IOC Report
ENQ.exe

loading gifFilesProcessesURLsDomainsIPsRegistryMemdumps12108642010010Label

Files

File Path
Type
Category
Malicious
Download
ENQ.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\subbasaltic.vbs
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\aut1A82.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut1ED7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut27B1.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut2C06.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut577B.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut6391.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\teer
data
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\ENQ.exe
"C:\Users\user\Desktop\ENQ.exe"
 malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
"C:\Users\user\Desktop\ENQ.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\Desktop\ENQ.exe"
 malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
C:\Windows\System32\wscript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\subbasaltic.vbs"
malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
malicious
C:\Users\user\AppData\Local\emboweling\subbasaltic.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\emboweling\subbasaltic.exe"
 malicious
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
tyhgvcfrdewsquiplkjmnb.ydns.eu
malicious
http://geoplugin.net/json.gp
unknown
http://geoplugin.net/json.gp/C
unknown

Domains

Name
IP
Malicious
swertyhgvcfrdewsquiplkjmnb.ydns.eu
107.173.177.152
 malicious

IPs

IP
Domain
Country
Malicious
107.173.177.152
swertyhgvcfrdewsquiplkjmnb.ydns.eu
United States
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\chrome-KQ1VAF
exepath
HKEY_CURRENT_USER\SOFTWARE\chrome-KQ1VAF
licence
HKEY_CURRENT_USER\SOFTWARE\chrome-KQ1VAF
time
HKEY_CURRENT_USER\SOFTWARE\chrome-KQ1VAF
UID

Memdumps

Base Address
Regiontype
Protect
Malicious
Download
3B30000
direct allocation
page read and write
 malicious
38D0000
direct allocation
page read and write
 malicious
3070000
direct allocation
page read and write
 malicious
400000
system
page execute and read and write
 malicious
3000000
heap
page read and write
 malicious
3230000
heap
page read and write
 malicious
14B0000
direct allocation
page read and write
 malicious
400000
system
page execute and read and write
 malicious
3E00000
direct allocation
page read and write
 malicious
3012000
heap
page read and write
 malicious
3200000
heap
page read and write
 malicious
3013000
heap
page read and write
11FD000
stack
page read and write
E84000
unkown
page readonly
2CAC000
stack
page read and write
322D000
heap
page read and write
17A6000
heap
page read and write
15A3000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
125C000
stack
page read and write
3025000
heap
page read and write
414D000
direct allocation
page read and write
AFF000
unkown
page readonly
2CEC000
stack
page read and write
2D20000
heap
page read and write
4020000
direct allocation
page read and write
1663000
heap
page read and write
3F4E000
direct allocation
page read and write
3013000
heap
page read and write
B37000
unkown
page readonly
3D33000
direct allocation
page read and write
11C9000
heap
page read and write
156F000
heap
page read and write
3013000
heap
page read and write
A71000
unkown
page execute read
3024000
heap
page read and write
4149000
direct allocation
page read and write
3013000
heap
page read and write
42CD000
direct allocation
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
1769000
heap
page read and write
3BCE000
direct allocation
page read and write
10B9000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
156B000
heap
page read and write
3013000
heap
page read and write
D60000
heap
page read and write
10D4000
heap
page read and write
BB96CFF000
stack
page read and write
15C6000
heap
page read and write
1149000
heap
page read and write
1671000
heap
page read and write
3013000
heap
page read and write
A60000
heap
page read and write
3013000
heap
page read and write
2DCE000
stack
page read and write
4000000
direct allocation
page read and write
112D000
heap
page read and write
B2E000
unkown
page read and write
1888000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
156E000
heap
page execute and read and write
3013000
heap
page read and write
433E000
direct allocation
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
1185000
heap
page read and write
B2E000
unkown
page read and write
3024000
heap
page read and write
1483000
heap
page read and write
AFF000
unkown
page readonly
112C000
heap
page execute and read and write
E8E000
unkown
page read and write
DD0000
unkown
page readonly
3013000
heap
page read and write
1300000
heap
page read and write
42C9000
direct allocation
page read and write
1457000
heap
page read and write
8EA000
stack
page read and write
1538000
heap
page read and write
3C10000
direct allocation
page read and write
FBC000
stack
page read and write
1D334230000
heap
page read and write
3016000
heap
page read and write
140D000
stack
page read and write
3026000
heap
page read and write
FE8000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
3950000
direct allocation
page read and write
B24000
unkown
page readonly
3024000
heap
page read and write
3013000
heap
page read and write
14A8000
heap
page read and write
3024000
heap
page read and write
B37000
unkown
page readonly
1184000
heap
page read and write
3013000
heap
page read and write
222E000
stack
page read and write
A70000
unkown
page readonly
3024000
heap
page read and write
14EA000
heap
page read and write
3B03000
direct allocation
page read and write
990000
heap
page read and write
3024000
heap
page read and write
F9B000
stack
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
212E000
stack
page read and write
1781000
heap
page read and write
14A7000
heap
page read and write
11DD000
heap
page read and write
3024000
heap
page read and write
89A000
stack
page read and write
166E000
stack
page read and write
15A3000
heap
page read and write
15C8000
heap
page read and write
1562000
heap
page read and write
11EF000
stack
page read and write
3013000
heap
page read and write
16D0000
heap
page read and write
1024000
heap
page read and write
DD1000
unkown
page execute read
3301000
heap
page read and write
3013000
heap
page read and write
15E0000
heap
page read and write
3024000
heap
page read and write
16D5000
heap
page read and write
16C8000
heap
page read and write
2DF0000
heap
page read and write
900000
heap
page read and write
4359000
direct allocation
page read and write
478000
system
page execute and read and write
3013000
heap
page read and write
3024000
heap
page read and write
1155000
heap
page read and write
BB96EFD000
stack
page read and write
112D000
heap
page read and write
337E000
stack
page read and write
11B4000
heap
page read and write
435D000
direct allocation
page read and write
3950000
direct allocation
page read and write
14EA000
heap
page read and write
3B59000
direct allocation
page read and write
B2E000
unkown
page write copy
3024000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
DD1000
unkown
page execute read
1D3327F6000
heap
page read and write
3CA9000
direct allocation
page read and write
3024000
heap
page read and write
1576000
heap
page read and write
1638000
heap
page read and write
12EF000
stack
page read and write
1184000
heap
page read and write
200E000
stack
page read and write
1680000
heap
page read and write
3CA9000
direct allocation
page read and write
322B000
heap
page read and write
14A7000
heap
page read and write
1530000
heap
page read and write
37B0000
direct allocation
page read and write
15A0000
heap
page read and write
3013000
heap
page read and write
17B8000
heap
page read and write
1330000
heap
page read and write
A71000
unkown
page execute read
A70000
unkown
page readonly
1D33280C000
heap
page read and write
AFF000
unkown
page readonly
3013000
heap
page read and write
3D33000
direct allocation
page read and write
3024000
heap
page read and write
1D3327EB000
heap
page read and write
146C000
heap
page read and write
AFF000
unkown
page readonly
94E000
stack
page read and write
17A4000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
1D3327F4000
heap
page read and write
42CD000
direct allocation
page read and write
3024000
heap
page read and write
1C0E000
stack
page read and write
2DD0000
heap
page readonly
3A30000
direct allocation
page read and write
3024000
heap
page read and write
3C19000
direct allocation
page read and write
3013000
heap
page read and write
1076000
heap
page read and write
15A3000
heap
page read and write
3239000
heap
page read and write
BB96BFE000
stack
page read and write
3013000
heap
page read and write
145B000
stack
page read and write
1051000
heap
page read and write
354F000
stack
page read and write
475000
system
page execute and read and write
3013000
heap
page read and write
16A4000
heap
page read and write
3024000
heap
page read and write
90E000
stack
page read and write
101A000
heap
page read and write
AFF000
unkown
page readonly
1754000
heap
page read and write
3024000
heap
page read and write
3FA3000
direct allocation
page read and write
3013000
heap
page read and write
4359000
direct allocation
page read and write
1184000
heap
page read and write
1688000
heap
page read and write
3013000
heap
page read and write
43CE000
direct allocation
page read and write
17E9000
heap
page read and write
3013000
heap
page read and write
14B5000
heap
page read and write
3A73000
direct allocation
page read and write
3C8E000
direct allocation
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
F9B000
stack
page read and write
3024000
heap
page read and write
E8E000
unkown
page write copy
2C7C000
stack
page read and write
3013000
heap
page read and write
3C19000
direct allocation
page read and write
3024000
heap
page read and write
11DB000
stack
page read and write
3A73000
direct allocation
page read and write
3D1E000
direct allocation
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
1696000
heap
page read and write
3024000
heap
page read and write
1686000
heap
page read and write
16A4000
heap
page read and write
B24000
unkown
page readonly
41BE000
direct allocation
page read and write
122E000
stack
page read and write
3DB0000
direct allocation
page read and write
3024000
heap
page read and write
A71000
unkown
page execute read
3024000
heap
page read and write
1781000
heap
page read and write
1510000
heap
page read and write
101D000
heap
page read and write
3212000
heap
page read and write
2DE0000
heap
page read and write
A71000
unkown
page execute read
3DB0000
direct allocation
page read and write
BC0000
heap
page read and write
3024000
heap
page read and write
1146000
heap
page read and write
2D70000
heap
page read and write
3024000
heap
page read and write
3D1E000
direct allocation
page read and write
FFE000
stack
page read and write
1597000
heap
page read and write
4090000
direct allocation
page read and write
3013000
heap
page read and write
1160000
heap
page read and write
3BC0000
heap
page read and write
3013000
heap
page read and write
475000
system
page execute and read and write
3013000
heap
page read and write
3024000
heap
page read and write
A70000
unkown
page readonly
9A0000
heap
page read and write
A71000
unkown
page execute read
5F0000
heap
page read and write
3B03000
direct allocation
page read and write
1670000
heap
page execute and read and write
3024000
heap
page read and write
39E0000
direct allocation
page read and write
1664000
heap
page read and write
1260000
heap
page read and write
121E000
stack
page read and write
1024000
heap
page read and write
AFF000
unkown
page readonly
3013000
heap
page read and write
3024000
heap
page read and write
323E000
stack
page read and write
3013000
heap
page read and write
1074000
heap
page read and write
F7F000
stack
page read and write
3013000
heap
page read and write
12FB000
stack
page read and write
BB96FFE000
stack
page read and write
1D33287D000
heap
page read and write
3B80000
direct allocation
page read and write
1D3327EE000
heap
page read and write
B24000
unkown
page readonly
BB971FC000
stack
page read and write
B2E000
unkown
page write copy
3C1D000
direct allocation
page read and write
1075000
heap
page read and write
A70000
unkown
page readonly
B24000
unkown
page readonly
3013000
heap
page read and write
1410000
heap
page read and write
160B000
heap
page read and write
17A4000
heap
page read and write
3013000
heap
page read and write
15C7000
heap
page read and write
3024000
heap
page read and write
2CF0000
heap
page read and write
1450000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
42C9000
direct allocation
page read and write
BB96559000
stack
page read and write
1483000
heap
page read and write
3013000
heap
page read and write
1510000
heap
page read and write
17BC000
heap
page read and write
E97000
unkown
page readonly
160B000
heap
page read and write
98E000
stack
page read and write
3024000
heap
page read and write
E5F000
unkown
page readonly
1781000
heap
page read and write
13B0000
heap
page read and write
3002000
heap
page read and write
1095000
heap
page read and write
4090000
direct allocation
page read and write
B2E000
unkown
page write copy
A71000
unkown
page execute read
3013000
heap
page read and write
4359000
direct allocation
page read and write
147C000
stack
page read and write
10A5000
heap
page read and write
3C1D000
direct allocation
page read and write
182E000
heap
page read and write
1012000
heap
page read and write
3ED9000
direct allocation
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
F7E000
stack
page read and write
AFF000
unkown
page readonly
127B000
heap
page read and write
3024000
heap
page read and write
1410000
heap
page read and write
3014000
heap
page read and write
B24000
unkown
page readonly
3024000
heap
page read and write
3025000
heap
page read and write
35CF000
stack
page read and write
3024000
heap
page read and write
A70000
unkown
page readonly
B37000
unkown
page readonly
101C000
heap
page execute and read and write
3AAE000
stack
page read and write
3024000
heap
page read and write
1457000
heap
page read and write
174D000
heap
page read and write
4230000
direct allocation
page read and write
6A9000
stack
page read and write
1160000
heap
page read and write
3024000
heap
page read and write
1D332824000
heap
page read and write
4EEE000
stack
page read and write
3013000
heap
page read and write
16C8000
heap
page read and write
1779000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
1671000
heap
page read and write
4123000
direct allocation
page read and write
333E000
stack
page read and write
1483000
heap
page read and write
15F7000
heap
page read and write
435D000
direct allocation
page read and write
156F000
heap
page read and write
190E000
heap
page read and write
4020000
direct allocation
page read and write
174D000
heap
page read and write
174C000
heap
page execute and read and write
3EDD000
direct allocation
page read and write
4FEF000
stack
page read and write
1D3327C0000
heap
page read and write
1074000
heap
page read and write
3024000
heap
page read and write
116C000
heap
page read and write
1D332ABE000
heap
page read and write
FAF000
stack
page read and write
1809000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
10B9000
heap
page read and write
3013000
heap
page read and write
16A4000
heap
page read and write
143F000
stack
page read and write
1764000
heap
page read and write
1075000
heap
page read and write
16C8000
heap
page read and write
10F8000
heap
page read and write
3024000
heap
page read and write
15C6000
heap
page read and write
172A000
heap
page read and write
3013000
heap
page read and write
3CE1000
direct allocation
page read and write
3236000
heap
page read and write
1E2E000
stack
page read and write
1160000
heap
page read and write
3014000
heap
page read and write
3024000
heap
page read and write
478000
system
page execute and read and write
157C000
heap
page read and write
11A4000
heap
page read and write
15D5000
heap
page read and write
3C19000
direct allocation
page read and write
1418000
heap
page read and write
15C6000
heap
page read and write
3024000
heap
page read and write
1D332824000
heap
page read and write
43CE000
direct allocation
page read and write
3024000
heap
page read and write
1483000
heap
page read and write
3013000
heap
page read and write
1160000
heap
page read and write
15A3000
heap
page read and write
1742000
heap
page read and write
3EDD000
direct allocation
page read and write
162E000
stack
page read and write
103A000
heap
page read and write
3013000
heap
page read and write
1563000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
170A000
heap
page read and write
16E8000
heap
page read and write
347E000
stack
page read and write
3A30000
direct allocation
page read and write
A71000
unkown
page execute read
3013000
heap
page read and write
1160000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
144B000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
1074000
heap
page read and write
E97000
unkown
page readonly
1051000
heap
page read and write
15C6000
heap
page read and write
41B3000
direct allocation
page read and write
4EAF000
stack
page read and write
17A4000
heap
page read and write
FE0000
heap
page read and write
2D80000
heap
page readonly
3101000
heap
page read and write
1D332811000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
1781000
heap
page read and write
3B59000
direct allocation
page read and write
3013000
heap
page read and write
189D000
heap
page read and write
E84000
unkown
page readonly
1184000
heap
page read and write
950000
heap
page read and write
170A000
heap
page read and write
3144000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
13CE000
stack
page read and write
3024000
heap
page read and write
B32000
unkown
page write copy
A70000
unkown
page readonly
B24000
unkown
page readonly
17A4000
heap
page read and write
3CD3000
direct allocation
page read and write
FD0000
direct allocation
page read and write
41A0000
direct allocation
page read and write
14A7000
heap
page read and write
B24000
unkown
page readonly
A71000
unkown
page execute read
144F000
heap
page execute and read and write
1074000
heap
page read and write
2E02000
heap
page read and write
1051000
heap
page read and write
B32000
unkown
page write copy
1185000
heap
page read and write
150A000
heap
page read and write
DD0000
unkown
page readonly
1D3326D0000
heap
page read and write
15C7000
heap
page read and write
3E80000
direct allocation
page read and write
1134000
heap
page read and write
3024000
heap
page read and write
1D332AB0000
heap
page read and write
43CE000
direct allocation
page read and write
1678000
heap
page read and write
3950000
direct allocation
page read and write
3024000
heap
page read and write
1587000
heap
page read and write
3013000
heap
page read and write
A70000
unkown
page readonly
3016000
heap
page read and write
3024000
heap
page read and write
17C5000
heap
page read and write
1D332AB5000
heap
page read and write
3013000
heap
page read and write
1630000
heap
page read and write
3024000
heap
page read and write
38D4000
heap
page read and write
1796000
heap
page read and write
12DF000
stack
page read and write
17A4000
heap
page read and write
B37000
unkown
page readonly
15E7000
heap
page read and write
1051000
heap
page read and write
42CD000
direct allocation
page read and write
1662000
heap
page read and write
950000
heap
page read and write
1562000
heap
page read and write
3013000
heap
page read and write
14A8000
heap
page read and write
15C6000
heap
page read and write
3013000
heap
page read and write
910000
heap
page read and write
3013000
heap
page read and write
15C6000
heap
page read and write
4230000
direct allocation
page read and write
3024000
heap
page read and write
1F0F000
stack
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
10F0000
heap
page read and write
4000000
direct allocation
page read and write
1D3327EF000
heap
page read and write
3C8E000
direct allocation
page read and write
1678000
heap
page read and write
10E0000
heap
page read and write
B24000
unkown
page readonly
B32000
unkown
page write copy
B24000
unkown
page readonly
3013000
heap
page read and write
A6E000
stack
page read and write
B24000
unkown
page readonly
B32000
unkown
page write copy
920000
heap
page read and write
3CA9000
direct allocation
page read and write
1483000
heap
page read and write
123B000
stack
page read and write
3024000
heap
page read and write
1035000
heap
page read and write
3013000
heap
page read and write
17D5000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
E92000
unkown
page write copy
1195000
heap
page read and write
123E000
stack
page read and write
3013000
heap
page read and write
1718000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
F8E000
stack
page read and write
B37000
unkown
page readonly
710000
heap
page read and write
3013000
heap
page read and write
1184000
heap
page read and write
11CA000
heap
page read and write
3C10000
direct allocation
page read and write
1184000
heap
page read and write
1145000
heap
page read and write
16C8000
heap
page read and write
160A000
heap
page read and write
A3E000
stack
page read and write
1876000
heap
page read and write
3E80000
direct allocation
page read and write
1477000
heap
page read and write
435D000
direct allocation
page read and write
2D40000
heap
page read and write
168D000
heap
page read and write
B37000
unkown
page readonly
172C000
heap
page read and write
AFF000
unkown
page readonly
3013000
heap
page read and write
FBC000
stack
page read and write
15A3000
heap
page read and write
348F000
stack
page read and write
3CAD000
direct allocation
page read and write
4123000
direct allocation
page read and write
3024000
heap
page read and write
39B3000
direct allocation
page read and write
B37000
unkown
page readonly
41B3000
direct allocation
page read and write
3013000
heap
page read and write
A70000
unkown
page readonly
41A0000
direct allocation
page read and write
3024000
heap
page read and write
3BCE000
direct allocation
page read and write
1012000
heap
page read and write
1085000
heap
page read and write
3013000
heap
page read and write
BB970FF000
stack
page read and write
4230000
direct allocation
page read and write
3013000
heap
page read and write
14A7000
heap
page read and write
3CAD000
direct allocation
page read and write
3024000
heap
page read and write
39E0000
direct allocation
page read and write
1585000
heap
page read and write
9AE000
stack
page read and write
433E000
direct allocation
page read and write
BB969FE000
stack
page read and write
3A73000
direct allocation
page read and write
1000000
heap
page read and write
B2E000
unkown
page write copy
16A4000
heap
page read and write
162A000
heap
page read and write
14E0000
heap
page read and write
11CF000
stack
page read and write
16A4000
heap
page read and write
17B5000
heap
page read and write
17A5000
heap
page read and write
1122000
heap
page read and write
112A000
heap
page read and write
4DAE000
stack
page read and write
3024000
heap
page read and write
3CAD000
direct allocation
page read and write
11E9000
heap
page read and write
1456000
heap
page execute and read and write
3024000
heap
page read and write
17A5000
heap
page read and write
1D33287B000
heap
page read and write
14EB000
heap
page read and write
131C000
stack
page read and write
3024000
heap
page read and write
16C9000
heap
page read and write
10BA000
heap
page read and write
1024000
heap
page read and write
16BB000
heap
page read and write
1442000
heap
page read and write
39B3000
direct allocation
page read and write
101D000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
1483000
heap
page read and write
1160000
heap
page read and write
1122000
heap
page read and write
B2E000
unkown
page write copy
1742000
heap
page read and write
3013000
heap
page read and write
12EC000
heap
page read and write
58A000
stack
page read and write
B37000
unkown
page readonly
1D3328C0000
heap
page read and write
3013000
heap
page read and write
3024000
heap
page read and write
14A7000
heap
page read and write
F8F000
stack
page read and write
3000000
heap
page read and write
3013000
heap
page read and write
D70000
heap
page read and write
3013000
heap
page read and write
E5F000
unkown
page readonly
1D2F000
stack
page read and write
1678000
heap
page read and write
B32000
unkown
page write copy
1754000
heap
page read and write
3B5D000
direct allocation
page read and write
1013000
heap
page read and write
10C0000
heap
page read and write
3024000
heap
page read and write
3C8E000
direct allocation
page read and write
17E9000
heap
page read and write
41A0000
direct allocation
page read and write
170B000
heap
page read and write
174A000
heap
page read and write
3013000
heap
page read and write
1D332824000
heap
page read and write
3024000
heap
page read and write
A70000
unkown
page readonly
1467000
heap
page read and write
1576000
heap
page read and write
1460000
heap
page read and write
3024000
heap
page read and write
3013000
heap
page read and write
3D1E000
direct allocation
page read and write
144F000
stack
page read and write
2CA0000
heap
page read and write
3013000
heap
page read and write
1D33287B000
heap
page read and write
17EA000
heap
page read and write
1D3328E0000
heap
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
11BF000
stack
page read and write
3013000
heap
page read and write
42C9000
direct allocation
page read and write
3AF0000
direct allocation
page read and write
1781000
heap
page read and write
3013000
heap
page read and write
A71000
unkown
page execute read
3024000
heap
page read and write
38D0000
heap
page read and write
3013000
heap
page read and write
3890000
direct allocation
page read and write
3014000
heap
page read and write
1743000
heap
page read and write
1D332810000
heap
page read and write
B2E000
unkown
page read and write
1123000
heap
page read and write
3B80000
direct allocation
page read and write
1859000
heap
page read and write
15A4000
heap
page read and write
3B5D000
direct allocation
page read and write
B2E000
unkown
page read and write
3F4E000
direct allocation
page read and write
B37000
unkown
page readonly
39E0000
direct allocation
page read and write
3024000
heap
page read and write
3B80000
direct allocation
page read and write
1D332ABC000
heap
page read and write
4123000
direct allocation
page read and write
4000000
direct allocation
page read and write
2C3C000
stack
page read and write
14F0000
heap
page read and write
4149000
direct allocation
page read and write
3013000
heap
page read and write
159A000
heap
page read and write
1264000
heap
page read and write
126D000
heap
page read and write
3024000
heap
page read and write
1443000
heap
page read and write
A70000
unkown
page readonly
1D332813000
heap
page read and write
BB968FF000
stack
page read and write
1D33287B000
heap
page read and write
414D000
direct allocation
page read and write
14A9000
heap
page read and write
14A7000
heap
page read and write
1450000
heap
page read and write
3015000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
4090000
direct allocation
page read and write
3024000
heap
page read and write
1781000
heap
page read and write
3ED9000
direct allocation
page read and write
14D8000
heap
page read and write
3024000
heap
page read and write
B2E000
unkown
page read and write
3140000
heap
page read and write
18EF000
stack
page read and write
3024000
heap
page read and write
1D3327C8000
heap
page read and write
1051000
heap
page read and write
E59000
stack
page read and write
160A000
heap
page read and write
3C20000
direct allocation
page read and write
3024000
heap
page read and write
AFF000
unkown
page readonly
3AF0000
direct allocation
page read and write
433E000
direct allocation
page read and write
3024000
heap
page read and write
1442000
heap
page read and write
7F0000
heap
page read and write
1135000
heap
page read and write
3013000
heap
page read and write
3AF0000
direct allocation
page read and write
16C8000
heap
page read and write
3024000
heap
page read and write
14C8000
heap
page read and write
3013000
heap
page read and write
1074000
heap
page read and write
15A3000
heap
page read and write
1108000
heap
page read and write
17A4000
heap
page read and write
3013000
heap
page read and write
11C9000
heap
page read and write
12B0000
heap
page read and write
3C1D000
direct allocation
page read and write
3024000
heap
page read and write
3024000
heap
page read and write
3B03000
direct allocation
page read and write
B37000
unkown
page readonly
10D0000
heap
page read and write
3890000
direct allocation
page read and write
A71000
unkown
page execute read
107A000
stack
page read and write
3024000
heap
page read and write
2CC0000
heap
page read and write
3013000
heap
page read and write
3013000
heap
page read and write
1774000
heap
page read and write
3BC4000
heap
page read and write
1D3327F6000
heap
page read and write
3FA3000
direct allocation
page read and write
41B3000
direct allocation
page read and write
3024000
heap
page read and write
1710000
heap
page read and write
17DF000
stack
page read and write
41BE000
direct allocation
page read and write
16C9000
heap
page read and write
FF8000
heap
page read and write
AFF000
unkown
page readonly
3013000
heap
page read and write
3013000
heap
page read and write
166B000
heap
page read and write
There are 804 hidden memdumps, click here to show them.