
22B41400000
|
unkown
|
page read and write
|
|
|
|
7FF5298B2000
|
unkown image
|
page readonly
|
|
|
|
1D2B8C00000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF94000
|
unkown image
|
page readonly
|
|
|
|
B4A857F000
|
stack
|
page read and write
|
|
|
|
7FF55D696000
|
unkown image
|
page readonly
|
|
|
|
22B3C502000
|
unkown
|
page read and write
|
|
|
|
7FF52970D000
|
unkown image
|
page readonly
|
|
|
|
7FF543AF2000
|
unkown image
|
page readonly
|
|
|
|
141DB702000
|
unkown
|
page read and write
|
|
|
|
141DB1BE000
|
unkown
|
page read and write
|
|
|
|
22B3BCA1000
|
unkown
|
page read and write
|
|
|
|
1D2B8C8A000
|
unkown
|
page read and write
|
|
|
|
7FF5439FE000
|
unkown image
|
page readonly
|
|
|
|
141DB1C3000
|
unkown
|
page read and write
|
|
|
|
141DB66A000
|
unkown
|
page read and write
|
|
|
|
22B3BD02000
|
unkown
|
page read and write
|
|
|
|
7DF5D30B0000
|
unkown image
|
page readonly
|
|
|
|
1BEBCD50000
|
unkown
|
page read and write
|
|
|
|
141DB1B8000
|
unkown
|
page read and write
|
|
|
|
141DB18F000
|
unkown
|
page read and write
|
|
|
|
22B414F0000
|
unkown
|
page read and write
|
|
|
|
1E5A2600000
|
unkown image
|
page readonly
|
|
|
|
7DF53E932000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDDF000
|
unkown
|
page read and write
|
|
|
|
7FF5BDDEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF57000
|
unkown image
|
page readonly
|
|
|
|
22B411D0000
|
unkown
|
page read and write
|
|
|
|
1D2B8D08000
|
unkown
|
page read and write
|
|
|
|
7FF55D51E000
|
unkown image
|
page readonly
|
|
|
|
7FF526D1E000
|
unkown image
|
page readonly
|
|
|
|
1BEBD100000
|
unkown image
|
page readonly
|
|
|
|
22B3BC96000
|
unkown
|
page read and write
|
|
|
|
B4A84FF000
|
stack
|
page read and write
|
|
|
|
141DB19A000
|
unkown
|
page read and write
|
|
|
|
7FF55D625000
|
unkown image
|
page readonly
|
|
|
|
22B3BC13000
|
unkown
|
page read and write
|
|
|
|
7FF5438A3000
|
unkown image
|
page readonly
|
|
|
|
7FF526DB1000
|
unkown image
|
page readonly
|
|
|
|
22B3BAE0000
|
unkown image
|
page readonly
|
|
|
|
1E5A2200000
|
unkown
|
page read and write
|
|
|
|
7FF55D61A000
|
unkown image
|
page readonly
|
|
|
|
61737EE000
|
stack
|
page read and write
|
|
|
|
141DB602000
|
unkown
|
page read and write
|
|
|
|
7FF5BDCFB000
|
unkown image
|
page readonly
|
|
|
|
22B41283000
|
unkown
|
page read and write
|
|
|
|
22B3BB40000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF14000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30D0000
|
unkown image
|
page readonly
|
|
|
|
7FF55D68E000
|
unkown image
|
page readonly
|
|
|
|
B4A807B000
|
stack
|
page read and write
|
|
|
|
7FF5BDCEA000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDBD1000
|
unkown image
|
page readonly
|
|
|
|
1E5A226A000
|
unkown
|
page read and write
|
|
|
|
22B3CBE0000
|
unkown
|
page read and write
|
|
|
|
AEA03F7000
|
stack
|
page read and write
|
|
|
|
141DB603000
|
unkown
|
page read and write
|
|
|
|
7FF5438FE000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE42000
|
unkown image
|
page readonly
|
|
|
|
22B3BBF0000
|
unkown
|
page read and write
|
|
|
|
141DB63C000
|
unkown
|
page read and write
|
|
|
|
7FF55D4E1000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF4B000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF45000
|
unkown image
|
page readonly
|
|
|
|
22B3BC29000
|
unkown
|
page read and write
|
|
|
|
22B41080000
|
unkown
|
page read and write
|
|
|
|
21341602000
|
unkown
|
page read and write
|
|
|
|
141DB188000
|
unkown
|
page read and write
|
|
|
|
22B41070000
|
unkown
|
page read and write
|
|
|
|
141DB165000
|
unkown
|
page read and write
|
|
|
|
141DB702000
|
unkown
|
page read and write
|
|
|
|
7FF52983D000
|
unkown image
|
page readonly
|
|
|
|
7FF526D39000
|
unkown image
|
page readonly
|
|
|
|
7DF5727A2000
|
unkown image
|
page readonly
|
|
|
|
7DF439D00000
|
unkown image
|
page readonly
|
|
|
|
7DF53BE30000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDD6000
|
unkown
|
page read and write
|
|
|
|
7FF543AF1000
|
unkown image
|
page readonly
|
|
|
|
22B3BAC0000
|
unkown image
|
page read and write
|
|
|
|
22B3BBD1000
|
unkown
|
page read and write
|
|
|
|
7DF558B90000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDF1F000
|
unkown image
|
page readonly
|
|
|
|
7FF55D711000
|
unkown image
|
page readonly
|
|
|
|
7FF5BD88E000
|
unkown image
|
page readonly
|
|
|
|
21341550000
|
unkown image
|
page readonly
|
|
|
|
6173C7B000
|
stack
|
page read and write
|
|
|
|
22B3BC90000
|
unkown
|
page read and write
|
|
|
|
7DF558B70000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDC27000
|
unkown image
|
page readonly
|
|
|
|
22B414C0000
|
unkown
|
page read and write
|
|
|
|
1BEBD150000
|
unkown image
|
page readonly
|
|
|
|
1E5A21F0000
|
unkown
|
page read and write
|
|
|
|
141DB1BB000
|
unkown
|
page read and write
|
|
|
|
1E5A2080000
|
unkown image
|
page read and write
|
|
|
|
B4A867F000
|
stack
|
page read and write
|
|
|
|
22B411A0000
|
unkown
|
page read and write
|
|
|
|
2134166A000
|
unkown
|
page read and write
|
|
|
|
22B41214000
|
unkown
|
page read and write
|
|
|
|
7FF54394D000
|
unkown image
|
page readonly
|
|
|
|
7FF543A17000
|
unkown image
|
page readonly
|
|
|
|
7FF5297BA000
|
unkown image
|
page readonly
|
|
|
|
1D2B8A70000
|
unkown image
|
page readonly
|
|
|
|
2134164E000
|
unkown
|
page read and write
|
|
|
|
7DF558B80000
|
unkown image
|
page readonly
|
|
|
|
7FF5431B4000
|
unkown image
|
page readonly
|
|
|
|
141DB19E000
|
unkown
|
page read and write
|
|
|
|
7FF55D60A000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDFB6000
|
unkown image
|
page readonly
|
|
|
|
22B3CB00000
|
unkown image
|
page read and write
|
|
|
|
141DB167000
|
unkown
|
page read and write
|
|
|
|
21EF7E000
|
stack
|
page read and write
|
|
|
|
B4A85FF000
|
stack
|
page read and write
|
|
|
|
141DB15B000
|
unkown
|
page read and write
|
|
|
|
21341653000
|
unkown
|
page read and write
|
|
|
|
21341A00000
|
unkown image
|
page readonly
|
|
|
|
1BEBCDC6000
|
heap default
|
page read and write
|
|
|
|
B4A887B000
|
stack
|
page read and write
|
|
|
|
22B3C518000
|
unkown
|
page read and write
|
|
|
|
7FF55D67F000
|
unkown image
|
page readonly
|
|
|
|
7FF5BDD3F000
|
unkown image
|
page readonly
|
|
|
|
1E5A224E000
|
unkown
|
page read and write
|
|
|
|
7DF5D30B0000
|
unkown image
|
page readonly
|
|
|
|
7DF5D30D0000
|
unkown image
|
page readonly
|
|
|
|
141DB15D000
|
unkown
|
page read and write
|
|
|
|
141DB17D000
|
unkown
|
page read and write
|
|
|
|
141DB19A000
|
unkown
|
page read and write
|
|
|
|
7FF528F7A000
|
unkown image
|
page readonly
|
|
|
|
141DB182000
|
unkown
|
page read and write
|
|
|
|
141DA700000
|
unkown image
|
page readonly
|
|
|
|
22B3C3C0000
|
unkown image
|
page readonly
|
|
|
|
22B3BBF3000
|
unkown
|
page read and write
|
|
|
|
1D2B8C54000
|
unkown
|
page read and write
|
|
|
|
7FF543A05000
|
unkown image
|
page readonly
|
|
|
|
7DF5B08D2000
|
unkown image
|
page readonly
|
|
|
|
141DA8A5000
|
unkown
|
page read and write
|
|
|
|
22B414A0000
|
unkown
|
page read and write
|
|
|
|
22B411A4000
|
unkown
|
page read and write
|
|
|
|
7FF5BD6FA000
|
unkown image
|
page readonly
|
|
|
|
141DB189000
|
unkown
|
page read and write
|
|
|
|
7FF55D1F5000
|
unkown image
|
page readonly
|
|
There are 610 hidden memdumps, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://k3iizoke30onh-dot-lithe-record-329314.an.r.appspot.com/#brentw@tulsack.com
|
|