IOCReport

loading gif

Files

File Path
Type
Category
Malicious
QUOTATIONs44888_A2221_TOAN_TAN_LOC_TRADING_SERVICES_JOINT_STOCKs.doc
Rich Text Format data, unknown version
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\wREzo[1].txt
PE32 executable (GUI) Intel 80386, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Temp\tmp9445.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Roaming\EA860E7A-A87F-4A88-92EF-38F744458171\run.dat
data
dropped
 malicious
C:\Users\user\subfolder1\filename1.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\Public\69577.exe
PE32 executable (GUI) Intel 80386, for MS Windows
modified
 malicious
C:\Program Files (x86)\SMTP Service\smtpsvc.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 59134 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\2ZKf4aq[1].htm
HTML document, ASCII text
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{0863C5D3-5908-4917-8F28-8909E0160183}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{24864F90-30CA-4646-ACFF-79FC9E14ADCB}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\CabBF0C.tmp
Microsoft Cabinet archive data, 59134 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\Local\Temp\TarBF0D.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\tmp80F5.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\EA860E7A-A87F-4A88-92EF-38F744458171\catalog.dat
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\QUOTATIONs44888_A2221_TOAN_TAN_LOC_TRADING_SERVICES_JOINT_STOCKs.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13 2020, mtime=Wed Aug 26 14:08:13 2020, atime=Thu Feb 25 14:28:30 2021, length=967360, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Little-endian UTF-16 Unicode text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\LIP8714C.txt
ASCII text
downloaded
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\Y5D8BEZV.txt
ASCII text
downloaded
 clean
C:\Users\user\Desktop\~$OTATIONs44888_A2221_TOAN_TAN_LOC_TRADING_SERVICES_JOINT_STOCKs.doc
data
dropped
 clean
There are 16 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\Public\69577.exe
C:\Users\Public\69577.exe
 malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Users\Public\69577.exe
 malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Users\Public\69577.exe
 malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'SMTP Service' /xml 'C:\Users\user\AppData\Local\Temp\tmp9445.tmp'
 malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'SMTP Service Task' /xml 'C:\Users\user\AppData\Local\Temp\tmp80F5.tmp'
 malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe 0
 malicious
C:\Users\user\subfolder1\filename1.exe
'C:\Users\user\subfolder1\filename1.exe'
malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 clean
C:\Windows\System32\taskeng.exe
taskeng.exe {DA6299CA-95CA-4E9D-8945-2CC05321254C} S-1-5-21-966771315-3019405637-367336477-1006:user-PC\user:Interactive:[1]
 clean
C:\Program Files (x86)\SMTP Service\smtpsvc.exe
'C:\Program Files (x86)\SMTP Service\smtpsvc.exe' 0
 clean
C:\Program Files (x86)\SMTP Service\smtpsvc.exe
'C:\Program Files (x86)\SMTP Service\smtpsvc.exe'
clean
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
malicious
194.5.98.202
malicious
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://crl.entrust.net/server1.crl0
unknown
 clean
http://ocsp.entrust.net03
unknown
 clean
https://onedrive.live.com/E
unknown
 clean
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
unknown
 clean
http://www.%s.comPA
unknown
 clean
http://www.diginotar.nl/cps/pkioverheid0
unknown
 clean
https://u.teknik.io/wREzo.txt
unknown
 clean
https://ibkebw.dm.files.1drv.com/y
unknown
 clean
http://ocsp.entrust.net0D
unknown
 clean
https://ibkebw.dm.files.1drv.com/
unknown
 clean
https://secure.comodo.com/CPS0
unknown
 clean
https://onedrive.live.com/download?cid=802AC8A73EEC8C8E&resid=802AC8A73EEC8C8E%21110&authkey=AK1w6-P
unknown
 clean
http://crl.entrust.net/2048ca.crl0
unknown
 clean
https://ibkebw.dm.files.1drv.com/y4mkt1ePYl5p-A97ciot0bQ59hcBfLkczVR077g5LVTnsSoRxe1bs39ErOjDRD_qmHQ
unknown
 clean
http://bit.ly/2ZKf4aq
67.199.248.10
 clean
https://onedrive.live.com/
unknown
 clean
There are 10 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bit.ly
67.199.248.11
 clean
teknik.io
5.79.72.163
 clean
onedrive.live.com
unknown
 clean
ibkebw.dm.files.1drv.com
unknown
 clean
u.teknik.io
unknown
 clean

IPs

IP
Domain
Country
Active
Malicious
67.199.248.10
unknown
United States
unknown
 malicious
194.5.98.202
unknown
Netherlands
unknown
 malicious
5.79.72.163
unknown
Netherlands
unknown
 clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
zj6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
tk6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
;m6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EC581
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1096C3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1096C3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Blob
 clean
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
Startup key
 clean
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
SMTP Service
 clean
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
SavedLegacySettings
 clean
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
Blob
 clean
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
Blob
 clean
C:\Windows\System32\taskeng.exe
data
 clean
There are 325 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
140000
unkown
page read and write
 malicious
282000
unkown
page execute and read and write
 malicious
1F3FF000
unkown
page read and write
 malicious
1B0000
unkown
page read and write
 clean
2170000
heap private
page read and write
 clean
3F0000
unkown
page readonly
 clean
3680000
unkown
page read and write
 clean
AF0000
heap private
page execute and read and write
 clean
1F5A6000
unkown
page read and write
 clean
D0000
unkown
page readonly
 clean
1F6C6000
unkown
page read and write
 clean
1B5000
unkown
page read and write
 clean
E0000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
260000
unkown
page read and write
 clean
1F46F000
unkown
page read and write
 clean
D90000
unkown image
page readonly
 clean
3680000
unkown
page read and write
 clean
757000
unkown
page readonly
 clean
5D0000
heap private
page read and write
 clean
1F6A6000
unkown
page read and write
 clean
670000
heap default
page read and write
 clean
E6F000
unkown
page read and write
 clean
32B000
unkown
page readonly
 clean
ED0000
heap private
page read and write
 clean
160000
unkown
page read and write
 clean
356000
unkown
page read and write
 clean
2F0000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
D90000
unkown image
page readonly
 clean
170000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
420000
heap default
page read and write
 clean
140000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
642000
unkown
page execute and read and write
 clean
2750000
heap private
page read and write
 clean
3F6000
unkown
page read and write
 clean
D9C000
unkown image
page readonly
 clean
3750000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
7F0000
unkown
page readonly
 clean
20BCD000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
160000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3FE000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
2174000
heap private
page read and write
 clean
7E6000
unkown
page read and write
 clean
160000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
509000
unkown
page read and write
 clean
2114B000
unkown
page read and write
 clean
3810000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3710000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
1B0000
unkown
page readonly
 clean
1DFBE000
unkown
page read and write
 clean
CB0000
heap private
page read and write
 clean
3690000
unkown
page read and write
 clean
4D3F000
stack
page read and write
 clean
F20000
heap private
page read and write
 clean
3760000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1F52F000
unkown
page read and write
 clean
800000
heap default
page read and write
 clean
3710000
unkown
page read and write
 clean
1F6E6000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
532000
unkown
page read and write
 clean
26B000
unkown
page read and write
 clean
1F5E6000
unkown
page read and write
 clean
770000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
180000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
3870000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1DC3E000
unkown
page read and write
 clean
838000
heap default
page read and write
 clean
160000
unkown
page read and write
 clean
87E000
unkown
page read and write
 clean
1F6A6000
unkown
page read and write
 clean
83D000
heap default
page read and write
 clean
7E0000
unkown
page read and write
 clean
780000
unkown
page readonly
 clean
21A0000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
300000
unkown
page readonly
 clean
160000
unkown
page read and write
 clean
5CE000
unkown
page read and write
 clean
203B0000
unkown
page read and write
 clean
1F666000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
570000
heap private
page read and write
 clean
3770000
unkown
page read and write
 clean
2072D000
unkown
page read and write
 clean
1240000
unkown image
page readonly
 clean
1F686000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
20BF000
unkown
page read and write
 clean
150000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
630000
heap default
page read and write
 clean
1E7000
unkown
page execute and read and write
 clean
3680000
unkown
page read and write
 clean
7F0000
unkown
page read and write
 clean
2FD000
heap default
page read and write
 clean
ACF000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
D0000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
280000
unkown
page readonly
 clean
5F0000
heap private
page execute and read and write
 clean
3750000
unkown
page read and write
 clean
3C0000
unkown
page read and write
 clean
1D62D000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
4FB000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
824000
heap default
page read and write
 clean
580000
unkown
page read and write
 clean
21B000
unkown
page execute and read and write
 clean
520000
unkown
page read and write
 clean
1F666000
unkown
page read and write
 clean
295E000
unkown
page read and write
 clean
110000
unkown
page readonly
 clean
D9C000
unkown image
page readonly
 clean
3690000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
EE2000
heap private
page read and write
 clean
4DB000
unkown
page read and write
 clean
5BB000
unkown
page execute and read and write
 clean
3690000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
A00000
heap private
page execute and read and write
 clean
3690000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
120000
heap private
page execute and read and write
 clean
3651000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
7EF20000
unkown
page execute and read and write
 clean
1D49C000
unkown
page read and write
 clean
7E4000
unkown
page read and write
 clean
1F5C6000
unkown
page read and write
 clean
202000
unkown
page execute and read and write
 clean
7E7000
unkown
page read and write
 clean
4C0000
unkown
page readonly
 clean
66A000
unkown
page execute and read and write
 clean
240000
unkown
page readonly
 clean
7E7000
unkown
page read and write
 clean
1DA000
unkown
page execute and read and write
 clean
3790000
unkown
page read and write
 clean
1E2000
unkown
page execute and read and write
 clean
2471000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
73E000
unkown
page read and write
 clean
B40000
heap private
page read and write
 clean
1E6000
unkown
page read and write
 clean
1F44F000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1F4EF000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1EB000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
537000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
3CA000
heap default
page read and write
 clean
3690000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
8CA000
heap default
page read and write
 clean
3680000
unkown
page read and write
 clean
2F0000
unkown
page read and write
 clean
1D00E000
unkown
page read and write
 clean
582000
unkown
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
990000
heap private
page execute and read and write
 clean
217000
unkown
page execute and read and write
 clean
22C000
unkown
page read and write
 clean
92F000
unkown
page read and write
 clean
740000
unkown
page read and write
 clean
1D44E000
unkown
page read and write
 clean
2A7B000
heap private
page read and write
 clean
3730000
unkown
page read and write
 clean
26FE000
unkown
page read and write
 clean
F47000
heap private
page read and write
 clean
3680000
unkown
page read and write
 clean
A1F000
unkown
page read and write
 clean
560000
unkown
page readonly
 clean
1E4ED000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
6F2000
unkown
page read and write
 clean
1EB000
unkown
page execute and read and write
 clean
7A0000
heap private
page read and write
 clean
167000
unkown
page read and write
 clean
D2E000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
6E0000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1E44F000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
33E000
heap default
page read and write
 clean
530000
unkown
page read and write
 clean
1F666000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
900000
unkown
page read and write
 clean
3820000
unkown
page read and write
 clean
1F606000
unkown
page read and write
 clean
13D000
unkown
page read and write
 clean
3A0000
unkown
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
1D13C000
unkown
page readonly
 clean
165000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
100000
heap private
page read and write
 clean
A58000
heap private
page read and write
 clean
400000
unkown image
page readonly
 clean
5E0000
unkown
page readonly
 clean
85A000
heap default
page read and write
 clean
26BE000
unkown
page read and write
 clean
5AA000
unkown
page execute and read and write
 clean
780000
unkown
page read and write
 clean
2B80000
unkown
page read and write
 clean
58C000
unkown
page execute and read and write
 clean
3730000
unkown
page read and write
 clean
1F4AF000
unkown
page read and write
 clean
47EE000
stack
page read and write
 clean
22C000
unkown
page read and write
 clean
74E000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1A0000
heap private
page read and write
 clean
417000
unkown image
page readonly
 clean
3730000
unkown
page read and write
 clean
1D94B000
unkown
page read and write
 clean
580000
unkown
page read and write
 clean
1C0000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
110000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
1F46F000
unkown
page read and write
 clean
EAE000
unkown
page read and write
 clean
3820000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
240000
unkown
page read and write
 clean
1F5A6000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
2062E000
unkown
page read and write
 clean
2F2000
unkown
page read and write
 clean
1F4CF000
unkown
page read and write
 clean
1F606000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1DA000
unkown
page execute and read and write
 clean
7F0000
unkown
page read and write
 clean
7B0000
unkown
page read and write
 clean
8CC000
heap default
page read and write
 clean
680000
unkown
page readonly
 clean
1F546000
unkown
page read and write
 clean
1F48F000
unkown
page read and write
 clean
7B0000
unkown
page execute and read and write
 clean
1B0000
unkown
page read and write
 clean
3491000
unkown
page read and write
 clean
1F686000
unkown
page read and write
 clean
7F8000
unkown
page read and write
 clean
D80000
unkown
page readonly
 clean
2C7000
heap default
page read and write
 clean
89A000
heap default
page read and write
 clean
3481000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
3B0000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1DC80000
unkown
page read and write
 clean
790000
unkown
page execute and read and write
 clean
3740000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
137000
unkown
page read and write
 clean
1F450000
unkown
page read and write
 clean
700000
unkown
page read and write
 clean
290000
unkown
page read and write
 clean
192000
unkown
page execute and read and write
 clean
39A000
stack
page read and write
 clean
3730000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
B46000
heap private
page read and write
 clean
880000
heap default
page read and write
 clean
3760000
unkown
page read and write
 clean
7C0000
heap private
page read and write
 clean
662000
unkown
page execute and read and write
 clean
37F0000
unkown
page read and write
 clean
1DCBD000
unkown
page read and write
 clean
572000
unkown
page execute and read and write
 clean
3720000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
64C000
unkown
page execute and read and write
 clean
560000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
7E6000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
203CD000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
560000
unkown
page read and write
 clean
1D15B000
unkown
page readonly
 clean
6F0000
unkown
page readonly
 clean
530000
unkown
page readonly
 clean
D90000
unkown image
page readonly
 clean
C0000
unkown
page read and write
 clean
1D2AD000
unkown
page read and write
 clean
2BC1000
unkown
page read and write
 clean
A24000
heap private
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
75C000
unkown
page readonly
 clean
1B0000
unkown
page read and write
 clean
1240000
unkown image
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
6F0000
unkown
page read and write
 clean
1F50F000
unkown
page read and write
 clean
1E4F1000
unkown
page read and write
 clean
1DC40000
unkown
page read and write
 clean
656000
unkown
page execute and read and write
 clean
233F000
unkown
page read and write
 clean
1D51D000
unkown
page read and write
 clean
1F606000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
1E177000
unkown
page read and write
 clean
124C000
unkown image
page readonly
 clean
1F5C6000
unkown
page read and write
 clean
590000
unkown
page read and write
 clean
1D2000
unkown
page execute and read and write
 clean
3710000
unkown
page read and write
 clean
250000
unkown
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
C00000
unkown
page readonly
 clean
3770000
unkown
page read and write
 clean
3860000
unkown
page read and write
 clean
660000
unkown
page read and write
 clean
529000
unkown
page read and write
 clean
77B000
unkown
page readonly
 clean
1CC80000
unkown
page readonly
 clean
3750000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1F626000
unkown
page read and write
 clean
306000
heap default
page read and write
 clean
7E0000
unkown
page readonly
 clean
3780000
unkown
page read and write
 clean
E2F000
unkown
page read and write
 clean
1F586000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
652000
unkown
page read and write
 clean
2BD000
unkown
page read and write
 clean
3850000
unkown
page read and write
 clean
1F4AF000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
1F6E6000
unkown
page read and write
 clean
45A000
stack
page read and write
 clean
3680000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
7E5000
unkown
page read and write
 clean
2095F000
unkown
page read and write
 clean
1242000
unkown image
page execute read
 clean
1D2000
unkown
page execute and read and write
 clean
55B000
unkown
page readonly
 clean
3740000
unkown
page read and write
 clean
1D75E000
unkown
page read and write
 clean
2FE000
heap default
page read and write
 clean
1D40C000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
5D0000
unkown
page read and write
 clean
748000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
5B7000
unkown
page execute and read and write
 clean
3680000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
5A0000
heap private
page execute and read and write
 clean
3740000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1F6F6000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
168000
unkown
page read and write
 clean
BE0000
unkown
page readonly
 clean
3680000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
1D89D000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
37A0000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
702000
unkown
page read and write
 clean
1B9000
unkown
page read and write
 clean
200000
heap private
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
1F626000
unkown
page read and write
 clean
522000
unkown
page read and write
 clean
250000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
80000
unkown
page readonly
 clean
887000
heap default
page read and write
 clean
352A000
unkown
page read and write
 clean
1F450000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
2710000
unkown
page readonly
 clean
D92000
unkown image
page execute read
 clean
7E6000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
20D1E000
unkown
page read and write
 clean
24C0000
heap private
page read and write
 clean
20000
unkown
page readonly
 clean
39E000
heap default
page read and write
 clean
7EC000
unkown
page read and write
 clean
20D6D000
unkown
page read and write
 clean
A10000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1242000
unkown image
page execute read
 clean
780000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
D0000
unkown
page read and write
 clean
469000
heap default
page read and write
 clean
3690000
unkown
page read and write
 clean
1DE1C000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
1F4EF000
unkown
page read and write
 clean
884000
heap default
page read and write
 clean
7E6000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
1E176000
unkown
page read and write | page guard
 clean
3690000
unkown
page read and write
 clean
520000
unkown
page readonly
 clean
444000
heap default
page read and write
 clean
1F526000
unkown
page read and write
 clean
1F646000
unkown
page read and write
 clean
180000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
A2E000
unkown
page read and write
 clean
AD0000
heap private
page read and write
 clean
160000
unkown
page read and write
 clean
1F46F000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
384000
heap default
page read and write
 clean
7E0000
unkown
page read and write
 clean
28BC000
unkown
page read and write
 clean
1DDDD000
unkown
page read and write
 clean
140000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
3B0000
unkown
page readonly
 clean
20B8D000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
552000
unkown
page read and write
 clean
1E404000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
100000
heap default
page read and write
 clean
2A0000
unkown
page read and write
 clean
1F5A6000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
3680000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1F450000
unkown
page read and write
 clean
1E5AE000
unkown
page read and write
 clean
B9E000
unkown
page read and write
 clean
37E0000
unkown
page read and write
 clean
B0000
unkown
page read and write
 clean
3700000
unkown
page read and write
 clean
750000
unkown
page readonly
 clean
270000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
80000
unkown
page readonly
 clean
1E44B000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
30C000
unkown
page readonly
 clean
C5000
unkown
page read and write
 clean
5E0000
unkown
page read and write
 clean
1DE30000
heap private
page read and write
 clean
A50000
heap private
page read and write
 clean
A0000
unkown
page readonly
 clean
181000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
2340000
unkown
page read and write
 clean
124C000
unkown image
page readonly
 clean
D92000
unkown image
page execute read
 clean
1F646000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
7E5000
unkown
page read and write
 clean
6A0000
unkown
page read and write
 clean
690000
unkown
page readonly
 clean
307000
unkown
page readonly
 clean
A07000
heap private
page execute and read and write
 clean
170000
unkown
page read and write
 clean
1F5E6000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
20960000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
104000
heap private
page read and write
 clean
90000
heap default
page read and write
 clean
2740000
heap private
page read and write
 clean
417000
unkown image
page readonly
 clean
462E000
stack
page read and write
 clean
3690000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
160000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
70000
heap private
page read and write
 clean
F9D000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
6FB000
unkown
page execute and read and write
 clean
1F52F000
unkown
page read and write
 clean
213FD000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3710000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
100000
heap private
page read and write
 clean
3780000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
640000
unkown
page read and write
 clean
1EC000
unkown
page execute and read and write
 clean
1E4BF000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
770000
unkown
page readonly
 clean
690000
unkown
page readonly
 clean
53C000
unkown
page readonly
 clean
367000
heap default
page read and write
 clean
7E0000
unkown
page read and write
 clean
520000
unkown
page read and write
 clean
560000
unkown
page read and write
 clean
1A0000
heap private
page read and write
 clean
C3F000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
130000
unkown
page read and write
 clean
212BD000
unkown
page read and write
 clean
6F2000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
1F5C6000
unkown
page read and write
 clean
456000
unkown
page read and write
 clean
190000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
1F646000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
640000
unkown
page readonly
 clean
3720000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
E30000
unkown
page readonly
 clean
1A0000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3710000
unkown
page read and write
 clean
3720000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
540000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
3381000
unkown
page read and write
 clean
807000
heap default
page read and write
 clean
D5000
unkown
page read and write
 clean
20A000
unkown
page execute and read and write
 clean
7D6000
heap private
page read and write
 clean
3690000
unkown
page read and write
 clean
632000
unkown
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
177000
unkown
page read and write
 clean
1F4CF000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
3710000
unkown
page read and write
 clean
E2E000
unkown
page read and write | page guard
 clean
390000
unkown
page readonly
 clean
3780000
unkown
page read and write
 clean
2500000
unkown
page readonly
 clean
3740000
unkown
page read and write
 clean
2103E000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
398000
heap default
page read and write
 clean
3690000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
1E370000
heap private
page execute and read and write
 clean
7D0000
heap private
page read and write
 clean
1D4A0000
heap private
page read and write
 clean
A60000
heap private
page read and write
 clean
3780000
unkown
page read and write
 clean
1BE0000
unkown
page readonly
 clean
3750000
unkown
page read and write
 clean
68E000
unkown
page read and write
 clean
28F0000
unkown
page readonly
 clean
6B0000
unkown
page execute and read and write
 clean
93F000
unkown
page read and write
 clean
1F0000
unkown
page readonly
 clean
270000
unkown
page execute and read and write
 clean
D6D000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
7E6000
unkown
page read and write
 clean
5E0000
heap private
page read and write
 clean
7E0000
unkown
page read and write
 clean
1D130000
unkown
page readonly
 clean
160000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
C3E000
unkown
page read and write | page guard
 clean
3730000
unkown
page read and write
 clean
57A000
unkown
page execute and read and write
 clean
130000
unkown
page read and write
 clean
5EF000
unkown
page read and write
 clean
6F0000
unkown
page read and write
 clean
2C0000
heap default
page read and write
 clean
7E0000
unkown
page read and write
 clean
785000
unkown
page read and write
 clean
1DCAD000
unkown
page read and write
 clean
A1E000
unkown
page read and write | page guard
 clean
1D90E000
unkown
page read and write
 clean
7C0000
heap private
page execute and read and write
 clean
7A0000
unkown
page write copy
 clean
400000
unkown image
page readonly
 clean
3760000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
2F0000
unkown
page readonly
 clean
20E8D000
unkown
page read and write
 clean
460000
unkown
page readonly
 clean
3680000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
3730000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3710000
unkown
page read and write
 clean
1DA7E000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
74000
heap private
page read and write
 clean
1F686000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
3680000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
2B82000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
576000
heap private
page read and write
 clean
3730000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
2790000
unkown
page readonly
 clean
3680000
unkown
page read and write
 clean
87C000
heap default
page read and write
 clean
1F586000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
19A000
unkown
page execute and read and write
 clean
1F626000
unkown
page read and write
 clean
37B0000
unkown
page read and write
 clean
2772000
heap private
page read and write
 clean
2601000
unkown
page read and write
 clean
7F0000
unkown
page read and write
 clean
1F5E6000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
140000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
1F50F000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
1E5B0000
unkown
page read and write
 clean
1E28F000
unkown
page read and write
 clean
1BC000
unkown
page execute and read and write
 clean
2651000
unkown
page read and write
 clean
5A2000
unkown
page execute and read and write
 clean
308000
heap default
page read and write
 clean
3680000
unkown
page read and write
 clean
166000
unkown
page read and write
 clean
881000
heap default
page read and write
 clean
1F6A6000
unkown
page read and write
 clean
1DA88000
unkown
page read and write
 clean
190000
unkown
page readonly
 clean
3780000
unkown
page read and write
 clean
2748000
heap private
page read and write
 clean
C0000
unkown
page execute and read and write
 clean
3720000
unkown
page read and write
 clean
170000
unkown
page read and write
 clean
6F7000
unkown
page execute and read and write
 clean
65A000
unkown
page execute and read and write
 clean
520000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
1240000
unkown image
page readonly
 clean
3740000
unkown
page read and write
 clean
1F566000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
1D137000
unkown
page readonly
 clean
1B2000
unkown
page execute and read and write
 clean
2C7000
heap default
page read and write
 clean
2A40000
heap private
page read and write
 clean
3770000
unkown
page read and write
 clean
2440000
unkown
page readonly
 clean
1F3B1000
unkown
page read and write
 clean
1E3B1000
unkown
page read and write
 clean
20730000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
66C000
unkown
page execute and read and write
 clean
3760000
unkown
page read and write
 clean
944000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
7E6000
unkown
page read and write
 clean
396000
unkown
page read and write
 clean
63A000
unkown
page execute and read and write
 clean
3790000
unkown
page read and write
 clean
91D000
unkown
page read and write
 clean
2C0000
heap default
page read and write
 clean
1E2CE000
unkown
page read and write
 clean
1F6C6000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
18C000
unkown
page read and write
 clean
1D12E000
unkown
page read and write
 clean
37E0000
unkown
page read and write
 clean
760000
unkown
page readonly
 clean
37A0000
unkown
page read and write
 clean
3740000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
2EE000
unkown
page read and write
 clean
3790000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
427000
heap default
page read and write
 clean
3680000
unkown
page read and write
 clean
1F3D6000
unkown
page read and write
 clean
3471000
unkown
page read and write
 clean
3860000
unkown
page read and write
 clean
3BC1000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
240000
unkown
page execute and read and write
 clean
21AB000
heap private
page read and write
 clean
3690000
unkown
page read and write
 clean
166000
unkown
page read and write
 clean
1F6E6000
unkown
page read and write
 clean
1F48F000
unkown
page read and write
 clean
1E28E000
unkown
page read and write | page guard
 clean
3710000
unkown
page read and write
 clean
F29000
heap private
page read and write
 clean
C00000
unkown
page readonly
 clean
7E0000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
2A45000
heap private
page read and write
 clean
20000
heap private
page read and write
 clean
3730000
unkown
page read and write
 clean
ADE000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
580000
unkown
page read and write
 clean
3770000
unkown
page read and write
 clean
1EA000
unkown
page execute and read and write
 clean
7E0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
582000
unkown
page read and write
 clean
5F0000
unkown
page readonly
 clean
1F6C6000
unkown
page read and write
 clean
C0000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
35A000
stack
page read and write
 clean
3720000
unkown
page read and write
 clean
3750000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
267F000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
C0000
unkown
page read and write
 clean
360000
heap default
page read and write
 clean
7E0000
unkown
page readonly
 clean
1180000
unkown
page readonly
 clean
3830000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
700000
unkown
page read and write
 clean
1F586000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
37D0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
3780000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1F4AF000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
273E000
unkown
page read and write
 clean
140000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
351A000
unkown
page read and write
 clean
3690000
unkown
page read and write
 clean
1A0000
unkown
page read and write
 clean
A60000
unkown
page readonly
 clean
344000
heap default
page read and write
 clean
89000
unkown
page read and write
 clean
1CFCE000
unkown
page read and write
 clean
58A000
unkown
page execute and read and write
 clean
3690000
unkown
page read and write
 clean
1E0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
8A4000
heap default
page read and write
 clean
3760000
unkown
page read and write
 clean
160000
unkown
page read and write
 clean
750000
unkown
page readonly
 clean
3690000
unkown
page read and write
 clean
7E0000
unkown
page read and write
 clean
2095E000
unkown
page read and write | page guard
 clean
2754000
heap private
page read and write
 clean
1F576000
unkown
page read and write
 clean
1F48F000
unkown
page read and write
 clean
7E6000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
There are 838 hidden memdumps, click here to show them.