IOCReport

loading gif

Files

File Path
Type
Category
Malicious
sample1.doc
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: User, Template: Normal.dotm, Last Saved By: kirin, Revision Number: 7, Name of Creating Application: Microsoft Office Word, Total Editing Time: 20:00, Create Time/Date: Sun May 10 01:31:00 2020, Last Saved Time/Date: Wed Oct 28 04:44:00 2020, Number of Pages: 2, Number of Words: 89482, Number of Characters: 510049, Security: 0
initial sample
 malicious
C:\Users\Public\Ksh1.pdf
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0001.doc
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0002.doc
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0003.doc
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0005.doc
ASCII text, with very long lines, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0291.doc
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRD0416.doc
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{D50EB3E9-B04E-4308-B886-6463077025FE}.tmp
data
dropped
 clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F52B8A12-B174-499E-B3BD-E7523F18DF93}.tmp
data
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Ksh1.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu May 27 06:17:39 2021, mtime=Thu May 27 06:17:39 2021, atime=Thu May 27 06:17:41 2021, length=595972, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Public.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Jul 14 02:20:08 2009, mtime=Thu May 27 06:17:39 2021, atime=Thu May 27 06:17:39 2021, length=4096, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\sample1.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu May 27 06:16:25 2021, mtime=Thu May 27 06:16:25 2021, atime=Thu May 27 06:16:31 2021, length=856064, window=hide
dropped
 clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
 clean
C:\Users\user\Desktop\~$ample1.doc
data
dropped
 clean
C:\Users\Public\~$Ksh1.doc
data
dropped
 clean
C:\Users\Public\~$Ksh1.xls
data
dropped
 clean
C:\Users\Public\~WRD0000.tmp
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
C:\Users\Public\~WRD0004.tmp
ASCII text, with very long lines, with CRLF line terminators
dropped
 clean
There are 10 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
 malicious
C:\Windows\System32\certutil.exe
Certutil -decode C:\Users\Public\Ksh1.xls C:\Users\Public\Ksh1.pdf
 malicious
C:\Users\user\AppData\Local\Temp\tmp_e473b4.exe
C:\Users\user\AppData\Local\Temp/tmp_e473b4.exe
 malicious
C:\Windows\SysWOW64\mfcm140\normaliz.exe
C:\Windows\SysWOW64\mfcm140\normaliz.exe
 malicious
C:\Windows\SysWOW64\clip\mmcshext.exe
C:\Windows\SysWOW64\clip\mmcshext.exe
 malicious
C:\Windows\SysWOW64\regedt32\ir50_qcx.exe
C:\Windows\SysWOW64\regedt32\ir50_qcx.exe
 malicious
C:\Windows\SysWOW64\KBDNEPR\dhcpcmonitor.exe
C:\Windows\SysWOW64\KBDNEPR\dhcpcmonitor.exe
 malicious
C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0\adsmsext.exe
C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0\adsmsext.exe
 malicious
C:\Windows\SysWOW64\oleaccrc\TSChannel.exe
C:\Windows\SysWOW64\oleaccrc\TSChannel.exe
 malicious
C:\Windows\SysWOW64\iprtrmgr\qdvd.exe
C:\Windows\SysWOW64\iprtrmgr\qdvd.exe
 malicious
C:\Windows\SysWOW64\whhelper\msvcp120_clr0400.exe
C:\Windows\SysWOW64\whhelper\msvcp120_clr0400.exe
 malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
 clean
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://91.121.87.90:8080/KFDwQljVkxD3/OOFcmzcP5LKdqC/7kx60YXntHFlDt/5Rmtlx5Mir4E2nTGMFj/vs6RDbQfHrygTYrI/
91.121.87.90
 malicious
http://177.130.51.198/43z7rPqPirmV4qB/AthcoPDmU/Q4ILc7kQKSHycUR/pIpU/8iSRPWx/wgrz9ygVvehFY9FxG0/
177.130.51.198
 malicious
http://www.%s.comPA
unknown
 clean
https://pornthash.mobi/videos/tayna_tung
unknown
 clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
 clean
https://pornthash.mobi/videos/tayna_tung%temp%/tmp_e473b4.exex
unknown
 clean

IPs

IP
Domain
Country
Malicious
126.126.139.26
unknown
Japan
malicious
203.153.216.178
unknown
Indonesia
malicious
104.131.144.215
unknown
United States
malicious
143.95.101.72
unknown
United States
malicious
162.144.145.58
unknown
United States
malicious
180.23.53.200
unknown
Japan
malicious
190.164.135.81
unknown
Chile
malicious
45.239.204.100
unknown
Brazil
malicious
37.187.100.220
unknown
France
malicious
190.85.46.52
unknown
Colombia
malicious
88.247.58.26
unknown
Turkey
malicious
190.194.12.132
unknown
Argentina
malicious
103.80.51.61
unknown
Thailand
malicious
82.78.179.117
unknown
Romania
malicious
188.226.165.170
unknown
European Union
malicious
213.165.178.214
unknown
Malta
malicious
119.92.77.17
unknown
Philippines
malicious
46.105.131.68
unknown
France
malicious
47.154.85.229
unknown
United States
malicious
192.163.221.191
unknown
United States
malicious
190.117.101.56
unknown
Peru
malicious
190.192.39.136
unknown
Argentina
malicious
157.7.164.178
unknown
Japan
malicious
115.79.59.157
unknown
Viet Nam
malicious
192.241.220.183
unknown
United States
malicious
113.203.238.130
unknown
Pakistan
malicious
78.186.65.230
unknown
Turkey
malicious
46.32.229.152
unknown
United Kingdom
malicious
172.193.79.237
unknown
Australia
malicious
51.38.50.144
unknown
France
malicious
190.55.186.229
unknown
Argentina
malicious
60.125.114.64
unknown
Japan
malicious
94.212.52.40
unknown
Netherlands
malicious
58.27.215.3
unknown
Pakistan
malicious
41.185.29.128
unknown
South Africa
malicious
91.75.75.46
unknown
United Arab Emirates
malicious
95.76.142.243
unknown
Romania
malicious
27.83.209.210
unknown
Japan
malicious
2.58.16.86
unknown
Latvia
malicious
221.147.142.214
unknown
Korea Republic of
malicious
188.166.220.180
unknown
Netherlands
malicious
115.79.195.246
unknown
Viet Nam
malicious
118.33.121.37
unknown
Korea Republic of
malicious
188.40.170.197
unknown
Germany
malicious
179.5.118.12
unknown
El Salvador
malicious
36.91.44.183
unknown
Indonesia
malicious
192.210.217.94
unknown
United States
malicious
85.75.49.113
unknown
Greece
malicious
223.17.215.76
unknown
Hong Kong
malicious
185.208.226.142
unknown
Hungary
malicious
41.76.213.144
unknown
South Africa
malicious
75.127.14.170
unknown
United States
malicious
172.96.190.154
unknown
Canada
malicious
91.121.87.90
unknown
France
malicious
109.206.139.119
unknown
Russian Federation
malicious
103.229.73.17
unknown
Indonesia
malicious
178.33.167.120
unknown
France
malicious
43.255.175.197
unknown
Malaysia
malicious
5.79.70.250
unknown
Netherlands
malicious
120.51.34.254
unknown
Japan
malicious
125.200.20.233
unknown
Japan
malicious
103.93.220.182
unknown
Philippines
malicious
37.205.9.252
unknown
Czech Republic
malicious
118.243.83.70
unknown
Japan
malicious
172.105.78.244
unknown
United States
malicious
123.216.134.52
unknown
Japan
malicious
91.213.106.100
unknown
Latvia
malicious
37.46.129.215
unknown
Russian Federation
malicious
121.117.147.153
unknown
Japan
malicious
110.37.224.243
unknown
Pakistan
malicious
180.148.4.130
unknown
Viet Nam
malicious
113.161.148.81
unknown
Viet Nam
malicious
116.202.10.123
unknown
Germany
malicious
177.130.51.198
unknown
Brazil
malicious
153.229.219.1
unknown
Japan
malicious
203.56.191.129
unknown
Australia
malicious
180.21.3.52
unknown
Japan
malicious
54.38.143.245
unknown
France
malicious
77.74.78.80
unknown
Russian Federation
malicious
8.4.9.137
unknown
United States
malicious
79.133.6.236
unknown
Finland
malicious
202.29.237.113
unknown
Thailand
malicious
185.80.172.199
unknown
Azerbaijan
malicious
74.208.173.91
unknown
United States
malicious
116.91.240.96
unknown
Japan
malicious
139.59.61.215
unknown
Singapore
malicious
212.198.71.39
unknown
France
malicious
175.103.38.146
unknown
Indonesia
malicious
50.116.78.109
unknown
United States
malicious
109.13.179.195
unknown
France
malicious
42.200.96.63
unknown
Hong Kong
malicious
73.100.19.104
unknown
United States
malicious
24.231.51.190
unknown
Bahamas
malicious
190.151.5.131
unknown
Chile
malicious
113.193.239.51
unknown
India
malicious
185.142.236.163
unknown
Netherlands
malicious
198.20.228.9
unknown
United States
malicious
139.59.12.63
unknown
Singapore
malicious
73.55.128.120
unknown
United States
malicious
91.83.93.103
unknown
Hungary
malicious
There are 90 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
l;8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
%<8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
==8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EBB44
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F2EFC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 21
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Max Display
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 21
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FC458
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 21
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 22
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 1
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 2
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 4
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 5
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 6
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 7
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 8
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 9
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 10
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 11
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 12
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 13
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 14
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 15
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 16
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 17
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 18
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 19
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 20
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 21
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Item 22
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FC7A3
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F2EFC
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FC458
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
 clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
 clean
C:\Windows\SysWOW64\whhelper\msvcp120_clr0400.exe
SavedLegacySettings
 clean
There are 408 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
688000
unkown
page read and write
 malicious
5B8000
unkown
page read and write
 malicious
331000
unkown
page execute read
 malicious
5B6000
heap default
page read and write
 malicious
4F1000
unkown
page execute read
 malicious
2B4000
heap default
page read and write
 malicious
3F1000
unkown
page execute read
 malicious
574000
heap default
page read and write
 malicious
471000
unkown
page execute read
 malicious
3F1000
unkown
page execute read
 malicious
504000
heap default
page read and write
 malicious
2F8000
unkown
page read and write
 malicious
2F6000
heap default
page read and write
 malicious
548000
unkown
page read and write
 malicious
686000
heap default
page read and write
 malicious
2B8000
unkown
page read and write
 malicious
5B8000
unkown
page read and write
 malicious
641000
unkown
page execute read
 malicious
274000
heap default
page read and write
 malicious
1C61000
unkown
page execute read
 malicious
658000
unkown
page read and write
 malicious
926000
heap default
page read and write
 malicious
614000
heap default
page read and write
 malicious
2F8000
unkown
page read and write
 malicious
291000
unkown
page execute read
 malicious
3F1000
unkown
page execute read
 malicious
928000
unkown
page read and write
 malicious
18F000
unkown
page read and write
 clean
349F000
unkown
page read and write
 clean
2380000
unkown
page readonly
 clean
422000
unkown image
page execute and read and write
 clean
42D000
unkown image
page readonly
 clean
937000
unkown
page read and write
 clean
423000
unkown image
page execute read
 clean
2ADF000
unkown
page read and write
 clean
3980000
unkown
page write copy
 clean
25E2000
heap private
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
574000
heap default
page read and write
 clean
90000
unkown
page read and write
 clean
3D7000
heap default
page read and write
 clean
2E2A000
unkown
page read and write
 clean
266000
heap private
page read and write
 clean
42D000
unkown image
page readonly
 clean
2A3E000
unkown
page read and write
 clean
40D000
heap default
page read and write
 clean
639000
unkown
page read and write
 clean
3FD000
unkown
page read and write
 clean
730000
unkown
page readonly
 clean
401000
unkown image
page execute read
 clean
2C0000
heap private
page read and write
 clean
2E86000
unkown
page read and write
 clean
1E10000
unkown
page read and write
 clean
281F000
unkown
page read and write
 clean
2EDC000
unkown
page read and write
 clean
18A000
unkown
page read and write
 clean
697000
unkown
page read and write
 clean
780000
unkown
page readonly
 clean
960000
unkown
page readonly
 clean
460000
unkown
page execute and read and write
 clean
2B4D000
unkown
page read and write
 clean
1B80000
unkown
page read and write
 clean
8E6000
heap private
page read and write
 clean
400000
unkown image
page readonly
 clean
8B0000
unkown
page readonly
 clean
650000
heap default
page read and write
 clean
2E80000
unkown
page readonly
 clean
382B000
unkown
page read and write
 clean
3050000
unkown
page readonly
 clean
2CAF000
unkown
page read and write
 clean
220000
unkown
page readonly
 clean
2CEF000
unkown
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
3BEF000
unkown
page read and write
 clean
26000
heap private
page read and write
 clean
2E01000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
390000
unkown
page readonly
 clean
23F9000
heap private
page read and write
 clean
1E2000
heap private
page read and write
 clean
371F000
unkown
page read and write
 clean
2820000
heap private
page read and write
 clean
38D0000
unkown
page readonly
 clean
37B3000
unkown
page read and write
 clean
51F000
unkown
page read and write
 clean
340000
heap default
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
2E50000
unkown
page readonly
 clean
37A0000
unkown
page read and write
 clean
297000
heap default
page read and write
 clean
33D000
unkown
page read and write
 clean
21FE000
unkown
page read and write
 clean
2CB0000
unkown
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
18A000
unkown
page read and write
 clean
320000
unkown
page execute and read and write
 clean
58B000
unkown
page read and write
 clean
2EF0000
unkown
page readonly
 clean
250000
unkown
page readonly
 clean
1CC0000
unkown
page read and write
 clean
2580000
unkown
page read and write
 clean
2A0000
heap default
page read and write
 clean
4E0000
heap default
page read and write
 clean
2702000
heap private
page read and write
 clean
42A000
unkown image
page read and write
 clean
470000
unkown
page read and write
 clean
550000
heap default
page read and write
 clean
3DF000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
18F000
unkown
page read and write
 clean
1DB0000
unkown
page read and write
 clean
2520000
heap private
page read and write
 clean
2B3E000
unkown
page read and write
 clean
1E0000
heap default
page read and write
 clean
2ED9000
unkown
page read and write
 clean
2C50000
unkown
page read and write
 clean
2814000
heap private
page read and write
 clean
3827000
unkown
page read and write
 clean
2560000
heap private
page read and write
 clean
3860000
unkown
page readonly
 clean
2EB1000
unkown
page read and write
 clean
353F000
unkown
page read and write
 clean
5E0000
unkown
page readonly
 clean
2C7000
heap default
page read and write
 clean
396F000
unkown
page read and write
 clean
2EF0000
unkown
page readonly
 clean
422000
unkown image
page execute and read and write
 clean
27FC000
unkown
page read and write
 clean
399D000
unkown
page read and write
 clean
257000
heap default
page read and write
 clean
220000
unkown
page execute read
 clean
28E0000
heap private
page read and write
 clean
2EB7000
unkown
page read and write
 clean
39DF000
unkown
page read and write
 clean
34DF000
unkown
page read and write
 clean
557000
heap default
page read and write
 clean
1B0000
unkown
page readonly
 clean
2DEB000
unkown
page read and write
 clean
3F0000
heap private
page read and write
 clean
2E8000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
42A000
unkown image
page read and write
 clean
8C7000
heap default
page read and write
 clean
2F05000
unkown
page read and write
 clean
1F20000
heap private
page read and write
 clean
2D3D000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
24D000
unkown
page read and write
 clean
2EB1000
unkown
page read and write
 clean
2A50000
unkown
page read and write
 clean
42D000
unkown image
page readonly
 clean
363E000
unkown
page read and write
 clean
361E000
unkown
page read and write
 clean
66F000
heap default
page read and write
 clean
1E80000
unkown
page readonly
 clean
620000
unkown
page execute and read and write
 clean
34EE000
unkown
page read and write
 clean
557000
unkown
page read and write
 clean
3A0000
unkown
page readonly
 clean
2910000
unkown
page readonly
 clean
20000
unkown
page read and write
 clean
33BE000
unkown
page read and write
 clean
3C9F000
unkown
page read and write
 clean
2569000
heap private
page read and write
 clean
345F000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
2ED9000
unkown
page read and write
 clean
3A0000
heap private
page read and write
 clean
42D000
unkown image
page readonly
 clean
25AE000
unkown
page read and write
 clean
384F000
unkown
page read and write
 clean
460000
unkown
page readonly
 clean
4F0000
unkown
page read and write
 clean
2679000
heap private
page read and write
 clean
360000
unkown
page execute and read and write
 clean
880000
unkown
page read and write
 clean
3819000
unkown
page read and write
 clean
76E000
unkown
page read and write
 clean
8D7000
heap private
page read and write
 clean
460000
unkown
page readonly
 clean
909000
unkown
page read and write
 clean
1C6F000
unkown
page readonly
 clean
2F50000
heap private
page read and write
 clean
20000
heap private
page read and write
 clean
400000
unkown image
page readonly
 clean
2E96000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
8B000
unkown
page read and write
 clean
BDF000
unkown
page read and write
 clean
2DF8000
unkown
page read and write
 clean
55F000
heap default
page read and write
 clean
423000
unkown image
page execute read
 clean
33DD000
unkown
page read and write
 clean
27E0000
heap private
page read and write
 clean
300000
unkown
page write copy
 clean
29BD000
unkown
page read and write
 clean
3ADF000
unkown
page read and write
 clean
2A10000
heap private
page read and write
 clean
2464000
heap private
page read and write
 clean
3D0000
unkown
page read and write
 clean
2CBF000
unkown
page read and write
 clean
35DF000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
2170000
unkown
page readonly
 clean
376D000
unkown
page read and write
 clean
2860000
heap private
page read and write
 clean
21B0000
unkown
page readonly
 clean
18B000
unkown
page read and write
 clean
3410000
unkown
page write copy
 clean
401000
unkown image
page execute read
 clean
290000
unkown
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
250000
heap default
page read and write
 clean
375E000
unkown
page read and write
 clean
34DD000
unkown
page read and write
 clean
355D000
unkown
page read and write
 clean
1FF0000
heap private
page read and write
 clean
824000
heap private
page read and write
 clean
396F000
unkown
page read and write
 clean
529000
unkown
page read and write
 clean
2E37000
unkown
page read and write
 clean
22BC000
unkown
page read and write
 clean
2DAB000
unkown
page read and write
 clean
2614000
heap private
page read and write
 clean
2650000
unkown
page read and write
 clean
717000
heap private
page read and write
 clean
270000
unkown
page write copy
 clean
2B00000
unkown
page write copy
 clean
1F24000
heap private
page read and write
 clean
64D000
unkown
page read and write
 clean
250000
unkown
page read and write
 clean
78E000
unkown
page read and write
 clean
540000
unkown
page readonly
 clean
299000
unkown
page read and write
 clean
371F000
unkown
page read and write
 clean
18F000
unkown
page read and write
 clean
370000
heap default
page read and write
 clean
2B1C000
unkown
page read and write
 clean
386E000
unkown
page read and write
 clean
39A0000
unkown
page readonly
 clean
2DCB000
unkown
page read and write
 clean
8B000
unkown
page read and write
 clean
2C6000
unkown
page read and write
 clean
150000
unkown
page readonly
 clean
2320000
unkown
page readonly
 clean
38D0000
unkown
page readonly
 clean
33A0000
unkown
page readonly
 clean
3190000
heap private
page read and write
 clean
23CE000
unkown
page read and write
 clean
2EFC000
unkown
page read and write
 clean
170000
unkown
page readonly
 clean
3A6000
heap private
page read and write
 clean
8B000
unkown
page read and write
 clean
3D0000
heap private
page read and write
 clean
3910000
unkown
page write copy
 clean
296E000
unkown
page read and write
 clean
363D000
unkown
page read and write
 clean
28AD000
unkown
page read and write
 clean
2930000
heap private
page read and write
 clean
1B0000
unkown
page readonly
 clean
1C1F000
unkown
page read and write
 clean
330000
unkown
page read and write
 clean
2DF8000
unkown
page read and write
 clean
1B0000
unkown
page readonly
 clean
70000
unkown
page read and write
 clean
1B40000
unkown
page readonly
 clean
20000
unkown
page read and write
 clean
270000
unkown
page read and write
 clean
14C000
unkown
page read and write
 clean
2ADC000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
401000
unkown image
page execute read
 clean
289E000
unkown
page read and write
 clean
2EB1000
unkown
page read and write
 clean
5A0000
unkown
page readonly
 clean
3870000
unkown
page readonly
 clean
25BE000
unkown
page read and write
 clean
658000
heap default
page read and write
 clean
400000
unkown image
page readonly
 clean
307000
heap default
page read and write
 clean
5F7000
heap default
page read and write
 clean
18F000
unkown
page read and write
 clean
25AF000
unkown
page read and write
 clean
2E86000
unkown
page read and write
 clean
460000
unkown
page read and write
 clean
30F000
heap default
page read and write
 clean
47D000
unkown
page read and write
 clean
2CF0000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
400000
unkown image
page readonly
 clean
1C0000
heap default
page read and write
 clean
2B4000
heap default
page read and write
 clean
400000
unkown image
page readonly
 clean
5DA000
heap default
page read and write
 clean
3FD000
unkown
page read and write
 clean
2EC0000
unkown
page read and write
 clean
298E000
unkown
page read and write
 clean
423000
unkown image
page execute read
 clean
7E0000
unkown
page readonly
 clean
2EAE000
unkown
page read and write
 clean
3980000
unkown image
page readonly
 clean
42D000
unkown image
page readonly
 clean
401000
unkown image
page execute read
 clean
2950000
heap private
page read and write
 clean
460000
unkown
page read and write
 clean
38A0000
unkown
page readonly
 clean
1FF5000
heap private
page read and write
 clean
64F000
unkown
page readonly
 clean
29DD000
unkown
page read and write
 clean
365F000
unkown
page read and write
 clean
26AD000
unkown
page read and write
 clean
1C29000
heap private
page read and write
 clean
307000
unkown
page read and write
 clean
3B0000
unkown
page read and write
 clean
28D0000
unkown
page readonly
 clean
379F000
unkown
page read and write
 clean
E0000
unkown
page readonly
 clean
2C7000
unkown
page read and write
 clean
42D000
unkown image
page readonly
 clean
215E000
unkown
page read and write
 clean
5C7000
unkown
page read and write
 clean
386F000
unkown
page read and write
 clean
61D000
heap default
page read and write
 clean
8B000
unkown
page read and write
 clean
60000
unkown
page read and write
 clean
3940000
unkown
page write copy
 clean
1B0000
unkown
page readonly
 clean
25E0000
unkown
page read and write
 clean
3819000
unkown
page read and write
 clean
3A6F000
unkown
page read and write
 clean
8D0000
heap private
page read and write
 clean
360000
heap private
page read and write
 clean
420000
unkown
page readonly
 clean
160000
unkown
page readonly
 clean
697000
heap default
page read and write
 clean
39A0000
unkown image
page readonly
 clean
2C80000
unkown
page read and write
 clean
288F000
unkown
page read and write
 clean
362E000
unkown
page read and write
 clean
2697000
heap private
page read and write
 clean
2B30000
unkown
page read and write
 clean
3220000
heap private
page read and write
 clean
25C0000
heap private
page read and write
 clean
4B0000
heap private
page read and write
 clean
2529000
heap private
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
36EF000
unkown
page read and write
 clean
2660000
heap private
page read and write
 clean
2DDA000
unkown
page read and write
 clean
26000
heap private
page read and write
 clean
401000
unkown image
page execute read
 clean
42D000
unkown image
page readonly
 clean
26E4000
heap private
page read and write
 clean
2FA0000
unkown
page readonly
 clean
7D0000
heap private
page read and write
 clean
2D57000
unkown
page read and write
 clean
3D0000
unkown
page readonly
 clean
2E95000
unkown
page read and write
 clean
26BE000
unkown
page read and write
 clean
4B6000
heap private
page read and write
 clean
42D000
unkown image
page readonly
 clean
2959000
heap private
page read and write
 clean
1C80000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
42A000
unkown image
page read and write
 clean
317000
heap private
page read and write
 clean
1D90000
unkown
page readonly
 clean
5CF000
unkown
page read and write
 clean
2E8000
unkown
page read and write
 clean
290000
unkown
page read and write
 clean
640000
unkown
page read and write
 clean
18A000
unkown
page read and write
 clean
2F2F000
unkown
page read and write
 clean
160000
unkown
page readonly
 clean
870000
unkown
page readonly
 clean
2659000
heap private
page read and write
 clean
3890000
unkown
page readonly
 clean
401000
unkown image
page execute read
 clean
260000
unkown
page write copy
 clean
29CE000
unkown
page read and write
 clean
5AF000
unkown
page read and write
 clean
3970000
unkown
page readonly
 clean
2E40000
unkown
page read and write
 clean
2D0D000
unkown
page read and write
 clean
2510000
heap private
page read and write
 clean
2750000
unkown
page readonly
 clean
340000
unkown
page write copy
 clean
28DE000
unkown
page read and write
 clean
2600000
unkown
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
180000
unkown
page read and write
 clean
34AF000
unkown
page read and write
 clean
320000
unkown
page read and write
 clean
373F000
unkown
page read and write
 clean
2E9A000
unkown
page read and write
 clean
2522000
heap private
page read and write
 clean
D2000
unkown
page read and write
 clean
20B0000
heap private
page read and write
 clean
297000
heap default
page read and write
 clean
DC000
unkown
page read and write
 clean
39B0000
unkown image
page readonly
 clean
8E0000
heap private
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
2E1F000
unkown
page read and write
 clean
20000
heap private
page read and write
 clean
18F000
unkown
page read and write
 clean
34FE000
unkown
page read and write
 clean
29D0000
unkown
page readonly
 clean
2A90000
unkown
page readonly
 clean
644000
heap default
page read and write
 clean
261F000
unkown
page read and write
 clean
376E000
unkown
page read and write
 clean
262F000
unkown
page read and write
 clean
2EB9000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
2F0000
unkown
page read and write
 clean
3E0000
unkown
page read and write
 clean
2D9C000
unkown
page read and write
 clean
2490000
unkown
page readonly
 clean
2D9000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
2B70000
heap private
page read and write
 clean
2B82000
heap private
page read and write
 clean
1D70000
unkown
page read and write
 clean
369F000
unkown
page read and write
 clean
2E7E000
unkown
page read and write
 clean
26FE000
unkown
page read and write
 clean
7EFD7000
unkown
page read and write
 clean
219E000
unkown
page read and write
 clean
220000
unkown
page execute read
 clean
5C8000
heap default
page read and write
 clean
678000
unkown
page read and write
 clean
5A8000
unkown
page read and write
 clean
2D2F000
unkown
page read and write
 clean
770000
heap private
page read and write
 clean
280000
unkown
page read and write
 clean
320000
unkown
page readonly
 clean
4E7000
heap default
page read and write
 clean
220000
unkown
page readonly
 clean
1C60000
unkown
page read and write
 clean
2D30000
unkown
page read and write
 clean
604000
heap default
page read and write
 clean
2600000
unkown
page readonly
 clean
1E60000
unkown
page readonly
 clean
6D0000
unkown
page read and write
 clean
64F000
unkown
page read and write
 clean
27AE000
unkown
page read and write
 clean
2FB0000
unkown
page readonly
 clean
1CB0000
heap private
page read and write
 clean
401000
unkown image
page execute read
 clean
2EE3000
unkown
page read and write
 clean
2FAD000
unkown
page read and write
 clean
3970000
unkown
page readonly
 clean
1CF0000
unkown
page read and write
 clean
42D000
unkown image
page readonly
 clean
2634000
unkown
page read and write
 clean
294F000
unkown
page read and write
 clean
310000
heap default
page read and write
 clean
2E46000
unkown
page read and write
 clean
880000
unkown
page read and write
 clean
2500000
unkown
page readonly
 clean
1C30000
unkown
page readonly
 clean
4A0000
unkown
page readonly
 clean
8B000
unkown
page read and write
 clean
8FB000
unkown
page read and write
 clean
4A0000
unkown
page read and write
 clean
72E000
unkown
page read and write
 clean
2EA6000
unkown
page read and write
 clean
2637000
heap private
page read and write
 clean
18A000
unkown
page read and write
 clean
890000
heap private
page read and write
 clean
26CD000
unkown
page read and write
 clean
2E06000
unkown
page read and write
 clean
2ED9000
unkown
page read and write
 clean
220000
heap private
page read and write
 clean
6C0000
unkown
page readonly
 clean
3F0000
unkown
page read and write
 clean
2CF0000
unkown
page read and write
 clean
361E000
unkown
page read and write
 clean
414000
heap private
page read and write
 clean
2D12000
unkown
page read and write
 clean
2B6F000
unkown
page read and write
 clean
2D9F000
unkown
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
3980000
unkown image
page readonly
 clean
520000
unkown
page readonly
 clean
316E000
unkown
page read and write
 clean
339E000
unkown
page read and write
 clean
65B000
unkown
page read and write
 clean
240000
unkown
page execute read
 clean
3D0000
heap default
page read and write
 clean
263E000
unkown
page read and write
 clean
7EFAF000
unkown
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
3910000
unkown
page readonly
 clean
20000
heap private
page read and write
 clean
1BC0000
unkown
page readonly
 clean
640000
unkown
page readonly
 clean
627000
heap default
page read and write
 clean
3940000
unkown
page readonly
 clean
7EFDF000
unkown
page read and write
 clean
7EFAF000
unkown
page read and write
 clean
3AAF000
unkown
page read and write
 clean
3B60000
heap private
page read and write
 clean
383F000
unkown
page read and write
 clean
2417000
heap private
page read and write
 clean
760000
unkown
page readonly
 clean
263C000
unkown
page read and write
 clean
3AEE000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
2B5F000
unkown
page read and write
 clean
2587000
heap private
page read and write
 clean
820000
heap private
page read and write
 clean
3A10000
unkown image
page readonly
 clean
18F000
unkown
page read and write
 clean
5A9000
unkown
page read and write
 clean
382F000
unkown
page read and write
 clean
2DEE000
unkown
page read and write
 clean
2560000
heap private
page read and write
 clean
3FF000
unkown
page readonly
 clean
2A6D000
unkown
page read and write
 clean
1EA0000
unkown
page read and write
 clean
2DF0000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
410000
heap private
page read and write
 clean
2E60000
unkown
page read and write
 clean
557000
heap default
page read and write
 clean
260D000
unkown
page read and write
 clean
330000
unkown
page read and write
 clean
3F0000
unkown
page write copy
 clean
5CF000
heap default
page read and write
 clean
207000
heap default
page read and write
 clean
400000
unkown image
page readonly
 clean
3C0000
unkown
page readonly
 clean
274E000
unkown
page read and write
 clean
599000
unkown
page read and write
 clean
290000
heap default
page read and write
 clean
283E000
unkown
page read and write
 clean
7F0000
unkown
page readonly
 clean
202B000
heap private
page read and write
 clean
2F9000
heap private
page read and write
 clean
351E000
unkown
page read and write
 clean
230000
unkown
page execute read
 clean
1D30000
heap private
page read and write
 clean
2D59000
unkown
page read and write
 clean
2A40000
heap private
page read and write
 clean
2760000
unkown
page readonly
 clean
18A000
unkown
page read and write
 clean
3FF000
unkown
page readonly
 clean
37C4000
unkown
page read and write
 clean
3180000
unkown
page readonly
 clean
270000
unkown
page read and write
 clean
197000
heap default
page read and write
 clean
2D9000
unkown
page read and write
 clean
2670000
heap private
page read and write
 clean
2130000
unkown
page readonly
 clean
2632000
heap private
page read and write
 clean
2510000
unkown
page readonly
 clean
1C00000
unkown
page read and write
 clean
5E7000
heap default
page read and write
 clean
2640000
heap private
page read and write
 clean
423000
unkown image
page execute read
 clean
35FF000
unkown
page read and write
 clean
304E000
unkown
page read and write
 clean
25FD000
unkown
page read and write
 clean
350000
unkown
page readonly
 clean
5E0000
unkown
page readonly
 clean
375E000
unkown
page read and write
 clean
2EA1000
unkown
page read and write
 clean
33E0000
unkown
page write copy
 clean
667000
unkown
page read and write
 clean
2640000
unkown
page readonly
 clean
2C4F000
unkown
page read and write
 clean
2720000
heap private
page read and write
 clean
5E0000
heap default
page read and write
 clean
423000
unkown image
page execute read
 clean
310000
unkown
page read and write
 clean
336000
unkown
page read and write
 clean
5E0000
unkown
page readonly
 clean
389F000
unkown
page read and write
 clean
28CE000
unkown
page read and write
 clean
35EF000
unkown
page read and write
 clean
336D000
unkown
page read and write
 clean
3E0000
unkown
page readonly
 clean
2A0000
heap default
page read and write
 clean
2C7F000
unkown
page read and write
 clean
3FD000
unkown
page read and write
 clean
12C000
unkown
page read and write
 clean
37BA000
unkown
page read and write
 clean
669000
unkown
page read and write
 clean
250000
unkown
page read and write
 clean
2D70000
unkown
page read and write
 clean
220000
unkown
page execute read
 clean
1B0000
unkown
page execute read
 clean
34BF000
unkown
page read and write
 clean
3E0000
unkown
page execute and read and write
 clean
2EB6000
unkown
page read and write
 clean
42D000
unkown image
page readonly
 clean
34DF000
unkown
page read and write
 clean
890000
heap private
page read and write
 clean
401000
unkown image
page execute read
 clean
740000
heap private
page read and write
 clean
401000
unkown image
page execute read
 clean
4C0000
unkown
page readonly
 clean
27BE000
unkown
page read and write
 clean
1DA0000
heap private
page read and write
 clean
6F0000
heap private
page read and write
 clean
599000
unkown
page read and write
 clean
2E50000
unkown
page read and write
 clean
2610000
heap private
page read and write
 clean
250E000
unkown
page read and write
 clean
2990000
unkown
page read and write
 clean
290000
heap default
page read and write
 clean
2E4E000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
423000
unkown image
page execute read
 clean
7EFD7000
unkown
page read and write
 clean
365E000
unkown
page read and write
 clean
6FA000
heap private
page read and write
 clean
260000
unkown
page read and write
 clean
1D0000
unkown
page readonly
 clean
42D000
unkown image
page readonly
 clean
8C0000
heap default
page read and write
 clean
385F000
unkown
page read and write
 clean
5E0000
unkown
page readonly
 clean
3E0000
unkown
page execute and read and write
 clean
2750000
heap private
page read and write
 clean
270E000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
35DD000
unkown
page read and write
 clean
7EFAC000
unkown
page read and write
 clean
18F000
unkown
page read and write
 clean
259E000
unkown
page read and write
 clean
7EFAF000
unkown
page read and write
 clean
386F000
unkown
page read and write
 clean
2A68000
unkown
page read and write
 clean
240000
unkown
page readonly
 clean
2600000
unkown
page read and write
 clean
494000
heap private
page read and write
 clean
2550000
unkown
page readonly
 clean
600000
unkown
page write copy
 clean
22A0000
unkown
page readonly
 clean
38C0000
unkown
page readonly
 clean
2EBE000
unkown
page read and write
 clean
2DEE000
unkown
page read and write
 clean
617000
heap default
page read and write
 clean
26B0000
unkown
page read and write
 clean
2480000
unkown
page readonly
 clean
42D000
unkown image
page readonly
 clean
2EC1000
unkown
page read and write
 clean
1CAF000
unkown
page read and write
 clean
2524000
heap private
page read and write
 clean
27EE000
unkown
page read and write
 clean
164000
heap private
page read and write
 clean
8B000
unkown
page read and write
 clean
3890000
unkown
page readonly
 clean
610000
unkown
page readonly
 clean
42D000
unkown image
page readonly
 clean
460000
unkown
page read and write
 clean
1E70000
unkown
page readonly
 clean
23B000
unkown
page read and write
 clean
6C7000
heap default
page read and write
 clean
7D0000
unkown
page readonly
 clean
1CE000
heap default
page read and write
 clean
29F000
unkown
page readonly
 clean
4FD000
unkown
page read and write
 clean
2810000
heap private
page read and write
 clean
4FF000
unkown
page readonly
 clean
5F0000
heap default
page read and write
 clean
2D0000
unkown
page readonly
 clean
3B20000
heap private
page read and write
 clean
536000
heap private
page read and write
 clean
24A0000
unkown
page readonly
 clean
918000
unkown
page read and write
 clean
1E0000
heap default
page read and write
 clean
2E6000
heap private
page read and write
 clean
307000
unkown
page read and write
 clean
1C90000
unkown
page readonly
 clean
2100000
unkown
page readonly
 clean
2EA3000
unkown
page read and write
 clean
35AE000
unkown
page read and write
 clean
200000
heap default
page read and write
 clean
400000
unkown image
page readonly
 clean
390000
unkown
page readonly
 clean
23E000
heap default
page read and write
 clean
35EE000
unkown
page read and write
 clean
273E000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
2520000
heap private
page read and write
 clean
423000
unkown image
page execute read
 clean
5C7000
heap default
page read and write
 clean
39E0000
unkown image
page readonly
 clean
1D20000
unkown
page readonly
 clean
2ED8000
unkown
page read and write
 clean
18F000
unkown
page read and write
 clean
37C9000
unkown
page read and write
 clean
2832000
heap private
page read and write
 clean
21C0000
unkown
page readonly
 clean
400000
unkown image
page readonly
 clean
C8E000
unkown
page read and write
 clean
1F07000
unkown
page readonly
 clean
2EEE000
unkown
page read and write
 clean
2504000
heap private
page read and write
 clean
375F000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
2482000
heap private
page read and write
 clean
37DE000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
300000
unkown
page read and write
 clean
557000
heap default
page read and write
 clean
23F0000
heap private
page read and write
 clean
62B000
unkown
page read and write
 clean
2A8D000
unkown
page read and write
 clean
2547000
heap private
page read and write
 clean
8BF000
unkown
page read and write
 clean
28B000
unkown
page read and write
 clean
530000
heap private
page read and write
 clean
20000
unkown
page read and write
 clean
2E63000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
383F000
unkown
page read and write
 clean
39B0000
unkown
page write copy
 clean
3C0000
unkown
page execute read
 clean
400000
unkown image
page readonly
 clean
312F000
unkown
page read and write
 clean
2B5C000
unkown
page read and write
 clean
8B000
unkown
page read and write
 clean
620000
heap default
page read and write
 clean
2050000
heap private
page read and write
 clean
69F000
heap default
page read and write
 clean
335F000
unkown
page read and write
 clean
60000
unkown
page readonly
 clean
2610000
heap private
page read and write
 clean
25FE000
unkown
page read and write
 clean
29A0000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
540000
unkown
page readonly
 clean
47F000
unkown
page readonly
 clean
33AE000
unkown
page read and write
 clean
90000
unkown
page readonly
 clean
350000
unkown
page read and write
 clean
2690000
unkown
page read and write
 clean
1D0000
unkown
page readonly
 clean
400000
unkown image
page readonly
 clean
2CB000
unkown
page read and write
 clean
1B0000
unkown
page readonly
 clean
2F24000
unkown
page read and write
 clean
3C0000
unkown
page write copy
 clean
280000
unkown
page read and write
 clean
38A0000
unkown
page readonly
 clean
23D0000
unkown
page readonly
 clean
38DF000
unkown
page read and write
 clean
3D0000
heap default
page read and write
 clean
2D7F000
unkown
page read and write
 clean
290E000
unkown
page read and write
 clean
2EC1000
unkown
page read and write
 clean
34A0000
unkown
page readonly
 clean
37BF000
unkown
page read and write
 clean
2EB4000
unkown
page read and write
 clean
25EE000
unkown
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
1DF0000
heap private
page read and write
 clean
18F000
unkown
page read and write
 clean
2F0000
heap private
page read and write
 clean
3823000
unkown
page read and write
 clean
2D2F000
unkown
page read and write
 clean
3940000
unkown
page write copy
 clean
1F00000
unkown
page read and write
 clean
2300000
unkown
page readonly
 clean
2DC6000
unkown
page read and write
 clean
41B000
heap default
page read and write
 clean
538000
unkown
page read and write
 clean
5C7000
unkown
page read and write
 clean
266D000
unkown
page read and write
 clean
2500000
heap private
page read and write
 clean
400000
unkown image
page readonly
 clean
372F000
unkown
page read and write
 clean
1DC0000
unkown
page read and write
 clean
34AC000
unkown
page read and write
 clean
2A70000
unkown
page read and write
 clean
2ED8000
unkown
page read and write
 clean
33F000
unkown
page readonly
 clean
1CB0000
unkown
page read and write
 clean
1D00000
unkown
page read and write
 clean
610000
unkown
page read and write
 clean
1B0000
unkown
page readonly
 clean
416000
heap default
page read and write
 clean
8B000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
3193000
heap private
page read and write
 clean
26E0000
heap private
page read and write
 clean
400000
unkown image
page readonly
 clean
400000
unkown image
page readonly
 clean
387F000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
842000
heap private
page read and write
 clean
2F6E000
unkown
page read and write
 clean
286000
unkown
page read and write
 clean
70930000
unkown image
page readonly
 clean
3B1E000
unkown
page read and write
 clean
2BBE000
unkown
page read and write
 clean
190000
heap private
page read and write
 clean
385E000
unkown
page read and write
 clean
1D1F000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
31D0000
heap private
page read and write
 clean
366F000
unkown
page read and write
 clean
230000
heap default
page read and write
 clean
42D000
unkown image
page readonly
 clean
280000
unkown
page execute and read and write
 clean
42D000
unkown image
page readonly
 clean
2CB000
unkown
page read and write
 clean
2650000
heap private
page read and write
 clean
460000
unkown
page readonly
 clean
25EE000
unkown
page read and write
 clean
20000
unkown
page read and write
 clean
377E000
unkown
page read and write
 clean
1D80000
unkown
page readonly
 clean
2542000
heap private
page read and write
 clean
223F000
unkown
page read and write
 clean
58B000
unkown
page read and write
 clean
7EFAC000
unkown
page read and write
 clean
73F000
unkown
page read and write
 clean
327C000
unkown
page read and write
 clean
39AE000
unkown
page read and write
 clean
300000
unkown
page execute read
 clean
51B000
unkown
page read and write
 clean
373F000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
1C4000
heap private
page read and write
 clean
2CA0000
unkown image
page readonly
 clean
400000
unkown image
page readonly
 clean
160000
heap private
page read and write
 clean
681000
heap default
page read and write
 clean
130000
unkown
page readonly
 clean
2B60000
heap private
page read and write
 clean
460000
unkown
page readonly
 clean
1E90000
heap private
page read and write
 clean
423000
unkown image
page execute read
 clean
7D6000
heap private
page read and write
 clean
2900000
unkown
page readonly
 clean
7EFD7000
unkown
page read and write
 clean
2D6F000
unkown
page read and write
 clean
34B000
heap default
page read and write
 clean
2B74000
unkown
page read and write
 clean
7CC000
unkown
page read and write
 clean
262C000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
353000
heap default
page read and write
 clean
20000
unkown
page readonly
 clean
37CC000
unkown
page read and write
 clean
37A1000
unkown
page read and write
 clean
2D21000
unkown
page read and write
 clean
2CF000
heap default
page read and write
 clean
1C10000
unkown
page execute and read and write
 clean
2C5E000
unkown
page read and write
 clean
3F0000
unkown
page read and write
 clean
5CF000
heap default
page read and write
 clean
400000
unkown image
page readonly
 clean
7E0000
unkown
page readonly
 clean
2677000
heap private
page read and write
 clean
1B0000
unkown
page execute read
 clean
3910000
unkown
page write copy
 clean
2C9E000
unkown
page read and write
 clean
2ED9000
unkown
page read and write
 clean
2A8000
unkown
page read and write
 clean
8B000
unkown
page read and write
 clean
2B64000
heap private
page read and write
 clean
2B60000
unkown
page readonly
 clean
490000
heap private
page read and write
 clean
648000
unkown
page read and write
 clean
2E95000
unkown
page read and write
 clean
2E61000
unkown
page read and write
 clean
20000
unkown
page readonly
 clean
1C47000
heap private
page read and write
 clean
4090000
unkown
page read and write
 clean
302E000
unkown
page read and write
 clean
270000
unkown
page write copy
 clean
422000
unkown image
page execute and read and write
 clean
2520000
unkown
page readonly
 clean
260000
heap private
page read and write
 clean
3C0000
unkown
page write copy
 clean
2EC1000
unkown
page read and write
 clean
280E000
unkown
page read and write
 clean
2F70000
unkown
page readonly
 clean
5F0000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
330000
unkown
page read and write
 clean
2A39000
unkown
page read and write
 clean
2977000
heap private
page read and write
 clean
4A0000
unkown
page read and write
 clean
20B0000
unkown
page readonly
 clean
38E0000
unkown
page readonly
 clean
307000
heap default
page read and write
 clean
4E0000
unkown
page execute and read and write
 clean
379E000
unkown
page read and write
 clean
550000
heap default
page read and write
 clean
2F60000
heap private
page read and write
 clean
337D000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
240000
unkown
page readonly
 clean
400000
unkown image
page readonly
 clean
2EF3000
unkown
page read and write
 clean
2EEE000
unkown
page read and write
 clean
20C0000
unkown
page readonly
 clean
2460000
heap private
page read and write
 clean
630000
heap private
page read and write
 clean
2D9E000
unkown
page read and write
 clean
39A0000
unkown image
page readonly
 clean
1DA7000
unkown
page readonly
 clean
18A000
unkown
page read and write
 clean
3F0000
unkown
page readonly
 clean
8A1000
heap private
page read and write
 clean
244000
heap default
page read and write
 clean
390000
unkown
page write copy
 clean
3FF000
unkown
page readonly
 clean
29D000
unkown
page read and write
 clean
2650000
unkown
page readonly
 clean
620000
unkown
page readonly
 clean
2710000
heap private
page read and write
 clean
25F0000
unkown
page read and write
 clean
389C000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
25FC000
unkown
page read and write
 clean
937000
heap default
page read and write
 clean
3CA0000
unkown
page readonly
 clean
1C40000
heap private
page read and write
 clean
2390000
unkown
page readonly
 clean
250000
heap private
page read and write
 clean
1E46000
unkown
page read and write
 clean
1C6D000
unkown
page read and write
 clean
2B70000
unkown
page readonly
 clean
940000
heap default
page read and write
 clean
260000
unkown
page read and write
 clean
25ED000
unkown
page read and write
 clean
361F000
unkown
page read and write
 clean
401000
unkown image
page execute read
 clean
650000
unkown
page readonly
 clean
2D65000
unkown
page read and write
 clean
27B0000
heap private
page read and write
 clean
8E4000
heap default
page read and write
 clean
285C000
unkown
page read and write
 clean
25D0000
unkown
page read and write
 clean
2730000
unkown
page read and write
 clean
37BF000
unkown
page read and write
 clean
33DD000
unkown
page read and write
 clean
7EFAC000
unkown
page read and write
 clean
320000
unkown
page readonly
 clean
401000
unkown image
page execute read
 clean
400000
unkown image
page readonly
 clean
1C0000
heap private
page read and write
 clean
1CC0000
unkown
page read and write
 clean
393F000
unkown
page read and write
 clean
18A000
unkown
page read and write
 clean
190000
heap default
page read and write
 clean
25C4000
heap private
page read and write
 clean
3D0000
unkown
page read and write
 clean
24C0000
heap private
page read and write
 clean
1CB0000
heap private
page read and write
 clean
2D70000
heap private
page read and write
 clean
2770000
heap private
page read and write
 clean
372F000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
1C20000
heap private
page read and write
 clean
42D000
unkown image
page readonly
 clean
18A000
unkown
page read and write
 clean
2E86000
unkown
page read and write
 clean
22E0000
heap private
page read and write
 clean
42D000
unkown image
page readonly
 clean
290000
unkown
page read and write
 clean
7EFDF000
unkown
page read and write
 clean
2CF9000
unkown
page read and write
 clean
42A000
unkown image
page read and write
 clean
750000
heap private
page read and write
 clean
24FF000
unkown
page read and write
 clean
3826000
unkown
page read and write
 clean
2D94000
unkown
page read and write
 clean
422000
unkown image
page execute and read and write
 clean
38A0000
unkown
page readonly
 clean
667000
heap default
page read and write
 clean
2619000
heap private
page read and write
 clean
2490000
unkown
page readonly
 clean
2E0000
heap private
page read and write
 clean
1E30000
unkown
page readonly
 clean
381D000
unkown
page read and write
 clean
42D000
unkown image
page readonly
 clean
2BA0000
heap private
page read and write
 clean
240000
heap private
page read and write
 clean
8F0000
unkown
page readonly
 clean
170000
unkown
page read and write
 clean
400000
unkown image
page readonly
 clean
8E0000
unkown
page readonly
 clean
20C0000
unkown
page readonly
 clean
423000
unkown image
page execute read
 clean
There are 987 hidden memdumps, click here to show them.