IOC Report
LisectAVT_2403002A_107.exe

loading gif

Files

File Path
Type
Category
Malicious
LisectAVT_2403002A_107.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\ProgramData\remcos\logs.dat
data
dropped
 malicious
C:\Users\user\AppData\Local\Esher\parterres.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\parterres.vbs
data
dropped
 malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_1aa7bf6e4d7a6f9cf3f824dd2289991c49220e0_96465516_9777b3a7-1fbf-4043-b9e2-4a393a04df36\Report.wer
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_cf159d9831ed90157083359a1dfdd14951d7c157_96465516_abec9d46-0eca-4434-b6d1-95b33ac754bf\Report.wer
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER238C.tmp.dmp
Mini DuMP crash report, 14 streams, Thu Jul 25 22:11:11 2024, 0x1205a4 type
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER26E8.tmp.WERInternalMetadata.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER2728.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E09.tmp.dmp
Mini DuMP crash report, 14 streams, Thu Jul 25 22:11:17 2024, 0x1205a4 type
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E78.tmp.WERInternalMetadata.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3EC7.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\aut12F.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut1AD.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut47DD.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut485B.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut54BE.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\aut552C.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\autE10.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\autE247.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\autE2B5.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\autEBD.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\konked
ASCII text, with very long lines (65536), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\vitraillist
data
dropped
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
There are 15 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\LisectAVT_2403002A_107.exe
"C:\Users\user\Desktop\LisectAVT_2403002A_107.exe"
 malicious
C:\Users\user\AppData\Local\Esher\parterres.exe
"C:\Users\user\Desktop\LisectAVT_2403002A_107.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\Desktop\LisectAVT_2403002A_107.exe"
 malicious
C:\Users\user\AppData\Local\Esher\parterres.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
 malicious
C:\Windows\System32\wscript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\parterres.vbs"
malicious
C:\Users\user\AppData\Local\Esher\parterres.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
malicious
C:\Users\user\AppData\Local\Esher\parterres.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
 malicious
C:\Windows\SysWOW64\svchost.exe
"C:\Users\user\AppData\Local\Esher\parterres.exe"
 malicious
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7544 -s 796
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7544 -s 780
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
jnchina.ydns.eu
malicious
http://geoplugin.net/json.gp
unknown
http://upx.sf.net
unknown
http://geoplugin.net/json.gp/C
unknown

Domains

Name
IP
Malicious
jnchina.ydns.eu
23.106.121.133
 malicious

IPs

IP
Domain
Country
Malicious
23.106.121.133
jnchina.ydns.eu
Singapore
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Rmc-1632I1
exepath
HKEY_CURRENT_USER\SOFTWARE\Rmc-1632I1
licence
HKEY_CURRENT_USER\SOFTWARE\Rmc-1632I1
time
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
ProgramId
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
FileId
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
LowerCaseLongPath
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
LongPathHash
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Name
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
OriginalFileName
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Publisher
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Version
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
BinFileVersion
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
BinaryType
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
ProductName
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
ProductVersion
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
LinkDate
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
BinProductVersion
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
AppxPackageFullName
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
AppxPackageRelativeId
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Size
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Language
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
IsOsComponent
\REGISTRY\A\{55fe32ef-88ef-bb9f-9827-9d1774f9cc28}\Root\InventoryApplicationFile\svchost.exe|1260c7b0519b1406
Usn
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
ApplicationFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018C00B8F8B0D2B
There are 17 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2E00000
heap
page read and write
 malicious
2E12000
heap
page read and write
 malicious
400000
system
page execute and read and write
 malicious
3000000
heap
page read and write
 malicious
4310000
direct allocation
page read and write
 malicious
42D0000
direct allocation
page read and write
 malicious
4D1F000
stack
page read and write
 malicious
2FE0000
direct allocation
page read and write
 malicious
4A1F000
stack
page read and write
 malicious
3012000
heap
page read and write
 malicious
42C0000
direct allocation
page read and write
 malicious
400000
system
page execute and read and write
 malicious
3D3D000
heap
page read and write
4490000
direct allocation
page read and write
2E13000
heap
page read and write
405C000
heap
page read and write
2F00000
heap
page read and write
3C97000
heap
page read and write
115E000
stack
page read and write
3ABE000
heap
page read and write
6BC000
stack
page read and write
4024000
heap
page read and write
401000
unkown
page execute read
1F0000
heap
page read and write
3E21000
heap
page read and write
474000
system
page execute and read and write
3D24000
heap
page read and write
3E96000
heap
page read and write
3FAB000
heap
page read and write
2E13000
heap
page read and write
2F31000
heap
page read and write
4064000
heap
page read and write
4520000
direct allocation
page read and write
100000
heap
page read and write
3ED0000
heap
page read and write
3EF4000
heap
page read and write
4034000
heap
page read and write
100000
heap
page read and write
2EE1000
heap
page read and write
4413000
direct allocation
page read and write
2E24000
heap
page read and write
3F7F000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
3F8B000
heap
page read and write
4390000
direct allocation
page read and write
115000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
A6E000
stack
page read and write
7535000
direct allocation
page read and write
4A7000
unkown
page read and write
924000
heap
page read and write
3B50000
heap
page read and write
2E13000
heap
page read and write
3D09000
heap
page read and write
1E84C030000
heap
page read and write
3F4A000
heap
page read and write
2EE0000
heap
page read and write
9DC000
stack
page read and write
4A7000
unkown
page read and write
1E84C0B0000
heap
page read and write
3D76000
heap
page read and write
3CB4000
heap
page read and write
3C97000
heap
page read and write
2E31000
heap
page read and write
401A000
heap
page read and write
406D000
heap
page read and write
462E000
direct allocation
page read and write
462E000
direct allocation
page read and write
3F83000
heap
page read and write
3F52000
heap
page read and write
910000
heap
page read and write
3D36000
heap
page read and write
3FD6000
heap
page read and write
2E24000
heap
page read and write
1E84C160000
heap
page read and write
3D04000
heap
page read and write
2EC0000
heap
page read and write
3EE2000
heap
page read and write
2E24000
heap
page read and write
4649000
direct allocation
page read and write
3F40000
heap
page read and write
2E13000
heap
page read and write
490000
unkown
page write copy
3EBA000
heap
page read and write
464D000
direct allocation
page read and write
8FE000
stack
page read and write
40AD000
heap
page read and write
40A1000
heap
page read and write
44F0000
direct allocation
page read and write
2E24000
heap
page read and write
3FCA000
heap
page read and write
3FB4000
heap
page read and write
3CD4000
heap
page read and write
2E13000
heap
page read and write
3EF0000
heap
page read and write
1740000
heap
page read and write
3F58000
heap
page read and write
3F68000
heap
page read and write
2E13000
heap
page read and write
3D3F000
heap
page read and write
44B3000
direct allocation
page read and write
3C75000
heap
page read and write
44A3000
direct allocation
page read and write
46AD000
direct allocation
page read and write
467E000
direct allocation
page read and write
8AC000
stack
page read and write
2E13000
heap
page read and write
4077000
heap
page read and write
4041000
heap
page read and write
3F8E000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3DF0000
heap
page read and write
2E13000
heap
page read and write
3C9B000
heap
page read and write
4350000
direct allocation
page read and write
3EB2000
heap
page read and write
3D3C000
heap
page read and write
1E0000
heap
page read and write
4473000
direct allocation
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
3CCB000
heap
page read and write
45B9000
direct allocation
page read and write
400000
unkown
page readonly
3F09000
heap
page read and write
2EC0000
heap
page read and write
2E13000
heap
page read and write
3FE8000
heap
page read and write
8935000
direct allocation
page read and write
2F00000
heap
page read and write
3F5C000
heap
page read and write
2E24000
heap
page read and write
400000
unkown
page readonly
3FD6000
heap
page read and write
461D000
direct allocation
page read and write
2E24000
heap
page read and write
134E000
stack
page read and write
492000
unkown
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
401000
unkown
page execute read
2E24000
heap
page read and write
3FC7000
heap
page read and write
3F3E000
heap
page read and write
352E000
stack
page read and write
401000
unkown
page execute read
2EF1000
heap
page read and write
3FE8000
heap
page read and write
790000
heap
page readonly
3CFF000
heap
page read and write
2F10000
heap
page read and write
4530000
direct allocation
page read and write
490000
unkown
page read and write
3A70000
heap
page read and write
407E000
heap
page read and write
3D63000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
2E33000
heap
page read and write
3F2A000
heap
page read and write
8AC000
stack
page read and write
105000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
4530000
direct allocation
page read and write
490000
unkown
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
3D23000
heap
page read and write
4A7000
unkown
page read and write
3D25000
heap
page read and write
2E24000
heap
page read and write
2F3F000
heap
page read and write
2E24000
heap
page read and write
3BEF000
heap
page read and write
3C8F000
heap
page read and write
3F04000
heap
page read and write
3F7A000
heap
page read and write
4074000
heap
page read and write
3F8A000
heap
page read and write
A9E000
heap
page read and write
2E14000
heap
page read and write
3D09000
heap
page read and write
3F53000
heap
page read and write
4380000
direct allocation
page read and write
3F4F000
heap
page read and write
465D000
direct allocation
page read and write
2EE1000
heap
page read and write
4032000
heap
page read and write
1690000
heap
page read and write
3ED2000
heap
page read and write
B7A000
heap
page read and write
5735000
direct allocation
page read and write
4044000
heap
page read and write
490000
unkown
page write copy
3BD1000
heap
page read and write
76294FE000
stack
page read and write
2E13000
heap
page read and write
4027000
heap
page read and write
3D28000
heap
page read and write
4AB000
unkown
page readonly
110000
heap
page read and write
A6E000
heap
page read and write
401000
unkown
page execute read
401000
unkown
page execute read
2E24000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
940000
heap
page read and write
2E24000
heap
page read and write
490000
unkown
page read and write
2D20000
heap
page read and write
401000
unkown
page execute read
1E84C355000
heap
page read and write
2B90000
heap
page readonly
3FB4000
heap
page read and write
4AB000
unkown
page readonly
2E24000
heap
page read and write
405E000
heap
page read and write
3FC6000
heap
page read and write
2EF1000
heap
page read and write
8AC000
stack
page read and write
50DF000
stack
page read and write
3CB4000
heap
page read and write
4300000
direct allocation
page execute and read and write
A90000
direct allocation
page execute and read and write
2E24000
heap
page read and write
3FD6000
heap
page read and write
4B9C000
stack
page read and write
3FBF000
heap
page read and write
950000
heap
page read and write
100000
heap
page read and write
3F2F000
heap
page read and write
3F7B000
heap
page read and write
3C99000
heap
page read and write
401A000
heap
page read and write
3B50000
heap
page read and write
3C0E000
heap
page read and write
3FE6000
heap
page read and write
4080000
heap
page read and write
2EE0000
heap
page read and write
4503000
direct allocation
page read and write
3C7A000
heap
page read and write
4085000
heap
page read and write
3C8F000
heap
page read and write
15F0000
heap
page read and write
2E24000
heap
page read and write
3D14000
heap
page read and write
3DB1000
heap
page read and write
1690000
heap
page read and write
3FD6000
heap
page read and write
3F0E000
heap
page read and write
2E24000
heap
page read and write
A25000
heap
page read and write
400000
unkown
page readonly
2E13000
heap
page read and write
3C28000
heap
page read and write
3F7F000
heap
page read and write
2E24000
heap
page read and write
3FC4000
heap
page read and write
110000
heap
page read and write
9A000
stack
page read and write
3F3C000
heap
page read and write
2E13000
heap
page read and write
3F63000
heap
page read and write
3D2E000
heap
page read and write
4D35000
direct allocation
page read and write
3EA8000
heap
page read and write
4649000
direct allocation
page read and write
2E13000
heap
page read and write
155E000
stack
page read and write
4E9C000
stack
page read and write
2E13000
heap
page read and write
4080000
heap
page read and write
2E13000
heap
page read and write
462E000
direct allocation
page read and write
40B3000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
43E0000
direct allocation
page read and write
3CB7000
heap
page read and write
4350000
direct allocation
page read and write
482000
unkown
page readonly
404C000
heap
page read and write
3DB1000
heap
page read and write
2F66000
heap
page read and write
4619000
direct allocation
page read and write
407E000
heap
page read and write
920000
heap
page read and write
3B72000
heap
page read and write
4049000
heap
page read and write
3EC1000
heap
page read and write
3CEE000
heap
page read and write
492000
unkown
page read and write
3A70000
heap
page read and write
3D1B000
heap
page read and write
3F4F000
heap
page read and write
3C5B000
heap
page read and write
2E13000
heap
page read and write
45BD000
direct allocation
page read and write
4520000
direct allocation
page read and write
57DF000
stack
page read and write
3E7C000
heap
page read and write
2E24000
heap
page read and write
3FB7000
heap
page read and write
2E90000
heap
page read and write
4AB000
unkown
page readonly
4A7000
unkown
page read and write
45B9000
direct allocation
page read and write
3CA4000
heap
page read and write
4089000
heap
page read and write
1E84DAA0000
heap
page read and write
2E24000
heap
page read and write
3D40000
heap
page read and write
3F02000
heap
page read and write
2AB0000
heap
page read and write
1760000
heap
page read and write
468E000
direct allocation
page read and write
3F68000
heap
page read and write
2F20000
heap
page read and write
2A80000
heap
page read and write
2E24000
heap
page read and write
3CDD000
heap
page read and write
3CC7000
heap
page read and write
4503000
direct allocation
page read and write
2E24000
heap
page read and write
3C9C000
heap
page read and write
16AF000
heap
page read and write
3D22000
heap
page read and write
2A60000
heap
page read and write
119F000
stack
page read and write
4007000
heap
page read and write
7DE000
stack
page read and write
3EE2000
heap
page read and write
2E24000
heap
page read and write
3D2E000
heap
page read and write
7628FFE000
stack
page read and write
44E0000
direct allocation
page read and write
2F84000
heap
page read and write
A20000
heap
page read and write
3CE4000
heap
page read and write
4018000
heap
page read and write
2E24000
heap
page read and write
112E000
stack
page read and write
559E000
stack
page read and write
3A61000
heap
page read and write
3A50000
heap
page read and write
2E95000
heap
page read and write
4619000
direct allocation
page read and write
3FAE000
heap
page read and write
2E13000
heap
page read and write
7628BDA000
stack
page read and write
2E24000
heap
page read and write
4520000
direct allocation
page read and write
482000
unkown
page readonly
1780000
heap
page read and write
4AB000
unkown
page readonly
3BF7000
heap
page read and write
8F0000
heap
page read and write
2E13000
heap
page read and write
3D23000
heap
page read and write
3930000
heap
page read and write
303D000
heap
page read and write
2E02000
heap
page read and write
3FF8000
heap
page read and write
116E000
stack
page read and write
76295FE000
stack
page read and write
3F68000
heap
page read and write
2E24000
heap
page read and write
3D67000
heap
page read and write
42A0000
direct allocation
page read and write
490000
unkown
page write copy
2E13000
heap
page read and write
4380000
direct allocation
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
4503000
direct allocation
page read and write
8F8000
heap
page read and write
4C9F000
stack
page read and write
400A000
heap
page read and write
482000
unkown
page readonly
4A5B000
stack
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
2DA0000
heap
page read and write
2C02000
heap
page read and write
482000
unkown
page readonly
3DB1000
heap
page read and write
4F9F000
stack
page read and write
3F72000
heap
page read and write
9A000
stack
page read and write
3D7F000
heap
page read and write
4076000
heap
page read and write
3DA5000
heap
page read and write
2E13000
heap
page read and write
2FCA000
heap
page read and write
3FA2000
heap
page read and write
2E24000
heap
page read and write
3D35000
heap
page read and write
3EB2000
heap
page read and write
2E24000
heap
page read and write
2F21000
heap
page read and write
2E24000
heap
page read and write
3D14000
heap
page read and write
3E86000
heap
page read and write
4045000
heap
page read and write
3FD6000
heap
page read and write
3D75000
heap
page read and write
3E7D000
heap
page read and write
3C97000
heap
page read and write
460D000
direct allocation
page read and write
3E3A000
heap
page read and write
2E24000
heap
page read and write
3F53000
heap
page read and write
464D000
direct allocation
page read and write
3F56000
heap
page read and write
3CEE000
heap
page read and write
1E84C35E000
heap
page read and write
3F97000
heap
page read and write
491E000
stack
page read and write
45B9000
direct allocation
page read and write
3EE2000
heap
page read and write
3DB1000
heap
page read and write
2E13000
heap
page read and write
30B0000
heap
page read and write
1E84C050000
heap
page read and write
3D46000
heap
page read and write
3D08000
heap
page read and write
2E13000
heap
page read and write
3DDA000
heap
page read and write
3C78000
heap
page read and write
492000
unkown
page read and write
3FD1000
heap
page read and write
2F10000
heap
page read and write
940000
heap
page read and write
3FC0000
heap
page read and write
4089000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
1F0000
heap
page read and write
3F26000
heap
page read and write
1671000
heap
page read and write
401000
unkown
page execute read
409A000
heap
page read and write
2E13000
heap
page read and write
4075000
heap
page read and write
3D09000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
468E000
direct allocation
page read and write
9A000
stack
page read and write
3ED2000
heap
page read and write
3BDD000
heap
page read and write
2EA1000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
3F01000
heap
page read and write
2E20000
heap
page read and write
2F44000
heap
page read and write
3F1E000
heap
page read and write
3D87000
heap
page read and write
8AC000
stack
page read and write
3CD8000
heap
page read and write
4619000
direct allocation
page read and write
2E24000
heap
page read and write
3F9C000
heap
page read and write
4649000
direct allocation
page read and write
3FF6000
heap
page read and write
2DDE000
stack
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
3F4E000
heap
page read and write
2EB1000
heap
page read and write
2E13000
heap
page read and write
4052000
heap
page read and write
2F4E000
heap
page read and write
3F9E000
heap
page read and write
3D2E000
heap
page read and write
3D2A000
heap
page read and write
403F000
heap
page read and write
A9E000
heap
page read and write
3E6A000
heap
page read and write
2E24000
heap
page read and write
3CBE000
heap
page read and write
2E13000
heap
page read and write
3FC0000
heap
page read and write
4AB000
unkown
page readonly
2E24000
heap
page read and write
2EA1000
heap
page read and write
2EA0000
heap
page read and write
4DDF000
stack
page read and write
2E24000
heap
page read and write
6135000
direct allocation
page read and write
3A51000
heap
page read and write
3DD7000
heap
page read and write
2E24000
heap
page read and write
16A0000
heap
page read and write
3FD6000
heap
page read and write
2BEE000
stack
page read and write
44A3000
direct allocation
page read and write
16CE000
heap
page read and write
405A000
heap
page read and write
2E13000
heap
page read and write
3FC0000
heap
page read and write
2E13000
heap
page read and write
3F6F000
heap
page read and write
3F7B000
heap
page read and write
3C79000
heap
page read and write
4659000
direct allocation
page read and write
471E000
direct allocation
page read and write
4038000
heap
page read and write
2E13000
heap
page read and write
2ED0000
heap
page read and write
4580000
direct allocation
page read and write
3F30000
heap
page read and write
46BE000
direct allocation
page read and write
2E24000
heap
page read and write
3FAF000
heap
page read and write
3D3D000
heap
page read and write
9AE000
heap
page read and write
9D35000
direct allocation
page read and write
3CEE000
heap
page read and write
2E24000
heap
page read and write
45BD000
direct allocation
page read and write
4090000
heap
page read and write
3C76000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3FFE000
heap
page read and write
2E24000
heap
page read and write
3F68000
heap
page read and write
3094000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
1700000
heap
page read and write
2DE0000
heap
page read and write
405E000
heap
page read and write
3D45000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3F29000
heap
page read and write
2F10000
heap
page read and write
3090000
heap
page read and write
3FF4000
heap
page read and write
3F63000
heap
page read and write
9C5000
heap
page read and write
3F46000
heap
page read and write
464D000
direct allocation
page read and write
2F5E000
heap
page read and write
2EF0000
heap
page read and write
2E13000
heap
page read and write
4413000
direct allocation
page read and write
6FC000
stack
page read and write
1E84C0E6000
heap
page read and write
3C86000
heap
page read and write
405C000
heap
page read and write
3FB5000
heap
page read and write
3ED1000
heap
page read and write
2E13000
heap
page read and write
927000
heap
page read and write
4473000
direct allocation
page read and write
3C30000
heap
page read and write
3A91000
heap
page read and write
4E5F000
stack
page read and write
2D9E000
stack
page read and write
46BE000
direct allocation
page read and write
2E13000
heap
page read and write
43E0000
direct allocation
page read and write
4AB000
unkown
page readonly
3C8F000
heap
page read and write
3FCA000
heap
page read and write
4473000
direct allocation
page read and write
3054000
heap
page read and write
46CE000
direct allocation
page read and write
2E13000
heap
page read and write
3D23000
heap
page read and write
2F8B000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
43E0000
direct allocation
page read and write
3CD4000
heap
page read and write
2E24000
heap
page read and write
1739000
heap
page read and write
1717000
heap
page read and write
2A5C000
stack
page read and write
37FE000
stack
page read and write
478000
system
page execute and read and write
2DE5000
heap
page read and write
3FAE000
heap
page read and write
2E13000
heap
page read and write
3FD6000
heap
page read and write
2E24000
heap
page read and write
2EF1000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
400A000
heap
page read and write
3F14000
heap
page read and write
2EB0000
direct allocation
page execute and read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
4413000
direct allocation
page read and write
2E13000
heap
page read and write
3CB6000
heap
page read and write
2EEF000
heap
page read and write
2E24000
heap
page read and write
482000
unkown
page readonly
4065000
heap
page read and write
4490000
direct allocation
page read and write
3FB7000
heap
page read and write
482000
unkown
page readonly
76297FF000
stack
page read and write
4609000
direct allocation
page read and write
460D000
direct allocation
page read and write
4AB000
unkown
page readonly
4340000
direct allocation
page read and write
3D7D000
heap
page read and write
AE0000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
7F0000
heap
page read and write
16A1000
heap
page read and write
3F16000
heap
page read and write
A6A000
heap
page read and write
4038000
heap
page read and write
3D25000
heap
page read and write
156F000
stack
page read and write
471E000
direct allocation
page read and write
2E13000
heap
page read and write
407E000
heap
page read and write
2F50000
heap
page read and write
3004000
heap
page read and write
402E000
heap
page read and write
2E24000
heap
page read and write
4463000
direct allocation
page read and write
A96000
heap
page read and write
2E24000
heap
page read and write
3DC8000
heap
page read and write
3C5E000
heap
page read and write
100000
heap
page read and write
400000
unkown
page readonly
42F0000
direct allocation
page read and write
471E000
direct allocation
page read and write
2E24000
heap
page read and write
3F7E000
heap
page read and write
3C79000
heap
page read and write
461D000
direct allocation
page read and write
3C18000
heap
page read and write
3D9B000
heap
page read and write
2F0E000
heap
page read and write
3A51000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
4490000
direct allocation
page read and write
4001000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
44F0000
direct allocation
page read and write
3A70000
heap
page read and write
9D0000
heap
page read and write
44B3000
direct allocation
page read and write
2E24000
heap
page read and write
402A000
heap
page read and write
2E13000
heap
page read and write
3950000
heap
page read and write
3BE5000
heap
page read and write
2D24000
heap
page read and write
3BDF000
stack
page read and write
400A000
heap
page read and write
3FF8000
heap
page read and write
1E0000
heap
page read and write
3FF4000
heap
page read and write
3FCB000
heap
page read and write
2E24000
heap
page read and write
3D91000
heap
page read and write
303E000
stack
page read and write
4048000
heap
page read and write
3F4E000
heap
page read and write
407F000
heap
page read and write
2ED0000
heap
page read and write
4659000
direct allocation
page read and write
2E13000
heap
page read and write
3D80000
heap
page read and write
3CF3000
heap
page read and write
2E13000
heap
page read and write
491000
unkown
page write copy
3036000
heap
page read and write
46A9000
direct allocation
page read and write
7F35000
direct allocation
page read and write
3D87000
heap
page read and write
2FD3000
heap
page read and write
3B5A000
heap
page read and write
3CD7000
heap
page read and write
2ED0000
heap
page read and write
2E24000
heap
page read and write
1E0000
heap
page read and write
46A9000
direct allocation
page read and write
2E24000
heap
page read and write
4035000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3FF4000
heap
page read and write
4580000
direct allocation
page read and write
30B4000
heap
page read and write
2E24000
heap
page read and write
3F9E000
heap
page read and write
2E24000
heap
page read and write
37DE000
stack
page read and write
2E00000
heap
page read and write
2E13000
heap
page read and write
3D02000
heap
page read and write
2E36000
heap
page read and write
3F18000
heap
page read and write
3F18000
heap
page read and write
461D000
direct allocation
page read and write
2E24000
heap
page read and write
3F41000
heap
page read and write
482000
unkown
page readonly
482000
unkown
page readonly
2E24000
heap
page read and write
3C16000
heap
page read and write
2F00000
heap
page read and write
3C8D000
heap
page read and write
4FDD000
stack
page read and write
3A80000
heap
page read and write
3CC6000
heap
page read and write
3D0F000
heap
page read and write
8D0000
heap
page read and write
3D24000
heap
page read and write
3C28000
heap
page read and write
4090000
heap
page read and write
4084000
heap
page read and write
3E20000
heap
page read and write
3C5F000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3CAA000
heap
page read and write
492000
unkown
page read and write
4085000
heap
page read and write
490000
unkown
page read and write
3000000
heap
page read and write
94F000
heap
page read and write
409A000
heap
page read and write
9CE000
stack
page read and write
400000
unkown
page readonly
3D3D000
heap
page read and write
467E000
direct allocation
page read and write
46AD000
direct allocation
page read and write
392F000
stack
page read and write
2BDE000
stack
page read and write
3C67000
heap
page read and write
3E86000
heap
page read and write
406C000
heap
page read and write
2E13000
heap
page read and write
4080000
heap
page read and write
76291FE000
stack
page read and write
2F90000
heap
page read and write
3F14000
heap
page read and write
3F64000
heap
page read and write
32FF000
stack
page read and write
4006000
heap
page read and write
4009000
heap
page read and write
2E13000
heap
page read and write
9DB000
heap
page read and write
1770000
direct allocation
page execute and read and write
1E5000
heap
page read and write
4AB000
unkown
page readonly
3C2A000
heap
page read and write
2E24000
heap
page read and write
3B4F000
stack
page read and write
9AA000
heap
page read and write
2E13000
heap
page read and write
3C7C000
heap
page read and write
3EC0000
heap
page read and write
1661000
heap
page read and write
3FB4000
heap
page read and write
400000
unkown
page readonly
2F10000
heap
page read and write
3C2A000
heap
page read and write
2E13000
heap
page read and write
2F20000
heap
page read and write
2E13000
heap
page read and write
42F0000
direct allocation
page read and write
3C9E000
heap
page read and write
3CD4000
heap
page read and write
980000
heap
page read and write
9A0000
heap
page read and write
40BD000
heap
page read and write
3B4A000
heap
page read and write
3B33000
heap
page read and write
15D0000
heap
page read and write
3C00000
heap
page read and write
2E24000
heap
page read and write
56DE000
stack
page read and write
4CDE000
stack
page read and write
3BAE000
heap
page read and write
3C2A000
heap
page read and write
3F70000
heap
page read and write
2E24000
heap
page read and write
3FDF000
heap
page read and write
2DFE000
stack
page read and write
4009000
heap
page read and write
3D0B000
heap
page read and write
2F2F000
heap
page read and write
2F30000
heap
page read and write
B50000
heap
page read and write
4039000
heap
page read and write
B58000
heap
page read and write
2E13000
heap
page read and write
3FB8000
heap
page read and write
4220000
direct allocation
page read and write
3B5E000
heap
page read and write
2E24000
heap
page read and write
730000
heap
page read and write
2E13000
heap
page read and write
3EBA000
heap
page read and write
2BF0000
heap
page read and write
3EBB000
heap
page read and write
2E13000
heap
page read and write
9C0000
heap
page read and write
46AD000
direct allocation
page read and write
4580000
direct allocation
page read and write
4024000
heap
page read and write
2E24000
heap
page read and write
3050000
heap
page read and write
374E000
stack
page read and write
2E13000
heap
page read and write
3F4A000
heap
page read and write
3F6E000
heap
page read and write
2E13000
heap
page read and write
3D2F000
heap
page read and write
2E24000
heap
page read and write
2E40000
direct allocation
page read and write
3C81000
heap
page read and write
3CE1000
heap
page read and write
2EC0000
heap
page read and write
2F01000
heap
page read and write
3F4E000
heap
page read and write
4AB000
unkown
page readonly
3FA4000
heap
page read and write
7628EFE000
stack
page read and write
4028000
heap
page read and write
3033000
heap
page read and write
4008000
heap
page read and write
3D13000
heap
page read and write
3EF1000
heap
page read and write
569F000
stack
page read and write
4039000
heap
page read and write
3F0E000
heap
page read and write
3D97000
heap
page read and write
3FE8000
heap
page read and write
3EF0000
heap
page read and write
44F0000
direct allocation
page read and write
2E24000
heap
page read and write
4F1F000
stack
page read and write
B78000
heap
page read and write
491000
unkown
page write copy
2E13000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
400000
unkown
page readonly
2E13000
heap
page read and write
400000
unkown
page readonly
4380000
direct allocation
page read and write
3F62000
heap
page read and write
3F9A000
heap
page read and write
1E84C350000
heap
page read and write
3CE5000
heap
page read and write
3F86000
heap
page read and write
3A80000
heap
page read and write
3F5C000
heap
page read and write
3FB6000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
2ED5000
heap
page read and write
406C000
heap
page read and write
9A000
stack
page read and write
AE5000
heap
page read and write
2E13000
heap
page read and write
2E13000
heap
page read and write
3E9F000
heap
page read and write
3CE7000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
1661000
heap
page read and write
3CD3000
heap
page read and write
3C9C000
heap
page read and write
111F000
stack
page read and write
927000
heap
page read and write
2E24000
heap
page read and write
303A000
heap
page read and write
3F6E000
heap
page read and write
3D45000
heap
page read and write
1E84C0B9000
heap
page read and write
3D49000
heap
page read and write
3F74000
heap
page read and write
465D000
direct allocation
page read and write
3DEF000
heap
page read and write
3FAB000
heap
page read and write
3D26000
heap
page read and write
2E13000
heap
page read and write
3F59000
heap
page read and write
3DA0000
heap
page read and write
2F01000
heap
page read and write
100000
heap
page read and write
3D1B000
heap
page read and write
174F000
stack
page read and write
B87000
heap
page read and write
2E13000
heap
page read and write
3F5C000
heap
page read and write
2F95000
heap
page read and write
46A9000
direct allocation
page read and write
3C10000
heap
page read and write
3EFC000
heap
page read and write
491000
unkown
page write copy
159E000
stack
page read and write
1E84BF50000
heap
page read and write
46BE000
direct allocation
page read and write
491000
unkown
page write copy
2E13000
heap
page read and write
93E000
stack
page read and write
3C4C000
heap
page read and write
313F000
stack
page read and write
15BE000
stack
page read and write
400000
unkown
page readonly
468E000
direct allocation
page read and write
2E24000
heap
page read and write
4052000
heap
page read and write
3C79000
heap
page read and write
2E13000
heap
page read and write
3A90000
heap
page read and write
405D000
heap
page read and write
3D45000
heap
page read and write
2E13000
heap
page read and write
2E24000
heap
page read and write
3960000
heap
page read and write
8AC000
stack
page read and write
3C79000
heap
page read and write
4048000
heap
page read and write
3EA8000
heap
page read and write
4609000
direct allocation
page read and write
3D5B000
heap
page read and write
3101000
heap
page read and write
2E13000
heap
page read and write
8FE000
stack
page read and write
3F00000
heap
page read and write
1660000
heap
page read and write
3D76000
heap
page read and write
4021000
heap
page read and write
76292FE000
stack
page read and write
3D77000
heap
page read and write
2E13000
heap
page read and write
3FFE000
heap
page read and write
76296FE000
stack
page read and write
4061000
heap
page read and write
2E24000
heap
page read and write
3A9F000
heap
page read and write
3D1B000
heap
page read and write
474000
system
page execute and read and write
2DCE000
stack
page read and write
478000
system
page execute and read and write
3C59000
heap
page read and write
4E1E000
stack
page read and write
3031000
heap
page read and write
4340000
direct allocation
page read and write
4390000
direct allocation
page read and write
4A7000
unkown
page read and write
1F0000
heap
page read and write
42F0000
direct allocation
page read and write
2FEA000
heap
page read and write
2E13000
heap
page read and write
492000
unkown
page read and write
3FCD000
heap
page read and write
3C30000
heap
page read and write
3C99000
heap
page read and write
750000
heap
page read and write
3F5F000
heap
page read and write
4AB000
unkown
page readonly
3E2A000
heap
page read and write
3C51000
heap
page read and write
1E84C114000
heap
page read and write
2E13000
heap
page read and write
3C6F000
heap
page read and write
400000
unkown
page readonly
2E24000
heap
page read and write
3F74000
heap
page read and write
16A0000
heap
page read and write
3FDB000
heap
page read and write
2E24000
heap
page read and write
A50000
heap
page read and write
482000
unkown
page readonly
1680000
heap
page read and write
2E13000
heap
page read and write
3C8F000
heap
page read and write
3C88000
heap
page read and write
2E24000
heap
page read and write
44A3000
direct allocation
page read and write
3FDF000
heap
page read and write
3C81000
heap
page read and write
8FE000
stack
page read and write
3F20000
heap
page read and write
4B5E000
stack
page read and write
490000
unkown
page write copy
491000
unkown
page write copy
D2E000
stack
page read and write
2EA0000
heap
page read and write
3DF0000
heap
page read and write
A80000
heap
page read and write
4350000
direct allocation
page read and write
2F10000
heap
page read and write
4C1E000
stack
page read and write
2E24000
heap
page read and write
3F5C000
heap
page read and write
3FC0000
heap
page read and write
3D31000
heap
page read and write
2E14000
heap
page read and write
44E0000
direct allocation
page read and write
3F26000
heap
page read and write
2E24000
heap
page read and write
2E27000
heap
page read and write
780000
heap
page read and write
3CD8000
heap
page read and write
2E24000
heap
page read and write
4335000
direct allocation
page read and write
4D5C000
stack
page read and write
401000
unkown
page execute read
1680000
heap
page read and write
76298FB000
stack
page read and write
2E24000
heap
page read and write
4001000
heap
page read and write
2E13000
heap
page read and write
406E000
heap
page read and write
3BE0000
heap
page read and write
3F82000
heap
page read and write
9A000
stack
page read and write
A60000
heap
page read and write
2EE1000
heap
page read and write
490000
unkown
page read and write
482000
unkown
page readonly
45BD000
direct allocation
page read and write
3D63000
heap
page read and write
9335000
direct allocation
page read and write
4020000
heap
page read and write
2E24000
heap
page read and write
928000
heap
page read and write
3D5E000
heap
page read and write
401000
unkown
page execute read
3D12000
heap
page read and write
2F20000
heap
page read and write
3FCF000
heap
page read and write
46CE000
direct allocation
page read and write
3C83000
heap
page read and write
2D7E000
stack
page read and write
6B35000
direct allocation
page read and write
3C79000
heap
page read and write
3DBF000
heap
page read and write
2E13000
heap
page read and write
3CEE000
heap
page read and write
3D09000
heap
page read and write
4463000
direct allocation
page read and write
3C18000
heap
page read and write
4000000
heap
page read and write
1680000
heap
page read and write
3C99000
heap
page read and write
3BA0000
heap
page read and write
3C99000
heap
page read and write
3DBF000
heap
page read and write
3BFF000
stack
page read and write
2E30000
direct allocation
page execute and read and write
3D4A000
heap
page read and write
3EFE000
heap
page read and write
3C3A000
heap
page read and write
401000
unkown
page execute read
490000
unkown
page write copy
3FD5000
heap
page read and write
93E000
stack
page read and write
924000
heap
page read and write
2E24000
heap
page read and write
2E24000
heap
page read and write
3D48000
heap
page read and write
2E24000
heap
page read and write
2E13000
heap
page read and write
There are 1076 hidden memdumps, click here to show them.