Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SecuriteInfo.com.Trojan.Crypt.25649.28700.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
|
C:\Users\user\AppData\Local\Temp\Setup Log 2024-05-23 #001.txt
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\bucket.inno.log
|
ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\bucket.log
|
ISO-8859 text, with very long lines (1251), with CRLF, CR line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\_isetup\_setup64.tmp
|
PE32+ executable (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\cfghost.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\cfghost.inno.dll
|
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x64\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\API-MS-Win-core-xstate-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-console-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-private-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\cfghost\x86\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\devcon32.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\devcon64.exe
|
PE32+ executable (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\device.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\device.inno.dll
|
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x64\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\API-MS-Win-core-xstate-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-console-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-private-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\device\x86\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\bucket.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\bucket.inno.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\libcurl.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\libeay32.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\msvcr120.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\osssdk.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\ssleay32.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-console-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-console-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-datetime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-debug-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-file-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-file-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-file-l2-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-handle-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-localization-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-memory-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-profile-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-synch-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-synch-l1-2-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-timezone-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-core-util-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-conio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-convert-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-environment-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-heap-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-locale-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-math-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-private-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-process-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-string-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-time-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\api-ms-win-crt-utility-l1-1-0.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\ucrtbase.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x64\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\API-MS-Win-core-xstate-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-console-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-console-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-datetime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-debug-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-errorhandling-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-file-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-file-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-file-l2-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-handle-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-interlocked-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-libraryloader-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-localization-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-memory-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-namedpipe-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-processenvironment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-processthreads-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-processthreads-l1-1-1.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-profile-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-rtlsupport-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-synch-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-synch-l1-2-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-sysinfo-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-timezone-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-core-util-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-conio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-convert-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-environment-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-filesystem-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-heap-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-locale-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-math-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-multibyte-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-private-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-process-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-runtime-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-stdio-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-string-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-time-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\api-ms-win-crt-utility-l1-1-0.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\ucrtbase.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\x86\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-4K0PE.tmp\ossbucket\zlibwapi.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\is-R3KMA.tmp\SecuriteInfo.com.Trojan.Crypt.25649.28700.tmp
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\osssdk.log
|
ISO-8859 text, with very long lines (370), with CRLF line terminators
|
dropped
|
There are 416 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Crypt.25649.28700.exe
|
"C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Crypt.25649.28700.exe"
|
||
|
C:\Users\user\AppData\Local\Temp\is-R3KMA.tmp\SecuriteInfo.com.Trojan.Crypt.25649.28700.tmp
|
"C:\Users\user\AppData\Local\Temp\is-R3KMA.tmp\SecuriteInfo.com.Trojan.Crypt.25649.28700.tmp" /SL5="$203EE,3576097,780288,C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Crypt.25649.28700.exe"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.innosetup.com/
|
unknown
|
||
|
http://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/?tagging
|
106.14.229.209
|
||
|
https://jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
|
unknown
|
||
|
http://www.mifanxing.com/mppf1
|
unknown
|
||
|
http://www.openssl.org/V
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.com
|
unknown
|
||
|
http://www.winimage.com/zLibDll0s
|
unknown
|
||
|
http://www.kymoto.org
|
unknown
|
||
|
https://mp-setup-10x-debug.oss-cn-shanghai.aliyuncs.comcal
|
unknown
|
||
|
https://www.mifanxing.com/mp
|
unknown
|
||
|
https://curl.haxx.se/docs/http-cookies.html
|
unknown
|
||
|
http://www.kymoto.orgsQ
|
unknown
|
||
|
http://www.openssl.org/support/faq.html
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.coZ
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shan
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.comhttps://www.mifanxing.com/mpmp-setup-10x-debughttps
|
unknown
|
||
|
http://mp-setup-10x-oss.mpsolo.com
|
unknown
|
||
|
http://www.winimage.com/zLibDll0sp
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.com.dll
|
unknown
|
||
|
http://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/mpsetup%2F%7B0DD5DC56-E5AD-4639-BABF-9FAF7490DCBA%7
|
unknown
|
||
|
https://curl.haxx.se/docs/copyright.htmlD
|
unknown
|
||
|
https://mp-setup-10x-debug.oss-cn-shanghai.aliyuncs.com
|
unknown
|
||
|
https://www.mifanxing.com/mpAccessKeyIdAccessKeySecretEndpointBucketNameReferer
|
unknown
|
||
|
https://curl.haxx.se/V
|
unknown
|
||
|
http://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/?marker&max-keys=1000
|
106.14.229.209
|
||
|
http://oss-cn-shanghai.aliyuncs.com/
|
106.14.228.220
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/mpse
|
unknown
|
||
|
http://www.winimage.com/zLibDll
|
unknown
|
||
|
http://www.mifanxing.com/mppf?
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.comLo
|
unknown
|
||
|
http://www.remobjects.com/ps
|
unknown
|
||
|
http://www.mifanxing.com/mp6http://www.mifanxing.com/mp6http://www.mifanxing.com/mp
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/mpsetup/
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.comn/xml
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghaiZ
|
unknown
|
||
|
https://mp-setup-10x.oss-cn-shanghai.aliyuncs.com/device/cache/cache
|
unknown
|
There are 26 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
mp-setup-10x.oss-cn-shanghai.aliyuncs.com
|
106.14.229.209
|
||
|
oss-cn-shanghai.aliyuncs.com
|
106.14.228.220
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
106.14.229.209
|
mp-setup-10x.oss-cn-shanghai.aliyuncs.com
|
China
|
||
|
106.14.228.220
|
oss-cn-shanghai.aliyuncs.com
|
China
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
9011000
|
direct allocation
|
page read and write
|
||
|
2404000
|
direct allocation
|
page read and write
|
||
|
3828000
|
heap
|
page read and write
|
||
|
3B35000
|
heap
|
page read and write
|
||
|
1007D000
|
unkown
|
page read and write
|
||
|
3B44000
|
heap
|
page read and write
|
||
|
37CE000
|
heap
|
page read and write
|
||
|
3AE5000
|
heap
|
page read and write
|
||
|
6D1A3000
|
unkown
|
page readonly
|
||
|
3B33000
|
heap
|
page read and write
|
||
|
6D149000
|
unkown
|
page write copy
|
||
|
382C000
|
heap
|
page read and write
|
||
|
3B5E000
|
heap
|
page read and write
|
||
|
3B42000
|
heap
|
page read and write
|
||
|
237F000
|
direct allocation
|
page read and write
|
||
|
378A000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
672000
|
unkown
|
page readonly
|
||
|
2324000
|
direct allocation
|
page read and write
|
||
|
7FBD0000
|
direct allocation
|
page read and write
|
||
|
3839000
|
heap
|
page read and write
|
||
|
3B9A000
|
heap
|
page read and write
|
||
|
2316000
|
direct allocation
|
page read and write
|
||
|
3594000
|
direct allocation
|
page read and write
|
||
|
3B1A000
|
heap
|
page read and write
|
||
|
3A85000
|
heap
|
page read and write
|
||
|
361D000
|
direct allocation
|
page read and write
|
||
|
10001000
|
unkown
|
page execute read
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
18F000
|
stack
|
page read and write
|
||
|
3B5C000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
385E000
|
heap
|
page read and write
|
||
|
382C000
|
heap
|
page read and write
|
||
|
35E5000
|
direct allocation
|
page read and write
|
||
|
10067000
|
unkown
|
page read and write
|
||
|
91BE000
|
stack
|
page read and write
|
||
|
23F6000
|
direct allocation
|
page read and write
|
||
|
6D2D0000
|
unkown
|
page readonly
|
||
|
23E8000
|
direct allocation
|
page read and write
|
||
|
3837000
|
heap
|
page read and write
|
||
|
382E000
|
heap
|
page read and write
|
||
|
3825000
|
heap
|
page read and write
|
||
|
35C7000
|
direct allocation
|
page read and write
|
||
|
2590000
|
direct allocation
|
page read and write
|
||
|
3B0F000
|
heap
|
page read and write
|
||
|
3624000
|
direct allocation
|
page read and write
|
||
|
23AC000
|
direct allocation
|
page read and write
|
||
|
3814000
|
heap
|
page read and write
|
||
|
241A000
|
direct allocation
|
page read and write
|
||
|
3B06000
|
heap
|
page read and write
|
||
|
670000
|
heap
|
page read and write
|
||
|
3853000
|
heap
|
page read and write
|
||
|
3828000
|
heap
|
page read and write
|
||
|
385B000
|
heap
|
page read and write
|
||
|
4B7000
|
unkown
|
page read and write
|
||
|
839000
|
heap
|
page read and write
|
||
|
3828000
|
heap
|
page read and write
|
||
|
384F000
|
heap
|
page read and write
|
||
|
3817000
|
heap
|
page read and write
|
||
|
6D23B000
|
unkown
|
page read and write
|
||
|
25F0000
|
direct allocation
|
page read and write
|
||
|
10088000
|
unkown
|
page read and write
|
||
|
23BB000
|
direct allocation
|
page read and write
|
||
|
2296000
|
direct allocation
|
page read and write
|
||
|
3A5E000
|
heap
|
page read and write
|
||
|
3BA3000
|
heap
|
page read and write
|
||
|
894000
|
heap
|
page read and write
|
||
|
6E8C0000
|
unkown
|
page readonly
|
||
|
3852000
|
heap
|
page read and write
|
||
|
10089000
|
unkown
|
page readonly
|
||
|
10062000
|
unkown
|
page read and write
|
||
|
870000
|
heap
|
page read and write
|
||
|
3828000
|
heap
|
page read and write
|
||
|
3858000
|
heap
|
page read and write
|
||
|
385E000
|
heap
|
page read and write
|
||
|
6CF20000
|
unkown
|
page read and write
|
||
|
4C4000
|
unkown
|
page readonly
|
||
|
23C2000
|
direct allocation
|
page read and write
|
||
|
3785000
|
heap
|
page read and write
|
||
|
22FF000
|
direct allocation
|
page read and write
|
||
|
3B14000
|
heap
|
page read and write
|
||
|
23A4000
|
direct allocation
|
page read and write
|
||
|
3834000
|
heap
|
page read and write
|
||
|
3AC5000
|
heap
|
page read and write
|
||
|
88C000
|
heap
|
page read and write
|
||
|
3841000
|
heap
|
page read and write
|
||
|
2590000
|
direct allocation
|
page read and write
|
||
|
3B97000
|
heap
|
page read and write
|
||
|
383D000
|
heap
|
page read and write
|
||
|
6D021000
|
unkown
|
page execute read
|
||
|
3BA2000
|
heap
|
page read and write
|
||
|
233A000
|
direct allocation
|
page read and write
|
||
|
6D020000
|
unkown
|
page readonly
|
||
|
3B64000
|
heap
|
page read and write
|
||
|
65D000
|
unkown
|
page write copy
|
||
|
3814000
|
heap
|
page read and write
|
||
|
384D000
|
heap
|
page read and write
|
||
|
3B39000
|
heap
|
page read and write
|
||
|
3B4F000
|
heap
|
page read and write
|
||
|
2550000
|
heap
|
page read and write
|
||
|
3B3B000
|
heap
|
page read and write
|
||
|
37AC000
|
heap
|
page read and write
|
||
|
385B000
|
heap
|
page read and write
|
||
|
6CEE0000
|
unkown
|
page readonly
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
3853000
|
heap
|
page read and write
|
||
|
3B60000
|
heap
|
page read and write
|
||
|
88C000
|
heap
|
page read and write
|
||
|
6D161000
|
unkown
|
page execute read
|
||
|
2387000
|
direct allocation
|
page read and write
|
||
|
6D147000
|
unkown
|
page read and write
|
||
|
3B5C000
|
heap
|
page read and write
|
||
|
362C000
|
direct allocation
|
page read and write
|
||
|
231C000
|
direct allocation
|
page read and write
|
||
|
8A6000
|
heap
|
page read and write
|
||
|
3657000
|
direct allocation
|
page read and write
|
||
|
3817000
|
heap
|
page read and write
|
||
|
3B3B000
|
heap
|
page read and write
|
||
|
88B000
|
heap
|
page read and write
|
||
|
3BA2000
|
heap
|
page read and write
|
||
|
3825000
|
heap
|
page read and write
|
||
|
2428000
|
direct allocation
|
page read and write
|
||
|
6D2B6000
|
unkown
|
page read and write
|
||
|
25E0000
|
heap
|
page read and write
|
||
|
37B0000
|
heap
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
3854000
|
heap
|
page read and write
|
||
|
891000
|
heap
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
3B3D000
|
heap
|
page read and write
|
||
|
3B32000
|
heap
|
page read and write
|
||
|
35F4000
|
direct allocation
|
page read and write
|
||
|
6D160000
|
unkown
|
page readonly
|
||
|
357F000
|
direct allocation
|
page read and write
|
||
|
6D015000
|
unkown
|
page read and write
|
||
|
35B7000
|
direct allocation
|
page read and write
|
||
|
3B1B000
|
heap
|
page read and write
|
||
|
229D000
|
direct allocation
|
page read and write
|
||
|
780000
|
heap
|
page read and write
|
||
|
3B06000
|
heap
|
page read and write
|
||
|
2324000
|
direct allocation
|
page read and write
|
||
|
6E8D0000
|
unkown
|
page read and write
|
||
|
22E1000
|
direct allocation
|
page read and write
|
||
|
3814000
|
heap
|
page read and write
|
||
|
3814000
|
heap
|
page read and write
|
||
|
227F000
|
direct allocation
|
page read and write
|
||
|
3855000
|
heap
|
page read and write
|
||
|
3649000
|
direct allocation
|
page read and write
|
||
|
3B68000
|
heap
|
page read and write
|
||
|
917F000
|
stack
|
page read and write
|
||
|
3B23000
|
heap
|
page read and write
|
||
|
3B99000
|
heap
|
page read and write
|
||
|
3592000
|
direct allocation
|
page read and write
|
||
|
690000
|
heap
|
page read and write
|
||
|
37AC000
|
heap
|
page read and write
|
||
|
2D40000
|
trusted library allocation
|
page read and write
|
||
|
3834000
|
heap
|
page read and write
|
||
|
37F7000
|
heap
|
page read and write
|
||
|
3842000
|
heap
|
page read and write
|
||
|
6D2B9000
|
unkown
|
page readonly
|
||
|
3B05000
|
heap
|
page read and write
|
||
|
22F1000
|
direct allocation
|
page read and write
|
||
|
6D348000
|
unkown
|
page read and write
|
||
|
770000
|
heap
|
page read and write
|
||
|
3B13000
|
heap
|
page read and write
|
||
|
2600000
|
heap
|
page read and write
|
||
|
3839000
|
heap
|
page read and write
|
||
|
389E000
|
stack
|
page read and write
|
||
|
385E000
|
heap
|
page read and write
|
||
|
2393000
|
direct allocation
|
page read and write
|
||
|
4EC0000
|
direct allocation
|
page read and write
|
||
|
385A000
|
heap
|
page read and write
|
||
|
22D9000
|
direct allocation
|
page read and write
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
3B1D000
|
heap
|
page read and write
|
||
|
3B13000
|
heap
|
page read and write
|
||
|
3604000
|
direct allocation
|
page read and write
|
||
|
3613000
|
direct allocation
|
page read and write
|
||
|
2351000
|
direct allocation
|
page read and write
|
||
|
3B0B000
|
heap
|
page read and write
|
||
|
6D14C000
|
unkown
|
page read and write
|
||
|
3830000
|
heap
|
page read and write
|
||
|
886000
|
heap
|
page read and write
|
||
|
2306000
|
direct allocation
|
page read and write
|
||
|
10068000
|
unkown
|
page readonly
|
||
|
3540000
|
direct allocation
|
page read and write
|
||
|
3A4D000
|
heap
|
page read and write
|
||
|
3B3A000
|
heap
|
page read and write
|
||
|
58C0000
|
direct allocation
|
page read and write
|
||
|
630000
|
heap
|
page read and write
|
||
|
22F0000
|
direct allocation
|
page read and write
|
||
|
88F000
|
heap
|
page read and write
|
||
|
2333000
|
direct allocation
|
page read and write
|
||
|
92BF000
|
stack
|
page read and write
|
||
|
2315000
|
direct allocation
|
page read and write
|
||
|
3B40000
|
heap
|
page read and write
|
||
|
6D1B0000
|
unkown
|
page readonly
|
||
|
3832000
|
heap
|
page read and write
|
||
|
3B99000
|
heap
|
page read and write
|
||
|
3831000
|
heap
|
page read and write
|
||
|
4C2000
|
unkown
|
page write copy
|
||
|
3805000
|
heap
|
page read and write
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
3836000
|
heap
|
page read and write
|
||
|
3AC6000
|
heap
|
page read and write
|
||
|
3709000
|
unkown
|
page read and write
|
||
|
3B66000
|
heap
|
page read and write
|
||
|
66B000
|
unkown
|
page write copy
|
||
|
3853000
|
heap
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
6E8D1000
|
unkown
|
page readonly
|
||
|
2421000
|
direct allocation
|
page read and write
|
||
|
385B000
|
heap
|
page read and write
|
||
|
6D23C000
|
unkown
|
page write copy
|
||
|
3838000
|
heap
|
page read and write
|
||
|
3854000
|
heap
|
page read and write
|
||
|
2308000
|
direct allocation
|
page read and write
|
||
|
37F6000
|
heap
|
page read and write
|
||
|
3818000
|
heap
|
page read and write
|
||
|
3849000
|
heap
|
page read and write
|
||
|
2396000
|
direct allocation
|
page read and write
|
||
|
35AF000
|
direct allocation
|
page read and write
|
||
|
10000000
|
unkown
|
page readonly
|
||
|
4B9000
|
unkown
|
page read and write
|
||
|
3814000
|
heap
|
page read and write
|
||
|
240C000
|
direct allocation
|
page read and write
|
||
|
66F000
|
unkown
|
page read and write
|
||
|
6D242000
|
unkown
|
page readonly
|
||
|
37AC000
|
heap
|
page read and write
|
||
|
2341000
|
direct allocation
|
page read and write
|
||
|
6CF31000
|
unkown
|
page execute read
|
||
|
2603000
|
heap
|
page read and write
|
||
|
385E000
|
heap
|
page read and write
|
||
|
370D000
|
unkown
|
page readonly
|
||
|
3A31000
|
heap
|
page read and write
|
||
|
3B11000
|
heap
|
page read and write
|
||
|
87D000
|
heap
|
page read and write
|
||
|
3B66000
|
heap
|
page read and write
|
||
|
230F000
|
direct allocation
|
page read and write
|
||
|
3825000
|
heap
|
page read and write
|
||
|
3833000
|
heap
|
page read and write
|
||
|
6D251000
|
unkown
|
page execute read
|
||
|
10080000
|
unkown
|
page read and write
|
||
|
3671000
|
direct allocation
|
page read and write
|
||
|
6D250000
|
unkown
|
page readonly
|
||
|
3AF6000
|
heap
|
page read and write
|
||
|
93000
|
stack
|
page read and write
|
||
|
8A5000
|
heap
|
page read and write
|
||
|
232C000
|
direct allocation
|
page read and write
|
||
|
3B05000
|
heap
|
page read and write
|
||
|
3B5C000
|
heap
|
page read and write
|
||
|
383F000
|
heap
|
page read and write
|
||
|
3B44000
|
heap
|
page read and write
|
||
|
3B99000
|
heap
|
page read and write
|
||
|
37AC000
|
heap
|
page read and write
|
||
|
3B2B000
|
heap
|
page read and write
|
||
|
660000
|
heap
|
page read and write
|
||
|
6D011000
|
unkown
|
page write copy
|
||
|
6CF13000
|
unkown
|
page readonly
|
||
|
3B05000
|
heap
|
page read and write
|
||
|
6CEE1000
|
unkown
|
page execute read
|
||
|
3BA2000
|
heap
|
page read and write
|
||
|
3849000
|
heap
|
page read and write
|
||
|
830000
|
heap
|
page read and write
|
||
|
381A000
|
heap
|
page read and write
|
||
|
36E0000
|
unkown
|
page readonly
|
||
|
25F0000
|
direct allocation
|
page read and write
|
||
|
3824000
|
heap
|
page read and write
|
||
|
3A69000
|
heap
|
page read and write
|
||
|
3B4F000
|
heap
|
page read and write
|
||
|
3B13000
|
heap
|
page read and write
|
||
|
2319000
|
direct allocation
|
page read and write
|
||
|
383B000
|
heap
|
page read and write
|
||
|
3851000
|
heap
|
page read and write
|
||
|
3564000
|
direct allocation
|
page read and write
|
||
|
234A000
|
direct allocation
|
page read and write
|
||
|
6D00F000
|
unkown
|
page read and write
|
||
|
6D332000
|
unkown
|
page readonly
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
37D1000
|
heap
|
page read and write
|
||
|
668000
|
unkown
|
page read and write
|
||
|
3578000
|
direct allocation
|
page read and write
|
||
|
384F000
|
heap
|
page read and write
|
||
|
3848000
|
heap
|
page read and write
|
||
|
233B000
|
direct allocation
|
page read and write
|
||
|
4C0000
|
unkown
|
page read and write
|
||
|
3B0C000
|
heap
|
page read and write
|
||
|
22EA000
|
direct allocation
|
page read and write
|
||
|
6D017000
|
unkown
|
page readonly
|
||
|
3667000
|
direct allocation
|
page read and write
|
||
|
35ED000
|
direct allocation
|
page read and write
|
||
|
3B1B000
|
heap
|
page read and write
|
||
|
878000
|
heap
|
page read and write
|
||
|
835000
|
heap
|
page read and write
|
||
|
3848000
|
heap
|
page read and write
|
||
|
36A0000
|
direct allocation
|
page read and write
|
||
|
3B39000
|
heap
|
page read and write
|
||
|
848000
|
heap
|
page read and write
|
||
|
3A48000
|
heap
|
page read and write
|
||
|
2560000
|
direct allocation
|
page execute and read and write
|
||
|
3856000
|
heap
|
page read and write
|
||
|
23CA000
|
direct allocation
|
page read and write
|
||
|
6D016000
|
unkown
|
page write copy
|
||
|
19D000
|
stack
|
page read and write
|
||
|
3B37000
|
heap
|
page read and write
|
||
|
363A000
|
direct allocation
|
page read and write
|
||
|
3B95000
|
heap
|
page read and write
|
||
|
22A5000
|
direct allocation
|
page read and write
|
||
|
6D349000
|
unkown
|
page readonly
|
||
|
3B13000
|
heap
|
page read and write
|
||
|
2970000
|
heap
|
page read and write
|
||
|
3819000
|
heap
|
page read and write
|
||
|
22BA000
|
direct allocation
|
page read and write
|
||
|
10086000
|
unkown
|
page read and write
|
||
|
399F000
|
stack
|
page read and write
|
||
|
6D150000
|
unkown
|
page readonly
|
||
|
3797000
|
heap
|
page read and write
|
||
|
6D1C0000
|
unkown
|
page readonly
|
||
|
385D000
|
heap
|
page read and write
|
||
|
2348000
|
direct allocation
|
page read and write
|
||
|
3B2B000
|
heap
|
page read and write
|
||
|
3760000
|
heap
|
page read and write
|
||
|
840000
|
heap
|
page read and write
|
||
|
6D2BC000
|
unkown
|
page readonly
|
||
|
4B7000
|
unkown
|
page write copy
|
||
|
385A000
|
heap
|
page read and write
|
||
|
907E000
|
stack
|
page read and write
|
||
|
3845000
|
heap
|
page read and write
|
||
|
3827000
|
heap
|
page read and write
|
||
|
3B81000
|
heap
|
page read and write
|
||
|
22AC000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
6D2D1000
|
unkown
|
page execute read
|
||
|
3B9C000
|
heap
|
page read and write
|
||
|
383C000
|
heap
|
page read and write
|
||
|
37D4000
|
heap
|
page read and write
|
||
|
3AA5000
|
heap
|
page read and write
|
||
|
902000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3B60000
|
heap
|
page read and write
|
||
|
88F000
|
heap
|
page read and write
|
||
|
6CF23000
|
unkown
|
page readonly
|
||
|
360C000
|
direct allocation
|
page read and write
|
||
|
35D2000
|
direct allocation
|
page read and write
|
||
|
4C6000
|
unkown
|
page readonly
|
||
|
2358000
|
direct allocation
|
page read and write
|
||
|
6D225000
|
unkown
|
page readonly
|
||
|
3A56000
|
heap
|
page read and write
|
||
|
3814000
|
heap
|
page read and write
|
||
|
231D000
|
direct allocation
|
page read and write
|
||
|
670000
|
unkown
|
page readonly
|
||
|
65D000
|
unkown
|
page read and write
|
||
|
6CF30000
|
unkown
|
page readonly
|
||
|
22B3000
|
direct allocation
|
page read and write
|
||
|
3B05000
|
heap
|
page read and write
|
||
|
36FF000
|
unkown
|
page readonly
|
||
|
3B1D000
|
heap
|
page read and write
|
||
|
381A000
|
heap
|
page read and write
|
||
|
10064000
|
unkown
|
page write copy
|
||
|
6CF1F000
|
unkown
|
page write copy
|
||
|
6D0F3000
|
unkown
|
page readonly
|
||
|
3A30000
|
heap
|
page read and write
|
||
|
3B08000
|
heap
|
page read and write
|
||
|
385E000
|
heap
|
page read and write
|
||
|
3845000
|
heap
|
page read and write
|
||
|
3540000
|
direct allocation
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
6D1AF000
|
unkown
|
page read and write
|
||
|
3BA2000
|
heap
|
page read and write
|
||
|
6D1C1000
|
unkown
|
page execute read
|
||
|
3B99000
|
heap
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
3853000
|
heap
|
page read and write
|
||
|
3B09000
|
heap
|
page read and write
|
||
|
4D0000
|
heap
|
page read and write
|
||
|
35A4000
|
direct allocation
|
page read and write
|
||
|
3B14000
|
heap
|
page read and write
|
||
|
3840000
|
heap
|
page read and write
|
||
|
239D000
|
direct allocation
|
page read and write
|
||
|
3A65000
|
heap
|
page read and write
|
||
|
3678000
|
direct allocation
|
page read and write
|
||
|
2342000
|
direct allocation
|
page read and write
|
||
|
39AA000
|
heap
|
page read and write
|
||
|
37AC000
|
heap
|
page read and write
|
||
|
385D000
|
heap
|
page read and write
|
||
|
36E1000
|
unkown
|
page execute read
|
||
|
385B000
|
heap
|
page read and write
|
||
|
3B1E000
|
heap
|
page read and write
|
||
|
3B62000
|
heap
|
page read and write
|
||
|
22F8000
|
direct allocation
|
page read and write
|
||
|
3B4F000
|
heap
|
page read and write
|
||
|
6D23D000
|
unkown
|
page read and write
|
||
|
6E8C1000
|
unkown
|
page execute read
|
||
|
3A84000
|
heap
|
page read and write
|
There are 387 hidden memdumps, click here to show them.