Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
QQE81XYXon.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\WINDOWS\qeriuwjhrf (copy)
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Windows\tasksche.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\QQE81XYXon.dll,PlayGame
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\QQE81XYXon.dll",#1
|
||
C:\Windows\mssecsvr.exe
|
C:\WINDOWS\mssecsvr.exe
|
||
C:\Windows\mssecsvr.exe
|
C:\WINDOWS\mssecsvr.exe -m security
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\QQE81XYXon.dll",PlayGame
|
||
C:\Windows\mssecsvr.exe
|
C:\WINDOWS\mssecsvr.exe
|
||
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe "C:\Users\user\Desktop\QQE81XYXon.dll"
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\QQE81XYXon.dll",#1
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-08af-9581-038eeaa6c3
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.comV1
|
unknown
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-06c2-ab55-018cebe831fb
|
199.59.243.228
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-0847-82be-09ad5d5cb4
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/)
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/&
|
unknown
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/
|
unknown
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-06c2-ab55-018cebe831
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
|
unknown
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-08af-9581-038eeaa6c39e
|
199.59.243.228
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/?subid1=20250116-0507-0847-82be-09ad5d5cb439
|
199.59.243.228
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/B
|
unknown
|
||
http://ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/p
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/
|
103.224.212.215
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/a
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/:
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.comJ
|
unknown
|
||
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com/8
|
unknown
|
There are 8 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
77026.bodis.com
|
199.59.243.228
|
||
www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
|
103.224.212.215
|
||
ww25.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.97
|
unknown
|
unknown
|
||
192.168.2.96
|
unknown
|
unknown
|
||
192.168.2.99
|
unknown
|
unknown
|
||
192.168.2.98
|
unknown
|
unknown
|
||
192.168.2.91
|
unknown
|
unknown
|
||
192.168.2.90
|
unknown
|
unknown
|
||
192.168.2.93
|
unknown
|
unknown
|
||
192.168.2.92
|
unknown
|
unknown
|
||
192.168.2.95
|
unknown
|
unknown
|
||
192.168.2.94
|
unknown
|
unknown
|
||
192.168.2.104
|
unknown
|
unknown
|
||
192.168.2.105
|
unknown
|
unknown
|
||
192.168.2.102
|
unknown
|
unknown
|
||
192.168.2.103
|
unknown
|
unknown
|
||
192.168.2.108
|
unknown
|
unknown
|
||
192.168.2.109
|
unknown
|
unknown
|
||
192.168.2.106
|
unknown
|
unknown
|
||
192.168.2.107
|
unknown
|
unknown
|
||
192.168.2.100
|
unknown
|
unknown
|
||
15.8.58.250
|
unknown
|
United States
|
||
49.114.69.2
|
unknown
|
China
|
||
49.114.69.1
|
unknown
|
China
|
||
192.168.2.148
|
unknown
|
unknown
|
||
192.168.2.149
|
unknown
|
unknown
|
||
192.168.2.146
|
unknown
|
unknown
|
||
192.168.2.147
|
unknown
|
unknown
|
||
192.168.2.140
|
unknown
|
unknown
|
||
192.168.2.141
|
unknown
|
unknown
|
||
192.168.2.144
|
unknown
|
unknown
|
||
192.168.2.145
|
unknown
|
unknown
|
||
118.54.82.1
|
unknown
|
Korea Republic of
|
||
192.168.2.142
|
unknown
|
unknown
|
||
192.168.2.143
|
unknown
|
unknown
|
||
153.143.158.1
|
unknown
|
Japan
|
||
104.205.84.2
|
unknown
|
Canada
|
||
192.168.2.159
|
unknown
|
unknown
|
||
7.138.150.1
|
unknown
|
United States
|
||
192.168.2.157
|
unknown
|
unknown
|
||
192.168.2.158
|
unknown
|
unknown
|
||
192.168.2.151
|
unknown
|
unknown
|
||
192.168.2.152
|
unknown
|
unknown
|
||
54.192.5.1
|
unknown
|
United States
|
||
192.168.2.150
|
unknown
|
unknown
|
||
192.168.2.155
|
unknown
|
unknown
|
||
192.168.2.156
|
unknown
|
unknown
|
||
104.205.84.1
|
unknown
|
Canada
|
||
192.168.2.153
|
unknown
|
unknown
|
||
153.143.158.197
|
unknown
|
Japan
|
||
192.168.2.154
|
unknown
|
unknown
|
||
117.41.142.1
|
unknown
|
China
|
||
173.218.135.151
|
unknown
|
United States
|
||
192.168.2.126
|
unknown
|
unknown
|
||
192.168.2.247
|
unknown
|
unknown
|
||
192.168.2.127
|
unknown
|
unknown
|
||
192.168.2.248
|
unknown
|
unknown
|
||
192.168.2.124
|
unknown
|
unknown
|
||
192.168.2.245
|
unknown
|
unknown
|
||
192.168.2.125
|
unknown
|
unknown
|
||
192.168.2.246
|
unknown
|
unknown
|
||
192.168.2.128
|
unknown
|
unknown
|
||
192.168.2.249
|
unknown
|
unknown
|
||
192.168.2.129
|
unknown
|
unknown
|
||
192.168.2.240
|
unknown
|
unknown
|
||
192.168.2.122
|
unknown
|
unknown
|
||
192.168.2.243
|
unknown
|
unknown
|
||
192.168.2.123
|
unknown
|
unknown
|
||
192.168.2.244
|
unknown
|
unknown
|
||
192.168.2.120
|
unknown
|
unknown
|
||
192.168.2.241
|
unknown
|
unknown
|
||
192.168.2.121
|
unknown
|
unknown
|
||
192.168.2.242
|
unknown
|
unknown
|
||
200.198.81.1
|
unknown
|
Brazil
|
||
32.52.139.1
|
unknown
|
United States
|
||
203.128.199.61
|
unknown
|
Korea Republic of
|
||
192.168.2.137
|
unknown
|
unknown
|
||
192.168.2.138
|
unknown
|
unknown
|
||
192.168.2.135
|
unknown
|
unknown
|
||
192.168.2.136
|
unknown
|
unknown
|
||
192.168.2.139
|
unknown
|
unknown
|
||
192.168.2.250
|
unknown
|
unknown
|
||
192.168.2.130
|
unknown
|
unknown
|
||
192.168.2.251
|
unknown
|
unknown
|
||
192.168.2.133
|
unknown
|
unknown
|
||
192.168.2.254
|
unknown
|
unknown
|
||
192.168.2.134
|
unknown
|
unknown
|
||
192.168.2.131
|
unknown
|
unknown
|
||
192.168.2.252
|
unknown
|
unknown
|
||
192.168.2.132
|
unknown
|
unknown
|
||
192.168.2.253
|
unknown
|
unknown
|
||
149.241.237.229
|
unknown
|
United Kingdom
|
||
192.168.2.225
|
unknown
|
unknown
|
||
192.168.2.226
|
unknown
|
unknown
|
||
192.168.2.223
|
unknown
|
unknown
|
||
186.162.98.1
|
unknown
|
Peru
|
||
192.168.2.224
|
unknown
|
unknown
|
||
192.168.2.229
|
unknown
|
unknown
|
||
192.168.2.227
|
unknown
|
unknown
|
||
192.168.2.228
|
unknown
|
unknown
|
||
63.35.17.92
|
unknown
|
United States
|
||
186.162.98.9
|
unknown
|
Peru
|
There are 90 hidden IPs, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
710000
|
unkown
|
page readonly
|
||
710000
|
unkown
|
page readonly
|
||
1D5C000
|
heap
|
page read and write
|
||
40F000
|
unkown
|
page write copy
|
||
710000
|
unkown
|
page readonly
|
||
710000
|
unkown
|
page readonly
|
||
42E000
|
unkown
|
page read and write
|
||
40F000
|
unkown
|
page write copy
|
||
710000
|
unkown
|
page readonly
|
||
40F000
|
unkown
|
page write copy
|
||
40F000
|
unkown
|
page write copy
|
||
40F000
|
unkown
|
page write copy
|
||
710000
|
unkown
|
page readonly
|
||
2286000
|
heap
|
page read and write
|
||
638F000
|
stack
|
page read and write
|
||
498E000
|
stack
|
page read and write
|
||
C90E000
|
stack
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
77CE000
|
stack
|
page read and write
|
||
BB0F000
|
stack
|
page read and write
|
||
3A8F000
|
unkown
|
page read and write
|
||
340F000
|
stack
|
page read and write
|
||
2780000
|
heap
|
page read and write
|
||
930F000
|
stack
|
page read and write
|
||
370000
|
heap
|
page read and write
|
||
EC0E000
|
stack
|
page read and write
|
||
24B000
|
stack
|
page read and write
|
||
3F8E000
|
stack
|
page read and write
|
||
984E000
|
stack
|
page read and write
|
||
AACF000
|
stack
|
page read and write
|
||
2F7E000
|
stack
|
page read and write
|
||
D94E000
|
stack
|
page read and write
|
||
6150000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
7A0F000
|
stack
|
page read and write
|
||
A60000
|
heap
|
page read and write
|
||
D08E000
|
stack
|
page read and write
|
||
818F000
|
stack
|
page read and write
|
||
36CE000
|
stack
|
page read and write
|
||
2CBF000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
E08F000
|
stack
|
page read and write
|
||
C54E000
|
stack
|
page read and write
|
||
DBCE000
|
stack
|
page read and write
|
||
F60000
|
heap
|
page read and write
|
||
9E4F000
|
stack
|
page read and write
|
||
594F000
|
stack
|
page read and write
|
||
D1CE000
|
stack
|
page read and write
|
||
844E000
|
stack
|
page read and write
|
||
EE0000
|
heap
|
page read and write
|
||
D18F000
|
stack
|
page read and write
|
||
5F0E000
|
stack
|
page read and write
|
||
5C8E000
|
stack
|
page read and write
|
||
AD8E000
|
stack
|
page read and write
|
||
6C8E000
|
stack
|
page read and write
|
||
B28E000
|
stack
|
page read and write
|
||
778F000
|
stack
|
page read and write
|
||
5A0000
|
heap
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
8A8E000
|
stack
|
page read and write
|
||
534E000
|
stack
|
page read and write
|
||
7A4E000
|
stack
|
page read and write
|
||
750F000
|
stack
|
page read and write
|
||
2B3F000
|
stack
|
page read and write
|
||
409E000
|
stack
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
430F000
|
stack
|
page read and write
|
||
93E000
|
stack
|
page read and write
|
||
26B0000
|
heap
|
page read and write
|
||
B00E000
|
stack
|
page read and write
|
||
994F000
|
stack
|
page read and write
|
||
C3CF000
|
stack
|
page read and write
|
||
7DCF000
|
stack
|
page read and write
|
||
560E000
|
stack
|
page read and write
|
||
334F000
|
stack
|
page read and write
|
||
E48E000
|
stack
|
page read and write
|
||
B9CF000
|
stack
|
page read and write
|
||
310000
|
heap
|
page read and write
|
||
E3F000
|
stack
|
page read and write
|
||
287F000
|
stack
|
page read and write
|
||
E1CF000
|
stack
|
page read and write
|
||
DE0F000
|
stack
|
page read and write
|
||
9ACE000
|
stack
|
page read and write
|
||
4BCF000
|
stack
|
page read and write
|
||
330E000
|
stack
|
page read and write
|
||
41B0000
|
heap
|
page read and write
|
||
2DBF000
|
stack
|
page read and write
|
||
AFCF000
|
stack
|
page read and write
|
||
300000
|
heap
|
page read and write
|
||
894E000
|
stack
|
page read and write
|
||
317F000
|
stack
|
page read and write
|
||
CB4F000
|
stack
|
page read and write
|
||
411E000
|
stack
|
page read and write
|
||
E5CE000
|
stack
|
page read and write
|
||
2CBE000
|
stack
|
page read and write
|
||
4EDE000
|
stack
|
page read and write
|
||
368F000
|
stack
|
page read and write
|
||
BB4E000
|
stack
|
page read and write
|
||
C2CE000
|
stack
|
page read and write
|
||
4E9E000
|
stack
|
page read and write
|
||
E34E000
|
stack
|
page read and write
|
||
BF0E000
|
stack
|
page read and write
|
||
D40F000
|
stack
|
page read and write
|
||
D44E000
|
stack
|
page read and write
|
||
29C000
|
stack
|
page read and write
|
||
E70E000
|
stack
|
page read and write
|
||
42A0000
|
heap
|
page read and write
|
||
3BCE000
|
stack
|
page read and write
|
||
431000
|
unkown
|
page read and write
|
||
40DF000
|
stack
|
page read and write
|
||
E44F000
|
stack
|
page read and write
|
||
28BE000
|
stack
|
page read and write
|
||
64CF000
|
stack
|
page read and write
|
||
1D49000
|
heap
|
page read and write
|
||
31BE000
|
stack
|
page read and write
|
||
2CFE000
|
stack
|
page read and write
|
||
B10F000
|
stack
|
page read and write
|
||
183D000
|
stack
|
page read and write
|
||
BDE000
|
stack
|
page read and write
|
||
F40000
|
heap
|
page read and write
|
||
A48000
|
heap
|
page read and write
|
||
2DCF000
|
stack
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
358E000
|
stack
|
page read and write
|
||
C28000
|
heap
|
page read and write
|
||
41CF000
|
stack
|
page read and write
|
||
2DE0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
B7F000
|
stack
|
page read and write
|
||
1A7F000
|
stack
|
page read and write
|
||
197E000
|
stack
|
page read and write
|
||
664E000
|
stack
|
page read and write
|
||
9FCE000
|
stack
|
page read and write
|
||
A38000
|
heap
|
page read and write
|
||
B00000
|
heap
|
page read and write
|
||
448E000
|
stack
|
page read and write
|
||
2A60000
|
heap
|
page read and write
|
||
714F000
|
stack
|
page read and write
|
||
9F8F000
|
stack
|
page read and write
|
||
E84E000
|
stack
|
page read and write
|
||
2760000
|
heap
|
page read and write
|
||
A60E000
|
stack
|
page read and write
|
||
307E000
|
stack
|
page read and write
|
||
CC8F000
|
stack
|
page read and write
|
||
C7CE000
|
stack
|
page read and write
|
||
C00F000
|
stack
|
page read and write
|
||
96CF000
|
stack
|
page read and write
|
||
FBE000
|
stack
|
page read and write
|
||
9F0000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
F7E000
|
stack
|
page read and write
|
||
CF0F000
|
stack
|
page read and write
|
||
CE0E000
|
stack
|
page read and write
|
||
B00000
|
heap
|
page read and write
|
||
15BE000
|
stack
|
page read and write
|
||
2DFE000
|
stack
|
page read and write
|
||
E98E000
|
stack
|
page read and write
|
||
B74F000
|
stack
|
page read and write
|
||
C20000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
28FE000
|
stack
|
page read and write
|
||
A20000
|
heap
|
page read and write
|
||
30C0000
|
heap
|
page read and write
|
||
A34F000
|
stack
|
page read and write
|
||
68CE000
|
stack
|
page read and write
|
||
D6CE000
|
stack
|
page read and write
|
||
6A0E000
|
stack
|
page read and write
|
||
330D000
|
stack
|
page read and write
|
||
EACE000
|
stack
|
page read and write
|
||
D54F000
|
stack
|
page read and write
|
||
A48000
|
heap
|
page read and write
|
||
DE4E000
|
stack
|
page read and write
|
||
40F000
|
unkown
|
page write copy
|
||
A1E000
|
stack
|
page read and write
|
||
D3F000
|
stack
|
page read and write
|
||
27BE000
|
stack
|
page read and write
|
||
ACE000
|
heap
|
page read and write
|
||
193B000
|
stack
|
page read and write
|
||
A6E000
|
stack
|
page read and write
|
||
CA0F000
|
stack
|
page read and write
|
||
1ABE000
|
stack
|
page read and write
|
||
A2E000
|
stack
|
page read and write
|
||
C14F000
|
stack
|
page read and write
|
||
DF8E000
|
stack
|
page read and write
|
||
A70F000
|
stack
|
page read and write
|
||
B38F000
|
stack
|
page read and write
|
||
72CE000
|
stack
|
page read and write
|
||
28C000
|
stack
|
page read and write
|
||
990000
|
heap
|
page read and write
|
||
458F000
|
stack
|
page read and write
|
||
970E000
|
stack
|
page read and write
|
||
EE8E000
|
stack
|
page read and write
|
||
998E000
|
stack
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
D2E000
|
stack
|
page read and write
|
||
674F000
|
stack
|
page read and write
|
||
B8D000
|
heap
|
page read and write
|
||
320E000
|
stack
|
page read and write
|
||
E30F000
|
stack
|
page read and write
|
||
6B0F000
|
stack
|
page read and write
|
||
434E000
|
stack
|
page read and write
|
||
3E4E000
|
stack
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
400000
|
unkown
|
page readonly
|
||
4FCE000
|
stack
|
page read and write
|
||
1D4D000
|
heap
|
page read and write
|
||
520F000
|
stack
|
page read and write
|
||
4F1E000
|
stack
|
page read and write
|
||
25B000
|
stack
|
page read and write
|
||
344E000
|
stack
|
page read and write
|
||
D68F000
|
stack
|
page read and write
|
||
CDCF000
|
stack
|
page read and write
|
||
2A3E000
|
stack
|
page read and write
|
||
E0CE000
|
stack
|
page read and write
|
||
A1C000
|
heap
|
page read and write
|
||
2EFF000
|
stack
|
page read and write
|
||
C18E000
|
stack
|
page read and write
|
||
D80E000
|
stack
|
page read and write
|
||
A74E000
|
stack
|
page read and write
|
||
431000
|
unkown
|
page read and write
|
||
944F000
|
stack
|
page read and write
|
||
3B8F000
|
stack
|
page read and write
|
||
9BCF000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
484E000
|
stack
|
page read and write
|
||
1C3E000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
920E000
|
stack
|
page read and write
|
||
5A4F000
|
stack
|
page read and write
|
||
E6CF000
|
stack
|
page read and write
|
||
B60F000
|
stack
|
page read and write
|
||
69CF000
|
stack
|
page read and write
|
||
754E000
|
stack
|
page read and write
|
||
9EB000
|
heap
|
page read and write
|
||
A4CE000
|
stack
|
page read and write
|
||
2CCE000
|
stack
|
page read and write
|
||
6ECF000
|
stack
|
page read and write
|
||
2C7F000
|
stack
|
page read and write
|
||
37E000
|
stack
|
page read and write
|
||
C7E000
|
heap
|
page read and write
|
||
BA0E000
|
stack
|
page read and write
|
||
790E000
|
stack
|
page read and write
|
||
AEE000
|
stack
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
16FE000
|
stack
|
page read and write
|
||
574E000
|
stack
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
29FF000
|
stack
|
page read and write
|
||
C28F000
|
stack
|
page read and write
|
||
728F000
|
stack
|
page read and write
|
||
5EE000
|
stack
|
page read and write
|
||
2F3F000
|
stack
|
page read and write
|
||
2A40000
|
heap
|
page read and write
|
||
398E000
|
stack
|
page read and write
|
||
604E000
|
stack
|
page read and write
|
||
63CE000
|
stack
|
page read and write
|
||
283A000
|
heap
|
page read and write
|
||
6F0E000
|
stack
|
page read and write
|
||
7CCE000
|
stack
|
page read and write
|
||
E20E000
|
stack
|
page read and write
|
||
9FD000
|
heap
|
page read and write
|
||
E2F000
|
stack
|
page read and write
|
||
95CE000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
408F000
|
stack
|
page read and write
|
||
2F3E000
|
stack
|
page read and write
|
||
46CF000
|
stack
|
page read and write
|
||
2930000
|
heap
|
page read and write
|
||
37CF000
|
stack
|
page read and write
|
||
A5CF000
|
stack
|
page read and write
|
||
BC4F000
|
stack
|
page read and write
|
||
DA8E000
|
stack
|
page read and write
|
||
4F5E000
|
stack
|
page read and write
|
||
AE8F000
|
stack
|
page read and write
|
||
42F000
|
unkown
|
page write copy
|
||
B40000
|
heap
|
page read and write
|
||
23E0000
|
heap
|
page read and write
|
||
32BF000
|
stack
|
page read and write
|
||
A4F000
|
heap
|
page read and write
|
||
90CE000
|
stack
|
page read and write
|
||
A24E000
|
stack
|
page read and write
|
||
C1E000
|
stack
|
page read and write
|
||
2F0000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
B05000
|
heap
|
page read and write
|
||
5ECF000
|
stack
|
page read and write
|
||
B4CF000
|
stack
|
page read and write
|
||
8A4F000
|
stack
|
page read and write
|
||
D58E000
|
stack
|
page read and write
|
||
600F000
|
stack
|
page read and write
|
||
354F000
|
stack
|
page read and write
|
||
3CCF000
|
stack
|
page read and write
|
||
2A0F000
|
stack
|
page read and write
|
||
31BB000
|
stack
|
page read and write
|
||
4C0E000
|
stack
|
page read and write
|
||
854F000
|
stack
|
page read and write
|
||
28BF000
|
stack
|
page read and write
|
||
390F000
|
stack
|
page read and write
|
||
4D5E000
|
stack
|
page read and write
|
||
480F000
|
stack
|
page read and write
|
||
A64000
|
heap
|
page read and write
|
||
B14E000
|
stack
|
page read and write
|
||
5B4F000
|
stack
|
page read and write
|
||
ED4E000
|
stack
|
page read and write
|
||
B4E000
|
heap
|
page read and write
|
||
270F000
|
stack
|
page read and write
|
||
2830000
|
heap
|
page read and write
|
||
650E000
|
stack
|
page read and write
|
||
6C4F000
|
stack
|
page read and write
|
||
307E000
|
stack
|
page read and write
|
||
A0CF000
|
stack
|
page read and write
|
||
87CF000
|
stack
|
page read and write
|
||
8FD000
|
stack
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
4D0F000
|
stack
|
page read and write
|
||
82CF000
|
stack
|
page read and write
|
||
E1F000
|
stack
|
page read and write
|
||
9F8000
|
heap
|
page read and write
|
||
A38E000
|
stack
|
page read and write
|
||
7B8E000
|
stack
|
page read and write
|
||
1D3E000
|
stack
|
page read and write
|
||
B4E000
|
stack
|
page read and write
|
||
8CCF000
|
stack
|
page read and write
|
||
DF4F000
|
stack
|
page read and write
|
||
7C8F000
|
stack
|
page read and write
|
||
AC4E000
|
stack
|
page read and write
|
||
DD0E000
|
stack
|
page read and write
|
||
C4F000
|
stack
|
page read and write
|
||
9D0F000
|
stack
|
page read and write
|
||
C04E000
|
stack
|
page read and write
|
||
ED0F000
|
stack
|
page read and write
|
||
858E000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
AECE000
|
stack
|
page read and write
|
||
8B8F000
|
stack
|
page read and write
|
||
688F000
|
stack
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
2BBF000
|
stack
|
page read and write
|
||
27CF000
|
stack
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
AB0E000
|
stack
|
page read and write
|
||
840F000
|
stack
|
page read and write
|
||
D04F000
|
stack
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
E58F000
|
stack
|
page read and write
|
||
548F000
|
stack
|
page read and write
|
||
590000
|
heap
|
page read and write
|
||
948E000
|
stack
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
226B000
|
heap
|
page read and write
|
||
768E000
|
stack
|
page read and write
|
||
510E000
|
stack
|
page read and write
|
||
3F4F000
|
stack
|
page read and write
|
||
880E000
|
stack
|
page read and write
|
||
2650000
|
heap
|
page read and write
|
||
2700000
|
heap
|
page read and write
|
||
32C0000
|
heap
|
page read and write
|
||
8E4E000
|
stack
|
page read and write
|
||
B88F000
|
stack
|
page read and write
|
||
4E5F000
|
stack
|
page read and write
|
||
830E000
|
stack
|
page read and write
|
||
F3F000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
16BE000
|
stack
|
page read and write
|
||
CCCE000
|
stack
|
page read and write
|
||
2E3E000
|
stack
|
page read and write
|
||
EE4F000
|
stack
|
page read and write
|
||
8E0F000
|
stack
|
page read and write
|
||
A10E000
|
stack
|
page read and write
|
||
980F000
|
stack
|
page read and write
|
||
50CF000
|
stack
|
page read and write
|
||
91CF000
|
stack
|
page read and write
|
||
EA8F000
|
stack
|
page read and write
|
||
804F000
|
stack
|
page read and write
|
||
C78F000
|
stack
|
page read and write
|
||
A9CE000
|
stack
|
page read and write
|
||
3E0F000
|
stack
|
page read and write
|
||
A75000
|
heap
|
page read and write
|
||
C8E000
|
stack
|
page read and write
|
||
CB8E000
|
stack
|
page read and write
|
||
17FD000
|
stack
|
page read and write
|
||
C64F000
|
stack
|
page read and write
|
||
868F000
|
stack
|
page read and write
|
||
890F000
|
stack
|
page read and write
|
||
8F8E000
|
stack
|
page read and write
|
||
9E8E000
|
stack
|
page read and write
|
||
A4F000
|
heap
|
page read and write
|
||
A4F000
|
heap
|
page read and write
|
||
1BBF000
|
stack
|
page read and write
|
||
660F000
|
stack
|
page read and write
|
||
DB8F000
|
stack
|
page read and write
|
||
EF8F000
|
stack
|
page read and write
|
||
73CF000
|
stack
|
page read and write
|
||
415F000
|
stack
|
page read and write
|
||
28FF000
|
stack
|
page read and write
|
||
584F000
|
stack
|
page read and write
|
||
628E000
|
stack
|
page read and write
|
||
C50F000
|
stack
|
page read and write
|
||
EBCF000
|
stack
|
page read and write
|
||
C5E000
|
heap
|
page read and write
|
||
6DCE000
|
stack
|
page read and write
|
||
AAE000
|
stack
|
page read and write
|
||
444F000
|
stack
|
page read and write
|
||
9EF000
|
heap
|
page read and write
|
||
2B0F000
|
stack
|
page read and write
|
||
958F000
|
stack
|
page read and write
|
||
B8CE000
|
stack
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
B64E000
|
stack
|
page read and write
|
||
8F4F000
|
stack
|
page read and write
|
||
A84F000
|
stack
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
263C000
|
stack
|
page read and write
|
||
FB0000
|
heap
|
page read and write
|
||
764F000
|
stack
|
page read and write
|
||
A37000
|
heap
|
page read and write
|
||
CF4E000
|
stack
|
page read and write
|
||
37B000
|
stack
|
page read and write
|
||
394E000
|
stack
|
page read and write
|
||
CA4E000
|
stack
|
page read and write
|
||
300000
|
heap
|
page read and write
|
||
D2CF000
|
stack
|
page read and write
|
||
B24F000
|
stack
|
page read and write
|
||
C8C000
|
heap
|
page read and write
|
||
A5E000
|
heap
|
page read and write
|
||
A70000
|
heap
|
page read and write
|
||
324E000
|
stack
|
page read and write
|
||
D90F000
|
stack
|
page read and write
|
||
BECF000
|
stack
|
page read and write
|
||
45CE000
|
stack
|
page read and write
|
||
420E000
|
stack
|
page read and write
|
||
E80F000
|
stack
|
page read and write
|
||
C68E000
|
stack
|
page read and write
|
||
2E3E000
|
stack
|
page read and write
|
||
A65000
|
heap
|
page read and write
|
||
F67000
|
heap
|
page read and write
|
||
2F3E000
|
stack
|
page read and write
|
||
C8CF000
|
stack
|
page read and write
|
||
5D8F000
|
stack
|
page read and write
|
||
78CF000
|
stack
|
page read and write
|
||
530F000
|
stack
|
page read and write
|
||
5DCE000
|
stack
|
page read and write
|
||
470E000
|
stack
|
page read and write
|
||
AD4F000
|
stack
|
page read and write
|
||
7E0E000
|
stack
|
page read and write
|
||
A48000
|
heap
|
page read and write
|
||
908F000
|
stack
|
page read and write
|
||
3D0E000
|
stack
|
page read and write
|
||
9A8F000
|
stack
|
page read and write
|
||
8D0E000
|
stack
|
page read and write
|
||
6163000
|
heap
|
page read and write
|
||
704E000
|
stack
|
page read and write
|
||
2B4E000
|
stack
|
page read and write
|
||
81CE000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
A98F000
|
stack
|
page read and write
|
||
40A000
|
unkown
|
page readonly
|
||
BD8F000
|
stack
|
page read and write
|
||
BAC000
|
heap
|
page read and write
|
||
D30E000
|
stack
|
page read and write
|
||
54CE000
|
stack
|
page read and write
|
||
A48F000
|
stack
|
page read and write
|
||
30BD000
|
stack
|
page read and write
|
||
808E000
|
stack
|
page read and write
|
||
BDCE000
|
stack
|
page read and write
|
||
2B7E000
|
stack
|
page read and write
|
||
D7CF000
|
stack
|
page read and write
|
||
B50000
|
heap
|
page read and write
|
||
7F4E000
|
stack
|
page read and write
|
||
9D4E000
|
stack
|
page read and write
|
||
2F7D000
|
stack
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
614F000
|
stack
|
page read and write
|
||
303F000
|
stack
|
page read and write
|
||
40B000
|
unkown
|
page write copy
|
||
700F000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
52D000
|
stack
|
page read and write
|
||
570F000
|
stack
|
page read and write
|
||
FD0000
|
heap
|
page read and write
|
||
BB9000
|
heap
|
page read and write
|
||
6D8F000
|
stack
|
page read and write
|
||
C40E000
|
stack
|
page read and write
|
||
A5E000
|
heap
|
page read and write
|
||
307B000
|
stack
|
page read and write
|
||
380E000
|
stack
|
page read and write
|
||
D8F000
|
stack
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
B4A000
|
heap
|
page read and write
|
||
283E000
|
stack
|
page read and write
|
||
B50E000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
B78E000
|
stack
|
page read and write
|
||
A88E000
|
stack
|
page read and write
|
||
AC0F000
|
stack
|
page read and write
|
||
678E000
|
stack
|
page read and write
|
||
538E000
|
stack
|
page read and write
|
||
8BCE000
|
stack
|
page read and write
|
||
2DFF000
|
stack
|
page read and write
|
||
274E000
|
stack
|
page read and write
|
||
718E000
|
stack
|
page read and write
|
||
2660000
|
heap
|
page read and write
|
||
2C4F000
|
stack
|
page read and write
|
||
E94F000
|
stack
|
page read and write
|
||
40CE000
|
stack
|
page read and write
|
||
26BA000
|
heap
|
page read and write
|
||
934E000
|
stack
|
page read and write
|
||
6B4E000
|
stack
|
page read and write
|
||
B3CE000
|
stack
|
page read and write
|
||
4ACE000
|
stack
|
page read and write
|
||
740E000
|
stack
|
page read and write
|
||
494F000
|
stack
|
page read and write
|
||
A20F000
|
stack
|
page read and write
|
||
BC8E000
|
stack
|
page read and write
|
||
DA4F000
|
stack
|
page read and write
|
||
DCCF000
|
stack
|
page read and write
|
||
431000
|
unkown
|
page read and write
|
||
7B4F000
|
stack
|
page read and write
|
||
270A000
|
heap
|
page read and write
|
||
9C0E000
|
stack
|
page read and write
|
||
86CE000
|
stack
|
page read and write
|
||
5C4F000
|
stack
|
page read and write
|
||
7F0F000
|
stack
|
page read and write
|
||
4A8F000
|
stack
|
page read and write
|
||
55CF000
|
stack
|
page read and write
|
There are 517 hidden memdumps, click here to show them.