IOC Report
mJVVW85CnW.exe

loading gif

Files

File Path
Type
Category
Malicious
mJVVW85CnW.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe
MS-DOS executable
dropped
 malicious
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440002v9.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440007v3.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230170v1.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230172v1.xml
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_114932_b84-2220.log
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199673019888[1].htm
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\build3[1].exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqln[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\freebl3[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\mozglue[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\nss3[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\softokn3[1].dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945572911884.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133583894764791234.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\tmp4397.tmp
MS-DOS executable
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wct3D66.tmp
MS-DOS executable, MZ for MS-DOS
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wctF86A.tmp
MS-DOS executable
dropped
 malicious
C:\Users\user\AppData\Local\VirtualStore\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl
data
dropped
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite
data
dropped
 malicious
C:\Users\user\Desktop\DVWHKMNFNN\IPKGELNTQY.mp3
data
dropped
 malicious
C:\Users\user\Desktop\NWTVCDUMOB.pdf
data
dropped
 malicious
C:\Users\user\Local Settings\Adobe\Acrobat\DC\UserCache64.bin.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Application Data\Application Data\Application Data\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe.bgzq (copy)
MS-DOS executable
dropped
 malicious
C:\Users\user\Local Settings\Google\Chrome\User Data\first_party_sets.db.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\acrobat_sbx\acroNGLLog.txt.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\tmp4397.tmp.bgzq (copy)
MS-DOS executable
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct150C.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct33D7.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct38F0.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct3D66.tmp.bgzq (copy)
MS-DOS executable, MZ for MS-DOS
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct443C.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wct49A7.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctAB5F.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctDB2E.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctE4A4.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctEA40.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctF411.tmp.bgzq (copy)
data
dropped
 malicious
C:\Users\user\Local Settings\Temp\wctF86A.tmp.bgzq (copy)
MS-DOS executable
dropped
 malicious
C:\Users\user\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\_README.txt
ASCII text, with CRLF line terminators
dropped
 malicious
C:\ProgramData\AAFHIIDHJEBFBFIDAKFB
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
dropped
C:\ProgramData\AFCBKFHJ
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4
dropped
C:\ProgramData\EGCFHDAKECFIDGDGDBKJDGIIID
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
dropped
C:\ProgramData\GCAFCAFHJJDBFIECFBKE
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
dropped
C:\ProgramData\GDHDHJEB
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
dropped
C:\ProgramData\GIIIIJDH
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
dropped
C:\ProgramData\HCFCAAEB
SQLite 3.x database, last written using SQLite version 3035005, file counter 2, database pages 31, cookie 0x18, schema 4, UTF-8, version-valid-for 2
dropped
C:\ProgramData\freebl3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\ProgramData\mozglue.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\ProgramData\msvcp140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\ProgramData\nss3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\ProgramData\softokn3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\ProgramData\vcruntime140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\SystemID\PersonalID.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\.curlrc
data
dropped
C:\Users\user\.curlrc.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.bgzq (copy)
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old
data
modified
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.bgzq (copy)
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
data
dropped
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
data
dropped
C:\Users\user\AppData\Local\Adobe\Color\ACECache11.lst
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm
data
dropped
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ca\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\cs\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\da\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\de\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\el\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\es\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\es_419\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\et\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\fi\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\fil\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\fr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\hi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\hr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\hu\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\id\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\it\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ja\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ko\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\lt\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\lv\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\nb\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\nl\messages.json
GeoSwath RDF
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pl\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pt_BR\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\pt_PT\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ro\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\ru\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sk\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sl\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\sv\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\th\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\tr\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\uk\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\vi\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\zh_CN\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\zh_TW\messages.json
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\27160079615.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\28315153308.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\29939506207.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\31169036496.ttf
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\brndlog.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-UserConfig.log
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\01_Music_auto_rated_at_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\02_Music_added_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\03_Music_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\04_Music_played_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\05_Pictures_taken_in_the_last_month.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\06_Pictures_rated_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\07_TV_recorded_in_the_last_week.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\08_Video_rated_at_4_or_5_stars.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\09_Music_played_the_most.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\10_All_Music.wpl
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100094v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule1000v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100104v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100105v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100106v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100109v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100110v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100113v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100114v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100115v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100116v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100117v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100118v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100124v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100125v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100126v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100127v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100128v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100129v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100130v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100131v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100132v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100133v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100134v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule100202v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240005v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240007v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240008v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240009v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240010v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240012v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240013v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240014v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240015v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240020v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240021v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240025v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240026v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240030v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240032v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240034v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240038v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule240039v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule241002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270002v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270004v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270005v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270006v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270007v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270010v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270011v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270012v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270013v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270014v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270017v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule270019v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule310000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320002v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320004v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320005v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320007v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320009v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320021v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320022v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320032v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320033v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320034v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320035v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322004v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322006v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324011v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324012v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324013v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324014v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325002v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370007v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370011v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370012v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440004v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490002v13.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490003v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490004v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490005v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490009v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490010v7.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490014v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490018v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490020v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490023v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490024v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490025v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490027v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490028v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490029v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490030v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490031v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500002v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500003v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500004v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500005v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500006v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500007v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500008v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500009v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500022v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500023v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500024v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510005v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510008v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510010v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510012v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510015v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510016v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510017v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510018v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510046v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510047v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510062v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510063v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63028v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63030v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63038v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63040v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63041v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63042v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63046v10.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63048v6.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63049v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63051v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63052v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63053v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63054v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63056v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63057v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63058v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63059v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63063v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63066v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63069v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63070v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63071v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63077v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63078v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65136v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65137v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65138v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65139v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68000v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68002v11.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68003v12.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68004v16.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68006v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68008v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68009v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68010v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68011v4.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68012v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68013v9.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68014v8.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230171v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230173v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230174v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700000v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700001v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700400v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700401v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701800v1.xml
Sun disk label '<?xmlX\017j\376L\231:G\377\302\317\304\264\312j\203F\347\360Q\243\225\300\002\217\342E\264\027(M\377w\257\351\204\221$\033<@\334l\2454\306s\276v\306,Q\021\252@4`\253\220_\2737\243\307\337\177\366\231$\303\321\276\Q9i\011\321\261\0222HE\362\340O&\206\354\335G?\233\260k\257\330n\236\201\234xJ\231zYDDQ.\345w\257\351\204\221$\033<@\334l\2454\306s\276v\306,Q\021\252@4`\253\220_\2737\243\307\337\177\366\231$\303\321\276\Q9i\011\321\261\0222HE\362\340O&\206\354\335G?\233\260k\257\330n\236\201\234xJ\231zYDDQ.\345\337\177\366\231$\303\321\276\Q9i\011\321\261\0222HE\362\340O&\206\354\335G?\233\260k\257\330n\236\201\234xJ\231zYDDQ.\345' 31003 rpm, 9739 phys cys, 7610 data cyls, 19555 sectors/track, start cyl 773201976, 1860872800 blocks
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702050v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702051v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702301v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702350v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702351v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702400v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702401v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702500v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702501v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702550v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702551v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702600v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule1000v5.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10450v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10625v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10626v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10627v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10781v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10784v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10802v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10803v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10807v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10808v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10818v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10819v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10820v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10821v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10822v2.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10829v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10879v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10880v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10881v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10902v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10906v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10907v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10924v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10925v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10940v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10952v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10955v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11154v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11187v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11190v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11195v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11208v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11209v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11210v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11264v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11265v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11285v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11289v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11300v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11302v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11362v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11369v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11370v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11381v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11446v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11464v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11498v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11499v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11502v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11504v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11514v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11659v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11705v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11710v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11767v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11882v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702601v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702650v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702651v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702700v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702701v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702750v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702751v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702800v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702801v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702850v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702851v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702900v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702901v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702950v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule702951v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703000v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703001v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703050v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703051v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703100v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703101v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703150v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703151v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703200v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703201v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703250v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703251v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703300v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703301v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703350v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703351v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703400v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703401v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703450v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703451v1.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703500v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703501v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703550v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703551v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703600v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703601v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703650v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703651v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703700v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703701v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703750v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703751v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703800v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703801v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703850v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703851v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703900v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703901v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703950v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule703951v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704000v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704001v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704050v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704051v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704100v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704101v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704150v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704151v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704200v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704201v0.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule90401v3.xml
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.0953.5356.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.1052.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1149.2948.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_114938_158-b2c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_115005_9064-2616.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-04_093243_16a0-1d8c.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_115005_4240-5892.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-04_093243_14f4-1074.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2023-10-04_084137_4224-6092.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine_2023-10-04_105957_c7c-3d4.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.aodl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.odl
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser_2023-10-04_105958_19ec-19e8.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall_2023-10-04_105950_1894-1898.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_114942_500-1efc.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115011_3184-4676.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115204_7008-7012.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115740_6260-6264.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121144_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121212_7980-7984.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_082907_5964-5996.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083412_6972-6976.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083652_5268-4940.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session
data
dropped
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\geo[1].json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[1].htm
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\get[2].htm
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\geo[1].json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\geo[1].json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\msvcp140[1].dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vcruntime140[1].dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\activity-stream.discovery_stream.json
data
dropped
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\settings\main\ms-language-packs\browser\newtab\asrouter.ftl
data
modified
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.6dfb6b5d-10db-4868-b4ad-ef207a2dda1b.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
SVG Scalable Vector Graphics image
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.LOG1
MS Windows registry file, NT/2000 or above
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\ntkrnlmp.pdb
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\download.error
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\winload_prod.pdb
data
dropped
C:\Users\user\AppData\Local\Temp\wct150C.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct33D7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct38F0.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct443C.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wct49A7.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctAB5F.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctDB2E.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctE4A4.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctEA40.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wctF411.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\wmsetup.log
data
dropped
C:\Users\user\AppData\Local\Temp\{02662522-698F-45B5-959E-0EC7B36298AD}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{139BFC28-947F-45CC-9DE4-AB0FCAEF6E9F}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{5871238D-BEB9-464A-931F-701C8F0FFB10}.png
data
dropped
C:\Users\user\AppData\Local\Temp\{5F969F84-5F34-4AF8-8D36-D6D6A1668750}.png
data
dropped
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe:Zone.Identifier
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\bowsakkdestx.txt
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav
data
dropped
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\CameraRoll.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\SavedPictures.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BQJUWOYRTO.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\BQJUWOYRTO.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CURQNKVOIX.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\EEGWXUHVUG.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\EEGWXUHVUG.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\EEGWXUHVUG.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\EIVQSAOTAQ.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\FENIVHOIKN.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\FGAWOVZUJP.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\GNJEVOXLLS.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\GNJEVOXLLS.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\GNJEVOXLLS.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HTAGVDFUIE.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HTAGVDFUIE.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\IPKGELNTQY.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JSDNGYCOWY.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KZWFNRXYKI.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KZWFNRXYKI.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\MMYRLSINVP.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NIKHQAIQAU.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NIKHQAIQAU.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NIKHQAIQAU.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWCXBPIUYI.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWCXBPIUYI.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWCXBPIUYI.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\OKWJNJSPWE.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\OVWVVIANZH.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SQRKHNBNYN.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\TWGTYTLCKI.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UFTNOTWEML.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XDPQCPDGHC.png
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.jpg
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZQIXMVQGAH.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZQIXMVQGAH.pdf
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZTGJILHXQB.docx
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZTGJILHXQB.mp3
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZTGJILHXQB.xlsx
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4
data
dropped
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528
data
dropped
C:\Users\user\AppData\Roaming\Skype\RootTools\roottools.conf
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMDocs.sav.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMGrpPrm.sav.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\UProof\CUSTOM.DIC.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\CameraRoll.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Documents.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Music.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Pictures.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\SavedPictures.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Videos.library-ms.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BQJUWOYRTO.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\BQJUWOYRTO.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\CURQNKVOIX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\EEGWXUHVUG.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\EEGWXUHVUG.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\EEGWXUHVUG.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\EIVQSAOTAQ.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\FGAWOVZUJP.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\GNJEVOXLLS.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\GNJEVOXLLS.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\GNJEVOXLLS.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HTAGVDFUIE.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\HTAGVDFUIE.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\IPKGELNTQY.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KZWFNRXYKI.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\KZWFNRXYKI.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\MMYRLSINVP.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NIKHQAIQAU.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NIKHQAIQAU.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NIKHQAIQAU.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWCXBPIUYI.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWCXBPIUYI.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWCXBPIUYI.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\OKWJNJSPWE.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\OVWVVIANZH.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\SQRKHNBNYN.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\TWGTYTLCKI.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UFTNOTWEML.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\XDPQCPDGHC.png.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.jpg.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZQIXMVQGAH.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZQIXMVQGAH.pdf.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZTGJILHXQB.docx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZTGJILHXQB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZTGJILHXQB.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Application Data\Skype\RootTools\roottools.conf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\CURQNKVOIX.jpg
data
dropped
C:\Users\user\Desktop\CURQNKVOIX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN.xlsx
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\CURQNKVOIX.jpg
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\CURQNKVOIX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\DVWHKMNFNN.docx
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\DVWHKMNFNN.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\IPKGELNTQY.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\NIKHQAIQAU.pdf
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\NIKHQAIQAU.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\SQRKHNBNYN.png
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\SQRKHNBNYN.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\YPSIACHYXW.xlsx
data
dropped
C:\Users\user\Desktop\DVWHKMNFNN\YPSIACHYXW.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE.pdf
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\FENIVHOIKN.png
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\HTAGVDFUIE.docx
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\HTAGVDFUIE.docx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\KZWFNRXYKI.pdf
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\KZWFNRXYKI.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\NIKHQAIQAU.jpg
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\NIKHQAIQAU.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\ZTGJILHXQB.mp3
data
dropped
C:\Users\user\Desktop\HTAGVDFUIE\ZTGJILHXQB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\JSDNGYCOWY.png
data
dropped
C:\Users\user\Desktop\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\Desktop\KATAXZVCPS.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\KATAXZVCPS\JSDNGYCOWY.png
data
dropped
C:\Users\user\Desktop\KATAXZVCPS\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\KATAXZVCPS\YPSIACHYXW.jpg
data
dropped
C:\Users\user\Desktop\KATAXZVCPS\YPSIACHYXW.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\LTKMYBSEYZ.png
data
dropped
C:\Users\user\Desktop\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\NIKHQAIQAU.pdf
data
dropped
C:\Users\user\Desktop\NIKHQAIQAU.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\NWTVCDUMOB.pdf.bgzq (copy)
data
dropped
C:\Users\user\Desktop\SQRKHNBNYN.png
data
dropped
C:\Users\user\Desktop\SQRKHNBNYN.png.bgzq (copy)
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN\KATAXZVCPS.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN\NWTVCDUMOB.mp3
data
dropped
C:\Users\user\Desktop\UMMBDNEQBN\NWTVCDUMOB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Desktop\YPSIACHYXW.jpg
data
dropped
C:\Users\user\Desktop\YPSIACHYXW.jpg.bgzq (copy)
data
dropped
C:\Users\user\Desktop\ZTGJILHXQB.mp3
data
dropped
C:\Users\user\Desktop\ZTGJILHXQB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\DVWHKMNFNN.docx
data
dropped
C:\Users\user\Documents\DVWHKMNFNN.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\DVWHKMNFNN.xlsx
data
dropped
C:\Users\user\Documents\DVWHKMNFNN.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\CURQNKVOIX.jpg
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\CURQNKVOIX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\IPKGELNTQY.mp3
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\IPKGELNTQY.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\YPSIACHYXW.xlsx
data
dropped
C:\Users\user\Documents\DVWHKMNFNN\YPSIACHYXW.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\HTAGVDFUIE.docx
data
dropped
C:\Users\user\Documents\HTAGVDFUIE.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\HTAGVDFUIE\HTAGVDFUIE.docx
data
dropped
C:\Users\user\Documents\HTAGVDFUIE\HTAGVDFUIE.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\HTAGVDFUIE\NIKHQAIQAU.jpg
data
dropped
C:\Users\user\Documents\HTAGVDFUIE\NIKHQAIQAU.jpg.bgzq (copy)
data
dropped
C:\Users\user\Documents\JSDNGYCOWY.png
data
dropped
C:\Users\user\Documents\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Documents\KATAXZVCPS.xlsx
data
dropped
C:\Users\user\Documents\KATAXZVCPS.xlsx.bgzq (copy)
data
dropped
C:\Users\user\Documents\KATAXZVCPS\NIKHQAIQAU.mp3
data
dropped
C:\Users\user\Documents\KATAXZVCPS\NIKHQAIQAU.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\KATAXZVCPS\YPSIACHYXW.jpg
data
dropped
C:\Users\user\Documents\KATAXZVCPS\YPSIACHYXW.jpg.bgzq (copy)
data
dropped
C:\Users\user\Documents\LTKMYBSEYZ.png
data
dropped
C:\Users\user\Documents\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Documents\NIKHQAIQAU.mp3
data
dropped
C:\Users\user\Documents\NIKHQAIQAU.mp3.bgzq (copy)
data
dropped
C:\Users\user\Documents\NWTVCDUMOB.pdf
data
dropped
C:\Users\user\Documents\NWTVCDUMOB.pdf.bgzq (copy)
data
dropped
C:\Users\user\Documents\UMMBDNEQBN.docx
data
dropped
C:\Users\user\Documents\UMMBDNEQBN.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\HTAGVDFUIE.pdf
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\HTAGVDFUIE.pdf.bgzq (copy)
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\LTKMYBSEYZ.png
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\LTKMYBSEYZ.png.bgzq (copy)
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\UMMBDNEQBN.docx
data
dropped
C:\Users\user\Documents\UMMBDNEQBN\UMMBDNEQBN.docx.bgzq (copy)
data
dropped
C:\Users\user\Documents\ZTGJILHXQB.mp3
data
dropped
C:\Users\user\Documents\ZTGJILHXQB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Downloads\CURQNKVOIX.jpg
data
dropped
C:\Users\user\Downloads\CURQNKVOIX.jpg.bgzq (copy)
data
dropped
C:\Users\user\Downloads\FENIVHOIKN.png
data
dropped
C:\Users\user\Downloads\FENIVHOIKN.png.bgzq (copy)
data
dropped
C:\Users\user\Downloads\JSDNGYCOWY.png
data
dropped
C:\Users\user\Downloads\JSDNGYCOWY.png.bgzq (copy)
data
dropped
C:\Users\user\Downloads\KZWFNRXYKI.pdf
data
dropped
C:\Users\user\Downloads\KZWFNRXYKI.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\NIKHQAIQAU.jpg
data
dropped
C:\Users\user\Downloads\NIKHQAIQAU.jpg.bgzq (copy)
data
dropped
C:\Users\user\Downloads\NIKHQAIQAU.pdf
data
dropped
C:\Users\user\Downloads\NIKHQAIQAU.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\NWTVCDUMOB.pdf
data
dropped
C:\Users\user\Downloads\NWTVCDUMOB.pdf.bgzq (copy)
data
dropped
C:\Users\user\Downloads\SQRKHNBNYN.png
data
dropped
C:\Users\user\Downloads\SQRKHNBNYN.png.bgzq (copy)
data
dropped
C:\Users\user\Downloads\YPSIACHYXW.jpg
data
dropped
C:\Users\user\Downloads\YPSIACHYXW.jpg.bgzq (copy)
data
dropped
C:\Users\user\Downloads\ZTGJILHXQB.mp3
data
dropped
C:\Users\user\Downloads\ZTGJILHXQB.mp3.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Bing.url
data
dropped
C:\Users\user\Favorites\Bing.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Google.url
data
dropped
C:\Users\user\Favorites\Google.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Twitter.url
data
dropped
C:\Users\user\Favorites\Twitter.url.bgzq (copy)
data
dropped
C:\Users\user\Favorites\Youtube.url
data
dropped
C:\Users\user\Favorites\Youtube.url.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeCMapFnt23.lst.bgzq (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeSysFnt23.lst.bgzq (copy)
PostScript document text
dropped
C:\Users\user\Local Settings\Adobe\Acrobat\DC\IconCacheAcro65536.dat.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Adobe\Color\ACECache11.lst.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jcp.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jtx.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00001.jrs.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00002.jrs.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\USStmp.jtx.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\store.jfm.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Comms\UnistoreDB\store.vol.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\brndlog.txt.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log.bgzq (copy)
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
dropped
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-UserConfig.log.bgzq (copy)
Unicode text, UTF-16, little-endian text, with very long lines (869), with no line terminators
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100094v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule1000v5.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100104v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100105v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100106v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100109v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100110v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100113v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100114v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100115v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100116v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100117v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100118v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100119v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100124v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100125v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100126v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100127v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100128v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100129v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100130v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100131v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100132v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100133v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100134v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100201v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule100202v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10450v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10625v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10626v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10627v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10781v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10784v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10800v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10801v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10802v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10803v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10807v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10808v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10818v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10819v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10820v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10821v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10822v2.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10829v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Microsoft\PenWorkspace\DiscoverCacheData.dat.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\wmsetup.log.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{02662522-698F-45B5-959E-0EC7B36298AD}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{139BFC28-947F-45CC-9DE4-AB0FCAEF6E9F}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{5871238D-BEB9-464A-931F-701C8F0FFB10}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\Temp\{5F969F84-5F34-4AF8-8D36-D6D6A1668750}.png.bgzq (copy)
data
dropped
C:\Users\user\Local Settings\bowsakkdestx.txt.bgzq (copy)
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms
data
dropped
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms.bgzq (copy)
data
dropped
There are 1463 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\mJVVW85CnW.exe
"C:\Users\user\Desktop\mJVVW85CnW.exe"
 malicious
C:\Users\user\Desktop\mJVVW85CnW.exe
"C:\Users\user\Desktop\mJVVW85CnW.exe"
 malicious
C:\Users\user\Desktop\mJVVW85CnW.exe
"C:\Users\user\Desktop\mJVVW85CnW.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\Desktop\mJVVW85CnW.exe
"C:\Users\user\Desktop\mJVVW85CnW.exe" --Admin IsNotAutoStart IsNotTask
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe --Task
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe --Task
 malicious
C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build2.exe
"C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build2.exe"
malicious
C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build2.exe
"C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build2.exe"
malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
"C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
"C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe
"C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe"
malicious
C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe
"C:\Users\user\AppData\Local\9d735f84-1d19-402a-bb6c-f54dc28e5a95\build3.exe"
malicious
C:\Windows\SysWOW64\schtasks.exe
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Windows\SysWOW64\schtasks.exe
/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
"C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe" --AutoStart
 malicious
C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe
"C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003\mJVVW85CnW.exe" --AutoStart
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
 malicious
C:\Windows\SysWOW64\icacls.exe
icacls "C:\Users\user\AppData\Local\a2ba404d-ff63-4198-ab65-c81226d8b003" /deny *S-1-1-0:(OI)(CI)(DE,DC)
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 19 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=true
58.151.148.90
 malicious
http://cajgtus.com/test2/get.php
malicious
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637
58.151.148.90
 malicious
https://duckduckgo.com/chrome_newtab
unknown
https://player.vimeo.com
unknown
http://cajgtus.com/files/1/build3.exe$run
unknown
https://assets.activity.windows.com/v1/assets
unknown
https://duckduckgo.com/ac/?q=
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199673019888
unknown
https://95.217.9.149/nss3.dllM
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=EyWBqDQS-6jg&a
unknown
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/privacy-sdx.win32.bundle.js.map/e3b0c4429
unknown
http://cajgtus.com/test2/get.phpL
unknown
https://api.2ip.ua/geo.json.
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
https://www.gstatic.cn/recaptcha/
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&amp;l=engl
unknown
http://cajgtus.com/files/1/build3.exerunM
unknown
https://95.217.9.149/msvcp140.dllde
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://www.youtube.com
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://95.217.9.149HDAFB
unknown
https://www.google.com
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17rer.exe
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&amp;l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&amp;
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&amp;l=english
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=SPpMitTYp6ku&amp;l=en
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
http://cajgtus.com/test2/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=trues
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=1_BxDGVvfXwv&am
unknown
https://s.ytimg.com;
unknown
http://www.reddit.com/
unknown
https://95.217.9.149/olders.vdf
unknown
https://steam.tv/
unknown
https://95.217.9.149/mozglue.dllZDB%
unknown
https://api.2ip.ua/x
unknown
http://sdfjhuz.com/dl/build2.exerun00
unknown
https://95.217.9.149/petd
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=c4UneKQJ
unknown
http://www.mozilla.com/en-US/blocklist/
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&amp;l=english
unknown
https://mozilla.org0/
unknown
http://store.steampowered.com/privacy_agreement/
unknown
http://cajgtus.com/files/1/build3.exe$runinstall020921_delay721_sec.exe0D
unknown
https://store.steampowered.com/points/shop/
unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
https://api.2ip.ua/geo.jsono
unknown
https://api.2ip.ua/M
unknown
http://sdfjhuz.com/dl/build2.exe$run
unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
unknown
https://api.2ip.ua/geo.jsone
unknown
https://sketchfab.com
unknown
https://steamcommunity.com/profiles/76561199673019888/badges
unknown
https://www.ecosia.org/newtab/
unknown
https://lv.queniujq.cn
unknown
https://clients3.google.com/generate_204
unknown
https://www.youtube.com/
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://95.217.9.149/softokn3.dllLEP$
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=ZVlkBFZXqRp1&amp;l=e
unknown
https://api.2ip.ua/geo.json9
unknown
http://www.youtube.com/
unknown
https://wetransfer.com/downloads/54cdfd152fe98eedb628a1f4ddb7076420240421150208/403a27
unknown
https://www.google.com/recaptcha/
unknown
https://checkout.steampowered.com/
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&amp;l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&amp;l=english
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&amp;l=englis
unknown
https://95.217.9.149/
95.217.9.149
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://store.steampowered.com/;
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
https://t.me/irfailAt
unknown
https://github.com/react-native-community/react-native-netinfo
unknown
https://95.217.9.149/mozglue.dll
95.217.9.149
https://95.217.9.149
unknown
https://help.steampowered.com/en/
unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
https://community.akamai.steamstatic.com/
unknown
http://www.amazon.com/
unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
unknown
http://www.twitter.com/
unknown
https://recaptcha.net/recaptcha/;
unknown
http://cajgtus.com/files/1/build3.exe$runALn
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
cajgtus.com
58.151.148.90
 malicious
sdfjhuz.com
190.218.33.18
 malicious
steamcommunity.com
104.106.57.101
api.2ip.ua
104.21.65.24

IPs

IP
Domain
Country
Malicious
190.218.33.18
sdfjhuz.com
Panama
malicious
58.151.148.90
cajgtus.com
Korea Republic of
malicious
104.106.57.101
steamcommunity.com
United States
95.217.9.149
unknown
Germany
104.21.65.24
api.2ip.ua
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SysHelper
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
SysHelper

Memdumps

Base Address
Regiontype
Protect
Malicious
9A2000
heap
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
8A0000
direct allocation
page execute and read and write
 malicious
5DF0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
3670000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
2420000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
5E10000
direct allocation
page execute and read and write
 malicious
5E10000
direct allocation
page execute and read and write
 malicious
5DF0000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
850000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
970000
direct allocation
page execute and read and write
 malicious
5E30000
direct allocation
page execute and read and write
 malicious
890000
direct allocation
page execute and read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
2320000
direct allocation
page execute and read and write
 malicious
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9B04000
heap
page read and write
319A000
heap
page read and write
31C0000
direct allocation
page read and write
2FB0000
remote allocation
page read and write
34C3000
heap
page read and write
9AC0000
heap
page read and write
2FB1000
heap
page read and write
97E0000
direct allocation
page read and write
9B1E000
heap
page read and write
9BCC000
heap
page read and write
9CAE000
heap
page read and write
9AB8000
heap
page read and write
3480000
heap
page read and write
97E0000
direct allocation
page read and write
1F0000
heap
page read and write
197000
stack
page read and write
2FB1000
heap
page read and write
435000
unkown
page execute read
27DE000
stack
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9BD8000
heap
page read and write
752000
heap
page read and write
411000
unkown
page readonly
9B4D000
heap
page read and write
610000
heap
page read and write
400000
unkown
page readonly
30F1000
heap
page read and write
30F1000
heap
page read and write
6AB000
heap
page read and write
345F000
heap
page read and write
3154000
heap
page read and write
2110000
heap
page read and write
9BCA000
heap
page read and write
4B2000
unkown
page read and write
9BC9000
heap
page read and write
400000
unkown
page readonly
2F5F000
stack
page read and write
435000
unkown
page execute read
A60000
heap
page read and write
9C4B000
heap
page read and write
31C0000
direct allocation
page read and write
3570000
direct allocation
page read and write
33BC000
heap
page read and write
3158000
heap
page read and write
31C0000
direct allocation
page read and write
4190000
heap
page read and write
36B0000
direct allocation
page read and write
401000
unkown
page execute read
9AE1000
heap
page read and write
4160000
heap
page read and write
3453000
heap
page read and write
9ADC000
heap
page read and write
B4F000
stack
page read and write
3193000
heap
page read and write
1A04000
unkown
page readonly
366F000
stack
page read and write
9B19000
heap
page read and write
31A0000
heap
page read and write
2BBE000
stack
page read and write
9B3D000
heap
page read and write
2FB1000
heap
page read and write
9C47000
heap
page read and write
435000
unkown
page execute read
400000
unkown
page readonly
9BED000
heap
page read and write
9AB1000
heap
page read and write
14EAD000
stack
page read and write
C0F000
stack
page read and write
A1F000
stack
page read and write
3155000
heap
page read and write
3570000
direct allocation
page read and write
9B48000
heap
page read and write
401000
unkown
page execute read
3563000
heap
page read and write
420000
unkown
page write copy
A6B000
heap
page read and write
9B84000
heap
page read and write
3151000
heap
page read and write
3434000
heap
page read and write
9C51000
heap
page read and write
2BAE000
stack
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
9805000
direct allocation
page read and write
344E000
heap
page read and write
9BD5000
heap
page read and write
3441000
heap
page read and write
9B3C000
heap
page read and write
9BAD000
heap
page read and write
9B11000
heap
page read and write
9BB7000
heap
page read and write
420000
unkown
page write copy
313D000
heap
page read and write
34B6000
heap
page read and write
9B19000
heap
page read and write
33E0000
heap
page read and write
4680000
heap
page read and write
2A20000
heap
page read and write
9CAC000
heap
page read and write
97E0000
direct allocation
page read and write
400000
unkown
page readonly
4100000
heap
page read and write
9B9000
heap
page read and write
9B8E000
heap
page read and write
337C000
heap
page read and write
9BE6000
heap
page read and write
1F0000
heap
page read and write
A7C000
heap
page read and write
9C58000
heap
page read and write
420000
unkown
page write copy
97E0000
direct allocation
page read and write
34A8000
heap
page read and write
9B3C000
heap
page read and write
9BA9000
heap
page read and write
9C67000
heap
page read and write
9C40000
heap
page read and write
9B82000
heap
page read and write
401000
unkown
page execute read
344C000
heap
page read and write
5D7000
heap
page read and write
7E6000
unkown
page read and write
31E1000
direct allocation
page read and write
9C3C000
heap
page read and write
A99000
heap
page read and write
40A0000
unkown
page readonly
3570000
direct allocation
page read and write
97E0000
direct allocation
page read and write
7E6000
unkown
page read and write
20E2D000
direct allocation
page execute read
19B000
stack
page read and write
31C0000
direct allocation
page read and write
9C58000
heap
page read and write
359F000
heap
page read and write
31C0000
direct allocation
page read and write
9AB1000
heap
page read and write
912000
heap
page read and write
31C0000
direct allocation
page read and write
9B03000
heap
page read and write
97E0000
direct allocation
page read and write
A97000
heap
page read and write
3570000
direct allocation
page read and write
420000
unkown
page write copy
9BA3000
heap
page read and write
9C4B000
heap
page read and write
450000
heap
page read and write
401000
unkown
page execute read
3425000
heap
page read and write
3502000
heap
page read and write
8D0000
heap
page read and write
C8F000
stack
page read and write
263E000
stack
page read and write
529000
remote allocation
page execute and read and write
19D000
stack
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
20E6A000
direct allocation
page readonly
96E000
stack
page read and write
438000
unkown
page write copy
97E0000
direct allocation
page read and write
41A000
unkown
page write copy
31C0000
direct allocation
page read and write
701000
heap
page read and write
3130000
heap
page read and write
33CD000
heap
page read and write
31C0000
direct allocation
page read and write
668000
heap
page read and write
A55000
heap
page read and write
738000
heap
page read and write
3150000
heap
page read and write
31C0000
direct allocation
page read and write
9B5F000
heap
page read and write
31C9000
direct allocation
page read and write
947000
heap
page read and write
940000
heap
page read and write
64E000
stack
page read and write
345F000
heap
page read and write
31C0000
direct allocation
page read and write
34B1000
heap
page read and write
A90000
heap
page read and write
3491000
heap
page read and write
2DB0000
heap
page read and write
733000
heap
page read and write
9ADC000
heap
page read and write
30BD000
heap
page read and write
9BEE000
heap
page read and write
447000
unkown
page read and write
7E6000
unkown
page read and write
97E0000
direct allocation
page read and write
9B60000
heap
page read and write
9C000
stack
page read and write
97E0000
direct allocation
page read and write
30E1000
heap
page read and write
A80000
heap
page execute and read and write
30DF000
heap
page read and write
7E9000
unkown
page readonly
97E0000
direct allocation
page read and write
9AB1000
heap
page read and write
31C0000
direct allocation
page read and write
420000
unkown
page write copy
438000
unkown
page write copy
9AD7000
heap
page read and write
3570000
direct allocation
page read and write
9BED000
heap
page read and write
A9E000
stack
page read and write
31C0000
direct allocation
page read and write
A99000
heap
page read and write
9B6F000
heap
page read and write
9C4B000
heap
page read and write
A54000
heap
page read and write
9BD9000
heap
page read and write
9AC0000
heap
page read and write
31C0000
direct allocation
page read and write
4130000
heap
page read and write
31A8000
heap
page read and write
9ABD000
heap
page read and write
40FE000
stack
page read and write
40A0000
unkown
page readonly
9C41000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
2F70000
heap
page read and write
3570000
direct allocation
page read and write
9B5B000
heap
page read and write
9AD0000
heap
page read and write
6F22E000
unkown
page read and write
3593000
heap
page read and write
31C0000
direct allocation
page read and write
401000
unkown
page execute read
9B2000
heap
page read and write
97E0000
direct allocation
page read and write
9B82000
heap
page read and write
400000
unkown
page readonly
3193000
heap
page read and write
3163000
heap
page read and write
9B19000
heap
page read and write
400000
unkown
page readonly
9C4B000
heap
page read and write
3151000
heap
page read and write
4180000
heap
page read and write
97E0000
direct allocation
page read and write
6E8000
heap
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
3570000
direct allocation
page read and write
51E000
stack
page read and write
1A04000
unkown
page readonly
9BE8000
heap
page read and write
411000
unkown
page readonly
A77000
heap
page read and write
9BD2000
heap
page read and write
97E0000
direct allocation
page read and write
A80000
heap
page read and write
349A000
heap
page read and write
751000
heap
page read and write
9DC000
heap
page read and write
701000
heap
page read and write
3338000
heap
page read and write
44CE000
stack
page read and write
941000
heap
page read and write
9B000
stack
page read and write
C8F000
stack
page read and write
3455000
heap
page read and write
A78000
heap
page read and write
9B7E000
heap
page read and write
41A000
unkown
page read and write
30EA000
heap
page read and write
9C0E000
heap
page read and write
2FB1000
heap
page read and write
7AE000
stack
page read and write
3158000
heap
page read and write
63F000
remote allocation
page execute and read and write
198000
stack
page read and write
3424000
heap
page read and write
28FE000
stack
page read and write
434000
remote allocation
page execute and read and write
31C0000
direct allocation
page read and write
77F000
stack
page read and write
1C90000
heap
page read and write
1F0000
heap
page read and write
401000
unkown
page execute read
9BCF000
heap
page read and write
648000
heap
page read and write
AB2000
heap
page read and write
97E0000
direct allocation
page read and write
9AE1000
heap
page read and write
9C000
stack
page read and write
A54000
heap
page read and write
9C8D000
heap
page read and write
3570000
direct allocation
page read and write
9BFC000
heap
page read and write
97E0000
direct allocation
page read and write
34B1000
heap
page read and write
9B13000
heap
page read and write
9B11000
heap
page read and write
3102000
heap
page read and write
97E0000
direct allocation
page read and write
9B7F000
heap
page read and write
31C0000
direct allocation
page read and write
435000
unkown
page execute read
9C97000
heap
page read and write
97E0000
direct allocation
page read and write
9CAE000
heap
page read and write
3450000
heap
page read and write
409E000
unkown
page read and write
3593000
heap
page read and write
411000
unkown
page readonly
2FB0000
remote allocation
page read and write
9B2A000
heap
page read and write
97E0000
direct allocation
page read and write
3194000
heap
page read and write
21084000
heap
page read and write
3593000
heap
page read and write
34A8000
heap
page read and write
9AE7000
heap
page read and write
9C30000
heap
page read and write
30FD000
heap
page read and write
4298000
heap
page read and write
3150000
heap
page read and write
9AFC000
heap
page read and write
282F000
stack
page read and write
9C3C000
heap
page read and write
3434000
heap
page read and write
9AC4000
heap
page read and write
9B22000
heap
page read and write
9C45000
heap
page read and write
A6B000
heap
page read and write
420000
unkown
page write copy
19D000
stack
page read and write
401000
unkown
page execute read
34A0000
heap
page read and write
400000
unkown
page readonly
9BA1000
heap
page read and write
9B6F000
heap
page read and write
97E0000
direct allocation
page read and write
193000
stack
page read and write
29FF000
stack
page read and write
9AE8000
heap
page read and write
317D000
heap
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
578000
heap
page read and write
9C45000
heap
page read and write
30F3000
heap
page read and write
9B8A000
heap
page read and write
9CA1000
heap
page read and write
319D000
heap
page read and write
2A3D000
stack
page read and write
3373000
heap
page read and write
30ED000
heap
page read and write
19B000
stack
page read and write
9AF5000
heap
page read and write
87F000
stack
page read and write
1C0000
heap
page read and write
9B6E000
heap
page read and write
2FB1000
heap
page read and write
9AFC000
heap
page read and write
9C0E000
heap
page read and write
401000
unkown
page execute read
9AF4000
heap
page read and write
9C99000
heap
page read and write
9BB7000
heap
page read and write
3154000
heap
page read and write
273F000
stack
page read and write
31C0000
direct allocation
page read and write
9B82000
heap
page read and write
6020000
heap
page read and write
2CEE000
stack
page read and write
33F0000
heap
page read and write
9B7E000
heap
page read and write
97E0000
direct allocation
page read and write
346F000
heap
page read and write
9C51000
heap
page read and write
20AE1000
heap
page read and write
A77000
heap
page read and write
411000
unkown
page readonly
580000
heap
page read and write
3430000
heap
page read and write
1747E000
stack
page read and write
9AC0000
heap
page read and write
9AE1000
heap
page read and write
2260000
heap
page read and write
A77000
heap
page read and write
9B3B000
heap
page read and write
97E5000
direct allocation
page read and write
97E0000
direct allocation
page read and write
A67000
heap
page read and write
3570000
direct allocation
page read and write
33BD000
heap
page read and write
9B02000
heap
page read and write
31C0000
direct allocation
page read and write
30EE000
heap
page read and write
30CB000
heap
page read and write
31C0000
direct allocation
page read and write
8E6000
heap
page read and write
25C0000
heap
page read and write
29FF000
stack
page read and write
3199000
heap
page read and write
30ED000
heap
page read and write
33C6000
heap
page read and write
3415000
heap
page read and write
97E0000
direct allocation
page read and write
30F0000
heap
page read and write
3570000
direct allocation
page read and write
A5F000
heap
page read and write
3469000
heap
page read and write
9AF000
stack
page read and write
9C56000
heap
page read and write
9CC000
heap
page read and write
2FB1000
heap
page read and write
6C9CF000
unkown
page write copy
97E0000
direct allocation
page read and write
9B29000
heap
page read and write
9C4A000
heap
page read and write
3553000
heap
page read and write
3570000
direct allocation
page read and write
870000
heap
page read and write
A54000
heap
page read and write
70A000
heap
page read and write
2AA0000
heap
page read and write
9C80000
heap
page read and write
401000
unkown
page execute read
AC7000
heap
page read and write
9B86000
heap
page read and write
752000
heap
page read and write
9B87000
heap
page read and write
4660000
heap
page read and write
B49000
heap
page read and write
53BF000
stack
page read and write
40C0000
heap
page read and write
345F000
heap
page read and write
A80000
heap
page read and write
9B8E000
heap
page read and write
25E0000
heap
page read and write
344C000
heap
page read and write
22D0000
heap
page read and write
97E0000
direct allocation
page read and write
82E000
stack
page read and write
7E9000
unkown
page readonly
3570000
direct allocation
page read and write
9B19000
heap
page read and write
31C0000
direct allocation
page read and write
3163000
heap
page read and write
30F3000
heap
page read and write
3115000
heap
page read and write
31C0000
direct allocation
page read and write
9B8A000
heap
page read and write
311C000
heap
page read and write
31C0000
direct allocation
page read and write
3141000
heap
page read and write
9B2E000
heap
page read and write
9BFD000
heap
page read and write
9B19000
heap
page read and write
A77000
heap
page read and write
A70000
heap
page read and write
9C11000
heap
page read and write
A23000
heap
page read and write
3570000
direct allocation
page read and write
3158000
heap
page read and write
410000
unkown
page readonly
31C0000
direct allocation
page read and write
462F000
stack
page read and write
31C0000
direct allocation
page read and write
A99000
heap
page read and write
9B7E000
heap
page read and write
9B7E000
heap
page read and write
1F0000
heap
page read and write
97E0000
direct allocation
page read and write
8E8000
heap
page read and write
60A0000
heap
page read and write
97E0000
direct allocation
page read and write
4E0000
heap
page read and write
31C0000
direct allocation
page read and write
9BA2000
heap
page read and write
317F000
heap
page read and write
3458000
heap
page read and write
24DF000
stack
page read and write
9ABD000
heap
page read and write
3570000
direct allocation
page read and write
9B8F000
heap
page read and write
41E000
unkown
page write copy
30CB000
heap
page read and write
400000
unkown
page readonly
3454000
heap
page read and write
A75000
heap
page read and write
1B80000
heap
page read and write
4261000
heap
page execute and read and write
400000
unkown
page readonly
3151000
heap
page read and write
3193000
heap
page read and write
31C0000
direct allocation
page read and write
800000
heap
page read and write
33CD000
heap
page read and write
97E0000
direct allocation
page read and write
9AC0000
heap
page read and write
33F0000
heap
page read and write
33F1000
heap
page read and write
9C4A000
heap
page read and write
3380000
heap
page read and write
400000
unkown
page readonly
31C0000
direct allocation
page read and write
9B86000
heap
page read and write
3150000
heap
page read and write
3450000
heap
page read and write
BB2000
heap
page read and write
9AB1000
heap
page read and write
2FB0000
heap
page read and write
948000
heap
page read and write
3373000
heap
page read and write
9B7E000
heap
page read and write
3158000
heap
page read and write
97E0000
direct allocation
page read and write
9B3C000
heap
page read and write
708000
heap
page read and write
3594000
heap
page read and write
9BDB000
heap
page read and write
2CAE000
stack
page read and write
9B7E000
heap
page read and write
31C0000
direct allocation
page read and write
9BE5000
heap
page read and write
1E510000
heap
page read and write
31C0000
direct allocation
page read and write
9C56000
heap
page read and write
A67000
heap
page read and write
9B06000
heap
page read and write
3453000
heap
page read and write
1F0000
heap
page read and write
3199000
heap
page read and write
34A7000
heap
page read and write
401000
unkown
page execute read
97E0000
direct allocation
page read and write
8EC000
heap
page read and write
5CE000
stack
page read and write
3570000
direct allocation
page read and write
9B000
stack
page read and write
9C70000
heap
page read and write
411000
unkown
page readonly
3141000
heap
page read and write
1F0000
heap
page read and write
40A0000
unkown
page readonly
97E0000
direct allocation
page read and write
401000
unkown
page execute read
21010000
heap
page read and write
826000
heap
page read and write
9B15000
heap
page read and write
420E000
stack
page read and write
9C45000
heap
page read and write
3141000
heap
page read and write
9C000
stack
page read and write
9AF6000
heap
page read and write
9C4B000
heap
page read and write
6040000
heap
page read and write
344C000
heap
page read and write
2200000
heap
page read and write
9C58000
heap
page read and write
30CB000
heap
page read and write
A60000
heap
page read and write
9BC000
heap
page execute and read and write
97E0000
direct allocation
page read and write
1C9A000
heap
page read and write
33ED000
heap
page read and write
3150000
heap
page read and write
31C0000
direct allocation
page read and write
9B39000
heap
page read and write
725000
heap
page read and write
34A7000
heap
page read and write
57E000
stack
page read and write
9B20000
heap
page read and write
31C0000
direct allocation
page read and write
9B82000
heap
page read and write
30B1000
heap
page read and write
9B57000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9C63000
heap
page read and write
97E0000
direct allocation
page read and write
438000
unkown
page write copy
19E000
stack
page read and write
9B7E000
heap
page read and write
9B03000
heap
page read and write
30EE000
heap
page read and write
AC0000
heap
page read and write
30E1000
heap
page read and write
2147A000
heap
page read and write
6D7000
heap
page read and write
21093000
heap
page read and write
9CAE000
heap
page read and write
3198000
heap
page read and write
435000
unkown
page execute read
9AC5000
heap
page read and write
9B80000
heap
page read and write
9BFD000
heap
page read and write
1BF5E000
stack
page read and write
31A8000
heap
page read and write
9AB5000
heap
page read and write
6C7F0000
unkown
page readonly
30EE000
heap
page read and write
9C51000
heap
page read and write
9C53000
heap
page read and write
51A000
remote allocation
page execute and read and write
24FE000
stack
page read and write
78F000
stack
page read and write
97E0000
direct allocation
page read and write
9BD0000
heap
page read and write
9B3C000
heap
page read and write
7E9000
unkown
page readonly
2350000
direct allocation
page read and write
733000
heap
page read and write
9AB5000
heap
page read and write
3570000
direct allocation
page read and write
6C7F1000
unkown
page execute read
193000
stack
page read and write
97E0000
direct allocation
page read and write
34D4000
heap
page read and write
9C000
stack
page read and write
438000
unkown
page write copy
344E000
heap
page read and write
3158000
heap
page read and write
3199000
heap
page read and write
41A000
unkown
page write copy
820000
heap
page read and write
3470000
heap
page read and write
3570000
direct allocation
page read and write
9B9F000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
438000
unkown
page write copy
9B8F000
heap
page read and write
31C0000
direct allocation
page read and write
560000
heap
page read and write
870000
heap
page read and write
97E0000
direct allocation
page read and write
A80000
heap
page read and write
A4F000
heap
page read and write
440000
heap
page read and write
9ABD000
heap
page read and write
97E8000
direct allocation
page read and write
38A0000
heap
page read and write
9BD3000
heap
page read and write
97E0000
direct allocation
page read and write
9C30000
heap
page read and write
4260000
direct allocation
page read and write
9B6E000
heap
page read and write
3438000
heap
page read and write
9C6F000
heap
page read and write
9B1E000
heap
page read and write
9AEE000
heap
page read and write
2D20000
remote allocation
page read and write
9BAA000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
8B7000
heap
page read and write
9B7E000
heap
page read and write
82D000
heap
page read and write
401000
unkown
page execute read
9BDA000
heap
page read and write
4330000
heap
page read and write
6F1A0000
unkown
page readonly
72C000
heap
page read and write
3710000
heap
page read and write
9DE000
heap
page read and write
28AF000
stack
page read and write
31C0000
direct allocation
page read and write
400000
unkown
page readonly
9BD0000
heap
page read and write
31C0000
direct allocation
page read and write
770000
heap
page read and write
34C3000
heap
page read and write
9C000
stack
page read and write
3570000
direct allocation
page read and write
31A0000
heap
page read and write
9BFD000
heap
page read and write
411000
unkown
page readonly
97E0000
direct allocation
page read and write
800000
heap
page read and write
313E000
heap
page read and write
3493000
heap
page read and write
529000
remote allocation
page execute and read and write
57E000
stack
page read and write
870000
heap
page read and write
30F0000
heap
page read and write
41E000
unkown
page write copy
2A6D000
stack
page read and write
9BED000
heap
page read and write
31C0000
direct allocation
page read and write
9B7F000
heap
page read and write
9B87000
heap
page read and write
9BED000
heap
page read and write
401000
unkown
page execute read
9B82000
heap
page read and write
C57000
heap
page read and write
9AB6000
heap
page read and write
735000
heap
page read and write
9BAC000
heap
page read and write
9C40000
heap
page read and write
345F000
heap
page read and write
20AE0000
heap
page read and write
9B85000
heap
page read and write
9B99000
heap
page read and write
9AE8000
heap
page read and write
344C000
heap
page read and write
400000
unkown
page readonly
3454000
heap
page read and write
520000
heap
page read and write
3163000
heap
page read and write
41A000
unkown
page read and write
193000
stack
page read and write
3141000
heap
page read and write
447000
unkown
page read and write
33FC000
heap
page read and write
31C0000
direct allocation
page read and write
6D0000
heap
page read and write
3570000
direct allocation
page read and write
2FB0000
heap
page read and write
30F1000
heap
page read and write
B8E000
stack
page read and write
97E0000
direct allocation
page read and write
51E000
stack
page read and write
30F1000
heap
page read and write
9C77000
heap
page read and write
97E0000
direct allocation
page read and write
9BC2000
heap
page read and write
30EA000
heap
page read and write
9B3C000
heap
page read and write
231E000
stack
page read and write
529000
remote allocation
page execute and read and write
198000
stack
page read and write
708000
heap
page read and write
9B8A000
heap
page read and write
9B7E000
heap
page read and write
9C4F000
heap
page read and write
3146000
heap
page read and write
312E000
heap
page read and write
9ABC000
heap
page read and write
41A000
unkown
page read and write
193000
stack
page read and write
30F1000
heap
page read and write
9B000
stack
page read and write
3563000
heap
page read and write
9C4B000
heap
page read and write
40A0000
unkown
page readonly
435000
unkown
page execute read
A5E000
stack
page read and write
9B48000
heap
page read and write
41A000
unkown
page write copy
3331000
heap
page read and write
9CAE000
heap
page read and write
9C67000
heap
page read and write
9CAE000
heap
page read and write
447000
unkown
page read and write
9BA5000
heap
page read and write
A5F000
heap
page read and write
31C0000
direct allocation
page read and write
950000
heap
page execute and read and write
9BE000
heap
page read and write
1F0000
heap
page read and write
31C0000
direct allocation
page read and write
1B4E000
stack
page read and write
9C3D000
heap
page read and write
9B8A000
heap
page read and write
3199000
heap
page read and write
9B2A000
heap
page read and write
3570000
direct allocation
page read and write
9B56000
heap
page read and write
9B7E000
heap
page read and write
40FE000
stack
page read and write
312D000
heap
page read and write
30EE000
heap
page read and write
2720000
heap
page read and write
1B00000
heap
page read and write
9AB8000
heap
page read and write
9ABC000
heap
page read and write
35A0000
trusted library allocation
page read and write
8C0000
heap
page read and write
9BDB000
heap
page read and write
31C0000
direct allocation
page read and write
A7C000
heap
page read and write
438000
unkown
page write copy
447000
unkown
page read and write
9B3C000
heap
page read and write
197000
stack
page read and write
949000
heap
page read and write
33E0000
heap
page read and write
19C000
stack
page read and write
30F1000
heap
page read and write
A9B000
heap
page read and write
807000
heap
page read and write
41AA000
heap
page read and write
9BE9000
heap
page read and write
30B0000
heap
page read and write
9C6F000
heap
page read and write
9B7F000
heap
page read and write
9C63000
heap
page read and write
52B000
remote allocation
page execute and read and write
400000
unkown
page readonly
9C48000
heap
page read and write
706000
heap
page read and write
9C4F000
heap
page read and write
31C0000
direct allocation
page read and write
432E000
stack
page read and write
9AB1000
heap
page read and write
9B7E000
heap
page read and write
687000
heap
page read and write
1F0000
heap
page read and write
97E0000
direct allocation
page read and write
347F000
heap
page read and write
9B1A000
heap
page read and write
9B7E000
heap
page read and write
30CD000
heap
page read and write
97E0000
direct allocation
page read and write
19C000
stack
page read and write
97E0000
direct allocation
page read and write
3190000
heap
page read and write
A99000
heap
page read and write
9BA5000
heap
page read and write
A98000
heap
page read and write
7E9000
unkown
page readonly
313E000
heap
page read and write
315F000
heap
page read and write
9B8E000
heap
page read and write
410000
heap
page read and write
9AB1000
heap
page read and write
9B39000
heap
page read and write
739000
heap
page read and write
9C4A000
heap
page read and write
3199000
heap
page read and write
30ED000
heap
page read and write
414E000
stack
page read and write
9B09000
heap
page read and write
97E0000
direct allocation
page read and write
33F4000
heap
page read and write
1A02000
unkown
page read and write
31C0000
direct allocation
page read and write
9BE6000
heap
page read and write
20E6D000
direct allocation
page readonly
31AC000
heap
page read and write
7E9000
unkown
page readonly
9AB1000
heap
page read and write
28FE000
stack
page read and write
B3F000
stack
page read and write
8EB000
heap
page read and write
51A000
remote allocation
page execute and read and write
4B2000
unkown
page read and write
33C3000
heap
page read and write
51A000
remote allocation
page execute and read and write
9C47000
heap
page read and write
9AF3000
heap
page read and write
A74000
heap
page read and write
420000
unkown
page write copy
9AB0000
heap
page read and write
8DF000
heap
page read and write
34FB000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
70C000
heap
page read and write
97E0000
direct allocation
page read and write
411000
unkown
page readonly
9C4A000
heap
page read and write
2FB0000
remote allocation
page read and write
97E3000
direct allocation
page read and write
31C0000
direct allocation
page read and write
312D000
heap
page read and write
30F3000
heap
page read and write
410000
unkown
page readonly
34E3000
heap
page read and write
97E0000
direct allocation
page read and write
30BD000
heap
page read and write
438000
unkown
page write copy
2FB0000
remote allocation
page read and write
40A0000
unkown
page readonly
9BD9000
heap
page read and write
68E000
stack
page read and write
A05000
heap
page read and write
9AFF000
heap
page read and write
5D0000
heap
page read and write
401000
unkown
page execute read
30DF000
heap
page read and write
2BD0000
heap
page read and write
9B13000
heap
page read and write
4F0000
heap
page read and write
A6B000
heap
page read and write
690000
heap
page read and write
341C000
heap
page read and write
680000
heap
page read and write
31C0000
direct allocation
page read and write
3496000
heap
page read and write
9B7E000
heap
page read and write
9C77000
heap
page read and write
9C3C000
heap
page read and write
A95000
heap
page read and write
A4F000
heap
page read and write
31C0000
direct allocation
page read and write
2570000
heap
page read and write
31C0000
direct allocation
page read and write
319D000
heap
page read and write
D0F000
stack
page read and write
195000
stack
page read and write
3500000
heap
page read and write
2A2F000
stack
page read and write
409E000
unkown
page read and write
31C0000
direct allocation
page read and write
9BDE000
heap
page read and write
5F1000
remote allocation
page execute and read and write
590000
heap
page read and write
52B000
remote allocation
page execute and read and write
9C0E000
heap
page read and write
420000
unkown
page write copy
520000
heap
page read and write
400000
unkown
page readonly
2E71000
heap
page read and write
30DF000
heap
page read and write
A97000
heap
page read and write
3570000
direct allocation
page read and write
7E9000
unkown
page readonly
7E9000
unkown
page readonly
400000
unkown
page readonly
97E0000
direct allocation
page read and write
A93000
heap
page read and write
33C6000
heap
page read and write
9B86000
heap
page read and write
33D1000
heap
page read and write
9B97000
heap
page read and write
1296E000
stack
page read and write
3570000
direct allocation
page read and write
198000
stack
page read and write
313F000
heap
page read and write
807000
heap
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
344D000
heap
page read and write
401000
unkown
page execute read
34B4000
heap
page read and write
344C000
heap
page read and write
2570000
heap
page read and write
9C67000
heap
page read and write
9AB1000
heap
page read and write
31C0000
direct allocation
page read and write
30FC000
heap
page read and write
3570000
direct allocation
page read and write
A5B000
heap
page read and write
5CE000
stack
page read and write
9B7E000
heap
page read and write
97E0000
direct allocation
page read and write
9C43000
heap
page read and write
452F000
stack
page read and write
31C0000
direct allocation
page read and write
33FC000
heap
page read and write
A96000
heap
page read and write
103AF000
stack
page read and write
31C0000
direct allocation
page read and write
9810000
trusted library allocation
page read and write
34DB000
heap
page read and write
9C000
stack
page read and write
311D000
heap
page read and write
30B0000
heap
page read and write
30C3000
heap
page read and write
9B5E000
heap
page read and write
3570000
direct allocation
page read and write
9B7E000
heap
page read and write
31C0000
direct allocation
page read and write
3194000
heap
page read and write
30ED000
heap
page read and write
9B3A000
heap
page read and write
31C0000
direct allocation
page read and write
888000
heap
page read and write
9B80000
heap
page read and write
9AB5000
heap
page read and write
2450000
heap
page read and write
9B9C000
heap
page read and write
424E000
stack
page read and write
193000
stack
page read and write
346F000
heap
page read and write
9B86000
heap
page read and write
31C0000
direct allocation
page read and write
9BBB000
heap
page read and write
41A000
unkown
page write copy
313D000
heap
page read and write
72C000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
A3C000
heap
page read and write
960000
heap
page execute and read and write
31C0000
direct allocation
page read and write
97FE000
direct allocation
page read and write
3199000
heap
page read and write
5D5000
heap
page read and write
A6B000
heap
page read and write
30ED000
heap
page read and write
9B4D000
heap
page read and write
410000
unkown
page readonly
9C90000
heap
page read and write
570000
heap
page read and write
9BCF000
heap
page read and write
31C0000
direct allocation
page read and write
2FB1000
heap
page read and write
400000
unkown
page readonly
31AE000
heap
page read and write
9C4A000
heap
page read and write
3502000
heap
page read and write
3570000
direct allocation
page read and write
A93000
heap
page read and write
312D000
heap
page read and write
4560000
heap
page read and write
9B92000
heap
page read and write
31C0000
direct allocation
page read and write
30DF000
heap
page read and write
3135000
heap
page read and write
3450000
heap
page read and write
9BBB000
heap
page read and write
40A0000
unkown
page readonly
A74000
heap
page read and write
811000
heap
page read and write
9ABA000
heap
page read and write
2FB0000
remote allocation
page read and write
9BE5000
heap
page read and write
3150000
heap
page read and write
33ED000
heap
page read and write
9BE5000
heap
page read and write
9AC0000
heap
page read and write
466F000
stack
page read and write
3150000
heap
page read and write
4190000
heap
page read and write
31AC000
heap
page read and write
343D000
heap
page read and write
3570000
direct allocation
page read and write
33D4000
heap
page read and write
401000
unkown
page execute read
313E000
heap
page read and write
279F000
stack
page read and write
41A000
unkown
page write copy
2ACA000
heap
page read and write
9BB7000
heap
page read and write
723000
heap
page read and write
A93000
heap
page read and write
9B2000
heap
page read and write
3379000
heap
page read and write
9B86000
heap
page read and write
411000
unkown
page readonly
8D0000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
2FC0000
heap
page read and write
9B2A000
heap
page read and write
41A000
unkown
page write copy
2FB0000
remote allocation
page read and write
9C30000
heap
page read and write
A57000
heap
page read and write
31C0000
direct allocation
page read and write
9C000
stack
page read and write
9AC0000
heap
page read and write
9AE7000
heap
page read and write
3434000
heap
page read and write
31C0000
direct allocation
page read and write
346B000
heap
page read and write
1F0000
heap
page read and write
3199000
heap
page read and write
9B86000
heap
page read and write
3150000
heap
page read and write
33C6000
heap
page read and write
9A000
stack
page read and write
400000
unkown
page readonly
9ABD000
heap
page read and write
31C0000
direct allocation
page read and write
A96000
heap
page read and write
2D20000
remote allocation
page read and write
31C0000
direct allocation
page read and write
860000
heap
page read and write
A7C000
heap
page read and write
9ACC000
heap
page read and write
DE6F000
stack
page read and write
31C0000
direct allocation
page read and write
319A000
heap
page read and write
33E1000
heap
page read and write
400000
unkown
page readonly
2470000
heap
page read and write
555A000
heap
page read and write
2A6E000
stack
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9BE9000
heap
page read and write
2FB0000
remote allocation
page read and write
31C0000
direct allocation
page read and write
3193000
heap
page read and write
A6C000
heap
page read and write
9B7E000
heap
page read and write
9B1F000
heap
page read and write
31C0000
direct allocation
page read and write
687000
heap
page read and write
9C4B000
heap
page read and write
2CBF000
stack
page read and write
7E9000
unkown
page readonly
9B7F000
heap
page read and write
9BD0000
heap
page read and write
3114000
heap
page read and write
9C97000
heap
page read and write
19D000
stack
page read and write
31A0000
heap
page read and write
272F000
stack
page read and write
9BE000
heap
page read and write
A97000
heap
page read and write
2FB1000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
3199000
heap
page read and write
8AE000
stack
page read and write
3510000
heap
page read and write
9C54000
heap
page read and write
880000
heap
page read and write
3105000
heap
page read and write
9B1A000
heap
page read and write
317D000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
2FB1000
heap
page read and write
31A9000
heap
page read and write
9B7E000
heap
page read and write
4290000
heap
page read and write
31C0000
direct allocation
page read and write
9B92000
heap
page read and write
514000
remote allocation
page execute and read and write
6B9000
heap
page read and write
A67000
heap
page read and write
9B80000
heap
page read and write
9B86000
heap
page read and write
3570000
direct allocation
page read and write
30EF000
heap
page read and write
20C21000
direct allocation
page execute read
97E0000
direct allocation
page read and write
7E6000
unkown
page read and write
9B7E000
heap
page read and write
9BEE000
heap
page read and write
34FB000
heap
page read and write
30F2000
heap
page read and write
9CAC000
heap
page read and write
9B000
stack
page read and write
9C73000
heap
page read and write
97E0000
direct allocation
page read and write
3570000
direct allocation
page read and write
30E1000
heap
page read and write
9B32000
heap
page read and write
9B7E000
heap
page read and write
335C000
stack
page read and write
40A0000
unkown
page readonly
401000
unkown
page execute read
3570000
direct allocation
page read and write
9AB1000
heap
page read and write
420000
unkown
page write copy
400000
unkown
page readonly
1F0000
heap
page read and write
4B2000
unkown
page read and write
9BE5000
heap
page read and write
A8A000
heap
page read and write
8D3000
heap
page read and write
9BD5000
heap
page read and write
A2F000
heap
page read and write
31C0000
direct allocation
page read and write
435000
unkown
page execute read
97E0000
direct allocation
page read and write
19B000
stack
page read and write
3570000
direct allocation
page read and write
4B2000
unkown
page read and write
3196000
heap
page read and write
A58000
heap
page read and write
52B000
remote allocation
page execute and read and write
3163000
heap
page read and write
3105000
heap
page read and write
9C0E000
heap
page read and write
310C000
heap
page read and write
342D000
heap
page read and write
32E0000
heap
page read and write
AAC000
heap
page read and write
2D5E000
stack
page read and write
4B2000
unkown
page read and write
AAD000
heap
page read and write
9B82000
heap
page read and write
438000
unkown
page write copy
9805000
direct allocation
page read and write
3331000
heap
page read and write
30F2000
heap
page read and write
448000
heap
page read and write
3163000
heap
page read and write
30EA000
heap
page read and write
97E0000
direct allocation
page read and write
9B99000
heap
page read and write
9B8E000
heap
page read and write
848000
heap
page read and write
74E000
heap
page read and write
C50000
heap
page read and write
923000
heap
page read and write
9B000
stack
page read and write
A93000
heap
page read and write
3199000
heap
page read and write
9AE1000
heap
page read and write
198000
stack
page read and write
A95000
heap
page read and write
9B00000
heap
page read and write
A67000
heap
page read and write
401000
unkown
page execute read
31C0000
direct allocation
page read and write
9B9000
heap
page read and write
9AE8000
heap
page read and write
420000
unkown
page write copy
41B000
unkown
page write copy
9B0F000
heap
page read and write
830000
heap
page read and write
30E1000
heap
page read and write
9AB1000
heap
page read and write
31C0000
direct allocation
page read and write
9B87000
heap
page read and write
400000
unkown
page readonly
97E0000
direct allocation
page read and write
313E000
heap
page read and write
2590000
heap
page read and write
31C0000
direct allocation
page read and write
A20000
heap
page read and write
97F9000
direct allocation
page read and write
400000
unkown
page readonly
287F000
stack
page read and write
9BE5000
heap
page read and write
2A7E000
stack
page read and write
2BBE000
stack
page read and write
9BED000
heap
page read and write
7E9000
unkown
page readonly
345D000
stack
page read and write
97E0000
direct allocation
page read and write
3553000
heap
page read and write
9AB1000
heap
page read and write
A77000
heap
page read and write
3411000
heap
page read and write
31C0000
direct allocation
page read and write
9AB1000
heap
page read and write
3513000
heap
page read and write
346F000
heap
page read and write
9B82000
heap
page read and write
52B000
remote allocation
page execute and read and write
97E0000
direct allocation
page read and write
30F3000
heap
page read and write
2090000
heap
page read and write
197000
stack
page read and write
4100000
heap
page read and write
315F000
heap
page read and write
19D000
stack
page read and write
3570000
direct allocation
page read and write
2620000
heap
page read and write
31C0000
direct allocation
page read and write
438000
unkown
page write copy
31C0000
direct allocation
page read and write
317D000
heap
page read and write
31C0000
direct allocation
page read and write
9B40000
heap
page read and write
2FB1000
heap
page read and write
41A000
unkown
page write copy
2A1F000
stack
page read and write
25F0000
heap
page read and write
3497000
heap
page read and write
42EE000
stack
page read and write
9C11000
heap
page read and write
3570000
direct allocation
page read and write
9B7E000
heap
page read and write
9B11000
heap
page read and write
46F000
heap
page read and write
9B7F000
heap
page read and write
9AD8000
heap
page read and write
9BE000
heap
page read and write
3443000
heap
page read and write
31A0000
heap
page read and write
447000
unkown
page read and write
401000
unkown
page execute read
9BED000
heap
page read and write
9BFD000
heap
page read and write
43EF000
stack
page read and write
310C000
heap
page read and write
19B000
stack
page read and write
97E0000
direct allocation
page read and write
9AC0000
heap
page read and write
2FB0000
remote allocation
page read and write
411000
unkown
page readonly
9AB1000
heap
page read and write
198000
stack
page read and write
97E0000
direct allocation
page read and write
40A0000
unkown
page readonly
660000
heap
page read and write
30EE000
heap
page read and write
401000
unkown
page execute read
A74000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9BC5000
heap
page read and write
9ABA000
heap
page read and write
4168000
heap
page read and write
870000
heap
page read and write
7E9000
unkown
page readonly
3150000
heap
page read and write
8EE000
stack
page read and write
558000
remote allocation
page execute and read and write
1F0000
heap
page read and write
401000
unkown
page execute read
291E000
stack
page read and write
34E4000
heap
page read and write
401000
unkown
page execute read
738000
heap
page read and write
411000
unkown
page readonly
2FB0000
remote allocation
page read and write
7E6000
unkown
page read and write
9C3C000
heap
page read and write
2AB7000
heap
page read and write
3570000
direct allocation
page read and write
30ED000
heap
page read and write
807000
heap
page read and write
31C0000
direct allocation
page read and write
3158000
heap
page read and write
30CD000
heap
page read and write
9C3C000
heap
page read and write
5E0000
heap
page read and write
9BE9000
heap
page read and write
9B4F000
heap
page read and write
3453000
heap
page read and write
439E000
heap
page read and write
A77000
heap
page read and write
6F232000
unkown
page readonly
9B5D000
heap
page read and write
40A0000
unkown
page readonly
31A6000
heap
page read and write
317F000
heap
page read and write
1F0000
heap
page read and write
33CD000
heap
page read and write
317F000
heap
page read and write
97E2000
direct allocation
page read and write
9ADC000
heap
page read and write
401000
unkown
page execute read
3154000
heap
page read and write
31A4000
heap
page read and write
9BCA000
heap
page read and write
97EB000
direct allocation
page read and write
9BED000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9BE6000
heap
page read and write
A77000
heap
page read and write
9AD8000
heap
page read and write
9BE000
heap
page read and write
31C0000
direct allocation
page read and write
9B13000
heap
page read and write
401000
unkown
page execute read
31C0000
direct allocation
page read and write
9C78000
heap
page read and write
92F000
heap
page read and write
31A0000
heap
page read and write
31C0000
direct allocation
page read and write
9B43000
heap
page read and write
9AF5000
heap
page read and write
31C0000
direct allocation
page read and write
711000
heap
page read and write
30ED000
heap
page read and write
9AB2000
heap
page read and write
3570000
direct allocation
page read and write
97E0000
direct allocation
page read and write
400000
unkown
page readonly
9BCA000
heap
page read and write
9B13000
heap
page read and write
9C11000
heap
page read and write
401000
unkown
page execute read
401000
unkown
page execute read
197000
stack
page read and write
30B0000
heap
page read and write
41EE000
stack
page read and write
9AC5000
heap
page read and write
33E4000
heap
page read and write
9B6F000
heap
page read and write
31A4000
heap
page read and write
2FB1000
heap
page read and write
33D4000
heap
page read and write
9AFC000
heap
page read and write
529000
remote allocation
page execute and read and write
310D000
heap
page read and write
2A10000
heap
page read and write
3163000
heap
page read and write
9B7E000
heap
page read and write
343D000
heap
page read and write
231B5000
heap
page read and write
9AC9000
heap
page read and write
438000
unkown
page write copy
31C0000
direct allocation
page read and write
9BD0000
heap
page read and write
33FC000
heap
page read and write
20E38000
direct allocation
page readonly
31C0000
direct allocation
page read and write
2E5E000
stack
page read and write
2B6D000
stack
page read and write
9BE000
heap
page read and write
9AEC000
heap
page read and write
9AA000
heap
page read and write
9BBB000
heap
page read and write
9AFE000
heap
page read and write
2FB0000
remote allocation
page read and write
20C20000
trusted library allocation
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
30F2000
heap
page read and write
97E0000
direct allocation
page read and write
20AE1000
heap
page read and write
9C67000
heap
page read and write
9B39000
heap
page read and write
31C0000
direct allocation
page read and write
34C3000
heap
page read and write
9CA1000
heap
page read and write
9B7E000
heap
page read and write
31AE000
heap
page read and write
9B80000
heap
page read and write
9C45000
heap
page read and write
805000
heap
page read and write
401000
unkown
page execute read
20C10000
heap
page read and write
9B80000
heap
page read and write
30F1000
heap
page read and write
40A0000
unkown
page readonly
9AB1000
heap
page read and write
A9C000
heap
page read and write
2CBF000
stack
page read and write
97E8000
direct allocation
page read and write
401000
unkown
page execute read
55E000
stack
page read and write
9B000
stack
page read and write
7E9000
unkown
page readonly
31C0000
direct allocation
page read and write
3415000
heap
page read and write
359F000
heap
page read and write
9B3B000
heap
page read and write
97E0000
direct allocation
page read and write
82D000
heap
page read and write
9B11000
heap
page read and write
3150000
heap
page read and write
9C3C000
heap
page read and write
400000
unkown
page readonly
9AC2000
heap
page read and write
3411000
heap
page read and write
979000
heap
page read and write
9AC7000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
20E8C000
heap
page read and write
3199000
heap
page read and write
401000
unkown
page execute read
811000
heap
page read and write
97E0000
direct allocation
page read and write
529000
remote allocation
page execute and read and write
2E5E000
stack
page read and write
9B2A000
heap
page read and write
31C0000
direct allocation
page read and write
9F9000
heap
page read and write
9C4B000
heap
page read and write
3570000
direct allocation
page read and write
9C4F000
heap
page read and write
346B000
heap
page read and write
97E0000
direct allocation
page read and write
6C9D0000
unkown
page read and write
9AE8000
heap
page read and write
344E000
heap
page read and write
A54000
heap
page read and write
97E0000
direct allocation
page read and write
9BB8000
heap
page read and write
1F0000
heap
page read and write
2E5F000
stack
page read and write
31C0000
direct allocation
page read and write
9B9A000
heap
page read and write
74E000
heap
page read and write
3103000
heap
page read and write
AB4000
heap
page read and write
31C0000
direct allocation
page read and write
A92000
heap
page read and write
31D7000
direct allocation
page read and write
30E1000
heap
page read and write
97E0000
direct allocation
page read and write
5D5000
heap
page read and write
318F000
heap
page read and write
698000
heap
page read and write
30EF000
heap
page read and write
9AEE000
heap
page read and write
3373000
heap
page read and write
9AEA000
heap
page read and write
3445000
heap
page read and write
9BBB000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
840000
heap
page read and write
3570000
direct allocation
page read and write
9BED000
heap
page read and write
30EE000
heap
page read and write
9B7E000
heap
page read and write
9B0C000
heap
page read and write
400000
unkown
page readonly
2A10000
heap
page read and write
9C30000
heap
page read and write
9BD5000
heap
page read and write
97E0000
direct allocation
page read and write
33F0000
heap
page read and write
9C6F000
heap
page read and write
A59000
heap
page read and write
8E6000
heap
page read and write
31C0000
direct allocation
page read and write
5D7000
heap
page read and write
435000
unkown
page execute read
738000
heap
page read and write
9B1F000
heap
page read and write
33FC000
heap
page read and write
34C3000
heap
page read and write
3502000
heap
page read and write
9B13000
heap
page read and write
31C0000
direct allocation
page read and write
A7C000
heap
page read and write
30EF000
heap
page read and write
9C9A000
heap
page read and write
401000
unkown
page execute read
9C4A000
heap
page read and write
3570000
direct allocation
page read and write
627000
heap
page read and write
97E0000
direct allocation
page read and write
31AA000
heap
page read and write
103EE000
stack
page read and write
6C9CE000
unkown
page read and write
7E9000
unkown
page readonly
B7E000
stack
page read and write
33CD000
heap
page read and write
9C67000
heap
page read and write
317F000
heap
page read and write
31C0000
direct allocation
page read and write
9B11000
heap
page read and write
2FB0000
remote allocation
page read and write
9B7E000
heap
page read and write
97E8000
direct allocation
page read and write
30F0000
heap
page read and write
97E0000
direct allocation
page read and write
345D000
heap
page read and write
33C6000
heap
page read and write
93A000
heap
page read and write
40A0000
unkown
page readonly
9C58000
heap
page read and write
317E000
heap
page read and write
754000
heap
page read and write
31C0000
direct allocation
page read and write
B1F000
stack
page read and write
9B92000
heap
page read and write
AAC000
heap
page read and write
401000
unkown
page execute read
A58000
heap
page read and write
56E000
stack
page read and write
8C0000
heap
page execute and read and write
9B9000
heap
page read and write
31A8000
heap
page read and write
20F90000
trusted library allocation
page read and write
3154000
heap
page read and write
9B5D000
heap
page read and write
7E9000
unkown
page readonly
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
2F5F000
stack
page read and write
20E62000
direct allocation
page read and write
97E0000
direct allocation
page read and write
34F3000
heap
page read and write
31C0000
direct allocation
page read and write
319A000
heap
page read and write
31C0000
direct allocation
page read and write
9B39000
heap
page read and write
317D000
heap
page read and write
9B01000
heap
page read and write
9B80000
heap
page read and write
33C6000
heap
page read and write
31C0000
direct allocation
page read and write
9C43000
heap
page read and write
9AE7000
heap
page read and write
9B19000
heap
page read and write
31C0000
direct allocation
page read and write
411000
unkown
page readonly
6F1A1000
unkown
page execute read
3553000
heap
page read and write
2DFD000
stack
page read and write
9AEF000
heap
page read and write
9B22000
heap
page read and write
26AF000
stack
page read and write
97E0000
direct allocation
page read and write
9C000
stack
page read and write
91E000
stack
page read and write
31C0000
direct allocation
page read and write
199BD000
stack
page read and write
650000
heap
page read and write
A2D000
heap
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
3570000
direct allocation
page read and write
B2A000
heap
page read and write
86F000
stack
page read and write
98B000
heap
page read and write
9BE9000
heap
page read and write
A98000
heap
page read and write
319C000
heap
page read and write
409E000
unkown
page read and write
31C0000
direct allocation
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9B3C000
heap
page read and write
3570000
direct allocation
page read and write
9AFF000
heap
page read and write
21C0000
heap
page read and write
9ADC000
heap
page read and write
752000
heap
page read and write
344C000
heap
page read and write
3454000
heap
page read and write
31C0000
direct allocation
page read and write
30ED000
heap
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
1A04000
unkown
page readonly
9C45000
heap
page read and write
A06000
heap
page read and write
31C0000
direct allocation
page read and write
30EA000
heap
page read and write
317D000
heap
page read and write
9B3C000
heap
page read and write
9B15000
heap
page read and write
30ED000
heap
page read and write
3470000
heap
page read and write
31C0000
direct allocation
page read and write
2F5F000
stack
page read and write
340E000
heap
page read and write
81D000
heap
page execute and read and write
400000
unkown
page readonly
9B83000
heap
page read and write
7F0000
heap
page read and write
97E0000
direct allocation
page read and write
9BDF000
heap
page read and write
411000
unkown
page readonly
3199000
heap
page read and write
A93000
heap
page read and write
3570000
direct allocation
page read and write
21B0000
heap
page read and write
929000
heap
page read and write
9AEC000
heap
page read and write
82E000
stack
page read and write
1BF80000
remote allocation
page read and write
19D000
stack
page read and write
4390000
heap
page read and write
7E6000
unkown
page read and write
9BD2000
heap
page read and write
3199000
heap
page read and write
97E0000
direct allocation
page read and write
7CE000
stack
page read and write
9C11000
heap
page read and write
727000
heap
page read and write
A94000
heap
page read and write
2D20000
remote allocation
page read and write
319C000
heap
page read and write
400000
unkown
page readonly
1BF80000
remote allocation
page read and write
3405000
heap
page read and write
1742E000
stack
page read and write
40A0000
unkown
page readonly
9B2E000
heap
page read and write
2FB1000
heap
page read and write
3154000
heap
page read and write
41B000
unkown
page write copy
19A1E000
stack
page read and write
74E000
heap
page read and write
3196000
heap
page read and write
9BE9000
heap
page read and write
4500000
heap
page read and write
2F40000
heap
page read and write
454E000
stack
page read and write
9AC7000
heap
page read and write
2410000
heap
page read and write
400000
unkown
page readonly
340C000
heap
page read and write
9B19000
heap
page read and write
41C0000
heap
page read and write
9AF2000
heap
page read and write
28FE000
stack
page read and write
31C0000
direct allocation
page read and write
41A000
unkown
page write copy
3150000
heap
page read and write
33C3000
heap
page read and write
435000
unkown
page execute read
346E000
heap
page read and write
4300000
direct allocation
page read and write
9B6F000
heap
page read and write
1C8F000
stack
page read and write
9AB5000
heap
page read and write
31C0000
direct allocation
page read and write
2FB1000
heap
page read and write
580000
heap
page read and write
3150000
heap
page read and write
9BE9000
heap
page read and write
9BE000
heap
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
28DF000
stack
page read and write
3199000
heap
page read and write
2FB0000
heap
page read and write
9B03000
heap
page read and write
3553000
heap
page read and write
3411000
heap
page read and write
9B80000
heap
page read and write
3570000
direct allocation
page read and write
490000
heap
page read and write
AA0000
heap
page read and write
8C6000
heap
page read and write
9C67000
heap
page read and write
2FB1000
heap
page read and write
31C0000
direct allocation
page read and write
19D000
stack
page read and write
3424000
heap
page read and write
A7B000
heap
page read and write
3497000
heap
page read and write
90E000
stack
page read and write
345F000
heap
page read and write
3570000
direct allocation
page read and write
420000
unkown
page write copy
2FB1000
heap
page read and write
31C0000
direct allocation
page read and write
9BAE000
heap
page read and write
9DE000
heap
page read and write
30CB000
heap
page read and write
3194000
heap
page read and write
409E000
unkown
page read and write
30EF000
heap
page read and write
6F21D000
unkown
page readonly
A77000
heap
page read and write
97E0000
direct allocation
page read and write
435000
unkown
page execute read
A97000
heap
page read and write
920000
heap
page read and write
420000
unkown
page write copy
97E0000
direct allocation
page read and write
76F000
stack
page read and write
9ADF000
heap
page read and write
97E0000
direct allocation
page read and write
9AED000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
435000
unkown
page execute read
3124000
heap
page read and write
9BB000
heap
page read and write
970000
heap
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
346E000
heap
page read and write
30CD000
heap
page read and write
400000
unkown
page readonly
928000
heap
page read and write
3567000
heap
page read and write
3193000
heap
page read and write
97FC000
direct allocation
page read and write
20E2F000
direct allocation
page readonly
3570000
direct allocation
page read and write
A2F000
heap
page read and write
9B8F000
heap
page read and write
401000
unkown
page execute read
957000
heap
page read and write
9B1F000
heap
page read and write
3158000
heap
page read and write
63E000
stack
page read and write
3199000
heap
page read and write
3570000
direct allocation
page read and write
97E0000
direct allocation
page read and write
21082000
heap
page read and write
4500000
direct allocation
page read and write
3563000
heap
page read and write
198000
stack
page read and write
5B0000
heap
page read and write
9BDC000
heap
page read and write
9BB8000
heap
page read and write
2DAE000
stack
page read and write
960000
heap
page read and write
A66000
heap
page read and write
41A000
unkown
page read and write
310C000
heap
page read and write
9B99000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
231AE000
heap
page read and write
2FB1000
heap
page read and write
9AF3000
heap
page read and write
31C0000
direct allocation
page read and write
7E9000
unkown
page readonly
3404000
heap
page read and write
6F7000
heap
page read and write
3570000
direct allocation
page read and write
7AF000
stack
page read and write
31C0000
direct allocation
page read and write
342D000
heap
page read and write
7B7000
heap
page read and write
9ABA000
heap
page read and write
9B3C000
heap
page read and write
9B7E000
heap
page read and write
312C000
heap
page read and write
31C0000
direct allocation
page read and write
319C000
heap
page read and write
9C53000
heap
page read and write
3150000
heap
page read and write
A3F000
stack
page read and write
3372000
heap
page read and write
1292F000
stack
page read and write
9B83000
heap
page read and write
20D86000
direct allocation
page execute read
435000
unkown
page execute read
30BB000
heap
page read and write
31C0000
direct allocation
page read and write
2470000
heap
page read and write
9AB1000
heap
page read and write
A55000
heap
page read and write
449B000
heap
page execute and read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
3473000
heap
page read and write
30D1000
heap
page read and write
31C0000
direct allocation
page read and write
438000
unkown
page write copy
400000
unkown
page readonly
45A000
heap
page read and write
400000
unkown
page readonly
3194000
heap
page read and write
401000
unkown
page execute read
9BC5000
heap
page read and write
193000
stack
page read and write
3158000
heap
page read and write
31C0000
direct allocation
page read and write
21017000
heap
page read and write
9AE000
heap
page read and write
34C6000
heap
page read and write
41A000
unkown
page write copy
9C67000
heap
page read and write
418000
unkown
page write copy
3404000
heap
page read and write
464F000
stack
page read and write
43B000
unkown
page read and write
9AD7000
heap
page read and write
9B3C000
heap
page read and write
9B06000
heap
page read and write
9B8F000
heap
page read and write
9B82000
heap
page read and write
25FF000
stack
page read and write
31C0000
direct allocation
page read and write
420000
unkown
page write copy
7F8000
heap
page read and write
31C0000
direct allocation
page read and write
19C000
stack
page read and write
A74000
heap
page read and write
9BE5000
heap
page read and write
9AF5000
heap
page read and write
9B19000
heap
page read and write
33BD000
heap
page read and write
401000
unkown
page execute read
97E0000
direct allocation
page read and write
9B7E000
heap
page read and write
9C67000
heap
page read and write
350C000
heap
page read and write
9BB8000
heap
page read and write
9B81000
heap
page read and write
9AB1000
heap
page read and write
31C0000
direct allocation
page read and write
2B7E000
stack
page read and write
400000
unkown
page readonly
2F71000
heap
page read and write
31C0000
direct allocation
page read and write
9BAC000
heap
page read and write
3158000
heap
page read and write
346C000
heap
page read and write
A31000
heap
page read and write
2DFD000
stack
page read and write
19D000
stack
page read and write
97E0000
direct allocation
page read and write
587000
heap
page read and write
9B19000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
9C45000
heap
page read and write
30ED000
heap
page read and write
A97000
heap
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
A93000
heap
page read and write
9B80000
heap
page read and write
9BA1000
heap
page read and write
9C47000
heap
page read and write
438000
unkown
page write copy
277E000
stack
page read and write
31C0000
direct allocation
page read and write
438000
unkown
page write copy
940000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
723000
heap
page read and write
962000
heap
page read and write
80E000
heap
page read and write
3593000
heap
page read and write
31C0000
direct allocation
page read and write
33E4000
heap
page read and write
53E000
stack
page read and write
9B7F000
heap
page read and write
B57000
heap
page read and write
9B0D000
heap
page read and write
A75000
heap
page read and write
30D4000
heap
page read and write
3455000
heap
page read and write
97E0000
direct allocation
page read and write
30EE000
heap
page read and write
33BD000
heap
page read and write
31C0000
direct allocation
page read and write
9ABA000
heap
page read and write
BB0000
heap
page read and write
9ACA000
heap
page read and write
9B7E000
heap
page read and write
9C97000
heap
page read and write
3570000
direct allocation
page read and write
9C45000
heap
page read and write
30ED000
heap
page read and write
30E0000
heap
page read and write
9AB5000
heap
page read and write
3404000
heap
page read and write
341C000
heap
page read and write
9B8B000
heap
page read and write
9BED000
heap
page read and write
31C0000
direct allocation
page read and write
9B8E000
heap
page read and write
A99000
heap
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9BDF000
heap
page read and write
3455000
heap
page read and write
3570000
direct allocation
page read and write
31C0000
direct allocation
page read and write
940000
heap
page read and write
3567000
heap
page read and write
9C45000
heap
page read and write
1E4FF000
stack
page read and write
30B0000
heap
page read and write
312E000
heap
page read and write
76F000
stack
page read and write
31C0000
direct allocation
page read and write
3570000
direct allocation
page read and write
30B4000
heap
page read and write
3425000
heap
page read and write
A60000
heap
page read and write
43FD000
heap
page execute and read and write
26E0000
heap
page read and write
7E9000
unkown
page readonly
97E0000
direct allocation
page read and write
9C51000
heap
page read and write
401000
unkown
page execute read
2AB0000
heap
page read and write
5550000
heap
page read and write
770000
heap
page read and write
60B0000
heap
page read and write
31AA000
heap
page read and write
9C47000
heap
page read and write
31C0000
direct allocation
page read and write
A7F000
stack
page read and write
9BED000
heap
page read and write
97E0000
direct allocation
page read and write
9B3C000
heap
page read and write
2F5F000
stack
page read and write
2E5E000
stack
page read and write
929000
heap
page read and write
31A8000
heap
page read and write
233BA000
heap
page read and write
A91000
heap
page read and write
1F0000
heap
page read and write
31AC000
heap
page read and write
A3C000
heap
page read and write
3193000
heap
page read and write
20AAD000
stack
page read and write
41A000
unkown
page write copy
2520000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
A91000
heap
page read and write
A91000
heap
page read and write
197000
stack
page read and write
97E0000
direct allocation
page read and write
9B22000
heap
page read and write
411000
unkown
page readonly
9AF3000
heap
page read and write
323A000
stack
page read and write
9B5E000
heap
page read and write
9B86000
heap
page read and write
90AF000
stack
page read and write
30F0000
heap
page read and write
864000
heap
page read and write
30BD000
heap
page read and write
9B7E000
heap
page read and write
315F000
heap
page read and write
9AB1000
heap
page read and write
3114000
heap
page read and write
9AB1000
heap
page read and write
340E000
heap
page read and write
2FB0000
heap
page read and write
97E0000
direct allocation
page read and write
30ED000
heap
page read and write
9C3C000
heap
page read and write
400000
unkown
page readonly
30EF000
heap
page read and write
9B48000
heap
page read and write
9B7E000
heap
page read and write
3192000
heap
page read and write
19D000
stack
page read and write
9B6F000
heap
page read and write
31C0000
direct allocation
page read and write
3560000
heap
page read and write
1F0000
heap
page read and write
9B0000
heap
page read and write
97E0000
direct allocation
page read and write
9BD5000
heap
page read and write
30ED000
heap
page read and write
99E000
stack
page read and write
337F000
heap
page read and write
9C4A000
heap
page read and write
A99000
heap
page read and write
19D000
stack
page read and write
30EE000
heap
page read and write
3158000
heap
page read and write
9B80000
heap
page read and write
33FC000
heap
page read and write
A8C000
heap
page read and write
31C0000
direct allocation
page read and write
777000
heap
page read and write
21470000
heap
page read and write
9BE8000
heap
page read and write
B4F000
stack
page read and write
3570000
direct allocation
page read and write
9C73000
heap
page read and write
2FB1000
heap
page read and write
3434000
heap
page read and write
9B5A000
heap
page read and write
20E6F000
direct allocation
page readonly
9B7F000
heap
page read and write
9AD8000
heap
page read and write
41A0000
heap
page read and write
31C0000
direct allocation
page read and write
3469000
heap
page read and write
9B7F000
heap
page read and write
9BC5000
heap
page read and write
30E9000
heap
page read and write
97E0000
direct allocation
page read and write
3158000
heap
page read and write
41B000
unkown
page write copy
30BD000
heap
page read and write
30ED000
heap
page read and write
33C1000
heap
page read and write
9BD2000
heap
page read and write
1C9E000
heap
page read and write
9B8E000
heap
page read and write
30F3000
heap
page read and write
9B39000
heap
page read and write
3372000
heap
page read and write
8AE000
stack
page read and write
3158000
heap
page read and write
9B13000
heap
page read and write
A05000
heap
page read and write
3570000
direct allocation
page read and write
9B86000
heap
page read and write
31C0000
direct allocation
page read and write
9AEA000
heap
page read and write
9B1A000
heap
page read and write
1E56C000
stack
page read and write
967000
heap
page read and write
9B04000
heap
page read and write
A97000
heap
page read and write
30F3000
heap
page read and write
9AB5000
heap
page read and write
9B40000
heap
page read and write
356E000
stack
page read and write
7E9000
unkown
page readonly
3193000
heap
page read and write
9CA9000
heap
page read and write
33DD000
heap
page read and write
A57000
heap
page read and write
97E9000
direct allocation
page read and write
A4F000
heap
page read and write
3199000
heap
page read and write
9C4B000
heap
page read and write
9C4B000
heap
page read and write
97E0000
direct allocation
page read and write
82D000
heap
page read and write
97E0000
direct allocation
page read and write
41E000
unkown
page write copy
74E000
heap
page read and write
9BE9000
heap
page read and write
9AD4000
heap
page read and write
9AF3000
heap
page read and write
31C0000
direct allocation
page read and write
86E000
stack
page read and write
31C0000
direct allocation
page read and write
3199000
heap
page read and write
8CF000
stack
page read and write
9C33000
heap
page read and write
41AE000
heap
page read and write
A55000
heap
page read and write
448F000
stack
page read and write
2FB1000
heap
page read and write
9ABD000
heap
page read and write
2E70000
heap
page read and write
30CD000
heap
page read and write
3143000
heap
page read and write
4338000
heap
page read and write
2DFE000
stack
page read and write
34D3000
heap
page read and write
31C0000
direct allocation
page read and write
342D000
heap
page read and write
82E000
stack
page read and write
20C20000
direct allocation
page execute and read and write
6C98F000
unkown
page readonly
3570000
direct allocation
page read and write
30F1000
heap
page read and write
9B000
stack
page read and write
439A000
heap
page read and write
19B000
stack
page read and write
3570000
direct allocation
page read and write
A6B000
heap
page read and write
3194000
heap
page read and write
9C54000
heap
page read and write
33C6000
heap
page read and write
9BB000
heap
page read and write
1F0000
heap
page read and write
2FB1000
heap
page read and write
97E0000
direct allocation
page read and write
7DE000
stack
page read and write
810000
heap
page read and write
9BEE000
heap
page read and write
2FB0000
remote allocation
page read and write
3454000
heap
page read and write
9BE0000
heap
page read and write
A62000
heap
page read and write
40A0000
unkown
page readonly
30EA000
heap
page read and write
9BDA000
heap
page read and write
B8F000
stack
page read and write
34AC000
heap
page read and write
2D2E000
stack
page read and write
3476000
heap
page read and write
411000
unkown
page readonly
9BE0000
heap
page read and write
9AFC000
heap
page read and write
9BCC000
heap
page read and write
6F7000
heap
page read and write
C6F000
stack
page read and write
9BCD000
heap
page read and write
9AF3000
heap
page read and write
34D3000
heap
page read and write
9AEE000
heap
page read and write
9B11000
heap
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
A99000
heap
page read and write
9BED000
heap
page read and write
33F5000
heap
page read and write
97E0000
direct allocation
page read and write
57E000
stack
page read and write
97E0000
direct allocation
page read and write
458F000
stack
page read and write
14EEE000
stack
page read and write
9C6C000
heap
page read and write
1F0000
heap
page read and write
31D0000
heap
page read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
31A0000
heap
page read and write
9802000
direct allocation
page read and write
3570000
direct allocation
page read and write
9C4B000
heap
page read and write
511000
remote allocation
page execute and read and write
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
3454000
heap
page read and write
31B0000
heap
page read and write
31C0000
direct allocation
page read and write
9B7E000
heap
page read and write
41B000
unkown
page write copy
9C3C000
heap
page read and write
9B7E000
heap
page read and write
6FE000
stack
page read and write
9C0E000
heap
page read and write
3570000
direct allocation
page read and write
9C98000
heap
page read and write
9B32000
heap
page read and write
9C48000
heap
page read and write
70D000
heap
page read and write
400000
unkown
page readonly
34B4000
heap
page read and write
31C3000
direct allocation
page read and write
30AC000
stack
page read and write
97E0000
direct allocation
page read and write
9BD2000
heap
page read and write
9BAE000
heap
page read and write
9C4A000
heap
page read and write
31C0000
direct allocation
page read and write
45A000
heap
page read and write
438000
unkown
page write copy
9AB5000
heap
page read and write
9B7E000
heap
page read and write
A97000
heap
page read and write
3570000
direct allocation
page read and write
31DE000
direct allocation
page read and write
9B000
stack
page read and write
20C28000
direct allocation
page execute read
9C44000
heap
page read and write
97E0000
direct allocation
page read and write
A8C000
heap
page read and write
23313000
heap
page read and write
9B7E000
heap
page read and write
2CFE000
stack
page read and write
9C47000
heap
page read and write
418000
unkown
page write copy
31C0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
341C000
heap
page read and write
6C9D5000
unkown
page readonly
400000
unkown
page readonly
33CD000
heap
page read and write
57E000
stack
page read and write
887000
heap
page read and write
30FD000
heap
page read and write
31C0000
direct allocation
page read and write
27AF000
stack
page read and write
97E0000
direct allocation
page read and write
A5E000
stack
page read and write
A54000
heap
page read and write
9BA8000
heap
page read and write
42EE000
stack
page read and write
9C5C000
heap
page read and write
2FB1000
heap
page read and write
3193000
heap
page read and write
21982000
heap
page read and write
3434000
heap
page read and write
3570000
direct allocation
page read and write
627000
heap
page read and write
31A1000
heap
page read and write
459C000
heap
page execute and read and write
9AD3000
heap
page read and write
3570000
direct allocation
page read and write
9BEE000
heap
page read and write
3570000
direct allocation
page read and write
8EB000
heap
page read and write
3115000
heap
page read and write
3373000
heap
page read and write
9B7E000
heap
page read and write
9CA1000
heap
page read and write
894000
heap
page read and write
7B0000
heap
page read and write
97E0000
direct allocation
page read and write
97EE000
direct allocation
page read and write
752000
heap
page read and write
24EF000
stack
page read and write
340E000
heap
page read and write
9B82000
heap
page read and write
9AD8000
heap
page read and write
1F0000
heap
page read and write
31C0000
direct allocation
page read and write
9A0000
heap
page read and write
438000
unkown
page write copy
31C0000
direct allocation
page read and write
31AE000
heap
page read and write
346F000
heap
page read and write
9B57000
heap
page read and write
9AB1000
heap
page read and write
3468000
heap
page read and write
9C77000
heap
page read and write
64E000
stack
page read and write
950000
heap
page read and write
97E0000
direct allocation
page read and write
B92F000
stack
page read and write
A77000
heap
page read and write
9B7E000
heap
page read and write
9B000
stack
page read and write
2BBE000
stack
page read and write
3330000
heap
page read and write
3570000
direct allocation
page read and write
52B000
remote allocation
page execute and read and write
A26000
heap
page read and write
31C0000
direct allocation
page read and write
34D4000
heap
page read and write
97E0000
direct allocation
page read and write
30F1000
heap
page read and write
720000
heap
page read and write
3570000
direct allocation
page read and write
23E0000
heap
page read and write
9BEE000
heap
page read and write
233BC000
heap
page read and write
5D0000
heap
page read and write
3573000
heap
page read and write
9B7E000
heap
page read and write
19D000
stack
page read and write
3158000
heap
page read and write
AA6000
heap
page read and write
97E0000
direct allocation
page read and write
9AC2000
heap
page read and write
34A0000
heap
page read and write
232F5000
heap
page read and write
443C000
heap
page execute and read and write
B50000
heap
page read and write
9B000
stack
page read and write
3164000
heap
page read and write
8C0000
heap
page read and write
348A000
heap
page read and write
9C67000
heap
page read and write
9B15000
heap
page read and write
2FB1000
heap
page read and write
40A0000
unkown
page readonly
A7F000
heap
page read and write
9ABD000
heap
page read and write
3434000
heap
page read and write
9B2E000
heap
page read and write
3570000
direct allocation
page read and write
9B5A000
heap
page read and write
1F0000
heap
page read and write
31C0000
direct allocation
page read and write
7E9000
unkown
page readonly
23D0000
heap
page read and write
3151000
heap
page read and write
420000
unkown
page write copy
438000
unkown
page write copy
447000
unkown
page read and write
409E000
unkown
page read and write
1A20000
heap
page read and write
9ADF000
heap
page read and write
435000
unkown
page execute read
3570000
direct allocation
page read and write
A31000
heap
page read and write
9C3C000
heap
page read and write
A0E000
stack
page read and write
2CFE000
stack
page read and write
9ADF000
heap
page read and write
30F1000
heap
page read and write
9AD0000
heap
page read and write
95F000
stack
page read and write
9C63000
heap
page read and write
3145000
heap
page read and write
9B49000
heap
page read and write
9C78000
heap
page read and write
9C9A000
heap
page read and write
41A0000
heap
page read and write
1CCB000
heap
page read and write
9ACC000
heap
page read and write
419000
unkown
page write copy
3145000
heap
page read and write
9B000
stack
page read and write
7E9000
unkown
page readonly
9BA5000
heap
page read and write
349A000
heap
page read and write
319C000
heap
page read and write
400000
unkown
page readonly
30F2000
heap
page read and write
3194000
heap
page read and write
580000
heap
page read and write
31C0000
direct allocation
page read and write
31AE000
heap
page read and write
198000
stack
page read and write
319A000
heap
page read and write
30EE000
heap
page read and write
A6C000
heap
page read and write
418000
unkown
page read and write
1BF80000
remote allocation
page read and write
3150000
heap
page read and write
41B000
unkown
page write copy
2B6D000
stack
page read and write
1F0000
heap
page read and write
19E000
stack
page read and write
3417000
heap
page read and write
9AC0000
heap
page read and write
9C90000
heap
page read and write
9B000
stack
page read and write
2E5E000
stack
page read and write
9BFC000
heap
page read and write
42A0000
heap
page read and write
420000
unkown
page write copy
A40000
heap
page read and write
9AD0000
heap
page read and write
3199000
heap
page read and write
97E0000
direct allocation
page read and write
A1E000
stack
page read and write
A8A000
heap
page read and write
9AF4000
heap
page read and write
401000
unkown
page execute read
31C0000
direct allocation
page read and write
41A000
unkown
page read and write
9AC2000
heap
page read and write
97E0000
direct allocation
page read and write
9AFF000
heap
page read and write
3468000
heap
page read and write
9BED000
heap
page read and write
97B0000
heap
page read and write
6D8000
heap
page read and write
31C0000
direct allocation
page read and write
317F000
heap
page read and write
9B01000
heap
page read and write
9B7E000
heap
page read and write
9C4A000
heap
page read and write
9C47000
heap
page read and write
A97000
heap
page read and write
3115000
heap
page read and write
9B7E000
heap
page read and write
343C000
heap
page read and write
97E0000
direct allocation
page read and write
34C3000
heap
page read and write
2A10000
heap
page read and write
97E0000
direct allocation
page read and write
86E000
stack
page read and write
30FF000
heap
page read and write
31C0000
direct allocation
page read and write
6E9000
heap
page read and write
9ACC000
heap
page read and write
9BE000
heap
page read and write
292F000
stack
page read and write
9CF000
stack
page read and write
97E0000
direct allocation
page read and write
345F000
heap
page read and write
97E2000
direct allocation
page read and write
93E000
stack
page read and write
348A000
heap
page read and write
690000
heap
page read and write
435000
unkown
page execute read
33DD000
heap
page read and write
9BDF000
heap
page read and write
31C0000
direct allocation
page read and write
9B9000
heap
page read and write
3498000
heap
page read and write
9BED000
heap
page read and write
60C0000
heap
page read and write
9AF2000
heap
page read and write
3570000
direct allocation
page read and write
1BFBE000
stack
page read and write
9AF5000
heap
page read and write
442F000
stack
page read and write
9B86000
heap
page read and write
4540000
heap
page read and write
8B0000
heap
page read and write
411000
unkown
page readonly
435000
unkown
page execute read
3570000
direct allocation
page read and write
9B000
stack
page read and write
880000
heap
page read and write
400000
unkown
page readonly
82F000
stack
page read and write
3570000
direct allocation
page read and write
9B0F000
heap
page read and write
2CFE000
stack
page read and write
31C0000
direct allocation
page read and write
9B4F000
heap
page read and write
9C67000
heap
page read and write
9ABA000
heap
page read and write
863000
heap
page read and write
2B6D000
stack
page read and write
435000
unkown
page execute read
9B49000
heap
page read and write
2CBE000
stack
page read and write
2A7D000
stack
page read and write
40A0000
unkown
page readonly
9BDB000
heap
page read and write
315F000
heap
page read and write
86E000
stack
page read and write
31C0000
direct allocation
page read and write
31C0000
direct allocation
page read and write
9C4A000
heap
page read and write
9AFF000
heap
page read and write
9C4A000
heap
page read and write
3158000
heap
page read and write
97E0000
direct allocation
page read and write
80A000
heap
page read and write
A80000
heap
page read and write
A77000
heap
page read and write
29FF000
stack
page read and write
438000
unkown
page write copy
435000
unkown
page execute read
438000
unkown
page write copy
9B60000
heap
page read and write
9B000
stack
page read and write
97E0000
direct allocation
page read and write
97E0000
direct allocation
page read and write
3115000
heap
page read and write
A22000
heap
page read and write
435000
unkown
page execute read
3404000
heap
page read and write
A63000
heap
page read and write
B9F000
stack
page read and write
9C40000
heap
page read and write
9AE1000
heap
page read and write
2D6E000
stack
page read and write
76E000
stack
page read and write
97E0000
direct allocation
page read and write
1F0000
heap
page read and write
97E0000
direct allocation
page read and write
9BA5000
heap
page read and write
3557000
heap
page read and write
650000
heap
page read and write
3557000
heap
page read and write
A74000
heap
page read and write
31C0000
direct allocation
page read and write
625000
heap
page read and write
9C11000
heap
page read and write
9B1A000
heap
page read and write
3593000
heap
page read and write
31C0000
direct allocation
page read and write
9BCA000
heap
page read and write
343C000
heap
page read and write
A8A000
heap
page read and write
310D000
heap
page read and write
A7B000
heap
page read and write
620000
heap
page read and write
31C0000
direct allocation
page read and write
2A6E000
stack
page read and write
9C000
stack
page read and write
31C0000
direct allocation
page read and write
67E000
stack
page read and write
1CAE000
heap
page execute and read and write
9C11000
heap
page read and write
9B82000
heap
page read and write
640000
heap
page read and write
9B8F000
heap
page read and write
359F000
heap
page read and write
685000
heap
page read and write
340D000
heap
page read and write
464F000
stack
page read and write
3193000
heap
page read and write
9C67000
heap
page read and write
There are 2543 hidden memdumps, click here to show them.