IOCReport

loading gif

Files

File Path
Type
Category
Malicious
IMG_05412_868_21.docx
Microsoft Word 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\44444[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
malicious
C:\Users\user\AppData\Local\Temp\tthxx.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\notpad\notpad.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\tthxx.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E92F7FC7.png
PNG image data, 288 x 424, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{3E742551-7EEA-4C35-A601-2DE7AC9E238F}.tmp
Targa image data - RLE 65536 x 65536 x 0 ""
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4ABA8B27-B28F-4AE5-86AD-026C320EA73C}.tmp
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\IMG_05412_868_21.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:18 2020, mtime=Wed Aug 26 14:08:18 2020, atime=Wed May 5 04:01:37 2021, length=96379, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\Desktop\~$G_05412_868_21.docx
data
dropped
clean
There are 2 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\user\tthxx.exe
C:\Users\user\tthxx.exe
malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\user\tthxx.exe
C:\Users\user\tthxx.exe
malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\user\AppData\Local\Temp\tthxx.exe
C:\Users\user\AppData\Local\Temp\tthxx.exe
malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
clean

URLs

Name
IP
Malicious
http://31.210.20.6/3/44444.exe
31.210.20.6
malicious
http://127.0.0.1:HTTP/1.1
unknown
clean
https://api.ipify.org%GETMozilla/5.0
unknown
clean
https://discord.com/2
unknown
clean
http://DynDns.comDynDNS
unknown
clean
http://www.%s.comPA
unknown
clean
https://discord.com/
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
https://discord.com/6
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
http://mNVnNH.com
unknown
clean
https://discord.com/:
unknown
clean
There are 2 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
31.210.20.6
unknown
Netherlands
malicious

Registry

Path
Value
Malicious
C:\Users\user\tthxx.exe
Startup
malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
!38
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
*48
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
!58
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ED2D9
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F3AA0
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F3AA0
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductNonBootFilesIntl_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
clean
C:\Users\user\tthxx.exe
Startup
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Zoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
CustomZoom
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ShowAll
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Version
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ForceOpen
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDocked
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarShown
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ToolbarDockPos
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MTUpgradeDialog
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Full
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Script
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
ScriptScript
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubSymbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixRowSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MatrixColSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SuperscriptHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubscriptDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LimLineSpacing
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
NumerHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
DenomDepth
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SubFractBarThick
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
FenceOver
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingFactor
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MinGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
RadicalGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EmbellGap
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
PrimeHeight
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SpacingWindow
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
TextLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
MathLanguage
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Text
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Function
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Variable
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
LCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
UCGreek
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Symbol
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Vector
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Number
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User1
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
User2
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
There are 465 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2461000
unkown
page read and write
malicious
270000
unkown
page read and write
clean
20000
unkown
page read and write
clean
276000
unkown
page read and write
clean
4CEE000
unkown
page read and write
clean
935000
unkown
page read and write
clean
516D000
unkown
page read and write
clean
530000
unkown
page read and write
clean
270000
unkown
page read and write
clean
110000
unkown
page read and write
clean
5150000
unkown
page read and write
clean
24EC000
unkown
page read and write
clean
C3D000
heap default
page read and write
clean
5150000
unkown
page read and write
clean
132000
unkown image
page execute read
clean
52F000
unkown
page read and write
clean
BA000
unkown
page read and write
clean
480000
unkown
page readonly
clean
BCC000
heap default
page read and write
clean
552000
heap private
page read and write
clean
654000
heap default
page read and write
clean
5A0000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
8DD000
unkown
page read and write
clean
C0000
unkown
page readonly
clean
5E1E000
unkown
page read and write
clean
4A9000
unkown
page read and write
clean
4E2000
heap private
page read and write
clean
443E000
unkown
page read and write
clean
20000
unkown
page read and write
clean
BC0000
heap default
page read and write
clean
5350000
unkown
page write copy
clean
342F000
unkown
page read and write
clean
16B000
unkown
page execute and read and write
clean
930000
unkown
page read and write
clean
1E2000
unkown
page read and write
clean
2A5000
unkown
page execute and read and write
clean
4B4F000
unkown
page read and write
clean
770000
heap default
page read and write
clean
530000
unkown
page read and write
clean
5FD000
heap default
page read and write
clean
553E000
unkown
page read and write
clean
18D000
unkown
page execute and read and write
clean
275000
unkown
page read and write
clean
64DF000
unkown
page read and write
clean
250000
unkown
page execute and read and write
clean
57C0000
unkown
page readonly
clean
2285000
heap private
page read and write
clean
930000
unkown
page read and write
clean
5C0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
2E0000
unkown
page execute and read and write
clean
150000
unkown
page read and write
clean
930000
unkown
page read and write
clean
239000
unkown
page read and write
clean
1F8D000
unkown
page read and write
clean
1C6000
heap private
page read and write
clean
930000
unkown
page read and write
clean
678000
heap default
page read and write
clean
810000
heap private
page execute and read and write
clean
840000
unkown
page readonly
clean
200000
unkown
page read and write
clean
290000
unkown
page read and write
clean
200000
unkown
page read and write
clean
500000
unkown
page read and write
clean
543F000
unkown
page read and write
clean
58CD000
unkown
page read and write
clean
275000
unkown
page read and write
clean
296000
unkown
page execute and read and write
clean
4C4000
heap private
page read and write
clean
270000
unkown
page read and write
clean
940000
unkown image
page readonly
clean
280000
unkown
page read and write
clean
5B0000
heap private
page read and write
clean
530000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
156000
unkown
page execute and read and write
clean
270000
unkown
page read and write
clean
245A000
unkown
page read and write
clean
229D000
unkown
page read and write
clean
52F2000
heap private
page read and write
clean
920000
unkown
page execute and read and write
clean
516E000
unkown
page read and write
clean
4E0000
unkown
page execute and read and write
clean
F0000
unkown
page read and write
clean
270000
unkown
page read and write
clean
2AB000
unkown
page execute and read and write
clean
24EE000
unkown
page read and write
clean
5A80000
unkown
page read and write
clean
1B0000
unkown
page read and write
clean
53E000
unkown
page read and write
clean
215000
unkown
page read and write
clean
130000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
990000
heap private
page execute and read and write
clean
930000
unkown
page read and write
clean
3FD000
unkown
page read and write
clean
540000
heap private
page execute and read and write
clean
534000
heap private
page read and write
clean
5B0000
heap default
page read and write
clean
4A0000
unkown
page read and write
clean
200000
heap private
page read and write
clean
510000
unkown
page read and write
clean
49E000
unkown
page read and write
clean
3331000
unkown
page read and write
clean
270000
unkown
page read and write
clean
270000
unkown
page read and write
clean
473F000
unkown
page read and write
clean
535000
unkown
page read and write
clean
4984000
heap private
page read and write
clean
5D4000
heap default
page read and write
clean
3A0000
unkown
page read and write
clean
229B000
unkown
page read and write
clean
530000
unkown
page read and write
clean
4FDE000
unkown
page read and write
clean
275000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
24C9000
unkown
page read and write
clean
530000
unkown
page read and write
clean
3287000
unkown
page read and write
clean
270000
unkown
page read and write
clean
230000
unkown
page read and write
clean
64E000
heap default
page read and write
clean
230000
unkown
page read and write
clean
12D000
unkown
page execute and read and write
clean
27D000
unkown
page read and write
clean
227E000
unkown
page read and write
clean
1C3000
unkown
page execute and read and write
clean
270000
unkown
page read and write
clean
2A2000
unkown
page read and write
clean
220000
unkown
page read and write
clean
1DD000
unkown
page execute and read and write
clean
4A0000
unkown
page read and write
clean
2150000
unkown
page readonly
clean
2802000
unkown
page read and write
clean
162000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
60C000
heap default
page read and write
clean
2030000
heap private
page execute and read and write
clean
270000
unkown
page read and write
clean
3461000
unkown
page read and write
clean
4B0000
unkown
page readonly
clean
78F000
unkown
page read and write
clean
210000
unkown
page read and write
clean
2461000
unkown
page read and write
clean
27B000
unkown
page read and write
clean
5E0000
unkown
page execute and read and write
clean
930000
unkown
page read and write
clean
BA4000
heap default
page read and write
clean
4D0000
unkown
page read and write
clean
270000
unkown
page read and write
clean
230000
unkown
page read and write
clean
930000
unkown
page read and write
clean
930000
unkown
page read and write
clean
B50000
unkown
page readonly
clean
270000
unkown
page read and write
clean
152000
unkown
page read and write
clean
930000
unkown
page read and write
clean
4B0000
unkown
page read and write
clean
24B1000
unkown
page read and write
clean
32E7000
unkown
page read and write
clean
270000
unkown
page read and write
clean
530000
unkown
page read and write
clean
530000
unkown
page read and write
clean
5780000
unkown
page readonly
clean
4E6E000
unkown
page read and write
clean
290000
unkown
page read and write
clean
167000
unkown
page execute and read and write
clean
990000
unkown image
page readonly
clean
5C7F000
unkown
page read and write
clean
578E000
unkown
page read and write
clean
275000
unkown
page read and write
clean
B87000
heap default
page read and write
clean
C61000
heap default
page read and write
clean
930000
unkown
page read and write
clean
275000
unkown
page read and write
clean
530000
unkown
page read and write
clean
3B5000
unkown
page read and write
clean
170000
heap private
page read and write
clean
9A0000
unkown
page readonly
clean
270000
unkown
page read and write
clean
C1E000
heap default
page read and write
clean
61A000
heap default
page read and write
clean
205000
unkown
page read and write
clean
497E000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
210000
unkown
page read and write
clean
27FE000
unkown
page read and write
clean
432E000
unkown
page read and write
clean
270000
unkown
page read and write
clean
270000
unkown
page read and write
clean
7C3000
heap default
page read and write
clean
290000
unkown
page read and write
clean
2280000
heap private
page read and write
clean
940000
unkown image
page readonly
clean
270000
unkown
page read and write
clean
1EA000
unkown
page execute and read and write
clean
290000
unkown
page read and write
clean
320000
unkown
page read and write
clean
930000
unkown
page read and write
clean
1F30000
unkown
page read and write
clean
4B2E000
unkown
page read and write
clean
270000
unkown
page read and write
clean
43BD000
unkown
page read and write
clean
4A9E000
unkown
page read and write
clean
940000
unkown image
page readonly
clean
276000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
4880000
unkown
page readonly
clean
4A0000
unkown
page read and write
clean
682000
heap default
page read and write
clean
291B000
unkown
page read and write
clean
4460000
unkown
page readonly
clean
200000
unkown
page read and write
clean
300000
heap private
page read and write
clean
2E0000
heap private
page execute and read and write
clean
530000
heap private
page read and write
clean
5C0000
unkown
page read and write
clean
4E70000
unkown
page readonly
clean
123000
unkown
page execute and read and write
clean
1CD000
unkown
page execute and read and write
clean
2211000
unkown
page read and write
clean
930000
unkown
page read and write
clean
737000
heap default
page read and write
clean
4C8C000
unkown
page read and write
clean
92E000
unkown
page read and write
clean
530000
unkown
page read and write
clean
2283000
unkown
page read and write
clean
270000
unkown
page read and write
clean
48BF000
unkown
page read and write
clean
990000
unkown image
page readonly
clean
940000
unkown image
page readonly
clean
292000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
3469000
unkown
page read and write
clean
270000
unkown
page read and write
clean
276000
unkown
page read and write
clean
504D000
unkown
page read and write
clean
210000
unkown
page read and write
clean
15A000
unkown
page execute and read and write
clean
402000
unkown
page execute and read and write
clean
4550000
unkown
page readonly
clean
930000
unkown
page read and write
clean
210000
unkown
page read and write
clean
5F0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
207000
heap private
page read and write
clean
930000
unkown
page read and write
clean
9D0000
unkown
page readonly
clean
270000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
930000
unkown
page read and write
clean
3D0000
unkown
page read and write
clean
930000
unkown
page read and write
clean
20F6000
heap private
page read and write
clean
270000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
292000
unkown
page read and write
clean
942000
unkown image
page execute read
clean
4D3C000
unkown
page read and write
clean
275000
unkown
page read and write
clean
29A000
unkown
page execute and read and write
clean
80000
unkown
page readonly
clean
288000
unkown
page read and write
clean
16D000
unkown
page execute and read and write
clean
5B7000
heap default
page read and write
clean
730000
heap default
page read and write
clean
5A8A000
unkown
page read and write
clean
270000
unkown
page read and write
clean
530000
unkown
page read and write
clean
235E000
unkown
page read and write
clean
930000
unkown
page read and write
clean
5BD000
heap default
page read and write
clean
7EE000
unkown
page read and write
clean
4D10000
heap private
page read and write
clean
140000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
232F000
unkown
page read and write
clean
164000
unkown
page read and write
clean
580000
unkown
page read and write
clean
942000
unkown image
page execute read
clean
5A0000
unkown
page read and write
clean
20BE000
unkown
page read and write
clean
4D32000
heap private
page read and write
clean
942000
unkown image
page execute read
clean
930000
unkown
page read and write
clean
580000
unkown
page read and write
clean
1C4000
unkown
page read and write
clean
590000
heap default
page read and write
clean
180000
unkown image
page readonly
clean
49A2000
heap private
page read and write
clean
1F30000
unkown
page read and write
clean
270000
unkown
page read and write
clean
438000
unkown
page read and write
clean
270000
unkown
page read and write
clean
1E0000
unkown
page execute and read and write
clean
490000
unkown
page read and write
clean
2F0000
unkown
page read and write
clean
55EE000
unkown
page read and write | page guard
clean
477E000
unkown
page read and write
clean
4740000
unkown
page readonly
clean
4A0000
unkown
page execute and read and write
clean
77E000
heap default
page read and write
clean
20D8000
heap private
page read and write
clean
580000
unkown
page read and write
clean
55EF000
unkown
page read and write
clean
5390000
unkown
page read and write
clean
14D000
unkown
page execute and read and write
clean
4A0000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
5170000
unkown
page read and write
clean
2170000
heap private
page read and write
clean
5D2C000
unkown
page read and write
clean
214000
unkown
page read and write
clean
245D000
unkown
page read and write
clean
100000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
270000
unkown
page read and write
clean
530000
unkown
page read and write
clean
270000
unkown
page read and write
clean
163000
unkown
page execute and read and write
clean
1E7000
unkown
page execute and read and write
clean
4330000
unkown
page readonly
clean
275000
unkown
page read and write
clean
530000
unkown
page read and write
clean
270000
unkown
page read and write
clean
276000
unkown
page read and write
clean
1A0000
heap private
page read and write
clean
260000
unkown
page read and write
clean
538E000
unkown
page read and write
clean
290000
unkown
page read and write
clean
200000
unkown
page read and write
clean
5BA000
heap default
page read and write
clean
557F000
unkown
page read and write
clean
270000
unkown
page read and write
clean
530000
unkown
page read and write
clean
680000
heap default
page read and write
clean
930000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
2D0000
unkown
page readonly
clean
230000
unkown
page read and write
clean
3A0000
unkown
page read and write
clean
3211000
unkown
page read and write
clean
1A8000
heap private
page read and write
clean
20D0000
heap private
page read and write
clean
275000
unkown
page read and write
clean
CF0000
unkown
page readonly
clean
4D15000
heap private
page read and write
clean
3389000
unkown
page read and write
clean
218000
unkown
page read and write
clean
500000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
210000
unkown
page read and write
clean
2331000
unkown
page read and write
clean
2920000
unkown
page read and write
clean
4C0000
heap private
page read and write
clean
940000
unkown image
page readonly
clean
130000
unkown image
page readonly
clean
B80000
heap default
page read and write
clean
492D000
unkown
page read and write
clean
275000
unkown
page read and write
clean
20000
unkown
page read and write
clean
80C000
heap default
page read and write
clean
4A0000
unkown
page read and write
clean
275000
unkown
page read and write
clean
180000
unkown image
page readonly
clean
500000
unkown
page read and write
clean
5790000
unkown
page read and write
clean
4A1E000
unkown
page read and write
clean
240000
unkown
page read and write
clean
318000
unkown
page read and write
clean
530000
unkown
page read and write
clean
930000
unkown
page read and write
clean
27FA000
unkown
page read and write
clean
4980000
heap private
page read and write
clean
230000
unkown
page read and write
clean
942000
unkown image
page execute read
clean
930000
unkown
page read and write
clean
2CE000
unkown
page read and write
clean
130000
heap private
page read and write
clean
520000
heap private
page execute and read and write
clean
93E000
unkown
page read and write
clean
22A2000
heap private
page read and write
clean
5A0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
2A7000
unkown
page execute and read and write
clean
1DB000
unkown
page read and write
clean
270000
unkown
page read and write
clean
82B000
heap default
page read and write
clean
5A0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
5430000
heap private
page read and write
clean
27C000
unkown
page read and write
clean
14B000
unkown
page read and write
clean
5F0000
heap default
page read and write
clean
590000
unkown
page read and write
clean
270000
unkown
page read and write
clean
530000
unkown
page read and write
clean
61EE000
unkown
page read and write
clean
3E0000
heap default
page read and write
clean
22D0000
heap private
page execute and read and write
clean
500000
unkown
page read and write
clean
990000
unkown image
page readonly
clean
470000
unkown
page readonly
clean
930000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
1F7000
unkown
page execute and read and write
clean
130000
unkown image
page readonly
clean
514F000
unkown
page read and write
clean
132000
unkown image
page execute read
clean
487E000
unkown
page read and write
clean
530000
unkown
page read and write
clean
294000
unkown
page read and write
clean
990000
unkown image
page readonly
clean
59E000
unkown
page read and write
clean
500000
unkown
page readonly
clean
3C0000
unkown
page read and write
clean
530000
unkown
page read and write
clean
45AE000
unkown
page read and write
clean
270000
unkown
page read and write
clean
5740000
heap private
page read and write
clean
4D40000
unkown
page readonly
clean
270000
unkown
page read and write
clean
938000
unkown
page read and write
clean
24E4000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
214E000
unkown
page read and write
clean
500000
unkown
page read and write
clean
270000
unkown
page read and write
clean
688000
heap default
page read and write
clean
270000
unkown
page read and write
clean
830000
unkown
page readonly
clean
190000
unkown
page read and write
clean
3C0000
unkown
page read and write
clean
4440000
unkown
page readonly
clean
4C0000
heap private
page read and write
clean
397000
unkown
page read and write
clean
275000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
80000
unkown
page readonly
clean
5A0000
unkown
page read and write
clean
270000
unkown
page read and write
clean
1FB000
unkown
page execute and read and write
clean
6B0000
unkown
page readonly
clean
530000
unkown
page read and write
clean
1FB0000
heap private
page execute and read and write
clean
3B0000
unkown
page read and write
clean
221E000
unkown
page read and write
clean
206000
unkown
page read and write
clean
1D0000
unkown
page read and write
clean
245F000
unkown
page read and write
clean
270000
unkown
page read and write
clean
4C00000
unkown
page readonly
clean
5D30000
unkown
page readonly
clean
610000
heap default
page read and write
clean
940000
unkown image
page readonly
clean
BEA000
heap default
page read and write
clean
52D0000
heap private
page read and write
clean
278000
unkown
page read and write
clean
150000
unkown
page read and write
clean
797000
heap default
page read and write
clean
5D0000
unkown
page read and write
clean
232E000
unkown
page read and write | page guard
clean
210000
unkown
page read and write
clean
530000
unkown
page read and write
clean
1F30000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
930000
unkown
page read and write
clean
530000
unkown
page read and write
clean
270000
unkown
page read and write
clean
754000
heap default
page read and write
clean
428000
unkown
page read and write
clean
124000
unkown
page read and write
clean
270000
unkown
page read and write
clean
270000
unkown
page read and write
clean
538000
unkown
page read and write
clean
500000
unkown
page read and write
clean
77A000
heap default
page read and write
clean
3B6000
unkown
page read and write
clean
245E000
unkown
page read and write | page guard
clean
454F000
unkown
page read and write
clean
210000
unkown
page read and write
clean
930000
unkown
page read and write
clean
280000
heap private
page read and write
clean
68E000
unkown
page read and write
clean
180000
unkown
page read and write
clean
530000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
4AED000
unkown
page read and write
clean
4BC0000
heap private
page execute and read and write
clean
3C5000
unkown
page read and write
clean
270000
unkown
page read and write
clean
3C4000
unkown
page read and write
clean
4BFF000
unkown
page read and write
clean
C63000
heap default
page read and write
clean
930000
unkown
page read and write
clean
270000
unkown
page read and write
clean
693000
heap default
page read and write
clean
270000
unkown
page read and write
clean
7FE000
heap default
page read and write
clean
530000
unkown
page read and write
clean
530000
unkown
page read and write
clean
B20000
unkown
page readonly
clean
290000
unkown
page read and write
clean
530000
unkown
page read and write
clean
1F40000
unkown
page read and write
clean
3C8000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
930000
unkown
page read and write
clean
52D5000
heap private
page read and write
clean
165000
unkown
page execute and read and write
clean
275000
unkown
page read and write
clean
There are 506 hidden memdumps, click here to show them.