IOC Report
RHC.exe

loading gif

Files

File Path
Type
Category
Malicious
RHC.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\ProgramData\Synaptics\RCX8898.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
modified
 malicious
C:\ProgramData\Synaptics\Synaptics.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\Desktop\._cache_RHC.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\Documents\AIXACVYBSB\~$cache1
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_._cache_RHC.exe_ee36a734ec8c0bed5e98bcd5c03ed3318857_28274412_ceb668cc-5ded-4cef-959e-494f9cab8e8c\Report.wer
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER970F.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 8 16:14:01 2024, 0x1205a4 type
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9904.tmp.WERInternalMetadata.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9934.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\13M9j2T.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\1Ge5sQq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\1YC9PRP.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\1lKdprk.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\1ncW744.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\23beb5F.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\2J1abzq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\2R6iFC2.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\3BjZhXm.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\3h2D7nq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\47dwrXY.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\48jIMKQ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\4KjkbN2.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\4MOo7T6.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\4O51V7p.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\5NmbBBF.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\5gkC4gx.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\64odagvC.xlsm
Microsoft Excel 2007+
dropped
C:\Users\user\AppData\Local\Temp\6nVqT4U.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\6u17SOn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\7DIIWqw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\7F3N9rw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\7Oy4nB9.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\7ja1hlc.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\7uUnDtE.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\8vAi9re.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\9MJGswx.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\9QQ8lnM.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\9YSz79Z.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\9wEnNfq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\A4iDdTR.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\A9EbBrw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\AFXD0D7625D.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\AFXD1AC545.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\Aav3b5A.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Akv5NNK.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\B53pgAp.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\BHcww2z.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\BN4hV87.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\C2R9ACn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\CAhgOtg.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\CW7Ecqt.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\CcBpmp9.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\CkAAbqE.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\CvX6Fhx.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Dua4vya.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Dw61YRy.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\EDQTqAC.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\EjYaVPb.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Eubg1Iw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\F2WHasR.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\FDop7Qt.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\FT5dQZR.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\FcG7jm2.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\GwouN9r.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\H1HLA3l.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\H3qjHns.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\H4JQSkE.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\HJnzZJ2.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\HL1aKPf.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Hgwwq8N.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Hh517Qb.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\IyfUlxz.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\JL5Ois8.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\JcuPJ4b.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\JeNadyz.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\JrQDFnd.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\K1Cmekq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\K7iR8oQ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\KAxQ1IU.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\KGDYPAZ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\KyeOv5k.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\L9qYO7J.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\LCsP1eZ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\MWEXIL9.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\MXGKLbT.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\MYo9KUH.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\NCWiatF.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ODlKLzX.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\OxKCqMU.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\PQeaBR8.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Pf9HRVM.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\PosWyJs.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\QyVFJZn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\RO2l2ba.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\RYsIq9e.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\S9wLqxt.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\SCmnWOT.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\SQmP9pj.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ScWWIgw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Tlq2kaX.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\TwHSxyq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\TwexANp.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\UeaK6sE.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Un2Fb7j.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\VMfwGJn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\VkZ3iOh.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\WagDQzn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\WzthNFw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\XIxitrG.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\XeiF1iF.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\XvagkYX.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Y5RAhh3.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\YAr2AO9.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\YNZcusg.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Z5OYwum.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\Z7if5g3.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ZD8kCoG.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\aU9pgfg.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\bNhQV3I.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\bnFzP1w.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\byZUqTe.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\cDuiaSp.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ccG2ebk.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\cj7drwL.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\e5t22dT.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\eI9jd3t.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\eP2MzvL.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\eqsrmkb.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\evfjz6e.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\fHs6Amf.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\fsjhpBC.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\fw86Qhx.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\gPTlFQO.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\gwKAwQp.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\hbhHlW8.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\hrncfIL.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\hwhO8Kf.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\iJ2vPwa.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\iPMlztm.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\iUorx1j.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\it9xbYN.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\j3shGAD.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\j7FWW5w.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\jaIvTUy.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\jlOQXjq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\k6qyTHo.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\kmfVsjc.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\kwFmb3n.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\mk3pzxS.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\nNbk3yq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\nhY7dzQ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\nn1IT4k.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\npQrlry.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\oV2hXg6.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ooB6hCv.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\p6i8OIL.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\pV31ztM.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\pZUrNKm.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\pcTOI1G.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ppGScLa.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\q3lRAvw.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\qHD3Hqo.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\qZtTN9c.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\qcPgvtz.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\qmKe3sq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\r8ORr8a.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\rRFGT6q.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\rVIdDi5.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\rpTz9o7.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\sO9RBXc.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\sWmsQS3.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\sv5SFuk.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\syXg1IJ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\tBQNvZP.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\ttf8OOT.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\txxYHQY.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\uhcqsBK.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\vAAJ4KM.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\vKdFEDq.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\vxvbUqt.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\w3HHq41.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\w9D6uUn.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\wt4Jg4n.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\wyK1nUU.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\x9jMj86.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\xeN2xby.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\xlL7drh.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\yfWM9DM.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\yhkwDzZ.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\z6KcDra.ini
HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\~$64odagvC.xlsm
data
dropped
C:\Users\user\AppData\Local\Temp\~DF85C0E72DB6C81807.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\Documents\AIXACVYBSB\XZXHAVGRAG.xlsm
Microsoft Excel 2007+
dropped
C:\Users\user\Documents\AIXACVYBSB\~$XZXHAVGRAG.xlsx
data
dropped
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
There are 186 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\RHC.exe
"C:\Users\user\Desktop\RHC.exe"
 malicious
C:\ProgramData\Synaptics\Synaptics.exe
"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
 malicious
C:\ProgramData\Synaptics\Synaptics.exe
"C:\ProgramData\Synaptics\Synaptics.exe"
malicious
C:\Users\user\Desktop\._cache_RHC.exe
"C:\Users\user\Desktop\._cache_RHC.exe"
C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 7092 -s 1152

URLs

Name
IP
Malicious
https://docs.google.com/google.com/(
unknown
https://drive.usercontent.google.com/download?K
unknown
http://xred.site50.net/syn/Synaptics.rarZ
unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
unknown
https://docs.google.com/8
unknown
https://docs.google.com/u
unknown
https://drive.usercontent.google.com/r...
unknown
https://docs.google.com/Content-Security-Policyscript-src
unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:
unknown
https://drive.userconten
unknown
https://drive.usercontent.google.com/
unknown
http://upx.sf.net
unknown
http://xred.site50.net/syn/Synaptics.rar
unknown
https://docs.google.com/
unknown
https://docs.google.com/a
unknown
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
69.42.215.252
http://xred.site50.net/syn/SSLLibrary.dll6
unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:
unknown
https://docs.google.com/6T9
unknown
https://docs.google.com/esMon
unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
unknown
https://docs.google.com/google.com/G
unknown
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978J
unknown
http://xred.site50.net/syn/SUpdate.iniZ
unknown
https://docs.google.com/google.com/ication/binary
unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=8
unknown
http://xred.site50.net/syn/SUpdate.ini
unknown
http://xred.site50.net/syn/SUpdate.iniH)v
unknown
http://xred.site50.net/syn/SSLLibrary.dlp
unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16
unknown
https://docs.google.com/82
unknown
https://drive.usercontent.google.com/;
unknown
https://docs.google.com/8u
unknown
https://docs.google.com/uc?id=0;
unknown
https://docs.google.com/google.com/a
unknown
https://docs.google.com/re
unknown
http://xred.site50.net/syn/SSLLibrary.dll
unknown
https://docs.google.com/:2
unknown
https://drive.usercontent.googL
unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl
unknown
There are 31 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
freedns.afraid.org
69.42.215.252
docs.google.com
142.250.69.206
drive.usercontent.google.com
142.250.217.97
part-0042.t-0009.fb-t-msedge.net
13.107.253.70
xred.mooo.com
unknown

IPs

IP
Domain
Country
Malicious
13.107.253.70
part-0042.t-0009.fb-t-msedge.net
United States
142.250.217.97
drive.usercontent.google.com
United States
142.250.69.206
docs.google.com
United States
69.42.215.252
freedns.afraid.org
United States

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Synaptics Pointing Device Driver
HKEY_CURRENT_USER\SOFTWARE\Local AppWizard-Generated Applications\RHC_2010\B9AA24A5-209E-470b-992B-DEC3F78A44AC
Untitled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
5n1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML
KnownIDs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor
Description
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookOpenedCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Excel8.0
MSForms
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ExdCache\Excel8.0
MSComctlLib
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlArchitetureIndependent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\VBA\Forms3\Controls
EnableActiveXControlMSWebBrowserArchiteturePersistenceIssue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\29542
29542
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
FileTypeBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\FileBlock
OoxmlConverterBlockList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\FileIO
FileActivityStoreVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.28
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ETag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
ConfigIds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Property
0018C00DE02FCCF7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Volatile
MsaDevice
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{F562BB8E-422D-4B5C-B20E-90D710F7D11C}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ETWMonitor\{02FD33DF-F746-4A10-93A0-2BC6273BC8E4}
Categories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSTagIds2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSCategoriesSeverities
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata\excel.exe\ULSMonitor
ULSAllCategories
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\ClientTelemetry\Sampling
1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-GB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ImmersiveWorkbookDirtySentinel
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelPreviousSessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common
SessionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\16
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\HTML\Old Default Editor\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\htmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.htm\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Shared\MHTML\Old Default Editor\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\shell\Print\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\mhtmlfile\ShellEx\IconHandler
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Word\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\WinWord.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Excel\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Excel.exe\shell\edit\ddeexec
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\Microsoft Publisher\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\.mht\OpenWithList\MSPub.exe\shell\edit\command
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel
ExcelWorkbookOpenedCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F00000000000000000F01FEC\Usage
VBAFiles
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
FilePath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
StartDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--syslcid=8192&build=16.0.16827&crev=3\0
EndDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseCategoryInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs
LicenseSKUInfo
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\Internet\WebServiceCache
LastClean
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.16
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.17
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.18
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.19
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.20
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.21
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
ChunkCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.22
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.23
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.24
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.25
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.26
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
0.27
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel\ConfigContextData
VersionId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
Expires
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\excel
DeferredConfigs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common\CrashPersistence\EXCEL\2336
0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceTicket
HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Excel\Security\Trusted Documents
LastPurgeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
excel.exe_queried
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
excel.exe_queried
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
ProgramId
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
FileId
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
LowerCaseLongPath
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
LongPathHash
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Name
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
OriginalFileName
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Publisher
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Version
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
BinFileVersion
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
BinaryType
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
ProductName
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
ProductVersion
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
LinkDate
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
BinProductVersion
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
AppxPackageFullName
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
AppxPackageRelativeId
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Size
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Language
\REGISTRY\A\{63ce6062-b125-33c3-95a6-11c693dadd25}\Root\InventoryApplicationFile\._cache_rhc.exe|860034f8196cb7f6
Usn
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
ClockTimeSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
TickCount
There are 308 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1DB62000
heap
page read and write
2DFFE000
stack
page read and write
1E0AF000
heap
page read and write
1587C000
stack
page read and write
2763E000
stack
page read and write
1DE9C000
heap
page read and write
25FBE000
stack
page read and write
520E000
heap
page read and write
4E7FE000
stack
page read and write
518BE000
stack
page read and write
2547E000
stack
page read and write
42F4E000
stack
page read and write
1D9CD000
heap
page read and write
4744C000
stack
page read and write
28DFE000
stack
page read and write
440CE000
stack
page read and write
DF60000
heap
page read and write
3C68C000
stack
page read and write
DF97000
heap
page read and write
1DF5A000
heap
page read and write
1DECC000
heap
page read and write
1F0000
heap
page read and write
47F8C000
stack
page read and write
C80000
heap
page read and write
43D4C000
stack
page read and write
517BC000
stack
page read and write
3B409000
heap
page read and write
196FC000
stack
page read and write
79FC000
stack
page read and write
2D63C000
stack
page read and write
4C9FE000
stack
page read and write
37C3E000
stack
page read and write
2240000
heap
page read and write
3B327000
heap
page read and write
2153C000
stack
page read and write
26EFC000
stack
page read and write
88FC000
stack
page read and write
AA8E000
stack
page read and write
22B7E000
stack
page read and write
44C4C000
stack
page read and write
2A0BE000
stack
page read and write
4A5BE000
stack
page read and write
3D08C000
stack
page read and write
1D9C9000
heap
page read and write
3A4FE000
stack
page read and write
225C000
direct allocation
page read and write
3547C000
stack
page read and write
3B2FF000
heap
page read and write
54EE000
stack
page read and write
2CA3000
heap
page read and write
41B4E000
stack
page read and write
1B0FE000
stack
page read and write
29BFC000
stack
page read and write
E50000
heap
page read and write
4AAFC000
stack
page read and write
283FE000
stack
page read and write
804000
heap
page read and write
4C67C000
stack
page read and write
6F74000
heap
page read and write
5397C000
stack
page read and write
1D981000
heap
page read and write
1DA55000
heap
page read and write
49CFE000
stack
page read and write
47F4E000
stack
page read and write
47CCE000
stack
page read and write
46B8C000
stack
page read and write
3C2CC000
stack
page read and write
1CCBC000
stack
page read and write
5117C000
stack
page read and write
5F6000
unkown
page readonly
37B3C000
stack
page read and write
1BAFE000
stack
page read and write
5267E000
stack
page read and write
33C7E000
stack
page read and write
2C2E000
stack
page read and write
5B2E000
stack
page read and write
187BE000
stack
page read and write
3453E000
stack
page read and write
1A0FC000
stack
page read and write
27DBE000
stack
page read and write
2ABFE000
stack
page read and write
DF68000
heap
page read and write
351FC000
stack
page read and write
50EBE000
stack
page read and write
E13B000
heap
page read and write
296FC000
stack
page read and write
D54C000
stack
page read and write
D68000
heap
page read and write
78F000
stack
page read and write
2190000
heap
page read and write
3B635000
heap
page read and write
287BE000
stack
page read and write
4993E000
stack
page read and write
D18C000
stack
page read and write
48E3C000
stack
page read and write
1F17C000
stack
page read and write
4947C000
stack
page read and write
3227C000
stack
page read and write
45B0E000
stack
page read and write
954E000
stack
page read and write
14A7E000
stack
page read and write
40A0C000
stack
page read and write
5230000
heap
page read and write
2FCBE000
stack
page read and write
3907C000
stack
page read and write
83BE000
stack
page read and write
2587C000
stack
page read and write
1DF48000
heap
page read and write
3B11D000
heap
page read and write
316FE000
stack
page read and write
D47000
heap
page read and write
1D3FE000
stack
page read and write
4A4F000
stack
page read and write
31AFC000
stack
page read and write
2FF7C000
stack
page read and write
4A33E000
stack
page read and write
1A47E000
stack
page read and write
3B3EC000
heap
page read and write
21F0000
heap
page read and write
351BE000
stack
page read and write
1E02F000
heap
page read and write
389FE000
stack
page read and write
3B566000
heap
page read and write
4B0E000
stack
page read and write
D7CC000
stack
page read and write
680000
heap
page read and write
E1FA000
heap
page read and write
4398C000
stack
page read and write
E0BF000
heap
page read and write
2AC3C000
stack
page read and write
CA0000
heap
page read and write
3B2D7000
heap
page read and write
6E26000
heap
page read and write
2EB3E000
stack
page read and write
E270000
heap
page read and write
5177E000
stack
page read and write
297FE000
stack
page read and write
4D9E000
stack
page read and write
1EC7C000
stack
page read and write
3187C000
stack
page read and write
1A0BE000
stack
page read and write
42A4E000
stack
page read and write
3B687000
heap
page read and write
320FE000
stack
page read and write
2F3FE000
stack
page read and write
100D000
heap
page read and write
E1F5000
heap
page read and write
552C000
stack
page read and write
1DD40000
heap
page read and write
3B099000
heap
page read and write
800000
heap
page read and write
25FFC000
stack
page read and write
1E010000
heap
page read and write
1C67C000
stack
page read and write
480CC000
stack
page read and write
519E000
heap
page read and write
F60C000
stack
page read and write
3B6AE000
heap
page read and write
1637E000
stack
page read and write
D4B000
heap
page read and write
6E4F000
heap
page read and write
A70C000
stack
page read and write
7FFE000
stack
page read and write
521F000
heap
page read and write
38B3E000
stack
page read and write
CCE000
heap
page read and write
36E7E000
stack
page read and write
24D3C000
stack
page read and write
42F8C000
stack
page read and write
4884C000
stack
page read and write
34E3C000
stack
page read and write
2260000
direct allocation
page read and write
2717C000
stack
page read and write
3B2B1000
heap
page read and write
1E098000
heap
page read and write
396BC000
stack
page read and write
109CE000
stack
page read and write
3FD4E000
stack
page read and write
310BE000
stack
page read and write
1DB7F000
heap
page read and write
2077C000
stack
page read and write
203BC000
stack
page read and write
3B2CB000
heap
page read and write
ABCE000
stack
page read and write
1DB2A000
heap
page read and write
26EBE000
stack
page read and write
E16D000
heap
page read and write
6A3C000
stack
page read and write
7D7E000
stack
page read and write
2203E000
stack
page read and write
566E000
stack
page read and write
853E000
stack
page read and write
1613C000
stack
page read and write
3ED0E000
stack
page read and write
1DD5E000
heap
page read and write
677E000
stack
page read and write
8DBE000
stack
page read and write
4B27C000
stack
page read and write
1DB17000
heap
page read and write
3A63E000
stack
page read and write
1A33E000
stack
page read and write
3B57A000
heap
page read and write
1D946000
heap
page read and write
2E17C000
stack
page read and write
1DE02000
heap
page read and write
52F7C000
stack
page read and write
1DF33000
heap
page read and write
57AC000
stack
page read and write
2727E000
stack
page read and write
2C53C000
stack
page read and write
F6A000
heap
page read and write
487E000
stack
page read and write
4078C000
stack
page read and write
1E13C000
stack
page read and write
CA0C000
stack
page read and write
1943E000
stack
page read and write
191BE000
stack
page read and write
3F74C000
stack
page read and write
6E1D000
heap
page read and write
4470E000
stack
page read and write
1ABFE000
stack
page read and write
1E0C5000
heap
page read and write
48F3E000
stack
page read and write
F38C000
stack
page read and write
19ABC000
stack
page read and write
137BE000
stack
page read and write
4AFBE000
stack
page read and write
3B2D2000
heap
page read and write
2200000
direct allocation
page read and write
3B668000
heap
page read and write
2BB3C000
stack
page read and write
523A000
heap
page read and write
FECC000
stack
page read and write
314BC000
stack
page read and write
2943E000
stack
page read and write
797000
heap
page read and write
F70E000
stack
page read and write
8F3C000
stack
page read and write
4244C000
stack
page read and write
23CBE000
stack
page read and write
F24C000
stack
page read and write
128FC000
stack
page read and write
4AD7C000
stack
page read and write
1DEC4000
heap
page read and write
45F0C000
stack
page read and write
C38E000
stack
page read and write
18E3C000
stack
page read and write
497FE000
stack
page read and write
2B37E000
stack
page read and write
42CCE000
stack
page read and write
EBCE000
stack
page read and write
CB4C000
stack
page read and write
2F6BC000
stack
page read and write
4550C000
stack
page read and write
82BC000
stack
page read and write
2FE3C000
stack
page read and write
2D77C000
stack
page read and write
D5C000
heap
page read and write
5207C000
stack
page read and write
1DC38000
heap
page read and write
1E9BE000
stack
page read and write
3C50E000
stack
page read and write
C5E000
stack
page read and write
490F000
stack
page read and write
1D959000
heap
page read and write
14BBE000
stack
page read and write
1D9D3000
heap
page read and write
2BC3E000
stack
page read and write
863E000
stack
page read and write
E2AD000
heap
page read and write
E0E1000
heap
page read and write
1DB2D000
heap
page read and write
217BC000
stack
page read and write
6E38000
heap
page read and write
3FC4C000
stack
page read and write
518FC000
stack
page read and write
1010E000
stack
page read and write
4380E000
stack
page read and write
2CEFE000
stack
page read and write
940E000
stack
page read and write
541FE000
stack
page read and write
2C77E000
stack
page read and write
2983C000
stack
page read and write
6FA2000
heap
page read and write
2817E000
stack
page read and write
AFCC000
stack
page read and write
ED4C000
stack
page read and write
E000000
heap
page read and write
CD8E000
stack
page read and write
13DFE000
stack
page read and write
3B582000
heap
page read and write
3B09E000
heap
page read and write
1DB93000
heap
page read and write
4E1FC000
stack
page read and write
B4CC000
stack
page read and write
A08E000
stack
page read and write
38F3C000
stack
page read and write
6DF7000
heap
page read and write
51E5000
heap
page read and write
5245000
heap
page read and write
28BBC000
stack
page read and write
1FEBC000
stack
page read and write
3B495000
heap
page read and write
382BC000
stack
page read and write
51AC000
heap
page read and write
1DC45000
heap
page read and write
5027C000
stack
page read and write
3CC8E000
stack
page read and write
51AB000
heap
page read and write
3B10A000
heap
page read and write
46E0C000
stack
page read and write
3C8CE000
stack
page read and write
3E84C000
stack
page read and write
6EBE000
heap
page read and write
1D9AF000
heap
page read and write
1A6FE000
stack
page read and write
301FC000
stack
page read and write
680000
heap
page read and write
3DCCE000
stack
page read and write
1B13C000
stack
page read and write
3B65C000
heap
page read and write
2EDFC000
stack
page read and write
51C3000
heap
page read and write
E0A8000
heap
page read and write
15C3C000
stack
page read and write
2BEBE000
stack
page read and write
4B13C000
stack
page read and write
1DE22000
heap
page read and write
29D3C000
stack
page read and write
33CBC000
stack
page read and write
AE8C000
stack
page read and write
3B110000
heap
page read and write
3B3BB000
heap
page read and write
EA8E000
stack
page read and write
388BE000
stack
page read and write
427CE000
stack
page read and write
E291000
heap
page read and write
2C17C000
stack
page read and write
370FE000
stack
page read and write
1BFFE000
stack
page read and write
4E83C000
stack
page read and write
51BF000
heap
page read and write
14CFE000
stack
page read and write
30E3E000
stack
page read and write
1AFBE000
stack
page read and write
FE4000
heap
page read and write
7DBC000
stack
page read and write
1DD4E000
heap
page read and write
2253E000
stack
page read and write
4488C000
stack
page read and write
1A87C000
stack
page read and write
1DF4B000
heap
page read and write
15FBE000
stack
page read and write
5234000
heap
page read and write
F74C000
stack
page read and write
41CCC000
stack
page read and write
4FAFC000
stack
page read and write
2E9FE000
stack
page read and write
1807C000
stack
page read and write
A20C000
stack
page read and write
1217C000
stack
page read and write
4038E000
stack
page read and write
1DFFB000
heap
page read and write
D5F000
heap
page read and write
43E4E000
stack
page read and write
5153C000
stack
page read and write
1DA5A000
heap
page read and write
125E000
stack
page read and write
34B7E000
stack
page read and write
3A1BE000
stack
page read and write
1100E000
stack
page read and write
317E000
stack
page read and write
8CBC000
stack
page read and write
38DBE000
stack
page read and write
D0C000
heap
page read and write
20AFE000
stack
page read and write
3493C000
stack
page read and write
2A87C000
stack
page read and write
4A9BC000
stack
page read and write
5167C000
stack
page read and write
1DC2F000
heap
page read and write
2DFE000
stack
page read and write
374BE000
stack
page read and write
4150E000
stack
page read and write
E15A000
heap
page read and write
7FA000
heap
page read and write
D40C000
stack
page read and write
3B2BD000
heap
page read and write
1703C000
stack
page read and write
3803C000
stack
page read and write
18F7C000
stack
page read and write
3B2DC000
heap
page read and write
223C000
direct allocation
page read and write
2AFBE000
stack
page read and write
4BC7C000
stack
page read and write
338BE000
stack
page read and write
2F43C000
stack
page read and write
51DBE000
stack
page read and write
1DE1F000
heap
page read and write
3787E000
stack
page read and write
F84E000
stack
page read and write
E134000
heap
page read and write
4424C000
stack
page read and write
8B3E000
stack
page read and write
3B1F8000
heap
page read and write
5245000
heap
page read and write
B38C000
stack
page read and write
EDE000
stack
page read and write
1DEAB000
heap
page read and write
1C8FC000
stack
page read and write
1753C000
stack
page read and write
315FC000
stack
page read and write
1DE00000
heap
page read and write
4114E000
stack
page read and write
3AEFE000
stack
page read and write
39BBC000
stack
page read and write
3B4B0000
heap
page read and write
A98C000
stack
page read and write
1F87C000
stack
page read and write
4CDFC000
stack
page read and write
3813E000
stack
page read and write
226C000
direct allocation
page read and write
6F60000
heap
page read and write
52CFC000
stack
page read and write
3097C000
stack
page read and write
2346A000
heap
page read and write
4B23E000
stack
page read and write
1DD2E000
heap
page read and write
2E3BE000
stack
page read and write
3A53C000
stack
page read and write
31ABE000
stack
page read and write
28F3E000
stack
page read and write
1FC3C000
stack
page read and write
1B9BE000
stack
page read and write
3CF4C000
stack
page read and write
35F7E000
stack
page read and write
1DE0B000
heap
page read and write
4E1BE000
stack
page read and write
319BC000
stack
page read and write
2250000
direct allocation
page read and write
5127E000
stack
page read and write
2F53E000
stack
page read and write
527FC000
stack
page read and write
3DE0E000
stack
page read and write
4604C000
stack
page read and write
3B63E000
heap
page read and write
36ABE000
stack
page read and write
3B128000
heap
page read and write
D68C000
stack
page read and write
13F3E000
stack
page read and write
DC8E000
stack
page read and write
1DB01000
heap
page read and write
521BC000
stack
page read and write
3B302000
heap
page read and write
E2BC000
heap
page read and write
1DB1E000
heap
page read and write
27EFE000
stack
page read and write
1CEFE000
stack
page read and write
74BE000
stack
page read and write
51C7E000
stack
page read and write
E44E000
stack
page read and write
3B24F000
heap
page read and write
8A3C000
stack
page read and write
5160000
heap
page read and write
4600E000
stack
page read and write
173BE000
stack
page read and write
2240000
direct allocation
page read and write
DDCE000
stack
page read and write
51B1000
heap
page read and write
360BE000
stack
page read and write
3B4C8000
heap
page read and write
50B3C000
stack
page read and write
4204E000
stack
page read and write
2C6E000
stack
page read and write
2853E000
stack
page read and write
3B3FF000
heap
page read and write
4D2BE000
stack
page read and write
D66000
heap
page read and write
1BC7C000
stack
page read and write
5103C000
stack
page read and write
1D94D000
heap
page read and write
329FC000
stack
page read and write
2210000
direct allocation
page read and write
1713E000
stack
page read and write
1D57C000
stack
page read and write
40AC000
stack
page read and write
132FC000
stack
page read and write
5050000
trusted library allocation
page read and write
1DB7D000
heap
page read and write
462CC000
stack
page read and write
3B0C4000
heap
page read and write
4F47E000
stack
page read and write
436CE000
stack
page read and write
2A33E000
stack
page read and write
1717C000
stack
page read and write
3EE4E000
stack
page read and write
3047C000
stack
page read and write
2677C000
stack
page read and write
219FE000
stack
page read and write
3B095000
heap
page read and write
1F9BC000
stack
page read and write
12B0000
trusted library allocation
page read and write
1DD64000
heap
page read and write
3917E000
stack
page read and write
2257C000
stack
page read and write
3877E000
stack
page read and write
4D3FE000
stack
page read and write
4460C000
stack
page read and write
35BFC000
stack
page read and write
403CC000
stack
page read and write
15D7C000
stack
page read and write
20C7C000
stack
page read and write
1DC40000
heap
page read and write
2457E000
stack
page read and write
4D93C000
stack
page read and write
5202000
heap
page read and write
1DEB6000
heap
page read and write
3CA0E000
stack
page read and write
315BE000
stack
page read and write
237FC000
stack
page read and write
5219000
heap
page read and write
3E6CE000
stack
page read and write
731000
heap
page read and write
5A2C000
stack
page read and write
AC0C000
stack
page read and write
6B3E000
stack
page read and write
40F0C000
stack
page read and write
291FC000
stack
page read and write
E0AE000
heap
page read and write
339FE000
stack
page read and write
EACC000
stack
page read and write
4B20000
remote allocation
page read and write
18B7E000
stack
page read and write
1B4BE000
stack
page read and write
1DCF9000
heap
page read and write
365FC000
stack
page read and write
6CBC000
stack
page read and write
1DB28000
heap
page read and write
99E000
stack
page read and write
A1CE000
stack
page read and write
1D967000
heap
page read and write
44D8C000
stack
page read and write
13A7C000
stack
page read and write
504BE000
stack
page read and write
25BFE000
stack
page read and write
F20E000
stack
page read and write
23BBC000
stack
page read and write
33EFE000
stack
page read and write
1DE95000
heap
page read and write
4230C000
stack
page read and write
4208C000
stack
page read and write
20DBC000
stack
page read and write
2C8FC000
stack
page read and write
3367C000
stack
page read and write
1DB19000
heap
page read and write
12B7C000
stack
page read and write
3AA3C000
stack
page read and write
174FE000
stack
page read and write
3D90E000
stack
page read and write
28B7E000
stack
page read and write
1DFF6000
heap
page read and write
288FE000
stack
page read and write
51F8000
heap
page read and write
4D0000
heap
page read and write
2A5FC000
stack
page read and write
FB0C000
stack
page read and write
3B349000
heap
page read and write
1018000
heap
page read and write
50EFC000
stack
page read and write
1E032000
heap
page read and write
CDCC000
stack
page read and write
4128E000
stack
page read and write
1DC52000
heap
page read and write
6F70000
heap
page read and write
4758C000
stack
page read and write
6EAA000
heap
page read and write
24E3E000
stack
page read and write
4808E000
stack
page read and write
1DD33000
heap
page read and write
2907E000
stack
page read and write
3E34C000
stack
page read and write
200FE000
stack
page read and write
97000
stack
page read and write
39F3E000
stack
page read and write
50C7C000
stack
page read and write
36AFC000
stack
page read and write
3D04E000
stack
page read and write
1DA2C000
heap
page read and write
2FF3E000
stack
page read and write
D2A000
heap
page read and write
1F13E000
stack
page read and write
1307C000
stack
page read and write
2F57C000
stack
page read and write
2F2FC000
stack
page read and write
4844E000
stack
page read and write
3B2EC000
heap
page read and write
2B5FE000
stack
page read and write
1D963000
heap
page read and write
520000
heap
page read and write
6EC1000
heap
page read and write
3543E000
stack
page read and write
3273E000
stack
page read and write
6D2000
unkown
page read and write
3B17F000
heap
page read and write
1D900000
heap
page read and write
6E64000
heap
page read and write
9D0C000
stack
page read and write
11B3C000
stack
page read and write
7AFE000
stack
page read and write
30D3C000
stack
page read and write
713C000
stack
page read and write
3B2C2000
heap
page read and write
1060E000
stack
page read and write
CB0000
direct allocation
page execute and read and write
2497C000
stack
page read and write
5255000
heap
page read and write
6DC1000
heap
page read and write
10DCC000
stack
page read and write
2F8FE000
stack
page read and write
186BC000
stack
page read and write
4B87E000
stack
page read and write
5198000
heap
page read and write
E0B6000
heap
page read and write
2F7BE000
stack
page read and write
4618C000
stack
page read and write
1BB3C000
stack
page read and write
4EE3E000
stack
page read and write
136BC000
stack
page read and write
1DE4A000
heap
page read and write
4334C000
stack
page read and write
1E001000
heap
page read and write
2DEFC000
stack
page read and write
FDD000
heap
page read and write
3D18E000
stack
page read and write
E02C000
heap
page read and write
3B1DA000
heap
page read and write
6EF4000
heap
page read and write
E0DD000
heap
page read and write
379FC000
stack
page read and write
2CFE000
stack
page read and write
4D03E000
stack
page read and write
1A97E000
stack
page read and write
36C3C000
stack
page read and write
3083C000
stack
page read and write
3183E000
stack
page read and write
142FE000
stack
page read and write
4A87C000
stack
page read and write
1A83E000
stack
page read and write
1D43C000
stack
page read and write
1CA3C000
stack
page read and write
2D37E000
stack
page read and write
1CF3C000
stack
page read and write
3B6B3000
heap
page read and write
2D3BC000
stack
page read and write
1DCF4000
heap
page read and write
AE4E000
stack
page read and write
1DC28000
heap
page read and write
3403E000
stack
page read and write
49E3E000
stack
page read and write
1E4BE000
stack
page read and write
F0CE000
stack
page read and write
1EEBE000
stack
page read and write
F88C000
stack
page read and write
3FFCE000
stack
page read and write
188FE000
stack
page read and write
41B8C000
stack
page read and write
FE8E000
stack
page read and write
12CBC000
stack
page read and write
4ABFE000
stack
page read and write
2D73E000
stack
page read and write
1DA39000
heap
page read and write
191FC000
stack
page read and write
305BC000
stack
page read and write
1D7BE000
stack
page read and write
52B7E000
stack
page read and write
388FC000
stack
page read and write
D14E000
stack
page read and write
8C7E000
stack
page read and write
1817E000
stack
page read and write
D37000
heap
page read and write
3B3E6000
heap
page read and write
2F17E000
stack
page read and write
496BE000
stack
page read and write
968E000
stack
page read and write
4B50000
trusted library allocation
page read and write
231BE000
stack
page read and write
3F4CC000
stack
page read and write
3CB8C000
stack
page read and write
BC4C000
stack
page read and write
3B403000
heap
page read and write
279FE000
stack
page read and write
E0A2000
heap
page read and write
1D9E2000
heap
page read and write
5202000
heap
page read and write
1523C000
stack
page read and write
26DBC000
stack
page read and write
1128E000
stack
page read and write
45B4C000
stack
page read and write
3B54E000
heap
page read and write
E9D000
stack
page read and write
400000
unkown
page readonly
342FC000
stack
page read and write
2233000
heap
page read and write
4CDBE000
stack
page read and write
3E48C000
stack
page read and write
1DC58000
heap
page read and write
1DCD5000
heap
page read and write
1367E000
stack
page read and write
E0D8000
heap
page read and write
6E22000
heap
page read and write
C4CE000
stack
page read and write
3B65E000
heap
page read and write
4DF7C000
stack
page read and write
7FE000
heap
page read and write
5178000
heap
page read and write
1000C000
stack
page read and write
1CDBE000
stack
page read and write
2CBF000
stack
page read and write
51CBC000
stack
page read and write
E1EB000
heap
page read and write
28A3E000
stack
page read and write
1DF71000
heap
page read and write
32EBE000
stack
page read and write
2D4BE000
stack
page read and write
6F06000
heap
page read and write
1D6BC000
stack
page read and write
6FAB000
heap
page read and write
2B0FE000
stack
page read and write
76F000
heap
page read and write
5183000
heap
page read and write
1F3FC000
stack
page read and write
36FBE000
stack
page read and write
28CFC000
stack
page read and write
3647E000
stack
page read and write
1C63E000
stack
page read and write
2D87E000
stack
page read and write
2113E000
stack
page read and write
3B0B1000
heap
page read and write
E2F5000
heap
page read and write
51BD000
heap
page read and write
500FE000
stack
page read and write
3B4AC000
heap
page read and write
124FE000
stack
page read and write
3B62B000
heap
page read and write
204BE000
stack
page read and write
2B7F000
stack
page read and write
2D0FE000
stack
page read and write
D65000
heap
page read and write
3B10D000
heap
page read and write
1FABE000
stack
page read and write
44FCE000
stack
page read and write
1DB76000
heap
page read and write
40B0E000
stack
page read and write
3B0BD000
heap
page read and write
1763E000
stack
page read and write
10D8E000
stack
page read and write
42B8E000
stack
page read and write
30ABC000
stack
page read and write
35ABC000
stack
page read and write
33A3C000
stack
page read and write
3B040000
heap
page read and write
1DD52000
heap
page read and write
34CBE000
stack
page read and write
51F3C000
stack
page read and write
1727E000
stack
page read and write
4F73C000
stack
page read and write
6E1000
unkown
page readonly
1DCE7000
heap
page read and write
A6CE000
stack
page read and write
51DB000
heap
page read and write
272BC000
stack
page read and write
135A000
heap
page read and write
18DFE000
stack
page read and write
347FC000
stack
page read and write
4CCBC000
stack
page read and write
2A5BE000
stack
page read and write
4514C000
stack
page read and write
40ECE000
stack
page read and write
3B0AF000
heap
page read and write
20FFE000
stack
page read and write
23A3E000
stack
page read and write
3B0FD000
heap
page read and write
4CF3C000
stack
page read and write
1E8BC000
stack
page read and write
6B7C000
stack
page read and write
83FC000
stack
page read and write
49ABC000
stack
page read and write
4678E000
stack
page read and write
323BC000
stack
page read and write
2663C000
stack
page read and write
6DA000
heap
page read and write
197FE000
stack
page read and write
4FABE000
stack
page read and write
4370C000
stack
page read and write
3287E000
stack
page read and write
24B0000
heap
page read and write
1E23E000
stack
page read and write
5243C000
stack
page read and write
1E0CF000
heap
page read and write
4010E000
stack
page read and write
F98E000
stack
page read and write
3467E000
stack
page read and write
45A0C000
stack
page read and write
1E3BC000
stack
page read and write
3B30F000
heap
page read and write
1E017000
heap
page read and write
1E0B2000
heap
page read and write
23A7C000
stack
page read and write
49B000
unkown
page read and write
4D57C000
stack
page read and write
4474C000
stack
page read and write
27B3E000
stack
page read and write
6FA8000
heap
page read and write
44AC000
stack
page read and write
1D969000
heap
page read and write
29E7C000
stack
page read and write
1E092000
heap
page read and write
401000
unkown
page execute read
6DDF000
heap
page read and write
6DFD000
heap
page read and write
51C000
stack
page read and write
51AF000
heap
page read and write
3B616000
heap
page read and write
352FE000
stack
page read and write
73BC000
stack
page read and write
35BBE000
stack
page read and write
123BE000
stack
page read and write
C60E000
stack
page read and write
761000
heap
page read and write
1583E000
stack
page read and write
3817C000
stack
page read and write
D25000
heap
page read and write
232FE000
stack
page read and write
2293C000
stack
page read and write
4750000
trusted library allocation
page read and write
1DDF0000
heap
page read and write
2A7E000
stack
page read and write
4348C000
stack
page read and write
F34E000
stack
page read and write
3B5AF000
heap
page read and write
10C4E000
stack
page read and write
10A0C000
stack
page read and write
B10C000
stack
page read and write
15EBC000
stack
page read and write
14E7C000
stack
page read and write
16AFE000
stack
page read and write
4564C000
stack
page read and write
11C7C000
stack
page read and write
32DBC000
stack
page read and write
334FE000
stack
page read and write
1DDF8000
heap
page read and write
42BCC000
stack
page read and write
4DE3C000
stack
page read and write
265FE000
stack
page read and write
264FC000
stack
page read and write
3D2CE000
stack
page read and write
4330E000
stack
page read and write
131E000
stack
page read and write
1DD2B000
heap
page read and write
3697E000
stack
page read and write
47BCC000
stack
page read and write
269FC000
stack
page read and write
34CFC000
stack
page read and write
524B000
heap
page read and write
33B3E000
stack
page read and write
4E07E000
stack
page read and write
4A50000
heap
page read and write
4240E000
stack
page read and write
523E000
heap
page read and write
24CFE000
stack
page read and write
3B4C3000
heap
page read and write
1D9A9000
heap
page read and write
449CC000
stack
page read and write
E2D5000
heap
page read and write
2EF3C000
stack
page read and write
2623E000
stack
page read and write
A34C000
stack
page read and write
3E1CE000
stack
page read and write
18BBC000
stack
page read and write
3B43E000
heap
page read and write
3FE8E000
stack
page read and write
3F88C000
stack
page read and write
5113E000
stack
page read and write
28E6000
heap
page read and write
BD4E000
stack
page read and write
3B48D000
heap
page read and write
E10000
heap
page read and write
4BB3C000
stack
page read and write
E2A8000
heap
page read and write
486CE000
stack
page read and write
41F4C000
stack
page read and write
3B330000
heap
page read and write
2FDFE000
stack
page read and write
4168C000
stack
page read and write
59EE000
stack
page read and write
1DEBC000
heap
page read and write
2DDBC000
stack
page read and write
1DE0E000
heap
page read and write
348FE000
stack
page read and write
5357E000
stack
page read and write
E01C000
heap
page read and write
E1E8000
heap
page read and write
4000C000
stack
page read and write
E216000
heap
page read and write
2A83E000
stack
page read and write
4BC3E000
stack
page read and write
75FE000
stack
page read and write
78C000
heap
page read and write
51B7C000
stack
page read and write
5073E000
stack
page read and write
159BC000
stack
page read and write
C74E000
stack
page read and write
6E6F000
heap
page read and write
208BC000
stack
page read and write
2AD7C000
stack
page read and write
17A3C000
stack
page read and write
4B0FE000
stack
page read and write
5257C000
stack
page read and write
E299000
heap
page read and write
2244000
direct allocation
page read and write
51A9000
heap
page read and write
238FE000
stack
page read and write
49B000
unkown
page read and write
D78E000
stack
page read and write
17F3C000
stack
page read and write
2F3E000
stack
page read and write
17B7C000
stack
page read and write
53CFE000
stack
page read and write
4D1BC000
stack
page read and write
544BC000
stack
page read and write
3B1C4000
heap
page read and write
196BE000
stack
page read and write
146BE000
stack
page read and write
3C40C000
stack
page read and write
1DB8E000
heap
page read and write
1FBFE000
stack
page read and write
1B23E000
stack
page read and write
128BE000
stack
page read and write
4C4FE000
stack
page read and write
2C03C000
stack
page read and write
338FC000
stack
page read and write
490BC000
stack
page read and write
B0CE000
stack
page read and write
3B0BA000
heap
page read and write
1DF60000
heap
page read and write
3B4A1000
heap
page read and write
501F000
stack
page read and write
3593E000
stack
page read and write
819000
unkown
page readonly
4524E000
stack
page read and write
295BC000
stack
page read and write
1537C000
stack
page read and write
3443C000
stack
page read and write
2207C000
stack
page read and write
546FF000
stack
page read and write
3A77E000
stack
page read and write
27C7E000
stack
page read and write
6F09000
heap
page read and write
21F6000
heap
page read and write
2CB7C000
stack
page read and write
E033000
heap
page read and write
261000
unkown
page execute read
3853C000
stack
page read and write
3147E000
stack
page read and write
3327E000
stack
page read and write
19F7E000
stack
page read and write
292FE000
stack
page read and write
3B1DE000
heap
page read and write
4E33C000
stack
page read and write
4D8FE000
stack
page read and write
4820C000
stack
page read and write
3B626000
heap
page read and write
255BE000
stack
page read and write
C3CC000
stack
page read and write
4FD7C000
stack
page read and write
5E0000
heap
page read and write
E84C000
stack
page read and write
40D8E000
stack
page read and write
3713C000
stack
page read and write
3D68E000
stack
page read and write
4484E000
stack
page read and write
80F000
heap
page read and write
51DB000
heap
page read and write
2BD7E000
stack
page read and write
5F2C000
stack
page read and write
3773E000
stack
page read and write
269BE000
stack
page read and write
51B9000
heap
page read and write
1C03C000
stack
page read and write
1E73E000
stack
page read and write
31D3E000
stack
page read and write
3DF8C000
stack
page read and write
3B391000
heap
page read and write
6F9B000
heap
page read and write
182BE000
stack
page read and write
2F03E000
stack
page read and write
1DE18000
heap
page read and write
3687C000
stack
page read and write
3737E000
stack
page read and write
616E000
stack
page read and write
50C3E000
stack
page read and write
2A23C000
stack
page read and write
1353E000
stack
page read and write
4B9BE000
stack
page read and write
22A3E000
stack
page read and write
1DF7C000
heap
page read and write
41E0C000
stack
page read and write
41EC000
stack
page read and write
2433C000
stack
page read and write
E70C000
stack
page read and write
10B0E000
stack
page read and write
1B27C000
stack
page read and write
523B000
heap
page read and write
4C3FC000
stack
page read and write
36EBC000
stack
page read and write
2BAFE000
stack
page read and write
1DFC5000
heap
page read and write
12C7E000
stack
page read and write
26C7C000
stack
page read and write
3B4B8000
heap
page read and write
1A5BE000
stack
page read and write
49F7E000
stack
page read and write
3B52E000
heap
page read and write
17CBC000
stack
page read and write
2D27C000
stack
page read and write
7E8000
heap
page read and write
227FC000
stack
page read and write
B2E000
stack
page read and write
27A3C000
stack
page read and write
3C3CE000
stack
page read and write
1D96D000
heap
page read and write
4B3BC000
stack
page read and write
505C000
stack
page read and write
4FFFC000
stack
page read and write
1493E000
stack
page read and write
3B411000
heap
page read and write
E1E3000
heap
page read and write
181BC000
stack
page read and write
2EEFE000
stack
page read and write
3B696000
heap
page read and write
F48E000
stack
page read and write
477CE000
stack
page read and write
3A67C000
stack
page read and write
471CC000
stack
page read and write
30F7E000
stack
page read and write
1E01B000
heap
page read and write
48CE000
stack
page read and write
172BC000
stack
page read and write
19CFE000
stack
page read and write
214FE000
stack
page read and write
3943C000
stack
page read and write
DFFE000
heap
page read and write
2AAFC000
stack
page read and write
E019000
heap
page read and write
52BBC000
stack
page read and write
17DFC000
stack
page read and write
290BC000
stack
page read and write
1DDFE000
heap
page read and write
5423C000
stack
page read and write
2BC7C000
stack
page read and write
30BFC000
stack
page read and write
1E5FE000
stack
page read and write
278FC000
stack
page read and write
A80E000
stack
page read and write
97000
stack
page read and write
58EC000
stack
page read and write
1DB14000
heap
page read and write
3B0B5000
heap
page read and write
392BE000
stack
page read and write
532FE000
stack
page read and write
16FFE000
stack
page read and write
3637C000
stack
page read and write
9E0E000
stack
page read and write
4664E000
stack
page read and write
4F5FC000
stack
page read and write
1DE10000
heap
page read and write
4B8BC000
stack
page read and write
42EE000
stack
page read and write
DF7B000
heap
page read and write
1F27E000
stack
page read and write
5063C000
stack
page read and write
74FC000
stack
page read and write
4294C000
stack
page read and write
1B87E000
stack
page read and write
4EFBC000
stack
page read and write
3AF3C000
stack
page read and write
3B0A1000
heap
page read and write
E160000
heap
page read and write
1E0B4000
heap
page read and write
E203000
heap
page read and write
2EFF000
stack
page read and write
6E3E000
heap
page read and write
52CBE000
stack
page read and write
1DBA0000
heap
page read and write
1078C000
stack
page read and write
2FA3E000
stack
page read and write
4A4BC000
stack
page read and write
1C27E000
stack
page read and write
40C4E000
stack
page read and write
164FC000
stack
page read and write
4588E000
stack
page read and write
3B2C7000
heap
page read and write
3417E000
stack
page read and write
23F7C000
stack
page read and write
260FE000
stack
page read and write
485CC000
stack
page read and write
4F97E000
stack
page read and write
108CC000
stack
page read and write
FD4E000
stack
page read and write
1C9FE000
stack
page read and write
3557E000
stack
page read and write
4498E000
stack
page read and write
156FE000
stack
page read and write
907C000
stack
page read and write
5187000
heap
page read and write
34A3E000
stack
page read and write
29FBC000
stack
page read and write
6F90000
heap
page read and write
45ECE000
stack
page read and write
1EFFE000
stack
page read and write
131BC000
stack
page read and write
12A3C000
stack
page read and write
4FD3E000
stack
page read and write
4118C000
stack
page read and write
1FD3E000
stack
page read and write
E200000
heap
page read and write
51A4000
heap
page read and write
1DF50000
heap
page read and write
15E7E000
stack
page read and write
250BE000
stack
page read and write
1317E000
stack
page read and write
E2A2000
heap
page read and write
25AFC000
stack
page read and write
179FE000
stack
page read and write
AD0E000
stack
page read and write
51BA000
heap
page read and write
16EBE000
stack
page read and write
38EFE000
stack
page read and write
5333C000
stack
page read and write
5249000
heap
page read and write
39F7C000
stack
page read and write
3D6CC000
stack
page read and write
1E0B6000
heap
page read and write
1B5FE000
stack
page read and write
2037E000
stack
page read and write
3F20E000
stack
page read and write
4578C000
stack
page read and write
B60C000
stack
page read and write
6E29000
heap
page read and write
3407C000
stack
page read and write
24ABC000
stack
page read and write
5241000
heap
page read and write
E34C000
stack
page read and write
2127E000
stack
page read and write
D35000
heap
page read and write
1AD3E000
stack
page read and write
7E0000
heap
page read and write
2B9FC000
stack
page read and write
1203C000
stack
page read and write
576D000
stack
page read and write
1D9DA000
heap
page read and write
2673E000
stack
page read and write
293D000
stack
page read and write
3953E000
stack
page read and write
1DAF9000
heap
page read and write
2D9BE000
stack
page read and write
3B2C5000
heap
page read and write
3363E000
stack
page read and write
3B433000
heap
page read and write
3B643000
heap
page read and write
1497C000
stack
page read and write
357FE000
stack
page read and write
C88E000
stack
page read and write
4CEFE000
stack
page read and write
19C000
stack
page read and write
4628E000
stack
page read and write
2613C000
stack
page read and write
4268E000
stack
page read and write
12EFE000
stack
page read and write
CC8000
heap
page read and write
4394E000
stack
page read and write
49BFC000
stack
page read and write
1DA23000
heap
page read and write
1A23C000
stack
page read and write
5231000
heap
page read and write
24BFC000
stack
page read and write
562E000
stack
page read and write
1BDBC000
stack
page read and write
398FE000
stack
page read and write
1DCE3000
heap
page read and write
6DC0000
heap
page read and write
417CC000
stack
page read and write
DF66000
heap
page read and write
3EF8E000
stack
page read and write
4C7BC000
stack
page read and write
FFCE000
stack
page read and write
3D94C000
stack
page read and write
1D8FE000
stack
page read and write
151FE000
stack
page read and write
49B000
unkown
page read and write
1DC6F000
heap
page read and write
1447C000
stack
page read and write
50AFE000
stack
page read and write
523F000
heap
page read and write
2A3D000
stack
page read and write
6E32000
heap
page read and write
6DF4000
heap
page read and write
5187000
heap
page read and write
50FFE000
stack
page read and write
D06000
heap
page read and write
373BC000
stack
page read and write
23440000
heap
page read and write
49E7C000
stack
page read and write
63FE000
stack
page read and write
53E7C000
stack
page read and write
AF8E000
stack
page read and write
6A0000
heap
page read and write
489CC000
stack
page read and write
1DF40000
heap
page read and write
3C18C000
stack
page read and write
3E5CC000
stack
page read and write
2150000
heap
page read and write
3B125000
heap
page read and write
3B61A000
heap
page read and write
408CC000
stack
page read and write
70FE000
stack
page read and write
1D95D000
heap
page read and write
3B3C3000
heap
page read and write
1DADC000
heap
page read and write
39B7E000
stack
page read and write
1154C000
stack
page read and write
3057E000
stack
page read and write
4654C000
stack
page read and write
1343C000
stack
page read and write
1DA5D000
heap
page read and write
2AFFC000
stack
page read and write
115E000
stack
page read and write
B20E000
stack
page read and write
A6C000
unkown
page readonly
169BE000
stack
page read and write
E0A5000
heap
page read and write
AACC000
stack
page read and write
38DFC000
stack
page read and write
3E98C000
stack
page read and write
47A8C000
stack
page read and write
3B3F4000
heap
page read and write
52A3E000
stack
page read and write
1D9BD000
heap
page read and write
6DEA000
heap
page read and write
1C53C000
stack
page read and write
1A9BC000
stack
page read and write
3B2EF000
heap
page read and write
2947C000
stack
page read and write
1A5FC000
stack
page read and write
6E67000
heap
page read and write
88BE000
stack
page read and write
3967E000
stack
page read and write
1DCC8000
heap
page read and write
41C8E000
stack
page read and write
1DB8B000
heap
page read and write
5212000
heap
page read and write
4A5000
unkown
page readonly
18A7C000
stack
page read and write
903E000
stack
page read and write
11EBE000
stack
page read and write
FA3000
heap
page read and write
16D7E000
stack
page read and write
22DFE000
stack
page read and write
1104C000
stack
page read and write
46F0E000
stack
page read and write
1DCCC000
heap
page read and write
1627C000
stack
page read and write
31BFE000
stack
page read and write
1DF3D000
heap
page read and write
104CE000
stack
page read and write
3B1CA000
heap
page read and write
2B8BC000
stack
page read and write
2023E000
stack
page read and write
225C000
direct allocation
page read and write
4933C000
stack
page read and write
2C13E000
stack
page read and write
113CE000
stack
page read and write
48DFE000
stack
page read and write
1D9B2000
heap
page read and write
1BEBE000
stack
page read and write
1DDF4000
heap
page read and write
1DFFD000
heap
page read and write
4EA7E000
stack
page read and write
2703C000
stack
page read and write
1DD46000
heap
page read and write
204FC000
stack
page read and write
4060E000
stack
page read and write
51D2000
heap
page read and write
118FE000
stack
page read and write
53FBC000
stack
page read and write
A84C000
stack
page read and write
1AABE000
stack
page read and write
1443E000
stack
page read and write
4C2BC000
stack
page read and write
261000
unkown
page execute read
2E8FC000
stack
page read and write
6E0A000
heap
page read and write
1DB91000
heap
page read and write
2980000
heap
page read and write
1FAFC000
stack
page read and write
259BC000
stack
page read and write
6DDC000
heap
page read and write
16C7C000
stack
page read and write
DF10000
heap
page read and write
690000
direct allocation
page execute and read and write
34BBC000
stack
page read and write
3B1D6000
heap
page read and write
737E000
stack
page read and write
3A7BC000
stack
page read and write
D28E000
stack
page read and write
324BE000
stack
page read and write
1DE8F000
heap
page read and write
3623C000
stack
page read and write
D00000
heap
page read and write
4B4F000
stack
page read and write
26FFE000
stack
page read and write
1DEC8000
heap
page read and write
3A8BE000
stack
page read and write
D54000
heap
page read and write
515E000
stack
page read and write
1CDFC000
stack
page read and write
2E7BC000
stack
page read and write
690F000
heap
page read and write
4B20000
remote allocation
page read and write
1DC3D000
heap
page read and write
69FE000
stack
page read and write
4E3F000
stack
page read and write
1F83E000
stack
page read and write
3B0AD000
heap
page read and write
1356000
heap
page read and write
3B1E8000
heap
page read and write
540BE000
stack
page read and write
6FFC000
stack
page read and write
3137C000
stack
page read and write
3AC7E000
stack
page read and write
103CC000
stack
page read and write
4358E000
stack
page read and write
1DEB4000
heap
page read and write
1CB3E000
stack
page read and write
4164E000
stack
page read and write
D55000
heap
page read and write
E94E000
stack
page read and write
35E7C000
stack
page read and write
2220000
direct allocation
page read and write
178BE000
stack
page read and write
333FC000
stack
page read and write
383BE000
stack
page read and write
42F0000
heap
page read and write
E163000
heap
page read and write
4F4BC000
stack
page read and write
700000
heap
page read and write
2CB3E000
stack
page read and write
495BC000
stack
page read and write
503BC000
stack
page read and write
D60000
heap
page read and write
1DA61000
heap
page read and write
B9CC000
stack
page read and write
2177E000
stack
page read and write
723E000
stack
page read and write
1158C000
stack
page read and write
30E7C000
stack
page read and write
4858E000
stack
page read and write
20EBE000
stack
page read and write
46C8E000
stack
page read and write
B24C000
stack
page read and write
32AFE000
stack
page read and write
2997C000
stack
page read and write
DF77000
heap
page read and write
E0CE000
heap
page read and write
4880E000
stack
page read and write
37DBC000
stack
page read and write
DFF9000
heap
page read and write
1DEBF000
heap
page read and write
5087E000
stack
page read and write
2238000
direct allocation
page read and write
2087E000
stack
page read and write
1DD44000
heap
page read and write
E0BC000
heap
page read and write
51DFC000
stack
page read and write
2333C000
stack
page read and write
25C3C000
stack
page read and write
412CC000
stack
page read and write
463CE000
stack
page read and write
4957E000
stack
page read and write
476CC000
stack
page read and write
3683E000
stack
page read and write
4B4BE000
stack
page read and write
4D17E000
stack
page read and write
28E3C000
stack
page read and write
1DD10000
heap
page read and write
4650E000
stack
page read and write
5237000
heap
page read and write
6D2000
unkown
page write copy
6E2C000
heap
page read and write
528FE000
stack
page read and write
E210000
heap
page read and write
47D0C000
stack
page read and write
1E0A5000
heap
page read and write
17C7E000
stack
page read and write
192FE000
stack
page read and write
4410C000
stack
page read and write
4C8FC000
stack
page read and write
2857C000
stack
page read and write
3F10C000
stack
page read and write
2210000
direct allocation
page read and write
1407E000
stack
page read and write
19D3C000
stack
page read and write
3B336000
heap
page read and write
3277C000
stack
page read and write
41F0E000
stack
page read and write
A44E000
stack
page read and write
E156000
heap
page read and write
3DD0C000
stack
page read and write
787E000
stack
page read and write
3AB3E000
stack
page read and write
3B100000
heap
page read and write
E1DB000
heap
page read and write
1DC62000
heap
page read and write
4E93E000
stack
page read and write
1F97E000
stack
page read and write
1DB04000
heap
page read and write
2407E000
stack
page read and write
990E000
stack
page read and write
2523C000
stack
page read and write
205FE000
stack
page read and write
1DE1C000
heap
page read and write
DF5E000
heap
page read and write
35FBC000
stack
page read and write
282FC000
stack
page read and write
19A7E000
stack
page read and write
1EC3E000
stack
page read and write
4907E000
stack
page read and write
4740E000
stack
page read and write
28F7C000
stack
page read and write
2BBE000
stack
page read and write
E21B000
heap
page read and write
2BDBC000
stack
page read and write
1D2FC000
stack
page read and write
4A5FC000
stack
page read and write
6DB000
unkown
page read and write
38B7C000
stack
page read and write
452C000
heap
page read and write
E030000
heap
page read and write
1B77C000
stack
page read and write
1803E000
stack
page read and write
15FFC000
stack
page read and write
4C17C000
stack
page read and write
6E06000
heap
page read and write
4104C000
stack
page read and write
4DDFE000
stack
page read and write
1DD38000
heap
page read and write
314E000
stack
page read and write
1533E000
stack
page read and write
246BE000
stack
page read and write
13F7C000
stack
page read and write
D2C000
heap
page read and write
F5CE000
stack
page read and write
1A37C000
stack
page read and write
3F24C000
stack
page read and write
47A4E000
stack
page read and write
3313E000
stack
page read and write
31E7E000
stack
page read and write
2443E000
stack
page read and write
E6CE000
stack
page read and write
3B39E000
heap
page read and write
6EC4000
heap
page read and write
58AE000
stack
page read and write
4B37E000
stack
page read and write
3B322000
heap
page read and write
3B106000
heap
page read and write
2208000
direct allocation
page read and write
30CFE000
stack
page read and write
49E000
unkown
page read and write
867C000
stack
page read and write
281BC000
stack
page read and write
2F1BC000
stack
page read and write
4C03C000
stack
page read and write
1F0000
heap
page read and write
1E003000
heap
page read and write
522A000
heap
page read and write
763C000
stack
page read and write
B34E000
stack
page read and write
3B611000
heap
page read and write
3B618000
heap
page read and write
2983000
heap
page read and write
19E3E000
stack
page read and write
3E80E000
stack
page read and write
213BE000
stack
page read and write
51A3C000
stack
page read and write
4A1FE000
stack
page read and write
A58E000
stack
page read and write
E004000
heap
page read and write
1DA81000
heap
page read and write
DF8D000
heap
page read and write
2A1FE000
stack
page read and write
53AE000
stack
page read and write
4DA3E000
stack
page read and write
36D3E000
stack
page read and write
2627C000
stack
page read and write
1D960000
heap
page read and write
405F000
stack
page read and write
31C3C000
stack
page read and write
3B343000
heap
page read and write
2243C000
stack
page read and write
10C8C000
stack
page read and write
12DBE000
stack
page read and write
2228000
direct allocation
page read and write
EF8E000
stack
page read and write
2063C000
stack
page read and write
4BEFC000
stack
page read and write
CC4E000
stack
page read and write
41A0E000
stack
page read and write
DF0E000
stack
page read and write
1D9C5000
heap
page read and write
4024E000
stack
page read and write
1677C000
stack
page read and write
4064C000
stack
page read and write
1947C000
stack
page read and write
4308E000
stack
page read and write
40C8C000
stack
page read and write
1D9B9000
heap
page read and write
2230000
heap
page read and write
788000
heap
page read and write
15BFE000
stack
page read and write
DFF4000
heap
page read and write
5223000
heap
page read and write
1D9BB000
heap
page read and write
37C7C000
stack
page read and write
DF6C000
heap
page read and write
653C000
stack
page read and write
1AFFC000
stack
page read and write
392FC000
stack
page read and write
3B401000
heap
page read and write
4BFFE000
stack
page read and write
46A0E000
stack
page read and write
EFCC000
stack
page read and write
5EEE000
stack
page read and write
CECE000
stack
page read and write
3B6A6000
heap
page read and write
1340000
trusted library allocation
page read and write
5CAC000
stack
page read and write
4E57E000
stack
page read and write
4894E000
stack
page read and write
141BE000
stack
page read and write
4834C000
stack
page read and write
454CE000
stack
page read and write
759000
heap
page read and write
1A4BC000
stack
page read and write
3723E000
stack
page read and write
3B4B5000
heap
page read and write
24AE000
stack
page read and write
4B9FC000
stack
page read and write
5037E000
stack
page read and write
4EE7C000
stack
page read and write
6E7F000
heap
page read and write
1DCE5000
heap
page read and write
1E27C000
stack
page read and write
3EA8E000
stack
page read and write
3E58E000
stack
page read and write
3D7CE000
stack
page read and write
29BBE000
stack
page read and write
2803E000
stack
page read and write
33DBE000
stack
page read and write
1EDBC000
stack
page read and write
356FC000
stack
page read and write
4538E000
stack
page read and write
3C14E000
stack
page read and write
21C0000
heap
page read and write
3D80C000
stack
page read and write
22CFC000
stack
page read and write
4E6FC000
stack
page read and write
2687E000
stack
page read and write
431CE000
stack
page read and write
1DB6D000
heap
page read and write
141FC000
stack
page read and write
1D95B000
heap
page read and write
1D03E000
stack
page read and write
350BC000
stack
page read and write
33F3C000
stack
page read and write
1D2BE000
stack
page read and write
1B3BC000
stack
page read and write
6F6B000
heap
page read and write
226BC000
stack
page read and write
3CE0C000
stack
page read and write
231FC000
stack
page read and write
4F87C000
stack
page read and write
CB0E000
stack
page read and write
1DF4E000
heap
page read and write
3B61F000
heap
page read and write
527BE000
stack
page read and write
3263C000
stack
page read and write
32D7E000
stack
page read and write
4B5C000
stack
page read and write
133FE000
stack
page read and write
46DCE000
stack
page read and write
39A3E000
stack
page read and write
14FBC000
stack
page read and write
40DCC000
stack
page read and write
2AD3E000
stack
page read and write
3B1D2000
heap
page read and write
15ABE000
stack
page read and write
4FBFE000
stack
page read and write
1DDC8000
heap
page read and write
6E6B000
heap
page read and write
3B4C0000
heap
page read and write
980C000
stack
page read and write
4FFBE000
stack
page read and write
4C8BE000
stack
page read and write
5163E000
stack
page read and write
38C7E000
stack
page read and write
6EB3000
heap
page read and write
505FE000
stack
page read and write
20EFC000
stack
page read and write
1DF5E000
heap
page read and write
2228000
direct allocation
page read and write
3B414000
heap
page read and write
5F6000
unkown
page readonly
3B1B9000
heap
page read and write
155FC000
stack
page read and write
CF0C000
stack
page read and write
244F000
stack
page read and write
5DE000
stack
page read and write
3B1E5000
heap
page read and write
132BE000
stack
page read and write
BE8E000
stack
page read and write
1997C000
stack
page read and write
A94E000
stack
page read and write
138FE000
stack
page read and write
E0B2000
heap
page read and write
3133E000
stack
page read and write
2597E000
stack
page read and write
2268000
direct allocation
page read and write
D50E000
stack
page read and write
45D8E000
stack
page read and write
27F3C000
stack
page read and write
25D7C000
stack
page read and write
25D3E000
stack
page read and write
3B4D0000
heap
page read and write
4BF8000
heap
page read and write
45EE000
stack
page read and write
51AA000
heap
page read and write
3E44E000
stack
page read and write
3B555000
heap
page read and write
2E03C000
stack
page read and write
E80E000
stack
page read and write
3B248000
heap
page read and write
4750000
trusted library allocation
page read and write
2537C000
stack
page read and write
B74C000
stack
page read and write
1DD42000
heap
page read and write
263BC000
stack
page read and write
6F7E000
heap
page read and write
9B8E000
stack
page read and write
4420E000
stack
page read and write
32BC000
stack
page read and write
3B614000
heap
page read and write
3303C000
stack
page read and write
48CFE000
stack
page read and write
2260000
direct allocation
page read and write
670000
heap
page read and write
18CFC000
stack
page read and write
536FC000
stack
page read and write
36BFE000
stack
page read and write
356BE000
stack
page read and write
1DA2A000
heap
page read and write
307E000
stack
page read and write
DF6E000
heap
page read and write
1277E000
stack
page read and write
E281000
heap
page read and write
1777E000
stack
page read and write
34F3E000
stack
page read and write
3993C000
stack
page read and write
5217E000
stack
page read and write
3B56A000
heap
page read and write
44B0C000
stack
page read and write
32FFE000
stack
page read and write
1853E000
stack
page read and write
400000
unkown
page readonly
2B73E000
stack
page read and write
23F3E000
stack
page read and write
29F7E000
stack
page read and write
39E3C000
stack
page read and write
1C3BE000
stack
page read and write
21A3C000
stack
page read and write
531FC000
stack
page read and write
4C53C000
stack
page read and write
514FE000
stack
page read and write
43E8C000
stack
page read and write
827E000
stack
page read and write
3B0F0000
heap
page read and write
1DF6A000
heap
page read and write
28A7C000
stack
page read and write
FB8000
heap
page read and write
2B63C000
stack
page read and write
2AE7E000
stack
page read and write
2760000
direct allocation
page read and write
2EDBE000
stack
page read and write
1E0AC000
heap
page read and write
3123C000
stack
page read and write
E1F7000
heap
page read and write
2A4BC000
stack
page read and write
220C000
direct allocation
page read and write
5235000
heap
page read and write
6F0D000
heap
page read and write
3E30E000
stack
page read and write
2E13E000
stack
page read and write
17DBE000
stack
page read and write
3B093000
heap
page read and write
37EBE000
stack
page read and write
3B406000
heap
page read and write
264BE000
stack
page read and write
213FC000
stack
page read and write
773E000
stack
page read and write
14F7E000
stack
page read and write
545BE000
stack
page read and write
4D3E000
stack
page read and write
3213C000
stack
page read and write
6D4000
unkown
page write copy
4D7FC000
stack
page read and write
4718E000
stack
page read and write
DE0C000
stack
page read and write
1DDD4000
heap
page read and write
4AC3C000
stack
page read and write
3B1EF000
heap
page read and write
1E02B000
heap
page read and write
29ABC000
stack
page read and write
160FE000
stack
page read and write
31EBC000
stack
page read and write
1350000
heap
page read and write
EE4E000
stack
page read and write
4614E000
stack
page read and write
D3D000
heap
page read and write
178FC000
stack
page read and write
545FE000
stack
page read and write
140BC000
stack
page read and write
378BC000
stack
page read and write
1DB70000
heap
page read and write
51CB000
heap
page read and write
4A97E000
stack
page read and write
129FE000
stack
page read and write
526BC000
stack
page read and write
391BC000
stack
page read and write
3F60C000
stack
page read and write
1DC4D000
heap
page read and write
2217E000
stack
page read and write
1DE9A000
heap
page read and write
30FBC000
stack
page read and write
FFB000
heap
page read and write
1FE7E000
stack
page read and write
2893C000
stack
page read and write
1FD7C000
stack
page read and write
25E7E000
stack
page read and write
3A07E000
stack
page read and write
1C4FE000
stack
page read and write
84FE000
stack
page read and write
5393E000
stack
page read and write
537FE000
stack
page read and write
3B082000
heap
page read and write
4028C000
stack
page read and write
807000
heap
page read and write
3457C000
stack
page read and write
2FCFC000
stack
page read and write
E20D000
heap
page read and write
2D13C000
stack
page read and write
422CE000
stack
page read and write
1573C000
stack
page read and write
D2CC000
stack
page read and write
29A7E000
stack
page read and write
4FEBC000
stack
page read and write
3B4CD000
heap
page read and write
1DEBA000
heap
page read and write
458CC000
stack
page read and write
777C000
stack
page read and write
2880000
heap
page read and write
3B0C0000
heap
page read and write
3E20C000
stack
page read and write
4690C000
stack
page read and write
44ACE000
stack
page read and write
4F37C000
stack
page read and write
E0AC000
heap
page read and write
34A7C000
stack
page read and write
11FFE000
stack
page read and write
260000
unkown
page readonly
1DB9A000
heap
page read and write
6F94000
heap
page read and write
DF82000
heap
page read and write
C78C000
stack
page read and write
5307E000
stack
page read and write
4B73E000
stack
page read and write
6AE000
heap
page read and write
1E77C000
stack
page read and write
536BE000
stack
page read and write
4FC3C000
stack
page read and write
E0D0000
heap
page read and write
26C3E000
stack
page read and write
E2A5000
heap
page read and write
2B27C000
stack
page read and write
27DFC000
stack
page read and write
4AFFC000
stack
page read and write
2DAFE000
stack
page read and write
10ECE000
stack
page read and write
4D2FC000
stack
page read and write
3E70C000
stack
page read and write
2583E000
stack
page read and write
374FC000
stack
page read and write
47B8E000
stack
page read and write
2DB3C000
stack
page read and write
51D3000
heap
page read and write
1267C000
stack
page read and write
E2B7000
heap
page read and write
43F8E000
stack
page read and write
190BC000
stack
page read and write
472CE000
stack
page read and write
1F03C000
stack
page read and write
727C000
stack
page read and write
1213E000
stack
page read and write
1393C000
stack
page read and write
11C3E000
stack
page read and write
218BE000
stack
page read and write
37FFE000
stack
page read and write
51FA000
heap
page read and write
DF70000
heap
page read and write
4CB7C000
stack
page read and write
1C77E000
stack
page read and write
6E4C000
heap
page read and write
2BFFE000
stack
page read and write
2933C000
stack
page read and write
387BC000
stack
page read and write
AE0000
heap
page read and write
519F000
heap
page read and write
2C67C000
stack
page read and write
1867E000
stack
page read and write
4794C000
stack
page read and write
E98C000
stack
page read and write
3D1CC000
stack
page read and write
3B4AA000
heap
page read and write
790000
heap
page read and write
2224000
direct allocation
page read and write
62AE000
stack
page read and write
496FC000
stack
page read and write
2258000
direct allocation
page read and write
4D7BE000
stack
page read and write
43C0C000
stack
page read and write
6400000
heap
page read and write
19C000
stack
page read and write
4B63C000
stack
page read and write
3353C000
stack
page read and write
513BE000
stack
page read and write
3B3D0000
heap
page read and write
37D7E000
stack
page read and write
242FE000
stack
page read and write
236BC000
stack
page read and write
1DA58000
heap
page read and write
35D3C000
stack
page read and write
78BC000
stack
page read and write
51C0000
heap
page read and write
7EFC000
stack
page read and write
C28C000
stack
page read and write
D64E000
stack
page read and write
1DB65000
heap
page read and write
137FC000
stack
page read and write
3D30C000
stack
page read and write
1893C000
stack
page read and write
2027C000
stack
page read and write
1DE9F000
heap
page read and write
2C8BE000
stack
page read and write
1DB7A000
heap
page read and write
492FE000
stack
page read and write
E48C000
stack
page read and write
10B4C000
stack
page read and write
23DFE000
stack
page read and write
5236000
heap
page read and write
1957E000
stack
page read and write
2CA0000
heap
page read and write
164BE000
stack
page read and write
4AD3E000
stack
page read and write
51AF000
heap
page read and write
147FE000
stack
page read and write
53F7E000
stack
page read and write
2767C000
stack
page read and write
3727C000
stack
page read and write
14D3C000
stack
page read and write
16DBC000
stack
page read and write
E223000
heap
page read and write
53EC000
stack
page read and write
3C78E000
stack
page read and write
3DE4C000
stack
page read and write
3F9CC000
stack
page read and write
23CFC000
stack
page read and write
4BDBC000
stack
page read and write
146FC000
stack
page read and write
1F2BC000
stack
page read and write
3C64E000
stack
page read and write
3B31C000
heap
page read and write
251FE000
stack
page read and write
3ED4C000
stack
page read and write
1433C000
stack
page read and write
19BFC000
stack
page read and write
D00E000
stack
page read and write
3B0F3000
heap
page read and write
311FE000
stack
page read and write
4F0BE000
stack
page read and write
32C7C000
stack
page read and write
2B87E000
stack
page read and write
3CB4E000
stack
page read and write
1E0A2000
heap
page read and write
3D54E000
stack
page read and write
3B64A000
heap
page read and write
4997C000
stack
page read and write
3B3A7000
heap
page read and write
3F84E000
stack
page read and write
39CBE000
stack
page read and write
803C000
stack
page read and write
5433E000
stack
page read and write
1457E000
stack
page read and write
4870C000
stack
page read and write
3B1C7000
heap
page read and write
4CA3C000
stack
page read and write
23B7E000
stack
page read and write
2A0FC000
stack
page read and write
306FC000
stack
page read and write
3EACC000
stack
page read and write
3B03E000
stack
page read and write
3B1B1000
heap
page read and write
1DA40000
heap
page read and write
1EAFE000
stack
page read and write
4014C000
stack
page read and write
3957C000
stack
page read and write
994C000
stack
page read and write
1D951000
heap
page read and write
6F7A000
heap
page read and write
3DBCC000
stack
page read and write
1024E000
stack
page read and write
D21000
heap
page read and write
26B3C000
stack
page read and write
CFA000
stack
page read and write
4898C000
stack
page read and write
E205000
heap
page read and write
1DB68000
heap
page read and write
3B49D000
heap
page read and write
C9CE000
stack
page read and write
123FC000
stack
page read and write
5244000
heap
page read and write
4768E000
stack
page read and write
1DA4E000
heap
page read and write
21DFC000
stack
page read and write
50DBC000
stack
page read and write
3FD8C000
stack
page read and write
21F3C000
stack
page read and write
4EDE000
stack
page read and write
2F67E000
stack
page read and write
1DA53000
heap
page read and write
3E0CC000
stack
page read and write
1DCF1000
heap
page read and write
7C3E000
stack
page read and write
6E12000
heap
page read and write
360FC000
stack
page read and write
1BEFC000
stack
page read and write
1AAFC000
stack
page read and write
E287000
heap
page read and write
3FECC000
stack
page read and write
2A97E000
stack
page read and write
1673E000
stack
page read and write
BFCE000
stack
page read and write
5447E000
stack
page read and write
50D7E000
stack
page read and write
DB8C000
stack
page read and write
1843C000
stack
page read and write
112CC000
stack
page read and write
3827E000
stack
page read and write
4BD7E000
stack
page read and write
958C000
stack
page read and write
917E000
stack
page read and write
38A3C000
stack
page read and write
4C77E000
stack
page read and write
6DBE000
stack
page read and write
819000
unkown
page readonly
5181000
heap
page read and write
4B0000
unkown
page readonly
1E4FC000
stack
page read and write
71E000
heap
page read and write
1B9FC000
stack
page read and write
5253E000
stack
page read and write
6E16000
heap
page read and write
91BC000
stack
page read and write
EBE000
stack
page read and write
150FC000
stack
page read and write
301BE000
stack
page read and write
530BC000
stack
page read and write
3B32B000
heap
page read and write
1DCD1000
heap
page read and write
2234000
direct allocation
page read and write
504FC000
stack
page read and write
CC0000
heap
page read and write
3CDCE000
stack
page read and write
6E1000
unkown
page readonly
2A73C000
stack
page read and write
4730C000
stack
page read and write
3317C000
stack
page read and write
3B0AB000
heap
page read and write
3F70E000
stack
page read and write
1BC3E000
stack
page read and write
468CE000
stack
page read and write
2B23E000
stack
page read and write
51EFE000
stack
page read and write
43D0E000
stack
page read and write
62FC000
stack
page read and write
223FE000
stack
page read and write
1DCEF000
heap
page read and write
D0C000
heap
page read and write
52A7C000
stack
page read and write
2CA3C000
stack
page read and write
2F2BE000
stack
page read and write
3B43C000
heap
page read and write
4280C000
stack
page read and write
6EF8000
heap
page read and write
E14F000
heap
page read and write
28CBE000
stack
page read and write
752000
heap
page read and write
E1C6000
heap
page read and write
4E5BC000
stack
page read and write
16EFC000
stack
page read and write
1AC3C000
stack
page read and write
522BE000
stack
page read and write
1E09E000
heap
page read and write
260000
unkown
page readonly
A0CC000
stack
page read and write
2C4FE000
stack
page read and write
273BE000
stack
page read and write
310FC000
stack
page read and write
525000
heap
page read and write
3B2E3000
heap
page read and write
1D53E000
stack
page read and write
20B3C000
stack
page read and write
E23F000
heap
page read and write
20D7E000
stack
page read and write
4AABE000
stack
page read and write
FBF000
stack
page read and write
EC0C000
stack
page read and write
DF9A000
heap
page read and write
2E67C000
stack
page read and write
1E0C2000
heap
page read and write
1DE05000
heap
page read and write
3237E000
stack
page read and write
324FC000
stack
page read and write
17B3E000
stack
page read and write
9F4E000
stack
page read and write
522C000
heap
page read and write
3033C000
stack
page read and write
21DBE000
stack
page read and write
1DC6C000
heap
page read and write
3007E000
stack
page read and write
418CE000
stack
page read and write
2CBFC000
stack
page read and write
1B37E000
stack
page read and write
E16A000
heap
page read and write
F60000
heap
page read and write
3F38C000
stack
page read and write
34F7C000
stack
page read and write
1DCE1000
heap
page read and write
277BC000
stack
page read and write
25ABE000
stack
page read and write
1D1BC000
stack
page read and write
304B000
stack
page read and write
36FFC000
stack
page read and write
3763C000
stack
page read and write
49B000
unkown
page write copy
87BC000
stack
page read and write
1DE09000
heap
page read and write
165FE000
stack
page read and write
35A7E000
stack
page read and write
1767C000
stack
page read and write
E1CB000
heap
page read and write
3043E000
stack
page read and write
3B5EB000
heap
page read and write
3867C000
stack
page read and write
4154C000
stack
page read and write
524F000
heap
page read and write
3B3A2000
heap
page read and write
307FE000
stack
page read and write
C50C000
stack
page read and write
300BC000
stack
page read and write
38CBC000
stack
page read and write
6DE7000
heap
page read and write
3B57E000
heap
page read and write
46EF000
stack
page read and write
347BE000
stack
page read and write
4DF3E000
stack
page read and write
1D978000
heap
page read and write
E2BA000
heap
page read and write
346BC000
stack
page read and write
79BE000
stack
page read and write
21CBC000
stack
page read and write
4A0000
unkown
page write copy
477C000
stack
page read and write
4C5E000
stack
page read and write
1D97B000
heap
page read and write
3EFCC000
stack
page read and write
1623E000
stack
page read and write
2C27E000
stack
page read and write
1BD7E000
stack
page read and write
1DC3A000
heap
page read and write
4DB7E000
stack
page read and write
1D9C1000
heap
page read and write
4DCBE000
stack
page read and write
491FC000
stack
page read and write
2367E000
stack
page read and write
E1FE000
heap
page read and write
3DF4E000
stack
page read and write
2ECBC000
stack
page read and write
4AE7E000
stack
page read and write
6F11000
heap
page read and write
3507E000
stack
page read and write
274FE000
stack
page read and write
18A3E000
stack
page read and write
3D44C000
stack
page read and write
3777C000
stack
page read and write
15AFC000
stack
page read and write
2117C000
stack
page read and write
286BC000
stack
page read and write
E00A000
heap
page read and write
1E0BB000
heap
page read and write
444CC000
stack
page read and write
19FBC000
stack
page read and write
4DDC000
stack
page read and write
1DD82000
heap
page read and write
2234000
direct allocation
page read and write
E2C9000
heap
page read and write
A30E000
stack
page read and write
365BE000
stack
page read and write
2FB7E000
stack
page read and write
9C1000
stack
page read and write
1B63C000
stack
page read and write
435CC000
stack
page read and write
E55000
heap
page read and write
3173C000
stack
page read and write
18F3E000
stack
page read and write
8EFE000
stack
page read and write
41A4C000
stack
page read and write
6C7E000
stack
page read and write
379BE000
stack
page read and write
4DCFC000
stack
page read and write
3B4BA000
heap
page read and write
45C8C000
stack
page read and write
4D53E000
stack
page read and write
43BCE000
stack
page read and write
145BC000
stack
page read and write
61AC000
stack
page read and write
1AD7C000
stack
page read and write
3B3AF000
heap
page read and write
256FE000
stack
page read and write
12C0000
heap
page read and write
7C7C000
stack
page read and write
68FC000
stack
page read and write
3B134000
heap
page read and write
212BC000
stack
page read and write
1A1FE000
stack
page read and write
4A0FC000
stack
page read and write
228FE000
stack
page read and write
1DE52000
heap
page read and write
1D97F000
heap
page read and write
4528C000
stack
page read and write
4A0BE000
stack
page read and write
1EB3C000
stack
page read and write
35E3E000
stack
page read and write
3B4D2000
heap
page read and write
4CB3E000
stack
page read and write
17EFE000
stack
page read and write
D90C000
stack
page read and write
22E3C000
stack
page read and write
3B34F000
heap
page read and write
2EC7E000
stack
page read and write
325FE000
stack
page read and write
1D974000
heap
page read and write
1DB0E000
heap
page read and write
4EBBE000
stack
page read and write
BC0E000
stack
page read and write
8B7C000
stack
page read and write
37AFE000
stack
page read and write
1D9B4000
heap
page read and write
122BC000
stack
page read and write
27B7C000
stack
page read and write
602E000
stack
page read and write
522FC000
stack
page read and write
413CE000
stack
page read and write
1CC7E000
stack
page read and write
3093E000
stack
page read and write
3B1CD000
heap
page read and write
3B3C6000
heap
page read and write
45DCC000
stack
page read and write
4754E000
stack
page read and write
1DE98000
heap
page read and write
D8CE000
stack
page read and write
3B4DB000
heap
page read and write
397FC000
stack
page read and write
1DA47000
heap
page read and write
5343E000
stack
page read and write
3B1B7000
heap
page read and write
1E9FC000
stack
page read and write
2CFFE000
stack
page read and write
D5F000
heap
page read and write
1F3BE000
stack
page read and write
12B3E000
stack
page read and write
1DEA4000
heap
page read and write
4704E000
stack
page read and write
221BC000
stack
page read and write
3B420000
heap
page read and write
6E76000
heap
page read and write
2214000
direct allocation
page read and write
C24E000
stack
page read and write
3B396000
heap
page read and write
2573C000
stack
page read and write
3B31E000
heap
page read and write
19E7C000
stack
page read and write
1357C000
stack
page read and write
4500C000
stack
page read and write
1AEBC000
stack
page read and write
31BC000
stack
page read and write
2343E000
stack
page read and write
4434E000
stack
page read and write
226C000
direct allocation
page read and write
1DB72000
heap
page read and write
22BBC000
stack
page read and write
3597C000
stack
page read and write
4C13E000
stack
page read and write
1DF6D000
heap
page read and write
9E4C000
stack
page read and write
5C6E000
stack
page read and write
1663C000
stack
page read and write
369BC000
stack
page read and write
39A7C000
stack
page read and write
2B9BE000
stack
page read and write
2F93C000
stack
page read and write
1064C000
stack
page read and write
246FC000
stack
page read and write
209BE000
stack
page read and write
DF43000
heap
page read and write
404CE000
stack
page read and write
6E1A000
heap
page read and write
F10C000
stack
page read and write
523C000
heap
page read and write
51B3000
heap
page read and write
273FC000
stack
page read and write
1DFF8000
heap
page read and write
39DFE000
stack
page read and write
2BEFC000
stack
page read and write
509FC000
stack
page read and write
3B56E000
heap
page read and write
4290E000
stack
page read and write
32EFC000
stack
page read and write
18CBE000
stack
page read and write
6E0D000
heap
page read and write
CF2000
heap
page read and write
A48C000
stack
page read and write
3F98E000
stack
page read and write
4B5FE000
stack
page read and write
1DF65000
heap
page read and write
1C3FC000
stack
page read and write
2D9FC000
stack
page read and write
24B3000
heap
page read and write
E2C1000
heap
page read and write
3B639000
heap
page read and write
2FA7C000
stack
page read and write
183FE000
stack
page read and write
877E000
stack
page read and write
3863E000
stack
page read and write
52E3C000
stack
page read and write
31FBE000
stack
page read and write
1597E000
stack
page read and write
2957E000
stack
page read and write
2807C000
stack
page read and write
4A6FE000
stack
page read and write
1DE16000
heap
page read and write
53E3E000
stack
page read and write
1DB6B000
heap
page read and write
6E7C000
heap
page read and write
2713E000
stack
page read and write
1150E000
stack
page read and write
22F7C000
stack
page read and write
3B3D3000
heap
page read and write
303F000
stack
page read and write
1EEFC000
stack
page read and write
53D3C000
stack
page read and write
3D58C000
stack
page read and write
2393C000
stack
page read and write
2C9FE000
stack
page read and write
4B20000
remote allocation
page read and write
1DDEA000
heap
page read and write
1D7FC000
stack
page read and write
2E77E000
stack
page read and write
68BE000
stack
page read and write
2B4BE000
stack
page read and write
A5CC000
stack
page read and write
3B32D000
heap
page read and write
5237000
heap
page read and write
3B61C000
heap
page read and write
3B1EA000
heap
page read and write
25EBC000
stack
page read and write
342BE000
stack
page read and write
1E006000
heap
page read and write
794000
heap
page read and write
1DC68000
heap
page read and write
3B633000
heap
page read and write
96CC000
stack
page read and write
1DC64000
heap
page read and write
182FC000
stack
page read and write
E2B5000
heap
page read and write
3B338000
heap
page read and write
33B7C000
stack
page read and write
47E0E000
stack
page read and write
1983C000
stack
page read and write
4943E000
stack
page read and write
1DB1B000
heap
page read and write
1FFBE000
stack
page read and write
1F0000
heap
page read and write
2307E000
stack
page read and write
1AE7E000
stack
page read and write
B70E000
stack
page read and write
6FA5000
heap
page read and write
CF9000
heap
page read and write
46A4C000
stack
page read and write
4983C000
stack
page read and write
254BC000
stack
page read and write
B84E000
stack
page read and write
E138000
heap
page read and write
4448E000
stack
page read and write
1DD31000
heap
page read and write
4640C000
stack
page read and write
1933C000
stack
page read and write
32C3E000
stack
page read and write
11AFE000
stack
page read and write
3B6A8000
heap
page read and write
4050C000
stack
page read and write
3B315000
heap
page read and write
328BC000
stack
page read and write
4C27E000
stack
page read and write
16C3E000
stack
page read and write
49BBE000
stack
page read and write
364BC000
stack
page read and write
1D944000
heap
page read and write
2637E000
stack
page read and write
24BBE000
stack
page read and write
1E0A9000
heap
page read and write
291BE000
stack
page read and write
3FACE000
stack
page read and write
332BC000
stack
page read and write
4218E000
stack
page read and write
23E3C000
stack
page read and write
4088E000
stack
page read and write
250FC000
stack
page read and write
E1DF000
heap
page read and write
9BCC000
stack
page read and write
521E000
heap
page read and write
97CE000
stack
page read and write
4BAFE000
stack
page read and write
2073E000
stack
page read and write
1028C000
stack
page read and write
28FD000
stack
page read and write
1ED7E000
stack
page read and write
49D3C000
stack
page read and write
1DCDA000
heap
page read and write
2103C000
stack
page read and write
4DA7C000
stack
page read and write
4F23C000
stack
page read and write
4A83E000
stack
page read and write
287FC000
stack
page read and write
12DFC000
stack
page read and write
278BE000
stack
page read and write
3C54C000
stack
page read and write
1C8BE000
stack
page read and write
302FE000
stack
page read and write
3B630000
heap
page read and write
513FC000
stack
page read and write
4A37C000
stack
page read and write
4074E000
stack
page read and write
9CCE000
stack
page read and write
41DCE000
stack
page read and write
4F1FE000
stack
page read and write
5023E000
stack
page read and write
1D07C000
stack
page read and write
2F7FC000
stack
page read and write
3CA4C000
stack
page read and write
1687E000
stack
page read and write
3377E000
stack
page read and write
1DEC1000
heap
page read and write
3B424000
heap
page read and write
2167C000
stack
page read and write
4140C000
stack
page read and write
6F65000
heap
page read and write
3F48E000
stack
page read and write
C00C000
stack
page read and write
3C7CC000
stack
page read and write
195BC000
stack
page read and write
27CBC000
stack
page read and write
426CC000
stack
page read and write
26D7E000
stack
page read and write
E140000
heap
page read and write
6F01000
heap
page read and write
3B2B8000
heap
page read and write
E1E6000
heap
page read and write
2E53C000
stack
page read and write
1DCA8000
heap
page read and write
1140C000
stack
page read and write
4E43E000
stack
page read and write
2357C000
stack
page read and write
6EFD000
heap
page read and write
9A4E000
stack
page read and write
1DF42000
heap
page read and write
3633E000
stack
page read and write
24FBC000
stack
page read and write
155BE000
stack
page read and write
39CFC000
stack
page read and write
5DAE000
stack
page read and write
4780C000
stack
page read and write
1FFFC000
stack
page read and write
4708C000
stack
page read and write
1D17E000
stack
page read and write
467CC000
stack
page read and write
220C000
direct allocation
page read and write
2493E000
stack
page read and write
3B3CD000
heap
page read and write
14E3E000
stack
page read and write
4D43C000
stack
page read and write
1DCF6000
heap
page read and write
42D0C000
stack
page read and write
13CFC000
stack
page read and write
11EFC000
stack
page read and write
1E021000
heap
page read and write
150BE000
stack
page read and write
177BC000
stack
page read and write
3ADBE000
stack
page read and write
4D67E000
stack
page read and write
5242000
heap
page read and write
DCCC000
stack
page read and write
4830E000
stack
page read and write
4848C000
stack
page read and write
383FC000
stack
page read and write
3C04C000
stack
page read and write
6DF0000
heap
page read and write
4EF7E000
stack
page read and write
2268000
direct allocation
page read and write
509BE000
stack
page read and write
22A7C000
stack
page read and write
2B77C000
stack
page read and write
4A0C000
stack
page read and write
E0B9000
heap
page read and write
3B572000
heap
page read and write
E0C7000
heap
page read and write
3903E000
stack
page read and write
1DCC1000
heap
page read and write
4F33E000
stack
page read and write
5DEC000
stack
page read and write
1DD57000
heap
page read and write
3B0A8000
heap
page read and write
52F3E000
stack
page read and write
1C17C000
stack
page read and write
384FE000
stack
page read and write
333BE000
stack
page read and write
6E35000
heap
page read and write
E29D000
heap
page read and write
3533C000
stack
page read and write
4320C000
stack
page read and write
4178E000
stack
page read and write
1DC42000
heap
page read and write
2D8BC000
stack
page read and write
1E013000
heap
page read and write
306BE000
stack
page read and write
4A4F000
stack
page read and write
2250000
direct allocation
page read and write
2013C000
stack
page read and write
22CBE000
stack
page read and write
5246000
heap
page read and write
4E97C000
stack
page read and write
3223E000
stack
page read and write
224C000
direct allocation
page read and write
2C3BE000
stack
page read and write
47E4C000
stack
page read and write
1DD4B000
heap
page read and write
23460000
heap
page read and write
1D9E6000
heap
page read and write
1DC5C000
heap
page read and write
3F5CE000
stack
page read and write
4510E000
stack
page read and write
C8CC000
stack
page read and write
42E4C000
stack
page read and write
F9CC000
stack
page read and write
5244000
heap
page read and write
34DFE000
stack
page read and write
1263E000
stack
page read and write
31D7C000
stack
page read and write
3B088000
heap
page read and write
3EC0C000
stack
page read and write
1DA42000
heap
page read and write
2EB7C000
stack
page read and write
2AABE000
stack
page read and write
268BC000
stack
page read and write
D4D000
heap
page read and write
E148000
heap
page read and write
5161000
heap
page read and write
4F83E000
stack
page read and write
49FBC000
stack
page read and write
2234000
direct allocation
page read and write
89E000
stack
page read and write
E025000
heap
page read and write
1D954000
heap
page read and write
1DB32000
heap
page read and write
2C3FC000
stack
page read and write
1483C000
stack
page read and write
3B1BE000
heap
page read and write
459CE000
stack
page read and write
187FC000
stack
page read and write
2D4FC000
stack
page read and write
8DFC000
stack
page read and write
3B5A5000
heap
page read and write
49CD000
stack
page read and write
1DF73000
heap
page read and write
1B73E000
stack
page read and write
9F8C000
stack
page read and write
46B4E000
stack
page read and write
3583C000
stack
page read and write
3B12C000
heap
page read and write
53BFC000
stack
page read and write
4668C000
stack
page read and write
49A7E000
stack
page read and write
64E000
stack
page read and write
4A23C000
stack
page read and write
813E000
stack
page read and write
3197E000
stack
page read and write
115CC000
stack
page read and write
817C000
stack
page read and write
2163E000
stack
page read and write
3B2B6000
heap
page read and write
393FE000
stack
page read and write
24F7E000
stack
page read and write
1038E000
stack
page read and write
21C7E000
stack
page read and write
3B2BA000
heap
page read and write
2DC3E000
stack
page read and write
3673C000
stack
page read and write
1DB11000
heap
page read and write
E00F000
heap
page read and write
F4CC000
stack
page read and write
5178000
heap
page read and write
31FFC000
stack
page read and write
4EABC000
stack
page read and write
247FE000
stack
page read and write
1DD54000
heap
page read and write
42E0E000
stack
page read and write
361FE000
stack
page read and write
1014C000
stack
page read and write
1303E000
stack
page read and write
3E94E000
stack
page read and write
1D9D7000
heap
page read and write
2C63E000
stack
page read and write
35CFE000
stack
page read and write
480E000
stack
page read and write
FACE000
stack
page read and write
4574E000
stack
page read and write
23451000
heap
page read and write
4ED3C000
stack
page read and write
2B4FC000
stack
page read and write
1DA49000
heap
page read and write
5013C000
stack
page read and write
3B08F000
heap
page read and write
2E2BC000
stack
page read and write
1907E000
stack
page read and write
2DD7E000
stack
page read and write
4ECFE000
stack
page read and write
930C000
stack
page read and write
2B13C000
stack
page read and write
3B4D6000
heap
page read and write
E207000
heap
page read and write
453CC000
stack
page read and write
2DEBE000
stack
page read and write
12F3C000
stack
page read and write
296BE000
stack
page read and write
4F6FE000
stack
page read and write
E165000
heap
page read and write
1074E000
stack
page read and write
5172000
heap
page read and write
15D3E000
stack
page read and write
3B3F2000
heap
page read and write
45C4E000
stack
page read and write
1D9DD000
heap
page read and write
E0B4000
heap
page read and write
DF7E000
heap
page read and write
508BC000
stack
page read and write
67BC000
stack
page read and write
2E8BE000
stack
page read and write
53A7E000
stack
page read and write
5437C000
stack
page read and write
E58E000
stack
page read and write
1DD6A000
heap
page read and write
3A0BC000
stack
page read and write
1E63C000
stack
page read and write
51B3E000
stack
page read and write
16B3C000
stack
page read and write
DA0E000
stack
page read and write
6F62000
heap
page read and write
1CB7C000
stack
page read and write
3F34E000
stack
page read and write
1DF44000
heap
page read and write
3B340000
heap
page read and write
97000
stack
page read and write
2208000
direct allocation
page read and write
409CE000
stack
page read and write
40B4C000
stack
page read and write
4AEBC000
stack
page read and write
44C0E000
stack
page read and write
3B08A000
heap
page read and write
2C2BC000
stack
page read and write
30A7E000
stack
page read and write
1DDDC000
heap
page read and write
3B64C000
heap
page read and write
1D67E000
stack
page read and write
CC8C000
stack
page read and write
2A47E000
stack
page read and write
B5CE000
stack
page read and write
355BC000
stack
page read and write
341BC000
stack
page read and write
3ADFC000
stack
page read and write
3C28E000
stack
page read and write
5077C000
stack
page read and write
4BEBE000
stack
page read and write
1114E000
stack
page read and write
4438C000
stack
page read and write
606C000
stack
page read and write
51EE000
heap
page read and write
4E47C000
stack
page read and write
1E0C9000
heap
page read and write
BD8C000
stack
page read and write
46F4C000
stack
page read and write
1E87E000
stack
page read and write
4C63E000
stack
page read and write
1088E000
stack
page read and write
2993E000
stack
page read and write
3B313000
heap
page read and write
4EBFC000
stack
page read and write
19BBE000
stack
page read and write
1DDFA000
heap
page read and write
1DEAF000
heap
page read and write
26AFE000
stack
page read and write
C14C000
stack
page read and write
89FE000
stack
page read and write
2CBBC000
stack
page read and write
B48E000
stack
page read and write
13B7E000
stack
page read and write
255FC000
stack
page read and write
421CC000
stack
page read and write
343FE000
stack
page read and write
4D6BC000
stack
page read and write
E15D000
heap
page read and write
5171000
heap
page read and write
43ACC000
stack
page read and write
5347C000
stack
page read and write
FD8C000
stack
page read and write
6DEE000
heap
page read and write
222BE000
stack
page read and write
21EFE000
stack
page read and write
4F5BE000
stack
page read and write
BB0C000
stack
page read and write
1050C000
stack
page read and write
33DFC000
stack
page read and write
44ECC000
stack
page read and write
173FC000
stack
page read and write
51C3000
heap
page read and write
375FE000
stack
page read and write
DB4E000
stack
page read and write
2E4FE000
stack
page read and write
1DE93000
heap
page read and write
6E43000
heap
page read and write
DF28000
heap
page read and write
4384C000
stack
page read and write
2AEBC000
stack
page read and write
C64C000
stack
page read and write
2C7BC000
stack
page read and write
1B4FC000
stack
page read and write
535BC000
stack
page read and write
4C3BE000
stack
page read and write
28E0000
heap
page read and write
1DF78000
heap
page read and write
44D4E000
stack
page read and write
DA4C000
stack
page read and write
2D23E000
stack
page read and write
1DF52000
heap
page read and write
51CC000
heap
page read and write
1C2BC000
stack
page read and write
2D5FE000
stack
page read and write
11D7E000
stack
page read and write
E0C3000
heap
page read and write
397BE000
stack
page read and write
1E00C000
heap
page read and write
4560E000
stack
page read and write
4F9BC000
stack
page read and write
3B1E1000
heap
page read and write
1C13E000
stack
page read and write
2483C000
stack
page read and write
3B319000
heap
page read and write
944C000
stack
page read and write
3B545000
heap
page read and write
E027000
heap
page read and write
B88C000
stack
page read and write
1D948000
heap
page read and write
3B0A5000
heap
page read and write
D30000
heap
page read and write
2777E000
stack
page read and write
43FCC000
stack
page read and write
531BE000
stack
page read and write
512BC000
stack
page read and write
523FE000
stack
page read and write
1D9CB000
heap
page read and write
494F000
stack
page read and write
3E08E000
stack
page read and write
52DFE000
stack
page read and write
1C7BC000
stack
page read and write
4258C000
stack
page read and write
337BC000
stack
page read and write
3B2E9000
heap
page read and write
3C90C000
stack
page read and write
230BC000
stack
page read and write
445CE000
stack
page read and write
1E035000
heap
page read and write
13A3E000
stack
page read and write
E0D5000
heap
page read and write
1DD3B000
heap
page read and write
261000
unkown
page execute read
E144000
heap
page read and write
3B0F6000
heap
page read and write
B45000
heap
page read and write
4FE7E000
stack
page read and write
2533E000
stack
page read and write
540FC000
stack
page read and write
1993E000
stack
page read and write
1E37E000
stack
page read and write
169FC000
stack
page read and write
41AE000
stack
page read and write
1B8BC000
stack
page read and write
491BE000
stack
page read and write
3AB7C000
stack
page read and write
2238000
direct allocation
page read and write
2FBBC000
stack
page read and write
52AC000
stack
page read and write
3DB8E000
stack
page read and write
13E3C000
stack
page read and write
DF9E000
heap
page read and write
10F0C000
stack
page read and write
119FE000
stack
page read and write
2F07C000
stack
page read and write
FC4C000
stack
page read and write
4A47E000
stack
page read and write
1DE26000
heap
page read and write
4DBBC000
stack
page read and write
790000
direct allocation
page execute and read and write
4B77C000
stack
page read and write
2258000
direct allocation
page read and write
3B177000
heap
page read and write
3B39C000
heap
page read and write
4190C000
stack
page read and write
3DA8C000
stack
page read and write
4CC7E000
stack
page read and write
282BE000
stack
page read and write
3B333000
heap
page read and write
7EBE000
stack
page read and write
5240000
heap
page read and write
1227E000
stack
page read and write
B40000
heap
page read and write
329BE000
stack
page read and write
C10E000
stack
page read and write
237BE000
stack
page read and write
29CFE000
stack
page read and write
163BC000
stack
page read and write
519FE000
stack
page read and write
4C9C000
stack
page read and write
3B623000
heap
page read and write
3B33C000
heap
page read and write
1DCC4000
heap
page read and write
2E63E000
stack
page read and write
3A9FE000
stack
page read and write
3B117000
heap
page read and write
2A9BC000
stack
page read and write
1DAD4000
heap
page read and write
2E27E000
stack
page read and write
EE8C000
stack
page read and write
1E023000
heap
page read and write
2DC7C000
stack
page read and write
3B3AB000
heap
page read and write
7B3C000
stack
page read and write
1DB88000
heap
page read and write
6DFB000
heap
page read and write
366FE000
stack
page read and write
2867E000
stack
page read and write
CF9000
heap
page read and write
DFFB000
heap
page read and write
3ACBC000
stack
page read and write
245BC000
stack
page read and write
21B3E000
stack
page read and write
4790E000
stack
page read and write
1D984000
heap
page read and write
667C000
stack
page read and write
2753C000
stack
page read and write
78A000
heap
page read and write
32B3C000
stack
page read and write
1118C000
stack
page read and write
29E3E000
stack
page read and write
92BE000
stack
page read and write
2EA3C000
stack
page read and write
4E6BE000
stack
page read and write
1DD00000
heap
page read and write
51B4000
heap
page read and write
19B000
stack
page read and write
3CF0E000
stack
page read and write
3EE8C000
stack
page read and write
53ABC000
stack
page read and write
2A37C000
stack
page read and write
22F3E000
stack
page read and write
3D40E000
stack
page read and write
1A73C000
stack
page read and write
42A8C000
stack
page read and write
4F1E000
stack
page read and write
2B3BC000
stack
page read and write
3FB0C000
stack
page read and write
3DA4E000
stack
page read and write
3CCCC000
stack
page read and write
13BBC000
stack
page read and write
3F0CE000
stack
page read and write
127BC000
stack
page read and write
45AE000
stack
page read and write
20C3E000
stack
page read and write
F6E000
heap
page read and write
53BBE000
stack
page read and write
21B7C000
stack
page read and write
43A8E000
stack
page read and write
24E7C000
stack
page read and write
44E8E000
stack
page read and write
4D07C000
stack
page read and write
209FC000
stack
page read and write
E28E000
heap
page read and write
1253C000
stack
page read and write
24A7E000
stack
page read and write
3B41A000
heap
page read and write
1DD29000
heap
page read and write
37EFC000
stack
page read and write
1DA32000
heap
page read and write
11DBC000
stack
page read and write
9A8C000
stack
page read and write
1DB0C000
heap
page read and write
30BBE000
stack
page read and write
3B3B3000
heap
page read and write
B98E000
stack
page read and write
802000
heap
page read and write
D44000
heap
page read and write
5203E000
stack
page read and write
BECC000
stack
page read and write
241FC000
stack
page read and write
3B346000
heap
page read and write
1E01D000
heap
page read and write
4254E000
stack
page read and write
6E41000
heap
page read and write
D04C000
stack
page read and write
1857C000
stack
page read and write
168BC000
stack
page read and write
FC8000
heap
page read and write
241BE000
stack
page read and write
E015000
heap
page read and write
154BC000
stack
page read and write
51F8000
heap
page read and write
5293C000
stack
page read and write
1DA34000
heap
page read and write
E1EF000
heap
page read and write
1547E000
stack
page read and write
494E000
stack
page read and write
1E0CC000
heap
page read and write
3A1FC000
stack
page read and write
ED0E000
stack
page read and write
2447C000
stack
page read and write
430CC000
stack
page read and write
4100E000
stack
page read and write
E0C5000
heap
page read and write
4A73C000
stack
page read and write
4B4FC000
stack
page read and write
1290000
heap
page read and write
218FC000
stack
page read and write
5174000
heap
page read and write
2A6FE000
stack
page read and write
240BC000
stack
page read and write
3EBCE000
stack
page read and write
481CE000
stack
page read and write
4593000
heap
page read and write
36D7C000
stack
page read and write
5B6C000
stack
page read and write
663E000
stack
page read and write
D1A000
heap
page read and write
4BE0000
heap
page read and write
13CBE000
stack
page read and write
4E2FE000
stack
page read and write
3FC0E000
stack
page read and write
51B3000
heap
page read and write
14ABC000
stack
page read and write
4E0BC000
stack
page read and write
6EAF000
heap
page read and write
4344E000
stack
page read and write
3B3FD000
heap
page read and write
48F7C000
stack
page read and write
2843C000
stack
page read and write
D3CE000
stack
page read and write
3A8FC000
stack
page read and write
1F6FE000
stack
page read and write
46CCC000
stack
page read and write
FC0E000
stack
page read and write
AD4C000
stack
page read and write
BACE000
stack
page read and write
222FC000
stack
page read and write
2267E000
stack
page read and write
51A4000
heap
page read and write
E0CB000
heap
page read and write
14BFC000
stack
page read and write
78E000
heap
page read and write
5383C000
stack
page read and write
2E3FC000
stack
page read and write
1DB08000
heap
page read and write
63C000
stack
page read and write
1F73C000
stack
page read and write
E5CC000
stack
page read and write
4F0FC000
stack
page read and write
227BE000
stack
page read and write
1E015000
heap
page read and write
1E00A000
heap
page read and write
There are 2922 hidden memdumps, click here to show them.