IOC Report
ORIGINAL INVOICE COAU7230734290 pdf.bat.exe

loading gif

Files

File Path
Type
Category
Malicious
ORIGINAL INVOICE COAU7230734290 pdf.bat.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
 malicious
C:\ProgramData\Remcos\remcos.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsd1A26.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsg5579.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nsi4F73.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\nssA4F1.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\Remcos\remcos.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\Bombardementernes.Mon220
data
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\Hndernes.noc
data
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\Overhalingens.Rst147
data
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\meniscate.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 141x234, components 3
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\sulfonamid.red
data
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\udskilningslbs.skr
FoxPro FPT, blocks size 20736, next free block index 244, field type 0
dropped
C:\Users\user\AppData\Local\Temp\gennemgangs\Hokuspokus\unentreating.txt
ASCII text, with CRLF line terminators
dropped
There are 4 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\ORIGINAL INVOICE COAU7230734290 pdf.bat.exe
"C:\Users\user\Desktop\ORIGINAL INVOICE COAU7230734290 pdf.bat.exe"
 malicious
C:\Users\user\Desktop\ORIGINAL INVOICE COAU7230734290 pdf.bat.exe
"C:\Users\user\Desktop\ORIGINAL INVOICE COAU7230734290 pdf.bat.exe"
 malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious
C:\ProgramData\Remcos\remcos.exe
"C:\ProgramData\Remcos\remcos.exe"
malicious

URLs

Name
IP
Malicious
https://www.google.com
unknown
https://drive.usercontent.google.com/
unknown
https://drive.usercontent.google.com/f)
unknown
https://drive.google.com/k
unknown
http://nsis.sf.net/NSIS_Error
unknown
https://apis.google.com
unknown
http://nsis.sf.net/NSIS_Error...
unknown
https://drive.google.com/S
unknown

Domains

Name
IP
Malicious
drive.google.com
142.250.185.78
drive.usercontent.google.com
142.250.185.225

IPs

IP
Domain
Country
Malicious
142.250.185.78
drive.google.com
United States
142.250.185.225
drive.usercontent.google.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Rmc-4U257D
 malicious
HKEY_CURRENT_USER\foutre\palpifer
Tilsvarer
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Rmc-4U257D

Memdumps

Base Address
Regiontype
Protect
Malicious
67BC000
direct allocation
page execute and read and write
 malicious
49E5000
heap
page read and write
 malicious
66BC000
direct allocation
page execute and read and write
 malicious
4CFD000
heap
page read and write
467B000
heap
page read and write
4D40000
heap
page read and write
7A1000
unkown
page read and write
48CC000
heap
page read and write
49B9000
heap
page read and write
401000
unkown
page execute read
48E0000
heap
page read and write
4BCE000
heap
page read and write
7B7000
unkown
page readonly
34BFF000
stack
page read and write
493A000
heap
page read and write
655E000
stack
page read and write
4CE3000
heap
page read and write
4B8F000
heap
page read and write
4A12000
heap
page read and write
24F0000
unkown
page readonly
4863000
heap
page read and write
46AE000
heap
page read and write
482D000
heap
page read and write
2C74000
heap
page read and write
993000
heap
page read and write
4CC6000
heap
page read and write
2D46000
heap
page read and write
408000
unkown
page readonly
401000
unkown
page execute read
2CEC000
heap
page read and write
4D0C000
heap
page read and write
77B000
unkown
page read and write
2DDE000
heap
page read and write
4B80000
heap
page read and write
1F5000
heap
page read and write
4CEE000
heap
page read and write
2D33000
heap
page read and write
408000
unkown
page readonly
4D3E000
heap
page read and write
477A000
heap
page read and write
2E02000
heap
page read and write
4C7D000
heap
page read and write
A2E000
heap
page read and write
4AE4000
heap
page read and write
4CBE000
heap
page read and write
3040000
direct allocation
page read and write
4648000
heap
page read and write
7B5000
unkown
page read and write
2DFB000
heap
page read and write
4908000
heap
page read and write
4735000
heap
page read and write
47B8000
heap
page read and write
4B0C000
heap
page read and write
4A6F000
heap
page read and write
4767000
heap
page read and write
2CFB000
heap
page read and write
4858000
heap
page read and write
2D84000
heap
page read and write
2BD6000
heap
page read and write
2CE0000
heap
page read and write
472C000
heap
page read and write
4BA4000
heap
page read and write
7E0000
direct allocation
page read and write
4AD8000
heap
page read and write
475C000
heap
page read and write
2D06000
heap
page read and write
400000
unkown
page readonly
A54000
heap
page read and write
46D0000
heap
page read and write
7B7000
unkown
page readonly
4763000
heap
page read and write
2DCE000
heap
page read and write
2D5F000
heap
page read and write
492A000
heap
page read and write
2EC0000
direct allocation
page read and write
985000
heap
page read and write
2BE0000
heap
page read and write
5CBC000
direct allocation
page execute and read and write
2BE7000
heap
page read and write
476F000
heap
page read and write
71BC000
direct allocation
page execute and read and write
A5C000
heap
page read and write
2DE1000
heap
page read and write
7B7000
unkown
page readonly
2490000
heap
page read and write
4BA7000
heap
page read and write
79F000
unkown
page read and write
4E50000
heap
page read and write
49E3000
heap
page read and write
4CB7000
heap
page read and write
2DBF000
heap
page read and write
4A5A000
heap
page read and write
4AB5000
heap
page read and write
53BC000
direct allocation
page execute and read and write
2620000
heap
page read and write
48EC000
heap
page read and write
787000
unkown
page read and write
4C66000
heap
page read and write
4BA8000
heap
page read and write
4906000
heap
page read and write
4AAA000
heap
page read and write
4998000
heap
page read and write
4716000
heap
page read and write
475B000
heap
page read and write
400000
unkown
page readonly
4882000
heap
page read and write
401000
unkown
page execute read
49D0000
heap
page read and write
4638000
heap
page read and write
2DF7000
heap
page read and write
4990000
heap
page read and write
4C46000
heap
page read and write
4D71000
heap
page read and write
4CA8000
heap
page read and write
3030000
direct allocation
page read and write
6480000
direct allocation
page read and write
4A84000
heap
page read and write
4B86000
heap
page read and write
4C76000
heap
page read and write
481F000
heap
page read and write
2EDA000
heap
page read and write
2DDC000
heap
page read and write
4A5C000
heap
page read and write
2D7C000
heap
page read and write
48B6000
heap
page read and write
2DF5000
heap
page read and write
34B2D000
stack
page read and write
1A20000
remote allocation
page execute and read and write
7A1000
unkown
page read and write
4782000
heap
page read and write
40A000
unkown
page write copy
466B000
heap
page read and write
46DF000
heap
page read and write
2F82000
heap
page read and write
2BBA000
heap
page read and write
34BBE000
stack
page read and write
4C99000
heap
page read and write
4992000
heap
page read and write
473C000
heap
page read and write
2D1A000
heap
page read and write
2DE0000
heap
page read and write
2F10000
direct allocation
page read and write
4B67000
heap
page read and write
4C4A000
heap
page read and write
1D0000
heap
page read and write
4AB2000
heap
page read and write
2C69000
heap
page read and write
2D8A000
heap
page read and write
6EB86000
unkown
page readonly
4A16000
heap
page read and write
4E06000
heap
page read and write
474A000
heap
page read and write
2DD5000
heap
page read and write
2F3C000
heap
page read and write
2BBD000
heap
page read and write
2DCD000
heap
page read and write
476E000
heap
page read and write
2E39000
heap
page read and write
2520000
heap
page read and write
4AA2000
heap
page read and write
401000
unkown
page execute read
46C1000
heap
page read and write
47EB000
heap
page read and write
2C65000
heap
page read and write
4A31000
heap
page read and write
4D47000
heap
page read and write
2CE6000
heap
page read and write
4A97000
heap
page read and write
4A57000
heap
page read and write
4A20000
heap
page read and write
46A1000
heap
page read and write
3060000
direct allocation
page read and write
2FE0000
direct allocation
page read and write
4CD6000
heap
page read and write
49D0000
heap
page read and write
4B61000
heap
page read and write
2CE4000
heap
page read and write
2BC8000
heap
page read and write
2C3D000
heap
page read and write
900000
heap
page read and write
4981000
heap
page read and write
904000
heap
page read and write
4AC8000
heap
page read and write
2E39000
heap
page read and write
4AC2000
heap
page read and write
2CF3000
heap
page read and write
4BFC000
heap
page read and write
408000
unkown
page readonly
2C18000
heap
page read and write
4663000
heap
page read and write
461A000
heap
page read and write
2DF3000
heap
page read and write
4D64000
heap
page read and write
2E6B000
heap
page read and write
4A77000
heap
page read and write
2FB0000
direct allocation
page read and write
4CFB000
heap
page read and write
4A8E000
heap
page read and write
401000
unkown
page execute read
496F000
heap
page read and write
4966000
heap
page read and write
478D000
heap
page read and write
91C000
heap
page read and write
4B5B000
heap
page read and write
2F39000
heap
page read and write
497D000
heap
page read and write
4B71000
heap
page read and write
499C000
heap
page read and write
471A000
heap
page read and write
463C000
heap
page read and write
7A4000
unkown
page read and write
2D26000
heap
page read and write
4ADD000
heap
page read and write
34B80000
remote allocation
page read and write
900000
heap
page read and write
4D03000
heap
page read and write
46D2000
heap
page read and write
408000
unkown
page readonly
480B000
stack
page read and write
472D000
heap
page read and write
47BC000
heap
page read and write
49A6000
heap
page read and write
4B10000
heap
page read and write
47C7000
heap
page read and write
2470000
unkown
page readonly
4BB3000
heap
page read and write
4AFB000
heap
page read and write
46E4000
heap
page read and write
4AA2000
heap
page read and write
77B000
unkown
page read and write
2D86000
heap
page read and write
400000
unkown
page readonly
2FC0000
direct allocation
page read and write
49F8000
heap
page read and write
49DF000
heap
page read and write
4BC6000
heap
page read and write
2E66000
heap
page read and write
46D8000
heap
page read and write
491B000
heap
page read and write
4BBA000
heap
page read and write
4CAB000
heap
page read and write
4836000
heap
page read and write
6EB80000
unkown
page readonly
46D4000
heap
page read and write
4B82000
heap
page read and write
400000
unkown
page readonly
467E000
heap
page read and write
A09000
heap
page read and write
2CC7000
heap
page read and write
6500000
direct allocation
page read and write
4730000
heap
page read and write
408000
unkown
page readonly
24DE000
stack
page read and write
4A78000
heap
page read and write
2DED000
heap
page read and write
64E0000
direct allocation
page read and write
49AA000
heap
page read and write
4677000
heap
page read and write
4B31000
heap
page read and write
4D6A000
heap
page read and write
4657000
heap
page read and write
3468F000
stack
page read and write
2CE9000
heap
page read and write
4B92000
heap
page read and write
49DB000
heap
page read and write
4C0F000
heap
page read and write
2C41000
heap
page read and write
7B7000
unkown
page readonly
2494000
heap
page read and write
2DFE000
heap
page read and write
497E000
heap
page read and write
2C48000
heap
page read and write
4DFC000
heap
page read and write
400000
unkown
page readonly
4B35000
heap
page read and write
349CF000
stack
page read and write
4C18000
heap
page read and write
49A0000
heap
page read and write
2CC8000
heap
page read and write
4BA1000
heap
page read and write
47BF000
heap
page read and write
45C4000
heap
page read and write
2E29000
heap
page read and write
4D01000
heap
page read and write
31B0000
heap
page read and write
2DBB000
heap
page read and write
2C13000
heap
page read and write
4A23000
heap
page read and write
A4B000
heap
page read and write
99E000
heap
page read and write
2E73000
heap
page read and write
480E000
heap
page read and write
4982000
heap
page read and write
4729000
heap
page read and write
4A00000
heap
page read and write
4C61000
heap
page read and write
337C000
stack
page read and write
496E000
heap
page read and write
4D21000
heap
page read and write
2CDB000
heap
page read and write
4A73000
heap
page read and write
49FF000
heap
page read and write
2BB0000
heap
page read and write
40A000
unkown
page read and write
49D8000
heap
page read and write
2E2F000
heap
page read and write
2E6B000
heap
page read and write
4A07000
heap
page read and write
2C16000
heap
page read and write
E40000
heap
page read and write
2C4C000
heap
page read and write
46AC000
heap
page read and write
7B7000
unkown
page readonly
2D8E000
heap
page read and write
4876000
heap
page read and write
2BCC000
heap
page read and write
4831000
heap
page read and write
4672000
heap
page read and write
4BAC000
heap
page read and write
2E48000
heap
page read and write
2E3D000
heap
page read and write
48BF000
heap
page read and write
4B99000
heap
page read and write
2ABF000
stack
page read and write
4A42000
heap
page read and write
4750000
heap
page read and write
2E57000
heap
page read and write
47FA000
heap
page read and write
4D7A000
heap
page read and write
47A9000
heap
page read and write
4CE1000
heap
page read and write
2DCB000
heap
page read and write
4799000
heap
page read and write
49B1000
heap
page read and write
7B7000
unkown
page readonly
5DBC000
direct allocation
page execute and read and write
46A8000
heap
page read and write
4AB6000
heap
page read and write
4CF3000
heap
page read and write
4A1C000
heap
page read and write
930000
heap
page read and write
2BCE000
heap
page read and write
4A5A000
heap
page read and write
2D4F000
heap
page read and write
4ABD000
heap
page read and write
4B46000
heap
page read and write
46BD000
heap
page read and write
2E67000
heap
page read and write
4B5A000
heap
page read and write
97F000
heap
page read and write
2ED2000
heap
page read and write
7BBC000
direct allocation
page execute and read and write
2E16000
heap
page read and write
47E7000
heap
page read and write
2F22000
heap
page read and write
2DE9000
heap
page read and write
4A5E000
heap
page read and write
4CE7000
heap
page read and write
470B000
heap
page read and write
4725000
heap
page read and write
4C0C000
heap
page read and write
2D83000
heap
page read and write
478A000
heap
page read and write
40A000
unkown
page write copy
3050000
direct allocation
page read and write
4AD0000
heap
page read and write
408000
unkown
page readonly
4BC2000
heap
page read and write
2EB9000
heap
page read and write
4654000
heap
page read and write
986000
heap
page read and write
47F7000
heap
page read and write
4785000
heap
page read and write
48C5000
heap
page read and write
4A58000
heap
page read and write
4913000
heap
page read and write
4AB1000
heap
page read and write
4B12000
heap
page read and write
4D16000
heap
page read and write
48A8000
heap
page read and write
466A000
heap
page read and write
48AC000
heap
page read and write
485E000
stack
page read and write
4B63000
heap
page read and write
4A99000
heap
page read and write
4845000
heap
page read and write
48D1000
heap
page read and write
4AEA000
heap
page read and write
46B0000
heap
page read and write
2EF0000
direct allocation
page read and write
4BFF000
heap
page read and write
784000
unkown
page read and write
2D62000
heap
page read and write
7A8000
unkown
page read and write
2D6D000
heap
page read and write
49C1000
heap
page read and write
2CCB000
heap
page read and write
45B1000
heap
page read and write
848000
heap
page read and write
7A1000
unkown
page read and write
466F000
heap
page read and write
4B7C000
heap
page read and write
4B5F000
heap
page read and write
4A1C000
heap
page read and write
7D0000
direct allocation
page read and write
476B000
heap
page read and write
47FE000
heap
page read and write
4BF1000
heap
page read and write
4C6E000
heap
page read and write
4B84000
heap
page read and write
4595000
heap
page read and write
4ADF000
heap
page read and write
4854000
heap
page read and write
5260000
direct allocation
page execute and read and write
467E000
heap
page read and write
2F30000
direct allocation
page read and write
4E09000
heap
page read and write
483D000
heap
page read and write
2F1A000
heap
page read and write
2E58000
heap
page read and write
3513E000
stack
page read and write
2CA0000
heap
page read and write
459D000
heap
page read and write
19A000
stack
page read and write
48C1000
heap
page read and write
470A000
heap
page read and write
4573000
heap
page read and write
2C1D000
heap
page read and write
496A000
heap
page read and write
48B8000
heap
page read and write
48B4000
heap
page read and write
4D0F000
heap
page read and write
4935000
heap
page read and write
4C90000
heap
page read and write
49EA000
heap
page read and write
4AB9000
heap
page read and write
2DD2000
heap
page read and write
7A8000
unkown
page read and write
4B13000
heap
page read and write
40A000
unkown
page read and write
6EB84000
unkown
page readonly
6EB84000
unkown
page readonly
4763000
heap
page read and write
48D8000
heap
page read and write
4986000
heap
page read and write
4BB5000
heap
page read and write
4734000
heap
page read and write
2CFF000
heap
page read and write
A2A000
heap
page read and write
A9C000
heap
page read and write
4A8F000
heap
page read and write
975000
heap
page read and write
2EB4000
heap
page read and write
2DE9000
heap
page read and write
4789000
heap
page read and write
49FC000
heap
page read and write
479D000
heap
page read and write
CBF000
stack
page read and write
461E000
heap
page read and write
4CA7000
heap
page read and write
4A3D000
heap
page read and write
47F3000
heap
page read and write
4DEF000
heap
page read and write
4AB9000
heap
page read and write
7B5000
unkown
page read and write
4C30000
heap
page read and write
487A000
heap
page read and write
4A1C000
heap
page read and write
4BDE000
heap
page read and write
4C24000
heap
page read and write
46BF000
heap
page read and write
462D000
heap
page read and write
7AF000
unkown
page read and write
98000
stack
page read and write
930000
heap
page read and write
46C4000
heap
page read and write
2E63000
heap
page read and write
4C2C000
heap
page read and write
4A86000
heap
page read and write
249E000
stack
page read and write
4B8E000
heap
page read and write
4C9F000
stack
page read and write
4A23000
heap
page read and write
4738000
heap
page read and write
2CC4000
heap
page read and write
48B5000
heap
page read and write
64A0000
direct allocation
page read and write
4D6D000
heap
page read and write
2F48000
heap
page read and write
4664000
heap
page read and write
4A60000
heap
page read and write
2E31000
heap
page read and write
9FA000
heap
page read and write
489D000
heap
page read and write
487E000
heap
page read and write
4A0F000
heap
page read and write
4A8A000
heap
page read and write
4C33000
heap
page read and write
4985000
heap
page read and write
488A000
heap
page read and write
4C56000
heap
page read and write
4A23000
heap
page read and write
2BF3000
heap
page read and write
46C3000
heap
page read and write
4932000
heap
page read and write
4CD0000
heap
page read and write
4C37000
heap
page read and write
64B0000
direct allocation
page read and write
980000
heap
page read and write
4612000
heap
page read and write
4C94000
heap
page read and write
49F6000
heap
page read and write
A62000
heap
page read and write
4685000
heap
page read and write
4B36000
heap
page read and write
4C30000
heap
page read and write
2F44000
heap
page read and write
4AA6000
heap
page read and write
4A8C000
heap
page read and write
491E000
heap
page read and write
2E8C000
heap
page read and write
48D0000
heap
page read and write
460F000
heap
page read and write
47CD000
heap
page read and write
4C3B000
heap
page read and write
49EE000
heap
page read and write
4973000
heap
page read and write
46B9000
heap
page read and write
2C0A000
heap
page read and write
48B0000
heap
page read and write
2C44000
heap
page read and write
4B17000
heap
page read and write
2C35000
heap
page read and write
4C2C000
heap
page read and write
45A2000
heap
page read and write
4C5D000
heap
page read and write
48DF000
heap
page read and write
4B17000
heap
page read and write
408000
unkown
page readonly
4CD4000
heap
page read and write
48DC000
heap
page read and write
2D80000
heap
page read and write
4E1C000
heap
page read and write
4B3B000
heap
page read and write
485C000
heap
page read and write
408000
unkown
page readonly
A91000
heap
page read and write
4BE2000
heap
page read and write
4CFA000
heap
page read and write
4C52000
heap
page read and write
7A1000
unkown
page read and write
A18000
heap
page read and write
4A0B000
heap
page read and write
4BE9000
heap
page read and write
48B0000
heap
page read and write
47F3000
heap
page read and write
408000
unkown
page readonly
49DF000
heap
page read and write
2F58000
heap
page read and write
780000
unkown
page read and write
4C33000
heap
page read and write
4D4F000
heap
page read and write
2F26000
heap
page read and write
2C10000
heap
page read and write
4772000
heap
page read and write
820000
heap
page read and write
6EB86000
unkown
page readonly
7B7000
unkown
page readonly
4D3C000
heap
page read and write
4B9F000
stack
page read and write
49C0000
heap
page read and write
2E22000
heap
page read and write
4B4E000
heap
page read and write
4757000
heap
page read and write
2DE4000
heap
page read and write
2481000
unkown
page readonly
2E5F000
heap
page read and write
4A6B000
heap
page read and write
4892000
heap
page read and write
19A000
stack
page read and write
48F7000
heap
page read and write
46D7000
heap
page read and write
47D4000
heap
page read and write
4810000
heap
page read and write
4917000
heap
page read and write
2DB8000
heap
page read and write
408000
unkown
page readonly
348CE000
stack
page read and write
2674000
heap
page read and write
4BA0000
heap
page read and write
40A000
unkown
page write copy
4D05000
heap
page read and write
457B000
heap
page read and write
4BAB000
heap
page read and write
2E0F000
heap
page read and write
2C70000
heap
page read and write
4A64000
heap
page read and write
4D12000
heap
page read and write
2BEF000
heap
page read and write
49A2000
heap
page read and write
4C00000
heap
page read and write
49B9000
heap
page read and write
2E35000
heap
page read and write
4C13000
heap
page read and write
4CCC000
heap
page read and write
94F000
heap
page read and write
2D56000
heap
page read and write
2D0A000
heap
page read and write
990000
heap
page read and write
477A000
heap
page read and write
2EB0000
direct allocation
page read and write
45CC000
heap
page read and write
482E000
heap
page read and write
2BC2000
heap
page read and write
934000
heap
page read and write
4715000
heap
page read and write
4D75000
heap
page read and write
2E75000
heap
page read and write
4C6A000
heap
page read and write
400000
unkown
page readonly
4712000
heap
page read and write
262F000
stack
page read and write
4E30000
direct allocation
page read and write
4722000
heap
page read and write
4C89000
heap
page read and write
2F20000
direct allocation
page read and write
4B98000
heap
page read and write
2A6F000
stack
page read and write
7C0000
heap
page read and write
4816000
heap
page read and write
4CF7000
heap
page read and write
2D6C000
heap
page read and write
481D000
heap
page read and write
4E15000
heap
page read and write
98000
stack
page read and write
2C21000
heap
page read and write
2CF7000
heap
page read and write
46A6000
heap
page read and write
4E57000
heap
page read and write
4807000
heap
page read and write
400000
unkown
page readonly
2D73000
heap
page read and write
49A0000
heap
page read and write
4C72000
heap
page read and write
A43000
heap
page read and write
2D56000
heap
page read and write
45D0000
heap
page read and write
2E6D000
heap
page read and write
2DE5000
heap
page read and write
327C000
stack
page read and write
98000
stack
page read and write
4C59000
heap
page read and write
2ECE000
heap
page read and write
2E90000
heap
page read and write
64F0000
direct allocation
page read and write
4968000
heap
page read and write
4CB3000
heap
page read and write
317C000
stack
page read and write
4D5F000
heap
page read and write
2D13000
heap
page read and write
6470000
direct allocation
page read and write
4D1B000
heap
page read and write
48E3000
heap
page read and write
4ADB000
heap
page read and write
47D8000
heap
page read and write
4AEC000
heap
page read and write
2DC7000
heap
page read and write
2E03000
heap
page read and write
A86000
heap
page read and write
4AD4000
heap
page read and write
891000
heap
page read and write
915000
heap
page read and write
4D1D000
heap
page read and write
4B1F000
heap
page read and write
4895000
heap
page read and write
48FB000
heap
page read and write
4B88000
heap
page read and write
4B2A000
heap
page read and write
784000
unkown
page read and write
965000
heap
page read and write
46C8000
heap
page read and write
787000
unkown
page read and write
2AC0000
heap
page read and write
4740000
heap
page read and write
46B8000
heap
page read and write
4803000
heap
page read and write
46AA000
heap
page read and write
2F35000
heap
page read and write
2CE0000
heap
page read and write
787000
unkown
page read and write
4A20000
heap
page read and write
A82000
heap
page read and write
2E0B000
heap
page read and write
2F7C000
remote allocation
page execute and read and write
24DE000
stack
page read and write
2FF0000
direct allocation
page read and write
2E06000
heap
page read and write
4DEB000
heap
page read and write
2D3F000
heap
page read and write
2AD0000
heap
page read and write
48C8000
heap
page read and write
4C28000
heap
page read and write
2DF2000
heap
page read and write
4B75000
heap
page read and write
498A000
heap
page read and write
46C7000
heap
page read and write
4702000
heap
page read and write
45B5000
heap
page read and write
1A20000
remote allocation
page execute and read and write
2D77000
heap
page read and write
4867000
heap
page read and write
9A2000
heap
page read and write
2BB6000
heap
page read and write
4A5A000
heap
page read and write
2DB4000
heap
page read and write
400000
unkown
page readonly
810000
heap
page read and write
4B04000
heap
page read and write
456F000
heap
page read and write
4B1A000
heap
page read and write
49C8000
heap
page read and write
490B000
heap
page read and write
7B7000
unkown
page readonly
475F000
heap
page read and write
4B32000
heap
page read and write
477E000
heap
page read and write
2E31000
heap
page read and write
4849000
heap
page read and write
4B7F000
heap
page read and write
4D25000
heap
page read and write
497B000
heap
page read and write
4BBE000
heap
page read and write
4C1C000
heap
page read and write
4668000
heap
page read and write
52BC000
direct allocation
page execute and read and write
945000
heap
page read and write
8B8000
heap
page read and write
2D42000
heap
page read and write
47B4000
heap
page read and write
4CDD000
heap
page read and write
40A000
unkown
page read and write
2BE4000
heap
page read and write
2CF3000
heap
page read and write
4899000
heap
page read and write
4D06000
heap
page read and write
2D70000
heap
page read and write
49F2000
heap
page read and write
2C80000
heap
page read and write
477F000
heap
page read and write
460B000
heap
page read and write
2D4B000
heap
page read and write
2EE0000
direct allocation
page read and write
4C5F000
heap
page read and write
490E000
heap
page read and write
4C20000
heap
page read and write
34EFC000
stack
page read and write
476A000
heap
page read and write
4B2D000
heap
page read and write
4D66000
heap
page read and write
7C0000
heap
page read and write
4B3D000
heap
page read and write
473C000
heap
page read and write
4B6D000
heap
page read and write
2E77000
heap
page read and write
784000
unkown
page read and write
2CC4000
heap
page read and write
4D0A000
heap
page read and write
48C9000
heap
page read and write
2C78000
heap
page read and write
4719000
heap
page read and write
2CD0000
heap
page read and write
780000
unkown
page read and write
48D8000
heap
page read and write
4796000
heap
page read and write
4712000
heap
page read and write
471D000
heap
page read and write
2D20000
heap
page read and write
2BF7000
heap
page read and write
4CD2000
heap
page read and write
34FFD000
stack
page read and write
4BE6000
heap
page read and write
481B000
heap
page read and write
47F6000
heap
page read and write
939000
heap
page read and write
A66000
heap
page read and write
4C3B000
heap
page read and write
2D52000
heap
page read and write
4BED000
heap
page read and write
4CA4000
heap
page read and write
8E0000
heap
page read and write
49CC000
heap
page read and write
6640000
heap
page read and write
4AAA000
heap
page read and write
4A82000
heap
page read and write
2EEB000
heap
page read and write
49C4000
heap
page read and write
48B9000
heap
page read and write
4773000
heap
page read and write
48B2000
heap
page read and write
2EBB000
heap
page read and write
4E11000
heap
page read and write
46B1000
heap
page read and write
4564000
heap
page read and write
401000
unkown
page execute read
2DFB000
heap
page read and write
2D1E000
heap
page read and write
49DB000
heap
page read and write
468A000
heap
page read and write
4C17000
heap
page read and write
4706000
heap
page read and write
40A000
unkown
page write copy
2D22000
heap
page read and write
4813000
heap
page read and write
2D35000
heap
page read and write
4B5E000
heap
page read and write
4BCA000
heap
page read and write
47C5000
heap
page read and write
6EB81000
unkown
page execute read
469D000
heap
page read and write
2CF7000
heap
page read and write
4817000
heap
page read and write
9A9000
heap
page read and write
49CC000
heap
page read and write
49C8000
heap
page read and write
4A7B000
heap
page read and write
7B7000
unkown
page readonly
19A000
stack
page read and write
2E50000
heap
page read and write
2CD5000
heap
page read and write
4A45000
heap
page read and write
2E62000
heap
page read and write
48AE000
heap
page read and write
46B5000
heap
page read and write
4B69000
heap
page read and write
2ED6000
heap
page read and write
466E000
heap
page read and write
4841000
heap
page read and write
47A1000
heap
page read and write
4673000
heap
page read and write
4640000
heap
page read and write
2D0A000
heap
page read and write
2D2F000
heap
page read and write
4CEA000
heap
page read and write
4860000
heap
page read and write
4B39000
heap
page read and write
2EE1000
heap
page read and write
4C09000
heap
page read and write
4C28000
heap
page read and write
484D000
heap
page read and write
4D53000
heap
page read and write
3000000
direct allocation
page read and write
2D9D000
heap
page read and write
98B000
heap
page read and write
B54000
heap
page read and write
AEE000
stack
page read and write
1B7C000
remote allocation
page execute and read and write
40A000
unkown
page read and write
2D99000
heap
page read and write
481A000
heap
page read and write
46CB000
heap
page read and write
2D2C000
heap
page read and write
7B5000
unkown
page read and write
4699000
heap
page read and write
4972000
heap
page read and write
4B9D000
heap
page read and write
4CCA000
heap
page read and write
478E000
heap
page read and write
4873000
heap
page read and write
2EDE000
heap
page read and write
4823000
heap
page read and write
499E000
heap
page read and write
659E000
stack
page read and write
4C47000
heap
page read and write
34D4B000
stack
page read and write
4B57000
heap
page read and write
4A60000
heap
page read and write
2DB0000
heap
page read and write
4E20000
heap
page read and write
3478E000
stack
page read and write
4955000
heap
page read and write
401000
unkown
page execute read
4A22000
heap
page read and write
2C7C000
heap
page read and write
4AAE000
heap
page read and write
4758000
heap
page read and write
48E4000
heap
page read and write
4C1C000
heap
page read and write
4CCD000
heap
page read and write
2E41000
heap
page read and write
A1B000
heap
page read and write
4731000
heap
page read and write
1D5000
heap
page read and write
4787000
heap
page read and write
45DF000
heap
page read and write
4699000
heap
page read and write
4962000
heap
page read and write
4960000
heap
page read and write
7A8000
unkown
page read and write
4686000
heap
page read and write
4DFA000
heap
page read and write
4A9F000
heap
page read and write
2DEB000
heap
page read and write
2F4F000
heap
page read and write
47CC000
heap
page read and write
47FF000
heap
page read and write
4568000
heap
page read and write
492E000
heap
page read and write
349D0000
heap
page read and write
4886000
heap
page read and write
9F6000
heap
page read and write
4C8C000
heap
page read and write
4CBA000
heap
page read and write
7AF000
unkown
page read and write
4DBC000
heap
page read and write
4826000
heap
page read and write
4C11000
heap
page read and write
408000
unkown
page readonly
48DC000
heap
page read and write
3523F000
stack
page read and write
465B000
heap
page read and write
4D57000
heap
page read and write
401000
unkown
page execute read
2E2D000
heap
page read and write
4CD9000
heap
page read and write
79F000
unkown
page read and write
4B90000
heap
page read and write
3020000
direct allocation
page read and write
895000
heap
page read and write
4C37000
heap
page read and write
47C3000
heap
page read and write
2CCB000
heap
page read and write
4A49000
heap
page read and write
4CF6000
heap
page read and write
4C43000
heap
page read and write
397C000
remote allocation
page execute and read and write
2D47000
heap
page read and write
4A3E000
heap
page read and write
98000
stack
page read and write
4CC2000
heap
page read and write
4AC1000
heap
page read and write
2E80000
heap
page read and write
4BDA000
heap
page read and write
47A5000
heap
page read and write
401000
unkown
page execute read
4740000
heap
page read and write
4AF5000
heap
page read and write
4A88000
heap
page read and write
46B4000
heap
page read and write
2D02000
heap
page read and write
4A91000
heap
page read and write
49D7000
heap
page read and write
77B000
unkown
page read and write
4667000
heap
page read and write
470C000
stack
page read and write
905000
heap
page read and write
2EC3000
heap
page read and write
2FD0000
direct allocation
page read and write
470F000
heap
page read and write
45AE000
heap
page read and write
A70000
heap
page read and write
49C4000
heap
page read and write
2DFF000
heap
page read and write
2EEE000
heap
page read and write
2D0E000
heap
page read and write
4A73000
heap
page read and write
47DC000
heap
page read and write
4748000
heap
page read and write
4B00000
heap
page read and write
4922000
heap
page read and write
484D000
heap
page read and write
4E19000
heap
page read and write
4681000
heap
page read and write
46C1000
heap
page read and write
2D3B000
heap
page read and write
90F000
heap
page read and write
A80000
heap
page read and write
498D000
heap
page read and write
480A000
heap
page read and write
4A15000
heap
page read and write
2D71000
heap
page read and write
5160000
direct allocation
page execute and read and write
34C4C000
stack
page read and write
4A64000
heap
page read and write
2D92000
heap
page read and write
4B23000
heap
page read and write
4B26000
heap
page read and write
4776000
heap
page read and write
4CF2000
heap
page read and write
4A68000
heap
page read and write
2CBC000
heap
page read and write
2CFB000
heap
page read and write
79F000
unkown
page read and write
A6E000
heap
page read and write
489E000
stack
page read and write
2D1C000
heap
page read and write
4B2E000
heap
page read and write
4729000
heap
page read and write
2F53000
heap
page read and write
4B8A000
heap
page read and write
496B000
heap
page read and write
48D5000
heap
page read and write
8DE000
stack
page read and write
2F1E000
heap
page read and write
2F4A000
heap
page read and write
AB3000
heap
page read and write
4A6C000
heap
page read and write
408000
unkown
page readonly
2D7F000
heap
page read and write
2D24000
heap
page read and write