Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
8jvTeVxooN.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\173a81f0-f242-45ec-8685-036e62f4f13f\build2.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\remote\edgeSettings_2.0-2f9188b68640dbf72295f9083a21d674a314721ef06f82db281cbcb052ff8ec1
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440002v9.xml
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440007v3.xml
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\setup32.exe_Rules.xml
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db.session
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officec2rclient.exe.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\officesetup.exe.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_114932_b84-2220.log
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\76561199673019888[1].htm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\build2[1].exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sqln[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\script_300161259571223429446516194326035503227.rel.v2
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\shell\remote\script_96032244749497702726114603847611723578.rel.v2
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\input\en-GB\userdict_v1.0809.dat
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\webext.sc.lz4
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.ft
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{68b56d90-5571-43e6-8322-2b266dfbe856}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{68b56d90-5571-43e6-8322-2b266dfbe856}\Apps.ft
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{6be4a616-5cae-40db-b3b2-65a1b8d928ac}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{6be4a616-5cae-40db-b3b2-65a1b8d928ac}\Apps.ft
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsglobals.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsglobals.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingssynonyms.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\0.0.filtertrie.intermediate.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903167889885.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408903214673664.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408904996229952.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906321630689.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408906620712704.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408907975188232.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408908224609935.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133408945532285405.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133584106327735201.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\IDX_CONTENT_TASKBARHEADLINES.json
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\915DEAC5D1E15E49646B8A94E04E470958C9BB89.crl
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage\ls-archive.sqlite
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\AIXACVYBSB\XZXHAVGRAG.pdf
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\NWTVCDUMOB.png
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Adobe\Acrobat\DC\UserCache64.bin.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Google\Chrome\User Data\first_party_sets.db.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\setup32.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\OTele\excel.exe.db.session.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\OTele\officec2rclient.exe.db.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\OTele\officeclicktorun.exe.db.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Office\OTele\officesetup.exe.db.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002b.db.bgjs
(copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000002c.db.bgjs
(copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db.bgjs
(copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db.bgjs
(copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Microsoft\input\en-GB\userdict_v1.0809.dat.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\Local Settings\Temp\acrobat_sbx\acroNGLLog.txt.bgjs (copy)
|
data
|
dropped
|
|
|
|
C:\ProgramData\BGCFBGDHJKFIEBFIECGH
|
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie
0xb, schema 4, UTF-8, version-valid-for 1
|
dropped
|
||
|
C:\ProgramData\BKJDGCGD
|
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie
0x21, schema 4, UTF-8, version-valid-for 3
|
dropped
|
||
|
C:\ProgramData\CGDBFBGI
|
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie
0x24, schema 4, UTF-8, version-valid-for 2
|
modified
|
||
|
C:\ProgramData\DGHIDHCAAKECGCBFIJDBAAFBGH
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8,
version-valid-for 11
|
dropped
|
||
|
C:\ProgramData\FBKKFBAE
|
SQLite 3.x database, last written using SQLite version 3035005, file counter 2, database pages 31, cookie 0x18, schema 4,
UTF-8, version-valid-for 2
|
dropped
|
||
|
C:\ProgramData\HCAEHJJK
|
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4,
UTF-8, version-valid-for 4
|
dropped
|
||
|
C:\ProgramData\HIDHIEGIIIECAKEBFBAA
|
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie
0xe, schema 4, UTF-8, version-valid-for 1
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old
|
data
|
modified
|
||
|
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG.old.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\LocalPrefs.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Adobe\Color\ACECache11.lst
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\3\ListAll.Json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\27160079615.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\28315153308.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\29939506207.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos\31169036496.ttf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.chk
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edb.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbtmp.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\brndlog.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log
|
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\ie4uinit-UserConfig.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\01_Music_auto_rated_at_5_stars.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\02_Music_added_in_the_last_month.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\03_Music_rated_at_4_or_5_stars.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\04_Music_played_in_the_last_month.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\05_Pictures_taken_in_the_last_month.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\06_Pictures_rated_4_or_5_stars.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\07_TV_recorded_in_the_last_week.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\08_Video_rated_at_4_or_5_stars.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\09_Music_played_the_most.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\10_All_Music.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\11_All_Pictures.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\002370B1\12_All_Video.wpl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{45F61A7D-A745-417E-BD88-2FFDE87A6DA8}mt16400656.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7B3AF8A2-A95D-4447-ACC9-7895C91C2D45}mt16400647.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{7D2AAE1F-E21C-4042-8EAB-08D27101C10B}mt11414620.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{967E9DC2-54C6-4D72-9409-715F9A3F61E5}mt11829122.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{A4858C46-92BF-4775-ADF9-F93EB4C5F636}mt66963475.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{AA4547C7-FE83-48AB-9053-3A60F16A4C34}mt10000137.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{F5FB5847-D24A-455C-A647-40C253091672}mt67739505.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\DTS\en-CH{6D74D3E2-198E-4F92-BDE8-15D234E7DBED}\{FD5FD857-5A38-4C81-A322-3226BB279FAA}mt45299826.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule170039v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320003v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320004v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320005v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320006v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320007v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320009v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320016v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320021v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320022v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320029v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320032v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320033v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320034v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule320035v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322001v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322004v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule322006v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324004v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v0.xml
|
GRand Unified Bootloader stage2 version 33.192, installed partition 1635265893, saved entry -1173988888, identifier 0x1, LBA
flag 0xcd, GRUB version \275]l/\247\\261\330;\3622\341\267\322\252e\247x\334\032\367\327~U7\034:\265\3377\327LiH\037}\263\254\365\202\033y\243\262\235M\031\337\356\244\206-OT\257\207\002\010;A\361i\255n\216\3115\250\007\252*ym\303_\006\201\333Ei\233\002\344\302\355f{_:F\030F\231\365\204\037\3326\256\033\247\231b\244\017\006\270N\211F\202\354N>\371\304\377\334\224?r\314\342\255\321\206\307,
configuration file \\261\330;\3622\341\267\322\252e\247x\334\032\367\327~U7\034:\265\3377\327LiH\037}\263\254\365\202\033y\243\262\235M\031\337\356\244\206-OT\257\207\002\010;A\361i\255n\216\3115\250\007\252*ym\303_\006\201\333Ei\233\002\344\302\355f{_:F\030F\231\365\204\037\3326\256\033\247\231b\244\017\006\270N\211F\202\354N>\371\304\377\334\224?r\314\342\255\321\206\3073h=\363\271
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324011v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324012v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324013v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324014v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324015v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325000v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325001v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule325002v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360000v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule360001v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370000v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370001v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370002v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370005v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370006v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370007v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370011v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule370012v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390004v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule390005v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440000v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440004v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule440005v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460008v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule460009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490002v13.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490003v7.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490004v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490005v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490009v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490010v7.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490011v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490014v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490015v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490018v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490020v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490023v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490024v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490025v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490027v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490028v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490029v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490030v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule490031v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500000v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500001v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500002v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500003v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500004v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500005v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500006v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500007v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500008v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500009v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500022v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500023v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule500024v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510000v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510005v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510006v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510008v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510010v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510012v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510015v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510016v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510017v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510018v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510046v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510047v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510062v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule510063v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63028v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63030v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63038v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63040v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63041v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63042v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63046v10.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63048v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63049v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63051v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63052v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63053v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63054v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63056v9.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63057v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63058v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63059v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63063v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63066v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63069v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63070v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63071v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63077v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63078v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65136v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65137v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65138v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule65139v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68000v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68001v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68002v11.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68003v12.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68004v16.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68006v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68008v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68009v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68010v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68011v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68012v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68013v9.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68014v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68015v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68016v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68017v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68018v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68019v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68020v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68022v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68023v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68024v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68025v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68026v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68027v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68028v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68029v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68030v6.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68031v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68038v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68039v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule68040v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule69600v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700000v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700001v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70002v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70003v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700050v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700051v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70006v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700100v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700101v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700150v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700151v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700200v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700201v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700250v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700251v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70025v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70027v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70028v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70029v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700300v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700301v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70030v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70031v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700350v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700351v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70036v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule70037v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700400v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule700401v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701201v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701250v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701751v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701800v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701801v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701850v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701851v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701900v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701901v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701950v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701951v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702000v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702001v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702050v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702051v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703750v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703751v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703800v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703801v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703850v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703851v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703900v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703901v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703950v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703951v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704000v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule1000v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10450v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10625v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10627v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10781v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10800v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10801v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10802v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10803v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10807v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10818v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10819v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10820v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10821v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10822v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10829v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10952v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703250v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule1000v5.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10450v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10625v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10626v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10627v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10781v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10784v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10800v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10801v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10802v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10803v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10807v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10808v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10818v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10819v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10820v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10821v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10822v2.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10829v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10879v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10880v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10881v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10882v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10902v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10906v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10907v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10924v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10925v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10940v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10952v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule10955v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11150v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11154v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11187v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11190v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11195v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11208v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11209v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11210v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11264v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11265v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11285v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11289v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11300v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11302v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11362v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11369v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11370v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11381v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11446v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11464v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11498v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11499v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11500v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11502v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11504v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11514v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11659v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11701v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11705v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11710v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11767v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11768v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11769v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11770v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11771v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11792v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11793v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11794v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11834v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11882v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11890v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11930v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11931v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11932v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11933v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11939v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11950v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11981v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule11989v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120100v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120119v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120128v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12019v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule12035v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120402v21.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120600v4.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120601v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120602v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120603v8.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120607v1.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120608v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120609v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120610v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120611v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120612v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120613v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120614v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120615v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120616v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120617v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120618v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120619v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120620v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120621v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120622v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120623v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120624v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120625v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120626v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120627v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120628v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120629v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120630v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120631v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120632v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120633v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120634v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120635v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120636v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120637v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120638v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120639v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120640v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120641v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120642v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120643v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120646v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120649v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120650v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120651v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120652v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120653v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule120654v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704001v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704050v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704051v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704100v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704101v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704150v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704151v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704200v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule704201v0.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officesetup.exe_Rules\rule90401v3.xml
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-3FeatureCache.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.0953.5356.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2023-10-04.1052.6292.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1149.2948.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-03.1150.4240.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1149.344.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser-2023-10-03.1150.9064.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_114938_158-b2c.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-03_115005_9064-2616.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-PerUser_2023-10-04_093243_16a0-1d8c.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-03_115005_4240-5892.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-04_093243_14f4-1074.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\StandaloneUpdate_2023-10-04_084137_4224-6092.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-04.1059.6292.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine-2023-10-04.1059.3196.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerMachine_2023-10-04_105957_c7c-3d4.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.aodl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser-2023-10-04.1059.6636.1.odl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-PerUser_2023-10-04_105958_19ec-19e8.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall_2023-10-04_105950_1894-1898.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_114942_500-1efc.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115011_3184-4676.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115204_7008-7012.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_115740_6260-6264.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121144_6972-6976.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-03_121212_7980-7984.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_082907_5964-5996.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083412_6972-6976.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-04_083652_5268-4940.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\2057\StructuredQuerySchema.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.3.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\activity-stream.discovery_stream.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-child-current.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\scriptCache-current.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\startupCache.8.little
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache-current.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\startupCache\urlCache.bin
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\AC\GEH\POF.dat.LOG2
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\User.dat.LOG2
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.6dfb6b5d-10db-4868-b4ad-ef207a2dda1b.down_meta
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\778a09af-71b3-49bb-83e6-36722d62514f.up_meta_secure
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\TokenBroker\Cache\e71e1300703d5395820e448840a760f0dd25ad50.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.edb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\CacheStorage\CacheStorage.jfm
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.chk
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edb00001.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00001.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbres00002.jrs
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AppData\Indexed DB\edbtmp.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2c33d893-bc92-487f-aede-304ebfc79509}\Apps.index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{68b56d90-5571-43e6-8322-2b266dfbe856}\Apps.index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{6be4a616-5cae-40db-b3b2-65a1b8d928ac}\Apps.index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.csg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\apps.schema
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appsconversions.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\appssynonyms.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.csg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settings.schema
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{0f31ce30-ed3d-4588-b294-208da23711e6}\settingsconversions.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.ft
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{76cc83ea-ae96-47fc-9329-459e5ad2d67b}\Settings.index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.ft
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{97b27011-f8cc-4ac9-9531-d6ee8ce92324}\Settings.index
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
|
C:\Users\user\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\LocalState\DiagOutputDir\LogFile_October_3_2023__13_9_20.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\download.error
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Symbols\ntkrnlmp.pdb\68A17FAF3012B7846079AEECDBE0A5831\ntkrnlmp.pdb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\download.error
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Symbols\winload_prod.pdb\01AB9056EA9380F71644C4339E3FA1AC2\winload_prod.pdb
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
||
|
C:\Users\user\AppData\Local\bowsakkdestx.txt
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache\DF22CF8B8C3B46C10D3D5C407561EABEB57F8181.crl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\CameraRoll.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\SavedPictures.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AIXACVYBSB.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DRBXYKCKXO.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\DVWHKMNFNN.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\HYGZTMOBZN.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\JQADJOBBUH.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.pdf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\KATAXZVCPS.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LHEPQPGEWF.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\NWTVCDUMOB.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ONBQCLYSPU.pdf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\PALRGUCVEH.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SFPUSAFIOL.pdf
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf
|
HIT archive data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\UMMBDNEQBN.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.docx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.jpg
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\YPSIACHYXW.mp3
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZBEDCJPBEY.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\ZUYYDJDFVF.png
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\session-state.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\datareporting\state.json
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\previous.jsonlz4
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionstore-backups\upgrade.jsonlz4-20230927232528
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Skype\RootTools\roottools.conf
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMDocs.sav.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Adobe\Acrobat\DC\TMGrpPrm.sav.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\CameraRoll.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Documents.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Music.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Pictures.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\SavedPictures.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Libraries\Videos.library-ms.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\AIXACVYBSB.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\DRBXYKCKXO.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\DVWHKMNFNN.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\HYGZTMOBZN.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\JDDHMPCDUJ.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\JQADJOBBUH.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\KATAXZVCPS.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\LHEPQPGEWF.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\LTKMYBSEYZ.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\ONBQCLYSPU.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\PALRGUCVEH.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\RAYHIWGKDI.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\SFPUSAFIOL.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\SUAVTZKNFL.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\UBVUNTSCZJ.pdf.bgjs (copy)
|
HIT archive data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\UMMBDNEQBN.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\VLZDGUKUTZ.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\XZXHAVGRAG.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\YPSIACHYXW.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZBEDCJPBEY.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Microsoft\Windows\Recent\ZUYYDJDFVF.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Application Data\Skype\RootTools\roottools.conf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\AIXACVYBSB.docx
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\AIXACVYBSB.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\DTBZGIOOSO.xlsx
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\DTBZGIOOSO.xlsx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\UMMBDNEQBN.mp3
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\UMMBDNEQBN.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\AIXACVYBSB\XZXHAVGRAG.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\ONBQCLYSPU\YPSIACHYXW.jpg
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\ONBQCLYSPU\YPSIACHYXW.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\DVWHKMNFNN.jpg
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\DVWHKMNFNN.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\NWTVCDUMOB.png
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx
|
data
|
dropped
|
||
|
C:\Users\user\Desktop\XZXHAVGRAG\XZXHAVGRAG.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\AIXACVYBSB.docx
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\AIXACVYBSB.docx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\ONBQCLYSPU.jpg
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\ONBQCLYSPU.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\XZXHAVGRAG.pdf
|
data
|
dropped
|
||
|
C:\Users\user\Documents\AIXACVYBSB\XZXHAVGRAG.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\ONBQCLYSPU\LTKMYBSEYZ.pdf
|
data
|
dropped
|
||
|
C:\Users\user\Documents\ONBQCLYSPU\LTKMYBSEYZ.pdf.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\ONBQCLYSPU\YPSIACHYXW.jpg
|
data
|
dropped
|
||
|
C:\Users\user\Documents\ONBQCLYSPU\YPSIACHYXW.jpg.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png
|
data
|
dropped
|
||
|
C:\Users\user\Documents\XZXHAVGRAG\NWTVCDUMOB.png.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Documents\XZXHAVGRAG\YPSIACHYXW.mp3
|
data
|
dropped
|
||
|
C:\Users\user\Documents\XZXHAVGRAG\YPSIACHYXW.mp3.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeCMapFnt23.lst.bgjs (copy)
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\Local Settings\Adobe\Acrobat\DC\AdobeSysFnt23.lst.bgjs (copy)
|
PostScript document text
|
dropped
|
||
|
C:\Users\user\Local Settings\Adobe\Acrobat\DC\IconCacheAcro65536.dat.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Adobe\Color\ACECache11.lst.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jcp.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\USS.jtx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00001.jrs.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\USSres00002.jrs.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\USStmp.jtx.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\store.jfm.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Comms\UnistoreDB\store.vol.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\CLR_v2.0_32\UsageLogs\unarchiver.exe.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Edge\User Data\CrashpadMetrics-active.pma.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\FontCache\3\ListAll.Json.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\FontCache\4\CatalogCacheMetaData.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.chk.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edb.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\CacheStorage\edbtmp.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\brndlog.txt.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-ClearIconCache.log.bgjs (copy)
|
Unicode text, UTF-16, little-endian text, with very long lines (416), with no line terminators
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Internet Explorer\ie4uinit-UserConfig.log.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10879v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10880v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10881v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10882v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10902v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10906v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10907v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10924v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10925v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10940v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10952v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule10955v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11150v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11154v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11187v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11190v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11195v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11208v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11209v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11210v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11264v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11265v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11285v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11289v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11300v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11302v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11362v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11369v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11370v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11381v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11446v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11464v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11498v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11499v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11500v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11502v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11504v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11514v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11659v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11701v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11705v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11710v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11767v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11768v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11769v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11770v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11771v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11792v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11793v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11794v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11834v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11882v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11890v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11930v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11931v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11932v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11933v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11939v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11950v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11981v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule11989v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120100v3.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120107v6.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120110v4.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120112v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120119v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120120v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120125v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120126v8.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120127v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120128v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12019v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120201v14.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120205v11.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120300v3.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120304v5.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120305v3.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120307v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule12035v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120402v21.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120501v17.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120600v4.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120601v3.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120602v8.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120603v8.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120604v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120605v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120607v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120608v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120609v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120610v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120611v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120612v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120613v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120614v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120615v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120616v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120617v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120618v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120619v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120620v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120621v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120622v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120623v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120624v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120625v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120626v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120627v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120628v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120629v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120630v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120631v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120632v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120633v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120634v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120635v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120636v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120637v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120638v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120639v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120640v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120641v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120642v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120643v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120644v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120645v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120646v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120647v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120648v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120649v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120650v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120651v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120652v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120653v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120654v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120655v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120656v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120657v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120658v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120659v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120660v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120661v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120662v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120663v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120664v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120665v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120666v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120667v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120668v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120669v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120670v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120671v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120672v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120673v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120674v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120675v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120676v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120677v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120678v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120679v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120680v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120681v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule120682v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule130009v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170000v6.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170002v6.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170003v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170005v2.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170007v5.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170009v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170011v2.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170012v8.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170013v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170014v4.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170016v7.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170019v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170021v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170022v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170024v2.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170026v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170027v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170030v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170032v2.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170033v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170034v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170035v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170037v1.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170038v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\excel.exe_Rules\rule170039v0.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\officec2rclient.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\officeclicktorun.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\16.0\officesetup.exe_Rules.xml.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\Features\1-3FeatureCache.txt.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Office\Features\1-7FeatureCache.txt.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\PenWorkspace\DiscoverCacheData.dat.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\TokenBroker\Cache\f036564d8b727dbe99499799c7e51936a642f62a.tbres.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\2057\StructuredQuerySchema.bin.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.1.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\cversions.3.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Caches\{2FE9468C-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.bgjs
(copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\ExplorerStartupLog.etl.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1280.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_1920.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_2560.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_768.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_96.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\Microsoft\Windows\Explorer\iconcache_custom_stream.db.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Local Settings\bowsakkdestx.txt.bgjs (copy)
|
data
|
dropped
|
||
|
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms
|
data
|
dropped
|
||
|
C:\Users\user\Searches\winrt--{S-1-5-21-2246122658-3693405117-2476756634-1002}-.searchconnector-ms.bgjs (copy)
|
data
|
dropped
|
There are 1379 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\8jvTeVxooN.exe
|
"C:\Users\user\Desktop\8jvTeVxooN.exe"
|
|
|
|
C:\Users\user\Desktop\8jvTeVxooN.exe
|
"C:\Users\user\Desktop\8jvTeVxooN.exe"
|
|
|
|
C:\Users\user\Desktop\8jvTeVxooN.exe
|
"C:\Users\user\Desktop\8jvTeVxooN.exe" --Admin IsNotAutoStart IsNotTask
|
|
|
|
C:\Users\user\Desktop\8jvTeVxooN.exe
|
"C:\Users\user\Desktop\8jvTeVxooN.exe" --Admin IsNotAutoStart IsNotTask
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe --Task
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe --Task
|
|
|
|
C:\Users\user\AppData\Local\173a81f0-f242-45ec-8685-036e62f4f13f\build2.exe
|
"C:\Users\user\AppData\Local\173a81f0-f242-45ec-8685-036e62f4f13f\build2.exe"
|
|
|
|
C:\Users\user\AppData\Local\173a81f0-f242-45ec-8685-036e62f4f13f\build2.exe
|
"C:\Users\user\AppData\Local\173a81f0-f242-45ec-8685-036e62f4f13f\build2.exe"
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
"C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe" --AutoStart
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
"C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe" --AutoStart
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
"C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe" --AutoStart
|
|
|
|
C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe
|
"C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631\8jvTeVxooN.exe" --AutoStart
|
|
|
|
C:\Windows\SysWOW64\icacls.exe
|
icacls "C:\Users\user\AppData\Local\b7814b20-ebff-4c00-9012-586719229631" /deny *S-1-1-0:(OI)(CI)(DE,DC)
|
There are 3 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637
|
85.11.159.22
|
|
|
|
http://cajgtus.com/test1/get.php?pid=F8AFCDC4E800A3319FFB343E83099637&first=true
|
85.11.159.22
|
|
|
|
http://cajgtus.com/files/1/build3.exe
|
85.11.159.22
|
|
|
|
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
|
https://duckduckgo.com/ac/?q=
|
unknown
|
||
|
http://www.zte.com.cn
|
unknown
|
||
|
https://95.217.9.149ECGIE
|
unknown
|
||
|
https://www.gstatic.cn/recaptcha/
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=engl
|
unknown
|
||
|
https://95.217.9.149/3X#
|
unknown
|
||
|
https://95.217.9.149/FCFC
|
unknown
|
||
|
http://www.valvesoftware.com/legal.htm
|
unknown
|
||
|
https://www.youtube.com
|
unknown
|
||
|
https://95.217.9.149/vl
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
|
unknown
|
||
|
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17rer.exe
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
|
unknown
|
||
|
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
|
unknown
|
||
|
https://95.217.9.149/softokn3.dlllt
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=1_BxDGVvfXwv&am
|
unknown
|
||
|
https://s.ytimg.com;
|
unknown
|
||
|
http://www.reddit.com/
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=c4UneKQJ
|
unknown
|
||
|
https://95.217.9.149sqln.dlls.exe
|
unknown
|
||
|
https://95.217.9.149/Ag
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonl
|
unknown
|
||
|
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
|
http://sdfjhuz.com/dl/build2.exe$run
|
unknown
|
||
|
https://steamcommunity.com/profiles/76561199673019888/badges
|
unknown
|
||
|
https://www.ecosia.org/newtab/
|
unknown
|
||
|
https://lv.queniujq.cn
|
unknown
|
||
|
https://www.youtube.com/
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonf
|
unknown
|
||
|
https://95.217.9.149DBFHD
|
unknown
|
||
|
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonc
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
|
unknown
|
||
|
https://95.217.9.149/msvcp140.dll2
|
unknown
|
||
|
https://95.217.9.149/softokn3.dllsoft
|
unknown
|
||
|
https://api.2ip.ua/geo.json7
|
unknown
|
||
|
https://www.google.com/recaptcha/
|
unknown
|
||
|
https://checkout.steampowered.com/
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonJ
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
|
unknown
|
||
|
https://t.me/irfailAt
|
unknown
|
||
|
https://95.217.9.149/nss3.dllicrosoft
|
unknown
|
||
|
https://95.217.9.149
|
unknown
|
||
|
https://95.217.9.149/yg
|
unknown
|
||
|
https://help.steampowered.com/en/
|
unknown
|
||
|
https://community.akamai.steamstatic.com/
|
unknown
|
||
|
http://www.amazon.com/
|
unknown
|
||
|
http://www.twitter.com/
|
unknown
|
||
|
https://recaptcha.net/recaptcha/;
|
unknown
|
||
|
http://www.openssl.org/support/faq.html
|
unknown
|
||
|
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
|
unknown
|
||
|
https://broadcast.st.dl.eccdnx.com
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonv
|
unknown
|
||
|
https://api.2ip.ua/geo.jsonIcnw-
|
unknown
|
||
|
https://95.217.9.149/freebl3.dllme
|
unknown
|
||
|
https://steamcommunity.com/workshop/
|
unknown
|
||
|
https://login.steampowered.com/
|
unknown
|
||
|
https://store.steampowered.com/legal/
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e
|
unknown
|
||
|
http://www.nytimes.com/
|
unknown
|
||
|
https://95.217.9.149/FX
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv
|
unknown
|
||
|
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
||
|
https://steamcommunity.com/profiles/76561199673019888ve74rMozilla/5.0
|
unknown
|
||
|
https://store.steampowered.com/
|
unknown
|
||
|
https://api.2ip.ua/geo.jsont#K2b1
|
unknown
|
||
|
http://cajgtus.com/files/1/build3.exe$runo
|
unknown
|
||
|
http://cajgtus.com/files/1/build3.exerun
|
unknown
|
||
|
https://95.217.9.149/freebl3.dll_11
|
unknown
|
||
|
https://steamcommunity.com/profiles/76561199673019888
|
184.30.90.143
|
||
|
https://api.2ip.ua/geo.json
|
172.67.139.220
|
||
|
http://127.0.0.1:27060
|
unknown
|
||
|
https://95.217.9.149/mozglue.dllosoft
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh
|
unknown
|
||
|
https://95.217.9.149/nss3.dll
|
unknown
|
||
|
https://95.217.9.149/sqln.dllitP
|
unknown
|
||
|
https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
|
unknown
|
||
|
http://sdfjhuz.com/dl/build2.exerun
|
unknown
|
||
|
https://api.steampowered.com/
|
unknown
|
||
|
http://www.wikipedia.com/
|
unknown
|
||
|
https://95.217.9.149/softokn3.dllF
|
unknown
|
||
|
https://assets.activity.windows.com
|
unknown
|
||
|
http://www.live.com/
|
unknown
|
||
|
https://95.217.9.149/freebl3.dllg
|
unknown
|
||
|
https://store.steampowered.com/mobile
|
unknown
|
||
|
https://activity.windows.com
|
unknown
|
||
|
http://cajgtus.com/files/1/build3.exe$run2F
|
unknown
|
||
|
https://95.217.9.149/softokn3.dll
|
unknown
|
||
|
https://95.217.9.149/msvcp140.dllsoft
|
unknown
|
||
|
https://player.vimeo.com
|
unknown
|
||
|
http://cajgtus.com/files/1/build3.exe$run
|
unknown
|
||
|
https://95.217.9.149/sqln.dllUSC
|
unknown
|
||
|
https://assets.activity.windows.com/v1/assets
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
sdfjhuz.com
|
123.140.161.243
|
|
|
|
cajgtus.com
|
85.11.159.22
|
|
|
|
steamcommunity.com
|
184.30.90.143
|
||
|
api.2ip.ua
|
172.67.139.220
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
123.140.161.243
|
sdfjhuz.com
|
Korea Republic of
|
|
|
|
85.11.159.22
|
cajgtus.com
|
Bulgaria
|
|
|
|
172.67.139.220
|
api.2ip.ua
|
United States
|
||
|
184.30.90.143
|
steamcommunity.com
|
United States
|
||
|
95.217.9.149
|
unknown
|
Germany
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
SysHelper
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
|
SysHelper
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
5E40000
|
direct allocation
|
page execute and read and write
|
|
|
|
5E70000
|
direct allocation
|
page execute and read and write
|
|
|
|
5E70000
|
direct allocation
|
page execute and read and write
|
|
|
|
5DA0000
|
direct allocation
|
page execute and read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
3660000
|
direct allocation
|
page execute and read and write
|
|
|
|
434000
|
remote allocation
|
page execute and read and write
|
|
|
|
881000
|
heap
|
page read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
5E90000
|
direct allocation
|
page execute and read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
400000
|
remote allocation
|
page execute and read and write
|
|
|
|
420000
|
unkown
|
page write copy
|
||
|
3191000
|
heap
|
page read and write
|
||
|
374E000
|
heap
|
page read and write
|
||
|
68B000
|
heap
|
page read and write
|
||
|
30ED000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
28AF000
|
stack
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3189000
|
heap
|
page read and write
|
||
|
2F5F000
|
stack
|
page read and write
|
||
|
9C8000
|
heap
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
2DEE000
|
stack
|
page read and write
|
||
|
4100000
|
heap
|
page read and write
|
||
|
418000
|
unkown
|
page read and write
|
||
|
3A58000
|
heap
|
page read and write
|
||
|
9FB000
|
heap
|
page read and write
|
||
|
529000
|
remote allocation
|
page execute and read and write
|
||
|
45DF000
|
stack
|
page read and write
|
||
|
193000
|
stack
|
page read and write
|
||
|
1D7F000
|
stack
|
page read and write
|
||
|
35E3000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2CFE000
|
stack
|
page read and write
|
||
|
318B000
|
heap
|
page read and write
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
9D0000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
45E0000
|
heap
|
page read and write
|
||
|
64F000
|
heap
|
page read and write
|
||
|
44F0000
|
heap
|
page read and write
|
||
|
377B000
|
heap
|
page read and write
|
||
|
9EA000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3183000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
9E9000
|
heap
|
page read and write
|
||
|
634000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3643000
|
heap
|
page read and write
|
||
|
3154000
|
heap
|
page read and write
|
||
|
2CAF000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2DFE000
|
stack
|
page read and write
|
||
|
28FE000
|
stack
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
311A000
|
heap
|
page read and write
|
||
|
30BA000
|
heap
|
page read and write
|
||
|
31A8000
|
heap
|
page read and write
|
||
|
365F000
|
stack
|
page read and write
|
||
|
3A94000
|
heap
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
36E7000
|
heap
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
409E000
|
unkown
|
page read and write
|
||
|
5F8000
|
heap
|
page read and write
|
||
|
31AD000
|
heap
|
page read and write
|
||
|
41DE000
|
stack
|
page read and write
|
||
|
3A94000
|
heap
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
317F000
|
heap
|
page read and write
|
||
|
3A85000
|
heap
|
page read and write
|
||
|
3714000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3B11000
|
heap
|
page read and write
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
941000
|
heap
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3147000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2E5E000
|
stack
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
797000
|
heap
|
page read and write
|
||
|
781000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
317B000
|
heap
|
page read and write
|
||
|
3A94000
|
heap
|
page read and write
|
||
|
409E000
|
unkown
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
2CAF000
|
stack
|
page read and write
|
||
|
3A9D000
|
heap
|
page read and write
|
||
|
38F4000
|
heap
|
page read and write
|
||
|
3189000
|
heap
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
9C7000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3774000
|
heap
|
page read and write
|
||
|
1BFEC000
|
stack
|
page read and write
|
||
|
2A6E000
|
stack
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
27AE000
|
stack
|
page read and write
|
||
|
3165000
|
heap
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
31A8000
|
heap
|
page read and write
|
||
|
370B000
|
heap
|
page read and write
|
||
|
88B000
|
heap
|
page read and write
|
||
|
39AB000
|
heap
|
page read and write
|
||
|
368A000
|
heap
|
page read and write
|
||
|
3166000
|
heap
|
page read and write
|
||
|
514000
|
remote allocation
|
page execute and read and write
|
||
|
3780000
|
heap
|
page read and write
|
||
|
936000
|
heap
|
page read and write
|
||
|
32FF000
|
stack
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
3943000
|
heap
|
page read and write
|
||
|
375C000
|
heap
|
page read and write
|
||
|
19B000
|
stack
|
page read and write
|
||
|
75C000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
DDEF000
|
stack
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
319D000
|
heap
|
page read and write
|
||
|
3615000
|
heap
|
page read and write
|
||
|
3A05000
|
heap
|
page read and write
|
||
|
3189000
|
heap
|
page read and write
|
||
|
3A74000
|
heap
|
page read and write
|
||
|
3126000
|
heap
|
page read and write
|
||
|
29FF000
|
stack
|
page read and write
|
||
|
315E000
|
stack
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
3601000
|
heap
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
3673000
|
heap
|
page read and write
|
||
|
901000
|
heap
|
page read and write
|
||
|
931000
|
heap
|
page read and write
|
||
|
34B0000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
8DB000
|
heap
|
page read and write
|
||
|
2E5E000
|
stack
|
page read and write
|
||
|
941000
|
heap
|
page read and write
|
||
|
319C000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
A80000
|
heap
|
page read and write
|
||
|
52B000
|
remote allocation
|
page execute and read and write
|
||
|
3A48000
|
heap
|
page read and write
|
||
|
273F000
|
stack
|
page read and write
|
||
|
3B00000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
A35000
|
heap
|
page read and write
|
||
|
277E000
|
stack
|
page read and write
|
||
|
371B000
|
heap
|
page read and write
|
||
|
9FB000
|
heap
|
page read and write
|
||
|
B86F000
|
stack
|
page read and write
|
||
|
93F000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3718000
|
heap
|
page read and write
|
||
|
3703000
|
heap
|
page read and write
|
||
|
2B6D000
|
stack
|
page read and write
|
||
|
39D2000
|
heap
|
page read and write
|
||
|
317A000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
28FE000
|
stack
|
page read and write
|
||
|
1A04000
|
unkown
|
page readonly
|
||
|
35B1000
|
heap
|
page read and write
|
||
|
63F000
|
remote allocation
|
page execute and read and write
|
||
|
374E000
|
heap
|
page read and write
|
||
|
35BC000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
7AA000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
590000
|
heap
|
page read and write
|
||
|
64F000
|
heap
|
page read and write
|
||
|
366A000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
6B6000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
19B000
|
stack
|
page read and write
|
||
|
253F000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
366E000
|
heap
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
216F000
|
stack
|
page read and write
|
||
|
377B000
|
heap
|
page read and write
|
||
|
3A3C000
|
heap
|
page read and write
|
||
|
3A26000
|
heap
|
page read and write
|
||
|
ADE000
|
stack
|
page read and write
|
||
|
3933000
|
heap
|
page read and write
|
||
|
3169000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
1A20000
|
heap
|
page read and write
|
||
|
A21000
|
heap
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
35BA000
|
heap
|
page read and write
|
||
|
31A8000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
311A000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
36B0000
|
direct allocation
|
page read and write
|
||
|
3972000
|
heap
|
page read and write
|
||
|
9D5000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
39D2000
|
heap
|
page read and write
|
||
|
2CAD000
|
stack
|
page read and write
|
||
|
7AE000
|
heap
|
page read and write
|
||
|
24FE000
|
stack
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3A74000
|
heap
|
page read and write
|
||
|
3983000
|
heap
|
page read and write
|
||
|
8F9000
|
heap
|
page read and write
|
||
|
1B8E000
|
heap
|
page read and write
|
||
|
3774000
|
heap
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
580000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
318D000
|
heap
|
page read and write
|
||
|
640000
|
heap
|
page read and write
|
||
|
2BAE000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
933000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
8D3000
|
heap
|
page read and write
|
||
|
35F4000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3739000
|
heap
|
page read and write
|
||
|
19A00000
|
remote allocation
|
page read and write
|
||
|
5E6000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3B00000
|
heap
|
page read and write
|
||
|
9EB000
|
heap
|
page read and write
|
||
|
30C0000
|
heap
|
page read and write
|
||
|
2DED000
|
stack
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
370E000
|
heap
|
page read and write
|
||
|
1742E000
|
stack
|
page read and write
|
||
|
311E000
|
stack
|
page read and write
|
||
|
371B000
|
heap
|
page read and write
|
||
|
3164000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
360B000
|
heap
|
page read and write
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
73C000
|
heap
|
page read and write
|
||
|
41E000
|
unkown
|
page write copy
|
||
|
3190000
|
heap
|
page read and write
|
||
|
30C4000
|
heap
|
page read and write
|
||
|
41DE000
|
stack
|
page read and write
|
||
|
923000
|
heap
|
page read and write
|
||
|
91F000
|
heap
|
page read and write
|
||
|
5A8000
|
heap
|
page read and write
|
||
|
2D4D000
|
stack
|
page read and write
|
||
|
929000
|
heap
|
page read and write
|
||
|
931000
|
heap
|
page read and write
|
||
|
365F000
|
heap
|
page read and write
|
||
|
3726000
|
heap
|
page read and write
|
||
|
52B000
|
remote allocation
|
page execute and read and write
|
||
|
A03000
|
heap
|
page read and write
|
||
|
410000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page read and write
|
||
|
901000
|
heap
|
page read and write
|
||
|
8F9000
|
heap
|
page read and write
|
||
|
6D8000
|
heap
|
page read and write
|
||
|
1C7000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
206E000
|
stack
|
page read and write
|
||
|
3668000
|
heap
|
page read and write
|
||
|
1E550000
|
trusted library allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
930000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3A84000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2B6D000
|
stack
|
page read and write
|
||
|
3767000
|
heap
|
page read and write
|
||
|
1D7000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
3749000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
39DA000
|
heap
|
page read and write
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
3191000
|
heap
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
75B000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
A0E000
|
stack
|
page read and write
|
||
|
8AE000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
511000
|
remote allocation
|
page execute and read and write
|
||
|
193000
|
stack
|
page read and write
|
||
|
3658000
|
heap
|
page read and write
|
||
|
36EA000
|
heap
|
page read and write
|
||
|
277E000
|
stack
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
366D000
|
heap
|
page read and write
|
||
|
1E95F000
|
direct allocation
|
page readonly
|
||
|
266E000
|
stack
|
page read and write
|
||
|
655000
|
heap
|
page read and write
|
||
|
4368000
|
heap
|
page read and write
|
||
|
3126000
|
heap
|
page read and write
|
||
|
2DFE000
|
stack
|
page read and write
|
||
|
28FE000
|
stack
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
41B000
|
unkown
|
page write copy
|
||
|
3790000
|
heap
|
page read and write
|
||
|
75C000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
3145000
|
heap
|
page read and write
|
||
|
39B1000
|
heap
|
page read and write
|
||
|
936000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3A6F000
|
heap
|
page read and write
|
||
|
276F000
|
stack
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
3661000
|
heap
|
page read and write
|
||
|
7AE000
|
heap
|
page read and write
|
||
|
3982000
|
heap
|
page read and write
|
||
|
2BAE000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
319C000
|
heap
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
57E000
|
stack
|
page read and write
|
||
|
2E9E000
|
stack
|
page read and write
|
||
|
37A4000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
39C3000
|
heap
|
page read and write
|
||
|
35E3000
|
heap
|
page read and write
|
||
|
2A6E000
|
stack
|
page read and write
|
||
|
6F7000
|
heap
|
page read and write
|
||
|
14EEE000
|
stack
|
page read and write
|
||
|
1BF7F000
|
stack
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3115000
|
heap
|
page read and write
|
||
|
4B2000
|
unkown
|
page read and write
|
||
|
2E5E000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2E5E000
|
stack
|
page read and write
|
||
|
28AF000
|
stack
|
page read and write
|
||
|
3A51000
|
heap
|
page read and write
|
||
|
317B000
|
heap
|
page read and write
|
||
|
41B000
|
unkown
|
page write copy
|
||
|
363A000
|
heap
|
page read and write
|
||
|
3668000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3115000
|
heap
|
page read and write
|
||
|
3168000
|
heap
|
page read and write
|
||
|
689000
|
heap
|
page read and write
|
||
|
197000
|
stack
|
page read and write
|
||
|
52B000
|
remote allocation
|
page execute and read and write
|
||
|
3A0C000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
73D000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
4630000
|
heap
|
page execute and read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
755000
|
heap
|
page read and write
|
||
|
3136000
|
heap
|
page read and write
|
||
|
8C9000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
424E000
|
stack
|
page read and write
|
||
|
786000
|
heap
|
page read and write
|
||
|
AE7000
|
heap
|
page read and write
|
||
|
373A000
|
heap
|
page read and write
|
||
|
8F0000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
314A000
|
heap
|
page read and write
|
||
|
3154000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
103CE000
|
stack
|
page read and write
|
||
|
273F000
|
stack
|
page read and write
|
||
|
277E000
|
stack
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
35D9000
|
heap
|
page read and write
|
||
|
1B10000
|
heap
|
page read and write
|
||
|
634000
|
heap
|
page read and write
|
||
|
3943000
|
heap
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
757000
|
heap
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
370E000
|
heap
|
page read and write
|
||
|
39BB000
|
heap
|
page read and write
|
||
|
355E000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
414E000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3A6F000
|
heap
|
page read and write
|
||
|
51A000
|
remote allocation
|
page execute and read and write
|
||
|
3126000
|
heap
|
page read and write
|
||
|
359D000
|
stack
|
page read and write
|
||
|
314D000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
8F6000
|
heap
|
page read and write
|
||
|
660000
|
heap
|
page read and write
|
||
|
3168000
|
heap
|
page read and write
|
||
|
263F000
|
stack
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
370F000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9D5000
|
heap
|
page read and write
|
||
|
373A000
|
heap
|
page read and write
|
||
|
9C7000
|
heap
|
page read and write
|
||
|
310F000
|
heap
|
page read and write
|
||
|
938000
|
heap
|
page read and write
|
||
|
3194000
|
heap
|
page read and write
|
||
|
395A000
|
heap
|
page read and write
|
||
|
4190000
|
heap
|
page read and write
|
||
|
75C000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
1C5000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
39EA000
|
heap
|
page read and write
|
||
|
3755000
|
heap
|
page read and write
|
||
|
1D5000
|
heap
|
page read and write
|
||
|
735000
|
heap
|
page read and write
|
||
|
2E60000
|
remote allocation
|
page read and write
|
||
|
A10000
|
heap
|
page read and write
|
||
|
3191000
|
heap
|
page read and write
|
||
|
3654000
|
heap
|
page read and write
|
||
|
35F8000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
400000
|
unkown
|
page readonly
|
||
|
F780000
|
heap
|
page read and write
|
||
|
6E6000
|
heap
|
page read and write
|
||
|
920000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
368E000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
6C5000
|
heap
|
page read and write
|
||
|
19B000
|
stack
|
page read and write
|
||
|
9C8000
|
heap
|
page read and write
|
||
|
6F3000
|
heap
|
page read and write
|
||
|
31AB000
|
heap
|
page read and write
|
||
|
3610000
|
heap
|
page read and write
|
||
|
39C2000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3604000
|
heap
|
page read and write
|
||
|
1E992000
|
direct allocation
|
page read and write
|
||
|
376C000
|
heap
|
page read and write
|
||
|
3614000
|
heap
|
page read and write
|
||
|
793000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
529000
|
remote allocation
|
page execute and read and write
|
||
|
3682000
|
heap
|
page read and write
|
||
|
318F000
|
heap
|
page read and write
|
||
|
378F000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
760000
|
heap
|
page read and write
|
||
|
197000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
2BAE000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
35B1000
|
heap
|
page read and write
|
||
|
933000
|
heap
|
page read and write
|
||
|
20DE4000
|
heap
|
page read and write
|
||
|
39F5000
|
heap
|
page read and write
|
||
|
4501000
|
heap
|
page execute and read and write
|
||
|
3606000
|
heap
|
page read and write
|
||
|
3A94000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
7AE000
|
heap
|
page read and write
|
||
|
1E650000
|
heap
|
page read and write
|
||
|
3A26000
|
heap
|
page read and write
|
||
|
3685000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
784A000
|
heap
|
page read and write
|
||
|
922000
|
heap
|
page read and write
|
||
|
3973000
|
heap
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
3616000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
377F000
|
heap
|
page read and write
|
||
|
41E0000
|
heap
|
page read and write
|
||
|
8D3000
|
heap
|
page read and write
|
||
|
4250000
|
heap
|
page read and write
|
||
|
3A3C000
|
heap
|
page read and write
|
||
|
64F000
|
heap
|
page read and write
|
||
|
368E000
|
heap
|
page read and write
|
||
|
558000
|
remote allocation
|
page execute and read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3157000
|
heap
|
page read and write
|
||
|
1036F000
|
stack
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
1A04000
|
unkown
|
page readonly
|
||
|
37A6000
|
heap
|
page read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
311D000
|
heap
|
page read and write
|
||
|
30CC000
|
heap
|
page read and write
|
||
|
35C0000
|
heap
|
page read and write
|
||
|
39B4000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
315F000
|
heap
|
page read and write
|
||
|
1B8A000
|
heap
|
page read and write
|
||
|
3A1D000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
90F000
|
stack
|
page read and write
|
||
|
419000
|
unkown
|
page write copy
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3749000
|
heap
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
360C000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
978000
|
heap
|
page read and write
|
||
|
1C7000
|
heap
|
page read and write
|
||
|
A0F000
|
stack
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
2F5F000
|
stack
|
page read and write
|
||
|
3788000
|
heap
|
page read and write
|
||
|
2B6D000
|
stack
|
page read and write
|
||
|
2BAE000
|
stack
|
page read and write
|
||
|
540000
|
heap
|
page read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
36C0000
|
heap
|
page read and write
|
||
|
887000
|
heap
|
page read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
3169000
|
heap
|
page read and write
|
||
|
373E000
|
heap
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
6B0000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
35DF000
|
heap
|
page read and write
|
||
|
3178000
|
heap
|
page read and write
|
||
|
6080000
|
heap
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
1EAB0000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
6BD000
|
heap
|
page read and write
|
||
|
73C000
|
heap
|
page read and write
|
||
|
311D000
|
heap
|
page read and write
|
||
|
3780000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
312A000
|
heap
|
page read and write
|
||
|
35B8000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
5A0000
|
heap
|
page read and write
|
||
|
4280000
|
heap
|
page read and write
|
||
|
3658000
|
heap
|
page read and write
|
||
|
645000
|
heap
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
35C6000
|
heap
|
page read and write
|
||
|
4402000
|
heap
|
page execute and read and write
|
||
|
30E7000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
923000
|
heap
|
page read and write
|
||
|
36DF000
|
heap
|
page read and write
|
||
|
19E000
|
stack
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
38F0000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
3AD1000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
25FF000
|
stack
|
page read and write
|
||
|
1295E000
|
stack
|
page read and write
|
||
|
310F000
|
heap
|
page read and write
|
||
|
442F000
|
stack
|
page read and write
|
||
|
3670000
|
heap
|
page read and write
|
||
|
3A97000
|
heap
|
page read and write
|
||
|
70E000
|
stack
|
page read and write
|
||
|
3174000
|
heap
|
page read and write
|
||
|
43FF000
|
stack
|
page read and write
|
||
|
75A000
|
heap
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
316C000
|
heap
|
page read and write
|
||
|
28FE000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
315A000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
41A000
|
unkown
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
880000
|
heap
|
page read and write
|
||
|
3588000
|
direct allocation
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
3952000
|
heap
|
page read and write
|
||
|
9D7000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
41A000
|
unkown
|
page read and write
|
||
|
319D000
|
heap
|
page read and write
|
||
|
469F000
|
stack
|
page read and write
|
||
|
31DA000
|
heap
|
page read and write
|
||
|
3616000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
4290000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3162000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
30E4000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
735000
|
heap
|
page read and write
|
||
|
31AB000
|
heap
|
page read and write
|
||
|
35E4000
|
heap
|
page read and write
|
||
|
20EAB000
|
heap
|
page read and write
|
||
|
45C0000
|
heap
|
page read and write
|
||
|
2CAF000
|
stack
|
page read and write
|
||
|
35B8000
|
heap
|
page read and write
|
||
|
409E000
|
unkown
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
2A6E000
|
stack
|
page read and write
|
||
|
6BD000
|
heap
|
page read and write
|
||
|
1A04000
|
unkown
|
page readonly
|
||
|
887000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
19C000
|
stack
|
page read and write
|
||
|
3126000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
64F000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
193000
|
stack
|
page read and write
|
||
|
3AC0000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
887000
|
heap
|
page read and write
|
||
|
529000
|
remote allocation
|
page execute and read and write
|
||
|
312A000
|
heap
|
page read and write
|
||
|
65F000
|
heap
|
page read and write
|
||
|
30DC000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
9F3000
|
heap
|
page read and write
|
||
|
4B2000
|
unkown
|
page read and write
|
||
|
1E99F000
|
direct allocation
|
page readonly
|
||
|
3A6F000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3732000
|
heap
|
page read and write
|
||
|
314A000
|
heap
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
371B000
|
heap
|
page read and write
|
||
|
689000
|
heap
|
page read and write
|
||
|
1748E000
|
stack
|
page read and write
|
||
|
3963000
|
heap
|
page read and write
|
||
|
30D8000
|
heap
|
page read and write
|
||
|
3647000
|
heap
|
page read and write
|
||
|
3165000
|
heap
|
page read and write
|
||
|
1B00000
|
heap
|
page read and write
|
||
|
DE2E000
|
stack
|
page read and write
|
||
|
810000
|
heap
|
page read and write
|
||
|
273F000
|
stack
|
page read and write
|
||
|
793000
|
heap
|
page read and write
|
||
|
311D000
|
heap
|
page read and write
|
||
|
28FE000
|
stack
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
35C2000
|
heap
|
page read and write
|
||
|
35CB000
|
heap
|
page read and write
|
||
|
19A00000
|
remote allocation
|
page read and write
|
||
|
710000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
411000
|
unkown
|
page readonly
|
||
|
2F5F000
|
stack
|
page read and write
|
||
|
318D000
|
heap
|
page read and write
|
||
|
1EAC6000
|
heap
|
page read and write
|
||
|
3A3C000
|
heap
|
page read and write
|
||
|
360E000
|
heap
|
page read and write
|
||
|
3260000
|
heap
|
page read and write
|
||
|
266F000
|
stack
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
52B000
|
remote allocation
|
page execute and read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
40D0000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
6B8000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
52B000
|
remote allocation
|
page execute and read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
35C7000
|
heap
|
page read and write
|
||
|
590000
|
heap
|
page read and write
|
||
|
35E3000
|
heap
|
page read and write
|
||
|
3616000
|
heap
|
page read and write
|
||
|
365F000
|
heap
|
page read and write
|
||
|
A29000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3A97000
|
heap
|
page read and write
|
||
|
1D0000
|
heap
|
page read and write
|
||
|
3798000
|
heap
|
page read and write
|
||
|
366A000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3643000
|
heap
|
page read and write
|
||
|
7B6000
|
heap
|
page read and write
|
||
|
BD0000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
42A0000
|
heap
|
page read and write
|
||
|
30FE000
|
heap
|
page read and write
|
||
|
723000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page read and write
|
||
|
3A58000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
319E000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
1B80000
|
heap
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
4482000
|
heap
|
page execute and read and write
|
||
|
3668000
|
heap
|
page read and write
|
||
|
1EAB6000
|
heap
|
page read and write
|
||
|
670000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
4330000
|
heap
|
page read and write
|
||
|
1E640000
|
heap
|
page read and write
|
||
|
263E000
|
stack
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
1E8B6000
|
direct allocation
|
page execute read
|
||
|
AE0000
|
heap
|
page read and write
|
||
|
193000
|
stack
|
page read and write
|
||
|
35CB000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
3143000
|
heap
|
page read and write
|
||
|
2F9F000
|
stack
|
page read and write
|
||
|
65E000
|
stack
|
page read and write
|
||
|
3654000
|
heap
|
page read and write
|
||
|
A09000
|
heap
|
page read and write
|
||
|
312A000
|
heap
|
page read and write
|
||
|
640000
|
heap
|
page read and write
|
||
|
941000
|
heap
|
page read and write
|
||
|
723000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
30EB000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
9B000
|
stack
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
39B1000
|
heap
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
6A3000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
30DC000
|
heap
|
page read and write
|
||
|
3A9D000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
4B2000
|
unkown
|
page read and write
|
||
|
409E000
|
unkown
|
page read and write
|
||
|
425E000
|
stack
|
page read and write
|
||
|
37A2000
|
heap
|
page read and write
|
||
|
318C000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3126000
|
heap
|
page read and write
|
||
|
31EC000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
818000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
3A59000
|
heap
|
page read and write
|
||
|
936000
|
heap
|
page read and write
|
||
|
316E000
|
heap
|
page read and write
|
||
|
A21000
|
heap
|
page read and write
|
||
|
790000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
310F000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
2FB0000
|
heap
|
page read and write
|
||
|
68E000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3141000
|
heap
|
page read and write
|
||
|
3172000
|
heap
|
page read and write
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
312A000
|
heap
|
page read and write
|
||
|
30B1000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page read and write
|
||
|
4208000
|
heap
|
page read and write
|
||
|
447F000
|
stack
|
page read and write
|
||
|
7840000
|
heap
|
page read and write
|
||
|
3972000
|
heap
|
page read and write
|
||
|
67A000
|
heap
|
page read and write
|
||
|
A27000
|
heap
|
page read and write
|
||
|
3604000
|
heap
|
page read and write
|
||
|
3191000
|
heap
|
page read and write
|
||
|
3AB1000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
756000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
31A8000
|
heap
|
page read and write
|
||
|
2E60000
|
remote allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
366A000
|
heap
|
page read and write
|
||
|
30FE000
|
heap
|
page read and write
|
||
|
3178000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
3178000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
1EABE000
|
heap
|
page read and write
|
||
|
312A000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3148000
|
heap
|
page read and write
|
||
|
35C8000
|
heap
|
page read and write
|
||
|
3982000
|
heap
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
757000
|
heap
|
page read and write
|
||
|
3194000
|
heap
|
page read and write
|
||
|
698000
|
heap
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
31AC000
|
heap
|
page read and write
|
||
|
377B000
|
heap
|
page read and write
|
||
|
A0B000
|
heap
|
page read and write
|
||
|
418000
|
unkown
|
page write copy
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
6F2000
|
heap
|
page read and write
|
||
|
1E52D000
|
stack
|
page read and write
|
||
|
1290F000
|
stack
|
page read and write
|
||
|
7C0000
|
heap
|
page read and write
|
||
|
4190000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
20E02000
|
heap
|
page read and write
|
||
|
371C000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
931000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
29FF000
|
stack
|
page read and write
|
||
|
37A2000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
41B000
|
unkown
|
page write copy
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
529000
|
remote allocation
|
page execute and read and write
|
||
|
35B0000
|
trusted library allocation
|
page read and write
|
||
|
318F000
|
heap
|
page read and write
|
||
|
3164000
|
heap
|
page read and write
|
||
|
1E651000
|
heap
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
3780000
|
heap
|
page read and write
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
5FC0000
|
direct allocation
|
page read and write
|
||
|
3661000
|
heap
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
756000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
31A0000
|
heap
|
page read and write
|
||
|
680000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
35B0000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
314B000
|
heap
|
page read and write
|
||
|
319D000
|
heap
|
page read and write
|
||
|
36DF000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2CFE000
|
stack
|
page read and write
|
||
|
3688000
|
heap
|
page read and write
|
||
|
368C000
|
heap
|
page read and write
|
||
|
3778000
|
heap
|
page read and write
|
||
|
7BC000
|
heap
|
page read and write
|
||
|
3799000
|
heap
|
page read and write
|
||
|
30EC000
|
heap
|
page read and write
|
||
|
370F000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3175000
|
heap
|
page read and write
|
||
|
3185000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
3798000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
365C000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
263E000
|
stack
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
4460000
|
direct allocation
|
page read and write
|
||
|
368E000
|
heap
|
page read and write
|
||
|
A03000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
1F5000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
30ED000
|
heap
|
page read and write
|
||
|
2CAE000
|
stack
|
page read and write
|
||
|
92C000
|
heap
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
316E000
|
heap
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
368E000
|
heap
|
page read and write
|
||
|
1B9E000
|
heap
|
page execute and read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
7A4000
|
heap
|
page read and write
|
||
|
37A2000
|
heap
|
page read and write
|
||
|
7BC000
|
heap
|
page read and write
|
||
|
6B1000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
262F000
|
stack
|
page read and write
|
||
|
29FF000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
1E95D000
|
direct allocation
|
page execute read
|
||
|
1E9B3000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
3560000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3943000
|
heap
|
page read and write
|
||
|
A3C000
|
heap
|
page read and write
|
||
|
334A000
|
stack
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
44C0000
|
heap
|
page read and write
|
||
|
A20000
|
heap
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
1E99D000
|
direct allocation
|
page readonly
|
||
|
610000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
1B5E000
|
stack
|
page read and write
|
||
|
1E968000
|
direct allocation
|
page readonly
|
||
|
3152000
|
heap
|
page read and write
|
||
|
3932000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
30DE000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
4288000
|
heap
|
page read and write
|
||
|
3908000
|
heap
|
page read and write
|
||
|
366A000
|
heap
|
page read and write
|
||
|
35E3000
|
heap
|
page read and write
|
||
|
3637000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3145000
|
heap
|
page read and write
|
||
|
418000
|
unkown
|
page write copy
|
||
|
3A94000
|
heap
|
page read and write
|
||
|
36D3000
|
heap
|
page read and write
|
||
|
29FF000
|
stack
|
page read and write
|
||
|
A0B000
|
heap
|
page read and write
|
||
|
39B7000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
4100000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
7BC000
|
heap
|
page read and write
|
||
|
3150000
|
heap
|
page read and write
|
||
|
37A6000
|
heap
|
page read and write
|
||
|
375B000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
2CEE000
|
stack
|
page read and write
|
||
|
41B000
|
unkown
|
page write copy
|
||
|
195000
|
stack
|
page read and write
|
||
|
3B19000
|
heap
|
page read and write
|
||
|
9D6000
|
heap
|
page read and write
|
||
|
3604000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
1D7000
|
heap
|
page read and write
|
||
|
35B1000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
753000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3220000
|
heap
|
page read and write
|
||
|
2D8D000
|
stack
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3616000
|
heap
|
page read and write
|
||
|
1A02000
|
unkown
|
page read and write
|
||
|
3A97000
|
heap
|
page read and write
|
||
|
39EA000
|
heap
|
page read and write
|
||
|
19A3E000
|
stack
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
20C9D000
|
heap
|
page read and write
|
||
|
314C000
|
heap
|
page read and write
|
||
|
287F000
|
stack
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
27AE000
|
stack
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
35C6000
|
heap
|
page read and write
|
||
|
8F5000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
39C2000
|
heap
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
287F000
|
stack
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
597000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
750000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9C3000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
400000
|
unkown
|
page readonly
|
||
|
690000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
7AA000
|
heap
|
page read and write
|
||
|
30DE000
|
heap
|
page read and write
|
||
|
8F0000
|
heap
|
page read and write
|
||
|
2CEE000
|
stack
|
page read and write
|
||
|
3643000
|
heap
|
page read and write
|
||
|
45F0000
|
heap
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
311F000
|
heap
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
697000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
649000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
941000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
647000
|
heap
|
page read and write
|
||
|
37A4000
|
heap
|
page read and write
|
||
|
363A000
|
heap
|
page read and write
|
||
|
24FE000
|
stack
|
page read and write
|
||
|
4170000
|
heap
|
page read and write
|
||
|
1E758000
|
direct allocation
|
page execute read
|
||
|
316C000
|
heap
|
page read and write
|
||
|
77D0000
|
heap
|
page read and write
|
||
|
3B04000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
349C000
|
stack
|
page read and write
|
||
|
859000
|
heap
|
page read and write
|
||
|
9E9000
|
heap
|
page read and write
|
||
|
3637000
|
heap
|
page read and write
|
||
|
421E000
|
stack
|
page read and write
|
||
|
937000
|
heap
|
page read and write
|
||
|
3756000
|
heap
|
page read and write
|
||
|
35D0000
|
heap
|
page read and write
|
||
|
35D9000
|
heap
|
page read and write
|
||
|
540000
|
heap
|
page read and write
|
||
|
35B1000
|
heap
|
page read and write
|
||
|
420E000
|
stack
|
page read and write
|
||
|
39B1000
|
heap
|
page read and write
|
||
|
31A5000
|
heap
|
page read and write
|
||
|
3184000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
29FF000
|
stack
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
372F000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9D6000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3661000
|
heap
|
page read and write
|
||
|
9C7000
|
heap
|
page read and write
|
||
|
51A000
|
remote allocation
|
page execute and read and write
|
||
|
39B7000
|
heap
|
page read and write
|
||
|
3683000
|
heap
|
page read and write
|
||
|
35DC000
|
heap
|
page read and write
|
||
|
7AA000
|
heap
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
3240000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
4B2000
|
unkown
|
page read and write
|
||
|
3152000
|
heap
|
page read and write
|
||
|
4580000
|
heap
|
page read and write
|
||
|
35E1000
|
heap
|
page read and write
|
||
|
434F000
|
stack
|
page read and write
|
||
|
433A000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9E4000
|
heap
|
page read and write
|
||
|
462F000
|
stack
|
page read and write
|
||
|
31C8000
|
heap
|
page read and write
|
||
|
367C000
|
heap
|
page read and write
|
||
|
25FF000
|
stack
|
page read and write
|
||
|
2DE0000
|
heap
|
page read and write
|
||
|
31A8000
|
heap
|
page read and write
|
||
|
319E000
|
stack
|
page read and write
|
||
|
3683000
|
heap
|
page read and write
|
||
|
40FE000
|
stack
|
page read and write
|
||
|
7A6000
|
heap
|
page read and write
|
||
|
393B000
|
heap
|
page read and write
|
||
|
433E000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
7B8000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
19B000
|
stack
|
page read and write
|
||
|
20CA4000
|
heap
|
page read and write
|
||
|
35B8000
|
heap
|
page read and write
|
||
|
920000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
19B000
|
stack
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
91F000
|
heap
|
page read and write
|
||
|
9DB000
|
heap
|
page read and write
|
||
|
367A000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
2BAE000
|
stack
|
page read and write
|
||
|
887000
|
heap
|
page read and write
|
||
|
41A000
|
unkown
|
page write copy
|
||
|
20EA9000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
44DE000
|
stack
|
page read and write
|
||
|
3643000
|
heap
|
page read and write
|
||
|
35DC000
|
heap
|
page read and write
|
||
|
30BC000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
3637000
|
heap
|
page read and write
|
||
|
31AC000
|
heap
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
41B000
|
unkown
|
page write copy
|
||
|
937000
|
heap
|
page read and write
|
||
|
313E000
|
heap
|
page read and write
|
||
|
786000
|
heap
|
page read and write
|
||
|
782E000
|
stack
|
page read and write
|
||
|
3686000
|
heap
|
page read and write
|
||
|
595000
|
heap
|
page read and write
|
||
|
9E7000
|
heap
|
page read and write
|
||
|
933000
|
heap
|
page read and write
|
||
|
3611000
|
heap
|
page read and write
|
||
|
5F1000
|
remote allocation
|
page execute and read and write
|
||
|
3727000
|
heap
|
page read and write
|
||
|
529000
|
remote allocation
|
page execute and read and write
|
||
|
3145000
|
heap
|
page read and write
|
||
|
37A4000
|
heap
|
page read and write
|
||
|
315A000
|
heap
|
page read and write
|
||
|
4B2000
|
unkown
|
page read and write
|
||
|
3183000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
9C8000
|
heap
|
page read and write
|
||
|
1F7000
|
heap
|
page read and write
|
||
|
6A3000
|
heap
|
page read and write
|
||
|
3963000
|
heap
|
page read and write
|
||
|
3714000
|
heap
|
page read and write
|
||
|
540000
|
heap
|
page read and write
|
||
|
9D7000
|
heap
|
page read and write
|
||
|
365A000
|
heap
|
page read and write
|
||
|
14E9E000
|
stack
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
199CD000
|
stack
|
page read and write
|
||
|
313E000
|
heap
|
page read and write
|
||
|
3A26000
|
heap
|
page read and write
|
||
|
30B1000
|
heap
|
page read and write
|
||
|
930000
|
heap
|
page read and write
|
||
|
2CFE000
|
stack
|
page read and write
|
||
|
73C000
|
heap
|
page read and write
|
||
|
939000
|
heap
|
page read and write
|
||
|
35D9000
|
heap
|
page read and write
|
||
|
41E000
|
unkown
|
page write copy
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
A21000
|
heap
|
page read and write
|
||
|
797000
|
heap
|
page read and write
|
||
|
36E7000
|
heap
|
page read and write
|
||
|
5FE000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
39ED000
|
heap
|
page read and write
|
||
|
4434000
|
heap
|
page execute and read and write
|
||
|
396B000
|
heap
|
page read and write
|
||
|
319D000
|
heap
|
page read and write
|
||
|
2DFE000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
411000
|
unkown
|
page readonly
|
||
|
312A000
|
heap
|
page read and write
|
||
|
A24000
|
heap
|
page read and write
|
||
|
410000
|
unkown
|
page readonly
|
||
|
311D000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
39FE000
|
heap
|
page read and write
|
||
|
4260000
|
direct allocation
|
page read and write
|
||
|
60F0000
|
heap
|
page read and write
|
||
|
287F000
|
stack
|
page read and write
|
||
|
35C9000
|
heap
|
page read and write
|
||
|
35DD000
|
heap
|
page read and write
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
A0E000
|
heap
|
page read and write
|
||
|
43B000
|
unkown
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
40DA000
|
heap
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
92B000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
650000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
8F6000
|
heap
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
3115000
|
heap
|
page read and write
|
||
|
31AE000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
39A2000
|
heap
|
page read and write
|
||
|
3670000
|
heap
|
page read and write
|
||
|
3168000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
743000
|
heap
|
page read and write
|
||
|
39BB000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
63E000
|
stack
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
39F2000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
1E750000
|
direct allocation
|
page execute and read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
313D000
|
heap
|
page read and write
|
||
|
379B000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
51A000
|
remote allocation
|
page execute and read and write
|
||
|
2F5F000
|
stack
|
page read and write
|
||
|
35A0000
|
trusted library allocation
|
page read and write
|
||
|
3147000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
2E60000
|
remote allocation
|
page read and write
|
||
|
39B4000
|
heap
|
page read and write
|
||
|
39D2000
|
heap
|
page read and write
|
||
|
681000
|
heap
|
page read and write
|
||
|
46EF000
|
stack
|
page read and write
|
||
|
410000
|
unkown
|
page readonly
|
||
|
19E000
|
stack
|
page read and write
|
||
|
3755000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
39D3000
|
heap
|
page read and write
|
||
|
2A10000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
3582000
|
direct allocation
|
page read and write
|
||
|
3678000
|
heap
|
page read and write
|
||
|
363C000
|
heap
|
page read and write
|
||
|
7AE000
|
heap
|
page read and write
|
||
|
686000
|
heap
|
page read and write
|
||
|
39DD000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
35BE000
|
heap
|
page read and write
|
||
|
19D000
|
stack
|
page read and write
|
||
|
4250000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
41E000
|
unkown
|
page write copy
|
||
|
873000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
880000
|
heap
|
page read and write
|
||
|
648000
|
heap
|
page read and write
|
||
|
311A000
|
heap
|
page read and write
|
||
|
197000
|
stack
|
page read and write
|
||
|
452F000
|
stack
|
page read and write
|
||
|
88F000
|
stack
|
page read and write
|
||
|
35D0000
|
heap
|
page read and write
|
||
|
2B6D000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
4140000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
35C5000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3758000
|
heap
|
page read and write
|
||
|
19A00000
|
remote allocation
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
35D0000
|
heap
|
page read and write
|
||
|
4200000
|
heap
|
page read and write
|
||
|
6CE000
|
stack
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
3A74000
|
heap
|
page read and write
|
||
|
9F3000
|
heap
|
page read and write
|
||
|
3A48000
|
heap
|
page read and write
|
||
|
761000
|
heap
|
page read and write
|
||
|
2A6D000
|
stack
|
page read and write
|
||
|
35F1000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
409E000
|
unkown
|
page read and write
|
||
|
4360000
|
heap
|
page read and write
|
||
|
397A000
|
heap
|
page read and write
|
||
|
368B000
|
heap
|
page read and write
|
||
|
3A1C000
|
heap
|
page read and write
|
||
|
718000
|
heap
|
page read and write
|
||
|
1BF90000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
35C6000
|
heap
|
page read and write
|
||
|
887000
|
heap
|
page read and write
|
||
|
368E000
|
heap
|
page read and write
|
||
|
9CD000
|
heap
|
page read and write
|
||
|
411000
|
unkown
|
page readonly
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
B8AE000
|
stack
|
page read and write
|
||
|
3669000
|
heap
|
page read and write
|
||
|
3982000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
377B000
|
heap
|
page read and write
|
||
|
3143000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
3158000
|
heap
|
page read and write
|
||
|
197000
|
stack
|
page read and write
|
||
|
2A6E000
|
stack
|
page read and write
|
||
|
9B000
|
stack
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
375B000
|
heap
|
page read and write
|
||
|
40FE000
|
stack
|
page read and write
|
||
|
314A000
|
heap
|
page read and write
|
||
|
A30000
|
heap
|
page read and write
|
||
|
A87000
|
heap
|
page read and write
|
||
|
8EA000
|
heap
|
page read and write
|
||
|
1E751000
|
direct allocation
|
page execute read
|
||
|
3A74000
|
heap
|
page read and write
|
||
|
9E1000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
3797000
|
heap
|
page read and write
|
||
|
319C000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
39A2000
|
heap
|
page read and write
|
||
|
35CD000
|
heap
|
page read and write
|
||
|
2FB1000
|
heap
|
page read and write
|
||
|
39F0000
|
heap
|
page read and write
|
||
|
730000
|
heap
|
page read and write
|
||
|
197000
|
stack
|
page read and write
|
||
|
3178000
|
heap
|
page read and write
|
||
|
3141000
|
heap
|
page read and write
|
||
|
799000
|
heap
|
page read and write
|
||
|
2B6E000
|
stack
|
page read and write
|
||
|
315A000
|
heap
|
page read and write
|
||
|
3604000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
790000
|
heap
|
page read and write
|
||
|
40DE000
|
heap
|
page read and write
|
||
|
90F000
|
stack
|
page read and write
|
||
|
39F2000
|
heap
|
page read and write
|
||
|
3637000
|
heap
|
page read and write
|
||
|
2FB0000
|
remote allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
88E000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
319D000
|
heap
|
page read and write
|
||
|
317D000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
40C0000
|
heap
|
page read and write
|
||
|
314D000
|
heap
|
page read and write
|
||
|
A0E000
|
heap
|
page read and write
|
||
|
759000
|
heap
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
1E99A000
|
direct allocation
|
page readonly
|
||
|
73F000
|
heap
|
page read and write
|
||
|
377F000
|
heap
|
page read and write
|
||
|
7B6000
|
heap
|
page read and write
|
||
|
3178000
|
heap
|
page read and write
|
||
|
315B000
|
heap
|
page read and write
|
||
|
35D7000
|
heap
|
page read and write
|
||
|
393B000
|
heap
|
page read and write
|
||
|
9C7000
|
heap
|
page read and write
|
||
|
30D7000
|
heap
|
page read and write
|
||
|
375B000
|
heap
|
page read and write
|
||
|
3183000
|
heap
|
page read and write
|
||
|
88E000
|
heap
|
page read and write
|
||
|
318F000
|
heap
|
page read and write
|
||
|
3570000
|
direct allocation
|
page read and write
|
||
|
1BBB000
|
heap
|
page read and write
|
||
|
35DD000
|
heap
|
page read and write
|
||
|
40A0000
|
unkown
|
page readonly
|
||
|
401000
|
unkown
|
page execute read
|
||
|
360B000
|
heap
|
page read and write
|
||
|
193000
|
stack
|
page read and write
|
||
|
3580000
|
direct allocation
|
page read and write
|
||
|
420000
|
unkown
|
page write copy
|
||
|
46CF000
|
stack
|
page read and write
|
There are 1389 hidden memdumps, click here to show them.