IOCReport

loading gif

Files

File Path
Type
Category
Malicious
Swift_Payment.MT103.docx
Microsoft Word 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\o[1].doc
data
downloaded
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\vbc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\27720357.doc
data
dropped
malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-{AD8A7C7D-3F97-4401-8621-33ABFBA7519B}.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{23A36F79-3DE3-41DA-8F76-5F7EB48D2868}.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\C20Q01TC.htm
ASCII text, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\e9yj[1].htm
HTML document, ASCII text
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{76C1187F-5961-4AD1-8352-EEED0FAE6D6A}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B5FAB51B-61BE-41BF-89DB-AF92964D1C77}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F060F5F7-4AFC-467A-BE44-A714D3C0AD58}.tmp
dBase III DBT, version number 0, next free block index 7536653
dropped
clean
C:\Users\user\AppData\Local\Temp\{27A10D79-7F70-46CF-8119-16E3C539D501}
data
dropped
clean
C:\Users\user\AppData\Local\Temp\{5C5D433B-B19C-40C3-8FD6-B75904B3140D}
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Swift_Payment.MT103.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13 2020, mtime=Wed Aug 26 14:08:13 2020, atime=Fri Jun 11 21:58:30 2021, length=10331, window=hide
modified
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\e9yj.url
MS Windows 95 Internet shortcut text (URL=<http://xy2.eu/e9yj>), ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\oti on 192.3.141.164.url
MS Windows 95 Internet shortcut text (URL=<http://192.3.141.164/oti/>), ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\Desktop\~$ift_Payment.MT103.docx
data
dropped
clean
There are 14 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Users\Public\vbc.exe
C:\Users\Public\vbc.exe
malicious
C:\Windows\explorer.exe
malicious
C:\Windows\SysWOW64\NAPSTAT.EXE
C:\Windows\SysWOW64\NAPSTAT.EXE
malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
clean
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\Public\vbc.exe'
clean

URLs

Name
IP
Malicious
http://xy2.eu/?redirect=e9yj
93.157.97.6
malicious
http://www.loundxgroup.com/nf2/?3f=yN98b8Y8Z6WLDXm&2dD=tY9gjdf+e0hI0IQM1PZNybK1EoaTSj9tXYNl6mrH9NUWEbudMWFuSJgZaQwKiXXMis7UDA==
91.227.139.235
malicious
http://xy2.eu/e9yj
93.157.97.6
malicious
http://search.chol.com/favicon.ico
unknown
clean
http://www.mercadolivre.com.br/
unknown
clean
http://www.merlin.com.pl/favicon.ico
unknown
clean
http://search.ebay.de/
unknown
clean
http://www.msn.com/de-de/?ocid=iehpi
unknown
clean
http://www.mtv.com/
unknown
clean
http://www.rambler.ru/
unknown
clean
http://www.nifty.com/favicon.ico
unknown
clean
http://www.dailymail.co.uk/
unknown
clean
http://www3.fnac.com/favicon.ico
unknown
clean
https://contextual.media.net/medianet.php?cid=8CUT39MWR&crid=715624197&size=306x271&https=1
unknown
clean
http://buscar.ya.com/
unknown
clean
http://search.yahoo.com/favicon.ico
unknown
clean
http://www.iis.fhg.de/audioPA
unknown
clean
http://www.sogou.com/favicon.ico
unknown
clean
http://asp.usatoday.com/
unknown
clean
http://fr.search.yahoo.com/
unknown
clean
http://rover.ebay.com
unknown
clean
http://in.search.yahoo.com/
unknown
clean
http://img.shopzilla.com/shopzilla/shopzilla.ico
unknown
clean
http://search.ebay.in/
unknown
clean
http://image.excite.co.jp/jp/favicon/lep.ico
unknown
clean
http://%s.com
unknown
clean
http://msk.afisha.ru/
unknown
clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
clean
http://busca.igbusca.com.br//app/static/images/favicon.ico
unknown
clean
http://search.rediff.com/
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://www.ya.com/favicon.ico
unknown
clean
http://www.etmall.com.tw/favicon.ico
unknown
clean
http://it.search.dada.net/favicon.ico
unknown
clean
http://search.naver.com/
unknown
clean
http://www.google.ru/
unknown
clean
http://search.hanafos.com/favicon.ico
unknown
clean
http://cgi.search.biglobe.ne.jp/favicon.ico
unknown
clean
http://www.abril.com.br/favicon.ico
unknown
clean
http://search.daum.net/
unknown
clean
http://search.naver.com/favicon.ico
unknown
clean
http://search.msn.co.jp/results.aspx?q=
unknown
clean
http://www.clarin.com/favicon.ico
unknown
clean
http://buscar.ozu.es/
unknown
clean
http://kr.search.yahoo.com/
unknown
clean
http://search.about.com/
unknown
clean
http://busca.igbusca.com.br/
unknown
clean
http://www.microsofttranslator.com/BVPrev.aspx?ref=IE8Activity
unknown
clean
https://contextual.media.net/checksync.php?&vsSync=1&cs=1&hb=1&cv=37&ndec=1&cid=8HBSKZM1Y&prvid=77%2
unknown
clean
http://www.ask.com/
unknown
clean
http://www.priceminister.com/favicon.ico
unknown
clean
http://www.cjmall.com/
unknown
clean
http://search.centrum.cz/
unknown
clean
http://suche.t-online.de/
unknown
clean
http://www.google.it/
unknown
clean
http://search.auction.co.kr/
unknown
clean
http://www.ceneo.pl/
unknown
clean
http://192.3.141.164/oti/
unknown
clean
http://www.amazon.de/
unknown
clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
clean
http://sads.myspace.com/
unknown
clean
http://busca.buscape.com.br/favicon.ico
unknown
clean
http://www.pchome.com.tw/favicon.ico
unknown
clean
http://browse.guardian.co.uk/favicon.ico
unknown
clean
http://google.pchome.com.tw/
unknown
clean
http://list.taobao.com/browse/search_visual.htm?n=15&amp;q=
unknown
clean
http://www.rambler.ru/favicon.ico
unknown
clean
http://uk.search.yahoo.com/
unknown
clean
http://espanol.search.yahoo.com/
unknown
clean
http://www.ozu.es/favicon.ico
unknown
clean
http://search.sify.com/
unknown
clean
http://openimage.interpark.com/interpark.ico
unknown
clean
http://search.yahoo.co.jp/favicon.ico
unknown
clean
http://search.ebay.com/
unknown
clean
http://www.gmarket.co.kr/
unknown
clean
http://search.nifty.com/
unknown
clean
http://searchresults.news.com.au/
unknown
clean
http://www.google.si/
unknown
clean
http://www.google.cz/
unknown
clean
http://www.soso.com/
unknown
clean
http://www.univision.com/
unknown
clean
http://search.ebay.it/
unknown
clean
http://images.joins.com/ui_c/fvc_joins.ico
unknown
clean
http://www.asharqalawsat.com/
unknown
clean
http://busca.orange.es/
unknown
clean
http://cnweb.search.live.com/results.aspx?q=
unknown
clean
http://auto.search.msn.com/response.asp?MT=
unknown
clean
http://search.yahoo.co.jp
unknown
clean
http://www.target.com/
unknown
clean
http://buscador.terra.es/
unknown
clean
http://search.orange.co.uk/favicon.ico
unknown
clean
http://www.iask.com/
unknown
clean
http://www.tesco.com/
unknown
clean
http://cgi.search.biglobe.ne.jp/
unknown
clean
http://search.seznam.cz/favicon.ico
unknown
clean
http://suche.freenet.de/favicon.ico
unknown
clean
http://search.interpark.com/
unknown
clean
http://search.ipop.co.kr/favicon.ico
unknown
clean
https://contextual.media.net/medianet.php?cid=8CUT39MWR&crid=715624197&size=306x271&https=1y
unknown
clean
http://investor.msn.com/
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.loundxgroup.com
91.227.139.235
malicious
xy2.eu
93.157.97.6
malicious
www.grandcanyonbean.com
unknown
malicious
grandcanyonbean.com
34.102.136.180
clean

IPs

IP
Domain
Country
Malicious
91.227.139.235
www.loundxgroup.com
Hungary
malicious
93.157.97.6
xy2.eu
Poland
malicious
34.102.136.180
grandcanyonbean.com
United States
clean
192.3.141.164
unknown
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
.n7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
wo7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
p7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Count
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Type
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Protocol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Flags
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMajorVersion
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMinorVersion
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MsDavExt
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Expiration
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EnableBHO
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
g/8
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SavedLegacySettings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
EquationEditorFilesIntl_1033
clean
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
SavedLegacySettings
clean
There are 323 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2256000
unkown
page read and write
malicious
3C0000
unkown
page read and write
malicious
293F000
unkown
page execute and read and write
malicious
3239000
unkown
page read and write
malicious
230000
unkown
page execute and read and write
malicious
80000
unkown
page execute and read and write
malicious
F0000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
333A000
unkown
page read and write
malicious
2F0000
unkown
page execute and read and write
malicious
ACD0000
heap private
page read and write
clean
690000
unkown
page read and write
clean
4AC7000
unkown
page read and write
clean
2F90000
unkown
page readonly
clean
B70000
unkown
page execute and read and write
clean
8BCD000
unkown
page readonly
clean
530000
unkown
page read and write
clean
167000
unkown
page execute and read and write
clean
548000
unkown
page read and write
clean
3555000
unkown
page readonly
clean
439E000
unkown
page read and write
clean
3C40000
unkown
page readonly
clean
550000
heap private
page execute and read and write
clean
16E000
unkown
page read and write
clean
1B9A000
unkown
page read and write
clean
1040000
unkown
page readonly
clean
2570000
unkown
page readonly
clean
2B30000
unkown
page readonly
clean
1C0000
unkown
page readonly
clean
4440000
unkown
page read and write
clean
540000
unkown
page read and write
clean
854C000
unkown
page read and write
clean
2CC000
unkown image
page readonly
clean
9768000
unkown
page readonly
clean
2E80000
unkown
page read and write
clean
2CA0000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
2AC0000
unkown
page read and write
clean
79C000
heap default
page read and write
clean
590000
unkown
page read and write
clean
68AE000
unkown
page readonly
clean
2C80000
unkown
page read and write
clean
25F2000
unkown
page read and write
clean
350000
unkown
page read and write
clean
1D80000
unkown
page read and write
clean
540000
unkown
page read and write
clean
1E71000
unkown
page read and write
clean
2187000
unkown
page execute and read and write
clean
1F0000
unkown image
page readonly
clean
2666000
unkown
page read and write
clean
A3BE000
unkown
page write copy
clean
597A000
unkown
page read and write
clean
1BF0000
heap private
page read and write
clean
26D0000
unkown
page readonly
clean
1E9000
heap default
page read and write
clean
9E0000
unkown
page read and write
clean
3BD5000
unkown
page read and write
clean
960000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
2210000
unkown
page execute and read and write
clean
6E3000
unkown
page read and write
clean
231000
heap default
page read and write
clean
2AE000
unkown image
page write copy
clean
140000
unkown
page read and write
clean
90D2000
unkown
page readonly
clean
842E000
unkown
page read and write
clean
1E3000
heap default
page read and write
clean
6F0000
unkown
page readonly
clean
2060000
unkown
page read and write
clean
510000
unkown
page read and write
clean
700000
unkown
page execute and read and write
clean
1C70000
unkown
page readonly
clean
740000
unkown
page read and write
clean
590000
unkown
page read and write
clean
96F4000
unkown
page readonly
clean
370000
unkown
page execute and read and write
clean
62C000
unkown
page read and write
clean
39EB000
unkown
page read and write
clean
6C2000
heap private
page read and write
clean
4070000
unkown
page readonly
clean
2F90000
unkown
page readonly
clean
2700000
unkown
page readonly
clean
A20000
unkown
page read and write
clean
590000
unkown
page read and write
clean
82B0000
unkown
page read and write
clean
515E000
unkown
page read and write
clean
5160000
unkown
page read and write
clean
2CC000
unkown image
page readonly
clean
370000
unkown
page read and write
clean
364000
heap private
page read and write
clean
ACD5000
heap private
page read and write
clean
4310000
unkown
page execute and read and write
clean
1F2000
unkown image
page execute read
clean
609000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
2E2E000
unkown
page read and write
clean
1E77000
unkown
page read and write
clean
2CF0000
unkown
page read and write
clean
1B40000
unkown
page readonly
clean
2EC000
unkown
page read and write
clean
2CB0000
unkown
page read and write
clean
C0000
heap default
page read and write
clean
259F000
unkown
page read and write
clean
76C000
unkown
page execute and read and write
clean
2EFE000
heap private
page read and write
clean
470000
unkown
page read and write
clean
2F70000
unkown
page readonly
clean
62F2000
unkown
page readonly
clean
6888000
unkown
page readonly
clean
1E74000
unkown
page read and write
clean
360000
heap private
page read and write
clean
8AC2000
unkown
page readonly
clean
20FF000
unkown
page read and write
clean
1A0000
heap default
page read and write
clean
160000
unkown
page read and write
clean
2A71000
unkown
page read and write
clean
CCA0000
unkown
page read and write
clean
4B30000
heap private
page read and write
clean
2100000
unkown
page readonly
clean
9E0000
unkown
page read and write
clean
2510000
unkown
page write copy
clean
2520000
unkown
page readonly
clean
490000
unkown
page read and write
clean
2ED0000
unkown
page readonly
clean
AB5E000
unkown
page read and write | page guard
clean
47A6000
unkown
page read and write
clean
231000
heap default
page read and write
clean
1BF0000
heap private
page read and write
clean
2AE000
unkown image
page write copy
clean
2E60000
unkown
page readonly
clean
966B000
unkown
page readonly
clean
2100000
unkown
page readonly
clean
75F000
unkown
page read and write
clean
2070000
unkown
page execute and read and write
clean
596000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
A3DA000
unkown
page write copy
clean
590000
unkown
page readonly
clean
470000
unkown
page read and write
clean
2EE0000
unkown
page readonly
clean
D4000
heap private
page read and write
clean
470000
unkown
page read and write
clean
260000
unkown
page read and write
clean
4230000
unkown
page readonly
clean
297C000
unkown
page execute and read and write
clean
4F80000
unkown
page read and write
clean
C1E000
unkown
page read and write
clean
1BC0000
unkown
page read and write
clean
2720000
unkown
page read and write
clean
80B000
heap default
page read and write
clean
954000
unkown
page read and write
clean
690000
unkown
page read and write
clean
730000
unkown
page read and write
clean
2AE000
unkown image
page write copy
clean
2C60000
unkown
page read and write
clean
C6D0000
unkown
page read and write
clean
2007000
unkown
page execute and read and write
clean
2666000
unkown
page read and write
clean
2EF5000
heap private
page read and write
clean
2CC000
unkown image
page readonly
clean
4500000
unkown
page readonly
clean
470000
unkown
page read and write
clean
A330000
unkown
page write copy
clean
26A0000
unkown
page readonly
clean
F0000
unkown
page read and write
clean
2EF5000
heap private
page read and write
clean
260000
unkown
page read and write
clean
520000
unkown
page read and write
clean
BCF0000
heap private
page read and write
clean
3649000
unkown
page readonly
clean
170000
unkown
page readonly
clean
6914000
unkown
page readonly
clean
7410000
heap private
page read and write
clean
6F0000
unkown
page read and write
clean
3572000
unkown
page readonly
clean
5A1E000
unkown
page read and write
clean
60000
unkown
page readonly
clean
540000
unkown
page read and write
clean
2AB4000
unkown
page read and write
clean
80A000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
7DA000
unkown
page read and write
clean
4817000
heap private
page read and write
clean
58B6000
unkown
page read and write
clean
790000
heap default
page read and write
clean
2060000
unkown
page readonly
clean
162000
unkown
page read and write
clean
C20000
heap private
page execute and read and write
clean
1D0000
heap default
page read and write
clean
710B000
unkown
page read and write
clean
A30000
heap private
page read and write
clean
2E50000
unkown
page read and write
clean
2DBF000
unkown
page read and write
clean
7490000
unkown
page write copy
clean
B0000
unkown
page write copy
clean
120000
heap default
page read and write
clean
1BDF000
unkown
page read and write
clean
2EF9000
heap private
page read and write
clean
2900000
unkown
page read and write
clean
774000
heap default
page read and write
clean
300000
unkown
page read and write
clean
2200000
unkown
page execute and read and write
clean
2720000
unkown
page read and write
clean
25A0000
unkown
page readonly
clean
2C90000
unkown
page read and write
clean
2E0000
unkown
page execute and read and write
clean
3940000
unkown
page read and write
clean
47A0000
unkown
page read and write
clean
16E000
unkown
page read and write
clean
90A5000
unkown
page readonly
clean
25A0000
unkown
page readonly
clean
4234000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
36C000
unkown
page read and write
clean
2F70000
unkown
page readonly
clean
C50000
unkown
page execute and read and write
clean
35A2000
unkown
page readonly
clean
620000
unkown
page readonly
clean
2CC000
unkown image
page readonly
clean
2EB0000
unkown
page read and write
clean
6F70000
unkown
page read and write
clean
2AE000
unkown image
page write copy
clean
74E000
unkown
page read and write
clean
410000
unkown
page readonly
clean
1F10000
unkown
page execute and read and write
clean
C6D8000
unkown
page read and write
clean
2EC0000
unkown
page readonly
clean
525000
unkown
page read and write
clean
590000
unkown
page read and write
clean
8951000
unkown
page readonly
clean
1DD000
heap default
page read and write
clean
B320000
unkown
page read and write
clean
760000
unkown
page readonly
clean
9D0000
unkown
page readonly
clean
2C2000
heap default
page read and write
clean
4297000
unkown
page read and write
clean
80D000
unkown
page read and write
clean
FD000
unkown
page read and write
clean
2710000
unkown
page readonly
clean
620000
unkown
page read and write
clean
5A20000
heap private
page read and write
clean
2BE0000
unkown
page readonly
clean
2AC000
unkown
page read and write
clean
AB5F000
unkown
page read and write
clean
3C18000
unkown
page read and write
clean
6FB3000
heap private
page read and write
clean
A3E9000
unkown
page write copy
clean
1E8000
heap default
page read and write
clean
42CB000
unkown
page read and write
clean
260000
unkown
page read and write
clean
2E80000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
21B0000
unkown
page read and write
clean
8FE000
unkown
page read and write
clean
49FF000
unkown
page read and write
clean
550000
unkown
page readonly
clean
E0000
unkown
page readonly
clean
1BEF000
unkown
page read and write
clean
1F2000
unkown image
page execute read
clean
3318000
unkown
page readonly
clean
3AF0000
unkown
page read and write
clean
CD66000
unkown
page read and write
clean
3672000
unkown
page readonly
clean
1A0000
unkown
page read and write
clean
2181000
unkown
page execute and read and write
clean
3BC0000
unkown
page read and write
clean
2710000
unkown
page readonly
clean
7150000
heap private
page read and write
clean
2249000
unkown
page read and write
clean
592000
unkown
page read and write
clean
216E000
unkown
page read and write | page guard
clean
46B8000
unkown
page read and write
clean
6F90000
heap private
page read and write
clean
41AD000
unkown
page read and write
clean
1BD0000
unkown
page read and write
clean
2EFE000
heap private
page read and write
clean
4510000
unkown
page execute and read and write
clean
11C0000
unkown
page readonly
clean
5829000
unkown
page read and write
clean
2A50000
unkown
page readonly
clean
B14B000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
A53E000
unkown
page read and write
clean
2B50000
unkown
page readonly
clean
2BB000
heap default
page read and write
clean
1F0000
unkown image
page readonly
clean
2A50000
unkown
page readonly
clean
C61000
unkown
page execute and read and write
clean
AE0000
unkown
page execute and read and write
clean
21E0000
unkown
page read and write
clean
920000
unkown
page execute and read and write
clean
670000
unkown
page read and write
clean
2B0000
unkown image
page readonly
clean
D0000
heap private
page read and write
clean
7EFDF000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
3665000
unkown
page readonly
clean
B2C3000
heap private
page read and write
clean
2EE000
unkown
page read and write
clean
4291000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
2B4000
unkown image
page readonly
clean
1E60000
unkown
page read and write
clean
300000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
839A000
unkown
page read and write
clean
CE0000
unkown
page execute and read and write
clean
25D000
heap default
page read and write
clean
1BE0000
unkown
page read and write
clean
428C000
unkown
page read and write
clean
266E000
unkown
page read and write
clean
480000
unkown
page read and write
clean
78E000
unkown
page read and write
clean
34D2000
unkown
page readonly
clean
480000
unkown
page read and write
clean
C64000
unkown
page execute and read and write
clean
3802000
unkown
page readonly
clean
6F77000
unkown
page read and write
clean
6A0000
heap private
page read and write
clean
43D0000
unkown
page write copy
clean
2540000
unkown
page read and write
clean
1B9A000
unkown
page read and write
clean
1B80000
unkown
page read and write
clean
2E38000
unkown
page read and write
clean
2060000
unkown
page readonly
clean
2F9000
heap default
page read and write
clean
2080000
unkown
page execute and read and write
clean
30B000
unkown
page read and write
clean
5A0000
heap default
page read and write
clean
38A0000
unkown
page readonly
clean
2570000
unkown
page readonly
clean
20000
unkown
page read and write
clean
4616000
unkown
page read and write
clean
8654000
unkown
page read and write
clean
590000
unkown
page read and write
clean
6988000
unkown
page readonly
clean
1DD000
heap default
page read and write
clean
607000
heap default
page read and write
clean
260000
unkown
page read and write
clean
64D000
unkown
page read and write
clean
3B00000
unkown
page readonly
clean
34F2000
unkown
page readonly
clean
530000
unkown
page read and write
clean
1D70000
unkown
page read and write
clean
60E000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
6CF000
unkown
page read and write
clean
968E000
unkown
page readonly
clean
21C0000
unkown
page read and write
clean
5CE2000
unkown
page readonly
clean
10000
heap private
page read and write
clean
20000
unkown
page readonly
clean
750000
heap default
page read and write
clean
22B0000
unkown
page execute and read and write
clean
2070000
unkown
page readonly
clean
34D2000
unkown
page readonly
clean
1F00000
unkown
page execute and read and write
clean
20000
unkown
page readonly
clean
3312000
unkown
page readonly
clean
9F0000
unkown
page execute and read and write
clean
3679000
unkown
page readonly
clean
470000
unkown
page read and write
clean
3514000
unkown
page readonly
clean
A320000
unkown
page read and write
clean
4DE000
unkown
page read and write
clean
2690000
unkown
page readonly
clean
35F6000
unkown
page readonly
clean
470000
unkown
page read and write
clean
8666000
unkown
page read and write
clean
B50000
unkown
page execute and read and write
clean
4090000
heap private
page read and write
clean
2B40000
unkown
page readonly
clean
468000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
35B5000
unkown
page readonly
clean
3695000
unkown
page readonly
clean
157000
unkown
page execute and read and write
clean
1BE0000
unkown
page read and write
clean
757000
heap default
page read and write
clean
3585000
unkown
page readonly
clean
1A0000
unkown
page read and write
clean
7040000
heap private
page read and write
clean
2AF0000
unkown
page read and write
clean
4E9A000
unkown
page read and write
clean
ADFF000
unkown
page read and write
clean
4530000
heap private
page read and write
clean
26F0000
unkown
page readonly
clean
A328000
unkown
page read and write
clean
2E2E000
unkown
page read and write
clean
78EE000
unkown
page read and write
clean
179000
unkown
page read and write
clean
26C0000
unkown
page readonly
clean
2E90000
unkown
page read and write
clean
39F0000
unkown
page read and write
clean
C0DF000
unkown
page read and write
clean
726D000
unkown
page read and write
clean
A3DF000
unkown
page write copy
clean
1C13000
heap private
page read and write
clean
AE4000
unkown
page execute and read and write
clean
21E0000
unkown
page readonly
clean
2FD000
unkown
page read and write
clean
2C0000
heap default
page read and write
clean
520000
unkown
page read and write
clean
72EE000
unkown
page read and write
clean
1F2000
unkown image
page execute read
clean
2F4000
heap default
page read and write
clean
E7F000
unkown
page read and write
clean
689E000
unkown
page readonly
clean
1E3000
heap default
page read and write
clean
AAE000
unkown
page read and write
clean
4B40000
unkown
page readonly
clean
8662000
unkown
page read and write
clean
624000
heap default
page read and write
clean
39E0000
unkown
page read and write
clean
7AC0000
heap private
page read and write
clean
2EF0000
heap private
page read and write
clean
2ED0000
unkown
page readonly
clean
393E000
unkown
page read and write
clean
1BEF000
unkown
page read and write
clean
3880000
unkown
page readonly
clean
88F000
unkown
page read and write
clean
1BDF000
unkown
page read and write
clean
79A000
heap default
page read and write
clean
58AF000
unkown
page read and write
clean
4610000
unkown
page read and write
clean
3A6000
unkown
page read and write
clean
24B0000
unkown
page write copy
clean
60000
unkown
page readonly
clean
2A20000
unkown
page readonly
clean
690000
unkown
page read and write
clean
700000
unkown
page read and write
clean
2BB000
heap default
page read and write
clean
4E20000
unkown
page read and write
clean
2D30000
unkown
page read and write
clean
4226000
unkown
page read and write
clean
3566000
unkown
page readonly
clean
630000
unkown
page read and write
clean
94CF000
unkown
page readonly
clean
1B80000
unkown
page read and write
clean
2B0000
unkown image
page readonly
clean
2C4000
unkown image
page readonly
clean
2EE0000
unkown
page readonly
clean
139000
heap private
page read and write
clean
4263000
unkown
page read and write
clean
28F3000
unkown
page read and write
clean
2090000
unkown
page execute and read and write
clean
60F000
unkown
page read and write
clean
6695000
unkown
page readonly
clean
2E90000
unkown
page read and write
clean
B60000
unkown
page execute and read and write
clean
100000
unkown
page readonly
clean
3512000
unkown
page readonly
clean
1F0000
unkown image
page readonly
clean
44B0000
unkown
page write copy
clean
5230000
unkown
page read and write
clean
5BE000
unkown
page read and write
clean
D0000
heap private
page read and write
clean
A3E4000
unkown
page write copy
clean
260000
heap default
page read and write
clean
73D000
unkown
page read and write
clean
ACCE000
unkown
page read and write
clean
CDE2000
unkown
page read and write
clean
2B4000
unkown image
page readonly
clean
2010000
unkown
page execute and read and write
clean
47BC000
unkown
page read and write
clean
49FD000
unkown
page read and write
clean
2BE0000
unkown
page readonly
clean
9C0000
unkown
page read and write
clean
590000
unkown
page read and write
clean
590000
unkown
page read and write
clean
2EE000
unkown
page read and write
clean
2190000
unkown
page execute and read and write
clean
8890000
unkown
page readonly
clean
2C80000
unkown
page read and write
clean
4E21000
unkown
page read and write
clean
9475000
unkown
page readonly
clean
2BC0000
unkown
page write copy
clean
4196000
unkown
page read and write
clean
4F70000
heap private
page read and write
clean
C1E000
unkown
page read and write
clean
510000
unkown
page read and write
clean
1AF0000
unkown
page read and write
clean
2830000
unkown
page read and write
clean
4253000
unkown
page read and write
clean
951000
unkown
page read and write
clean
3860000
unkown
page readonly
clean
546E000
unkown
page read and write
clean
2B80000
unkown
page read and write
clean
2520000
unkown
page readonly
clean
5DED000
unkown
page readonly
clean
1D70000
unkown
page read and write
clean
3635000
unkown
page readonly
clean
6F0000
unkown
page readonly
clean
690000
unkown
page read and write
clean
A87E000
unkown
page read and write
clean
2DBF000
unkown
page read and write
clean
730000
unkown
page read and write
clean
3596000
unkown
page readonly
clean
360000
unkown
page read and write
clean
1BB0000
unkown
page readonly
clean
30D000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
2F8000
unkown
page read and write
clean
1E3F000
unkown
page read and write
clean
688B000
unkown
page readonly
clean
E0000
unkown
page readonly
clean
80000
unkown
page readonly
clean
12D000
unkown
page execute and read and write
clean
4060000
unkown
page read and write
clean
C67000
unkown
page execute and read and write
clean
3312000
unkown
page readonly
clean
2CC0000
unkown
page read and write
clean
1A0000
unkown
page execute and read and write
clean
1C0000
unkown
page readonly
clean
1FF0000
unkown
page execute and read and write
clean
179000
unkown
page read and write
clean
2B80000
unkown
page read and write
clean
4811000
heap private
page read and write
clean
2E70000
unkown
page read and write
clean
4460000
unkown
page read and write
clean
21E0000
unkown
page readonly
clean
265C000
unkown
page read and write
clean
20FF000
unkown
page read and write
clean
A82E000
unkown
page read and write
clean
2A71000
unkown
page read and write
clean
21D0000
unkown
page read and write
clean
503E000
unkown
page read and write
clean
970000
unkown
page readonly
clean
2690000
unkown
page readonly
clean
1BCF000
unkown
page read and write
clean
2D20000
unkown
page execute read
clean
3619000
unkown
page readonly
clean
73EE000
unkown
page read and write
clean
4AD0000
heap private
page execute and read and write
clean
77F9000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
2587000
unkown
page readonly
clean
2A80000
unkown
page read and write
clean
700000
unkown
page read and write
clean
2C2000
heap default
page read and write
clean
2BC0000
unkown
page write copy
clean
4A0000
unkown
page read and write
clean
1F2000
unkown image
page execute read
clean
26C0000
unkown
page readonly
clean
5AB0000
unkown
page readonly
clean
C610000
unkown
page read and write
clean
680000
unkown
page read and write
clean
2CA0000
unkown
page read and write
clean
2247000
unkown
page read and write
clean
4110000
unkown
page read and write
clean
428F000
unkown
page read and write
clean
600000
heap default
page read and write
clean
3412000
unkown
page readonly
clean
B089000
unkown
page read and write
clean
26E0000
unkown
page read and write
clean
260000
unkown
page read and write
clean
2E4000
heap default
page read and write
clean
2FD000
unkown
page read and write
clean
470000
unkown
page read and write
clean
2CE0000
unkown
page read and write
clean
62C5000
unkown
page readonly
clean
2510000
unkown
page write copy
clean
967E000
unkown
page readonly
clean
6E0000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
850000
unkown
page read and write
clean
123000
unkown
page execute and read and write
clean
AA5D000
unkown
page read and write
clean
D4000
heap private
page read and write
clean
4AC0000
unkown
page read and write
clean
260000
unkown
page read and write
clean
82DD000
unkown
page read and write
clean
2CE0000
unkown
page read and write
clean
1C70000
unkown
page readonly
clean
26B0000
unkown
page readonly
clean
400000
heap private
page read and write
clean
2B20000
unkown
page readonly
clean
821000
unkown
page read and write
clean
478000
unkown
page read and write
clean
85BE000
unkown
page read and write
clean
1BB0000
unkown
page readonly
clean
888E000
unkown
page read and write
clean
3412000
unkown
page readonly
clean
3318000
unkown
page readonly
clean
260000
unkown
page read and write
clean
44A0000
unkown
page readonly
clean
470000
unkown
page read and write
clean
4B4E000
unkown
page read and write
clean
5C3000
heap default
page read and write
clean
957000
unkown
page read and write
clean
5260000
unkown
page read and write
clean
8313000
unkown
page read and write
clean
2C90000
unkown
page read and write
clean
190000
unkown
page read and write
clean
4294000
unkown
page read and write
clean
1D7000
heap default
page read and write
clean
BE36000
unkown
page read and write
clean
2B50000
unkown
page readonly
clean
2AB4000
unkown
page read and write
clean
2231000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
2EF0000
heap private
page read and write
clean
2B0000
unkown image
page readonly
clean
1BC000
unkown
page read and write
clean
2EB0000
unkown
page read and write
clean
34D4000
unkown
page readonly
clean
4B50000
unkown
page readonly
clean
480D000
heap private
page read and write
clean
861C000
unkown
page read and write
clean
2EC0000
unkown
page readonly
clean
34F4000
unkown
page readonly
clean
2C4000
unkown image
page readonly
clean
2E60000
unkown
page readonly
clean
6F94000
heap private
page read and write
clean
4800000
heap private
page read and write
clean
B0EE000
unkown
page read and write
clean
2000000
unkown
page execute and read and write
clean
9E0000
unkown
page execute and read and write
clean
103F000
unkown
page read and write
clean
48BF000
unkown
page read and write
clean
CD24000
unkown
page read and write
clean
5E4A000
unkown
page readonly
clean
2700000
unkown
page readonly
clean
1C13000
heap private
page read and write
clean
2B30000
unkown
page readonly
clean
530000
unkown
page read and write
clean
BE2F000
unkown
page read and write
clean
2D20000
unkown
page execute read
clean
1F5000
heap default
page read and write
clean
4130000
unkown
page read and write
clean
2B4000
unkown image
page readonly
clean
46B0000
unkown
page read and write
clean
3C10000
unkown
page read and write
clean
690000
unkown
page read and write
clean
660000
unkown
page read and write
clean
2D0000
unkown
page read and write
clean
70FE000
unkown
page read and write
clean
ACF3000
heap private
page read and write
clean
7AA0000
unkown
page read and write
clean
35E5000
unkown
page readonly
clean
2550000
unkown
page read and write
clean
1BC0000
unkown
page read and write
clean
1DD000
heap default
page read and write
clean
590000
unkown
page read and write
clean
B2A4000
heap private
page read and write
clean
55B000
unkown
page read and write
clean
2CD0000
unkown
page write copy
clean
850000
unkown
page readonly
clean
A3B9000
unkown
page write copy
clean
3840000
unkown
page readonly
clean
2EF9000
heap private
page read and write
clean
2F7000
unkown
page read and write
clean
35D2000
unkown
page readonly
clean
76C0000
heap private
page read and write
clean
2910000
unkown
page execute and read and write
clean
5B71000
unkown
page readonly
clean
180000
unkown
page write copy
clean
4051000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
2D30000
unkown
page read and write
clean
2EA0000
unkown
page read and write
clean
80000
unkown
page readonly
clean
5DF000
unkown
page read and write
clean
543000
unkown
page read and write
clean
596F000
unkown
page read and write
clean
72F0000
heap private
page read and write
clean
224C000
unkown
page read and write
clean
216F000
unkown
page read and write
clean
540000
unkown
page read and write
clean
2EA0000
unkown
page read and write
clean
2587000
unkown
page readonly
clean
77F0000
unkown
page read and write
clean
940000
unkown
page read and write
clean
24B0000
unkown
page write copy
clean
B2A0000
heap private
page read and write
clean
920000
unkown
page execute and read and write
clean
3542000
unkown
page readonly
clean
34F2000
unkown
page readonly
clean
46E0000
unkown
page read and write
clean
2CF0000
unkown
page read and write
clean
2E38000
unkown
page read and write
clean
190000
unkown
page read and write
clean
CE22000
unkown
page read and write
clean
490000
unkown
page read and write
clean
2CC0000
unkown
page read and write
clean
4450000
unkown
page readonly
clean
820000
heap private
page read and write
clean
34D4000
unkown
page readonly
clean
1F0000
unkown image
page readonly
clean
2AE000
unkown image
page write copy
clean
7EFDF000
unkown
page read and write
clean
130000
heap private
page read and write
clean
2070000
unkown
page readonly
clean
2C7000
heap default
page read and write
clean
1E9000
heap default
page read and write
clean
3642000
unkown
page readonly
clean
1B5A000
unkown
page read and write
clean
82D0000
unkown
page read and write
clean
3612000
unkown
page readonly
clean
517D000
unkown
page read and write
clean
558E000
unkown
page read and write
clean
2B0000
unkown image
page readonly
clean
2B4000
unkown image
page readonly
clean
180000
unkown
page write copy
clean
95E000
unkown
page read and write
clean
A00000
unkown
page read and write
clean
449D000
unkown
page read and write
clean
21F0000
heap private
page read and write
clean
14D000
unkown
page execute and read and write
clean
CDA3000
unkown
page read and write
clean
1EE0000
unkown
page read and write
clean
AD0000
unkown
page execute and read and write
clean
C61B000
unkown
page read and write
clean
300000
unkown
page read and write
clean
720000
unkown
page read and write
clean
C6D3000
unkown
page read and write
clean
3AEF000
unkown
page read and write
clean
15A000
unkown
page execute and read and write
clean
629000
heap default
page read and write
clean
2B40000
unkown
page readonly
clean
BD0000
unkown
page execute and read and write
clean
1EA000
unkown
page read and write
clean
1D0000
heap default
page read and write
clean
260000
unkown
page read and write
clean
30D000
unkown
page read and write
clean
640000
unkown
page read and write
clean
480000
unkown
page read and write
clean
1BF5000
heap private
page read and write
clean
75B1000
unkown
page read and write
clean
2170000
unkown
page execute and read and write
clean
1F2000
unkown image
page execute read
clean
3B30000
unkown
page read and write
clean
3C38000
unkown
page read and write
clean
860000
unkown
page read and write
clean
1B40000
unkown
page readonly
clean
10000
heap private
page read and write
clean
2D0000
unkown
page read and write
clean
26D0000
unkown
page readonly
clean
260000
heap default
page read and write
clean
C0EA000
unkown
page read and write
clean
1AF0000
unkown
page read and write
clean
260000
unkown
page read and write
clean
110000
unkown
page read and write
clean
2EE000
unkown
page read and write
clean
510000
unkown
page read and write
clean
350000
unkown
page read and write
clean
C70000
unkown
page execute and read and write
clean
1D7000
heap default
page read and write
clean
44E0000
unkown
page read and write
clean
265E000
unkown
page read and write
clean
2004000
unkown
page execute and read and write
clean
1E80000
unkown
page read and write
clean
360000
unkown
page read and write
clean
3D0000
unkown
page readonly
clean
9BCF000
unkown
page readonly
clean
6A4000
heap private
page read and write
clean
2CC000
unkown image
page readonly
clean
265C000
unkown
page read and write
clean
21AD000
unkown
page read and write
clean
1A7000
heap default
page read and write
clean
25D000
heap default
page read and write
clean
CEA3000
unkown
page read and write
clean
35C6000
unkown
page readonly
clean
7AAB000
unkown
page read and write
clean
260000
unkown
page read and write
clean
710000
unkown
page read and write
clean
2C4000
unkown image
page readonly
clean
1BF5000
heap private
page read and write
clean
F0000
unkown
page read and write
clean
260000
unkown
page read and write
clean
5680000
heap private
page read and write
clean
7B40000
unkown
page read and write
clean
856E000
unkown
page read and write
clean
26F0000
unkown
page readonly
clean
708000
unkown
page read and write
clean
650000
unkown
page read and write
clean
34F4000
unkown
page readonly
clean
4A00000
unkown
page read and write
clean
140000
unkown
page read and write
clean
690000
unkown
page read and write
clean
26A0000
unkown
page readonly
clean
35F9000
unkown
page readonly
clean
419A000
unkown
page read and write
clean
2067000
unkown
page read and write
clean
20000
unkown
page read and write
clean
1BD0000
unkown
page read and write
clean
8471000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
582B000
unkown
page read and write
clean
CE60000
unkown
page read and write
clean
43BC000
unkown
page read and write
clean
38B0000
unkown
page read and write
clean
2E70000
unkown
page read and write
clean
1E2F000
unkown
page read and write
clean
414D000
unkown
page read and write
clean
6DEF000
unkown
page readonly
clean
16B000
unkown
page execute and read and write
clean
2184000
unkown
page execute and read and write
clean
2C4000
unkown image
page readonly
clean
21F0000
unkown
page execute and read and write
clean
20000
unkown
page readonly
clean
39F4000
unkown
page read and write
clean
8C2A000
unkown
page readonly
clean
9668000
unkown
page readonly
clean
2540000
unkown
page read and write
clean
2A8F000
unkown
page read and write
clean
2EC000
unkown
page read and write
clean
28F3000
unkown
page read and write
clean
300000
unkown
page read and write
clean
260000
unkown
page read and write
clean
2A20000
unkown
page readonly
clean
550000
unkown
page readonly
clean
25F2000
unkown
page read and write
clean
3231000
unkown
page read and write
clean
131F000
unkown
page read and write
clean
23A6000
unkown
page read and write
clean
AF0000
unkown
page execute and read and write
clean
82FD000
unkown
page read and write
clean
2B20000
unkown
page readonly
clean
4F30000
unkown
page readonly
clean
124000
unkown
page read and write
clean
7A9000
heap default
page read and write
clean
AE7000
unkown
page execute and read and write
clean
1C0000
unkown
page readonly
clean
2CD0000
unkown
page write copy
clean
4520000
unkown
page readonly
clean
1E6000
heap default
page read and write
clean
3D0000
unkown
page readonly
clean
30B000
unkown
page read and write
clean
1B5A000
unkown
page read and write
clean
35FD000
unkown
page readonly
clean
2F7000
unkown
page read and write
clean
26B0000
unkown
page readonly
clean
2B4000
unkown image
page readonly
clean
CCE0000
unkown
page read and write
clean
CD0000
unkown
page execute and read and write
clean
1C0000
unkown
page execute and read and write
clean
1BCF000
unkown
page read and write
clean
4470000
unkown
page readonly
clean
260000
unkown
page read and write
clean
2CB0000
unkown
page read and write
clean
579E000
unkown
page read and write
clean
2F0000
unkown
page read and write
clean
7DD000
unkown
page read and write
clean
48B0000
heap private
page read and write
clean
66EF000
unkown
page readonly
clean
2B0000
unkown image
page readonly
clean
1F5000
heap default
page read and write
clean
3E27000
unkown
page readonly
clean
2A60000
unkown
page read and write
clean
2C4000
unkown image
page readonly
clean
There are 843 hidden memdumps, click here to show them.