IOC Report

loading gif

Files

File Path
Type
Category
Malicious
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\0ad7bfa4-0ebb-4684-99c8-ebee2ae7aaff.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\2289045b-5fc3-4863-82b3-ba85e497bca1.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\44e5d875-39f1-4817-9299-d7739fb396e8.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\49a9eb5a-47be-4c2f-8502-1f573b536b90.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\689a0029-7487-4141-a2e7-7ba241046bf6.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\9af9eec2-4daf-4484-9c09-fc04095c2e90.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000001.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000002.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\11377827-358a-4f3b-a2c3-7cd05dc48349.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6e11a8ba-3408-4e51-9f50-c9102d81cc0e.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6f195062-691e-42dd-8e62-7d3c22a457a8.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldld (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\CURRENT (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old% (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.oldg (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Session (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last TabsVR (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\MANIFEST-000001
PGP\011Secret Key -
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\MANIFEST-000002
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent StateMP (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent Statemp (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.old.. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferencese (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesn (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencest (copy)
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State.. (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\c9e14d76-2af0-41c1-a321-2b3c2691b15a.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.olde (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent StateMP (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.old. (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\e80faca5-6ec5-4af4-a40f-2e8d9e934331.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\a750e661-8e81-44d5-8bfd-eeb264514c50.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\acae4e31-f2a6-4625-bddb-972c4dfb1b67.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\be188fff-af64-446d-985a-e5e189885a02.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c3a766b9-f9d4-48bf-b1bd-e3d636e9c195.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\d0cc5cba-6d58-484e-b369-42a7b9fa6000.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004
MPEG-4 LOAS
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\dea2099f-0a66-4005-ae75-4d7fbba3e741.tmp
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ee3f4d79-0e9c-4821-b7ca-530943adfc7f.tmp
ASCII text, with very long lines, with no line terminators
modified
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\f9b2ad8e-34bb-418b-b167-4d1e563b7077.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Statemp (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local Staten (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local States (copy)
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cache (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\Module Info Cachend (copy)
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\a83c64da-9bc9-49d9-be2d-28adf32e8312.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\aed1d38c-00b0-4b43-abf9-67be96edd596.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\cb854814-3a12-423c-9cdb-8584d5b89174.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\cf7bd095-3232-4f2f-a73d-54e681167b58.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Google\Chrome\User Data\e7cf83f9-a393-478e-b64e-aee37800d7ec.tmp
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\23c0a88f-ff38-43ab-b16e-d164fbe986c2.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_2042101946\Filtering Rules
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_2042101946\LICENSE.txt
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_2042101946\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_pnacl_json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o
ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=7511538a3a6a0b862c772eace49075ed1bbe2377, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a
current ar archive
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=309d6d3d463e6b1b0690f39eb226b1e4c469b2ce, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=4b15de4ab227d5e46213978b8518d53c53ce1db9, stripped
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\manifest.fingerprint
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\5060_80737370\manifest.json
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\a6d2ff36-7d93-46e0-acb1-c0453c5c30a9.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\e6453a66-5615-4f6c-b3d8-c41f56f906d4.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\f0410fd6-08e8-446b-aaa3-45b075031f27.tmp
very short file (no magic)
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\23c0a88f-ff38-43ab-b16e-d164fbe986c2.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\en\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\en_GB\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\es_419\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\fil\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\id\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\nl\messages.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\pt_BR\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\pt_PT\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\zh_CN\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\craw_background.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\craw_window.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\css\craw_window.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\html\craw_window.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\flapper.gif
GIF image data, version 89a, 30 x 30
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\icon_128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\icon_16.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\topbar_floating_button.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\topbar_floating_button_close.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\topbar_floating_button_hover.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\topbar_floating_button_maximize.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\images\topbar_floating_button_pressed.png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_2099170607\CRX_INSTALL\manifest.json
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\am\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ar\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\bg\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\bn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ca\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\cs\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\da\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\de\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\el\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\en\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\es\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\et\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\fa\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\fi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\fil\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\fr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\gu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\hi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\hr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\hu\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\id\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\it\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\iw\messages.json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ja\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\kn\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ko\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\lt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\lv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ml\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\mr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ms\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\nb\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\nl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\pl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\pt\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ro\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ru\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\sk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\sl\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\sr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\sv\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\sw\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\ta\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\te\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\th\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\tr\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\uk\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\vi\messages.json
UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\zh\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_locales\zh_TW\messages.json
UTF-8 Unicode text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\_metadata\verified_contents.json
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\angular.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\background_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\cast_sender.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\common.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\feedback.css
ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\feedback.html
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\feedback_script.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\manifest.json
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\material_css_min.css
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\mirroring_cast_streaming.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\mirroring_common.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\mirroring_hangouts.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\CRX_INSTALL\mirroring_webrtc.js
ASCII text, with very long lines
dropped
 clean
C:\Users\user\AppData\Local\Temp\scoped_dir5060_753474878\a6d2ff36-7d93-46e0-acb1-c0453c5c30a9.tmp
Google Chrome extension, version 3
dropped
 clean
C:\Users\user\Downloads\5d6a5de2-4b83-4b63-9a2e-97b3e74f1591.tmp
exported SGML document, ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\Downloads\Payment-Receipt.html.crdownload. (copy)
exported SGML document, ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\Downloads\Payment-Receipt.html:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
 clean
There are 259 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://docsend.com/view/vs4xxnasd8xu75by
 clean
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,2201414432115109513,9060046497952583545,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8
clean
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1564,2201414432115109513,9060046497952583545,131072 --lang=en-US --service-sandbox-type=none --enable-audio-service-sandbox --mojo-platform-channel-handle=4784 /prefetch:8
clean

URLs

Name
IP
Malicious
https://docsend.com/view/vs4xxnasd8xu75by
malicious
file:///C:/Users/user/Downloads/Payment-Receipt.html
malicious
https://apis.google.com/js/client.js
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=icKGpM7uYIiZswZvQEHjBMof4gelzMvES6xMZP4r6n7GxoYUR9JYUFkNLc9
unknown
 clean
https://code.jquery.com/jquery-3.2.1.slim.min.js
unknown
 clean
https://e9qmzg.bl.files.1drv.com/y4mfQlinL1bjZWvQxbSaPtnetahEIoHLnMnJI6oj1ylel9auWkfO4GQpcYn9KT1aRVB
unknown
 clean
https://crash.corp.google.com/samples?reportid=&q=
unknown
 clean
https://easylist.to/)
unknown
 clean
https://cdn.segment.com
unknown
 clean
https://docsend.com/view/vs4xxnasd8xu75byy?
unknown
 clean
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
unknown
 clean
https://preprod-hangouts-googleapis.sandbox.google.com
unknown
 clean
https://www.google.com
unknown
 clean
https://hangouts.google.com/hangouts/_/logpref
unknown
 clean
https://api.intercom.io
unknown
 clean
https://creativecommons.org/publicdomain/zero/1.0/.
unknown
 clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207
 clean
https://i.gyazo.com/d1b2270a564efe0c37d2e01ed1c647a8.png
104.19.142.111
 clean
https://kit.fontawesome.com/585b051251.js
unknown
 clean
https://www.google.com/accounts/OAuthLogin?issueuberauth=1
unknown
 clean
https://github.com/madler/zlib/blob/master/zlib.h
unknown
 clean
https://i.gyazo.com/960ba84347db823b8e7fc9cd4369a4cc.png
104.19.142.111
 clean
https://www.google.com/tools/feedback
unknown
 clean
https://dns.google
unknown
 clean
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
unknown
 clean
https://support.google.com/chromecast/troubleshooter/2995236
unknown
 clean
http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
unknown
 clean
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
142.250.180.78
 clean
https://payments.google.com/payments/v4/js/integrator.js
unknown
 clean
https://www.google.com;
unknown
 clean
https://api-iam.intercom.io
unknown
 clean
https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
unknown
 clean
https://csp.withgoogle.com/csp/hosted-libraries-pushers
unknown
 clean
https://www.google.com/images/x2.gif
unknown
 clean
https://www.google.com/images/dot2.gif
unknown
 clean
https://i.gyazo.com/d1b2270a564efe0c37d2e01ed1c647a8.pngD
unknown
 clean
https://play.google.com/log?format=json&hasfast=true
unknown
 clean
https://sessions.bugsnag.com
unknown
 clean
http://tools.ietf.org/html/rfc1950
unknown
 clean
https://code.jquery.com/jquery-3.3.1.js&
unknown
 clean
https://gyazo.com
unknown
 clean
https://d2qvtfnm75xrxf.cloudfront.net
unknown
 clean
https://docs.google.com
unknown
 clean
https://www.google.com/
unknown
 clean
https://feedback.googleusercontent.com
unknown
 clean
https://clients6.google.com
unknown
 clean
https://api.segment.io
unknown
 clean
https://a.nel.cloudflare.com/report/v3?s=aJe%2B3%2F4hNG3Whh0qPCoSicWI%2BVtjYBqSfq0o%2B%2F24mI7J3PldT
unknown
 clean
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf
unknown
 clean
https://ka-f.fontawesome.com
unknown
 clean
https://www.google.com/images/cleardot.gif
unknown
 clean
https://play.google.com
unknown
 clean
https://www.google.com/log?format=json&hasfast=true
unknown
 clean
https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
unknown
 clean
https://docsend.com/view/vs4xxnasd8xu75by59C6A303099CB9A4
unknown
 clean
https://nexus-websocket-a.intercom.io
unknown
 clean
https://sandbox.google.com/payments/v4/js/integrator.js
unknown
 clean
https://accounts.google.com/MergeSession
unknown
 clean
https://creativecommons.org/compatiblelicenses
unknown
 clean
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
142.250.180.65
 clean
https://github.com/easylist)
unknown
 clean
https://creativecommons.org/.
unknown
 clean
https://api-ping.intercom.io
unknown
 clean
https://hangouts.clients6.google.com
unknown
 clean
https://meet.google.com
unknown
 clean
https://accounts.google.com
unknown
 clean
https://clients2.google.com/cr/report
unknown
 clean
http://angularjs.org
unknown
 clean
https://github.com/angular/material
unknown
 clean
https://apis.google.com
unknown
 clean
https://www-googleapis-staging.sandbox.google.com
unknown
 clean
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
unknown
 clean
https://onedrive.live.com/download?cid=59C6A303099CB9A4&resid=59C6A303099CB9A4%21594&authkey=AExLMfz
unknown
 clean
https://clients2.google.com
unknown
 clean
http://www.apache.org/licenses/LICENSE-2.0
unknown
 clean
https://www.google.com/intl/en-US/chrome/blank.html
unknown
 clean
https://ogs.google.com
unknown
 clean
https://notify.bugsnag.com
unknown
 clean
https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
unknown
 clean
https://code.jquery.com/jquery-3.1.1.min.js
unknown
 clean
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
142.250.180.77
 clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsy
unknown
 clean
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
unknown
 clean
https://hangouts.google.com/
unknown
 clean
https://nexus-long-poller-b.intercom.io
unknown
 clean
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.10.207
 clean
https://code.jquery.com/jquery-3.3.1.js
unknown
 clean
https://nexus-long-poller-a.intercom.io
unknown
 clean
http://llvm.org/):
unknown
 clean
https://kit.fontawesome.com
unknown
 clean
https://meetings.clients6.google.com
unknown
 clean
https://code.google.com/p/nativeclient/issues/entry%s:
unknown
 clean
https://gyazo.comAge:
unknown
 clean
https://docsend.com/view/vs4xxnasd8xu75by
54.91.59.199
 clean
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.16.19.94
 clean
https://code.google.com/p/nativeclient/issues/entry
unknown
 clean
https://csp.withgoogle.com/csp/hosted-libraries-pushersCross-Origin-Resource-Policy:
unknown
 clean
https://nexus-websocket-b.intercom.io
unknown
 clean
https://support.google.com/chromecast/answer/2998456
unknown
 clean
https://uploads.intercomusercontent.com
unknown
 clean
https://clients2.googleusercontent.com
unknown
 clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
gstaticadssl.l.google.com
142.250.180.163
 clean
accounts.google.com
142.250.180.77
 clean
i.gyazo.com
104.19.142.111
 clean
cdnjs.cloudflare.com
104.16.19.94
 clean
maxcdn.bootstrapcdn.com
104.18.10.207
 clean
clients.l.google.com
142.250.180.78
 clean
docsend.com
54.91.59.199
 clean
googlehosted.l.googleusercontent.com
142.250.180.65
 clean
ka-f.fontawesome.com
unknown
 clean
kit.fontawesome.com
unknown
 clean
aadcdn.msauth.net
unknown
 clean
clients2.googleusercontent.com
unknown
 clean
clients2.google.com
unknown
 clean
code.jquery.com
unknown
 clean
onedrive.live.com
unknown
 clean
e9qmzg.bl.files.1drv.com
unknown
 clean
There are 6 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
54.91.59.199
docsend.com
United States
clean
192.168.2.1
unknown
unknown
clean
104.18.10.207
maxcdn.bootstrapcdn.com
United States
clean
142.250.180.78
clients.l.google.com
United States
clean
142.250.180.77
accounts.google.com
United States
clean
142.250.180.163
gstaticadssl.l.google.com
United States
clean
104.19.142.111
i.gyazo.com
United States
clean
239.255.255.250
unknown
Reserved
clean
142.250.180.65
googlehosted.l.googleusercontent.com
United States
clean
127.0.0.1
unknown
unknown
clean
104.16.19.94
cdnjs.cloudflare.com
United States
clean
There are 1 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault
S-1-5-21-3853321935-2125563209-4053062332-1002
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gdaefkejpgkiemlaofpalmlakkmbjdnl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
kmendfapggjehodndflmmgagdbamhnfd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mfehgcgbbipciphmccgaenjidiccnmng
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
neajdppkdcdipfabeoofebfddakdcjhd
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
gfdkimpbcpahaombhbimeihdjnejgicl
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
nmmhkkegccagdldgiimedpiccmgmieda
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings
pkedcjkdefgpdelpbcmbmeomcjbeemfm
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
StatusCodes
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
state
 clean
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
dr
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.reporting
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
module_blacklist_cache_md5_digest
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
media.storage_id_salt
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.account_id
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_seed
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
default_search_provider_data.template_url_data
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
safebrowsing.incidents_sent
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
pinned_tabs
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
search_provider_overrides
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
prefs.preference_reset_time
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
google.services.last_username
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
session.restore_on_startup
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
software_reporter.prompt_version
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
homepage_is_newtabpage
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default
browser.show_home_button
 clean
HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
 clean
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
lastrun
 clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{2781761E-28E0-4109-99FE-B9D127C57AFE} {56FFCC30-D398-11D0-B2AE-00A0C908FA49} 0xFFFF
 clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum
Implementing
 clean
There are 37 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1AA31800000
unkown image
page readonly
 clean
7FF5E9997000
unkown image
page readonly
 clean
1E94A713000
unkown
page read and write
 clean
7DF4D6560000
unkown image
page readonly
 clean
7FF584A47000
unkown image
page readonly
 clean
2798CD40000
unkown
page read and write
 clean
7FF5D402B000
unkown image
page readonly
 clean
7A378FF000
stack
page read and write
 clean
7FF582F1D000
unkown image
page readonly
 clean
7FF5D3752000
unkown image
page readonly
 clean
17D33E60000
unkown
page read and write
 clean
1E94AF00000
unkown
page read and write
 clean
23C9083D000
unkown
page read and write
 clean
7FF5B6C35000
unkown image
page readonly
 clean
1AA31513000
unkown
page read and write
 clean
E79697F000
stack
page read and write
 clean
7FF5CACD1000
unkown image
page readonly
 clean
7DF590C72000
unkown image
page readonly
 clean
7FF51348E000
unkown image
page readonly
 clean
7FF5E9A04000
unkown image
page readonly
 clean
7FF58434D000
unkown image
page readonly
 clean
7DF5D86B0000
unkown image
page readonly
 clean
2DFC8E00000
unkown
page read and write
 clean
1AA313F0000
unkown image
page readonly
 clean
2798B258000
unkown
page read and write
 clean
246BB35C000
unkown
page read and write
 clean
7FF55994E000
unkown image
page readonly
 clean
7FF5B67D2000
unkown image
page readonly
 clean
246BB390000
unkown
page read and write
 clean
7DF5C4C20000
unkown image
page readonly
 clean
2798B850000
unkown image
page readonly
 clean
7FF584F32000
unkown image
page readonly
 clean
7DF567690000
unkown image
page readonly
 clean
D40627F000
stack
page read and write
 clean
7DF592BD0000
unkown image
page readonly
 clean
7DF5D8950000
unkown image
page readonly
 clean
7FF5CABE9000
unkown image
page readonly
 clean
7FF5CAC0E000
unkown image
page readonly
 clean
7FF5D427E000
unkown image
page readonly
 clean
7FF5CAAB0000
unkown image
page readonly
 clean
7FF5CACCA000
unkown image
page readonly
 clean
9AF947D000
stack
page read and write
 clean
7FF5CAC3E000
unkown image
page readonly
 clean
2798B249000
unkown
page read and write
 clean
20483B10000
unkown image
page read and write
 clean
246BAAEC000
unkown
page read and write
 clean
7FF5E99F9000
unkown image
page readonly
 clean
7FF5CA9AA000
unkown image
page readonly
 clean
7FF584E80000
unkown image
page readonly
 clean
145201A0000
unkown image
page readonly
 clean
17D34200000
unkown image
page readonly
 clean
2798B213000
unkown
page read and write
 clean
7FF582B77000
unkown image
page readonly
 clean
20483A40000
heap private
page read and write
 clean
7DF592BC0000
unkown image
page readonly
 clean
7FF5134D7000
unkown image
page readonly
 clean
246BA840000
unkown image
page readonly
 clean
7FF5134DD000
unkown image
page readonly
 clean
7DF5F7690000
unkown image
page readonly
 clean
7FF582E1F000
unkown image
page readonly
 clean
7FF582EEA000
unkown image
page readonly
 clean
7FF5851E3000
unkown image
page readonly
 clean
7FF513560000
unkown image
page readonly
 clean
246BB802000
unkown
page read and write
 clean
2798B259000
unkown
page read and write
 clean
17D33BE0000
heap private
page read and write
 clean
145201F0000
heap default
page read and write
 clean
7DF592BE0000
unkown image
page readonly
 clean
246BAA9F000
unkown
page read and write
 clean
2798B140000
unkown image
page readonly
 clean
7DF592F40000
unkown image
page readonly
 clean
7FF5B6EBF000
unkown image
page readonly
 clean
7FF5CA7B6000
unkown image
page readonly
 clean
7FF4FD32D000
unkown image
page readonly
 clean
7FF584CE6000
unkown image
page readonly
 clean
2DFC8CC0000
unkown image
page readonly
 clean
9AF96FE000
stack
page read and write
 clean
7FF4FD3F9000
unkown image
page readonly
 clean
7DF5F76A0000
unkown image
page readonly
 clean
7FF5B6E1C000
unkown image
page readonly
 clean
7FF5D4315000
unkown image
page readonly
 clean
7FF5D40D3000
unkown image
page readonly
 clean
D4060FF000
stack
page read and write
 clean
7FF5B6E0B000
unkown image
page readonly
 clean
23C90E60000
unkown
page read and write
 clean
7DF5211D0000
unkown image
page readonly
 clean
17D34380000
unkown image
page readonly
 clean
2798CD80000
unkown image
page write copy
 clean
7DF50B090000
unkown image
page readonly
 clean
7FF5134B3000
unkown image
page readonly
 clean
7FF51355A000
unkown image
page readonly
 clean
7FF55999D000
unkown image
page readonly
 clean
7FF584F4A000
unkown image
page readonly
 clean
7FF584E13000
unkown image
page readonly
 clean
FE5DD0E000
stack
page read and write
 clean
1452024A000
unkown
page read and write
 clean
7FF5E9940000
unkown image
page readonly
 clean
1452027D000
unkown
page read and write
 clean
7FF582E95000
unkown image
page readonly
 clean
1AA31476000
unkown
page read and write
 clean
7FF4FD34E000
unkown image
page readonly
 clean
17D33E61000
unkown
page read and write
 clean
1452023C000
unkown
page read and write
 clean
62F67E000
stack
page read and write
 clean
7FF5D3E73000
unkown image
page readonly
 clean
246BAA53000
unkown
page read and write
 clean
7DF5F76A0000
unkown image
page readonly
 clean
BDE7CFF000
stack
page read and write
 clean
7FF5CA957000
unkown image
page readonly
 clean
2DFC8E5A000
unkown
page read and write
 clean
7FF5CA9AD000
unkown image
page readonly
 clean
7FF4FD411000
unkown image
page readonly
 clean
7FF582EBF000
unkown image
page readonly
 clean
1AA31A70000
unkown
page read and write
 clean
7FF513321000
unkown image
page readonly
 clean
7FF5D3FE7000
unkown image
page readonly
 clean
1AA31980000
unkown image
page readonly
 clean
7FF51334B000
unkown image
page readonly
 clean
7FF4FD36B000
unkown image
page readonly
 clean
7FF582EC1000
unkown image
page readonly
 clean
FE2397D000
stack
page read and write
 clean
246BAA48000
unkown
page read and write
 clean
1AA31600000
unkown image
page readonly
 clean
7FF58298C000
unkown image
page readonly
 clean
7FF513544000
unkown image
page readonly
 clean
246BB3D0000
unkown
page read and write
 clean
7DF5C4C12000
unkown image
page readonly
 clean
7FF582DC9000
unkown image
page readonly
 clean
246BAB08000
unkown
page read and write
 clean
17994802000
unkown
page read and write
 clean
7FF582F3E000
unkown image
page readonly
 clean
1452027C000
unkown
page read and write
 clean
7DF590C90000
unkown image
page readonly
 clean
2798B4D0000
unkown image
page readonly
 clean
2798B268000
unkown
page read and write
 clean
7DF5D8952000
unkown image
page readonly
 clean
7FF4FD40A000
unkown image
page readonly
 clean
7FF5852C1000
unkown image
page readonly
 clean
246BAB02000
unkown
page read and write
 clean
7FF559A1E000
unkown image
page readonly
 clean
1452024D000
unkown
page read and write
 clean
17994400000
unkown image
page readonly
 clean
7FF5597A6000
unkown image
page readonly
 clean
7FF584DE1000
unkown image
page readonly
 clean
7FF58508D000
unkown image
page readonly
 clean
7FF585292000
unkown image
page readonly
 clean
7DF5C4C22000
unkown image
page readonly
 clean
7FF5597BF000
unkown image
page readonly
 clean
7DF567680000
unkown image
page readonly
 clean
9AF97FD000
stack
page read and write
 clean
17D33E65000
unkown
page read and write
 clean
7FF559940000
unkown image
page readonly
 clean
7FF5B6EC3000
unkown image
page readonly
 clean
145201C0000
unkown image
page readonly
 clean
1E94A540000
unkown image
page readonly
 clean
7DF5F7682000
unkown image
page readonly
 clean
17D33F02000
unkown
page read and write
 clean
7FF58297B000
unkown image
page readonly
 clean
3AFC3FF000
stack
page read and write
 clean
7DF50B092000
unkown image
page readonly
 clean
7FF5B6A97000
unkown image
page readonly
 clean
1DD78DD0000
unkown image
page readonly
 clean
7DF592F40000
unkown image
page readonly
 clean
7DF592BD2000
unkown image
page readonly
 clean
17993FE0000
unkown image
page readonly
 clean
7FF5D3B18000
unkown image
page readonly
 clean
7FF584D30000
unkown image
page readonly
 clean
7FF582E6B000
unkown image
page readonly
 clean
1DD78D70000
unkown image
page readonly
 clean
2798B120000
unkown image
page read and write
 clean
7FF5B6EA7000
unkown image
page readonly
 clean
7FF5599F2000
unkown image
page readonly
 clean
7FF4FD333000
unkown image
page readonly
 clean
7FF584DCC000
unkown image
page readonly
 clean
7FF5CAA2A000
unkown image
page readonly
 clean
20483B4E000
unkown
page read and write
 clean
7FF5CAA14000
unkown image
page readonly
 clean
246BB38F000
unkown
page read and write
 clean
7FF513480000
unkown image
page readonly
 clean
7DF41F090000
unkown image
page readonly
 clean
7FF5B6EE7000
unkown image
page readonly
 clean
23C90802000
unkown
page read and write
 clean
1AA31413000
unkown
page read and write
 clean
7DF5D86A2000
unkown image
page readonly
 clean
14520302000
unkown
page read and write
 clean
7DF567692000
unkown image
page readonly
 clean
1DD78DC0000
heap default
page read and write
 clean
7FF55997E000
unkown image
page readonly
 clean
7FF584D4B000
unkown image
page readonly
 clean
1DD78E13000
unkown
page read and write
 clean
7FF559A04000
unkown image
page readonly
 clean
7FF584EDD000
unkown image
page readonly
 clean
2798CD40000
unkown
page read and write
 clean
1E94A5A0000
unkown image
page write copy
 clean
9AF98FF000
stack
page read and write
 clean
7FF559A0A000
unkown image
page readonly
 clean
7FF5D424E000
unkown image
page readonly
 clean
FE5E377000
stack
page read and write
 clean
246BAA4D000
unkown
page read and write
 clean
7FF51346F000
unkown image
page readonly
 clean
7FF559972000
unkown image
page readonly
 clean
246BB396000
unkown
page read and write
 clean
7FF5E9973000
unkown image
page readonly
 clean
7FF5B6F2D000
unkown image
page readonly
 clean
2798CC80000
unkown
page read and write
 clean
23C90E70000
unkown
page read and write
 clean
7FF5B6F2A000
unkown image
page readonly
 clean
246BAA39000
unkown
page read and write
 clean
2DFC8E8A000
unkown
page read and write
 clean
7DF590C72000
unkown image
page readonly
 clean
7FF559837000
unkown image
page readonly
 clean
7FF582E22000
unkown image
page readonly
 clean
BDE7F7D000
stack
page read and write
 clean
7DF592F32000
unkown image
page readonly
 clean
3AFBBBC000
unkown
page read and write
 clean
1E94AC50000
unkown image
page readonly
 clean
7DF5C4C10000
unkown image
page readonly
 clean
7FF55989B000
unkown image
page readonly
 clean
7A37BFD000
stack
page read and write
 clean
7FF5D420B000
unkown image
page readonly
 clean
1E94A510000
unkown image
page readonly
 clean
17D33E13000
unkown
page read and write
 clean
2798B170000
unkown image
page readonly
 clean
246BAB16000
unkown
page read and write
 clean
7DF5211C0000
unkown image
page readonly
 clean
20483B37000
heap default
page read and write
 clean
7FF5851A3000
unkown image
page readonly
 clean
7DF5E1F82000
unkown image
page readonly
 clean
17D33BF0000
unkown image
page readonly
 clean
7FF559903000
unkown image
page readonly
 clean
23C906D0000
heap default
page read and write
 clean
7FF5C9E67000
unkown image
page readonly
 clean
246BAAB0000
unkown
page read and write
 clean
2798B190000
heap default
page read and write
 clean
7DF5E1F82000
unkown image
page readonly
 clean
1DD78F13000
unkown
page read and write
 clean
246BAAEF000
unkown
page read and write
 clean
17D33E47000
unkown
page read and write
 clean
7FF5CABED000
unkown image
page readonly
 clean
246BB900000
unkown
page read and write
 clean
7FF5D4321000
unkown image
page readonly
 clean
7DF5D8940000
unkown image
page readonly
 clean
7FF5852A4000
unkown image
page readonly
 clean
20483A45000
heap private
page read and write
 clean
7FF4FD347000
unkown image
page readonly
 clean
7DF5E1FA0000
unkown image
page readonly
 clean
7FF5E992F000
unkown image
page readonly
 clean
246BB3AA000
unkown
page read and write
 clean
7FF585212000
unkown image
page readonly
 clean
2798B240000
unkown
page read and write
 clean
7FF5D4247000
unkown image
page readonly
 clean
2798CCC0000
unkown
page read and write
 clean
7FF5B6F03000
unkown image
page readonly
 clean
17D34402000
unkown
page read and write
 clean
106C07B000
stack
page read and write
 clean
7FF5B6EFB000
unkown image
page readonly
 clean
246BB3AB000
unkown
page read and write
 clean
7FF584DE5000
unkown image
page readonly
 clean
7DF465550000
unkown image
page readonly
 clean
17D33E2D000
unkown
page read and write
 clean
22E087E000
stack
page read and write
 clean
7FF4FD415000
unkown image
page readonly
 clean
7DF5676A0000
unkown image
page readonly
 clean
E7964F7000
stack
page read and write
 clean
7DF567690000
unkown image
page readonly
 clean
7FF582977000
unkown image
page readonly
 clean
17D33E2E000
unkown
page read and write
 clean
23C906B0000
unkown image
page readonly
 clean
7FF5E9A0A000
unkown image
page readonly
 clean
2798CF02000
unkown
page read and write
 clean
7FF58523A000
unkown image
page readonly
 clean
7DF592F30000
unkown image
page readonly
 clean
17D33E7F000
unkown
page read and write
 clean
7DF567682000
unkown image
page readonly
 clean
FE2377C000
stack
page read and write
 clean
246BB802000
unkown
page read and write
 clean
7FF512997000
unkown image
page readonly
 clean
17994110000
unkown image
page readonly
 clean
7FF5B6E35000
unkown image
page readonly
 clean
1DD78DA0000
unkown image
page readonly
 clean
1DD79450000
unkown image
page readonly
 clean
7FF5CABEF000
unkown image
page readonly
 clean
7DF5676A0000
unkown image
page readonly
 clean
246BB800000
unkown
page read and write
 clean
2798B202000
unkown
page read and write
 clean
7FF559943000
unkown image
page readonly
 clean
246BB902000
unkown
page read and write
 clean
246BAA54000
unkown
page read and write
 clean
7FF5B6ED0000
unkown image
page readonly
 clean
7FF5D420F000
unkown image
page readonly
 clean
7FF584E69000
unkown image
page readonly
 clean
7FF582AF1000
unkown image
page readonly
 clean
7FF582FE9000
unkown image
page readonly
 clean
7FF5E9A1A000
unkown image
page readonly
 clean
1E94A702000
unkown
page read and write
 clean
7FF582F37000
unkown image
page readonly
 clean
7FF582FE2000
unkown image
page readonly
 clean
17D33E5C000
unkown
page read and write
 clean
17994780000
unkown image
page readonly
 clean
7FF4FD373000
unkown image
page readonly
 clean
7DF5D8692000
unkown image
page readonly
 clean
7FF582BE7000
unkown image
page readonly
 clean
17D33C20000
unkown image
page readonly
 clean
20483AF0000
unkown image
page readonly
 clean
E7963FE000
stack
page read and write
 clean
7DF48EB40000
unkown image
page readonly
 clean
62F87F000
stack
page read and write
 clean
62F57B000
stack
page read and write
 clean
E79627B000
stack
page read and write
 clean
7FF559569000
unkown image
page readonly
 clean
7FF584F5A000
unkown image
page readonly
 clean
20483A70000
unkown image
page readonly
 clean
7FF5E9943000
unkown image
page readonly
 clean
9AF95FD000
stack
page read and write
 clean
7FF584782000
unkown image
page readonly
 clean
7DF50B082000
unkown image
page readonly
 clean
7DF5F7690000
unkown image
page readonly
 clean
1AA31478000
unkown
page read and write
 clean
23C90813000
unkown
page read and write
 clean
7DF490A90000
unkown image
page readonly
 clean
17994120000
unkown image
page readonly
 clean
7DF590C70000
unkown image
page readonly
 clean
1DD78E9A000
unkown
page read and write
 clean
246BB390000
unkown
page read and write
 clean
BDE7D7C000
stack
page read and write
 clean
7DF5D8960000
unkown image
page readonly
 clean
7DF50B082000
unkown image
page readonly
 clean
23C91002000
unkown
page read and write
 clean
7FF5D4229000
unkown image
page readonly
 clean
1E94A600000
unkown
page read and write
 clean
1DD78E70000
unkown
page read and write
 clean
7FF584F61000
unkown image
page readonly
 clean
2798B249000
unkown
page read and write
 clean
7DF5E1F90000
unkown image
page readonly
 clean
7FF5CA7C1000
unkown image
page readonly
 clean
7FF5CA98E000
unkown image
page readonly
 clean
2DFC8CA0000
unkown image
page readonly
 clean
23C90829000
unkown
page read and write
 clean
7FF584EAB000
unkown image
page readonly
 clean
246BAA4C000
unkown
page read and write
 clean
7FF582EEE000
unkown image
page readonly
 clean
7FF4FD39D000
unkown image
page readonly
 clean
145201A0000
unkown image
page readonly
 clean
7FF5CAB65000
unkown image
page readonly
 clean
D4061F9000
stack
page read and write
 clean
7FF559997000
unkown image
page readonly
 clean
1E94A530000
heap default
page read and write
 clean
23C90902000
unkown
page read and write
 clean
7DF590C90000
unkown image
page readonly
 clean
7FF584E6F000
unkown image
page readonly
 clean
246BAC00000
unkown image
page readonly
 clean
9AF92FE000
stack
page read and write
 clean
FE231FC000
stack
page read and write
 clean
BDE7A7C000
unkown
page read and write
 clean
7DF592BC0000
unkown image
page readonly
 clean
2798B200000
unkown
page read and write
 clean
7FF5D4311000
unkown image
page readonly
 clean
7FF5E9917000
unkown image
page readonly
 clean
7FF582B79000
unkown image
page readonly
 clean
7A3777A000
stack
page read and write
 clean
7FF5133DC000
unkown image
page readonly
 clean
1AA31310000
heap default
page read and write
 clean
7FF5B6E31000
unkown image
page readonly
 clean
246BB3B0000
unkown
page read and write
 clean
2DFC8E2A000
unkown
page read and write
 clean
7DF592BD0000
unkown image
page readonly
 clean
246BB963000
unkown
page read and write
 clean
FE5DD8E000
stack
page read and write
 clean
1E94A4D0000
heap private
page read and write
 clean
246BB802000
unkown
page read and write
 clean
7FF584E6D000
unkown image
page readonly
 clean
7FF5B6D7D000
unkown image
page readonly
 clean
7FF5D40BF000
unkown image
page readonly
 clean
9AF8BBB000
unkown
page read and write
 clean
2DFC9000000
unkown image
page readonly
 clean
23C90680000
unkown image
page readonly
 clean
7FF5CAA91000
unkown image
page readonly
 clean
7FF5D426B000
unkown image
page readonly
 clean
7FF582F5B000
unkown image
page readonly
 clean
7DF592F22000
unkown image
page readonly
 clean
7DF5E1F80000
unkown image
page readonly
 clean
7FF5CA1DC000
unkown image
page readonly
 clean
246BB090000
unkown image
page read and write
 clean
7FF5B6ED3000
unkown image
page readonly
 clean
D405DAA000
unkown
page read and write
 clean
7FF5B6F89000
unkown image
page readonly
 clean
2DFC8CD0000
unkown image
page readonly
 clean
246BB387000
unkown
page read and write
 clean
E7960FE000
stack
page read and write
 clean
7DF5D86B0000
unkown image
page readonly
 clean
7FF5CACB9000
unkown image
page readonly
 clean
7FF5132E6000
unkown image
page readonly
 clean
7FF58500E000
unkown image
page readonly
 clean
1DD78E2A000
unkown
page read and write
 clean
1799426A000
unkown
page read and write
 clean
17D33E62000
unkown
page read and write
 clean
7FF5E98EE000
unkown image
page readonly
 clean
7FF5D4233000
unkown image
page readonly
 clean
E796A7E000
stack
page read and write
 clean
7DF50B0A0000
unkown image
page readonly
 clean
1E94A4E0000
unkown image
page readonly
 clean
246BB37E000
unkown
page read and write
 clean
1DD78E54000
unkown
page read and write
 clean
7FF55962D000
unkown image
page readonly
 clean
17994258000
unkown
page read and write
 clean
7FF5851B7000
unkown image
page readonly
 clean
7DF490DF0000
unkown image
page readonly
 clean
7FF5E97A6000
unkown image
page readonly
 clean
7FF5B6FB1000
unkown image
page readonly
 clean
7FF58503B000
unkown image
page readonly
 clean
7DF4C2AE0000
unkown image
page readonly
 clean
246BB390000
unkown
page read and write
 clean
1E94A6B9000
unkown
page read and write
 clean
1AA31466000
unkown
page read and write
 clean
7FF4FD404000
unkown image
page readonly
 clean
7FF5851CD000
unkown image
page readonly
 clean
246BB399000
unkown
page read and write
 clean
7FF5D3ACC000
unkown image
page readonly
 clean
17D33E5F000
unkown
page read and write
 clean
7FF513327000
unkown image
page readonly
 clean
7FF58516F000
unkown image
page readonly
 clean
7FF5CAC57000
unkown image
page readonly
 clean
7DF5D8690000
unkown image
page readonly
 clean
23C906A0000
unkown image
page readonly
 clean
7FF5CA7E3000
unkown image
page readonly
 clean
23C90800000
unkown
page read and write
 clean
7FF5B6FA1000
unkown image
page readonly
 clean
7DF4F5550000
unkown image
page readonly
 clean
7FF582D56000
unkown image
page readonly
 clean
7FF5CA93F000
unkown image
page readonly
 clean
7FF5CA950000
unkown image
page readonly
 clean
7FF5852B5000
unkown image
page readonly
 clean
2DFC8C80000
unkown image
page read and write
 clean
7FF5CAC17000
unkown image
page readonly
 clean
22E012E000
stack
page read and write
 clean
7FF5134BE000
unkown image
page readonly
 clean
7FF5B6D80000
unkown image
page readonly
 clean
7FF5D419C000
unkown image
page readonly
 clean
2798B302000
unkown
page read and write
 clean
2DFC8CA0000
unkown image
page readonly
 clean
246BB38B000
unkown
page read and write
 clean
7FF5B6F27000
unkown image
page readonly
 clean
22E00AC000
unkown
page read and write
 clean
2DFC8F00000
unkown
page read and write
 clean
1AA31471000
unkown
page read and write
 clean
E79607B000
unkown
page read and write
 clean
1DD78D50000
unkown image
page read and write
 clean
7FF582403000
unkown image
page readonly
 clean
FE2357F000
stack
page read and write
 clean
7DF5211E0000
unkown image
page readonly
 clean
7FF559933000
unkown image
page readonly
 clean
7FF5D3EEC000
unkown image
page readonly
 clean
7FF5D3C7D000
unkown image
page readonly
 clean
3AFC1F7000
stack
page read and write
 clean
17D33E7C000
unkown
page read and write
 clean
23C907B0000
unkown image
page readonly
 clean
23C90A00000
unkown image
page readonly
 clean
7FF5CAA02000
unkown image
page readonly
 clean
22E057E000
stack
page read and write
 clean
1AA312F0000
unkown image
page readonly
 clean
7DF5D8940000
unkown image
page readonly
 clean
2798CD40000
unkown
page read and write
 clean
246BAABE000
unkown
page read and write
 clean
7DF5E1F90000
unkown image
page readonly
 clean
7FF559704000
unkown image
page readonly
 clean
7FF582AF7000
unkown image
page readonly
 clean
17D33E44000
unkown
page read and write
 clean
7DF50B080000
unkown image
page readonly
 clean
7DF592F20000
unkown image
page readonly
 clean
246BAA68000
unkown
page read and write
 clean
22E067E000
stack
page read and write
 clean
2DFC8F02000
unkown
page read and write
 clean
7FF582EFE000
unkown image
page readonly
 clean
246BB384000
unkown
page read and write
 clean
7FF5CAA1A000
unkown image
page readonly
 clean
246BB3AE000
unkown
page read and write
 clean
246BA940000
unkown image
page readonly
 clean
7FF559929000
unkown image
page readonly
 clean
7DF5E1FA0000
unkown image
page readonly
 clean
7FF5D4304000
unkown image
page readonly
 clean
7DF5D8692000
unkown image
page readonly
 clean
14520200000
unkown
page read and write
 clean
7FF5852AA000
unkown image
page readonly
 clean
7FF584BE5000
unkown image
page readonly
 clean
7FF584E97000
unkown image
page readonly
 clean
7FF5B6ED7000
unkown image
page readonly
 clean
E7966FF000
stack
page read and write
 clean
7FF584AED000
unkown image
page readonly
 clean
7FF559215000
unkown image
page readonly
 clean
2DFC8F13000
unkown
page read and write
 clean
7FF585299000
unkown image
page readonly
 clean
7DF5F7692000
unkown image
page readonly
 clean
2DFC8E5F000
unkown
page read and write
 clean
7FF582CE2000
unkown image
page readonly
 clean
2DFC8E3C000
unkown
page read and write
 clean
7FF55939C000
unkown image
page readonly
 clean
7DF5C4C30000
unkown image
page readonly
 clean
7DF5D8952000
unkown image
page readonly
 clean
7FF583011000
unkown image
page readonly
 clean
7DF5211D0000
unkown image
page readonly
 clean
246BB38F000
unkown
page read and write
 clean
7FF5E996B000
unkown image
page readonly
 clean
7FF585218000
unkown image
page readonly
 clean
17993FC0000
unkown image
page read and write
 clean
7FF5CAACB000
unkown image
page readonly
 clean
7DF592F30000
unkown image
page readonly
 clean
20483B4E000
unkown
page read and write
 clean
2DFC8DF0000
unkown
page read and write
 clean
7FF513443000
unkown image
page readonly
 clean
7DF5D8950000
unkown image
page readonly
 clean
7FF5B6F0E000
unkown image
page readonly
 clean
7FF5CAC33000
unkown image
page readonly
 clean
246BAAF9000
unkown
page read and write
 clean
7FF559A11000
unkown image
page readonly
 clean
7FF5D374C000
unkown image
page readonly
 clean
17994266000
unkown
page read and write
 clean
7FF58520B000
unkown image
page readonly
 clean
7FF58521E000
unkown image
page readonly
 clean
2798B318000
unkown
page read and write
 clean
7FF5CAA66000
unkown image
page readonly
 clean
7FF5CAAEF000
unkown image
page readonly
 clean
14520180000
unkown image
page read and write
 clean
7FF5B6A91000
unkown image
page readonly
 clean
14520A02000
unkown
page read and write
 clean
7FF584E83000
unkown image
page readonly
 clean
1DD78E3C000
unkown
page read and write
 clean
7FF5CACB2000
unkown image
page readonly
 clean
7FF5CA927000
unkown image
page readonly
 clean
7FF5D429D000
unkown image
page readonly
 clean
7A37DFE000
stack
page read and write
 clean
7FF5B6DBF000
unkown image
page readonly
 clean
7DF5211C2000
unkown image
page readonly
 clean
246BAAA6000
unkown
page read and write
 clean
246BAE00000
unkown image
page readonly
 clean
7DF592BD2000
unkown image
page readonly
 clean
7FF4FCC5E000
unkown image
page readonly
 clean
7FF513483000
unkown image
page readonly
 clean
7FF5D3E89000
unkown image
page readonly
 clean
1DD78D70000
unkown image
page readonly
 clean
7FF5134AB000
unkown image
page readonly
 clean
1E94A6CA000
unkown
page read and write
 clean
246BB802000
unkown
page read and write
 clean
17D33E41000
unkown
page read and write
 clean
23C90D80000
unkown image
page readonly
 clean
7FF5CA93D000
unkown image
page readonly
 clean
7DF50B090000
unkown image
page readonly
 clean
1DD792D0000
unkown image
page readonly
 clean
1DD78D60000
heap private
page read and write
 clean
17994200000
unkown
page read and write
 clean
7FF58515E000
unkown image
page readonly
 clean
246BB36B000
unkown
page read and write
 clean
17D33E46000
unkown
page read and write
 clean
7FF513532000
unkown image
page readonly
 clean
246BB398000
unkown
page read and write
 clean
7FF5CA965000
unkown image
page readonly
 clean
23C90660000
unkown image
page read and write
 clean
7FF5CAC5D000
unkown image
page readonly
 clean
7FF5CA7C7000
unkown image
page readonly
 clean
1E94A560000
unkown
page read and write
 clean
7DF5D86A2000
unkown image
page readonly
 clean
7FF513431000
unkown image
page readonly
 clean
7FF5CA6B5000
unkown image
page readonly
 clean
E79617E000
stack
page read and write
 clean
17D33E5A000
unkown
page read and write
 clean
22E01AE000
stack
page read and write
 clean
3AFBEFE000
stack
page read and write
 clean
7FF5E992D000
unkown image
page readonly
 clean
7FF5E9978000
unkown image
page readonly
 clean
1E94AF32000
unkown
page read and write
 clean
246BB384000
unkown
page read and write
 clean
7FF584F39000
unkown image
page readonly
 clean
7FF5CA95E000
unkown image
page readonly
 clean
7FF55992D000
unkown image
page readonly
 clean
7FF513539000
unkown image
page readonly
 clean
246BB3A9000
unkown
page read and write
 clean
7DF5C4C10000
unkown image
page readonly
 clean
FE5E27E000
stack
page read and write
 clean
7FF5D422F000
unkown image
page readonly
 clean
7FF582ED2000
unkown image
page readonly
 clean
1AA312C0000
unkown image
page readonly
 clean
BDE7FFF000
stack
page read and write
 clean
9AF91FF000
stack
page read and write
 clean
246BB38B000
unkown
page read and write
 clean
106C37E000
stack
page read and write
 clean
7DF5D86A0000
unkown image
page readonly
 clean
17D33E59000
unkown
page read and write
 clean
1DD78E67000
unkown
page read and write
 clean
17D33E6A000
unkown
page read and write
 clean
106BE7F000
stack
page read and write
 clean
FE5E1FB000
stack
page read and write
 clean
2DFC8E64000
unkown
page read and write
 clean
7FF582F8D000
unkown image
page readonly
 clean
2798CE02000
unkown
page read and write
 clean
7FF582E91000
unkown image
page readonly
 clean
246BB373000
unkown
page read and write
 clean
246BB300000
unkown
page read and write
 clean
7FF5CABF3000
unkown image
page readonly
 clean
1AA312C0000
unkown image
page readonly
 clean
17D33E6E000
unkown
page read and write
 clean
7FF513497000
unkown image
page readonly
 clean
1DD79602000
unkown
page read and write
 clean
62EFDB000
unkown
page read and write
 clean
7FF5851EE000
unkown image
page readonly
 clean
1E94A8D0000
unkown image
page readonly
 clean
246BAA29000
unkown
page read and write
 clean
7FF5E9947000
unkown image
page readonly
 clean
7FF4FD421000
unkown image
page readonly
 clean
7FF55999A000
unkown image
page readonly
 clean
7DF5F7680000
unkown image
page readonly
 clean
7FF584EBE000
unkown image
page readonly
 clean
17D33E3A000
unkown
page read and write
 clean
7DF4DFE50000
unkown image
page readonly
 clean
7FF582832000
unkown image
page readonly
 clean
7FF4FD41A000
unkown image
page readonly
 clean
7FF5852BA000
unkown image
page readonly
 clean
23C90857000
unkown
page read and write
 clean
BDE827E000
stack
page read and write
 clean
7FF585171000
unkown image
page readonly
 clean
7FF582F33000
unkown image
page readonly
 clean
FE5DC8B000
unkown
page read and write
 clean
7FF5823FD000
unkown image
page readonly
 clean
7FF584D11000
unkown image
page readonly
 clean
246BB080000
unkown
page read and write
 clean
7FF5CAC03000
unkown image
page readonly
 clean
7FF559924000
unkown image
page readonly
 clean
7FF584F61000
unkown image
page readonly
 clean
17D33E45000
unkown
page read and write
 clean
7FF4FD336000
unkown image
page readonly
 clean
246BB37C000
unkown
page read and write
 clean
246BB802000
unkown
page read and write
 clean
20483CF0000
unkown image
page readonly
 clean
7FF583010000
unkown image
page readonly
 clean
1DD78E67000
unkown
page read and write
 clean
7FF5D431A000
unkown image
page readonly
 clean
7FF5CACDA000
unkown image
page readonly
 clean
246BAA56000
unkown
page read and write
 clean
106BB7C000
unkown
page read and write
 clean
7DF4D6810000
unkown image
page readonly
 clean
7FF5CAC00000
unkown image
page readonly
 clean
1799427B000
unkown
page read and write
 clean
7FF513487000
unkown image
page readonly
 clean
14520950000
unkown
page read and write
 clean
246BB38B000
unkown
page read and write
 clean
20483B27000
heap default
page read and write
 clean
145201D0000
unkown image
page readonly
 clean
17994790000
unkown
page read and write
 clean
246BAA49000
unkown
page read and write
 clean
7FF582852000
unkown image
page readonly
 clean
17D343A0000
unkown
page read and write
 clean
7FF582C95000
unkown image
page readonly
 clean
7FF582FFA000
unkown image
page readonly
 clean
14520229000
unkown
page read and write
 clean
7DF5C4C12000
unkown image
page readonly
 clean
17994313000
unkown
page read and write
 clean
246BB080000
unkown
page read and write
 clean
7DF50B092000
unkown image
page readonly
 clean
246BB902000
unkown
page read and write
 clean
1AA312A0000
unkown image
page read and write
 clean
246BAA4B000
unkown
page read and write
 clean
7FF5CAB3B000
unkown image
page readonly
 clean
7FF4FD37E000
unkown image
page readonly
 clean
7FF582DDD000
unkown image
page readonly
 clean
2DFC8C90000
heap private
page read and write
 clean
2798B300000
unkown
page read and write
 clean
246BA830000
unkown image
page readonly
 clean
7FF5E997E000
unkown image
page readonly
 clean
7FF5B6FAA000
unkown image
page readonly
 clean
17994300000
unkown
page read and write
 clean
7FF582F8A000
unkown image
page readonly
 clean
246BB802000
unkown
page read and write
 clean
7FF584ED7000
unkown image
page readonly
 clean
17D33E08000
unkown
page read and write
 clean
246BAAAB000
unkown
page read and write
 clean
7FF559957000
unkown image
page readonly
 clean
7FF5D430A000
unkown image
page readonly
 clean
246BB38D000
unkown
page read and write
 clean
7FF5D374A000
unkown image
page readonly
 clean
246BB080000
unkown
page read and write
 clean
7FF582F1F000
unkown image
page readonly
 clean
20483B3F000
unkown
page read and write
 clean
246BB398000
unkown
page read and write
 clean
7FF584E57000
unkown image
page readonly
 clean
7FF513551000
unkown image
page readonly
 clean
246BB86A000
unkown
page read and write
 clean
7FF582E7C000
unkown image
page readonly
 clean
246BA9B0000
unkown image
page write copy
 clean
7DF592BE0000
unkown image
page readonly
 clean
17993FD0000
heap private
page read and write
 clean
7FF582DC1000
unkown image
page readonly
 clean
7DF5211C0000
unkown image
page readonly
 clean
246BB202000
unkown
page read and write
 clean
7FF5CAAAD000
unkown image
page readonly
 clean
7FF55996B000
unkown image
page readonly
 clean
7A37EFE000
stack
page read and write
 clean
7FF5D4240000
unkown image
page readonly
 clean
246BB802000
unkown
page read and write
 clean
1DD78D90000
unkown image
page readonly
 clean
2798B160000
unkown image
page readonly
 clean
FE5E57C000
stack
page read and write
 clean
17D33BF0000
unkown image
page readonly
 clean
7DF5D86A0000
unkown image
page readonly
 clean
7FF5B6D61000
unkown image
page readonly
 clean
1AA312E0000
unkown image
page readonly
 clean
2DFC9200000
unkown image
page readonly
 clean
7FF584DB5000
unkown image
page readonly
 clean
7FF5D4321000
unkown image
page readonly
 clean
7FF584EDA000
unkown image
page readonly
 clean
7FF584F44000
unkown image
page readonly
 clean
7FF5D4272000
unkown image
page readonly
 clean
7FF5CA943000
unkown image
page readonly
 clean
246BAAC5000
unkown
page read and write
 clean
17994030000
heap default
page read and write
 clean
246BB39A000
unkown
page read and write
 clean
7FF582D6F000
unkown image
page readonly
 clean
7FF5E99F2000
unkown image
page readonly
 clean
1AA31424000
unkown
page read and write
 clean
23C90C00000
unkown image
page readonly
 clean
7FF5B6E05000
unkown image
page readonly
 clean
7DF5D8942000
unkown image
page readonly
 clean
17D33D20000
unkown image
page readonly
 clean
7FF5134DA000
unkown image
page readonly
 clean
E79687E000
stack
page read and write
 clean
2798B23E000
unkown
page read and write
 clean
23C907D0000
unkown
page read and write
 clean
7FF5B6D36000
unkown image
page readonly
 clean
7FF5599F9000
unkown image
page readonly
 clean
106C177000
stack
page read and write
 clean
246BAA4E000
unkown
page read and write
 clean
7FF5D4137000
unkown image
page readonly
 clean
7DF567680000
unkown image
page readonly
 clean
7FF559947000
unkown image
page readonly
 clean
17D33E63000
unkown
page read and write
 clean
246BAF80000
unkown image
page readonly
 clean
E7967FA000
stack
page read and write
 clean
7FF5CA9A7000
unkown image
page readonly
 clean
14520288000
unkown
page read and write
 clean
7DF592BC2000
unkown image
page readonly
 clean
246BA860000
heap default
page read and write
 clean
246BAA70000
unkown
page read and write
 clean
7FF582D61000
unkown image
page readonly
 clean
17D33C40000
heap default
page read and write
 clean
17994600000
unkown image
page readonly
 clean
20483A90000
unkown
page read and write
 clean
20483A30000
unkown image
page read and write
 clean
246BB3D0000
unkown
page read and write
 clean
7FF5D429A000
unkown image
page readonly
 clean
246BA810000
unkown image
page readonly
 clean
246BAA3C000
unkown
page read and write
 clean
14520256000
unkown
page read and write
 clean
7FF4FD343000
unkown image
page readonly
 clean
23C90680000
unkown image
page readonly
 clean
246BB3CC000
unkown
page read and write
 clean
1E94A4C0000
unkown image
page read and write
 clean
7DF592F32000
unkown image
page readonly
 clean
7FF5851CF000
unkown image
page readonly
 clean
17994202000
unkown
page read and write
 clean
2DFC8E13000
unkown
page read and write
 clean
7FF5852B1000
unkown image
page readonly
 clean
7FF5CAB4C000
unkown image
page readonly
 clean
7FF5B6EDE000
unkown image
page readonly
 clean
7FF5596F5000
unkown image
page readonly
 clean
7DF5D8942000
unkown image
page readonly
 clean
7FF4FCC62000
unkown image
page readonly
 clean
7FF582F87000
unkown image
page readonly
 clean
1E94AE02000
unkown
page read and write
 clean
7FF584DBB000
unkown image
page readonly
 clean
7FF513457000
unkown image
page readonly
 clean
3AFC2FF000
stack
page read and write
 clean
7FF5D409B000
unkown image
page readonly
 clean
7FF5598A5000
unkown image
page readonly
 clean
7FF559917000
unkown image
page readonly
 clean
7FF582D54000
unkown image
page readonly
 clean
7FF5596F2000
unkown image
page readonly
 clean
1AA3142A000
unkown
page read and write
 clean
23C90E60000
unkown
page read and write
 clean
246BAA47000
unkown
page read and write
 clean
2798B1E0000
unkown
page read and write
 clean
7FF4FD3F2000
unkown image
page readonly
 clean
7A380FF000
stack
page read and write
 clean
7FF5CABD7000
unkown image
page readonly
 clean
7FF584E8E000
unkown image
page readonly
 clean
7FF513561000
unkown image
page readonly
 clean
7FF5132FF000
unkown image
page readonly
 clean
7FF582F23000
unkown image
page readonly
 clean
14520308000
unkown
page read and write
 clean
246BA800000
heap private
page read and write
 clean
2798B130000
heap private
page read and write
 clean
7DF567692000
unkown image
page readonly
 clean
23C90E60000
unkown
page read and write
 clean
7FF582F30000
unkown image
page readonly
 clean
7FF51354A000
unkown image
page readonly
 clean
246BA980000
unkown image
page readonly
 clean
246BAA00000
unkown
page read and write
 clean
7FF5851AE000
unkown image
page readonly
 clean
14520300000
unkown
page read and write
 clean
1E94A500000
unkown image
page readonly
 clean
7FF559832000
unkown image
page readonly
 clean
7FF5E9A15000
unkown image
page readonly
 clean
7FF582CD7000
unkown image
page readonly
 clean
17D34000000
unkown image
page readonly
 clean
FE2337F000
stack
page read and write
 clean
7FF5E98E2000
unkown image
page readonly
 clean
7DF5211C2000
unkown image
page readonly
 clean
3AFC0FB000
stack
page read and write
 clean
17D33BD0000
unkown image
page read and write
 clean
20483A50000
unkown image
page readonly
 clean
7FF5851E0000
unkown image
page readonly
 clean
246BB3AA000
unkown
page read and write
 clean
17994010000
unkown image
page readonly
 clean
1E94A613000
unkown
page read and write
 clean
7FF5E994E000
unkown image
page readonly
 clean
7DF590C80000
unkown image
page readonly
 clean
20483B46000
unkown
page read and write
 clean
7FF5E96D7000
unkown image
page readonly
 clean
7FF5E973A000
unkown image
page readonly
 clean
14520213000
unkown
page read and write
 clean
7FF5CAA21000
unkown image
page readonly
 clean
7FF584FB6000
unkown image
page readonly
 clean
17D33E68000
unkown
page read and write
 clean
7FF584A41000
unkown image
page readonly
 clean
17D33E58000
unkown
page read and write
 clean
FE2347E000
stack
page read and write
 clean
2DFC8E55000
unkown
page read and write
 clean
BDE80FD000
stack
page read and write
 clean
7DF590C82000
unkown image
page readonly
 clean
2DFC8DD0000
unkown image
page readonly
 clean
246BB362000
unkown
page read and write
 clean
246BAAE1000
unkown
page read and write
 clean
62F77B000
stack
page read and write
 clean
246BAA13000
unkown
page read and write
 clean
1E94A63E000
unkown
page read and write
 clean
7FF5E9236000
unkown image
page readonly
 clean
17D33E42000
unkown
page read and write
 clean
1DD78DF0000
unkown
page read and write
 clean
7FF5D42F9000
unkown image
page readonly
 clean
7FF5852BE000
unkown image
page readonly
 clean
1AA3145A000
unkown
page read and write
 clean
1AA31455000
unkown
page read and write
 clean
17D33E3B000
unkown
page read and write
 clean
9AF94FB000
stack
page read and write
 clean
7FF5D4297000
unkown image
page readonly
 clean
23C90D90000
unkown image
page readonly
 clean
7FF5851C9000
unkown image
page readonly
 clean
7FF5CACE1000
unkown image
page readonly
 clean
7A37FFF000
stack
page read and write
 clean
22E077F000
stack
page read and write
 clean
246BAA8A000
unkown
page read and write
 clean
7FF582E65000
unkown image
page readonly
 clean
7FF5CAC5A000
unkown image
page readonly
 clean
7FF584E29000
unkown image
page readonly
 clean
20483B2B000
heap default
page read and write
 clean
17D33E3D000
unkown
page read and write
 clean
7FF5E9A11000
unkown image
page readonly
 clean
D40607E000
stack
page read and write
 clean
7FF5D39F0000
unkown image
page readonly
 clean
7FF4FD39A000
unkown image
page readonly
 clean
7DF5D8960000
unkown image
page readonly
 clean
7DF567682000
unkown image
page readonly
 clean
1AA31C02000
unkown
page read and write
 clean
7FF585237000
unkown image
page readonly
 clean
7FF582F6E000
unkown image
page readonly
 clean
FE2387E000
stack
page read and write
 clean
246BB384000
unkown
page read and write
 clean
7FF5E9904000
unkown image
page readonly
 clean
7FF5CAB35000
unkown image
page readonly
 clean
7FF513227000
unkown image
page readonly
 clean
246BA960000
unkown
page read and write
 clean
2798B248000
unkown
page read and write
 clean
7DF50B0A0000
unkown image
page readonly
 clean
1AA31400000
unkown
page read and write
 clean
9AF8FFC000
stack
page read and write
 clean
7DF592F20000
unkown image
page readonly
 clean
1E94A6C1000
unkown
page read and write
 clean
1AA3143F000
unkown
page read and write
 clean
7FF5B6EB9000
unkown image
page readonly
 clean
1E94A62A000
unkown
page read and write
 clean
E796B7D000
stack
page read and write
 clean
17D33E67000
unkown
page read and write
 clean
7FF5CA97B000
unkown image
page readonly
 clean
1DD78F08000
unkown
page read and write
 clean
2DFC8E7D000
unkown
page read and write
 clean
7FF5851D3000
unkown image
page readonly
 clean
17D33E2A000
unkown
page read and write
 clean
7DF5C4C30000
unkown image
page readonly
 clean
17D33E31000
unkown
page read and write
 clean
246BB3BB000
unkown
page read and write
 clean
7FF582D96000
unkown image
page readonly
 clean
7FF582DE0000
unkown image
page readonly
 clean
E7965F7000
stack
page read and write
 clean
2798B1C0000
unkown
page read and write
 clean
17D33E7B000
unkown
page read and write
 clean
7FF559A1A000
unkown image
page readonly
 clean
17994213000
unkown
page read and write
 clean
7FF51346D000
unkown image
page readonly
 clean
7FF5D4132000
unkown image
page readonly
 clean
7FF5E9A21000
unkown image
page readonly
 clean
7FF582D1B000
unkown image
page readonly
 clean
1DD78F00000
unkown
page read and write
 clean
7FF55990E000
unkown image
page readonly
 clean
7FF584D6F000
unkown image
page readonly
 clean
1AA31502000
unkown
page read and write
 clean
2DFC8E8E000
unkown
page read and write
 clean
7FF5CA983000
unkown image
page readonly
 clean
7DF5F7692000
unkown image
page readonly
 clean
1E94AAD0000
unkown image
page readonly
 clean
7FF5E999A000
unkown image
page readonly
 clean
14520250000
unkown
page read and write
 clean
246BB387000
unkown
page read and write
 clean
7DF590C80000
unkown image
page readonly
 clean
1799423C000
unkown
page read and write
 clean
7FF582DFB000
unkown image
page readonly
 clean
7FF5D3E87000
unkown image
page readonly
 clean
246BB316000
unkown
page read and write
 clean
17D33E40000
unkown
page read and write
 clean
7FF4FD340000
unkown image
page readonly
 clean
14520313000
unkown
page read and write
 clean
7FF5E9929000
unkown image
page readonly
 clean
7FF5D42F2000
unkown image
page readonly
 clean
7FF55956D000
unkown image
page readonly
 clean
7FF582B86000
unkown image
page readonly
 clean
7FF584EB3000
unkown image
page readonly
 clean
7FF5B63A3000
unkown image
page readonly
 clean
7FF584E27000
unkown image
page readonly
 clean
7FF4FD421000
unkown image
page readonly
 clean
7FF584E73000
unkown image
page readonly
 clean
246BB397000
unkown
page read and write
 clean
246BB3AA000
unkown
page read and write
 clean
7FF5D4217000
unkown image
page readonly
 clean
7DF5F7682000
unkown image
page readonly
 clean
246BAA3A000
unkown
page read and write
 clean
7FF582D75000
unkown image
page readonly
 clean
7FF582FF4000
unkown image
page readonly
 clean
7FF5B6F94000
unkown image
page readonly
 clean
7FF5851E7000
unkown image
page readonly
 clean
7FF5E999D000
unkown image
page readonly
 clean
7DF5D8690000
unkown image
page readonly
 clean
106BBFF000
stack
page read and write
 clean
7FF5CACE1000
unkown image
page readonly
 clean
9AF937C000
stack
page read and write
 clean
20483B32000
unkown
page read and write
 clean
7FF4FCC42000
unkown image
page readonly
 clean
FE5E47E000
stack
page read and write
 clean
145206D0000
unkown image
page readonly
 clean
246BB963000
unkown
page read and write
 clean
1AA31466000
unkown
page read and write
 clean
7DF5E1F92000
unkown image
page readonly
 clean
246BAA51000
unkown
page read and write
 clean
7FF5D410B000
unkown image
page readonly
 clean
7FF5D40A6000
unkown image
page readonly
 clean
7DF5F7680000
unkown image
page readonly
 clean
7A379FD000
stack
page read and write
 clean
7FF513232000
unkown image
page readonly
 clean
7FF513256000
unkown image
page readonly
 clean
20483B45000
unkown
page read and write
 clean
7DF590C82000
unkown image
page readonly
 clean
20483B40000
unkown
page read and write
 clean
23C90670000
heap private
page read and write
 clean
14520270000
unkown
page read and write
 clean
7FF582BE4000
unkown image
page readonly
 clean
2DFC9380000
unkown image
page readonly
 clean
246BB364000
unkown
page read and write
 clean
7FF583001000
unkown image
page readonly
 clean
1DD78F02000
unkown
page read and write
 clean
1E94A688000
unkown
page read and write
 clean
7DF592F22000
unkown image
page readonly
 clean
20483B00000
unkown image
page readonly
 clean
1DD790D0000
unkown image
page readonly
 clean
7FF5E96E0000
unkown image
page readonly
 clean
FE5E0FB000
stack
page read and write
 clean
7FF584F51000
unkown image
page readonly
 clean
7FF582F07000
unkown image
page readonly
 clean
145206E0000
unkown image
page readonly
 clean
2798B860000
unkown image
page readonly
 clean
7FF55924D000
unkown image
page readonly
 clean
7FF582EF3000
unkown image
page readonly
 clean
7FF5D3FC4000
unkown image
page readonly
 clean
7FF51346A000
unkown image
page readonly
 clean
1AA31402000
unkown
page read and write
 clean
7FF582DC5000
unkown image
page readonly
 clean
7FF513244000
unkown image
page readonly
 clean
246BAAD8000
unkown
page read and write
 clean
7FF5E9933000
unkown image
page readonly
 clean
7FF58284E000
unkown image
page readonly
 clean
246BB86A000
unkown
page read and write
 clean
7FF5CA953000
unkown image
page readonly
 clean
2798B6D0000
unkown image
page readonly
 clean
7FF51344E000
unkown image
page readonly
 clean
7FF55977F000
unkown image
page readonly
 clean
FE22DEB000
unkown
page read and write
 clean
7DF5E1F80000
unkown image
page readonly
 clean
20483B20000
heap default
page read and write
 clean
7FF5CAC07000
unkown image
page readonly
 clean
145204D0000
unkown image
page readonly
 clean
7DF5C4C20000
unkown image
page readonly
 clean
7FF5B639D000
unkown image
page readonly
 clean
7FF559A21000
unkown image
page readonly
 clean
2DFC8F08000
unkown
page read and write
 clean
20483EF0000
unkown image
page readonly
 clean
20483A50000
unkown image
page readonly
 clean
246BA810000
unkown image
page readonly
 clean
D4062FC000
stack
page read and write
 clean
7FF582F19000
unkown image
page readonly
 clean
1AA312B0000
heap private
page read and write
 clean
7FF582F47000
unkown image
page readonly
 clean
20483AB0000
unkown
page read and write
 clean
E79637B000
stack
page read and write
 clean
2DFC9602000
unkown
page read and write
 clean
7FF5CAC2B000
unkown image
page readonly
 clean
7A3732B000
unkown
page read and write
 clean
2798B313000
unkown
page read and write
 clean
17D33E64000
unkown
page read and write
 clean
17D33E00000
unkown
page read and write
 clean
2DFC8E5C000
unkown
page read and write
 clean
106BF7B000
stack
page read and write
 clean
14520860000
unkown image
page readonly
 clean
7FF55992F000
unkown image
page readonly
 clean
1E94AC60000
unkown image
page readonly
 clean
1E94A66F000
unkown
page read and write
 clean
17D33E78000
unkown
page read and write
 clean
7FF5598F1000
unkown image
page readonly
 clean
2798B1A0000
unkown image
page readonly
 clean
246BB395000
unkown
page read and write
 clean
2798B140000
unkown image
page readonly
 clean
7FF58300A000
unkown image
page readonly
 clean
7FF5CAA31000
unkown image
page readonly
 clean
17994000000
unkown image
page readonly
 clean
D40617E000
stack
page read and write
 clean
17993FE0000
unkown image
page readonly
 clean
7FF513473000
unkown image
page readonly
 clean
246BB3AA000
unkown
page read and write
 clean
20483B4E000
unkown
page read and write
 clean
3AFBE7E000
stack
page read and write
 clean
1AA31990000
unkown image
page readonly
 clean
246BB395000
unkown
page read and write
 clean
246BB34C000
unkown
page read and write
 clean
7FF582E27000
unkown image
page readonly
 clean
106C27F000
stack
page read and write
 clean
7DF5E1F92000
unkown image
page readonly
 clean
246BB395000
unkown
page read and write
 clean
17D33E6C000
unkown
page read and write
 clean
7FF5B6F9A000
unkown image
page readonly
 clean
7DF5211D2000
unkown image
page readonly
 clean
BDE7E7E000
stack
page read and write
 clean
1DD78E00000
unkown
page read and write
 clean
7FF5B6D9B000
unkown image
page readonly
 clean
7FF5CA4D8000
unkown image
page readonly
 clean
17D33E85000
unkown
page read and write
 clean
7FF5D422D000
unkown image
page readonly
 clean
246BAA68000
unkown
page read and write
 clean
17D33C10000
unkown image
page readonly
 clean
7DF5211E0000
unkown image
page readonly
 clean
1E94A4E0000
unkown image
page readonly
 clean
2798B22A000
unkown
page read and write
 clean
7FF4FD32F000
unkown image
page readonly
 clean
2DFC8CF0000
heap default
page read and write
 clean
14520190000
heap private
page read and write
 clean
7FF5598A1000
unkown image
page readonly
 clean
246BAB13000
unkown
page read and write
 clean
246BA7F0000
unkown image
page read and write
 clean
7FF5B6F82000
unkown image
page readonly
 clean
7FF584D2D000
unkown image
page readonly
 clean
7FF584353000
unkown image
page readonly
 clean
7FF5D4243000
unkown image
page readonly
 clean
7DF50B080000
unkown image
page readonly
 clean
7DF5C4C22000
unkown image
page readonly
 clean
7FF5D40DC000
unkown image
page readonly
 clean
7FF5CACC4000
unkown image
page readonly
 clean
20484070000
unkown image
page readonly
 clean
7FF558E5D000
unkown image
page readonly
 clean
FE2367C000
stack
page read and write
 clean
7FF5B6FB1000
unkown image
page readonly
 clean
17994302000
unkown
page read and write
 clean
7FF5D3FF2000
unkown image
page readonly
 clean
7DF592BC2000
unkown image
page readonly
 clean
7FF5CAA31000
unkown image
page readonly
 clean
7DF408F50000
unkown image
page readonly
 clean
7A37CFF000
stack
page read and write
 clean
14520253000
unkown
page read and write
 clean
7DF590C70000
unkown image
page readonly
 clean
2798B259000
unkown
page read and write
 clean
1DD78E4E000
unkown
page read and write
 clean
7FF5E9A21000
unkown image
page readonly
 clean
246BAAEF000
unkown
page read and write
 clean
7FF582F63000
unkown image
page readonly
 clean
7FF5CA967000
unkown image
page readonly
 clean
17994229000
unkown
page read and write
 clean
246BB311000
unkown
page read and write
 clean
7FF584E87000
unkown image
page readonly
 clean
7FF58523D000
unkown image
page readonly
 clean
7DF5211D2000
unkown image
page readonly
 clean
7FF5B6EBD000
unkown image
page readonly
 clean
7FF5CAB61000
unkown image
page readonly
 clean
7FF5132BF000
unkown image
page readonly
 clean
There are 1083 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
file:///C:/Users/user/Downloads/Payment-Receipt.html
 malicious