Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Arrival Notice.doc
|
Rich Text Format data, version 1
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\BE[1].exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\sqlite-dll-win32-x86-3240000[1].zip
|
Zip archive data, at least v2.0 to extract, compression method=deflate
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\sqlite3.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\fredchungel99962.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{914B2F69-82DC-46CC-8DD8-1FA442E30CC1}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{0BB92122-B0F3-4D68-A452-FB6259A56894}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{7968B847-E29D-41C0-ACB8-AE84D1770DC9}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C3CBF28E-459B-48B7-84CD-B236D108BA2C}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\-e04230_
|
SQLite 3.x database, last written using SQLite version 3032001, page size 2048, file counter 10, database pages 37, cookie
0x2f, schema 4, UTF-8, version-valid-for 10
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\Vevine
|
ASCII text, with very long lines (29744), with no line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autC37F.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autC3CE.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\ophiolatrous
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\sqlite3.def
|
ASCII text
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\xjn0f.zip
|
Zip archive data, at least v2.0 to extract, compression method=deflate
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Arrival Notice.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Aug 11 15:42:03
2023, mtime=Fri Aug 11 15:42:03 2023, atime=Fri May 3 08:31:56 2024, length=341595, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
Generic INItialization configuration [folders]
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
||
C:\Users\user\Desktop\~$rival Notice.doc
|
data
|
dropped
|
There are 10 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /Automation -Embedding
|
||
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
|
||
C:\Users\user\AppData\Roaming\fredchungel99962.exe
|
"C:\Users\user\AppData\Roaming\fredchungel99962.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\AppData\Roaming\fredchungel99962.exe"
|
||
C:\Program Files (x86)\wvNrnkAyIyeyoBWaSlNQpiHcCFaHgWpmNFJShDPlRvsWEKLHJhvseVKGftp\CDWVOahfvgiDRJzfAMolQRnDPlOohi.exe
|
"C:\Program Files (x86)\wvNrnkAyIyeyoBWaSlNQpiHcCFaHgWpmNFJShDPlRvsWEKLHJhvseVKGftp\CDWVOahfvgiDRJzfAMolQRnDPlOohi.exe"
|
||
C:\Windows\SysWOW64\finger.exe
|
"C:\Windows\SysWOW64\finger.exe"
|
||
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
|
||
C:\Program Files (x86)\wvNrnkAyIyeyoBWaSlNQpiHcCFaHgWpmNFJShDPlRvsWEKLHJhvseVKGftp\CDWVOahfvgiDRJzfAMolQRnDPlOohi.exe
|
"C:\Program Files (x86)\wvNrnkAyIyeyoBWaSlNQpiHcCFaHgWpmNFJShDPlRvsWEKLHJhvseVKGftp\CDWVOahfvgiDRJzfAMolQRnDPlOohi.exe"
|
||
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
|
"C:\Program Files (x86)\Mozilla Firefox\Firefox.exe"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.quirkyquotients.online/nrup/?pX6dR=rSdoiViGYDYLrRKaPz3Wl2E0H4idUSMrBzK7mFXa25NHqewciJOPoSpxRDHHO+kRgCzM5kcGIwbMEKXffgYhKvnBPUmrqnWMxjfJBNBOhOMg9F9SVSa9oh3nojFO&tv=6TdD8B
|
66.96.162.142
|
||
http://www.297tamatest1kb.com/nrup/
|
162.255.119.150
|
||
http://www.thechurchinkaty.com/nrup/?pX6dR=a+HLDFsiIkHuV4rg9hSpoeAycD7cgouMO9xbFOtVeNEzn7JMPDdWHI+uhZWQfHs/Ujvr+dR2RkWjKutxCrTuIvieTAa4VE7MqIx0HySFP6zbT2TnTvQ9seTn5ysI&tv=6TdD8B
|
91.195.240.19
|
||
http://www.5597043.com/nrup/?pX6dR=2at1c1MHk4LdsVUDX6VNCfiZAhfBXFznTyG93G2uP4ilKgyCyFz2SOnlOoLDNVe+GAWkq5GLoOyug5V+2NERvjVgTNNC5euwUf40sv0MPI9wPMaUWVPIc3sG3prc&tv=6TdD8B
|
91.195.240.94
|
||
http://www.hggg2qyws.sbs/nrup/?pX6dR=cxIeN1iVhQqOwsowpzRnZtCznzKsqLvfdqpS9UswCbkbA/58Vi1sucBg6AEQyfE3zCqKK/TeeNcUyXGKguuzOA8pGaYO9UjuKGEJ7C/XCVyDdYvyJ7HtIExhgCVf&tv=6TdD8B
|
47.238.226.135
|
||
http://www.agoraeubebo.com/nrup/
|
162.240.81.18
|
||
http://www.gudvain.top/nrup/?pX6dR=SizHnN/9xgcqSIkR3Mp/mJItKwrd9Ch/0t0LsappuxDuweYFtCvxWsRrJ8CRzXcbZvFBcd4a+abpRcpo9JYs/p363666BVY+tJEOkjWCxOG41ow7FQErnKiMZNMn&tv=6TdD8B
|
203.161.62.199
|
||
http://www.deniztemiz.fun/nrup/
|
46.28.105.2
|
||
http://www.gudvain.top/nrup/
|
203.161.62.199
|
||
http://www.agoraeubebo.com/nrup/?pX6dR=dWrD1PFadq7V5KkT4K5o1ooaeKyTUtdu4bG3e9Abb7XIEj/TR5WiVjbbrLaqi43PNcTkySoUuB0roTUDMpHLiI93yD7r6mO3qGIKC7GmJs3jJHvYZTDYbK7MHXTd&tv=6TdD8B
|
162.240.81.18
|
||
http://www.297tamatest1kb.com/nrup/?pX6dR=aN7x9cBVxwix9wZx7W63qGecWvzsMiI/orbHVM7uweNeZbe3aghpRaSsJCdVU54yexiCzw7M43tjxUe+olQadlEjapDpq3RKvSvMx1ELA/lUdJRJgrfKn72amtTp&tv=6TdD8B
|
162.255.119.150
|
||
http://www.zopter.dev/nrup/
|
192.185.225.30
|
||
http://www.quirkyquotients.online/nrup/
|
66.96.162.142
|
||
http://www.hggg2qyws.sbs/nrup/
|
47.238.226.135
|
||
http://www.nimaster.com/nrup/
|
217.26.48.101
|
||
http://www.nimaster.com/nrup/?pX6dR=QRCJemSun6KfUPjb2qqlqGicxCzmZViyr2LzNdaeeYxuOQk1p7mHourK8lVarsbBIBvr9aHYFlgCj6kd/MlaSQeL42icjeH9s29nuCeOpLeM+yzNa72Kcg7xsQaX&tv=6TdD8B
|
217.26.48.101
|
||
http://www.zopter.dev/nrup/?pX6dR=i3HAzC/U9OJxIpd/aE0q2q4opSPsJIGS67PrGCHTQB0skmoYQlANVfiIbPI4IH/9kWpHr7erIPqYDzNgqjstw7965i84C6yRej7jTb0tuQprc2OKqp4FpQOaHFX3&tv=6TdD8B
|
192.185.225.30
|
||
http://www.northeastcol0r.com/nrup/
|
208.91.197.27
|
||
http://www.5597043.com/nrup/
|
91.195.240.94
|
||
http://www.rtp7winbet.one/nrup/
|
172.67.145.66
|
||
https://covid19help.top/BE.exe
|
172.67.175.222
|
||
http://www.domprojekt.pro/nrup/
|
46.242.239.47
|
||
https://covid19help.top/BE.exeggC:
|
unknown
|
||
https://covid19help.top/Ha
|
unknown
|
||
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
http://297-tamaki-drive-auckland-au-1071-sales.properties.sothebysrealty.com
|
unknown
|
||
https://duckduckgo.com/ac/?q=
|
unknown
|
||
http://www.sqlite.org/2018/sqlite-dll-win32-x86-3240000.zip
|
45.33.6.223
|
||
https://covid19help.top/BE.exee
|
unknown
|
||
https://covid19help.top/BE.exej
|
unknown
|
||
http://ocsp.entrust.net03
|
unknown
|
||
http://www.mozilla.com0
|
unknown
|
||
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
||
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
||
https://covid19help.top/t
|
unknown
|
||
http://nginx.net/
|
unknown
|
||
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
||
http://fedoraproject.org/
|
unknown
|
||
http://www.searchvity.com/?dn=
|
unknown
|
||
http://ocsp.entrust.net0D
|
unknown
|
||
http://www.sqlite.org/copyright.html.
|
unknown
|
||
https://crash-reports.mozilla.com/submit?id=
|
unknown
|
||
http://crl.entrust.net/server1.crl0
|
unknown
|
||
http://ocsp.thawte.com0
|
unknown
|
||
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
|
unknown
|
||
http://www.northeastcol0r.com/sk-logabpstatus.php?a=dUZzc3lpUllpUk5kaWtzQW1IYjlWcnkvMTR6NmV1Y24rZ0Zx
|
unknown
|
||
https://www.google.com/favicon.ico
|
unknown
|
||
http://www.northeastcol0r.com/px.js?ch=2
|
unknown
|
||
http://www.northeastcol0r.com/px.js?ch=1
|
unknown
|
||
http://www.rtp7winbet.one
|
unknown
|
||
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
||
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
||
http://www.searchvity.com/
|
unknown
|
||
https://covid19help.top/BE.exeC:
|
unknown
|
||
https://secure.comodo.com/CPS0
|
unknown
|
||
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
||
http://crl.entrust.net/2048ca.crl0
|
unknown
|
||
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
There are 49 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
agoraeubebo.com
|
162.240.81.18
|
||
www.gudvain.top
|
203.161.62.199
|
||
www.deniztemiz.fun
|
46.28.105.2
|
||
www.rtp7winbet.one
|
172.67.145.66
|
||
domprojekt.pro
|
46.242.239.47
|
||
xiaoyue.zhuangkou.com
|
47.238.226.135
|
||
www.5597043.com
|
91.195.240.94
|
||
www.nimaster.com
|
217.26.48.101
|
||
zopter.dev
|
192.185.225.30
|
||
covid19help.top
|
172.67.175.222
|
||
www.quirkyquotients.online
|
66.96.162.142
|
||
www.northeastcol0r.com
|
208.91.197.27
|
||
www.297tamatest1kb.com
|
162.255.119.150
|
||
parkingpage.namecheap.com
|
91.195.240.19
|
||
www.sqlite.org
|
45.33.6.223
|
||
www.zopter.dev
|
unknown
|
||
www.domprojekt.pro
|
unknown
|
||
www.thechurchinkaty.com
|
unknown
|
||
www.hggg2qyws.sbs
|
unknown
|
||
www.agoraeubebo.com
|
unknown
|
There are 10 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.185.225.30
|
zopter.dev
|
United States
|
||
162.240.81.18
|
agoraeubebo.com
|
United States
|
||
91.195.240.94
|
www.5597043.com
|
Germany
|
||
46.242.239.47
|
domprojekt.pro
|
Poland
|
||
46.28.105.2
|
www.deniztemiz.fun
|
Czech Republic
|
||
162.255.119.150
|
www.297tamatest1kb.com
|
United States
|
||
208.91.197.27
|
www.northeastcol0r.com
|
Virgin Islands (BRITISH)
|
||
66.96.162.142
|
www.quirkyquotients.online
|
United States
|
||
203.161.62.199
|
www.gudvain.top
|
Malaysia
|
||
47.238.226.135
|
xiaoyue.zhuangkou.com
|
United States
|
||
172.67.175.222
|
covid19help.top
|
United States
|
||
217.26.48.101
|
www.nimaster.com
|
Switzerland
|
||
172.67.145.66
|
www.rtp7winbet.one
|
United States
|
||
45.33.6.223
|
www.sqlite.org
|
United States
|
||
91.195.240.19
|
parkingpage.namecheap.com
|
Germany
|
There are 5 hidden IPs, click here to show them.
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
3b+
|
||
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Outlook\Journaling\Microsoft Word
|
Enabled
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
|
MTTT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
kc+
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
2e+
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\27407
|
27407
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Arial Unicode MS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Batang
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@BatangChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@DFKai-SB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Dotum
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@DotumChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@FangSong
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Gulim
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@GulimChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Gungsuh
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@GungsuhChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@KaiTi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Malgun Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Meiryo
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Meiryo UI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Microsoft JhengHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@Microsoft YaHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU_HKSCS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU_HKSCS-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MingLiU-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS Mincho
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS PGothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS PMincho
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@MS UI Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@NSimSun
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@PMingLiU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@PMingLiU-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimSun
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
@SimSun-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Agency FB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Aharoni
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Algerian
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Andalus
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Angsana New
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
AngsanaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Aparajita
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arabic Typesetting
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Black
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Narrow
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Rounded MT Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Arial Unicode MS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Baskerville Old Face
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Batang
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
BatangChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bauhaus 93
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bell MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Berlin Sans FB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Berlin Sans FB Demi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bernard MT Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Blackadder ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Black
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bodoni MT Poster Compressed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Book Antiqua
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bookman Old Style
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bookshelf Symbol 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Bradley Hand ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Britannic Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Broadway
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Browallia New
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
BrowalliaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Brush Script MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calibri
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calibri Light
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Californian FB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Calisto MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cambria
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cambria Math
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Candara
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Castellar
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Centaur
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Century Schoolbook
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Chiller
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Colonna MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Comic Sans MS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Consolas
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Constantia
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cooper Black
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Copperplate Gothic Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Copperplate Gothic Light
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Corbel
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Cordia New
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
CordiaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Courier New
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Curlz MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DaunPenh
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
David
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DFKai-SB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DilleniaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DokChampa
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Dotum
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
DotumChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Ebrima
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Edwardian Script ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Elephant
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Engravers MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Bold ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Demi ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Light ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Eras Medium ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Estrangelo Edessa
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
EucrosiaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Euphemia
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FangSong
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Felix Titling
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Footlight MT Light
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Forte
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Book
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Demi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Demi Cond
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Heavy
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Medium
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Franklin Gothic Medium Cond
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FrankRuehl
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
FreesiaUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Freestyle Script
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
French Script MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gabriola
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Garamond
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gautami
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Georgia
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gigi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans MT Ext Condensed Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans Ultra Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gill Sans Ultra Bold Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gisha
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gloucester MT Extra Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Goudy Old Style
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Goudy Stout
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gulim
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
GulimChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Gungsuh
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
GungsuhChe
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Haettenschweiler
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Harlow Solid Italic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Harrington
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
High Tower Text
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Impact
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Imprint MT Shadow
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Informal Roman
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
IrisUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Iskoola Pota
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
JasmineUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Jokerman
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Juice ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
KaiTi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kalinga
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kartika
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Khmer UI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
KodchiangUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kokila
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kristen ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Kunstler Script
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lao UI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Latha
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Leelawadee
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Levenim MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
LilyUPC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Bright
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Calligraphy
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Console
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Fax
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Handwriting
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans Typewriter
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Lucida Sans Unicode
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Magneto
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Maiandra GD
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Malgun Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mangal
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Marlett
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Matura MT Script Capitals
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Meiryo
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Meiryo UI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Himalaya
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft JhengHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft New Tai Lue
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft PhagsPa
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Sans Serif
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Tai Le
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Uighur
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft YaHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Microsoft Yi Baiti
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU_HKSCS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU_HKSCS-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MingLiU-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Miriam
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Miriam Fixed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mistral
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Modern No. 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Mongolian Baiti
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Monotype Corsiva
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MoolBoran
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Mincho
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Outlook
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS PGothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS PMincho
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Reference Sans Serif
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS Reference Specialty
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MS UI Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MT Extra
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
MV Boli
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Narkisim
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Niagara Engraved
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Niagara Solid
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
NSimSun
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Nyala
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
OCR A Extended
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Old English Text MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Onyx
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Palace Script MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Palatino Linotype
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Papyrus
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Parchment
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Perpetua
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Perpetua Titling MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Plantagenet Cherokee
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Playbill
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
PMingLiU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
PMingLiU-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Poor Richard
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Pristina
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Raavi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rage Italic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Ravie
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rockwell Extra Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Rod
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Sakkal Majalla
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Script MT Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe Print
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe Script
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Light
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Semibold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Segoe UI Symbol
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Shonar Bangla
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Showcard Gothic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Shruti
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimHei
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Simplified Arabic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Simplified Arabic Fixed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimSun
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
SimSun-ExtB
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Snap ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Stencil
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Sylfaen
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Symbol
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tahoma
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tempus Sans ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Times New Roman
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Traditional Arabic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Trebuchet MS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tunga
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT Condensed
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Tw Cen MT Condensed Extra Bold
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Utsaah
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vani
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Verdana
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vijaya
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Viner Hand ITC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vivaldi
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vladimir Script
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Vrinda
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Webdings
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wide Latin
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\MathFonts
|
Wingdings 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\3058C
|
3058C
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
WORDFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00100000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400100000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\3058C
|
3058C
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\3058C
|
3058C
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\3058C
|
3058C
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
EquationEditorFilesIntl_1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum
|
Implementing
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum
|
Implementing
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
EquationEditorFilesIntl_1033
|
There are 367 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
1F70000
|
unclassified section
|
page execute and read and write
|
||
400000
|
system
|
page execute and read and write
|
||
3C70000
|
unkown
|
page execute and read and write
|
||
160000
|
system
|
page execute and read and write
|
||
510000
|
system
|
page execute and read and write
|
||
80000
|
system
|
page execute and read and write
|
||
280000
|
trusted library allocation
|
page read and write
|
||
80000
|
system
|
page execute and read and write
|
||
1E0000
|
trusted library allocation
|
page read and write
|
||
A05000
|
unkown
|
page read and write
|
||
1F0B000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
3D0000
|
heap
|
page read and write
|
||
547F000
|
stack
|
page read and write
|
||
180000
|
direct allocation
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
5F40000
|
heap
|
page read and write
|
||
729000
|
heap
|
page read and write
|
||
714000
|
heap
|
page read and write
|
||
510000
|
heap
|
page read and write
|
||
5C30000
|
heap
|
page read and write
|
||
294F000
|
stack
|
page read and write
|
||
851000
|
heap
|
page read and write
|
||
1F00000
|
heap
|
page read and write
|
||
8D0000
|
unkown
|
page readonly
|
||
4FD000
|
heap
|
page read and write
|
||
230000
|
heap
|
page read and write
|
||
128C000
|
system
|
page read and write
|
||
31E000
|
heap
|
page read and write
|
||
F5D000
|
system
|
page execute and read and write
|
||
2AD2000
|
unkown
|
page read and write
|
||
2BF8000
|
heap
|
page read and write
|
||
2AD2000
|
unkown
|
page read and write
|
||
59C0000
|
heap
|
page read and write
|
||
799000
|
heap
|
page read and write
|
||
61EA1000
|
unkown
|
page read and write
|
||
AD0000
|
direct allocation
|
page execute and read and write
|
||
2BC1000
|
direct allocation
|
page read and write
|
||
313A000
|
unclassified section
|
page read and write
|
||
565D000
|
heap
|
page read and write
|
||
1140000
|
direct allocation
|
page read and write
|
||
5A5F000
|
stack
|
page read and write
|
||
34D000
|
stack
|
page read and write
|
||
2D00000
|
direct allocation
|
page read and write
|
||
1FC0000
|
heap
|
page read and write
|
||
396E000
|
unkown
|
page read and write
|
||
5686000
|
heap
|
page read and write
|
||
15B000
|
system
|
page execute and read and write
|
||
637000
|
heap
|
page read and write
|
||
58EE000
|
stack
|
page read and write
|
||
650000
|
heap
|
page read and write
|
||
68F000
|
stack
|
page read and write
|
||
2BC4000
|
direct allocation
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
20000
|
direct allocation
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
657000
|
heap
|
page read and write
|
||
223B000
|
unclassified section
|
page execute and read and write
|
||
7C0000
|
heap
|
page read and write
|
||
53B0000
|
heap
|
page read and write
|
||
F4000
|
heap
|
page read and write
|
||
3E0000
|
heap
|
page read and write
|
||
9FE000
|
unkown
|
page readonly
|
||
5690000
|
heap
|
page read and write
|
||
65C000
|
heap
|
page read and write
|
||
AF0000
|
heap
|
page read and write
|
||
2C20000
|
direct allocation
|
page read and write
|
||
5D67000
|
heap
|
page read and write
|
||
73D000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
3EEF000
|
stack
|
page read and write
|
||
9F1000
|
unkown
|
page execute read
|
||
1CA000
|
stack
|
page read and write
|
||
436000
|
heap
|
page read and write
|
||
2AD0000
|
direct allocation
|
page read and write
|
||
121D000
|
direct allocation
|
page read and write
|
||
3FC0000
|
heap
|
page read and write
|
||
1ECF000
|
stack
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
1AE000
|
stack
|
page read and write
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
65D000
|
heap
|
page read and write
|
||
2C20000
|
direct allocation
|
page read and write
|
||
4AC0000
|
heap
|
page read and write
|
||
130000
|
unkown
|
page read and write
|
||
15C000
|
stack
|
page read and write
|
||
69F000
|
stack
|
page read and write
|
||
362E000
|
stack
|
page read and write
|
||
11B000
|
stack
|
page read and write
|
||
6A7000
|
heap
|
page read and write
|
||
2C84000
|
unclassified section
|
page read and write
|
||
560D000
|
heap
|
page read and write
|
||
3E24000
|
unkown
|
page read and write
|
||
134C000
|
unkown
|
page readonly
|
||
A07000
|
unkown
|
page readonly
|
||
7A6000
|
heap
|
page read and write
|
||
2182000
|
heap
|
page read and write
|
||
2BC1000
|
direct allocation
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
2650000
|
unclassified section
|
page read and write
|
||
580000
|
heap
|
page read and write
|
||
799000
|
heap
|
page read and write
|
||
2C40000
|
heap
|
page read and write
|
||
71B000
|
heap
|
page read and write
|
||
2C30000
|
direct allocation
|
page read and write
|
||
3270000
|
unkown
|
page execute and read and write
|
||
58A0000
|
trusted library allocation
|
page read and write
|
||
2BC7000
|
direct allocation
|
page read and write
|
||
345E000
|
unclassified section
|
page read and write
|
||
A20000
|
unkown
|
page readonly
|
||
37DC000
|
unkown
|
page read and write
|
||
5C6D000
|
heap
|
page read and write
|
||
615000
|
heap
|
page read and write
|
||
2DAC000
|
unkown
|
page read and write
|
||
5C7000
|
heap
|
page read and write
|
||
630000
|
heap
|
page read and write
|
||
2E0000
|
heap
|
page read and write
|
||
3AEC000
|
stack
|
page read and write
|
||
1F08000
|
heap
|
page read and write
|
||
2D14000
|
direct allocation
|
page read and write
|
||
A20000
|
unkown
|
page readonly
|
||
10000
|
heap
|
page read and write
|
||
F8000
|
heap
|
page read and write
|
||
369F000
|
heap
|
page read and write
|
||
3AAF000
|
stack
|
page read and write
|
||
2250000
|
direct allocation
|
page execute and read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
22D0000
|
direct allocation
|
page execute and read and write
|
||
80000
|
direct allocation
|
page read and write
|
||
3DDF000
|
stack
|
page read and write
|
||
325000
|
unkown
|
page read and write
|
||
323000
|
heap
|
page read and write
|
||
61EA8000
|
unkown
|
page write copy
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
BB0000
|
unkown
|
page readonly
|
||
2BEC000
|
unkown
|
page read and write
|
||
2BD0000
|
direct allocation
|
page read and write
|
||
330000
|
heap
|
page read and write
|
||
2D00000
|
direct allocation
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
AE1000
|
direct allocation
|
page execute and read and write
|
||
61E00000
|
unkown
|
page readonly
|
||
2D0000
|
heap
|
page read and write
|
||
1C0000
|
heap
|
page read and write
|
||
4E0000
|
trusted library allocation
|
page execute and read and write
|
||
5EF000
|
heap
|
page read and write
|
||
4E0000
|
heap
|
page read and write
|
||
20DE000
|
stack
|
page read and write
|
||
62D000
|
stack
|
page read and write
|
||
3DE0000
|
heap
|
page read and write
|
||
2164000
|
heap
|
page read and write
|
||
20000
|
unkown
|
page read and write
|
||
137C000
|
unkown
|
page write copy
|
||
10000
|
heap
|
page read and write
|
||
3DCA000
|
unclassified section
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
5D6D000
|
heap
|
page read and write
|
||
5653000
|
heap
|
page read and write
|
||
3670000
|
heap
|
page read and write
|
||
2B92000
|
unkown
|
page read and write
|
||
65E000
|
heap
|
page read and write
|
||
10CC000
|
system
|
page read and write
|
||
563C000
|
heap
|
page read and write
|
||
35EE000
|
stack
|
page read and write
|
||
3C9C000
|
stack
|
page read and write
|
||
7D7000
|
heap
|
page read and write
|
||
1372000
|
unkown
|
page readonly
|
||
578E000
|
stack
|
page read and write
|
||
674000
|
heap
|
page read and write
|
||
36AF000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
20000
|
unkown
|
page read and write
|
||
1D0000
|
heap
|
page read and write
|
||
9F1000
|
unkown
|
page execute read
|
||
3AA6000
|
unclassified section
|
page read and write
|
||
127000
|
stack
|
page read and write
|
||
6A0000
|
unkown
|
page readonly
|
||
6BB000
|
heap
|
page read and write
|
||
876000
|
heap
|
page read and write
|
||
2BB0000
|
direct allocation
|
page read and write
|
||
890000
|
heap
|
page read and write
|
||
55F0000
|
heap
|
page read and write
|
||
9F0000
|
unkown
|
page readonly
|
||
53F000
|
heap
|
page read and write
|
||
2BC1000
|
direct allocation
|
page read and write
|
||
5D10000
|
heap
|
page read and write
|
||
2B9A000
|
direct allocation
|
page read and write
|
||
3D9C000
|
stack
|
page read and write
|
||
20B000
|
stack
|
page read and write
|
||
750000
|
unkown
|
page readonly
|
||
57F0000
|
heap
|
page read and write
|
||
5900000
|
heap
|
page read and write
|
||
587E000
|
stack
|
page read and write
|
||
630000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
2D7000
|
heap
|
page read and write
|
||
9F0000
|
direct allocation
|
page execute and read and write
|
||
723000
|
heap
|
page read and write
|
||
3630000
|
heap
|
page read and write
|
||
1FDE000
|
stack
|
page read and write
|
||
20000
|
direct allocation
|
page read and write
|
||
2C0000
|
trusted library allocation
|
page read and write
|
||
860000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
20000
|
direct allocation
|
page read and write
|
||
98C000
|
unkown
|
page read and write
|
||
1674000
|
system
|
page read and write
|
||
2CAA000
|
unclassified section
|
page execute and read and write
|
||
8D0000
|
unkown
|
page readonly
|
||
71B000
|
heap
|
page read and write
|
||
2170000
|
direct allocation
|
page execute and read and write
|
||
1380000
|
unkown
|
page write copy
|
||
B70000
|
unclassified section
|
page execute and read and write
|
||
72C000
|
heap
|
page read and write
|
||
850000
|
heap
|
page read and write
|
||
2150000
|
direct allocation
|
page execute and read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
2B9A000
|
direct allocation
|
page read and write
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
992000
|
heap
|
page read and write
|
||
22E0000
|
direct allocation
|
page execute and read and write
|
||
1AD000
|
stack
|
page read and write
|
||
65C000
|
heap
|
page read and write
|
||
2330000
|
remote allocation
|
page read and write
|
||
5F0000
|
heap
|
page read and write
|
||
4AC7000
|
heap
|
page read and write
|
||
18C000
|
stack
|
page read and write
|
||
5658000
|
heap
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
2BC4000
|
direct allocation
|
page read and write
|
||
1F04000
|
heap
|
page read and write
|
||
56C0000
|
unkown
|
page read and write
|
||
1384000
|
unkown
|
page readonly
|
||
61EA2000
|
unkown
|
page readonly
|
||
134C000
|
unkown
|
page readonly
|
||
5A4E000
|
stack
|
page read and write
|
||
34B8000
|
unkown
|
page read and write
|
||
2160000
|
heap
|
page read and write
|
||
2AD0000
|
direct allocation
|
page read and write
|
||
860000
|
heap
|
page read and write
|
||
1384000
|
unkown
|
page readonly
|
||
58BE000
|
stack
|
page read and write
|
||
880000
|
heap
|
page read and write
|
||
2030000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
2BD0000
|
direct allocation
|
page read and write
|
||
2B9D000
|
direct allocation
|
page read and write
|
||
6BD000
|
heap
|
page read and write
|
||
2267000
|
direct allocation
|
page execute and read and write
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
2B9D000
|
direct allocation
|
page read and write
|
||
940000
|
heap
|
page read and write
|
||
73D000
|
heap
|
page read and write
|
||
121D000
|
direct allocation
|
page read and write
|
||
24CF000
|
stack
|
page read and write
|
||
974000
|
heap
|
page read and write
|
||
2164000
|
heap
|
page read and write
|
||
510000
|
heap
|
page read and write
|
||
1F1E000
|
stack
|
page read and write
|
||
2160000
|
heap
|
page read and write
|
||
490000
|
heap
|
page read and write
|
||
5F7000
|
heap
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
5B30000
|
heap
|
page read and write
|
||
2F4000
|
heap
|
page read and write
|
||
B60000
|
direct allocation
|
page execute and read and write
|
||
2B60000
|
unkown
|
page read and write
|
||
1DC000
|
stack
|
page read and write
|
||
61C000
|
heap
|
page read and write
|
||
1E60000
|
heap
|
page read and write
|
||
2C48000
|
heap
|
page read and write
|
||
6A0000
|
unkown
|
page readonly
|
||
9FE000
|
unkown
|
page readonly
|
||
39AE000
|
stack
|
page read and write
|
||
723000
|
heap
|
page read and write
|
||
2BFB000
|
heap
|
page read and write
|
||
20B000
|
stack
|
page read and write
|
||
20D0000
|
direct allocation
|
page execute and read and write
|
||
2B9D000
|
direct allocation
|
page read and write
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
1FE0000
|
direct allocation
|
page execute and read and write
|
||
1F54000
|
heap
|
page read and write
|
||
89000
|
stack
|
page read and write
|
||
667000
|
heap
|
page read and write
|
||
861000
|
heap
|
page read and write
|
||
2C10000
|
direct allocation
|
page read and write
|
||
54E000
|
stack
|
page read and write
|
||
6BB000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
49AA000
|
unkown
|
page execute and read and write
|
||
3914000
|
unclassified section
|
page read and write
|
||
5AB000
|
system
|
page execute and read and write
|
||
3B00000
|
unkown
|
page read and write
|
||
34D000
|
stack
|
page read and write
|
||
654000
|
heap
|
page read and write
|
||
967000
|
direct allocation
|
page execute and read and write
|
||
568C000
|
heap
|
page read and write
|
||
22E0000
|
heap
|
page read and write
|
||
202000
|
heap
|
page read and write
|
||
5D5B000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
9F0000
|
unkown
|
page readonly
|
||
6B9000
|
heap
|
page read and write
|
||
718000
|
heap
|
page read and write
|
||
61E01000
|
unkown
|
page execute read
|
||
2BB0000
|
direct allocation
|
page read and write
|
||
364A000
|
unkown
|
page read and write
|
||
350000
|
unkown
|
page readonly
|
||
2D17000
|
direct allocation
|
page read and write
|
||
220000
|
heap
|
page read and write
|
||
25C2000
|
unclassified section
|
page read and write
|
||
57CD000
|
stack
|
page read and write
|
||
240000
|
heap
|
page read and write
|
||
61E90000
|
unkown
|
page read and write
|
||
26DC000
|
unclassified section
|
page read and write
|
||
1F50000
|
heap
|
page read and write
|
||
F0000
|
heap
|
page read and write
|
||
F8000
|
heap
|
page read and write
|
||
31D000
|
unkown
|
page read and write
|
||
788000
|
heap
|
page read and write
|
||
5C0000
|
heap
|
page read and write
|
||
1E50000
|
heap
|
page read and write
|
||
4CE0000
|
trusted library allocation
|
page read and write
|
||
870000
|
direct allocation
|
page execute and read and write
|
||
A05000
|
unkown
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
1F30000
|
trusted library allocation
|
page read and write
|
||
2AD0000
|
direct allocation
|
page read and write
|
||
723000
|
heap
|
page read and write
|
||
7A7000
|
heap
|
page read and write
|
||
5F80000
|
heap
|
page read and write
|
||
2D17000
|
direct allocation
|
page read and write
|
||
9F0000
|
unkown
|
page readonly
|
||
2D80000
|
direct allocation
|
page read and write
|
||
BB0000
|
unkown
|
page readonly
|
||
5090000
|
trusted library allocation
|
page read and write
|
||
2B9A000
|
direct allocation
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
5D5C000
|
heap
|
page read and write
|
||
2E16000
|
unclassified section
|
page read and write
|
||
20F0000
|
direct allocation
|
page execute and read and write
|
||
7D1000
|
heap
|
page read and write
|
||
5A9000
|
system
|
page execute and read and write
|
||
61EA9000
|
unkown
|
page readonly
|
||
232F000
|
stack
|
page read and write
|
||
2182000
|
heap
|
page read and write
|
||
6F7000
|
heap
|
page read and write
|
||
1372000
|
unkown
|
page readonly
|
||
7E0000
|
heap
|
page read and write
|
||
5E4000
|
heap
|
page read and write
|
||
890000
|
heap
|
page read and write
|
||
4CDF000
|
stack
|
page read and write
|
||
1D0000
|
direct allocation
|
page execute and read and write
|
||
860000
|
heap
|
page read and write
|
||
5C3000
|
system
|
page execute and read and write
|
||
2C4000
|
heap
|
page read and write
|
||
1F0B000
|
heap
|
page read and write
|
||
5BBF000
|
stack
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
6F0000
|
heap
|
page read and write
|
||
5E2F000
|
stack
|
page read and write
|
||
4148000
|
unkown
|
page read and write
|
||
3FB6000
|
unkown
|
page read and write
|
||
2BC7000
|
direct allocation
|
page read and write
|
||
50D000
|
stack
|
page read and write
|
||
A05000
|
unkown
|
page read and write
|
||
1E20000
|
heap
|
page read and write
|
||
386F000
|
stack
|
page read and write
|
||
860000
|
direct allocation
|
page execute and read and write
|
||
1072000
|
system
|
page read and write
|
||
2340000
|
heap
|
page read and write
|
||
490000
|
heap
|
page read and write
|
||
517000
|
heap
|
page read and write
|
||
562E000
|
heap
|
page read and write
|
||
1F57000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
2DAC000
|
unkown
|
page read and write
|
||
2D14000
|
direct allocation
|
page read and write
|
||
FB000
|
heap
|
page read and write
|
||
2A0000
|
heap
|
page read and write
|
||
AE4000
|
direct allocation
|
page execute and read and write
|
||
2390000
|
heap
|
page read and write
|
||
C30000
|
heap
|
page read and write
|
||
2BF0000
|
heap
|
page read and write
|
||
1E30000
|
direct allocation
|
page read and write
|
||
4E0000
|
heap
|
page read and write
|
||
2D20000
|
direct allocation
|
page read and write
|
||
6AE000
|
heap
|
page read and write
|
||
2D80000
|
direct allocation
|
page read and write
|
||
5D5C000
|
heap
|
page read and write
|
||
FB000
|
heap
|
page read and write
|
||
2A7000
|
heap
|
page read and write
|
||
2D11000
|
direct allocation
|
page read and write
|
||
2D00000
|
direct allocation
|
page read and write
|
||
5D50000
|
heap
|
page read and write
|
||
2870000
|
unkown
|
page execute and read and write
|
||
2C30000
|
direct allocation
|
page read and write
|
||
3C38000
|
unclassified section
|
page read and write
|
||
2C0D000
|
stack
|
page read and write
|
||
3C92000
|
unkown
|
page read and write
|
||
289C000
|
unclassified section
|
page read and write
|
||
492000
|
heap
|
page read and write
|
||
430000
|
heap
|
page read and write
|
||
9D0000
|
direct allocation
|
page execute and read and write
|
||
1FF0000
|
direct allocation
|
page execute and read and write
|
||
5B3000
|
system
|
page execute and read and write
|
||
37E000
|
stack
|
page read and write
|
||
2C4B000
|
heap
|
page read and write
|
||
4D00000
|
trusted library allocation
|
page read and write
|
||
6EF000
|
heap
|
page read and write
|
||
3C5D000
|
stack
|
page read and write
|
||
2D17000
|
direct allocation
|
page read and write
|
||
667000
|
heap
|
page read and write
|
||
6CF000
|
stack
|
page read and write
|
||
66D000
|
heap
|
page read and write
|
||
5BA000
|
heap
|
page read and write
|
||
589F000
|
stack
|
page read and write
|
||
20E4000
|
direct allocation
|
page execute and read and write
|
||
214E000
|
stack
|
page read and write
|
||
534000
|
heap
|
page read and write
|
||
35F0000
|
unclassified section
|
page read and write
|
||
840000
|
unkown
|
page readonly
|
||
2270000
|
direct allocation
|
page execute and read and write
|
||
6A0000
|
heap
|
page read and write
|
||
10F0000
|
direct allocation
|
page read and write
|
||
350000
|
unkown
|
page readonly
|
||
23B2000
|
heap
|
page read and write
|
||
18A000
|
stack
|
page read and write
|
||
2C10000
|
direct allocation
|
page read and write
|
||
121A000
|
direct allocation
|
page read and write
|
||
27F000
|
stack
|
page read and write
|
||
3AD000
|
stack
|
page read and write
|
||
AF0000
|
direct allocation
|
page execute and read and write
|
||
1DE0000
|
direct allocation
|
page read and write
|
||
2C30000
|
direct allocation
|
page read and write
|
||
1E0000
|
heap
|
page read and write
|
||
34D000
|
stack
|
page read and write
|
||
900000
|
trusted library allocation
|
page read and write
|
||
3194000
|
unkown
|
page read and write
|
||
396E000
|
stack
|
page read and write
|
||
36AA000
|
unclassified section
|
page execute and read and write
|
||
5D6A000
|
heap
|
page read and write
|
||
1F04000
|
heap
|
page read and write
|
||
9F1000
|
unkown
|
page execute read
|
||
2362000
|
heap
|
page read and write
|
||
2F4000
|
heap
|
page read and write
|
||
2D80000
|
direct allocation
|
page read and write
|
||
3EE000
|
stack
|
page read and write
|
||
5D61000
|
heap
|
page read and write
|
||
750000
|
unkown
|
page readonly
|
||
12B0000
|
unkown
|
page readonly
|
||
327000
|
unkown
|
page read and write
|
||
20000
|
unkown
|
page read and write
|
||
2D0000
|
heap
|
page read and write
|
||
73D000
|
heap
|
page read and write
|
||
74C000
|
heap
|
page read and write
|
||
580000
|
heap
|
page read and write
|
||
53D6000
|
heap
|
page read and write
|
||
712000
|
heap
|
page read and write
|
||
2D11000
|
direct allocation
|
page read and write
|
||
560000
|
heap
|
page read and write
|
||
12B1000
|
unkown
|
page execute read
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
368D000
|
heap
|
page read and write
|
||
62DF000
|
stack
|
page read and write
|
||
D0000
|
trusted library allocation
|
page read and write
|
||
1F60000
|
heap
|
page read and write
|
||
5671000
|
heap
|
page read and write
|
||
5D50000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
1E4000
|
heap
|
page read and write
|
||
F0000
|
heap
|
page read and write
|
||
71B000
|
heap
|
page read and write
|
||
1F40000
|
heap
|
page read and write
|
||
2C20000
|
direct allocation
|
page read and write
|
||
121D000
|
direct allocation
|
page read and write
|
||
36B4000
|
heap
|
page read and write
|
||
53AA000
|
unkown
|
page execute and read and write
|
||
53B8000
|
heap
|
page read and write
|
||
D0000
|
trusted library allocation
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
1D6000
|
heap
|
page read and write
|
||
2330000
|
remote allocation
|
page read and write
|
||
2C10000
|
direct allocation
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
F4000
|
heap
|
page read and write
|
||
2FA8000
|
unclassified section
|
page read and write
|
||
2BD0000
|
direct allocation
|
page read and write
|
||
4AC4000
|
heap
|
page read and write
|
||
706000
|
heap
|
page read and write
|
||
2D20000
|
direct allocation
|
page read and write
|
||
280000
|
heap
|
page read and write
|
||
2AF000
|
heap
|
page read and write
|
||
789000
|
heap
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
66E000
|
heap
|
page read and write
|
||
2E7000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
2682000
|
unclassified section
|
page read and write
|
||
D0000
|
trusted library allocation
|
page read and write
|
||
88000
|
stack
|
page read and write
|
||
7E0000
|
heap
|
page read and write
|
||
9E0000
|
direct allocation
|
page execute and read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
688000
|
heap
|
page read and write
|
||
520000
|
unkown
|
page readonly
|
||
A07000
|
unkown
|
page readonly
|
||
7D4000
|
heap
|
page read and write
|
||
12B1000
|
unkown
|
page execute read
|
||
6BF000
|
stack
|
page read and write
|
||
2AE000
|
heap
|
page read and write
|
||
2BB0000
|
direct allocation
|
page read and write
|
||
3A0000
|
heap
|
page read and write
|
||
729000
|
heap
|
page read and write
|
||
2C44000
|
heap
|
page read and write
|
||
798000
|
heap
|
page read and write
|
||
61EA5000
|
unkown
|
page read and write
|
||
667000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
66D000
|
heap
|
page read and write
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
474000
|
heap
|
page read and write
|
||
870000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
460000
|
heap
|
page read and write
|
||
629000
|
heap
|
page read and write
|
||
3F3B000
|
unkown
|
page execute and read and write
|
||
536D000
|
unkown
|
page read and write
|
||
A0000
|
heap
|
page read and write
|
||
2D11000
|
direct allocation
|
page read and write
|
||
9FE000
|
unkown
|
page readonly
|
||
470000
|
heap
|
page read and write
|
||
1F51000
|
heap
|
page read and write
|
||
569C000
|
heap
|
page read and write
|
||
20000
|
unkown
|
page read and write
|
||
2D20000
|
direct allocation
|
page read and write
|
||
4D13000
|
trusted library allocation
|
page read and write
|
||
257F000
|
stack
|
page read and write
|
||
950000
|
direct allocation
|
page execute and read and write
|
||
2AC0000
|
direct allocation
|
page read and write
|
||
2FF000
|
stack
|
page read and write
|
||
2BDF000
|
stack
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
121A000
|
direct allocation
|
page read and write
|
||
DE000
|
system
|
page execute and read and write
|
||
668000
|
heap
|
page read and write
|
||
20E7000
|
direct allocation
|
page execute and read and write
|
||
946000
|
heap
|
page read and write
|
||
550000
|
heap
|
page read and write
|
||
3E3000
|
heap
|
page read and write
|
||
12B0000
|
unkown
|
page readonly
|
||
650000
|
heap
|
page read and write
|
||
674000
|
heap
|
page read and write
|
||
510000
|
heap
|
page read and write
|
||
657000
|
heap
|
page read and write
|
||
286000
|
heap
|
page read and write
|
||
F20000
|
system
|
page execute and read and write
|
||
56DD000
|
unkown
|
page read and write
|
||
2CE000
|
stack
|
page read and write
|
||
2BC7000
|
direct allocation
|
page read and write
|
||
390000
|
heap
|
page read and write
|
||
B50000
|
direct allocation
|
page execute and read and write
|
||
61E92000
|
unkown
|
page readonly
|
||
1F08000
|
heap
|
page read and write
|
||
9F0000
|
unkown
|
page readonly
|
||
2BF4000
|
heap
|
page read and write
|
||
A07000
|
unkown
|
page readonly
|
||
2264000
|
direct allocation
|
page execute and read and write
|
||
2394000
|
heap
|
page read and write
|
||
729000
|
heap
|
page read and write
|
||
EBE000
|
stack
|
page read and write
|
||
A07000
|
unkown
|
page readonly
|
||
940000
|
heap
|
page read and write
|
||
2A4F000
|
stack
|
page read and write
|
||
3B20000
|
heap
|
page read and write
|
||
230000
|
heap
|
page read and write
|
||
3FAA000
|
unkown
|
page execute and read and write
|
||
32CC000
|
unclassified section
|
page read and write
|
||
320000
|
unkown
|
page read and write
|
||
729000
|
heap
|
page read and write
|
||
5490000
|
heap
|
page read and write
|
||
992000
|
heap
|
page read and write
|
||
22AA000
|
unclassified section
|
page execute and read and write
|
||
6E0000
|
heap
|
page read and write
|
||
20000
|
direct allocation
|
page read and write
|
||
520000
|
unkown
|
page readonly
|
||
723000
|
heap
|
page read and write
|
||
AE7000
|
direct allocation
|
page execute and read and write
|
||
706000
|
heap
|
page read and write
|
||
4D19000
|
trusted library allocation
|
page read and write
|
||
1140000
|
direct allocation
|
page read and write
|
||
247F000
|
stack
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
798000
|
heap
|
page read and write
|
||
2F0000
|
heap
|
page read and write
|
||
5D58000
|
heap
|
page read and write
|
||
626000
|
system
|
page execute and read and write
|
||
564E000
|
heap
|
page read and write
|
||
63D000
|
heap
|
page read and write
|
||
974000
|
heap
|
page read and write
|
||
3326000
|
unkown
|
page read and write
|
||
3782000
|
unclassified section
|
page read and write
|
||
65A000
|
heap
|
page read and write
|
||
2BC4000
|
direct allocation
|
page read and write
|
||
1040000
|
system
|
page read and write
|
||
2D7000
|
heap
|
page read and write
|
||
798000
|
heap
|
page read and write
|
||
65E000
|
heap
|
page read and write
|
||
A05000
|
unkown
|
page read and write
|
||
6AC000
|
stack
|
page read and write
|
||
27B000
|
stack
|
page read and write
|
||
1140000
|
direct allocation
|
page read and write
|
||
1F00000
|
heap
|
page read and write
|
||
4CE0000
|
trusted library allocation
|
page read and write
|
||
840000
|
unkown
|
page readonly
|
||
2344000
|
heap
|
page read and write
|
||
70B000
|
heap
|
page read and write
|
||
5BD000
|
heap
|
page read and write
|
||
7A6000
|
heap
|
page read and write
|
||
5B10000
|
heap
|
page read and write
|
||
5CF000
|
system
|
page execute and read and write
|
||
121A000
|
direct allocation
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
960000
|
direct allocation
|
page execute and read and write
|
||
D0000
|
trusted library allocation
|
page read and write
|
||
2261000
|
direct allocation
|
page execute and read and write
|
||
9FE000
|
unkown
|
page readonly
|
||
5BB0000
|
trusted library allocation
|
page read and write
|
||
19B000
|
stack
|
page read and write
|
||
6D0000
|
heap
|
page read and write
|
||
970000
|
direct allocation
|
page execute and read and write
|
||
FB2000
|
system
|
page read and write
|
||
1570000
|
unclassified section
|
page execute and read and write
|
||
9F1000
|
unkown
|
page execute read
|
||
73A000
|
heap
|
page read and write
|
||
42DA000
|
unkown
|
page read and write
|
||
3F80000
|
heap
|
page read and write
|
||
20E0000
|
direct allocation
|
page execute and read and write
|
||
2A9000
|
heap
|
page read and write
|
||
6BF000
|
heap
|
page read and write
|
||
71B000
|
heap
|
page read and write
|
||
2D14000
|
direct allocation
|
page read and write
|
||
2160000
|
direct allocation
|
page execute and read and write
|
||
964000
|
direct allocation
|
page execute and read and write
|
||
137C000
|
unkown
|
page read and write
|
||
840000
|
heap
|
page read and write
|
There are 636 hidden memdumps, click here to show them.