IOC Report

loading gif

Files

File Path
Type
Category
Malicious
China Provinces-Data 31 OCT 2021.docx
Microsoft Word 2007+
initial sample
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F9CE0E30-E306-46BA-9278-F91FF6CAA486
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{A9DAD24F-69A5-4999-9416-4896185140A4}.tmp
Composite Document File V2 Document, Cannot read section info
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{35CF56E4-F1E4-47F2-B569-421E607A4A4D}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{CCACD415-EDEE-4DA8-8103-58CDAC2B50AF}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\mso42C.tmp
GIF image data, version 89a, 15 x 15
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\China Provinces-Data 31 OCT 2021.docx.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu Sep 23 14:11:36 2021, mtime=Mon Nov 1 14:13:58 2021, atime=Mon Nov 1 14:13:55 2021, length=19961, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex
Little-endian UTF-16 Unicode text, with no line terminators
dropped
clean
C:\Users\user\Desktop\~$ina Provinces-Data 31 OCT 2021.docx
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{32A009B3-E3BF-4300-BF80-F6867CD7AE39}.tmp
Composite Document File V2 Document, Cannot read section info
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6BB2BC61-620F-417C-BDF8-A963CA13DE9C}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{88097168-8014-4F50-9F5B-FCD16AD8ED4B}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\msoDB90.tmp
GIF image data, version 89a, 15 x 15
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\China Provinces-Data 31 OCT 2021.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Mon Aug 30 20:08:56 2021, mtime=Mon Aug 30 20:08:56 2021, atime=Mon Nov 1 14:08:15 2021, length=19961, window=hide
dropped
clean
There are 6 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
clean

URLs

Name
IP
Malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://roaming.edog.
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://api.aadrm.com
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://api.addins.store.officeppe.com/addinstemplate
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://outlook.office365.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://substrate.office.com/search/api/v2/init
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://substrate.office.com/search/api/v1/SearchHistory
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://onedrive.live.com
unknown
clean
https://ovisualuiapp.azurewebsites.net/pbiagave/
unknown
clean
There are 90 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
1c=
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
2c=
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
!f=
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
RemoteClearDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
Last
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
FilePath
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
StartDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
EndDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Properties
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Url
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
LastClean
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableWinHttpCertAuth
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableIsOwnerRegex
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableSessionAwareHttpClose
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALForExtendedApps
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALSetSilentAuth
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableGuestCredProvider
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableOstringReplace
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
ak=
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\20650
20650
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Word8.0
MSForms
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Word8.0
MSComctlLib
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arial
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Courier New
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Symbol
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
SimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Century
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sylfaen
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Cambria Math
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Marlett
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arial Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiLight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiBold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift Light SemiCondensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiLight SemiConde
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiCondensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiBold SemiConden
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift Light Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiLight Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bahnschrift SemiBold Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Candara
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Comic Sans MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Consolas
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Constantia
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Corbel
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Ebrima
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Medium
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gabriola
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gadugi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Georgia
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Impact
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Ink Free
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Javanese Text
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Leelawadee UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Leelawadee UI Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Console
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Sans Unicode
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Malgun Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Malgun Gothic Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft Himalaya
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft JhengHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft JhengHei UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft JhengHei Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft JhengHei UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft New Tai Lue
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft PhagsPa
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft Sans Serif
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft Tai Le
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft YaHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft YaHei UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft YaHei Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft YaHei UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft Yi Baiti
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
PMingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MingLiU_HKSCS-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Mongolian Baiti
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MS Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS UI Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS PGothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MV Boli
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Myanmar Text
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Nirmala UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Nirmala UI Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Palatino Linotype
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe MDL2 Assets
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe Print
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Emoji
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Historic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Semibold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Segoe UI Symbol
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@SimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
NSimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
SimSun-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Small
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Text
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Subheading
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Heading
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sitka Banner
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tahoma
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Trebuchet MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Verdana
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Webdings
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Yu Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic UI Semibold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic Medium
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Yu Gothic UI Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
HoloLens MDL2 Assets
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Leelawadee
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Microsoft Uighur
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Wingdings 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Wingdings 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tempus Sans ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Pristina
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Papyrus
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Mistral
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Handwriting
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Kristen ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Juice ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
French Script MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Freestyle Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bradley Hand ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS Outlook
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arial Narrow
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Book Antiqua
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Garamond
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Monotype Corsiva
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Century Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Algerian
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Baskerville Old Face
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bauhaus 93
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bell MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Berlin Sans FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bernard MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bodoni MT Poster Compressed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Britannic Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Broadway
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Brush Script MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Californian FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Centaur
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Chiller
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Colonna MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Cooper Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Footlight MT Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Harlow Solid Italic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Harrington
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
High Tower Text
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Jokerman
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Kunstler Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Bright
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Calligraphy
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Fax
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Magneto
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Matura MT Script Capitals
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Modern No. 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Niagara Engraved
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Niagara Solid
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Old English Text MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Onyx
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Parchment
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Playbill
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Poor Richard
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Ravie
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Informal Roman
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Showcard Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Snap ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Stencil
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Viner Hand ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Vivaldi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Vladimir Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Wide Latin
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tw Cen MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tw Cen MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Script MT Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Rockwell Extra Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Rockwell Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Rockwell
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Rage Italic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Perpetua Titling MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Perpetua
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Palace Script MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
OCR A Extended
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Maiandra GD
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Sans Typewriter
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lucida Sans
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Imprint MT Shadow
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Haettenschweiler
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Goudy Stout
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Goudy Old Style
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gloucester MT Extra Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gill Sans Ultra Bold Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gill Sans Ultra Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gill Sans MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gill Sans MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gill Sans MT Ext Condensed Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gigi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Medium Cond
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Heavy
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Demi Cond
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Demi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Franklin Gothic Book
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Forte
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Felix Titling
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Eras Medium ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Eras Light ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Eras Demi ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Eras Bold ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Engravers MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Elephant
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Edwardian Script ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Curlz MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Copperplate Gothic Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Copperplate Gothic Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Century Schoolbook
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Castellar
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Calisto MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bookman Old Style
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bodoni MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bodoni MT Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bodoni MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Blackadder ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arial Rounded MT Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Agency FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Bookshelf Symbol 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS Reference Sans Serif
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS Reference Specialty
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Berlin Sans FB Demi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tw Cen MT Condensed Extra Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MT Extra
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Cambria
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\27B03
27B03
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
File Path
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Datetime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options
VisiFlm
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options
AutoGrammar
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options
AutosaveInterval
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options
PreferredView
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Malgun Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Malgun Gothic Semilight
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft JhengHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft JhengHei Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft JhengHei UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft JhengHei UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft YaHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft YaHei Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft YaHei UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Microsoft YaHei UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@MingLiU_HKSCS-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@MingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@MS Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@MS PGothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@MS UI Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@NSimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@PMingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@SimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@SimSun-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic Medium
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic UI Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic UI Semibold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\MathFonts
@Yu Gothic UI Semilight
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
WORDFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTime
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Name
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Path
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
Extensions
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\27B03
27B03
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Datetime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
Position
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Data
Settings
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
k '
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
s (
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
5'(
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2DD25
2DD25
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Wingdings
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS Mincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Batang
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
PMingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Dotum
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
SimHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gulim
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Angsana New
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Cordia New
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Mangal
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Latha
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Vrinda
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Raavi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Shruti
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gautami
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Tunga
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Estrangelo Edessa
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arial Unicode MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Calibri Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Batang
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
BatangChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@BatangChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gungsuh
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Gungsuh
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
GungsuhChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@GungsuhChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
DaunPenh
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
DokChampa
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Euphemia
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Vani
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Gulim
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
GulimChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@GulimChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Dotum
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
DotumChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@DotumChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Iskoola Pota
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Kalinga
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Kartika
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Khmer UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Lao UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Malgun Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Meiryo
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Meiryo
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Meiryo UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Meiryo UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Microsoft JhengHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Microsoft YaHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@PMingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MingLiU_HKSCS
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MingLiU_HKSCS
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@PMingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MingLiU_HKSCS-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MS PGothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MS UI Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MS Mincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MS PMincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@MS PMincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Nyala
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Plantagenet Cherokee
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@NSimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@SimSun-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Shonar Bangla
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Aparajita
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Gisha
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Kokila
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
MoolBoran
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Utsaah
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Vijaya
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Andalus
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Arabic Typesetting
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Simplified Arabic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Simplified Arabic Fixed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Sakkal Majalla
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Traditional Arabic
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Aharoni
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
David
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
FrankRuehl
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Levenim MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Miriam
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Miriam Fixed
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Narkisim
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Rod
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
FangSong
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@FangSong
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@SimHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
KaiTi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@KaiTi
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
AngsanaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
Browallia New
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
BrowalliaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
CordiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
DilleniaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
EucrosiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
FreesiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
IrisUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
JasmineUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
KodchiangUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
LilyUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
DFKai-SB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@DFKai-SB
clean
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose
@Arial Unicode MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Arial Unicode MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Batang
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@BatangChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@DFKai-SB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Dotum
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@DotumChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@FangSong
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Gulim
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@GulimChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Gungsuh
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@GungsuhChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@KaiTi
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Malgun Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Meiryo
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Meiryo UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Microsoft JhengHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@Microsoft YaHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MingLiU_HKSCS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MingLiU_HKSCS-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MS Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MS Mincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MS PGothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MS PMincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@MS UI Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@NSimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@PMingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@PMingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@SimHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@SimSun
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
@SimSun-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Agency FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Aharoni
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Algerian
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Andalus
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Angsana New
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
AngsanaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Aparajita
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arabic Typesetting
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arial
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arial Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arial Narrow
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arial Rounded MT Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Arial Unicode MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Baskerville Old Face
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Batang
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
BatangChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bauhaus 93
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bell MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Berlin Sans FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Berlin Sans FB Demi
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bernard MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Blackadder ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bodoni MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bodoni MT Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bodoni MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bodoni MT Poster Compressed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Book Antiqua
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bookman Old Style
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bookshelf Symbol 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Bradley Hand ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Britannic Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Broadway
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Browallia New
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
BrowalliaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Brush Script MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Calibri
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Calibri Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Californian FB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Calisto MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Cambria
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Cambria Math
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Candara
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Castellar
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Centaur
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Century
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Century Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Century Schoolbook
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Chiller
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Colonna MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Comic Sans MS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Consolas
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Constantia
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Cooper Black
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Copperplate Gothic Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Copperplate Gothic Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Corbel
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Cordia New
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
CordiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Courier New
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Curlz MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
DaunPenh
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
David
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
DFKai-SB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
DilleniaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
DokChampa
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Dotum
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
DotumChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Ebrima
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Edwardian Script ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Elephant
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Engravers MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Eras Bold ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Eras Demi ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Eras Light ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Eras Medium ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Estrangelo Edessa
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
EucrosiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Euphemia
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
FangSong
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Felix Titling
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Footlight MT Light
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Forte
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Book
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Demi
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Demi Cond
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Heavy
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Medium
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Franklin Gothic Medium Cond
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
FrankRuehl
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
FreesiaUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Freestyle Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
French Script MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gabriola
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Garamond
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gautami
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Georgia
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gigi
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gill Sans MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gill Sans MT Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gill Sans MT Ext Condensed Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gill Sans Ultra Bold
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gill Sans Ultra Bold Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gisha
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gloucester MT Extra Condensed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Goudy Old Style
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Goudy Stout
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gulim
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
GulimChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Gungsuh
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
GungsuhChe
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Haettenschweiler
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Harlow Solid Italic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Harrington
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
High Tower Text
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Impact
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Imprint MT Shadow
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Informal Roman
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
IrisUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Iskoola Pota
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
JasmineUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Jokerman
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Juice ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
KaiTi
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Kalinga
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Kartika
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Khmer UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
KodchiangUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Kokila
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Kristen ITC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Kunstler Script
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lao UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Latha
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Leelawadee
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Levenim MT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
LilyUPC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Bright
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Calligraphy
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Console
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Fax
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Handwriting
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Sans
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Sans Typewriter
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Lucida Sans Unicode
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Magneto
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Maiandra GD
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Malgun Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Mangal
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Marlett
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Matura MT Script Capitals
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Meiryo
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Meiryo UI
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft Himalaya
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft JhengHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft New Tai Lue
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft PhagsPa
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft Sans Serif
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft Tai Le
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft Uighur
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft YaHei
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Microsoft Yi Baiti
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MingLiU
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MingLiU_HKSCS
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MingLiU_HKSCS-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MingLiU-ExtB
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Miriam
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Miriam Fixed
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Mistral
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Modern No. 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Mongolian Baiti
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Monotype Corsiva
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MoolBoran
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS Mincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS Outlook
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS PGothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS PMincho
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS Reference Sans Serif
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS Reference Specialty
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MS UI Gothic
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MT Extra
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
MV Boli
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
Narkisim
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\34FC5
34FC5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
WORDFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
SpellingAndGrammarFiles_3082
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
SpellingAndGrammarFiles_1036
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
SpellingAndGrammarFiles_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\34FC5
34FC5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Data
Settings
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options
ZoomApp
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
MTTF
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
MTTA
clean
There are 668 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF4F80A3000
unkown image
page readonly
clean
23078518000
unkown
page read and write
clean
7DF527D50000
unkown image
page readonly
clean
1AA42C3D000
unkown
page read and write
clean
6A51C7B000
stack
page read and write
clean
7FF4F3FFA000
unkown image
page readonly
clean
7FF4F810B000
unkown image
page readonly
clean
17610D7F000
unkown
page read and write
clean
17610513000
unkown
page read and write
clean
7FF51280A000
unkown image
page readonly
clean
7FF578EFE000
unkown image
page readonly
clean
7FF51A0F1000
unkown image
page readonly
clean
7FF578B23000
unkown image
page readonly
clean
243FAFE000
stack
page read and write
clean
17610D9A000
unkown
page read and write
clean
7DF403CF0000
unkown image
page readonly
clean
7FF578B39000
unkown image
page readonly
clean
7FF53C34B000
unkown image
page readonly
clean
1AA42C48000
unkown
page read and write
clean
17610449000
unkown
page read and write
clean
1D528BD0000
unkown
page read and write
clean
26F75CB000
unkown
page read and write
clean
7DF520490000
unkown image
page readonly
clean
1EE87600000
unkown image
page readonly
clean
171A2760000
unkown image
page readonly
clean
7DF5859F2000
unkown image
page readonly
clean
1EE8784F000
unkown
page read and write
clean
230788E0000
unkown image
page readonly
clean
1F058D00000
unkown
page read and write
clean
7FF590A3F000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
1761044E000
unkown
page read and write
clean
17610D8A000
unkown
page read and write
clean
171A2813000
unkown
page read and write
clean
1F058C29000
unkown
page read and write
clean
230783C0000
unkown image
page readonly
clean
17610D6A000
unkown
page read and write
clean
7FF577CAE000
unkown image
page readonly
clean
6A522FF000
stack
page read and write
clean
7FF5C9A75000
unkown image
page readonly
clean
23079EB0000
unkown
page read and write
clean
18B1CE87000
unkown
page read and write
clean
17610470000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
7FF590920000
unkown image
page readonly
clean
2307851C000
unkown
page read and write
clean
7FF519FF4000
unkown image
page readonly
clean
7FF590767000
unkown image
page readonly
clean
1EE875E0000
unkown image
page read and write
clean
815FCFC000
stack
page read and write
clean
17611200000
unkown
page read and write
clean
23C10D08000
unkown
page read and write
clean
7FF51272F000
unkown image
page readonly
clean
23079FA0000
unkown
page read and write
clean
176102E0000
unkown image
page readonly
clean
23C10D02000
unkown
page read and write
clean
7FF577D6A000
unkown image
page readonly
clean
7FF5C9258000
unkown image
page readonly
clean
7DF5224E2000
unkown image
page readonly
clean
17610DAB000
unkown
page read and write
clean
1AA42C73000
unkown
page read and write
clean
7FF51991D000
unkown image
page readonly
clean
1D528C00000
unkown
page read and write
clean
7FF5787DE000
unkown image
page readonly
clean
243FEFE000
stack
page read and write
clean
23C11250000
unkown image
page readonly
clean
7FF590C32000
unkown image
page readonly
clean
815FB7D000
stack
page read and write
clean
7FF577CA7000
unkown image
page readonly
clean
561CF7A000
stack
page read and write
clean
7FF590A7E000
unkown image
page readonly
clean
23A3BA79000
unkown
page read and write
clean
1EE87900000
unkown
page read and write
clean
7FF590C61000
unkown image
page readonly
clean
7DF425C20000
unkown image
page readonly
clean
7FF51279D000
unkown image
page readonly
clean
7FF590A9F000
unkown image
page readonly
clean
7FF5145A2000
unkown image
page readonly
clean
7FF4F8071000
unkown image
page readonly
clean
22EAAD10000
unkown image
page readonly
clean
26F80F8000
stack
page read and write
clean
18B1CEC6000
unkown
page read and write
clean
7FF51478D000
unkown image
page readonly
clean
7FF577B6B000
unkown image
page readonly
clean
23079E90000
unkown
page read and write
clean
1F058C00000
unkown
page read and write
clean
7FF519FE7000
unkown image
page readonly
clean
22EAAE20000
unkown
page read and write
clean
17610D6A000
unkown
page read and write
clean
D5873FC000
stack
page read and write
clean
18B1D380000
unkown image
page readonly
clean
7DF54A060000
unkown image
page readonly
clean
23A3BA5F000
unkown
page read and write
clean
7FF4F4011000
unkown image
page readonly
clean
23078390000
heap private
page read and write
clean
7FF512743000
unkown image
page readonly
clean
7FF4F3F3E000
unkown image
page readonly
clean
7FF578FCA000
unkown image
page readonly
clean
17610D98000
unkown
page read and write
clean
17610D93000
unkown
page read and write
clean
7FF514864000
unkown image
page readonly
clean
7DF59E810000
unkown image
page readonly
clean
230786D0000
unkown image
page readonly
clean
7FF53C1EB000
unkown image
page readonly
clean
7FF590B6D000
unkown image
page readonly
clean
7FF5C9B03000
unkown image
page readonly
clean
7FF4F80E7000
unkown image
page readonly
clean
1D528B70000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
171A285B000
unkown
page read and write
clean
7DF505E32000
unkown image
page readonly
clean
7FF5C9AFF000
unkown image
page readonly
clean
7FF577D52000
unkown image
page readonly
clean
7DF501C80000
unkown image
page readonly
clean
6A5187B000
unkown
page read and write
clean
7FF590A73000
unkown image
page readonly
clean
17610D8F000
unkown
page read and write
clean
1AA42C60000
unkown
page read and write
clean
17610D8E000
unkown
page read and write
clean
1EE8783C000
unkown
page read and write
clean
7FF5C96D1000
unkown image
page readonly
clean
7FF5C99C0000
unkown image
page readonly
clean
7DF586C50000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
7FF57863E000
unkown image
page readonly
clean
7FF51277E000
unkown image
page readonly
clean
7FF577D64000
unkown image
page readonly
clean
7DF520480000
unkown image
page readonly
clean
7FF5C9BC2000
unkown image
page readonly
clean
17610DCC000
unkown
page read and write
clean
17610D8C000
unkown
page read and write
clean
17610D87000
unkown
page read and write
clean
7FF4F80E3000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
23A3B970000
unkown image
page readonly
clean
22EAAEB5000
unkown
page read and write
clean
7FF4F3F63000
unkown image
page readonly
clean
17610D8D000
unkown
page read and write
clean
1AA42B20000
unkown image
page readonly
clean
17610D1E000
unkown
page read and write
clean
17610D93000
unkown
page read and write
clean
7DF586C42000
unkown image
page readonly
clean
6A521FE000
stack
page read and write
clean
1D528B80000
unkown image
page readonly
clean
7FF53C37D000
unkown image
page readonly
clean
17610D92000
unkown
page read and write
clean
7DF5D7870000
unkown image
page readonly
clean
7FF590B83000
unkown image
page readonly
clean
23078400000
unkown
page read and write
clean
7FF519FD3000
unkown image
page readonly
clean
7FF5C9B1E000
unkown image
page readonly
clean
E66F92E000
stack
page read and write
clean
7DF54A060000
unkown image
page readonly
clean
1AA42C42000
unkown
page read and write
clean
7FF53C35E000
unkown image
page readonly
clean
7FF590ABE000
unkown image
page readonly
clean
7FF514852000
unkown image
page readonly
clean
ABAAA7F000
stack
page read and write
clean
171A3002000
unkown
page read and write
clean
7DF520490000
unkown image
page readonly
clean
1F058C55000
unkown
page read and write
clean
171A2660000
unkown image
page readonly
clean
23A3BB00000
unkown
page read and write
clean
7DF520482000
unkown image
page readonly
clean
7FF578EDD000
unkown image
page readonly
clean
2307844C000
unkown
page read and write
clean
7FF4F80C9000
unkown image
page readonly
clean
7FF4F3F1D000
unkown image
page readonly
clean
23C10C8A000
unkown
page read and write
clean
22EAAD10000
unkown image
page readonly
clean
7FF57892D000
unkown image
page readonly
clean
7FF577B4D000
unkown image
page readonly
clean
7FF4F3F6E000
unkown image
page readonly
clean
7FF577D71000
unkown image
page readonly
clean
7FF59097A000
unkown image
page readonly
clean
7FF5C9B6D000
unkown image
page readonly
clean
7DF3FFB40000
unkown image
page readonly
clean
7FF57865C000
unkown image
page readonly
clean
CB2CEF7000
stack
page read and write
clean
17610D73000
unkown
page read and write
clean
17610340000
unkown image
page readonly
clean
17610D7C000
unkown
page read and write
clean
17610456000
unkown
page read and write
clean
7FF53C255000
unkown image
page readonly
clean
7FF5908E1000
unkown image
page readonly
clean
7FF53C313000
unkown image
page readonly
clean
1D528C13000
unkown
page read and write
clean
7DF5859E0000
unkown image
page readonly
clean
1AA42C29000
unkown
page read and write
clean
7FF5147A0000
unkown image
page readonly
clean
17610DA5000
unkown
page read and write
clean
17610429000
unkown
page read and write
clean
7FF53C320000
unkown image
page readonly
clean
87B35BC000
unkown
page read and write
clean
17610D7B000
unkown
page read and write
clean
7DF527D52000
unkown image
page readonly
clean
17611363000
unkown
page read and write
clean
1EE87913000
unkown
page read and write
clean
7FF577CFD000
unkown image
page readonly
clean
1AA43250000
unkown image
page readonly
clean
23A3B9C0000
heap default
page read and write
clean
7DF520492000
unkown image
page readonly
clean
7FF53C337000
unkown image
page readonly
clean
176102E0000
unkown image
page readonly
clean
17610D5E000
unkown
page read and write
clean
1AA42C59000
unkown
page read and write
clean
7FF5901F2000
unkown image
page readonly
clean
23078500000
unkown
page read and write
clean
7FF51A067000
unkown image
page readonly
clean
17610DA2000
unkown
page read and write
clean
17610D77000
unkown
page read and write
clean
7DF5D7852000
unkown image
page readonly
clean
7FF5909FC000
unkown image
page readonly
clean
17610D75000
unkown
page read and write
clean
7FF4F4011000
unkown image
page readonly
clean
7FF590B6F000
unkown image
page readonly
clean
87B3CFF000
stack
page read and write
clean
7FF578FBA000
unkown image
page readonly
clean
23C10C6F000
unkown
page read and write
clean
1761044B000
unkown
page read and write
clean
7FF577B06000
unkown image
page readonly
clean
17610B60000
unkown image
page read and write
clean
7FF578645000
unkown image
page readonly
clean
1AA42BA0000
unkown
page read and write
clean
1F058A30000
heap default
page read and write
clean
171A2859000
unkown
page read and write
clean
7FF53C353000
unkown image
page readonly
clean
7FF578CC8000
unkown image
page readonly
clean
17610D7C000
unkown
page read and write
clean
22EAAE70000
unkown image
page readonly
clean
22EAB0C0000
unkown image
page readonly
clean
ABAA39B000
unkown
page read and write
clean
7DF5859E2000
unkown image
page readonly
clean
7FF51A0C9000
unkown image
page readonly
clean
23078380000
unkown image
page read and write
clean
1EE87D80000
unkown image
page readonly
clean
17610413000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
18B1CBF0000
unkown image
page readonly
clean
E66F8AB000
unkown
page read and write
clean
7DF59E7F0000
unkown image
page readonly
clean
7FF51A04E000
unkown image
page readonly
clean
18B1CBC0000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
23078413000
unkown
page read and write
clean
17610D93000
unkown
page read and write
clean
7DF505E20000
unkown image
page readonly
clean
7FF59095D000
unkown image
page readonly
clean
17610D6D000
unkown
page read and write
clean
1D529250000
unkown image
page readonly
clean
D58747E000
stack
page read and write
clean
7DF59E7F0000
unkown image
page readonly
clean
7FF577C8D000
unkown image
page readonly
clean
7FF4F8137000
unkown image
page readonly
clean
26F7FFA000
stack
page read and write
clean
17610452000
unkown
page read and write
clean
1EE87C00000
unkown image
page readonly
clean
2307843D000
unkown
page read and write
clean
7DF54A070000
unkown image
page readonly
clean
17610D89000
unkown
page read and write
clean
17610D99000
unkown
page read and write
clean
23A3BA59000
unkown
page read and write
clean
7FF4F3F33000
unkown image
page readonly
clean
23A3B960000
heap private
page read and write
clean
17610DA5000
unkown
page read and write
clean
7FF53C3D9000
unkown image
page readonly
clean
7FF514547000
unkown image
page readonly
clean
17610DA2000
unkown
page read and write
clean
17610DC8000
unkown
page read and write
clean
7FF590960000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
17611202000
unkown
page read and write
clean
1EE875F0000
heap private
page read and write
clean
7DFAE8DC9000
unkown image
page readonly
clean
7FF5906F9000
unkown image
page readonly
clean
23078A70000
unkown image
page readonly
clean
7FF5147FA000
unkown image
page readonly
clean
17610DBB000
unkown
page read and write
clean
7FF53C2F7000
unkown image
page readonly
clean
7FF5C9BF1000
unkown image
page readonly
clean
17610D75000
unkown
page read and write
clean
7FF590BB8000
unkown image
page readonly
clean
23078513000
unkown
page read and write
clean
1D528C24000
unkown
page read and write
clean
7FF5C9BC9000
unkown image
page readonly
clean
7FF4F3FF4000
unkown image
page readonly
clean
7FF5906F7000
unkown image
page readonly
clean
1EE87630000
unkown image
page readonly
clean
7DF501C80000
unkown image
page readonly
clean
17610D8E000
unkown
page read and write
clean
7FF590AA3000
unkown image
page readonly
clean
7FF53C32E000
unkown image
page readonly
clean
7FF590677000
unkown image
page readonly
clean
17610D79000
unkown
page read and write
clean
17610D9E000
unkown
page read and write
clean
7DF59E802000
unkown image
page readonly
clean
7DF505E40000
unkown image
page readonly
clean
7DF586C40000
unkown image
page readonly
clean
7DF59E8D0000
unkown image
page readonly
clean
7FF590B22000
unkown image
page readonly
clean
2307845B000
unkown
page read and write
clean
7FF578EE3000
unkown image
page readonly
clean
7FF5773E2000
unkown image
page readonly
clean
17610D7D000
unkown
page read and write
clean
1F058C4E000
unkown
page read and write
clean
87B3BFB000
stack
page read and write
clean
18B1CF02000
unkown
page read and write
clean
D58787E000
stack
page read and write
clean
7FF590B62000
unkown image
page readonly
clean
7FF4F7895000
unkown image
page readonly
clean
7FF512773000
unkown image
page readonly
clean
17610DDA000
unkown
page read and write
clean
171A2902000
unkown
page read and write
clean
17610D9E000
unkown
page read and write
clean
23A3B9F0000
unkown
page read and write
clean
ABAA97F000
stack
page read and write
clean
17610D8C000
unkown
page read and write
clean
26F78FE000
stack
page read and write
clean
7FF590949000
unkown image
page readonly
clean
7FF51466B000
unkown image
page readonly
clean
23C10C7D000
unkown
page read and write
clean
17611202000
unkown
page read and write
clean
D58757B000
stack
page read and write
clean
17610D72000
unkown
page read and write
clean
7DF5224F2000
unkown image
page readonly
clean
7FF512821000
unkown image
page readonly
clean
1761121F000
unkown
page read and write
clean
7FF590C39000
unkown image
page readonly
clean
7FF590B57000
unkown image
page readonly
clean
7FF5C9B17000
unkown image
page readonly
clean
7DF5D7860000
unkown image
page readonly
clean
7FF5C9AFD000
unkown image
page readonly
clean
7FF578CDB000
unkown image
page readonly
clean
26F787E000
stack
page read and write
clean
7DF586C30000
unkown image
page readonly
clean
7DF586C30000
unkown image
page readonly
clean
171A2829000
unkown
page read and write
clean
1EE8786D000
unkown
page read and write
clean
7FF519C3D000
unkown image
page readonly
clean
7FF4F81B1000
unkown image
page readonly
clean
18B1CBE0000
unkown image
page readonly
clean
7DF4838B0000
unkown image
page readonly
clean
7FF51476E000
unkown image
page readonly
clean
7DF59E8C2000
unkown image
page readonly
clean
171A2680000
heap default
page read and write
clean
7DF59E8C0000
unkown image
page readonly
clean
7FF5908D4000
unkown image
page readonly
clean
6CE5A7C000
unkown
page read and write
clean
17610D83000
unkown
page read and write
clean
23A3B990000
unkown image
page readonly
clean
7FF5C9BD4000
unkown image
page readonly
clean
7FF577C8F000
unkown image
page readonly
clean
17610D9C000
unkown
page read and write
clean
1AA42C46000
unkown
page read and write
clean
ABAAF7E000
stack
page read and write
clean
7FF5147FD000
unkown image
page readonly
clean
17610D8F000
unkown
page read and write
clean
7FF578FC1000
unkown image
page readonly
clean
7FF519F07000
unkown image
page readonly
clean
7FF519E8F000
unkown image
page readonly
clean
17610D99000
unkown
page read and write
clean
17610D8F000
unkown
page read and write
clean
7FF51274E000
unkown image
page readonly
clean
7FF5787F4000
unkown image
page readonly
clean
7FF51A03B000
unkown image
page readonly
clean
7FF578F1B000
unkown image
page readonly
clean
7FF590BBE000
unkown image
page readonly
clean
17610D7B000
unkown
page read and write
clean
7FF5147F7000
unkown image
page readonly
clean
7FF578EF3000
unkown image
page readonly
clean
7FF51A003000
unkown image
page readonly
clean
7FF5904FB000
unkown image
page readonly
clean
7FF577CA0000
unkown image
page readonly
clean
7FF5C9B27000
unkown image
page readonly
clean
7FF577CFA000
unkown image
page readonly
clean
ABAAE7E000
stack
page read and write
clean
7DF5859F0000
unkown image
page readonly
clean
7FF51A017000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7FF4F7D27000
unkown image
page readonly
clean
E67017F000
stack
page read and write
clean
7DF5859F2000
unkown image
page readonly
clean
7FF4F7F8D000
unkown image
page readonly
clean
7DF5224E0000
unkown image
page readonly
clean
1AA42C02000
unkown
page read and write
clean
7FF577CB7000
unkown image
page readonly
clean
17610D7C000
unkown
page read and write
clean
26F7C77000
stack
page read and write
clean
171A2650000
unkown image
page readonly
clean
2307844A000
unkown
page read and write
clean
7DF4203B0000
unkown image
page readonly
clean
17611302000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
171A2802000
unkown
page read and write
clean
E67007F000
stack
page read and write
clean
D58727E000
stack
page read and write
clean
7FF53C25B000
unkown image
page readonly
clean
23C10ED0000
unkown image
page readonly
clean
17610DA2000
unkown
page read and write
clean
17610400000
unkown
page read and write
clean
17610DAC000
unkown
page read and write
clean
7FF578FD1000
unkown image
page readonly
clean
22EAAEA6000
unkown
page read and write
clean
1761044F000
unkown
page read and write
clean
23A3BB02000
unkown
page read and write
clean
7FF578FD1000
unkown image
page readonly
clean
171A2840000
unkown
page read and write
clean
18B1CE3E000
unkown
page read and write
clean
7FF4F3F5B000
unkown image
page readonly
clean
7FF5C9B10000
unkown image
page readonly
clean
7FF578FA2000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7FF59089B000
unkown image
page readonly
clean
815FA7E000
stack
page read and write
clean
171A2C00000
unkown image
page readonly
clean
7DF54A080000
unkown image
page readonly
clean
1D529330000
unkown
page read and write
clean
17610D7C000
unkown
page read and write
clean
1761044D000
unkown
page read and write
clean
17610D81000
unkown
page read and write
clean
1AA42C5A000
unkown
page read and write
clean
7FF512736000
unkown image
page readonly
clean
7FF590B0A000
unkown image
page readonly
clean
7FF51486A000
unkown image
page readonly
clean
17610D72000
unkown
page read and write
clean
7FF577D59000
unkown image
page readonly
clean
23079F20000
unkown
page read and write
clean
171A2630000
unkown image
page readonly
clean
1AA42B40000
unkown image
page readonly
clean
7FF519FC1000
unkown image
page readonly
clean
7DF447F30000
unkown image
page readonly
clean
7DF520482000
unkown image
page readonly
clean
17610380000
unkown image
page readonly
clean
7FF53BEE1000
unkown image
page readonly
clean
7FF577C93000
unkown image
page readonly
clean
22EAB440000
unkown image
page readonly
clean
23C10D00000
unkown
page read and write
clean
7DF59E7F2000
unkown image
page readonly
clean
7FF590B7A000
unkown image
page readonly
clean
7FF59078C000
unkown image
page readonly
clean
7FF514763000
unkown image
page readonly
clean
171A2D80000
unkown image
page readonly
clean
17610DAE000
unkown
page read and write
clean
17611202000
unkown
page read and write
clean
17610B50000
unkown
page read and write
clean
18B1CBA0000
unkown image
page read and write
clean
7FF590B07000
unkown image
page readonly
clean
561CEFF000
stack
page read and write
clean
7FF5909A2000
unkown image
page readonly
clean
7FF4F3F8D000
unkown image
page readonly
clean
7FF512059000
unkown image
page readonly
clean
7FF5909EB000
unkown image
page readonly
clean
1F058D02000
unkown
page read and write
clean
1D528C02000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
7DF5D7850000
unkown image
page readonly
clean
87B3AFB000
stack
page read and write
clean
1F058C66000
unkown
page read and write
clean
7FF4F8118000
unkown image
page readonly
clean
23C10C29000
unkown
page read and write
clean
7FF578CA2000
unkown image
page readonly
clean
1EE87730000
unkown image
page readonly
clean
230788D0000
unkown image
page readonly
clean
18B1CE6E000
unkown
page read and write
clean
7FF53C1B1000
unkown image
page readonly
clean
17610D79000
unkown
page read and write
clean
1F058D13000
unkown
page read and write
clean
7DF505E30000
unkown image
page readonly
clean
1AA42C31000
unkown
page read and write
clean
1AA42C5C000
unkown
page read and write
clean
7FF514564000
unkown image
page readonly
clean
815F8FE000
stack
page read and write
clean
22EAB0B5000
heap private
page read and write
clean
17610D79000
unkown
page read and write
clean
23A3BA00000
unkown
page read and write
clean
1D528BB0000
unkown image
page readonly
clean
7FF577BEC000
unkown image
page readonly
clean
176106D0000
unkown image
page readonly
clean
ABAA7FC000
stack
page read and write
clean
7FF4F3D96000
unkown image
page readonly
clean
17610D14000
unkown
page read and write
clean
1F0589D0000
heap private
page read and write
clean
2307842A000
unkown
page read and write
clean
1AA42C66000
unkown
page read and write
clean
7FF590B69000
unkown image
page readonly
clean
7DF5859E2000
unkown image
page readonly
clean
7FF578F4D000
unkown image
page readonly
clean
17610D92000
unkown
page read and write
clean
7FF519FFF000
unkown image
page readonly
clean
17610D8B000
unkown
page read and write
clean
7FF514641000
unkown image
page readonly
clean
7FF578EBB000
unkown image
page readonly
clean
1AA42C3A000
unkown
page read and write
clean
7FF4F81A4000
unkown image
page readonly
clean
17610D9E000
unkown
page read and write
clean
1D528B40000
heap private
page read and write
clean
7FF4F79ED000
unkown image
page readonly
clean
7DF5224F2000
unkown image
page readonly
clean
176102C0000
unkown image
page read and write
clean
E66FE7E000
stack
page read and write
clean
1AA430D0000
unkown image
page readonly
clean
7FF51A010000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
7FF578EF0000
unkown image
page readonly
clean
17610DB4000
unkown
page read and write
clean
26F7E77000
stack
page read and write
clean
1EE87856000
unkown
page read and write
clean
7FF590AB3000
unkown image
page readonly
clean
7FF4F806F000
unkown image
page readonly
clean
7FF51A06D000
unkown image
page readonly
clean
1AA42C67000
unkown
page read and write
clean
7FF4F3F1F000
unkown image
page readonly
clean
7FF578E4C000
unkown image
page readonly
clean
17610DA2000
unkown
page read and write
clean
E66F9AE000
stack
page read and write
clean
17610453000
unkown
page read and write
clean
7DF505E22000
unkown image
page readonly
clean
17610D9A000
unkown
page read and write
clean
7FF512815000
unkown image
page readonly
clean
7FF5C9A4B000
unkown image
page readonly
clean
7FF578F2E000
unkown image
page readonly
clean
1AA42ED0000
unkown image
page readonly
clean
7FF53C3E4000
unkown image
page readonly
clean
17610D9D000
unkown
page read and write
clean
7DF501C72000
unkown image
page readonly
clean
7FF590A41000
unkown image
page readonly
clean
17610310000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
1AA42B70000
heap default
page read and write
clean
17610D9D000
unkown
page read and write
clean
2307845C000
unkown
page read and write
clean
1AA42C7A000
unkown
page read and write
clean
171A2800000
unkown
page read and write
clean
7DF522500000
unkown image
page readonly
clean
ABAAD7C000
stack
page read and write
clean
7FF4F36E0000
unkown image
page readonly
clean
22EAAEA1000
unkown
page read and write
clean
176104D6000
unkown
page read and write
clean
7FF590AE3000
unkown image
page readonly
clean
1AA42C57000
unkown
page read and write
clean
7FF5903CC000
unkown image
page readonly
clean
23A3BA02000
unkown
page read and write
clean
18B1CDE0000
unkown
page read and write
clean
7DF5D7862000
unkown image
page readonly
clean
7FF590A11000
unkown image
page readonly
clean
6A520FC000
stack
page read and write
clean
7DF520480000
unkown image
page readonly
clean
7DF527D52000
unkown image
page readonly
clean
2307A540000
unkown image
page write copy
clean
17610DB9000
unkown
page read and write
clean
23A3BA77000
unkown
page read and write
clean
E66FCFC000
stack
page read and write
clean
7FF590B90000
unkown image
page readonly
clean
7FF5C99DB000
unkown image
page readonly
clean
17610508000
unkown
page read and write
clean
ABAAB7E000
stack
page read and write
clean
22EAAEA6000
heap default
page read and write
clean
1F059000000
unkown image
page readonly
clean
243FCFF000
stack
page read and write
clean
7DF49C6C0000
unkown image
page readonly
clean
17610DC8000
unkown
page read and write
clean
7FF514606000
unkown image
page readonly
clean
7FF5C99A1000
unkown image
page readonly
clean
23079EE0000
unkown
page read and write
clean
CB2CA7B000
unkown
page read and write
clean
18B1CC10000
heap default
page read and write
clean
7FF578DE2000
unkown image
page readonly
clean
7FF519CFD000
unkown image
page readonly
clean
7FF590BB3000
unkown image
page readonly
clean
7DF54A062000
unkown image
page readonly
clean
1AA42C45000
unkown
page read and write
clean
17610D8A000
unkown
page read and write
clean
7FF590764000
unkown image
page readonly
clean
17610D93000
unkown
page read and write
clean
7FF577B31000
unkown image
page readonly
clean
7FF4F81B5000
unkown image
page readonly
clean
7FF519C39000
unkown image
page readonly
clean
171A2D90000
unkown image
page readonly
clean
23C10B80000
unkown
page read and write
clean
7FF519DC2000
unkown image
page readonly
clean
17610D87000
unkown
page read and write
clean
17610D87000
unkown
page read and write
clean
7FF514777000
unkown image
page readonly
clean
7FF519DD4000
unkown image
page readonly
clean
1AA42C7D000
unkown
page read and write
clean
7FF578EC7000
unkown image
page readonly
clean
1D529402000
unkown
page read and write
clean
1761045C000
unkown
page read and write
clean
17610B50000
unkown
page read and write
clean
2307844B000
unkown
page read and write
clean
17610DA2000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
D587677000
stack
page read and write
clean
1F058D08000
unkown
page read and write
clean
7FF577BDB000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
17610D8F000
unkown
page read and write
clean
7FF51A013000
unkown image
page readonly
clean
D586FDB000
unkown
page read and write
clean
171A2780000
unkown
page read and write
clean
7FF578805000
unkown image
page readonly
clean
1F058A10000
unkown image
page readonly
clean
7FF53C1D0000
unkown image
page readonly
clean
7FF590C55000
unkown image
page readonly
clean
171A2875000
unkown
page read and write
clean
17610D71000
unkown
page read and write
clean
1761047E000
unkown
page read and write
clean
7FF4F80AE000
unkown image
page readonly
clean
18B1D402000
unkown
page read and write
clean
1AA42C44000
unkown
page read and write
clean
176104C4000
unkown
page read and write
clean
7FF519F75000
unkown image
page readonly
clean
243F13C000
unkown
page read and write
clean
7FF51A0EE000
unkown image
page readonly
clean
18B1CECF000
unkown
page read and write
clean
7DF59E8E0000
unkown image
page readonly
clean
1F058C4A000
unkown
page read and write
clean
1D529260000
unkown image
page readonly
clean
7FF590A99000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
7FF5146FC000
unkown image
page readonly
clean
7FF577BD5000
unkown image
page readonly
clean
6A51A7E000
stack
page read and write
clean
1D529330000
unkown
page read and write
clean
17610DA8000
unkown
page read and write
clean
7FF590B81000
unkown image
page readonly
clean
1761044A000
unkown
page read and write
clean
26F7AF9000
stack
page read and write
clean
7FF53C085000
unkown image
page readonly
clean
7FF5147CB000
unkown image
page readonly
clean
7FF578B9C000
unkown image
page readonly
clean
22EAAE90000
heap default
page read and write
clean
23C10B30000
unkown image
page readonly
clean
23078402000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
7FF4F368A000
unkown image
page readonly
clean
7FF590C44000
unkown image
page readonly
clean
CB2CAFE000
stack
page read and write
clean
7FF53C401000
unkown image
page readonly
clean
26F81FB000
stack
page read and write
clean
176104DF000
unkown
page read and write
clean
1AA42C6C000
unkown
page read and write
clean
6CE5CFE000
stack
page read and write
clean
D5872FE000
stack
page read and write
clean
18B1CF13000
unkown
page read and write
clean
561CCFF000
stack
page read and write
clean
23A3C060000
unkown image
page readonly
clean
23C10B20000
unkown image
page readonly
clean
1EE87600000
unkown image
page readonly
clean
7FF51A0D4000
unkown image
page readonly
clean
6A51FFC000
stack
page read and write
clean
230783A0000
unkown image
page readonly
clean
7FF590B0D000
unkown image
page readonly
clean
7FF513F06000
unkown image
page readonly
clean
7FF519E4F000
unkown image
page readonly
clean
7FF578D56000
unkown image
page readonly
clean
7FF5147AE000
unkown image
page readonly
clean
7FF5C9BDA000
unkown image
page readonly
clean
17610D87000
unkown
page read and write
clean
17610D8B000
unkown
page read and write
clean
171A2A00000
unkown image
page readonly
clean
7FF519FF9000
unkown image
page readonly
clean
18B1CE13000
unkown
page read and write
clean
243F8FE000
stack
page read and write
clean
1AA42C74000
unkown
page read and write
clean
7FF519DC5000
unkown image
page readonly
clean
7FF514793000
unkown image
page readonly
clean
17610D8B000
unkown
page read and write
clean
7DF527D70000
unkown image
page readonly
clean
6CE5B7E000
stack
page read and write
clean
7FF4F80CD000
unkown image
page readonly
clean
7DF5859E0000
unkown image
page readonly
clean
7FF514552000
unkown image
page readonly
clean
17610D1E000
unkown
page read and write
clean
7FF4F7D13000
unkown image
page readonly
clean
7FF4F813A000
unkown image
page readonly
clean
7FF590B74000
unkown image
page readonly
clean
17610D4D000
unkown
page read and write
clean
23A3BED0000
unkown image
page readonly
clean
7FF5145DF000
unkown image
page readonly
clean
7FF5147B7000
unkown image
page readonly
clean
17610DA6000
unkown
page read and write
clean
7FF578EDF000
unkown image
page readonly
clean
7FF590BDD000
unkown image
page readonly
clean
7DF54A072000
unkown image
page readonly
clean
1D528B30000
unkown image
page read and write
clean
1EE87750000
unkown
page read and write
clean
17610D12000
unkown
page read and write
clean
230783D0000
unkown image
page readonly
clean
87B3DFE000
stack
page read and write
clean
7FF53C30D000
unkown image
page readonly
clean
CB2CFFF000
stack
page read and write
clean
7DF59E802000
unkown image
page readonly
clean
17610D7B000
unkown
page read and write
clean
7FF512733000
unkown image
page readonly
clean
7FF53C401000
unkown image
page readonly
clean
17610D8E000
unkown
page read and write
clean
17611363000
unkown
page read and write
clean
7FF5147A3000
unkown image
page readonly
clean
7FF5902C8000
unkown image
page readonly
clean
22EAAD30000
unkown image
page readonly
clean
1D528C59000
unkown
page read and write
clean
23C10AE0000
unkown image
page read and write
clean
7FF59097B000
unkown image
page readonly
clean
7FF4F7F3B000
unkown image
page readonly
clean
1F058C66000
unkown
page read and write
clean
17610D8C000
unkown
page read and write
clean
7FF577CCB000
unkown image
page readonly
clean
230783F0000
heap default
page read and write
clean
7FF590917000
unkown image
page readonly
clean
7FF590B80000
unkown image
page readonly
clean
17610D9B000
unkown
page read and write
clean
7FF590C5A000
unkown image
page readonly
clean
7FF51487A000
unkown image
page readonly
clean
17610D6E000
unkown
page read and write
clean
23C10C4F000
unkown
page read and write
clean
171A2610000
unkown image
page read and write
clean
815F77E000
stack
page read and write
clean
23C10C00000
unkown
page read and write
clean
17610D69000
unkown
page read and write
clean
1AA43402000
unkown
page read and write
clean
7FF5903C9000
unkown image
page readonly
clean
7FF578D83000
unkown image
page readonly
clean
7FF5901F8000
unkown image
page readonly
clean
7FF5147A7000
unkown image
page readonly
clean
17610D9D000
unkown
page read and write
clean
171A2913000
unkown
page read and write
clean
E66FDFB000
stack
page read and write
clean
7FF53C377000
unkown image
page readonly
clean
7FF519F71000
unkown image
page readonly
clean
176104B0000
unkown
page read and write
clean
561CDFE000
stack
page read and write
clean
23C10AF0000
heap private
page read and write
clean
CB2CB7E000
stack
page read and write
clean
22EAAEBF000
unkown
page read and write
clean
17610DBB000
unkown
page read and write
clean
7DF59E8E0000
unkown image
page readonly
clean
2307A002000
unkown
page read and write
clean
17611203000
unkown
page read and write
clean
2307845A000
unkown
page read and write
clean
1AA42C5F000
unkown
page read and write
clean
7FF51461F000
unkown image
page readonly
clean
7FF4F3F47000
unkown image
page readonly
clean
7FF590B2E000
unkown image
page readonly
clean
7FF577CD3000
unkown image
page readonly
clean
7DF54A062000
unkown image
page readonly
clean
7FF578FC5000
unkown image
page readonly
clean
7FF5C9BE1000
unkown image
page readonly
clean
6CE5AFE000
stack
page read and write
clean
6A51E7C000
stack
page read and write
clean
23C10B00000
unkown image
page readonly
clean
17610D7E000
unkown
page read and write
clean
23A3BA40000
unkown
page read and write
clean
7FF51272D000
unkown image
page readonly
clean
7DF527D62000
unkown image
page readonly
clean
7FF4F81C1000
unkown image
page readonly
clean
7DF527D60000
unkown image
page readonly
clean
23A3C202000
unkown
page read and write
clean
7DF505E40000
unkown image
page readonly
clean
7FF590C61000
unkown image
page readonly
clean
7FF577CDE000
unkown image
page readonly
clean
17610D8E000
unkown
page read and write
clean
7DF586C40000
unkown image
page readonly
clean
7FF51276B000
unkown image
page readonly
clean
7FF578FB4000
unkown image
page readonly
clean
17610516000
unkown
page read and write
clean
1761126A000
unkown
page read and write
clean
176104BD000
unkown
page read and write
clean
7FF51A027000
unkown image
page readonly
clean
23C10C55000
unkown
page read and write
clean
176102D0000
heap private
page read and write
clean
17610D92000
unkown
page read and write
clean
7DF59E800000
unkown image
page readonly
clean
17610D8E000
unkown
page read and write
clean
17610B50000
unkown
page read and write
clean
1761121D000
unkown
page read and write
clean
18B1CBC0000
unkown image
page readonly
clean
17610DAE000
unkown
page read and write
clean
7FF590A6E000
unkown image
page readonly
clean
1AA42C58000
unkown
page read and write
clean
17610D80000
unkown
page read and write
clean
7FF51A06A000
unkown image
page readonly
clean
22EAAEBF000
unkown
page read and write
clean
CB2D0FF000
stack
page read and write
clean
22EAAEBF000
unkown
page read and write
clean
7FF590B91000
unkown image
page readonly
clean
7DF41E350000
unkown image
page readonly
clean
7DF5D7870000
unkown image
page readonly
clean
1761126A000
unkown
page read and write
clean
7DF501C90000
unkown image
page readonly
clean
26F7D7F000
stack
page read and write
clean
17610D16000
unkown
page read and write
clean
17610D9D000
unkown
page read and write
clean
7FF4F3C95000
unkown image
page readonly
clean
7FF590BD7000
unkown image
page readonly
clean
7FF578FA9000
unkown image
page readonly
clean
7DF59E8D2000
unkown image
page readonly
clean
17611203000
unkown
page read and write
clean
1AA42C41000
unkown
page read and write
clean
1AA42B80000
unkown image
page readonly
clean
23C10C3C000
unkown
page read and write
clean
17610D97000
unkown
page read and write
clean
7DF4D5720000
unkown image
page readonly
clean
7DF5D7860000
unkown image
page readonly
clean
7FF590671000
unkown image
page readonly
clean
17610D1F000
unkown
page read and write
clean
7FF5909A7000
unkown image
page readonly
clean
7DF5224E2000
unkown image
page readonly
clean
7FF519A6C000
unkown image
page readonly
clean
17610DB0000
unkown
page read and write
clean
7FF578C74000
unkown image
page readonly
clean
1F058C50000
unkown
page read and write
clean
7FF5909E6000
unkown image
page readonly
clean
6A51CFF000
stack
page read and write
clean
1F058C13000
unkown
page read and write
clean
1F058C86000
unkown
page read and write
clean
CB2CD7B000
stack
page read and write
clean
7FF578B60000
unkown image
page readonly
clean
7FF51478A000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
18B1CBB0000
heap private
page read and write
clean
7FF5147DE000
unkown image
page readonly
clean
1AA42B10000
heap private
page read and write
clean
7FF590AC7000
unkown image
page readonly
clean
23C10B50000
heap default
page read and write
clean
7FF590ADB000
unkown image
page readonly
clean
7FF577C89000
unkown image
page readonly
clean
7FF53C3FA000
unkown image
page readonly
clean
7FF590B44000
unkown image
page readonly
clean
7FF590B8A000
unkown image
page readonly
clean
7FF4F3F23000
unkown image
page readonly
clean
7FF4F8112000
unkown image
page readonly
clean
7FF578F4A000
unkown image
page readonly
clean
7FF5C9AE7000
unkown image
page readonly
clean
7DF5859F0000
unkown image
page readonly
clean
23079FA0000
unkown
page read and write
clean
7FF5904F7000
unkown image
page readonly
clean
7FF590A9D000
unkown image
page readonly
clean
7FF5C9BEA000
unkown image
page readonly
clean
17610DA0000
unkown
page read and write
clean
17610DAB000
unkown
page read and write
clean
17610D59000
unkown
page read and write
clean
7FF4F3F37000
unkown image
page readonly
clean
7FF51279A000
unkown image
page readonly
clean
1F059202000
unkown
page read and write
clean
7FF578B41000
unkown image
page readonly
clean
17610D93000
unkown
page read and write
clean
7FF53C281000
unkown image
page readonly
clean
1D528ED0000
unkown image
page readonly
clean
1EE87800000
unkown
page read and write
clean
7FF590857000
unkown image
page readonly
clean
17610DAE000
unkown
page read and write
clean
7DF5D7850000
unkown image
page readonly
clean
7FF53C3D2000
unkown image
page readonly
clean
7DF585A00000
unkown image
page readonly
clean
17610DC1000
unkown
page read and write
clean
22EAAED0000
unkown
page read and write
clean
7FF51A0E1000
unkown image
page readonly
clean
7FF4F80D3000
unkown image
page readonly
clean
17610D6D000
unkown
page read and write
clean
1761043C000
unkown
page read and write
clean
23078502000
unkown
page read and write
clean
17610D79000
unkown
page read and write
clean
23078465000
unkown
page read and write
clean
7DF484B00000
unkown image
page readonly
clean
CB2CC7B000
stack
page read and write
clean
7DF5D7862000
unkown image
page readonly
clean
17610D88000
unkown
page read and write
clean
18B1D3B0000
unkown image
page write copy
clean
17610D8C000
unkown
page read and write
clean
7FF577D7A000
unkown image
page readonly
clean
1AA42C69000
unkown
page read and write
clean
17610D8A000
unkown
page read and write
clean
7FF4F3F30000
unkown image
page readonly
clean
7FF51A01E000
unkown image
page readonly
clean
18B1CD00000
unkown image
page readonly
clean
17610300000
unkown image
page readonly
clean
7FF5C9976000
unkown image
page readonly
clean
6A51DFE000
stack
page read and write
clean
26F7EFE000
stack
page read and write
clean
7FF51281A000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
17611202000
unkown
page read and write
clean
1F058E00000
unkown image
page readonly
clean
7FF59050C000
unkown image
page readonly
clean
7FF590AB0000
unkown image
page readonly
clean
17610D88000
unkown
page read and write
clean
23A3BA28000
unkown
page read and write
clean
7FF590AB7000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
17610DA4000
unkown
page read and write
clean
17610D9C000
unkown
page read and write
clean
1D528C3D000
unkown
page read and write
clean
1AA42B00000
unkown image
page read and write
clean
7FF5C9A71000
unkown image
page readonly
clean
7FF51A0DA000
unkown image
page readonly
clean
7FF590C4A000
unkown image
page readonly
clean
17610D7B000
unkown
page read and write
clean
7DF59E8C0000
unkown image
page readonly
clean
18B1D500000
unkown
page read and write
clean
7FF5C9B3B000
unkown image
page readonly
clean
17610330000
heap default
page read and write
clean
18B1CE00000
unkown
page read and write
clean
7FF4F3F07000
unkown image
page readonly
clean
1F059190000
unkown
page read and write
clean
176103B0000
unkown image
page write copy
clean
7FF4F811E000
unkown image
page readonly
clean
7FF590B87000
unkown image
page readonly
clean
7FF53C323000
unkown image
page readonly
clean
7FF590A6A000
unkown image
page readonly
clean
7DF505E20000
unkown image
page readonly
clean
7FF53C285000
unkown image
page readonly
clean
176108D0000
unkown image
page readonly
clean
17610DB0000
unkown
page read and write
clean
17610D87000
unkown
page read and write
clean
17610D85000
unkown
page read and write
clean
1EE8784B000
unkown
page read and write
clean
1AA42C4E000
unkown
page read and write
clean
23A3BA13000
unkown
page read and write
clean
7FF578F22000
unkown image
page readonly
clean
7DF59E8D2000
unkown image
page readonly
clean
6CE5DFE000
stack
page read and write
clean
23078A60000
unkown image
page readonly
clean
23A3B970000
unkown image
page readonly
clean
7DF505E22000
unkown image
page readonly
clean
1D529600000
unkown
page read and write
clean
17610D8C000
unkown
page read and write
clean
7FF51478F000
unkown image
page readonly
clean
17610DA8000
unkown
page read and write
clean
1AA42C83000
unkown
page read and write
clean
1EE87886000
unkown
page read and write
clean
23C10B00000
unkown image
page readonly
clean
7FF53C37A000
unkown image
page readonly
clean
17610D94000
unkown
page read and write
clean
7FF5C99BD000
unkown image
page readonly
clean
23A3B9A0000
unkown image
page readonly
clean
7DF59E800000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
23A3BCD0000
unkown image
page readonly
clean
7FF577CA3000
unkown image
page readonly
clean
7DF520492000
unkown image
page readonly
clean
7FF578B37000
unkown image
page readonly
clean
18B1D000000
unkown image
page readonly
clean
17610D9B000
unkown
page read and write
clean
17610DA2000
unkown
page read and write
clean
7FF519EAC000
unkown image
page readonly
clean
E66FF77000
stack
page read and write
clean
1AA42B20000
unkown image
page readonly
clean
7FF4F81BA000
unkown image
page readonly
clean
7FF577C05000
unkown image
page readonly
clean
17610D7D000
unkown
page read and write
clean
7FF5773E8000
unkown image
page readonly
clean
17610D9D000
unkown
page read and write
clean
7DF54A080000
unkown image
page readonly
clean
7FF577C01000
unkown image
page readonly
clean
1D528D02000
unkown
page read and write
clean
1F059180000
unkown image
page readonly
clean
18B1CEBE000
unkown
page read and write
clean
7FF51A0C2000
unkown image
page readonly
clean
17610D8B000
unkown
page read and write
clean
1EE87813000
unkown
page read and write
clean
7FF514751000
unkown image
page readonly
clean
1F058C3C000
unkown
page read and write
clean
17610D7B000
unkown
page read and write
clean
7FF514859000
unkown image
page readonly
clean
7FF578D8C000
unkown image
page readonly
clean
7FF577861000
unkown image
page readonly
clean
7FF590AEE000
unkown image
page readonly
clean
7DF59E8D0000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
243F57B000
stack
page read and write
clean
561CE79000
stack
page read and write
clean
7FF53C3EA000
unkown image
page readonly
clean
1F058C6C000
unkown
page read and write
clean
7FF577D81000
unkown image
page readonly
clean
7DF59E7F2000
unkown image
page readonly
clean
561CC7A000
unkown
page read and write
clean
7DF5204A0000
unkown image
page readonly
clean
7DF527D62000
unkown image
page readonly
clean
7FF53C186000
unkown image
page readonly
clean
7FF578C97000
unkown image
page readonly
clean
1AA42C64000
unkown
page read and write
clean
7FF578DBB000
unkown image
page readonly
clean
7DF501C82000
unkown image
page readonly
clean
23A3BB13000
unkown
page read and write
clean
1EE88002000
unkown
page read and write
clean
7FF4F80EE000
unkown image
page readonly
clean
7FF53C26C000
unkown image
page readonly
clean
22EAAE80000
unkown image
page readonly
clean
ABAAC7C000
stack
page read and write
clean
17610D8C000
unkown
page read and write
clean
17610D89000
unkown
page read and write
clean
26F7B7E000
stack
page read and write
clean
18B1D200000
unkown image
page readonly
clean
7FF514647000
unkown image
page readonly
clean
7FF5C9B4E000
unkown image
page readonly
clean
17610DAB000
unkown
page read and write
clean
17610D1E000
unkown
page read and write
clean
1EE87A00000
unkown image
page readonly
clean
7FF5197C2000
unkown image
page readonly
clean
7FF4F7F0E000
unkown image
page readonly
clean
7DF5D7852000
unkown image
page readonly
clean
7FF59046D000
unkown image
page readonly
clean
7FF5C9A5C000
unkown image
page readonly
clean
17610D90000
unkown
page read and write
clean
1761045B000
unkown
page read and write
clean
7FF514881000
unkown image
page readonly
clean
17611202000
unkown
page read and write
clean
815F7FE000
stack
page read and write
clean
22EAB0B0000
heap private
page read and write
clean
23A3C050000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7DF5224F0000
unkown image
page readonly
clean
1AA42C63000
unkown
page read and write
clean
26F79FB000
stack
page read and write
clean
18B1CE29000
unkown
page read and write
clean
7FF53C3F1000
unkown image
page readonly
clean
1F0589E0000
unkown image
page readonly
clean
7FF5C9875000
unkown image
page readonly
clean
23079FA0000
unkown
page read and write
clean
7FF5C9BF1000
unkown image
page readonly
clean
7FF5909E5000
unkown image
page readonly
clean
7FF4F3F87000
unkown image
page readonly
clean
230783A0000
unkown image
page readonly
clean
7FF5787E6000
unkown image
page readonly
clean
7FF5C9A45000
unkown image
page readonly
clean
7FF590BDA000
unkown image
page readonly
clean
1D529330000
unkown
page read and write
clean
7FF51A042000
unkown image
page readonly
clean
7FF578EBF000
unkown image
page readonly
clean
7FF5147D3000
unkown image
page readonly
clean
7FF4F805E000
unkown image
page readonly
clean
7FF590B8E000
unkown image
page readonly
clean
7FF590916000
unkown image
page readonly
clean
7FF5908F5000
unkown image
page readonly
clean
7FF53BA68000
unkown image
page readonly
clean
561CD7E000
stack
page read and write
clean
7FF577D81000
unkown image
page readonly
clean
18B1D532000
unkown
page read and write
clean
22EAACF0000
unkown image
page read and write
clean
1F058A00000
unkown image
page readonly
clean
1EE87829000
unkown
page read and write
clean
17610D8F000
unkown
page read and write
clean
7FF590941000
unkown image
page readonly
clean
7FF512740000
unkown image
page readonly
clean
7FF577B50000
unkown image
page readonly
clean
1EE87902000
unkown
page read and write
clean
7FF4F3F8A000
unkown image
page readonly
clean
D58777F000
stack
page read and write
clean
17610D70000
unkown
page read and write
clean
7FF51205C000
unkown image
page readonly
clean
1AA42D02000
unkown
page read and write
clean
1AA42C5E000
unkown
page read and write
clean
7DF527D50000
unkown image
page readonly
clean
7DF54A070000
unkown image
page readonly
clean
7FF577CF7000
unkown image
page readonly
clean
7FF590862000
unkown image
page readonly
clean
7DF527D60000
unkown image
page readonly
clean
7FF590945000
unkown image
page readonly
clean
815F9FD000
stack
page read and write
clean
17610DA1000
unkown
page read and write
clean
1D528C2A000
unkown
page read and write
clean
7FF53BEE7000
unkown image
page readonly
clean
7FF4F813D000
unkown image
page readonly
clean
7FF577B8F000
unkown image
page readonly
clean
7FF519FFD000
unkown image
page readonly
clean
7DF585A00000
unkown image
page readonly
clean
23C10D13000
unkown
page read and write
clean
23C10B60000
unkown image
page readonly
clean
23C11402000
unkown
page read and write
clean
1AA42C13000
unkown
page read and write
clean
7FF514880000
unkown image
page readonly
clean
7DF505E32000
unkown image
page readonly
clean
17610D77000
unkown
page read and write
clean
1AA42C6A000
unkown
page read and write
clean
7FF519F02000
unkown image
page readonly
clean
26F82FE000
stack
page read and write
clean
1AA42C7C000
unkown
page read and write
clean
7FF578F47000
unkown image
page readonly
clean
7FF4F80B7000
unkown image
page readonly
clean
7FF590815000
unkown image
page readonly
clean
1EE87650000
heap default
page read and write
clean
1AA42C6E000
unkown
page read and write
clean
815F2DB000
unkown
page read and write
clean
243FDFE000
stack
page read and write
clean
1F0589E0000
unkown image
page readonly
clean
7FF578ED9000
unkown image
page readonly
clean
17610D9D000
unkown
page read and write
clean
17610D8C000
unkown
page read and write
clean
7FF577A05000
unkown image
page readonly
clean
17610D83000
unkown
page read and write
clean
7FF4F7D29000
unkown image
page readonly
clean
7FF53C30F000
unkown image
page readonly
clean
7FF5C99FF000
unkown image
page readonly
clean
7FF53C20F000
unkown image
page readonly
clean
17610502000
unkown
page read and write
clean
1AA42C00000
unkown
page read and write
clean
7FF4F80E0000
unkown image
page readonly
clean
1F0589C0000
unkown image
page read and write
clean
1EE87879000
unkown
page read and write
clean
243F9FD000
stack
page read and write
clean
1EE87620000
unkown image
page readonly
clean
7DF586C50000
unkown image
page readonly
clean
7FF53C1CD000
unkown image
page readonly
clean
7DF59E810000
unkown image
page readonly
clean
7FF4F8199000
unkown image
page readonly
clean
18B1CEE1000
unkown
page read and write
clean
17610DB4000
unkown
page read and write
clean
7FF578DE7000
unkown image
page readonly
clean
CB2CDFE000
stack
page read and write
clean
7FF514576000
unkown image
page readonly
clean
7DF49C790000
unkown image
page readonly
clean
6A51F7C000
stack
page read and write
clean
7FF512804000
unkown image
page readonly
clean
17610487000
unkown
page read and write
clean
7FF4F81BE000
unkown image
page readonly
clean
17610DB0000
unkown
page read and write
clean
22EAAE40000
unkown
page read and write
clean
7DF501C70000
unkown image
page readonly
clean
1D528BA0000
heap default
page read and write
clean
17610458000
unkown
page read and write
clean
22EAAED1000
unkown
page read and write
clean
7DF527D70000
unkown image
page readonly
clean
7FF4F80CF000
unkown image
page readonly
clean
7FF512821000
unkown image
page readonly
clean
7DF501C70000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7FF5127F9000
unkown image
page readonly
clean
1EE87908000
unkown
page read and write
clean
17610DA2000
unkown
page read and write
clean
7FF4F81AA000
unkown image
page readonly
clean
7FF4F4001000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7DF501C72000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
7FF577C77000
unkown image
page readonly
clean
17610DA1000
unkown
page read and write
clean
7FF5C9B43000
unkown image
page readonly
clean
7FF4F3C07000
unkown image
page readonly
clean
23C110D0000
unkown image
page readonly
clean
7FF577867000
unkown image
page readonly
clean
7DF501C90000
unkown image
page readonly
clean
1AA42B50000
unkown image
page readonly
clean
243FBFF000
stack
page read and write
clean
7FF578D4B000
unkown image
page readonly
clean
7FF59099F000
unkown image
page readonly
clean
1D528B50000
unkown image
page readonly
clean
17610DA2000
unkown
page read and write
clean
17610D87000
unkown
page read and write
clean
243F7FD000
stack
page read and write
clean
17610360000
unkown
page read and write
clean
7DF586C32000
unkown image
page readonly
clean
7FF519E76000
unkown image
page readonly
clean
7FF5C96D7000
unkown image
page readonly
clean
1F058B10000
unkown image
page readonly
clean
7DF5204A0000
unkown image
page readonly
clean
17610D7C000
unkown
page read and write
clean
17610D7D000
unkown
page read and write
clean
17610D80000
unkown
page read and write
clean
17610D88000
unkown
page read and write
clean
17610D7D000
unkown
page read and write
clean
7DF59E8C2000
unkown image
page readonly
clean
7FF590C51000
unkown image
page readonly
clean
1AA42C61000
unkown
page read and write
clean
17610D87000
unkown
page read and write
clean
7FF512747000
unkown image
page readonly
clean
171A2620000
heap private
page read and write
clean
22EAAEB6000
unkown
page read and write
clean
17610D00000
unkown
page read and write
clean
1EE87851000
unkown
page read and write
clean
23A3BA64000
unkown
page read and write
clean
17610D8B000
unkown
page read and write
clean
7DF501C82000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
7DF5224F0000
unkown image
page readonly
clean
17610D9C000
unkown
page read and write
clean
7DF586C32000
unkown image
page readonly
clean
7FF590B73000
unkown image
page readonly
clean
7DF586C42000
unkown image
page readonly
clean
6CE5EFF000
stack
page read and write
clean
7FF5C9AF9000
unkown image
page readonly
clean
1F058C7C000
unkown
page read and write
clean
17611300000
unkown
page read and write
clean
17610DA1000
unkown
page read and write
clean
7FF5908D6000
unkown image
page readonly
clean
176104F4000
unkown
page read and write
clean
7FF578EF7000
unkown image
page readonly
clean
7FF590A87000
unkown image
page readonly
clean
18B1CCF0000
unkown image
page readonly
clean
17610D8E000
unkown
page read and write
clean
7FF5C9B6A000
unkown image
page readonly
clean
7FF51A0EA000
unkown image
page readonly
clean
17610DA8000
unkown
page read and write
clean
7DF54A072000
unkown image
page readonly
clean
6CE5FFF000
stack
page read and write
clean
7FF4F8192000
unkown image
page readonly
clean
7FF4F7EB6000
unkown image
page readonly
clean
17610C02000
unkown
page read and write
clean
7FF5C9B13000
unkown image
page readonly
clean
1AA42C40000
unkown
page read and write
clean
17610D92000
unkown
page read and write
clean
7FF514871000
unkown image
page readonly
clean
243F6FE000
stack
page read and write
clean
23A3B950000
unkown image
page read and write
clean
7FF53C327000
unkown image
page readonly
clean
7DF505E30000
unkown image
page readonly
clean
7FF5908EF000
unkown image
page readonly
clean
7FF512811000
unkown image
page readonly
clean
7FF4F400A000
unkown image
page readonly
clean
17610A50000
unkown image
page readonly
clean
7FF578D6F000
unkown image
page readonly
clean
7FF590B69000
unkown image
page readonly
clean
17611302000
unkown
page read and write
clean
1D5290D0000
unkown image
page readonly
clean
171A2630000
unkown image
page readonly
clean
7FF519FDE000
unkown image
page readonly
clean
7FF5C9B67000
unkown image
page readonly
clean
17610D79000
unkown
page read and write
clean
1D528B50000
unkown image
page readonly
clean
7FF53C309000
unkown image
page readonly
clean
7FF590A15000
unkown image
page readonly
clean
7FF53BA62000
unkown image
page readonly
clean
7FF519F6B000
unkown image
page readonly
clean
7DF522500000
unkown image
page readonly
clean
7FF590BAB000
unkown image
page readonly
clean
176104EC000
unkown
page read and write
clean
23A3B9D0000
unkown image
page readonly
clean
22EAB2C0000
unkown image
page readonly
clean
17610450000
unkown
page read and write
clean
7FF4F3FE2000
unkown image
page readonly
clean
17610455000
unkown
page read and write
clean
7FF590A52000
unkown image
page readonly
clean
7FF5127F2000
unkown image
page readonly
clean
17610D75000
unkown
page read and write
clean
1AA42C62000
unkown
page read and write
clean
7DF5224E0000
unkown image
page readonly
clean
7FF4F7EE2000
unkown image
page readonly
clean
17610D8C000
unkown
page read and write
clean
23C10C13000
unkown
page read and write
clean
815FC7D000
stack
page read and write
clean
There are 1230 hidden memdumps, click here to show them.