IOC Report
BGUO31BLG4WQAOX9MA4VF71OJ1M.exe

loading gif

Files

File Path
Type
Category
Malicious
BGUO31BLG4WQAOX9MA4VF71OJ1M.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Temp\cckrnaa
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\djivmxg
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\pbxllkvlhugf
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\d2d22b7a
PNG image data, 4432 x 696, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\d3e71663
data
dropped
C:\Users\user\AppData\Local\Temp\dc28f109
PNG image data, 4432 x 696, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\dcbc2b90
PNG image data, 4432 x 696, 8-bit/color RGB, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\dcc83b80
data
dropped
C:\Users\user\AppData\Local\Temp\dd72ccef
data
dropped
C:\Windows\Tasks\ServiceHub Controller.job
data
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\BGUO31BLG4WQAOX9MA4VF71OJ1M.exe
"C:\Users\user\Desktop\BGUO31BLG4WQAOX9MA4VF71OJ1M.exe"
 malicious
C:\Windows\SysWOW64\comp.exe
C:\Windows\SysWOW64\comp.exe
 malicious
C:\Users\user\AppData\Roaming\TlsServer\QTAgent_40.exe
C:\Users\user\AppData\Roaming\TlsServer\QTAgent_40.exe
 malicious
C:\Users\user\AppData\Roaming\TlsServer\QTAgent_40.exe
C:\Users\user\AppData\Roaming\TlsServer\QTAgent_40.exe
 malicious
C:\Windows\SysWOW64\comp.exe
C:\Windows\SysWOW64\comp.exe
 malicious
C:\Windows\SysWOW64\comp.exe
C:\Windows\SysWOW64\comp.exe
 malicious
C:\Windows\SysWOW64\explorer.exe
C:\Windows\SysWOW64\explorer.exe
 malicious
C:\Windows\SysWOW64\explorer.exe
C:\Windows\SysWOW64\explorer.exe
 malicious
C:\Windows\SysWOW64\explorer.exe
C:\Windows\SysWOW64\explorer.exe
 malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://moviecentral-petparade.com/g9jvjfd73/index.php
172.67.213.173
 malicious
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpp
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpc$v
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phps$f
unknown
http://www.vmware.com/0
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclMath.pas
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/bzip2.pas
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclStringConver
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php8E
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php/index.php
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phprD
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php%6
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.php6D
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpWE
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/Jcl8087.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpJ
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclUnitVersioni
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpO
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpbE
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpc%v
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phps%f
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpshqos.dll.muic
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclBase.pas
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpoviecentral-petparade2.com
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclMime.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php9D
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclWideStrings.
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpj
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpED
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php)E
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclSysUtils.pas
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/sevenzip.pas
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclLogic.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phppjy
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/JclSecurity.pa
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phppjy
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php6D
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpWE
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpG4
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/zlibh.pas
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpoviecentral-petparade3.comi
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclRTTI.pas
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpgs
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.php8E
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpwshqos.dll.mui
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php?4
unknown
http://www.symauth.com/cps0(
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclSysInfo.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php&E
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/JclShell.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpshqos.dll.muic
unknown
http://moviecentral-petparade3.com/8bkjdSdfj
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclIniFiles.pas
unknown
http://www.symauth.com/rpa00
unknown
http://www.info-zip.org/
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclResources.pa
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclCompression.
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.php&E
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclSimpleXml.pa
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/JclWin32.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php.php
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpb
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpshqos.dll.mui
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.php#K
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpi
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpcD
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclDateTime.pas
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/JclRegistry.pa
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclCharsets.pas
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpO
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpLy
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpswsock.dll.mui
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpcs_K
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php3$
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php3%
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php#
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.phpR
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/JclConsole.pas
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.php9D
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php(
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/windows/Snmp.pas
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpoviecentral-petparade3.com
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php$
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpJM
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php0
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php#$
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php1
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpcD
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php#%
unknown
http://moviecentral-petparade.com/g9jvjfd73/index.php$
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclUnicode.pas
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpBM
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.php8
unknown
http://moviecentral-petparade2.com/g9jvjfd74/index.phpjy
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpC$V
unknown
https://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.4-Build4571/jcl/source/common/JclAnsiStrings.
unknown
http://moviecentral-petparade3.com/8bkjdSdfjCe/index.phpA
unknown
http://www.vmware.com/0/
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
moviecentral-petparade.com
172.67.213.173
 malicious
s-part-0017.t-0009.t-msedge.net
13.107.246.45
moviecentral-petparade2.com
unknown
moviecentral-petparade3.com
unknown

IPs

IP
Domain
Country
Malicious
172.67.213.173
moviecentral-petparade.com
United States
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
3360000
heap
page read and write
57FF000
stack
page read and write
9BD000
unkown
page read and write
DBE000
stack
page read and write
30CF000
heap
page read and write
30DE000
heap
page read and write
3044000
heap
page read and write
401000
unkown
page execute read
5301000
unkown
page read and write
4E1F000
stack
page read and write
590D000
heap
page read and write
2A91000
direct allocation
page read and write
9B8000
unkown
page read and write
E23000
heap
page read and write
49AB000
heap
page read and write
23E0000
heap
page read and write
EBE000
heap
page read and write
23E4000
heap
page read and write
E5D000
heap
page read and write
922000
unkown
page read and write
5301000
unkown
page read and write
23E4000
heap
page read and write
30C3000
heap
page read and write
23E4000
heap
page read and write
28FD000
direct allocation
page read and write
2F5D000
stack
page read and write
2A58000
direct allocation
page read and write
2A7C000
direct allocation
page read and write
5821000
heap
page read and write
619D000
stack
page read and write
3044000
heap
page read and write
914000
unkown
page read and write
939000
unkown
page read and write
2982000
direct allocation
page read and write
544E000
stack
page read and write
302F000
stack
page read and write
DC0000
heap
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
4921000
unkown
page read and write
89C000
stack
page read and write
2FAD000
stack
page read and write
54CD000
stack
page read and write
E90000
heap
page read and write
91B000
unkown
page read and write
2A4F000
direct allocation
page read and write
7FC000
stack
page read and write
4FEE000
stack
page read and write
5169000
direct allocation
page read and write
31BE000
stack
page read and write
E00000
heap
page read and write
5FFF000
stack
page read and write
5301000
unkown
page read and write
5002000
heap
page read and write
23E4000
heap
page read and write
295F000
direct allocation
page read and write
299D000
direct allocation
page read and write
2F14000
heap
page read and write
2F14000
heap
page read and write
5301000
unkown
page read and write
19B000
stack
page read and write
23E4000
heap
page read and write
7845000
unkown
page read and write
270E000
stack
page read and write
922000
unkown
page read and write
3044000
heap
page read and write
3044000
heap
page read and write
3044000
heap
page read and write
9B2000
unkown
page read and write
3030000
direct allocation
page read and write
60A7000
heap
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
4D05000
trusted library allocation
page read and write
5201000
unkown
page read and write
2F14000
heap
page read and write
2A42000
direct allocation
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
5400000
direct allocation
page read and write
D60000
heap
page read and write
2F14000
heap
page read and write
D5E000
stack
page read and write
548B000
stack
page read and write
9DA000
unkown
page read and write
4F97000
heap
page read and write
30BE000
heap
page read and write
5529000
direct allocation
page read and write
DD7000
heap
page read and write
3040000
heap
page read and write
23E4000
heap
page read and write
299C000
direct allocation
page read and write
F4B000
heap
page read and write
5800000
heap
page read and write
31BE000
stack
page read and write
4D1E000
stack
page read and write
92C000
unkown
page read and write
383E000
stack
page read and write
63CE000
stack
page read and write
A3E000
stack
page read and write
3044000
heap
page read and write
355F000
stack
page read and write
30B6000
heap
page read and write
2A0F000
direct allocation
page read and write
30E4000
heap
page read and write
23E4000
heap
page read and write
5820000
direct allocation
page read and write
F25000
heap
page read and write
DC7000
heap
page read and write
3317000
heap
page read and write
E80000
heap
page read and write
65F5000
heap
page read and write
296F000
direct allocation
page read and write
5301000
unkown
page read and write
3367000
heap
page read and write
29A3000
direct allocation
page read and write
23E4000
heap
page read and write
2939000
direct allocation
page read and write
4A20000
unkown
page read and write
2974000
direct allocation
page read and write
4BAF000
heap
page read and write
30E4000
heap
page read and write
386E000
stack
page read and write
A85000
heap
page read and write
28A3000
direct allocation
page read and write
2A1D000
direct allocation
page read and write
23E4000
heap
page read and write
630D000
stack
page read and write
30B1000
heap
page read and write
23E4000
heap
page read and write
557E000
stack
page read and write
3107000
heap
page read and write
975000
unkown
page read and write
E30000
direct allocation
page execute and read and write
23E4000
heap
page read and write
313B000
heap
page read and write
582E000
heap
page read and write
30C6000
heap
page read and write
358E000
stack
page read and write
31E0000
heap
page read and write
4BD7000
direct allocation
page read and write
2A98000
direct allocation
page read and write
23E4000
heap
page read and write
295F000
stack
page read and write
30C7000
heap
page read and write
4BD7000
direct allocation
page read and write
982000
unkown
page write copy
2923000
direct allocation
page read and write
2A6C000
direct allocation
page read and write
4E1F000
stack
page read and write
2A32000
direct allocation
page read and write
EE6000
heap
page read and write
23E4000
heap
page read and write
22AB000
stack
page read and write
C97000
heap
page read and write
23E4000
heap
page read and write
5301000
unkown
page read and write
23E4000
heap
page read and write
9F0000
heap
page read and write
295D000
direct allocation
page read and write
30C9000
heap
page read and write
5C8E000
stack
page read and write
23E4000
heap
page read and write
F29000
heap
page read and write
972000
unkown
page read and write
2A40000
direct allocation
page read and write
91B000
unkown
page read and write
2A5F000
direct allocation
page read and write
C40000
heap
page read and write
924000
unkown
page read and write
EDB000
heap
page read and write
2A44000
direct allocation
page read and write
629D000
stack
page read and write
4BE9000
direct allocation
page read and write
4A21000
unkown
page read and write
3044000
heap
page read and write
4920000
unkown
page read and write
3073000
heap
page read and write
298C000
direct allocation
page read and write
2989000
direct allocation
page read and write
28AF000
direct allocation
page read and write
2F14000
heap
page read and write
4BF3000
direct allocation
page read and write
301E000
stack
page read and write
30C9000
heap
page read and write
22EC000
stack
page read and write
4E1F000
stack
page read and write
4BDE000
direct allocation
page read and write
4B90000
heap
page read and write
19B000
stack
page read and write
52FE000
stack
page read and write
30CF000
heap
page read and write
235000
unkown
page read and write
939000
unkown
page read and write
23E4000
heap
page read and write
2F14000
heap
page read and write
3044000
heap
page read and write
11AF000
stack
page read and write
DD7000
heap
page read and write
F4E000
heap
page read and write
5150000
heap
page read and write
F20000
heap
page read and write
74D9000
trusted library allocation
page read and write
73B0000
trusted library allocation
page read and write
2EE0000
unkown
page readonly
30BE000
heap
page read and write
52E0000
unkown
page read and write
23E4000
heap
page read and write
5099000
heap
page read and write
E97000
heap
page read and write
4F38000
heap
page read and write
31BE000
stack
page read and write
23C000
unkown
page readonly
30BE000
stack
page read and write
914000
unkown
page read and write
937000
unkown
page read and write
23E4000
heap
page read and write
34F1000
heap
page read and write
5301000
unkown
page read and write
4E50000
direct allocation
page read and write
30C9000
heap
page read and write
95000
stack
page read and write
2A24000
direct allocation
page read and write
297B000
direct allocation
page read and write
5023000
heap
page read and write
354F000
stack
page read and write
6718000
heap
page read and write
23E4000
heap
page read and write
2E30000
heap
page read and write
D20000
heap
page read and write
3044000
heap
page read and write
5811000
heap
page read and write
67C0000
heap
page read and write
E30000
heap
page read and write
2F14000
heap
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
5059000
direct allocation
page read and write
29AD000
direct allocation
page read and write
97D000
unkown
page read and write
6D5F000
heap
page read and write
30D4000
heap
page read and write
9D6000
unkown
page read and write
10AF000
stack
page read and write
299F000
direct allocation
page read and write
3380000
heap
page read and write
6A9A000
heap
page read and write
2F14000
heap
page read and write
30C5000
heap
page read and write
2F14000
heap
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
303F000
heap
page read and write
4F7D000
direct allocation
page read and write
2B60000
heap
page read and write
960000
unkown
page readonly
2A2C000
direct allocation
page read and write
92D000
unkown
page read and write
2A20000
heap
page read and write
2A26000
heap
page read and write
30C5000
heap
page read and write
916000
unkown
page read and write
2F14000
heap
page read and write
567F000
stack
page read and write
4472000
trusted library allocation
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
2E3C000
stack
page read and write
992000
unkown
page read and write
4ACE000
heap
page read and write
558C000
stack
page read and write
368E000
stack
page read and write
2F14000
heap
page read and write
30DE000
heap
page read and write
28D5000
direct allocation
page read and write
30E4000
heap
page read and write
2F14000
heap
page read and write
2BA0000
heap
page read and write
23E4000
heap
page read and write
C90000
heap
page read and write
64FD000
heap
page read and write
92D000
unkown
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
3044000
heap
page read and write
7BC000
stack
page read and write
554C000
stack
page read and write
5801000
heap
page read and write
350D000
heap
page read and write
239E000
stack
page read and write
550D000
stack
page read and write
961000
unkown
page read and write
30C7000
heap
page read and write
95000
stack
page read and write
30BE000
stack
page read and write
30E4000
heap
page read and write
4C01000
direct allocation
page read and write
3210000
heap
page read and write
23E4000
heap
page read and write
3044000
heap
page read and write
57BE000
stack
page read and write
5FBE000
stack
page read and write
30D4000
heap
page read and write
10FF000
stack
page read and write
516D000
direct allocation
page read and write
FA2000
heap
page read and write
2350000
heap
page read and write
914000
unkown
page write copy
557F000
stack
page read and write
2787000
heap
page read and write
30E4000
heap
page read and write
6617000
heap
page read and write
3027000
heap
page read and write
2998000
direct allocation
page read and write
5000000
heap
page read and write
2F14000
heap
page read and write
304E000
heap
page read and write
23E4000
heap
page read and write
910000
unkown
page readonly
30F5000
heap
page read and write
581E000
heap
page read and write
7913000
unkown
page read and write
924000
unkown
page read and write
29BC000
direct allocation
page read and write
325E000
stack
page read and write
4D4E000
trusted library allocation
page read and write
34F1000
heap
page read and write
4921000
unkown
page read and write
325E000
stack
page read and write
2F14000
heap
page read and write
4F79000
direct allocation
page read and write
A80000
heap
page read and write
5088000
heap
page read and write
387E000
stack
page read and write
2A54000
direct allocation
page read and write
3044000
heap
page read and write
53FF000
stack
page read and write
28CE000
heap
page read and write
FFF000
stack
page read and write
DAE000
stack
page read and write
9E2000
unkown
page readonly
2F14000
heap
page read and write
2A66000
direct allocation
page read and write
23E4000
heap
page read and write
23E4000
heap
page read and write
93B000
unkown
page read and write
2F14000
heap
page read and write
2FEE000
stack
page read and write
A60000
heap
page read and write
E56000
heap
page read and write
30BE000
heap
page read and write
31E7000
heap
page read and write
A7E000
stack
page read and write
31A0000
unkown
page read and write
278C000
heap
page read and write
533D000
direct allocation
page read and write
5301000
unkown
page read and write
4F4D000
trusted library allocation
page read and write
30DE000
heap
page read and write
4CD2000
heap
page read and write
5155000
heap
page read and write
E90000
heap
page read and write
7700000
trusted library allocation
page read and write
29E3000
direct allocation
page read and write
335F000
stack
page read and write
30CF000
heap
page read and write
2932000
direct allocation
page read and write
5E0C000
stack
page read and write
74DD000
trusted library allocation
page read and write
23E4000
heap
page read and write
330F000
stack
page read and write
2F14000
heap
page read and write
296C000
direct allocation
page read and write
30EC000
heap
page read and write
937000
unkown
page read and write
2985000
direct allocation
page read and write
2993000
direct allocation
page read and write
5F4D000
stack
page read and write
23E5000
heap
page read and write
93B000
unkown
page read and write
23E4000
heap
page read and write
23E4000
heap
page read and write
23E4000
heap
page read and write
614D000
stack
page read and write
4429000
trusted library allocation
page read and write
2A73000
direct allocation
page read and write
29F9000
direct allocation
page read and write
C95000
heap
page read and write
5301000
unkown
page read and write
23E4000
heap
page read and write
23F0000
heap
page read and write
683B000
unkown
page read and write
3044000
heap
page read and write
30BE000
heap
page read and write
23E4000
heap
page read and write
5040000
direct allocation
page read and write
30EC000
heap
page read and write
587F000
stack
page read and write
23DF000
stack
page read and write
29AD000
direct allocation
page read and write
5200000
unkown
page read and write
4FEE000
direct allocation
page read and write
30ED000
heap
page read and write
2A8A000
direct allocation
page read and write
F12000
heap
page read and write
3044000
heap
page read and write
31EC000
heap
page read and write
2A83000
direct allocation
page read and write
2750000
direct allocation
page read and write
51DE000
direct allocation
page read and write
30BE000
heap
page read and write
547F000
stack
page read and write
2A50000
direct allocation
page read and write
2994000
direct allocation
page read and write
29E2000
direct allocation
page read and write
5301000
unkown
page read and write
50CE000
direct allocation
page read and write
30DE000
heap
page read and write
30DE000
heap
page read and write
30F5000
heap
page read and write
29F8000
direct allocation
page read and write
4EC2000
heap
page read and write
1D0000
unkown
page readonly
2963000
direct allocation
page read and write
2977000
direct allocation
page read and write
4C10000
direct allocation
page read and write
30EC000
heap
page read and write
E35000
heap
page read and write
2E80000
heap
page read and write
911000
unkown
page execute read
3510000
heap
page read and write
E20000
heap
page read and write
937000
unkown
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
3100000
heap
page read and write
4BFA000
direct allocation
page read and write
3044000
heap
page read and write
5301000
unkown
page read and write
28E3000
direct allocation
page read and write
5301000
unkown
page read and write
E86000
heap
page read and write
309C000
heap
page read and write
581E000
heap
page read and write
C40000
heap
page read and write
30D4000
heap
page read and write
EC0000
heap
page read and write
4E90000
heap
page read and write
95000
stack
page read and write
981000
unkown
page read and write
505D000
direct allocation
page read and write
4EB0000
unkown
page read and write
5301000
unkown
page read and write
23E4000
heap
page read and write
4E38000
trusted library allocation
page read and write
9BC000
unkown
page read and write
516D000
heap
page read and write
DC7000
heap
page read and write
6B2B000
heap
page read and write
29F1000
direct allocation
page read and write
9D9000
unkown
page write copy
4EE0000
heap
page read and write
2780000
heap
page read and write
53E1000
unkown
page read and write
29D8000
direct allocation
page read and write
2F6C000
stack
page read and write
640D000
stack
page read and write
4BF3000
direct allocation
page read and write
23E4000
heap
page read and write
30C7000
heap
page read and write
9D6000
unkown
page read and write
4C01000
direct allocation
page read and write
5339000
direct allocation
page read and write
E6B000
heap
page read and write
23E5000
heap
page read and write
2A34000
direct allocation
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
9DF000
unkown
page read and write
2A81000
direct allocation
page read and write
2A48000
direct allocation
page read and write
583E000
stack
page read and write
2C30000
heap
page read and write
30E0000
direct allocation
page read and write
29A6000
direct allocation
page read and write
3020000
heap
page read and write
4E20000
heap
page read and write
32FE000
stack
page read and write
5158000
heap
page read and write
630000
unkown
page execute read
23E4000
heap
page read and write
4A21000
unkown
page read and write
9D9000
unkown
page read and write
4D52000
trusted library allocation
page read and write
771B000
unkown
page read and write
A70000
heap
page read and write
2A2B000
direct allocation
page read and write
4EE2000
heap
page read and write
E7D000
heap
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
2F14000
heap
page read and write
559E000
direct allocation
page read and write
23E4000
heap
page read and write
5310000
trusted library allocation
page read and write
30CF000
heap
page read and write
5301000
unkown
page read and write
2A25000
direct allocation
page read and write
2A10000
direct allocation
page execute and read and write
C50000
heap
page read and write
29D3000
direct allocation
page read and write
5811000
heap
page read and write
23E4000
heap
page read and write
23E4000
heap
page read and write
E40000
direct allocation
page execute and read and write
2F14000
heap
page read and write
2A74000
direct allocation
page read and write
58BE000
stack
page read and write
30B1000
heap
page read and write
5301000
unkown
page read and write
2A00000
heap
page read and write
30D4000
heap
page read and write
2960000
direct allocation
page read and write
4EB2000
heap
page read and write
2FDF000
stack
page read and write
DEE000
stack
page read and write
3020000
heap
page read and write
F1A000
heap
page read and write
29BD000
direct allocation
page read and write
30BD000
heap
page read and write
5CCF000
stack
page read and write
68D1000
heap
page read and write
30DE000
heap
page read and write
5301000
unkown
page read and write
30D4000
heap
page read and write
2948000
direct allocation
page read and write
30C9000
heap
page read and write
9A7000
unkown
page read and write
3310000
heap
page read and write
23E4000
heap
page read and write
3044000
heap
page read and write
23E5000
heap
page read and write
2A15000
direct allocation
page read and write
2F4C000
unkown
page readonly
30C3000
heap
page read and write
D6E000
stack
page read and write
4BFA000
direct allocation
page read and write
2990000
direct allocation
page read and write
F0C000
heap
page read and write
5201000
unkown
page read and write
5801000
heap
page read and write
5301000
unkown
page read and write
4BD9000
direct allocation
page read and write
29F2000
direct allocation
page read and write
4F04000
trusted library allocation
page read and write
5970000
direct allocation
page read and write
2F52000
unkown
page write copy
91B000
unkown
page read and write
2FA0000
heap
page read and write
9A3000
unkown
page read and write
302E000
heap
page read and write
4A8C000
heap
page read and write
29C3000
direct allocation
page read and write
23E4000
heap
page read and write
53E0000
unkown
page read and write
916000
unkown
page read and write
E65000
heap
page read and write
2EE1000
unkown
page execute read
28C0000
heap
page read and write
2F14000
heap
page read and write
C40000
heap
page read and write
1D1000
unkown
page execute read
4BFA000
direct allocation
page read and write
795B000
unkown
page read and write
23E4000
heap
page read and write
3640000
heap
page read and write
4F30000
direct allocation
page read and write
220000
unkown
page readonly
2F10000
heap
page read and write
5301000
unkown
page read and write
23E4000
heap
page read and write
4C10000
direct allocation
page read and write
67C0000
unkown
page read and write
29FF000
direct allocation
page read and write
9E0000
heap
page read and write
5210000
direct allocation
page read and write
294F000
direct allocation
page read and write
2F14000
heap
page read and write
53E1000
unkown
page read and write
2F14000
heap
page read and write
23E4000
heap
page read and write
312A000
heap
page read and write
78C2000
unkown
page read and write
2F14000
heap
page read and write
2F45000
unkown
page read and write
37EE000
stack
page read and write
5D0D000
stack
page read and write
290C000
direct allocation
page read and write
548F000
stack
page read and write
4FF0000
heap
page read and write
2F14000
heap
page read and write
2913000
direct allocation
page read and write
2F9F000
stack
page read and write
4EA0000
heap
page read and write
FA9000
heap
page read and write
236000
unkown
page write copy
470E000
direct allocation
page read and write
4699000
direct allocation
page read and write
924000
unkown
page read and write
6F1A000
heap
page read and write
23E4000
heap
page read and write
5900000
unkown
page read and write
6612000
heap
page read and write
FA6000
heap
page read and write
344E000
stack
page read and write
79AF000
trusted library allocation
page read and write
922000
unkown
page read and write
2A56000
direct allocation
page read and write
10BF000
stack
page read and write
4E20000
heap
page read and write
8DC000
stack
page read and write
568F000
stack
page read and write
914000
unkown
page read and write
F2C000
heap
page read and write
5301000
unkown
page read and write
4FD5000
heap
page read and write
30CF000
heap
page read and write
2A6D000
direct allocation
page read and write
5301000
unkown
page read and write
6665000
heap
page read and write
3044000
heap
page read and write
2A0D000
direct allocation
page read and write
5835000
heap
page read and write
28A0000
direct allocation
page read and write
E0A000
heap
page read and write
558F000
stack
page read and write
4D09000
trusted library allocation
page read and write
3044000
heap
page read and write
4D1E000
stack
page read and write
30CD000
heap
page read and write
2A5D000
direct allocation
page read and write
30BE000
stack
page read and write
2F14000
heap
page read and write
309C000
heap
page read and write
382E000
stack
page read and write
307A000
heap
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
5810000
heap
page read and write
2995000
direct allocation
page read and write
41B000
unkown
page execute read
23E4000
heap
page read and write
274F000
stack
page read and write
2B20000
heap
page read and write
53F0000
unkown
page read and write
3044000
heap
page read and write
23E4000
heap
page read and write
350B000
heap
page read and write
5E4D000
stack
page read and write
30CF000
heap
page read and write
3030000
heap
page read and write
2F9E000
stack
page read and write
29AD000
direct allocation
page read and write
4F50000
heap
page read and write
29C3000
direct allocation
page read and write
3220000
heap
page read and write
5201000
unkown
page read and write
2C33000
heap
page read and write
9D6000
unkown
page read and write
EC8000
heap
page read and write
553F000
stack
page read and write
2953000
direct allocation
page read and write
307A000
heap
page read and write
3044000
heap
page read and write
2F14000
heap
page read and write
2BCC000
stack
page read and write
C97000
heap
page read and write
4EC0000
direct allocation
page read and write
5301000
unkown
page read and write
30EC000
heap
page read and write
469D000
direct allocation
page read and write
754E000
trusted library allocation
page read and write
5301000
unkown
page read and write
335F000
stack
page read and write
30D4000
heap
page read and write
242000
unkown
page write copy
30D4000
heap
page read and write
4BF3000
direct allocation
page read and write
29CC000
direct allocation
page read and write
E2F000
heap
page read and write
23E4000
heap
page read and write
776D000
unkown
page read and write
2F14000
heap
page read and write
52E1000
unkown
page read and write
2A01000
direct allocation
page read and write
4BAF000
heap
page read and write
5300000
unkown
page read and write
4DEF000
trusted library allocation
page read and write
29BC000
direct allocation
page read and write
2F14000
heap
page read and write
30B1000
heap
page read and write
2F14000
heap
page read and write
F9A000
heap
page read and write
23E4000
heap
page read and write
23E5000
heap
page read and write
2A3B000
direct allocation
page read and write
9BD000
unkown
page read and write
4EBC000
stack
page read and write
310D000
heap
page read and write
674E000
stack
page read and write
2965000
direct allocation
page read and write
4C01000
direct allocation
page read and write
23E4000
heap
page read and write
50D000
unkown
page execute read
EEB000
heap
page read and write
29E9000
direct allocation
page read and write
2941000
direct allocation
page read and write
28ED000
direct allocation
page read and write
520D000
unkown
page read and write
2F14000
heap
page read and write
56A2000
heap
page read and write
2A7A000
direct allocation
page read and write
5301000
unkown
page read and write
9D0000
heap
page read and write
6930000
heap
page read and write
FA2000
heap
page read and write
5301000
unkown
page read and write
2B8C000
stack
page read and write
309C000
heap
page read and write
30E4000
heap
page read and write
28DC000
direct allocation
page read and write
3044000
heap
page read and write
4F65000
heap
page read and write
2A64000
direct allocation
page read and write
58FF000
stack
page read and write
400000
unkown
page readonly
23E4000
heap
page read and write
2F30000
unkown
page readonly
2F14000
heap
page read and write
EB0000
heap
page read and write
2A1C000
direct allocation
page read and write
DD5000
heap
page read and write
40CD000
heap
page read and write
2BDB000
stack
page read and write
30BA000
heap
page read and write
664C000
stack
page read and write
30CF000
heap
page read and write
916000
unkown
page read and write
29D1000
direct allocation
page read and write
23E4000
heap
page read and write
3750000
heap
page read and write
362C000
stack
page read and write
30CD000
heap
page read and write
23E4000
heap
page read and write
5301000
unkown
page read and write
29B4000
direct allocation
page read and write
56A7000
heap
page read and write
97C000
unkown
page readonly
64CF000
stack
page read and write
23E4000
heap
page read and write
53AE000
direct allocation
page read and write
52E1000
unkown
page read and write
DD0000
heap
page read and write
4C10000
direct allocation
page read and write
6934000
heap
page read and write
2A88000
direct allocation
page read and write
5910000
heap
page read and write
5212000
unkown
page read and write
5301000
unkown
page read and write
29D3000
direct allocation
page read and write
604E000
stack
page read and write
29CA000
direct allocation
page read and write
568C000
heap
page read and write
93B000
unkown
page read and write
E87000
heap
page read and write
34F0000
heap
page read and write
23E4000
heap
page read and write
E20000
heap
page read and write
52C7000
trusted library allocation
page read and write
E0E000
heap
page read and write
308F000
stack
page read and write
30E4000
heap
page read and write
37FE000
stack
page read and write
5301000
unkown
page read and write
543E000
stack
page read and write
6928000
heap
page read and write
2F14000
heap
page read and write
EBA000
heap
page read and write
3040000
heap
page read and write
5301000
unkown
page read and write
DAE000
stack
page read and write
9DA000
unkown
page read and write
320E000
stack
page read and write
2987000
direct allocation
page read and write
2950000
direct allocation
page read and write
3300000
heap
page read and write
DC5000
heap
page read and write
5156000
heap
page read and write
5301000
unkown
page read and write
5950000
unkown
page read and write
3044000
heap
page read and write
4BD7000
direct allocation
page read and write
2F14000
heap
page read and write
2A49000
direct allocation
page read and write
4D1E000
stack
page read and write
5301000
unkown
page read and write
99D000
unkown
page read and write
67D0000
unkown
page read and write
28C6000
direct allocation
page read and write
19A000
stack
page read and write
521F000
unkown
page read and write
374E000
stack
page read and write
567F000
stack
page read and write
5301000
unkown
page read and write
2A08000
direct allocation
page read and write
552D000
direct allocation
page read and write
2A39000
direct allocation
page read and write
2B26000
heap
page read and write
EDF000
heap
page read and write
2BA3000
heap
page read and write
5301000
unkown
page read and write
2F14000
heap
page read and write
41F0000
heap
page read and write
5301000
unkown
page read and write
4570000
direct allocation
page read and write
5900000
heap
page read and write
There are 816 hidden memdumps, click here to show them.