IOC Report
FACTURA A-7507_H1758.exe

loading gif

Files

File Path
Type
Category
Malicious
FACTURA A-7507_H1758.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Varmluftsovn\lgebgers.vig
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Varmluftsovn\plot-im.jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=cup with tea bag iconsorn11,\001, copyright=sorn11,\001, xresolution=89, yresolution=97], progressive, precision 8, 612x557, components 3
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Whitherso\Nephropore142.bjr
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Whitherso\Nonfrugalness\Sulfurous.Ins155
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Whitherso\Nonfrugalness\bikarbonatets.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Whitherso\Nonfrugalness\dgncentre.hyp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\kolonibestyrernes\Nonperpetration\Whitherso\Polypterus.Bla
data
dropped
C:\Users\user\AppData\Local\Temp\E-1658-o
SQLite 3.x database, last written using SQLite version 3036000, page size 2048, file counter 7, database pages 59, cookie 0x52, schema 4, UTF-8, version-valid-for 7
dropped
C:\Users\user\AppData\Local\Temp\nsr3F9E.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\nsrFDBF.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\FACTURA A-7507_H1758.exe
"C:\Users\user\Desktop\FACTURA A-7507_H1758.exe"
 malicious
C:\Users\user\Desktop\FACTURA A-7507_H1758.exe
"C:\Users\user\Desktop\FACTURA A-7507_H1758.exe"
 malicious
C:\Program Files (x86)\KTovCZPwAEfLdyMaiKdNhYiGlitNomNEzhisVikkrg\vCWtwarpbXUl.exe
"C:\Program Files (x86)\KTovCZPwAEfLdyMaiKdNhYiGlitNomNEzhisVikkrg\vCWtwarpbXUl.exe"
malicious
C:\Windows\SysWOW64\ROUTE.EXE
"C:\Windows\SysWOW64\ROUTE.EXE"
 malicious
C:\Program Files (x86)\KTovCZPwAEfLdyMaiKdNhYiGlitNomNEzhisVikkrg\vCWtwarpbXUl.exe
"C:\Program Files (x86)\KTovCZPwAEfLdyMaiKdNhYiGlitNomNEzhisVikkrg\vCWtwarpbXUl.exe"
malicious
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\Firefox.exe"
 malicious

URLs

Name
IP
Malicious
http://www.russe-trykk.online/13t3/?2rul-=OPGGyibZykz1HQ+fwNDr+1YpMJUD6qxq+hpAjJgj1ZR94MAkLt42BGXqMjTev/m9FIbjW4eTPcRZap/xAhCWotsEASV9n/5Kf2dVcxkz55MgVuVRQ72L8tA=&Hh=g6BlO
185.134.245.113
https://www.reg.ru/domain/new/?utm_source=www.lichnyyrost.online&utm_medium=parking&utm_campaign=s_l
unknown
https://duckduckgo.com/chrome_newtab
unknown
https://uk.search.yahoo.com/favicon.icohttps://uk.search.yahoo.com/search
unknown
https://cdn.hostinger.com/hostinger-academy/dns/domain-default-img.svg
unknown
https://www.reg.ru/dedicated/?utm_source=www.lichnyyrost.online&utm_medium=parking&utm_campaign=s_la
unknown
https://duckduckgo.com/ac/?q=
unknown
https://reg.ru
unknown
http://www.binacamasala.com/e0v8/
3.33.130.190
http://www.refs4refs.info/2x6z/?2rul-=6sUeAEt7hwY4mk3wpk1Py+KddqTXyA2z81hHBbMDWhxhb4pP2P0Gx/EyI5FOCEXJglbHzptctb6mG5kRkjGOyZ0rCKBl8OBndjuiy8rVGEQrWogyvOe1wlI=&Hh=g6BlO
3.33.130.190
http://www.lichnyyrost.online/3ld1/
194.58.112.174
https://parking.reg.ru/script/get_domain_data?domain_name=www.lichnyyrost.online&rand=
unknown
https://support.hostinger.com/en/articles/1583214-how-to-add-a-domain-to-my-account-how-to-add-websi
unknown
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.
unknown
http://www.caprinaday.net:80/pv6s/?2rul-=X8hwKmufpxNrBOZ4UI9uvOrgRNyZ3XXX9OcroS
unknown
http://www.1-mine.online/u1q9/?Hh=g6BlO&2rul-=jd3Av2k5V8Eau16mgcfaPd8VebuAL1FcJ0MaInc68HOQ7ZBrvq4ejSFdl4VVlO0+8Eq38X9/B8LMXqH/bNKlbEK/GZjnRsE0t8/pdXuVmtOQpH7wXf7Q+zg=
172.67.148.133
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD
unknown
http://www.3bbfibre3app.net/xb3p/
142.251.40.243
http://www.gopher.ftp://ftp.
unknown
http://www.1-mine.online/u1q9/
172.67.148.133
http://www.gokulmohan.online/rfuo/?Hh=g6BlO&2rul-=HttO6gilRPhQm5AaUYCTEe/GFzQ3JRW7tnq3sC1VQlloj6
unknown
https://www.google.com
unknown
https://www.reg.ru/whois/?check=&dname=www.lichnyyrost.online&reg_source=parking_auto
unknown
http://www.w3c.org/TR/1999/REC-html401-19991224/frameset.dtd
unknown
https://uk.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
https://drive.google.com/
unknown
http://www.refs4refs.info/2x6z/
3.33.130.190
http://www.estrela-b.online/65n9/?Hh=g6BlO&2rul-=ssXOrmKN3jSGgEpB8/Lr5wdtJLPOH5LoJxs9XTE68ACf17BnujIswIsld3byg7BhPFUAfPirzvQjQ8endFGhd5eV2I8oMWmFKGMjxKhm0/w9bVWL9pUke2g=
162.241.63.77
http://www.lichnyyrost.online/3ld1/?Hh=g6BlO&2rul-=CxEsl70ByyFCVrEmQ1H576bbPcYyg9sIwSrFamSzPlGZOs8aE6QFujQOfXywaJwNxcqmSbu90P/WMPRiAk1blYMq9yYTo32NmbjkK65nzP/wEdpsGvsZrfc=
194.58.112.174
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214
unknown
http://www.theawareness.shop/wjz2/?2rul-=Ze+HptNr85yw14c+us2AC2dw1a7i9e00/foFqz1kUabDhzphc/VO6YYTNbrnHL/5cJOwek587J0vYmBCPQ4ypnI0Vgcg70qX2rjEYXT5uSwLlvVTAHZgxGM=&Hh=g6BlO
172.67.177.220
http://www.innovators.group/6fde/
13.248.169.48
http://www.bigliaserramenti.com/ygv5/
75.2.19.62
https://apis.google.com
unknown
https://www.3bbfibre3app.net/xb3p/?2rul-=
unknown
https://www.domeneshop.no/whois
unknown
http://www.how2.guru/7eim/?2rul-=Pu7Jmzu3dQpG1gjbkb05SIIv4sqt6U0nt6quxZgneXVsMN0V8VG/l4BYXcWzXHwprF18XqOi0/cpvqPHAvGxgIKtLyR40JNs4fmKbw9/FUzj8MMoXx+V66E=&Hh=g6BlO
13.248.169.48
https://ocsp.quovadisoffshore.com0
unknown
http://www.xtelify.tech/yzuf/
84.32.84.32
https://www.hostinger.com
unknown
http://www.ruarlo.xyz/443n/?Hh=g6BlO&2rul-=SBUFO7UKbQxT/A0NMCw1slRydQol8mxlPD8CditPqx9i+IWA5JxkazMedHBluKiV/JkaYuM+MOSFojVsVdVmUJrzgHDhlyielwZPRH6/6joZww29waA6pwk=
162.0.231.203
http://www.wrl-llc.net/n7zc/?Hh=g6BlO&2rul-=4uIsvpMyaiNaEMynSWraJ/2ewRneyY2IM3xoEszCiepO+vQwtMzBLq4BvMD3ENezA07qcacnmpI/gT8KQ+99hp5F4iXZ7molM84vqZhw689aaRZynnXQiFE=
3.33.130.190
http://www.gokulmohan.online/rfuo/
104.21.64.124
https://www.domainnameshop.com/whois
unknown
https://www.istockphoto.com/photo/license-gm618184124-?utm_medium=organic&utm_source=google&
unknown
http://www.wrl-llc.net/n7zc/
3.33.130.190
http://www.innovators.group/6fde/?2rul-=nbGTuLemKRTpMBhECM1mMcTVmibgynjed6008TvXOLJMhaVDWlSxtENlCtfhfXIYxXqpopSgMtQMvB67FBGeOiwcmCMnIoT/zPipv8Zc3bHdVtIwetv/s5E=&Hh=g6BlO
13.248.169.48
http://estrela-b.online/65n9/?Hh=g6BlO&2rul-=ssXOrmKN3jSGgEpB8/Lr5wdtJLPOH5LoJxs9XTE68ACf17BnujIswIs
unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
unknown
http://www.russe-trykk.online/13t3/
185.134.245.113
http://www.caprinaday.net/pv6s/?2rul-=X8hwKmufpxNrBOZ4UI9uvOrgRNyZ3XXX9OcroS+CBDl0e/03G6vIGgM2DOx4ZCTRM54bCOA7z+XcSGAiseRvin1n9lPpnkGa0LOYYd0oIGRqFGq723QGUcE=&Hh=g6BlO
62.149.128.45
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
http://www.wrl-llc.net
unknown
https://drive.usercontent.google.com/
unknown
http://nsis.sf.net/NSIS_ErrorError
unknown
https://help.reg.ru/support/ssl-sertifikaty/1-etap-zakaz-ssl-sertifikata/kak-zakazat-besplatnyy-ssl-
unknown
https://www.ecosia.org/newtab/
unknown
http://www.estrela-b.online/65n9/
162.241.63.77
http://www.how2.guru/7eim/
13.248.169.48
http://www.gokulmohan.online/rfuo/?Hh=g6BlO&2rul-=HttO6gilRPhQm5AaUYCTEe/GFzQ3JRW7tnq3sC1VQlloj67/9n3YrtONKlQmdJDOXt5dm9a5cNA5akyMA8hzjxd/lkJNPaGIP3HcLzqJj36WiuTl2EhOSjI=
104.21.64.124
https://www.reg.ru/hosting/?utm_source=www.lichnyyrost.online&utm_medium=parking&utm_campaign=s_land
unknown
http://www.bigliaserramenti.com/ygv5/?Hh=g6BlO&2rul-=iXc1WEJQd/Gahx7+3W11/RKNDsT+DV4H4y6OEj3K8d5Enxayz0VfmTOd+atgJRAuX8UuGK7zkF0xfNQrHCEKQuis9q2uRBiLjPiUjFzh2kkhFDo8hKapbBo=
75.2.19.62
https://ac.ecosia.org/autocomplete?q=
unknown
https://www.domainnameshop.com/
unknown
https://www.reg.ru/sozdanie-saita/
unknown
http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
unknown
http://www.theawareness.shop/wjz2/
172.67.177.220
http://www.quovadis.bm0
unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
unknown
https://gemini.google.com/app?q=
unknown
http://www.ruarlo.xyz/443n/
162.0.231.203
http://www.3bbfibre3app.net/xb3p/?2rul-=+HG6aiFxTvlSzQoIs9ZJ3PSkAiypA9aaBhm9bacr778ozHX/qp3/mrPcWfQQ4m8pKd5uzW3Q1BNoTzb8AReS/5N/dAP+OtFAus01fnFx169lP7D5+vQ5ltg=&Hh=g6BlO
142.251.40.243
https://support.hostinger.com/en/articles/1696789-how-to-change-nameservers-at-hostinger
unknown
There are 63 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.ruarlo.xyz
162.0.231.203
 malicious
estrela-b.online
162.241.63.77
www.bigliaserramenti.com
75.2.19.62
xtelify.tech
84.32.84.32
drive.usercontent.google.com
142.250.176.193
www.1-mine.online
172.67.148.133
www.theawareness.shop
172.67.177.220
www.russe-trykk.online
185.134.245.113
www.caprinaday.net
62.149.128.45
refs4refs.info
3.33.130.190
binacamasala.com
3.33.130.190
drive.google.com
142.250.80.110
www.innovators.group
13.248.169.48
www.gokulmohan.online
104.21.64.124
www.how2.guru
13.248.169.48
wrl-llc.net
3.33.130.190
ghs.googlehosted.com
142.251.40.243
www.lichnyyrost.online
194.58.112.174
www.wrl-llc.net
unknown
www.binacamasala.com
unknown
www.3bbfibre3app.net
unknown
www.estrela-b.online
unknown
www.refs4refs.info
unknown
www.xtelify.tech
unknown
There are 14 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
162.0.231.203
www.ruarlo.xyz
Canada
malicious
13.248.169.48
www.innovators.group
United States
142.250.80.110
drive.google.com
United States
172.67.148.133
www.1-mine.online
United States
84.32.84.32
xtelify.tech
Lithuania
104.21.64.124
www.gokulmohan.online
United States
142.251.40.243
ghs.googlehosted.com
United States
162.241.63.77
estrela-b.online
United States
185.134.245.113
www.russe-trykk.online
Norway
172.67.177.220
www.theawareness.shop
United States
194.58.112.174
www.lichnyyrost.online
Russian Federation
3.33.130.190
refs4refs.info
United States
75.2.19.62
www.bigliaserramenti.com
United States
142.250.176.193
drive.usercontent.google.com
United States
62.149.128.45
www.caprinaday.net
Italy
There are 5 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\cyanometry\acidifier\bilagsnummers
madeiraernes
HKEY_CURRENT_USER\SOFTWARE\Uninstall
Win64
HKEY_CURRENT_USER\SOFTWARE\Uninstall
Win64
HKEY_CURRENT_USER\SOFTWARE\Uninstall
Win64
HKEY_CURRENT_USER\SOFTWARE\Uninstall
Win64
HKEY_CURRENT_USER\SOFTWARE\Uninstall
Win64

Memdumps

Base Address
Regiontype
Protect
Malicious
47A5000
direct allocation
page execute and read and write
 malicious
30C1000
heap
page read and write
30C1000
heap
page read and write
40A000
unkown
page write copy
115F000
heap
page read and write
4EA0000
direct allocation
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2F69000
heap
page read and write
16F0000
unkown
page readonly
30C1000
heap
page read and write
2CD0000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
CFC000
stack
page read and write
4F99000
heap
page read and write
30C1000
heap
page read and write
24236DA4000
trusted library allocation
page read and write
656000
heap
page read and write
5F2000
unkown
page execute read
850000
direct allocation
page read and write
30C1000
heap
page read and write
28A0000
heap
page read and write
2F32000
heap
page read and write
2ED1000
heap
page read and write
655000
heap
page read and write
34C1D000
stack
page read and write
31C4000
heap
page read and write
656000
heap
page read and write
5022000
unkown
page read and write
7C80000
trusted library allocation
page read and write
2CD4000
heap
page read and write
2F66000
heap
page read and write
30C1000
heap
page read and write
EB4000
unkown
page read and write
520F000
stack
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4C4000
heap
page read and write
30C1000
heap
page read and write
346F0000
direct allocation
page read and write
24236C19000
trusted library allocation
page read and write
30C1000
heap
page read and write
771000
unkown
page execute read
347C0000
direct allocation
page read and write
DB0000
unkown
page read and write
30C1000
heap
page read and write
47B0000
unclassified section
page read and write
2F90000
unkown
page read and write
1482000
system
page execute and read and write
656000
heap
page read and write
99E000
stack
page read and write
96000
stack
page read and write
33C0000
trusted library allocation
page read and write
87F53FB000
stack
page read and write
4C4000
heap
page read and write
31D2000
unkown
page read and write
34770000
direct allocation
page read and write
33A5000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
242350A7000
heap
page read and write
345E0000
direct allocation
page read and write
30C1000
heap
page read and write
30000
heap
page read and write
401000
unkown
page execute read
4F31000
heap
page read and write
656000
heap
page read and write
2F28000
heap
page read and write
347B0000
direct allocation
page read and write
34710000
direct allocation
page read and write
2ECA000
heap
page read and write
2CC0000
unkown
page execute and read and write
E00000
unkown
page readonly
656000
heap
page read and write
30C1000
heap
page read and write
2F80000
unkown
page readonly
636000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
2EC6000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4392000
unkown
page read and write
30C1000
heap
page read and write
4F4E000
heap
page read and write
787000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
3DA5000
direct allocation
page execute and read and write
30C1000
heap
page read and write
2E00000
heap
page read and write
30C1000
heap
page read and write
34B9F000
stack
page read and write
3782000
unclassified section
page read and write
656000
heap
page read and write
24236DB4000
trusted library allocation
page read and write
77E000
unkown
page readonly
4C4000
heap
page read and write
87F63FE000
stack
page read and write
30C1000
heap
page read and write
356CC000
direct allocation
page execute and read and write
4E90000
heap
page read and write
46B6000
unkown
page read and write
656000
heap
page read and write
7D90000
trusted library allocation
page read and write
30C1000
heap
page read and write
DC0000
heap
page read and write
3292000
unkown
page read and write
77E000
unkown
page readonly
30C1000
heap
page read and write
1715000
remote allocation
page execute and read and write
2F48000
heap
page read and write
1148000
heap
page read and write
24236C1C000
trusted library allocation
page read and write
34DEF000
stack
page read and write
656000
heap
page read and write
4E6E000
stack
page read and write
30C1000
heap
page read and write
34F8C000
stack
page read and write
770000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
2CD4000
heap
page read and write
30C1000
heap
page read and write
435000
unkown
page read and write
656000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
7C96000
heap
page read and write
5F8000
heap
page read and write
E10000
unkown
page readonly
DE0000
heap
page read and write
771000
unkown
page execute read
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
34FEC000
system
page read and write
2F28000
heap
page read and write
656000
heap
page read and write
5EE000
unkown
page execute read
3BB8000
unkown
page read and write
2FC1000
heap
page read and write
655000
heap
page read and write
30C1000
heap
page read and write
4F99000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4E90000
unkown
page read and write
30C1000
heap
page read and write
2E70000
unkown
page read and write
F1D000
unkown
page read and write
34EFE000
stack
page read and write
4C4000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
53A0000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
34ED2000
system
page read and write
4C4000
heap
page read and write
14D9000
system
page execute and read and write
30C1000
heap
page read and write
87F5BFD000
stack
page read and write
5EC000
unkown
page execute read
7CB3000
heap
page read and write
10059000
trusted library allocation
page read and write
2BC0000
heap
page read and write
345F1000
heap
page read and write
2F23000
heap
page read and write
34B5E000
stack
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
785000
unkown
page read and write
30C1000
heap
page read and write
34740000
direct allocation
page read and write
400000
unkown
page readonly
4FA2000
heap
page read and write
4F4E000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
2F8E000
heap
page read and write
CF0000
unkown
page readonly
770000
unkown
page readonly
E90000
heap
page read and write
656000
heap
page read and write
3559000
direct allocation
page execute and read and write
30C1000
heap
page read and write
31D2000
unkown
page read and write
87F6BFE000
stack
page read and write
2E60000
unkown
page readonly
30C1000
heap
page read and write
36C0000
unkown
page execute and read and write
30C1000
heap
page read and write
34F92000
system
page read and write
8F0000
unkown
page readonly
30C1000
heap
page read and write
42FA000
unclassified section
page read and write
5BA5000
direct allocation
page execute and read and write
656000
heap
page read and write
DF0000
unkown
page readonly
12E0000
heap
page read and write
2D5F000
stack
page read and write
2E90000
unkown
page readonly
5150000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
24236C10000
trusted library allocation
page read and write
900000
unkown
page readonly
30C1000
heap
page read and write
CF0000
unkown
page readonly
34EC0000
remote allocation
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
2BC4000
heap
page read and write
B0000
unclassified section
page execute and read and write
D80000
unkown
page read and write
840000
direct allocation
page read and write
30C1000
heap
page read and write
2315000
heap
page read and write
B0000
direct allocation
page read and write
30C1000
heap
page read and write
34790000
direct allocation
page read and write
34760000
direct allocation
page read and write
514F000
stack
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2ECD000
heap
page read and write
510E000
stack
page read and write
2EDF000
heap
page read and write
2F80000
unkown
page readonly
DD1000
unkown
page readonly
656000
heap
page read and write
649000
unkown
page execute read
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
1466000
system
page execute and read and write
7EE0000
heap
page read and write
656000
heap
page read and write
345F1000
heap
page read and write
6AC0000
direct allocation
page read and write
2F32000
heap
page read and write
30C1000
heap
page read and write
1148000
heap
page read and write
E50000
unkown
page read and write
69D0000
direct allocation
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4B6C000
unkown
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
406E000
unkown
page read and write
427000
unkown
page read and write
2F9F000
heap
page read and write
30C1000
heap
page read and write
4CFE000
unkown
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
771000
unkown
page execute read
24234F93000
system
page execute and read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4942000
unclassified section
page read and write
44D000
unkown
page read and write
30C1000
heap
page read and write
4F99000
heap
page read and write
24236F00000
heap
page read and write
DE0000
heap
page read and write
1140000
heap
page read and write
7D0D000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
34D5F000
stack
page read and write
3652D000
unclassified section
page execute and read and write
30C1000
heap
page read and write
656000
heap
page read and write
2F3B000
heap
page read and write
347A0000
direct allocation
page read and write
2310000
heap
page read and write
4E94000
heap
page read and write
4F4E000
heap
page read and write
656000
heap
page read and write
77E000
unkown
page readonly
31C4000
heap
page read and write
656000
heap
page read and write
5EA000
unkown
page execute read
30C1000
heap
page read and write
31C0000
trusted library allocation
page read and write
656000
heap
page read and write
24236AF0000
trusted library allocation
page read and write
7D0D000
heap
page read and write
30C1000
heap
page read and write
35750000
unclassified section
page execute and read and write
10003000
unkown
page readonly
E98000
heap
page read and write
34C5E000
stack
page read and write
24236B00000
trusted library allocation
page read and write
30C1000
heap
page read and write
30CC000
heap
page read and write
24236DAE000
trusted library allocation
page read and write
3000000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
64DE000
stack
page read and write
87F73FE000
stack
page read and write
30C1000
heap
page read and write
7CF7000
heap
page read and write
356D0000
direct allocation
page execute and read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2F90000
unkown
page read and write
656000
heap
page read and write
242351F0000
heap
page read and write
2450000
heap
page read and write
30C1000
heap
page read and write
1476000
system
page execute and read and write
30C1000
heap
page read and write
2ED6000
heap
page read and write
408000
unkown
page readonly
30C1000
heap
page read and write
3E44000
unclassified section
page read and write
1485000
system
page execute and read and write
31C0000
heap
page read and write
10005000
unkown
page readonly
30C1000
heap
page read and write
7CEC000
heap
page read and write
229E000
stack
page read and write
1660000
remote allocation
page execute and read and write
30C1000
heap
page read and write
3000000
heap
page read and write
4E94000
heap
page read and write
4F97000
heap
page read and write
785000
unkown
page read and write
DF0000
unkown
page readonly
4F51000
heap
page read and write
787000
unkown
page readonly
19A000
stack
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
4C0000
heap
page read and write
63E000
heap
page read and write
30C1000
heap
page read and write
4F16000
heap
page read and write
345F1000
heap
page read and write
44F000
unkown
page readonly
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
2115000
remote allocation
page execute and read and write
30C1000
heap
page read and write
113C000
unkown
page read and write
656000
heap
page read and write
5F0000
unkown
page execute read
127E000
stack
page read and write
62D000
heap
page read and write
7D05000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
241F000
stack
page read and write
D00000
heap
page read and write
30C1000
heap
page read and write
4F4B000
heap
page read and write
3200000
heap
page read and write
6AD0000
direct allocation
page read and write
24235340000
heap
page read and write
61E0000
trusted library allocation
page read and write
3A9D000
unkown
page execute and read and write
351BB000
heap
page read and write
30C1000
heap
page read and write
327C000
heap
page read and write
345F0000
heap
page read and write
13C0000
system
page execute and read and write
461E000
unclassified section
page read and write
30C1000
heap
page read and write
E20000
unkown
page read and write
35378000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
34750000
direct allocation
page read and write
16F1000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
7D0B000
heap
page read and write
4B0000
direct allocation
page read and write
656000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
5B0000
direct allocation
page read and write
3210000
trusted library allocation
page read and write
656000
heap
page read and write
30C0000
heap
page read and write
800000
direct allocation
page read and write
910000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
785000
unkown
page read and write
DF1000
unkown
page readonly
656000
heap
page read and write
34720000
direct allocation
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
771000
unkown
page execute read
10020000
trusted library allocation
page read and write
1360000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
35529000
direct allocation
page execute and read and write
2B15000
remote allocation
page execute and read and write
656000
heap
page read and write
7CCF000
heap
page read and write
1280000
unkown
page read and write
10FC000
stack
page read and write
2EC0000
heap
page read and write
34730000
direct allocation
page read and write
31EF000
heap
page read and write
345F1000
heap
page read and write
7D05000
heap
page read and write
4F38000
heap
page read and write
10FC000
stack
page read and write
4F4E000
heap
page read and write
4F4B000
heap
page read and write
408000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
34AC000
unkown
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
32EC000
unkown
page read and write
656000
heap
page read and write
400000
unkown
page readonly
30C1000
heap
page read and write
656000
heap
page read and write
24235097000
heap
page read and write
35594000
system
page read and write
49DA000
unkown
page read and write
2F2C000
heap
page read and write
30C1000
heap
page read and write
7D03000
heap
page read and write
7CB0000
heap
page read and write
3508C000
stack
page read and write
30C1000
heap
page read and write
33A9000
heap
page read and write
351AC000
system
page read and write
4F38000
heap
page read and write
4848000
unkown
page read and write
42B000
unkown
page read and write
30C1000
heap
page read and write
7CBE000
heap
page read and write
2E90000
unkown
page readonly
30C1000
heap
page read and write
4F4B000
heap
page read and write
4EB0000
direct allocation
page read and write
3894000
unkown
page read and write
3430000
direct allocation
page execute and read and write
97A000
stack
page read and write
30C1000
heap
page read and write
4F2F000
heap
page read and write
E50000
unkown
page read and write
34C9D000
stack
page read and write
DC0000
heap
page read and write
1360000
unkown
page readonly
3EDC000
unkown
page read and write
CFC000
stack
page read and write
35098000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
242350A3000
heap
page read and write
33C0000
trusted library allocation
page read and write
34EC0000
remote allocation
page read and write
E40000
unkown
page readonly
656000
heap
page read and write
3524F000
heap
page read and write
5C0000
direct allocation
page read and write
656000
heap
page read and write
770000
unkown
page readonly
30C1000
heap
page read and write
5E8000
unkown
page execute read
30C1000
heap
page read and write
E00000
unkown
page readonly
4F51000
heap
page read and write
7C88000
heap
page read and write
4FA0000
heap
page read and write
30C1000
heap
page read and write
1A50000
unkown
page readonly
29FE000
stack
page read and write
4A0000
direct allocation
page read and write
2F36000
heap
page read and write
2E00000
trusted library allocation
page read and write
2F2C000
heap
page read and write
24234F96000
system
page execute and read and write
30C1000
heap
page read and write
DA0000
unkown
page readonly
30C1000
heap
page read and write
24236C02000
trusted library allocation
page read and write
30C1000
heap
page read and write
B0000
direct allocation
page read and write
408000
unkown
page readonly
31C0000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
4E95000
heap
page read and write
164C000
unkown
page read and write
401000
unkown
page execute read
30C1000
heap
page read and write
9B0000
unkown
page readonly
8C8000
stack
page read and write
7C90000
heap
page read and write
900000
unkown
page readonly
3B0F000
unkown
page execute and read and write
656000
heap
page read and write
34780000
direct allocation
page read and write
3700000
direct allocation
page execute and read and write
4C4000
heap
page read and write
6F0000
heap
page read and write
7CAA000
heap
page read and write
7C9F000
heap
page read and write
30C1000
heap
page read and write
97A000
stack
page read and write
30C1000
heap
page read and write
2F36000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
810000
direct allocation
page read and write
6F1000
heap
page read and write
649D000
stack
page read and write
2F6F000
heap
page read and write
3A26000
unkown
page read and write
65A5000
direct allocation
page execute and read and write
656000
heap
page read and write
30C1000
heap
page read and write
3537C000
heap
page read and write
44F000
unkown
page readonly
4F21000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
24234F40000
system
page execute and read and write
626000
unkown
page execute read
4FA2000
heap
page read and write
242350AA000
heap
page read and write
900000
system
page execute and read and write
656000
heap
page read and write
656000
heap
page read and write
83AE000
stack
page read and write
51A5000
direct allocation
page execute and read and write
4F38000
heap
page read and write
34F3F000
stack
page read and write
2BD0000
unkown
page readonly
656000
heap
page read and write
6F1000
heap
page read and write
34D1E000
stack
page read and write
4EC8000
heap
page read and write
145C000
system
page execute and read and write
24236AF0000
trusted library allocation
page read and write
24235078000
heap
page read and write
656000
heap
page read and write
60000
direct allocation
page read and write
7D17000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2FB3000
heap
page read and write
30C1000
heap
page read and write
77E000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
7CC8000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
7CFF000
heap
page read and write
52AE000
unclassified section
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2E70000
unkown
page read and write
2ED1000
heap
page read and write
3842000
unclassified section
page read and write
30C1000
heap
page read and write
1280000
unkown
page read and write
E10000
unkown
page readonly
656000
heap
page read and write
42D000
unkown
page read and write
30C1000
heap
page read and write
7CF2000
heap
page read and write
3260000
trusted library allocation
page read and write
787000
unkown
page readonly
30C1000
heap
page read and write
30C1000
heap
page read and write
14E0000
unkown
page read and write
60000
direct allocation
page read and write
40A000
unkown
page read and write
30B0000
heap
page read and write
31C0000
heap
page read and write
656000
heap
page read and write
3F15000
remote allocation
page execute and read and write
656000
heap
page read and write
2CD4000
heap
page read and write
2E60000
unkown
page readonly
2F99000
heap
page read and write
D00000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
7F0000
direct allocation
page read and write
3310000
trusted library allocation
page execute and read and write
24236D00000
trusted library allocation
page read and write
787000
unkown
page readonly
30C1000
heap
page read and write
CE0000
unkown
page readonly
B0000
direct allocation
page read and write
5D0000
direct allocation
page read and write
16C0000
unkown
page readonly
4F51000
heap
page read and write
656000
heap
page read and write
36150000
unclassified section
page execute and read and write
50CE000
stack
page read and write
2CD4000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
7CD9000
heap
page read and write
24236C00000
trusted library allocation
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
2BC4000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
7D08000
heap
page read and write
389C000
unclassified section
page read and write
5F0000
heap
page read and write
30C1000
heap
page read and write
DD1000
unkown
page readonly
2454000
heap
page read and write
2F5C000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
870000
direct allocation
page read and write
EAB000
unkown
page read and write
10001000
unkown
page execute read
400000
unkown
page readonly
35400000
direct allocation
page execute and read and write
656000
heap
page read and write
2EC8000
heap
page read and write
24236C09000
trusted library allocation
page read and write
4C4000
heap
page read and write
656000
heap
page read and write
2F63000
heap
page read and write
656000
heap
page read and write
30C1000
heap
page read and write
12E5000
heap
page read and write
44F000
unkown
page readonly
30C1000
heap
page read and write
16C0000
unkown
page readonly
3515000
remote allocation
page execute and read and write
33C0000
trusted library allocation
page read and write
2EC8000
heap
page read and write
3A5C000
unclassified section
page read and write
30C1000
heap
page read and write
401000
unkown
page execute read
2BC0000
heap
page read and write
30C1000
heap
page read and write
8F0000
unkown
page readonly
30C1000
heap
page read and write
24235070000
heap
page read and write
656000
heap
page read and write
860000
direct allocation
page read and write
E90000
heap
page read and write
30000
heap
page read and write
4F4B000
heap
page read and write
30C1000
heap
page read and write
4168000
unclassified section
page read and write
30C1000
heap
page read and write
2F0C000
heap
page read and write
12C0000
unkown
page readonly
24236C0D000
trusted library allocation
page read and write
656000
heap
page read and write
2EFA000
heap
page read and write
656000
heap
page read and write
1A51000
unkown
page readonly
656000
heap
page read and write
3659F000
unclassified section
page execute and read and write
12E0000
heap
page read and write
34AC000
unkown
page read and write
12D0000
unkown
page readonly
30C1000
heap
page read and write
4EF4000
heap
page read and write
30C1000
heap
page read and write
4F09000
heap
page read and write
30C1000
heap
page read and write
D80000
unkown
page read and write
480000
direct allocation
page read and write
4F2C000
heap
page read and write
36FC000
direct allocation
page execute and read and write
2F7C000
heap
page read and write
30C1000
heap
page read and write
1650000
stack
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
88B000
stack
page read and write
34DAE000
stack
page read and write
3FD6000
unclassified section
page read and write
CE0000
unkown
page readonly
33A5000
direct allocation
page execute and read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
2F95000
heap
page read and write
820000
direct allocation
page read and write
2E40000
heap
page read and write
10000000
unkown
page readonly
910000
heap
page read and write
7CD3000
heap
page read and write
2F48000
heap
page read and write
656000
heap
page read and write
4915000
remote allocation
page execute and read and write
656000
heap
page read and write
E98000
heap
page read and write
30C1000
heap
page read and write
785000
unkown
page read and write
34EC0000
remote allocation
page read and write
E40000
unkown
page readonly
DF1000
unkown
page readonly
490000
direct allocation
page read and write
2F57000
heap
page read and write
4DF8000
unclassified section
page read and write
4C4000
heap
page read and write
511C000
unclassified section
page read and write
30C1000
heap
page read and write
2ECB000
heap
page read and write
9B0000
unkown
page readonly
40A000
unkown
page write copy
30C1000
heap
page read and write
69C0000
direct allocation
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
310F000
stack
page read and write
5440000
unclassified section
page read and write
30C1000
heap
page read and write
345F1000
heap
page read and write
30C1000
heap
page read and write
2ECE000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
820000
heap
page read and write
30C1000
heap
page read and write
2250000
heap
page read and write
30C1000
heap
page read and write
83EF000
stack
page read and write
DA0000
unkown
page readonly
E20000
unkown
page read and write
4C66000
unclassified section
page read and write
8F0000
heap
page read and write
656000
heap
page read and write
D6A000
stack
page read and write
24234ED0000
heap
page read and write
656000
heap
page read and write
34BDE000
stack
page read and write
30C1000
heap
page read and write
355D000
direct allocation
page execute and read and write
4F8A000
unclassified section
page read and write
2F3B000
heap
page read and write
3D4A000
unkown
page read and write
12C0000
unkown
page readonly
12D0000
unkown
page readonly
34E40000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
656000
heap
page read and write
2D1E000
stack
page read and write
4200000
unkown
page read and write
32F0000
direct allocation
page execute and read and write
4F2F000
heap
page read and write
2D80000
trusted library allocation
page read and write
656000
heap
page read and write
24235180000
heap
page read and write
401000
unkown
page execute read
30C1000
heap
page read and write
55D2000
unclassified section
page read and write
30C1000
heap
page read and write
1140000
heap
page read and write
830000
direct allocation
page read and write
656000
heap
page read and write
D6A000
stack
page read and write
51CE000
stack
page read and write
3552D000
direct allocation
page execute and read and write
30C1000
heap
page read and write
2BD0000
unkown
page readonly
656000
heap
page read and write
30C1000
heap
page read and write
656000
heap
page read and write
4EC0000
heap
page read and write
656000
heap
page read and write
448C000
unclassified section
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
30C1000
heap
page read and write
770000
unkown
page readonly
There are 817 hidden memdumps, click here to show them.