Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
AaIo4VGgvO.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build2.exe
|
MS-DOS executable
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440002v9.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440007v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\setup32.exe_Rules.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db.session
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officec2rclient.exe.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officesetup.exe.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_114932_b84-2220.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199673019888[1].htm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\build2[1].exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqln[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\script_300161259571223429446516194326035503227.rel.v2
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\shell\remote\script_96032244749497702726114603847611723578.rel.v2
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\input\en-GB\userdict_v1.0809.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\webext.sc.lz4
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.ft
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{357ace01-7b14-4f4a-960d-085da55bf3ea}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{357ace01-7b14-4f4a-960d-085da55bf3ea}\Apps.ft
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3c0bfc12-2764-4044-ad15-d4833a01b073}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3c0bfc12-2764-4044-ad15-d4833a01b073}\Apps.ft
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsglobals.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsglobals.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingssynonyms.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945540884124.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133583770337995506.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Adobe\Acrobat\DC\UserCache64.bin.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Google\Chrome\User Data\first_party_sets.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\setup32.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.session.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\OTele\officec2rclient.exe.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\OTele\officeclicktorun.exe.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\OTele\officesetup.exe.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db.bgjs
(copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db.bgjs
(copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db.bgjs
(copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db.bgjs
(copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\input\en-GB\userdict_v1.0809.dat.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Temp\acrobat_sbx\acroNGLLog.txt.bgjs (copy)
|
data
|
dropped
|
||
C:\_README.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\BKFCBFCBFBKEBFIDBKECAEBFCF
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8,
version-valid-for 11
|
dropped
|
||
C:\ProgramData\CAAKFIID
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4,
UTF-8, version-valid-for 4
|
dropped
|
||
C:\SystemID\PersonalID.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old
|
data
|
modified
|
||
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst
|
PostScript document text
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst
|
PostScript document text
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\3\ListAll.Json
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\27160079615.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\28315153308.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\29939506207.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\31169036496.ttf
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.chk
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbtmp.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log
|
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-UserConfig.log
|
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\01_Music_auto_rated_at_5_stars.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\02_Music_added_in_the_last_month.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\03_Music_rated_at_4_or_5_stars.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\04_Music_played_in_the_last_month.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\05_Pictures_taken_in_the_last_month.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\06_Pictures_rated_4_or_5_stars.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\07_TV_recorded_in_the_last_week.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\08_Video_rated_at_4_or_5_stars.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\09_Music_played_the_most.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\10_All_Music.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\11_All_Pictures.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\12_All_Video.wpl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{45F61A7D-A745-417E-BD88-2FFDE87A6DA8}mt16400656.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7B3AF8A2-A95D-4447-ACC9-7895C91C2D45}mt16400647.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7D2AAE1F-E21C-4042-8EAB-08D27101C10B}mt11414620.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{967E9DC2-54C6-4D72-9409-715F9A3F61E5}mt11829122.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{A4858C46-92BF-4775-ADF9-F93EB4C5F636}mt66963475.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{AA4547C7-FE83-48AB-9053-3A60F16A4C34}mt10000137.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{F5FB5847-D24A-455C-A647-40C253091672}mt67739505.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{FD5FD857-5A38-4C81-A322-3226BB279FAA}mt45299826.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320002v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320003v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320004v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320005v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320006v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320007v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320009v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320016v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320021v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320022v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320029v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320032v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320033v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320034v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320035v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322001v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322004v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322006v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324004v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324011v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324012v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324013v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324014v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324015v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325000v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325001v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325002v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360000v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360001v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370000v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370001v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370002v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370005v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370006v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370007v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370011v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370012v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390004v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390005v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440000v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440004v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440005v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460008v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490002v13.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490003v7.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490004v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490005v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490009v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490010v7.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490011v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490014v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490018v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490020v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490023v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490024v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490025v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490027v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490028v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490029v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490030v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490031v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500000v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500001v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500002v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500003v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500004v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500005v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500006v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500007v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500008v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500009v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500022v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500023v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500024v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510000v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510005v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510006v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510008v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510010v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510012v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510015v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510016v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510017v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510018v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510046v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510047v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510062v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510063v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63028v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63030v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63038v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63040v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63041v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63042v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63046v10.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63048v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63049v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63051v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63052v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63053v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63054v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63056v9.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63057v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63058v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63059v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63063v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63066v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63069v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63070v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63071v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63077v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63078v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65136v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65137v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65138v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65139v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68000v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68001v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68002v11.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68003v12.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68004v16.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68006v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68008v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68009v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68010v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68011v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68012v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68013v9.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68014v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68015v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68016v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68017v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68018v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68019v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68020v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68022v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68023v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68024v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68025v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68026v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68027v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68028v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68029v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68030v6.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68031v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68038v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68039v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68040v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule69600v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700000v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700001v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70002v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70003v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700050v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700051v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70006v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700100v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700101v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700150v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700151v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700200v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700201v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700250v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700251v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70025v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70027v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70028v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70029v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700300v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700301v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70030v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70031v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700350v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700351v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70036v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70037v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700400v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701200v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701201v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701250v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701751v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701800v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701801v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701850v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701851v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701900v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701901v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701950v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701951v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702000v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702001v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702050v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702051v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703750v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703751v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703800v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703801v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703850v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703851v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703900v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703901v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703950v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703951v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704000v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule1000v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10450v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10625v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10627v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10781v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10800v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10801v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10802v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10803v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10807v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10818v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10819v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10820v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10821v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10822v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10829v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703201v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703250v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule1000v5.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10450v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10625v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10626v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10627v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10781v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10784v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10800v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10801v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10802v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10803v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10807v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10808v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10818v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10819v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10820v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10821v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10822v2.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10829v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10952v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10955v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11150v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11154v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11187v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11190v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11195v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11208v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11209v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11210v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11264v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11265v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11285v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11289v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11300v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11302v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11362v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11369v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11370v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11381v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11446v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11464v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11498v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11499v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11500v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11502v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11504v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11514v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11659v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11701v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11705v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11710v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11767v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11768v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11769v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11770v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11771v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11792v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11793v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11794v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11834v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11882v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11890v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11930v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11931v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11932v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11933v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11939v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11950v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11981v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11989v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120100v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120119v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120128v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12019v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12035v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120402v21.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120600v4.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120601v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120602v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120603v8.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120607v1.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120608v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120609v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120610v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120611v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120612v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120613v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120614v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120615v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120616v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120617v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120618v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120619v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120620v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120621v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120622v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120623v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120624v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120625v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120626v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120627v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120628v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120629v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120630v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120631v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120632v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120633v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120634v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120635v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120636v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120637v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120638v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120639v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120640v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120641v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120642v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120645v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120649v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120650v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120651v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120652v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120653v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704000v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-3FeatureCache.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.0953.5356.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.1052.6292.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1149.2948.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_114938_158-b2c.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_115005_9064-2616.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-04_093243_16a0-1d8c.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_115005_4240-5892.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-04_093243_14f4-1074.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2023-10-04_084137_4224-6092.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine_2023-10-04_105957_c7c-3d4.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.aodl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.odl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser_2023-10-04_105958_19ec-19e8.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall_2023-10-04_105950_1894-1898.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_114942_500-1efc.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115011_3184-4676.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115204_7008-7012.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115740_6260-6264.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121144_6972-6976.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121212_7980-7984.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_082907_5964-5996.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083412_6972-6976.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083652_5268-4940.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\2057\StructuredQuerySchema.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.3.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\geo[1].json
|
JSON data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[1].htm
|
JSON data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\geo[1].json
|
JSON data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\geo[1].json
|
JSON data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\activity-stream.discovery_stream.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-child-current.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-current.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\startupCache.8.little
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache-current.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache.bin
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG2
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.6dfb6b5d-10db-4868-b4ad-ef207a2dda1b.down_meta
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.up_meta_secure
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\TokenBroker\Cache\e71e1300703d5395820e448840a760f0dd25ad50.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.index
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{357ace01-7b14-4f4a-960d-085da55bf3ea}\Apps.index
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{3c0bfc12-2764-4044-ad15-d4833a01b073}\Apps.index
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.csg
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.schema
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsconversions.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appssynonyms.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.csg
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.schema
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsconversions.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.ft
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.index
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.ft
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.index
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
|
SVG Scalable Vector Graphics image
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
|
SVG Scalable Vector Graphics image
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\download.error
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\ntkrnlmp.pdb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\download.error
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\winload_prod.pdb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
||
C:\Users\user\AppData\Local\bowsakkdestx.txt
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\CameraRoll.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\SavedPictures.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DRBXYKCKXO.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DTBZGIOOSO.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JQADJOBBUH.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.pdf
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LHEPQPGEWF.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.pdf
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PALRGUCVEH.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.pdf
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf
|
HIT archive data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.jpg
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.mp3
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZBEDCJPBEY.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZUYYDJDFVF.png
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528
|
data
|
dropped
|
||
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMDocs.sav.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMGrpPrm.sav.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\CameraRoll.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Documents.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Music.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Pictures.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\SavedPictures.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Videos.library-ms.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\DRBXYKCKXO.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\DTBZGIOOSO.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\JQADJOBBUH.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.pdf.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\LHEPQPGEWF.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.pdf.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\PALRGUCVEH.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.pdf.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf.bgjs (copy)
|
HIT archive data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.mp3.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZBEDCJPBEY.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZUYYDJDFVF.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Desktop\DTBZGIOOSO.docx
|
data
|
dropped
|
||
C:\Users\user\Desktop\DTBZGIOOSO.docx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Documents\ONBQCLYSPU\KATAXZVCPS.xlsx
|
data
|
dropped
|
||
C:\Users\user\Documents\ONBQCLYSPU\KATAXZVCPS.xlsx.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG\DVWHKMNFNN.jpg
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG\DVWHKMNFNN.jpg.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png
|
data
|
dropped
|
||
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeCMapFnt23.lst.bgjs (copy)
|
PostScript document text
|
dropped
|
||
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeSysFnt23.lst.bgjs (copy)
|
PostScript document text
|
dropped
|
||
C:\Users\user\Local Settings\Adobe\Acrobat\DC\IconCacheAcro65536.dat.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Edge\User Data\CrashpadMetrics-active.pma.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\FontCache\3\ListAll.Json.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\FontCache\4\CatalogCacheMetaData.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.chk.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbtmp.log.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log.bgjs (copy)
|
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-UserConfig.log.bgjs (copy)
|
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\16.0\officesetup.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\Features\1-3FeatureCache.txt.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Office\Features\1-7FeatureCache.txt.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\PenWorkspace\DiscoverCacheData.dat.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\2057\StructuredQuerySchema.bin.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.1.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.3.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.bgjs
(copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog.etl.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1280.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1920.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_2560.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_768.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_96.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_custom_stream.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_exif.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_sr.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_wide.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_1280.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_1920.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_2560.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_32.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\thumbcache_768.db.bgjs (copy)
|
data
|
dropped
|
||
C:\Users\user\Local Settings\bowsakkdestx.txt.bgjs (copy)
|
data
|
dropped
|
There are 1351 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\AaIo4VGgvO.exe
|
"C:\Users\user\Desktop\AaIo4VGgvO.exe"
|
||
C:\Users\user\Desktop\AaIo4VGgvO.exe
|
"C:\Users\user\Desktop\AaIo4VGgvO.exe"
|
||
C:\Users\user\Desktop\AaIo4VGgvO.exe
|
"C:\Users\user\Desktop\AaIo4VGgvO.exe" --Admin IsNotAutoStart IsNotTask
|
||
C:\Users\user\Desktop\AaIo4VGgvO.exe
|
"C:\Users\user\Desktop\AaIo4VGgvO.exe" --Admin IsNotAutoStart IsNotTask
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe --Task
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe --Task
|
||
C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build2.exe
|
"C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build2.exe"
|
||
C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build2.exe
|
"C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build2.exe"
|
||
C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build3.exe
|
"C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build3.exe"
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
"C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe" --AutoStart
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
"C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe" --AutoStart
|
||
C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build3.exe
|
"C:\Users\user\AppData\Local\58a25b76-7250-42af-84d2-f7f71d635f33\build3.exe"
|
||
C:\Windows\SysWOW64\schtasks.exe
|
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Windows\SysWOW64\schtasks.exe
|
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
"C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe" --AutoStart
|
||
C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe
|
"C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc\AaIo4VGgvO.exe" --AutoStart
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
|
||
C:\Windows\SysWOW64\icacls.exe
|
icacls "C:\Users\user\AppData\Local\bd76416c-c07f-44e7-96b8-02ba830059cc" /deny *S-1-1-0:(OI)(CI)(DE,DC)
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
There are 17 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://player.vimeo.com
|
unknown
|
||
http://cajgtus.com/files/1/build3.exe$run
|
unknown
|
||
https://steamcommunity.com/login/home/?goto=profiles%2F76561199673019888
|
unknown
|
||
https://steamcommunity.com/?subsection=broadcasts
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=-zPAhzrcAAqx&l=e
|
unknown
|
||
https://api.2ip.ua/geo.json/
|
unknown
|
||
https://steamcommunity.com/profiles/76561199673019888l
|
unknown
|
||
https://store.steampowered.com/subscriber_agreement/
|
unknown
|
||
https://www.gstatic.cn/recaptcha/
|
unknown
|
||
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=truea
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=engl
|
unknown
|
||
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637n
|
unknown
|
||
http://www.valvesoftware.com/legal.htm
|
unknown
|
||
https://www.youtube.com
|
unknown
|
||
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
|
unknown
|
||
https://95.217.9.149/VL
|
unknown
|
||
https://www.google.com
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
|
unknown
|
||
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english
|
unknown
|
||
http://cajgtus.com/files/1/build3.exeU
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=en
|
unknown
|
||
https://steamcommunity.com/profiles/76561199673019888J
|
unknown
|
||
https://api.2ip.ua/n
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=1_BxDGVvfXwv&am
|
unknown
|
||
https://s.ytimg.com;
|
unknown
|
||
http://www.reddit.com/
|
unknown
|
||
https://steam.tv/
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=Kg_v7CMM
|
unknown
|
||
https://95.217.9.149/=::=::
|
unknown
|
||
https://95.217.9.149a
|
unknown
|
||
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
|
unknown
|
||
https://api.2ip.ua/geo.jsonZ
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=BMF068jICwP9&
|
unknown
|
||
https://95.217.9.1490.5938.132
|
unknown
|
||
http://store.steampowered.com/privacy_agreement/
|
unknown
|
||
https://api.2ip.ua/geo.jsonP
|
unknown
|
||
https://95.217.9.149/)U
|
unknown
|
||
https://store.steampowered.com/points/shop/
|
unknown
|
||
https://api.2ip.ua/geo.jsonm
|
unknown
|
||
https://api.2ip.ua/geo.jsono
|
unknown
|
||
http://sdfjhuz.com/dl/build2.exe$run
|
unknown
|
||
https://95.217.9.149/DUq
|
unknown
|
||
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
|
unknown
|
||
https://api.2ip.ua/R
|
unknown
|
||
https://sketchfab.com
|
unknown
|
||
https://steamcommunity.com/profiles/76561199673019888/badges
|
unknown
|
||
https://lv.queniujq.cn
|
unknown
|
||
https://www.youtube.com/
|
unknown
|
||
https://api.2ip.ua/geo.jsona
|
unknown
|
||
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
|
unknown
|
||
https://store.steampowered.com/privacy_agreement/
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
|
unknown
|
||
https://api.2ip.ua/geo.json7
|
unknown
|
||
http://www.youtube.com/
|
unknown
|
||
https://api.2ip.ua/H
|
unknown
|
||
https://wetransfer.com/downloads/54cdfd152fe98eedb628a1f4ddb7076420240421150208/403a27
|
unknown
|
||
https://www.google.com/recaptcha/
|
unknown
|
||
https://api.2ip.ua/geo.json3
|
unknown
|
||
https://checkout.steampowered.com/
|
unknown
|
||
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
|
unknown
|
||
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=true?
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
|
unknown
|
||
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=true=
|
unknown
|
||
https://api.2ip.ua/.
|
unknown
|
||
https://api.2ip.ua/geo.jsonI
|
unknown
|
||
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
|
unknown
|
||
https://api.2ip.ua/geo.jsonJ
|
unknown
|
||
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
|
unknown
|
||
https://95.217.9.149/
|
95.217.9.149
|
||
https://95.217.9.149/xUU
|
unknown
|
||
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
|
unknown
|
||
https://store.steampowered.com/;
|
unknown
|
||
https://store.steampowered.com/about/
|
unknown
|
||
https://steamcommunity.com/my/wishlist/
|
unknown
|
||
https://t.me/irfailAt
|
unknown
|
||
https://api.2ip.ua/geo.jsonR0
|
unknown
|
||
https://api.2ip.ua/geo.jsontem32
|
unknown
|
||
https://95.217.9.149
|
unknown
|
||
https://api.2ip.ua/geo.jsondllx
|
unknown
|
||
https://95.217.9.149/sqln.dllT#
|
unknown
|
||
https://api.2ip.ua/geo.jsonZ0
|
unknown
|
||
https://api.2ip.ua/geo.jsonzP
|
unknown
|
||
https://help.steampowered.com/en/
|
unknown
|
||
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
|
unknown
|
||
https://steamcommunity.com/market/
|
unknown
|
||
https://store.steampowered.com/news/
|
unknown
|
||
https://community.akamai.steamstatic.com/
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
http://store.steampowered.com/subscriber_agreement/
|
unknown
|
||
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
|
unknown
|
||
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
|
unknown
|
||
https://95.217.9.149JEGDA
|
unknown
|
||
http://schemas.micro
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
||
https://recaptcha.net/recaptcha/;
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
sdfjhuz.com
|
187.228.55.117
|
||
cajgtus.com
|
189.195.132.134
|
||
steamcommunity.com
|
104.67.208.180
|
||
api.2ip.ua
|
172.67.139.220
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
187.228.55.117
|
sdfjhuz.com
|
Mexico
|
||
189.195.132.134
|
cajgtus.com
|
Mexico
|
||
172.67.139.220
|
api.2ip.ua
|
United States
|
||
104.67.208.180
|
steamcommunity.com
|
United States
|
||
95.217.9.149
|
unknown
|
Germany
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
SysHelper
|
||
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
|
SysHelper
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
5E20000
|
direct allocation
|
page execute and read and write
|
||
1A90000
|
direct allocation
|
page execute and read and write
|
||
5DB0000
|
direct allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
820000
|
direct allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
890000
|
direct allocation
|
page execute and read and write
|
||
5DB0000
|
direct allocation
|
page execute and read and write
|
||
5E60000
|
direct allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
970000
|
direct allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
890000
|
direct allocation
|
page execute and read and write
|
||
930000
|
direct allocation
|
page execute and read and write
|
||
5DD0000
|
direct allocation
|
page execute and read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
363A000
|
heap
|
page read and write
|
||
63D000
|
heap
|
page read and write
|
||
2E71000
|
heap
|
page read and write
|
||
37CA000
|
heap
|
page read and write
|
||
277E000
|
stack
|
page read and write
|
||
8C0000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
17480000
|
remote allocation
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
3193000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
1E8CF000
|
heap
|
page read and write
|
||
4100000
|
heap
|
page read and write
|
||
9B1000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
9B000
|
stack
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
3775000
|
heap
|
page read and write
|
||
36EC000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3477000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
32D5000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
3433000
|
heap
|
page read and write
|
||
3488000
|
heap
|
page read and write
|
||
3341000
|
heap
|
page read and write
|
||
3705000
|
heap
|
page read and write
|
||
99F000
|
heap
|
page read and write
|
||
64F000
|
stack
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
37DA000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
91F000
|
stack
|
page read and write
|
||
3359000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
529000
|
remote allocation
|
page execute and read and write
|
||
3181000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3146000
|
heap
|
page read and write
|
||
430E000
|
stack
|
page read and write
|
||
28AF000
|
stack
|
page read and write
|
||
929000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
2A6E000
|
stack
|
page read and write
|
||
8AE000
|
stack
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
3449000
|
heap
|
page read and write
|
||
3419000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3570000
|
direct allocation
|
page read and write
|
||
3802000
|
heap
|
page read and write
|
||
347B000
|
heap
|
page read and write
|
||
42A0000
|
heap
|
page read and write
|
||
317D000
|
heap
|
page read and write
|
||
3193000
|
heap
|
page read and write
|
||
3309000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
335D000
|
heap
|
page read and write
|
||
3340000
|
heap
|
page read and write
|
||
5F8000
|
heap
|
page read and write
|
||
2FB1000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
36DD000
|
heap
|
page read and write
|
||
3365000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
D2F000
|
stack
|
page read and write
|
||
3463000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3354000
|
heap
|
page read and write
|
||
311F000
|
heap
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
1C2E6000
|
direct allocation
|
page execute read
|
||
3746000
|
heap
|
page read and write
|
||
5D7000
|
heap
|
page read and write
|
||
418000
|
unkown
|
page read and write
|
||
44DE000
|
stack
|
page read and write
|
||
2180000
|
heap
|
page read and write
|
||
29FF000
|
stack
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
8F9000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3445000
|
heap
|
page read and write
|
||
33ED000
|
heap
|
page read and write
|
||
5FE000
|
heap
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
92A000
|
heap
|
page read and write
|
||
94F000
|
stack
|
page read and write
|
||
40FE000
|
stack
|
page read and write
|
||
974000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
63F000
|
remote allocation
|
page execute and read and write
|
||
758000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
32ED000
|
heap
|
page read and write
|
||
5FE000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3168000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
366D000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
440F000
|
stack
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
608000
|
heap
|
page read and write
|
||
32B4000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
31B0000
|
direct allocation
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
3417000
|
heap
|
page read and write
|
||
981000
|
heap
|
page read and write
|
||
97B000
|
heap
|
page read and write
|
||
44DE000
|
stack
|
page read and write
|
||
409E000
|
unkown
|
page read and write
|
||
368C000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
1C3CD000
|
direct allocation
|
page readonly
|
||
3751000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
41A000
|
unkown
|
page write copy
|
||
8DD000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
374E000
|
heap
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
31A2000
|
heap
|
page read and write
|
||
B0E000
|
stack
|
page read and write
|
||
33E7000
|
heap
|
page read and write
|
||
580000
|
heap
|
page read and write
|
||
33F0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
30EA000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
2590000
|
heap
|
page read and write
|
||
1C3C2000
|
direct allocation
|
page read and write
|
||
1C181000
|
direct allocation
|
page execute read
|
||
342A000
|
heap
|
page read and write
|
||
BC0000
|
heap
|
page read and write
|
||
32DD000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3151000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
7ED000
|
heap
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
7E6000
|
heap
|
page read and write
|
||
319D000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3427000
|
heap
|
page read and write
|
||
4330000
|
heap
|
page read and write
|
||
36C5000
|
heap
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
32A9000
|
heap
|
page read and write
|
||
17480000
|
remote allocation
|
page read and write
|
||
3746000
|
heap
|
page read and write
|
||
30F1000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
467F000
|
stack
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
1E808000
|
heap
|
page read and write
|
||
37A6000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
41B000
|
unkown
|
page write copy
|
||
628000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
870000
|
heap
|
page read and write
|
||
344B000
|
heap
|
page read and write
|
||
3494000
|
heap
|
page read and write
|
||
3446000
|
heap
|
page read and write
|
||
8AE000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
9FC000
|
heap
|
page execute and read and write
|
||
971000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
99F000
|
heap
|
page read and write
|
||
3487000
|
heap
|
page read and write
|
||
3163000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
3738000
|
heap
|
page read and write
|
||
1BEE000
|
stack
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3623000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3170000
|
heap
|
page read and write
|
||
2720000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3197000
|
heap
|
page read and write
|
||
5BE000
|
stack
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
6E5000
|
heap
|
page read and write
|
||
14E9D000
|
stack
|
page read and write
|
||
7FE000
|
stack
|
page read and write
|
||
2E5E000
|
stack
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
2FB1000
|
heap
|
page read and write
|
||
83E000
|
stack
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
41E000
|
unkown
|
page write copy
|
||
31B0000
|
direct allocation
|
page read and write
|
||
379F000
|
heap
|
page read and write
|
||
99F000
|
heap
|
page read and write
|
||
3498000
|
heap
|
page read and write
|
||
346E000
|
heap
|
page read and write
|
||
197000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3401000
|
heap
|
page read and write
|
||
7F0000
|
heap
|
page read and write
|
||
32B9000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
B8CE000
|
stack
|
page read and write
|
||
3179000
|
heap
|
page read and write
|
||
902000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
3102000
|
heap
|
page read and write
|
||
347B000
|
heap
|
page read and write
|
||
3423000
|
heap
|
page read and write
|
||
197000
|
stack
|
page read and write
|
||
3378000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
401000
|
unkown
|
page execute read
|
||
3177000
|
heap
|
page read and write
|
||
2210000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3775000
|
heap
|
page read and write
|
||
36E7000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
32DD000
|
heap
|
page read and write
|
||
787000
|
heap
|
page read and write
|
||
3726000
|
heap
|
page read and write
|
||
36BC000
|
heap
|
page read and write
|
||
6060000
|
heap
|
page read and write
|
||
1E826000
|
heap
|
page read and write
|
||
910000
|
heap
|
page read and write
|
||
3340000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
3463000
|
heap
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
64E000
|
stack
|
page read and write
|
||
311F000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
7E6000
|
unkown
|
page read and write
|
||
3181000
|
heap
|
page read and write
|
||
2DEE000
|
stack
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
3193000
|
heap
|
page read and write
|
||
3414000
|
heap
|
page read and write
|
||
37CA000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
2FB1000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
316A000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
313F000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
2460000
|
heap
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
1A02000
|
unkown
|
page read and write
|
||
3178000
|
heap
|
page read and write
|
||
707000
|
heap
|
page read and write
|
||
37ED000
|
heap
|
page read and write
|
||
3334000
|
heap
|
page read and write
|
||
529000
|
remote allocation
|
page execute and read and write
|
||
420000
|
unkown
|
page write copy
|
||
3390000
|
heap
|
page read and write
|
||
32D5000
|
heap
|
page read and write
|
||
21D0000
|
heap
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
32C2000
|
heap
|
page read and write
|
||
33C9000
|
heap
|
page read and write
|
||
40FE000
|
stack
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
1C38D000
|
direct allocation
|
page execute read
|
||
2A6D000
|
stack
|
page read and write
|
||
2B6D000
|
stack
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
3349000
|
heap
|
page read and write
|
||
1C3CF000
|
direct allocation
|
page readonly
|
||
400000
|
unkown
|
page readonly
|
||
19D000
|
stack
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
318E000
|
heap
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
2B6D000
|
stack
|
page read and write
|
||
376F000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
3694000
|
heap
|
page read and write
|
||
316A000
|
heap
|
page read and write
|
||
99F000
|
stack
|
page read and write
|
||
528F000
|
stack
|
page read and write
|
||
41B0000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
977000
|
heap
|
page read and write
|
||
317B000
|
heap
|
page read and write
|
||
3158000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32A9000
|
heap
|
page read and write
|
||
2580000
|
heap
|
page read and write
|
||
99F000
|
heap
|
page read and write
|
||
33ED000
|
heap
|
page read and write
|
||
4B2000
|
unkown
|
page read and write
|
||
32EB000
|
heap
|
page read and write
|
||
24FE000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
462F000
|
stack
|
page read and write
|
||
490000
|
heap
|
page read and write
|
||
3401000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
410000
|
unkown
|
page readonly
|
||
195000
|
stack
|
page read and write
|
||
4140000
|
heap
|
page read and write
|
||
4B2000
|
unkown
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page read and write
|
||
8CE000
|
heap
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
907000
|
heap
|
page read and write
|
||
2F5F000
|
stack
|
page read and write
|
||
5E8000
|
heap
|
page read and write
|
||
3199000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
36FD000
|
heap
|
page read and write
|
||
86E000
|
stack
|
page read and write
|
||
318B000
|
heap
|
page read and write
|
||
3414000
|
heap
|
page read and write
|
||
36DA000
|
heap
|
page read and write
|
||
33C9000
|
heap
|
page read and write
|
||
3439000
|
heap
|
page read and write
|
||
818000
|
heap
|
page read and write
|
||
2460000
|
heap
|
page read and write
|
||
314A000
|
heap
|
page read and write
|
||
9B1000
|
heap
|
page read and write
|
||
2E5E000
|
stack
|
page read and write
|
||
262F000
|
stack
|
page read and write
|
||
875000
|
heap
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
3165000
|
heap
|
page read and write
|
||
4B0000
|
heap
|
page read and write
|
||
2710000
|
heap
|
page read and write
|
||
31A0000
|
heap
|
page read and write
|
||
27BE000
|
stack
|
page read and write
|
||
37B7000
|
heap
|
page read and write
|
||
2BAE000
|
stack
|
page read and write
|
||
32BD000
|
heap
|
page read and write
|
||
9B4000
|
heap
|
page read and write
|
||
A3D000
|
heap
|
page read and write
|
||
36C5000
|
heap
|
page read and write
|
||
2F71000
|
heap
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
32D0000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
5E5000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3570000
|
direct allocation
|
page read and write
|
||
336A000
|
heap
|
page read and write
|
||
3187000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
3726000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
5420000
|
heap
|
page read and write
|
||
3365000
|
heap
|
page read and write
|
||
929000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
32B9000
|
heap
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
3361000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
3146000
|
heap
|
page read and write
|
||
32AF000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3390000
|
heap
|
page read and write
|
||
697000
|
heap
|
page read and write
|
||
3302000
|
heap
|
page read and write
|
||
32E2000
|
heap
|
page read and write
|
||
529000
|
remote allocation
|
page execute and read and write
|
||
32F2000
|
heap
|
page read and write
|
||
3170000
|
heap
|
page read and write
|
||
6B0000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
32C7000
|
heap
|
page read and write
|
||
345B000
|
heap
|
page read and write
|
||
3490000
|
heap
|
page read and write
|
||
885000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
21E0000
|
heap
|
page read and write
|
||
37E5000
|
heap
|
page read and write
|
||
3152000
|
heap
|
page read and write
|
||
1BFE1000
|
heap
|
page read and write
|
||
3185000
|
heap
|
page read and write
|
||
1C10000
|
direct allocation
|
page read and write
|
||
8CE000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
32F5000
|
heap
|
page read and write
|
||
36E4000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
444E000
|
stack
|
page read and write
|
||
3802000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3374000
|
heap
|
page read and write
|
||
347B000
|
heap
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
40C0000
|
heap
|
page read and write
|
||
8F0000
|
heap
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
319B000
|
heap
|
page read and write
|
||
3443000
|
heap
|
page read and write
|
||
95E000
|
stack
|
page read and write
|
||
32F1000
|
heap
|
page read and write
|
||
317D000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
837000
|
heap
|
page read and write
|
||
3629000
|
heap
|
page read and write
|
||
37BA000
|
heap
|
page read and write
|
||
36E4000
|
heap
|
page read and write
|
||
3418000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
30B0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
333C000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
434000
|
remote allocation
|
page execute and read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
36C4000
|
heap
|
page read and write
|
||
3845000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
36DC000
|
heap
|
page read and write
|
||
787000
|
heap
|
page read and write
|
||
3410000
|
heap
|
page read and write
|
||
8FCF000
|
stack
|
page read and write
|
||
650000
|
heap
|
page read and write
|
||
A2D000
|
heap
|
page execute and read and write
|
||
36D5000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
348D000
|
stack
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
30E0000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3419000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
9A1000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
91D000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
373E000
|
heap
|
page read and write
|
||
611000
|
heap
|
page read and write
|
||
3340000
|
heap
|
page read and write
|
||
3176000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
51A000
|
remote allocation
|
page execute and read and write
|
||
2D20000
|
remote allocation
|
page read and write
|
||
3365000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
32B1000
|
heap
|
page read and write
|
||
32B9000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
31AA000
|
heap
|
page read and write
|
||
6C5000
|
heap
|
page read and write
|
||
3130000
|
heap
|
page read and write
|
||
370D000
|
heap
|
page read and write
|
||
377D000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
37ED000
|
heap
|
page read and write
|
||
529000
|
remote allocation
|
page execute and read and write
|
||
60F000
|
heap
|
page read and write
|
||
82E000
|
stack
|
page read and write
|
||
C0F000
|
stack
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
242F000
|
stack
|
page read and write
|
||
3380000
|
heap
|
page read and write
|
||
89F000
|
stack
|
page read and write
|
||
3123000
|
heap
|
page read and write
|
||
52B000
|
remote allocation
|
page execute and read and write
|
||
ABF000
|
stack
|
page read and write
|
||
36ED000
|
heap
|
page read and write
|
||
705000
|
heap
|
page read and write
|
||
2FB0000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
198000
|
stack
|
page read and write
|
||
2762000
|
heap
|
page read and write
|
||
32E5000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
435000
|
unkown
|
page execute read
|
||
28CE000
|
stack
|
page read and write
|
||
3375000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3309000
|
heap
|
page read and write
|
||
3349000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
29FF000
|
stack
|
page read and write
|
||
330A000
|
heap
|
page read and write
|
||
378D000
|
heap
|
page read and write
|
||
409E000
|
unkown
|
page read and write
|
||
313F000
|
heap
|
page read and write
|
||
40CA000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
318B000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
52B000
|
remote allocation
|
page execute and read and write
|
||
287F000
|
stack
|
page read and write
|
||
7A5000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
9A0000
|
heap
|
page read and write
|
||
277F000
|
stack
|
page read and write
|
||
69E000
|
stack
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
6C0000
|
heap
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
3280000
|
heap
|
page read and write
|
||
DE4E000
|
stack
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
3349000
|
heap
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
36BC000
|
heap
|
page read and write
|
||
1C3ED000
|
heap
|
page read and write
|
||
30B0000
|
heap
|
page read and write
|
||
2CBD000
|
stack
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
650000
|
heap
|
page read and write
|
||
3152000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
26B6D000
|
stack
|
page read and write
|
||
3178000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
1C170000
|
heap
|
page read and write
|
||
9840000
|
trusted library allocation
|
page read and write
|
||
37FA000
|
heap
|
page read and write
|
||
3377000
|
heap
|
page read and write
|
||
232E000
|
stack
|
page read and write
|
||
7E6000
|
unkown
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
6E7000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
903000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
977000
|
heap
|
page read and write
|
||
19A6C000
|
stack
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
7F5000
|
heap
|
page read and write
|
||
3411000
|
heap
|
page read and write
|
||
7EC000
|
heap
|
page read and write
|
||
7FB000
|
heap
|
page read and write
|
||
5FB000
|
heap
|
page read and write
|
||
40E0000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
32A7000
|
heap
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
3463000
|
heap
|
page read and write
|
||
198000
|
stack
|
page read and write
|
||
841000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3188000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
23F0000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
234D000
|
stack
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
9A1000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
400000
|
unkown
|
page readonly
|
||
2B6D000
|
stack
|
page read and write
|
||
418000
|
unkown
|
page write copy
|
||
3102000
|
heap
|
page read and write
|
||
4570000
|
heap
|
page read and write
|
||
32C7000
|
heap
|
page read and write
|
||
33E8000
|
heap
|
page read and write
|
||
7EC000
|
heap
|
page read and write
|
||
82E000
|
stack
|
page read and write
|
||
41C0000
|
heap
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
31A2000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
36E4000
|
heap
|
page read and write
|
||
37B0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
A10000
|
heap
|
page read and write
|
||
3401000
|
heap
|
page read and write
|
||
32B0000
|
heap
|
page read and write
|
||
7FA000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
957000
|
heap
|
page read and write
|
||
36AD000
|
heap
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
903000
|
heap
|
page read and write
|
||
91E000
|
stack
|
page read and write
|
||
9EE000
|
heap
|
page read and write
|
||
25FF000
|
stack
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
900000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3751000
|
heap
|
page read and write
|
||
366D000
|
heap
|
page read and write
|
||
8CE000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
103CE000
|
stack
|
page read and write
|
||
550000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
9A0000
|
direct allocation
|
page read and write
|
||
40EE000
|
heap
|
page read and write
|
||
32C0000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
3374000
|
heap
|
page read and write
|
||
30F1000
|
heap
|
page read and write
|
||
32C0000
|
heap
|
page read and write
|
||
690000
|
heap
|
page read and write
|
||
32DF000
|
heap
|
page read and write
|
||
2FB1000
|
heap
|
page read and write
|
||
347C000
|
heap
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
347F000
|
heap
|
page read and write
|
||
31AE000
|
heap
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
2540000
|
heap
|
page read and write
|
||
68E000
|
stack
|
page read and write
|
||
5FA000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
3775000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
342A000
|
heap
|
page read and write
|
||
880000
|
heap
|
page read and write
|
||
3196000
|
heap
|
page read and write
|
||
587000
|
heap
|
page read and write
|
||
32F6000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
41A000
|
unkown
|
page read and write
|
||
6A0000
|
heap
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
3476000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
347F000
|
heap
|
page read and write
|
||
5C8000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
345A000
|
heap
|
page read and write
|
||
3172000
|
heap
|
page read and write
|
||
3832000
|
heap
|
page read and write
|
||
366D000
|
heap
|
page read and write
|
||
2F5F000
|
stack
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
37DA000
|
heap
|
page read and write
|
||
29FF000
|
stack
|
page read and write
|
||
8CD000
|
heap
|
page read and write
|
||
32B0000
|
heap
|
page read and write
|
||
A1E000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
3442000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
6E7000
|
heap
|
page read and write
|
||
63A000
|
heap
|
page read and write
|
||
3694000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
8D0000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
338C000
|
stack
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
3163000
|
heap
|
page read and write
|
||
1CAF000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
6B8000
|
heap
|
page read and write
|
||
36DF000
|
heap
|
page read and write
|
||
4500000
|
heap
|
page read and write
|
||
3487000
|
heap
|
page read and write
|
||
2CFE000
|
stack
|
page read and write
|
||
3773000
|
heap
|
page read and write
|
||
62F000
|
heap
|
page read and write
|
||
4190000
|
heap
|
page read and write
|
||
36BC000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
276A000
|
heap
|
page read and write
|
||
88B000
|
heap
|
page read and write
|
||
3378000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
62D000
|
heap
|
page read and write
|
||
369C000
|
heap
|
page read and write
|
||
660000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
409E000
|
unkown
|
page read and write
|
||
9DF000
|
stack
|
page read and write
|
||
31AA000
|
heap
|
page read and write
|
||
2710000
|
heap
|
page read and write
|
||
3775000
|
heap
|
page read and write
|
||
3845000
|
heap
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
1F0000
|
heap
|
page read and write
|
||
2CAF000
|
stack
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
981000
|
heap
|
page read and write
|
||
3790000
|
heap
|
page read and write
|
||
990000
|
heap
|
page read and write
|
||
3309000
|
heap
|
page read and write
|
||
1C8E000
|
heap
|
page execute and read and write
|
||
520000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
95CC000
|
stack
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
3157000
|
heap
|
page read and write
|
||
96CE000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
570000
|
heap
|
page read and write
|
||
3694000
|
heap
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
2760000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
1C13E000
|
stack
|
page read and write
|
||
A3E000
|
stack
|
page read and write
|
||
33F0000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
378D000
|
heap
|
page read and write
|
||
907000
|
heap
|
page read and write
|
||
37A6000
|
heap
|
page read and write
|
||
31A0000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3164000
|
heap
|
page read and write
|
||
4403000
|
heap
|
page execute and read and write
|
||
3401000
|
heap
|
page read and write
|
||
944000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3354000
|
heap
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
1A30000
|
heap
|
page read and write
|
||
37A6000
|
heap
|
page read and write
|
||
3168000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32F5000
|
heap
|
page read and write
|
||
4494000
|
heap
|
page execute and read and write
|
||
32EB000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
198000
|
stack
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
880000
|
heap
|
page read and write
|
||
410000
|
unkown
|
page readonly
|
||
3715000
|
heap
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
319B000
|
heap
|
page read and write
|
||
317B000
|
heap
|
page read and write
|
||
2CAF000
|
stack
|
page read and write
|
||
960000
|
heap
|
page execute and read and write
|
||
840000
|
heap
|
page execute and read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32F5000
|
heap
|
page read and write
|
||
1295E000
|
stack
|
page read and write
|
||
32A3000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
33EE000
|
heap
|
page read and write
|
||
8C7000
|
heap
|
page read and write
|
||
1E8CD000
|
heap
|
page read and write
|
||
2A10000
|
heap
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
9B000
|
stack
|
page read and write
|
||
36E4000
|
heap
|
page read and write
|
||
547A000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
33E8000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
3751000
|
heap
|
page read and write
|
||
44E000
|
stack
|
page read and write
|
||
7E9000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
1C7E000
|
heap
|
page read and write
|
||
347F000
|
heap
|
page read and write
|
||
36ED000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
740000
|
heap
|
page read and write
|
||
2BBE000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
4500000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
3157000
|
heap
|
page read and write
|
||
376E000
|
heap
|
page read and write
|
||
3196000
|
heap
|
page read and write
|
||
3173000
|
heap
|
page read and write
|
||
71E000
|
stack
|
page read and write
|
||
5470000
|
heap
|
page read and write
|
||
86E000
|
stack
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
372E000
|
heap
|
page read and write
|
||
2FB0000
|
heap
|
page read and write
|
||
315F000
|
heap
|
page read and write
|
||
631000
|
heap
|
page read and write
|
||
2D5E000
|
stack
|
page read and write
|
||
3738000
|
heap
|
page read and write
|
||
B4F000
|
stack
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
1AD0000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
3340000
|
heap
|
page read and write
|
||
3370000
|
heap
|
page read and write
|
||
32DF000
|
heap
|
page read and write
|
||
3812000
|
heap
|
page read and write
|
||
32C5000
|
heap
|
page read and write
|
||
9B0000
|
heap
|
page read and write
|
||
14EDE000
|
stack
|
page read and write
|
||
3178000
|
heap
|
page read and write
|
||
2CFE000
|
stack
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
33E7000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
2E70000
|
heap
|
page read and write
|
||
30BA000
|
heap
|
page read and write
|
||
63D000
|
heap
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
3812000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
3141000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
3147000
|
heap
|
page read and write
|
||
621000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
3476000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
4B2000
|
unkown
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
17480000
|
remote allocation
|
page read and write
|
||
3463000
|
heap
|
page read and write
|
||
3813000
|
heap
|
page read and write
|
||
7DF000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
3410000
|
heap
|
page read and write
|
||
3374000
|
heap
|
page read and write
|
||
273F000
|
stack
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
32F5000
|
heap
|
page read and write
|
||
585000
|
heap
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
4B2000
|
unkown
|
page read and write
|
||
3148000
|
heap
|
page read and write
|
||
330E000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
3622000
|
heap
|
page read and write
|
||
276F000
|
stack
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3433000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
64E000
|
stack
|
page read and write
|
||
3163000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
37CA000
|
heap
|
page read and write
|
||
342A000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
797000
|
heap
|
page read and write
|
||
32BF000
|
heap
|
page read and write
|
||
33F0000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
317D000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
32A1000
|
heap
|
page read and write
|
||
37BA000
|
heap
|
page read and write
|
||
3349000
|
heap
|
page read and write
|
||
342A000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
530000
|
heap
|
page read and write
|
||
2FB0000
|
heap
|
page read and write
|
||
3123000
|
heap
|
page read and write
|
||
193000
|
stack
|
page read and write
|
||
3170000
|
heap
|
page read and write
|
||
3183000
|
heap
|
page read and write
|
||
3302000
|
heap
|
page read and write
|
||
580000
|
heap
|
page read and write
|
||
7F0000
|
heap
|
page read and write
|
||
CDF000
|
stack
|
page read and write
|
||
33E8000
|
heap
|
page read and write
|
||
3152000
|
heap
|
page read and write
|
||
344E000
|
heap
|
page read and write
|
||
3330000
|
heap
|
page read and write
|
||
2520000
|
heap
|
page read and write
|
||
9A1000
|
heap
|
page read and write
|
||
36DC000
|
heap
|
page read and write
|
||
3845000
|
heap
|
page read and write
|
||
43FF000
|
stack
|
page read and write
|
||
319A000
|
heap
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
3812000
|
heap
|
page read and write
|
||
426E000
|
stack
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
58E000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
401000
|
unkown
|
page execute read
|
||
435000
|
unkown
|
page execute read
|
||
3139000
|
heap
|
page read and write
|
||
30B1000
|
heap
|
page read and write
|
||
41B000
|
unkown
|
page write copy
|
||
2930000
|
heap
|
page read and write
|
||
32EE000
|
heap
|
page read and write
|
||
2D20000
|
remote allocation
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
31AA000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
2A10000
|
heap
|
page read and write
|
||
9A000
|
stack
|
page read and write
|
||
314E000
|
heap
|
page read and write
|
||
41E000
|
unkown
|
page write copy
|
||
9C000
|
stack
|
page read and write
|
||
342A000
|
heap
|
page read and write
|
||
3410000
|
heap
|
page read and write
|
||
37DA000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
317D000
|
heap
|
page read and write
|
||
3494000
|
heap
|
page read and write
|
||
3158000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
3453000
|
heap
|
page read and write
|
||
9F0000
|
heap
|
page read and write
|
||
43EF000
|
stack
|
page read and write
|
||
707000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
7E6000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
3760000
|
heap
|
page read and write
|
||
673000
|
heap
|
page read and write
|
||
37FB000
|
heap
|
page read and write
|
||
BDF000
|
stack
|
page read and write
|
||
3389000
|
heap
|
page read and write
|
||
32EC000
|
heap
|
page read and write
|
||
3751000
|
heap
|
page read and write
|
||
32A3000
|
heap
|
page read and write
|
||
347C000
|
heap
|
page read and write
|
||
51A000
|
remote allocation
|
page execute and read and write
|
||
3490000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
316F000
|
heap
|
page read and write
|
||
3767000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
2DFD000
|
stack
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
8DE000
|
stack
|
page read and write
|
||
3165000
|
heap
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
3365000
|
heap
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
36E1000
|
heap
|
page read and write
|
||
31A2000
|
heap
|
page read and write
|
||
540000
|
heap
|
page read and write
|
||
373E000
|
heap
|
page read and write
|
||
3176000
|
heap
|
page read and write
|
||
36E1000
|
heap
|
page read and write
|
||
36E4000
|
heap
|
page read and write
|
||
3330000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
7F0000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3427000
|
heap
|
page read and write
|
||
31A5000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32C7000
|
heap
|
page read and write
|
||
3166000
|
heap
|
page read and write
|
||
848000
|
heap
|
page read and write
|
||
934E000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
6060000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
929000
|
heap
|
page read and write
|
||
8DD000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
431F000
|
stack
|
page read and write
|
||
3378000
|
heap
|
page read and write
|
||
5E0000
|
heap
|
page read and write
|
||
33E8000
|
heap
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
C2F000
|
stack
|
page read and write
|
||
3705000
|
heap
|
page read and write
|
||
36BC000
|
heap
|
page read and write
|
||
700000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
31B0000
|
direct allocation
|
page read and write
|
||
419000
|
unkown
|
page write copy
|
||
401000
|
unkown
|
page execute read
|
||
1A7E000
|
stack
|
page read and write
|
||
9EA000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
36DD000
|
heap
|
page read and write
|
||
267F000
|
stack
|
page read and write
|
||
32FE000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
3193000
|
heap
|
page read and write
|
||
37E5000
|
heap
|
page read and write
|
||
1C38F000
|
direct allocation
|
page readonly
|
||
32A0000
|
heap
|
page read and write
|
||
4500000
|
heap
|
page read and write
|
||
3125000
|
heap
|
page read and write
|
||
314E000
|
heap
|
page read and write
|
||
288F000
|
stack
|
page read and write
|
||
558000
|
heap
|
page read and write
|
||
3629000
|
heap
|
page read and write
|
||
8AF000
|
stack
|
page read and write
|
||
94C000
|
heap
|
page read and write
|
||
AE0000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
1741D000
|
stack
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
44E000
|
stack
|
page read and write
|
||
950000
|
heap
|
page read and write
|
||
880000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
369C000
|
heap
|
page read and write
|
||
3751000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
3411000
|
heap
|
page read and write
|
||
193000
|
stack
|
page read and write
|
||
32B3000
|
heap
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
980000
|
heap
|
page read and write
|
||
347B000
|
heap
|
page read and write
|
||
367D000
|
heap
|
page read and write
|
||
32BA000
|
heap
|
page read and write
|
||
BC7000
|
heap
|
page read and write
|
||
7FA000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
31B0000
|
direct allocation
|
page read and write
|
||
41F0000
|
heap
|
page read and write
|
||
92E000
|
heap
|
page read and write
|
||
3183000
|
heap
|
page read and write
|
||
26C0000
|
heap
|
page read and write
|
||
929000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
3374000
|
heap
|
page read and write
|
||
8C0000
|
heap
|
page read and write
|
||
2A6E000
|
stack
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
888000
|
heap
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
32E5000
|
heap
|
page read and write
|
||
32B4000
|
heap
|
page read and write
|
||
3381000
|
heap
|
page read and write
|
||
36AD000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
3704000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
2FB1000
|
heap
|
page read and write
|
||
32C1000
|
heap
|
page read and write
|
||
3845000
|
heap
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3134000
|
heap
|
page read and write
|
||
42B0000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
31AA000
|
heap
|
page read and write
|
||
37FA000
|
heap
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
262F000
|
stack
|
page read and write
|
||
35A0000
|
trusted library allocation
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
32AE000
|
heap
|
page read and write
|
||
3726000
|
heap
|
page read and write
|
||
3381000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
401000
|
unkown
|
page execute read
|
||
DE0F000
|
stack
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
3410000
|
heap
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
36BC000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
36DD000
|
heap
|
page read and write
|
||
626000
|
heap
|
page read and write
|
||
700000
|
heap
|
page read and write
|
||
372E000
|
heap
|
page read and write
|
||
41E000
|
unkown
|
page write copy
|
||
318D000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
3414000
|
heap
|
page read and write
|
||
69E000
|
stack
|
page read and write
|
||
3366000
|
heap
|
page read and write
|
||
198000
|
stack
|
page read and write
|
||
32B7000
|
heap
|
page read and write
|
||
3410000
|
heap
|
page read and write
|
||
363A000
|
heap
|
page read and write
|
||
3852000
|
heap
|
page read and write
|
||
349B000
|
heap
|
page read and write
|
||
42A0000
|
heap
|
page read and write
|
||
33EE000
|
heap
|
page read and write
|
||
42FE000
|
stack
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
40A0000
|
unkown
|
page readonly
|
||
9C000
|
stack
|
page read and write
|
||
30CA000
|
heap
|
page read and write
|
||
363A000
|
heap
|
page read and write
|
||
372E000
|
heap
|
page read and write
|
||
1C0E0000
|
trusted library allocation
|
page read and write
|
||
197000
|
stack
|
page read and write
|
||
1C188000
|
direct allocation
|
page execute read
|
||
8F9000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3401000
|
heap
|
page read and write
|
||
3438000
|
heap
|
page read and write
|
||
B20000
|
heap
|
page read and write
|
||
7E6000
|
unkown
|
page read and write
|
||
A4F000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3375000
|
heap
|
page read and write
|
||
3123000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
3414000
|
heap
|
page read and write
|
||
46BF000
|
stack
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
43B000
|
unkown
|
page read and write
|
||
368C000
|
heap
|
page read and write
|
||
3421000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
5ED0000
|
direct allocation
|
page read and write
|
||
266E000
|
stack
|
page read and write
|
||
33E9000
|
heap
|
page read and write
|
||
32B7000
|
heap
|
page read and write
|
||
37B0000
|
heap
|
page read and write
|
||
3476000
|
heap
|
page read and write
|
||
3196000
|
heap
|
page read and write
|
||
6E0000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
3744000
|
heap
|
page read and write
|
||
3714000
|
heap
|
page read and write
|
||
3560000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
7FA000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
37BA000
|
heap
|
page read and write
|
||
27AE000
|
stack
|
page read and write
|
||
315A000
|
heap
|
page read and write
|
||
6010000
|
heap
|
page read and write
|
||
967000
|
heap
|
page read and write
|
||
7E6000
|
unkown
|
page read and write
|
||
51A000
|
remote allocation
|
page execute and read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32C7000
|
heap
|
page read and write
|
||
57E000
|
stack
|
page read and write
|
||
37B0000
|
heap
|
page read and write
|
||
1A04000
|
unkown
|
page readonly
|
||
3354000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
6DE000
|
stack
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
410000
|
unkown
|
page readonly
|
||
2A10000
|
heap
|
page read and write
|
||
193000
|
stack
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
2A6E000
|
stack
|
page read and write
|
||
3143000
|
heap
|
page read and write
|
||
8E0000
|
heap
|
page read and write
|
||
3415000
|
heap
|
page read and write
|
||
311D000
|
heap
|
page read and write
|
||
748000
|
heap
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
695000
|
heap
|
page read and write
|
||
1C7A000
|
heap
|
page read and write
|
||
74E000
|
stack
|
page read and write
|
||
30EA000
|
heap
|
page read and write
|
||
6AE000
|
stack
|
page read and write
|
||
32A4000
|
heap
|
page read and write
|
||
32B7000
|
heap
|
page read and write
|
||
3410000
|
heap
|
page read and write
|
||
344E000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
6E7000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
8B0000
|
heap
|
page read and write
|
||
1C70000
|
heap
|
page read and write
|
||
750000
|
heap
|
page read and write
|
||
32D3000
|
heap
|
page read and write
|
||
311F000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
193000
|
stack
|
page read and write
|
||
5F1000
|
remote allocation
|
page execute and read and write
|
||
4B2000
|
unkown
|
page read and write
|
||
36A5000
|
heap
|
page read and write
|
||
3623000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
3832000
|
heap
|
page read and write
|
||
3365000
|
heap
|
page read and write
|
||
3157000
|
heap
|
page read and write
|
||
27AF000
|
stack
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
5F50000
|
heap
|
page read and write
|
||
2D20000
|
remote allocation
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
57E000
|
stack
|
page read and write
|
||
2DFE000
|
stack
|
page read and write
|
||
907000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
93C000
|
heap
|
page read and write
|
||
314A000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
3433000
|
heap
|
page read and write
|
||
347B000
|
heap
|
page read and write
|
||
450000
|
heap
|
page read and write
|
||
7E6000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
375E000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
943000
|
heap
|
page read and write
|
||
2E5E000
|
stack
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
3381000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
5D0000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
32A6000
|
heap
|
page read and write
|
||
3385000
|
heap
|
page read and write
|
||
673000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
6E0000
|
heap
|
page read and write
|
||
2F70000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
32BD000
|
heap
|
page read and write
|
||
32A6000
|
heap
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
5FD0000
|
direct allocation
|
page read and write
|
||
3744000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
2BAE000
|
stack
|
page read and write
|
||
32C2000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
968000
|
heap
|
page read and write
|
||
1038F000
|
stack
|
page read and write
|
||
68E000
|
stack
|
page read and write
|
||
2CAF000
|
stack
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
335D000
|
heap
|
page read and write
|
||
500000
|
heap
|
page read and write
|
||
850000
|
heap
|
page read and write
|
||
409E000
|
unkown
|
page read and write
|
||
36B5000
|
heap
|
page read and write
|
||
3340000
|
heap
|
page read and write
|
||
3147000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
54E000
|
stack
|
page read and write
|
||
30D6000
|
heap
|
page read and write
|
||
1A20000
|
heap
|
page read and write
|
||
3418000
|
heap
|
page read and write
|
||
650000
|
heap
|
page read and write
|
||
3414000
|
heap
|
page read and write
|
||
335E000
|
heap
|
page read and write
|
||
418000
|
unkown
|
page write copy
|
||
3384000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
37A6000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
3152000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3166000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
369D000
|
heap
|
page read and write
|
||
910000
|
heap
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
366C000
|
heap
|
page read and write
|
||
3380000
|
heap
|
page read and write
|
||
90E000
|
stack
|
page read and write
|
||
319F000
|
heap
|
page read and write
|
||
197000
|
stack
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
36DA000
|
heap
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
36BC000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
451E000
|
stack
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
52B000
|
remote allocation
|
page execute and read and write
|
||
30B0000
|
heap
|
page read and write
|
||
636000
|
heap
|
page read and write
|
||
9A1000
|
heap
|
page read and write
|
||
37EB000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
3776000
|
heap
|
page read and write
|
||
381A000
|
heap
|
page read and write
|
||
511000
|
remote allocation
|
page execute and read and write
|
||
342B000
|
heap
|
page read and write
|
||
290F000
|
stack
|
page read and write
|
||
470000
|
heap
|
page read and write
|
||
41B000
|
unkown
|
page write copy
|
||
5C0000
|
heap
|
page read and write
|
||
443F000
|
heap
|
page execute and read and write
|
||
93F000
|
stack
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
318B000
|
heap
|
page read and write
|
||
1E6C1000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
6C7000
|
heap
|
page read and write
|
||
314A000
|
heap
|
page read and write
|
||
30DB000
|
heap
|
page read and write
|
||
636000
|
heap
|
page read and write
|
||
3746000
|
heap
|
page read and write
|
||
313F000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3290000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
316E000
|
heap
|
page read and write
|
||
85B000
|
heap
|
page read and write
|
||
263E000
|
stack
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
3134000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
32C2000
|
heap
|
page read and write
|
||
409E000
|
unkown
|
page read and write
|
||
A0D000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
3833000
|
heap
|
page read and write
|
||
52B000
|
remote allocation
|
page execute and read and write
|
||
2430000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
30B0000
|
heap
|
page read and write
|
||
28BF000
|
stack
|
page read and write
|
||
40CE000
|
heap
|
page read and write
|
||
37E5000
|
heap
|
page read and write
|
||
335F000
|
heap
|
page read and write
|
||
8F7000
|
heap
|
page read and write
|
||
363A000
|
heap
|
page read and write
|
||
3744000
|
heap
|
page read and write
|
||
598000
|
heap
|
page read and write
|
||
1BFE0000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
447F000
|
stack
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
8DF000
|
stack
|
page read and write
|
||
315F000
|
heap
|
page read and write
|
||
32D2000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
3802000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
32D5000
|
heap
|
page read and write
|
||
368D000
|
heap
|
page read and write
|
||
37FA000
|
heap
|
page read and write
|
||
33E7000
|
heap
|
page read and write
|
||
7E6000
|
heap
|
page read and write
|
||
32E4000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
3570000
|
direct allocation
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
32C1000
|
heap
|
page read and write
|
||
32A9000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
4138000
|
heap
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
623000
|
heap
|
page read and write
|
||
32CE000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
3381000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
411000
|
unkown
|
page readonly
|
||
4338000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
620000
|
heap
|
page read and write
|
||
37E5000
|
heap
|
page read and write
|
||
1E0000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
37A6000
|
heap
|
page read and write
|
||
3694000
|
heap
|
page read and write
|
||
9B1000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3102000
|
heap
|
page read and write
|
||
830000
|
heap
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3365000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3855000
|
heap
|
page read and write
|
||
1E6C8000
|
heap
|
page read and write
|
||
33F0000
|
heap
|
page read and write
|
||
318B000
|
heap
|
page read and write
|
||
371D000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
401000
|
unkown
|
page execute read
|
||
335D000
|
heap
|
page read and write
|
||
3466000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
6100000
|
heap
|
page read and write
|
||
349C000
|
heap
|
page read and write
|
||
347F000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
2758000
|
heap
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
257F000
|
stack
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
32FD000
|
heap
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
37BA000
|
heap
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
333B000
|
heap
|
page read and write
|
||
1BFAD000
|
stack
|
page read and write
|
||
41A000
|
unkown
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3439000
|
heap
|
page read and write
|
||
411000
|
unkown
|
page readonly
|
||
7D6000
|
heap
|
page read and write
|
||
5FA000
|
heap
|
page read and write
|
||
40EA000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
3309000
|
heap
|
page read and write
|
||
3334000
|
heap
|
page read and write
|
||
336B000
|
heap
|
page read and write
|
||
30AC000
|
stack
|
page read and write
|
||
193000
|
stack
|
page read and write
|
||
198000
|
stack
|
page read and write
|
||
40A0000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3751000
|
heap
|
page read and write
|
||
344E000
|
heap
|
page read and write
|
||
32ED000
|
heap
|
page read and write
|
||
379F000
|
heap
|
page read and write
|
||
290E000
|
stack
|
page read and write
|
||
92C000
|
heap
|
page read and write
|
||
376E000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
420000
|
unkown
|
page write copy
|
||
888000
|
heap
|
page read and write
|
||
9B1000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
347F000
|
heap
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
9B1000
|
heap
|
page read and write
|
||
344B000
|
heap
|
page read and write
|
||
3349000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3423000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
317F000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3855000
|
heap
|
page read and write
|
||
3429000
|
heap
|
page read and write
|
||
19E000
|
stack
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
31AA000
|
heap
|
page read and write
|
||
7DF000
|
stack
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
601000
|
heap
|
page read and write
|
||
4100000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
347E000
|
heap
|
page read and write
|
||
1C3CA000
|
direct allocation
|
page readonly
|
||
381A000
|
heap
|
page read and write
|
||
9B000
|
stack
|
page read and write
|
||
529000
|
remote allocation
|
page execute and read and write
|
||
1F0000
|
heap
|
page read and write
|
||
347F000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
40C0000
|
heap
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
317B000
|
heap
|
page read and write
|
||
3150000
|
heap
|
page read and write
|
||
AE7000
|
heap
|
page read and write
|
||
2CEE000
|
stack
|
page read and write
|
||
460F000
|
stack
|
page read and write
|
||
4130000
|
heap
|
page read and write
|
||
32C5000
|
heap
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
33E8000
|
heap
|
page read and write
|
||
37A6000
|
heap
|
page read and write
|
||
435000
|
unkown
|
page execute read
|
||
410000
|
heap
|
page read and write
|
||
888000
|
heap
|
page read and write
|
||
558000
|
remote allocation
|
page execute and read and write
|
||
1F0000
|
heap
|
page read and write
|
||
92B000
|
heap
|
page read and write
|
||
3629000
|
heap
|
page read and write
|
||
199FF000
|
stack
|
page read and write
|
||
317F000
|
heap
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
362B000
|
heap
|
page read and write
|
||
270E000
|
stack
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
3102000
|
heap
|
page read and write
|
||
B88F000
|
stack
|
page read and write
|
||
3152000
|
heap
|
page read and write
|
||
330F000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page write copy
|
||
400000
|
unkown
|
page readonly
|
||
369D000
|
heap
|
page read and write
|
||
6CE000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
314F000
|
heap
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
370F000
|
stack
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
333C000
|
heap
|
page read and write
|
||
3117000
|
heap
|
page read and write
|
||
3123000
|
heap
|
page read and write
|
||
7E9000
|
unkown
|
page readonly
|
||
35E0000
|
heap
|
page read and write
|
||
3157000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
238D000
|
stack
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
3415000
|
heap
|
page read and write
|
||
2A10000
|
heap
|
page read and write
|
||
32F4000
|
heap
|
page read and write
|
||
32B4000
|
heap
|
page read and write
|
||
3145000
|
heap
|
page read and write
|
||
3845000
|
heap
|
page read and write
|
||
8C0000
|
heap
|
page read and write
|
||
3409000
|
heap
|
page read and write
|
||
37FA000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
460F000
|
stack
|
page read and write
|
||
32B2000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
1E6F000
|
stack
|
page read and write
|
||
2FB0000
|
remote allocation
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
2B6D000
|
stack
|
page read and write
|
||
3166000
|
heap
|
page read and write
|
||
2A0F000
|
stack
|
page read and write
|
||
3710000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
780000
|
heap
|
page read and write
|
||
3760000
|
heap
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
32E4000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
451F000
|
heap
|
page execute and read and write
|
||
B3F000
|
stack
|
page read and write
|
||
32B8000
|
heap
|
page read and write
|
||
88E000
|
stack
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
36DF000
|
heap
|
page read and write
|
||
4480000
|
heap
|
page read and write
|
||
311F000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
B7E000
|
stack
|
page read and write
|
||
3334000
|
heap
|
page read and write
|
||
28AF000
|
stack
|
page read and write
|
||
32A1000
|
heap
|
page read and write
|
||
344E000
|
heap
|
page read and write
|
||
316A000
|
heap
|
page read and write
|
||
52B000
|
remote allocation
|
page execute and read and write
|
||
3414000
|
heap
|
page read and write
|
||
1C398000
|
direct allocation
|
page readonly
|
||
2F5F000
|
stack
|
page read and write
|
||
3570000
|
direct allocation
|
page read and write
|
||
BBF000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3498000
|
heap
|
page read and write
|
||
3715000
|
heap
|
page read and write
|
||
30E6000
|
heap
|
page read and write
|
||
29FF000
|
stack
|
page read and write
|
||
3162000
|
heap
|
page read and write
|
||
3177000
|
heap
|
page read and write
|
||
33EE000
|
heap
|
page read and write
|
||
2460000
|
heap
|
page read and write
|
||
3188000
|
heap
|
page read and write
|
||
41B8000
|
heap
|
page read and write
|
||
3684000
|
heap
|
page read and write
|
||
3445000
|
heap
|
page read and write
|
||
314E000
|
heap
|
page read and write
|
||
420000
|
unkown
|
page write copy
|
||
9B7000
|
heap
|
page read and write
|
||
1C180000
|
direct allocation
|
page execute and read and write
|
||
37A6000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
2BAE000
|
stack
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
6E5000
|
heap
|
page read and write
|
||
2E5E000
|
stack
|
page read and write
|
||
61E000
|
heap
|
page read and write
|
||
941000
|
heap
|
page read and write
|
||
2750000
|
heap
|
page read and write
|
||
438000
|
unkown
|
page write copy
|
||
3375000
|
heap
|
page read and write
|
||
32B4000
|
heap
|
page read and write
|
||
3146000
|
heap
|
page read and write
|
||
36ED000
|
heap
|
page read and write
|
||
3852000
|
heap
|
page read and write
|
||
94C000
|
heap
|
page read and write
|
||
672000
|
heap
|
page read and write
|
||
32B1000
|
heap
|
page read and write
|
||
373F000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
35F4000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
2FB0000
|
heap
|
page read and write
|
||
41A000
|
unkown
|
page read and write
|
||
374E000
|
heap
|
page read and write
|
||
88E000
|
heap
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
3170000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
800000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
7F5000
|
heap
|
page read and write
|
||
37DA000
|
heap
|
page read and write
|
||
1A04000
|
unkown
|
page readonly
|
||
929000
|
heap
|
page read and write
|
||
2A10000
|
heap
|
page read and write
|
||
91B000
|
heap
|
page read and write
|
||
97C000
|
heap
|
page read and write
|
||
19A10000
|
heap
|
page read and write
|
||
3358000
|
heap
|
page read and write
|
||
3738000
|
heap
|
page read and write
|
||
81F000
|
stack
|
page read and write
|
||
3490000
|
heap
|
page read and write
|
||
32B9000
|
heap
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
48E000
|
stack
|
page read and write
|
||
1CAB000
|
heap
|
page read and write
|
||
197000
|
stack
|
page read and write
|
||
2E5F000
|
stack
|
page read and write
|
||
7EF000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
31AA000
|
heap
|
page read and write
|
||
4E0000
|
heap
|
page read and write
|
||
514000
|
remote allocation
|
page execute and read and write
|
||
3746000
|
heap
|
page read and write
|
||
3727000
|
heap
|
page read and write
|
||
3477000
|
heap
|
page read and write
|
||
95D000
|
heap
|
page read and write
|
||
32F2000
|
heap
|
page read and write
|
||
314A000
|
heap
|
page read and write
|
||
334D000
|
heap
|
page read and write
|
||
349E000
|
heap
|
page read and write
|
||
41B000
|
unkown
|
page write copy
|
||
970000
|
heap
|
page execute and read and write
|
||
401000
|
unkown
|
page execute read
|
||
903000
|
heap
|
page read and write
|
||
3183000
|
heap
|
page read and write
|
||
9BC000
|
heap
|
page read and write
|
||
1A04000
|
unkown
|
page readonly
|
||
3123000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
7E6000
|
unkown
|
page read and write
|
||
8F9000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
1290F000
|
stack
|
page read and write
|
||
37ED000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
32B1000
|
heap
|
page read and write
|
||
43B000
|
unkown
|
page read and write
|
||
318F000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
37ED000
|
heap
|
page read and write
|
||
319B000
|
heap
|
page read and write
|
||
3445000
|
heap
|
page read and write
|
||
960000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
971000
|
heap
|
page read and write
|
||
174BE000
|
stack
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
3338000
|
heap
|
page read and write
|
||
2F5F000
|
stack
|
page read and write
|
||
42EE000
|
stack
|
page read and write
|
||
3812000
|
heap
|
page read and write
|
||
30F0000
|
heap
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
19E000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
3134000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
2FB1000
|
heap
|
page read and write
|
||
3401000
|
heap
|
page read and write
|
||
9810000
|
direct allocation
|
page read and write
|
||
810000
|
heap
|
page read and write
|
||
30E7000
|
heap
|
page read and write
|
||
32B8000
|
heap
|
page read and write
|
||
3196000
|
heap
|
page read and write
|
||
92C000
|
heap
|
page read and write
|
||
C7F000
|
stack
|
page read and write
|
||
342A000
|
heap
|
page read and write
|
||
3172000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
A1A000
|
heap
|
page read and write
|
||
43FE000
|
heap
|
page execute and read and write
|
||
3751000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
32D3000
|
heap
|
page read and write
|
||
41B000
|
unkown
|
page write copy
|
||
438000
|
unkown
|
page write copy
|
||
32AA000
|
stack
|
page read and write
|
||
4320000
|
direct allocation
|
page read and write
|
||
30D4000
|
heap
|
page read and write
|
There are 1788 hidden memdumps, click here to show them.