IOC Report
ISF-docBL#MIQOKHH009171-811-25-01347-811033.scr.exe

loading gifFilesProcessesURLsIPsRegistryMemdumps105010010Label

Files

File Path
Type
Category
Malicious
Download
ISF-docBL#MIQOKHH009171-811-25-01347-811033.scr.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\ProgramData\WSP\wsp.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\WSP\wsp.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
 malicious
C:\Users\Public\alpha.pif
PE32 executable (console) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\Links\Woqkdcmz.PIF
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\32172.cmd
Unicode text, UTF-8 text, with very long lines (577), with CRLF line terminators
dropped
C:\ProgramData\8806.cmd
Unicode text, UTF-8 text, with very long lines (324), with CRLF line terminators
dropped
C:\ProgramData\neo.cmd
Unicode text, UTF-8 text, with very long lines (372), with CRLF line terminators
dropped
C:\Users\user\Links\Woqkdcmz.url
MS Windows 95 Internet shortcut text (URL=<file:"C:\\Users\\user\\Links\\Woqkdcmz.PIF">), ASCII text, with CRLF line terminators
dropped
\Device\Null
ASCII text, with CRLF, CR line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\ISF-docBL#MIQOKHH009171-811-25-01347-811033.scr.exe
"C:\Users\user\Desktop\ISF-docBL#MIQOKHH009171-811-25-01347-811033.scr.exe"
 malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\\Users\\All Users\\8806.cmd""
 malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\\Users\\All Users\\32172.cmd""
 malicious
C:\Windows\SysWOW64\PING.EXE
ping 127.0.0.1 -n 10
 malicious
C:\ProgramData\WSP\wsp.exe
"C:\ProgramData\WSP\wsp.exe"
malicious
C:\Windows\SysWOW64\esentutl.exe
C:\\Windows\\System32\\esentutl /y C:\\Windows\\System32\\cmd.exe /d C:\\Users\\Public\\alpha.pif /o
 malicious
C:\Users\Public\alpha.pif
C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows "
malicious
C:\Users\Public\alpha.pif
C:\\Users\\Public\\alpha.pif /c mkdir "\\?\C:\Windows \SysWOW64"
malicious
C:\Users\user\Links\Woqkdcmz.PIF
"C:\Users\user\Links\Woqkdcmz.PIF"
malicious
C:\ProgramData\WSP\wsp.exe
"C:\ProgramData\WSP\wsp.exe"
malicious
C:\ProgramData\WSP\wsp.exe
"C:\ProgramData\WSP\wsp.exe"
malicious
C:\Users\user\Links\Woqkdcmz.PIF
"C:\Users\user\Links\Woqkdcmz.PIF"
malicious
C:\ProgramData\WSP\wsp.exe
"C:\ProgramData\WSP\wsp.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 5 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://geoplugin.net/json.gp
unknown
http://geoplugin.net/json.gp/C
unknown
http://www.pmail.com
unknown

IPs

IP
Domain
Country
Malicious
104.250.180.178
unknown
United States
malicious
127.0.0.1
unknown
unknown
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Woqkdcmz
 malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wsp-KG6IRP
 malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
wsp-KG6IRP
HKEY_CURRENT_USER\SOFTWARE\wsp-KG6IRP
exepath
HKEY_CURRENT_USER\SOFTWARE\wsp-KG6IRP
licence
HKEY_CURRENT_USER\SOFTWARE\wsp-KG6IRP
time
HKEY_CURRENT_USER\SOFTWARE\wsp-KG6IRP
UID

Memdumps

Base Address
Regiontype
Protect
Malicious
Download
7FC000
heap
page read and write
 malicious
736000
heap
page read and write
 malicious
21028000
direct allocation
page readonly
 malicious
78A000
heap
page read and write
 malicious
21018000
direct allocation
page readonly
 malicious
7E490000
direct allocation
page read and write
 malicious
82F000
heap
page read and write
 malicious
78C000
heap
page read and write
 malicious
218C9000
direct allocation
page readonly
 malicious
234D000
direct allocation
page read and write
 malicious
8DC000
heap
page read and write
 malicious
897000
heap
page read and write
 malicious
20D00000
heap
page read and write
2418000
direct allocation
page read and write
229C000
stack
page read and write
2077F000
direct allocation
page read and write
2460000
heap
page read and write
70E000
stack
page read and write
30B0000
heap
page read and write
2B3A000
heap
page read and write
31A3000
heap
page read and write
2841000
direct allocation
page read and write
93F000
stack
page read and write
20FDB000
direct allocation
page execute read
680000
heap
page read and write
2380000
heap
page read and write
28CC000
direct allocation
page read and write
28C1000
direct allocation
page execute read
245D000
direct allocation
page read and write
47F000
unkown
page read and write
FD0000
heap
page read and write
774000
heap
page read and write
20FD7000
direct allocation
page execute read
3F1000
unkown
page execute read
20E9E000
stack
page read and write
2092E000
stack
page read and write
20F9F000
stack
page read and write
2464000
direct allocation
page read and write
21024000
heap
page read and write
7FBDF000
direct allocation
page read and write
740000
heap
page read and write
2845000
direct allocation
page execute and read and write
7EAAF000
direct allocation
page read and write
20E5E000
stack
page read and write
1F0000
heap
page read and write
21520000
heap
page read and write
2351000
direct allocation
page read and write
7E598000
direct allocation
page read and write
7FDBF000
direct allocation
page read and write
233C000
direct allocation
page read and write
20FE1000
direct allocation
page execute read
B10000
heap
page read and write
D73000
heap
page read and write
28F1000
direct allocation
page read and write
2980000
heap
page read and write
6C5000
heap
page read and write
7ECB0000
direct allocation
page read and write
7B0000
heap
page read and write
7EA4F000
direct allocation
page read and write
7E6AF000
direct allocation
page read and write
1F0000
heap
page read and write
7EB10000
direct allocation
page read and write
7FC70000
direct allocation
page read and write
20A7E000
stack
page read and write
21035000
direct allocation
page read and write
9B000
stack
page read and write
43A000
unkown
page readonly
7EB8F000
direct allocation
page read and write
23CF000
direct allocation
page read and write
207DC000
direct allocation
page read and write
1F0000
heap
page read and write
31A3000
heap
page read and write
244D000
direct allocation
page read and write
9B000
stack
page read and write
482000
unkown
page read and write
7EC50000
direct allocation
page read and write
600000
heap
page read and write
207CD000
direct allocation
page read and write
7EB10000
direct allocation
page read and write
20A6E000
stack
page read and write
7EC7F000
direct allocation
page read and write
2330000
heap
page read and write
20BEE000
stack
page read and write
31BD000
heap
page read and write
7EBF0000
direct allocation
page read and write
2504000
direct allocation
page read and write
206D9000
direct allocation
page read and write
31A3000
heap
page read and write
7FA17000
direct allocation
page read and write
31A4000
heap
page read and write
19D000
stack
page read and write
20E5E000
stack
page read and write
2AFE000
stack
page read and write
2101A000
direct allocation
page readonly
229F000
direct allocation
page read and write
20A9E000
stack
page read and write
6E0000
heap
page read and write
1D5000
heap
page read and write
23E6000
heap
page read and write
5EE000
stack
page read and write
24C6000
heap
page read and write
2831000
direct allocation
page read and write
2432000
direct allocation
page read and write
31BD000
heap
page read and write
2063D000
direct allocation
page read and write
207D4000
direct allocation
page read and write
7E490000
direct allocation
page read and write
20643000
direct allocation
page read and write
2057F000
direct allocation
page read and write
401000
unkown
page execute read
206BF000
direct allocation
page read and write
7EB3F000
direct allocation
page read and write
2360000
direct allocation
page execute and read and write
2D2F000
stack
page read and write
31A3000
heap
page read and write
D72000
heap
page read and write
31A3000
heap
page read and write
20779000
direct allocation
page read and write
2150000
heap
page read and write
2210000
heap
page read and write
1D0000
heap
page read and write
20E5E000
stack
page read and write
D73000
heap
page read and write
7EB60000
direct allocation
page read and write
2100000
heap
page read and write
2062F000
direct allocation
page read and write
7E508000
direct allocation
page read and write
7ED1F000
direct allocation
page read and write
31BD000
heap
page read and write
31A3000
heap
page read and write
3F1000
unkown
page execute read
206D4000
direct allocation
page read and write
7EC5E000
direct allocation
page read and write
2801000
direct allocation
page execute read
3F0000
unkown
page readonly
208BB000
stack
page read and write
207EA000
direct allocation
page read and write
2630000
heap
page read and write
755000
heap
page read and write
6C0000
heap
page read and write
84A000
heap
page read and write
780000
heap
page read and write
206CD000
direct allocation
page read and write
7E9AF000
direct allocation
page read and write
8DE000
stack
page read and write
7EB9F000
direct allocation
page read and write
2E50000
heap
page read and write
231C000
stack
page read and write
22C0000
heap
page read and write
31BD000
heap
page read and write
2411000
direct allocation
page read and write
207A3000
direct allocation
page read and write
2613000
heap
page read and write
23C2000
direct allocation
page read and write
7DA000
heap
page read and write
21025000
direct allocation
page read and write
206E3000
direct allocation
page read and write
2386000
heap
page read and write
7EBF0000
direct allocation
page read and write
6D0000
heap
page read and write
7E58F000
direct allocation
page read and write
7ECC0000
direct allocation
page read and write
31BD000
heap
page read and write
20BEE000
stack
page read and write
28D7000
direct allocation
page read and write
7EB10000
direct allocation
page read and write
2653000
heap
page read and write
31BD000
heap
page read and write
7DE000
heap
page read and write
950000
heap
page read and write
31BD000
heap
page read and write
2281000
direct allocation
page read and write
41E000
unkown
page read and write
6F0000
heap
page read and write
7EB10000
direct allocation
page read and write
20FDF000
direct allocation
page execute read
7E9B4000
direct allocation
page read and write
3F1000
unkown
page execute read
2320000
heap
page read and write
31BD000
heap
page read and write
7F790000
direct allocation
page read and write
D40000
heap
page read and write
81E000
stack
page read and write
31A4000
heap
page read and write
247A000
direct allocation
page read and write
20EBE000
stack
page read and write
20644000
direct allocation
page read and write
C2E000
unkown
page read and write
7C5000
heap
page read and write
7FA11000
direct allocation
page read and write
2454000
direct allocation
page read and write
D73000
heap
page read and write
24FD000
direct allocation
page read and write
20E4E000
stack
page read and write
2065A000
direct allocation
page read and write
740000
heap
page read and write
19D000
stack
page read and write
6B0000
heap
page read and write
2970000
heap
page read and write
400000
unkown
page readonly
230A000
direct allocation
page read and write
29A0000
heap
page read and write
31BD000
heap
page read and write
238E000
stack
page read and write
7FAB0000
direct allocation
page read and write
7E36F000
direct allocation
page read and write
3480000
heap
page read and write
20794000
direct allocation
page read and write
F7E000
unkown
page read and write
28D5000
direct allocation
page execute and read and write
7EC50000
direct allocation
page read and write
D6E000
heap
page read and write
208EF000
stack
page read and write
5A8000
unkown
page readonly
31BD000
heap
page read and write
205D0000
direct allocation
page read and write
20FA0000
heap
page read and write
7EB60000
direct allocation
page read and write
20D4E000
stack
page read and write
20D5E000
stack
page read and write
81C000
stack
page read and write
31BE000
heap
page read and write
208FB000
stack
page read and write
D73000
heap
page read and write
2303000
direct allocation
page read and write
C7E000
stack
page read and write
30BA000
heap
page read and write
2358000
direct allocation
page read and write
338F000
stack
page read and write
207EE000
stack
page read and write
3190000
heap
page read and write
7DD000
heap
page read and write
E50000
heap
page read and write
20ACE000
stack
page read and write
28C7000
direct allocation
page read and write
6BE000
stack
page read and write
7EC84000
direct allocation
page read and write
773000
heap
page read and write
31D0000
heap
page read and write
2811000
direct allocation
page execute read
41E000
unkown
page read and write
314F000
unkown
page read and write
AED000
stack
page read and write
2095E000
stack
page read and write
9B000
stack
page read and write
21871000
direct allocation
page execute read
31D0000
heap
page read and write
2232000
direct allocation
page read and write
940000
heap
page read and write
7EC03000
direct allocation
page read and write
7E490000
direct allocation
page read and write
850000
heap
page read and write
2081B000
stack
page read and write
41E000
unkown
page write copy
206FA000
direct allocation
page read and write
206F4000
direct allocation
page read and write
2B30000
heap
page read and write
5130000
trusted library allocation
page read and write
7E9F0000
direct allocation
page read and write
209FF000
stack
page read and write
21025000
direct allocation
page read and write
23FC000
direct allocation
page read and write
3D0000
heap
page read and write
3F0000
unkown
page readonly
21510000
heap
page read and write
206DC000
direct allocation
page read and write
3ECCE000
stack
page read and write
70E000
stack
page read and write
826000
heap
page read and write
2343000
direct allocation
page read and write
31A4000
heap
page read and write
2478000
direct allocation
page read and write
2463000
heap
page read and write
2061F000
direct allocation
page read and write
24B0000
heap
page read and write
206DD000
direct allocation
page read and write
31BD000
heap
page read and write
241F000
stack
page read and write
20AFF000
stack
page read and write
7C5000
heap
page read and write
20E8E000
stack
page read and write
47F000
unkown
page read and write
206EC000
direct allocation
page read and write
2156000
heap
page read and write
898000
heap
page read and write
29D5000
direct allocation
page execute and read and write
A5F000
stack
page read and write
20809000
stack
page read and write
7DD000
heap
page read and write
2650000
heap
page read and write
757000
heap
page read and write
21022000
direct allocation
page read and write
7DB000
heap
page read and write
20703000
direct allocation
page read and write
20FEB000
direct allocation
page execute read
21025000
direct allocation
page read and write
7B8000
heap
page read and write
20D5E000
stack
page read and write
71E000
stack
page read and write
2488000
direct allocation
page read and write
20688000
direct allocation
page read and write
840000
heap
page read and write
7EBD0000
direct allocation
page read and write
7BA000
heap
page read and write
7ECBF000
direct allocation
page read and write
7AA000
heap
page read and write
7FAC0000
direct allocation
page read and write
48B000
unkown
page readonly
2463000
direct allocation
page read and write
31BD000
heap
page read and write
31BD000
heap
page read and write
FC0000
heap
page read and write
7A0000
heap
page read and write
7FC5F000
direct allocation
page read and write
7F800000
direct allocation
page read and write
D73000
heap
page read and write
7ECC0000
direct allocation
page read and write
7EA9F000
direct allocation
page read and write
2987000
direct allocation
page read and write
482000
unkown
page read and write
2513000
direct allocation
page read and write
31BE000
heap
page read and write
6EA000
heap
page read and write
29D1000
direct allocation
page read and write
2064C000
direct allocation
page read and write
20FC1000
direct allocation
page execute read
324F000
stack
page read and write
20A2F000
stack
page read and write
7E5000
heap
page read and write
7EBF0000
direct allocation
page read and write
5F0000
heap
page read and write
20CEF000
stack
page read and write
31A4000
heap
page read and write
7EBF6000
direct allocation
page read and write
D53000
heap
page read and write
7EE7A000
direct allocation
page read and write
28B1000
direct allocation
page execute read
7EB10000
direct allocation
page read and write
482000
unkown
page read and write
20629000
direct allocation
page read and write
23E0000
heap
page read and write
21025000
direct allocation
page read and write
47F000
unkown
page read and write
206ED000
direct allocation
page read and write
790000
direct allocation
page execute and read and write
2310000
heap
page read and write
20773000
direct allocation
page read and write
2056F000
direct allocation
page read and write
482000
unkown
page read and write
2063C000
direct allocation
page read and write
9AF000
stack
page read and write
20C0E000
stack
page read and write
206F3000
direct allocation
page read and write
3F0000
unkown
page readonly
870000
heap
page read and write
7EAD0000
direct allocation
page read and write
790000
direct allocation
page execute and read and write
20E7E000
stack
page read and write
7DB000
heap
page read and write
2403000
direct allocation
page read and write
2ABE000
stack
page read and write
31A4000
heap
page read and write
2079B000
stack
page read and write
20D5E000
stack
page read and write
43A000
unkown
page readonly
2080F000
stack
page read and write
D4B000
heap
page read and write
7A0000
direct allocation
page execute and read and write
2340000
heap
page read and write
7F6AE000
direct allocation
page read and write
6CE000
stack
page read and write
19D000
stack
page read and write
232D000
direct allocation
page read and write
D73000
heap
page read and write
7EB10000
direct allocation
page read and write
2288000
direct allocation
page read and write
81F000
stack
page read and write
7EC30000
direct allocation
page read and write
28D1000
direct allocation
page read and write
43A000
unkown
page readonly
28A1000
direct allocation
page execute read
31BD000
heap
page read and write
206AC000
stack
page read and write
3C0000
heap
page read and write
218E8000
direct allocation
page readonly
20CEF000
stack
page read and write
2064A000
direct allocation
page read and write
77B000
heap
page read and write
755000
heap
page read and write
21D0000
heap
page read and write
47F000
unkown
page read and write
31BE000
heap
page read and write
2101D000
direct allocation
page readonly
31BD000
heap
page read and write
7EC2F000
direct allocation
page read and write
7DB000
heap
page read and write
31BD000
heap
page read and write
7EC70000
direct allocation
page read and write
20E60000
heap
page read and write
22C3000
heap
page read and write
880000
heap
page read and write
43E000
unkown
page readonly
31A4000
heap
page read and write
2062D000
direct allocation
page read and write
207AB000
stack
page read and write
760000
heap
page read and write
2346000
heap
page read and write
20E5E000
stack
page read and write
690000
heap
page read and write
21032000
direct allocation
page read and write
482000
unkown
page read and write
20B6F000
stack
page read and write
41E000
unkown
page write copy
84E000
heap
page read and write
207B1000
direct allocation
page read and write
206CF000
direct allocation
page read and write
D73000
heap
page read and write
47F000
unkown
page read and write
314F000
unkown
page read and write
20FB1000
direct allocation
page execute read
35A000
stack
page read and write
2389000
direct allocation
page read and write
482000
unkown
page read and write
206A8000
direct allocation
page read and write
D73000
heap
page read and write
20D0F000
stack
page read and write
9B000
stack
page read and write
20A2F000
stack
page read and write
208FF000
stack
page read and write
2102A000
direct allocation
page readonly
74E000
stack
page read and write
47F000
unkown
page read and write
2200000
heap
page read and write
7EC70000
direct allocation
page read and write
206F8000
direct allocation
page read and write
7ECD0000
direct allocation
page read and write
7E9E0000
direct allocation
page read and write
31A4000
heap
page read and write
245E000
stack
page read and write
31A3000
heap
page read and write
2070A000
direct allocation
page read and write
7EB10000
direct allocation
page read and write
47F000
unkown
page read and write
2E2F000
stack
page read and write
20D7E000
stack
page read and write
D6E000
heap
page read and write
3F0000
unkown
page readonly
205E8000
direct allocation
page read and write
D73000
heap
page read and write
283D000
stack
page read and write
2E20000
heap
page read and write
20718000
direct allocation
page read and write
A8F000
stack
page read and write
7EE6F000
direct allocation
page read and write
7E490000
direct allocation
page read and write
7D6000
heap
page read and write
7FD1F000
direct allocation
page read and write
D73000
heap
page read and write
7E34F000
direct allocation
page read and write
9B000
stack
page read and write
853000
heap
page read and write
20F9F000
stack
page read and write
206B9000
direct allocation
page read and write
22B0000
heap
page read and write
2092E000
stack
page read and write
6C0000
heap
page read and write
2F3E000
stack
page read and write
748000
heap
page read and write
BED000
stack
page read and write
319C000
heap
page read and write
750000
heap
page read and write
246C000
direct allocation
page read and write
21019000
direct allocation
page readonly
2069C000
stack
page read and write
2084E000
stack
page read and write
7E490000
direct allocation
page read and write
20F9F000
stack
page read and write
22F4000
direct allocation
page read and write
31BD000
heap
page read and write
77B000
heap
page read and write
7FE1F000
direct allocation
page read and write
715000
heap
page read and write
23F4000
direct allocation
page read and write
7DD000
heap
page read and write
7D7000
heap
page read and write
21009000
direct allocation
page readonly
20A5F000
stack
page read and write
31A4000
heap
page read and write
207B8000
direct allocation
page read and write
7E490000
direct allocation
page read and write
31BD000
heap
page read and write
D73000
heap
page read and write
2067C000
direct allocation
page read and write
91F000
stack
page read and write
7E640000
direct allocation
page read and write
20F8F000
stack
page read and write
28E5000
direct allocation
page execute and read and write
31BD000
heap
page read and write
20D00000
heap
page read and write
2078D000
direct allocation
page read and write
86F000
heap
page read and write
9CF000
stack
page read and write
760000
heap
page read and write
20708000
direct allocation
page read and write
20D5E000
stack
page read and write
20C0E000
stack
page read and write
251A000
direct allocation
page read and write
2093E000
stack
page read and write
680000
heap
page read and write
760000
heap
page read and write
7D6000
heap
page read and write
31A4000
heap
page read and write
21AC000
stack
page read and write
31A3000
heap
page read and write
91F000
stack
page read and write
20E9E000
stack
page read and write
6BE000
stack
page read and write
7A9000
heap
page read and write
2117F000
direct allocation
page read and write
67F000
stack
page read and write
20FE4000
direct allocation
page execute read
31BD000
heap
page read and write
7EC50000
direct allocation
page read and write
7F790000
direct allocation
page read and write
7EC30000
direct allocation
page read and write
24C3000
heap
page read and write
2145C000
stack
page read and write
80F000
heap
page read and write
207EE000
stack
page read and write
2062F000
direct allocation
page read and write
2835000
direct allocation
page execute and read and write
482000
unkown
page read and write
43E000
unkown
page readonly
31BD000
heap
page read and write
29A1000
direct allocation
page execute read
28B0000
direct allocation
page readonly
207C6000
direct allocation
page read and write
24C0000
heap
page read and write
73E000
stack
page read and write
2340000
heap
page read and write
7BA000
heap
page read and write
742000
heap
page read and write
2610000
heap
page read and write
748000
heap
page read and write
21022000
direct allocation
page read and write
20B9F000
stack
page read and write
31BD000
heap
page read and write
2473000
direct allocation
page read and write
31A4000
heap
page read and write
31BD000
heap
page read and write
7F907000
direct allocation
page read and write
7ED7F000
direct allocation
page read and write
76A000
heap
page read and write
7EC5E000
direct allocation
page read and write
2405000
direct allocation
page read and write
2110000
direct allocation
page execute and read and write
2135C000
stack
page read and write
D73000
heap
page read and write
20711000
direct allocation
page read and write
43E000
unkown
page readonly
29C7000
direct allocation
page read and write
206CF000
direct allocation
page read and write
C30000
heap
page read and write
7D0000
heap
page read and write
23ED000
direct allocation
page read and write
20FD4000
direct allocation
page execute read
7E020000
direct allocation
page read and write
7EC70000
direct allocation
page read and write
5B0000
heap
page read and write
72E000
stack
page read and write
1F0000
heap
page read and write
207F8000
direct allocation
page read and write
7EAE0000
direct allocation
page read and write
2ABD000
stack
page read and write
2070F000
direct allocation
page read and write
20FF1000
direct allocation
page execute read
D53000
heap
page read and write
7FD60000
direct allocation
page read and write
205E4000
direct allocation
page read and write
19D000
stack
page read and write
236E000
stack
page read and write
207E3000
direct allocation
page read and write
20619000
direct allocation
page read and write
7E920000
direct allocation
page read and write
7F790000
direct allocation
page read and write
7FA20000
direct allocation
page read and write
24C0000
heap
page read and write
605000
heap
page read and write
680000
heap
page read and write
880000
direct allocation
page execute and read and write
760000
heap
page read and write
28F5000
direct allocation
page execute and read and write
20C0E000
stack
page read and write
20634000
direct allocation
page read and write
7AE000
heap
page read and write
2BBD000
stack
page read and write
7ECBF000
direct allocation
page read and write
20CEF000
stack
page read and write
20FA0000
heap
page read and write
20658000
direct allocation
page read and write
2440000
direct allocation
page read and write
7FC90000
direct allocation
page read and write
20748000
direct allocation
page read and write
710000
heap
page read and write
20FD1000
direct allocation
page execute read
226C000
direct allocation
page read and write
FBE000
stack
page read and write
20E9E000
stack
page read and write
E60000
heap
page read and write
2098E000
stack
page read and write
95E000
stack
page read and write
BE0000
heap
page read and write
2318000
direct allocation
page read and write
1F0000
heap
page read and write
2827000
direct allocation
page read and write
20A8F000
stack
page read and write
232E000
stack
page read and write
2094F000
stack
page read and write
21022000
direct allocation
page read and write
20F90000
heap
page read and write
206DF000
direct allocation
page read and write
235F000
direct allocation
page read and write
7EA10000
direct allocation
page read and write
2060F000
direct allocation
page read and write
9B000
stack
page read and write
3250000
heap
page read and write
1F0000
heap
page read and write
882000
heap
page read and write
9B000
stack
page read and write
2091F000
stack
page read and write
20668000
direct allocation
page read and write
207AA000
direct allocation
page read and write
208EF000
stack
page read and write
20A3F000
stack
page read and write
43A000
unkown
page readonly
31BD000
heap
page read and write
D73000
heap
page read and write
225F000
direct allocation
page read and write
22C2000
direct allocation
page read and write
7EB00000
direct allocation
page read and write
2336000
heap
page read and write
19D000
stack
page read and write
2380000
heap
page read and write
206FC000
direct allocation
page read and write
7EE80000
direct allocation
page read and write
31A3000
heap
page read and write
2434000
direct allocation
page read and write
206F1000
direct allocation
page read and write
B7D000
stack
page read and write
293D000
stack
page read and write
19D000
stack
page read and write
7F790000
direct allocation
page read and write
20F9F000
stack
page read and write
760000
heap
page read and write
2FA0000
heap
page read and write
2200000
heap
page read and write
23CE000
stack
page read and write
7F790000
direct allocation
page read and write
20D0F000
stack
page read and write
21870000
direct allocation
page readonly
890000
heap
page read and write
2264000
direct allocation
page read and write
20FA0000
heap
page read and write
283C000
direct allocation
page read and write
2311000
direct allocation
page read and write
7EBE1000
direct allocation
page read and write
245C000
direct allocation
page read and write
207FB000
stack
page read and write
20FE7000
direct allocation
page execute read
A7D000
stack
page read and write
7ECBF000
direct allocation
page read and write
234A000
direct allocation
page read and write
20FE1000
direct allocation
page execute read
246A000
direct allocation
page read and write
4D60000
direct allocation
page read and write
7F910000
direct allocation
page read and write
93F000
stack
page read and write
7E370000
direct allocation
page read and write
2302000
direct allocation
page read and write
28EC000
direct allocation
page read and write
2210000
direct allocation
page execute and read and write
298C000
direct allocation
page read and write
24B0000
heap
page read and write
7D6000
heap
page read and write
2837000
direct allocation
page read and write
20701000
direct allocation
page read and write
211D1000
heap
page read and write
206D6000
direct allocation
page read and write
2528000
direct allocation
page read and write
7FDE0000
direct allocation
page read and write
206E6000
direct allocation
page read and write
248F000
stack
page read and write
206C1000
direct allocation
page read and write
ACF000
stack
page read and write
893000
heap
page read and write
D6E000
heap
page read and write
20D00000
heap
page read and write
7E1D0000
direct allocation
page read and write
780000
heap
page read and write
20D3F000
stack
page read and write
7EBC0000
direct allocation
page read and write
20FA0000
heap
page read and write
D6E000
heap
page read and write
31D000
stack
page read and write
31BD000
heap
page read and write
7E520000
direct allocation
page read and write
20B7F000
stack
page read and write
7EC50000
direct allocation
page read and write
31BD000
heap
page read and write
7FC30000
direct allocation
page read and write
7E5B0000
direct allocation
page read and write
720000
heap
page read and write
22ED000
direct allocation
page read and write
2079C000
direct allocation
page read and write
2334000
direct allocation
page read and write
7E61F000
direct allocation
page read and write
30AF000
stack
page read and write
6EE000
heap
page read and write
19D000
stack
page read and write
20FEF000
direct allocation
page execute read
20661000
direct allocation
page read and write
7F5E0000
direct allocation
page read and write
7EDB0000
direct allocation
page read and write
47F000
unkown
page write copy
29CC000
direct allocation
page read and write
21022000
direct allocation
page read and write
218E5000
direct allocation
page read and write
20653000
direct allocation
page read and write
21025000
direct allocation
page read and write
31A3000
heap
page read and write
250C000
direct allocation
page read and write
20A6E000
stack
page read and write
2961000
direct allocation
page execute read
205F8000
direct allocation
page read and write
20B6F000
stack
page read and write
2995000
direct allocation
page execute and read and write
22BC000
stack
page read and write
7C5000
heap
page read and write
3F1000
unkown
page execute read
43E000
unkown
page readonly
31A3000
heap
page read and write
6C0000
heap
page read and write
20BEE000
stack
page read and write
63E000
stack
page read and write
7FD50000
direct allocation
page read and write
2102D000
direct allocation
page readonly
225D000
direct allocation
page read and write
207F1000
direct allocation
page read and write
7ED40000
direct allocation
page read and write
7FD1F000
direct allocation
page read and write
7F790000
direct allocation
page read and write
218E2000
direct allocation
page read and write
7E490000
direct allocation
page read and write
790000
heap
page read and write
2080E000
stack
page execute and read and write
21022000
direct allocation
page read and write
2991000
direct allocation
page read and write
227A000
direct allocation
page read and write
7F940000
direct allocation
page read and write
282C000
direct allocation
page read and write
2F40000
heap
page read and write
7DD000
heap
page read and write
7EA70000
direct allocation
page read and write
2273000
direct allocation
page read and write
750000
heap
page read and write
77F000
heap
page read and write
206EA000
direct allocation
page read and write
7F790000
direct allocation
page read and write
28E7000
direct allocation
page read and write
21CF000
direct allocation
page read and write
486000
unkown
page write copy
20E9E000
stack
page read and write
6D0000
heap
page read and write
240A000
direct allocation
page read and write
2471000
direct allocation
page read and write
207B9000
direct allocation
page read and write
784000
heap
page read and write
3EDCF000
stack
page read and write
A3F000
stack
page read and write
2481000
direct allocation
page read and write
22FC000
direct allocation
page read and write
206E4000
direct allocation
page read and write
20D0F000
stack
page read and write
20BCF000
stack
page read and write
6F6000
heap
page read and write
2383000
heap
page read and write
20C3E000
stack
page read and write
C90000
heap
page read and write
2521000
direct allocation
page read and write
7DB000
heap
page read and write
20651000
direct allocation
page read and write
6C5000
heap
page read and write
20FBF000
stack
page read and write
20BFF000
stack
page read and write
31BD000
heap
page read and write
7B3000
heap
page read and write
There are 786 hidden memdumps, click here to show them.