Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\AutoInstall.exe
|
"C:\Users\user\Desktop\AutoInstall.exe"
|
 |
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://aia.entrust.net/ts1-chain256.cer01
|
unknown
|
||
|
http://www.codeplex.com/DotNetZip
|
unknown
|
||
|
http://crl.entrust.net/ts1ca.crl0
|
unknown
|
||
|
http://ocsp.entrust.net03
|
unknown
|
||
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
|
http://www.entrust.net/rpa0
|
unknown
|
||
|
http://ocsp.entrust.net02
|
unknown
|
||
|
http://www.entrust.net/rpa03
|
unknown
|
||
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
||
|
http://ip-api.com/line/?fields=hosting
|
208.95.112.1
|
||
|
http://ip-api.com
|
unknown
|
||
|
http://ip-api.com4
|
unknown
|
There are 2 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
ip-api.com
|
208.95.112.1
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
208.95.112.1
|
ip-api.com
|
United States
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASAPI32
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
EnableAutoFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\AppLaunch_RASMANCS
|
FileDirectory
|
There are 5 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
FEC371B000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9577000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
145795B000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1457C7E000
|
stack
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
810000
|
unkown
|
page readonly
|
||
|
9500000
|
trusted library allocation
|
page read and write
|
||
|
24C93613000
|
heap
|
page read and write
|
||
|
27594D81000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
54EA000
|
trusted library allocation
|
page execute and read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
27594DB0000
|
heap
|
page read and write
|
||
|
29B06A13000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
242D3D90000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24D59A29000
|
heap
|
page read and write
|
||
|
9577000
|
trusted library allocation
|
page read and write
|
||
|
1A062EBE000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
822000
|
unkown
|
page execute read
|
||
|
1A062EBE000
|
heap
|
page read and write
|
||
|
9D70000
|
trusted library allocation
|
page read and write
|
||
|
820000
|
unkown
|
page write copy
|
||
|
27594D99000
|
heap
|
page read and write
|
||
|
B6360F8000
|
stack
|
page read and write
|
||
|
24D59A6E000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
27594DA6000
|
heap
|
page read and write
|
||
|
27594D66000
|
heap
|
page read and write
|
||
|
242D2F50000
|
heap
|
page read and write
|
||
|
55AE000
|
stack
|
page read and write
|
||
|
FEC3CFB000
|
stack
|
page read and write
|
||
|
94E8000
|
trusted library allocation
|
page read and write
|
||
|
7134000
|
trusted library allocation
|
page read and write
|
||
|
9520000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
29B06A73000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
1A062C60000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24C93650000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
FEC3EFF000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9579000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F683C000
|
heap
|
page read and write
|
||
|
54C4000
|
trusted library allocation
|
page read and write
|
||
|
9525000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
29B06A8A000
|
heap
|
page read and write
|
||
|
709F000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9578000
|
trusted library allocation
|
page read and write
|
||
|
B635FF7000
|
stack
|
page read and write
|
||
|
55E7000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
54F2000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
523F000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
950000
|
heap
|
page read and write
|
||
|
275944B2000
|
heap
|
page read and write
|
||
|
634E5FF000
|
stack
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
242D2EB6000
|
heap
|
page read and write
|
||
|
A180000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1457E7B000
|
stack
|
page read and write
|
||
|
27594D2D000
|
heap
|
page read and write
|
||
|
B6363F8000
|
stack
|
page read and write
|
||
|
9D70000
|
trusted library allocation
|
page execute and read and write
|
||
|
E172A7E000
|
stack
|
page read and write
|
||
|
E29967D000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
51F6000
|
heap
|
page read and write
|
||
|
919E000
|
stack
|
page read and write
|
||
|
1A062EB2000
|
heap
|
page read and write
|
||
|
A170000
|
trusted library allocation
|
page read and write
|
||
|
54F0000
|
trusted library allocation
|
page read and write
|
||
|
FEC3BFE000
|
stack
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
27594D63000
|
heap
|
page read and write
|
||
|
634E14A000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
5560000
|
trusted library allocation
|
page readonly
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D7C000
|
heap
|
page read and write
|
||
|
9D70000
|
trusted library allocation
|
page read and write
|
||
|
E17273C000
|
stack
|
page read and write
|
||
|
24C93702000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
27594D94000
|
heap
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
957B000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
48E000
|
remote allocation
|
page readonly
|
||
|
24C93E02000
|
trusted library allocation
|
page read and write
|
||
|
144F6750000
|
heap
|
page read and write
|
||
|
E29987F000
|
stack
|
page read and write
|
||
|
D20000
|
heap
|
page read and write
|
||
|
A141000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1A062EC1000
|
heap
|
page read and write
|
||
|
24D5A402000
|
heap
|
page read and write
|
||
|
402000
|
remote allocation
|
page execute read
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
B635EFE000
|
stack
|
page read and write
|
||
|
9C50000
|
trusted library allocation
|
page read and write
|
||
|
54C3000
|
trusted library allocation
|
page execute and read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
29B06A7F000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D94000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
54E2000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9FCF000
|
stack
|
page read and write
|
||
|
27594D94000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
968D000
|
stack
|
page read and write
|
||
|
144F6902000
|
heap
|
page read and write
|
||
|
51DA000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
144F687F000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594502000
|
heap
|
page read and write
|
||
|
5510000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
5167000
|
stack
|
page read and write
|
||
|
24D59AE1000
|
heap
|
page read and write
|
||
|
E29977F000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
242D2E8A000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
29B06B08000
|
heap
|
page read and write
|
||
|
400000
|
remote allocation
|
page readonly
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
634E4F9000
|
stack
|
page read and write
|
||
|
27594D79000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
7113000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24D59A88000
|
heap
|
page read and write
|
||
|
A11D000
|
trusted library allocation
|
page read and write
|
||
|
24D59B02000
|
heap
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
24C9363C000
|
heap
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
54FB000
|
trusted library allocation
|
page execute and read and write
|
||
|
A470000
|
trusted library allocation
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
CEBC1FC000
|
stack
|
page read and write
|
||
|
27594DAC000
|
heap
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
144F6880000
|
heap
|
page read and write
|
||
|
29B06A73000
|
heap
|
page read and write
|
||
|
B635CFE000
|
stack
|
page read and write
|
||
|
27595262000
|
heap
|
page read and write
|
||
|
27595202000
|
heap
|
page read and write
|
||
|
1A062EA7000
|
heap
|
page read and write
|
||
|
A11F000
|
trusted library allocation
|
page read and write
|
||
|
527C000
|
heap
|
page read and write
|
||
|
70A1000
|
trusted library allocation
|
page read and write
|
||
|
1A062EB4000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1457F77000
|
stack
|
page read and write
|
||
|
27594D85000
|
heap
|
page read and write
|
||
|
7124000
|
trusted library allocation
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
5281000
|
heap
|
page read and write
|
||
|
24D59A66000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D9A000
|
heap
|
page read and write
|
||
|
29B06A29000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F6908000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
275944C4000
|
heap
|
page read and write
|
||
|
27594D4E000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9500000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
E29937F000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
1A062E9B000
|
heap
|
page read and write
|
||
|
242D2FC5000
|
heap
|
page read and write
|
||
|
E2993FB000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
275944F7000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9520000
|
trusted library allocation
|
page read and write
|
||
|
27595200000
|
heap
|
page read and write
|
||
|
A13C000
|
trusted library allocation
|
page read and write
|
||
|
24C93676000
|
heap
|
page read and write
|
||
|
242D2E9B000
|
heap
|
page read and write
|
||
|
144F6829000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9693000
|
heap
|
page read and write
|
||
|
27594470000
|
heap
|
page read and write
|
||
|
29B06960000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
29B07402000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
25C0000
|
heap
|
page read and write
|
||
|
9500000
|
trusted library allocation
|
page read and write
|
||
|
9C30000
|
trusted library allocation
|
page read and write
|
||
|
9D80000
|
trusted library allocation
|
page read and write
|
||
|
1A062E90000
|
heap
|
page read and write
|
||
|
810000
|
unkown
|
page readonly
|
||
|
FEC3DF7000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9C40000
|
trusted library allocation
|
page read and write
|
||
|
A180000
|
trusted library allocation
|
page read and write
|
||
|
29B06A00000
|
heap
|
page read and write
|
||
|
54D0000
|
trusted library allocation
|
page read and write
|
||
|
A150000
|
trusted library allocation
|
page read and write
|
||
|
24D598C0000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9D76000
|
trusted library allocation
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
A157000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
555E000
|
stack
|
page read and write
|
||
|
1A062E30000
|
heap
|
page read and write
|
||
|
9ADE000
|
stack
|
page read and write
|
||
|
B635C7B000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F66F0000
|
heap
|
page read and write
|
||
|
144F6861000
|
heap
|
page read and write
|
||
|
CEBC37B000
|
stack
|
page read and write
|
||
|
A2A0000
|
trusted library allocation
|
page read and write
|
||
|
9D90000
|
trusted library allocation
|
page read and write
|
||
|
145807F000
|
stack
|
page read and write
|
||
|
29B06A02000
|
heap
|
page read and write
|
||
|
29B06A3C000
|
heap
|
page read and write
|
||
|
242D2EA3000
|
heap
|
page read and write
|
||
|
6F90000
|
heap
|
page execute and read and write
|
||
|
54B0000
|
trusted library allocation
|
page read and write
|
||
|
24D59A13000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
54F7000
|
trusted library allocation
|
page execute and read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
24C93713000
|
heap
|
page read and write
|
||
|
24AF000
|
stack
|
page read and write
|
||
|
242D3AC0000
|
trusted library allocation
|
page read and write
|
||
|
9577000
|
trusted library allocation
|
page read and write
|
||
|
27594D19000
|
heap
|
page read and write
|
||
|
70C2000
|
trusted library allocation
|
page read and write
|
||
|
634E47F000
|
stack
|
page read and write
|
||
|
A12D000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1A062E35000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
27594D9E000
|
heap
|
page read and write
|
||
|
94E6000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
5290000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F7202000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9590000
|
heap
|
page execute and read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
29B06A64000
|
heap
|
page read and write
|
||
|
24C93683000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
E29997F000
|
stack
|
page read and write
|
||
|
1A062EB6000
|
heap
|
page read and write
|
||
|
242D2FB0000
|
trusted library allocation
|
page read and write
|
||
|
144F6852000
|
heap
|
page read and write
|
||
|
27595202000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
1A062ED0000
|
heap
|
page read and write
|
||
|
E172BF9000
|
stack
|
page read and write
|
||
|
2759448A000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
DE5000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
964E000
|
stack
|
page read and write
|
||
|
242D3DA0000
|
trusted library allocation
|
page read and write
|
||
|
29B06B13000
|
heap
|
page read and write
|
||
|
10E000
|
stack
|
page read and write
|
||
|
24D59A3E000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
955D000
|
stack
|
page read and write
|
||
|
242D3D70000
|
trusted library allocation
|
page read and write
|
||
|
24D59ABD000
|
heap
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
822000
|
unkown
|
page execute read
|
||
|
CEBC477000
|
stack
|
page read and write
|
||
|
275944B5000
|
heap
|
page read and write
|
||
|
9D80000
|
trusted library allocation
|
page read and write
|
||
|
A1C0000
|
trusted library allocation
|
page read and write
|
||
|
E29957B000
|
stack
|
page read and write
|
||
|
24C9364A000
|
heap
|
page read and write
|
||
|
242D2EBA000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
29B069D0000
|
heap
|
page read and write
|
||
|
27594DD5000
|
heap
|
page read and write
|
||
|
27594D66000
|
heap
|
page read and write
|
||
|
634E578000
|
stack
|
page read and write
|
||
|
29B06970000
|
heap
|
page read and write
|
||
|
A00E000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
A124000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
54E6000
|
trusted library allocation
|
page execute and read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
957C000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
27594210000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1A062EC1000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
E172CF9000
|
stack
|
page read and write
|
||
|
7116000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
1A062EA7000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
54DD000
|
trusted library allocation
|
page execute and read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
27595202000
|
heap
|
page read and write
|
||
|
FEC3A7E000
|
stack
|
page read and write
|
||
|
52A4000
|
heap
|
page read and write
|
||
|
27594220000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594DA5000
|
heap
|
page read and write
|
||
|
54CD000
|
trusted library allocation
|
page execute and read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
29B06B02000
|
heap
|
page read and write
|
||
|
55E0000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
979C000
|
stack
|
page read and write
|
||
|
19F000
|
stack
|
page execute and read and write
|
||
|
A2CC000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E7000
|
trusted library allocation
|
page read and write
|
||
|
B10000
|
heap
|
page read and write
|
||
|
27594C02000
|
heap
|
page read and write
|
||
|
5288000
|
heap
|
page read and write
|
||
|
275943F0000
|
remote allocation
|
page read and write
|
||
|
24B0000
|
direct allocation
|
page execute and read and write
|
||
|
27594513000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E6000
|
trusted library allocation
|
page read and write
|
||
|
144F66E0000
|
heap
|
page read and write
|
||
|
242D2CE0000
|
heap
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
24D59960000
|
trusted library allocation
|
page read and write
|
||
|
242D2E50000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
27594DAF000
|
heap
|
page read and write
|
||
|
5204000
|
heap
|
page read and write
|
||
|
29B07270000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9500000
|
heap
|
page read and write
|
||
|
1A062EBE000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1457D7B000
|
stack
|
page read and write
|
||
|
A2F3000
|
trusted library allocation
|
page read and write
|
||
|
9578000
|
trusted library allocation
|
page read and write
|
||
|
A2F2000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
1A062EB7000
|
heap
|
page read and write
|
||
|
242D3D80000
|
heap
|
page readonly
|
||
|
B63647F000
|
unkown
|
page read and write
|
||
|
242D2EA3000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D50000
|
heap
|
page read and write
|
||
|
54A0000
|
heap
|
page read and write
|
||
|
1A062DB0000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
144F6813000
|
heap
|
page read and write
|
||
|
CEBC67F000
|
stack
|
page read and write
|
||
|
A15D000
|
trusted library allocation
|
page read and write
|
||
|
B6362FF000
|
stack
|
page read and write
|
||
|
E172D7E000
|
stack
|
page read and write
|
||
|
E172AFE000
|
stack
|
page read and write
|
||
|
145817E000
|
stack
|
page read and write
|
||
|
27594DAA000
|
heap
|
page read and write
|
||
|
275944A4000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24C93629000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
E29907C000
|
stack
|
page read and write
|
||
|
27594413000
|
heap
|
page read and write
|
||
|
242D3DF0000
|
trusted library allocation
|
page read and write
|
||
|
9577000
|
trusted library allocation
|
page read and write
|
||
|
820000
|
unkown
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
D30000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
E2994FB000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9C60000
|
trusted library allocation
|
page read and write
|
||
|
24B2000
|
direct allocation
|
page execute and read and write
|
||
|
52AE000
|
heap
|
page read and write
|
||
|
144F687F000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F6780000
|
trusted library allocation
|
page read and write
|
||
|
24C93600000
|
heap
|
page read and write
|
||
|
275943F0000
|
remote allocation
|
page read and write
|
||
|
E1727BD000
|
stack
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9C20000
|
trusted library allocation
|
page read and write
|
||
|
51D0000
|
heap
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
144F6863000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
A2B0000
|
trusted library allocation
|
page read and write
|
||
|
A114000
|
trusted library allocation
|
page read and write
|
||
|
24D59A00000
|
heap
|
page read and write
|
||
|
FEC379E000
|
stack
|
page read and write
|
||
|
275944D5000
|
heap
|
page read and write
|
||
|
144F685F000
|
heap
|
page read and write
|
||
|
27594380000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24D598D0000
|
heap
|
page read and write
|
||
|
242D2E58000
|
heap
|
page read and write
|
||
|
27594280000
|
heap
|
page read and write
|
||
|
242D2FC9000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
529B000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D00000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
242D2FD0000
|
trusted library allocation
|
page read and write
|
||
|
275944E2000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
242D2EA3000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
E29927F000
|
stack
|
page read and write
|
||
|
144F6800000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
A144000
|
trusted library allocation
|
page read and write
|
||
|
27594400000
|
heap
|
page read and write
|
||
|
24C934C0000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
B635D7E000
|
stack
|
page read and write
|
||
|
DE0000
|
heap
|
page read and write
|
||
|
FEC3B7C000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
A130000
|
trusted library allocation
|
page read and write
|
||
|
14579DE000
|
stack
|
page read and write
|
||
|
144F6802000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594429000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
E172C7F000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9579000
|
trusted library allocation
|
page read and write
|
||
|
1A062ECE000
|
heap
|
page read and write
|
||
|
94E6000
|
trusted library allocation
|
page read and write
|
||
|
24C93DC0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D2D000
|
heap
|
page read and write
|
||
|
A160000
|
trusted library allocation
|
page read and write
|
||
|
275944AB000
|
heap
|
page read and write
|
||
|
242D2CF0000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
29B06A5E000
|
heap
|
page read and write
|
||
|
94F0000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
A2C8000
|
trusted library allocation
|
page read and write
|
||
|
9520000
|
trusted library allocation
|
page read and write
|
||
|
54C0000
|
trusted library allocation
|
page read and write
|
||
|
242D2FC0000
|
heap
|
page read and write
|
||
|
29B06B00000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
B6361F7000
|
stack
|
page read and write
|
||
|
27594D96000
|
heap
|
page read and write
|
||
|
27594D26000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
144F6913000
|
heap
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
27594D53000
|
heap
|
page read and write
|
||
|
24C93708000
|
heap
|
page read and write
|
||
|
144F6900000
|
heap
|
page read and write
|
||
|
242D3B30000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
275944EB000
|
heap
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
24C934B0000
|
heap
|
page read and write
|
||
|
27594D83000
|
heap
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
957A000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24C93700000
|
heap
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
55D0000
|
trusted library allocation
|
page execute and read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
634E1CF000
|
stack
|
page read and write
|
||
|
27594D61000
|
heap
|
page read and write
|
||
|
9D80000
|
trusted library allocation
|
page read and write
|
||
|
E172B7D000
|
stack
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24C9366E000
|
heap
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
94F0000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
A135000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
52AB000
|
heap
|
page read and write
|
||
|
1A062EA2000
|
heap
|
page read and write
|
||
|
24C93520000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
B1A000
|
heap
|
page read and write
|
||
|
B635E7C000
|
stack
|
page read and write
|
||
|
24D59930000
|
heap
|
page read and write
|
||
|
24D59B13000
|
heap
|
page read and write
|
||
|
24C93665000
|
heap
|
page read and write
|
||
|
E298E7B000
|
stack
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
52B4000
|
heap
|
page read and write
|
||
|
242D2E20000
|
heap
|
page read and write
|
||
|
D9A000
|
stack
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
6F8B000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D23000
|
heap
|
page read and write
|
||
|
6F85000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9690000
|
heap
|
page read and write
|
||
|
27595202000
|
heap
|
page read and write
|
||
|
9576000
|
trusted library allocation
|
page read and write
|
||
|
1A062D90000
|
heap
|
page read and write
|
||
|
A180000
|
trusted library allocation
|
page read and write
|
||
|
7132000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9C70000
|
trusted library allocation
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
54E0000
|
trusted library allocation
|
page read and write
|
||
|
CEBC57E000
|
stack
|
page read and write
|
||
|
9AE0000
|
trusted library allocation
|
page read and write
|
||
|
29B06A56000
|
heap
|
page read and write
|
||
|
30000
|
heap
|
page read and write
|
||
|
6F80000
|
trusted library allocation
|
page read and write
|
||
|
A127000
|
trusted library allocation
|
page read and write
|
||
|
24D59AC4000
|
heap
|
page read and write
|
||
|
55C0000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
957F000
|
trusted library allocation
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
55C9000
|
heap
|
page read and write
|
||
|
634E67C000
|
stack
|
page read and write
|
||
|
9577000
|
trusted library allocation
|
page read and write
|
||
|
A181000
|
trusted library allocation
|
page read and write
|
||
|
CEBBDDC000
|
stack
|
page read and write
|
||
|
2759443C000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
27594D74000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
55B0000
|
trusted library allocation
|
page read and write
|
||
|
144F688B000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9ECD000
|
stack
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
94E5000
|
trusted library allocation
|
page read and write
|
||
|
1A062EC1000
|
heap
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
24D59ACE000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9575000
|
trusted library allocation
|
page read and write
|
||
|
A138000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
24D5A532000
|
heap
|
page read and write
|
||
|
7127000
|
trusted library allocation
|
page read and write
|
||
|
9580000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
A190000
|
trusted library allocation
|
page read and write
|
||
|
27594D71000
|
heap
|
page read and write
|
||
|
FEC3FFF000
|
stack
|
page read and write
|
||
|
A5F000
|
stack
|
page read and write
|
||
|
52AC000
|
heap
|
page read and write
|
||
|
27594D62000
|
heap
|
page read and write
|
||
|
9520000
|
trusted library allocation
|
page read and write
|
||
|
99DE000
|
stack
|
page read and write
|
||
|
AD0000
|
heap
|
page read and write
|
||
|
A10E000
|
stack
|
page read and write
|
||
|
6F70000
|
trusted library allocation
|
page read and write
|
||
|
24D5A500000
|
heap
|
page read and write
|
||
|
9524000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
275944C8000
|
heap
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
A110000
|
trusted library allocation
|
page read and write
|
||
|
CEBC07E000
|
stack
|
page read and write
|
||
|
1F0000
|
trusted library allocation
|
page read and write
|
||
|
A9E000
|
stack
|
page read and write
|
||
|
275943F0000
|
remote allocation
|
page read and write
|
||
|
CEBC27E000
|
stack
|
page read and write
|
||
|
CEBC0FE000
|
stack
|
page read and write
|
||
|
999E000
|
stack
|
page read and write
|
||
|
242D3B20000
|
trusted library allocation
|
page read and write
|
||
|
80A1000
|
trusted library allocation
|
page read and write
|
||
|
9570000
|
trusted library allocation
|
page read and write
|
||
|
989E000
|
stack
|
page read and write
|
||
|
94E0000
|
trusted library allocation
|
page read and write
|
There are 685 hidden memdumps, click here to show them.