IOCReport

loading gif

Files

File Path
Type
Category
Malicious
471e3984_by_Libranalysis.docx
Microsoft Word 2007+
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\vbc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\v[1].doc
data
downloaded
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3B75759.doc
data
dropped
 malicious
C:\Users\user\AppData\Roaming\EA860E7A-A87F-4A88-92EF-38F744458171\run.dat
data
dropped
 malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-{F68D7747-BDFB-4414-9397-CF20B10DDA5F}.FSD
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{45D439A1-3537-4B88-BE41-836CEF25E81A}.FSD
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{8AE4CB73-349E-46EF-BF24-C3A751787722}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{9CA5B12C-492C-4E57-AE2D-0E7798ADDEF4}.tmp
dBase III DBT, version number 0, next free block index 7536653
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{DD41239A-D6DE-42E0-947A-6C3BAA1EDCFF}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\{542180A0-A252-45A6-9AB6-97F222355736}
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\{B4AE6734-762A-4AC3-86CE-9329F6012CCF}
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\471e3984_by_Libranalysis.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Mon May 3 20:30:28 2021, mtime=Mon May 3 20:30:28 2021, atime=Mon May 3 20:30:34 2021, length=10310, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\dbzEXdF.url
MS Windows 95 Internet shortcut text (URL=<https://cutt.ly/dbzEXdF>), ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\reg on nta.hopto.org.url
MS Windows 95 Internet shortcut text (URL=<http://nta.hopto.org/reg/>), ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Little-endian UTF-16 Unicode text, with no line terminators
modified
 clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\KCZ27U86.txt
ASCII text
downloaded
 clean
C:\Users\user\Desktop\~$1e3984_by_Libranalysis.docx
data
dropped
 clean
There are 15 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
 malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
 malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
 malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 clean

URLs

Name
IP
Malicious
79.134.225.26
malicious
nassiru1166main.ddns.net
malicious
http://nta.hopto.org/reg/vbc.exe
172.245.45.28
 malicious
https://cutt.ly/dbzEXdF
unknown
 malicious
http://nta.hopto.org/reg/v.dot
172.245.45.28
 malicious
http://www.%s.comPA
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://nta.hopto.org/reg/
unknown
 clean
https://github.com/unguest
unknown
 clean
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
unknown
 clean
https://github.com/unguest9WinForms_RecursiveFormCreate5WinForms_SeeInnerExceptionGProperty
unknown
 clean
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
cutt.ly
172.67.8.238
 malicious
nta.hopto.org
172.245.45.28
 malicious
nassiru1166main.ddns.net
unknown
 malicious

IPs

IP
Domain
Country
Malicious
172.67.8.238
cutt.ly
United States
malicious
79.134.225.26
unknown
Switzerland
malicious
172.245.45.28
nta.hopto.org
United States
malicious
104.22.1.232
unknown
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ms8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
wt8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
}u8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@%SystemRoot%\system32\qagentrt.dll,-10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@%SystemRoot%\System32\fveui.dll,-843
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@%SystemRoot%\System32\fveui.dll,-844
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@%SystemRoot%\System32\wuaueng.dll,-400
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Count
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Type
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Protocol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Flags
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMajorVersion
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMinorVersion
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MsDavExt
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Expiration
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EnableBHO
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
?<8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SavedLegacySettings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blob
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
There are 333 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
402000
unkown
page execute and read and write
 malicious
380F000
unkown
page read and write
 malicious
38A1000
unkown
page read and write
 malicious
9A0000
unkown
page read and write
 malicious
28DB000
unkown
page read and write
 malicious
3A94000
unkown
page read and write
 clean
4EEE000
unkown
page read and write | page guard
 clean
39D4000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
1B6000
unkown
page execute and read and write
 clean
85A000
heap default
page read and write
 clean
3A34000
unkown
page read and write
 clean
830000
heap default
page read and write
 clean
1380000
unkown image
page readonly
 clean
790000
heap private
page execute and read and write
 clean
900000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
1A2000
unkown
page execute and read and write
 clean
3E0000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
1D2000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
2844000
unkown
page read and write
 clean
2C7000
unkown
page execute and read and write
 clean
2280000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
4EEF000
unkown
page read and write
 clean
3E4000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
563D000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
5D6000
heap default
page read and write
 clean
6F7000
unkown
page readonly
 clean
3953000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
342000
heap private
page read and write
 clean
374F000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
2D0000
heap private
page read and write
 clean
4A0000
unkown
page read and write
 clean
863000
unkown
page read and write
 clean
29A7000
unkown
page read and write
 clean
910000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
854000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
1F0000
unkown
page readonly
 clean
85D000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
37CF000
unkown
page read and write
 clean
4926000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
135E000
unkown
page read and write
 clean
22FC000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
205000
heap private
page execute and read and write
 clean
39B4000
unkown
page read and write
 clean
960000
heap private
page read and write
 clean
3A0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
579F000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
A08000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3B0000
unkown
page read and write
 clean
507000
heap default
page read and write
 clean
85D000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
427000
unkown
page readonly
 clean
376F000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
1DB000
unkown
page execute and read and write
 clean
3A54000
unkown
page read and write
 clean
1382000
unkown image
page execute read
 clean
85D000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
401000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
AF0000
heap private
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
22B0000
unkown
page read and write
 clean
492F000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
5D0000
heap default
page read and write
 clean
3A74000
unkown
page read and write
 clean
320000
heap private
page read and write
 clean
DE0000
unkown
page execute and read and write
 clean
60E000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
5FBE000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
5C41000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
260000
unkown
page read and write
 clean
28C000
unkown
page execute and read and write
 clean
3AB4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
4B07000
heap private
page execute and read and write
 clean
3953000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3C5A000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
581E000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
28A1000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
86C000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
A05000
unkown
page read and write
 clean
8A0000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3D0000
unkown
page execute and read and write
 clean
86D000
unkown
page read and write
 clean
490000
unkown
page read and write
 clean
551E000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
2AA000
unkown
page execute and read and write
 clean
3A14000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
611D000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
2240000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
4D0000
unkown
page read and write
 clean
272000
unkown
page execute and read and write
 clean
4720000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3974000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
5C2D000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
4B0000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
5B0000
unkown
page read and write
 clean
410000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
86A000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
95D000
unkown
page read and write
 clean
90000
unkown
page readonly
 clean
39D4000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
51FD000
unkown
page read and write
 clean
2296000
heap private
page read and write
 clean
3AD4000
unkown
page read and write
 clean
D50000
unkown
page readonly
 clean
2230000
unkown
page read and write
 clean
740000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
964000
heap private
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
372E000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
26E1000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
DD8000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
747000
unkown
page read and write
 clean
1BA000
unkown
page execute and read and write
 clean
9DE000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
4B80000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
DD0000
unkown
page execute and read and write
 clean
3994000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
48BD000
unkown
page read and write
 clean
5A8E000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
5C0000
unkown
page read and write
 clean
4B24000
heap private
page execute and read and write
 clean
49BE000
unkown
page read and write
 clean
FD0000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
A06000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
4E0000
unkown
page read and write
 clean
48A0000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
F01000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
3E5000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
599000
unkown
page read and write
 clean
282000
unkown
page execute and read and write
 clean
3994000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
37EF000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
401000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
28D0000
unkown
page read and write
 clean
57A000
heap default
page read and write
 clean
5E18000
heap private
page read and write
 clean
3AB4000
unkown
page read and write
 clean
DF0000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
324000
heap private
page read and write
 clean
3A14000
unkown
page read and write
 clean
7EF50000
unkown
page execute and read and write
 clean
3953000
unkown
page read and write
 clean
130000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
100000
unkown
page readonly
 clean
F10000
unkown
page read and write
 clean
780000
unkown
page readonly
 clean
3F0000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
49A0000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
470000
heap private
page execute and read and write
 clean
4A0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
2290000
heap private
page read and write
 clean
85D000
unkown
page read and write
 clean
400000
unkown
page readonly
 clean
3953000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
29B3000
unkown
page read and write
 clean
5B0000
unkown
page read and write
 clean
500000
heap default
page read and write
 clean
297000
unkown
page execute and read and write
 clean
5B0000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
3C0000
unkown
page write copy
 clean
3973000
unkown
page read and write
 clean
366000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
86C000
unkown
page read and write
 clean
2250000
unkown
page read and write
 clean
4A5000
unkown
page read and write
 clean
6FC000
unkown
page readonly
 clean
3953000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
5DD000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
410000
unkown
page readonly
 clean
3973000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
1200000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
650000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
1498000
unkown image
page readonly
 clean
39B4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
1380000
unkown image
page readonly
 clean
85D000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
2B9000
heap private
page read and write
 clean
6100000
unkown
page read and write
 clean
BB0000
unkown
page readonly
 clean
3A14000
unkown
page read and write
 clean
2410000
unkown
page readonly
 clean
1C2000
unkown
page execute and read and write
 clean
3AF4000
unkown
page read and write
 clean
818000
unkown
page read and write
 clean
385000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
473D000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
F60000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
982000
heap private
page read and write
 clean
39B4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
E70000
unkown
page readonly
 clean
39B4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
B00000
unkown
page readonly
 clean
3E0000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
589C000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
410000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
2913000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
874000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3E7000
unkown
page read and write
 clean
27A5000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
770000
unkown
page read and write
 clean
662F000
unkown
page read and write
 clean
490000
unkown
page read and write
 clean
296C000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
4FFD000
unkown
page read and write
 clean
F00000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
50FF000
unkown
page read and write
 clean
3A0000
unkown
page readonly
 clean
240F000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
22B0000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
5DA0000
heap private
page read and write
 clean
3953000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
5350000
unkown
page write copy
 clean
3A54000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
4A6E000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3E5000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3706000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
490000
unkown
page readonly
 clean
3E0000
unkown
page read and write
 clean
1120000
unkown
page readonly
 clean
750000
unkown
page read and write
 clean
4A0000
unkown
page read and write
 clean
1A0000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
542E000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
56DF000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
1C0000
unkown
page read and write
 clean
111D000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
7EF50000
unkown
page execute and read and write
 clean
7EFDF000
unkown
page read and write
 clean
2150000
unkown
page readonly
 clean
797000
heap default
page read and write
 clean
760000
unkown
page read and write
 clean
FC0000
unkown
page read and write
 clean
1B0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
790000
heap default
page read and write
 clean
3974000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
F00000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
471E000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
8EC000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
250000
unkown
page readonly
 clean
AEF000
unkown
page read and write
 clean
E3E000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
750000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3F0000
unkown
page execute and read and write
 clean
740000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
280000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
260000
unkown
page readonly
 clean
3E0000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
29A000
unkown
page execute and read and write
 clean
3A54000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
3AF4000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
5C3F000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
152000
unkown
page execute and read and write
 clean
3A94000
unkown
page read and write
 clean
1CC000
unkown
page execute and read and write
 clean
593E000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
23A000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
120000
heap private
page read and write
 clean
3A94000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3933000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
A30000
unkown
page readonly
 clean
3934000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
492E000
unkown
page read and write | page guard
 clean
3953000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
FAC000
unkown
page read and write
 clean
3E7000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
381000
unkown
page read and write
 clean
1498000
unkown image
page readonly
 clean
558E000
unkown
page read and write | page guard
 clean
593E000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
6FF0000
unkown
page read and write
 clean
1380000
unkown image
page readonly
 clean
71B000
unkown
page readonly
 clean
3AB4000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
86C000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
F00000
unkown
page read and write
 clean
28D2000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3974000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
2A0000
unkown
page read and write
 clean
548000
heap default
page read and write
 clean
DE0000
unkown
page read and write
 clean
534E000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
FE0000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
36E1000
unkown
page read and write
 clean
497000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
490000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
859000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
5E10000
heap private
page read and write
 clean
540000
unkown
page readonly
 clean
A10000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3DC7000
unkown
page read and write
 clean
86A000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
420000
unkown
page readonly
 clean
3A54000
unkown
page read and write
 clean
300000
unkown
page readonly
 clean
39D4000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
19A000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
37AF000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
750000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
5A0000
unkown
page read and write
 clean
658000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
5F4000
unkown
page read and write
 clean
A08000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
DD3000
unkown
page read and write
 clean
3974000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
AEE000
unkown
page read and write | page guard
 clean
558F000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3F8000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
2CB000
unkown
page execute and read and write
 clean
86D000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
86C000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
4F1E000
unkown
page read and write
 clean
890000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
4AAE000
unkown
page read and write
 clean
4EE000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
176000
unkown
page read and write | page guard
 clean
85B000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3EC000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
60C0000
heap private
page read and write
 clean
537E000
unkown
page read and write
 clean
67FE000
unkown
page read and write
 clean
44B000
unkown
page readonly
 clean
3E0000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
222000
heap private
page execute and read and write
 clean
4EF0000
unkown
page readonly
 clean
2230000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
27A000
unkown
page execute and read and write
 clean
3A94000
unkown
page read and write
 clean
61C000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
2240000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
9C0000
heap private
page execute and read and write
 clean
3A94000
unkown
page read and write
 clean
62FE000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
4C5B000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
4D9C000
unkown
page read and write
 clean
390000
unkown
page execute and read and write
 clean
3A74000
unkown
page read and write
 clean
42C000
unkown
page readonly
 clean
380000
unkown
page readonly
 clean
39B4000
unkown
page read and write
 clean
22A0000
unkown
page read and write
 clean
3A54000
unkown
page read and write
 clean
5C50000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
5F5000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
2F0000
unkown
page read and write
 clean
3AF4000
unkown
page read and write
 clean
859000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
1F0000
unkown
page read and write
 clean
DE0000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
177000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
2990000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
815000
heap default
page read and write
 clean
3A54000
unkown
page read and write
 clean
3A94000
unkown
page read and write
 clean
3974000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
422000
unkown
page execute and read and write
 clean
200000
heap private
page execute and read and write
 clean
39F4000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
8F0000
unkown
page execute and read and write
 clean
FB0000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
FFF000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
4F0000
unkown
page readonly
 clean
310000
unkown
page readonly
 clean
240000
heap private
page read and write
 clean
3A54000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
81F000
heap default
page read and write
 clean
5C30000
unkown
page read and write
 clean
140000
unkown
page read and write
 clean
874000
heap default
page read and write
 clean
3A34000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
49C0000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
27EC000
unkown
page read and write
 clean
7B4000
heap default
page read and write
 clean
F66000
unkown
page read and write
 clean
2992000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
81D000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
58A000
unkown
page read and write
 clean
496E000
unkown
page read and write
 clean
3F5000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
2250000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
12F0000
heap private
page read and write
 clean
DD0000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
4B7E000
unkown
page read and write
 clean
360000
heap default
page read and write
 clean
39F4000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
A10000
unkown
page execute and read and write
 clean
2247000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3A34000
unkown
page read and write
 clean
524000
heap default
page read and write
 clean
3994000
unkown
page read and write
 clean
55AE000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
15A000
unkown
page execute and read and write
 clean
3E0000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
180000
unkown
page readonly
 clean
248000
heap private
page read and write
 clean
3AB4000
unkown
page read and write
 clean
1CA000
unkown
page execute and read and write
 clean
39F4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
378F000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
1B2000
unkown
page read and write
 clean
39B4000
unkown
page read and write
 clean
758000
unkown
page read and write
 clean
2B0000
heap private
page read and write
 clean
3AD4000
unkown
page read and write
 clean
6F0000
unkown
page readonly
 clean
7D8000
heap default
page read and write
 clean
3994000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
F10000
unkown
page read and write
 clean
2240000
unkown
page execute and read and write
 clean
3994000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
9E0000
unkown
page execute and read and write
 clean
4C80000
unkown
page read and write
 clean
53E000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
1382000
unkown image
page execute read
 clean
3994000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
4B00000
heap private
page execute and read and write
 clean
4D90000
unkown
page read and write
 clean
85D000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3F0000
unkown
page execute and read and write
 clean
3973000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
F60000
unkown
page read and write
 clean
3AB4000
unkown
page read and write
 clean
5E36000
heap private
page read and write
 clean
39F4000
unkown
page read and write
 clean
400000
unkown
page execute and read and write
 clean
3A34000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
3E5000
unkown
page read and write
 clean
600000
unkown
page readonly
 clean
3AB4000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
3A14000
unkown
page read and write
 clean
960000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
3973000
unkown
page read and write
 clean
60D000
heap default
page read and write
 clean
110000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
1D7000
unkown
page execute and read and write
 clean
3AB4000
unkown
page read and write
 clean
DD1000
unkown
page read and write
 clean
F5C000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
3934000
unkown
page read and write
 clean
2A2000
unkown
page execute and read and write
 clean
3953000
unkown
page read and write
 clean
527E000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
3E6000
unkown
page read and write
 clean
3994000
unkown
page read and write
 clean
3F6000
unkown
page read and write
 clean
39F4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
DD0000
unkown
page read and write
 clean
3AD4000
unkown
page read and write
 clean
60E000
unkown
page read and write
 clean
890000
unkown
page read and write
 clean
5C31000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
39D4000
unkown
page read and write
 clean
4F0000
unkown
page read and write
 clean
3A74000
unkown
page read and write
 clean
5B8000
unkown
page read and write
 clean
3953000
unkown
page read and write
 clean
There are 895 hidden memdumps, click here to show them.