IOC Report
Payment slip_pdf.pif.exe

loading gif

Files

File Path
Type
Category
Malicious
Payment slip_pdf.pif.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
 malicious
C:\ProgramData\Remcos\remcos.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsc2507.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nscFE55.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsgAF89.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsoDBD9.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsv644C.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\Remcos\remcos.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\nsc2507.tmp\Mallas110.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nscFE55.tmp\Mallas110.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nsgAF89.tmp\Mallas110.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nsoDBD9.tmp\Mallas110.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nsv644C.tmp\Mallas110.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Archipterygium53.dob
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\Bondestue\maveforklelsernes.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 229x461, components 3
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\Bondestue\muscadinia.sve
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\Bondestue\overglamorized.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 70x718, components 3
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\Bondestue\saaningens.unt
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\Bondestue\ultramicrotome.cum
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Regimentets\knguruernes.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 584x106, components 3
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Skylleriets206.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\Terrassering.Bud
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\attentatmanden.Fik
data
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\craniom.ini
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\desinfektioner.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\kabinetssekretr\Idriftstte\fyrtaarnes.txt
ASCII text, with CRLF line terminators
dropped
There are 16 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Payment slip_pdf.pif.exe
"C:\Users\user\Desktop\Payment slip_pdf.pif.exe"
 malicious
C:\Users\user\Desktop\Payment slip_pdf.pif.exe
"C:\Users\user\Desktop\Payment slip_pdf.pif.exe"
 malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious

URLs

Name
IP
Malicious
https://www.google.com
unknown
https://drive.usercontent.google.com/
unknown
http://nsis.sf.net/NSIS_Error
unknown
https://apis.google.com
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown
https://drive.google.com/
unknown

Domains

Name
IP
Malicious
drive.google.com
216.58.206.78
drive.usercontent.google.com
142.250.186.129

IPs

IP
Domain
Country
Malicious
142.250.186.129
drive.usercontent.google.com
United States
216.58.206.78
drive.google.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Rmc-4U257D
 malicious
HKEY_CURRENT_USER\reattains\Uninstall\sensommeren\expo
decims
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Rmc-4U257D

Memdumps

Base Address
Regiontype
Protect
Malicious
5671000
heap
page read and write
 malicious
9A20000
direct allocation
page execute and read and write
 malicious
6E9000
heap
page read and write
4E3C000
heap
page read and write
4F36000
heap
page read and write
42B000
unkown
page read and write
401000
unkown
page execute read
4C77000
heap
page read and write
43CF000
heap
page read and write
6BA000
heap
page read and write
87F000
stack
page read and write
44A000
unkown
page read and write
41F4000
heap
page read and write
4F14000
heap
page read and write
4790000
heap
page read and write
5398000
heap
page read and write
409000
unkown
page read and write
519F000
heap
page read and write
4C00000
heap
page read and write
2B91000
heap
page read and write
56B4000
heap
page read and write
2BC7000
heap
page read and write
410E000
heap
page read and write
2A68000
heap
page read and write
423A000
heap
page read and write
4C38000
heap
page read and write
56CB000
heap
page read and write
4ED6000
heap
page read and write
512A000
heap
page read and write
2B6A000
heap
page read and write
4FCC000
heap
page read and write
5817000
heap
page read and write
4CED000
heap
page read and write
663000
heap
page read and write
55FD000
heap
page read and write
56AC000
heap
page read and write
5165000
heap
page read and write
47DD000
heap
page read and write
5106000
heap
page read and write
4EB2000
heap
page read and write
554A000
heap
page read and write
4C75000
heap
page read and write
4B48000
heap
page read and write
43AC000
heap
page read and write
2A9D000
heap
page read and write
55E5000
heap
page read and write
29D0000
heap
page read and write
76E000
heap
page read and write
575A000
heap
page read and write
50C8000
heap
page read and write
2B16000
heap
page read and write
4DF2000
heap
page read and write
2CEC000
heap
page read and write
4AC4000
heap
page read and write
76A000
heap
page read and write
52B6000
heap
page read and write
5258000
heap
page read and write
2A23000
heap
page read and write
551F000
heap
page read and write
4FB9000
heap
page read and write
2B31000
heap
page read and write
22B0000
unkown
page readonly
2BE5000
heap
page read and write
5875000
heap
page read and write
48A3000
heap
page read and write
28C0000
heap
page read and write
44F2000
heap
page read and write
5314000
heap
page read and write
56C1000
heap
page read and write
5775000
heap
page read and write
559B000
heap
page read and write
4B0B000
heap
page read and write
4CA8000
heap
page read and write
2C36000
heap
page read and write
43F9000
heap
page read and write
228E000
stack
page read and write
28A0000
heap
page read and write
2A64000
heap
page read and write
2960000
heap
page read and write
5723000
heap
page read and write
440000
unkown
page read and write
464D000
heap
page read and write
6CE000
stack
page read and write
5585000
heap
page read and write
537C000
heap
page read and write
6800000
direct allocation
page execute and read and write
2A2E000
heap
page read and write
4CD5000
heap
page read and write
4342000
heap
page read and write
2D89000
heap
page read and write
7C1000
heap
page read and write
4E43000
heap
page read and write
2C41000
heap
page read and write
508C000
heap
page read and write
55DB000
heap
page read and write
5746000
heap
page read and write
4C66000
heap
page read and write
4771000
heap
page read and write
4FF3000
heap
page read and write
2984000
heap
page read and write
463A000
heap
page read and write
54BB000
heap
page read and write
52BA000
heap
page read and write
5630000
heap
page read and write
44B000
unkown
page readonly
40CF000
heap
page read and write
4A14000
heap
page read and write
5468000
heap
page read and write
29D2000
heap
page read and write
521B000
heap
page read and write
66E000
stack
page read and write
40C4000
heap
page read and write
2AFF000
heap
page read and write
4FE8000
heap
page read and write
2A5B000
heap
page read and write
4E01000
heap
page read and write
5623000
heap
page read and write
58B7000
heap
page read and write
19A000
stack
page read and write
4E28000
heap
page read and write
44A000
unkown
page read and write
4A9E000
heap
page read and write
5830000
heap
page read and write
2C63000
heap
page read and write
2D34000
heap
page read and write
55DA000
heap
page read and write
5698000
heap
page read and write
498D000
heap
page read and write
4F78000
heap
page read and write
4651000
heap
page read and write
468F000
heap
page read and write
746000
heap
page read and write
2BE0000
heap
page read and write
2C83000
heap
page read and write
5EE000
stack
page read and write
507B000
heap
page read and write
47F1000
heap
page read and write
5608000
heap
page read and write
4E0000
heap
page read and write
59E000
stack
page read and write
2C05000
heap
page read and write
28AB000
heap
page read and write
5795000
heap
page read and write
47AF000
heap
page read and write
729000
heap
page read and write
2A4B000
heap
page read and write
2BCC000
heap
page read and write
6E0000
heap
page read and write
5283000
heap
page read and write
4F64000
heap
page read and write
4818000
heap
page read and write
53C6000
heap
page read and write
523A000
heap
page read and write
4A1C000
heap
page read and write
2BDB000
heap
page read and write
4F64000
heap
page read and write
574B000
heap
page read and write
407000
unkown
page readonly
4D66000
heap
page read and write
731000
heap
page read and write
4700000
heap
page read and write
4E30000
heap
page read and write
4BC0000
heap
page read and write
4C1E000
heap
page read and write
277F000
stack
page read and write
4D5F000
heap
page read and write
513D000
heap
page read and write
4BAD000
heap
page read and write
4F5C000
heap
page read and write
5119000
heap
page read and write
41D0000
heap
page read and write
2A24000
heap
page read and write
400000
unkown
page readonly
4121000
heap
page read and write
2A2B000
heap
page read and write
2DE0000
trusted library allocation
page read and write
52F4000
heap
page read and write
35AE0000
heap
page read and write
53AF000
heap
page read and write
358B1000
heap
page read and write
579C000
heap
page read and write
2310000
heap
page read and write
4E72000
heap
page read and write
506C000
heap
page read and write
54B0000
heap
page read and write
4B6F000
heap
page read and write
4CB1000
heap
page read and write
4183000
heap
page read and write
4E06000
heap
page read and write
2980000
heap
page read and write
2C1F000
heap
page read and write
5603000
heap
page read and write
2C3F000
heap
page read and write
492C000
heap
page read and write
56C9000
heap
page read and write
4852000
heap
page read and write
51FC000
heap
page read and write
4D70000
heap
page read and write
4B73000
heap
page read and write
49D6000
heap
page read and write
29FF000
heap
page read and write
760000
heap
page read and write
563F000
heap
page read and write
2C30000
heap
page read and write
1F0000
heap
page read and write
5095000
heap
page read and write
4B29000
heap
page read and write
2ACE000
heap
page read and write
5404000
heap
page read and write
4ED2000
heap
page read and write
504B000
heap
page read and write
5580000
heap
page read and write
4B31000
heap
page read and write
6F8000
heap
page read and write
6A0000
heap
page read and write
4B5C000
heap
page read and write
4D00000
heap
page read and write
5207000
heap
page read and write
5362000
heap
page read and write
55BB000
heap
page read and write
57DA000
heap
page read and write
2A56000
heap
page read and write
41E3000
heap
page read and write
5811000
heap
page read and write
4DDD000
heap
page read and write
791000
heap
page read and write
4F7E000
heap
page read and write
56E5000
heap
page read and write
50C2000
heap
page read and write
29E0000
heap
page read and write
4DA8000
heap
page read and write
5192000
heap
page read and write
509F000
heap
page read and write
5378000
heap
page read and write
4F11000
heap
page read and write
5618000
heap
page read and write
519D000
heap
page read and write
4C22000
heap
page read and write
2D8C000
heap
page read and write
4BF5000
heap
page read and write
518C000
heap
page read and write
5187000
heap
page read and write
4C5F000
heap
page read and write
580B000
heap
page read and write
28E8000
heap
page read and write
5F0000
direct allocation
page read and write
583E000
heap
page read and write
2A9F000
heap
page read and write
4F8A000
heap
page read and write
4943000
heap
page read and write
5594000
heap
page read and write
57E6000
heap
page read and write
54D1000
heap
page read and write
2B04000
heap
page read and write
400000
unkown
page readonly
505D000
heap
page read and write
4C51000
heap
page read and write
4E3B000
heap
page read and write
28FB000
heap
page read and write
5316000
heap
page read and write
426B000
heap
page read and write
52DA000
heap
page read and write
2B70000
heap
page read and write
4CE6000
heap
page read and write
50AA000
heap
page read and write
501B000
heap
page read and write
43EE000
heap
page read and write
5464000
heap
page read and write
2C48000
heap
page read and write
2894000
heap
page read and write
55E1000
heap
page read and write
7DE000
heap
page read and write
2ACE000
heap
page read and write
2314000
heap
page read and write
4F34000
heap
page read and write
2BA8000
heap
page read and write
2C9A000
heap
page read and write
438D000
heap
page read and write
58BC000
heap
page read and write
5017000
heap
page read and write
459B000
heap
page read and write
4170000
heap
page read and write
2A8F000
heap
page read and write
5082000
heap
page read and write
422A000
heap
page read and write
533A000
heap
page read and write
297C000
heap
page read and write
2AA2000
heap
page read and write
4C46000
heap
page read and write
2AF0000
heap
page read and write
51A7000
heap
page read and write
51CA000
heap
page read and write
2C0A000
heap
page read and write
4AED000
heap
page read and write
5656000
heap
page read and write
4A80000
remote allocation
page execute and read and write
2B27000
heap
page read and write
5559000
heap
page read and write
4495000
heap
page read and write
2C0E000
heap
page read and write
501E000
heap
page read and write
4D05000
heap
page read and write
2B65000
heap
page read and write
45A3000
heap
page read and write
57BC000
heap
page read and write
2BFA000
heap
page read and write
74C000
heap
page read and write
4797000
heap
page read and write
28F7000
heap
page read and write
2BFB000
heap
page read and write
4B5C000
heap
page read and write
429A000
heap
page read and write
2A27000
heap
page read and write
400000
unkown
page readonly
50A2000
heap
page read and write
2BE7000
heap
page read and write
2C19000
heap
page read and write
239C000
stack
page read and write
4C68000
heap
page read and write
4CDD000
heap
page read and write
4CCA000
heap
page read and write
2938000
heap
page read and write
41C9000
heap
page read and write
6F4000
heap
page read and write
420000
unkown
page read and write
41C1000
heap
page read and write
53D5000
heap
page read and write
448E000
heap
page read and write
676000
heap
page read and write
4AE2000
heap
page read and write
4FC2000
heap
page read and write
6F2000
heap
page read and write
4DC7000
heap
page read and write
46DA000
heap
page read and write
5104000
heap
page read and write
2BE3000
heap
page read and write
4F4D000
heap
page read and write
569F000
heap
page read and write
47D6000
heap
page read and write
51AE000
heap
page read and write
29BC000
heap
page read and write
518E000
heap
page read and write
4620000
heap
page read and write
5093000
heap
page read and write
4FFB000
heap
page read and write
4AED000
heap
page read and write
53D1000
heap
page read and write
75A000
heap
page read and write
5552000
heap
page read and write
56BB000
heap
page read and write
4E67000
heap
page read and write
4788000
heap
page read and write
356E0000
remote allocation
page read and write
3575F000
stack
page read and write
5598000
heap
page read and write
46DE000
heap
page read and write
41ED000
heap
page read and write
486E000
heap
page read and write
56B2000
heap
page read and write
426C000
heap
page read and write
2BEF000
heap
page read and write
764000
heap
page read and write
52E9000
heap
page read and write
2AF8000
heap
page read and write
401000
unkown
page execute read
52DC000
heap
page read and write
55C3000
heap
page read and write
4268000
heap
page read and write
2D3B000
heap
page read and write
556C000
heap
page read and write
576D000
heap
page read and write
523D000
heap
page read and write
5753000
heap
page read and write
29A9000
heap
page read and write
409000
unkown
page write copy
5C0000
heap
page read and write
40CB000
heap
page read and write
5077000
heap
page read and write
56DA000
heap
page read and write
52E5000
heap
page read and write
52AD000
heap
page read and write
4E3F000
heap
page read and write
49E9000
heap
page read and write
57F5000
heap
page read and write
2A84000
heap
page read and write
43EA000
heap
page read and write
534D000
heap
page read and write
5E3000
heap
page read and write
4402000
heap
page read and write
53C9000
heap
page read and write
291F000
heap
page read and write
4B3C000
heap
page read and write
4BEA000
heap
page read and write
5C9000
heap
page read and write
547D000
heap
page read and write
224E000
stack
page read and write
4C0A000
heap
page read and write
4070000
trusted library allocation
page read and write
2A1C000
heap
page read and write
4E0A000
heap
page read and write
5833000
heap
page read and write
4AC3000
heap
page read and write
5092000
heap
page read and write
2BFD000
heap
page read and write
28CC000
stack
page read and write
2B7D000
heap
page read and write
488C000
heap
page read and write
46A0000
heap
page read and write
4192000
heap
page read and write
4A76000
heap
page read and write
28BE000
heap
page read and write
4B25000
heap
page read and write
4177000
heap
page read and write
459F000
heap
page read and write
4270000
heap
page read and write
4B4C000
heap
page read and write
49FA000
heap
page read and write
4249000
heap
page read and write
2BEB000
heap
page read and write
521000
heap
page read and write
5148000
heap
page read and write
2A96000
heap
page read and write
543F000
heap
page read and write
44D7000
heap
page read and write
2BEE000
heap
page read and write
2A9C000
heap
page read and write
4E7D000
heap
page read and write
445F000
heap
page read and write
4ACE000
heap
page read and write
539C000
heap
page read and write
4FA2000
heap
page read and write
5490000
heap
page read and write
4D62000
heap
page read and write
4C70000
heap
page read and write
4BCC000
heap
page read and write
4CB7000
heap
page read and write
4214000
heap
page read and write
4F1C000
heap
page read and write
2D37000
heap
page read and write
2950000
heap
page read and write
5128000
heap
page read and write
4245000
heap
page read and write
35C5D000
stack
page read and write
2875000
heap
page read and write
409000
unkown
page write copy
4DAD000
heap
page read and write
54DD000
heap
page read and write
2A80000
heap
page read and write
70E000
stack
page read and write
583C000
heap
page read and write
711000
heap
page read and write
4E81000
heap
page read and write
57A8000
heap
page read and write
495E000
heap
page read and write
28A8000
heap
page read and write
5375000
heap
page read and write
51E1000
heap
page read and write
5447000
heap
page read and write
44BB000
heap
page read and write
4B69000
heap
page read and write
52BE000
heap
page read and write
4278000
heap
page read and write
5232000
heap
page read and write
41CC000
heap
page read and write
4EA3000
heap
page read and write
4FC9000
heap
page read and write
51C5000
heap
page read and write
57F1000
heap
page read and write
5159000
heap
page read and write
4FF0000
heap
page read and write
4BE6000
heap
page read and write
356E0000
remote allocation
page read and write
54EA000
heap
page read and write
409000
unkown
page write copy
4450000
heap
page read and write
2BD4000
heap
page read and write
5793000
heap
page read and write
2C43000
heap
page read and write
2C22000
heap
page read and write
55C7000
heap
page read and write
52F1000
heap
page read and write
446A000
heap
page read and write
4E45000
heap
page read and write
2C2E000
heap
page read and write
4BCF000
heap
page read and write
57B3000
heap
page read and write
42F3000
heap
page read and write
7C0000
direct allocation
page read and write
5601000
heap
page read and write
40D7000
heap
page read and write
2ADD000
heap
page read and write
501E000
heap
page read and write
57C0000
heap
page read and write
358B0000
heap
page read and write
510000
heap
page read and write
51F4000
heap
page read and write
4834000
heap
page read and write
2CB1000
heap
page read and write
4AB1000
heap
page read and write
34C20000
direct allocation
page read and write
4C39000
heap
page read and write
5378000
heap
page read and write
2CD5000
heap
page read and write
4FC0000
heap
page read and write
4C64000
heap
page read and write
4B5E000
heap
page read and write
53D5000
heap
page read and write
2D4E000
heap
page read and write
4717000
heap
page read and write
4AF5000
heap
page read and write
5446000
heap
page read and write
2B5D000
heap
page read and write
44B000
unkown
page readonly
356E0000
remote allocation
page read and write
47F9000
heap
page read and write
4EC5000
heap
page read and write
2B56000
heap
page read and write
4D08000
heap
page read and write
2910000
heap
page read and write
45D2000
heap
page read and write
4CF1000
heap
page read and write
484A000
heap
page read and write
517F000
heap
page read and write
533E000
heap
page read and write
52A9000
heap
page read and write
4FEF000
heap
page read and write
4F60000
heap
page read and write
57E2000
heap
page read and write
2320000
heap
page read and write
56E7000
heap
page read and write
5177000
heap
page read and write
53BE000
heap
page read and write
4E54000
heap
page read and write
5590000
heap
page read and write
564B000
heap
page read and write
34C60000
direct allocation
page read and write
535A000
heap
page read and write
4AE1000
heap
page read and write
5141000
heap
page read and write
4C15000
heap
page read and write
409000
unkown
page read and write
4A2B000
heap
page read and write
401000
unkown
page execute read
2AB5000
heap
page read and write
574F000
heap
page read and write
35B5C000
stack
page read and write
2B75000
heap
page read and write
5541000
heap
page read and write
6E8000
heap
page read and write
4FCD000
heap
page read and write
701000
heap
page read and write
4C07000
heap
page read and write
4B0F000
heap
page read and write
50FF000
heap
page read and write
5170000
heap
page read and write
43A8000
heap
page read and write
51F8000
heap
page read and write
5776000
heap
page read and write
2C50000
heap
page read and write
2250000
heap
page read and write
2BEB000
heap
page read and write
4E5B000
heap
page read and write
5605000
heap
page read and write
559F000
heap
page read and write
8DF000
stack
page read and write
560000
heap
page read and write
507F000
heap
page read and write
55DD000
heap
page read and write
573A000
heap
page read and write
524000
heap
page read and write
433F000
heap
page read and write
43D7000
heap
page read and write
4EFE000
heap
page read and write
541000
heap
page read and write
5500000
heap
page read and write
521E000
heap
page read and write
4CD9000
heap
page read and write
56ED000
heap
page read and write
2E80000
trusted library allocation
page read and write
5882000
heap
page read and write
529A000
heap
page read and write
2C59000
heap
page read and write
2D94000
heap
page read and write
6EDE000
stack
page read and write
2354000
heap
page read and write
5307000
heap
page read and write
2C15000
heap
page read and write
5791000
heap
page read and write
4623000
heap
page read and write
2B75000
heap
page read and write
7B6000
heap
page read and write
2BDF000
heap
page read and write
4BFC000
heap
page read and write
524000
heap
page read and write
4AE5000
heap
page read and write
2BCF000
heap
page read and write
5583000
heap
page read and write
5804000
heap
page read and write
4236000
heap
page read and write
5859000
heap
page read and write
4C28000
heap
page read and write
4B9E000
heap
page read and write
4814000
heap
page read and write
4AD3000
heap
page read and write
2B1A000
heap
page read and write
515C000
heap
page read and write
4CD2000
heap
page read and write
5627000
heap
page read and write
4A18000
heap
page read and write
8620000
direct allocation
page execute and read and write
5060000
heap
page read and write
2B36000
heap
page read and write
5216000
heap
page read and write
5789000
heap
page read and write
50AF000
heap
page read and write
50D8000
heap
page read and write
57D7000
heap
page read and write
4ADE000
heap
page read and write
77D000
heap
page read and write
525C000
heap
page read and write
4ABE000
heap
page read and write
54E000
heap
page read and write
4E8A000
heap
page read and write
10000000
unkown
page readonly
4E50000
heap
page read and write
510C000
heap
page read and write
538B000
heap
page read and write
56B3000
heap
page read and write
2A82000
heap
page read and write
54C2000
heap
page read and write
5174000
heap
page read and write
2C2C000
heap
page read and write
4130000
heap
page read and write
421B000
heap
page read and write
43A0000
heap
page read and write
55FC000
heap
page read and write
10003000
unkown
page readonly
5824000
heap
page read and write
2C11000
heap
page read and write
4D18000
heap
page read and write
5294000
heap
page read and write
4F60000
heap
page read and write
4DA8000
heap
page read and write
4C42000
heap
page read and write
57DE000
heap
page read and write
43D3000
heap
page read and write
5214000
heap
page read and write
2AE1000
heap
page read and write
2160000
unkown
page readonly
2ABD000
heap
page read and write
484E000
heap
page read and write
519B000
heap
page read and write
485B000
heap
page read and write
531E000
heap
page read and write
46CA000
heap
page read and write
4FA9000
heap
page read and write
52CA000
heap
page read and write
5417000
heap
page read and write
538B000
heap
page read and write
5610000
heap
page read and write
50EC000
heap
page read and write
21A0000
heap
page read and write
2ADF000
heap
page read and write
4C0F000
heap
page read and write
4B44000
heap
page read and write
50C4000
heap
page read and write
4C74000
heap
page read and write
4879000
heap
page read and write
2B4A000
heap
page read and write
4333000
heap
page read and write
565A000
heap
page read and write
4DE5000
heap
page read and write
55CF000
stack
page read and write
2A1F000
heap
page read and write
2D4A000
heap
page read and write
4BE2000
heap
page read and write
45C5000
heap
page read and write
49E2000
heap
page read and write
4144000
heap
page read and write
4481000
heap
page read and write
46D5000
heap
page read and write
798000
heap
page read and write
41B6000
heap
page read and write
5837000
heap
page read and write
4FD0000
heap
page read and write
526B000
heap
page read and write
4627000
heap
page read and write
2AFB000
heap
page read and write
51EC000
heap
page read and write
434000
unkown
page read and write
4B13000
heap
page read and write
51EC000
heap
page read and write
2AC0000
heap
page read and write
4B60000
heap
page read and write
4BB3000
heap
page read and write
401000
unkown
page execute read
28B7000
heap
page read and write
49D2000
heap
page read and write
4CF5000
heap
page read and write
4E56000
heap
page read and write
4C26000
heap
page read and write
4F77000
heap
page read and write
29CD000
stack
page read and write
4CFD000
heap
page read and write
4FEC000
heap
page read and write
54F4000
heap
page read and write
541C000
heap
page read and write
4DBB000
heap
page read and write
789000
heap
page read and write
2BE4000
heap
page read and write
2BB0000
heap
page read and write
53AA000
heap
page read and write
57FC000
heap
page read and write
4801000
heap
page read and write
4C44000
heap
page read and write
500B000
heap
page read and write
44B000
unkown
page readonly
5A0000
direct allocation
page read and write
52E1000
heap
page read and write
53E0000
heap
page read and write
584A000
heap
page read and write
4B04000
heap
page read and write
4C2E000
heap
page read and write
4E9B000
heap
page read and write
4B54000
heap
page read and write
291C000
heap
page read and write
44B000
unkown
page readonly
56C7000
heap
page read and write
45C1000
heap
page read and write
4B91000
heap
page read and write
4656000
heap
page read and write
2E60000
trusted library allocation
page read and write
2998000
heap
page read and write
570F000
heap
page read and write
41D8000
heap
page read and write
5077000
heap
page read and write
2B55000
heap
page read and write
49E5000
heap
page read and write
5326000
heap
page read and write
2B9B000
heap
page read and write
10005000
unkown
page readonly
29DD000
stack
page read and write
4B33000
heap
page read and write
63D000
heap
page read and write
4E0E000
heap
page read and write
34C50000
direct allocation
page read and write
41B6000
heap
page read and write
49B8000
heap
page read and write
2AC4000
heap
page read and write
72C000
heap
page read and write
5566000
heap
page read and write
4E1C000
heap
page read and write
51A5000
heap
page read and write
542E000
heap
page read and write
2AB9000
heap
page read and write
575A000
heap
page read and write
476D000
heap
page read and write
4D08000
heap
page read and write
4466000
heap
page read and write
42BA000
heap
page read and write
520E000
heap
page read and write
55B7000
heap
page read and write
2D9C000
heap
page read and write
5146000
heap
page read and write
52F4000
heap
page read and write
5380000
heap
page read and write
2CE1000
heap
page read and write
574D000
heap
page read and write
44EE000
heap
page read and write
4B6A000
heap
page read and write
5113000
heap
page read and write
57E9000
heap
page read and write
2CA2000
heap
page read and write
2D98000
heap
page read and write
5806000
heap
page read and write
53CD000
heap
page read and write
56BF000
heap
page read and write
10000000
unkown
page readonly
545E000
heap
page read and write
4F2B000
heap
page read and write
29AF000
heap
page read and write
2BF6000
heap
page read and write
4AAB000
heap
page read and write
493B000
heap
page read and write
4BDB000
heap
page read and write
289E000
heap
page read and write
4FDC000
heap
page read and write
5704000
heap
page read and write
57AC000
heap
page read and write
2C47000
heap
page read and write
2AA6000
heap
page read and write
450A000
heap
page read and write
7BD000
heap
page read and write
2A47000
heap
page read and write
615000
heap
page read and write
2B4A000
heap
page read and write
4D83000
heap
page read and write
4227000
heap
page read and write
4BB9000
heap
page read and write
446E000
heap
page read and write
6EE0000
direct allocation
page read and write
2AB9000
heap
page read and write
4DA4000
heap
page read and write
5455000
heap
page read and write
2988000
heap
page read and write
2BDD000
heap
page read and write
531A000
heap
page read and write
55AC000
heap
page read and write
5069000
heap
page read and write
43C8000
heap
page read and write
51B2000
heap
page read and write
4A8A000
heap
page read and write
416C000
heap
page read and write
4F33000
heap
page read and write
5204000
heap
page read and write
4C59000
heap
page read and write
2BEA000
heap
page read and write
5190000
heap
page read and write
4B3C000
heap
page read and write
4E5E000
heap
page read and write
2AF8000
heap
page read and write
809000
heap
page read and write
4FE0000
heap
page read and write
54CA000
heap
page read and write
4981000
heap
page read and write
55F9000
heap
page read and write
480C000
heap
page read and write
511D000
heap
page read and write
57A0000
heap
page read and write
2AF4000
heap
page read and write
4A98000
heap
page read and write
5141000
heap
page read and write
5121000
heap
page read and write
4599000
heap
page read and write
750000
heap
page read and write
4ACF000
heap
page read and write
49A4000
heap
page read and write
44FE000
heap
page read and write
55B0000
heap
page read and write
29EF000
heap
page read and write
5296000
heap
page read and write
5788000
heap
page read and write
5393000
heap
page read and write
559F000
heap
page read and write
54CE000
heap
page read and write
5342000
heap
page read and write
4ABA000
heap
page read and write
47AC000
heap
page read and write
2AC6000
heap
page read and write
4D7D000
heap
page read and write
4F73000
heap
page read and write
28F4000
heap
page read and write
44DF000
heap
page read and write
34C90000
direct allocation
page read and write
4ECE000
heap
page read and write
583B000
heap
page read and write
41E8000
heap
page read and write
4241000
heap
page read and write
409000
unkown
page write copy
4D79000
heap
page read and write
29BF000
heap
page read and write
570B000
heap
page read and write
2993000
heap
page read and write
29EC000
heap
page read and write
56E1000
heap
page read and write
2D5D000
heap
page read and write
5802000
heap
page read and write
2BF2000
heap
page read and write
4C53000
heap
page read and write
4B9A000
heap
page read and write
56B0000
heap
page read and write
2C41000
heap
page read and write
4C6C000
heap
page read and write
558A000
heap
page read and write
2C80000
heap
page read and write
4C5B000
heap
page read and write
4BCF000
heap
page read and write
5D0000
direct allocation
page read and write
2AD9000
heap
page read and write
55E000
stack
page read and write
2A43000
heap
page read and write
4C19000
heap
page read and write
2C5F000
heap
page read and write
4AB8000
heap
page read and write
5756000
heap
page read and write
2A0E000
heap
page read and write
49CF000
heap
page read and write
2C05000
heap
page read and write
29B3000
heap
page read and write
4F09000
heap
page read and write
497D000
heap
page read and write
2A24000
heap
page read and write
524D000
heap
page read and write
4A9F000
heap
page read and write
55B8000
heap
page read and write
4890000
heap
page read and write
529F000
heap
page read and write
4FAD000
heap
page read and write
2CCA000
heap
page read and write
2D7D000
heap
page read and write
4C35000
heap
page read and write
51F8000
heap
page read and write
480000
heap
page read and write
432B000
heap
page read and write
2B33000
heap
page read and write
4B62000
heap
page read and write
4D0C000
heap
page read and write
765000
heap
page read and write
2B61000
heap
page read and write
52F8000
heap
page read and write
4EB4000
heap
page read and write
412C000
heap
page read and write
5614000
heap
page read and write
4BC4000
heap
page read and write
47FD000
heap
page read and write
2CD9000
heap
page read and write
2932000
heap
page read and write
514A000
heap
page read and write
2AB5000
heap
page read and write
5290000
heap
page read and write
4D9D000
heap
page read and write
4346000
heap
page read and write
4BA9000
heap
page read and write
5426000
heap
page read and write
573E000
heap
page read and write
564E000
heap
page read and write
54F1000
heap
page read and write
4080000
remote allocation
page execute and read and write
5510000
heap
page read and write
5474000
heap
page read and write
5561000
heap
page read and write
52E8000
heap
page read and write
2AC8000
heap
page read and write
4E57000
heap
page read and write
2D43000
heap
page read and write
4A20000
heap
page read and write
5778000
heap
page read and write
4173000
heap
page read and write
40FE000
heap
page read and write
2B59000
heap
page read and write
5074000
heap
page read and write
5270000
heap
page read and write
5771000
heap
page read and write
499C000
heap
page read and write
4529000
heap
page read and write
4F45000
heap
page read and write
47E6000
heap
page read and write
563B000
heap
page read and write
5006000
heap
page read and write
41BD000
heap
page read and write
519000
heap
page read and write
413F000
heap
page read and write
5690000
heap
page read and write
521A000
heap
page read and write
770000
heap
page read and write
4B1A000
heap
page read and write
522B000
heap
page read and write
57A4000
heap
page read and write
4CB9000
heap
page read and write
4AD2000
heap
page read and write
2B7F000
heap
page read and write
463E000
heap
page read and write
4CF9000
heap
page read and write
2C9E000
heap
page read and write
5073000
heap
page read and write
4680000
heap
page read and write
774000
heap
page read and write
2A73000
heap
page read and write
64F000
heap
page read and write
420000
unkown
page read and write
4AE9000
heap
page read and write
49DE000
heap
page read and write
4A7A000
heap
page read and write
29DB000
heap
page read and write
434A000
heap
page read and write
4885000
heap
page read and write
4633000
heap
page read and write
40DB000
heap
page read and write
2C4C000
heap
page read and write
47B4000
heap
page read and write
4B02000
heap
page read and write
4EFA000
heap
page read and write
5218000
heap
page read and write
42B000
unkown
page read and write
2A01000
heap
page read and write
2A53000
heap
page read and write
2DA3000
heap
page read and write
4BA5000
heap
page read and write
5388000
heap
page read and write
2B1E000
heap
page read and write
4810000
heap
page read and write
506F000
heap
page read and write
29A0000
heap
page read and write
491C000
heap
page read and write
44B000
unkown
page readonly
2B00000
heap
page read and write
4B77000
heap
page read and write