IOCReport

loading gif

Files

File Path
Type
Category
Malicious
PL_503_13_570.docx
Microsoft Word 2007+
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\Sugvt[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
 malicious
C:\Users\user\AppData\Local\Temp\toqqx.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\notpad\notpad.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\Users\user\toqqx.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
 malicious
C:\ProgramData\826308279625120\temp
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\ProgramData\843743064682002\_8437430646.zip
Zip archive data, at least v2.0 to extract
dropped
 clean
C:\ProgramData\843743064682002\cookies\Google Chrome_Default.txt
ASCII text, with CRLF line terminators
dropped
 clean
C:\ProgramData\843743064682002\cookies\Mozilla Firefox_7xwghk55.default.txt
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\ProgramData\843743064682002\screenshot.jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, frames 3
dropped
 clean
C:\ProgramData\843743064682002\system.txt
ASCII text, with CRLF line terminators
dropped
 clean
C:\ProgramData\843743064682002\temp
SQLite 3.x database, last written using SQLite version 3032001
dropped
 clean
C:\ProgramData\freebl3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\mozglue.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\msvcp140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\nss3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\softokn3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\sqlite3.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\ProgramData\vcruntime140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4C112D4.png
PNG image data, 288 x 424, 8-bit/color RGBA, non-interlaced
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B4C77723-97C0-4A14-814E-1968BCE52029}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{FDB545E2-A1F4-4D0B-BC71-CA4D3862B689}.tmp
Targa image data - RLE 65536 x 65536 x 0 ""
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\PL_503_13_570.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15 2020, mtime=Wed Aug 26 14:08:15 2020, atime=Wed May 5 03:33:33 2021, length=96745, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\Desktop\~$_503_13_570.docx
data
dropped
 clean
There are 16 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\user\toqqx.exe
C:\Users\user\toqqx.exe
 malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\user\toqqx.exe
C:\Users\user\toqqx.exe
 malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
 malicious
C:\Users\user\AppData\Local\Temp\toqqx.exe
C:\Users\user\AppData\Local\Temp\toqqx.exe
 malicious
C:\Users\user\AppData\Local\Temp\toqqx.exe
C:\Users\user\AppData\Local\Temp\toqqx.exe
 malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 clean
C:\Windows\SysWOW64\cmd.exe
'C:\Windows\System32\cmd.exe' /c taskkill /pid 2540 & erase C:\Users\user\AppData\Local\Temp\toqqx.exe & RD /S /Q C:\\ProgramData\\843743064682002\\* & exit
clean
C:\Windows\SysWOW64\taskkill.exe
taskkill /pid 2540
clean
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://198.98.60.43/6.jpg
198.98.60.43
 malicious
http://198.98.60.43/main.php
198.98.60.43
 malicious
http://ocsp.thawte.com0
unknown
 malicious
http://31.210.20.6/3/Sugvt.exe
31.210.20.6
 malicious
http://198.98.60.43/1.jpg
198.98.60.43
 malicious
http://www.mozilla.com0
unknown
 malicious
https://discord.com/
unknown
 malicious
http://198.98.60.43/7.jpg
198.98.60.43
 malicious
http://198.98.60.43/2.jpg
198.98.60.43
 malicious
http://198.98.60.43/
198.98.60.43
 malicious
https://discord.com/2
unknown
 malicious
https://discord.com/6
unknown
 malicious
http://198.98.60.43/3.jpg
198.98.60.43
 malicious
https://discord.com/:
unknown
 malicious
http://198.98.60.43/5.jpg
198.98.60.43
 malicious
http://www.%s.comPA
unknown
 malicious
http://198.98.60.43/4.jpg
198.98.60.43
 malicious
https://duckduckgo.com/chrome_newtab
unknown
 clean
http://www.mozilla.com/en-US/blocklist/
unknown
 clean
https://duckduckgo.com/ac/?q=
unknown
 clean
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
 clean
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
unknown
 clean
https://ac.ecosia.org/autocomplete?q=
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
http://crl.thawte.com/ThawteTimestampingCA.crl0
unknown
 clean
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
unknown
 clean
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
 clean
There are 17 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
198.98.60.43
unknown
United States
malicious
31.210.20.6
unknown
Netherlands
malicious

Registry

Path
Value
Malicious
C:\Users\user\toqqx.exe
Startup
 malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
~46
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
w56
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
n76
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EC4B6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F2C5E
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F2C5E
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
C:\Users\user\toqqx.exe
Startup
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
 clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
 clean
C:\Users\user\AppData\Local\Temp\toqqx.exe
SavedLegacySettings
 clean
C:\Users\user\AppData\Local\Temp\toqqx.exe
SavedLegacySettings
 clean
There are 467 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
A80000
unkown
page read and write
 clean
F60000
unkown
page write copy
 clean
360000
unkown
page readonly
 clean
B10000
unkown image
page readonly
 clean
260000
unkown
page read and write
 clean
89C000
unkown
page read and write
 clean
45C0000
unkown
page readonly
 clean
3A0000
unkown
page read and write
 clean
45BF000
unkown
page read and write
 clean
E2E000
unkown
page read and write | page guard
 clean
7B0000
unkown
page read and write
 clean
5601000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
CD0000
unkown
page readonly
 clean
2FE0000
unkown
page read and write
 clean
C90000
heap private
page execute and read and write
 clean
3E0000
unkown
page read and write
 clean
4B12000
heap private
page read and write
 clean
2BBE000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
47F000
heap default
page read and write
 clean
790000
unkown
page read and write
 clean
1032000
unkown image
page execute read
 clean
3A8000
unkown
page read and write
 clean
7D9000
unkown
page read and write
 clean
A0000
unkown
page read and write
 clean
8E0000
unkown
page read and write
 clean
9E0000
unkown
page readonly
 clean
A60000
unkown
page read and write
 clean
107000
heap default
page read and write
 clean
517000
heap default
page read and write
 clean
4A00000
heap private
page execute and read and write
 clean
175000
unkown
page execute and read and write
 clean
2FE0000
unkown
page read and write
 clean
B10000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
346000
heap private
page read and write
 clean
1020000
unkown image
page readonly
 clean
390000
unkown
page read and write
 clean
48D000
heap default
page read and write
 clean
A70000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
2A6B000
unkown
page read and write
 clean
5D0000
heap default
page read and write
 clean
43D000
heap default
page read and write
 clean
4D3000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
460000
heap private
page read and write
 clean
A60000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
181000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
106A000
unkown image
page readonly
 clean
2C20000
heap private
page read and write
 clean
477000
heap default
page read and write
 clean
105A000
unkown image
page readonly
 clean
829000
unkown
page read and write
 clean
430000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
A00000
unkown
page read and write
 clean
A7D000
unkown
page read and write
 clean
167000
unkown
page execute and read and write
 clean
6F0000
unkown
page readonly
 clean
177000
unkown
page execute and read and write
 clean
820000
unkown
page read and write
 clean
A4E000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
37A0000
heap private
page read and write
 clean
3D0000
unkown
page read and write
 clean
171000
unkown
page read and write
 clean
1020000
unkown image
page readonly
 clean
893000
unkown
page read and write
 clean
990000
unkown
page read and write
 clean
3FE0000
unkown
page readonly
 clean
88D000
unkown
page read and write
 clean
4D1E000
unkown
page read and write
 clean
188000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
3E20000
unkown
page read and write
 clean
A5B000
unkown
page read and write
 clean
C20000
unkown
page read and write
 clean
2CBC000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
8C9000
unkown
page read and write
 clean
170000
heap private
page read and write
 clean
2A7E000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
2BC0000
unkown
page read and write
 clean
88B000
unkown
page read and write
 clean
487000
heap default
page read and write
 clean
294C000
unkown
page read and write
 clean
980000
unkown
page read and write
 clean
790000
unkown
page read and write
 clean
BC4000
unkown
page read and write
 clean
768000
unkown
page read and write
 clean
3A0000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
162000
unkown
page read and write
 clean
A81000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
C0000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
7AB000
unkown
page read and write
 clean
268D000
unkown
page read and write
 clean
2DEF000
unkown
page read and write
 clean
3E00000
unkown
page read and write
 clean
3170000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
17F000
unkown
page read and write
 clean
849000
unkown
page read and write
 clean
B1D000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
850000
unkown
page read and write
 clean
A70000
unkown
page read and write
 clean
3A30000
unkown
page readonly
 clean
760000
unkown
page read and write
 clean
37A4000
heap private
page read and write
 clean
1030000
unkown image
page readonly
 clean
6A0000
heap private
page read and write
 clean
91E000
unkown
page read and write
 clean
24B4000
unkown
page read and write
 clean
24A0000
unkown
page read and write
 clean
2BC0000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
BC5000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
A60000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
DBE000
unkown
page read and write
 clean
6B8000
unkown
page read and write
 clean
A90000
unkown
page read and write
 clean
2521000
unkown
page read and write
 clean
5C6000
heap private
page read and write
 clean
2A74000
unkown
page read and write
 clean
1032000
unkown image
page execute read
 clean
3481000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
A5E000
unkown
page read and write
 clean
49DE000
unkown
page read and write
 clean
179000
unkown
page read and write
 clean
50E000
unkown
page read and write
 clean
15F000
unkown
page read and write
 clean
2BF000
unkown
page read and write
 clean
4ACE000
unkown
page read and write
 clean
3D6000
unkown
page read and write
 clean
48EE000
unkown
page read and write
 clean
B0000
unkown
page read and write
 clean
F0E000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
474000
heap default
page read and write
 clean
B4F000
unkown
page read and write
 clean
9F9000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
3170000
unkown
page read and write
 clean
513E000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
29EF000
unkown
page read and write
 clean
3250000
unkown
page read and write
 clean
173000
unkown
page read and write
 clean
24A5000
unkown
page read and write
 clean
A10000
unkown
page execute and read and write
 clean
A80000
unkown
page read and write
 clean
350000
unkown
page execute and read and write
 clean
6BB10000
unkown image
page readonly
 clean
385000
unkown
page read and write
 clean
166000
unkown
page execute and read and write
 clean
5C0000
unkown
page readonly
 clean
2D70000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
489000
heap default
page read and write
 clean
820000
unkown
page read and write
 clean
EAE000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
AFB000
unkown
page read and write
 clean
15D000
unkown
page execute and read and write
 clean
BD2000
heap private
page read and write
 clean
780000
unkown
page read and write
 clean
7B0000
unkown
page read and write
 clean
26DF000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
25DE000
unkown
page read and write
 clean
1022000
unkown image
page execute read
 clean
2481000
unkown
page read and write
 clean
5A0000
heap private
page read and write
 clean
87A000
unkown
page read and write
 clean
492E000
unkown
page read and write
 clean
B0000
heap default
page read and write
 clean
760000
unkown
page read and write
 clean
59D000
unkown
page read and write
 clean
535E000
unkown
page read and write
 clean
280000
heap private
page read and write
 clean
435000
unkown
page execute and read and write
 clean
5705000
heap private
page read and write
 clean
2470000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
C4D000
unkown
page read and write
 clean
3BF0000
unkown
page read and write
 clean
4C70000
unkown
page readonly
 clean
878000
unkown
page read and write
 clean
3F0000
heap default
page read and write
 clean
A60000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
34E6000
unkown
page read and write
 clean
8C5000
unkown
page read and write
 clean
55FE000
unkown
page read and write | page guard
 clean
2470000
unkown
page read and write
 clean
DA000
unkown
page execute and read and write
 clean
3130000
heap private
page read and write
 clean
3E0000
unkown
page read and write
 clean
5350000
unkown
page read and write
 clean
820000
unkown
page read and write
 clean
360000
unkown
page read and write
 clean
160000
heap private
page read and write
 clean
780000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
16F000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
172000
unkown
page read and write
 clean
AFA000
unkown
page read and write
 clean
5722000
heap private
page read and write
 clean
8B9000
unkown
page read and write
 clean
2A4D000
unkown
page read and write
 clean
4BD000
heap default
page read and write
 clean
BA0000
unkown
page read and write
 clean
76E000
unkown
page read and write
 clean
F10000
unkown
page readonly
 clean
990000
unkown
page read and write
 clean
140000
heap private
page read and write
 clean
AFB000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
275F000
unkown
page read and write
 clean
4964000
heap private
page read and write
 clean
4F30000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
898000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
7D0000
unkown
page read and write
 clean
8FF000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
87A000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
4A1E000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
2C0D000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
7C0000
unkown
page execute and read and write
 clean
7A0000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
1030000
unkown image
page readonly
 clean
1030000
unkown image
page readonly
 clean
A80000
unkown
page read and write
 clean
C00000
unkown
page execute and read and write
 clean
370000
unkown
page read and write
 clean
990000
unkown
page read and write
 clean
810000
unkown
page read and write
 clean
7E7000
heap default
page read and write
 clean
8C8000
unkown
page read and write
 clean
4C0000
unkown
page readonly
 clean
248D000
unkown
page read and write
 clean
7E0000
heap default
page read and write
 clean
4D8000
heap default
page read and write
 clean
2690000
unkown
page read and write
 clean
F0000
unkown
page read and write
 clean
3D0000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
28A0000
heap private
page read and write
 clean
3C0000
unkown
page read and write
 clean
1430000
heap private
page read and write
 clean
750000
unkown
page execute and read and write
 clean
990000
unkown
page read and write
 clean
5140000
unkown
page readonly
 clean
760000
unkown
page read and write
 clean
8BE000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
A37000
unkown
page read and write
 clean
BAB000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
162000
unkown
page read and write
 clean
9E0000
unkown
page read and write
 clean
3576000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
2EC0000
heap private
page read and write
 clean
3B7000
heap default
page read and write
 clean
3BF0000
unkown
page read and write
 clean
D6000
unkown
page execute and read and write
 clean
F8E000
unkown
page read and write
 clean
3F0000
heap default
page read and write
 clean
87A000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
3A9000
unkown
page read and write
 clean
770000
unkown
page read and write
 clean
BAD000
unkown
page read and write
 clean
3250000
unkown
page read and write
 clean
B3000
unkown
page execute and read and write
 clean
760000
unkown
page read and write
 clean
4AF5000
heap private
page read and write
 clean
2800000
unkown
page read and write
 clean
C10000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
BF0000
unkown
page read and write
 clean
8A2000
unkown
page read and write
 clean
950000
heap private
page read and write
 clean
29E8000
unkown
page read and write
 clean
4B0000
unkown
page read and write
 clean
3FC000
heap default
page read and write
 clean
3E0000
unkown
page read and write
 clean
910000
heap private
page execute and read and write
 clean
1070000
unkown
page readonly
 clean
2EA0000
unkown
page read and write
 clean
BD000
unkown
page execute and read and write
 clean
A1A000
unkown
page read and write
 clean
9F0000
unkown
page read and write
 clean
BB4000
heap private
page read and write
 clean
3680000
unkown
page read and write
 clean
88E000
unkown
page read and write
 clean
32B0000
unkown
page read and write
 clean
167000
unkown
page read and write
 clean
165000
unkown
page execute and read and write
 clean
3A0000
unkown
page read and write
 clean
37C2000
heap private
page read and write
 clean
1030000
unkown image
page readonly
 clean
2800000
unkown
page read and write
 clean
14D000
unkown
page execute and read and write
 clean
690000
unkown
page read and write
 clean
87A000
heap default
page read and write
 clean
446000
heap default
page read and write
 clean
1BC000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
B20000
unkown
page read and write
 clean
A2D000
unkown
page read and write
 clean
25E0000
unkown
page readonly
 clean
55FF000
unkown
page read and write
 clean
3D4000
heap default
page read and write
 clean
3BF0000
unkown
page read and write
 clean
435000
unkown
page execute and read and write
 clean
BA0000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
5840000
unkown
page readonly
 clean
780000
unkown
page read and write
 clean
1030000
unkown image
page readonly
 clean
7A0000
unkown
page read and write
 clean
958000
heap private
page read and write
 clean
60900000
unkown image
page readonly
 clean
100000
heap default
page read and write
 clean
2D6E000
unkown
page read and write
 clean
48B000
heap default
page read and write
 clean
3F7000
heap default
page read and write
 clean
99D000
unkown
page read and write
 clean
37F0000
heap private
page read and write
 clean
A6E000
unkown
page read and write
 clean
89C000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
4AF0000
heap private
page execute and read and write
 clean
3A0000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
280000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
105A000
unkown image
page readonly
 clean
780000
unkown
page read and write
 clean
32B0000
heap private
page read and write
 clean
4982000
heap private
page read and write
 clean
3E20000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
896000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
3133000
heap private
page read and write
 clean
3A0000
unkown
page read and write
 clean
8AD000
unkown
page read and write
 clean
30C0000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
F70000
unkown
page readonly
 clean
E2F000
unkown
page read and write
 clean
5E0000
heap private
page execute and read and write
 clean
17C000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
820000
unkown
page read and write
 clean
A7F000
unkown
page read and write
 clean
841000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
452000
heap default
page read and write
 clean
2EA0000
unkown
page read and write
 clean
9AE000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
5070000
unkown
page read and write
 clean
A1A000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
414000
heap default
page read and write
 clean
24C4000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
2693000
unkown
page read and write
 clean
458F000
unkown
page read and write
 clean
489000
heap default
page read and write
 clean
32B0000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
ED000
unkown
page read and write
 clean
185000
unkown
page read and write
 clean
348000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
1032000
unkown image
page execute read
 clean
5B30000
unkown
page readonly
 clean
BA0000
unkown
page read and write
 clean
440000
unkown
page readonly
 clean
400000
unkown
page execute and read and write
 clean
A90000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
370000
unkown
page readonly
 clean
3800000
unkown
page readonly
 clean
8FD000
unkown
page read and write
 clean
89B000
unkown
page read and write
 clean
A3B000
unkown
page read and write
 clean
990000
unkown
page read and write
 clean
390000
unkown
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
27FF000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
464000
heap private
page read and write
 clean
CBE000
unkown
page read and write
 clean
49F000
unkown
page read and write
 clean
16F000
unkown
page read and write
 clean
C10000
unkown image
page readonly
 clean
A60000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
8B9000
unkown
page read and write
 clean
979000
unkown
page read and write
 clean
32B0000
unkown
page read and write
 clean
3B0000
heap default
page read and write
 clean
80000
unkown
page readonly
 clean
60000
unkown
page readonly
 clean
CD000
unkown
page execute and read and write
 clean
4A4000
unkown
page read and write
 clean
B97000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
270000
unkown
page read and write
 clean
16C000
unkown
page read and write
 clean
5F1E000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
3E5000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
5700000
heap private
page read and write
 clean
506E000
unkown
page read and write
 clean
56CE000
unkown
page read and write
 clean
2C20000
heap private
page read and write
 clean
2BC0000
unkown
page read and write
 clean
350000
unkown
page readonly
 clean
591E000
unkown
page read and write | page guard
 clean
39F000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
DC0000
unkown
page readonly
 clean
1022000
unkown image
page execute read
 clean
760000
unkown
page read and write
 clean
38E000
unkown
page read and write
 clean
367D000
unkown
page read and write
 clean
8C0000
unkown
page read and write
 clean
105A000
unkown image
page readonly
 clean
2A6000
unkown
page read and write
 clean
34ED000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
3BF0000
unkown
page read and write
 clean
32B0000
unkown
page read and write
 clean
B34000
unkown
page read and write
 clean
1BB000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
9E1000
unkown
page read and write
 clean
839000
heap default
page read and write
 clean
1BB000
unkown
page read and write
 clean
5601000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
FFE000
unkown
page read and write
 clean
30C0000
unkown
page read and write
 clean
A4B000
unkown
page read and write
 clean
376000
unkown
page read and write
 clean
4FF000
heap default
page read and write
 clean
380000
unkown
page read and write
 clean
D2000
unkown
page read and write
 clean
1032000
unkown image
page execute read
 clean
24A0000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
A90000
unkown
page read and write
 clean
13D000
heap default
page read and write
 clean
3BF0000
unkown
page read and write
 clean
620000
unkown
page readonly
 clean
609E000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
970000
heap private
page read and write
 clean
BE0000
unkown
page readonly
 clean
A80000
unkown
page read and write
 clean
3170000
unkown
page readonly
 clean
970000
unkown
page readonly
 clean
A81000
unkown
page read and write
 clean
9E1000
unkown
page read and write
 clean
820000
unkown
page read and write
 clean
28B0000
heap private
page read and write
 clean
4590000
unkown
page readonly
 clean
4F2C000
unkown
page read and write
 clean
AFB000
unkown
page read and write
 clean
4E8000
heap default
page read and write
 clean
97A000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
30C0000
unkown
page read and write
 clean
1030000
unkown image
page readonly
 clean
A68000
unkown
page read and write
 clean
162000
heap default
page read and write
 clean
C30000
unkown
page read and write
 clean
510000
unkown
page read and write
 clean
4960000
heap private
page read and write
 clean
172000
unkown
page read and write
 clean
3FC000
unkown
page read and write
 clean
A5B000
unkown
page read and write
 clean
FEE000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
16A000
unkown
page read and write
 clean
2A73000
unkown
page read and write
 clean
522E000
unkown
page read and write
 clean
2FE0000
unkown
page write copy
 clean
106A000
unkown image
page readonly
 clean
55FE000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
2800000
unkown
page read and write
 clean
165000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
85B000
unkown
page read and write
 clean
24FC000
unkown
page read and write
 clean
E70000
unkown
page readonly
 clean
370000
unkown
page read and write
 clean
BF0000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
BC4000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
1020000
unkown image
page readonly
 clean
430000
heap default
page read and write
 clean
875000
unkown
page read and write
 clean
9DD000
unkown
page read and write
 clean
89D000
unkown
page read and write
 clean
251F000
unkown
page read and write
 clean
8A2000
unkown
page read and write
 clean
4F0000
unkown
page readonly
 clean
F0E000
unkown
page read and write
 clean
249F000
unkown
page read and write
 clean
120000
unkown
page read and write
 clean
2BC0000
unkown
page read and write
 clean
990000
unkown
page read and write
 clean
2EA0000
unkown
page read and write
 clean
6BF000
unkown
page read and write
 clean
2800000
unkown
page read and write
 clean
29EC000
unkown
page read and write
 clean
176000
heap private
page read and write
 clean
2E60000
heap private
page read and write
 clean
A60000
unkown
page read and write
 clean
C80000
unkown
page readonly
 clean
F6F000
unkown
page read and write
 clean
5A8000
heap private
page read and write
 clean
A30000
unkown
page read and write
 clean
B4000
unkown
page read and write
 clean
770000
unkown
page read and write
 clean
B9E000
unkown
page read and write | page guard
 clean
105A000
unkown image
page readonly
 clean
6C0000
unkown
page readonly
 clean
2481000
unkown
page read and write
 clean
B24000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
B25000
unkown
page read and write
 clean
144000
unkown
page read and write
 clean
3170000
unkown
page read and write
 clean
A1A000
unkown
page read and write
 clean
16B000
unkown
page execute and read and write
 clean
380000
unkown
page read and write
 clean
2FF000
unkown
page read and write
 clean
55D000
unkown
page read and write
 clean
400000
unkown
page execute and read and write
 clean
9E1000
unkown
page read and write
 clean
3E8000
unkown
page read and write
 clean
C0000
heap default
page read and write
 clean
4AF0000
heap private
page read and write
 clean
2AD000
unkown
page read and write
 clean
C5E000
unkown
page read and write
 clean
F2D000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
494000
heap default
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
8DE000
unkown
page read and write
 clean
3250000
unkown
page read and write
 clean
2B9F000
unkown
page read and write
 clean
143000
unkown
page execute and read and write
 clean
2BC0000
unkown
page read and write
 clean
1020000
unkown image
page readonly
 clean
1022000
unkown image
page execute read
 clean
8A3000
unkown
page read and write
 clean
7F0000
unkown
page readonly
 clean
A80000
unkown
page read and write
 clean
2830000
heap private
page read and write
 clean
34BE000
unkown
page read and write
 clean
2800000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
86E000
unkown
page read and write
 clean
380000
unkown
page read and write
 clean
804000
heap default
page read and write
 clean
887000
unkown
page read and write
 clean
181000
unkown
page read and write
 clean
24AF000
unkown
page read and write
 clean
AF7000
unkown
page read and write
 clean
1C0000
unkown
page readonly
 clean
32B0000
unkown
page read and write
 clean
BD4000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
48CE000
unkown
page read and write
 clean
8C7000
unkown
page read and write
 clean
591F000
unkown
page read and write
 clean
168000
unkown
page read and write
 clean
2BC0000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
3170000
unkown
page read and write
 clean
4ED000
heap default
page read and write
 clean
310000
unkown
page read and write
 clean
8B9000
unkown
page read and write
 clean
B4E000
unkown
page read and write
 clean
2A6B000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
150000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
4DF0000
heap private
page read and write
 clean
30C0000
unkown
page read and write
 clean
27FC000
unkown
page read and write
 clean
976000
heap private
page read and write
 clean
BA0000
unkown
page read and write
 clean
2FE0000
unkown
page read and write
 clean
1020000
unkown image
page readonly
 clean
51A000
unkown
page read and write
 clean
200000
unkown
page readonly
 clean
240000
unkown
page readonly
 clean
A81000
unkown
page read and write
 clean
388000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
1AA000
unkown
page read and write
 clean
A60000
unkown
page read and write
 clean
375000
unkown
page read and write
 clean
891000
unkown
page read and write
 clean
17B000
unkown
page execute and read and write
 clean
7A0000
unkown
page read and write
 clean
25BE000
unkown
page read and write
 clean
32AD000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
B50000
unkown
page readonly
 clean
87A000
unkown
page read and write
 clean
A5B000
unkown
page read and write
 clean
3B0000
unkown
page execute and read and write
 clean
1022000
unkown image
page execute read
 clean
16D000
unkown
page read and write
 clean
3E4000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
4A4000
heap default
page read and write
 clean
583E000
unkown
page read and write
 clean
230000
unkown
page readonly
 clean
A60000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
976000
heap private
page read and write
 clean
870000
unkown
page read and write
 clean
175000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
3D5000
unkown
page read and write
 clean
146000
heap default
page read and write
 clean
88C000
unkown
page read and write
 clean
89A000
unkown
page read and write
 clean
160000
unkown
page readonly
 clean
24F5000
unkown
page read and write
 clean
E0000
heap default
page read and write
 clean
A1A000
unkown
page read and write
 clean
30C0000
unkown
page read and write
 clean
A3E000
unkown
page read and write
 clean
170000
unkown
page read and write
 clean
1B0000
unkown
page readonly
 clean
F5E000
unkown
page read and write
 clean
160000
unkown
page read and write
 clean
A30000
unkown
page read and write
 clean
250000
unkown
page readonly
 clean
8CA000
unkown
page read and write
 clean
172000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
370000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
470000
heap default
page read and write
 clean
172000
unkown
page read and write
 clean
5180000
heap private
page read and write
 clean
765000
unkown
page read and write
 clean
A80000
unkown
page read and write
 clean
A1A000
unkown
page read and write
 clean
A19000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
703A0000
unkown image
page readonly
 clean
248D000
unkown
page read and write
 clean
990000
unkown
page read and write
 clean
570000
unkown
page readonly
 clean
186000
unkown
page read and write
 clean
534E000
unkown
page read and write
 clean
4C6C000
unkown
page read and write
 clean
1020000
unkown image
page readonly
 clean
780000
unkown
page read and write
 clean
32BB000
heap private
page read and write
 clean
240000
heap private
page execute and read and write
 clean
BA0000
unkown
page read and write
 clean
3576000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
BA0000
unkown
page read and write
 clean
2517000
unkown
page read and write
 clean
8BA000
unkown
page read and write
 clean
146000
heap private
page read and write
 clean
A1A000
unkown
page read and write
 clean
2800000
unkown
page read and write
 clean
2519000
unkown
page read and write
 clean
2FDF000
unkown
page read and write
 clean
16A000
unkown
page execute and read and write
 clean
2E20000
heap private
page read and write
 clean
3680000
unkown
page read and write
 clean
106A000
unkown image
page readonly
 clean
20000
unkown
page read and write
 clean
34E6000
unkown
page read and write
 clean
D0000
unkown
page read and write
 clean
2BC0000
unkown
page read and write
 clean
82E000
heap default
page read and write
 clean
C19000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
670000
unkown
page readonly
 clean
366F000
unkown
page read and write
 clean
A5A000
unkown
page read and write
 clean
760000
unkown
page read and write
 clean
A65000
unkown
page read and write
 clean
106A000
unkown image
page readonly
 clean
16C000
unkown
page read and write
 clean
3481000
unkown
page read and write
 clean
7E0000
heap private
page read and write
 clean
5BF000
unkown
page read and write
 clean
B9F000
unkown
page read and write
 clean
7A0000
unkown
page read and write
 clean
BB0000
heap private
page read and write
 clean
760000
unkown
page read and write
 clean
97A000
unkown
page read and write
 clean
189000
unkown
page read and write
 clean
384000
unkown
page read and write
 clean
8BD000
unkown
page read and write
 clean
16E000
unkown
page read and write
 clean
5600000
unkown
page read and write
 clean
340000
heap private
page read and write
 clean
A1A000
unkown
page read and write
 clean
B24000
unkown
page read and write
 clean
There are 754 hidden memdumps, click here to show them.