IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Dridex-06-bc1b.xlsm
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\~$Dridex-06-bc1b.xlsm
data
dropped
malicious
C:\AO965P\PN546Y\718.5
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
malicious
C:\LO400F\PI909U\960
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\31B1227C.png
PNG image data, 650 x 85, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\56C9D0A7.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\77D8284D.png
PNG image data, 415 x 291, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\986659.cvr
data
dropped
clean
C:\Users\user\AppData\Local\Temp\Excel8.0\MSForms.exd
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3BA17549-6936-488A-A3B4-7EF0154B3CE5
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9C55CF47.png
PNG image data, 415 x 291, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9E8890DE.png
PNG image data, 650 x 85, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F8437211.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\NR7DA722.htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
Little-endian UTF-16 Unicode text, with CR line terminators
dropped
clean
C:\QP101F\TL941X\960
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\SD120E\EP146E\960
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 58936 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\MAS3QXWU.htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\841CAADE.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D1372147.png
PNG image data, 650 x 85, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D6FDFA9C.png
PNG image data, 415 x 291, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Temp\9DFE0000
data
dropped
clean
C:\Users\user\AppData\Local\Temp\CabF70C.tmp
Microsoft Cabinet archive data, 58936 bytes, 1 file
dropped
clean
C:\Users\user\AppData\Local\Temp\TarF70D.tmp
data
dropped
clean
There are 18 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
malicious
C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE
'C:\PROGRA~1\COMMON~1\MICROS~1\DW\DW20.EXE' -x -s 1228
malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
'C:\Windows\System32\regsvr32.exe' -s C:\AO965P\PN546Y\718.5.
malicious
C:\Windows\System32\regsvr32.exe
'C:\Windows\System32\regsvr32.exe' -s C:\LO400F\PI909U\960.
malicious
C:\Windows\System32\regsvr32.exe
'C:\Windows\System32\regsvr32.exe' -s C:\SD120E\EP146E\960.
malicious
C:\Windows\System32\regsvr32.exe
'C:\Windows\System32\regsvr32.exe' -s C:\QP101F\TL941X\960.
malicious
C:\Windows\System32\DWWIN.EXE
C:\Windows\system32\dwwin.exe -x -s 1228
clean

URLs

Name
IP
Malicious
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://servername/isapibackend.dll
unknown
clean
http://investor.msn.com/
unknown
clean
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://wus2-000.contentsync.
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://ecs.office.com/config/v2/Office
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://wus2-000.pagecontentsync.
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://templatelogging.office.com/client/log
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://management.azure.com/
unknown
clean
https://ncus-000.contentsync.
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://contentstorage.omex.office.net/addinclassifier/officeentities
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
https://visio.uservoice.com/forums/368202-visio-on-devices
unknown
clean
https://directory.services.
unknown
clean
https://login.windows-ppe.net/common/oauth2/authorize
unknown
clean
https://crbug.com/740629)
unknown
clean
https://github.com/google/closure-compiler/issues/544
unknown
clean
There are 101 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
compagniamaestro.com
199.192.21.36
malicious

IPs

IP
Domain
Country
Active
Malicious
199.192.21.36
unknown
United States
unknown
malicious

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
o*1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F08D7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
FontCachePath
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EXCELFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTF
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
MTTA
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
7n3
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
8n3
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1CDBC
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
1
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UpdateComplete
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
EXCELFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NULL
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastRequest
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
CacheReady
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
NextUpdate
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
s<8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
NULL
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EE772
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\system32\qagentrt.dll,-10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DefaultSheetR2L
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
UseSystemSeparators
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ThousandsSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
DecimalSeparator
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
EFC68
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductNonBootFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Max Display
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 1
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 2
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 3
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 4
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 5
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 6
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 7
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 9
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 10
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 11
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 12
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 13
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 14
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 15
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 16
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 17
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 18
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 19
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Item 20
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
F0B37
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
3o8
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SavedLegacySettings
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Blob
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductNonBootFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
ProductNonBootFilesIntl_1033
clean
There are 426 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
31C9000
unkown
page readonly
clean
2F7000
heap default
page read and write
clean
60000
unkown
page readonly
clean
3084000
unkown
page readonly
clean
2BA000
heap default
page read and write
clean
3105000
unkown
page readonly
clean
2070000
unkown
page read and write
clean
150000
unkown
page write copy
clean
C4F000
unkown
page read and write
clean
1E6000
unkown
page read and write
clean
584000
heap private
page read and write
clean
4AE000
unkown
page read and write
clean
30F2000
unkown
page readonly
clean
386000
unkown
page read and write
clean
277F000
unkown
page read and write
clean
13D000
unkown
page read and write
clean
31E5000
unkown
page readonly
clean
3182000
unkown
page readonly
clean
2AA0000
heap private
page read and write
clean
1D60000
unkown
page readonly
clean
23E0000
unkown
page readonly
clean
30C4000
unkown
page readonly
clean
3152000
unkown
page readonly
clean
72F000
unkown
page read and write
clean
3430000
unkown
page readonly
clean
33B2000
unkown
page readonly
clean
120000
unkown
page read and write
clean
2030000
unkown
page read and write
clean
3146000
unkown
page readonly
clean
3245000
unkown
page readonly
clean
257000
heap default
page read and write
clean
1B70000
unkown
page readonly
clean
33B000
heap default
page read and write
clean
100000
heap private
page read and write
clean
31A9000
unkown
page readonly
clean
29E000
heap default
page read and write
clean
1C50000
heap private
page read and write
clean
10A000
heap private
page read and write
clean
2780000
unkown
page read and write
clean
2AA000
heap default
page read and write
clean
33F0000
unkown
page readonly
clean
2AA9000
heap private
page read and write
clean
3135000
unkown
page readonly
clean
336000
heap default
page read and write
clean
1D5C000
unkown
page read and write
clean
1C54000
heap private
page read and write
clean
28B5000
heap private
page read and write
clean
2030000
unkown
page read and write
clean
770000
unkown
page readonly
clean
220000
unkown
page write copy
clean
250000
heap default
page read and write
clean
160000
unkown
page readonly
clean
450000
unkown
page readonly
clean
1C8F000
heap private
page read and write
clean
32D000
heap default
page read and write
clean
31F2000
unkown
page readonly
clean
3165000
unkown
page readonly
clean
2B40000
unkown
page readonly
clean
170000
unkown
page readonly
clean
210000
unkown
page readonly
clean
2AA5000
heap private
page read and write
clean
2FC2000
unkown
page readonly
clean
3176000
unkown
page readonly
clean
104000
heap private
page read and write
clean
30A2000
unkown
page readonly
clean
D0000
unkown
page read and write
clean
350000
unkown
page read and write
clean
E0000
unkown
page write copy
clean
3082000
unkown
page readonly
clean
28EB000
heap private
page read and write
clean
2EC2000
unkown
page readonly
clean
31AD000
unkown
page readonly
clean
217A000
unkown
page read and write
clean
30A4000
unkown
page readonly
clean
2B20000
unkown
page readonly
clean
30C2000
unkown
page readonly
clean
23DF000
unkown
page read and write
clean
5D0000
unkown
page readonly
clean
1FC000
unkown
page read and write
clean
3229000
unkown
page readonly
clean
3410000
unkown
page readonly
clean
28B0000
heap private
page read and write
clean
F0000
unkown
page read and write
clean
20000
unkown
page readonly
clean
3116000
unkown
page readonly
clean
200000
unkown
page execute and read and write
clean
3122000
unkown
page readonly
clean
800000
unkown
page readonly
clean
3222000
unkown
page readonly
clean
28E000
heap default
page read and write
clean
3637000
unkown
page readonly
clean
2EC8000
unkown
page readonly
clean
2BD000
heap default
page read and write
clean
1B0000
unkown
page read and write
clean
1C59000
heap private
page read and write
clean
3450000
unkown
page readonly
clean
140000
unkown
page readonly
clean
580000
heap private
page read and write
clean
31A6000
unkown
page readonly
clean
240000
unkown
page read and write
clean
1CD0000
unkown
page read and write
clean
21A0000
unkown
page read and write
clean
31C2000
unkown
page readonly
clean
31F9000
unkown
page readonly
clean
3215000
unkown
page readonly
clean
2F0000
heap default
page read and write
clean
3195000
unkown
page readonly
clean
140000
unkown
page readonly
clean
There are 98 hidden memdumps, click here to show them.