Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
cClRqPh29S.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\cClRqPh29S.exe.log
|
ASCII text, with CRLF line terminators
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\cClRqPh29S.exe
|
"C:\Users\user\Desktop\cClRqPh29S.exe"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/sc/sct
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
|
unknown
|
||
http://tempuri.org/Entity/Id14ResponseD
|
unknown
|
||
http://tempuri.org/Entity/Id23ResponseD
|
unknown
|
||
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
|
unknown
|
||
http://tempuri.org/Entity/Id12Response
|
unknown
|
||
http://tempuri.org/
|
unknown
|
||
http://tempuri.org/Entity/Id2Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
|
unknown
|
||
http://tempuri.org/Entity/Id21Response
|
unknown
|
||
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
|
unknown
|
||
http://tempuri.org/Entity/Id9
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
|
unknown
|
||
http://tempuri.org/Entity/Id8
|
unknown
|
||
http://tempuri.org/Entity/Id6ResponseD
|
unknown
|
||
http://tempuri.org/Entity/Id5
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
|
unknown
|
||
http://tempuri.org/Entity/Id4
|
unknown
|
||
http://tempuri.org/Entity/Id7
|
unknown
|
||
http://purl.oen
|
unknown
|
||
http://tempuri.org/Entity/Id6
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
|
unknown
|
||
http://tempuri.org/Entity/Id19Response
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
|
unknown
|
||
http://tempuri.org/Entity/Id13ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
|
unknown
|
||
http://tempuri.org/Entity/Id15Response
|
unknown
|
||
http://tempuri.org/Entity/Id5ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
|
unknown
|
||
http://tempuri.org/Entity/Id6Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
|
unknown
|
||
https://api.ip.sb/ip
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/sc
|
unknown
|
||
http://tempuri.org/Entity/Id1ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
|
unknown
|
||
http://tempuri.org/Entity/Id9Response
|
unknown
|
||
http://tempuri.org/Entity/Id20
|
unknown
|
||
http://tempuri.org/Entity/Id21
|
unknown
|
||
http://tempuri.org/Entity/Id22
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
|
unknown
|
||
http://tempuri.org/Entity/Id23
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
|
unknown
|
||
http://tempuri.org/Entity/Id24
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
|
unknown
|
||
http://tempuri.org/Entity/Id24Response
|
unknown
|
||
http://tempuri.org/Entity/Id1Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
|
unknown
|
||
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
|
unknown
|
||
http://tempuri.org/Entity/Id21ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/trust
|
unknown
|
||
http://tempuri.org/Entity/Id10
|
unknown
|
||
http://tempuri.org/Entity/Id11
|
unknown
|
||
http://tempuri.org/Entity/Id10ResponseD
|
unknown
|
||
http://tempuri.org/Entity/Id12
|
unknown
|
||
http://tempuri.org/Entity/Id16Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
|
unknown
|
||
http://tempuri.org/Entity/Id13
|
unknown
|
||
http://tempuri.org/Entity/Id14
|
unknown
|
||
http://tempuri.org/Entity/Id15
|
unknown
|
||
http://tempuri.org/Entity/Id16
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
|
unknown
|
||
http://tempuri.org/Entity/Id17
|
unknown
|
||
http://tempuri.org/Entity/Id18
|
unknown
|
||
http://tempuri.org/Entity/Id5Response
|
unknown
|
||
http://tempuri.org/Entity/Id19
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
|
unknown
|
||
http://tempuri.org/Entity/Id15ResponseD
|
unknown
|
||
http://tempuri.org/Entity/Id10Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
|
unknown
|
||
http://tempuri.org/Entity/Id11ResponseD
|
unknown
|
||
http://tempuri.org/Entity/Id8Response
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
|
unknown
|
||
http://tempuri.org/Entity/Id17ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/soap/envelope/
|
unknown
|
||
http://tempuri.org/Entity/Id8ResponseD
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
|
unknown
|
||
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2005/02/trust
|
unknown
|
There are 90 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
185.215.113.67
|
unknown
|
Portugal
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFiles0000
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
RegFilesHash
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
9E2000
|
unkown
|
page readonly
|
||
1310000
|
trusted library allocation
|
page read and write
|
||
7225000
|
trusted library allocation
|
page read and write
|
||
407B000
|
trusted library allocation
|
page read and write
|
||
131A000
|
trusted library allocation
|
page execute and read and write
|
||
6F7E000
|
heap
|
page read and write
|
||
7440000
|
trusted library allocation
|
page execute and read and write
|
||
2C3C000
|
stack
|
page read and write
|
||
5780000
|
trusted library allocation
|
page read and write
|
||
5460000
|
trusted library allocation
|
page read and write
|
||
3071000
|
trusted library allocation
|
page read and write
|
||
3217000
|
trusted library allocation
|
page read and write
|
||
403C000
|
trusted library allocation
|
page read and write
|
||
5480000
|
heap
|
page read and write
|
||
FB4000
|
trusted library allocation
|
page read and write
|
||
FC0000
|
heap
|
page read and write
|
||
5F9C000
|
heap
|
page read and write
|
||
71E0000
|
trusted library allocation
|
page read and write
|
||
4043000
|
trusted library allocation
|
page read and write
|
||
FB3000
|
trusted library allocation
|
page execute and read and write
|
||
41EC000
|
trusted library allocation
|
page read and write
|
||
7230000
|
heap
|
page read and write
|
||
BB7000
|
stack
|
page read and write
|
||
2D20000
|
heap
|
page read and write
|
||
4164000
|
trusted library allocation
|
page read and write
|
||
4102000
|
trusted library allocation
|
page read and write
|
||
3FF7000
|
trusted library allocation
|
page read and write
|
||
41D8000
|
trusted library allocation
|
page read and write
|
||
6024000
|
heap
|
page read and write
|
||
6F84000
|
heap
|
page read and write
|
||
74CE000
|
stack
|
page read and write
|
||
AB9000
|
stack
|
page read and write
|
||
5700000
|
trusted library allocation
|
page read and write
|
||
6EFB000
|
trusted library allocation
|
page read and write
|
||
12FF000
|
stack
|
page read and write
|
||
3331000
|
trusted library allocation
|
page read and write
|
||
3241000
|
trusted library allocation
|
page read and write
|
||
57C0000
|
trusted library allocation
|
page execute and read and write
|
||
52A0000
|
heap
|
page read and write
|
||
40A8000
|
trusted library allocation
|
page read and write
|
||
71E2000
|
trusted library allocation
|
page read and write
|
||
4266000
|
trusted library allocation
|
page read and write
|
||
4240000
|
trusted library allocation
|
page read and write
|
||
401F000
|
trusted library allocation
|
page read and write
|
||
2F2A000
|
trusted library allocation
|
page read and write
|
||
40CC000
|
trusted library allocation
|
page read and write
|
||
63B0000
|
trusted library allocation
|
page execute and read and write
|
||
3FF2000
|
trusted library allocation
|
page read and write
|
||
741C000
|
trusted library allocation
|
page read and write
|
||
3E51000
|
trusted library allocation
|
page read and write
|
||
A10000
|
unkown
|
page readonly
|
||
31DF000
|
trusted library allocation
|
page read and write
|
||
2FE9000
|
trusted library allocation
|
page read and write
|
||
56E0000
|
trusted library allocation
|
page execute and read and write
|
||
4203000
|
trusted library allocation
|
page read and write
|
||
30D3000
|
trusted library allocation
|
page read and write
|
||
2CAD000
|
trusted library allocation
|
page read and write
|
||
719C000
|
stack
|
page read and write
|
||
415B000
|
trusted library allocation
|
page read and write
|
||
11BE000
|
stack
|
page read and write
|
||
4032000
|
trusted library allocation
|
page read and write
|
||
32B3000
|
trusted library allocation
|
page read and write
|
||
329A000
|
trusted library allocation
|
page read and write
|
||
2CC0000
|
trusted library allocation
|
page read and write
|
||
7210000
|
trusted library allocation
|
page read and write
|
||
3195000
|
trusted library allocation
|
page read and write
|
||
32A9000
|
trusted library allocation
|
page read and write
|
||
7214000
|
trusted library allocation
|
page read and write
|
||
1327000
|
trusted library allocation
|
page execute and read and write
|
||
E40000
|
heap
|
page read and write
|
||
3FBF000
|
trusted library allocation
|
page read and write
|
||
40BE000
|
trusted library allocation
|
page read and write
|
||
1390000
|
heap
|
page read and write
|
||
2C84000
|
trusted library allocation
|
page read and write
|
||
3328000
|
trusted library allocation
|
page read and write
|
||
6EF8000
|
trusted library allocation
|
page read and write
|
||
541D000
|
stack
|
page read and write
|
||
7222000
|
trusted library allocation
|
page read and write
|
||
52F0000
|
trusted library allocation
|
page read and write
|
||
1089000
|
heap
|
page read and write
|
||
A24000
|
unkown
|
page readonly
|
||
6F64000
|
heap
|
page read and write
|
||
6EF0000
|
trusted library allocation
|
page read and write
|
||
52B0000
|
trusted library allocation
|
page read and write
|
||
3231000
|
trusted library allocation
|
page read and write
|
||
2F22000
|
trusted library allocation
|
page read and write
|
||
2C40000
|
heap
|
page execute and read and write
|
||
5F88000
|
heap
|
page read and write
|
||
333A000
|
trusted library allocation
|
page read and write
|
||
7400000
|
trusted library allocation
|
page read and write
|
||
4069000
|
trusted library allocation
|
page read and write
|
||
2C80000
|
trusted library allocation
|
page read and write
|
||
FE6000
|
heap
|
page read and write
|
||
720F000
|
trusted library allocation
|
page read and write
|
||
5442000
|
trusted library allocation
|
page read and write
|
||
8251000
|
heap
|
page read and write
|
||
602C000
|
heap
|
page read and write
|
||
5FEA000
|
heap
|
page read and write
|
||
A15000
|
unkown
|
page readonly
|
||
308C000
|
trusted library allocation
|
page read and write
|
||
32A7000
|
trusted library allocation
|
page read and write
|
||
404F000
|
trusted library allocation
|
page read and write
|
||
56D0000
|
trusted library allocation
|
page read and write
|
||
4116000
|
trusted library allocation
|
page read and write
|
||
7008000
|
heap
|
page read and write
|
||
73FE000
|
stack
|
page read and write
|
||
109F000
|
heap
|
page read and write
|
||
2EC5000
|
trusted library allocation
|
page read and write
|
||
2C50000
|
trusted library allocation
|
page execute and read and write
|
||
71F8000
|
trusted library allocation
|
page read and write
|
||
1058000
|
heap
|
page read and write
|
||
3191000
|
trusted library allocation
|
page read and write
|
||
53C0000
|
trusted library allocation
|
page read and write
|
||
791F000
|
stack
|
page read and write
|
||
3FB3000
|
trusted library allocation
|
page read and write
|
||
4242000
|
trusted library allocation
|
page read and write
|
||
FBD000
|
trusted library allocation
|
page execute and read and write
|
||
71E5000
|
trusted library allocation
|
page read and write
|
||
414E000
|
trusted library allocation
|
page read and write
|
||
5F58000
|
heap
|
page read and write
|
||
2C70000
|
trusted library allocation
|
page read and write
|
||
5436000
|
trusted library allocation
|
page read and write
|
||
653E000
|
stack
|
page read and write
|
||
2CF0000
|
trusted library allocation
|
page read and write
|
||
FB0000
|
trusted library allocation
|
page read and write
|
||
4208000
|
trusted library allocation
|
page read and write
|
||
4128000
|
trusted library allocation
|
page read and write
|
||
130D000
|
trusted library allocation
|
page execute and read and write
|
||
2CE5000
|
trusted library allocation
|
page read and write
|
||
105C000
|
heap
|
page read and write
|
||
4121000
|
trusted library allocation
|
page read and write
|
||
63A0000
|
trusted library allocation
|
page read and write
|
||
307F000
|
trusted library allocation
|
page read and write
|
||
40F5000
|
trusted library allocation
|
page read and write
|
||
3E3F000
|
trusted library allocation
|
page read and write
|
||
10B5000
|
heap
|
page read and write
|
||
3179000
|
trusted library allocation
|
page read and write
|
||
750E000
|
stack
|
page read and write
|
||
623E000
|
stack
|
page read and write
|
||
31A1000
|
trusted library allocation
|
page read and write
|
||
53CE000
|
trusted library allocation
|
page read and write
|
||
4248000
|
trusted library allocation
|
page read and write
|
||
5F80000
|
heap
|
page read and write
|
||
2C9E000
|
trusted library allocation
|
page read and write
|
||
4025000
|
trusted library allocation
|
page read and write
|
||
416A000
|
trusted library allocation
|
page read and write
|
||
30B8000
|
trusted library allocation
|
page read and write
|
||
30B2000
|
trusted library allocation
|
page read and write
|
||
32B0000
|
trusted library allocation
|
page read and write
|
||
5750000
|
trusted library allocation
|
page execute and read and write
|
||
53D3000
|
heap
|
page read and write
|
||
52B2000
|
trusted library allocation
|
page read and write
|
||
3290000
|
trusted library allocation
|
page read and write
|
||
40B5000
|
trusted library allocation
|
page read and write
|
||
30A0000
|
trusted library allocation
|
page read and write
|
||
40D1000
|
trusted library allocation
|
page read and write
|
||
3EB1000
|
trusted library allocation
|
page read and write
|
||
63FC000
|
stack
|
page read and write
|
||
71A0000
|
heap
|
page read and write
|
||
52C0000
|
trusted library allocation
|
page execute and read and write
|
||
1005000
|
heap
|
page read and write
|
||
7410000
|
trusted library allocation
|
page read and write
|
||
3172000
|
trusted library allocation
|
page read and write
|
||
6FBC000
|
heap
|
page read and write
|
||
32B5000
|
trusted library allocation
|
page read and write
|
||
56F0000
|
trusted library allocation
|
page read and write
|
||
2CA1000
|
trusted library allocation
|
page read and write
|
||
3E73000
|
trusted library allocation
|
page read and write
|
||
3139000
|
trusted library allocation
|
page read and write
|
||
422A000
|
trusted library allocation
|
page read and write
|
||
3313000
|
trusted library allocation
|
page read and write
|
||
6020000
|
heap
|
page read and write
|
||
2E31000
|
trusted library allocation
|
page read and write
|
||
3073000
|
trusted library allocation
|
page read and write
|
||
1340000
|
trusted library allocation
|
page read and write
|
||
4273000
|
trusted library allocation
|
page read and write
|
||
9E0000
|
unkown
|
page readonly
|
||
2FF2000
|
trusted library allocation
|
page read and write
|
||
41CD000
|
trusted library allocation
|
page read and write
|
||
52D8000
|
trusted library allocation
|
page read and write
|
||
314A000
|
trusted library allocation
|
page read and write
|
||
5431000
|
trusted library allocation
|
page read and write
|
||
73AD000
|
stack
|
page read and write
|
||
40C4000
|
trusted library allocation
|
page read and write
|
||
6037000
|
heap
|
page read and write
|
||
4172000
|
trusted library allocation
|
page read and write
|
||
318B000
|
trusted library allocation
|
page read and write
|
||
54A0000
|
trusted library allocation
|
page read and write
|
||
2D10000
|
trusted library allocation
|
page read and write
|
||
78DE000
|
stack
|
page read and write
|
||
5760000
|
trusted library allocation
|
page execute and read and write
|
||
3158000
|
trusted library allocation
|
page read and write
|
||
3165000
|
trusted library allocation
|
page read and write
|
||
3102000
|
trusted library allocation
|
page read and write
|
||
4234000
|
trusted library allocation
|
page read and write
|
||
3FD9000
|
trusted library allocation
|
page read and write
|
||
1316000
|
trusted library allocation
|
page execute and read and write
|
||
6011000
|
heap
|
page read and write
|
||
3334000
|
trusted library allocation
|
page read and write
|
||
7A5E000
|
stack
|
page read and write
|
||
4097000
|
trusted library allocation
|
page read and write
|
||
2FED000
|
trusted library allocation
|
page read and write
|
||
57A0000
|
trusted library allocation
|
page read and write
|
||
2FDB000
|
trusted library allocation
|
page read and write
|
||
7430000
|
trusted library allocation
|
page execute and read and write
|
||
5FA5000
|
heap
|
page read and write
|
||
40A2000
|
trusted library allocation
|
page read and write
|
||
57B0000
|
trusted library allocation
|
page read and write
|
||
596E000
|
stack
|
page read and write
|
||
748E000
|
stack
|
page read and write
|
||
5470000
|
trusted library allocation
|
page read and write
|
||
4F2B000
|
stack
|
page read and write
|
||
57D0000
|
trusted library allocation
|
page execute and read and write
|
||
54D0000
|
heap
|
page execute and read and write
|
||
601E000
|
heap
|
page read and write
|
||
423A000
|
trusted library allocation
|
page read and write
|
||
EB0000
|
heap
|
page read and write
|
||
2FE6000
|
trusted library allocation
|
page read and write
|
||
4082000
|
trusted library allocation
|
page read and write
|
||
32A3000
|
trusted library allocation
|
page read and write
|
||
13BE000
|
heap
|
page read and write
|
||
8240000
|
heap
|
page read and write
|
||
627E000
|
stack
|
page read and write
|
||
3FFC000
|
trusted library allocation
|
page read and write
|
||
41E5000
|
trusted library allocation
|
page read and write
|
||
FCE000
|
heap
|
page read and write
|
||
613E000
|
stack
|
page read and write
|
||
E8E000
|
stack
|
page read and write
|
||
3264000
|
trusted library allocation
|
page read and write
|
||
3336000
|
trusted library allocation
|
page read and write
|
||
3E31000
|
trusted library allocation
|
page read and write
|
||
32B9000
|
trusted library allocation
|
page read and write
|
||
EB5000
|
heap
|
page read and write
|
||
412D000
|
trusted library allocation
|
page read and write
|
||
6CBE000
|
stack
|
page read and write
|
||
73B0000
|
trusted library allocation
|
page execute and read and write
|
||
2FF0000
|
trusted library allocation
|
page read and write
|
||
7220000
|
trusted library allocation
|
page read and write
|
||
4154000
|
trusted library allocation
|
page read and write
|
||
2CB2000
|
trusted library allocation
|
page read and write
|
||
71E9000
|
trusted library allocation
|
page read and write
|
||
4070000
|
trusted library allocation
|
page read and write
|
||
2B68000
|
trusted library allocation
|
page read and write
|
||
7340000
|
trusted library allocation
|
page read and write
|
||
40C7000
|
trusted library allocation
|
page read and write
|
||
314C000
|
trusted library allocation
|
page read and write
|
||
5F96000
|
heap
|
page read and write
|
||
3060000
|
trusted library allocation
|
page read and write
|
||
5420000
|
trusted library allocation
|
page read and write
|
||
32DC000
|
trusted library allocation
|
page read and write
|
||
64FC000
|
stack
|
page read and write
|
||
2CA6000
|
trusted library allocation
|
page read and write
|
||
333F000
|
trusted library allocation
|
page read and write
|
||
3029000
|
trusted library allocation
|
page read and write
|
||
11FD000
|
stack
|
page read and write
|
||
FA0000
|
trusted library allocation
|
page read and write
|
||
6DC0000
|
heap
|
page read and write
|
||
77DE000
|
stack
|
page read and write
|
||
6F00000
|
trusted library allocation
|
page read and write
|
||
600C000
|
heap
|
page read and write
|
||
408C000
|
trusted library allocation
|
page read and write
|
||
2FFA000
|
trusted library allocation
|
page read and write
|
||
41CB000
|
trusted library allocation
|
page read and write
|
||
53C5000
|
trusted library allocation
|
page read and write
|
||
5FD5000
|
heap
|
page read and write
|
||
FF4000
|
heap
|
page read and write
|
||
41AF000
|
trusted library allocation
|
page read and write
|
||
2C8B000
|
trusted library allocation
|
page read and write
|
||
13B6000
|
heap
|
page read and write
|
||
416C000
|
trusted library allocation
|
page read and write
|
||
3FEB000
|
trusted library allocation
|
page read and write
|
||
4147000
|
trusted library allocation
|
page read and write
|
||
30BC000
|
trusted library allocation
|
page read and write
|
||
415E000
|
trusted library allocation
|
page read and write
|
||
423D000
|
trusted library allocation
|
page read and write
|
||
52D0000
|
trusted library allocation
|
page read and write
|
||
E20000
|
heap
|
page read and write
|
||
138E000
|
stack
|
page read and write
|
||
4037000
|
trusted library allocation
|
page read and write
|
||
4213000
|
trusted library allocation
|
page read and write
|
||
6F60000
|
heap
|
page read and write
|
||
7420000
|
trusted library allocation
|
page read and write
|
||
13B0000
|
heap
|
page read and write
|
||
544E000
|
trusted library allocation
|
page read and write
|
||
421D000
|
trusted library allocation
|
page read and write
|
||
3FCC000
|
trusted library allocation
|
page read and write
|
||
63A9000
|
trusted library allocation
|
page read and write
|
||
410F000
|
trusted library allocation
|
page read and write
|
||
5F40000
|
heap
|
page read and write
|
||
4224000
|
trusted library allocation
|
page read and write
|
||
5770000
|
trusted library allocation
|
page read and write
|
||
592E000
|
stack
|
page read and write
|
||
3324000
|
trusted library allocation
|
page read and write
|
||
542B000
|
trusted library allocation
|
page read and write
|
||
53B1000
|
trusted library allocation
|
page read and write
|
||
3394000
|
trusted library allocation
|
page read and write
|
||
1007000
|
heap
|
page read and write
|
||
6380000
|
trusted library allocation
|
page read and write
|
||
795D000
|
stack
|
page read and write
|
||
4132000
|
trusted library allocation
|
page read and write
|
||
30C8000
|
trusted library allocation
|
page read and write
|
||
7205000
|
trusted library allocation
|
page read and write
|
||
8256000
|
heap
|
page read and write
|
||
6FC4000
|
heap
|
page read and write
|
||
424D000
|
trusted library allocation
|
page read and write
|
||
3184000
|
trusted library allocation
|
page read and write
|
||
5790000
|
trusted library allocation
|
page execute and read and write
|
||
4167000
|
trusted library allocation
|
page read and write
|
||
32BE000
|
trusted library allocation
|
page read and write
|
||
2C60000
|
trusted library allocation
|
page read and write
|
||
40C2000
|
trusted library allocation
|
page read and write
|
||
2FDE000
|
trusted library allocation
|
page read and write
|
||
6FA1000
|
heap
|
page read and write
|
||
4034000
|
trusted library allocation
|
page read and write
|
||
6EE0000
|
trusted library allocation
|
page execute and read and write
|
||
1325000
|
trusted library allocation
|
page execute and read and write
|
||
5FB3000
|
heap
|
page read and write
|
||
5490000
|
trusted library allocation
|
page read and write
|
||
6006000
|
heap
|
page read and write
|
||
1320000
|
trusted library allocation
|
page read and write
|
||
4029000
|
trusted library allocation
|
page read and write
|
||
2E2E000
|
stack
|
page read and write
|
||
4018000
|
trusted library allocation
|
page read and write
|
||
405C000
|
trusted library allocation
|
page read and write
|
||
1001000
|
heap
|
page read and write
|
||
41FE000
|
trusted library allocation
|
page read and write
|
||
3099000
|
trusted library allocation
|
page read and write
|
||
7F4B0000
|
trusted library allocation
|
page execute and read and write
|
||
4012000
|
trusted library allocation
|
page read and write
|
||
2CD0000
|
trusted library allocation
|
page read and write
|
||
40E9000
|
trusted library allocation
|
page read and write
|
||
71D0000
|
trusted library allocation
|
page read and write
|
||
7010000
|
heap
|
page read and write
|
||
1060000
|
heap
|
page read and write
|
||
4231000
|
trusted library allocation
|
page read and write
|
||
720A000
|
trusted library allocation
|
page read and write
|
||
413D000
|
trusted library allocation
|
page read and write
|
||
1312000
|
trusted library allocation
|
page read and write
|
||
3221000
|
trusted library allocation
|
page read and write
|
||
40B9000
|
trusted library allocation
|
page read and write
|
||
53D0000
|
heap
|
page read and write
|
||
30AB000
|
trusted library allocation
|
page read and write
|
||
2CE0000
|
trusted library allocation
|
page read and write
|
||
2CDE000
|
trusted library allocation
|
page read and write
|
||
5451000
|
trusted library allocation
|
page read and write
|
||
6ED0000
|
trusted library allocation
|
page read and write
|
||
3FE0000
|
trusted library allocation
|
page read and write
|
||
71FA000
|
trusted library allocation
|
page read and write
|
||
733E000
|
stack
|
page read and write
|
||
5F83000
|
heap
|
page read and write
|
||
6C7C000
|
stack
|
page read and write
|
||
53CB000
|
trusted library allocation
|
page read and write
|
||
31AC000
|
trusted library allocation
|
page read and write
|
||
E30000
|
heap
|
page read and write
|
||
132B000
|
trusted library allocation
|
page execute and read and write
|
||
6DBD000
|
stack
|
page read and write
|
||
41F7000
|
trusted library allocation
|
page read and write
|
||
1300000
|
trusted library allocation
|
page read and write
|
||
637E000
|
stack
|
page read and write
|
||
5F71000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
4087000
|
trusted library allocation
|
page read and write
|
||
402E000
|
trusted library allocation
|
page read and write
|
||
10A3000
|
heap
|
page read and write
|
||
40AF000
|
trusted library allocation
|
page read and write
|
||
52DA000
|
trusted library allocation
|
page read and write
|
||
1322000
|
trusted library allocation
|
page read and write
|
||
4007000
|
trusted library allocation
|
page read and write
|
||
56CE000
|
stack
|
page read and write
|
||
2FE1000
|
trusted library allocation
|
page read and write
|
||
52D5000
|
trusted library allocation
|
page read and write
|
||
4187000
|
trusted library allocation
|
page read and write
|
||
545A000
|
trusted library allocation
|
page read and write
|
||
332A000
|
trusted library allocation
|
page read and write
|
||
71FF000
|
trusted library allocation
|
page read and write
|
There are 365 hidden memdumps, click here to show them.