Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Scan 368 1.doc
|
Rich Text Format data, version 1
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\xobizx[1].scr
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmp786B.tmp
|
XML 1.0 document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\obimohohj75.scr
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{5C71D985-EA41-483D-AC7B-8DDE867F36C9}.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A0CF2FEA-DB32-4D1A-9AB9-76AD3750DB0A}.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{CA7CEBAD-42A1-4273-8FE9-A682D89DB5DF}.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F50586BA-2E23-4FD0-A214-B66A4504F162}.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\5nap3g1o.oc0.ps1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\e4ub2uzd.xhj.ps1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\es4ckite.zr3.psm1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\g5up0ku4.bo3.psm1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\ghsed41m.5d1.psm1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\hf3jclet.333.psm1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\kzemplcs.rey.ps1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\qsvifntv.1ns.ps1
|
very short file (no magic)
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\tmp8CF4.tmp
|
XML 1.0 document, ASCII text
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Scan 368 1.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Aug 11 15:42:02
2023, mtime=Fri Aug 11 15:42:02 2023, atime=Thu Apr 18 07:37:21 2024, length=327186, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
Generic INItialization configuration [folders]
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\~$an 368 1.doc
|
data
|
dropped
|
There are 13 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /Automation -Embedding
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
|
|
|
|
C:\Users\user\AppData\Roaming\obimohohj75.scr
|
"C:\Users\user\AppData\Roaming\obimohohj75.scr"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\obimohohj75.scr"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe"
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
"C:\Windows\System32\schtasks.exe" /Create /TN "Updates\pgZzUFYKXcIRkU" /XML "C:\Users\user\AppData\Local\Temp\tmp786B.tmp"
|
|
|
|
C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe
|
C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe
|
|
|
|
C:\Users\user\AppData\Roaming\obimohohj75.scr
|
"C:\Users\user\AppData\Roaming\obimohohj75.scr"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe"
|
|
|
|
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
|
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe"
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
"C:\Windows\System32\schtasks.exe" /Create /TN "Updates\pgZzUFYKXcIRkU" /XML "C:\Users\user\AppData\Local\Temp\tmp8CF4.tmp"
|
|
|
|
C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe
|
"C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe"
|
|
|
|
C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe
|
"C:\Users\user\AppData\Roaming\pgZzUFYKXcIRkU.exe"
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
|
|
|
|
C:\Windows\System32\taskeng.exe
|
taskeng.exe {028588F3-95E8-48BE-8F64-19174D00F448} S-1-5-21-966771315-3019405637-367336477-1006:user-PC\user:Interactive:[1]
|
There are 5 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://covid19help.top/xobizx.scr
|
172.67.175.222
|
|
|
|
https://api.ipify.org/
|
104.26.12.205
|
||
|
https://covid19help.top/xobizx.scrC:
|
unknown
|
||
|
https://covid19help.top/xobizx.scrj
|
unknown
|
||
|
https://account.dyn.com/
|
unknown
|
||
|
http://crl.entrust.net/server1.crl0
|
unknown
|
||
|
http://ocsp.entrust.net03
|
unknown
|
||
|
https://api.ipif8
|
unknown
|
||
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
||
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
||
|
https://api.ipify.org/t
|
unknown
|
||
|
https://www.chiark.greenend.org.uk/~sgtatham/putty/0
|
unknown
|
||
|
https://covid19help.top/xobizx.scra
|
unknown
|
||
|
http://api.ipify.org
|
unknown
|
||
|
https://covid19help.top/t
|
unknown
|
||
|
https://api.ipify.org
|
unknown
|
||
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
||
|
https://covid19help.top/xobizx.scrkkC:
|
unknown
|
||
|
https://covid19help.top/dOzJ
|
unknown
|
||
|
https://api.ipify.org/T
|
unknown
|
||
|
http://ocsp.entrust.net0D
|
unknown
|
||
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
||
|
https://secure.comodo.com/CPS0
|
unknown
|
||
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
||
|
https://covid19help.top/xobizx.scrY.
|
unknown
|
There are 15 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
covid19help.top
|
172.67.175.222
|
|
|
|
api.ipify.org
|
172.67.74.152
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
172.67.175.222
|
covid19help.top
|
United States
|
|
|
|
104.26.12.205
|
unknown
|
United States
|
||
|
104.26.13.205
|
unknown
|
United States
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
ec,
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Outlook\Journaling\Microsoft Word
|
Enabled
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
|
MTTT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
-e,
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
qf,
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\26EAA
|
26EAA
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Arial Unicode MS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Batang
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@BatangChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@DFKai-SB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Dotum
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@DotumChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@FangSong
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Gulim
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@GulimChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Gungsuh
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@GungsuhChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@KaiTi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Malgun Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Meiryo
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Meiryo UI
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Microsoft JhengHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Microsoft YaHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU_HKSCS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU_HKSCS-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS Mincho
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS PGothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS PMincho
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS UI Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@NSimSun
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@PMingLiU
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@PMingLiU-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimSun
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimSun-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Agency FB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Aharoni
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Algerian
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Andalus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Angsana New
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
AngsanaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Aparajita
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arabic Typesetting
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Black
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Narrow
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Rounded MT Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Unicode MS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Baskerville Old Face
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Batang
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
BatangChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bauhaus 93
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bell MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Berlin Sans FB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Berlin Sans FB Demi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bernard MT Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Blackadder ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Black
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Poster Compressed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Book Antiqua
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bookman Old Style
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bookshelf Symbol 7
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bradley Hand ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Britannic Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Broadway
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Browallia New
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
BrowalliaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Brush Script MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calibri
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calibri Light
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Californian FB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calisto MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cambria
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cambria Math
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Candara
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Castellar
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Centaur
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century Schoolbook
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Chiller
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Colonna MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Comic Sans MS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Consolas
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Constantia
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cooper Black
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Copperplate Gothic Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Copperplate Gothic Light
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Corbel
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cordia New
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
CordiaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Courier New
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Curlz MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DaunPenh
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
David
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DFKai-SB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DilleniaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DokChampa
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Dotum
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DotumChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Ebrima
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Edwardian Script ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Elephant
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Engravers MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Bold ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Demi ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Light ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Medium ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Estrangelo Edessa
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
EucrosiaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Euphemia
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FangSong
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Felix Titling
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Footlight MT Light
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Forte
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Book
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Demi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Demi Cond
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Heavy
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Medium
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Medium Cond
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FrankRuehl
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FreesiaUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Freestyle Script
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
French Script MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gabriola
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Garamond
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gautami
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Georgia
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gigi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT Ext Condensed Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans Ultra Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans Ultra Bold Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gisha
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gloucester MT Extra Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Goudy Old Style
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Goudy Stout
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gulim
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
GulimChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gungsuh
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
GungsuhChe
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Haettenschweiler
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Harlow Solid Italic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Harrington
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
High Tower Text
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Impact
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Imprint MT Shadow
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Informal Roman
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
IrisUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Iskoola Pota
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
JasmineUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Jokerman
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Juice ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
KaiTi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kalinga
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kartika
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Khmer UI
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
KodchiangUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kokila
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kristen ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kunstler Script
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lao UI
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Latha
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Leelawadee
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Levenim MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
LilyUPC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Bright
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Calligraphy
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Console
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Fax
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Handwriting
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans Typewriter
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans Unicode
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Magneto
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Maiandra GD
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Malgun Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mangal
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Marlett
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Matura MT Script Capitals
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Meiryo
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Meiryo UI
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Himalaya
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft JhengHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft New Tai Lue
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft PhagsPa
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Sans Serif
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Tai Le
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Uighur
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft YaHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Yi Baiti
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU_HKSCS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU_HKSCS-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Miriam
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Miriam Fixed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mistral
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Modern No. 20
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mongolian Baiti
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Monotype Corsiva
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MoolBoran
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Mincho
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Outlook
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS PGothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS PMincho
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Reference Sans Serif
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Reference Specialty
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS UI Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MT Extra
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MV Boli
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Narkisim
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Niagara Engraved
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Niagara Solid
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
NSimSun
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Nyala
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
OCR A Extended
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Old English Text MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Onyx
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Palace Script MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Palatino Linotype
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Papyrus
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Parchment
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Perpetua
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Perpetua Titling MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Plantagenet Cherokee
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Playbill
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
PMingLiU
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
PMingLiU-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Poor Richard
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Pristina
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Raavi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rage Italic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Ravie
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell Extra Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rod
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Sakkal Majalla
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Script MT Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe Print
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe Script
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Light
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Semibold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Symbol
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Shonar Bangla
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Showcard Gothic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Shruti
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimHei
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Simplified Arabic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Simplified Arabic Fixed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimSun
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimSun-ExtB
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Snap ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Stencil
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Sylfaen
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Symbol
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tahoma
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tempus Sans ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Times New Roman
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Traditional Arabic
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Trebuchet MS
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tunga
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT Condensed
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT Condensed Extra Bold
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Utsaah
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vani
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Verdana
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vijaya
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Viner Hand ITC
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vivaldi
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vladimir Script
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vrinda
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Webdings
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wide Latin
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings 2
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings 3
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2EE74
|
2EE74
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents
|
LastPurgeTime
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
WORDFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2EE74
|
2EE74
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2EE74
|
2EE74
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2EE74
|
2EE74
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
EquationEditorFilesIntl_1033
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
||
|
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
|
FontCachePath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{028588F3-95E8-48BE-8F64-19174D00F448}
|
data
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASAPI32
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\obimohohj75_RASMANCS
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASAPI32
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
EnableFileTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
EnableConsoleTracing
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
FileTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
ConsoleTracingMask
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
MaxFileSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\pgZzUFYKXcIRkU_RASMANCS
|
FileDirectory
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
EquationEditorFilesIntl_1033
|
There are 391 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
35E1000
|
trusted library allocation
|
page read and write
|
|
|
|
402000
|
remote allocation
|
page execute and read and write
|
|
|
|
50DD000
|
stack
|
page read and write
|
||
|
6C8B000
|
heap
|
page read and write
|
||
|
2B3E000
|
stack
|
page read and write
|
||
|
147000
|
heap
|
page read and write
|
||
|
67EE000
|
heap
|
page read and write
|
||
|
6C08000
|
heap
|
page read and write
|
||
|
54E000
|
trusted library allocation
|
page read and write
|
||
|
6BA2000
|
heap
|
page read and write
|
||
|
3A3F000
|
stack
|
page read and write
|
||
|
10FE000
|
stack
|
page read and write
|
||
|
210000
|
heap
|
page read and write
|
||
|
9163000
|
heap
|
page read and write
|
||
|
748E000
|
stack
|
page read and write
|
||
|
3F96000
|
trusted library allocation
|
page read and write
|
||
|
3B7F000
|
stack
|
page read and write
|
||
|
35C0000
|
heap
|
page read and write
|
||
|
514E000
|
stack
|
page read and write
|
||
|
3DB4000
|
trusted library allocation
|
page read and write
|
||
|
790000
|
heap
|
page execute and read and write
|
||
|
1E10000
|
heap
|
page read and write
|
||
|
50E0000
|
heap
|
page read and write
|
||
|
990E000
|
stack
|
page read and write
|
||
|
5CB000
|
heap
|
page read and write
|
||
|
130000
|
trusted library allocation
|
page read and write
|
||
|
360000
|
trusted library allocation
|
page read and write
|
||
|
2C68000
|
heap
|
page read and write
|
||
|
3269000
|
trusted library allocation
|
page read and write
|
||
|
182000
|
trusted library allocation
|
page read and write
|
||
|
18A000
|
stack
|
page read and write
|
||
|
65E6000
|
heap
|
page read and write
|
||
|
6BE6000
|
heap
|
page read and write
|
||
|
47CE000
|
stack
|
page read and write
|
||
|
67A7000
|
heap
|
page read and write
|
||
|
4C18000
|
heap
|
page read and write
|
||
|
201D000
|
stack
|
page read and write
|
||
|
938000
|
heap
|
page read and write
|
||
|
3B4000
|
heap
|
page read and write
|
||
|
C90000
|
heap
|
page read and write
|
||
|
6B7000
|
heap
|
page read and write
|
||
|
33A0000
|
trusted library allocation
|
page read and write
|
||
|
30F000
|
heap
|
page read and write
|
||
|
2C2C000
|
stack
|
page read and write
|
||
|
5ADE000
|
stack
|
page read and write
|
||
|
4C8D000
|
heap
|
page read and write
|
||
|
47D4000
|
heap
|
page read and write
|
||
|
1DC0000
|
heap
|
page read and write
|
||
|
6D89000
|
heap
|
page read and write
|
||
|
62AE000
|
stack
|
page read and write
|
||
|
51F000
|
heap
|
page read and write
|
||
|
6580000
|
heap
|
page read and write
|
||
|
297F000
|
stack
|
page read and write
|
||
|
228C000
|
trusted library allocation
|
page read and write
|
||
|
67E1000
|
heap
|
page read and write
|
||
|
1C0000
|
trusted library allocation
|
page execute and read and write
|
||
|
2C58000
|
heap
|
page read and write
|
||
|
5088000
|
heap
|
page read and write
|
||
|
1D4F000
|
stack
|
page read and write
|
||
|
1D50000
|
heap
|
page read and write
|
||
|
260000
|
trusted library allocation
|
page read and write
|
||
|
3D2D000
|
trusted library allocation
|
page read and write
|
||
|
16D000
|
trusted library allocation
|
page execute and read and write
|
||
|
2FD000
|
trusted library allocation
|
page execute and read and write
|
||
|
312000
|
trusted library allocation
|
page read and write
|
||
|
32C9000
|
trusted library allocation
|
page read and write
|
||
|
3D0000
|
heap
|
page read and write
|
||
|
1100000
|
unkown
|
page readonly
|
||
|
6520000
|
heap
|
page read and write
|
||
|
1BF000
|
stack
|
page read and write
|
||
|
6460000
|
heap
|
page read and write
|
||
|
760000
|
heap
|
page read and write
|
||
|
999D000
|
stack
|
page read and write
|
||
|
5FFE000
|
stack
|
page read and write
|
||
|
473E000
|
stack
|
page read and write
|
||
|
2DE000
|
stack
|
page read and write
|
||
|
231E000
|
trusted library allocation
|
page read and write
|
||
|
EF0000
|
heap
|
page read and write
|
||
|
688A000
|
heap
|
page read and write
|
||
|
6998000
|
heap
|
page read and write
|
||
|
683B000
|
heap
|
page read and write
|
||
|
6BCE000
|
heap
|
page read and write
|
||
|
2C6B000
|
heap
|
page read and write
|
||
|
1A7000
|
trusted library allocation
|
page execute and read and write
|
||
|
573E000
|
stack
|
page read and write
|
||
|
708000
|
trusted library allocation
|
page read and write
|
||
|
691B000
|
heap
|
page read and write
|
||
|
22A2000
|
trusted library allocation
|
page read and write
|
||
|
7B3000
|
heap
|
page read and write
|
||
|
443E000
|
stack
|
page read and write
|
||
|
3B3F000
|
stack
|
page read and write
|
||
|
4B0000
|
trusted library allocation
|
page read and write
|
||
|
ECE000
|
stack
|
page read and write
|
||
|
182000
|
trusted library allocation
|
page read and write
|
||
|
23BF000
|
stack
|
page read and write
|
||
|
634E000
|
heap
|
page read and write
|
||
|
302000
|
trusted library allocation
|
page read and write
|
||
|
340000
|
trusted library allocation
|
page execute and read and write
|
||
|
2241000
|
trusted library allocation
|
page read and write
|
||
|
6AA1000
|
heap
|
page read and write
|
||
|
676E000
|
heap
|
page read and write
|
||
|
5D0000
|
trusted library allocation
|
page read and write
|
||
|
918F000
|
heap
|
page read and write
|
||
|
6180000
|
heap
|
page read and write
|
||
|
35FF000
|
heap
|
page read and write
|
||
|
2688000
|
trusted library allocation
|
page read and write
|
||
|
710000
|
trusted library allocation
|
page execute and read and write
|
||
|
560000
|
heap
|
page read and write
|
||
|
5A0000
|
heap
|
page execute and read and write
|
||
|
4D8E000
|
stack
|
page read and write
|
||
|
30A000
|
trusted library allocation
|
page execute and read and write
|
||
|
6B95000
|
heap
|
page read and write
|
||
|
681F000
|
heap
|
page read and write
|
||
|
310000
|
trusted library allocation
|
page read and write
|
||
|
226E000
|
stack
|
page read and write
|
||
|
460000
|
trusted library allocation
|
page execute and read and write
|
||
|
4E6F000
|
stack
|
page read and write
|
||
|
4B9C000
|
stack
|
page read and write
|
||
|
32F1000
|
trusted library allocation
|
page read and write
|
||
|
67D6000
|
heap
|
page read and write
|
||
|
4DFC000
|
stack
|
page read and write
|
||
|
3B0000
|
heap
|
page read and write
|
||
|
640000
|
heap
|
page read and write
|
||
|
4C3E000
|
stack
|
page read and write
|
||
|
6555000
|
heap
|
page read and write
|
||
|
5380000
|
heap
|
page read and write
|
||
|
7060000
|
heap
|
page read and write
|
||
|
4CA1000
|
heap
|
page read and write
|
||
|
3E31000
|
trusted library allocation
|
page read and write
|
||
|
4BE0000
|
heap
|
page read and write
|
||
|
5DBD000
|
heap
|
page read and write
|
||
|
6769000
|
heap
|
page read and write
|
||
|
223F000
|
stack
|
page read and write
|
||
|
5430000
|
heap
|
page read and write
|
||
|
7067000
|
heap
|
page read and write
|
||
|
2618000
|
trusted library allocation
|
page read and write
|
||
|
240000
|
trusted library section
|
page read and write
|
||
|
25A0000
|
heap
|
page read and write
|
||
|
74FE000
|
stack
|
page read and write
|
||
|
674A000
|
heap
|
page read and write
|
||
|
787E000
|
stack
|
page read and write
|
||
|
68DE000
|
heap
|
page read and write
|
||
|
5410000
|
heap
|
page read and write
|
||
|
4F4E000
|
stack
|
page read and write
|
||
|
6C13000
|
heap
|
page read and write
|
||
|
25B1000
|
trusted library allocation
|
page read and write
|
||
|
170000
|
trusted library allocation
|
page read and write
|
||
|
6001000
|
heap
|
page read and write
|
||
|
258F000
|
stack
|
page read and write
|
||
|
2290000
|
trusted library allocation
|
page read and write
|
||
|
48C0000
|
trusted library section
|
page read and write
|
||
|
96AF000
|
stack
|
page read and write
|
||
|
500E000
|
stack
|
page read and write
|
||
|
587F000
|
stack
|
page read and write
|
||
|
48C0000
|
heap
|
page read and write
|
||
|
2B70000
|
heap
|
page read and write
|
||
|
646B000
|
heap
|
page read and write
|
||
|
8E3000
|
heap
|
page read and write
|
||
|
7B3E000
|
stack
|
page read and write
|
||
|
261B000
|
trusted library allocation
|
page read and write
|
||
|
31B000
|
trusted library allocation
|
page execute and read and write
|
||
|
6E2A000
|
heap
|
page read and write
|
||
|
8E0000
|
unkown
|
page readonly
|
||
|
32CD000
|
trusted library allocation
|
page read and write
|
||
|
67F5000
|
heap
|
page read and write
|
||
|
657A000
|
heap
|
page read and write
|
||
|
9F0F000
|
stack
|
page read and write
|
||
|
654C000
|
heap
|
page read and write
|
||
|
794000
|
heap
|
page read and write
|
||
|
224E000
|
stack
|
page read and write | page guard
|
||
|
152000
|
trusted library allocation
|
page read and write
|
||
|
2388000
|
trusted library allocation
|
page read and write
|
||
|
76BE000
|
stack
|
page read and write
|
||
|
6030000
|
heap
|
page read and write
|
||
|
164000
|
trusted library allocation
|
page read and write
|
||
|
38BC000
|
stack
|
page read and write
|
||
|
7BD000
|
heap
|
page read and write
|
||
|
4C76000
|
heap
|
page read and write
|
||
|
6664000
|
heap
|
page read and write
|
||
|
13A000
|
stack
|
page read and write
|
||
|
22D5000
|
trusted library allocation
|
page read and write
|
||
|
6753000
|
heap
|
page read and write
|
||
|
69AF000
|
stack
|
page read and write
|
||
|
5438000
|
heap
|
page read and write
|
||
|
5434000
|
heap
|
page read and write
|
||
|
6C4A000
|
heap
|
page read and write
|
||
|
5E0000
|
heap
|
page read and write
|
||
|
7A7000
|
heap
|
page read and write
|
||
|
631E000
|
heap
|
page read and write
|
||
|
25A5000
|
heap
|
page read and write
|
||
|
1C8D000
|
stack
|
page read and write
|
||
|
3EAB000
|
trusted library allocation
|
page read and write
|
||
|
63B0000
|
heap
|
page read and write
|
||
|
16D000
|
trusted library allocation
|
page execute and read and write
|
||
|
86A000
|
heap
|
page read and write
|
||
|
5DBD000
|
stack
|
page read and write
|
||
|
1D50000
|
direct allocation
|
page read and write
|
||
|
70A0000
|
heap
|
page read and write
|
||
|
9D2000
|
heap
|
page read and write
|
||
|
542E000
|
stack
|
page read and write
|
||
|
427000
|
heap
|
page read and write
|
||
|
51E0000
|
heap
|
page read and write
|
||
|
59E000
|
stack
|
page read and write
|
||
|
20F000
|
stack
|
page read and write
|
||
|
5B0000
|
heap
|
page read and write
|
||
|
4E6000
|
heap
|
page read and write
|
||
|
66D0000
|
heap
|
page read and write
|
||
|
9161000
|
heap
|
page read and write
|
||
|
2A7000
|
heap
|
page read and write
|
||
|
6F76000
|
heap
|
page read and write
|
||
|
6AAE000
|
stack
|
page read and write
|
||
|
18C000
|
stack
|
page read and write
|
||
|
192000
|
trusted library allocation
|
page read and write
|
||
|
2C50000
|
heap
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
1D3E000
|
stack
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
1020000
|
heap
|
page execute and read and write
|
||
|
2F0000
|
trusted library allocation
|
page read and write
|
||
|
82C000
|
stack
|
page read and write
|
||
|
89000
|
stack
|
page read and write
|
||
|
4BE0000
|
heap
|
page read and write
|
||
|
2662000
|
trusted library allocation
|
page read and write
|
||
|
3FD000
|
stack
|
page read and write
|
||
|
210000
|
heap
|
page read and write
|
||
|
70C000
|
stack
|
page read and write
|
||
|
1D0000
|
heap
|
page read and write
|
||
|
35DD000
|
heap
|
page read and write
|
||
|
2CF000
|
heap
|
page read and write
|
||
|
540E000
|
stack
|
page read and write
|
||
|
1BB000
|
stack
|
page read and write
|
||
|
5B70000
|
heap
|
page read and write
|
||
|
D0E000
|
stack
|
page read and write
|
||
|
2334000
|
trusted library allocation
|
page read and write
|
||
|
2B0000
|
heap
|
page read and write
|
||
|
19B000
|
trusted library allocation
|
page execute and read and write
|
||
|
4858000
|
heap
|
page read and write
|
||
|
654F000
|
stack
|
page read and write
|
||
|
3BBB000
|
trusted library allocation
|
page read and write
|
||
|
62CF000
|
heap
|
page read and write
|
||
|
73E000
|
stack
|
page read and write
|
||
|
306000
|
trusted library allocation
|
page execute and read and write
|
||
|
688E000
|
stack
|
page read and write
|
||
|
6899000
|
heap
|
page read and write
|
||
|
37BD000
|
stack
|
page read and write
|
||
|
164000
|
trusted library allocation
|
page read and write
|
||
|
2328000
|
trusted library allocation
|
page read and write
|
||
|
D20000
|
heap
|
page execute and read and write
|
||
|
47A000
|
heap
|
page read and write
|
||
|
6C52000
|
heap
|
page read and write
|
||
|
123000
|
trusted library allocation
|
page execute and read and write
|
||
|
205E000
|
stack
|
page read and write
|
||
|
48BE000
|
stack
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
6A0000
|
heap
|
page execute and read and write
|
||
|
32C1000
|
trusted library allocation
|
page read and write
|
||
|
5F4E000
|
stack
|
page read and write
|
||
|
19B000
|
trusted library allocation
|
page execute and read and write
|
||
|
6CA6000
|
heap
|
page read and write
|
||
|
156000
|
trusted library allocation
|
page execute and read and write
|
||
|
51D000
|
heap
|
page read and write
|
||
|
61E1000
|
heap
|
page read and write
|
||
|
22C1000
|
trusted library allocation
|
page read and write
|
||
|
4E70000
|
heap
|
page read and write
|
||
|
3E0F000
|
trusted library allocation
|
page read and write
|
||
|
5B0F000
|
stack
|
page read and write
|
||
|
390000
|
heap
|
page read and write
|
||
|
E1F000
|
stack
|
page read and write
|
||
|
6558000
|
heap
|
page read and write
|
||
|
66BC000
|
heap
|
page read and write
|
||
|
2276000
|
trusted library allocation
|
page read and write
|
||
|
66D2000
|
heap
|
page read and write
|
||
|
2F9000
|
trusted library allocation
|
page read and write
|
||
|
560000
|
trusted library allocation
|
page read and write
|
||
|
397000
|
heap
|
page read and write
|
||
|
4B0000
|
trusted library allocation
|
page execute and read and write
|
||
|
332C000
|
trusted library allocation
|
page read and write
|
||
|
654A000
|
heap
|
page read and write
|
||
|
3BF000
|
stack
|
page read and write
|
||
|
541E000
|
stack
|
page read and write | page guard
|
||
|
F04000
|
heap
|
page read and write
|
||
|
750A000
|
heap
|
page read and write
|
||
|
66BE000
|
heap
|
page read and write
|
||
|
66D7000
|
heap
|
page read and write
|
||
|
79DD000
|
stack
|
page read and write
|
||
|
4F60000
|
heap
|
page read and write
|
||
|
6756000
|
heap
|
page read and write
|
||
|
197000
|
trusted library allocation
|
page execute and read and write
|
||
|
370000
|
heap
|
page read and write
|
||
|
679A000
|
heap
|
page read and write
|
||
|
24AF000
|
stack
|
page read and write
|
||
|
CB2000
|
heap
|
page read and write
|
||
|
7075000
|
heap
|
page read and write
|
||
|
6A69000
|
heap
|
page read and write
|
||
|
5D3000
|
trusted library allocation
|
page read and write
|
||
|
2BEE000
|
stack
|
page read and write
|
||
|
3F8000
|
stack
|
page read and write
|
||
|
59BE000
|
stack
|
page read and write
|
||
|
68D0000
|
heap
|
page read and write
|
||
|
4CA7000
|
heap
|
page read and write
|
||
|
6C10000
|
heap
|
page read and write
|
||
|
51FD000
|
heap
|
page read and write
|
||
|
6C89000
|
heap
|
page read and write
|
||
|
260000
|
trusted library allocation
|
page read and write
|
||
|
110000
|
trusted library allocation
|
page read and write
|
||
|
2C60000
|
heap
|
page read and write
|
||
|
315000
|
trusted library allocation
|
page execute and read and write
|
||
|
666F000
|
heap
|
page read and write
|
||
|
6C5D000
|
heap
|
page read and write
|
||
|
6584000
|
heap
|
page read and write
|
||
|
9BCE000
|
stack
|
page read and write
|
||
|
570000
|
trusted library allocation
|
page read and write
|
||
|
35BD000
|
trusted library allocation
|
page read and write
|
||
|
50DF000
|
stack
|
page read and write
|
||
|
2B50000
|
remote allocation
|
page read and write
|
||
|
6525000
|
heap
|
page read and write
|
||
|
13D000
|
trusted library allocation
|
page execute and read and write
|
||
|
549E000
|
stack
|
page read and write
|
||
|
766C000
|
heap
|
page read and write
|
||
|
6C4D000
|
heap
|
page read and write
|
||
|
18A000
|
trusted library allocation
|
page execute and read and write
|
||
|
F22000
|
heap
|
page read and write
|
||
|
E9F000
|
stack
|
page read and write
|
||
|
5101000
|
heap
|
page read and write
|
||
|
22FE000
|
trusted library allocation
|
page read and write
|
||
|
839000
|
heap
|
page read and write
|
||
|
35B1000
|
trusted library allocation
|
page read and write
|
||
|
A065000
|
trusted library allocation
|
page read and write
|
||
|
4E7E000
|
stack
|
page read and write
|
||
|
BE0000
|
heap
|
page read and write
|
||
|
15F000
|
stack
|
page read and write
|
||
|
163000
|
trusted library allocation
|
page execute and read and write
|
||
|
150000
|
trusted library allocation
|
page read and write
|
||
|
270000
|
heap
|
page read and write
|
||
|
690C000
|
heap
|
page read and write
|
||
|
67D8000
|
heap
|
page read and write
|
||
|
163000
|
trusted library allocation
|
page execute and read and write
|
||
|
1102000
|
unkown
|
page execute read
|
||
|
48ED000
|
stack
|
page read and write
|
||
|
6822000
|
heap
|
page read and write
|
||
|
669F000
|
heap
|
page read and write
|
||
|
6C9B000
|
heap
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
23AF000
|
stack
|
page read and write
|
||
|
264D000
|
trusted library allocation
|
page read and write
|
||
|
65AF000
|
heap
|
page read and write
|
||
|
503D000
|
heap
|
page read and write
|
||
|
52BE000
|
stack
|
page read and write
|
||
|
2C0000
|
heap
|
page read and write
|
||
|
5E9E000
|
stack
|
page read and write
|
||
|
2AFC000
|
stack
|
page read and write
|
||
|
7DBF000
|
stack
|
page read and write
|
||
|
69DC000
|
heap
|
page read and write
|
||
|
817000
|
heap
|
page read and write
|
||
|
264000
|
trusted library allocation
|
page read and write
|
||
|
72CD000
|
stack
|
page read and write
|
||
|
8A7000
|
heap
|
page read and write
|
||
|
49E000
|
stack
|
page read and write
|
||
|
7024000
|
heap
|
page read and write
|
||
|
6B0000
|
heap
|
page read and write
|
||
|
4AD000
|
stack
|
page read and write
|
||
|
6676000
|
heap
|
page read and write
|
||
|
1EB0000
|
direct allocation
|
page read and write
|
||
|
510000
|
heap
|
page execute and read and write
|
||
|
668E000
|
stack
|
page read and write
|
||
|
794000
|
heap
|
page execute and read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
748000
|
heap
|
page read and write
|
||
|
25EF000
|
trusted library allocation
|
page read and write
|
||
|
66FE000
|
stack
|
page read and write
|
||
|
6B83000
|
heap
|
page read and write
|
||
|
6FE000
|
stack
|
page read and write
|
||
|
433E000
|
stack
|
page read and write
|
||
|
26A1000
|
trusted library allocation
|
page read and write
|
||
|
1C0000
|
trusted library allocation
|
page execute and read and write
|
||
|
6860000
|
heap
|
page read and write
|
||
|
5DFF000
|
stack
|
page read and write
|
||
|
5BC1000
|
heap
|
page read and write
|
||
|
4E8D000
|
heap
|
page read and write
|
||
|
782E000
|
stack
|
page read and write
|
||
|
4CAD000
|
heap
|
page read and write
|
||
|
6BA4000
|
heap
|
page read and write
|
||
|
180000
|
trusted library allocation
|
page read and write
|
||
|
65E0000
|
heap
|
page read and write
|
||
|
533E000
|
stack
|
page read and write
|
||
|
E9E000
|
stack
|
page read and write | page guard
|
||
|
47F2000
|
heap
|
page read and write
|
||
|
6400000
|
heap
|
page read and write
|
||
|
58BE000
|
stack
|
page read and write
|
||
|
5BF9000
|
heap
|
page read and write
|
||
|
3DF000
|
stack
|
page read and write
|
||
|
4C5000
|
heap
|
page read and write
|
||
|
1A2000
|
trusted library allocation
|
page read and write
|
||
|
1F1E000
|
stack
|
page read and write
|
||
|
613D000
|
stack
|
page read and write
|
||
|
6C27000
|
heap
|
page read and write
|
||
|
6AFB000
|
heap
|
page read and write
|
||
|
5540000
|
heap
|
page read and write
|
||
|
21FE000
|
stack
|
page read and write
|
||
|
7F7F000
|
stack
|
page read and write
|
||
|
3E5D000
|
trusted library allocation
|
page read and write
|
||
|
4090000
|
heap
|
page read and write
|
||
|
7B2000
|
heap
|
page execute and read and write
|
||
|
170000
|
trusted library allocation
|
page read and write
|
||
|
BE4000
|
heap
|
page read and write
|
||
|
27AF000
|
stack
|
page read and write
|
||
|
67FC000
|
heap
|
page read and write
|
||
|
4B0000
|
heap
|
page read and write
|
||
|
3F2A000
|
trusted library allocation
|
page read and write
|
||
|
6D3C000
|
heap
|
page read and write
|
||
|
211E000
|
stack
|
page read and write
|
||
|
63CD000
|
stack
|
page read and write
|
||
|
3EE000
|
heap
|
page read and write
|
||
|
8C4000
|
heap
|
page read and write
|
||
|
4C6000
|
trusted library allocation
|
page read and write
|
||
|
510A000
|
heap
|
page read and write
|
||
|
124000
|
trusted library allocation
|
page read and write
|
||
|
4A6F000
|
stack
|
page read and write
|
||
|
634A000
|
heap
|
page read and write
|
||
|
63AE000
|
heap
|
page read and write
|
||
|
5390000
|
heap
|
page read and write
|
||
|
5FAE000
|
stack
|
page read and write
|
||
|
6791000
|
heap
|
page read and write
|
||
|
65AD000
|
heap
|
page read and write
|
||
|
550000
|
trusted library allocation
|
page execute and read and write
|
||
|
6842000
|
heap
|
page read and write
|
||
|
65B3000
|
heap
|
page read and write
|
||
|
6C93000
|
heap
|
page read and write
|
||
|
4D3E000
|
stack
|
page read and write
|
||
|
DA000
|
stack
|
page read and write
|
||
|
777000
|
heap
|
page read and write
|
||
|
6B8E000
|
heap
|
page read and write
|
||
|
177000
|
stack
|
page read and write
|
||
|
64BA000
|
heap
|
page read and write
|
||
|
51DE000
|
stack
|
page read and write
|
||
|
506E000
|
stack
|
page read and write
|
||
|
50C3000
|
heap
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
232B000
|
trusted library allocation
|
page read and write
|
||
|
482D000
|
stack
|
page read and write
|
||
|
3E7000
|
stack
|
page read and write
|
||
|
223E000
|
stack
|
page read and write | page guard
|
||
|
3EAD000
|
trusted library allocation
|
page read and write
|
||
|
1102000
|
unkown
|
page execute read
|
||
|
80A000
|
heap
|
page read and write
|
||
|
47D0000
|
heap
|
page read and write
|
||
|
6260000
|
heap
|
page read and write
|
||
|
485E000
|
stack
|
page read and write
|
||
|
7713000
|
heap
|
page read and write
|
||
|
320000
|
trusted library allocation
|
page read and write
|
||
|
6829000
|
heap
|
page read and write
|
||
|
1EC000
|
stack
|
page read and write
|
||
|
63FE000
|
heap
|
page read and write
|
||
|
6B8B000
|
heap
|
page read and write
|
||
|
15A000
|
trusted library allocation
|
page execute and read and write
|
||
|
88000
|
stack
|
page read and write
|
||
|
2C5B000
|
heap
|
page read and write
|
||
|
20D000
|
trusted library allocation
|
page read and write
|
||
|
25E6000
|
trusted library allocation
|
page read and write
|
||
|
5C3D000
|
stack
|
page read and write
|
||
|
290000
|
heap
|
page read and write
|
||
|
6442000
|
heap
|
page read and write
|
||
|
652A000
|
heap
|
page read and write
|
||
|
914D000
|
stack
|
page read and write
|
||
|
66C9000
|
heap
|
page read and write
|
||
|
6B54000
|
heap
|
page read and write
|
||
|
318000
|
stack
|
page read and write
|
||
|
2E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
268C000
|
trusted library allocation
|
page read and write
|
||
|
12D000
|
trusted library allocation
|
page execute and read and write
|
||
|
4D7000
|
heap
|
page read and write
|
||
|
65EA000
|
heap
|
page read and write
|
||
|
6614000
|
heap
|
page read and write
|
||
|
4C0000
|
trusted library allocation
|
page read and write
|
||
|
94E000
|
heap
|
page read and write
|
||
|
704A000
|
heap
|
page read and write
|
||
|
20B000
|
stack
|
page read and write
|
||
|
38FF000
|
stack
|
page read and write
|
||
|
1EA0000
|
heap
|
page read and write
|
||
|
250000
|
trusted library allocation
|
page read and write
|
||
|
3DF000
|
heap
|
page read and write
|
||
|
4E0000
|
heap
|
page read and write
|
||
|
67DC000
|
heap
|
page read and write
|
||
|
1DFB000
|
heap
|
page read and write
|
||
|
15F000
|
unkown
|
page read and write
|
||
|
6C55000
|
heap
|
page read and write
|
||
|
6835000
|
heap
|
page read and write
|
||
|
350000
|
trusted library allocation
|
page read and write
|
||
|
6767000
|
heap
|
page read and write
|
||
|
287F000
|
stack
|
page read and write
|
||
|
5FEE000
|
stack
|
page read and write
|
||
|
76F6000
|
heap
|
page read and write
|
||
|
6C47000
|
heap
|
page read and write
|
||
|
349000
|
heap
|
page read and write
|
||
|
4C0000
|
heap
|
page read and write
|
||
|
9B4000
|
heap
|
page read and write
|
||
|
1D0000
|
trusted library allocation
|
page execute and read and write
|
||
|
15B000
|
stack
|
page read and write
|
||
|
4854000
|
heap
|
page read and write
|
||
|
486A000
|
heap
|
page read and write
|
||
|
440000
|
trusted library allocation
|
page read and write
|
||
|
5BCE000
|
stack
|
page read and write
|
||
|
985000
|
unkown
|
page execute read
|
||
|
192000
|
trusted library allocation
|
page read and write
|
||
|
62B7000
|
heap
|
page read and write
|
||
|
230D000
|
trusted library allocation
|
page read and write
|
||
|
4C0000
|
trusted library allocation
|
page read and write
|
||
|
D4F000
|
unkown
|
page read and write
|
||
|
3366000
|
trusted library allocation
|
page read and write
|
||
|
7D0000
|
trusted library allocation
|
page read and write
|
||
|
3F90000
|
heap
|
page read and write
|
||
|
186000
|
trusted library allocation
|
page execute and read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
627B000
|
heap
|
page read and write
|
||
|
23B4000
|
trusted library allocation
|
page read and write
|
||
|
227F000
|
trusted library allocation
|
page read and write
|
||
|
2E0000
|
heap
|
page read and write
|
||
|
100E000
|
stack
|
page read and write
|
||
|
5449000
|
heap
|
page read and write
|
||
|
683F000
|
heap
|
page read and write
|
||
|
4D0000
|
heap
|
page read and write
|
||
|
8A0000
|
heap
|
page read and write
|
||
|
376000
|
heap
|
page read and write
|
||
|
20E000
|
stack
|
page read and write
|
||
|
4BEC000
|
heap
|
page read and write
|
||
|
2B50000
|
remote allocation
|
page read and write
|
||
|
4D0000
|
heap
|
page execute and read and write
|
||
|
1CA000
|
stack
|
page read and write
|
||
|
150000
|
trusted library allocation
|
page read and write
|
||
|
2600000
|
trusted library allocation
|
page read and write
|
||
|
737E000
|
stack
|
page read and write
|
||
|
6985000
|
heap
|
page read and write
|
||
|
7717000
|
heap
|
page read and write
|
||
|
9D2E000
|
stack
|
page read and write
|
||
|
4C44000
|
heap
|
page read and write
|
||
|
22EB000
|
trusted library allocation
|
page read and write
|
||
|
9B0000
|
heap
|
page read and write
|
||
|
248F000
|
stack
|
page read and write
|
||
|
2C4000
|
heap
|
page read and write
|
||
|
50A7000
|
heap
|
page read and write
|
||
|
266B000
|
trusted library allocation
|
page read and write
|
||
|
22DF000
|
trusted library allocation
|
page read and write
|
||
|
8EF000
|
heap
|
page read and write
|
||
|
2835000
|
trusted library allocation
|
page read and write
|
||
|
8D0000
|
trusted library allocation
|
page execute and read and write
|
||
|
94CE000
|
stack
|
page read and write
|
||
|
230000
|
trusted library allocation
|
page read and write
|
||
|
35D9000
|
trusted library allocation
|
page read and write
|
||
|
35B9000
|
trusted library allocation
|
page read and write
|
||
|
280000
|
heap
|
page execute and read and write
|
||
|
263000
|
trusted library allocation
|
page execute and read and write
|
||
|
56EE000
|
stack
|
page read and write
|
||
|
5020000
|
heap
|
page read and write
|
||
|
55FE000
|
stack
|
page read and write
|
||
|
80E7000
|
trusted library allocation
|
page read and write
|
||
|
267A000
|
trusted library allocation
|
page read and write
|
||
|
647F000
|
heap
|
page read and write
|
||
|
4D0000
|
trusted library allocation
|
page read and write
|
||
|
636E000
|
stack
|
page read and write
|
||
|
6DC5000
|
heap
|
page read and write
|
||
|
295F000
|
stack
|
page read and write
|
||
|
6BD8000
|
heap
|
page read and write
|
||
|
3241000
|
trusted library allocation
|
page read and write
|
||
|
1F28000
|
trusted library allocation
|
page read and write
|
||
|
64CE000
|
heap
|
page read and write
|
||
|
49EF000
|
stack
|
page read and write
|
||
|
2E7000
|
heap
|
page read and write
|
||
|
429000
|
heap
|
page read and write
|
||
|
1AB000
|
trusted library allocation
|
page execute and read and write
|
||
|
3F6F000
|
stack
|
page read and write
|
||
|
5430000
|
heap
|
page read and write
|
||
|
3C30000
|
heap
|
page read and write
|
||
|
22E4000
|
trusted library allocation
|
page read and write
|
||
|
711F000
|
heap
|
page read and write
|
||
|
915A000
|
heap
|
page read and write
|
||
|
8ED000
|
heap
|
page read and write
|
||
|
35EF000
|
heap
|
page read and write
|
||
|
1DC4000
|
heap
|
page read and write
|
||
|
2270000
|
heap
|
page read and write
|
||
|
713E000
|
stack
|
page read and write
|
||
|
2C4000
|
heap
|
page read and write
|
||
|
5FAF000
|
stack
|
page read and write
|
||
|
67E000
|
stack
|
page read and write
|
||
|
25DB000
|
heap
|
page read and write
|
||
|
4ACB000
|
heap
|
page read and write
|
||
|
6C91000
|
heap
|
page read and write
|
||
|
59FF000
|
stack
|
page read and write
|
||
|
4DEE000
|
stack
|
page read and write
|
||
|
1E32000
|
heap
|
page read and write
|
||
|
587E000
|
stack
|
page read and write | page guard
|
||
|
3900000
|
heap
|
page read and write
|
||
|
5142000
|
heap
|
page read and write
|
||
|
540000
|
trusted library allocation
|
page read and write
|
||
|
3E6F000
|
stack
|
page read and write
|
||
|
740000
|
heap
|
page read and write
|
||
|
224F000
|
stack
|
page read and write
|
||
|
18A000
|
trusted library allocation
|
page execute and read and write
|
||
|
150000
|
trusted library allocation
|
page read and write
|
||
|
935E000
|
stack
|
page read and write
|
||
|
830000
|
heap
|
page read and write
|
||
|
25B1000
|
trusted library allocation
|
page read and write
|
||
|
6561000
|
heap
|
page read and write
|
||
|
19A000
|
stack
|
page read and write
|
||
|
2FB000
|
heap
|
page read and write
|
||
|
1A0000
|
trusted library allocation
|
page read and write
|
||
|
7EF40000
|
trusted library allocation
|
page execute and read and write
|
||
|
36D000
|
trusted library allocation
|
page read and write
|
||
|
6BD0000
|
heap
|
page read and write
|
||
|
550000
|
trusted library allocation
|
page read and write
|
||
|
5B10000
|
heap
|
page read and write
|
||
|
6587000
|
heap
|
page read and write
|
||
|
743E000
|
heap
|
page read and write
|
||
|
679D000
|
heap
|
page read and write
|
||
|
3D6D000
|
stack
|
page read and write
|
||
|
570000
|
heap
|
page read and write
|
||
|
3CA6000
|
trusted library allocation
|
page read and write
|
||
|
7BF000
|
heap
|
page read and write
|
||
|
22F6000
|
trusted library allocation
|
page read and write
|
||
|
5466000
|
heap
|
page read and write
|
||
|
5FF0000
|
heap
|
page read and write
|
||
|
534E000
|
stack
|
page read and write
|
||
|
420000
|
heap
|
page read and write
|
||
|
20000
|
heap
|
page read and write
|
||
|
6BC5000
|
heap
|
page read and write
|
||
|
62E3000
|
heap
|
page read and write
|
||
|
25FC000
|
trusted library allocation
|
page read and write
|
||
|
97DE000
|
stack
|
page read and write
|
||
|
49F0000
|
heap
|
page execute and read and write
|
||
|
770000
|
heap
|
page read and write
|
||
|
C02000
|
heap
|
page read and write
|
||
|
160000
|
trusted library allocation
|
page read and write
|
||
|
178000
|
trusted library allocation
|
page read and write
|
||
|
1E14000
|
heap
|
page read and write
|
||
|
317000
|
trusted library allocation
|
page execute and read and write
|
||
|
3F70000
|
heap
|
page read and write
|
||
|
39F000
|
stack
|
page read and write
|
||
|
D1E000
|
stack
|
page read and write
|
||
|
8E0000
|
unkown
|
page readonly
|
||
|
67AE000
|
heap
|
page read and write
|
||
|
FCE000
|
stack
|
page read and write
|
||
|
689E000
|
stack
|
page read and write
|
||
|
7701000
|
heap
|
page read and write
|
||
|
61D0000
|
trusted library section
|
page read and write
|
||
|
67B0000
|
heap
|
page read and write
|
||
|
210000
|
trusted library allocation
|
page read and write
|
||
|
541F000
|
stack
|
page read and write
|
||
|
3D7000
|
heap
|
page read and write
|
||
|
C94000
|
heap
|
page read and write
|
||
|
6C1B000
|
heap
|
page read and write
|
||
|
67F7000
|
heap
|
page read and write
|
||
|
5480000
|
heap
|
page read and write
|
||
|
139000
|
trusted library allocation
|
page read and write
|
||
|
67E4000
|
heap
|
page read and write
|
||
|
5E8000
|
heap
|
page read and write
|
||
|
5EFD000
|
stack
|
page read and write
|
||
|
5D3E000
|
stack
|
page read and write
|
||
|
3604000
|
heap
|
page read and write
|
||
|
48E2000
|
heap
|
page read and write
|
||
|
50E6000
|
heap
|
page read and write
|
||
|
1D40000
|
heap
|
page read and write
|
||
|
11A6000
|
unkown
|
page readonly
|
||
|
F00000
|
heap
|
page read and write
|
||
|
50D2000
|
heap
|
page read and write
|
||
|
2C54000
|
heap
|
page read and write
|
||
|
5102000
|
heap
|
page read and write
|
||
|
5117000
|
heap
|
page read and write
|
||
|
6370000
|
heap
|
page read and write
|
||
|
5DA0000
|
heap
|
page read and write
|
||
|
2A0000
|
heap
|
page read and write
|
||
|
20DD000
|
stack
|
page read and write
|
||
|
2C0000
|
trusted library section
|
page read and write
|
||
|
60BE000
|
stack
|
page read and write
|
||
|
186000
|
trusted library allocation
|
page execute and read and write
|
||
|
9150000
|
heap
|
page read and write
|
||
|
961E000
|
stack
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
1E0000
|
trusted library allocation
|
page read and write
|
||
|
48C4000
|
heap
|
page read and write
|
||
|
250000
|
trusted library allocation
|
page read and write
|
||
|
5EBE000
|
stack
|
page read and write
|
||
|
140000
|
heap
|
page read and write
|
||
|
5116000
|
heap
|
page read and write
|
||
|
478E000
|
stack
|
page read and write
|
||
|
99C000
|
heap
|
page read and write
|
||
|
4F4000
|
heap
|
page read and write
|
||
|
69C8000
|
heap
|
page read and write
|
||
|
4E0000
|
heap
|
page execute and read and write
|
||
|
630000
|
heap
|
page read and write
|
||
|
67F0000
|
heap
|
page read and write
|
||
|
676B000
|
heap
|
page read and write
|
||
|
17D000
|
trusted library allocation
|
page execute and read and write
|
||
|
7BEE000
|
stack
|
page read and write
|
||
|
6957000
|
heap
|
page read and write
|
||
|
270000
|
trusted library section
|
page read and write
|
||
|
6796000
|
heap
|
page read and write
|
||
|
53D000
|
stack
|
page read and write
|
||
|
4E3E000
|
stack
|
page read and write
|
||
|
6C68000
|
heap
|
page read and write
|
||
|
4B6000
|
trusted library allocation
|
page read and write
|
||
|
1A5000
|
trusted library allocation
|
page execute and read and write
|
||
|
524C000
|
stack
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
26D000
|
trusted library allocation
|
page execute and read and write
|
||
|
4850000
|
heap
|
page read and write
|
||
|
E1E000
|
stack
|
page read and write | page guard
|
||
|
485F000
|
heap
|
page read and write
|
||
|
400000
|
remote allocation
|
page execute and read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
67B5000
|
heap
|
page read and write
|
||
|
6761000
|
heap
|
page read and write
|
||
|
27E000
|
unkown
|
page read and write
|
||
|
2D0000
|
trusted library allocation
|
page read and write
|
||
|
380000
|
trusted library allocation
|
page read and write
|
||
|
3B7000
|
heap
|
page read and write
|
||
|
71AE000
|
stack
|
page read and write
|
||
|
2292000
|
heap
|
page read and write
|
||
|
2280000
|
heap
|
page read and write
|
||
|
6827000
|
heap
|
page read and write
|
||
|
2274000
|
heap
|
page read and write
|
||
|
4CD000
|
stack
|
page read and write
|
||
|
70B1000
|
heap
|
page read and write
|
||
|
2545000
|
trusted library allocation
|
page read and write
|
||
|
2E0000
|
heap
|
page read and write
|
||
|
195000
|
trusted library allocation
|
page execute and read and write
|
||
|
C7E000
|
unkown
|
page read and write
|
||
|
6E05000
|
heap
|
page read and write
|
||
|
6331000
|
heap
|
page read and write
|
||
|
3DD000
|
heap
|
page read and write
|
||
|
6509000
|
heap
|
page read and write
|
||
|
200000
|
trusted library allocation
|
page read and write
|
||
|
4C66000
|
heap
|
page read and write
|
||
|
6A22000
|
heap
|
page read and write
|
||
|
63C2000
|
heap
|
page read and write
|
||
|
7F7E000
|
stack
|
page read and write | page guard
|
||
|
65ED000
|
heap
|
page read and write
|
||
|
6412000
|
heap
|
page read and write
|
||
|
4C69000
|
heap
|
page read and write
|
||
|
674E000
|
heap
|
page read and write
|
||
|
67C000
|
stack
|
page read and write
|
||
|
8380000
|
heap
|
page read and write
|
||
|
508C000
|
heap
|
page read and write
|
||
|
76FB000
|
heap
|
page read and write
|
||
|
63E000
|
stack
|
page read and write
|
||
|
4D00000
|
heap
|
page read and write
|
||
|
17B000
|
trusted library allocation
|
page read and write
|
||
|
61D0000
|
heap
|
page read and write
|
||
|
799E000
|
stack
|
page read and write
|
||
|
1CFE000
|
stack
|
page read and write
|
||
|
6948000
|
heap
|
page read and write
|
||
|
580000
|
heap
|
page read and write
|
||
|
753E000
|
stack
|
page read and write
|
||
|
821000
|
heap
|
page read and write
|
||
|
1100000
|
unkown
|
page readonly
|
||
|
2643000
|
trusted library allocation
|
page read and write
|
||
|
67DE000
|
heap
|
page read and write
|
||
|
35B1000
|
trusted library allocation
|
page read and write
|
||
|
4CBC000
|
heap
|
page read and write
|
||
|
2B0000
|
heap
|
page read and write
|
||
|
300000
|
trusted library allocation
|
page read and write
|
||
|
1BB000
|
stack
|
page read and write
|
||
|
7A0000
|
heap
|
page read and write
|
||
|
3F4000
|
heap
|
page read and write
|
||
|
304000
|
heap
|
page read and write
|
||
|
231A000
|
trusted library allocation
|
page read and write
|
||
|
1CB0000
|
heap
|
page read and write
|
||
|
4A70000
|
heap
|
page read and write
|
||
|
839D000
|
heap
|
page read and write
|
||
|
2337000
|
trusted library allocation
|
page read and write
|
||
|
6A0E000
|
heap
|
page read and write
|
||
|
25DB000
|
trusted library allocation
|
page read and write
|
||
|
26A4000
|
trusted library allocation
|
page read and write
|
||
|
48CE000
|
unkown
|
page read and write
|
||
|
2C64000
|
heap
|
page read and write
|
||
|
2E7000
|
heap
|
page read and write
|
||
|
62DE000
|
heap
|
page read and write
|
||
|
439000
|
heap
|
page read and write
|
||
|
10000
|
heap
|
page read and write
|
||
|
939E000
|
stack
|
page read and write
|
||
|
5C8000
|
heap
|
page read and write
|
||
|
6610000
|
heap
|
page read and write
|
||
|
9F0E000
|
stack
|
page read and write | page guard
|
||
|
120000
|
trusted library allocation
|
page read and write
|
||
|
667C000
|
heap
|
page read and write
|
||
|
5BB0000
|
heap
|
page read and write
|
||
|
52CE000
|
stack
|
page read and write
|
||
|
6BE4000
|
heap
|
page read and write
|
||
|
65B5000
|
heap
|
page read and write
|
||
|
20000
|
heap
|
page read and write
|
||
|
6551000
|
heap
|
page read and write
|
||
|
444000
|
heap
|
page read and write
|
There are 780 hidden memdumps, click here to show them.