IOC Report
Shipping Document.exe

loading gif

Files

File Path
Type
Category
Malicious
Shipping Document.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Temp\33sf7m69
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
modified
C:\Users\user\AppData\Local\Temp\autA2D7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\autA317.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\soliloquised
data
dropped
C:\Users\user\AppData\Local\Temp\thixophobia
ASCII text, with very long lines (29748), with no line terminators
modified

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Shipping Document.exe
"C:\Users\user\Desktop\Shipping Document.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\Desktop\Shipping Document.exe"
 malicious
C:\Program Files (x86)\oRaHmvfHWYZzFEfwbxQgAeJyPjGSHxrfxbuOcRfPhgphNnWIjpjKGasKyUEFMfgPzJomMLDtClGs\tvtoHmZUTcBKRIVpHYXPXI.exe
"C:\Program Files (x86)\oRaHmvfHWYZzFEfwbxQgAeJyPjGSHxrfxbuOcRfPhgphNnWIjpjKGasKyUEFMfgPzJomMLDtClGs\tvtoHmZUTcBKRIVpHYXPXI.exe"
malicious
C:\Windows\SysWOW64\certreq.exe
"C:\Windows\SysWOW64\certreq.exe"
 malicious
C:\Program Files (x86)\oRaHmvfHWYZzFEfwbxQgAeJyPjGSHxrfxbuOcRfPhgphNnWIjpjKGasKyUEFMfgPzJomMLDtClGs\tvtoHmZUTcBKRIVpHYXPXI.exe
"C:\Program Files (x86)\oRaHmvfHWYZzFEfwbxQgAeJyPjGSHxrfxbuOcRfPhgphNnWIjpjKGasKyUEFMfgPzJomMLDtClGs\tvtoHmZUTcBKRIVpHYXPXI.exe"
malicious
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\Firefox.exe"
 malicious

URLs

Name
IP
Malicious
http://www.performacetoyota.ca/opfh/
199.59.243.225
 malicious
http://www.busypro.net/opfh/
160.251.148.118
 malicious
http://www.swordshoop.ca/opfh/
199.59.243.225
 malicious
http://www.y94hr.top/opfh/
38.47.207.149
 malicious
http://www.pharmacielorraine.fr/opfh/?R40L6=FpNucvzIjWOmZMmiXb56c6bY69+Kb+n3d8h+TlHEUGgG180M1/D8mOTG6mRn1YM4wyonPK4hNo3l6hpm9fEjrGx3GgV25NLdT3AKPeddSoL4M+kWNe1Dr4885y6woZHnwBfR8wPvVVyX&b2PX=hZXl7VFPKl04
91.195.240.92
 malicious
http://www.drapples.club/opfh/
199.59.243.225
 malicious
http://www.pharmacielorraine.fr/opfh/
91.195.240.92
 malicious
http://www.ukscan.co.uk/opfh/?R40L6=psz/lQNJHky0FOXgYDlRBO31u/UTIg5Z7J5/vGqoP1XE+s8tr2C67qXiCqgsbd7PhBjn/lOTwSnvTpIgb8gb5UyiwGIV81pY4xefKgdN39cek8LArgSLQN3X1wfTB8wzGIcdBGhl9zAd&b2PX=hZXl7VFPKl04
3.33.130.190
 malicious
http://www.ukscan.co.uk/opfh/
3.33.130.190
 malicious
http://www.pricekaboom.com/opfh/
185.31.240.240
 malicious
http://www.gamemaster.at/opfh/?R40L6=PC685LTb06jHOCK4vGHbFQZ2xkI1XLFU2OtxALHCeHx3vCzda7v1dhtYxdz770kbIy0AX5udiNTwR8fzRWvU0kdzv6lB2tOiWMAiJN+HcPhB483U4R/s/Re5ANHairphm1/7Mj/vaUsb&b2PX=hZXl7VFPKl04
199.59.243.225
 malicious
http://www.ziontool.xyz/opfh/
203.161.43.227
 malicious
http://www.pricekaboom.com/opfh/?R40L6=i+7S41wOBsHRtkSR5z49LNLl1g14jCJSsH67VhPHZINUfWrbgsYvxB6MwE8qgxdKQETWoz01bCGz4LwvUs/3BJoUBrhuAwUbkATTebp7Ts+JQM1y8oWpV0wDLMDnSIORGtRyV6PjEdP1&b2PX=hZXl7VFPKl04
185.31.240.240
 malicious
http://www.y94hr.top/opfh/?R40L6=+MQIh7XosrcV1YUvfmXLRZp9qVlVCaTixn9Z4SHGNrQWXqYuOwa/VK9HsnlVTmeIhuhJsBbQG3swuyVkvGLKXJd4NOCZwBpwFucJm+lE/1jiLpvFuFHXohi2H4hODzVegRzQFrQhMICC&b2PX=hZXl7VFPKl04
38.47.207.149
 malicious
http://www.batchscraper.com/opfh/?R40L6=AGl44rzTw2dIC+2fJHSMY5CagqpMx9ss+xDw2ILHnY0V4XytCPUwKd/QF5kiL9X2gIgUWxZ6E+yGLjvXAstM4MAyIKs/O1HO2djzFZ+svgnMXhmr1Gwb4CXwLPvvhByMEXNfrkehm32q&b2PX=hZXl7VFPKl04
172.67.190.203
 malicious
http://www.autonomyai.xyz/opfh/
3.33.130.190
 malicious
http://www.busypro.net/opfh/?R40L6=wk5WmycUod9Ch4sGNMfw6PGGK537NvyqKve97Rqxx64bZj5Y6/ZXBsSfuT6LL9ibplMzreLTp4ANFGROZWA3htlR8tjUt25lxV/kg4OrCh2epctFiYjQQV8YBu8QEUXGE65qscSGJJfb&b2PX=hZXl7VFPKl04
160.251.148.118
 malicious
http://www.performacetoyota.ca/opfh/?R40L6=i4up9kvrIhZylhTl+TGF8NSB39il2c4qnhHhVcZTirCO4e+BACowf4KjePAiAuddepejX0cVJHKGxf87gLVZ3yhxJ+t5gkh7Sx8ygwwh5CFsGAn8/fc7zcPpOBOJ0Z4qUeJ8jZdFyiV9&b2PX=hZXl7VFPKl04
199.59.243.225
 malicious
http://www.fruitique.co.uk/opfh/
212.227.172.253
 malicious
http://www.annahaywardva.co.uk/opfh/?R40L6=rBeI5JL4SdE8nFW9pIUfBkvOLwnHMU9O9JCyLdspFwofGsVtAi0tgWeg3zHJ2XnwxoW6lgl8FdELwhlchXf8iZDZl79NZT9hgeyhr+mr8upFSzDJKwHDStxLaliRPfjpA6FezmrpjIYZ&b2PX=hZXl7VFPKl04
213.171.195.105
 malicious
http://www.annahaywardva.co.uk/opfh/
213.171.195.105
 malicious
http://www.ziontool.xyz/opfh/?R40L6=YUsgxJYlBZRF0No39lc3JbqbmV5Q7LZCTky4dVHopuN0Ho35s4wXwSWKkFKDUjWggieTnElUH3EcFS8A7QGjP8jAu/34q2WYLtH3kt2+sJ07P+s7RD70L6colfRzV4eR9N3BYmYWcCpx&b2PX=hZXl7VFPKl04
203.161.43.227
 malicious
http://www.drapples.club/opfh/?R40L6=ItiWO1iWeFtHa8hPek+OcHyLbef7ZgLT8jCYd//+XcZZdI8PxrJa9smp+DWZYnBxcEEGiLIUcWsNzCqVKSWt292FhOiPAibVi2DXZfZ1Bcb5xD1zZxmn+AopE2U6Sy6WzAqAlkUlqKwq&b2PX=hZXl7VFPKl04
199.59.243.225
 malicious
http://www.gamemaster.at/opfh/
199.59.243.225
 malicious
https://duckduckgo.com/chrome_newtab
unknown
https://duckduckgo.com/ac/?q=
unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
unknown
https://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/MorphSVGPlugin.min.js
unknown
https://s3-us-west-2.amazonaws.com/s.cdpn.io/16327/SplitText.min.js
unknown
http://www.auronhouse.com/opfh/
142.250.186.51
https://login.microsoftonline.com/%s/oauth2/authorizeStringCchPrintfWhttps://login.microsoftonline.c
unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
https://www.fasthosts.co.uk/domain-names/search/?domain=$
unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
http://www.auronhouse.com/opfh/?R40L6=7Wua4PKYKhchrV0dSktA0JoUSva1JJLdwMIZklFmHGZRtcxczCNUWysLgxYx/pnfXqYHMYy3waVzlkYFJZPX15RsNLA3Qz23CQiAilW87ptstt/8e1muReOX5esxW5+HpDKanOvxLVS9&b2PX=hZXl7VFPKl04
142.250.186.51
https://cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/TweenMax.min.js
unknown
https://www.ecosia.org/newtab/
unknown
https://ac.ecosia.org/autocomplete?q=
unknown
https://www.auronhouse.com/opfh/?R40L6=7Wua4PKYKhchrV0dSktA0JoUSva1JJLdwMIZklFmHGZRtcxczCNUWysLgxYx/
unknown
https://www.google.com
unknown
http://www.y94hr.top
unknown
https://fasthosts.co.uk/
unknown
https://www.fasthosts.co.uk/get-online?utm_source=domainparking&utm_medium=referral&utm_campaign=fh_
unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
unknown
https://static.fasthosts.co.uk/icons/favicon.ico
unknown
https://cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css
unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
unknown
https://www.fasthosts.co.uk/contact?utm_source=domainparking&utm_medium=referral&utm_campaign=fh_par
unknown
There are 38 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.pharmacielorraine.fr
91.195.240.92
 malicious
www.gamemaster.at
199.59.243.225
 malicious
www.annahaywardva.co.uk
213.171.195.105
 malicious
www.busypro.net
160.251.148.118
 malicious
www.fruitique.co.uk
212.227.172.253
 malicious
pricekaboom.com
185.31.240.240
 malicious
autonomyai.xyz
3.33.130.190
 malicious
www.performacetoyota.ca
199.59.243.225
 malicious
y94hr.top
38.47.207.149
 malicious
94950.bodis.com
199.59.243.225
 malicious
www.swordshoop.ca
199.59.243.225
 malicious
www.ziontool.xyz
203.161.43.227
 malicious
www.batchscraper.com
172.67.190.203
 malicious
ukscan.co.uk
3.33.130.190
 malicious
www.autonomyai.xyz
unknown
 malicious
www.auronhouse.com
unknown
 malicious
www.pricekaboom.com
unknown
 malicious
www.digishieldu.online
unknown
 malicious
www.ukscan.co.uk
unknown
 malicious
www.drapples.club
unknown
 malicious
www.y94hr.top
unknown
 malicious
ghs.googlehosted.com
142.250.186.51
There are 12 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
91.195.240.92
www.pharmacielorraine.fr
Germany
malicious
185.31.240.240
pricekaboom.com
Estonia
malicious
203.161.43.227
www.ziontool.xyz
Malaysia
malicious
160.251.148.118
www.busypro.net
Japan
malicious
212.227.172.253
www.fruitique.co.uk
Germany
malicious
3.33.130.190
autonomyai.xyz
United States
malicious
199.59.243.225
www.gamemaster.at
United States
malicious
172.67.190.203
www.batchscraper.com
United States
malicious
213.171.195.105
www.annahaywardva.co.uk
United Kingdom
malicious
38.47.207.149
y94hr.top
United States
malicious
142.250.186.51
ghs.googlehosted.com
United States
There are 1 hidden IPs, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
5800000
unkown
page execute and read and write
 malicious
3650000
trusted library allocation
page read and write
 malicious
400000
system
page execute and read and write
 malicious
5B50000
unclassified section
page execute and read and write
 malicious
33E0000
trusted library allocation
page read and write
 malicious
27B0000
unclassified section
page execute and read and write
 malicious
5650000
system
page execute and read and write
 malicious
2F20000
system
page execute and read and write
 malicious
3551000
heap
page read and write
2A12000
heap
page read and write
1290000
unkown
page read and write
867D000
heap
page read and write
3551000
heap
page read and write
1083000
unkown
page write copy
61F000
stack
page read and write
E50000
unkown
page readonly
12A0000
stack
page read and write
1264000
heap
page read and write
86E4000
heap
page read and write
3551000
heap
page read and write
63DA000
unclassified section
page read and write
100000
unkown
page readonly
2F04000
heap
page read and write
3928000
unkown
page read and write
3551000
heap
page read and write
11C0000
heap
page read and write
17A98220000
trusted library allocation
page read and write
3551000
heap
page read and write
8760000
trusted library allocation
page read and write
3A00000
unkown
page execute and read and write
866B000
heap
page read and write
1100000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
1294000
heap
page read and write
125D000
heap
page read and write
3604000
unkown
page read and write
3551000
heap
page read and write
3DE9000
direct allocation
page read and write
3551000
heap
page read and write
3D9D000
direct allocation
page read and write
56AE000
direct allocation
page execute and read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
D50000
unkown
page readonly
3CC0000
direct allocation
page read and write
3B6E1FE000
stack
page read and write
3DE9000
direct allocation
page read and write
E70000
unkown
page readonly
347A000
heap
page read and write
1A0000
heap
page read and write
3551000
heap
page read and write
34D3000
heap
page read and write
3B6D9FF000
stack
page read and write
13B0000
unkown
page read and write
1203000
heap
page read and write
E60000
unkown
page readonly
1230000
unkown
page readonly
2A86000
heap
page read and write
3DE9000
direct allocation
page read and write
3000000
unkown
page execute and read and write
3551000
heap
page read and write
13A1000
unkown
page readonly
3480000
heap
page read and write
1389000
heap
page read and write
2E4F000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3550000
heap
page read and write
615A000
unkown
page execute and read and write
8663000
heap
page read and write
12E0000
unkown
page readonly
536E000
stack
page read and write
11E9000
heap
page read and write
D60000
unkown
page readonly
1890000
unkown
page readonly
2B01000
heap
page read and write
11A0000
unkown
page read and write
3551000
heap
page read and write
4102000
unkown
page read and write
86C2000
heap
page read and write
3551000
heap
page read and write
128E000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
86C5000
heap
page read and write
3551000
heap
page read and write
17A9676C000
system
page execute and read and write
3551000
heap
page read and write
3C43000
direct allocation
page read and write
12A0000
heap
page read and write
3551000
heap
page read and write
2D04000
heap
page read and write
1180000
unkown
page read and write
D50000
unkown
page readonly
3BF3000
direct allocation
page read and write
2CFC000
unkown
page read and write
597C000
unclassified section
page read and write
66FE000
unclassified section
page read and write
3551000
heap
page read and write
48DC000
unkown
page read and write
17A98501000
trusted library allocation
page read and write
2F00000
heap
page read and write
1E60000
direct allocation
page read and write
3551000
heap
page read and write
353D000
heap
page read and write
353B000
heap
page read and write
34D6000
heap
page read and write
57E1000
direct allocation
page execute and read and write
2A17000
heap
page read and write
6890000
unclassified section
page read and write
5F24000
unclassified section
page read and write
61C7000
unkown
page execute and read and write
3551000
heap
page read and write
3551000
heap
page read and write
11F4000
heap
page read and write
3551000
heap
page read and write
27B0000
direct allocation
page read and write
32CD000
direct allocation
page execute and read and write
3551000
heap
page read and write
54FF000
heap
page read and write
586C000
unkown
page read and write
1273000
heap
page read and write
11F4000
heap
page read and write
2813000
heap
page read and write
3AD0000
direct allocation
page read and write
347A000
heap
page read and write
10FC000
stack
page read and write
27B0000
direct allocation
page read and write
2D40000
heap
page read and write
EEE000
stack
page read and write
3551000
heap
page read and write
1320000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3537000
heap
page read and write
17A9840E000
trusted library allocation
page read and write
3551000
heap
page read and write
2813000
heap
page read and write
36C0000
heap
page read and write
1088000
unkown
page readonly
6BC7000
unkown
page execute and read and write
1308000
heap
page read and write
319E000
direct allocation
page execute and read and write
2CA0000
unkown
page read and write
56D8000
system
page execute and read and write
3551000
heap
page read and write
1500000
unkown
page readonly
1211000
heap
page read and write
34D6000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
16D34000
system
page read and write
17A9687A000
heap
page read and write
E1B000
stack
page read and write
32D1000
direct allocation
page execute and read and write
3551000
heap
page read and write
1DBF000
stack
page read and write
1300000
heap
page read and write
117000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
2F42000
unkown
page read and write
101000
unkown
page execute read
3551000
heap
page read and write
2E50000
unkown
page readonly
548E000
heap
page read and write
16732000
system
page read and write
123A000
heap
page read and write
3D9D000
direct allocation
page read and write
12A4000
heap
page read and write
101000
unkown
page execute read
1273000
heap
page read and write
3551000
heap
page read and write
EA0000
heap
page read and write
100000
unkown
page readonly
1240000
heap
page read and write
6F17000
unclassified section
page execute and read and write
138F000
heap
page read and write
2EC0000
unkown
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
11E9000
heap
page read and write
DCA000
stack
page read and write
3C43000
direct allocation
page read and write
3551000
heap
page read and write
115000
unkown
page read and write
3551000
heap
page read and write
125D000
heap
page read and write
656C000
unclassified section
page read and write
3E0E000
direct allocation
page read and write
3551000
heap
page read and write
3B6E9FE000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
2F42000
unkown
page read and write
F30000
heap
page read and write
17A98220000
trusted library allocation
page read and write
34DC000
heap
page read and write
13E0000
unkown
page readonly
3551000
heap
page read and write
3476000
heap
page read and write
FDC000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
2800000
heap
page read and write
3551000
heap
page read and write
EDA000
stack
page read and write
3551000
heap
page read and write
100000
unkown
page readonly
3551000
heap
page read and write
3DED000
direct allocation
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
6248000
unclassified section
page read and write
4D92000
unkown
page read and write
3551000
heap
page read and write
1100000
unkown
page readonly
3551000
heap
page read and write
71FC000
unclassified section
page read and write
3551000
heap
page read and write
104F000
unkown
page readonly
3551000
heap
page read and write
2813000
heap
page read and write
3000000
direct allocation
page execute and read and write
34D3000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
660000
direct allocation
page read and write
17A98403000
trusted library allocation
page read and write
13C0000
heap
page read and write
1220000
heap
page read and write
57DD000
direct allocation
page execute and read and write
56E8000
system
page execute and read and write
1891000
unkown
page readonly
3551000
heap
page read and write
34E9000
heap
page read and write
4E00000
unkown
page execute and read and write
1220000
heap
page read and write
12A4000
heap
page read and write
7520000
unclassified section
page read and write
19BE000
stack
page read and write
3551000
heap
page read and write
17A966E0000
system
page execute and read and write
4400000
unkown
page execute and read and write
34F4000
heap
page read and write
117E000
stack
page read and write
32A4000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
6D46000
unclassified section
page read and write
3C43000
direct allocation
page read and write
33C0000
trusted library allocation
page read and write
1110000
unkown
page readonly
3551000
heap
page read and write
11A0000
unkown
page read and write
150000
heap
page read and write
347A000
heap
page read and write
125D000
heap
page read and write
3D50000
unclassified section
page execute and read and write
890F000
stack
page read and write
5250000
trusted library allocation
page execute and read and write
1120000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
3C70000
direct allocation
page read and write
86DE000
heap
page read and write
123A000
heap
page read and write
3471000
heap
page read and write
1088000
unkown
page readonly
1120000
unkown
page readonly
3E0E000
direct allocation
page read and write
3551000
heap
page read and write
12DE000
stack
page read and write
3551000
heap
page read and write
2AEA000
heap
page read and write
117000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
12A8000
heap
page read and write
2813000
heap
page read and write
123A000
heap
page read and write
3551000
heap
page read and write
5510000
direct allocation
page execute and read and write
3551000
heap
page read and write
3551000
heap
page read and write
64AA000
unclassified section
page execute and read and write
3450000
heap
page read and write
3551000
heap
page read and write
32A4000
heap
page read and write
3DED000
direct allocation
page read and write
2813000
heap
page read and write
2A05000
heap
page read and write
125D000
heap
page read and write
3C70000
direct allocation
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
12E0000
unkown
page readonly
3350000
unclassified section
page execute and read and write
3AD0000
direct allocation
page read and write
17A98410000
trusted library allocation
page read and write
3E5E000
direct allocation
page read and write
2813000
heap
page read and write
2802000
heap
page read and write
350A000
heap
page read and write
11B0000
heap
page read and write
123B000
heap
page read and write
A3A000
stack
page read and write
352C000
heap
page read and write
13A1000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
8750000
trusted library allocation
page read and write
3551000
heap
page read and write
17A985C4000
trusted library allocation
page read and write
DFF000
stack
page read and write
3551000
heap
page read and write
17A985A5000
trusted library allocation
page read and write
FC0000
unkown
page readonly
3551000
heap
page read and write
12B4000
heap
page read and write
3551000
heap
page read and write
DCA000
stack
page read and write
12A0000
heap
page read and write
76B2000
unclassified section
page read and write
1B0000
heap
page read and write
88CE000
stack
page read and write
FB0000
heap
page read and write
3517000
heap
page read and write
2D00000
heap
page read and write
86D9000
heap
page read and write
1294000
heap
page read and write
867F000
heap
page read and write
32A0000
heap
page read and write
3471000
heap
page read and write
1E50000
direct allocation
page execute and read and write
2A17000
heap
page read and write
117000
unkown
page readonly
86E7000
heap
page read and write
83D0000
trusted library allocation
page read and write
2EBF000
stack
page read and write
3B6D1FC000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
2EE9000
stack
page read and write
86D8000
heap
page read and write
2813000
heap
page read and write
11F4000
heap
page read and write
3551000
heap
page read and write
1274000
heap
page read and write
51B0000
trusted library allocation
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
1274000
heap
page read and write
51BA000
heap
page read and write
3ABA000
unkown
page read and write
125D000
heap
page read and write
2D04000
heap
page read and write
107F000
unkown
page write copy
12B4000
heap
page read and write
3501000
heap
page read and write
347A000
heap
page read and write
3545000
heap
page read and write
11E4000
heap
page read and write
3551000
heap
page read and write
11B000
stack
page read and write
107F000
unkown
page read and write
3551000
heap
page read and write
1274000
heap
page read and write
3458000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
1694C000
system
page read and write
2813000
heap
page read and write
3551000
heap
page read and write
86E9000
heap
page read and write
3551000
heap
page read and write
14FF000
stack
page read and write
3532000
heap
page read and write
2F2D000
heap
page read and write
5B3C000
unclassified section
page read and write
D40000
unkown
page readonly
D40000
unkown
page readonly
3551000
heap
page read and write
115000
unkown
page read and write
17A96800000
heap
page read and write
305C000
unkown
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
1273000
heap
page read and write
2CA0000
unkown
page read and write
5150000
unclassified section
page execute and read and write
34C8000
heap
page read and write
2F10000
unkown
page readonly
346F000
heap
page read and write
2AEA000
heap
page read and write
3E5E000
direct allocation
page read and write
3AD0000
direct allocation
page read and write
1180000
unkown
page read and write
2F9E000
heap
page read and write
86EF000
heap
page read and write
3551000
heap
page read and write
321C000
unkown
page read and write
13B0000
unkown
page read and write
2F10000
unkown
page readonly
32A4000
heap
page read and write
1EF0000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
1130000
heap
page read and write
574B000
system
page execute and read and write
2813000
heap
page read and write
FC1000
unkown
page execute read
2813000
heap
page read and write
3551000
heap
page read and write
101000
unkown
page execute read
346F000
heap
page read and write
3551000
heap
page read and write
1130000
heap
page read and write
2E50000
unkown
page readonly
86E6000
heap
page read and write
11F4000
heap
page read and write
34FA000
heap
page read and write
17A968A2000
heap
page read and write
706A000
unclassified section
page read and write
ECF000
unkown
page read and write
3C4C000
unkown
page read and write
3551000
heap
page read and write
8666000
heap
page read and write
1678C000
system
page read and write
34C4000
heap
page read and write
33C0000
heap
page read and write
1C0000
direct allocation
page read and write
312D000
direct allocation
page execute and read and write
2A00000
heap
page read and write
2A1A000
heap
page read and write
2EC0000
unkown
page read and write
3E5E000
direct allocation
page read and write
2813000
heap
page read and write
3551000
heap
page read and write
FDC000
stack
page read and write
347A000
heap
page read and write
13C0000
heap
page read and write
3551000
heap
page read and write
17A9689A000
heap
page read and write
52F0000
trusted library allocation
page read and write
2813000
heap
page read and write
3551000
heap
page read and write
3002000
unkown
page read and write
3551000
heap
page read and write
17A98500000
trusted library allocation
page read and write
F40000
heap
page read and write
17A985CE000
trusted library allocation
page read and write
3551000
heap
page read and write
3D9D000
direct allocation
page read and write
15E0000
unkown
page readonly
3C70000
direct allocation
page read and write
4A6E000
unkown
page read and write
1191000
unkown
page readonly
1210000
unkown
page readonly
1970000
unkown
page readonly
3129000
direct allocation
page execute and read and write
1075000
unkown
page readonly
3796000
unkown
page read and write
11F4000
heap
page read and write
86D4000
heap
page read and write
6517000
unclassified section
page execute and read and write
3551000
heap
page read and write
FC1000
unkown
page execute read
17A98300000
trusted library allocation
page read and write
13E0000
unkown
page readonly
3551000
heap
page read and write
3D99000
direct allocation
page read and write
3BF3000
direct allocation
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
1971000
unkown
page readonly
2813000
heap
page read and write
868A000
heap
page read and write
17A98210000
heap
page read and write
17A96870000
heap
page read and write
3D99000
direct allocation
page read and write
34E9000
heap
page read and write
348B000
heap
page read and write
101000
unkown
page execute read
5361000
heap
page read and write
65E000
stack
page read and write
2F90000
heap
page read and write
3B20000
direct allocation
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
10E000
unkown
page readonly
2EAB000
stack
page read and write
8678000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
10E000
unkown
page readonly
104F000
unkown
page readonly
3551000
heap
page read and write
1290000
unkown
page read and write
1274000
heap
page read and write
2D00000
heap
page read and write
2FE0000
heap
page read and write
2E00000
heap
page read and write
3551000
heap
page read and write
E70000
unkown
page readonly
3551000
heap
page read and write
14FF000
stack
page read and write
1400000
heap
page read and write
56F4000
system
page execute and read and write
1075000
unkown
page readonly
123A000
heap
page read and write
1220000
unkown
page readonly
1308000
heap
page read and write
86A8000
heap
page read and write
5862000
unclassified section
page read and write
1240000
heap
page read and write
2D40000
heap
page read and write
3551000
heap
page read and write
52F0000
trusted library allocation
page read and write
3551000
heap
page read and write
12B4000
heap
page read and write
3BF3000
direct allocation
page read and write
17A9840B000
trusted library allocation
page read and write
2D23000
heap
page read and write
125D000
heap
page read and write
53AF000
stack
page read and write
3551000
heap
page read and write
4C00000
unkown
page read and write
4426000
unkown
page read and write
3551000
heap
page read and write
F2E000
stack
page read and write
3F70000
unkown
page read and write
8A20000
heap
page read and write
3E0E000
direct allocation
page read and write
2C01000
heap
page read and write
86AE000
heap
page read and write
3551000
heap
page read and write
1300000
heap
page read and write
27AF000
stack
page read and write
12BB000
heap
page read and write
4294000
unkown
page read and write
3551000
heap
page read and write
17A9688D000
heap
page read and write
1220000
unkown
page readonly
1273000
heap
page read and write
52DD000
heap
page read and write
117000
unkown
page readonly
3551000
heap
page read and write
11F4000
heap
page read and write
16672000
system
page read and write
350E000
heap
page read and write
3551000
heap
page read and write
17A985BE000
trusted library allocation
page read and write
3551000
heap
page read and write
1500000
unkown
page readonly
3551000
heap
page read and write
1395000
unkown
page read and write
3551000
heap
page read and write
2813000
heap
page read and write
2DBE000
stack
page read and write
115000
unkown
page read and write
E0F000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
5639000
direct allocation
page execute and read and write
1110000
unkown
page readonly
3B20000
direct allocation
page read and write
10E000
unkown
page readonly
8655000
heap
page read and write
3CC0000
direct allocation
page read and write
1274000
heap
page read and write
6A22000
unclassified section
page read and write
8671000
heap
page read and write
34B8000
heap
page read and write
EDA000
stack
page read and write
3475000
heap
page read and write
115000
unkown
page read and write
12A4000
heap
page read and write
3CC0000
direct allocation
page read and write
3551000
heap
page read and write
2813000
heap
page read and write
1400000
heap
page read and write
3551000
heap
page read and write
E50000
unkown
page readonly
17A96850000
heap
page read and write
FB4000
heap
page read and write
FC0000
unkown
page readonly
3551000
heap
page read and write
3DED000
direct allocation
page read and write
474A000
unkown
page read and write
867B000
heap
page read and write
3551000
heap
page read and write
1FE000
stack
page read and write
3551000
heap
page read and write
86E1000
heap
page read and write
3551000
heap
page read and write
1264000
heap
page read and write
123A000
heap
page read and write
3551000
heap
page read and write
125D000
heap
page read and write
11B0000
heap
page read and write
3551000
heap
page read and write
2A05000
heap
page read and write
3551000
heap
page read and write
738E000
unclassified section
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
2813000
heap
page read and write
548A000
heap
page read and write
15E0000
unkown
page readonly
D60000
unkown
page readonly
86D1000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
5922000
unclassified section
page read and write
5852000
direct allocation
page execute and read and write
122F000
heap
page read and write
12B4000
heap
page read and write
1210000
unkown
page readonly
11C8000
heap
page read and write
86A4000
heap
page read and write
2C00000
heap
page read and write
17A9676A000
system
page execute and read and write
3551000
heap
page read and write
3475000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
DC000
stack
page read and write
1274000
heap
page read and write
3551000
heap
page read and write
347A000
heap
page read and write
3504000
heap
page read and write
3480000
heap
page read and write
3D99000
direct allocation
page read and write
10E000
unkown
page readonly
17A96820000
heap
page read and write
3551000
heap
page read and write
2F04000
heap
page read and write
3551000
heap
page read and write
17A9689F000
heap
page read and write
3551000
heap
page read and write
86CB000
heap
page read and write
8676000
heap
page read and write
170000
heap
page read and write
3551000
heap
page read and write
11B0000
heap
page read and write
2CB0000
unkown
page read and write
1273000
heap
page read and write
117E000
stack
page read and write
86DB000
heap
page read and write
E3C000
stack
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3DDE000
unkown
page read and write
3551000
heap
page read and write
2F00000
heap
page read and write
321C000
unkown
page read and write
12A8000
heap
page read and write
3342000
direct allocation
page execute and read and write
3551000
heap
page read and write
10FC000
stack
page read and write
1273000
heap
page read and write
3551000
heap
page read and write
6BB4000
unclassified section
page read and write
563D000
direct allocation
page execute and read and write
1191000
unkown
page readonly
3551000
heap
page read and write
3551000
heap
page read and write
E60000
unkown
page readonly
27B0000
direct allocation
page read and write
1230000
unkown
page readonly
3551000
heap
page read and write
2FDF000
stack
page read and write
3551000
heap
page read and write
1275000
heap
page read and write
17A98400000
trusted library allocation
page read and write
2F29000
heap
page read and write
869E000
heap
page read and write
3551000
heap
page read and write
52F0000
trusted library allocation
page read and write
125D000
heap
page read and write
3551000
heap
page read and write
1275000
heap
page read and write
3551000
heap
page read and write
34DC000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
3551000
heap
page read and write
11F4000
heap
page read and write
100000
unkown
page readonly
15DF000
stack
page read and write
3551000
heap
page read and write
4750000
unclassified section
page execute and read and write
123A000
heap
page read and write
3B20000
direct allocation
page read and write
1203000
heap
page read and write
60B6000
unclassified section
page read and write
17A98421000
trusted library allocation
page read and write
There are 699 hidden memdumps, click here to show them.