IOCReport

loading gif

Files

File Path
Type
Category
Malicious
RFQ ..doc
Rich Text Format data, unknown version
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ZhIOjFmINIXbKXm[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Temp\tmpBFD6.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 malicious
C:\Users\user\AppData\Roaming\cAFIUeWyVQPJe.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 58596 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{73207C3D-FA20-48C4-87C4-17800DB89026}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{EC948C2F-5218-4A38-A66D-F6FECB16C1E9}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\CabCA24.tmp
Microsoft Cabinet archive data, 58596 bytes, 1 file
dropped
 clean
C:\Users\user\AppData\Local\Temp\TarCA25.tmp
data
modified
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\RFQ ..LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:18 2020, mtime=Wed Aug 26 14:08:18 2020, atime=Mon Apr 12 20:22:35 2021, length=762054, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\Desktop\~$RFQ ..doc
data
dropped
 clean
There are 5 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
 malicious
C:\Windows\SysWOW64\schtasks.exe
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\cAFIUeWyVQPJe' /XML 'C:\Users\user\AppData\Local\Temp\tmpBFD6.tmp'
 malicious
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
 malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 clean

URLs

Name
IP
Malicious
http://rotronics.com.ph/docxxx/dec/ZhIOjFmINIXbKXm.exe
203.167.7.88
 malicious
http://www.certicamara.com/certicamaraca.crl0
unknown
 clean
http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
unknown
 clean
http://127.0.0.1:HTTP/1.1
unknown
 clean
http://fedir.comsign.co.il/crl/ComSignSecuredCA.crl0
unknown
 clean
http://DynDns.comDynDNS
unknown
 clean
http://www.e-me.lv/repository0
unknown
 clean
https://sectigo.com/CPS0
unknown
 clean
http://www.acabogacia.org/doc0
unknown
 clean
http://crl.entrust.net/server1.crl0
unknown
 clean
http://ocsp.sectigo.com0
unknown
 clean
http://WWI0qtWzJvCpYcgDStzT.orgDL
unknown
 clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
 clean
http://ocsp.entrust.net03
unknown
 clean
http://www.ancert.com/cps0
unknown
 clean
http://www.dnie.es/dpc0
unknown
 clean
http://www.acabogacia.org0
unknown
 clean
https://rca.e-szigno.hu/ocsp0-
unknown
 clean
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
unknown
 clean
http://www.diginotar.nl/cps/pkioverheid0
unknown
 clean
http://repository.swisssign.com/0
unknown
 clean
http://crl.lt/root-c/cacrl.crl0
unknown
 clean
http://mail.privateemail.com
unknown
 clean
http://WWI0qtWzJvCpYcgDStzT.org
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
unknown
 clean
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://www.certicamara.com/certicamaraca.crl0;
unknown
 clean
http://www.e-szigno.hu/RootCA.crt0
unknown
 clean
http://www.sk.ee/cps/0
unknown
 clean
http://www.e-szigno.hu/SZSZ/0
unknown
 clean
http://www.quovadis.bm0
unknown
 clean
http://www.%s.comPA
unknown
 clean
http://ZAGYny.com
unknown
 clean
http://www.certificadodigital.com.br/repositorio/serasaca/crl/SerasaCAII.crl0
unknown
 clean
http://ocsp.entrust.net0D
unknown
 clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
 clean
https://secure.comodo.com/CPS0
unknown
 clean
https://www.netlock.net/docs
unknown
 clean
http://www.trustcenter.de/crl/v2/tc_class_2_ca_II.crl
unknown
 clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
unknown
 clean
http://servername/isapibackend.dll
unknown
 clean
http://crl.entrust.net/2048ca.crl0
unknown
 clean
http://www.e-trust.be/CPS/QNcerts
unknown
 clean
There are 34 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
rotronics.com.ph
203.167.7.88
 malicious
mail.privateemail.com
198.54.122.60
 clean

IPs

IP
Domain
Country
Malicious
203.167.7.88
rotronics.com.ph
Philippines
malicious
198.54.122.60
mail.privateemail.com
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
zp0
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
sq0
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
:s0
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ED662
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F692F
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F692F
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F692F
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F692F
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
FontCachePath
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Users\user\AppData\Roaming\rghbyjuyktyjrthbgvfsfhytrrgfsd.exe
Blob
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
There are 367 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
39FD000
unkown
page read and write
 malicious
285E000
unkown
page read and write
 malicious
2BBE000
unkown
page read and write
 malicious
2821000
unkown
page read and write
 malicious
402000
unkown
page execute and read and write
 malicious
43BC000
unkown
page read and write
 clean
1130000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
4F39000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
6597000
unkown
page read and write
 clean
19A000
heap default
page read and write
 clean
390000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
270000
unkown
page read and write
 clean
F80000
unkown
page readonly
 clean
6B6C000
unkown
page read and write
 clean
450000
unkown
page read and write
 clean
B688000
unkown
page read and write
 clean
6F4F000
unkown
page read and write
 clean
60FF000
unkown
page read and write
 clean
72CE000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
520000
heap private
page read and write
 clean
A060000
unkown
page read and write
 clean
8C5E000
unkown
page read and write
 clean
DDC000
unkown
page read and write
 clean
6652000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
1412000
unkown image
page readonly
 clean
6A08000
unkown
page read and write
 clean
2A83000
unkown
page read and write
 clean
490000
unkown
page readonly
 clean
6D0000
unkown
page read and write
 clean
E00000
heap private
page execute and read and write
 clean
450000
unkown
page execute and read and write
 clean
305000
unkown
page read and write
 clean
5C0000
heap private
page read and write
 clean
440000
unkown
page read and write
 clean
CE5F000
unkown
page read and write
 clean
D85F000
unkown
page read and write
 clean
4F62000
unkown
page read and write
 clean
63E3000
unkown
page read and write
 clean
B6B2000
unkown
page read and write
 clean
450000
unkown
page read and write
 clean
5B0000
heap default
page read and write
 clean
6657000
unkown
page read and write
 clean
4A00000
unkown
page read and write
 clean
32D000
heap default
page read and write
 clean
5A1000
unkown
page read and write
 clean
56DE000
unkown
page read and write
 clean
5680000
unkown
page read and write
 clean
6445000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
BF8D000
unkown
page read and write
 clean
E22B000
unkown
page read and write
 clean
6A57000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
C485000
unkown
page read and write
 clean
295A000
unkown
page read and write
 clean
CE82000
unkown
page read and write
 clean
6C5A000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
AFA1000
unkown
page read and write
 clean
5C4000
unkown
page read and write
 clean
41B000
unkown
page execute and read and write
 clean
6416000
unkown
page read and write
 clean
59D000
unkown
page read and write
 clean
7DB0000
unkown
page read and write
 clean
E25A000
unkown
page read and write
 clean
3F1000
unkown
page read and write
 clean
4C0000
unkown
page read and write
 clean
6672000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
E261000
unkown
page read and write
 clean
CE26000
unkown
page read and write
 clean
B960000
unkown
page read and write
 clean
B6AB000
unkown
page read and write
 clean
4A00000
heap private
page read and write
 clean
3F0000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
294C000
unkown
page read and write
 clean
B412000
unkown
page read and write
 clean
465000
unkown
page read and write
 clean
666F000
unkown
page read and write
 clean
6EE1000
unkown
page read and write
 clean
30B000
unkown
page read and write
 clean
A5A1000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
BE12000
unkown
page read and write
 clean
C453000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
62C6000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
C906000
unkown
page read and write
 clean
C1E0000
unkown
page read and write
 clean
DF92000
unkown
page read and write
 clean
C60000
unkown
page readonly
 clean
4F92000
unkown
page read and write
 clean
D826000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
415000
unkown
page execute and read and write
 clean
674B000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
4E0000
heap private
page read and write
 clean
308000
unkown
page read and write
 clean
65C1000
unkown
page read and write
 clean
4F76000
unkown
page read and write
 clean
3E3000
unkown
page execute and read and write
 clean
460000
unkown
page read and write
 clean
B6AD000
unkown
page read and write
 clean
4EB0000
unkown
page read and write
 clean
726E000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
D834000
unkown
page read and write
 clean
449000
unkown
page read and write
 clean
298A000
unkown
page read and write
 clean
51B000
unkown
page read and write
 clean
A6D000
unkown
page read and write
 clean
1362000
unkown image
page execute read
 clean
B6D8000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
B700000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
71F000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
47C000
unkown
page read and write
 clean
29B000
unkown
page execute and read and write
 clean
9E0000
unkown
page read and write
 clean
6210000
unkown
page read and write
 clean
63B4000
unkown
page read and write
 clean
6583000
unkown
page read and write
 clean
AD0000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
5C4000
heap private
page read and write
 clean
12BD000
unkown
page read and write
 clean
B49E000
unkown
page read and write
 clean
B6DA000
unkown
page read and write
 clean
380000
unkown
page readonly
 clean
67D0000
unkown
page read and write
 clean
E22D000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
2AFE000
unkown
page read and write
 clean
D82B000
unkown
page read and write
 clean
533C000
unkown
page read and write
 clean
6D12000
unkown
page read and write
 clean
2910000
unkown
page read and write
 clean
6A40000
unkown
page read and write
 clean
B4A1000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
4B0000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
B6DF000
unkown
page read and write
 clean
B6A8000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
D40000
unkown
page read and write
 clean
61DE000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
63B0000
unkown
page read and write
 clean
E23C000
unkown
page read and write
 clean
E255000
unkown
page read and write
 clean
4F18000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
6A38000
unkown
page read and write
 clean
6984000
unkown
page read and write
 clean
6BF5000
unkown
page read and write
 clean
64AC000
unkown
page read and write
 clean
E282000
unkown
page read and write
 clean
5B8E000
unkown
page read and write
 clean
6BB9000
unkown
page read and write
 clean
263000
unkown
page execute and read and write
 clean
661E000
unkown
page read and write
 clean
62D0000
unkown
page read and write
 clean
635A000
unkown
page read and write
 clean
6614000
unkown
page read and write
 clean
790000
unkown
page read and write
 clean
7420000
heap private
page read and write
 clean
305000
unkown
page read and write
 clean
E521000
unkown
page read and write
 clean
96A1000
unkown
page read and write
 clean
6778000
unkown
page read and write
 clean
69B3000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
659B000
unkown
page read and write
 clean
D832000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
720000
unkown
page read and write
 clean
6113000
unkown
page read and write
 clean
56E0000
unkown
page read and write
 clean
7830000
unkown
page read and write
 clean
4FAE000
unkown
page read and write
 clean
2F0000
heap default
page read and write
 clean
A78000
heap private
page read and write
 clean
62C3000
unkown
page read and write
 clean
2A6E000
unkown
page read and write
 clean
DD08000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
494E000
stack
page read and write
 clean
6627000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
4F54000
unkown
page read and write
 clean
4B90000
heap private
page execute and read and write
 clean
500000
unkown
page read and write
 clean
5520000
unkown
page read and write
 clean
E0000
unkown
page read and write
 clean
CE58000
unkown
page read and write
 clean
E208000
unkown
page read and write
 clean
1412000
unkown image
page readonly
 clean
660E000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
E234000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
720000
unkown
page read and write
 clean
E237000
unkown
page read and write
 clean
ACD3000
unkown
page read and write
 clean
83BB000
unkown
page read and write
 clean
E285000
unkown
page read and write
 clean
400000
unkown
page execute and read and write
 clean
B20000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
562C000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
E021000
unkown
page read and write
 clean
4F1D000
unkown
page read and write
 clean
444000
unkown
page read and write
 clean
F7F000
unkown
page read and write
 clean
6591000
unkown
page read and write
 clean
4B4C000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
C4E000
unkown
page read and write | page guard
 clean
3F0000
unkown
page read and write
 clean
66C9000
unkown
page read and write
 clean
6599000
unkown
page read and write
 clean
9B12000
unkown
page read and write
 clean
4AB0000
heap private
page read and write
 clean
295F000
unkown
page read and write
 clean
27D000
unkown
page execute and read and write
 clean
E51E000
unkown
page read and write
 clean
286000
unkown
page execute and read and write
 clean
D121000
unkown
page read and write
 clean
450000
unkown
page read and write
 clean
8A0000
unkown
page readonly
 clean
300000
unkown
page read and write
 clean
B6B7000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
6500000
unkown
page read and write
 clean
C42D000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
E280000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
B705000
unkown
page read and write
 clean
3B0000
unkown
page readonly
 clean
63AA000
unkown
page read and write
 clean
190000
heap default
page read and write
 clean
81E2000
unkown
page read and write
 clean
69BB000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
733A000
unkown
page read and write
 clean
62C6000
unkown
page read and write
 clean
620000
heap private
page execute and read and write
 clean
516000
unkown
page read and write
 clean
6230000
unkown
page read and write
 clean
B40000
unkown
page read and write
 clean
6E7A000
unkown
page read and write
 clean
B30000
unkown
page read and write
 clean
67F8000
unkown
page read and write
 clean
6A16000
unkown
page read and write
 clean
6A8D000
unkown
page read and write
 clean
4A0000
unkown
page read and write
 clean
7CE2000
unkown
page read and write
 clean
683E000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
B6E1000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
69D2000
unkown
page read and write
 clean
6A77000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
5810000
heap private
page read and write
 clean
61E0000
unkown
page read and write
 clean
AD0000
unkown
page readonly
 clean
D837000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
6391000
unkown
page read and write
 clean
D7E000
unkown
page read and write
 clean
ACAD000
unkown
page read and write
 clean
D85D000
unkown
page read and write
 clean
768C000
unkown
page read and write
 clean
65E5000
unkown
page read and write
 clean
C42F000
unkown
page read and write
 clean
D880000
unkown
page read and write
 clean
C721000
unkown
page read and write
 clean
65F0000
unkown
page readonly
 clean
E5D000
stack
page read and write
 clean
4F76000
unkown
page read and write
 clean
3829000
unkown
page read and write
 clean
BB86000
unkown
page read and write
 clean
B6D0000
unkown
page read and write
 clean
1412000
unkown image
page readonly
 clean
730000
unkown
page read and write
 clean
407000
unkown
page execute and read and write
 clean
634C000
heap private
page read and write
 clean
4C70000
unkown
page readonly
 clean
495E000
unkown
page read and write
 clean
2F7000
heap default
page read and write
 clean
450000
unkown
page read and write
 clean
511D000
unkown
page read and write
 clean
5D0000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
4EE000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
336000
heap default
page read and write
 clean
A59E000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
A560000
unkown
page read and write
 clean
7D6F000
unkown
page read and write
 clean
6161000
unkown
page read and write
 clean
ACE1000
unkown
page read and write
 clean
7D30000
unkown
page read and write
 clean
C221000
unkown
page read and write
 clean
4F37000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
CE39000
unkown
page read and write
 clean
AF60000
unkown
page read and write
 clean
8370000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
13A000
unkown
page read and write
 clean
6625000
unkown
page read and write
 clean
725000
unkown
page read and write
 clean
786F000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
D308000
unkown
page read and write
 clean
ACBC000
unkown
page read and write
 clean
E706000
unkown
page read and write
 clean
26D000
unkown
page execute and read and write
 clean
569D000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
3C0000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
E492000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
B6F000
unkown
page read and write
 clean
D850000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
5100000
unkown
page read and write
 clean
91A1000
unkown
page read and write
 clean
A09E000
unkown
page read and write
 clean
60E7000
unkown
page read and write
 clean
8720000
unkown
page readonly
 clean
7D72000
unkown
page read and write
 clean
6494000
unkown
page read and write
 clean
80000
heap default
page read and write
 clean
61F2000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
62D0000
unkown
page read and write
 clean
B460000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
E239000
unkown
page read and write
 clean
4C30000
heap private
page execute and read and write
 clean
3E4000
unkown
page read and write
 clean
DAE0000
unkown
page read and write
 clean
7EF58000
unkown
page execute and read and write
 clean
D853000
unkown
page read and write
 clean
D855000
unkown
page read and write
 clean
7543000
unkown
page read and write
 clean
CE28000
unkown
page read and write
 clean
BB88000
unkown
page read and write
 clean
4A04000
heap private
page read and write
 clean
28AA000
unkown
page read and write
 clean
CE7D000
unkown
page read and write
 clean
9660000
unkown
page read and write
 clean
B6A6000
unkown
page read and write
 clean
417000
unkown
page execute and read and write
 clean
49F0000
heap private
page read and write
 clean
C692000
unkown
page read and write
 clean
63E5000
unkown
page read and write
 clean
56F9000
unkown
page read and write
 clean
28A000
unkown
page execute and read and write
 clean
4BD0000
unkown
page readonly
 clean
752B000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
6272000
unkown
page read and write
 clean
65DE000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
4D0000
unkown
page read and write
 clean
AD05000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
513000
unkown
page read and write
 clean
71E000
unkown
page read and write | page guard
 clean
7E0000
unkown
page readonly
 clean
CE08000
unkown
page read and write
 clean
62D6000
unkown
page read and write
 clean
12E4000
heap private
page read and write
 clean
58AC000
unkown
page read and write
 clean
6620000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
65CA000
unkown
page read and write
 clean
330000
unkown
page readonly
 clean
E258000
unkown
page read and write
 clean
C4F000
unkown
page read and write
 clean
4EF4000
unkown
page read and write
 clean
5E20000
unkown
page readonly
 clean
300000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
285C000
unkown
page read and write
 clean
1F3000
heap default
page read and write
 clean
5A0000
unkown
page read and write
 clean
D861000
unkown
page read and write
 clean
442000
unkown
page read and write
 clean
680C000
unkown
page read and write
 clean
E232000
unkown
page read and write
 clean
DB21000
unkown
page read and write
 clean
4F37000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
CE80000
unkown
page read and write
 clean
6C35000
unkown
page read and write
 clean
969E000
unkown
page read and write
 clean
59EE000
unkown
page read and write
 clean
412000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
790000
unkown
page read and write
 clean
D5BE000
stack
page read and write
 clean
29E3000
unkown
page read and write
 clean
66BA000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
5AB000
unkown
page read and write
 clean
B20000
unkown
page readonly
 clean
62D0000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
AD0000
unkown
page read and write
 clean
6787000
unkown
page read and write
 clean
150000
heap default
page read and write
 clean
CE50000
unkown
page read and write
 clean
614E000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
292000
unkown
page read and write
 clean
6339000
unkown
page read and write
 clean
D5C0000
unkown
page read and write
 clean
B702000
unkown
page read and write
 clean
5815000
heap private
page read and write
 clean
6D0000
unkown
page read and write
 clean
725000
unkown
page read and write
 clean
CE55000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
F80000
unkown
page readonly
 clean
DD06000
unkown
page read and write
 clean
2CAE000
unkown
page read and write
 clean
65EE000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
56EF000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
D592000
unkown
page read and write
 clean
B6DD000
unkown
page read and write
 clean
7C4000
heap default
page read and write
 clean
4F0000
unkown
page read and write
 clean
2C06000
unkown
page read and write
 clean
6690000
unkown
page read and write
 clean
1362000
unkown image
page execute read
 clean
ACA6000
unkown
page read and write
 clean
3A0000
unkown
page execute and read and write
 clean
305000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
F7E000
unkown
page read and write | page guard
 clean
3F0000
unkown
page read and write
 clean
664F000
unkown
page read and write
 clean
491F000
unkown
page read and write
 clean
67B5000
unkown
page read and write
 clean
CE85000
unkown
page read and write
 clean
D882000
unkown
page read and write
 clean
610E000
unkown
page read and write
 clean
DA92000
unkown
page read and write
 clean
174000
heap default
page read and write
 clean
4A22000
heap private
page read and write
 clean
730000
unkown
page read and write
 clean
6A14000
unkown
page read and write
 clean
730000
unkown
page read and write
 clean
550000
unkown
page read and write
 clean
6502000
unkown
page read and write
 clean
6388000
unkown
page read and write
 clean
D40000
unkown
page read and write
 clean
C6E0000
unkown
page read and write
 clean
28E8000
unkown
page read and write
 clean
2B11000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
6DA6000
unkown
page read and write
 clean
2C4E000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
2CBA000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
69FE000
unkown
page read and write
 clean
3889000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
38A9000
unkown
page read and write
 clean
D5C0000
unkown
page read and write
 clean
C42B000
unkown
page read and write
 clean
2C4C000
unkown
page read and write
 clean
8C9E000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
6812000
unkown
page read and write
 clean
C437000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
8CA1000
unkown
page read and write
 clean
77E000
unkown
page read and write
 clean
ACDA000
unkown
page read and write
 clean
C432000
unkown
page read and write
 clean
4F62000
unkown
page read and write
 clean
C434000
unkown
page read and write
 clean
83BA000
unkown
page read and write
 clean
78B0000
unkown
page read and write
 clean
62F4000
unkown
page read and write
 clean
6EA5000
unkown
page read and write
 clean
5B0000
unkown
page read and write
 clean
65CD000
unkown
page read and write
 clean
C45D000
unkown
page read and write
 clean
ACB2000
unkown
page read and write
 clean
1540000
heap private
page read and write
 clean
567E000
unkown
page read and write
 clean
5200000
unkown
page read and write
 clean
657F000
unkown
page read and write
 clean
9612000
unkown
page read and write
 clean
9B9E000
unkown
page read and write
 clean
4F8000
unkown
page read and write
 clean
604D000
unkown
page read and write
 clean
20B000
heap default
page read and write
 clean
69C5000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
7526000
unkown
page read and write
 clean
6340000
heap private
page read and write
 clean
569C000
unkown
page read and write
 clean
720000
unkown
page readonly
 clean
6ACB000
unkown
page read and write
 clean
9112000
unkown
page read and write
 clean
C57000
heap private
page read and write
 clean
D82D000
unkown
page read and write
 clean
53C6000
heap private
page read and write
 clean
D0AD000
stack
page read and write
 clean
D828000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
CE3C000
unkown
page read and write
 clean
ACB7000
unkown
page read and write
 clean
7EE000
heap default
page read and write
 clean
450000
unkown
page read and write
 clean
ACAB000
unkown
page read and write
 clean
649F000
unkown
page read and write
 clean
794000
unkown
page read and write
 clean
1412000
unkown image
page readonly
 clean
DB1E000
unkown
page read and write
 clean
6242000
unkown
page read and write
 clean
CE37000
unkown
page read and write
 clean
C408000
unkown
page read and write
 clean
63DD000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
2C7C000
unkown
page read and write
 clean
AD0000
unkown
page read and write
 clean
C47D000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
ACB9000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
6A4B000
unkown
page read and write
 clean
A31000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
6A7A000
unkown
page read and write
 clean
3849000
unkown
page read and write
 clean
666B000
unkown
page read and write
 clean
919E000
unkown
page read and write
 clean
242000
unkown
page read and write
 clean
649D000
unkown
page read and write
 clean
D858000
unkown
page read and write
 clean
CE34000
unkown
page read and write
 clean
63B7000
unkown
page read and write
 clean
541E000
unkown
page read and write
 clean
CE53000
unkown
page read and write
 clean
6ABB000
unkown
page read and write
 clean
A0A1000
unkown
page read and write
 clean
B99E000
unkown
page read and write
 clean
62D6000
unkown
page read and write
 clean
280000
unkown
page read and write
 clean
CEEE000
unkown
page read and write
 clean
4FA6000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
260000
unkown
page read and write
 clean
6AB9000
unkown
page read and write
 clean
4F92000
unkown
page read and write
 clean
D6BE000
unkown
page read and write
 clean
1302000
heap private
page read and write
 clean
D839000
unkown
page read and write
 clean
B6D5000
unkown
page read and write
 clean
6E97000
unkown
page read and write
 clean
A2E000
unkown
page read and write
 clean
C45F000
unkown
page read and write
 clean
4B9E000
unkown
page read and write
 clean
79B000
unkown
page read and write
 clean
150000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
56E1000
unkown
page read and write
 clean
AF12000
unkown
page read and write
 clean
8371000
unkown
page read and write
 clean
D67E000
unkown
page read and write
 clean
6381000
unkown
page read and write
 clean
D82F000
unkown
page read and write
 clean
63DF000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
C439000
unkown
page read and write
 clean
62D0000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
6385000
unkown
page read and write
 clean
DADD000
stack
page read and write
 clean
62C6000
unkown
page read and write
 clean
4AEE000
unkown
page read and write
 clean
56E2000
unkown
page read and write
 clean
CB92000
unkown
page read and write
 clean
1F0000
heap default
page read and write
 clean
6ED0000
unkown
page read and write
 clean
4ABC000
heap private
page read and write
 clean
5147000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
D092000
unkown
page read and write
 clean
782C000
unkown
page read and write
 clean
6608000
unkown
page read and write
 clean
264000
unkown
page read and write
 clean
9BC000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
5470000
unkown
page read and write
 clean
571F000
unkown
page read and write
 clean
1130000
unkown
page read and write
 clean
622E000
unkown
page read and write
 clean
ACDD000
unkown
page read and write
 clean
659E000
unkown
page read and write
 clean
EADE000
unkown
page read and write
 clean
B20000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
4F0000
unkown
page read and write
 clean
B9A1000
unkown
page read and write
 clean
83DE000
unkown
page read and write
 clean
2CE2000
unkown
page read and write
 clean
4A0000
unkown
page read and write
 clean
12E0000
heap private
page read and write
 clean
8404000
unkown
page read and write
 clean
E992000
unkown
page read and write
 clean
ACDF000
unkown
page read and write
 clean
69BE000
unkown
page read and write
 clean
580E000
unkown
page read and write
 clean
C426000
unkown
page read and write
 clean
ACAF000
unkown
page read and write
 clean
4F0000
unkown
page read and write
 clean
2D0000
unkown
page execute and read and write
 clean
D0000
unkown
page readonly
 clean
510000
unkown
page read and write
 clean
9BA1000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
6223000
unkown
page read and write
 clean
6C82000
unkown
page read and write
 clean
1420000
unkown
page readonly
 clean
546E000
unkown
page read and write | page guard
 clean
7460000
unkown
page read and write
 clean
64EE000
unkown
page read and write
 clean
4F0000
unkown
page readonly
 clean
6A43000
unkown
page read and write
 clean
AC88000
unkown
page read and write
 clean
38E9000
unkown
page read and write
 clean
ACA8000
unkown
page read and write
 clean
E250000
unkown
page read and write
 clean
AAA1000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
E27D000
unkown
page read and write
 clean
260000
unkown
page read and write
 clean
50D000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
6700000
unkown
page read and write
 clean
62F4000
unkown
page read and write
 clean
6665000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
6586000
unkown
page read and write
 clean
C1DE000
unkown
page read and write
 clean
4F0000
unkown
page readonly
 clean
9E0000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
D9AE000
stack
page read and write
 clean
780000
unkown
page read and write
 clean
D0B0000
unkown
page readonly
 clean
440000
unkown
page read and write
 clean
7182000
unkown
page read and write
 clean
5E60000
unkown
page readonly
 clean
72A000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
2E0000
unkown
page read and write
 clean
662C000
unkown
page read and write
 clean
CC1E000
unkown
page read and write
 clean
6D0000
unkown
page read and write
 clean
450000
unkown
page execute and read and write
 clean
B6B9000
unkown
page read and write
 clean
749C000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
CE32000
unkown
page read and write
 clean
673C000
unkown
page read and write
 clean
3D2000
unkown
page read and write
 clean
657A000
unkown
page read and write
 clean
AA9E000
unkown
page read and write
 clean
AF9E000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
D11E000
unkown
page read and write
 clean
6D0000
unkown
page read and write
 clean
480000
heap private
page read and write
 clean
450000
unkown
page read and write
 clean
282000
unkown
page read and write
 clean
DC0E000
stack
page read and write
 clean
300000
unkown
page read and write
 clean
D885000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
6AD6000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
5E1B000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
CBE0000
unkown
page read and write
 clean
6507000
unkown
page read and write
 clean
2956000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
5D0000
unkown
page readonly
 clean
ADF000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
62C9000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
3821000
unkown
page read and write
 clean
441000
unkown
page read and write
 clean
62F4000
unkown
page read and write
 clean
52C0000
unkown
page read and write
 clean
7872000
unkown
page read and write
 clean
62FE000
unkown
page read and write
 clean
637A000
unkown
page read and write
 clean
64F9000
unkown
page read and write
 clean
C45A000
unkown
page read and write
 clean
A50000
heap private
page execute and read and write
 clean
53A0000
heap private
page read and write
 clean
3AD8000
unkown
page read and write
 clean
297000
unkown
page execute and read and write
 clean
300000
unkown
page read and write
 clean
ACFD000
unkown
page read and write
 clean
4C2C000
unkown
page read and write
 clean
5A50000
heap private
page read and write
 clean
442000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
B6D3000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
6A82000
unkown
page read and write
 clean
C428000
unkown
page read and write
 clean
86ED000
unkown
page read and write
 clean
C5F000
unkown
page read and write
 clean
5BD0000
unkown
page read and write
 clean
D0E0000
unkown
page read and write
 clean
52EE000
unkown
page read and write
 clean
B6FD000
unkown
page read and write
 clean
54FE000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
4F1C000
unkown
page read and write
 clean
ACD0000
unkown
page read and write
 clean
125F000
stack
page read and write
 clean
460000
unkown
page read and write
 clean
D61E000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
72D0000
unkown
page read and write
 clean
C908000
unkown
page read and write
 clean
DFE0000
unkown
page read and write
 clean
9160000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
50ED000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
2B8C000
unkown
page read and write
 clean
B188000
unkown
page read and write
 clean
50F0000
unkown
page write copy
 clean
6611000
unkown
page read and write
 clean
4F62000
unkown
page read and write
 clean
E253000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
D50000
unkown
page execute and read and write
 clean
64EC000
unkown
page read and write
 clean
B912000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
A20000
unkown
page readonly
 clean
D621000
unkown
page read and write
 clean
C455000
unkown
page read and write
 clean
6440000
unkown
page read and write
 clean
D808000
unkown
page read and write
 clean
659E000
unkown
page read and write
 clean
6D0000
unkown
page read and write
 clean
38C9000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
6A85000
unkown
page read and write
 clean
257000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
445000
unkown
page read and write
 clean
ACE000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
512000
unkown
page read and write
 clean
7A0000
heap default
page read and write
 clean
515000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
A50000
unkown
page read and write
 clean
5C0000
unkown
page read and write
 clean
692B000
unkown
page read and write
 clean
D30000
unkown
page read and write
 clean
D85A000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
CE61000
unkown
page read and write
 clean
637C000
unkown
page read and write
 clean
E60000
unkown
page readonly
 clean
305000
unkown
page read and write
 clean
310000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
E228000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
5832000
heap private
page read and write
 clean
7531000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
65D7000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
60AB000
unkown
page read and write
 clean
836E000
unkown
page read and write
 clean
53A8000
heap private
page read and write
 clean
CC21000
unkown
page read and write
 clean
1250000
unkown
page readonly
 clean
AA12000
unkown
page read and write
 clean
4C0000
unkown
page read and write
 clean
3FD000
unkown
page execute and read and write
 clean
CE2B000
unkown
page read and write
 clean
1BD000
unkown
page read and write
 clean
E25D000
unkown
page read and write
 clean
2C04000
unkown
page read and write
 clean
6A00000
unkown
page read and write
 clean
6090000
unkown
page read and write
 clean
6E90000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
62C3000
unkown
page read and write
 clean
629B000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
AD00000
unkown
page read and write
 clean
641A000
unkown
page read and write
 clean
29EB000
unkown
page read and write
 clean
B6BC000
unkown
page read and write
 clean
6410000
unkown
page read and write
 clean
29AB000
unkown
page read and write
 clean
4F53000
unkown
page read and write
 clean
4950000
unkown
page readonly
 clean
69F5000
unkown
page read and write
 clean
62AF000
unkown
page read and write
 clean
D40000
unkown
page read and write
 clean
6659000
unkown
page read and write
 clean
4FA6000
unkown
page read and write
 clean
1F6000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
CE9E000
unkown
page read and write
 clean
A512000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
D5E0000
unkown
page read and write
 clean
5E0000
heap private
page read and write
 clean
ACB4000
unkown
page read and write
 clean
660000
unkown
page readonly
 clean
20000
unkown
page read and write
 clean
DE0000
unkown
page readonly
 clean
C21E000
unkown
page read and write
 clean
5B4D000
unkown
page read and write
 clean
69D4000
unkown
page read and write
 clean
AD0000
unkown
page read and write
 clean
287D000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
382C000
unkown
page read and write
 clean
A012000
unkown
page read and write
 clean
9B60000
unkown
page read and write
 clean
4F76000
unkown
page read and write
 clean
67C8000
unkown
page read and write
 clean
4AC0000
unkown
page read and write
 clean
9D0000
unkown
page read and write
 clean
7EF40000
unkown
page execute and read and write
 clean
DD7E000
unkown
page read and write | page guard
 clean
1C0000
unkown
page read and write
 clean
28C0000
unkown
page read and write
 clean
6A7D000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
4F53000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
E01E000
unkown
page read and write
 clean
4F1C000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
450000
unkown
page read and write
 clean
4A70000
heap private
page read and write
 clean
A70000
heap private
page read and write
 clean
4AD000
unkown
page read and write
 clean
C482000
unkown
page read and write
 clean
58EE000
stack
page read and write
 clean
C461000
unkown
page read and write
 clean
ACD5000
unkown
page read and write
 clean
83F1000
unkown
page read and write
 clean
2D15000
unkown
page read and write
 clean
3869000
unkown
page read and write
 clean
660C000
unkown
page read and write
 clean
5AF3000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
C458000
unkown
page read and write
 clean
6275000
unkown
page read and write
 clean
56F1000
unkown
page read and write
 clean
85A000
heap default
page read and write
 clean
6852000
unkown
page read and write
 clean
80000
unkown
page readonly
 clean
65E0000
unkown
page read and write
 clean
29F3000
unkown
page read and write
 clean
440000
unkown
page read and write
 clean
1362000
unkown image
page execute read
 clean
29A8000
unkown
page read and write
 clean
56A4000
unkown
page read and write
 clean
CE5A000
unkown
page read and write
 clean
470000
unkown
page read and write
 clean
2821000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
1150000
unkown
page read and write
 clean
600E000
stack
page read and write
 clean
B186000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
4F18000
unkown
page read and write
 clean
641D000
unkown
page read and write
 clean
889000
heap default
page read and write
 clean
370000
unkown
page readonly
 clean
540000
unkown
page readonly
 clean
CE5D000
unkown
page read and write
 clean
D87D000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
E25F000
unkown
page read and write
 clean
CE2D000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
28FC000
unkown
page read and write
 clean
83AC000
unkown
page read and write
 clean
500000
unkown
page read and write
 clean
B6B4000
unkown
page read and write
 clean
40A000
unkown
page execute and read and write
 clean
AD02000
unkown
page read and write
 clean
4F0000
unkown
page read and write
 clean
7547000
unkown
page read and write
 clean
6AC3000
unkown
page read and write
 clean
7A7000
heap default
page read and write
 clean
440000
unkown
page readonly
 clean
A30000
unkown
page read and write
 clean
3821000
unkown
page read and write
 clean
617A000
unkown
page read and write
 clean
83BA000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
CF5E000
unkown
page read and write
 clean
4FA6000
unkown
page read and write
 clean
E708000
unkown
page read and write
 clean
6091000
unkown
page read and write
 clean
D5C0000
unkown
page read and write
 clean
6A98000
unkown
page read and write
 clean
AA60000
unkown
page read and write
 clean
65C6000
unkown
page read and write
 clean
546F000
unkown
page read and write
 clean
C43C000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
3D5000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
7E0000
heap default
page read and write
 clean
D83C000
unkown
page read and write
 clean
5C0000
unkown
page read and write
 clean
C71E000
unkown
page read and write
 clean
300000
unkown
page read and write
 clean
68D1000
unkown
page read and write
 clean
720000
unkown
page readonly
 clean
460000
unkown
page read and write
 clean
6606000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
293A000
unkown
page read and write
 clean
340000
heap private
page execute and read and write
 clean
445000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
4ECD000
unkown
page read and write
 clean
14A000
unkown
page read and write
 clean
50FE000
stack
page read and write
 clean
A40000
unkown
page read and write
 clean
4B0000
unkown
page read and write
 clean
489000
heap private
page read and write
 clean
B1C000
unkown
page read and write
 clean
AD0000
unkown
page read and write
 clean
617E000
unkown
page read and write
 clean
A40000
unkown
page read and write
 clean
62E7000
unkown
page read and write
 clean
6E54000
unkown
page read and write
 clean
D306000
unkown
page read and write
 clean
402000
unkown
page read and write
 clean
590000
unkown
page read and write
 clean
670E000
unkown
page read and write
 clean
C480000
unkown
page read and write
 clean
29E7000
unkown
page read and write
 clean
8C60000
unkown
page read and write
 clean
B6AF000
unkown
page read and write
 clean
368000
stack
page read and write
 clean
308000
unkown
page read and write
 clean
1140000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
157000
heap default
page read and write
 clean
64CF000
unkown
page read and write
 clean
C450000
unkown
page read and write
 clean
6290000
unkown
page read and write
 clean
305000
unkown
page read and write
 clean
445000
unkown
page read and write
 clean
ACD8000
unkown
page read and write
 clean
DD7F000
unkown
page read and write
 clean
720000
unkown
page read and write
 clean
6899000
unkown
page read and write
 clean
B24000
unkown
page read and write
 clean
E226000
unkown
page read and write
 clean
6AC1000
unkown
page read and write
 clean
4F92000
unkown
page read and write
 clean
560000
unkown
page readonly
 clean
553C000
unkown
page read and write
 clean
67CE000
unkown
page read and write
 clean
64A6000
unkown
page read and write
 clean
62BE000
unkown
page read and write
 clean
1362000
unkown image
page execute read
 clean
E4E0000
unkown
page read and write
 clean
C50000
heap private
page read and write
 clean
E22F000
unkown
page read and write
 clean
6355000
unkown
page read and write
 clean
19D000
heap default
page read and write
 clean
62EA000
unkown
page read and write
 clean
6CD0000
unkown
page read and write
 clean
C50000
unkown
page readonly
 clean
49EC000
unkown
page read and write
 clean
CE2F000
unkown
page read and write
 clean
3ED000
unkown
page execute and read and write
 clean
D81E000
stack
page read and write
 clean
287B000
unkown
page read and write
 clean
2C0000
unkown
page read and write
 clean
There are 1041 hidden memdumps, click here to show them.