IOCReport

loading gif

Files

File Path
Type
Category
Malicious
A Letter before court 4.docx
Microsoft OOXML
initial sample
malicious
C:\Users\user\AppData\Local\Temp\championship.inf
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.accdb
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.ini
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.laccdb
data
modified
clean
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\9016AF0D-7AC1-4FEE-A5B8-D20651594FEA
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\234EBFAE.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 224x224, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\42164C14.wmf
ms-windows metafont .wmf
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9ADCF821.htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AB65D505.dat
Targa image data - Map - RLE 5 x 65536 x 0 "\004"
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CAF8D25B.htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{65DAACF4-2CC1-480C-97AF-0646DECCE795}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{DDA3C8BF-F833-4E25-B392-A0D975DFB1BC}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\side[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\YQ8Q39W5.HTM
HTML document, ASCII text
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ministry[1].cab
Microsoft Cabinet archive data, 2142304 bytes, 1 file
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\side[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\A Letter before court 4.docx.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:42 2020, mtime=Thu Sep 2 11:59:44 2021, atime=Thu Sep 2 11:59:34 2021, length=24177, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0809.lex
Little-endian UTF-16 Unicode text, with no line terminators
dropped
clean
C:\Users\user\Desktop\~$Letter before court 4.docx
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-CNRY.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSD-{5B998613-80FE-4D41-B693-38F9D26EBC4A}.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\FSF-CTBL.FSF
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-CNRY.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSD-{312AF597-3F19-43A3-83F2-7290D3D68EEA}.FSD
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Office\14.0\OfficeFileCache\LocalCacheFileEditManager\FSF-{0E1EEE64-E8C6-4E2A-9759-63CF07FD8988}.FSF
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\D93XVM75.HTM
HTML document, ASCII text, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\side[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ZVQRM1OV.HTM
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\side[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ministry[1].cab
Microsoft Cabinet archive data, 2142304 bytes, 1 file
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\side[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2CE2931E.dat
Targa image data - Map - RLE 5 x 65536 x 0 "\004"
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3CDE334A.htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A1F216C3.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 224x224, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EC4D2D51.wmf
ms-windows metafont .wmf
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EF1B4CDC.htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{50740283-EDEF-40AD-B05D-26E74BB1B033}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{90BD98C7-937C-4836-A1DF-7BD372652360}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\{A3EBDC15-0B85-4394-BD89-A6DEB552E964}
data
dropped
clean
C:\Users\user\AppData\Local\Temp\{BCA7A4D3-3F50-4469-9DFA-595907E93D6D}
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\A Letter before court 4.LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Mon Aug 30 20:08:57 2021, mtime=Mon Aug 30 20:08:57 2021, atime=Thu Sep 2 11:53:16 2021, length=24177, window=hide
dropped
clean
There are 34 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:123',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:../../../AppData/Local/Temp/Low/championship.inf',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:../../../AppData/Local/Temp/championship.inf',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:../../../../AppData/Local/Temp/Low/championship.inf',
malicious
C:\Windows\SysWOW64\control.exe
'C:\Windows\System32\control.exe' '.cpl:../../../../AppData/Local/Temp/championship.inf',
malicious
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\Office16\MsoSync.exe
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\System32\rundll32.exe
C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:123',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:../../../AppData/Local/Temp/Low/championship.inf',
clean
C:\Windows\SysWOW64\rundll32.exe
'C:\Windows\system32\rundll32.exe' Shell32.dll,Control_RunDLL '.cpl:../../../AppData/Local/Temp/championship.inf',
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
clean
There are 25 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://hidusi.com/e8c76295a5f9acb7/ministry.cab
23.106.160.25
malicious
http://hidusi.com/e8c76295a5f9acb7/side.html
23.106.160.25
malicious
https://api.diagnosticssdf.office.com
unknown
clean
https://login.microsoftonline.com/
unknown
clean
https://shell.suite.office.com:1443
unknown
clean
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://roaming.edog.
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://cdn.entity.
unknown
clean
https://api.addins.omex.office.net/appinfo/query
unknown
clean
https://clients.config.office.net/user/v1.0/tenantassociationkey
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://powerlift.acompli.net
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://cortana.ai
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://cloudfiles.onenote.com/upload.aspx
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://entitlement.diagnosticssdf.office.com
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
https://api.aadrm.com/
unknown
clean
https://ofcrecsvcapi-int.azurewebsites.net/
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
https://cr.office.com
unknown
clean
https://portal.office.com/account/?ref=ClientMeControl
unknown
clean
https://graph.ppe.windows.net
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://powerlift-frontdesk.acompli.net
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
http://hidusi.com/e8c76295a5f9acb7/ministry.cab)
unknown
clean
https://outlook.office.com/autosuggest/api/v1/init?cvid=
unknown
clean
https://globaldisco.crm.dynamics.com
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://store.officeppe.com/addinstemplate
unknown
clean
https://dev0-api.acompli.net/autodetect
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://graph.windows.net
unknown
clean
https://dataservice.o365filtering.com/
unknown
clean
https://officesetup.getmicrosoftkey.com
unknown
clean
https://analysis.windows.net/powerbi/api
unknown
clean
https://prod-global-autodetect.acompli.net/autodetect
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.json
unknown
clean
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
unknown
clean
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://ncus.contentsync.
unknown
clean
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://apis.live.net/v5.0/
unknown
clean
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://management.azure.com
unknown
clean
https://outlook.office365.com
unknown
clean
https://wus2.contentsync.
unknown
clean
https://incidents.diagnostics.office.com
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://insertmedia.bing.office.net/odc/insertmedia
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.office.net
unknown
clean
https://incidents.diagnosticssdf.office.com
unknown
clean
https://asgsmsproxyapi.azurewebsites.net/
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://substrate.office.com/search/api/v2/init
unknown
clean
https://outlook.office.com/
unknown
clean
https://storage.live.com/clientlogs/uploadlocation
unknown
clean
https://outlook.office365.com/
unknown
clean
https://webshell.suite.office.com
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
unknown
clean
https://substrate.office.com/search/api/v1/SearchHistory
unknown
clean
https://management.azure.com/
unknown
clean
https://login.windows.net/common/oauth2/authorize
unknown
clean
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://graph.windows.net/
unknown
clean
https://api.powerbi.com/beta/myorg/imports
unknown
clean
https://devnull.onenote.com
unknown
clean
https://ncus.pagecontentsync.
unknown
clean
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
unknown
clean
https://messaging.office.com/
unknown
clean
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://augloop.office.com/v2
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
unknown
clean
https://skyapi.live.net/Activity/
unknown
clean
https://clients.config.office.net/user/v1.0/mac
unknown
clean
https://dataservice.o365filtering.com
unknown
clean
https://api.cortana.ai
unknown
clean
https://www.openssl.org/docs/faq.html
unknown
clean
https://onedrive.live.com
unknown
clean
There are 91 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
hidusi.com
23.106.160.25
malicious

IPs

IP
Domain
Country
Malicious
23.106.160.25
hidusi.com
United States
malicious
192.168.2.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
) +
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
* +
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
k'+
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
RemoteClearDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Last
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
FilePath
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
StartDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
EndDate
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Properties
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Url
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
LastClean
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
DisableWinHttpCertAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
DisableIsOwnerRegex
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
DisableSessionAwareHttpClose
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
DisableADALForExtendedApps
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
DisableADALSetSilentAuth
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
msoridDisableGuestCredProvider
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
msoridDisableOstringReplace
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
.'+
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
AceFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
AceFilesIntl_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
CacheId
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
WxpFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Version
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Type
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Protocol
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Version
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Flags
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
CobaltMajorVersion
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
CobaltMinorVersion
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
MsDavExt
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
WebUrl
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Expiration
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
EnableBHO
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Type
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Protocol
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Version
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Flags
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
CobaltMajorVersion
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
CobaltMinorVersion
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
MsDavExt
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
WebUrl
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Expiration
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
EnableBHO
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ReviewToken
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
19C2C
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
VBAFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
MSForms
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
MSComctlLib
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Type
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Flags
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Time
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
C:\Windows\System32\control.exe.FriendlyAppName
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
C:\Windows\System32\control.exe.ApplicationCompany
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Type
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Flags
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Time
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Blocked
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Options Version
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Name
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Data
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Name
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Data
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Name
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Path
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Extensions
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Cambria Math
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Trebuchet MS
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
21A26
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Path
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Datetime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Position
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
LastPurgeTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
WORDFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
AceFilesIntl_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
AceFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
LastBootTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
RoamingConfigurableSettings
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
RoamingLastSyncTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
RoamingLastWriteTime
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Expiration
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Time
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Count
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Time
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
OperationalData
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Name
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Path
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Extensions
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Name
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Path
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Extensions
clean
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
21A26
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
,l6
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
-l6
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
CacheMaintenanceGuid
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
TimeCacheMaintenanceStart
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
CacheMigrationAttempted
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
ProductFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
AceFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
AceFilesIntl_1033
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
WxpFiles
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
en-US
clean
C:\Program Files (x86)\Microsoft Office\Office16\MSOSYNC.EXE
en-US
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
5&#
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
>'#
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
')#
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Count
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Type
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Protocol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Version
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Flags
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMajorVersion
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CobaltMinorVersion
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MsDavExt
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Expiration
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EnableBHO
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
31055
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Options Version
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Name
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Data
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Name
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Data
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
38D61
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SavedLegacySettings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
38D61
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
clean
There are 475 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
306A000
unkown
page read and write
clean
2F90000
heap default
page read and write
clean
30BE000
unkown
page read and write
clean
9F0000
heap private
page read and write
clean
AC0000
heap default
page read and write
clean
293307E0000
unkown
page read and write
clean
99E000
unkown
page read and write
clean
300E000
unkown
page read and write
clean
11DA000
heap default
page read and write
clean
123B000
unkown
page read and write
clean
2E991AB000
unkown
page read and write
clean
1360000
unkown
page read and write
clean
19FF5C58000
unkown
page read and write
clean
C9E000
unkown
page read and write
clean
5F0000
heap private
page read and write
clean
63860FF000
unkown
page read and write
clean
840000
heap default
page read and write
clean
2C20000
unkown
page read and write
clean
51FE000
unkown
page read and write
clean
1E06BEC5000
heap private
page read and write
clean
955000
heap default
page read and write
clean
727000
heap default
page read and write
clean
2D43000
unkown
page read and write
clean
2181CCE0000
heap default
page read and write
clean
EAD227F000
unkown
page read and write
clean
7EE000
unkown
page read and write
clean
81A000
heap default
page read and write
clean
3630000
heap default
page read and write
clean
489E000
unkown
page read and write
clean
7BC000
unkown
page read and write
clean
D7B000
unkown
page read and write
clean
4AD000
unkown
page read and write
clean
859000
heap default
page read and write
clean
284000
unkown
page read and write
clean
737000
heap default
page read and write
clean
509E000
unkown
page read and write
clean
1FACD466000
unkown
page read and write
clean
523E000
unkown
page read and write
clean
4F9E000
unkown
page read and write
clean
2D73000
unkown
page read and write
clean
2181CEB0000
unkown
page read and write
clean
3110000
unkown
page read and write
clean
2933081E000
heap default
page read and write
clean
19FF6402000
unkown
page read and write
clean
4D0E000
unkown
page read and write
clean
257A4521000
heap default
page read and write
clean
2E99000
unkown
page read and write
clean
2181CF40000
heap private
page read and write
clean
2181E800000
heap private
page read and write
clean
2CA1000
heap default
page read and write
clean
1110000
unkown
page read and write
clean
A80000
heap private
page read and write
clean
35D0000
heap default
page read and write
clean
1070000
unkown
page read and write
clean
3047000
heap default
page read and write
clean
FAC000
unkown
page read and write
clean
19FF5D02000
unkown
page read and write
clean
496E000
unkown
page read and write
clean
1D0000
unkown
page read and write
clean
4F00000
heap private
page read and write
clean
140000
unkown
page read and write
clean
54E000
unkown
page read and write
clean
479E000
unkown
page read and write
clean
2CBA000
heap default
page read and write
clean
9C000
unkown
page read and write
clean
868ED2E000
unkown
page read and write
clean
1F104A70000
heap private
page read and write
clean
848000
heap default
page read and write
clean
2D77000
unkown
page read and write
clean
2D8C000
unkown
page read and write
clean
1F104839000
heap default
page read and write
clean
2E99AFE000
unkown
page read and write
clean
CE0000
heap default
page read and write
clean
828000
heap default
page read and write
clean
3621000
unkown
page read and write
clean
1ACDFEB0000
heap private
page read and write
clean
3DC000
unkown
page read and write
clean
46FF000
unkown
page read and write
clean
2D3B000
unkown
page read and write
clean
AFE000
unkown
page read and write
clean
75A000
heap default
page read and write
clean
493E000
unkown
page read and write
clean
2F19000
unkown
page read and write
clean
950000
heap default
page read and write
clean
E1E000
unkown
page read and write
clean
1181000
unkown
page read and write
clean
D3C000
unkown
page read and write
clean
133E000
unkown
page read and write
clean
32C5000
heap default
page read and write
clean
86F000
unkown
page read and write
clean
470E000
unkown
page read and write
clean
4E1E000
unkown
page read and write
clean
2D3E000
unkown
page read and write
clean
4A1000
unkown
page read and write
clean
483E000
unkown
page read and write
clean
2E999FF000
unkown
page read and write
clean
2EB0000
heap private
page read and write
clean
1E06BBE0000
unkown
page read and write
clean
1ACDE5E0000
heap private
page read and write
clean
A25000
heap default
page read and write
clean
760000
heap default
page read and write
clean
940000
unkown
page read and write
clean
2FB0000
heap default
page read and write
clean
116E000
unkown
page read and write
clean
550000
unkown
page read and write
clean
461F000
unkown
page read and write
clean
66E000
unkown
page read and write
clean
3380000
unkown
page read and write
clean
B0F000
unkown
page read and write
clean
4F5E000
unkown
page read and write
clean
5DE947E000
unkown
page read and write
clean
1E769680000
unkown
page read and write
clean
2FFE000
unkown
page read and write
clean
10CE000
unkown
page read and write
clean
8B6000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
1E769489000
heap default
page read and write
clean
785000
unkown
page read and write
clean
31ED000
unkown
page read and write
clean
4660000
heap private
page read and write
clean
750000
heap default
page read and write
clean
357D000
unkown
page read and write
clean
4C9000
unkown
page read and write
clean
1F104851000
heap default
page read and write
clean
1ACDE380000
unkown
page read and write
clean
1FACD460000
unkown
page read and write
clean
DE0000
unkown
page read and write
clean
770000
unkown
page read and write
clean
5DE90AB000
unkown
page read and write
clean
23B464F8000
heap default
page read and write
clean
29332340000
heap private
page read and write
clean
D5EAF3B000
unkown
page read and write
clean
257A4480000
unkown
page read and write
clean
497C000
unkown
page read and write
clean
8B9000
unkown
page read and write
clean
35BE000
unkown
page read and write
clean
77A000
unkown
page read and write
clean
2181CED0000
unkown
page read and write
clean
4FDE000
unkown
page read and write
clean
AC000
unkown
page read and write
clean
22CE3AB000
unkown
page read and write
clean
929000
unkown
page read and write
clean
EAD237F000
unkown
page read and write
clean
930000
heap private
page read and write
clean
4E8C000
unkown
page read and write
clean
1E06BC30000
heap default
page read and write
clean
78D000
unkown
page read and write
clean
1120000
heap default
page read and write
clean
46AE000
unkown
page read and write
clean
33A0000
unkown
page read and write
clean
2FBE000
unkown
page read and write
clean
48DF000
unkown
page read and write
clean
1E06D5F0000
heap private
page read and write
clean
794247E000
unkown
page read and write
clean
A6E000
unkown
page read and write
clean
575000
heap default
page read and write
clean
1E7697B5000
heap private
page read and write
clean
9AF000
unkown
page read and write
clean
1E76B0D0000
heap private
page read and write
clean
741000
heap default
page read and write
clean
1F104A75000
heap private
page read and write
clean
B72F3AE000
unkown
page read and write
clean
2FDE000
unkown
page read and write
clean
52DE000
unkown
page read and write
clean
AD0000
heap private
page read and write
clean
B0F000
unkown
page read and write
clean
595000
heap default
page read and write
clean
2CCE000
unkown
page read and write
clean
6EE000
unkown
page read and write
clean
F40000
heap private
page read and write
clean
19FF5B60000
heap private
page read and write
clean
E60000
heap default
page read and write
clean
76F000
heap default
page read and write
clean
10B0000
heap default
page read and write
clean
1FACD47D000
unkown
page read and write
clean
3460000
unkown
page read and write
clean
352F000
unkown
page read and write
clean
29330818000
heap default
page read and write
clean
2C23000
unkown
page read and write
clean
2F75000
heap default
page read and write
clean
4CCE000
unkown
page read and write
clean
D24000
heap default
page read and write
clean
66B000
unkown
page read and write
clean
EC0000
heap default
page read and write
clean
950000
heap default
page read and write
clean
5DE91AE000
unkown
page read and write
clean
23B46480000
unkown
page read and write
clean
31F3000
unkown
page read and write
clean
9B0000
heap private
page read and write
clean
1FACD402000
unkown
page read and write
clean
E7B000
unkown
page read and write
clean
28D000
unkown
page read and write
clean
600000
heap default
page read and write
clean
79421EE000
unkown
page read and write
clean
53DF000
unkown
page read and write
clean
77E000
unkown
page read and write
clean
890000
unkown
page read and write
clean
19FF5C46000
unkown
page read and write
clean
2D38000
unkown
page read and write
clean
A77000
unkown
page read and write
clean
AC5000
heap default
page read and write
clean
29330BA5000
heap private
page read and write
clean
665000
unkown
page read and write
clean
23B464E0000
unkown
page read and write
clean
EAD1FDB000
unkown
page read and write
clean
86F000
unkown
page read and write
clean
8B0000
unkown
page read and write
clean
789000
unkown
page read and write
clean
30BE000
heap default
page read and write
clean
720000
heap default
page read and write
clean
306D000
unkown
page read and write
clean
103E000
unkown
page read and write
clean
1FACD310000
heap default
page read and write
clean
31BE000
unkown
page read and write
clean
C4D000
unkown
page read and write
clean
A4E000
unkown
page read and write
clean
334F000
unkown
page read and write
clean
1E769450000
unkown
page read and write
clean
2D2C000
unkown
page read and write
clean
257A44C0000
unkown
page read and write
clean
3070000
unkown
page read and write
clean
B70000
heap private
page read and write
clean
4AFF000
unkown
page read and write
clean
3377000
heap default
page read and write
clean
4FEE000
unkown
page read and write
clean
1000000
heap private
page read and write
clean
860000
unkown
page read and write
clean
3390000
heap default
page read and write
clean
5F0000
unkown
page read and write
clean
D8E000
unkown
page read and write
clean
1FACD454000
unkown
page read and write
clean
517D000
unkown
page read and write
clean
2F70000
heap default
page read and write
clean
BBF000
unkown
page read and write
clean
71F000
unkown
page read and write
clean
1F104990000
unkown
page read and write
clean
257A4460000
unkown
page read and write
clean
2D70000
heap default
page read and write
clean
E99000
unkown
page read and write
clean
9BD367E000
unkown
page read and write
clean
19FF5C00000
unkown
page read and write
clean
502E000
unkown
page read and write
clean
11C0000
heap private
page read and write
clean
1180000
unkown
page read and write
clean
790000
unkown
page read and write
clean
330E000
unkown
page read and write
clean
82F000
unkown
page read and write
clean
2F45000
heap default
page read and write
clean
2D46000
unkown
page read and write
clean
76E000
unkown
page read and write
clean
896000
unkown
page read and write
clean
8AF000
unkown
page read and write
clean
D5EB2FF000
unkown
page read and write
clean
B7E000
unkown
page read and write
clean
54C000
unkown
page read and write
clean
E70000
unkown
page read and write
clean
18E000
unkown
page read and write
clean
4D4E000
unkown
page read and write
clean
FEC000
unkown
page read and write
clean
CC6000
unkown
page read and write
clean
793000
unkown
page read and write
clean
31B0000
heap default
page read and write
clean
3070000
heap default
page read and write
clean
101E000
unkown
page read and write
clean
9FB000
unkown
page read and write
clean
1FACDC02000
unkown
page read and write
clean
8E5000
unkown
page read and write
clean
329E000
unkown
page read and write
clean
1F106330000
heap private
page read and write
clean
730000
heap default
page read and write
clean
70B000
unkown
page read and write
clean
670000
unkown
page read and write
clean
280000
unkown
page read and write
clean
46CF000
unkown
page read and write
clean
2181CCEE000
heap default
page read and write
clean
3061000
heap default
page read and write
clean
794216B000
unkown
page read and write
clean
DB000
unkown
page read and write
clean
50AE000
unkown
page read and write
clean
1FACD413000
unkown
page read and write
clean
1FACD513000
unkown
page read and write
clean
531E000
unkown
page read and write
clean
1FACD2B0000
heap private
page read and write
clean
BBC000
unkown
page read and write
clean
468E000
unkown
page read and write
clean
1E7694A1000
heap default
page read and write
clean
1FACD400000
unkown
page read and write
clean
49FE000
unkown
page read and write
clean
78E000
unkown
page read and write
clean
56E000
unkown
page read and write
clean
19FF5C13000
unkown
page read and write
clean
868EDAF000
unkown
page read and write
clean
747000
heap default
page read and write
clean
5DE912E000
unkown
page read and write
clean
39B000
unkown
page read and write
clean
A80000
unkown
page read and write
clean
DCF000
unkown
page read and write
clean
501E000
unkown
page read and write
clean
9BD331B000
unkown
page read and write
clean
47BE000
unkown
page read and write
clean
54C000
unkown
page read and write
clean
B20000
unkown
page read and write
clean
4E5F000
unkown
page read and write
clean
90E000
unkown
page read and write
clean
B4E000
unkown
page read and write
clean
AAE000
unkown
page read and write
clean
483E000
unkown
page read and write
clean
2D91000
heap default
page read and write
clean
2BE0000
unkown
page read and write
clean
539E000
unkown
page read and write
clean
19FF5C49000
unkown
page read and write
clean
2D30000
unkown
page read and write
clean
31B8000
heap default
page read and write
clean
E9000
unkown
page read and write
clean
4F1E000
unkown
page read and write
clean
589000
unkown
page read and write
clean
33BA000
heap default
page read and write
clean
9CC000
unkown
page read and write
clean
60A000
heap default
page read and write
clean
4AA000
unkown
page read and write
clean
6385DFE000
unkown
page read and write
clean
257A450E000
heap default
page read and write
clean
940000
unkown
page read and write
clean
32B0000
heap private
page read and write
clean
4B7C000
unkown
page read and write
clean
45DE000
unkown
page read and write
clean
7AF000
unkown
page read and write
clean
31EC000
heap default
page read and write
clean
23B464A0000
unkown
page read and write
clean
51BE000
unkown
page read and write
clean
DF0000
heap default
page read and write
clean
78A000
unkown
page read and write
clean
3380000
heap private
page read and write
clean
33BF000
heap default
page read and write
clean
2D34000
unkown
page read and write
clean
31FE000
unkown
page read and write
clean
6DE000
unkown
page read and write
clean
29330780000
unkown
page read and write
clean
AEE000
unkown
page read and write
clean
78E000
unkown
page read and write
clean
35D8000
heap default
page read and write
clean
655000
heap default
page read and write
clean
FEB000
unkown
page read and write
clean
5DF000
unkown
page read and write
clean
88E000
heap default
page read and write
clean
46A0000
heap private
page read and write
clean
1F104950000
unkown
page read and write
clean
489F000
unkown
page read and write
clean
3073000
unkown
page read and write
clean
868ECAB000
unkown
page read and write
clean
770000
unkown
page read and write
clean
3370000
heap default
page read and write
clean
49EF000
unkown
page read and write
clean
2EA9000
unkown
page read and write
clean
4F9000
unkown
page read and write
clean
31DE000
unkown
page read and write
clean
34EE000
unkown
page read and write
clean
B2E000
unkown
page read and write
clean
35F0000
heap default
page read and write
clean
48BE000
unkown
page read and write
clean
1E7697B0000
heap private
page read and write
clean
538000
unkown
page read and write
clean
1FACD48E000
unkown
page read and write
clean
453C000
unkown
page read and write
clean
4E4E000
unkown
page read and write
clean
47F0000
heap private
page read and write
clean
840000
heap default
page read and write
clean
47AF000
unkown
page read and write
clean
1FACDA70000
unkown
page read and write
clean
463D000
unkown
page read and write
clean
29330BA0000
heap private
page read and write
clean
4B3E000
unkown
page read and write
clean
31EA000
unkown
page read and write
clean
750000
heap default
page read and write
clean
105F000
unkown
page read and write
clean
840000
unkown
page read and write
clean
533C000
unkown
page read and write
clean
543000
unkown
page read and write
clean
78F000
unkown
page read and write
clean
F30000
heap private
page read and write
clean
4C8E000
unkown
page read and write
clean
44FE000
unkown
page read and write
clean
1FACD508000
unkown
page read and write
clean
22CE67E000
unkown
page read and write
clean
50E000
unkown
page read and write
clean
506E000
unkown
page read and write
clean
2C0D000
unkown
page read and write
clean
1110000
unkown
page read and write
clean
23B467A5000
heap private
page read and write
clean
29330810000
heap default
page read and write
clean
35C000
unkown
page read and write
clean
639000
unkown
page read and write
clean
810000
heap default
page read and write
clean
23B464F0000
heap default
page read and write
clean
2F40000
heap default
page read and write
clean
EE4000
heap default
page read and write
clean
5D9000
unkown
page read and write
clean
257A46A0000
heap private
page read and write
clean
52FE000
unkown
page read and write
clean
2EF0000
heap private
page read and write
clean
8EC000
unkown
page read and write
clean
2D40000
unkown
page read and write
clean
487F000
unkown
page read and write
clean
31DA000
unkown
page read and write
clean
1E06BC00000
unkown
page read and write
clean
7C0000
unkown
page read and write
clean
4BC000
unkown
page read and write
clean
2DC0000
heap default
page read and write
clean
334E000
unkown
page read and write
clean
2EDC000
unkown
page read and write
clean
2D83000
unkown
page read and write
clean
48C000
unkown
page read and write
clean
6385EF7000
unkown
page read and write
clean
1330000
unkown
page read and write
clean
2C10000
heap private
page read and write
clean
2181CD01000
heap default
page read and write
clean
482C000
unkown
page read and write
clean
AAF000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
8C0000
heap private
page read and write
clean
6A5000
heap default
page read and write
clean
3647000
unkown
page read and write
clean
580000
heap default
page read and write
clean
2C11000
unkown
page read and write
clean
30FE000
unkown
page read and write
clean
19FF5BF0000
unkown
page read and write
clean
2CCF000
heap default
page read and write
clean
BFB000
unkown
page read and write
clean
3040000
heap default
page read and write
clean
10D0000
heap private
page read and write
clean
4EE0000
heap private
page read and write
clean
1ACDE3C8000
heap default
page read and write
clean
330E000
unkown
page read and write
clean
B72F67F000
unkown
page read and write
clean
B9E000
unkown
page read and write
clean
3030000
heap default
page read and write
clean
2181CF45000
heap private
page read and write
clean
343F000
unkown
page read and write
clean
1E06BC38000
heap default
page read and write
clean
2E998FF000
unkown
page read and write
clean
2D78000
heap default
page read and write
clean
6F0000
unkown
page read and write
clean
33B0000
heap private
page read and write
clean
3570000
heap private
page read and write
clean
1F104930000
unkown
page read and write
clean
53F000
unkown
page read and write
clean
3350000
unkown
page read and write
clean
1E769480000
heap default
page read and write
clean
4C4E000
unkown
page read and write
clean
19FF5C2A000
unkown
page read and write
clean
3CC000
unkown
page read and write
clean
B7E000
unkown
page read and write
clean
792000
unkown
page read and write
clean
48D0000
heap private
page read and write
clean
3200000
unkown
page read and write
clean
EAD22FE000
unkown
page read and write
clean
BA0000
unkown
page read and write
clean
668000
unkown
page read and write
clean
33FE000
unkown
page read and write
clean
63B000
unkown
page read and write
clean
2F97000
heap default
page read and write
clean
4DCE000
unkown
page read and write
clean
D0A000
heap default
page read and write
clean
1230000
heap default
page read and write
clean
4E4C000
unkown
page read and write
clean
7B5000
unkown
page read and write
clean
4A3E000
unkown
page read and write
clean
AA0000
unkown
page read and write
clean
560000
heap private
page read and write
clean
935000
heap default
page read and write
clean
650000
heap default
page read and write
clean
307E000
unkown
page read and write
clean
9BD36FE000
unkown
page read and write
clean
4E0F000
unkown
page read and write
clean
690000
unkown
page read and write
clean
545000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
795000
unkown
page read and write
clean
11AF000
unkown
page read and write
clean
4ABE000
unkown
page read and write
clean
DB0000
heap private
page read and write
clean
1FACD500000
unkown
page read and write
clean
4A7E000
unkown
page read and write
clean
1FACD43C000
unkown
page read and write
clean
ED0000
heap private
page read and write
clean
23B467A0000
heap private
page read and write
clean
33D5000
heap default
page read and write
clean
8B0000
unkown
page read and write
clean
53C000
unkown
page read and write
clean
655000
unkown
page read and write
clean
4DCF000
unkown
page read and write
clean
305D000
unkown
page read and write
clean
527E000
unkown
page read and write
clean
6385D7B000
unkown
page read and write
clean
79B000
unkown
page read and write
clean
32BE000
unkown
page read and write
clean
2FB9000
unkown
page read and write
clean
11D0000
heap default
page read and write
clean
9BD339E000
unkown
page read and write
clean
790000
heap private
page read and write
clean
B60000
heap default
page read and write
clean
A20000
heap default
page read and write
clean
545C000
unkown
page read and write
clean
33B0000
heap default
page read and write
clean
659000
unkown
page read and write
clean
2F50000
heap private
page read and write
clean
790000
heap default
page read and write
clean
363A000
heap default
page read and write
clean
9BC000
unkown
page read and write
clean
BBF000
unkown
page read and write
clean
9DE000
unkown
page read and write
clean
327E000
unkown
page read and write
clean
7FE000
unkown
page read and write
clean
22CE77E000
unkown
page read and write
clean
116F000
unkown
page read and write
clean
6385AFE000
unkown
page read and write
clean
2E997FE000
unkown
page read and write
clean
820000
heap default
page read and write
clean
AD0000
heap private
page read and write
clean
FA0000
unkown
page read and write
clean
22CE6FE000
unkown
page read and write
clean
33D0000
heap default
page read and write
clean
47EE000
unkown
page read and write
clean
2C1A000
unkown
page read and write
clean
860000
heap default
page read and write
clean
257A46A5000
heap private
page read and write
clean
50EF000
unkown
page read and write
clean
3010000
unkown
page read and write
clean
1E769650000
unkown
page read and write
clean
5E0000
unkown
page read and write
clean
110E000
unkown
page read and write
clean
834000
heap default
page read and write
clean
1250000
heap default
page read and write
clean
2C1D000
unkown
page read and write
clean
1ACDE4E0000
unkown
page read and write
clean
4E0E000
unkown
page read and write
clean
87C000
unkown
page read and write
clean
3C9000
unkown
page read and write
clean
50DC000
unkown
page read and write
clean
19FF5C3C000
unkown
page read and write
clean
19FF5BC0000
heap default
page read and write
clean
1ACDE3A0000
unkown
page read and write
clean
6CC000
unkown
page read and write
clean
1ACDE3C0000
heap default
page read and write
clean
4C00000
heap private
page read and write
clean
52BF000
unkown
page read and write
clean
A7E000
unkown
page read and write
clean
1F10483E000
heap default
page read and write
clean
535E000
unkown
page read and write
clean
3B0000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
4640000
heap private
page read and write
clean
4C90000
unkown
page read and write
clean
3090000
unkown
page read and write
clean
1FACD429000
unkown
page read and write
clean
491E000
unkown
page read and write
clean
92F000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
228000
unkown
page read and write
clean
477F000
unkown
page read and write
clean
50E0000
heap private
page read and write
clean
2E7F000
unkown
page read and write
clean
3560000
heap private
page read and write
clean
2F7C000
unkown
page read and write
clean
2E996FF000
unkown
page read and write
clean
796000
unkown
page read and write
clean
94E000
unkown
page read and write
clean
A09000
unkown
page read and write
clean
5DD000
unkown
page read and write
clean
2F30000
heap private
page read and write
clean
700000
unkown
page read and write
clean
2F7E000
unkown
page read and write
clean
E5F000
unkown
page read and write
clean
1F104830000
heap default
page read and write
clean
59E000
unkown
page read and write
clean
516C000
unkown
page read and write
clean
39A000
unkown
page read and write
clean
800000
heap private
page read and write
clean
1E06BC51000
heap default
page read and write
clean
1BE000
unkown
page read and write
clean
54E000
unkown
page read and write
clean
A6E000
unkown
page read and write
clean
1185000
unkown
page read and write
clean
F0F000
unkown
page read and write
clean
29330831000
heap default
page read and write
clean
6385FFF000
unkown
page read and write
clean
34D0000
heap default
page read and write
clean
38C000
unkown
page read and write
clean
257A4500000
heap default
page read and write
clean
2D89000
unkown
page read and write
clean
47FF000
unkown
page read and write
clean
3090000
heap default
page read and write
clean
3600000
heap private
page read and write
clean
31D0000
heap default
page read and write
clean
2E5C000
unkown
page read and write
clean
3620000
heap default
page read and write
clean
4C8F000
unkown
page read and write
clean
2D3D000
unkown
page read and write
clean
ABE000
unkown
page read and write
clean
6A0000
heap default
page read and write
clean
47DE000
unkown
page read and write
clean
3061000
unkown
page read and write
clean
ECA000
heap default
page read and write
clean
B3F000
unkown
page read and write
clean
123A000
heap default
page read and write
clean
46EE000
unkown
page read and write
clean
19FF5C3F000
unkown
page read and write
clean
476E000
unkown
page read and write
clean
783000
unkown
page read and write
clean
570000
heap default
page read and write
clean
541E000
unkown
page read and write
clean
50A0000
unkown
page read and write
clean
2E9997E000
unkown
page read and write
clean
A8F000
unkown
page read and write
clean
505F000
unkown
page read and write
clean
39E000
unkown
page read and write
clean
33F0000
heap private
page read and write
clean
79424FE000
unkown
page read and write
clean
323E000
unkown
page read and write
clean
257A4660000
heap private
page read and write
clean
1E06D4F0000
unkown
page read and write
clean
49D000
unkown
page read and write
clean
49BE000
unkown
page read and write
clean
51F0000
heap private
page read and write
clean
1ACDE5E5000
heap private
page read and write
clean
CEA000
heap default
page read and write
clean
D5EAFBE000
unkown
page read and write
clean
624000
heap default
page read and write
clean
C51000
unkown
page read and write
clean
700000
heap private
page read and write
clean
290000
unkown
page read and write
clean
317E000
unkown
page read and write
clean
2F10000
unkown
page read and write
clean
4A6C000
unkown
page read and write
clean
630000
unkown
page read and write
clean
D04000
heap default
page read and write
clean
473E000
unkown
page read and write
clean
B8F000
unkown
page read and write
clean
529D000
unkown
page read and write
clean
A1E000
unkown
page read and write
clean
1FACD502000
unkown
page read and write
clean
19FF5C02000
unkown
page read and write
clean
2FDF000
unkown
page read and write
clean
257A4508000
heap default
page read and write
clean
3035000
heap default
page read and write
clean
CDF000
unkown
page read and write
clean
870000
unkown
page read and write
clean
4E0000
unkown
page read and write
clean
2D86000
unkown
page read and write
clean
2FDE000
unkown
page read and write
clean
1184000
unkown
page read and write
clean
2D28000
unkown
page read and write
clean
49AE000
unkown
page read and write
clean
4AF0000
heap private
page read and write
clean
1E06BEC0000
heap private
page read and write
clean
850000
heap default
page read and write
clean
930000
heap default
page read and write
clean
2C80000
heap default
page read and write
clean
B6E000
unkown
page read and write
clean
D5EB27E000
unkown
page read and write
clean
BAF000
unkown
page read and write
clean
F10000
unkown
page read and write
clean
4A2D000
unkown
page read and write
clean
E3C000
unkown
page read and write
clean
B72F32B000
unkown
page read and write
clean
3005000
unkown
page read and write
clean
2F1D000
unkown
page read and write
clean
62A000
heap default
page read and write
clean
6385A7C000
unkown
page read and write
clean
CDE000
unkown
page read and write
clean
A5E000
unkown
page read and write
clean
4B3000
unkown
page read and write
clean
3330000
heap private
page read and write
clean
325E000
unkown
page read and write
clean
590000
heap default
page read and write
clean
32A0000
unkown
page read and write
clean
293307A0000
unkown
page read and write
clean
620000
heap default
page read and write
clean
2D35000
unkown
page read and write
clean
2E3E000
unkown
page read and write
clean
4D8E000
unkown
page read and write
clean
1060000
heap private
page read and write
clean
296000
unkown
page read and write
clean
4920000
heap private
page read and write
clean
32C0000
heap default
page read and write
clean
1FACD47D000
unkown
page read and write
clean
11D0000
heap private
page read and write
clean
548000
unkown
page read and write
clean
A90000
unkown
page read and write
clean
644000
heap default
page read and write
clean
68F000
unkown
page read and write
clean
23B47FB0000
heap private
page read and write
clean
58B000
unkown
page read and write
clean
30BF000
unkown
page read and write
clean
77E000
unkown
page read and write
clean
512E000
unkown
page read and write
clean
740000
heap default
page read and write
clean
3440000
heap private
page read and write
clean
4EDD000
unkown
page read and write
clean
48FF000
unkown
page read and write
clean
2CD1000
unkown
page read and write
clean
1FF000
unkown
page read and write
clean
2181CF10000
unkown
page read and write
clean
2E995FE000
unkown
page read and write
clean
1FACD48A000
unkown
page read and write
clean
2181CCE8000
heap default
page read and write
clean
2E6C000
unkown
page read and write
clean
A9E000
unkown
page read and write
clean
6385B7E000
unkown
page read and write
clean
5F0000
unkown
page read and write
clean
D00000
heap default
page read and write
clean
487C000
unkown
page read and write
clean
2C88000
heap default
page read and write
clean
472F000
unkown
page read and write
clean
459F000
unkown
page read and write
clean
2E90000
unkown
page read and write
clean
474C000
unkown
page read and write
clean
2BE0000
unkown
page read and write
clean
E95000
unkown
page read and write
clean
BBE000
unkown
page read and write
clean
3077000
heap default
page read and write
clean
There are 711 hidden memdumps, click here to show them.